| |
| |||||||
Plagegeister aller Art und deren Bekämpfung: Free System Utilities installierte verdächtige ProgrammeWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
 |
15.01.2014, 20:09
| #1 |
| |  Free System Utilities installierte verdächtige Programme Free System Utilities, was ein Dreck. Es hat zusätzlich noch Search Conduit installiert und noch einiges Anderes wie plus-hd-3-8.exe. Ich bin mir nicht sicher, ob es eigenverschulden war, ich habe die "Terms of Use" einfach weggeklickt und schon hatte ich den Salat. Ich habe dann alles bei Systemsteuerung deinstalliert, jedoch war Search Conduit immernoch fest in meinen Firefox integiert. Dabei bin ich eher vorsichtig, benutze No-Script, ABP und Ghostery. Daraufhin habe ich dann folgende Anleitung befolgt: Conduit Engine aus Firefox entfernen - justpaste.it Danach bin ich dann, weil ich zusätzlich im Task-Manager noch IeHelper.exe, FirefoxHelper.exe und ChromeHelper.exe entdeckt habe, Rustikat geworden und habe Free System Utilities gelöscht... Das Teil hatte aber keine Uninstall.exe, so habe ich es von Hand gemacht. Dann bin ich über http://www.trojaner-board.de/146805-...entfernen.html gestolpert. Habe jetzt einmal den Malwarebytes Quick-Scan laufen lassen und habe alles gelöscht, was der mir ausgeschmissen hat. Daraufhin war mein Elan weg und ich habe mich hier angemeldet. Da kam schon ne Menge bei rum, hab ein schlechtes Gefühl. Anbei die Logs von Malwarebytes und FRST. Grüße, Colo |
|
16.01.2014, 07:43
| #2 |
| /// the machine /// TB-Ausbilder    |  Free System Utilities installierte verdächtige Programme Hi,
__________________Logs bitte immer in den Thread posten. Zur Not aufteilen und mehrere Posts nutzen.  So funktioniert es:Posten in CODE-Tags Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR, 7Z-Archive zu packen erschwert mir massiv die Arbeit, es sei denn natürlich die Datei wäre ansonsten zu gross für das Forum. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:
__________________ |
|
16.01.2014, 13:31
| #3 |
| | Free System Utilities installierte verdächtige Programme Okay, entschuldigung. Da kam nur die Fehlermeldung: "Logs bitte als Archiv an den Beitrag anhängen!", eventuell mal überarbeiten.
__________________FRST: FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 15-01-2014 01 Ran by Hanni (administrator) on HANNI-XMG on 15-01-2014 20:01:29 Running from C:\Users\Hanni\Downloads Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard Internet Explorer Version 11 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (AMD) C:\Windows\System32\atiesrxx.exe (AMD) C:\Windows\System32\atieclxx.exe (Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\WTabletServiceCon.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe (Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe () C:\Windows\SysWOW64\PnkBstrA.exe () C:\Program Files (x86)\Hotkey\PowerBiosServer.exe () C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Logitech, Inc.) C:\Program Files\Logitech\SetPointP\SetPoint.exe (Logitech, Inc.) C:\Program Files\Common Files\Logishrd\KHAL3\KHALMNPR.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe (Logitech Inc.) C:\Program Files\Logitech Gaming Software\LCore.exe (Microsoft Corporation) C:\Program Files\Microsoft Xbox 360 Accessories\XBoxStat.exe (Intel Corporation) C:\Windows\System32\hkcmd.exe (Intel Corporation) C:\Windows\System32\igfxpers.exe (Intel Corporation) C:\Windows\System32\igfxsrvc.exe () C:\Program Files (x86)\Hotkey\Hotkey.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe (Creative Technology Ltd) C:\Program Files (x86)\Creative\THX TruStudio Pro\THXAudioCP\THXAudio.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe (Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuSchd2.exe (Hewlett-Packard) C:\Program Files (x86)\HP\Digital Imaging\bin\HpqSRmon.exe (Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe (Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_TabletUser.exe (Wacom Technology) C:\Program Files\Tablet\Pen\WacomHost.exe (Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_Tablet.exe (Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_TouchUser.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Intel Corporation) C:\Program Files (x86)\Intel\Extreme Tuning Utility\XtuService.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe (ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe (Updater) C:\ProgramData\Updater\updater.exe (Parallel Lines Development, LLC) C:\ProgramData\InternetUpdater\InternetUpdaterService.exe (WatchDog) C:\ProgramData\RHelpers\IeHelper\IeHelper.exe (WatchDog) C:\ProgramData\RHelpers\ChromeHelper\ChromeHelper.exe (WatchDog) C:\ProgramData\RHelpers\FirefoxHelper\FirefoxHelper.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbam.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe (Microsoft Corporation) C:\Windows\System32\taskmgr.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2052392 2010-02-11] (Synaptics Incorporated) HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13374568 2011-12-13] (Realtek Semiconductor) HKLM\...