| |
| |||||||
Plagegeister aller Art und deren Bekämpfung: Vlc-Player durch Vlc.de installiert - Vermutung auf VirusWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
 |
08.01.2014, 00:07
| #1 |
| |  Vlc-Player durch Vlc.de installiert - Vermutung auf Virus Hallo, dummerweise habe ich heute den VLC-Player über die Webseite vlc.de heruntergeladen und installiert. Leider war ich mir nicht darüber bewusst, dass diese Webseite nicht zu den Offiziellen zählt und anscheinend nicht nur die bloße Software installiert. Auf meinem Desktop wurde eine Datei namens "Startseite" erstellt, die ich (ohne sie anzuklicken) löschte. Das eigentliche Problem ist mir erst einige Stunden später aufgefallen als ich Firefox startete und sich eine andere Startseite samt Suchmaschine öffnete. Außerdem meine ich bemerkt zu haben, dass ich zwei-dreimal auf irgendwelche Webseiten umgeleitet wurde, die zu Downloadlinks von anderer Software führte. Das finde ich nicht so lustig. Normalerweise nutze ich Chrome. Firefox habe ich danach direkt geschlossen und den VLC-Player deinstalliert. Ich habe mir die goldenen Regeln durchgelesen und ein Logfile mit FRST erstellt. DeFogger konnte keine Probleme feststellen. Soll ich auch einen Scan mit GMER durchführen oder was ist der nächste Schritt? Besteht hier eine Gefahr? Ich nutze Windows 8 und die Installation ist noch nicht lange her - ca. 2 Monate oder sowas in dem Dreh. Aus dem Grund würde ich ungerne formatieren oder neuaufsetzen, vorausgesetzt natürlich, dass es sich vermeiden lässt. Ich würde mich sehr über Hilfe freuen und ärgere mich echt über mich selbst, dass ich vor dem Downloaden nicht im Vornherein einen zweiten Blick auf die Webseite geworfen habe! Ich hab auch ein bisschen gegoogelt, aber bin mir einfach nicht sicher, ob das jetzt gefährlich ist oder nicht. Leider kenne ich mich da nicht so aus.  FRST.txt FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 05-01-2014
Ran by Doktor (administrator) on LEILA on 07-01-2014 23:12:29
Running from C:\Users\Benjamin\Downloads
Windows 8.1 Pro (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Sphinx Software) C:\Program Files\Windows8FirewallControl\Windows8FirewallService.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(ZF Electronics GmbH) C:\Program Files (x86)\Cherry\CDI\cdi.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\WTabletServiceCon.exe
(Microsoft Corporation) C:\Windows\System32\printfilterpipelinesvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_TabletUser.exe
(Wacom Technology) C:\Program Files\Tablet\Pen\WacomHost.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_Tablet.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_TouchUser.exe
(IvoSoft) C:\Program Files\Classic Shell\ClassicStartMenu.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Sphinx Software) C:\Program Files\Windows8FirewallControl\Windows8FirewallControl.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe
(Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe
(Google) C:\Program Files (x86)\Google\Drive\googledrivesync.exe
(Google) C:\Program Files (x86)\Google\Drive\googledrivesync.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(ZF Electronics GmbH) C:\Program Files (x86)\Cherry\KeyMan\KeyMan.exe
(Elaborate Bytes AG) C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe
() C:\Program Files (x86)\Bamboo Dock\BambooCore.exe
(ZF Electronics GmbH) C:\Program Files (x86)\Common Files\Cherry\Common\kbdhook64.exe
(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.Reader_6.3.9600.16422_x64__8wekyb3d8bbwe\glcnd.exe
(Microsoft Corporation) C:\Windows\System32\WWAHost.exe
(Microsoft Corporation) C:\Windows\SysWOW64\dllhost.exe
(FreeDownloadManager.ORG) C:\Program Files (x86)\Free Download Manager\fdm.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avscan.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20315_x64__8wekyb3d8bbwe\livecomm.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13213840 2012-10-26] (Realtek Semiconductor)
HKLM\...\Run: [Windows8FirewallControl] - C:\Program Files\Windows8FirewallControl\Windows8FirewallControl.exe [1203712 2013-09-20] (Sphinx Software)
HKLM\...\Run: [Nvtmru] - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe [1028384 2013-11-14] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] - C:\WINDOWS\system32\rundll32.exe C:\WINDOWS\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [684600 2013-12-18] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM-x32\...\Run: [CherryKeyMan] - C:\Program Files (x86)\Cherry\KeyMan\KeyMan.exe [254004 2010-09-28] (ZF Electronics GmbH)
HKLM-x32\...\Run: [VirtualCloneDrive] - C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe [88984 2013-03-10] (Elaborate Bytes AG)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-09-05] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [BambooCore] - C:\Program Files (x86)\Bamboo Dock\BambooCore.exe [646744 2012-10-16] ()
HKCU\...\Run: [Steam] - C:\Program Files (x86)\Steam\Steam.exe [1823656 2013-12-11] (Valve Corporation)
HKCU\...\Run: [GoogleDriveSync] - C:\Program Files (x86)\Google\Drive\googledrivesync.exe [20203904 2013-12-06] (Google)
HKCU\...\RunOnce: [FlashPlayerUpdate] - C:\WINDOWS\SysWOW64\Macromed\Flash\FlashUtil32_11_9_900_152_Plugin.exe -update plugin [830344 2013-11-16] (Adobe Systems Incorporated)
Startup: C:\Users\Benjamin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Gamma.lnk
ShortcutTarget: Adobe Gamma.lnk -> C:\Program Files (x86)\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe (Adobe Systems, Inc.)
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.startfenster.de
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://t.de.msn.com/
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x44495B2C4EDFCE01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE
SearchScopes: HKLM - DefaultScope {A1D7EC7C-6BD1-4295-98FF-7C8059EB50A6} URL = hxxp://www.sm.de/?q={searchTerms}
SearchScopes: HKLM - {A1D7EC7C-6BD1-4295-98FF-7C8059EB50A6} URL = hxxp://www.sm.de/?q={searchTerms}
SearchScopes: HKCU - DefaultScope {A1D7EC7C-6BD1-4295-98FF-7C8059EB50A6} URL = hxxp://www.sm.de/?q={searchTerms}
SearchScopes: HKCU - {A1D7EC7C-6BD1-4295-98FF-7C8059EB50A6} URL = hxxp://www.sm.de/?q={searchTerms}
BHO: ExplorerBHO Class - {449D0D6E-2412-4E61-B68F-1CB625CD9E52} - C:\Program Files\Classic Shell\ClassicExplorer64.dll (IvoSoft)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO: ClassicIEBHO Class - {EA801577-E6AD-4BD5-8F71-4BE0154331A4} - C:\Program Files\Classic Shell\ClassicIEDLL_64.dll (IvoSoft)
BHO-x32: ExplorerBHO Class - {449D0D6E-2412-4E61-B68F-1CB625CD9E52} - C:\Program Files\Classic Shell\ClassicExplorer32.dll (IvoSoft)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Free Download Manager - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - C:\Program Files (x86)\Free Download Manager\iefdm2.dll (FreeDownloadManager.ORG)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: ClassicIEBHO Class - {EA801577-E6AD-4BD5-8F71-4BE0154331A4} - C:\Program Files\Classic Shell\ClassicIEDLL_32.dll (IvoSoft)
Toolbar: HKLM - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer64.dll (IvoSoft)
Toolbar: HKLM-x32 - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer32.dll (IvoSoft)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.2
FireFox:
========
FF ProfilePath: C:\Users\Benjamin\AppData\Roaming\Mozilla\Firefox\Profiles\yjhfma5a.default
FF SearchEngineOrder.1: SuchMaschine
FF Homepage: hxxp://www.startfenster.de
FF Keyword.URL: hxxp://www.sm.de/?q=
FF Plugin: @adobe.com/FlashPlayer - C:\WINDOWS\system32\Macromed\Flash\NPSWF64_11_9_900_152.dll ()
FF Plugin: @java.com/DTPlugin,version=10.45.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @wacom.com/wtPlugin,version=2.1.0.3 - C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll (Wacom)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_152.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\WINDOWS\system32\Adobe\Director\np32dsw_1207148.dll No File
FF Plugin-x32: @java.com/DTPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @wacom.com/wtPlugin,version=2.1.0.3 - C:\Program Files (x86)\TabletPlugins\npWacomTabletPlugin.dll (Wacom)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: wacom.com/WacomTabletPlugin - C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll (Wacom)
FF SearchPlugin: C:\Users\Benjamin\AppData\Roaming\Mozilla\Firefox\Profiles\yjhfma5a.default\searchplugins\search_engine.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
Chrome:
=======
CHR HomePage: hxxp://www.google.com/
CHR Extension: (Google Translate) - C:\Users\Benjamin\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapbdbdomjkkjkaonfhkkikfgjllcleb\1.2.5_0
CHR Extension: (Google Docs) - C:\Users\Benjamin\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0
CHR Extension: (Google Drive) - C:\Users\Benjamin\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0
CHR Extension: (Missing e) - C:\Users\Benjamin\AppData\Local\Google\Chrome\User Data\Default\Extensions\bcjbagclppcgdbpobcpoojdjdmcjhpid\2.14.3_0
CHR Extension: (YouTube) - C:\Users\Benjamin\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0
CHR Extension: (Adblock Plus) - C:\Users\Benjamin\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb\1.7.2_0
CHR Extension: (Google Search) - C:\Users\Benjamin\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0
CHR Extension: (Pixlr-o-matic) - C:\Users\Benjamin\AppData\Local\Google\Chrome\User Data\Default\Extensions\ehcibdjmpjlekgjhepbfmenfppliikcj\1.2_0
CHR Extension: (Stylish) - C:\Users\Benjamin\AppData\Local\Google\Chrome\User Data\Default\Extensions\fjnbnpbmkenffdnngjfgmeleoegfcffe\1.2_0
CHR Extension: (Poupee Helper) - C:\Users\Benjamin\AppData\Local\Google\Chrome\User Data\Default\Extensions\fllcfmkookkmkcedcnbdhcpmmeflmilc\1.0.2_0
CHR Extension: (AdBlock) - C:\Users\Benjamin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.6.16_0
CHR Extension: (Morning Dock) - C:\Users\Benjamin\AppData\Local\Google\Chrome\User Data\Default\Extensions\hiaablmckofagnkpaajdnpgploonhnil\1_0
CHR Extension: (Don't Starve) - C:\Users\Benjamin\AppData\Local\Google\Chrome\User Data\Default\Extensions\hiledapehlkhdehbhppgmekfalnlfajc\1.0.0.37_0
CHR Extension: (Pocket Website) - C:\Users\Benjamin\AppData\Local\Google\Chrome\User Data\Default\Extensions\jijgclgmgjipgefcnnnibgllfonlfdap\1.0.2_0
CHR Extension: (Pocket (formerly Read It Later)) - C:\Users\Benjamin\AppData\Local\Google\Chrome\User Data\Default\Extensions\niloccemoadcdkdjlinkgdfekeahmflj\1.5.6_0
CHR Extension: (Google Wallet) - C:\Users\Benjamin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_0
CHR Extension: (ScriptSafe) - C:\Users\Benjamin\AppData\Local\Google\Chrome\User Data\Default\Extensions\oiigbmnaadbkfbmpbfijlflahbdbdgdf\1.0.6.16_0
CHR Extension: (Gmail) - C:\Users\Benjamin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0
CHR Extension: (SoundCloud Storm) - C:\Users\Benjamin\AppData\Local\Google\Chrome\User Data\Default\Extensions\plkfceapbcmjkgdffihdaebnfblcjfbf\4.2_0
==================== Services (Whitelisted) =================
S3 Adobe LM Service; C:\Program Files (x86)\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [72704 2013-10-10] (Adobe Systems)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440376 2013-12-18] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440376 2013-11-26] (Avira Operations GmbH & Co. KG)
S4 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [1011768 2013-12-18] (Avira Operations GmbH & Co. KG)
S3 AppleChargerSrv; C:\Windows\System32\AppleChargerSrv.exe [31272 2010-04-06] ()
R3 Cherry Device Interface; C:\Program Files (x86)\Cherry\CDI\cdi.exe [577582 2010-08-25] (ZF Electronics GmbH)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [15125280 2013-11-14] (NVIDIA Corporation)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [346872 2013-08-22] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23840 2013-08-22] (Microsoft Corporation)
R2 Windows8FirewallService; C:\Program Files\Windows8FirewallControl\Windows8FirewallService.exe [3806720 2013-09-20] (Sphinx Software)
R2 WTabletServiceCon; C:\Program Files\Tablet\Pen\WTabletServiceCon.exe [627992 2013-12-16] (Wacom Technology, Corp.)
==================== Drivers (Whitelisted) ====================
S0 ADP80XX; C:\Windows\System32\drivers\ADP80XX.SYS [782176 2013-08-22] (PMC-Sierra)
R1 AppleCharger; C:\Windows\System32\DRIVERS\AppleCharger.sys [22680 2012-10-25] ()
R3 athr; C:\Windows\system32\DRIVERS\athwnx.sys [3680256 2013-06-18] (Qualcomm Atheros Communications, Inc.)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108440 2013-12-18] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [131576 2013-12-18] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [28600 2013-11-26] (Avira Operations GmbH & Co. KG)
S3 bcmfn2; C:\Windows\System32\drivers\bcmfn2.sys [17624 2013-08-13] (Windows (R) Win 7 DDK provider)
S3 GVTDrv64; C:\WINDOWS\GVTDrv64.sys [30528 2013-10-10] ()
S3 iaLPSSi_GPIO; C:\Windows\System32\drivers\iaLPSSi_GPIO.sys [24568 2013-07-30] (Intel Corporation)
S3 iaLPSSi_I2C; C:\Windows\System32\drivers\iaLPSSi_I2C.sys [99320 2013-07-25] (Intel Corporation)
S0 iaStorAV; C:\Windows\System32\drivers\iaStorAV.sys [651248 2013-08-10] (Intel Corporation)
R0 intelpep; C:\Windows\System32\drivers\intelpep.sys [39768 2013-12-25] (Microsoft Corporation)
S3 kbldfltr; C:\Windows\System32\drivers\kbldfltr.sys [22272 2013-11-14] (Microsoft Corporation)
S0 LSI_SAS3; C:\Windows\System32\drivers\lsi_sas3.sys [81760 2013-08-22] (LSI Corporation)
R3 NdisVirtualBus; C:\Windows\System32\drivers\NdisVirtualBus.sys [16384 2013-08-22] (Microsoft Corporation)
S3 netvsc; C:\Windows\system32\DRIVERS\netvsc63.sys [87040 2013-08-22] (Microsoft Corporation)
R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [39200 2013-11-14] (NVIDIA Corporation)
S3 ReFS; C:\Windows\System32\Drivers\ReFS.sys [924512 2013-08-22] (Microsoft Corporation)
S3 SerCx2; C:\Windows\System32\drivers\SerCx2.sys [146776 2013-12-25] (Microsoft Corporation)
S0 stornvme; C:\Windows\System32\drivers\stornvme.sys [57176 2013-11-14] (Microsoft Corporation)
S3 UEFI; C:\Windows\System32\drivers\UEFI.sys [26976 2013-08-22] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [124256 2013-08-22] (Microsoft Corporation)
R3 xusb22; C:\Windows\System32\drivers\xusb22.sys [87040 2013-08-22] (Microsoft Corporation)
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2014-01-07 23:12 - 2014-01-07 23:21 - 00019074 _____ C:\Users\Benjamin\Downloads\FRST.txt
2014-01-07 23:12 - 2014-01-07 23:12 - 00000000 ____D C:\FRST
2014-01-07 23:11 - 2014-01-07 23:11 - 01931762 _____ (Farbar) C:\Users\Benjamin\Downloads\FRST64.exe
2014-01-07 23:09 - 2014-01-07 23:09 - 00000000 _____ C:\Users\Benjamin\defogger_reenable
2014-01-07 23:08 - 2014-01-07 23:08 - 00050477 _____ C:\Users\Benjamin\Downloads\Defogger.exe
2014-01-07 22:58 - 2014-01-07 23:00 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-01-07 22:58 - 2014-01-07 22:58 - 00000000 ____D C:\Users\Benjamin\AppData\Roaming\Malwarebytes
2014-01-07 22:58 - 2014-01-07 22:58 - 00000000 ____D C:\ProgramData\Malwarebytes
2014-01-07 22:55 - 2014-01-07 22:58 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Benjamin\Downloads\mbam-setup-1.75.0.1300.exe
2014-01-07 22:13 - 2014-01-07 22:36 - 00000000 ____D C:\Users\Benjamin\Desktop\Präsentation
2014-01-07 16:32 - 2014-01-07 16:32 - 00009118 _____ C:\Users\Benjamin\Desktop\303839_3008616.mp4
2014-01-07 16:28 - 2014-01-07 22:51 - 00000000 ____D C:\Program Files\VideoLAN
2014-01-07 16:28 - 2014-01-07 16:28 - 00001196 _____ C:\Users\Benjamin\AppData\Roaming\Microsoft\Windows\Start Menu\Startfenster.lnk
2014-01-07 16:27 - 2014-01-07 16:27 - 24738792 _____ C:\Users\Benjamin\Downloads\vlc-2.1.2-win64.exe
2014-01-07 15:26 - 2014-01-07 15:26 - 00086591 _____ C:\Users\Benjamin\Downloads\wadsworth_industria.zip
2014-01-07 01:34 - 2014-01-07 01:56 - 00000000 ____D C:\Users\Benjamin\AppData\Roaming\Little Inferno
2014-01-06 08:43 - 2014-01-06 08:44 - 00000000 ____D C:\Users\Benjamin\Desktop\usb
2014-01-06 07:57 - 2014-01-07 22:25 - 00000000 ____D C:\Users\Benjamin\Desktop\Fabric meets Canvas - Tim und Friederike
2014-01-06 04:18 - 2014-01-06 04:18 - 00009951 _____ C:\Users\Benjamin\Downloads\PhotosBooth_Template_TipSquirrel.zip
2014-01-06 04:15 - 2014-01-06 04:15 - 00009393 _____ C:\Users\Benjamin\Downloads\Photo Booth.atn
2014-01-05 21:39 - 2014-01-05 21:40 - 24513384 _____ C:\Users\Benjamin\Downloads\modern_geometric_triangle_photoshop_patterns_by_sdwhaven-d55gvnx.pat
2014-01-05 20:45 - 2014-01-05 20:46 - 00223048 ____T C:\Users\Benjamin\Documents\uujujuj.oxps
2014-01-05 20:13 - 2014-01-05 20:13 - 00000000 ____D C:\Users\Benjamin\AppData\Roaming\wacomid-desktop-launcher.DCFD4B89A63EE70BC162777F06D4B93B6397AEC7.1
2014-01-05 20:12 - 2014-01-05 20:14 - 00000000 ____D C:\ProgramData\Wacom
2014-01-05 20:12 - 2014-01-05 20:12 - 00001163 _____ C:\Users\Public\Desktop\Bamboo Dock.lnk
2014-01-05 20:12 - 2014-01-05 20:12 - 00000002 _____ C:\Users\Benjamin\.bdockinstall.log
2014-01-05 20:12 - 2014-01-05 20:12 - 00000000 ____D C:\Users\Default\AppData\Roaming\Macromedia
2014-01-05 20:12 - 2014-01-05 20:12 - 00000000 ____D C:\Users\Default User\AppData\Roaming\Macromedia
2014-01-05 20:12 - 2014-01-05 20:12 - 00000000 ____D C:\Users\Benjamin\AppData\Roaming\Wacom
2014-01-05 20:12 - 2014-01-05 20:12 - 00000000 ____D C:\Program Files (x86)\Bamboo Dock
2014-01-05 20:11 - 2014-01-05 20:11 - 00000000 ____D C:\Users\Benjamin\AppData\Roaming\WTablet
2014-01-05 20:11 - 2014-01-05 20:11 - 00000000 ____D C:\Program Files\TabletPlugins
2014-01-05 20:11 - 2014-01-05 20:11 - 00000000 ____D C:\Program Files\Tablet
2014-01-05 20:11 - 2014-01-05 20:11 - 00000000 ____D C:\Program Files (x86)\TabletPlugins
2014-01-05 20:11 - 2013-12-16 17:17 - 01913624 _____ (Wacom Technology, Corp.) C:\WINDOWS\system32\Pen_Tablet.dll
2014-01-05 20:11 - 2013-12-16 17:17 - 01906968 _____ (Wacom Technology, Corp.) C:\WINDOWS\system32\Pen_Touch_Tablet.dll
2014-01-05 20:11 - 2013-12-16 17:17 - 01780504 _____ (Wacom Technology, Corp.) C:\WINDOWS\system32\WacomMT.dll
2014-01-05 20:11 - 2013-12-16 17:17 - 01778968 _____ (Wacom Technology, Corp.) C:\WINDOWS\system32\Wintab32.dll
2014-01-05 20:11 - 2013-12-16 17:17 - 01551640 _____ (Wacom Technology, Corp.) C:\WINDOWS\SysWOW64\Pen_Tablet.dll
2014-01-05 20:11 - 2013-12-16 17:17 - 01544472 _____ (Wacom Technology, Corp.) C:\WINDOWS\SysWOW64\Pen_Touch_Tablet.dll
2014-01-05 20:11 - 2013-12-16 17:17 - 01432344 _____ (Wacom Technology, Corp.) C:\WINDOWS\SysWOW64\WacomMT.dll
2014-01-05 20:11 - 2013-12-16 17:17 - 01428248 _____ (Wacom Technology, Corp.) C:\WINDOWS\SysWOW64\Wintab32.dll
2014-01-05 20:11 - 2013-11-11 16:16 - 00090424 _____ (Wacom Technology) C:\WINDOWS\system32\Drivers\wachidrouter.sys
2014-01-05 20:11 - 2013-11-11 16:16 - 00015160 _____ (Wacom Technology) C:\WINDOWS\system32\Drivers\wacomrouterfilter.sys
2014-01-05 20:11 - 2013-11-11 16:16 - 00014136 _____ (Windows (R) Win 7 DDK provider) C:\WINDOWS\system32\Drivers\hidkmdf.sys
2014-01-05 20:11 - 2012-04-11 14:34 - 01721576 _____ (Microsoft Corporation) C:\WINDOWS\system32\wdfcoinstaller01009.dll
2014-01-05 20:11 - 2012-04-11 14:34 - 01721576 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wdfcoinstaller01009.dll
2014-01-05 20:09 - 2014-01-05 20:10 - 07434944 _____ C:\Users\Benjamin\Downloads\bamboo_setup_web0407final.exe
2014-01-05 20:05 - 2014-01-05 21:20 - 00000000 ____D C:\Users\Benjamin\Downloads\PaintToolSAI
2014-01-05 20:05 - 2014-01-05 20:05 - 02339714 _____ C:\Users\Benjamin\Downloads\sai-1.1.0-ful-en.exe
2014-01-05 20:05 - 2014-01-05 20:05 - 00000802 _____ C:\Users\Public\Desktop\PaintTool SAI Ver.1.lnk
2014-01-05 20:05 - 2014-01-05 20:05 - 00000000 ____D C:\Users\Benjamin\AppData\Roaming\SYSTEMAX Software Development
2014-01-05 20:05 - 2014-01-05 20:05 - 00000000 ____D C:\ProgramData\SYSTEMAX Software Development
2014-01-05 16:45 - 2014-01-05 16:45 - 00020916 _____ C:\Users\Benjamin\Downloads\bebas_neue.zip
2014-01-05 11:12 - 2014-01-05 11:12 - 00002039 _____ C:\Users\Public\Desktop\Adobe Reader XI.lnk
2014-01-04 14:42 - 2014-01-06 08:34 - 00000000 ____D C:\Users\Benjamin\Downloads\PhotosBooth_Template_TipSquirrel
2014-01-04 12:13 - 2014-01-04 12:21 - 71502558 _____ C:\Users\Benjamin\Downloads\Introduction to Magazine layoutsmp4.mp4
2014-01-04 08:34 - 2014-01-04 08:34 - 00001405 _____ C:\Users\Benjamin\Desktop\DevPro.lnk
2014-01-04 08:25 - 2014-01-07 21:37 - 00000000 ____D C:\Program Files (x86)\DevPro2
2014-01-04 08:03 - 2014-01-04 08:18 - 409196544 _____ C:\Users\Benjamin\Downloads\DevPro.7z
2014-01-04 08:02 - 2014-01-04 08:15 - 250952389 _____ (YGOPro DevPro Online ) C:\Users\Benjamin\Downloads\SetupDevPro1.9.8r4.exe
2014-01-03 07:16 - 2014-01-06 21:22 - 00000000 ____D C:\Users\Benjamin\Desktop\Layoutgestaltung
2014-01-02 15:26 - 2014-01-05 13:41 - 00000000 ____D C:\Users\Benjamin\Desktop\100CANON
2013-12-29 18:41 - 2013-12-29 18:41 - 00001799 _____ C:\Users\Public\Desktop\Alice Madness Returns.lnk
2013-12-28 18:24 - 2013-12-28 18:24 - 00003002 _____ C:\Users\Benjamin\Downloads\Ferien_Niedersachsen_2013.ics
2013-12-28 18:23 - 2013-12-28 18:23 - 00003359 _____ C:\Users\Benjamin\Downloads\Ferien_Niedersachsen_2014.ics
2013-12-28 03:32 - 2013-12-28 03:32 - 00000000 ___RD C:\WINDOWS\BrowserChoice
2013-12-28 02:26 - 2013-12-28 02:26 - 00000000 ____D C:\Users\Benjamin\Downloads\unsortiert
2013-12-26 15:17 - 2013-12-26 15:28 - 00000000 ____D C:\Users\Benjamin\Documents\RCT3
2013-12-26 15:17 - 2013-12-26 15:17 - 00000000 ____D C:\Users\Benjamin\AppData\Roaming\Atari
2013-12-26 14:59 - 2013-12-26 14:59 - 00461312 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnet.dll
2013-12-26 14:59 - 2013-12-26 14:59 - 00377856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnet.dll
2013-12-26 14:59 - 2013-12-26 14:59 - 00214016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dplayx.dll
2013-12-26 14:59 - 2013-12-26 14:59 - 00066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnathlp.dll
