![]() |
|
Plagegeister aller Art und deren Bekämpfung: Polizei Österreich Virus - Paysafe ... PC läuft noch ganz normal? was tun?Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
![]() |
|
![]() | #1 |
| ![]() Polizei Österreich Virus - Paysafe ... PC läuft noch ganz normal? was tun? Hi, vielen Dank für die schnelle Antwort ![]() Also hier die Logs FRST.txt FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 04-01-2014 Ran by Philip (administrator) on PHILIP-PC on 04-01-2014 14:26:25 Running from C:\Users\Philip\Desktop Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard Internet Explorer Version 11 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2013\vsserv.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Elements 9 Organizer\PhotoshopElementsFileAgent.exe (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\dsiwmis.exe (Acer Incorporated) C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerSvc.exe (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LMworker.exe (Acer Incorporated) C:\Program Files (x86)\Packard Bell\Registration\GREGsvc.exe (Acer Incorporated) C:\Program Files\Packard Bell\Packard Bell Updater\UpdaterService.exe (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LMutilps32.exe (Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2013\updatesrv.exe (Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe (Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe (Intel Corporation) C:\Windows\System32\igfxtray.exe (Intel Corporation) C:\Windows\System32\igfxsrvc.exe (Intel Corporation) C:\Windows\System32\hkcmd.exe (Intel Corporation) C:\Windows\System32\igfxpers.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Acer Incorporated) C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerTray.exe (Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2013\bdagent.exe (Microsoft Corporation) C:\Windows\System32\StikyNot.exe (Spotify Ltd) C:\Users\Philip\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe (Dropbox, Inc.) C:\Users\Philip\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LManager.exe (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (Geek Software GmbH) C:\Program Files (x86)\PDF24\pdf24.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\MMDx64Fx.exe (Intel Corporation) C:\Windows\System32\igfxext.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe (Acer Incorporated) C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerEvent.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2013\seccenter.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2013\odscanui.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Microsoft Corporation) C:\Windows\System32\taskmgr.exe (OldTimer Tools) C:\Users\Philip\Desktop\OTL.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [IntelTBRunOnce] - C:\Program Files\Intel\TurboBoost\RunTBGadgetOnce.vbs [4526 2010-11-29] () HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2280232 2010-07-29] (Synaptics Incorporated) HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11786344 2011-03-28] (Realtek Semiconductor) HKLM\...\Run: [AdobeAAMUpdater-1.0] - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\updaterstartuputility.exe [444904 2012-09-20] (Adobe Systems Incorporated) HKLM\...\Run: [Power Management] - C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerTray.exe [1831016 2011-08-02] (Acer Incorporated) HKLM\...\Run: [Bdagent] - C:\Program Files\Bitdefender\Bitdefender 2013\bdagent.exe [1575192 2013-10-29] (Bitdefender) HKLM-x32\...\Run: [LManager] - C:\Program Files (x86)\Launch Manager\LManager.exe [1103440 2011-07-01] (Dritek System Inc.) HKLM-x32\...\Run: [BCSSync] - C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [89184 2012-11-05] (Microsoft Corporation) HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation) HKLM-x32\...\Run: [PDFPrint] - C:\Program Files (x86)\PDF24\pdf24.exe [185896 2013-10-28] (Geek Software GmbH) Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation) HKCU\...\Run: [RESTART_STICKY_NOTES] - C:\Windows\System32\StikyNot.exe [427520 2009-07-14] (Microsoft Corporation) HKCU\...\Run: [Spotify Web Helper] - C:\Users\Philip\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1168896 2013-12-18] (Spotify Ltd) HKU\Default\...\RunOnce: [ScrSav] - C:\Program Files (x86)\Packard Bell\Screensaver\run_Packard Bell.exe [162408 2011-09-13] () HKU\Default User\...\RunOnce: [ScrSav] - C:\Program Files (x86)\Packard Bell\Screensaver\run_Packard Bell.exe [162408 2011-09-13] () AppInit_DLLs: C:\Windows\System32\nvinitx.dll [241984 2011-11-26] (NVIDIA Corporation) AppInit_DLLs-x32: C:\Windows\SysWOW64\nvinit.dll [203072 2011-11-26] (NVIDIA Corporation) Startup: C:\Users\Philip\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk ShortcutTarget: Dropbox.lnk -> C:\Users\Philip\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.) ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank SearchScopes: HKCU - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = hxxp://www2.delta-search.com/?q={searchTerms}&babsrc=SP_ss&mntrId=609BEC55F9BE44D4&affID=119357&tsp=4993 SearchScopes: HKCU - {E403D021-F875-4968-A3E7-58FCF37C20CF} URL = hxxp://search.softonic.com/MOY00358/tb_v1?q={searchTerms}&SearchSource=4&cc=&mi=609b1d63000000000000ec55f9be44d4&r=187 BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation) BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) BHO-x32: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated) BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation) BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) Toolbar: HKCU - No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No File Toolbar: HKCU - No Name - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - No File Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies) Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 FireFox: ======== FF ProfilePath: C:\Users\Philip\AppData\Roaming\Mozilla\Firefox\Profiles\1skd4lew.default FF user.js: detected! => C:\Users\Philip\AppData\Roaming\Mozilla\Firefox\Profiles\1skd4lew.default\user.js FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll () FF Plugin: @java.com/DTPlugin,version=10.25.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin: @microsoft.com/GENUINE - disabled No File FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation) FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF Plugin: @videolan.org/vlc,version=2.0.7 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin: @videolan.org/vlc,version=2.0.8 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin: adobe.com/AdobeAAMDetect - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll (Adobe Systems) FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll () FF Plugin-x32: @java.com/DTPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @microsoft.com/GENUINE - disabled No File FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~4\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~4\Office14\NPSPWRAP.DLL (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 - C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll () FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin-x32: adobe.com/AdobeAAMDetect - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll (Adobe Systems) FF SearchPlugin: C:\Users\Philip\AppData\Roaming\Mozilla\Firefox\Profiles\1skd4lew.default\searchplugins\softonic.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml FF Extension: GFACE Experience Plugin - C:\Users\Philip\AppData\Roaming\Mozilla\Firefox\Profiles\1skd4lew.default\Extensions\cryenginebrowserplugin@crytek.com FF HKLM\...\Thunderbird\Extensions: [bdThunderbird@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender 2013\bdtbext FF Extension: bdToolbar - C:\Program Files\Bitdefender\Bitdefender 2013\bdtbext FF HKLM-x32\...