\Run: [THXCfg64] - C:\Windows\system32\THXCfg64.dll [25600 2010-09-14] (Creative Technology Ltd.) HKLM\...\Run: [Logitech Download Assistant] - C:\Windows\System32\LogiLDA.dll [1832760 2012-09-20] (Logitech, Inc.) HKLM\...\Run: [EvtMgr6] - C:\Program Files\Logitech\SetPointP\SetPoint.exe [1744152 2011-10-07] (Logitech, Inc.) HKLM\...\Run: [Launch LCore] - C:\Program Files\Logitech Gaming Software\LCore.exe [7406392 2012-11-29] (Logitech Inc.) HKLM\...\Run: [XboxStat] - C:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe [825184 2009-09-30] (Microsoft Corporation) HKLM-x32\...\Run: [THX Audio Control Panel] - C:\Program Files (x86)\Creative\THX TruStudio Pro\THXAudioCP\THXAudio.exe [1374720 2010-11-01] (Creative Technology Ltd) HKLM-x32\...\Run: [IAStorIcon] - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284440 2011-11-29] (Intel Corporation) HKLM-x32\...\Run: [USB3MON] - C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [291608 2012-01-26] (Intel Corporation) HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [684600 2013-12-12] (Avira Operations GmbH & Co. KG) HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [766208 2013-09-05] (Advanced Micro Devices, Inc.) HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.) HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-11-02] (Apple Inc.) HKLM-x32\...\Run: [HP Software Update] - C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [54840 2007-05-08] (Hewlett-Packard) HKLM-x32\...\Run: [hpqSRMon] - C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSRMon.exe [150528 2008-07-22] (Hewlett-Packard) HKLM-x32\...\Runonce: [SpUninstallCleanUp] - REG delete HKEY_LOCAL_MACHINE\Software\SearchProtect /f [x] HKLM-x32\...\RunOnce: [ Malwarebytes Anti-Malware ] - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent [532040 2013-04-04] (Malwarebytes Corporation) Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation) Winlogon\Notify\LBTWlgn: c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll (Logitech, Inc.) HKCU\...\Run: [Updater] - C:\ProgramData\Updater\Updater.exe [486264 2013-12-18] (Updater) ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.mysn.de SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKLM-x32 - DefaultScope {4A925154-73DA-43D8-83EE-E5AC2A86C8C0} URL = SearchScopes: HKLM-x32 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKCU - DefaultScope {4A925154-73DA-43D8-83EE-E5AC2A86C8C0} URL = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT3311336&CUI=UN21837181293132817&UM=2 SearchScopes: HKCU - {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = hxxp://search.conduit.com/Results.aspx?ctid=CT3320326&octid=EB_ORIGINAL_CTID&SearchSource=58&CUI=&UM=2&UP=SPC483F158-299A-4C2D-9A46-4DADC1A92F6C&q={searchTerms}&SSPV= SearchScopes: HKCU - {4A925154-73DA-43D8-83EE-E5AC2A86C8C0} URL = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT3311336&CUI=UN21837181293132817&UM=2 SearchScopes: HKCU - {AD481DD3-1766-48DB-A169-002963D7B607} URL = BHO: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - D:\Office2013\Office15\OCHelper.dll (Microsoft Corporation) BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - D:\Office2013\Office15\URLREDIR.DLL (Microsoft Corporation) BHO: DVDVideoSoft IE Extension - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns64.dll (DVDVideoSoft Ltd.) BHO-x32: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll (Hewlett-Packard Co.) BHO-x32: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated) BHO-x32: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation) BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO-x32: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll (Microsoft Corporation) BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation) BHO-x32: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) BHO-x32: DVDVideoSoft IE Extension - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll (DVDVideoSoft Ltd.) BHO-x32: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll (Hewlett-Packard Co.) DPF: HKLM {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab DPF: HKLM-x32 {6C269571-C6D7-4818-BCA4-32A035E8C884} hxxp://ccfiles.creative.com/Web/softwareupdate/su/ocx/15102/CTSUEng.cab DPF: HKLM-x32 {D4B68B83-8710-488B-A692-D74B50BA558E} hxxp://ccfiles.creative.com/Web/softwareupdate/ocx/15113/CTPIDPDE.cab DPF: HKLM-x32 {F6ACF75C-C32C-447B-9BEF-46B766368D29} hxxp://ccfiles.creative.com/Web/softwareupdate/ocx/130321/CTPID.cab Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - D:\Office2013\Office15\MSOSB.DLL (Microsoft Corporation) Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies) Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 FireFox: ======== FF ProfilePath: C:\Users\Hanni\AppData\Roaming\Mozilla\Firefox\Profiles\qngyj133.default FF user.js: detected! => C:\Users\Hanni\AppData\Roaming\Mozilla\Firefox\Profiles\qngyj133.default\user.js FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll () FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.) FF