2013-12-26 14:59 - 2013-12-26 14:59 - 00059904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnathlp.dll
2013-12-26 14:59 - 2013-12-26 14:59 - 00045056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpwsockx.dll
2013-12-26 14:59 - 2013-12-26 14:59 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnsvr.exe
2013-12-26 14:59 - 2013-12-26 14:59 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnsvr.exe
2013-12-26 14:59 - 2013-12-26 14:59 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dplaysvr.exe
2013-12-26 14:59 - 2013-12-26 14:59 - 00023552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpmodemx.dll
2013-12-26 14:59 - 2013-12-26 14:59 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnhupnp.dll
2013-12-26 14:59 - 2013-12-26 14:59 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnhpast.dll
2013-12-26 14:59 - 2013-12-26 14:59 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnhupnp.dll
2013-12-26 14:59 - 2013-12-26 14:59 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnhpast.dll
2013-12-26 14:53 - 2013-12-26 14:53 - 00000000 ____D C:\GOG Games
2013-12-26 13:28 - 2013-12-26 13:28 - 00000000 ____D C:\ProgramData\ClassicShell
2013-12-26 13:28 - 2013-12-26 13:28 - 00000000 ____D C:\Program Files\Classic Shell
2013-12-25 22:58 - 2013-12-25 22:58 - 00001454 _____ C:\Users\Benjamin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2013-12-25 22:57 - 2013-12-25 22:57 - 00000020 ___SH C:\Users\Benjamin\ntuser.ini
2013-12-25 22:54 - 2013-12-25 22:54 - 00022960 _____ C:\WINDOWS\system32\emptyregdb.dat
2013-12-25 22:54 - 2013-12-25 22:54 - 00000000 _SHDL C:\Users\Default\Vorlagen
2013-12-25 22:54 - 2013-12-25 22:54 - 00000000 _SHDL C:\Users\Default\Startmenü
2013-12-25 22:54 - 2013-12-25 22:54 - 00000000 _SHDL C:\Users\Default\Netzwerkumgebung
2013-12-25 22:54 - 2013-12-25 22:54 - 00000000 _SHDL C:\Users\Default\Lokale Einstellungen
2013-12-25 22:54 - 2013-12-25 22:54 - 00000000 _SHDL C:\Users\Default\Eigene Dateien
2013-12-25 22:54 - 2013-12-25 22:54 - 00000000 _SHDL C:\Users\Default\Druckumgebung
2013-12-25 22:54 - 2013-12-25 22:54 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Musik
2013-12-25 22:54 - 2013-12-25 22:54 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Bilder
2013-12-25 22:54 - 2013-12-25 22:54 - 00000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2013-12-25 22:54 - 2013-12-25 22:54 - 00000000 _SHDL C:\Users\Default\AppData\Local\Verlauf
2013-12-25 22:54 - 2013-12-25 22:54 - 00000000 _SHDL C:\Users\Default\AppData\Local\Anwendungsdaten
2013-12-25 22:54 - 2013-12-25 22:54 - 00000000 _SHDL C:\Users\Default\Anwendungsdaten
2013-12-25 22:54 - 2013-12-25 22:54 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Musik
2013-12-25 22:54 - 2013-12-25 22:54 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Bilder
2013-12-25 22:54 - 2013-12-25 22:54 - 00000000 _SHDL C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2013-12-25 22:54 - 2013-12-25 22:54 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Verlauf
2013-12-25 22:54 - 2013-12-25 22:54 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Anwendungsdaten
2013-12-25 22:49 - 2013-12-25 22:49 - 00000020 ___SH C:\Users\UpdatusUser\ntuser.ini
2013-12-25 22:43 - 2013-12-25 22:43 - 00000000 ____D C:\WINDOWS\system32\config\bbimigrate
2013-12-25 22:42 - 2014-01-07 23:09 - 00000000 ____D C:\Users\Benjamin
2013-12-25 22:42 - 2013-12-25 22:54 - 00028578 _____ C:\WINDOWS\diagwrn.xml
2013-12-25 22:42 - 2013-12-25 22:54 - 00028578 _____ C:\WINDOWS\diagerr.xml
2013-12-25 22:42 - 2013-12-25 22:43 - 00000000 ___RD C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2013-12-25 22:42 - 2013-12-25 22:43 - 00000000 ___RD C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2013-12-25 22:42 - 2013-12-25 22:43 - 00000000 ___RD C:\Users\Benjamin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2013-12-25 22:42 - 2013-12-25 22:42 - 00000000 _SHDL C:\Users\UpdatusUser\Vorlagen
2013-12-25 22:42 - 2013-12-25 22:42 - 00000000 _SHDL C:\Users\UpdatusUser\Startmenü
2013-12-25 22:42 - 2013-12-25 22:42 - 00000000 _SHDL C:\Users\UpdatusUser\Netzwerkumgebung
2013-12-25 22:42 - 2013-12-25 22:42 - 00000000 _SHDL C:\Users\UpdatusUser\Lokale Einstellungen
2013-12-25 22:42 - 2013-12-25 22:42 - 00000000 _SHDL C:\Users\UpdatusUser\Eigene Dateien
2013-12-25 22:42 - 2013-12-25 22:42 - 00000000 _SHDL C:\Users\UpdatusUser\Druckumgebung
2013-12-25 22:42 - 2013-12-25 22:42 - 00000000 _SHDL C:\Users\UpdatusUser\Documents\Eigene Musik
2013-12-25 22:42 - 2013-12-25 22:42 - 00000000 _SHDL C:\Users\UpdatusUser\Documents\Eigene Bilder
2013-12-25 22:42 - 2013-12-25 22:42 - 00000000 _SHDL C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2013-12-25 22:42 - 2013-12-25 22:42 - 00000000 _SHDL C:\Users\UpdatusUser\AppData\Local\Verlauf
2013-12-25 22:42 - 2013-12-25 22:42 - 00000000 _SHDL C:\Users\UpdatusUser\AppData\Local\Anwendungsdaten
2013-12-25 22:42 - 2013-12-25 22:42 - 00000000 _SHDL C:\Users\UpdatusUser\Anwendungsdaten
2013-12-25 22:42 - 2013-12-25 22:42 - 00000000 _SHDL C:\Users\Benjamin\Vorlagen
2013-12-25 22:42 - 2013-12-25 22:42 - 00000000 _SHDL C:\Users\Benjamin\Startmenü
2013-12-25 22:42 - 2013-12-25 22:42 - 00000000 _SHDL C:\Users\Benjamin\Netzwerkumgebung
2013-12-25 22:42 - 2013-12-25 22:42 - 00000000 _SHDL C:\Users\Benjamin\Lokale Einstellungen
2013-12-25 22:42 - 2013-12-25 22:42 - 00000000 _SHDL C:\Users\Benjamin\Eigene Dateien
2013-12-25 22:42 - 2013-12-25 22:42 - 00000000 _SHDL C:\Users\Benjamin\Druckumgebung
2013-12-25 22:42 - 2013-12-25 22:42 - 00000000 _SHDL C:\Users\Benjamin\Documents\Eigene Musik
2013-12-25 22:42 - 2013-12-25 22:42 - 00000000 _SHDL C:\Users\Benjamin\Documents\Eigene Bilder
2013-12-25 22:42 - 2013-12-25 22:42 - 00000000 _SHDL C:\Users\Benjamin\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2013-12-25 22:42 - 2013-12-25 22:42 - 00000000 _SHDL C:\Users\Benjamin\AppData\Local\Verlauf
2013-12-25 22:42 - 2013-12-25 22:42 - 00000000 _SHDL C:\Users\Benjamin\AppData\Local\Anwendungsdaten
2013-12-25 22:42 - 2013-12-25 22:42 - 00000000 _SHDL C:\Users\Benjamin\Anwendungsdaten
2013-12-25 22:42 - 2013-08-22 16:36 - 00000000 ___RD C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2013-12-25 22:42 - 2013-08-22 16:36 - 00000000 ___RD C:\Users\Benjamin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2013-12-25 22:42 - 2013-08-22 16:36 - 00000000 ___RD C:\Users\Benjamin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2013-12-25 22:42 - 2013-08-22 16:36 - 00000000 ____D C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2013-12-25 22:42 - 2013-08-22 16:36 - 00000000 ____D C:\Users\Benjamin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2013-12-25 22:39 - 2014-01-07 22:00 - 01548628 _____ C:\WINDOWS\WindowsUpdate.log
2013-12-25 22:39 - 2014-01-03 06:25 - 00000000 ____D C:\ProgramData\NVIDIA
2013-12-25 22:39 - 2013-11-11 16:02 - 06674208 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll
2013-12-25 22:39 - 2013-11-11 16:02 - 03490080 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvc64.dll
2013-12-25 22:39 - 2013-11-11 16:01 - 02559776 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvcr.dll
2013-12-25 22:39 - 2013-11-11 16:01 - 00922912 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvvsvc.exe
2013-12-25 22:39 - 2013-11-11 16:01 - 00219424 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvmctray.dll
2013-12-25 22:39 - 2013-11-11 16:01 - 00063776 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvshext.dll
2013-12-25 22:38 - 2013-12-25 22:44 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2013-12-25 22:38 - 2013-12-25 22:44 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2013-12-25 22:38 - 2013-12-25 22:38 - 00000000 ____D C:\WINDOWS\SysWOW64\RTCOM
2013-12-25 22:38 - 2013-12-25 22:38 - 00000000 ____D C:\Program Files\Realtek
2013-12-25 22:36 - 2013-12-25 22:58 - 00000000 ___DC C:\WINDOWS\Panther
2013-12-25 22:36 - 2013-12-25 22:36 - 00393216 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMPhoto.dll
2013-12-25 22:36 - 2013-12-25 22:36 - 00348160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMPhoto.dll
2013-12-25 22:36 - 2013-12-25 22:36 - 00197120 _____ (Microsoft Corporation) C:\WINDOWS\system32\scrrun.dll
2013-12-25 22:36 - 2013-12-25 22:36 - 00156672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\scrrun.dll
2013-12-25 22:36 - 2013-12-25 22:36 - 00075360 _____ (Microsoft Corporation) C:\WINDOWS\system32\imagehlp.dll
2013-12-25 22:36 - 2013-12-25 22:36 - 00070680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\imagehlp.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 23183360 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 17112576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 13177344 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 12996608 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 11674624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 11221504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 07399256 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2013-12-25 22:35 - 2013-12-25 22:35 - 05769216 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 04243968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 04191744 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2013-12-25 22:35 - 2013-12-25 22:35 - 04105728 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncEngine.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 02896896 _____ (Microsoft Corporation) C:\WINDOWS\system32\msftedit.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 02764288 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 02570240 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 02334208 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 02266624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msftedit.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 02166784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 02143744 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 02140888 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 01995264 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2013-12-25 22:35 - 2013-12-25 22:35 - 01928192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2013-12-25 22:35 - 2013-12-25 22:35 - 01843712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Display.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 01820160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 01816576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Display.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 01765384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 01765376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 01756160 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMPDMC.exe
2013-12-25 22:35 - 2013-12-25 22:35 - 01642016 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2013-12-25 22:35 - 2013-12-25 22:35 - 01530200 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2013-12-25 22:35 - 2013-12-25 22:35 - 01506680 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe
2013-12-25 22:35 - 2013-12-25 22:35 - 01476184 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2013-12-25 22:35 - 2013-12-25 22:35 - 01395200 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 01391104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMPDMC.exe
2013-12-25 22:35 - 2013-12-25 22:35 - 01345536 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe
2013-12-25 22:35 - 2013-12-25 22:35 - 01302528 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 01157632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 00922624 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 00840704 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSShared.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 00817664 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 00747008 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidcli.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 00744448 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncCore.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 00703488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 00701440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSShared.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 00637952 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncHost.exe
2013-12-25 22:35 - 2013-12-25 22:35 - 00615936 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDMAgent.exe
2013-12-25 22:35 - 2013-12-25 22:35 - 00584192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncCore.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 00568832 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDrive.exe
2013-12-25 22:35 - 2013-12-25 22:35 - 00566784 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpncore.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 00544768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlidcli.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 00516496 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 00479744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncHost.exe
2013-12-25 22:35 - 2013-12-25 22:35 - 00449024 _____ (Microsoft Corporation) C:\WINDOWS\system32\appmgr.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 00406400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxgi.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 00382808 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2013-12-25 22:35 - 2013-12-25 22:35 - 00372568 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\spaceport.sys
2013-12-25 22:35 - 2013-12-25 22:35 - 00366080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\appmgr.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 00358896 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcomp.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 00325464 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBXHCI.SYS
2013-12-25 22:35 - 2013-12-25 22:35 - 00287744 _____ (Microsoft Corporation) C:\WINDOWS\system32\mdmregistration.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 00254464 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 00249856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 00240128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mdmregistration.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 00225792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dcomp.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 00218624 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2013-12-25 22:35 - 2013-12-25 22:35 - 00198656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppXDeploymentClient.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 00189952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 00146776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\SerCx2.sys
2013-12-25 22:35 - 2013-12-25 22:35 - 00115712 _____ (Microsoft Corporation) C:\WINDOWS\system32\winbici.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 00086872 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pdc.sys
2013-12-25 22:35 - 2013-12-25 22:35 - 00039768 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\intelpep.sys
2013-12-25 22:35 - 2013-12-25 22:35 - 00030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\CredentialMigrationHandler.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CredentialMigrationHandler.dll
2013-12-25 22:34 - 2013-12-25 22:34 - 00262144 _____ C:\WINDOWS\system32\config\userdiff
2013-12-25 22:33 - 2013-12-25 22:33 - 00000000 ____D C:\WINDOWS\SysWOW64\XPSViewer
2013-12-25 22:33 - 2013-12-25 22:33 - 00000000 ____D C:\Program Files\Reference Assemblies
2013-12-25 22:33 - 2013-12-25 22:33 - 00000000 ____D C:\Program Files\MSBuild
2013-12-25 22:33 - 2013-12-25 22:33 - 00000000 ____D C:\Program Files (x86)\Reference Assemblies
2013-12-25 22:33 - 2013-12-25 22:33 - 00000000 ____D C:\Program Files (x86)\MSBuild
2013-12-25 22:32 - 2013-08-03 05:48 - 01166520 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationNative_v0300.dll
2013-12-25 22:32 - 2013-08-03 05:48 - 00124112 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2013-12-25 22:32 - 2013-08-03 05:48 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe
2013-12-25 22:32 - 2013-08-03 05:41 - 00778936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationNative_v0300.dll
2013-12-25 22:32 - 2013-08-03 05:41 - 00102608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2013-12-25 22:32 - 2013-08-03 05:41 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TsWpfWrp.exe
2013-12-25 22:11 - 2013-12-25 22:54 - 00006665 _____ C:\WINDOWS\comsetup.log
2013-12-25 19:05 - 2013-12-25 19:05 - 00000000 ____D C:\Users\Benjamin\AppData\Local\NVIDIA
2013-12-25 19:03 - 2013-12-25 19:03 - 00000000 ____D C:\Program Files (x86)\AGEIA Technologies
2013-12-25 19:03 - 2013-11-14 12:57 - 01064224 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvspcap64.dll
2013-12-25 19:03 - 2013-11-14 12:57 - 00955168 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvspcap.dll
2013-12-25 19:00 - 2013-11-14 12:57 - 00039200 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvvad64v.sys
2013-12-25 19:00 - 2013-11-14 12:57 - 00029984 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvaudcap64v.dll
2013-12-25 19:00 - 2013-11-14 12:57 - 00028960 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvaudcap32v.dll
2013-12-25 19:00 - 2013-11-14 12:56 - 30361888 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvoglv64.dll
2013-12-25 19:00 - 2013-11-14 12:56 - 25257248 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcompiler.dll
2013-12-25 19:00 - 2013-11-14 12:56 - 22951200 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvoglv32.dll
2013-12-25 19:00 - 2013-11-14 12:56 - 18293608 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvwgf2umx.dll
2013-12-25 19:00 - 2013-11-14 12:56 - 18208624 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvd3dumx.dll
2013-12-25 19:00 - 2013-11-14 12:56 - 17560352 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcompiler.dll
2013-12-25 19:00 - 2013-11-14 12:56 - 15862272 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvwgf2um.dll
2013-12-25 19:00 - 2013-11-14 12:56 - 15218504 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvd3dum.dll
2013-12-25 19:00 - 2013-11-14 12:56 - 12613408 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvlddmkm.sys
2013-12-25 19:00 - 2013-11-14 12:56 - 11600432 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll
2013-12-25 19:00 - 2013-11-14 12:56 - 11514624 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvopencl.dll
2013-12-25 19:00 - 2013-11-14 12:56 - 09691888 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuda.dll
2013-12-25 19:00 - 2013-11-14 12:56 - 09619872 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvopencl.dll
2013-12-25 19:00 - 2013-11-14 12:56 - 03132704 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll
2013-12-25 19:00 - 2013-11-14 12:56 - 03125024 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvenc.dll
2013-12-25 19:00 - 2013-11-14 12:56 - 03069608 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvapi64.dll
2013-12-25 19:00 - 2013-11-14 12:56 - 02947872 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvid.dll
2013-12-25 19:00 - 2013-11-14 12:56 - 02747680 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvenc.dll
2013-12-25 19:00 - 2013-11-14 12:56 - 02697248 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvapi.dll
2013-12-25 19:00 - 2013-11-14 12:56 - 01884448 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispco6433182.dll
2013-12-25 19:00 - 2013-11-14 12:56 - 01511712 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispgenco6433182.dll
2013-12-25 19:00 - 2013-11-14 12:56 - 00707360 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvFBC64.dll
2013-12-25 19:00 - 2013-11-14 12:56 - 00657184 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFR64.dll
2013-12-25 19:00 - 2013-11-14 12:56 - 00609568 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvFBC.dll
2013-12-25 19:00 - 2013-11-14 12:56 - 00562464 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFR.dll
2013-12-25 19:00 - 2013-11-14 12:56 - 00023754 _____ C:\WINDOWS\system32\nvinfo.pb
2013-12-25 18:59 - 2013-12-25 18:59 - 00000000 ____D C:\NVIDIA
2013-12-25 18:04 - 2014-01-07 14:25 - 00000000 ___RD C:\Users\Benjamin\Google Drive
2013-12-22 07:41 - 2013-12-22 07:41 - 00000000 ____D C:\Users\Benjamin\Downloads\chrome-youtube-downloader-2.6.19
2013-12-17 17:32 - 2013-12-17 17:36 - 00003584 _____ C:\Users\Benjamin\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2013-12-12 19:42 - 2013-12-13 17:59 - 00000000 ____D C:\Program Files (x86)\Mozilla Thunderbird
2013-12-12 07:04 - 2013-12-12 07:04 - 913819726 _____ C:\WINDOWS\MEMORY.DMP
2013-12-08 16:52 - 2013-12-08 16:52 - 00001027 _____ C:\Users\Benjamin\Desktop\Adobe InDesign CS2.lnk
2013-12-08 16:50 - 2013-12-08 16:50 - 00000000 ____D C:\ID_CS2_GR_NonRet
2013-12-08 16:32 - 2013-12-08 16:32 - 00000000 ____D C:\Users\Benjamin\AppData\Roaming\Opera
2013-12-08 16:13 - 2004-08-17 02:40 - 00016384 _____ C:\WINDOWS\SysWOW64\FileOps.exe
2013-12-08 16:12 - 2013-12-08 16:12 - 00000000 ____D C:\AI_CS2_GR_NonRet
==================== One Month Modified Files and Folders =======
2014-01-07 23:21 - 2014-01-07 23:12 - 00019074 _____ C:\Users\Benjamin\Downloads\FRST.txt
2014-01-07 23:12 - 2014-01-07 23:12 - 00000000 ____D C:\FRST
2014-01-07 23:12 - 2013-10-10 18:43 - 00000000 ____D C:\Users\Benjamin\AppData\Roaming\Free Download Manager
2014-01-07 23:11 - 2014-01-07 23:11 - 01931762 _____ (Farbar) C:\Users\Benjamin\Downloads\FRST64.exe
2014-01-07 23:09 - 2014-01-07 23:09 - 00000000 _____ C:\Users\Benjamin\defogger_reenable
2014-01-07 23:09 - 2013-12-25 22:42 - 00000000 ____D C:\Users\Benjamin
2014-01-07 23:09 - 2013-10-10 18:43 - 00000000 ____D C:\Program Files (x86)\Free Download Manager
2014-01-07 23:08 - 2014-01-07 23:08 - 00050477 _____ C:\Users\Benjamin\Downloads\Defogger.exe