\Thunderbird\Extensions: [bdThunderbird@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender 2013\bdtbext FF Extension: bdToolbar - C:\Program Files\Bitdefender\Bitdefender 2013\bdtbext Chrome: ======= CHR HomePage: hxxp://search.softonic.com/MOY00358/tb_v1?SearchSource=48&cc=&mi=609b1d63000000000000ec55f9be44d4 CHR RestoreOnStartup: "hxxp://google.de/" CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\PepperFlash\pepflashplayer.dll () CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\ppGoogleNaClPluginChrome.dll () CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\pdf.dll () CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll No File CHR Plugin: (Windows Live Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) CHR Plugin: (Silverlight Plug-In) - c:\Program Files (x86)\Microsoft Silverlight\4.0.50401.0\npctrl.dll No File CHR Extension: (Google Docs) - C:\Users\Philip\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0 CHR Extension: (Google Drive) - C:\Users\Philip\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0 CHR Extension: (YouTube) - C:\Users\Philip\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0 CHR Extension: (Google Search) - C:\Users\Philip\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0 CHR Extension: (GFACE Experience Plugin) - C:\Users\Philip\AppData\Local\Google\Chrome\User Data\Default\Extensions\ejdlfmdbdibkbfdpjocdaolcheehmpol\0.39.0_0 CHR Extension: (AdBlock) - C:\Users\Philip\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.6.16_0 CHR Extension: (Google Wallet) - C:\Users\Philip\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_0 CHR Extension: (Battlefield Play4Free) - C:\Users\Philip\AppData\Local\Google\Chrome\User Data\Default\Extensions\oiokahphinmbmakkehgelkmpolmnbkdh\1.0.96.0_0 CHR Extension: (Gmail) - C:\Users\Philip\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1 ==================== Services (Whitelisted) ================= S4 BdDesktopParental; C:\Program Files\Bitdefender\Bitdefender 2013\bdparentalservice.exe [69392 2013-10-29] (Bitdefender) R2 ePowerSvc; C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerSvc.exe [872552 2011-08-02] (Acer Incorporated) S3 GamesAppIntegrationService; C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe [240736 2013-10-07] (WildTangent) R2 GREGService; C:\Program Files (x86)\Packard Bell\Registration\GREGsvc.exe [36456 2011-05-30] (Acer Incorporated) R2 Live Updater Service; C:\Program Files\Packard Bell\Packard Bell Updater\UpdaterService.exe [244624 2011-04-22] (Acer Incorporated) R2 UPDATESRV; C:\Program Files\Bitdefender\Bitdefender 2013\updatesrv.exe [67320 2013-10-29] (Bitdefender) R2 VSSERV; C:\Program Files\Bitdefender\Bitdefender 2013\vsserv.exe [1645256 2013-10-29] (Bitdefender) ==================== Drivers (Whitelisted) ==================== R0 avc3; C:\Windows\System32\DRIVERS\avc3.sys [727592 2013-10-29] (BitDefender) R3 avchv; C:\Windows\System32\DRIVERS\avchv.sys [261056 2012-11-02] (BitDefender) R3 avckf; C:\Windows\System32\DRIVERS\avckf.sys [601360 2013-10-29] (BitDefender) R1 BdfNdisf; c:\program files\common files\bitdefender\bitdefender firewall\bdfndisf6.sys [93600 2013-02-22] (BitDefender LLC) R1 bdfwfpf; C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf.sys [103504 2011-11-14] (BitDefender LLC) S3 BDSandBox; C:\Windows\system32\drivers\bdsandbox.sys [82824 2013-10-29] (BitDefender SRL) R0 gzflt; C:\Windows\System32\DRIVERS\gzflt.sys [150256 2013-10-29] (BitDefender LLC) R0 trufos; C:\Windows\System32\DRIVERS\trufos.sys [389240 2013-10-29] (BitDefender S.R.L.) ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-01-04 14:26 - 2014-01-04 14:26 - 00017694 _____ C:\Users\Philip\Desktop\FRST.txt 2014-01-04 14:26 - 2014-01-04 14:26 - 00000000 ____D C:\FRST 2014-01-04 14:25 - 2014-01-04 14:25 - 01931368 _____ (Farbar) C:\Users\Philip\Downloads\FRST64.exe 2014-01-04 14:25 - 2014-01-04 14:25 - 01931368 _____ (Farbar) C:\Users\Philip\Desktop\FRST64.exe 2014-01-04 05:56 - 2014-01-04 05:56 - 00106566 _____ C:\Users\Philip\Desktop\Extras.Txt 2014-01-04 05:53 - 2014-01-04 05:53 - 00131556 _____ C:\Users\Philip\Desktop\OTL.Txt 2014-01-04 05:20 - 2014-01-04 05:20 - 00602112 _____ (OldTimer Tools) C:\Users\Philip\Desktop\OTL.exe 2014-01-04 05:01 - 2014-01-04 05:01 - 00728960 _____ (Enigma Software Group USA, LLC.) C:\Users\Philip\Downloads\SpyHunter-Installer.exe 2014-01-02 11:17 - 2014-01-03 18:46 - 587080368 _____ C:\Users\Philip\Downloads\German Top 100 Single Charts 21.10.2013 320kbps.rar.part 2013-12-31 19:13 - 2013-12-31 19:15 - 00000000 ____D C:\Users\Philip\Desktop\lioba 2013-12-31 12:27 - 2013-12-31 12:27 - 00101135 _____ C:\Users\Philip\Downloads\LNCS-Office2007.zip 2013-12-31 12:18 - 2013-12-31 12:18 - 00010718 _____ C:\Users\Philip\Documents\1388439157_1_02.xml 2013-12-30 13:14 - 2013-12-30 13:14 - 00074118 _____ C:\Users\Philip\Downloads\1 Vorlesung 18. November (3).pptx 2013-12-21 13:47 - 2013-12-21 13:50 - 649989964 _____ C:\Users\Philip\Downloads\2013 10 22.wav 2013-12-21 11:31 - 2013-12-21 11:31 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox 2013-12-19 00:03 - 2013-12-19 00:47 - 3159382545 ____N C:\Users\Philip\Documents\MVI_4399.MOV 2013-12-18 23:59 - 2013-12-19 00:34 - 4280840589 ____N C:\Users\Philip\Documents\MVI_4398.MOV 2013-12-18 23:56 - 2013-12-19 00:03 - 4279933649 ____N C:\Users\Philip\Documents\MVI_4397.MOV 2013-12-18 23:53 - 2013-12-18 23:51 - 4281855525 ____N C:\Users\Philip\Documents\MVI_4396.MOV 2013-12-18 22:31 - 2013-12-18 22:53 - 4279925701 ____N C:\Users\Philip\Documents\MVI_4393.MOV 2013-12-18 22:28 - 2013-12-18 22:40 - 4282851153 ____N C:\Users\Philip\Documents\MVI_4392.MOV 2013-12-18 22:26 - 2013-12-18 22:25 - 1842329861 ____N C:\Users\Philip\Documents\MVI_4391.MOV 2013-12-18 22:26 - 2013-12-18 22:20 - 83543189 ____N C:\Users\Philip\Documents\MVI_4390.MOV 2013-12-18 22:26 - 2013-12-18 21:42 - 27092221 ____N C:\Users\Philip\Documents\IMG_4389.CR2 2013-12-18 22:25 - 2013-12-18 23:15 - 1197040805 ____N C:\Users\Philip\Documents\MVI_4395.MOV 2013-12-18 22:22 - 2013-12-18 23:07 - 4278960249 ____N C:\Users\Philip\Documents\MVI_4394.MOV 2013-12-18 19:27 - 2013-12-18 19:28 - 92645728 _____ (CANON INC.) C:\Users\Philip\Downloads\euw21340.exe 2013-12-18 17:17 - 2013-12-18 18:17 - 30288809 ____N C:\Users\Philip\Documents\MVI_4387.MOV 2013-12-16 17:09 - 2013-12-16 17:09 - 00247377 _____ C:\Users\Philip\Downloads\5. Vorlesung, 16. Dezember.pptx 2013-12-15 14:13 - 2013-12-15 14:13 - 00033280 _____ C:\Users\Philip\Downloads\Kopie von SKAM_Aufgabe3.xls 2013-12-14 00:56 - 2013-12-14 00:56 - 00018179 _____ C:\Users\Philip\Downloads\eingrenzen.xlsx 2013-12-12 03:04 - 2013-05-10 06:56 - 14631424 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll 2013-12-12 03:04 - 2013-05-10 06:56 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL 2013-12-12 03:04 - 2013-05-10 05:56 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL 2013-12-12 03:04 - 2013-05-10 05:56 - 11410432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll 2013-12-12 03:02 - 2013-11-26 12:54 - 23183360 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2013-12-12 03:02 - 2013-11-26 11:19 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2013-12-12 03:02 - 2013-11-26 11:18 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2013-12-12 03:02 - 2013-11-26 11:11 - 17112576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2013-12-12 03:02 - 2013-11-26 10:48 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2013-12-12 03:02 - 2013-11-26 10:46 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2013-12-12 03:02 - 2013-11-26 10:41 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2013-12-12 03:02 - 2013-11-26 10:29 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2013-12-12 03:02 - 2013-11-26 10:27 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2013-12-12 03:02 - 2013-11-26 10:23 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2013-12-12 03:02 - 2013-11-26 10:21 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2013-12-12 03:02 - 2013-11-26 10:18 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2013-12-12 03:02 - 2013-11-26 10:18 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2013-12-12 03:02 - 2013-11-26 10:16 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2013-12-12 03:02 - 2013-11-26 09:57 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2013-12-12 03:02 - 2013-11-26 09:38 - 02166784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2013-12-12 03:02 - 2013-11-26 09:38 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2013-12-12 03:02 - 2013-11-26 09:35 - 05769216 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2013-12-12 03:02 - 2013-11-26 09:32 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2013-12-12 03:02 - 2013-11-26 09:28 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2013-12-12 03:02 - 2013-11-26 09:16 - 04243968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2013-12-12 03:02 - 2013-11-26 09:02 - 01995264 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2013-12-12 03:02 - 2013-11-26 08:48 - 12996608 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2013-12-12 03:02 - 2013-11-26 08:32 - 01928192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2013-12-12 03:02 - 2013-11-26 08:26 - 11221504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2013-12-12 03:02 - 2013-11-26 08:07 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2013-12-12 03:02 - 2013-11-26 07:40 - 01395200 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2013-12-12 03:02 - 2013-11-26 07:34 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2013-12-12 03:02 - 2013-11-26 07:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2013-12-12 03:02 - 2013-11-26 07:33 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2013-12-12 03:02 - 2013-11-26 07:27 - 