Plugin: @microsoft.com/GENUINE - disabled No File FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation) FF Plugin: @microsoft.com/SharePoint,version=14.0 - D:\OFFICE~1\Office15\NPSPWRAP.DLL (Microsoft Corporation) FF Plugin: @videolan.org/vlc,version=2.0.2 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin: @wacom.com/wtPlugin,version=2.1.0.2 - C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll (Wacom) FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll () FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll () FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.) FF Plugin-x32: @divx.com/DivX Web Player Plug-In,version=1.0.0 - C:\Program Files (x86)\DivX\DivX Web Player\npdivx32.dll (DivX, LLC) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.0.59 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation) FF Plugin-x32: @java.com/DTPlugin,version=10.7.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=10.9.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @microsoft.com/GENUINE - disabled No File FF Plugin-x32: @microsoft.com/Lync,version=15.0 - C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll (Microsoft Corporation) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MIF5BA~1\Office15\NPSPWRAP.DLL (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @videolan.org/vlc,version=2.0.8 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin-x32: @wacom.com/wtPlugin,version=2.1.0.2 - C:\Program Files (x86)\TabletPlugins\npWacomTabletPlugin.dll (Wacom) FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin HKCU: @phonostar.de/phonostar - C:\Program Files (x86)\dradio-Recorder\npphonostarDetectNP.dll No File FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\Hanni\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS) FF Plugin HKCU: amazon.com/AmazonMP3DownloaderPlugin - C:\Users\Hanni\AppData\Local\Program Files\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin10181.dll (Amazon.com, Inc.) FF Plugin HKCU: ubisoft.com/uplaypc - C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll () FF Plugin HKCU: wacom.com/WacomTabletPlugin - C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll (Wacom) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\np-mswmp.dll (Microsoft Corporation) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npMeetingJoinPluginOC.dll (Microsoft Corporation) FF SearchPlugin: C:\Users\Hanni\AppData\Roaming\Mozilla\Firefox\Profiles\qngyj133.default\searchplugins\youtube-videosuche.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazonAniSearchdotcom-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazonSempervideodotcom-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml FF Extension: vis - C:\Users\Hanni\AppData\Roaming\Mozilla\Firefox\Profiles\qngyj133.default\Extensions\EFGLQA@78ETGYN-0W7FN789T87.COM [2014-01-15] FF Extension: FoxyProxy Standard - C:\Users\Hanni\AppData\Roaming\Mozilla\Firefox\Profiles\qngyj133.default\Extensions\foxyproxy@eric.h.jung [2013-10-27] FF Extension: Ghostery - C:\Users\Hanni\AppData\Roaming\Mozilla\Firefox\Profiles\qngyj133.default\Extensions\firefox@ghostery.com.xpi [2013-08-14] FF Extension: Magic Actions for YouTube™ - C:\Users\Hanni\AppData\Roaming\Mozilla\Firefox\Profiles\qngyj133.default\Extensions\jid0-UVAeBCfd34Kk5usS8A1CBiobvM8@jetpack.xpi [2013-03-16] FF Extension: New Tab Tools - C:\Users\Hanni\AppData\Roaming\Mozilla\Firefox\Profiles\qngyj133.default\Extensions\newtabtools@darktrojan.net.xpi [2012-10-23] FF Extension: NoScript - C:\Users\Hanni\AppData\Roaming\Mozilla\Firefox\Profiles\qngyj133.default\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi [2012-10-07] FF Extension: Adblock Plus - C:\Users\Hanni\AppData\Roaming\Mozilla\Firefox\Profiles\qngyj133.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2012-09-06] FF HKLM-x32\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 FF Extension: HP Smart Web Printing - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2014-01-09] FF HKCU\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 FF Extension: HP Smart Web Printing - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2014-01-09] FF HKCU\...\Firefox\Extensions: [{B64D9B05-48E1-4CEB-BF58-E0643994E900}] - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff\ FF Extension: Download videos and MP3s from YouTube - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff\ [] ==================== Services (Whitelisted) ================= R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440376 2013-12-12] (Avira Operations GmbH & Co. KG) R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440376 2013-11-14] (Avira Operations GmbH & Co. KG) S2 CLKMSVC10_38F51D56; C:\Program Files (x86)\CyberLink\PowerDVD10\NavFilter\kmsvc.exe [241648 2011-04-20] (CyberLink) R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [161560 2012-01-20] (Intel Corporation) R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation) R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation) R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76888 