2014-01-07 23:06 - 2013-10-10 17:48 - 00001126 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2014-01-07 23:03 - 2013-10-10 17:46 - 00003598 _____ C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-2304771524-2765285173-2335640364-1001
2014-01-07 23:00 - 2014-01-07 22:58 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-01-07 23:00 - 2013-10-10 18:54 - 00000000 ____D C:\Users\Benjamin\AppData\Roaming\ClassicShell
2014-01-07 23:00 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\sru
2014-01-07 22:58 - 2014-01-07 22:58 - 00000000 ____D C:\Users\Benjamin\AppData\Roaming\Malwarebytes
2014-01-07 22:58 - 2014-01-07 22:58 - 00000000 ____D C:\ProgramData\Malwarebytes
2014-01-07 22:58 - 2014-01-07 22:55 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Benjamin\Downloads\mbam-setup-1.75.0.1300.exe
2014-01-07 22:58 - 2013-10-10 18:47 - 00000000 ___RD C:\Users\Benjamin\Desktop\Programme
2014-01-07 22:51 - 2014-01-07 16:28 - 00000000 ____D C:\Program Files\VideoLAN
2014-01-07 22:42 - 2013-11-08 18:19 - 00000000 ____D C:\Users\Benjamin\AppData\Roaming\Skype
2014-01-07 22:36 - 2014-01-07 22:13 - 00000000 ____D C:\Users\Benjamin\Desktop\Präsentation
2014-01-07 22:25 - 2014-01-06 07:57 - 00000000 ____D C:\Users\Benjamin\Desktop\Fabric meets Canvas - Tim und Friederike
2014-01-07 22:00 - 2013-12-25 22:39 - 01548628 _____ C:\WINDOWS\WindowsUpdate.log
2014-01-07 21:37 - 2014-01-04 08:25 - 00000000 ____D C:\Program Files (x86)\DevPro2
2014-01-07 16:32 - 2014-01-07 16:32 - 00009118 _____ C:\Users\Benjamin\Desktop\303839_3008616.mp4
2014-01-07 16:28 - 2014-01-07 16:28 - 00001196 _____ C:\Users\Benjamin\AppData\Roaming\Microsoft\Windows\Start Menu\Startfenster.lnk
2014-01-07 16:27 - 2014-01-07 16:27 - 24738792 _____ C:\Users\Benjamin\Downloads\vlc-2.1.2-win64.exe
2014-01-07 15:42 - 2013-10-23 16:30 - 00000000 ____D C:\Users\Benjamin\Desktop\s
2014-01-07 15:26 - 2014-01-07 15:26 - 00086591 _____ C:\Users\Benjamin\Downloads\wadsworth_industria.zip
2014-01-07 14:25 - 2013-12-25 18:04 - 00000000 ___RD C:\Users\Benjamin\Google Drive
2014-01-07 14:25 - 2013-10-10 17:49 - 00002195 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2014-01-07 14:25 - 2013-10-10 17:48 - 00001122 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2014-01-07 14:24 - 2013-10-10 19:27 - 00000000 ____D C:\Program Files (x86)\Steam
2014-01-07 01:56 - 2014-01-07 01:34 - 00000000 ____D C:\Users\Benjamin\AppData\Roaming\Little Inferno
2014-01-07 00:36 - 2013-10-10 20:38 - 00000000 ____D C:\Users\Benjamin\AppData\Roaming\Audacity
2014-01-06 21:22 - 2014-01-03 07:16 - 00000000 ____D C:\Users\Benjamin\Desktop\Layoutgestaltung
2014-01-06 10:27 - 2013-11-14 08:26 - 01776918 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2014-01-06 10:27 - 2013-11-14 08:11 - 00764340 _____ C:\WINDOWS\system32\perfh007.dat
2014-01-06 10:27 - 2013-11-14 08:11 - 00159160 _____ C:\WINDOWS\system32\perfc007.dat
2014-01-06 10:24 - 2013-08-22 15:46 - 00339139 _____ C:\WINDOWS\setupact.log
2014-01-06 08:44 - 2014-01-06 08:43 - 00000000 ____D C:\Users\Benjamin\Desktop\usb
2014-01-06 08:34 - 2014-01-04 14:42 - 00000000 ____D C:\Users\Benjamin\Downloads\PhotosBooth_Template_TipSquirrel
2014-01-06 04:18 - 2014-01-06 04:18 - 00009951 _____ C:\Users\Benjamin\Downloads\PhotosBooth_Template_TipSquirrel.zip
2014-01-06 04:15 - 2014-01-06 04:15 - 00009393 _____ C:\Users\Benjamin\Downloads\Photo Booth.atn
2014-01-05 21:40 - 2014-01-05 21:39 - 24513384 _____ C:\Users\Benjamin\Downloads\modern_geometric_triangle_photoshop_patterns_by_sdwhaven-d55gvnx.pat
2014-01-05 21:20 - 2014-01-05 20:05 - 00000000 ____D C:\Users\Benjamin\Downloads\PaintToolSAI
2014-01-05 20:46 - 2014-01-05 20:45 - 00223048 ____T C:\Users\Benjamin\Documents\uujujuj.oxps
2014-01-05 20:14 - 2014-01-05 20:12 - 00000000 ____D C:\ProgramData\Wacom
2014-01-05 20:13 - 2014-01-05 20:13 - 00000000 ____D C:\Users\Benjamin\AppData\Roaming\wacomid-desktop-launcher.DCFD4B89A63EE70BC162777F06D4B93B6397AEC7.1
2014-01-05 20:13 - 2013-10-10 17:39 - 00000000 ____D C:\Users\Benjamin\AppData\Roaming\Adobe
2014-01-05 20:12 - 2014-01-05 20:12 - 00001163 _____ C:\Users\Public\Desktop\Bamboo Dock.lnk
2014-01-05 20:12 - 2014-01-05 20:12 - 00000002 _____ C:\Users\Benjamin\.bdockinstall.log
2014-01-05 20:12 - 2014-01-05 20:12 - 00000000 ____D C:\Users\Default\AppData\Roaming\Macromedia
2014-01-05 20:12 - 2014-01-05 20:12 - 00000000 ____D C:\Users\Default User\AppData\Roaming\Macromedia
2014-01-05 20:12 - 2014-01-05 20:12 - 00000000 ____D C:\Users\Benjamin\AppData\Roaming\Wacom
2014-01-05 20:12 - 2014-01-05 20:12 - 00000000 ____D C:\Program Files (x86)\Bamboo Dock
2014-01-05 20:12 - 2013-10-10 22:08 - 00000000 ____D C:\Users\Benjamin\AppData\Local\Adobe
2014-01-05 20:12 - 2013-10-10 21:28 - 00000000 ____D C:\ProgramData\Adobe
2014-01-05 20:12 - 2013-10-10 21:28 - 00000000 ____D C:\Program Files (x86)\Adobe
2014-01-05 20:11 - 2014-01-05 20:11 - 00000000 ____D C:\Users\Benjamin\AppData\Roaming\WTablet
2014-01-05 20:11 - 2014-01-05 20:11 - 00000000 ____D C:\Program Files\TabletPlugins
2014-01-05 20:11 - 2014-01-05 20:11 - 00000000 ____D C:\Program Files\Tablet
2014-01-05 20:11 - 2014-01-05 20:11 - 00000000 ____D C:\Program Files (x86)\TabletPlugins
2014-01-05 20:10 - 2014-01-05 20:09 - 07434944 _____ C:\Users\Benjamin\Downloads\bamboo_setup_web0407final.exe
2014-01-05 20:05 - 2014-01-05 20:05 - 02339714 _____ C:\Users\Benjamin\Downloads\sai-1.1.0-ful-en.exe
2014-01-05 20:05 - 2014-01-05 20:05 - 00000802 _____ C:\Users\Public\Desktop\PaintTool SAI Ver.1.lnk
2014-01-05 20:05 - 2014-01-05 20:05 - 00000000 ____D C:\Users\Benjamin\AppData\Roaming\SYSTEMAX Software Development
2014-01-05 20:05 - 2014-01-05 20:05 - 00000000 ____D C:\ProgramData\SYSTEMAX Software Development
2014-01-05 16:45 - 2014-01-05 16:45 - 00020916 _____ C:\Users\Benjamin\Downloads\bebas_neue.zip
2014-01-05 13:41 - 2014-01-02 15:26 - 00000000 ____D C:\Users\Benjamin\Desktop\100CANON
2014-01-05 11:12 - 2014-01-05 11:12 - 00002039 _____ C:\Users\Public\Desktop\Adobe Reader XI.lnk
2014-01-04 12:21 - 2014-01-04 12:13 - 71502558 _____ C:\Users\Benjamin\Downloads\Introduction to Magazine layoutsmp4.mp4
2014-01-04 08:34 - 2014-01-04 08:34 - 00001405 _____ C:\Users\Benjamin\Desktop\DevPro.lnk
2014-01-04 08:25 - 2013-11-18 20:02 - 00000000 ____D C:\Program Files (x86)\DevPro
2014-01-04 08:18 - 2014-01-04 08:03 - 409196544 _____ C:\Users\Benjamin\Downloads\DevPro.7z
2014-01-04 08:15 - 2014-01-04 08:02 - 250952389 _____ (YGOPro DevPro Online ) C:\Users\Benjamin\Downloads\SetupDevPro1.9.8r4.exe
2014-01-03 16:34 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\NDF
2014-01-03 07:05 - 2013-10-10 21:14 - 00000000 ___RD C:\Users\Benjamin\Desktop\Spiele
2014-01-03 07:05 - 2013-10-10 20:09 - 00000000 ____D C:\Leilas Zimmer
2014-01-03 06:25 - 2013-12-25 22:39 - 00000000 ____D C:\ProgramData\NVIDIA
2014-01-03 06:25 - 2013-08-22 15:45 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2014-01-02 20:54 - 2013-10-15 03:35 - 00000000 ____D C:\Program Files (x86)\Origin
2013-12-29 20:18 - 2013-10-10 21:51 - 00000000 ____D C:\Users\Benjamin\Documents\My Games
2013-12-29 20:18 - 2013-10-10 21:51 - 00000000 ____D C:\Users\Benjamin\AppData\Roaming\NVIDIA
2013-12-29 18:41 - 2013-12-29 18:41 - 00001799 _____ C:\Users\Public\Desktop\Alice Madness Returns.lnk
2013-12-29 18:41 - 2013-10-11 18:41 - 00203390 _____ C:\WINDOWS\DirectX.log
2013-12-29 18:41 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\rescache
2013-12-29 16:34 - 2013-10-15 03:38 - 00000000 ____D C:\Program Files (x86)\Origin Games
2013-12-28 18:24 - 2013-12-28 18:24 - 00003002 _____ C:\Users\Benjamin\Downloads\Ferien_Niedersachsen_2013.ics
2013-12-28 18:23 - 2013-12-28 18:23 - 00003359 _____ C:\Users\Benjamin\Downloads\Ferien_Niedersachsen_2014.ics
2013-12-28 03:34 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\AppReadiness
2013-12-28 03:32 - 2013-12-28 03:32 - 00000000 ___RD C:\WINDOWS\BrowserChoice
2013-12-28 03:32 - 2013-10-10 17:38 - 00000000 ____D C:\Users\Benjamin\AppData\Local\Packages
2013-12-28 02:26 - 2013-12-28 02:26 - 00000000 ____D C:\Users\Benjamin\Downloads\unsortiert
2013-12-26 15:28 - 2013-12-26 15:17 - 00000000 ____D C:\Users\Benjamin\Documents\RCT3
2013-12-26 15:19 - 2013-10-10 17:39 - 00000000 ____D C:\Users\Benjamin\AppData\Local\VirtualStore
2013-12-26 15:17 - 2013-12-26 15:17 - 00000000 ____D C:\Users\Benjamin\AppData\Roaming\Atari
2013-12-26 14:59 - 2013-12-26 14:59 - 00461312 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnet.dll
2013-12-26 14:59 - 2013-12-26 14:59 - 00377856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnet.dll
2013-12-26 14:59 - 2013-12-26 14:59 - 00214016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dplayx.dll
2013-12-26 14:59 - 2013-12-26 14:59 - 00066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnathlp.dll
2013-12-26 14:59 - 2013-12-26 14:59 - 00059904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnathlp.dll
2013-12-26 14:59 - 2013-12-26 14:59 - 00045056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpwsockx.dll
2013-12-26 14:59 - 2013-12-26 14:59 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnsvr.exe
2013-12-26 14:59 - 2013-12-26 14:59 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnsvr.exe
2013-12-26 14:59 - 2013-12-26 14:59 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dplaysvr.exe
2013-12-26 14:59 - 2013-12-26 14:59 - 00023552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpmodemx.dll
2013-12-26 14:59 - 2013-12-26 14:59 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnhupnp.dll
2013-12-26 14:59 - 2013-12-26 14:59 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnhpast.dll
2013-12-26 14:59 - 2013-12-26 14:59 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnhupnp.dll
2013-12-26 14:59 - 2013-12-26 14:59 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnhpast.dll
2013-12-26 14:53 - 2013-12-26 14:53 - 00000000 ____D C:\GOG Games
2013-12-26 13:28 - 2013-12-26 13:28 - 00000000 ____D C:\ProgramData\ClassicShell
2013-12-26 13:28 - 2013-12-26 13:28 - 00000000 ____D C:\Program Files\Classic Shell
2013-12-26 13:26 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\restore
2013-12-25 23:59 - 2013-08-22 14:25 - 00262144 ___SH C:\WINDOWS\system32\config\BBI
2013-12-25 23:00 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\Registration
2013-12-25 22:58 - 2013-12-25 22:58 - 00001454 _____ C:\Users\Benjamin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2013-12-25 22:58 - 2013-12-25 22:36 - 00000000 ___DC C:\WINDOWS\Panther
2013-12-25 22:58 - 2013-10-10 17:39 - 00000000 ___RD C:\Users\Benjamin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-12-25 22:58 - 2013-10-10 17:39 - 00000000 ___RD C:\Users\Benjamin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2013-12-25 22:57 - 2013-12-25 22:57 - 00000020 ___SH C:\Users\Benjamin\ntuser.ini
2013-12-25 22:54 - 2013-12-25 22:54 - 00022960 _____ C:\WINDOWS\system32\emptyregdb.dat
2013-12-25 22:54 - 2013-12-25 22:54 - 00000000 _SHDL C:\Users\Default\Vorlagen
2013-12-25 22:54 - 2013-12-25 22:54 - 00000000 _SHDL C:\Users\Default\Startmenü
2013-12-25 22:54 - 2013-12-25 22:54 - 00000000 _SHDL C:\Users\Default\Netzwerkumgebung
2013-12-25 22:54 - 2013-12-25 22:54 - 00000000 _SHDL C:\Users\Default\Lokale Einstellungen
2013-12-25 22:54 - 2013-12-25 22:54 - 00000000 _SHDL C:\Users\Default\Eigene Dateien
2013-12-25 22:54 - 2013-12-25 22:54 - 00000000 _SHDL C:\Users\Default\Druckumgebung
2013-12-25 22:54 - 2013-12-25 22:54 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Musik
2013-12-25 22:54 - 2013-12-25 22:54 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Bilder
2013-12-25 22:54 - 2013-12-25 22:54 - 00000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2013-12-25 22:54 - 2013-12-25 22:54 - 00000000 _SHDL C:\Users\Default\AppData\Local\Verlauf
2013-12-25 22:54 - 2013-12-25 22:54 - 00000000 _SHDL C:\Users\Default\AppData\Local\Anwendungsdaten
2013-12-25 22:54 - 2013-12-25 22:54 - 00000000 _SHDL C:\Users\Default\Anwendungsdaten
2013-12-25 22:54 - 2013-12-25 22:54 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Musik
2013-12-25 22:54 - 2013-12-25 22:54 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Bilder
2013-12-25 22:54 - 2013-12-25 22:54 - 00000000 _SHDL C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2013-12-25 22:54 - 2013-12-25 22:54 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Verlauf
2013-12-25 22:54 - 2013-12-25 22:54 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Anwendungsdaten
2013-12-25 22:54 - 2013-12-25 22:42 - 00028578 _____ C:\WINDOWS\diagwrn.xml
2013-12-25 22:54 - 2013-12-25 22:42 - 00028578 _____ C:\WINDOWS\diagerr.xml
2013-12-25 22:54 - 2013-12-25 22:11 - 00006665 _____ C:\WINDOWS\comsetup.log
2013-12-25 22:54 - 2013-08-22 16:36 - 00000000 ____D C:\Program Files\Windows NT
2013-12-25 22:54 - 2013-08-22 14:36 - 00000000 __RHD C:\Users\Default
2013-12-25 22:51 - 2013-08-22 16:36 - 00000000 __RSD C:\WINDOWS\Media
2013-12-25 22:51 - 2013-08-22 16:36 - 00000000 __RHD C:\Users\Public\Libraries
2013-12-25 22:49 - 2013-12-25 22:49 - 00000020 ___SH C:\Users\UpdatusUser\ntuser.ini
2013-12-25 22:48 - 2013-08-22 15:44 - 00370144 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2013-12-25 22:47 - 2013-11-10 21:59 - 00000000 ____D C:\Program Files\Common Files\logishrd
2013-12-25 22:47 - 2013-11-10 19:47 - 00000000 ____D C:\Users\Benjamin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Life Quest 2 - Metropoville
2013-12-25 22:47 - 2013-11-02 10:26 - 00000000 ____D C:\Users\Benjamin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\IMVU
2013-12-25 22:47 - 2013-10-11 01:30 - 00000000 ____D C:\Users\Benjamin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2013-12-25 22:47 - 2013-10-10 21:43 - 00000000 ____D C:\Users\Benjamin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Audition Online
2013-12-25 22:47 - 2013-10-10 21:12 - 00000000 ____D C:\Users\Benjamin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2013-12-25 22:47 - 2013-10-10 20:19 - 00000000 ____D C:\Users\Benjamin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Winamp Erkennungs-Plug-in
2013-12-25 22:47 - 2013-08-22 14:25 - 00008192 ___SH C:\WINDOWS\system32\config\ELAM
2013-12-25 22:46 - 2013-08-22 16:37 - 00004893 _____ C:\WINDOWS\DtcInstall.log
2013-12-25 22:46 - 2012-07-26 06:37 - 00000000 ____D C:\Users\Default.migrated
2013-12-25 22:45 - 2013-12-04 23:15 - 00000000 ____D C:\WINDOWS\SysWOW64\Adobe
2013-12-25 22:45 - 2013-11-14 08:11 - 00000000 ____D C:\WINDOWS\SysWOW64\WCN
2013-12-25 22:45 - 2013-11-14 08:11 - 00000000 ____D C:\WINDOWS\SysWOW64\sysprep
2013-12-25 22:45 - 2013-11-14 08:11 - 00000000 ____D C:\WINDOWS\system32\WCN
2013-12-25 22:45 - 2013-11-10 22:07 - 00000000 __SHD C:\WINDOWS\SysWOW64\AI_RecycleBin
2013-12-25 22:45 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\SysWOW64\MUI
2013-12-25 22:45 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\SysWOW64\migwiz
2013-12-25 22:45 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\SysWOW64\IME
2013-12-25 22:45 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2013-12-25 22:45 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\spool
2013-12-25 22:45 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\MUI
2013-12-25 22:45 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\IME
2013-12-25 22:45 - 2013-08-22 14:36 - 00000000 ____D C:\WINDOWS\SysWOW64\SMI
2013-12-25 22:44 - 2013-12-25 22:38 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2013-12-25 22:44 - 2013-12-25 22:38 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2013-12-25 22:44 - 2013-10-10 17:38 - 00000000 ____D C:\ProgramData\PRICache
2013-12-25 22:44 - 2013-08-22 16:43 - 00000000 ____D C:\WINDOWS\DigitalLocker
2013-12-25 22:44 - 2013-08-22 16:36 - 00000000 __SHD C:\Program Files\Windows Sidebar
2013-12-25 22:44 - 2013-08-22 16:36 - 00000000 __SHD C:\Program Files (x86)\Windows Sidebar
2013-12-25 22:44 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\IME
2013-12-25 22:44 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\Help
2013-12-25 22:44 - 2013-08-22 16:36 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
2013-12-25 22:43 - 2013-12-25 22:43 - 00000000 ____D C:\WINDOWS\system32\config\bbimigrate
2013-12-25 22:43 - 2013-12-25 22:42 - 00000000 ___RD C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2013-12-25 22:43 - 2013-12-25 22:42 - 00000000 ___RD C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2013-12-25 22:43 - 2013-12-25 22:42 - 00000000 ___RD C:\Users\Benjamin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2013-12-25 22:43 - 2013-10-27 00:34 - 00000000 ____D C:\Users\Benjamin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Talk
2013-12-25 22:43 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\Recovery
2013-12-25 22:42 - 2013-12-25 22:42 - 00000000 _SHDL C:\Users\UpdatusUser\Vorlagen
2013-12-25 22:42 - 2013-12-25 22:42 - 00000000 _SHDL C:\Users\UpdatusUser\Startmenü
2013-12-25 22:42 - 2013-12-25 22:42 - 00000000 _SHDL C:\Users\UpdatusUser\Netzwerkumgebung
2013-12-25 22:42 - 2013-12-25 22:42 - 00000000 _SHDL C:\Users\UpdatusUser\Lokale Einstellungen
2013-12-25 22:42 - 2013-12-25 22:42 - 00000000 _SHDL C:\Users\UpdatusUser\Eigene Dateien
2013-12-25 22:42 - 2013-12-25 22:42 - 00000000 _SHDL C:\Users\UpdatusUser\Druckumgebung
2013-12-25 22:42 - 2013-12-25 22:42 - 00000000 _SHDL C:\Users\UpdatusUser\Documents\Eigene Musik
2013-12-25 22:42 - 2013-12-25 22:42 - 00000000 _SHDL C:\Users\UpdatusUser\Documents\Eigene Bilder
2013-12-25 22:42 - 2013-12-25 22:42 - 00000000 _SHDL C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2013-12-25 22:42 - 2013-12-25 22:42 - 00000000 _SHDL C:\Users\UpdatusUser\AppData\Local\Verlauf
2013-12-25 22:42 - 2013-12-25 22:42 - 00000000 _SHDL C:\Users\UpdatusUser\AppData\Local\Anwendungsdaten
2013-12-25 22:42 - 2013-12-25 22:42 - 00000000 _SHDL C:\Users\UpdatusUser\Anwendungsdaten
2013-12-25 22:42 - 2013-12-25 22:42 - 00000000 _SHDL C:\Users\Benjamin\Vorlagen
2013-12-25 22:42 - 2013-12-25 22:42 - 00000000 _SHDL C:\Users\Benjamin\Startmenü
2013-12-25 22:42 - 2013-12-25 22:42 - 00000000 _SHDL C:\Users\Benjamin\Netzwerkumgebung
2013-12-25 22:42 - 2013-12-25 22:42 - 00000000 _SHDL C:\Users\Benjamin\Lokale Einstellungen
2013-12-25 22:42 - 2013-12-25 22:42 - 00000000 _SHDL C:\Users\Benjamin\Eigene Dateien
2013-12-25 22:42 - 2013-12-25 22:42 - 00000000 _SHDL C:\Users\Benjamin\Druckumgebung
2013-12-25 22:42 - 2013-12-25 22:42 - 00000000 _SHDL C:\Users\Benjamin\Documents\Eigene Musik
2013-12-25 22:42 - 2013-12-25 22:42 - 00000000 _SHDL C:\Users\Benjamin\Documents\Eigene Bilder
2013-12-25 22:42 - 2013-12-25 22:42 - 00000000 _SHDL C:\Users\Benjamin\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2013-12-25 22:42 - 2013-12-25 22:42 - 00000000 _SHDL C:\Users\Benjamin\AppData\Local\Verlauf
2013-12-25 22:42 - 2013-12-25 22:42 - 00000000 _SHDL C:\Users\Benjamin\AppData\Local\Anwendungsdaten
2013-12-25 22:42 - 2013-12-25 22:42 - 00000000 _SHDL C:\Users\Benjamin\Anwendungsdaten
2013-12-25 22:40 - 2013-08-22 14:36 - 00000000 ____D C:\WINDOWS\system32\Sysprep
2013-12-25 22:40 - 2008-01-01 01:58 - 00000000 __SHD C:\Recovery
2013-12-25 22:38 - 2013-12-25 22:38 - 00000000 ____D C:\WINDOWS\SysWOW64\RTCOM
2013-12-25 22:38 - 2013-12-25 22:38 - 00000000 ____D C:\Program Files\Realtek
2013-12-25 22:37 - 2013-11-13 23:18 - 00000812 _____ C:\WINDOWS\PFRO.log
2013-12-25 22:36 - 2013-12-25 22:36 - 00393216 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMPhoto.dll
2013-12-25 22:36 - 2013-12-25 22:36 - 00348160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMPhoto.dll
2013-12-25 22:36 - 2013-12-25 22:36 - 00197120 _____ (Microsoft Corporation) C:\WINDOWS\system32\scrrun.dll
2013-12-25 22:36 - 2013-12-25 22:36 - 00156672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\scrrun.dll
2013-12-25 22:36 - 2013-12-25 22:36 - 00075360 _____ (Microsoft Corporation) C:\WINDOWS\system32\imagehlp.dll
2013-12-25 22:36 - 2013-12-25 22:36 - 00070680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\imagehlp.dll
2013-12-25 22:36 - 2013-08-22 16:36 - 00262144 _____ C:\WINDOWS\system32\config\BCD-Template
2013-12-25 22:35 - 2013-12-25 22:35 - 23183360 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 17112576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 13177344 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 12996608 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 11674624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 11221504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 07399256 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2013-12-25 22:35 - 2013-12-25 22:35 - 05769216 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 04243968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 04191744 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2013-12-25 22:35 - 2013-12-25 22:35 - 04105728 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncEngine.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 02896896 _____ (Microsoft Corporation) C:\WINDOWS\system32\msftedit.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 02764288 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 02570240 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 02334208 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 02266624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msftedit.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 02166784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 02143744 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 02140888 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 01995264 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2013-12-25 22:35 - 2013-12-25 22:35 - 01928192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2013-12-25 22:35 - 2013-12-25 22:35 - 01843712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Display.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 01820160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 01816576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Display.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 01765384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 01765376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 01756160 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMPDMC.exe