01157632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2013-12-11 20:34 - 2013-11-23 19:26 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll 2013-12-11 20:34 - 2013-11-23 18:47 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll 2013-12-11 20:34 - 2013-11-12 03:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll 2013-12-11 20:34 - 2013-11-12 03:07 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll 2013-12-11 20:34 - 2013-10-30 03:32 - 00335360 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll 2013-12-11 20:34 - 2013-10-30 03:19 - 00301568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msieftp.dll 2013-12-11 20:34 - 2013-10-30 02:24 - 03155968 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2013-12-11 20:34 - 2013-10-19 03:18 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll 2013-12-11 20:34 - 2013-10-19 02:36 - 00159232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll 2013-12-11 20:34 - 2013-10-12 03:32 - 00150016 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx 2013-12-11 20:34 - 2013-10-12 03:31 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll 2013-12-11 20:34 - 2013-10-12 03:04 - 00121856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshom.ocx 2013-12-11 20:34 - 2013-10-12 03:03 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scrrun.dll 2013-12-11 20:34 - 2013-10-12 02:33 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe 2013-12-11 20:34 - 2013-10-12 02:33 - 00156160 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe 2013-12-11 20:34 - 2013-10-12 02:15 - 00141824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscript.exe 2013-12-11 20:34 - 2013-10-12 02:15 - 00126976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cscript.exe 2013-12-11 20:34 - 2013-10-04 03:16 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys 2013-12-11 20:34 - 2013-10-04 02:36 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys 2013-12-10 22:51 - 2013-12-10 22:51 - 09293192 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe 2013-12-09 18:32 - 2013-12-09 18:32 - 00254115 _____ C:\Users\Philip\Downloads\4. Vorlesung 9. Dezember (1).pptx 2013-12-09 18:23 - 2013-12-09 18:23 - 00074118 _____ C:\Users\Philip\Downloads\1 Vorlesung 18. November (2).pptx 2013-12-09 18:12 - 2013-12-09 18:12 - 00265639 _____ C:\Users\Philip\Downloads\3. Vorlesung 5. Dezember.pptx 2013-12-09 18:10 - 2013-12-09 18:10 - 00254115 _____ C:\Users\Philip\Downloads\4. Vorlesung 9. Dezember.pptx 2013-12-09 14:09 - 2014-01-03 15:54 - 00000000 ____D C:\Users\Philip\Desktop\Neuer Ordner (8) 2013-12-06 03:58 - 2013-10-14 18:00 - 00028368 _____ (Microsoft Corporation) C:\Windows\system32\IEUDINIT.EXE 2013-12-06 03:53 - 2013-12-06 03:53 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2013-12-06 03:53 - 2013-12-06 03:53 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2013-12-06 03:53 - 2013-12-06 03:53 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll 2013-12-06 03:53 - 2013-12-06 03:53 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2013-12-06 03:53 - 2013-12-06 03:53 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2013-12-06 03:53 - 2013-12-06 03:53 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll 2013-12-06 03:53 - 2013-12-06 03:53 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2013-12-06 03:53 - 2013-12-06 03:53 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat 2013-12-06 03:53 - 2013-12-06 03:53 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat 2013-12-06 03:53 - 2013-12-06 03:53 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2013-12-06 03:53 - 2013-12-06 03:53 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2013-12-06 03:53 - 2013-12-06 03:53 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2013-12-06 03:53 - 2013-12-06 03:53 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2013-12-06 03:53 - 2013-12-06 03:53 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2013-12-06 03:53 - 2013-12-06 03:53 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2013-12-06 03:53 - 2013-12-06 03:53 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2013-12-06 03:53 - 2013-12-06 03:53 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec 2013-12-06 03:53 - 2013-12-06 03:53 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2013-12-06 03:53 - 2013-12-06 03:53 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2013-12-06 03:53 - 2013-12-06 03:53 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll 2013-12-06 03:53 - 2013-12-06 03:53 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2013-12-06 03:53 - 2013-12-06 03:53 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll 2013-12-06 03:53 - 2013-12-06 03:53 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2013-12-06 03:53 - 2013-12-06 03:53 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll 2013-12-06 03:53 - 2013-12-06 03:53 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll 2013-12-06 03:53 - 2013-12-06 03:53 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll 2013-12-06 03:53 - 2013-12-06 03:53 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll 2013-12-06 03:53 - 2013-12-06 03:53 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2013-12-06 03:53 - 2013-12-06 03:53 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll 2013-12-06 03:53 - 2013-12-06 03:53 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll 2013-12-06 03:53 - 2013-12-06 03:53 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe 2013-12-06 03:53 - 2013-12-06 03:53 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2013-12-06 03:53 - 2013-12-06 03:53 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe 2013-12-06 03:53 - 2013-12-06 03:53 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll 2013-12-06 03:53 - 2013-12-06 03:53 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe 2013-12-06 03:53 - 2013-12-06 03:53 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe 2013-12-06 03:53 - 2013-12-06 03:53 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll 2013-12-06 03:53 - 2013-12-06 03:53 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll 2013-12-06 03:53 - 2013-12-06 03:53 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll 2013-12-06 03:53 - 2013-12-06 03:53 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll 2013-12-06 03:53 - 2013-12-06 03:53 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2013-12-06 03:53 - 2013-12-06 03:53 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll 2013-12-06 03:53 - 2013-12-06 03:53 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2013-12-06 03:53 - 2013-12-06 03:53 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll 2013-12-06 03:53 - 2013-12-06 03:53 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe 2013-12-06 03:53 - 2013-12-06 03:53 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2013-12-06 03:53 - 2013-12-06 03:53 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe 2013-12-06 03:53 - 2013-12-06 03:53 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2013-12-06 03:53 - 2013-12-06 03:53 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2013-12-06 03:53 - 2013-12-06 03:53 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll 2013-12-06 03:53 - 2013-12-06 03:53 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll 2013-12-06 03:53 - 2013-12-06 03:53 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx 2013-12-06 03:53 - 2013-12-06 03:53 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe 2013-12-06 03:53 - 2013-12-06 03:53 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe 2013-12-06 03:53 - 2013-12-06 03:53 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2013-12-06 03:53 - 2013-12-06 03:53 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll 2013-12-06 03:53 - 2013-12-06 03:53 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx 2013-12-06 03:53 - 2013-12-06 03:53 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll 2013-12-06 03:53 - 2013-12-06 03:53 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll 2013-12-06 03:53 - 2013-12-06 03:53 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2013-12-06 03:53 - 2013-12-06 03:53 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll 2013-12-06 03:53 - 2013-12-06 03:53 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll 2013-12-06 03:53 - 2013-12-06 03:53 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2013-12-06 03:53 - 2013-12-06 03:53 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll 2013-12-06 03:53 - 2013-12-06 03:53 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll 2013-12-06 03:53 - 2013-12-06 03:53 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll 2013-12-06 03:53 - 2013-12-06 03:53 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll 2013-12-06 03:53 - 2013-12-06 03:53 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2013-12-06 