2013-12-02] () R2 PowerBiosServer; C:\Program Files (x86)\Hotkey\PowerBiosServer.exe [35328 2011-02-18] () R2 RichVideo; C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [247152 2010-08-19] () S2 SystemStoreService; C:\Program Files (x86)\SoftwareUpdater\SystemStore.exe [297984 2014-01-15] () R4 WTabletServiceCon; C:\Program Files\Tablet\Pen\WTabletServiceCon.exe [619904 2012-12-11] (Wacom Technology, Corp.) R2 XTU3SERVICE; C:\Program Files (x86)\Intel\Extreme Tuning Utility\XtuService.exe [14848 2012-01-11] (Intel Corporation) S3 Futuremark SystemInfo Service; "C:\Program Files (x86)\Futuremark\Futuremark SystemInfo\FMSISvc.exe" [x] ==================== Drivers (Whitelisted) ==================== R3 AcpiCtlDrv; C:\Windows\system32\drivers\AcpiCtlDrv.sys [25848 2011-06-28] (Intel Corporation) R3 Ak27x64; C:\Windows\System32\DRIVERS\Ak27x64.sys [2740328 2012-03-07] (Bigfoot Networks, Inc.) R0 amdkmpfd; C:\Windows\System32\DRIVERS\amdkmpfd.sys [36096 2013-05-21] (Advanced Micro Devices, Inc.) S1 ASPI32; C:\Windows\SysWow64\Drivers\ASPI32.sys [16877 2002-07-17] (Adaptec) R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108440 2013-12-12] (Avira Operations GmbH & Co. KG) R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131576 2013-12-12] (Avira Operations GmbH & Co. KG) R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-10-07] (Avira Operations GmbH & Co. KG) R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2012-11-28] (DT Soft Ltd) R2 iocbios2; C:\Program Files (x86)\Intel\Extreme Tuning Utility\Drivers\IocDriver\64bit\iocbios2.sys [22776 2011-12-22] (Intel Corporation) S3 LADF_BakerCOnly; C:\Windows\System32\DRIVERS\ladfBakerCamd64.sys [410184 2011-03-18] (Logitech) S3 LADF_BakerROnly; C:\Windows\System32\DRIVERS\ladfBakerRamd64.sys [335688 2011-03-18] (Logitech) R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation) S3 NvStUSB; C:\Windows\system32\drivers\nvstusb.sys [121960 2010-12-12] () R0 sptd; C:\Windows\System32\Drivers\sptd.sys [564824 2012-11-28] (Duplex Secure Ltd.) S3 VUSB3HUB; C:\Windows\system32\drivers\ViaHub3.sys [63488 2010-09-03] (VIA Technologies, Inc.) U3 a2ufamke; C:\Windows\System32\Drivers\a2ufamke.sys [0 ] (Advanced Micro Devices) S3 cpuz135; \??\C:\Windows\TEMP\cpuz135\cpuz135_x64.sys [x] S3 getbus; \??\C:\Users\Hanni\AppData\Local\Temp\getbus.sys [x] S3 GPU-Z; \??\C:\Users\Hanni\AppData\Local\Temp\GPU-Z.sys [x] S3 VBoxNetFlt; system32\DRIVERS\VBoxNetFlt.sys [x] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-01-15 20:01 - 2014-01-15 20:01 - 00022426 _____ C:\Users\Hanni\Downloads\FRST.txt 2014-01-15 20:01 - 2014-01-15 20:01 - 00000000 ____D C:\FRST 2014-01-15 19:59 - 2014-01-15 20:00 - 02076160 _____ (Farbar) C:\Users\Hanni\Downloads\FRST64.exe 2014-01-15 19:30 - 2014-01-15 19:30 - 00000000 ____D C:\Users\Hanni\AppData\Roaming\Malwarebytes 2014-01-15 19:30 - 2014-01-15 19:30 - 00000000 ____D C:\ProgramData\Malwarebytes 2014-01-15 19:30 - 2014-01-15 19:30 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware 2014-01-15 19:30 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys 2014-01-15 19:28 - 2014-01-15 19:28 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Hanni\Downloads\mbam-setup-1.75.0.1300.exe 2014-01-15 18:15 - 2014-01-15 18:26 - 00000000 ____D C:\Users\Hanni\AppData\Local\FreeSystemUtilities 2014-01-15 18:10 - 2014-01-15 19:57 - 00000000 ____D C:\ProgramData\InternetUpdater 2014-01-15 18:00 - 2014-01-15 19:28 - 00002563 _____ C:\Users\Public\Desktop\Free System Utilities.lnk 2014-01-15 18:00 - 2014-01-15 18:06 - 00000000 ____D C:\Users\Hanni\AppData\Roaming\Systweak 2014-01-15 18:00 - 2014-01-15 18:00 - 00000000 ____D C:\Windows\SysWOW64\SearchProtect 2014-01-15 18:00 - 2014-01-15 18:00 - 00000000 ____D C:\ProgramData\Updater 2014-01-15 18:00 - 2014-01-15 18:00 - 00000000 ____D C:\ProgramData\RHelpers 2014-01-15 18:00 - 2014-01-15 18:00 - 00000000 ____D C:\ProgramData\FreeSystemUtilities 2014-01-15 18:00 - 2013-07-11 13:49 - 00020312 _____ (Systweak Inc., (www.systweak.com)) C:\Windows\system32\roboot64.exe 2014-01-15 17:59 - 2014-01-15 19:58 - 00000000 ____D C:\ProgramData\Conduit 2014-01-15 17:54 - 2014-01-15 17:54 - 00000000 ____D C:\Users\Hanni\AppData\Local\SoftwareUpdater 2014-01-15 17:54 - 2014-01-15 17:54 - 00000000 ____D C:\Users\Hanni\AppData\Local\Software Updater 2014-01-15 17:48 - 2014-01-15 17:48 - 00000032 _____ C:\Users\Hanni\Downloads\script.cmd 2014-01-15 17:39 - 2014-01-15 17:44 - 00000000 ____D C:\Users\Hanni\AppData\Local\Freemium 2014-01-15 17:38 - 2014-01-15 19:29 - 00003754 _____ C:\Windows\System32\Tasks\Freemium1ClickMaint 2014-01-15 17:38 - 2014-01-15 17:56 - 00004208 _____ C:\Windows\System32\Tasks\Software Updater 2014-01-15 17:38 - 2014-01-15 17:56 - 00004166 _____ C:\Windows\System32\Tasks\Software Updater Ui 2014-01-15 17:38 - 2014-01-15 17:38 - 00000000 ____D C:\Program Files (x86)\SoftwareUpdater 2014-01-15 17:37 - 2014-01-15 17:37 - 00000000 ____D C:\Users\Hanni\AppData\Roaming\Windows Net Data 2014-01-15 17:36 - 2014-01-15 