2013-12-25 22:35 - 2013-12-25 22:35 - 01642016 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2013-12-25 22:35 - 2013-12-25 22:35 - 01530200 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2013-12-25 22:35 - 2013-12-25 22:35 - 01506680 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe
2013-12-25 22:35 - 2013-12-25 22:35 - 01476184 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2013-12-25 22:35 - 2013-12-25 22:35 - 01395200 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 01391104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMPDMC.exe
2013-12-25 22:35 - 2013-12-25 22:35 - 01345536 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe
2013-12-25 22:35 - 2013-12-25 22:35 - 01302528 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 01157632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 00922624 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 00840704 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSShared.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 00817664 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 00747008 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidcli.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 00744448 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncCore.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 00703488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 00701440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSShared.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 00637952 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncHost.exe
2013-12-25 22:35 - 2013-12-25 22:35 - 00615936 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDMAgent.exe
2013-12-25 22:35 - 2013-12-25 22:35 - 00584192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncCore.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 00568832 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDrive.exe
2013-12-25 22:35 - 2013-12-25 22:35 - 00566784 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpncore.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 00544768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlidcli.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 00516496 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 00479744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncHost.exe
2013-12-25 22:35 - 2013-12-25 22:35 - 00449024 _____ (Microsoft Corporation) C:\WINDOWS\system32\appmgr.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 00406400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxgi.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 00382808 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2013-12-25 22:35 - 2013-12-25 22:35 - 00372568 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\spaceport.sys
2013-12-25 22:35 - 2013-12-25 22:35 - 00366080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\appmgr.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 00358896 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcomp.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 00325464 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBXHCI.SYS
2013-12-25 22:35 - 2013-12-25 22:35 - 00287744 _____ (Microsoft Corporation) C:\WINDOWS\system32\mdmregistration.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 00254464 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 00249856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 00240128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mdmregistration.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 00225792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dcomp.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 00218624 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2013-12-25 22:35 - 2013-12-25 22:35 - 00198656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppXDeploymentClient.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 00189952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 00146776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\SerCx2.sys
2013-12-25 22:35 - 2013-12-25 22:35 - 00115712 _____ (Microsoft Corporation) C:\WINDOWS\system32\winbici.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 00086872 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pdc.sys
2013-12-25 22:35 - 2013-12-25 22:35 - 00039768 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\intelpep.sys
2013-12-25 22:35 - 2013-12-25 22:35 - 00030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\CredentialMigrationHandler.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CredentialMigrationHandler.dll
2013-12-25 22:35 - 2013-08-22 16:36 - 00000000 ___RD C:\WINDOWS\ToastData
2013-12-25 22:35 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\WinStore
2013-12-25 22:35 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\MediaViewer
2013-12-25 22:35 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\FileManager
2013-12-25 22:35 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\Camera
2013-12-25 22:34 - 2013-12-25 22:34 - 00262144 _____ C:\WINDOWS\system32\config\userdiff
2013-12-25 22:33 - 2013-12-25 22:33 - 00000000 ____D C:\WINDOWS\SysWOW64\XPSViewer
2013-12-25 22:33 - 2013-12-25 22:33 - 00000000 ____D C:\Program Files\Reference Assemblies
2013-12-25 22:33 - 2013-12-25 22:33 - 00000000 ____D C:\Program Files\MSBuild
2013-12-25 22:33 - 2013-12-25 22:33 - 00000000 ____D C:\Program Files (x86)\Reference Assemblies
2013-12-25 22:33 - 2013-12-25 22:33 - 00000000 ____D C:\Program Files (x86)\MSBuild
2013-12-25 22:27 - 2012-07-26 02:36 - 01817671 _____ C:\WINDOWS\WindowsUpdate (1).log
2013-12-25 22:03 - 2013-11-10 21:59 - 00008726 _____ C:\WINDOWS\system32\lvcoinst.log
2013-12-25 21:47 - 2012-07-26 09:12 - 00000000 ____D C:\WINDOWS\AUInstallAgent
2013-12-25 19:05 - 2013-12-25 19:05 - 00000000 ____D C:\Users\Benjamin\AppData\Local\NVIDIA
2013-12-25 19:03 - 2013-12-25 19:03 - 00000000 ____D C:\Program Files (x86)\AGEIA Technologies
2013-12-25 19:03 - 2013-10-10 17:47 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2013-12-25 18:59 - 2013-12-25 18:59 - 00000000 ____D C:\NVIDIA
2013-12-25 18:02 - 2013-10-10 17:48 - 00000000 ____D C:\Users\Benjamin\AppData\Local\Google
2013-12-25 18:02 - 2013-10-10 17:48 - 00000000 ____D C:\Program Files (x86)\Google
2013-12-25 14:17 - 2013-11-22 18:39 - 00000000 ____D C:\Users\Benjamin\AppData\Roaming\.technic
2013-12-23 13:31 - 2013-10-10 21:31 - 00000000 ____D C:\Users\Benjamin\AppData\Roaming\IrfanView
2013-12-22 07:41 - 2013-12-22 07:41 - 00000000 ____D C:\Users\Benjamin\Downloads\chrome-youtube-downloader-2.6.19
2013-12-19 04:07 - 2013-10-11 15:05 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-12-18 10:09 - 2013-10-10 21:23 - 00084720 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avnetflt.sys
2013-12-18 10:09 - 2013-10-10 21:19 - 00131576 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avipbb.sys
2013-12-18 10:09 - 2013-10-10 21:19 - 00108440 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avgntflt.sys
2013-12-17 17:36 - 2013-12-17 17:32 - 00003584 _____ C:\Users\Benjamin\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2013-12-16 17:17 - 2014-01-05 20:11 - 01913624 _____ (Wacom Technology, Corp.) C:\WINDOWS\system32\Pen_Tablet.dll
2013-12-16 17:17 - 2014-01-05 20:11 - 01906968 _____ (Wacom Technology, Corp.) C:\WINDOWS\system32\Pen_Touch_Tablet.dll
2013-12-16 17:17 - 2014-01-05 20:11 - 01780504 _____ (Wacom Technology, Corp.) C:\WINDOWS\system32\WacomMT.dll
2013-12-16 17:17 - 2014-01-05 20:11 - 01778968 _____ (Wacom Technology, Corp.) C:\WINDOWS\system32\Wintab32.dll
2013-12-16 17:17 - 2014-01-05 20:11 - 01551640 _____ (Wacom Technology, Corp.) C:\WINDOWS\SysWOW64\Pen_Tablet.dll
2013-12-16 17:17 - 2014-01-05 20:11 - 01544472 _____ (Wacom Technology, Corp.) C:\WINDOWS\SysWOW64\Pen_Touch_Tablet.dll
2013-12-16 17:17 - 2014-01-05 20:11 - 01432344 _____ (Wacom Technology, Corp.) C:\WINDOWS\SysWOW64\WacomMT.dll
2013-12-16 17:17 - 2014-01-05 20:11 - 01428248 _____ (Wacom Technology, Corp.) C:\WINDOWS\SysWOW64\Wintab32.dll
2013-12-14 19:19 - 2013-10-10 18:42 - 00000000 ____D C:\WINDOWS\system32\MRT
2013-12-14 03:49 - 2013-10-10 18:42 - 90708896 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2013-12-13 17:59 - 2013-12-12 19:42 - 00000000 ____D C:\Program Files (x86)\Mozilla Thunderbird
2013-12-12 07:04 - 2013-12-12 07:04 - 913819726 _____ C:\WINDOWS\MEMORY.DMP
2013-12-08 16:52 - 2013-12-08 16:52 - 00001027 _____ C:\Users\Benjamin\Desktop\Adobe InDesign CS2.lnk
2013-12-08 16:50 - 2013-12-08 16:50 - 00000000 ____D C:\ID_CS2_GR_NonRet
2013-12-08 16:32 - 2013-12-08 16:32 - 00000000 ____D C:\Users\Benjamin\AppData\Roaming\Opera
2013-12-08 16:12 - 2013-12-08 16:12 - 00000000 ____D C:\AI_CS2_GR_NonRet
2013-12-08 07:01 - 2013-10-10 17:48 - 00004098 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2013-12-08 07:01 - 2013-10-10 17:48 - 00003862 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
Some content of TEMP:
====================
C:\Users\Benjamin\AppData\Local\Temp\avgnt.exe
C:\Users\Benjamin\AppData\Local\Temp\DevPro CardManager.exe
C:\Users\Benjamin\AppData\Local\Temp\devpro.dll
C:\Users\Benjamin\AppData\Local\Temp\DevPro.exe
C:\Users\Benjamin\AppData\Local\Temp\ICSharpCode.SharpZipLib.dll
C:\Users\Benjamin\AppData\Local\Temp\PrefJsonCpp.exe
C:\Users\Benjamin\AppData\Local\Temp\sqlite3.exe
C:\Users\Benjamin\AppData\Local\Temp\YgoUpdater.exe
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2014-01-04 08:59
==================== End Of Log ============================
--- --- --- Addition.txt Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 05-01-2014
Ran by Doktor at 2014-01-07 23:23:12
Running from C:\Users\Benjamin\Downloads
Boot Mode: Normal
==========================================================
==================== Security Center ========================
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: Avira Desktop (Enabled - Up to date) {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}
AS: Avira Desktop (Enabled - Up to date) {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installed Programs ======================
@BIOS (x32 Version: 2.30 - GIGABYTE)
Adobe AIR (x32 Version: 2.6.0.19140 - Adobe Systems Incorporated)
Adobe AIR (x32 Version: 2.6.0.19140 - Adobe Systems Incorporated) Hidden
Adobe Bridge 1.0 (x32 Version: 001.000.001 - Adobe Systems) Hidden
Adobe Common File Installer (x32 Version: 1.00.001 - Adobe System Incorporated) Hidden
Adobe Flash Player 11 Plugin (x32 Version: 11.9.900.152 - Adobe Systems Incorporated)
Adobe Help Center 1.0 (x32 Version: 1.0.1 - Adobe Systems) Hidden
Adobe Illustrator CS2 (x32 Version: 12.000.000 - Adobe Systems Inc.)
Adobe Illustrator CS2 (x32 Version: 12.000.000 - Adobe Systems Inc.) Hidden
Adobe InDesign CS2 (x32 Version: 004.000.000 - Adobe Systems Incorporated)
Adobe InDesign CS2 (x32 Version: 004.000.000 - Adobe Systems Incorporated) Hidden
Adobe Photoshop CS2 (x32 Version: 9.0 - Adobe Systems, Inc.)
Adobe Photoshop CS2 (x32 Version: 9.0 - Adobe Systems, Inc.) Hidden
Adobe Reader XI (11.0.05) - Deutsch (x32 Version: 11.0.05 - Adobe Systems Incorporated)
Adobe Shockwave Player 12.0 (x32 Version: 12.0.6.147 - Adobe Systems, Inc.)
Adobe Stock Photos 1.0 (x32 Version: 1.0.1 - Adobe Systems) Hidden
Adobe SVG Viewer 3.0 (x32 Version: 3.0 - Adobe Systems, Inc.)
Alice: Madness Returns™ (x32 Version: 1.0.0.0 - Electronic Arts)
Audacity 2.0.4 (x32 Version: 2.0.4 - Audacity Team)
Audition Online (x32 Version: 1.2.6064 - Burda:ic)
Avira Free Antivirus (x32 Version: 14.0.2.286 - Avira)
Bamboo Dock (x32 Version: 4.1 - Wacom Co., Ltd.)
Bamboo Dock (x32 Version: 4.1.0 - Wacom Europe GmbH) Hidden
Big Fish: Game Manager (x32 Version: 3.2.0.7 - )
Classic Shell (Version: 4.0.2 - IvoSoft)
Cook, Serve, Delicious! (x32 Version: - )
Cook, Serve, Delicious! Extra Crispy Edition (HKCU Version: - )
Counter-Strike: Global Offensive (x32 Version: - Valve)
Creation Kit (x32 Version: - bgs.bethsoft.com)
Crusader Kings Complete (x32 Version: - Paradox Development Studio)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Die*Sims™*3 (x32 Version: 1.0.631 - Electronic Arts)
Dragon Age II (x32 Version: 1.04 - Electronic Arts, Inc.)
Dragon Age™ II (x32 Version: 1.04.8524.0 - Electronic Arts)
Drakensang (x32 Version: - dtp)
Easy Tune 6 B13.0323.1 (x32 Version: 1.00.0000 - GIGABYTE)
Easy Tune 6 B13.0323.1 (x32 Version: 1.00.0000 - GIGABYTE) Hidden
Free Download Manager 3.9.3 (x32 Version: - FreeDownloadManager.ORG)
Free Music Zilla (x32 Version: - FreeMusicZilla.com)
FTL version 1.03.1 (x32 Version: 1.03.1 - Subset Games)
Garry's Mod (x32 Version: - Facepunch Studios)
GeForce Experience NvStream Client Components (Version: 1.6.28 - NVIDIA Corporation) Hidden
Gemini Rue (x32 Version: - Joshua Neurnberger)
Google Chrome (x32 Version: 31.0.1650.63 - Google Inc.)
Google Drive (x32 Version: 1.13.5782.599 - Google, Inc.)
Google Talk (remove only) (x32 Version: - )
Google Update Helper (x32 Version: 1.3.22.3 - Google Inc.) Hidden
Hammerwatch (x32 Version: - )
IMVU Avatar Chat Software (HKCU Version: - )
IrfanView (remove only) (x32 Version: 4.36 - Irfan Skiljan)
Java 7 Update 45 (64-bit) (Version: 7.0.450 - Oracle)
Java 7 Update 45 (x32 Version: 7.0.450 - Oracle)
Java Auto Updater (x32 Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden
Journey of a Roach (x32 Version: 1.0 - Daedalic Entertainment)
Junk Mail filter update (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
KeyMan V4.0 Build 6 (x32 Version: 4.0.0.6 - ZF Friedrichshafen AG)
Knights and Merchants Historical Version (x32 Version: - Topware Interactive)
LAME v3.99.3 (for Windows) (x32 Version: - )
Legend of Grimrock (x32 Version: - Almost Human Games)
Life Quest® 2: Metropoville (x32 Version: - )
Little Inferno (x32 Version: - Tomorrow Corporation)
Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden
Microsoft Silverlight (x32 Version: 5.1.20913.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.50727.42 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219 - Microsoft Corporation)
Microsoft WSE 3.0 Runtime (x32 Version: 3.0.5305.0 - Microsoft Corp.)
Microsoft XNA Framework Redistributable 4.0 Refresh (x32 Version: 4.0.30901.0 - Microsoft Corporation)
ModifyRegistry version 0.1 (x32 Version: 0.1 - VIA Technologies, Inc.)
Mozilla Firefox 25.0.1 (x86 de) (x32 Version: 25.0.1 - Mozilla)
Mozilla Maintenance Service (x32 Version: 24.2.0 - Mozilla)
Mozilla Thunderbird 24.2.0 (x86 de) (x32 Version: 24.2.0 - Mozilla)
MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSVCRT_amd64 (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSVCRT110 (x32 Version: 16.4.1108.0727 - Microsoft) Hidden
MSVCRT110_amd64 (Version: 16.4.1109.0912 - Microsoft) Hidden
Nexus Mod Manager (Version: 0.45.6 - Black Tree Gaming)
NVIDIA 3D Vision Controller-Treiber 331.82 (Version: 331.82 - NVIDIA Corporation)
NVIDIA 3D Vision Treiber 331.82 (Version: 331.82 - NVIDIA Corporation)
NVIDIA GeForce Experience 1.7.1 (Version: 1.7.1 - NVIDIA Corporation)
NVIDIA Grafiktreiber 331.82 (Version: 331.82 - NVIDIA Corporation)
NVIDIA Install Application (Version: 2.1002.133.889 - NVIDIA Corporation) Hidden
NVIDIA LED Visualizer 1.0 (Version: 1.0 - NVIDIA Corporation) Hidden
NVIDIA PhysX (x32 Version: 9.13.0725 - NVIDIA Corporation) Hidden
NVIDIA PhysX-Systemsoftware 9.13.0725 (Version: 9.13.0725 - NVIDIA Corporation)
NVIDIA ShadowPlay 9.3.21 (Version: 9.3.21 - NVIDIA Corporation) Hidden
NVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.13.3182 - NVIDIA Corporation) Hidden
NVIDIA Systemsteuerung 331.82 (Version: 331.82 - NVIDIA Corporation) Hidden
NVIDIA Update 9.3.21 (Version: 9.3.21 - NVIDIA Corporation) Hidden
NVIDIA Update Components (Version: 9.3.21 - NVIDIA Corporation) Hidden
NVIDIA Virtual Audio 1.2.9 (Version: 1.2.9 - NVIDIA Corporation)
ON_OFF Charge B12.1025.1 (x32 Version: 1.00.0001 - GIGABYTE)
OpenAL (x32 Version: - )
OpenOffice 4.0.0 (x32 Version: 4.00.9702 - Apache Software Foundation)
Opera Stable 17.0.1241.53 (x32 Version: 17.0.1241.53 - Opera Software ASA)
Origin (x32 Version: 9.3.7.2735 - Electronic Arts, Inc.)
PaintTool SAI Ver.1 (x32 Version: - )
PCSX2 - Playstation 2 Emulator (x32 Version: - )
Platform (x32 Version: 1.40 - VIA Technologies, Inc.) Hidden
Portal 2 (x32 Version: - Valve)
Realtek Ethernet Controller Driver (x32 Version: 8.2.612.2012 - Realtek)
Realtek High Definition Audio Driver (x32 Version: 6.0.1.6767 - Realtek Semiconductor Corp.)
RollerCoaster Tycoon 3: Platinum! (x32 Version: - Frontier)
Scribblenauts Unlimited (x32 Version: - 5th Cell Media)
SHIELD Streaming (Version: 1.6.53 - NVIDIA Corporation) Hidden
Skype™ 6.11 (x32 Version: 6.11.102 - Skype Technologies S.A.)
Stacking (x32 Version: - Double Fine Productions)
Starbound (x32 Version: - )
StarTopia (x32 Version: 2.0.0.17 - GOG.com)
Steam (x32 Version: 1.0.0.0 - Valve Corporation)
Superfrog HD (x32 Version: - Team17 Digital Ltd.)
swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
System Requirements Lab CYRI (x32 Version: 6.0.7.0 - Husdawg, LLC)
The Elder Scrolls V Skyrim Dragonborn (c) Bethesda Softworks version 1 (x32 Version: 1 - )
The Elder Scrolls V: Skyrim (x32 Version: - Bethesda Game Studios)
The Witcher 2: Assassins of Kings Enhanced Edition (x32 Version: - CD Projekt RED)
VIA Plattform-Geräte-Manager (x32 Version: 1.40 - VIA Technologies, Inc.)
VirtualCloneDrive (x32 Version: 5.4.7.0 - Elaborate Bytes)
Wacom (Version: 5.3.3-2 - Wacom Technology Corp.)
WebTablet FB Plugin 32 bit (x32 Version: 2.1.0.3 - Wacom Technology Corp.)
WebTablet FB Plugin 64 bit (Version: 2.1.0.3 - Wacom Technology Corp.)
Winamp (x32 Version: 5.65 - Nullsoft, Inc)
Winamp Erkennungs-Plug-in (HKCU Version: 1.0.0.1 - Nullsoft, Inc)
Windows Live Communications Platform (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live Essentials (x32 Version: 16.4.3505.0912 - Microsoft Corporation)
Windows Live Essentials (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live Installer (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live Mail (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live MIME IFilter (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live Photo Common (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live PIMT Platform (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live SOXE (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live SOXE Definitions (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live UX Platform (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live UX Platform Language Pack (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live Writer (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows Live Writer Resources (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Windows8FirewallControl (x64) 6.1.8.51 (Version: 6.1.8.51 - Sphinx Software)
WinRAR 5.00 (64-bit) (Version: 5.00.0 - win.rar GmbH)
Worms Armageddon (x32 Version: - Team17 Digital Ltd.)
Worms Revolution (x32 Version: - Team17 Digital Ltd.)
Worms Ultimate Mayhem (x32 Version: - Team17 Software Ltd.)
XSplit Broadcaster (x32 Version: 1.3.1310.1103 - SplitMediaLabs)
YGOPro DevPro Version 1.9.8 r4 (x32 Version: 1.9.8 r4 - YGOPro DevPro Online)
==================== Restore Points =========================
26-12-2013 12:26:31 Installed Classic Shell
29-12-2013 17:40:22 DirectX wurde installiert
06-01-2014 07:41:47 Geplanter Prüfpunkt
==================== Hosts content: ==========================
2013-08-22 14:25 - 2013-08-22 14:25 - 00000824 ____A C:\WINDOWS\system32\Drivers\etc\hosts
==================== Scheduled Tasks (whitelisted) =============
Task: {05293577-D647-4185-B859-C94839A0B2E3} - System32\Tasks\Microsoft\Windows\SettingSync\NetworkStateChangeTask
Task: {0B545118-B563-42FC-8D07-B78F602FCF34} - System32\Tasks\Microsoft\Windows\WS\WSRefreshBannedAppsListTask => Rundll32.exe WSClient.dll,RefreshBannedAppsList
Task: {2085BF56-520D-4951-B7C0-DF34AF90CC6A} - System32\Tasks\Microsoft\Windows\Sysmain\WsSwapAssessmentTask => Rundll32.exe sysmain.dll,PfSvWsSwapAssessmentTask
Task: {2C9C0C6C-2A74-46F2-858A-4389D253EAD0} - System32\Tasks\Microsoft\Windows\Sysmain\HybridDriveCachePrepopulate
Task: {352E6CA0-7314-4DF4-89C4-682368D80D57} - System32\Tasks\Microsoft\Windows\Workplace Join\Automatic-Workplace-Join => C:\Windows\System32\AutoWorkplace.exe [2013-08-22] (Microsoft Corporation)
Task: {3B6D8A73-F20B-4C93-B8FB-56A154F172D2} - System32\Tasks\Microsoft\Windows\Time Zone\SynchronizeTimeZone => C:\Windows\System32\tzsync.exe [2013-08-22] (Microsoft Corporation)
Task: {49754026-21E1-41FC-94FD-727AFE414FE7} - System32\Tasks\Microsoft\Windows\Sysmain\HybridDriveCacheRebalance
Task: {6AA91E8C-DDBD-4979-8464-4062F7681A19} - System32\Tasks\Microsoft\Windows\Plug and Play\Plug and Play Cleanup
Task: {6DFCB649-0769-4F83-BB10-F60F235F6D3D} - System32\Tasks\Microsoft\Windows\SkyDrive\Idle Sync Maintenance Task
Task: {735581EB-054C-4D84-AB9B-B693B9B7B88F} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-10-10] (Google Inc.)
Task: {73B1B253-CE67-4501-AE1A-377DD1D68B65} - System32\Tasks\Microsoft\Windows\Application Experience\StartupAppTask => Rundll32.exe Startupscan.dll,SusRunTask
Task: {77F1D869-6E65-4079-A2A0-E2023408EF97} - System32\Tasks\Microsoft\Windows\ApplicationData\CleanupTemporaryState => Rundll32.exe Windows.Storage.ApplicationData.dll,CleanupTemporaryState
Task: {872D0E53-FD2E-41E3-B431-698AF82882CE} - System32\Tasks\Microsoft\Windows\SkyDrive\Routine Maintenance Task
Task: {8CC813C9-712A-41EF-9512-B233444FC669} - System32\Tasks\Microsoft\Windows\AppxDeploymentClient\Pre-staged app cleanup => Rundll32.exe %windir%\system32\AppxDeploymentClient.dll,AppxPreStageCleanupRunTask
Task: {8E6D8F54-A159-4FE6-8074-A20EBF03442B} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-10-10] (Google Inc.)