03:53 - 2013-12-06 03:53 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll 2013-12-06 03:53 - 2013-12-06 03:53 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2013-12-06 03:53 - 2013-12-06 03:53 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2013-12-06 03:53 - 2013-12-06 03:53 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll 2013-12-06 03:53 - 2013-12-06 03:53 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll 2013-12-06 03:53 - 2013-12-06 03:53 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe 2013-12-06 03:53 - 2013-12-06 03:53 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe 2013-12-06 03:53 - 2013-12-06 03:53 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe 2013-12-06 03:53 - 2013-12-06 03:53 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe 2013-12-06 03:51 - 2013-12-06 03:58 - 00009768 _____ C:\Windows\IE11_main.log 2013-12-05 14:03 - 2013-12-05 14:03 - 00257216 _____ C:\Users\Philip\Downloads\2. Vorlesung, 2. Dezember (3).pptx 2013-12-05 14:02 - 2013-12-05 14:02 - 00257216 _____ C:\Users\Philip\Downloads\2. Vorlesung, 2. Dezember (2).pptx ==================== One Month Modified Files and Folders ======= 2014-01-04 14:26 - 2014-01-04 14:26 - 00017694 _____ C:\Users\Philip\Desktop\FRST.txt 2014-01-04 14:26 - 2014-01-04 14:26 - 00000000 ____D C:\FRST 2014-01-04 14:26 - 2013-09-02 20:40 - 01782547 _____ C:\Windows\WindowsUpdate.log 2014-01-04 14:25 - 2014-01-04 14:25 - 01931368 _____ (Farbar) C:\Users\Philip\Downloads\FRST64.exe 2014-01-04 14:25 - 2014-01-04 14:25 - 01931368 _____ (Farbar) C:\Users\Philip\Desktop\FRST64.exe 2014-01-04 14:25 - 2013-09-13 14:29 - 00000000 ____D C:\Users\Philip\Desktop\Neuer Ordner (2) 2014-01-04 14:07 - 2013-09-02 22:00 - 00001110 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2014-01-04 14:05 - 2009-07-14 05:45 - 00016976 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-01-04 14:05 - 2009-07-14 05:45 - 00016976 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-01-04 14:00 - 2013-09-02 22:00 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2014-01-04 13:55 - 2013-09-03 14:18 - 00000000 ____D C:\Users\Philip\AppData\Roaming\Dropbox 2014-01-04 13:51 - 2013-10-29 13:37 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job 2014-01-04 05:56 - 2014-01-04 05:56 - 00106566 _____ C:\Users\Philip\Desktop\Extras.Txt 2014-01-04 05:53 - 2014-01-04 05:53 - 00131556 _____ C:\Users\Philip\Desktop\OTL.Txt 2014-01-04 05:20 - 2014-01-04 05:20 - 00602112 _____ (OldTimer Tools) C:\Users\Philip\Desktop\OTL.exe 2014-01-04 05:04 - 2013-09-03 06:32 - 00654166 _____ C:\Windows\system32\perfh007.dat 2014-01-04 05:04 - 2013-09-03 06:32 - 00130006 _____ C:\Windows\system32\perfc007.dat 2014-01-04 05:04 - 2009-07-14 06:13 - 01498506 _____ C:\Windows\system32\PerfStringBackup.INI 2014-01-04 05:01 - 2014-01-04 05:01 - 00728960 _____ (Enigma Software Group USA, LLC.) C:\Users\Philip\Downloads\SpyHunter-Installer.exe 2014-01-04 05:00 - 2013-09-03 14:19 - 00000000 ___RD C:\Users\Philip\Dropbox 2014-01-04 04:59 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2014-01-04 04:58 - 2009-07-14 05:51 - 00086234 _____ C:\Windows\setupact.log 2014-01-04 02:29 - 2013-09-02 21:57 - 00000000 ____D C:\Users\Philip\AppData\Local\Adobe 2014-01-03 18:46 - 2014-01-02 11:17 - 587080368 _____ C:\Users\Philip\Downloads\German Top 100 Single Charts 21.10.2013 320kbps.rar.part 2014-01-03 15:54 - 2013-12-09 14:09 - 00000000 ____D C:\Users\Philip\Desktop\Neuer Ordner (8) 2014-01-03 03:25 - 2013-09-03 00:17 - 00000000 ____D C:\Users\Philip\AppData\Roaming\vlc 2014-01-01 17:09 - 2013-09-29 13:01 - 00000000 ____D C:\Users\Philip\Desktop\fh 2014-01-01 14:44 - 2013-10-24 12:50 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2014-01-01 04:58 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\NDF 2013-12-31 19:15 - 2013-12-31 19:13 - 00000000 ____D C:\Users\Philip\Desktop\lioba 2013-12-31 12:27 - 2013-12-31 12:27 - 00101135 _____ C:\Users\Philip\Downloads\LNCS-Office2007.zip 2013-12-31 12:18 - 2013-12-31 12:18 - 00010718 _____ C:\Users\Philip\Documents\1388439157_1_02.xml 2013-12-30 13:14 - 2013-12-30 13:14 - 00074118 _____ C:\Users\Philip\Downloads\1 Vorlesung 18. November (3).pptx 2013-12-21 13:50 - 2013-12-21 13:47 - 649989964 _____ C:\Users\Philip\Downloads\2013 10 22.wav 2013-12-21 11:31 - 2013-12-21 11:31 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox 2013-12-21 05:49 - 2009-07-14 06:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD 2013-12-20 11:07 - 2013-11-19 18:27 - 00000000 ____D C:\Users\Philip\Desktop\Neuer Ordner 2013-12-19 00:47 - 2013-12-19 00:03 - 3159382545 ____N C:\Users\Philip\Documents\MVI_4399.MOV 2013-12-19 00:34 - 2013-12-18 23:59 - 4280840589 ____N C:\Users\Philip\Documents\MVI_4398.MOV 2013-12-19 00:03 - 2013-12-18 23:56 - 4279933649 ____N C:\Users\Philip\Documents\MVI_4397.MOV 2013-12-18 23:51 - 2013-12-18 23:53 - 4281855525 ____N C:\Users\Philip\Documents\MVI_4396.MOV 2013-12-18 23:15 - 2013-12-18 22:25 - 1197040805 ____N C:\Users\Philip\Documents\MVI_4395.MOV 2013-12-18 23:07 - 2013-12-18 22:22 - 4278960249 ____N C:\Users\Philip\Documents\MVI_4394.MOV 2013-12-18 22:53 - 2013-12-18 22:31 - 4279925701 ____N C:\Users\Philip\Documents\MVI_4393.MOV 2013-12-18 22:40 - 2013-12-18 22:28 - 4282851153 ____N C:\Users\Philip\Documents\MVI_4392.MOV 2013-12-18 22:25 - 2013-12-18 22:26 - 1842329861 ____N C:\Users\Philip\Documents\MVI_4391.MOV 2013-12-18 22:20 - 2013-12-18 22:26 - 83543189 ____N C:\Users\Philip\Documents\MVI_4390.MOV 2013-12-18 21:42 - 2013-12-18 22:26 - 27092221 ____N C:\Users\Philip\Documents\IMG_4389.CR2 2013-12-18 19:28 - 2013-12-18 19:27 - 92645728 _____ (CANON INC.) C:\Users\Philip\Downloads\euw21340.exe 2013-12-18 19:27 - 2013-10-13 15:25 - 00000000 ____D C:\Users\Philip\AppData\Roaming\Spotify 2013-12-18 18:17 - 2013-12-18 17:17 - 30288809 ____N C:\Users\Philip\Documents\MVI_4387.MOV 2013-12-18 16:51 - 2013-10-13 15:26 - 00000000 ____D C:\Users\Philip\AppData\Local\Spotify 2013-12-16 17:09 - 2013-12-16 17:09 - 00247377 _____ C:\Users\Philip\Downloads\5. Vorlesung, 16. Dezember.pptx 2013-12-16 03:05 - 2013-10-17 08:12 - 00000000 ____D C:\Windows\system32\MRT 2013-12-16 03:01 - 2013-10-17 08:12 - 90708896 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2013-12-15 14:13 - 2013-12-15 14:13 - 00033280 _____ C:\Users\Philip\Downloads\Kopie von SKAM_Aufgabe3.xls 2013-12-14 13:37 - 2012-11-26 20:21 - 00000000 ____D C:\Users\Philip\Desktop\seppi 2013-12-14 13:35 - 2013-11-26 21:20 - 00000000 ____D C:\Users\Philip\Desktop\Notbremse 2013-12-14 02:42 - 2013-09-08 11:48 - 00000000 ____D C:\Users\Philip\AppData\Roaming\Skype 2013-12-14 00:56 - 2013-12-14 00:56 - 00018179 _____ C:\Users\Philip\Downloads\eingrenzen.xlsx 2013-12-12 21:30 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache 2013-12-12 19:38 - 2009-07-14 05:45 - 00416144 _____ C:\Windows\system32\FNTCACHE.DAT 2013-12-12 03:04 - 2013-09-07 04:20 - 00000000 ____D C:\ProgramData\Microsoft Help 2013-12-10 22:51 - 2013-12-10 22:51 - 09293192 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe 2013-12-10 22:51 - 2013-10-29 13:37 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2013-12-10 22:51 - 2013-10-29 13:37 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater 2013-12-10 22:51 - 2012-03-29 15:55 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2013-12-10 12:01 - 2013-09-02 22:00 - 00004106 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA 2013-12-10 12:01 - 2013-09-02 22:00 - 00003854 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore 2013-12-09 18:32 - 2013-12-09 18:32 - 00254115 _____ C:\Users\Philip\Downloads\4. Vorlesung 9. Dezember (1).pptx 2013-12-09 18:23 - 2013-12-09 18:23 - 00074118 _____ C:\Users\Philip\Downloads\1 Vorlesung 18. November (2).pptx 2013-12-09 18:12 - 2013-12-09 18:12 - 00265639 _____ C:\Users\Philip\Downloads\3. Vorlesung 5. Dezember.pptx 2013-12-09 18:10 - 2013-12-09 18:10 - 00254115 _____ C:\Users\Philip\Downloads\4. Vorlesung 9. Dezember.pptx 2013-12-06 15:05 - 2013-09-02 21:56 - 00001433 _____ C:\Users\Philip\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2013-12-06 08:14 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\PolicyDefinitions 2013-12-06 04:46 - 2013-09-02 22:01 - 00002187 _____ C:\Users\Public\Desktop\Google Chrome.lnk 2013-12-06 03:58 - 2013-12-06 03:51 - 00009768 _____ C:\Windows\IE11_main.log 2013-12-06 03:53 - 2013-12-06 03:53 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2013-12-06 03:53 - 2013-12-06 03:53 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2013-12-06 03:53 - 2013-12-06 03:53 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll 2013-12-06 03:53 - 2013-12-06 03:53 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2013-12-06 03:53 - 2013-12-06 03:53 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2013-12-06 