19:57 - 00000000 ____D C:\Users\Hanni\AppData\Local\DownloadGuide 2014-01-15 17:36 - 2014-01-15 17:36 - 00742488 _____ C:\Users\Hanni\Downloads\DLG11_free-system-utilities_chip_de-DE.exe 2014-01-15 00:45 - 2013-11-27 02:41 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys 2014-01-15 00:45 - 2013-11-27 02:41 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys 2014-01-15 00:45 - 2013-11-27 02:41 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys 2014-01-15 00:45 - 2013-11-27 02:41 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys 2014-01-15 00:45 - 2013-11-27 02:41 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys 2014-01-15 00:45 - 2013-11-27 02:41 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys 2014-01-15 00:45 - 2013-11-27 02:41 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys 2014-01-15 00:45 - 2013-11-26 12:40 - 00376768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys 2014-01-15 00:45 - 2013-11-26 11:32 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2014-01-10 22:17 - 2014-01-10 22:18 - 00000000 ____D C:\Users\Hanni\AppData\Roaming\DVDVideoSoft 2014-01-10 22:16 - 2014-01-10 22:16 - 34008992 _____ (DVDVideoSoft Ltd. ) C:\Users\Hanni\Downloads\FreeYouTubeToMP3Converter-3.12.20.1230.exe 2014-01-10 01:51 - 2014-01-10 02:04 - 00000000 ____D C:\Users\Hanni\AppData\Roaming\Tropico 4 2014-01-10 01:49 - 2014-01-10 01:49 - 00000000 ____D C:\Users\Hanni\AppData\Roaming\Kalypso Media 2014-01-09 12:50 - 2014-01-09 12:54 - 00000000 ____D C:\Users\Hanni\AppData\Roaming\HP 2014-01-09 12:50 - 2014-01-09 12:50 - 00000000 ____D C:\ProgramData\WEBREG 2014-01-09 12:49 - 2014-01-09 12:49 - 00003148 _____ C:\Windows\System32\Tasks\SidebarExecute 2014-01-09 12:49 - 2014-01-09 12:49 - 00000000 ____D C:\Users\Hanni\AppData\Local\HP 2014-01-09 12:48 - 2014-01-09 12:48 - 00001365 _____ C:\Users\Public\Desktop\HP Solution Center.lnk 2014-01-09 12:48 - 2014-01-09 12:48 - 00000000 ____D C:\Windows\SysWOW64\spool 2014-01-09 12:48 - 2014-01-09 12:48 - 00000000 ____D C:\ProgramData\HP Product Assistant 2014-01-09 12:47 - 2014-01-09 12:48 - 00000000 ____D C:\Program Files (x86)\HP 2014-01-09 12:44 - 2014-01-09 12:54 - 00000000 ____D C:\ProgramData\HP 2014-01-09 12:44 - 2014-01-09 12:50 - 00000806 _____ C:\ProgramData\hpzinstall.log 2014-01-09 12:44 - 2014-01-09 12:49 - 00245350 _____ C:\Windows\hpoins19.dat 2014-01-09 12:44 - 2009-10-20 05:30 - 00013898 ____N C:\Windows\hpomdl19.dat 2014-01-09 12:44 - 2009-07-08 11:51 - 00861184 _____ (Hewlett-Packard) C:\Windows\system32\hpowiav1.dll 2014-01-09 12:44 - 2009-07-08 11:51 - 00730624 _____ (Hewlett-Packard Co.) C:\Windows\system32\hpotscl1.dll 2014-01-09 12:44 - 2009-07-08 11:51 - 00642360 _____ (Hewlett-Packard) C:\Windows\system32\hpzids40.dll 2014-01-09 12:44 - 2009-07-08 11:51 - 00498176 _____ (Hewlett-Packard Co.) C:\Windows\system32\hpovst01.dll 2014-01-09 12:35 - 2014-01-09 12:42 - 380301136 _____ C:\Users\Hanni\Downloads\AIO_CDB_NonNet_Full_Win_WW_130_141.exe 2014-01-06 14:46 - 2014-01-06 14:46 - 26675832 _____ C:\Users\Hanni\Downloads\The Passion HiFi - Bomb Show.wav 2014-01-06 14:41 - 2014-01-06 14:41 - 39513696 _____ C:\Users\Hanni\Downloads\The Passion HiFi - I Love U Baby.wav 2014-01-06 14:40 - 2014-01-06 14:41 - 34550180 _____ C:\Users\Hanni\Downloads\The Passion HiFi - Laws of Movement.wav 2014-01-05 17:38 - 2014-01-05 17:38 - 00002725 _____ C:\Users\Public\Desktop\GK1.lnk 2014-01-05 17:38 - 2014-01-05 17:38 - 00000000 ____D C:\Program Files (x86)\Elsevier 2014-01-05 16:14 - 2014-01-05 16:14 - 00000000 ___RD C:\Users\Hanni\Documents\Ubisoft 2014-01-03 13:22 - 2014-01-14 17:49 - 00020193 _____ C:\Users\Hanni\Documents\TombRaider.log 2014-01-02 01:43 - 2014-01-02 01:43 - 00000000 ____D C:\Users\Hanni\Documents\How To Survive Saves 2014-01-01 18:40 - 2014-01-01 18:55 - 00012976 _____ C:\Users\Hanni\Desktop\Elsz Me Em 2013.xlsx 2013-12-30 18:21 - 2014-01-13 02:24 - 00000000 __SHD C:\Users\Hanni\wc 2013-12-30 18:21 - 2013-12-30 18:34 - 00000000 ____D C:\Users\Hanni\AppData\Local\Ubisoft 2013-12-30 18:21 - 2013-12-30 18:21 - 00000000 __SHD C:\Users\Hanni\AppData\Roaming\wyUpdate AU 2013-12-29 23:28 - 2013-12-30 00:39 - 00000000 ____D C:\Users\Hanni\Documents\Shadowrun Returns 2013-12-29 23:26 - 2013-12-29 23:26 - 00000000 ____D C:\Users\Hanni\AppData\Local\Harebrained Schemes 2013-12-29 17:39 - 2014-01-11 22:19 - 00000000 ____D C:\Users\Hanni\Desktop\Grüne Folien 2013-12-29 13:17 - 2013-11-26 12:54 - 23183360 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2013-12-29 13:17 - 2013-11-26 11:19 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2013-12-29 13:17 - 2013-11-26 11:18 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2013-12-29 13:17 - 2013-11-26 11:11 - 17112576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2013-12-29 13:17 - 2013-11-26 10:48 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2013-12-29 13:17 - 2013-11-26 10:46 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2013-12-29 13:17 - 2013-11-26 10:41 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2013-12-29 