Task: {9FF4C139-5234-410C-B7FA-23EE2FD2AB53} - System32\Tasks\Microsoft\Windows\Work Folders\Work Folders Maintenance Work
Task: {CFD7C21A-808B-487B-A6EC-8A10E44E8360} - System32\Tasks\Microsoft\Windows\SettingSync\BackupTask
Task: {D88FEC9E-A82A-46F9-87E2-B6B97B301C1A} - System32\Tasks\Microsoft\Windows\WS\License Validation => Rundll32.exe WSClient.dll,WSpTLR licensing
Task: {DA46820F-FF8A-4B5E-A6B2-B12185DCFFFB} - System32\Tasks\Microsoft\Windows\Work Folders\Work Folders Logon Synchronization
Task: {E6D378FA-E068-4BCB-80DE-56D43A249507} - System32\Tasks\Microsoft\Windows\RecoveryEnvironment\VerifyWinRE
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
==================== Loaded Modules (whitelisted) =============
2014-01-05 20:11 - 2013-12-16 17:17 - 01356568 _____ () C:\Program Files\Tablet\Pen\libxml2.dll
2013-10-10 21:19 - 2013-07-31 20:54 - 00394824 _____ () C:\Program Files (x86)\Avira\AntiVir Desktop\sqlite3.dll
2013-08-21 13:18 - 2013-11-06 22:48 - 00691200 _____ () C:\Program Files (x86)\Steam\SDL2.dll
2013-10-08 17:19 - 2013-12-11 20:40 - 01135016 _____ () C:\Program Files (x86)\Steam\bin\chromehtml.DLL
2013-09-10 13:20 - 2013-11-06 22:48 - 20625832 _____ () C:\Program Files (x86)\Steam\bin\libcef.dll
2013-06-14 14:49 - 2013-06-15 00:49 - 01100800 _____ () C:\Program Files (x86)\Steam\bin\avcodec-53.dll
2013-06-14 14:49 - 2013-06-15 00:49 - 00124416 _____ () C:\Program Files (x86)\Steam\bin\avutil-51.dll
2013-06-14 14:49 - 2013-06-15 00:49 - 00192000 _____ () C:\Program Files (x86)\Steam\bin\avformat-53.dll
2014-01-07 14:24 - 2014-01-07 14:24 - 00098816 _____ () C:\Users\Benjamin\AppData\Local\Temp\_MEI96802\win32api.pyd
2014-01-07 14:24 - 2014-01-07 14:24 - 00110080 _____ () C:\Users\Benjamin\AppData\Local\Temp\_MEI96802\pywintypes27.dll
2014-01-07 14:24 - 2014-01-07 14:24 - 00364544 _____ () C:\Users\Benjamin\AppData\Local\Temp\_MEI96802\pythoncom27.dll
2014-01-07 14:24 - 2014-01-07 14:24 - 00044032 _____ () C:\Users\Benjamin\AppData\Local\Temp\_MEI96802\_socket.pyd
2014-01-07 14:24 - 2014-01-07 14:24 - 01153024 _____ () C:\Users\Benjamin\AppData\Local\Temp\_MEI96802\_ssl.pyd
2014-01-07 14:24 - 2014-01-07 14:24 - 00320512 _____ () C:\Users\Benjamin\AppData\Local\Temp\_MEI96802\win32com.shell.shell.pyd
2014-01-07 14:24 - 2014-01-07 14:24 - 00711680 _____ () C:\Users\Benjamin\AppData\Local\Temp\_MEI96802\_hashlib.pyd
2014-01-07 14:24 - 2014-01-07 14:24 - 01175040 _____ () C:\Users\Benjamin\AppData\Local\Temp\_MEI96802\wx._core_.pyd
2014-01-07 14:24 - 2014-01-07 14:24 - 00805888 _____ () C:\Users\Benjamin\AppData\Local\Temp\_MEI96802\wx._gdi_.pyd
2014-01-07 14:24 - 2014-01-07 14:24 - 00811008 _____ () C:\Users\Benjamin\AppData\Local\Temp\_MEI96802\wx._windows_.pyd
2014-01-07 14:24 - 2014-01-07 14:24 - 01062400 _____ () C:\Users\Benjamin\AppData\Local\Temp\_MEI96802\wx._controls_.pyd
2014-01-07 14:24 - 2014-01-07 14:24 - 00735232 _____ () C:\Users\Benjamin\AppData\Local\Temp\_MEI96802\wx._misc_.pyd
2014-01-07 14:24 - 2014-01-07 14:24 - 00128512 _____ () C:\Users\Benjamin\AppData\Local\Temp\_MEI96802\_elementtree.pyd
2014-01-07 14:24 - 2014-01-07 14:24 - 00127488 _____ () C:\Users\Benjamin\AppData\Local\Temp\_MEI96802\pyexpat.pyd
2014-01-07 14:24 - 2014-01-07 14:24 - 00557056 _____ () C:\Users\Benjamin\AppData\Local\Temp\_MEI96802\pysqlite2._sqlite.pyd
2014-01-07 14:24 - 2014-01-07 14:24 - 00087040 _____ () C:\Users\Benjamin\AppData\Local\Temp\_MEI96802\_ctypes.pyd
2014-01-07 14:24 - 2014-01-07 14:24 - 00119808 _____ () C:\Users\Benjamin\AppData\Local\Temp\_MEI96802\win32file.pyd
2014-01-07 14:24 - 2014-01-07 14:24 - 00108544 _____ () C:\Users\Benjamin\AppData\Local\Temp\_MEI96802\win32security.pyd
2014-01-07 14:24 - 2014-01-07 14:24 - 00018432 _____ () C:\Users\Benjamin\AppData\Local\Temp\_MEI96802\win32event.pyd
2014-01-07 14:24 - 2014-01-07 14:24 - 00038912 _____ () C:\Users\Benjamin\AppData\Local\Temp\_MEI96802\win32inet.pyd
2014-01-07 14:24 - 2014-01-07 14:24 - 00122368 _____ () C:\Users\Benjamin\AppData\Local\Temp\_MEI96802\wx._wizard.pyd
2014-01-07 14:24 - 2014-01-07 14:24 - 00026624 _____ () C:\Users\Benjamin\AppData\Local\Temp\_MEI96802\_multiprocessing.pyd
2014-01-07 14:24 - 2014-01-07 14:24 - 00070656 _____ () C:\Users\Benjamin\AppData\Local\Temp\_MEI96802\wx._html2.pyd
2014-01-07 14:24 - 2014-01-07 14:24 - 00010240 _____ () C:\Users\Benjamin\AppData\Local\Temp\_MEI96802\select.pyd
2014-01-07 14:24 - 2014-01-07 14:24 - 00686080 _____ () C:\Users\Benjamin\AppData\Local\Temp\_MEI96802\unicodedata.pyd
2014-01-07 14:24 - 2014-01-07 14:24 - 00025600 _____ () C:\Users\Benjamin\AppData\Local\Temp\_MEI96802\win32pdh.pyd
2014-01-07 14:24 - 2014-01-07 14:24 - 00521680 _____ () C:\Users\Benjamin\AppData\Local\Temp\_MEI96802\windows._lib_cacheinvalidation.pyd
2014-01-07 14:24 - 2014-01-07 14:24 - 00011264 _____ () C:\Users\Benjamin\AppData\Local\Temp\_MEI96802\win32crypt.pyd
2014-01-07 14:24 - 2014-01-07 14:24 - 00024064 _____ () C:\Users\Benjamin\AppData\Local\Temp\_MEI96802\win32pipe.pyd
2014-01-07 14:24 - 2014-01-07 14:24 - 00035840 _____ () C:\Users\Benjamin\AppData\Local\Temp\_MEI96802\win32process.pyd
2014-01-07 14:24 - 2014-01-07 14:24 - 00017408 _____ () C:\Users\Benjamin\AppData\Local\Temp\_MEI96802\win32profile.pyd
2014-01-07 14:24 - 2014-01-07 14:24 - 00022528 _____ () C:\Users\Benjamin\AppData\Local\Temp\_MEI96802\win32ts.pyd
2006-02-22 13:47 - 2006-02-22 13:47 - 00073728 ____R () C:\Program Files (x86)\Cherry\KeyMan\zlib1.dll
2006-02-22 13:47 - 2006-02-22 13:47 - 00114688 ____R () C:\Program Files (x86)\Cherry\KeyMan\libpng13.dll
2013-10-10 18:43 - 2013-10-04 13:38 - 03560960 _____ () C:\Program Files (x86)\Free Download Manager\fdmbtsupp.dll
2013-12-06 00:00 - 2013-12-04 03:47 - 00702416 _____ () C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\libglesv2.dll
2013-12-06 00:00 - 2013-12-04 03:47 - 00099792 _____ () C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\libegl.dll
2013-12-06 00:00 - 2013-12-04 03:48 - 04055504 _____ () C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\pdf.dll
2013-12-06 00:00 - 2013-12-04 03:48 - 00399312 _____ () C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\ppGoogleNaClPluginChrome.dll
2013-12-06 00:00 - 2013-12-04 03:47 - 01619408 _____ () C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\ffmpegsumo.dll
2013-12-06 00:00 - 2013-12-04 03:48 - 13586896 _____ () C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\PepperFlash\pepflashplayer.dll
==================== Alternate Data Streams (whitelisted) =========
AlternateDataStreams: C:\ProgramData\TEMP:149327FE
AlternateDataStreams: C:\ProgramData\TEMP:2CB9631F
AlternateDataStreams: C:\ProgramData\TEMP:A039EDF9
==================== Safe Mode (whitelisted) ===================
==================== Faulty Device Manager Devices =============
Name: Unbekanntes USB-Gerät (Fehler beim Anfordern einer Gerätebeschreibung.)
Description: Unbekanntes USB-Gerät (Fehler beim Anfordern einer Gerätebeschreibung.)
Class Guid: {36fc9e60-c465-11cf-8056-444553540000}
Manufacturer: (Standard-USB-Hostcontroller)
Service:
Problem: : Windows has stopped this device because it has reported problems. (Code 43)
Resolution: One of the drivers controlling the device notified the operating system that the device failed in some manner. For more information about how to diagnose the problem, see the hardware documentation.
==================== Event log errors: =========================
Application errors:
==================
Error: (01/07/2014 11:08:15 PM) (Source: Microsoft-Windows-Immersive-Shell) (User: Leila)
Description: Bei der Aktivierung der App „microsoft.windowscommunicationsapps_8wekyb3d8bbwe!ppleae38af2e007f4358a809ac99a64a67c1“ ist folgender Fehler aufgetreten: -2147023174. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.
Error: (01/07/2014 09:50:01 PM) (Source: Microsoft-Windows-Immersive-Shell) (User: Leila)
Description: Bei der Aktivierung der App „microsoft.windowscommunicationsapps_8wekyb3d8bbwe!ppleae38af2e007f4358a809ac99a64a67c1“ ist folgender Fehler aufgetreten: -2147023174. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.
Error: (01/07/2014 09:50:01 PM) (Source: Microsoft-Windows-Immersive-Shell) (User: Leila)
Description: Bei der Aktivierung der App „microsoft.windowscommunicationsapps_8wekyb3d8bbwe!ppleae38af2e007f4358a809ac99a64a67c1“ ist folgender Fehler aufgetreten: -2147023174. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.
Error: (01/07/2014 09:50:01 PM) (Source: Microsoft-Windows-Immersive-Shell) (User: Leila)
Description: Bei der Aktivierung der App „microsoft.windowscommunicationsapps_8wekyb3d8bbwe!ppleae38af2e007f4358a809ac99a64a67c1“ ist folgender Fehler aufgetreten: -2147023174. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.
Error: (01/07/2014 09:50:01 PM) (Source: Microsoft-Windows-Immersive-Shell) (User: Leila)
Description: Bei der Aktivierung der App „microsoft.windowscommunicationsapps_8wekyb3d8bbwe!ppleae38af2e007f4358a809ac99a64a67c1“ ist folgender Fehler aufgetreten: -2147023174. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.
Error: (01/07/2014 09:50:01 PM) (Source: Microsoft-Windows-Immersive-Shell) (User: Leila)
Description: Bei der Aktivierung der App „microsoft.windowscommunicationsapps_8wekyb3d8bbwe!ppleae38af2e007f4358a809ac99a64a67c1“ ist folgender Fehler aufgetreten: -2147023174. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.
Error: (01/07/2014 09:50:01 PM) (Source: Microsoft-Windows-Immersive-Shell) (User: Leila)
Description: Bei der Aktivierung der App „microsoft.windowscommunicationsapps_8wekyb3d8bbwe!ppleae38af2e007f4358a809ac99a64a67c1“ ist folgender Fehler aufgetreten: -2147023174. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.
Error: (01/04/2014 11:13:46 PM) (Source: Microsoft-Windows-Immersive-Shell) (User: Leila)
Description: Bei der Aktivierung der App „microsoft.windowscommunicationsapps_8wekyb3d8bbwe!ppleae38af2e007f4358a809ac99a64a67c1“ ist folgender Fehler aufgetreten: -2147023174. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.
Error: (01/04/2014 06:07:44 PM) (Source: Microsoft-Windows-Immersive-Shell) (User: Leila)
Description: Bei der Aktivierung der App „microsoft.windowscommunicationsapps_8wekyb3d8bbwe!ppleae38af2e007f4358a809ac99a64a67c1“ ist folgender Fehler aufgetreten: -2147023174. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.
Error: (01/04/2014 07:15:50 AM) (Source: Microsoft-Windows-Immersive-Shell) (User: Leila)
Description: Bei der Aktivierung der App „microsoft.windowscommunicationsapps_8wekyb3d8bbwe!ppleae38af2e007f4358a809ac99a64a67c1“ ist folgender Fehler aufgetreten: -2147023174. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.
System errors:
=============
Error: (01/07/2014 10:42:49 PM) (Source: DCOM) (User: Leila)
Description: {959BA0A4-0893-48B4-8B02-BA0DA0A401FE}
Error: (01/07/2014 10:40:56 PM) (Source: DCOM) (User: Leila)
Description: {959BA0A4-0893-48B4-8B02-BA0DA0A401FE}
Error: (01/07/2014 02:25:53 PM) (Source: DCOM) (User: NT-AUTORITÄT)
Description: ComputerstandardLokalAktivierung{C2F03A33-21F5-47FA-B4BB-156362A2F239}{316CDED5-E4AE-4B15-9113-7055D84DCC97}NT-AUTORITÄTLokaler DienstS-1-5-19LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar
Error: (01/07/2014 01:57:13 AM) (Source: Microsoft-Windows-Kernel-Power) (User: )
Description: 5
Error: (01/06/2014 10:30:56 AM) (Source: DCOM) (User: Leila)
Description: {1B1F472E-3221-4826-97DB-2C2324D389AE}
Error: (01/06/2014 10:30:26 AM) (Source: DCOM) (User: Leila)
Description: {BF6C1E47-86EC-4194-9CE5-13C15DCB2001}
Error: (01/06/2014 10:18:57 AM) (Source: DCOM) (User: NT-AUTORITÄT)
Description: ComputerstandardLokalAktivierung{C2F03A33-21F5-47FA-B4BB-156362A2F239}{316CDED5-E4AE-4B15-9113-7055D84DCC97}NT-AUTORITÄTLokaler DienstS-1-5-19LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar
Error: (01/06/2014 10:16:45 AM) (Source: DCOM) (User: Leila)
Description: {1B1F472E-3221-4826-97DB-2C2324D389AE}
Error: (01/06/2014 10:16:15 AM) (Source: DCOM) (User: Leila)
Description: {BF6C1E47-86EC-4194-9CE5-13C15DCB2001}
Error: (01/06/2014 09:14:28 AM) (Source: Microsoft-Windows-Kernel-Power) (User: )
Description: 5
Microsoft Office Sessions:
=========================
Error: (01/07/2014 11:08:15 PM) (Source: Microsoft-Windows-Immersive-Shell)(User: Leila)
Description: microsoft.windowscommunicationsapps_8wekyb3d8bbwe!ppleae38af2e007f4358a809ac99a64a67c1-2147023174
Error: (01/07/2014 09:50:01 PM) (Source: Microsoft-Windows-Immersive-Shell)(User: Leila)
Description: microsoft.windowscommunicationsapps_8wekyb3d8bbwe!ppleae38af2e007f4358a809ac99a64a67c1-2147023174
Error: (01/07/2014 09:50:01 PM) (Source: Microsoft-Windows-Immersive-Shell)(User: Leila)
Description: microsoft.windowscommunicationsapps_8wekyb3d8bbwe!ppleae38af2e007f4358a809ac99a64a67c1-2147023174
Error: (01/07/2014 09:50:01 PM) (Source: Microsoft-Windows-Immersive-Shell)(User: Leila)
Description: microsoft.windowscommunicationsapps_8wekyb3d8bbwe!ppleae38af2e007f4358a809ac99a64a67c1-2147023174
Error: (01/07/2014 09:50:01 PM) (Source: Microsoft-Windows-Immersive-Shell)(User: Leila)
Description: microsoft.windowscommunicationsapps_8wekyb3d8bbwe!ppleae38af2e007f4358a809ac99a64a67c1-2147023174
Error: (01/07/2014 09:50:01 PM) (Source: Microsoft-Windows-Immersive-Shell)(User: Leila)
Description: microsoft.windowscommunicationsapps_8wekyb3d8bbwe!ppleae38af2e007f4358a809ac99a64a67c1-2147023174
Error: (01/07/2014 09:50:01 PM) (Source: Microsoft-Windows-Immersive-Shell)(User: Leila)
Description: microsoft.windowscommunicationsapps_8wekyb3d8bbwe!ppleae38af2e007f4358a809ac99a64a67c1-2147023174
Error: (01/04/2014 11:13:46 PM) (Source: Microsoft-Windows-Immersive-Shell)(User: Leila)
Description: microsoft.windowscommunicationsapps_8wekyb3d8bbwe!ppleae38af2e007f4358a809ac99a64a67c1-2147023174
Error: (01/04/2014 06:07:44 PM) (Source: Microsoft-Windows-Immersive-Shell)(User: Leila)
Description: microsoft.windowscommunicationsapps_8wekyb3d8bbwe!ppleae38af2e007f4358a809ac99a64a67c1-2147023174
Error: (01/04/2014 07:15:50 AM) (Source: Microsoft-Windows-Immersive-Shell)(User: Leila)
Description: microsoft.windowscommunicationsapps_8wekyb3d8bbwe!ppleae38af2e007f4358a809ac99a64a67c1-2147023174
==================== Memory info ===========================
Percentage of memory in use: 36%
Total physical RAM: 8156.66 MB
Available physical RAM: 5211.39 MB
Total Pagefile: 16348.66 MB
Available Pagefile: 10954.23 MB
Total Virtual: 131072 MB
Available Virtual: 131071.78 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:1862.92 GB) (Free:1632.24 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 1863 GB) (Disk ID: 8F283747)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=-198731366400) - (Type=07 NTFS)
==================== End Of Log ============================
Edit 2: Achja, Antivir hat nichts gefunden. Es wurde nur dieser Fehler hier unter "Error" angezeigt: "C:\swapfile.sys [WARNING] The file could not be opened!" Liebe Grüße, Ravel Geändert von Ravel (08.01.2014 um 00:32 Uhr) |
|
08.01.2014, 07:42
| #2 |
| /// the machine /// TB-Ausbilder    |  Vlc-Player durch Vlc.de installiert - Vermutung auf Virus hi,
__________________Downloade Dir bitte  Malwarebytes Anti-Malware
Downloade Dir bitte  AdwCleaner auf deinen Desktop.
Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
und ein frisches FRST log bitte.
__________________ |
|
08.01.2014, 22:22
| #3 |
| | Vlc-Player durch Vlc.de installiert - Vermutung auf Virus Vielen Dank für die schnelle Antwort!
__________________Hier der Log von Malwarebytes (keine Funde): Code:
ATTFilter Malwarebytes Anti-Malware (Test) 1.75.0.1300 www.malwarebytes.org Datenbank Version: v2014.01.08.06 Windows 8 x64 NTFS Internet Explorer 11.0.9600.16476 Doktor :: LEILA [Administrator] Schutz: Aktiviert 08.01.2014 21:33:08 mbam-log-2014-01-08 (21-33-08).txt Art des Suchlaufs: Quick-Scan Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM Deaktivierte Suchlaufeinstellungen: P2P Durchsuchte Objekte: 278070 Laufzeit: 8 Minute(n), 28 Sekunde(n) Infizierte Speicherprozesse: 0 (Keine bösartigen Objekte gefunden) Infizierte Speichermodule: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungsschlüssel: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungswerte: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateiobjekte der Registrierung: 0 (Keine bösartigen Objekte gefunden) Infizierte Verzeichnisse: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateien: 0 (Keine bösartigen Objekte gefunden) (Ende) Code:
ATTFilter # AdwCleaner v3.016 - Bericht erstellt am 08/01/2014 um 21:47:41
# Aktualisiert 23/12/2013 von Xplode
# Betriebssystem : Windows 8.1 Pro (64 bits)
# Benutzername : Doktor - LEILA
# Gestartet von : C:\Users\Benjamin\Desktop\adwcleaner.exe
# Option : Löschen
***** [ Dienste ] *****
***** [ Dateien / Ordner ] *****
Datei Gelöscht : C:\Users\Benjamin\AppData\Roaming\Microsoft\Windows\Start Menu\Startfenster.lnk
***** [ Verknüpfungen ] *****
***** [ Registrierungsdatenbank ] *****
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4250488A-CB24-0893-C066-B1AEA57BCFF2}
***** [ Browser ] *****
-\\ Internet Explorer v11.0.9600.16384
Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Main [Start Page]
-\\ Mozilla Firefox v25.0.1 (de)
[ Datei : C:\Users\Benjamin\AppData\Roaming\Mozilla\Firefox\Profiles\yjhfma5a.default\prefs.js ]
Zeile gelöscht : user_pref("browser.startup.homepage", "hxxp://www.startfenster.de");
[ Datei : C:\Users\Benjamin\AppData\Roaming\Mozilla\Firefox\Profiles\yjhfma5a.default\prefs.js ]
[ Datei : C:\Users\Benjamin\AppData\Roaming\Mozilla\Firefox\Profiles\yjhfma5a.default\prefs.js ]
-\\ Google Chrome v31.0.1650.63
[ Datei : C:\Users\Benjamin\AppData\Local\Google\Chrome\User Data\Default\preferences ]
[ Datei : C:\Users\Benjamin\AppData\Local\Google\Chrome\User Data\Default\preferences ]
*************************
AdwCleaner[R0].txt - [1915 octets] - [08/01/2014 21:44:10]
AdwCleaner[S0].txt - [1544 octets] - [08/01/2014 21:47:41]
########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [1604 octets] ##########
Code:
ATTFilter ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.0 (01.07.2014:1)
OS: Windows 8.1 Pro x64
Ran by Doktor on 08.01.2014 at 21:57:49,28
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~ Services
~~~ Registry Values
~~~ Registry Keys
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\caphyon
~~~ Files
Successfully deleted: [File] "C:\Users\Benjamin\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\user pinned\taskbar\startfenster.lnk"
~~~ Folders
Successfully deleted: [Folder] "C:\ProgramData\big fish"
Successfully deleted: [Folder] "C:\Users\Benjamin\AppData\Roaming\big fish games"
Successfully deleted: [Folder] "C:\Users\Benjamin\appdata\local\big fish"
Successfully deleted: [Folder] "C:\bigfishcache"
Successfully deleted: [Folder] "C:\WINDOWS\syswow64\ai_recyclebin"
~~~ Event Viewer Logs were cleared
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 08.01.2014 at 22:00:54,29
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
FRT Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 08-01-2014 01
Ran by Doktor (administrator) on LEILA on 08-01-2014 22:25:10
Running from C:\Users\Benjamin\Downloads
Windows 8.1 Pro (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\WTabletServiceCon.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Sphinx Software) C:\Program Files\Windows8FirewallControl\Windows8FirewallService.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(IvoSoft) C:\Program Files\Classic Shell\ClassicStartMenu.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20315_x64__8wekyb3d8bbwe\livecomm.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_TabletUser.exe
(Wacom Technology) C:\Program Files\Tablet\Pen\WacomHost.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_TouchUser.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_Tablet.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Sphinx Software) C:\Program Files\Windows8FirewallControl\Windows8FirewallControl.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.Reader_6.3.9600.16422_x64__8wekyb3d8bbwe\glcnd.exe
(Google) C:\Program Files (x86)\Google\Drive\googledrivesync.exe
(Google) C:\Program Files (x86)\Google\Drive\googledrivesync.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(ZF Electronics GmbH) C:\Program Files (x86)\Cherry\KeyMan\KeyMan.exe
(ZF Electronics GmbH) C:\Program Files (x86)\Cherry\CDI\cdi.exe
(ZF Electronics GmbH) C:\Program Files (x86)\Common Files\Cherry\Common\kbdhook64.exe
(Elaborate Bytes AG) C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe
() C:\Program Files (x86)\Bamboo Dock\BambooCore.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13213840 2012-10-26] (Realtek Semiconductor)
HKLM\...\Run: [Windows8FirewallControl] - C:\Program Files\Windows8FirewallControl\Windows8FirewallControl.exe [1203712 2013-09-20] (Sphinx Software)
HKLM\...\Run: [Nvtmru] - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe [1028384 2013-11-14] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] - C:\WINDOWS\system32\rundll32.exe C:\WINDOWS\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [684600 2013-12-18] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM-x32\...\Run: [CherryKeyMan] - C:\Program Files (x86)\Cherry\KeyMan\KeyMan.exe [254004 2010-09-28] (ZF Electronics GmbH)
HKLM-x32\...\Run: [VirtualCloneDrive] - C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe [88984 2013-03-10] (Elaborate Bytes AG)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-09-05] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [BambooCore] - C:\Program Files (x86)\Bamboo Dock\BambooCore.exe [646744 2012-10-16] ()
HKCU\...\Run: [Steam] - C:\Program Files (x86)\Steam\Steam.exe [1815464 2014-01-07] (Valve Corporation)
HKCU\...\Run: [GoogleDriveSync] - C:\Program Files (x86)\Google\Drive\googledrivesync.exe [20203904 2013-12-06] (Google)
Startup: C:\Users\Benjamin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Gamma.lnk
ShortcutTarget: Adobe Gamma.lnk -> C:\Program Files (x86)\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe (Adobe Systems, Inc.)