03:53 - 2013-12-06 03:53 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll 2013-12-06 03:53 - 2013-12-06 03:53 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2013-12-06 03:53 - 2013-12-06 03:53 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat 2013-12-06 03:53 - 2013-12-06 03:53 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat 2013-12-06 03:53 - 2013-12-06 03:53 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2013-12-06 03:53 - 2013-12-06 03:53 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2013-12-06 03:53 - 2013-12-06 03:53 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2013-12-06 03:53 - 2013-12-06 03:53 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2013-12-06 03:53 - 2013-12-06 03:53 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2013-12-06 03:53 - 2013-12-06 03:53 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2013-12-06 03:53 - 2013-12-06 03:53 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2013-12-06 03:53 - 2013-12-06 03:53 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec 2013-12-06 03:53 - 2013-12-06 03:53 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2013-12-06 03:53 - 2013-12-06 03:53 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2013-12-06 03:53 - 2013-12-06 03:53 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll 2013-12-06 03:53 - 2013-12-06 03:53 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2013-12-06 03:53 - 2013-12-06 03:53 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll 2013-12-06 03:53 - 2013-12-06 03:53 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2013-12-06 03:53 - 2013-12-06 03:53 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll 2013-12-06 03:53 - 2013-12-06 03:53 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll 2013-12-06 03:53 - 2013-12-06 03:53 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll 2013-12-06 03:53 - 2013-12-06 03:53 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll 2013-12-06 03:53 - 2013-12-06 03:53 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2013-12-06 03:53 - 2013-12-06 03:53 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll 2013-12-06 03:53 - 2013-12-06 03:53 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll 2013-12-06 03:53 - 2013-12-06 03:53 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe 2013-12-06 03:53 - 2013-12-06 03:53 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2013-12-06 03:53 - 2013-12-06 03:53 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe 2013-12-06 03:53 - 2013-12-06 03:53 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll 2013-12-06 03:53 - 2013-12-06 03:53 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe 2013-12-06 03:53 - 2013-12-06 03:53 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe 2013-12-06 03:53 - 2013-12-06 03:53 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll 2013-12-06 03:53 - 2013-12-06 03:53 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll 2013-12-06 03:53 - 2013-12-06 03:53 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll 2013-12-06 03:53 - 2013-12-06 03:53 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll 2013-12-06 03:53 - 2013-12-06 03:53 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2013-12-06 03:53 - 2013-12-06 03:53 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll 2013-12-06 03:53 - 2013-12-06 03:53 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2013-12-06 03:53 - 2013-12-06 03:53 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll 2013-12-06 03:53 - 2013-12-06 03:53 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe 2013-12-06 03:53 - 2013-12-06 03:53 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2013-12-06 03:53 - 2013-12-06 03:53 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe 2013-12-06 03:53 - 2013-12-06 03:53 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2013-12-06 03:53 - 2013-12-06 03:53 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2013-12-06 03:53 - 2013-12-06 03:53 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll 2013-12-06 03:53 - 2013-12-06 03:53 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll 2013-12-06 03:53 - 2013-12-06 03:53 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx 2013-12-06 03:53 - 2013-12-06 03:53 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe 2013-12-06 03:53 - 2013-12-06 03:53 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe 2013-12-06 03:53 - 2013-12-06 03:53 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2013-12-06 03:53 - 2013-12-06 03:53 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll 2013-12-06 03:53 - 2013-12-06 03:53 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx 2013-12-06 03:53 - 2013-12-06 03:53 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll 2013-12-06 03:53 - 2013-12-06 03:53 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll 2013-12-06 03:53 - 2013-12-06 03:53 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2013-12-06 03:53 - 2013-12-06 03:53 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll 2013-12-06 03:53 - 2013-12-06 03:53 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll 2013-12-06 03:53 - 2013-12-06 03:53 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2013-12-06 03:53 - 2013-12-06 03:53 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll 2013-12-06 03:53 - 2013-12-06 03:53 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll 2013-12-06 03:53 - 2013-12-06 03:53 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll 2013-12-06 03:53 - 2013-12-06 03:53 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll 2013-12-06 03:53 - 2013-12-06 03:53 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2013-12-06 03:53 - 2013-12-06 03:53 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll 2013-12-06 03:53 - 2013-12-06 03:53 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2013-12-06 03:53 - 2013-12-06 03:53 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2013-12-06 03:53 - 2013-12-06 03:53 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll 2013-12-06 03:53 - 2013-12-06 03:53 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll 2013-12-06 03:53 - 2013-12-06 03:53 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe 2013-12-06 03:53 - 2013-12-06 03:53 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe 2013-12-06 03:53 - 2013-12-06 03:53 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe 2013-12-06 03:53 - 2013-12-06 03:53 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe 2013-12-05 14:03 - 2013-12-05 14:03 - 00257216 _____ C:\Users\Philip\Downloads\2. Vorlesung, 2. Dezember (3).pptx 2013-12-05 14:02 - 2013-12-05 14:02 - 00257216 _____ C:\Users\Philip\Downloads\2. Vorlesung, 2. Dezember (2).pptx Some content of TEMP: ==================== C:\Users\Philip\AppData\Local\Temp\icqsetup.exe C:\Users\Philip\AppData\Local\Temp\JDownloader2betaSetup.exe C:\Users\Philip\AppData\Local\Temp\jre-7u45-windows-i586-iftw.exe C:\Users\Philip\AppData\Local\Temp\LegitCheckControl.dll C:\Users\Philip\AppData\Local\Temp\MGASetup.exe C:\Users\Philip\AppData\Local\Temp\MouseKeyboardCenterx64_1031.exe C:\Users\Philip\AppData\Local\Temp\movefile.exe C:\Users\Philip\AppData\Local\Temp\OGACheckControl.dll C:\Users\Philip\AppData\Local\Temp\pidgenx.dll C:\Users\Philip\AppData\Local\Temp\pssuspend.exe C:\Users\Philip\AppData\Local\Temp\sdanircmdc.exe C:\Users\Philip\AppData\Local\Temp\uninst1.exe C:\Users\Philip\AppData\Local\Temp\vlc-2.0.8-win64.exe C:\Users\Philip\AppData\Local\Temp\WgaLogon.dll C:\Users\Philip\AppData\Local\Temp\WgaTray.exe C:\Users\Philip\AppData\Local\Temp\WindowsXP-KB905474-ENU-x86.exe ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\rpcss.dll => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2013-12-30 00:31 ==================== End Of Log ============================ Addition.txt Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 04-01-2014 Ran by Philip at 2014-01-04 14:29:22 Running from C:\Users\Philip\Desktop Boot Mode: Normal ========================================================== ==================== Security Center ======================== AV: Bitdefender Virenschutz (Enabled - Up to date) {9B5F5313-CAF9-DD97-C460-E778420237B4} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: Bitdefender Spyware-Schutz (Enabled - Up to date) {203EB2F7-ECC3-D219-FED0-DC0A39857D09} FW: Bitdefender Firewall (Enabled) {A364D236-8096-DCCF-EF3F-4E4DBCD170CF} ==================== Installed Programs ====================== 7-PDF Printer 10.0.0.1840 (Version: 10.0.0.1840 - 7-PDF, Germany - Th. Hodes) Adobe AIR (x32 Version: 2.7.1.19610 - Adobe Systems Incorporated) Adobe AIR (x32 Version: 2.7.1.19610 - Adobe Systems Incorporated) Hidden Adobe Community Help (x32 Version: 3.2.1 - Adobe Systems Incorporated) Hidden Adobe Community Help (x32 Version: 