13:17 - 2013-11-26 10:29 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2013-12-29 13:17 - 2013-11-26 10:27 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2013-12-29 13:17 - 2013-11-26 10:23 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2013-12-29 13:17 - 2013-11-26 10:21 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2013-12-29 13:17 - 2013-11-26 10:18 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2013-12-29 13:17 - 2013-11-26 10:18 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2013-12-29 13:17 - 2013-11-26 10:16 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2013-12-29 13:17 - 2013-11-26 09:57 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2013-12-29 13:17 - 2013-11-26 09:38 - 02166784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2013-12-29 13:17 - 2013-11-26 09:38 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2013-12-29 13:17 - 2013-11-26 09:35 - 05769216 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2013-12-29 13:17 - 2013-11-26 09:32 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2013-12-29 13:17 - 2013-11-26 09:28 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2013-12-29 13:17 - 2013-11-26 09:16 - 04243968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2013-12-29 13:17 - 2013-11-26 09:02 - 01995264 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2013-12-29 13:17 - 2013-11-26 08:48 - 12996608 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2013-12-29 13:17 - 2013-11-26 08:32 - 01928192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2013-12-29 13:17 - 2013-11-26 08:26 - 11221504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2013-12-29 13:17 - 2013-11-26 08:07 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2013-12-29 13:17 - 2013-11-26 07:40 - 01395200 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2013-12-29 13:17 - 2013-11-26 07:34 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2013-12-29 13:17 - 2013-11-26 07:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2013-12-29 13:17 - 2013-11-26 07:33 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2013-12-29 13:17 - 2013-11-26 07:27 - 01157632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2013-12-19 02:55 - 2013-10-14 18:00 - 00028368 _____ (Microsoft Corporation) C:\Windows\system32\IEUDINIT.EXE 2013-12-19 02:53 - 2013-12-19 02:53 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2013-12-19 02:53 - 2013-12-19 02:53 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2013-12-19 02:53 - 2013-12-19 02:53 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll 2013-12-19 02:53 - 2013-12-19 02:53 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2013-12-19 02:53 - 2013-12-19 02:53 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2013-12-19 02:53 - 2013-12-19 02:53 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll 2013-12-19 02:53 - 2013-12-19 02:53 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2013-12-19 02:53 - 2013-12-19 02:53 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat 2013-12-19 02:53 - 2013-12-19 02:53 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat 2013-12-19 02:53 - 2013-12-19 02:53 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2013-12-19 02:53 - 2013-12-19 02:53 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2013-12-19 02:53 - 2013-12-19 02:53 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2013-12-19 02:53 - 2013-12-19 02:53 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2013-12-19 02:53 - 2013-12-19 02:53 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2013-12-19 02:53 - 2013-12-19 02:53 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2013-12-19 02:53 - 2013-12-19 02:53 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2013-12-19 02:53 - 2013-12-19 02:53 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec 2013-12-19 02:53 - 2013-12-19 02:53 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2013-12-19 02:53 - 2013-12-19 02:53 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2013-12-19 02:53 - 2013-12-19 02:53 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll 2013-12-19 02:53 - 2013-12-19 02:53 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2013-12-19 02:53 - 2013-12-19 02:53 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll 2013-12-19 02:53 - 2013-12-19 02:53 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2013-12-19 02:53 - 2013-12-19 02:53 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll 2013-12-19 02:53 - 2013-12-19 02:53 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll 2013-12-19 02:53 - 2013-12-19 02:53 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll 2013-12-19 02:53 - 2013-12-19 02:53 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll 2013-12-19 02:53 - 2013-12-19 02:53 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2013-12-19 02:53 - 2013-12-19 02:53 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll 2013-12-19 02:53 - 2013-12-19 02:53 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll 2013-12-19 02:53 - 2013-12-19 02:53 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe 2013-12-19 02:53 - 2013-12-19 02:53 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2013-12-19 02:53 - 2013-12-19 02:53 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe 2013-12-19 02:53 - 2013-12-19 02:53 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll 2013-12-19 02:53 - 2013-12-19 02:53 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe 2013-12-19 02:53 - 2013-12-19 02:53 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe 2013-12-19 02:53 - 2013-12-19 02:53 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll 2013-12-19 02:53 - 2013-12-19 02:53 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll 2013-12-19 02:53 - 2013-12-19 02:53 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll 2013-12-19 02:53 - 2013-12-19 02:53 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll 2013-12-19 02:53 - 2013-12-19 02:53 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2013-12-19 02:53 - 2013-12-19 02:53 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll 2013-12-19 02:53 - 2013-12-19 02:53 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2013-12-19 02:53 - 2013-12-19 02:53 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll 2013-12-19 02:53 - 2013-12-19 02:53 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe 2013-12-19 02:53 - 2013-12-19 02:53 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2013-12-19 02:53 - 2013-12-19 02:53 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe 2013-12-19 02:53 - 2013-12-19 02:53 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2013-12-19 02:53 - 2013-12-19 02:53 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2013-12-19 02:53 - 2013-12-19 02:53 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll 2013-12-19 02:53 - 2013-12-19 02:53 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll 2013-12-19 02:53 - 2013-12-19 02:53 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx 2013-12-19 02:53 - 2013-12-19 02:53 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe 2013-12-19 02:53 - 2013-12-19 02:53 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe 2013-12-19 02:53 - 2013-12-19 02:53 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2013-12-19 02:53 - 2013-12-19 02:53 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll 2013-12-19 02:53 - 2013-12-19 02:53 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx 2013-12-19 02:53 - 2013-12-19 02:53 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll 2013-12-19 02:53 - 2013-12-19 02:53 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll 2013-12-19 02:53 - 2013-12-19 02:53 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2013-12-19 02:53 - 2013-12-19 02:53 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll 2013-12-19 02:53 - 2013-12-19 02:53 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll 2013-12-19 02:53 - 2013-12-19 02:53 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2013-12-19 02:53 - 2013-12-19 02:53 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll 2013-12-19 02:53 - 2013-12-19 02:53 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll 2013-12-19 02:53 - 2013-12-19 02:53 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll 2013-12-19 02:53 - 2013-12-19 02:53 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll 2013-12-19 02:53 - 2013-12-19 02:53 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2013-12-19 02:53 - 2013-12-19 02:53 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll 2013-12-19 02:53 - 2013-12-19 02:53 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2013-12-19 02:53 - 2013-12-19 02:53 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2013-12-19 02:53 - 2013-12-19 02:53 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll 2013-12-19 02:53 - 2013-12-19 02:53 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll 2013-12-19 02:53 - 2013-12-19 02:53 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe 2013-12-19 02:53 - 2013-12-19 02:53 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe 2013-12-19 02:53 - 2013-12-19 02:53 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe 2013-12-19 02:53 - 2013-12-19 02:53 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe 2013-12-19 02:52 - 2013-12-19 02:55 - 00009768 _____ C:\Windows\IE11_main.log 2013-12-17 00:54 - 2013-12-17 00:54 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69 2013-12-17 00:54 - 2013-12-17 00:54 - 00000000 ____D C:\Program Files\iTunes 2013-12-17 00:54 - 2013-12-17 00:54 - 00000000 ____D C:\Program Files\iPod 2013-12-17 00:54 - 2013-12-17 00:54 - 00000000 ____D C:\Program Files (x86)\iTunes 2013-12-16 11:27 - 2013-12-16 11:28 - 00000000 ____D C:\Users\Hanni\Desktop\Immu 2013-12-16 11:17 - 2013-12-16 11:23 - 00000000 ____D C:\Users\Hanni\Desktop\Umwelt ==================== One Month Modified Files and Folders ======= 2014-01-15 20:01 - 2014-01-15 20:01 - 00022426 _____ C:\Users\Hanni\Downloads\FRST.txt 2014-01-15 20:01 - 2014-01-15 20:01 - 