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://t.de.msn.com/
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x44495B2C4EDFCE01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE
SearchScopes: HKLM - DefaultScope {A1D7EC7C-6BD1-4295-98FF-7C8059EB50A6} URL = hxxp://www.sm.de/?q={searchTerms}
SearchScopes: HKLM - {A1D7EC7C-6BD1-4295-98FF-7C8059EB50A6} URL = hxxp://www.sm.de/?q={searchTerms}
SearchScopes: HKCU - {A1D7EC7C-6BD1-4295-98FF-7C8059EB50A6} URL = hxxp://www.sm.de/?q={searchTerms}
BHO: ExplorerBHO Class - {449D0D6E-2412-4E61-B68F-1CB625CD9E52} - C:\Program Files\Classic Shell\ClassicExplorer64.dll (IvoSoft)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO: ClassicIEBHO Class - {EA801577-E6AD-4BD5-8F71-4BE0154331A4} - C:\Program Files\Classic Shell\ClassicIEDLL_64.dll (IvoSoft)
BHO-x32: ExplorerBHO Class - {449D0D6E-2412-4E61-B68F-1CB625CD9E52} - C:\Program Files\Classic Shell\ClassicExplorer32.dll (IvoSoft)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Free Download Manager - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - C:\Program Files (x86)\Free Download Manager\iefdm2.dll (FreeDownloadManager.ORG)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: ClassicIEBHO Class - {EA801577-E6AD-4BD5-8F71-4BE0154331A4} - C:\Program Files\Classic Shell\ClassicIEDLL_32.dll (IvoSoft)
Toolbar: HKLM - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer64.dll (IvoSoft)
Toolbar: HKLM-x32 - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer32.dll (IvoSoft)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.2
FireFox:
========
FF ProfilePath: C:\Users\Benjamin\AppData\Roaming\Mozilla\Firefox\Profiles\yjhfma5a.default
FF SearchEngineOrder.1: SuchMaschine
FF Keyword.URL: hxxp://www.sm.de/?q=
FF Plugin: @adobe.com/FlashPlayer - C:\WINDOWS\system32\Macromed\Flash\NPSWF64_11_9_900_152.dll ()
FF Plugin: @java.com/DTPlugin,version=10.45.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @wacom.com/wtPlugin,version=2.1.0.3 - C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll (Wacom)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_152.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\WINDOWS\system32\Adobe\Director\np32dsw_1207148.dll No File
FF Plugin-x32: @java.com/DTPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @wacom.com/wtPlugin,version=2.1.0.3 - C:\Program Files (x86)\TabletPlugins\npWacomTabletPlugin.dll (Wacom)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: wacom.com/WacomTabletPlugin - C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll (Wacom)
FF SearchPlugin: C:\Users\Benjamin\AppData\Roaming\Mozilla\Firefox\Profiles\yjhfma5a.default\searchplugins\search_engine.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
Chrome:
=======
CHR Extension: (Google Docs) - C:\Users\Benjamin\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0
CHR Extension: (Google Drive) - C:\Users\Benjamin\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0
CHR Extension: (YouTube) - C:\Users\Benjamin\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0
CHR Extension: (Google Search) - C:\Users\Benjamin\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0
CHR Extension: (Google Wallet) - C:\Users\Benjamin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_1
CHR Extension: (Gmail) - C:\Users\Benjamin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1
==================== Services (Whitelisted) =================
S3 Adobe LM Service; C:\Program Files (x86)\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [72704 2013-10-10] (Adobe Systems)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440376 2013-12-18] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440376 2013-11-26] (Avira Operations GmbH & Co. KG)
S4 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [1011768 2013-12-18] (Avira Operations GmbH & Co. KG)
S3 AppleChargerSrv; C:\Windows\System32\AppleChargerSrv.exe [31272 2010-04-06] ()
R3 Cherry Device Interface; C:\Program Files (x86)\Cherry\CDI\cdi.exe [577582 2010-08-25] (ZF Electronics GmbH)
S2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
S2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [15125280 2013-11-14] (NVIDIA Corporation)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [346872 2013-08-22] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23840 2013-08-22] (Microsoft Corporation)
R2 Windows8FirewallService; C:\Program Files\Windows8FirewallControl\Windows8FirewallService.exe [3806720 2013-09-20] (Sphinx Software)
R2 WTabletServiceCon; C:\Program Files\Tablet\Pen\WTabletServiceCon.exe [627992 2013-12-16] (Wacom Technology, Corp.)
==================== Drivers (Whitelisted) ====================
S0 ADP80XX; C:\Windows\System32\drivers\ADP80XX.SYS [782176 2013-08-22] (PMC-Sierra)
R1 AppleCharger; C:\Windows\System32\DRIVERS\AppleCharger.sys [22680 2012-10-25] ()
R3 athr; C:\Windows\system32\DRIVERS\athwnx.sys [3680256 2013-06-18] (Qualcomm Atheros Communications, Inc.)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108440 2013-12-18] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [131576 2013-12-18] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [28600 2013-11-26] (Avira Operations GmbH & Co. KG)
S3 bcmfn2; C:\Windows\System32\drivers\bcmfn2.sys [17624 2013-08-13] (Windows (R) Win 7 DDK provider)
S3 GVTDrv64; C:\WINDOWS\GVTDrv64.sys [30528 2013-10-10] ()
S3 iaLPSSi_GPIO; C:\Windows\System32\drivers\iaLPSSi_GPIO.sys [24568 2013-07-30] (Intel Corporation)
S3 iaLPSSi_I2C; C:\Windows\System32\drivers\iaLPSSi_I2C.sys [99320 2013-07-25] (Intel Corporation)
S0 iaStorAV; C:\Windows\System32\drivers\iaStorAV.sys [651248 2013-08-10] (Intel Corporation)
R0 intelpep; C:\Windows\System32\drivers\intelpep.sys [39768 2013-12-25] (Microsoft Corporation)
S3 kbldfltr; C:\Windows\System32\drivers\kbldfltr.sys [22272 2013-11-14] (Microsoft Corporation)
S0 LSI_SAS3; C:\Windows\System32\drivers\lsi_sas3.sys [81760 2013-08-22] (LSI Corporation)
S3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
R3 NdisVirtualBus; C:\Windows\System32\drivers\NdisVirtualBus.sys [16384 2013-08-22] (Microsoft Corporation)
S3 netvsc; C:\Windows\system32\DRIVERS\netvsc63.sys [87040 2013-08-22] (Microsoft Corporation)
R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [39200 2013-11-14] (NVIDIA Corporation)
S3 ReFS; C:\Windows\System32\Drivers\ReFS.sys [924512 2013-08-22] (Microsoft Corporation)
S3 SerCx2; C:\Windows\System32\drivers\SerCx2.sys [146776 2013-12-25] (Microsoft Corporation)
S0 stornvme; C:\Windows\System32\drivers\stornvme.sys [57176 2013-11-14] (Microsoft Corporation)
S3 UEFI; C:\Windows\System32\drivers\UEFI.sys [26976 2013-08-22] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [124256 2013-08-22] (Microsoft Corporation)
R3 xusb22; C:\Windows\System32\drivers\xusb22.sys [87040 2013-08-22] (Microsoft Corporation)
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2014-01-08 22:25 - 2014-01-08 22:25 - 00000000 ____D C:\Users\Benjamin\Downloads\FRST-OlderVersion
2014-01-08 21:57 - 2014-01-08 21:57 - 00000000 ____D C:\WINDOWS\ERUNT
2014-01-08 21:44 - 2014-01-08 21:48 - 00000000 ____D C:\AdwCleaner
2014-01-08 21:43 - 2014-01-08 21:34 - 01233962 _____ C:\Users\Benjamin\Desktop\adwcleaner.exe
2014-01-08 21:34 - 2014-01-08 21:34 - 01037068 _____ (Thisisu) C:\Users\Benjamin\Downloads\JRT.exe
2014-01-08 21:33 - 2014-01-08 21:34 - 01233962 _____ C:\Users\Benjamin\Downloads\adwcleaner.exe
2014-01-08 21:30 - 2014-01-08 21:30 - 00001125 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-01-08 21:30 - 2014-01-08 21:30 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-01-08 21:30 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbam.sys
2014-01-08 21:29 - 2014-01-08 21:29 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Benjamin\Downloads\mbam-setup-1.75.0.1300(1).exe
2014-01-08 09:05 - 2014-01-08 09:05 - 00000000 ____D C:\Users\Benjamin\.pdfsam
2014-01-08 08:54 - 2014-01-08 08:54 - 00000000 ____D C:\Program Files\PDF Split And Merge Basic
2014-01-08 08:52 - 2014-01-08 08:52 - 00000000 ____D C:\Users\Benjamin\Downloads\pdfsam-v2_2_2
2014-01-08 08:51 - 2014-01-08 08:52 - 37108698 _____ C:\Users\Benjamin\Downloads\pdfsam-v2_2_2.zip
2014-01-08 00:46 - 2014-01-08 00:46 - 00018095 _____ C:\Users\Benjamin\Documents\cyxcyx.aup
2014-01-08 00:46 - 2014-01-08 00:46 - 00000000 ____D C:\Users\Benjamin\Documents\cyxcyx_data
2014-01-08 00:37 - 2014-01-08 00:40 - 00022778 _____ C:\Users\Benjamin\Desktop\Präsentation.odt
2014-01-07 23:25 - 2014-01-07 23:26 - 00000000 ____D C:\Users\Benjamin\Desktop\Virenscan
2014-01-07 23:23 - 2014-01-07 23:23 - 00029654 _____ C:\Users\Benjamin\Downloads\Addition.txt
2014-01-07 23:12 - 2014-01-08 22:25 - 00016089 _____ C:\Users\Benjamin\Downloads\FRST.txt
2014-01-07 23:12 - 2014-01-08 22:25 - 00000000 ____D C:\FRST
2014-01-07 23:11 - 2014-01-08 22:25 - 01931770 _____ (Farbar) C:\Users\Benjamin\Downloads\FRST64.exe
2014-01-07 23:09 - 2014-01-07 23:09 - 00000000 _____ C:\Users\Benjamin\defogger_reenable
2014-01-07 23:08 - 2014-01-07 23:08 - 00050477 _____ C:\Users\Benjamin\Downloads\Defogger.exe
2014-01-07 22:58 - 2014-01-07 22:58 - 00000000 ____D C:\Users\Benjamin\AppData\Roaming\Malwarebytes
2014-01-07 22:58 - 2014-01-07 22:58 - 00000000 ____D C:\ProgramData\Malwarebytes
2014-01-07 22:55 - 2014-01-07 22:58 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Benjamin\Downloads\mbam-setup-1.75.0.1300.exe
2014-01-07 22:13 - 2014-01-08 09:01 - 00000000 ____D C:\Users\Benjamin\Desktop\Präsentation
2014-01-07 16:32 - 2014-01-07 16:32 - 00009118 _____ C:\Users\Benjamin\Desktop\303839_3008616.mp4
2014-01-07 16:28 - 2014-01-07 22:51 - 00000000 ____D C:\Program Files\VideoLAN
2014-01-07 16:27 - 2014-01-07 16:27 - 24738792 _____ C:\Users\Benjamin\Downloads\vlc-2.1.2-win64.exe
2014-01-07 15:26 - 2014-01-07 15:26 - 00086591 _____ C:\Users\Benjamin\Downloads\wadsworth_industria.zip
2014-01-07 01:34 - 2014-01-07 01:56 - 00000000 ____D C:\Users\Benjamin\AppData\Roaming\Little Inferno
2014-01-06 08:43 - 2014-01-06 08:44 - 00000000 ____D C:\Users\Benjamin\Desktop\usb
2014-01-06 07:57 - 2014-01-07 22:25 - 00000000 ____D C:\Users\Benjamin\Desktop\Fabric meets Canvas - Tim und Friederike
2014-01-06 04:18 - 2014-01-06 04:18 - 00009951 _____ C:\Users\Benjamin\Downloads\PhotosBooth_Template_TipSquirrel.zip
2014-01-06 04:15 - 2014-01-06 04:15 - 00009393 _____ C:\Users\Benjamin\Downloads\Photo Booth.atn
2014-01-05 21:39 - 2014-01-05 21:40 - 24513384 _____ C:\Users\Benjamin\Downloads\modern_geometric_triangle_photoshop_patterns_by_sdwhaven-d55gvnx.pat
2014-01-05 20:45 - 2014-01-05 20:46 - 00223048 ____T C:\Users\Benjamin\Documents\uujujuj.oxps
2014-01-05 20:13 - 2014-01-05 20:13 - 00000000 ____D C:\Users\Benjamin\AppData\Roaming\wacomid-desktop-launcher.DCFD4B89A63EE70BC162777F06D4B93B6397AEC7.1
2014-01-05 20:12 - 2014-01-05 20:14 - 00000000 ____D C:\ProgramData\Wacom
2014-01-05 20:12 - 2014-01-05 20:12 - 00001163 _____ C:\Users\Public\Desktop\Bamboo Dock.lnk
2014-01-05 20:12 - 2014-01-05 20:12 - 00000002 _____ C:\Users\Benjamin\.bdockinstall.log
2014-01-05 20:12 - 2014-01-05 20:12 - 00000000 ____D C:\Users\Default\AppData\Roaming\Macromedia
2014-01-05 20:12 - 2014-01-05 20:12 - 00000000 ____D C:\Users\Default User\AppData\Roaming\Macromedia
2014-01-05 20:12 - 2014-01-05 20:12 - 00000000 ____D C:\Users\Benjamin\AppData\Roaming\Wacom
2014-01-05 20:12 - 2014-01-05 20:12 - 00000000 ____D C:\Program Files (x86)\Bamboo Dock
2014-01-05 20:11 - 2014-01-05 20:11 - 00000000 ____D C:\Users\Benjamin\AppData\Roaming\WTablet
2014-01-05 20:11 - 2014-01-05 20:11 - 00000000 ____D C:\Program Files\TabletPlugins
2014-01-05 20:11 - 2014-01-05 20:11 - 00000000 ____D C:\Program Files\Tablet
2014-01-05 20:11 - 2014-01-05 20:11 - 00000000 ____D C:\Program Files (x86)\TabletPlugins
2014-01-05 20:11 - 2013-12-16 17:17 - 01913624 _____ (Wacom Technology, Corp.) C:\WINDOWS\system32\Pen_Tablet.dll
2014-01-05 20:11 - 2013-12-16 17:17 - 01906968 _____ (Wacom Technology, Corp.) C:\WINDOWS\system32\Pen_Touch_Tablet.dll
2014-01-05 20:11 - 2013-12-16 17:17 - 01780504 _____ (Wacom Technology, Corp.) C:\WINDOWS\system32\WacomMT.dll
2014-01-05 20:11 - 2013-12-16 17:17 - 01778968 _____ (Wacom Technology, Corp.) C:\WINDOWS\system32\Wintab32.dll
2014-01-05 20:11 - 2013-12-16 17:17 - 01551640 _____ (Wacom Technology, Corp.) C:\WINDOWS\SysWOW64\Pen_Tablet.dll
2014-01-05 20:11 - 2013-12-16 17:17 - 01544472 _____ (Wacom Technology, Corp.) C:\WINDOWS\SysWOW64\Pen_Touch_Tablet.dll
2014-01-05 20:11 - 2013-12-16 17:17 - 01432344 _____ (Wacom Technology, Corp.) C:\WINDOWS\SysWOW64\WacomMT.dll
2014-01-05 20:11 - 2013-12-16 17:17 - 01428248 _____ (Wacom Technology, Corp.) C:\WINDOWS\SysWOW64\Wintab32.dll
2014-01-05 20:11 - 2013-11-11 16:16 - 00090424 _____ (Wacom Technology) C:\WINDOWS\system32\Drivers\wachidrouter.sys
2014-01-05 20:11 - 2013-11-11 16:16 - 00015160 _____ (Wacom Technology) C:\WINDOWS\system32\Drivers\wacomrouterfilter.sys
2014-01-05 20:11 - 2013-11-11 16:16 - 00014136 _____ (Windows (R) Win 7 DDK provider) C:\WINDOWS\system32\Drivers\hidkmdf.sys
2014-01-05 20:11 - 2012-04-11 14:34 - 01721576 _____ (Microsoft Corporation) C:\WINDOWS\system32\wdfcoinstaller01009.dll
2014-01-05 20:11 - 2012-04-11 14:34 - 01721576 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wdfcoinstaller01009.dll
2014-01-05 20:09 - 2014-01-05 20:10 - 07434944 _____ C:\Users\Benjamin\Downloads\bamboo_setup_web0407final.exe
2014-01-05 20:05 - 2014-01-05 21:20 - 00000000 ____D C:\Users\Benjamin\Downloads\PaintToolSAI
2014-01-05 20:05 - 2014-01-05 20:05 - 02339714 _____ C:\Users\Benjamin\Downloads\sai-1.1.0-ful-en.exe
2014-01-05 20:05 - 2014-01-05 20:05 - 00000802 _____ C:\Users\Public\Desktop\PaintTool SAI Ver.1.lnk
2014-01-05 20:05 - 2014-01-05 20:05 - 00000000 ____D C:\Users\Benjamin\AppData\Roaming\SYSTEMAX Software Development
2014-01-05 20:05 - 2014-01-05 20:05 - 00000000 ____D C:\ProgramData\SYSTEMAX Software Development
2014-01-05 16:45 - 2014-01-05 16:45 - 00020916 _____ C:\Users\Benjamin\Downloads\bebas_neue.zip
2014-01-05 11:12 - 2014-01-05 11:12 - 00002039 _____ C:\Users\Public\Desktop\Adobe Reader XI.lnk
2014-01-04 14:42 - 2014-01-06 08:34 - 00000000 ____D C:\Users\Benjamin\Downloads\PhotosBooth_Template_TipSquirrel
2014-01-04 12:13 - 2014-01-04 12:21 - 71502558 _____ C:\Users\Benjamin\Downloads\Introduction to Magazine layoutsmp4.mp4
2014-01-04 08:34 - 2014-01-04 08:34 - 00001405 _____ C:\Users\Benjamin\Desktop\DevPro.lnk
2014-01-04 08:25 - 2014-01-07 21:37 - 00000000 ____D C:\Program Files (x86)\DevPro2
2014-01-04 08:03 - 2014-01-04 08:18 - 409196544 _____ C:\Users\Benjamin\Downloads\DevPro.7z
2014-01-04 08:02 - 2014-01-04 08:15 - 250952389 _____ (YGOPro DevPro Online ) C:\Users\Benjamin\Downloads\SetupDevPro1.9.8r4.exe
2014-01-03 07:16 - 2014-01-06 21:22 - 00000000 ____D C:\Users\Benjamin\Desktop\Layoutgestaltung
2014-01-02 15:26 - 2014-01-05 13:41 - 00000000 ____D C:\Users\Benjamin\Desktop\100CANON
2013-12-29 18:41 - 2013-12-29 18:41 - 00001799 _____ C:\Users\Public\Desktop\Alice Madness Returns.lnk
2013-12-28 18:24 - 2013-12-28 18:24 - 00003002 _____ C:\Users\Benjamin\Downloads\Ferien_Niedersachsen_2013.ics
2013-12-28 18:23 - 2013-12-28 18:23 - 00003359 _____ C:\Users\Benjamin\Downloads\Ferien_Niedersachsen_2014.ics
2013-12-28 03:32 - 2013-12-28 03:32 - 00000000 ___RD C:\WINDOWS\BrowserChoice
2013-12-28 02:26 - 2013-12-28 02:26 - 00000000 ____D C:\Users\Benjamin\Downloads\unsortiert
2013-12-26 15:17 - 2013-12-26 15:28 - 00000000 ____D C:\Users\Benjamin\Documents\RCT3
2013-12-26 15:17 - 2013-12-26 15:17 - 00000000 ____D C:\Users\Benjamin\AppData\Roaming\Atari
2013-12-26 14:59 - 2013-12-26 14:59 - 00461312 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnet.dll
2013-12-26 14:59 - 2013-12-26 14:59 - 00377856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnet.dll
2013-12-26 14:59 - 2013-12-26 14:59 - 00214016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dplayx.dll
2013-12-26 14:59 - 2013-12-26 14:59 - 00066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnathlp.dll
2013-12-26 14:59 - 2013-12-26 14:59 - 00059904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnathlp.dll
2013-12-26 14:59 - 2013-12-26 14:59 - 00045056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpwsockx.dll
2013-12-26 14:59 - 2013-12-26 14:59 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnsvr.exe
2013-12-26 14:59 - 2013-12-26 14:59 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnsvr.exe
2013-12-26 14:59 - 2013-12-26 14:59 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dplaysvr.exe
2013-12-26 14:59 - 2013-12-26 14:59 - 00023552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpmodemx.dll
2013-12-26 14:59 - 2013-12-26 14:59 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnhupnp.dll
2013-12-26 14:59 - 2013-12-26 14:59 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnhpast.dll
2013-12-26 14:59 - 2013-12-26 14:59 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnhupnp.dll
2013-12-26 14:59 - 2013-12-26 14:59 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnhpast.dll
2013-12-26 14:53 - 2013-12-26 14:53 - 00000000 ____D C:\GOG Games
2013-12-26 13:28 - 2013-12-26 13:28 - 00000000 ____D C:\ProgramData\ClassicShell
2013-12-26 13:28 - 2013-12-26 13:28 - 00000000 ____D C:\Program Files\Classic Shell
2013-12-25 22:58 - 2013-12-25 22:58 - 00001454 _____ C:\Users\Benjamin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2013-12-25 22:57 - 2013-12-25 22:57 - 00000020 ___SH C:\Users\Benjamin\ntuser.ini
2013-12-25 22:54 - 2013-12-25 22:54 - 00022960 _____ C:\WINDOWS\system32\emptyregdb.dat
2013-12-25 22:54 - 2013-12-25 22:54 - 00000000 _SHDL C:\Users\Default\Vorlagen
2013-12-25 22:54 - 2013-12-25 22:54 - 00000000 _SHDL C:\Users\Default\Startmenü
2013-12-25 22:54 - 2013-12-25 22:54 - 00000000 _SHDL C:\Users\Default\Netzwerkumgebung
2013-12-25 22:54 - 2013-12-25 22:54 - 00000000 _SHDL C:\Users\Default\Lokale Einstellungen
2013-12-25 22:54 - 2013-12-25 22:54 - 00000000 _SHDL C:\Users\Default\Eigene Dateien
2013-12-25 22:54 - 2013-12-25 22:54 - 00000000 _SHDL C:\Users\Default\Druckumgebung
2013-12-25 22:54 - 2013-12-25 22:54 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Musik
2013-12-25 22:54 - 2013-12-25 22:54 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Bilder
2013-12-25 22:54 - 2013-12-25 22:54 - 00000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2013-12-25 22:54 - 2013-12-25 22:54 - 00000000 _SHDL C:\Users\Default\AppData\Local\Verlauf
2013-12-25 22:54 - 2013-12-25 22:54 - 00000000 _SHDL C:\Users\Default\AppData\Local\Anwendungsdaten
2013-12-25 22:54 - 2013-12-25 22:54 - 00000000 _SHDL C:\Users\Default\Anwendungsdaten
2013-12-25 22:54 - 2013-12-25 22:54 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Musik
2013-12-25 22:54 - 2013-12-25 22:54 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Bilder
2013-12-25 22:54 - 2013-12-25 22:54 - 00000000 _SHDL C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2013-12-25 22:54 - 2013-12-25 22:54 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Verlauf
2013-12-25 22:54 - 2013-12-25 22:54 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Anwendungsdaten
2013-12-25 22:49 - 2013-12-25 22:49 - 00000020 ___SH C:\Users\UpdatusUser\ntuser.ini
2013-12-25 22:43 - 2013-12-25 22:43 - 00000000 ____D C:\WINDOWS\system32\config\bbimigrate
2013-12-25 22:42 - 2014-01-08 09:05 - 00000000 ____D C:\Users\Benjamin
2013-12-25 22:42 - 2013-12-25 22:54 - 00028578 _____ C:\WINDOWS\diagwrn.xml
2013-12-25 22:42 - 2013-12-25 22:54 - 00028578 _____ C:\WINDOWS\diagerr.xml
2013-12-25 22:42 - 2013-12-25 22:43 - 00000000 ___RD C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2013-12-25 22:42 - 2013-12-25 22:43 - 00000000 ___RD C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2013-12-25 22:42 - 2013-12-25 22:43 - 00000000 ___RD C:\Users\Benjamin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2013-12-25 22:42 - 2013-12-25 22:42 - 00000000 _SHDL C:\Users\UpdatusUser\Vorlagen
2013-12-25 22:42 - 2013-12-25 22:42 - 00000000 _SHDL C:\Users\UpdatusUser\Startmenü
2013-12-25 22:42 - 2013-12-25 22:42 - 00000000 _SHDL C:\Users\UpdatusUser\Netzwerkumgebung
2013-12-25 22:42 - 2013-12-25 22:42 - 00000000 _SHDL C:\Users\UpdatusUser\Lokale Einstellungen
2013-12-25 22:42 - 2013-12-25 22:42 - 00000000 _SHDL C:\Users\UpdatusUser\Eigene Dateien
2013-12-25 22:42 - 2013-12-25 22:42 - 00000000 _SHDL C:\Users\UpdatusUser\Druckumgebung
2013-12-25 22:42 - 2013-12-25 22:42 - 00000000 _SHDL C:\Users\UpdatusUser\Documents\Eigene Musik
2013-12-25 22:42 - 2013-12-25 22:42 - 00000000 _SHDL C:\Users\UpdatusUser\Documents\Eigene Bilder
2013-12-25 22:42 - 2013-12-25 22:42 - 00000000 _SHDL C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2013-12-25 22:42 - 2013-12-25 22:42 - 00000000 _SHDL C:\Users\UpdatusUser\AppData\Local\Verlauf
2013-12-25 22:42 - 2013-12-25 22:42 - 00000000 _SHDL C:\Users\UpdatusUser\AppData\Local\Anwendungsdaten
2013-12-25 22:42 - 2013-12-25 22:42 - 00000000 _SHDL C:\Users\UpdatusUser\Anwendungsdaten
2013-12-25 22:42 - 2013-12-25 22:42 - 00000000 _SHDL C:\Users\Benjamin\Vorlagen
2013-12-25 22:42 - 2013-12-25 22:42 - 00000000 _SHDL C:\Users\Benjamin\Startmenü
2013-12-25 22:42 - 2013-12-25 22:42 - 00000000 _SHDL C:\Users\Benjamin\Netzwerkumgebung
2013-12-25 22:42 - 2013-12-25 22:42 - 00000000 _SHDL C:\Users\Benjamin\Lokale Einstellungen
2013-12-25 22:42 - 2013-12-25 22:42 - 00000000 _SHDL C:\Users\Benjamin\Eigene Dateien
2013-12-25 22:42 - 2013-12-25 22:42 - 00000000 _SHDL C:\Users\Benjamin\Druckumgebung
2013-12-25 22:42 - 2013-12-25 22:42 - 00000000 _SHDL C:\Users\Benjamin\Documents\Eigene Musik
2013-12-25 22:42 - 2013-12-25 22:42 - 00000000 _SHDL C:\Users\Benjamin\Documents\Eigene Bilder
2013-12-25 22:42 - 2013-12-25 22:42 - 00000000 _SHDL C:\Users\Benjamin\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2013-12-25 22:42 - 2013-12-25 22:42 - 00000000 _SHDL C:\Users\Benjamin\AppData\Local\Verlauf
2013-12-25 22:42 - 2013-12-25 22:42 - 00000000 _SHDL C:\Users\Benjamin\AppData\Local\Anwendungsdaten
2013-12-25 22:42 - 2013-12-25 22:42 - 00000000 _SHDL C:\Users\Benjamin\Anwendungsdaten
2013-12-25 22:42 - 2013-08-22 16:36 - 00000000 ___RD C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2013-12-25 22:42 - 2013-08-22 16:36 - 00000000 ___RD C:\Users\Benjamin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2013-12-25 22:42 - 2013-08-22 16:36 - 00000000 ___RD C:\Users\Benjamin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2013-12-25 22:42 - 2013-08-22 16:36 - 00000000 ____D C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2013-12-25 22:42 - 2013-08-22 16:36 - 00000000 ____D C:\Users\Benjamin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2013-12-25 22:39 - 2014-01-08 22:04 - 00000000 ____D C:\ProgramData\NVIDIA
2013-12-25 22:39 - 2014-01-08 21:46 - 01624396 _____ C:\WINDOWS\WindowsUpdate.log
2013-12-25 22:39 - 2013-11-11 16:02 - 06674208 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll
2013-12-25 22:39 - 2013-11-11 16:02 - 03490080 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvc64.dll
2013-12-25 22:39 - 2013-11-11 16:01 - 02559776 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvcr.dll
2013-12-25 22:39 - 2013-11-11 16:01 - 00922912 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvvsvc.exe
2013-12-25 22:39 - 2013-11-11 16:01 - 00219424 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvmctray.dll
2013-12-25 22:39 - 2013-11-11 16:01 - 00063776 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvshext.dll
2013-12-25 22:38 - 2013-12-25 22:44 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2013-12-25 22:38 - 2013-12-25 22:44 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2013-12-25 22:38 - 2013-12-25 22:38 - 00000000 ____D C:\WINDOWS\SysWOW64\RTCOM