3.2.1.650 - Adobe Systems Incorporated) Adobe Flash Player 11 ActiveX (x32 Version: 11.9.900.170 - Adobe Systems Incorporated) Adobe Flash Player 11 Plugin (x32 Version: 11.9.900.170 - Adobe Systems Incorporated) Adobe Photoshop Elements 9 (x32 Version: 9.0 - Adobe Systems Incorporated) Adobe Photoshop Elements 9 (x32 Version: 9.0 - Adobe Systems Incorporated) Hidden Adobe Premiere Elements 9 (x32 Version: 9.0 - Adobe Systems Incorporated) Adobe Premiere Elements 9 (x32 Version: 9.0 - Adobe Systems Incorporated) Hidden Adobe Reader X (10.1.8) MUI (x32 Version: 10.1.8 - Adobe Systems Incorporated) Agatha Christie - Death on the Nile (x32 Version: 2.2.0.98 - WildTangent) Hidden Bejeweled 2 Deluxe (x32 Version: 2.2.0.95 - WildTangent) Hidden Bitdefender Internet Security 2013 (Version: 16.30.0.1843 - Bitdefender) Broadcom Card Reader Driver Installer (Version: 14.8.2.2 - Broadcom Corporation) Broadcom NetLink Controller (Version: 14.8.4.1 - Broadcom Corporation) Chuzzle Deluxe (x32 Version: 2.2.0.95 - WildTangent) Hidden Crazy Chicken Kart 2 (x32 Version: 2.2.0.97 - WildTangent) Hidden D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition (x32 Version: - Microsoft) Dropbox (HKCU Version: 2.0.26 - Dropbox, Inc.) Elements 9 Organizer (x32 Version: 9.0 - Adobe Systems Incorporated) Hidden FATE (x32 Version: 2.2.0.97 - WildTangent) Hidden Final Drive: Nitro (x32 Version: 2.2.0.95 - WildTangent) Hidden Fotogalerija Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Galeria de Fotografias do Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Galería fotográfica de Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Galeria fotogràfica del Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Galeria fotografii usługi Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Galerie de photos Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Galerie foto Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Google Chrome (x32 Version: 31.0.1650.63 - Google Inc.) Google Update Helper (x32 Version: 1.3.22.3 - Google Inc.) Hidden HomeMedia (x32 Version: 2.0.8920 - CyberLink Corporation) Identity Card (x32 Version: 1.00.3501 - Packard Bell) Insaniquarium Deluxe (x32 Version: 2.2.0.97 - WildTangent) Hidden Intel(R) Control Center (x32 Version: 1.2.1.1007 - Intel Corporation) Intel(R) Management Engine Components (x32 Version: 7.0.0.1144 - Intel Corporation) Intel(R) Processor Graphics (x32 Version: 8.15.10.2418 - Intel Corporation) Intel(R) Rapid Storage Technology (x32 Version: 10.5.0.1026 - Intel Corporation) Java 7 Update 25 (64-bit) (Version: 7.0.250 - Oracle) Java 7 Update 45 (x32 Version: 7.0.450 - Oracle) Java Auto Updater (x32 Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden JDownloader 0.9 (x32 Version: 0.9 - AppWork GmbH) Jewel Match 3 (x32 Version: 2.2.0.97 - WildTangent) Hidden Jewel Quest Solitaire (x32 Version: 2.2.0.95 - WildTangent) Hidden John Deere Drive Green (x32 Version: 2.2.0.95 - WildTangent) Hidden Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Launch Manager (x32 Version: 5.1.7 - Packard Bell) Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) Hidden Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation) Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation) Hidden Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden Microsoft Office 2010 (x32 Version: 14.0.4763.1000 - Microsoft Corporation) Microsoft Office Access MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Excel MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Groove MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office InfoPath MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Office 64-bit Components 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office OneNote MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Outlook MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office PowerPoint MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Professional Plus 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Microsoft Office Professional Plus 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (English) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (French) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (Italian) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Proofing (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Publisher MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Shared 64-bit MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Shared MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Office Word MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden Microsoft Silverlight (Version: 5.1.20913.0 - Microsoft Corporation) Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219 - Microsoft Corporation) Microsoft_VC80_CRT_x86 (x32 Version: 8.0.50727.4053 - Adobe) Hidden Microsoft_VC80_MFC_x86 (x32 Version: 8.0.50727.4053 - Adobe) Hidden Microsoft_VC80_MFCLOC_x86 (x32 Version: 8.0.50727.4053 - Adobe) Hidden Microsoft_VC90_CRT_x86 (x32 Version: 1.00.0000 - Adobe) Hidden Microsoft-Maus- und Tastatur-Center (Version: 2.2.173.0 - Microsoft Corporation) Microsoft-Maus- und Tastatur-Center (Version: 2.2.173.0 - Microsoft Corporation) Hidden Mozilla Firefox 26.0 (x86 de) (x32 Version: 26.0 - Mozilla) Mozilla Maintenance Service (x32 Version: 26.0 - Mozilla) MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden MSVCRT_amd64 (x32 Version: 15.4.2862.0708 - Microsoft) Hidden MSXML 4.0 SP2 (KB954430) (x32 Version: 4.20.9870.0 - Microsoft Corporation) MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0 - Microsoft Corporation) Mystery of Mortlake Mansion (x32 Version: 2.2.0.98 - WildTangent) Hidden Nero BackItUp 10 (x32 Version: 5.8.11000.8.100 - Nero AG) Nero BackItUp 10 Help (CHM) (x32 Version: 10.6.10700 - Nero AG) Hidden Nero Control Center 10 (x32 Version: 10.6.12700.0.7 - Nero AG) Hidden Nero ControlCenter 10 Help (CHM) (x32 Version: 10.6.10700 - Nero AG) Hidden Nero Core Components 10 (x32 Version: 2.0.19900.9.11 - Nero AG) Hidden Nero DiscSpeed 10 (x32 Version: 6.2.10500.2.100 - Nero AG) Nero DiscSpeed 10 Help (CHM) (x32 Version: 10.5.10000 - Nero AG) Hidden Nero Express 10 (x32 Version: 10.6.10700.5.100 - Nero AG) Nero Express 10 Help (CHM) (x32 Version: 10.6.10700 - Nero AG) Hidden Nero Multimedia Suite 10 Essentials (x32 Version: 10.5.10300 - Nero AG) Nero Multimedia Suite 10 Essentials (x32 Version: 10.6.10300 - Nero AG) Nero RescueAgent 10 (x32 Version: 3.6.10500.3.100 - Nero AG) Nero RescueAgent 10 Help (CHM) (x32 Version: 10.6.10700 - Nero AG) Hidden Nero StartSmart 10 (x32 Version: 10.2.11600.14.100 - Nero AG) Nero StartSmart 10 Help (CHM) (x32 Version: 10.5.10000 - Nero AG) Hidden Nero Update (x32 Version: 1.0.10900.31.0 - Nero AG) NVIDIA Grafiktreiber 285.90 (Version: 285.90 - NVIDIA Corporation) NVIDIA Install Application (Version: 2.1002.48.261 - NVIDIA Corporation) Hidden NVIDIA Optimus 1.5.21 (Version: 1.5.21 - NVIDIA Corporation) Hidden NVIDIA Systemsteuerung 285.90 (Version: 285.90 - NVIDIA Corporation) Hidden NVIDIA Update Components (Version: 1.5.21 - NVIDIA Corporation) Hidden Packard Bell Games (x32 Version: 1.0.2.5 - WildTangent) Packard Bell Power Management (x32 Version: 6.00.3008 - Packard Bell) Packard Bell Recovery Management (x32 Version: 5.00.3504 - Packard Bell) Packard Bell Registration (x32 Version: 1.04.3505 - Packard Bell) Packard Bell ScreenSaver (x32 Version: 1.1.0915.2011 - Packard Bell ) Packard Bell Social Networks (x32 Version: 3.0.3106 - CyberLink Corp.) Packard Bell Social Networks (x32 Version: 3.0.3106 - CyberLink Corp.) Hidden Packard Bell Updater (x32 Version: 1.02.3500 - Packard Bell) PDF24 Creator 6.0.1 (x32 Version: - PDF24.org) Penguins! (x32 Version: 2.2.0.95 - WildTangent) Hidden Plants vs. Zombies - Game of the Year (x32 Version: 2.2.0.95 - WildTangent) Hidden Poczta usługi Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Podstawowe programy Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Polar Bowler (x32 Version: 2.2.0.97 - WildTangent) Hidden Pošta Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Raccolta foto di Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Realtek High Definition Audio Driver (x32 Version: 6.0.1.6339 - Realtek Semiconductor Corp.) Renesas Electronics USB 3.0 Host Controller Driver (x32 Version: 2.0.34.0 - Renesas Electronics Corporation) Renesas Electronics USB 3.0 Host Controller Driver (x32 Version: 2.0.34.0 - Renesas Electronics Corporation) Hidden Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (x32 Version: - Microsoft) Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (x32 Version: - Microsoft) Hidden Skype™ 5.10 (x32 Version: 5.10.116 - Skype Technologies S.A.) Slingo Deluxe (x32 Version: 2.2.0.95 - WildTangent) Hidden Spotify (HKCU Version: 0.9.6.81.gd359a796 - Spotify AB) Synaptics Pointing Device Driver (Version: 15.1.6.0 - Synaptics Incorporated) Torchlight (x32 Version: 2.2.0.97 - WildTangent) Hidden Überwachungstool für die Intel® Turbo-Boost-Technik 2.0 (Version: 2.1.23.0 - Intel) Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1 - Microsoft Corporation) Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1 - Microsoft Corporation) Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1 - Microsoft Corporation) Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (x32 Version: 1 - Microsoft Corporation) Update for Microsoft .NET Framework 4 Client Profile (KB2836939v3) (x32 Version: 3 - Microsoft Corporation) Update for Microsoft Access 2010 (KB2553446) 32-Bit Edition (x32 Version: - Microsoft) Update for Microsoft Filter Pack 2.0 (KB2810071) 32-Bit Edition (x32 Version: - Microsoft) Update for Microsoft Office 2010 (KB2589298) 32-Bit Edition (x32 Version: - Microsoft) Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition (x32 Version: - Microsoft) Update for Microsoft Office 2010 (KB2589375) 32-Bit Edition (x32 Version: - Microsoft) Update for Microsoft Office 2010 (KB2597087) 32-Bit Edition (x32 Version: - Microsoft) Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (x32 Version: - Microsoft) Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition (x32 Version: - Microsoft) Update for Microsoft Office 2010 (KB2794737) 32-Bit Edition (x32 Version: - Microsoft) Update for Microsoft Office 2010 (KB2825640) 32-Bit Edition (x32 Version: - Microsoft) Update for Microsoft Office 2010 (KB2826026) 32-Bit Edition (x32 Version: - Microsoft) Update for Microsoft Office 2010 (KB2850079) 32-Bit Edition (x32 Version: - Microsoft) Update for Microsoft OneNote 2010 (KB2810072) 32-Bit Edition (x32 Version: - Microsoft) Update for Microsoft PowerPoint 2010 (KB2553145) 32-Bit Edition (x32 Version: - Microsoft) Update for Microsoft Visio Viewer 2010 (KB2810066) 32-Bit Edition (x32 Version: - Microsoft) Update for Microsoft Word 2010 (KB2837593) 32-Bit Edition (x32 Version: - Microsoft) Update Installer for WildTangent Games App (x32 Version: - WildTangent) Hidden Video Web Camera (x32 Version: 1.0.1904 - CyberLink Corp.) Video Web Camera (x32 Version: 1.0.1904 - CyberLink Corp.) Hidden Virtual Villagers 4 - The Tree of Life (x32 Version: 2.2.0.97 - WildTangent) Hidden VLC media player 2.0.8 (Version: 2.0.8 - VideoLAN) Wedding Dash (x32 Version: 2.2.0.95 - WildTangent) Hidden Welcome Center (x32 Version: 1.02.3505 - Packard Bell) WildTangent Games App (x32 Version: 4.0.10.25 - WildTangent) Hidden Windows Live Communications Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Essentials (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Essentials (x32 Version: 15.4.3538.0513 - Microsoft Corporation) Windows Live Fotogaléria (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Fotogalerie (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Fotogalleri (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Fotoğraf Galerisi (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Fotótár (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Galeria de Fotos (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Galerija fotografija (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live ID Sign-in Assistant (Version: 7.250.4232.0 - Microsoft Corporation) Hidden Windows Live Installer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Language Selector (Version: 15.4.3538.0513 - Microsoft Corporation) Hidden Windows Live Mail (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Mesh (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Messenger (x32 Version: 15.4.3538.0513 - Microsoft Corporation) Hidden Windows Live Messenger (x32 Version: 15.4.3538.0513 - Корпорация Майкрософт) Hidden Windows Live MIME IFilter (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Movie Maker (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Photo Common (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Photo Gallery (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live PIMT Platform (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden Windows Live Remote Client (Version: 15.4.5722.2 - Microsoft Corporation) Hidden Windows Live Remote Client Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden Windows Live Remote Service (Version: 15.4.5722.2 - Microsoft Corporation) Hidden Windows Live Remote Service Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden Windows Live SOXE (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Temel Parçalar (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live UX Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden Windows Live Writer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Writer Resources (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live 影像中心 (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live 程式集 (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Liven asennustyökalu (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Liven sähköposti (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Liven valokuvavalikoima (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden WinRAR 4.20 (64-Bit) (Version: 4.20.0 - win.rar GmbH) Zuma Deluxe (x32 Version: 2.2.0.95 - WildTangent) Hidden Συλλογή φωτογραφιών του Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Основные компоненты Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Почта Windows Live (x32 Version: 15.4.3502.0922 - Корпорация Майкрософт) Hidden Фотоальбом Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Фотогалерия на Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden גלריית התמונות של Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden بريد Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden معرض صور Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden ==================== Restore Points ========================= 25-12-2013 18:29:05 Geplanter Prüfpunkt 01-01-2014 23:14:30 Geplanter Prüfpunkt ==================== Hosts content: ========================== 2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts ==================== Scheduled Tasks (whitelisted) ============= Task: {0F3DC43D-D88B-4981-A889-CCEBAE074A2F} - System32\Tasks\{940C1A07-BC4E-4CA2-9CE2-E81B5EA6C389} => C:\Program Files (x86)\Microsoft Office\Options14\MSOO.EXE [2013-07-23] (Microsoft Corporation) Task: {135AC248-587B-4089-9D92-304EB58BE333} - System32\Tasks\NBAgent => C:\Program Files (x86)\Nero\Nero 10\Nero BackItUp\NBAgent.exe [2011-07-05] (Nero AG) Task: {13E7BF99-3443-49A3-A9FC-C1004827077D} - System32\Tasks\Microsoft_MKC_Logon_Task_itype.exe => C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [2013-05-13] (Microsoft Corporation) Task: {15CB7458-7F9B-40F9-80AD-AE3C9D9EE34C} - System32\Tasks\AutoKMS => C:\Windows\AutoKMS.exe Task: {21896EF5-2CB7-404C-96F0-7E86CA1DBD33} - System32\Tasks\Microsoft_Hardware_Launch_ipoint_exe => C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2013-05-13] (Microsoft Corporation) Task: {2566AE69-04E6-41CB-AA8B-0417A641A7D0} - System32\Tasks\Microsoft_MKC_Logon_Task_ipoint.exe => C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2013-05-13] (Microsoft Corporation) Task: {2B671911-B09F-4E4B-81A6-F01F830B6CBC} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-09-02] (Google Inc.) Task: {8C0F8B3F-A8CD-4EBB-80FD-2F6EA9320F9D} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-09-02] (Google Inc.) Task: {A94D05EE-2E92-4623-ADE7-1A02BA2AA562} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-12-10] (Adobe Systems Incorporated) Task: {ABCB2431-DFB6-4C89-A6F4-0355C88AB402} - System32\Tasks\Microsoft_Hardware_Launch_mousekeyboardcenter_exe => C:\Program Files\Microsoft Mouse and Keyboard Center\MouseKeyboardCenter.exe [2013-05-13] (Microsoft) Task: {B94F8C9E-8AFD-4CE3-8AA6-3053FDC74CC4} - System32\Tasks\Microsoft_Hardware_Launch_itype_exe => C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [2013-05-13] (Microsoft Corporation) Task: {D417B96C-A89B-494F-A691-CC1802A3303F} - System32\Tasks\AdobeAAMUpdater-1.0-Philip-PC-Philip => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\updaterstartuputility.exe [2012-09-20] (Adobe Systems Incorporated) Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe ==================== Loaded Modules (whitelisted) ============= 2013-09-05 00:17 - 2013-09-05 00:17 - 04300456 _____ () C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Cultures\OFFICE.ODF 2012-03-29 15:39 - 2011-06-10 18:36 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll 2013-09-02 22:15 - 2013-10-29 11:52 - 00265080 _____ () C:\Program Files\Bitdefender\Bitdefender 2013\txmlutil.dll 2013-09-02 22:15 - 2013-10-29 11:52 - 00099256 _____ () C:\Program Files\Bitdefender\Bitdefender 2013\bdmetrics.dll 2013-09-02 22:45 - 2013-10-29 11:51 - 00436024 _____ () C:\Program Files\Bitdefender\Bitdefender 