2013-12-25 22:38 - 2013-12-25 22:38 - 00000000 ____D C:\Program Files\Realtek
2013-12-25 22:36 - 2013-12-25 22:58 - 00000000 ___DC C:\WINDOWS\Panther
2013-12-25 22:36 - 2013-12-25 22:36 - 00393216 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMPhoto.dll
2013-12-25 22:36 - 2013-12-25 22:36 - 00348160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMPhoto.dll
2013-12-25 22:36 - 2013-12-25 22:36 - 00197120 _____ (Microsoft Corporation) C:\WINDOWS\system32\scrrun.dll
2013-12-25 22:36 - 2013-12-25 22:36 - 00156672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\scrrun.dll
2013-12-25 22:36 - 2013-12-25 22:36 - 00075360 _____ (Microsoft Corporation) C:\WINDOWS\system32\imagehlp.dll
2013-12-25 22:36 - 2013-12-25 22:36 - 00070680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\imagehlp.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 23183360 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 17112576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 13177344 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 12996608 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 11674624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 11221504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 07399256 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2013-12-25 22:35 - 2013-12-25 22:35 - 05769216 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 04243968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 04191744 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2013-12-25 22:35 - 2013-12-25 22:35 - 04105728 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncEngine.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 02896896 _____ (Microsoft Corporation) C:\WINDOWS\system32\msftedit.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 02764288 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 02570240 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 02334208 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 02266624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msftedit.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 02166784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 02143744 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 02140888 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 01995264 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2013-12-25 22:35 - 2013-12-25 22:35 - 01928192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2013-12-25 22:35 - 2013-12-25 22:35 - 01843712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Display.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 01820160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 01816576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Display.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 01765384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 01765376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 01756160 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMPDMC.exe
2013-12-25 22:35 - 2013-12-25 22:35 - 01642016 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2013-12-25 22:35 - 2013-12-25 22:35 - 01530200 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2013-12-25 22:35 - 2013-12-25 22:35 - 01506680 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe
2013-12-25 22:35 - 2013-12-25 22:35 - 01476184 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2013-12-25 22:35 - 2013-12-25 22:35 - 01395200 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 01391104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMPDMC.exe
2013-12-25 22:35 - 2013-12-25 22:35 - 01345536 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe
2013-12-25 22:35 - 2013-12-25 22:35 - 01302528 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 01157632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 00922624 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 00840704 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSShared.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 00817664 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 00747008 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidcli.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 00744448 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncCore.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 00703488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 00701440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSShared.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 00637952 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncHost.exe
2013-12-25 22:35 - 2013-12-25 22:35 - 00615936 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDMAgent.exe
2013-12-25 22:35 - 2013-12-25 22:35 - 00584192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncCore.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 00568832 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDrive.exe
2013-12-25 22:35 - 2013-12-25 22:35 - 00566784 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpncore.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 00544768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlidcli.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 00516496 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 00479744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncHost.exe
2013-12-25 22:35 - 2013-12-25 22:35 - 00449024 _____ (Microsoft Corporation) C:\WINDOWS\system32\appmgr.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 00406400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxgi.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 00382808 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2013-12-25 22:35 - 2013-12-25 22:35 - 00372568 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\spaceport.sys
2013-12-25 22:35 - 2013-12-25 22:35 - 00366080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\appmgr.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 00358896 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcomp.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 00325464 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBXHCI.SYS
2013-12-25 22:35 - 2013-12-25 22:35 - 00287744 _____ (Microsoft Corporation) C:\WINDOWS\system32\mdmregistration.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 00254464 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 00249856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 00240128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mdmregistration.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 00225792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dcomp.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 00218624 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2013-12-25 22:35 - 2013-12-25 22:35 - 00198656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppXDeploymentClient.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 00189952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 00146776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\SerCx2.sys
2013-12-25 22:35 - 2013-12-25 22:35 - 00115712 _____ (Microsoft Corporation) C:\WINDOWS\system32\winbici.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 00086872 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pdc.sys
2013-12-25 22:35 - 2013-12-25 22:35 - 00039768 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\intelpep.sys
2013-12-25 22:35 - 2013-12-25 22:35 - 00030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\CredentialMigrationHandler.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CredentialMigrationHandler.dll
2013-12-25 22:34 - 2013-12-25 22:34 - 00262144 _____ C:\WINDOWS\system32\config\userdiff
2013-12-25 22:33 - 2013-12-25 22:33 - 00000000 ____D C:\WINDOWS\SysWOW64\XPSViewer
2013-12-25 22:33 - 2013-12-25 22:33 - 00000000 ____D C:\Program Files\Reference Assemblies
2013-12-25 22:33 - 2013-12-25 22:33 - 00000000 ____D C:\Program Files\MSBuild
2013-12-25 22:33 - 2013-12-25 22:33 - 00000000 ____D C:\Program Files (x86)\Reference Assemblies
2013-12-25 22:33 - 2013-12-25 22:33 - 00000000 ____D C:\Program Files (x86)\MSBuild
2013-12-25 22:32 - 2013-08-03 05:48 - 01166520 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationNative_v0300.dll
2013-12-25 22:32 - 2013-08-03 05:48 - 00124112 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2013-12-25 22:32 - 2013-08-03 05:48 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe
2013-12-25 22:32 - 2013-08-03 05:41 - 00778936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationNative_v0300.dll
2013-12-25 22:32 - 2013-08-03 05:41 - 00102608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2013-12-25 22:32 - 2013-08-03 05:41 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TsWpfWrp.exe
2013-12-25 22:11 - 2013-12-25 22:54 - 00006665 _____ C:\WINDOWS\comsetup.log
2013-12-25 19:05 - 2013-12-25 19:05 - 00000000 ____D C:\Users\Benjamin\AppData\Local\NVIDIA
2013-12-25 19:03 - 2013-12-25 19:03 - 00000000 ____D C:\Program Files (x86)\AGEIA Technologies
2013-12-25 19:03 - 2013-11-14 12:57 - 01064224 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvspcap64.dll
2013-12-25 19:03 - 2013-11-14 12:57 - 00955168 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvspcap.dll
2013-12-25 19:00 - 2013-11-14 12:57 - 00039200 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvvad64v.sys
2013-12-25 19:00 - 2013-11-14 12:57 - 00029984 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvaudcap64v.dll
2013-12-25 19:00 - 2013-11-14 12:57 - 00028960 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvaudcap32v.dll
2013-12-25 19:00 - 2013-11-14 12:56 - 30361888 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvoglv64.dll
2013-12-25 19:00 - 2013-11-14 12:56 - 25257248 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcompiler.dll
2013-12-25 19:00 - 2013-11-14 12:56 - 22951200 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvoglv32.dll
2013-12-25 19:00 - 2013-11-14 12:56 - 18293608 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvwgf2umx.dll
2013-12-25 19:00 - 2013-11-14 12:56 - 18208624 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvd3dumx.dll
2013-12-25 19:00 - 2013-11-14 12:56 - 17560352 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcompiler.dll
2013-12-25 19:00 - 2013-11-14 12:56 - 15862272 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvwgf2um.dll
2013-12-25 19:00 - 2013-11-14 12:56 - 15218504 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvd3dum.dll
2013-12-25 19:00 - 2013-11-14 12:56 - 12613408 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvlddmkm.sys
2013-12-25 19:00 - 2013-11-14 12:56 - 11600432 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll
2013-12-25 19:00 - 2013-11-14 12:56 - 11514624 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvopencl.dll
2013-12-25 19:00 - 2013-11-14 12:56 - 09691888 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuda.dll
2013-12-25 19:00 - 2013-11-14 12:56 - 09619872 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvopencl.dll
2013-12-25 19:00 - 2013-11-14 12:56 - 03132704 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll
2013-12-25 19:00 - 2013-11-14 12:56 - 03125024 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvenc.dll
2013-12-25 19:00 - 2013-11-14 12:56 - 03069608 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvapi64.dll
2013-12-25 19:00 - 2013-11-14 12:56 - 02947872 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvid.dll
2013-12-25 19:00 - 2013-11-14 12:56 - 02747680 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvenc.dll
2013-12-25 19:00 - 2013-11-14 12:56 - 02697248 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvapi.dll
2013-12-25 19:00 - 2013-11-14 12:56 - 01884448 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispco6433182.dll
2013-12-25 19:00 - 2013-11-14 12:56 - 01511712 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispgenco6433182.dll
2013-12-25 19:00 - 2013-11-14 12:56 - 00707360 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvFBC64.dll
2013-12-25 19:00 - 2013-11-14 12:56 - 00657184 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFR64.dll
2013-12-25 19:00 - 2013-11-14 12:56 - 00609568 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvFBC.dll
2013-12-25 19:00 - 2013-11-14 12:56 - 00562464 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFR.dll
2013-12-25 19:00 - 2013-11-14 12:56 - 00023754 _____ C:\WINDOWS\system32\nvinfo.pb
2013-12-25 18:59 - 2013-12-25 18:59 - 00000000 ____D C:\NVIDIA
2013-12-25 18:04 - 2014-01-08 22:18 - 00000000 ___RD C:\Users\Benjamin\Google Drive
2013-12-22 07:41 - 2013-12-22 07:41 - 00000000 ____D C:\Users\Benjamin\Downloads\chrome-youtube-downloader-2.6.19
2013-12-17 17:32 - 2013-12-17 17:36 - 00003584 _____ C:\Users\Benjamin\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2013-12-12 19:42 - 2013-12-13 17:59 - 00000000 ____D C:\Program Files (x86)\Mozilla Thunderbird
2013-12-12 07:04 - 2013-12-12 07:04 - 913819726 _____ C:\WINDOWS\MEMORY.DMP
==================== One Month Modified Files and Folders =======
2014-01-08 22:25 - 2014-01-08 22:25 - 00000000 ____D C:\Users\Benjamin\Downloads\FRST-OlderVersion
2014-01-08 22:25 - 2014-01-07 23:12 - 00016089 _____ C:\Users\Benjamin\Downloads\FRST.txt
2014-01-08 22:25 - 2014-01-07 23:12 - 00000000 ____D C:\FRST
2014-01-08 22:25 - 2014-01-07 23:11 - 01931770 _____ (Farbar) C:\Users\Benjamin\Downloads\FRST64.exe
2014-01-08 22:24 - 2013-10-10 18:54 - 00000000 ____D C:\Users\Benjamin\AppData\Roaming\ClassicShell
2014-01-08 22:22 - 2013-10-10 17:46 - 00003598 _____ C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-2304771524-2765285173-2335640364-1001
2014-01-08 22:18 - 2013-12-25 18:04 - 00000000 ___RD C:\Users\Benjamin\Google Drive
2014-01-08 22:17 - 2013-10-10 19:27 - 00000000 ____D C:\Program Files (x86)\Steam
2014-01-08 22:17 - 2013-10-10 17:49 - 00002195 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2014-01-08 22:17 - 2013-10-10 17:48 - 00001122 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2014-01-08 22:08 - 2013-11-14 08:26 - 01776918 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2014-01-08 22:08 - 2013-11-14 08:11 - 00764340 _____ C:\WINDOWS\system32\perfh007.dat
2014-01-08 22:08 - 2013-11-14 08:11 - 00159160 _____ C:\WINDOWS\system32\perfc007.dat
2014-01-08 22:06 - 2013-10-10 17:48 - 00001126 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2014-01-08 22:04 - 2013-12-25 22:39 - 00000000 ____D C:\ProgramData\NVIDIA
2014-01-08 22:04 - 2013-08-22 15:45 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2014-01-08 22:02 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\sru
2014-01-08 21:57 - 2014-01-08 21:57 - 00000000 ____D C:\WINDOWS\ERUNT
2014-01-08 21:50 - 2013-08-22 14:25 - 00262144 ___SH C:\WINDOWS\system32\config\BBI
2014-01-08 21:48 - 2014-01-08 21:44 - 00000000 ____D C:\AdwCleaner
2014-01-08 21:46 - 2013-12-25 22:39 - 01624396 _____ C:\WINDOWS\WindowsUpdate.log
2014-01-08 21:35 - 2013-10-10 18:43 - 00000000 ____D C:\Users\Benjamin\AppData\Roaming\Free Download Manager
2014-01-08 21:34 - 2014-01-08 21:43 - 01233962 _____ C:\Users\Benjamin\Desktop\adwcleaner.exe
2014-01-08 21:34 - 2014-01-08 21:34 - 01037068 _____ (Thisisu) C:\Users\Benjamin\Downloads\JRT.exe
2014-01-08 21:34 - 2014-01-08 21:33 - 01233962 _____ C:\Users\Benjamin\Downloads\adwcleaner.exe
2014-01-08 21:30 - 2014-01-08 21:30 - 00001125 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-01-08 21:30 - 2014-01-08 21:30 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-01-08 21:29 - 2014-01-08 21:29 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Benjamin\Downloads\mbam-setup-1.75.0.1300(1).exe
2014-01-08 09:05 - 2014-01-08 09:05 - 00000000 ____D C:\Users\Benjamin\.pdfsam
2014-01-08 09:05 - 2013-12-25 22:42 - 00000000 ____D C:\Users\Benjamin
2014-01-08 09:01 - 2014-01-07 22:13 - 00000000 ____D C:\Users\Benjamin\Desktop\Präsentation
2014-01-08 08:54 - 2014-01-08 08:54 - 00000000 ____D C:\Program Files\PDF Split And Merge Basic
2014-01-08 08:52 - 2014-01-08 08:52 - 00000000 ____D C:\Users\Benjamin\Downloads\pdfsam-v2_2_2
2014-01-08 08:52 - 2014-01-08 08:51 - 37108698 _____ C:\Users\Benjamin\Downloads\pdfsam-v2_2_2.zip
2014-01-08 07:27 - 2013-08-22 15:44 - 00379024 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2014-01-08 00:46 - 2014-01-08 00:46 - 00018095 _____ C:\Users\Benjamin\Documents\cyxcyx.aup
2014-01-08 00:46 - 2014-01-08 00:46 - 00000000 ____D C:\Users\Benjamin\Documents\cyxcyx_data
2014-01-08 00:46 - 2013-10-10 20:38 - 00000000 ____D C:\Users\Benjamin\AppData\Roaming\Audacity
2014-01-08 00:40 - 2014-01-08 00:37 - 00022778 _____ C:\Users\Benjamin\Desktop\Präsentation.odt
2014-01-07 23:26 - 2014-01-07 23:25 - 00000000 ____D C:\Users\Benjamin\Desktop\Virenscan
2014-01-07 23:23 - 2014-01-07 23:23 - 00029654 _____ C:\Users\Benjamin\Downloads\Addition.txt
2014-01-07 23:09 - 2014-01-07 23:09 - 00000000 _____ C:\Users\Benjamin\defogger_reenable
2014-01-07 23:09 - 2013-10-10 18:43 - 00000000 ____D C:\Program Files (x86)\Free Download Manager
2014-01-07 23:08 - 2014-01-07 23:08 - 00050477 _____ C:\Users\Benjamin\Downloads\Defogger.exe
2014-01-07 22:58 - 2014-01-07 22:58 - 00000000 ____D C:\Users\Benjamin\AppData\Roaming\Malwarebytes
2014-01-07 22:58 - 2014-01-07 22:58 - 00000000 ____D C:\ProgramData\Malwarebytes
2014-01-07 22:58 - 2014-01-07 22:55 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Benjamin\Downloads\mbam-setup-1.75.0.1300.exe
2014-01-07 22:58 - 2013-10-10 18:47 - 00000000 ___RD C:\Users\Benjamin\Desktop\Programme
2014-01-07 22:51 - 2014-01-07 16:28 - 00000000 ____D C:\Program Files\VideoLAN
2014-01-07 22:42 - 2013-11-08 18:19 - 00000000 ____D C:\Users\Benjamin\AppData\Roaming\Skype
2014-01-07 22:25 - 2014-01-06 07:57 - 00000000 ____D C:\Users\Benjamin\Desktop\Fabric meets Canvas - Tim und Friederike
2014-01-07 21:37 - 2014-01-04 08:25 - 00000000 ____D C:\Program Files (x86)\DevPro2
2014-01-07 16:32 - 2014-01-07 16:32 - 00009118 _____ C:\Users\Benjamin\Desktop\303839_3008616.mp4
2014-01-07 16:27 - 2014-01-07 16:27 - 24738792 _____ C:\Users\Benjamin\Downloads\vlc-2.1.2-win64.exe
2014-01-07 15:42 - 2013-10-23 16:30 - 00000000 ____D C:\Users\Benjamin\Desktop\s
2014-01-07 15:26 - 2014-01-07 15:26 - 00086591 _____ C:\Users\Benjamin\Downloads\wadsworth_industria.zip
2014-01-07 01:56 - 2014-01-07 01:34 - 00000000 ____D C:\Users\Benjamin\AppData\Roaming\Little Inferno
2014-01-06 21:22 - 2014-01-03 07:16 - 00000000 ____D C:\Users\Benjamin\Desktop\Layoutgestaltung
2014-01-06 10:24 - 2013-08-22 15:46 - 00339139 _____ C:\WINDOWS\setupact.log
2014-01-06 08:44 - 2014-01-06 08:43 - 00000000 ____D C:\Users\Benjamin\Desktop\usb
2014-01-06 08:34 - 2014-01-04 14:42 - 00000000 ____D C:\Users\Benjamin\Downloads\PhotosBooth_Template_TipSquirrel
2014-01-06 04:18 - 2014-01-06 04:18 - 00009951 _____ C:\Users\Benjamin\Downloads\PhotosBooth_Template_TipSquirrel.zip
2014-01-06 04:15 - 2014-01-06 04:15 - 00009393 _____ C:\Users\Benjamin\Downloads\Photo Booth.atn
2014-01-05 21:40 - 2014-01-05 21:39 - 24513384 _____ C:\Users\Benjamin\Downloads\modern_geometric_triangle_photoshop_patterns_by_sdwhaven-d55gvnx.pat
2014-01-05 21:20 - 2014-01-05 20:05 - 00000000 ____D C:\Users\Benjamin\Downloads\PaintToolSAI
2014-01-05 20:46 - 2014-01-05 20:45 - 00223048 ____T C:\Users\Benjamin\Documents\uujujuj.oxps
2014-01-05 20:14 - 2014-01-05 20:12 - 00000000 ____D C:\ProgramData\Wacom
2014-01-05 20:13 - 2014-01-05 20:13 - 00000000 ____D C:\Users\Benjamin\AppData\Roaming\wacomid-desktop-launcher.DCFD4B89A63EE70BC162777F06D4B93B6397AEC7.1
2014-01-05 20:13 - 2013-10-10 17:39 - 00000000 ____D C:\Users\Benjamin\AppData\Roaming\Adobe
2014-01-05 20:12 - 2014-01-05 20:12 - 00001163 _____ C:\Users\Public\Desktop\Bamboo Dock.lnk
2014-01-05 20:12 - 2014-01-05 20:12 - 00000002 _____ C:\Users\Benjamin\.bdockinstall.log
2014-01-05 20:12 - 2014-01-05 20:12 - 00000000 ____D C:\Users\Default\AppData\Roaming\Macromedia
2014-01-05 20:12 - 2014-01-05 20:12 - 00000000 ____D C:\Users\Default User\AppData\Roaming\Macromedia
2014-01-05 20:12 - 2014-01-05 20:12 - 00000000 ____D C:\Users\Benjamin\AppData\Roaming\Wacom
2014-01-05 20:12 - 2014-01-05 20:12 - 00000000 ____D C:\Program Files (x86)\Bamboo Dock
2014-01-05 20:12 - 2013-10-10 22:08 - 00000000 ____D C:\Users\Benjamin\AppData\Local\Adobe
2014-01-05 20:12 - 2013-10-10 21:28 - 00000000 ____D C:\ProgramData\Adobe
2014-01-05 20:12 - 2013-10-10 21:28 - 00000000 ____D C:\Program Files (x86)\Adobe
2014-01-05 20:11 - 2014-01-05 20:11 - 00000000 ____D C:\Users\Benjamin\AppData\Roaming\WTablet
2014-01-05 20:11 - 2014-01-05 20:11 - 00000000 ____D C:\Program Files\TabletPlugins
2014-01-05 20:11 - 2014-01-05 20:11 - 00000000 ____D C:\Program Files\Tablet
2014-01-05 20:11 - 2014-01-05 20:11 - 00000000 ____D C:\Program Files (x86)\TabletPlugins
2014-01-05 20:10 - 2014-01-05 20:09 - 07434944 _____ C:\Users\Benjamin\Downloads\bamboo_setup_web0407final.exe
2014-01-05 20:05 - 2014-01-05 20:05 - 02339714 _____ C:\Users\Benjamin\Downloads\sai-1.1.0-ful-en.exe
2014-01-05 20:05 - 2014-01-05 20:05 - 00000802 _____ C:\Users\Public\Desktop\PaintTool SAI Ver.1.lnk
2014-01-05 20:05 - 2014-01-05 20:05 - 00000000 ____D C:\Users\Benjamin\AppData\Roaming\SYSTEMAX Software Development
2014-01-05 20:05 - 2014-01-05 20:05 - 00000000 ____D C:\ProgramData\SYSTEMAX Software Development
2014-01-05 16:45 - 2014-01-05 16:45 - 00020916 _____ C:\Users\Benjamin\Downloads\bebas_neue.zip
2014-01-05 13:41 - 2014-01-02 15:26 - 00000000 ____D C:\Users\Benjamin\Desktop\100CANON
2014-01-05 11:12 - 2014-01-05 11:12 - 00002039 _____ C:\Users\Public\Desktop\Adobe Reader XI.lnk
2014-01-04 12:21 - 2014-01-04 12:13 - 71502558 _____ C:\Users\Benjamin\Downloads\Introduction to Magazine layoutsmp4.mp4
2014-01-04 08:34 - 2014-01-04 08:34 - 00001405 _____ C:\Users\Benjamin\Desktop\DevPro.lnk
2014-01-04 08:25 - 2013-11-18 20:02 - 00000000 ____D C:\Program Files (x86)\DevPro
2014-01-04 08:18 - 2014-01-04 08:03 - 409196544 _____ C:\Users\Benjamin\Downloads\DevPro.7z
2014-01-04 08:15 - 2014-01-04 08:02 - 250952389 _____ (YGOPro DevPro Online ) C:\Users\Benjamin\Downloads\SetupDevPro1.9.8r4.exe
2014-01-03 16:34 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\NDF
2014-01-03 07:05 - 2013-10-10 21:14 - 00000000 ___RD C:\Users\Benjamin\Desktop\Spiele
2014-01-03 07:05 - 2013-10-10 20:09 - 00000000 ____D C:\Leilas Zimmer
2014-01-02 20:54 - 2013-10-15 03:35 - 00000000 ____D C:\Program Files (x86)\Origin
2013-12-29 20:18 - 2013-10-10 21:51 - 00000000 ____D C:\Users\Benjamin\Documents\My Games
2013-12-29 20:18 - 2013-10-10 21:51 - 00000000 ____D C:\Users\Benjamin\AppData\Roaming\NVIDIA
2013-12-29 18:41 - 2013-12-29 18:41 - 00001799 _____ C:\Users\Public\Desktop\Alice Madness Returns.lnk
2013-12-29 18:41 - 2013-10-11 18:41 - 00203390 _____ C:\WINDOWS\DirectX.log
2013-12-29 18:41 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\rescache
2013-12-29 16:34 - 2013-10-15 03:38 - 00000000 ____D C:\Program Files (x86)\Origin Games
2013-12-28 18:24 - 2013-12-28 18:24 - 00003002 _____ C:\Users\Benjamin\Downloads\Ferien_Niedersachsen_2013.ics
2013-12-28 18:23 - 2013-12-28 18:23 - 00003359 _____ C:\Users\Benjamin\Downloads\Ferien_Niedersachsen_2014.ics
2013-12-28 03:34 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\AppReadiness
2013-12-28 03:32 - 2013-12-28 03:32 - 00000000 ___RD C:\WINDOWS\BrowserChoice
2013-12-28 03:32 - 2013-10-10 17:38 - 00000000 ____D C:\Users\Benjamin\AppData\Local\Packages
2013-12-28 02:26 - 2013-12-28 02:26 - 00000000 ____D C:\Users\Benjamin\Downloads\unsortiert
2013-12-26 15:28 - 2013-12-26 15:17 - 00000000 ____D C:\Users\Benjamin\Documents\RCT3