2013\bdidntconp.dll 2013-09-02 22:15 - 2013-10-29 11:52 - 00164352 _____ () C:\Program Files\Bitdefender\Bitdefender 2013\UI\bdidntconp.ui 2013-03-13 21:48 - 2013-03-13 21:48 - 24978944 _____ () C:\Users\Philip\AppData\Roaming\Dropbox\bin\libcef.dll 2013-09-05 00:14 - 2013-09-05 00:14 - 04300456 _____ () C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF 2013-12-06 04:45 - 2013-12-04 03:47 - 00702416 _____ () C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\libglesv2.dll 2013-12-06 04:45 - 2013-12-04 03:47 - 00099792 _____ () C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\libegl.dll 2013-12-06 04:45 - 2013-12-04 03:48 - 04055504 _____ () C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\pdf.dll 2013-12-06 04:45 - 2013-12-04 03:48 - 00399312 _____ () C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\ppGoogleNaClPluginChrome.dll 2013-12-06 04:45 - 2013-12-04 03:47 - 01619408 _____ () C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\ffmpegsumo.dll 2013-09-08 12:16 - 2013-09-08 12:16 - 00172544 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_32\IsdiInterop\f60b3ee2de3f41a024920486d46d49f2\IsdiInterop.ni.dll 2013-09-02 20:54 - 2011-04-29 23:28 - 00059904 _____ () C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll 2013-12-06 04:45 - 2013-12-04 03:48 - 13586896 _____ () C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\PepperFlash\pepflashplayer.dll ==================== Alternate Data Streams (whitelisted) ========= AlternateDataStreams: C:\ProgramData\Temp:373E1720 AlternateDataStreams: C:\Users\Philip\Desktop\FRST64.exe:BDU AlternateDataStreams: C:\Users\Philip\Desktop\OTL.exe:BDU AlternateDataStreams: C:\Users\Philip\Downloads\414441_intl_x64_zip.exe:BDU AlternateDataStreams: C:\Users\Philip\Downloads\7PDF_10_0_0_1840.exe:BDU AlternateDataStreams: C:\Users\Philip\Downloads\avg_avct_x64_all_2014_4116a6613_huawei.exe:BDU AlternateDataStreams: C:\Users\Philip\Downloads\avg_avct_x86_all_2014_4116a6613_huawei.exe:BDU AlternateDataStreams: C:\Users\Philip\Downloads\avg_isct_x64_all_2014_4116a6613_huawei.exe:BDU AlternateDataStreams: C:\Users\Philip\Downloads\avg_isct_x86_all_2014_4116a6613_huawei.exe:BDU AlternateDataStreams: C:\Users\Philip\Downloads\chromeinstall-7u25.exe:BDU AlternateDataStreams: C:\Users\Philip\Downloads\ChromeSetup.exe:BDU AlternateDataStreams: C:\Users\Philip\Downloads\Dropbox 2.0.26.exe:BDU AlternateDataStreams: C:\Users\Philip\Downloads\DTLite4471-0333 (1).exe:BDU AlternateDataStreams: C:\Users\Philip\Downloads\DTLite4471-0333.exe:BDU AlternateDataStreams: C:\Users\Philip\Downloads\euw21340.exe:BDU AlternateDataStreams: C:\Users\Philip\Downloads\Firefox Setup Stub 23.0.1.exe:BDU AlternateDataStreams: C:\Users\Philip\Downloads\Firefox Setup Stub 24.0.exe:BDU AlternateDataStreams: C:\Users\Philip\Downloads\FRST64.exe:BDU AlternateDataStreams: C:\Users\Philip\Downloads\jDownloader-2-Beta-Setup.exe:BDU AlternateDataStreams: C:\Users\Philip\Downloads\JDownloaderSetup.exe:BDU AlternateDataStreams: C:\Users\Philip\Downloads\jDownloaderWebInstaller09581 (1).exe:BDU AlternateDataStreams: C:\Users\Philip\Downloads\jDownloaderWebInstaller09581 (2).exe:BDU AlternateDataStreams: C:\Users\Philip\Downloads\jDownloaderWebInstaller09581 (3).exe:BDU AlternateDataStreams: C:\Users\Philip\Downloads\jre-7u25-windows-x64.exe:BDU AlternateDataStreams: C:\Users\Philip\Downloads\pdf24-creator-6.0.1.exe:BDU AlternateDataStreams: C:\Users\Philip\Downloads\rescue-system.exe:BDU AlternateDataStreams: C:\Users\Philip\Downloads\SpotifySetup.exe:BDU AlternateDataStreams: C:\Users\Philip\Downloads\SpyHunter-Installer.exe:BDU AlternateDataStreams: C:\Users\Philip\Downloads\vlc-win64-2.0.7.exe:BDU AlternateDataStreams: C:\Users\Philip\Downloads\WebInstaller.exe:BDU AlternateDataStreams: C:\Users\Philip\Downloads\winrar-x64-420d.exe:BDU ==================== Safe Mode (whitelisted) =================== ==================== Faulty Device Manager Devices ============= ==================== Event log errors: ========================= Application errors: ================== Error: (01/04/2014 04:59:51 AM) (Source: WinMgmt) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (01/02/2014 09:07:15 AM) (Source: WinMgmt) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (01/01/2014 02:46:06 PM) (Source: WinMgmt) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (12/27/2013 02:10:20 PM) (Source: WinMgmt) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (12/24/2013 00:45:55 PM) (Source: WinMgmt) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (12/24/2013 03:26:40 AM) (Source: WinMgmt) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (12/23/2013 01:21:18 PM) (Source: WinMgmt) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (12/22/2013 01:36:10 PM) (Source: WinMgmt) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (12/22/2013 01:26:13 PM) (Source: WinMgmt) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (12/21/2013 05:49:36 AM) (Source: WinMgmt) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 System errors: ============= Error: (01/04/2014 04:58:58 AM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Gruppenrichtlinienclient" wurde aufgrund folgenden Fehlers nicht gestartet: %%1053 Error: (01/04/2014 04:58:58 AM) (Source: Service Control Manager) (User: ) Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Gruppenrichtlinienclient erreicht. Error: (01/04/2014 02:32:16 AM) (Source: Disk) (User: ) Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk1\DR7 gefunden. Error: (01/04/2014 02:32:15 AM) (Source: Disk) (User: ) Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk1\DR7 gefunden. Error: (01/04/2014 02:32:14 AM) (Source: Disk) (User: ) Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk1\DR7 gefunden. Error: (01/04/2014 02:32:13 AM) (Source: Disk) (User: ) Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk1\DR7 gefunden. Error: (01/04/2014 02:32:12 AM) (Source: Disk) (User: ) Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk1\DR7 gefunden. Error: (01/04/2014 02:32:11 AM) (Source: Disk) (User: ) Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk1\DR7 gefunden. Error: (01/04/2014 02:32:09 AM) (Source: Disk) (User: ) Description: Der Treiber hat einen Controllerfehler auf \...\DR6 gefunden. Error: (01/02/2014 09:06:42 AM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Gruppenrichtlinienclient" wurde aufgrund folgenden Fehlers nicht gestartet: %%1053 Microsoft Office Sessions: ========================= Error: (01/04/2014 04:59:51 AM) (Source: WinMgmt)(User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (01/02/2014 09:07:15 AM) (Source: WinMgmt)(User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (01/01/2014 02:46:06 PM) (Source: WinMgmt)(User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (12/27/2013 02:10:20 PM) (Source: WinMgmt)(User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (12/24/2013 00:45:55 PM) (Source: WinMgmt)(User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (12/24/2013 03:26:40 AM) (Source: WinMgmt)(User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (12/23/2013 01:21:18 PM) (Source: WinMgmt)(User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (12/22/2013 01:36:10 PM) (Source: WinMgmt)(User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (12/22/2013 01:26:13 PM) (Source: WinMgmt)(User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (12/21/2013 05:49:36 AM) (Source: WinMgmt)(User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 ==================== Memory info =========================== Percentage of memory in use: 40% Total physical RAM: 8043.86 MB Available physical RAM: 4825 MB Total Pagefile: 16085.9 MB Available Pagefile: 12910.12 MB Total Virtual: 8192 MB Available Virtual: 8191.77 MB ==================== Drives ================================ Drive c: (Packard Bell) (Fixed) (Total:453.46 GB) (Free:64.94 GB) NTFS Drive d: (DATA) (Fixed) (Total:453.54 GB) (Free:440.82 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 932 GB) (Disk ID: 2C3936A7) Partition 1: (Not Active) - (Size=24 GB) - (Type=27) Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=453 GB) - (Type=07 NTFS) Partition 4: (Not Active) - (Size=454 GB) - (Type=07 NTFS) ==================== End Of Log ============================ |
![]() |
Themen zu Polizei Österreich Virus - Paysafe ... PC läuft noch ganz normal? was tun? |
adblock, adobe, browser, defender, firefox, flash player, google, hängen, iexplore.exe, infizierte, install.exe, launch, nvpciflt.sys, packard bell, plug-in, prozesse, pup.optional.babylon.a, pup.optional.delta.a, pup.optional.installcore.a, pup.optional.opencandy, pup.optional.wajam.a, realtek, registry, richtlinie, scan, security, software, spotify web helper, spyhunter, spyhunter entfernen, svchost.exe, virus, wildtangent games, windows, wscript.exe |