2013-12-26 15:19 - 2013-10-10 17:39 - 00000000 ____D C:\Users\Benjamin\AppData\Local\VirtualStore
2013-12-26 15:17 - 2013-12-26 15:17 - 00000000 ____D C:\Users\Benjamin\AppData\Roaming\Atari
2013-12-26 14:59 - 2013-12-26 14:59 - 00461312 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnet.dll
2013-12-26 14:59 - 2013-12-26 14:59 - 00377856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnet.dll
2013-12-26 14:59 - 2013-12-26 14:59 - 00214016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dplayx.dll
2013-12-26 14:59 - 2013-12-26 14:59 - 00066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnathlp.dll
2013-12-26 14:59 - 2013-12-26 14:59 - 00059904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnathlp.dll
2013-12-26 14:59 - 2013-12-26 14:59 - 00045056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpwsockx.dll
2013-12-26 14:59 - 2013-12-26 14:59 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnsvr.exe
2013-12-26 14:59 - 2013-12-26 14:59 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnsvr.exe
2013-12-26 14:59 - 2013-12-26 14:59 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dplaysvr.exe
2013-12-26 14:59 - 2013-12-26 14:59 - 00023552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpmodemx.dll
2013-12-26 14:59 - 2013-12-26 14:59 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnhupnp.dll
2013-12-26 14:59 - 2013-12-26 14:59 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnhpast.dll
2013-12-26 14:59 - 2013-12-26 14:59 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnhupnp.dll
2013-12-26 14:59 - 2013-12-26 14:59 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnhpast.dll
2013-12-26 14:53 - 2013-12-26 14:53 - 00000000 ____D C:\GOG Games
2013-12-26 13:28 - 2013-12-26 13:28 - 00000000 ____D C:\ProgramData\ClassicShell
2013-12-26 13:28 - 2013-12-26 13:28 - 00000000 ____D C:\Program Files\Classic Shell
2013-12-26 13:26 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\restore
2013-12-25 23:00 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\Registration
2013-12-25 22:58 - 2013-12-25 22:58 - 00001454 _____ C:\Users\Benjamin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2013-12-25 22:58 - 2013-12-25 22:36 - 00000000 ___DC C:\WINDOWS\Panther
2013-12-25 22:58 - 2013-10-10 17:39 - 00000000 ___RD C:\Users\Benjamin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-12-25 22:58 - 2013-10-10 17:39 - 00000000 ___RD C:\Users\Benjamin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2013-12-25 22:57 - 2013-12-25 22:57 - 00000020 ___SH C:\Users\Benjamin\ntuser.ini
2013-12-25 22:54 - 2013-12-25 22:54 - 00022960 _____ C:\WINDOWS\system32\emptyregdb.dat
2013-12-25 22:54 - 2013-12-25 22:54 - 00000000 _SHDL C:\Users\Default\Vorlagen
2013-12-25 22:54 - 2013-12-25 22:54 - 00000000 _SHDL C:\Users\Default\Startmenü
2013-12-25 22:54 - 2013-12-25 22:54 - 00000000 _SHDL C:\Users\Default\Netzwerkumgebung
2013-12-25 22:54 - 2013-12-25 22:54 - 00000000 _SHDL C:\Users\Default\Lokale Einstellungen
2013-12-25 22:54 - 2013-12-25 22:54 - 00000000 _SHDL C:\Users\Default\Eigene Dateien
2013-12-25 22:54 - 2013-12-25 22:54 - 00000000 _SHDL C:\Users\Default\Druckumgebung
2013-12-25 22:54 - 2013-12-25 22:54 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Musik
2013-12-25 22:54 - 2013-12-25 22:54 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Bilder
2013-12-25 22:54 - 2013-12-25 22:54 - 00000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2013-12-25 22:54 - 2013-12-25 22:54 - 00000000 _SHDL C:\Users\Default\AppData\Local\Verlauf
2013-12-25 22:54 - 2013-12-25 22:54 - 00000000 _SHDL C:\Users\Default\AppData\Local\Anwendungsdaten
2013-12-25 22:54 - 2013-12-25 22:54 - 00000000 _SHDL C:\Users\Default\Anwendungsdaten
2013-12-25 22:54 - 2013-12-25 22:54 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Musik
2013-12-25 22:54 - 2013-12-25 22:54 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Bilder
2013-12-25 22:54 - 2013-12-25 22:54 - 00000000 _SHDL C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2013-12-25 22:54 - 2013-12-25 22:54 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Verlauf
2013-12-25 22:54 - 2013-12-25 22:54 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Anwendungsdaten
2013-12-25 22:54 - 2013-12-25 22:42 - 00028578 _____ C:\WINDOWS\diagwrn.xml
2013-12-25 22:54 - 2013-12-25 22:42 - 00028578 _____ C:\WINDOWS\diagerr.xml
2013-12-25 22:54 - 2013-12-25 22:11 - 00006665 _____ C:\WINDOWS\comsetup.log
2013-12-25 22:54 - 2013-08-22 16:36 - 00000000 ____D C:\Program Files\Windows NT
2013-12-25 22:54 - 2013-08-22 14:36 - 00000000 __RHD C:\Users\Default
2013-12-25 22:51 - 2013-08-22 16:36 - 00000000 __RSD C:\WINDOWS\Media
2013-12-25 22:51 - 2013-08-22 16:36 - 00000000 __RHD C:\Users\Public\Libraries
2013-12-25 22:49 - 2013-12-25 22:49 - 00000020 ___SH C:\Users\UpdatusUser\ntuser.ini
2013-12-25 22:47 - 2013-11-10 21:59 - 00000000 ____D C:\Program Files\Common Files\logishrd
2013-12-25 22:47 - 2013-11-10 19:47 - 00000000 ____D C:\Users\Benjamin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Life Quest 2 - Metropoville
2013-12-25 22:47 - 2013-11-02 10:26 - 00000000 ____D C:\Users\Benjamin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\IMVU
2013-12-25 22:47 - 2013-10-11 01:30 - 00000000 ____D C:\Users\Benjamin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2013-12-25 22:47 - 2013-10-10 21:43 - 00000000 ____D C:\Users\Benjamin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Audition Online
2013-12-25 22:47 - 2013-10-10 21:12 - 00000000 ____D C:\Users\Benjamin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2013-12-25 22:47 - 2013-10-10 20:19 - 00000000 ____D C:\Users\Benjamin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Winamp Erkennungs-Plug-in
2013-12-25 22:47 - 2013-08-22 14:25 - 00008192 ___SH C:\WINDOWS\system32\config\ELAM
2013-12-25 22:46 - 2013-08-22 16:37 - 00004893 _____ C:\WINDOWS\DtcInstall.log
2013-12-25 22:46 - 2012-07-26 06:37 - 00000000 ____D C:\Users\Default.migrated
2013-12-25 22:45 - 2013-12-04 23:15 - 00000000 ____D C:\WINDOWS\SysWOW64\Adobe
2013-12-25 22:45 - 2013-11-14 08:11 - 00000000 ____D C:\WINDOWS\SysWOW64\WCN
2013-12-25 22:45 - 2013-11-14 08:11 - 00000000 ____D C:\WINDOWS\SysWOW64\sysprep
2013-12-25 22:45 - 2013-11-14 08:11 - 00000000 ____D C:\WINDOWS\system32\WCN
2013-12-25 22:45 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\SysWOW64\MUI
2013-12-25 22:45 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\SysWOW64\migwiz
2013-12-25 22:45 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\SysWOW64\IME
2013-12-25 22:45 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2013-12-25 22:45 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\spool
2013-12-25 22:45 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\MUI
2013-12-25 22:45 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\IME
2013-12-25 22:45 - 2013-08-22 14:36 - 00000000 ____D C:\WINDOWS\SysWOW64\SMI
2013-12-25 22:44 - 2013-12-25 22:38 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2013-12-25 22:44 - 2013-12-25 22:38 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2013-12-25 22:44 - 2013-10-10 17:38 - 00000000 ____D C:\ProgramData\PRICache
2013-12-25 22:44 - 2013-08-22 16:43 - 00000000 ____D C:\WINDOWS\DigitalLocker
2013-12-25 22:44 - 2013-08-22 16:36 - 00000000 __SHD C:\Program Files\Windows Sidebar
2013-12-25 22:44 - 2013-08-22 16:36 - 00000000 __SHD C:\Program Files (x86)\Windows Sidebar
2013-12-25 22:44 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\IME
2013-12-25 22:44 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\Help
2013-12-25 22:44 - 2013-08-22 16:36 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
2013-12-25 22:43 - 2013-12-25 22:43 - 00000000 ____D C:\WINDOWS\system32\config\bbimigrate
2013-12-25 22:43 - 2013-12-25 22:42 - 00000000 ___RD C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2013-12-25 22:43 - 2013-12-25 22:42 - 00000000 ___RD C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2013-12-25 22:43 - 2013-12-25 22:42 - 00000000 ___RD C:\Users\Benjamin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2013-12-25 22:43 - 2013-10-27 00:34 - 00000000 ____D C:\Users\Benjamin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Talk
2013-12-25 22:43 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\Recovery
2013-12-25 22:42 - 2013-12-25 22:42 - 00000000 _SHDL C:\Users\UpdatusUser\Vorlagen
2013-12-25 22:42 - 2013-12-25 22:42 - 00000000 _SHDL C:\Users\UpdatusUser\Startmenü
2013-12-25 22:42 - 2013-12-25 22:42 - 00000000 _SHDL C:\Users\UpdatusUser\Netzwerkumgebung
2013-12-25 22:42 - 2013-12-25 22:42 - 00000000 _SHDL C:\Users\UpdatusUser\Lokale Einstellungen
2013-12-25 22:42 - 2013-12-25 22:42 - 00000000 _SHDL C:\Users\UpdatusUser\Eigene Dateien
2013-12-25 22:42 - 2013-12-25 22:42 - 00000000 _SHDL C:\Users\UpdatusUser\Druckumgebung
2013-12-25 22:42 - 2013-12-25 22:42 - 00000000 _SHDL C:\Users\UpdatusUser\Documents\Eigene Musik
2013-12-25 22:42 - 2013-12-25 22:42 - 00000000 _SHDL C:\Users\UpdatusUser\Documents\Eigene Bilder
2013-12-25 22:42 - 2013-12-25 22:42 - 00000000 _SHDL C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2013-12-25 22:42 - 2013-12-25 22:42 - 00000000 _SHDL C:\Users\UpdatusUser\AppData\Local\Verlauf
2013-12-25 22:42 - 2013-12-25 22:42 - 00000000 _SHDL C:\Users\UpdatusUser\AppData\Local\Anwendungsdaten
2013-12-25 22:42 - 2013-12-25 22:42 - 00000000 _SHDL C:\Users\UpdatusUser\Anwendungsdaten
2013-12-25 22:42 - 2013-12-25 22:42 - 00000000 _SHDL C:\Users\Benjamin\Vorlagen
2013-12-25 22:42 - 2013-12-25 22:42 - 00000000 _SHDL C:\Users\Benjamin\Startmenü
2013-12-25 22:42 - 2013-12-25 22:42 - 00000000 _SHDL C:\Users\Benjamin\Netzwerkumgebung
2013-12-25 22:42 - 2013-12-25 22:42 - 00000000 _SHDL C:\Users\Benjamin\Lokale Einstellungen
2013-12-25 22:42 - 2013-12-25 22:42 - 00000000 _SHDL C:\Users\Benjamin\Eigene Dateien
2013-12-25 22:42 - 2013-12-25 22:42 - 00000000 _SHDL C:\Users\Benjamin\Druckumgebung
2013-12-25 22:42 - 2013-12-25 22:42 - 00000000 _SHDL C:\Users\Benjamin\Documents\Eigene Musik
2013-12-25 22:42 - 2013-12-25 22:42 - 00000000 _SHDL C:\Users\Benjamin\Documents\Eigene Bilder
2013-12-25 22:42 - 2013-12-25 22:42 - 00000000 _SHDL C:\Users\Benjamin\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2013-12-25 22:42 - 2013-12-25 22:42 - 00000000 _SHDL C:\Users\Benjamin\AppData\Local\Verlauf
2013-12-25 22:42 - 2013-12-25 22:42 - 00000000 _SHDL C:\Users\Benjamin\AppData\Local\Anwendungsdaten
2013-12-25 22:42 - 2013-12-25 22:42 - 00000000 _SHDL C:\Users\Benjamin\Anwendungsdaten
2013-12-25 22:40 - 2013-08-22 14:36 - 00000000 ____D C:\WINDOWS\system32\Sysprep
2013-12-25 22:40 - 2008-01-01 01:58 - 00000000 __SHD C:\Recovery
2013-12-25 22:38 - 2013-12-25 22:38 - 00000000 ____D C:\WINDOWS\SysWOW64\RTCOM
2013-12-25 22:38 - 2013-12-25 22:38 - 00000000 ____D C:\Program Files\Realtek
2013-12-25 22:37 - 2013-11-13 23:18 - 00000812 _____ C:\WINDOWS\PFRO.log
2013-12-25 22:36 - 2013-12-25 22:36 - 00393216 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMPhoto.dll
2013-12-25 22:36 - 2013-12-25 22:36 - 00348160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMPhoto.dll
2013-12-25 22:36 - 2013-12-25 22:36 - 00197120 _____ (Microsoft Corporation) C:\WINDOWS\system32\scrrun.dll
2013-12-25 22:36 - 2013-12-25 22:36 - 00156672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\scrrun.dll
2013-12-25 22:36 - 2013-12-25 22:36 - 00075360 _____ (Microsoft Corporation) C:\WINDOWS\system32\imagehlp.dll
2013-12-25 22:36 - 2013-12-25 22:36 - 00070680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\imagehlp.dll
2013-12-25 22:36 - 2013-08-22 16:36 - 00262144 _____ C:\WINDOWS\system32\config\BCD-Template
2013-12-25 22:35 - 2013-12-25 22:35 - 23183360 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 17112576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 13177344 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 12996608 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 11674624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 11221504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 07399256 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2013-12-25 22:35 - 2013-12-25 22:35 - 05769216 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 04243968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 04191744 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2013-12-25 22:35 - 2013-12-25 22:35 - 04105728 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncEngine.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 02896896 _____ (Microsoft Corporation) C:\WINDOWS\system32\msftedit.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 02764288 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 02570240 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 02334208 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 02266624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msftedit.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 02166784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 02143744 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 02140888 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 01995264 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2013-12-25 22:35 - 2013-12-25 22:35 - 01928192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2013-12-25 22:35 - 2013-12-25 22:35 - 01843712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Display.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 01820160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 01816576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Display.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 01765384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 01765376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 01756160 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMPDMC.exe
2013-12-25 22:35 - 2013-12-25 22:35 - 01642016 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2013-12-25 22:35 - 2013-12-25 22:35 - 01530200 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2013-12-25 22:35 - 2013-12-25 22:35 - 01506680 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe
2013-12-25 22:35 - 2013-12-25 22:35 - 01476184 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2013-12-25 22:35 - 2013-12-25 22:35 - 01395200 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 01391104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMPDMC.exe
2013-12-25 22:35 - 2013-12-25 22:35 - 01345536 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe
2013-12-25 22:35 - 2013-12-25 22:35 - 01302528 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 01157632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 00922624 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 00840704 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSShared.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 00817664 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 00747008 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidcli.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 00744448 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncCore.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 00703488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 00701440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSShared.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 00637952 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncHost.exe
2013-12-25 22:35 - 2013-12-25 22:35 - 00615936 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDMAgent.exe
2013-12-25 22:35 - 2013-12-25 22:35 - 00584192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncCore.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 00568832 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDrive.exe
2013-12-25 22:35 - 2013-12-25 22:35 - 00566784 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpncore.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 00544768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlidcli.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 00516496 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 00479744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncHost.exe
2013-12-25 22:35 - 2013-12-25 22:35 - 00449024 _____ (Microsoft Corporation) C:\WINDOWS\system32\appmgr.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 00406400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxgi.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 00382808 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2013-12-25 22:35 - 2013-12-25 22:35 - 00372568 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\spaceport.sys
2013-12-25 22:35 - 2013-12-25 22:35 - 00366080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\appmgr.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 00358896 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcomp.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 00325464 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBXHCI.SYS
2013-12-25 22:35 - 2013-12-25 22:35 - 00287744 _____ (Microsoft Corporation) C:\WINDOWS\system32\mdmregistration.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 00254464 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 00249856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 00240128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mdmregistration.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 00225792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dcomp.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 00218624 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2013-12-25 22:35 - 2013-12-25 22:35 - 00198656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppXDeploymentClient.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 00189952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 00146776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\SerCx2.sys
2013-12-25 22:35 - 2013-12-25 22:35 - 00115712 _____ (Microsoft Corporation) C:\WINDOWS\system32\winbici.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 00086872 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pdc.sys
2013-12-25 22:35 - 2013-12-25 22:35 - 00039768 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\intelpep.sys
2013-12-25 22:35 - 2013-12-25 22:35 - 00030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\CredentialMigrationHandler.dll
2013-12-25 22:35 - 2013-12-25 22:35 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CredentialMigrationHandler.dll
2013-12-25 22:35 - 2013-08-22 16:36 - 00000000 ___RD C:\WINDOWS\ToastData
2013-12-25 22:35 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\WinStore
2013-12-25 22:35 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\MediaViewer
2013-12-25 22:35 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\FileManager
2013-12-25 22:35 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\Camera
2013-12-25 22:34 - 2013-12-25 22:34 - 00262144 _____ C:\WINDOWS\system32\config\userdiff
2013-12-25 22:33 - 2013-12-25 22:33 - 00000000 ____D C:\WINDOWS\SysWOW64\XPSViewer
2013-12-25 22:33 - 2013-12-25 22:33 - 00000000 ____D C:\Program Files\Reference Assemblies
2013-12-25 22:33 - 2013-12-25 22:33 - 00000000 ____D C:\Program Files\MSBuild
2013-12-25 22:33 - 2013-12-25 22:33 - 00000000 ____D C:\Program Files (x86)\Reference Assemblies
2013-12-25 22:33 - 2013-12-25 22:33 - 00000000 ____D C:\Program Files (x86)\MSBuild
2013-12-25 22:27 - 2012-07-26 02:36 - 01817671 _____ C:\WINDOWS\WindowsUpdate (1).log
2013-12-25 22:03 - 2013-11-10 21:59 - 00008726 _____ C:\WINDOWS\system32\lvcoinst.log
2013-12-25 21:47 - 2012-07-26 09:12 - 00000000 ____D C:\WINDOWS\AUInstallAgent
2013-12-25 19:05 - 2013-12-25 19:05 - 00000000 ____D C:\Users\Benjamin\AppData\Local\NVIDIA
2013-12-25 19:03 - 2013-12-25 19:03 - 00000000 ____D C:\Program Files (x86)\AGEIA Technologies
2013-12-25 19:03 - 2013-10-10 17:47 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2013-12-25 18:59 - 2013-12-25 18:59 - 00000000 ____D C:\NVIDIA
2013-12-25 18:02 - 2013-10-10 17:48 - 00000000 ____D C:\Users\Benjamin\AppData\Local\Google
2013-12-25 18:02 - 2013-10-10 17:48 - 00000000 ____D C:\Program Files (x86)\Google
2013-12-25 14:17 - 2013-11-22 18:39 - 00000000 ____D C:\Users\Benjamin\AppData\Roaming\.technic
2013-12-23 13:31 - 2013-10-10 21:31 - 00000000 ____D C:\Users\Benjamin\AppData\Roaming\IrfanView
2013-12-22 07:41 - 2013-12-22 07:41 - 00000000 ____D C:\Users\Benjamin\Downloads\chrome-youtube-downloader-2.6.19
2013-12-19 04:07 - 2013-10-11 15:05 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-12-18 10:09 - 2013-10-10 21:23 - 00084720 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avnetflt.sys
2013-12-18 10:09 - 2013-10-10 21:19 - 00131576 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avipbb.sys
2013-12-18 10:09 - 2013-10-10 21:19 - 00108440 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avgntflt.sys
2013-12-17 17:36 - 2013-12-17 17:32 - 00003584 _____ C:\Users\Benjamin\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2013-12-16 17:17 - 2014-01-05 20:11 - 01913624 _____ (Wacom Technology, Corp.) C:\WINDOWS\system32\Pen_Tablet.dll
2013-12-16 17:17 - 2014-01-05 20:11 - 01906968 _____ (Wacom Technology, Corp.) C:\WINDOWS\system32\Pen_Touch_Tablet.dll
2013-12-16 17:17 - 2014-01-05 20:11 - 01780504 _____ (Wacom Technology, Corp.) C:\WINDOWS\system32\WacomMT.dll
2013-12-16 17:17 - 2014-01-05 20:11 - 01778968 _____ (Wacom Technology, Corp.) C:\WINDOWS\system32\Wintab32.dll
2013-12-16 17:17 - 2014-01-05 20:11 - 01551640 _____ (Wacom Technology, Corp.) C:\WINDOWS\SysWOW64\Pen_Tablet.dll
2013-12-16 17:17 - 2014-01-05 20:11 - 01544472 _____ (Wacom Technology, Corp.) C:\WINDOWS\SysWOW64\Pen_Touch_Tablet.dll
2013-12-16 17:17 - 2014-01-05 20:11 - 01432344 _____ (Wacom Technology, Corp.) C:\WINDOWS\SysWOW64\WacomMT.dll
2013-12-16 17:17 - 2014-01-05 20:11 - 01428248 _____ (Wacom Technology, Corp.) C:\WINDOWS\SysWOW64\Wintab32.dll
2013-12-14 19:19 - 2013-10-10 18:42 - 00000000 ____D C:\WINDOWS\system32\MRT
2013-12-14 03:49 - 2013-10-10 18:42 - 90708896 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2013-12-13 17:59 - 2013-12-12 19:42 - 00000000 ____D C:\Program Files (x86)\Mozilla Thunderbird
2013-12-12 07:04 - 2013-12-12 07:04 - 913819726 _____ C:\WINDOWS\MEMORY.DMP
Some content of TEMP:
====================
C:\Users\Benjamin\AppData\Local\Temp\avgnt.exe
C:\Users\Benjamin\AppData\Local\Temp\DevPro CardManager.exe
C:\Users\Benjamin\AppData\Local\Temp\devpro.dll
C:\Users\Benjamin\AppData\Local\Temp\DevPro.exe
C:\Users\Benjamin\AppData\Local\Temp\ICSharpCode.SharpZipLib.dll
C:\Users\Benjamin\AppData\Local\Temp\PrefJsonCpp.exe
C:\Users\Benjamin\AppData\Local\Temp\Quarantine.exe
C:\Users\Benjamin\AppData\Local\Temp\sqlite3.exe
C:\Users\Benjamin\AppData\Local\Temp\YgoUpdater.exe
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2014-01-08 22:15
==================== End Of Log ============================
Geändert von Ravel (08.01.2014 um 22:28 Uhr) |
|
09.01.2014, 13:11
| #4 |
| /// the machine /// TB-Ausbilder | Vlc-Player durch Vlc.de installiert - Vermutung auf VirusESET Online Scanner
Downloade Dir bitte  SecurityCheck und:
und ein frisches FRST log bitte. Noch Probleme? 
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
| Themen zu Vlc-Player durch Vlc.de installiert - Vermutung auf Virus |
| 32 bit, adblock, antivir, antivirus, avira, browser, desktop, error, failed, firefox, flash player, free download, google, helper, homepage, logfile, mozilla, plug-in, problem, realtek, refresh, registry, scan, security, software, suchmaschine, svchost.exe, system, tablet, umleitung auf unerwünschte seiten, virus, vlc player, vlc-player, vlc.de, windows, windowsapps |
Linear-Darstellung