00000000 ____D C:\FRST 2014-01-15 20:00 - 2014-01-15 19:59 - 02076160 _____ (Farbar) C:\Users\Hanni\Downloads\FRST64.exe 2014-01-15 20:00 - 2013-05-01 11:49 - 00010240 _____ C:\Users\Hanni\Desktop\Datenvolumen.db 2014-01-15 19:58 - 2014-01-15 17:59 - 00000000 ____D C:\ProgramData\Conduit 2014-01-15 19:57 - 2014-01-15 18:10 - 00000000 ____D C:\ProgramData\InternetUpdater 2014-01-15 19:57 - 2014-01-15 17:36 - 00000000 ____D C:\Users\Hanni\AppData\Local\DownloadGuide 2014-01-15 19:30 - 2014-01-15 19:30 - 00000000 ____D C:\Users\Hanni\AppData\Roaming\Malwarebytes 2014-01-15 19:30 - 2014-01-15 19:30 - 00000000 ____D C:\ProgramData\Malwarebytes 2014-01-15 19:30 - 2014-01-15 19:30 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware 2014-01-15 19:29 - 2014-01-15 17:38 - 00003754 _____ C:\Windows\System32\Tasks\Freemium1ClickMaint 2014-01-15 19:28 - 2014-01-15 19:28 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Hanni\Downloads\mbam-setup-1.75.0.1300.exe 2014-01-15 19:28 - 2014-01-15 18:00 - 00002563 _____ C:\Users\Public\Desktop\Free System Utilities.lnk 2014-01-15 19:02 - 2009-07-14 05:45 - 00021872 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-01-15 19:02 - 2009-07-14 05:45 - 00021872 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-01-15 18:26 - 2014-01-15 18:15 - 00000000 ____D C:\Users\Hanni\AppData\Local\FreeSystemUtilities 2014-01-15 18:06 - 2014-01-15 18:00 - 00000000 ____D C:\Users\Hanni\AppData\Roaming\Systweak 2014-01-15 18:00 - 2014-01-15 18:00 - 00000000 ____D C:\Windows\SysWOW64\SearchProtect 2014-01-15 18:00 - 2014-01-15 18:00 - 00000000 ____D C:\ProgramData\Updater 2014-01-15 18:00 - 2014-01-15 18:00 - 00000000 ____D C:\ProgramData\RHelpers 2014-01-15 18:00 - 2014-01-15 18:00 - 00000000 ____D C:\ProgramData\FreeSystemUtilities 2014-01-15 18:00 - 2013-06-13 18:24 - 00000000 ____D C:\ProgramData\Package Cache 2014-01-15 18:00 - 2012-09-06 00:33 - 01858846 _____ C:\Windows\WindowsUpdate.log 2014-01-15 17:56 - 2014-01-15 17:38 - 00004208 _____ C:\Windows\System32\Tasks\Software Updater 2014-01-15 17:56 - 2014-01-15 17:38 - 00004166 _____ C:\Windows\System32\Tasks\Software Updater Ui 2014-01-15 17:56 - 2010-11-21 07:50 - 00710752 _____ C:\Windows\system32\perfh007.dat 2014-01-15 17:56 - 2010-11-21 07:50 - 00155050 _____ C:\Windows\system32\perfc007.dat 2014-01-15 17:56 - 2009-07-14 06:13 - 01651750 _____ C:\Windows\system32\PerfStringBackup.INI 2014-01-15 17:54 - 2014-01-15 17:54 - 00000000 ____D C:\Users\Hanni\AppData\Local\SoftwareUpdater 2014-01-15 17:54 - 2014-01-15 17:54 - 00000000 ____D C:\Users\Hanni\AppData\Local\Software Updater 2014-01-15 17:52 - 2013-12-11 22:49 - 00003490 _____ C:\Windows\System32\Tasks\AutoKMS 2014-01-15 17:51 - 2012-09-06 00:33 - 00000000 ____D C:\Users\Hanni 2014-01-15 17:51 - 2010-11-21 04:47 - 00296694 _____ C:\Windows\PFRO.log 2014-01-15 17:51 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2014-01-15 17:51 - 2009-07-14 05:51 - 00164163 _____ C:\Windows\setupact.log 2014-01-15 17:48 - 2014-01-15 17:48 - 00000032 _____ C:\Users\Hanni\Downloads\script.cmd 2014-01-15 17:44 - 2014-01-15 17:39 - 00000000 ____D C:\Users\Hanni\AppData\Local\Freemium 2014-01-15 17:40 - 2013-03-17 05:33 - 00000000 ____D C:\Users\Hanni\Desktop\Programme 2014-01-15 17:40 - 2012-09-29 11:46 - 00000000 ____D C:\Users\Hanni\Desktop\Games 2014-01-15 17:38 - 2014-01-15 17:38 - 00000000 ____D C:\Program Files (x86)\SoftwareUpdater 2014-01-15 17:37 - 2014-01-15 17:37 - 00000000 ____D C:\Users\Hanni\AppData\Roaming\Windows Net Data 2014-01-15 17:36 - 2014-01-15 17:36 - 00742488 _____ C:\Users\Hanni\Downloads\DLG11_free-system-utilities_chip_de-DE.exe 2014-01-15 16:54 - 2009-07-14 05:45 - 00473640 _____ C:\Windows\system32\FNTCACHE.DAT 2014-01-15 00:47 - 2013-12-11 22:46 - 00000000 ____D C:\ProgramData\Microsoft Help 2014-01-15 00:47 - 2009-07-14 03:34 - 00000513 _____ C:\Windows\win.ini 2014-01-15 00:46 - 2013-07-11 11:42 - 00000000 ____D C:\Windows\system32\MRT 2014-01-15 00:45 - 2012-12-13 13:50 - 00000000 ____D C:\Program Files (x86)\Steam 2014-01-15 00:45 - 2012-09-06 13:23 - 86054176 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2014-01-14 17:49 - 2014-01-03 13:22 - 00020193 _____ C:\Users\Hanni\Documents\TombRaider.log 2014-01-13 17:38 - 2012-09-06 20:46 - 00000000 ____D C:\Users\Hanni\AppData\Roaming\vlc 2014-01-13 02:24 - 2013-12-30 18:21 - 00000000 __SHD C:\Users\Hanni\wc 2014-01-13 02:05 - 2013-02-13 01:50 - 00000000 ____D C:\Users\Hanni\AppData\Roaming\uTorrent 2014-01-12 12:50 - 2012-10-28 14:57 - 00000000 ____D C:\Taskmanager 2014-01-11 22:19 - 2013-12-29 17:39 - 00000000 ____D C:\Users\Hanni\Desktop\Grüne Folien 2014-01-11 15:08 - 2013-12-11 22:46 - 00000000 ____D C:\Users\Hanni\AppData\Local\Microsoft Help 2014-01-10 22:18 - 2014-01-10 22:17 - 00000000 ____D C:\Users\Hanni\AppData\Roaming\DVDVideoSoft 2014-01-10 22:16 - 2014-01-10 22:16 - 34008992 _____ (DVDVideoSoft Ltd. ) C:\Users\Hanni\Downloads\FreeYouTubeToMP3Converter-3.12.20.1230.exe 2014-01-10 02:04 - 2014-01-10 01:51 - 00000000 ____D C:\Users\Hanni\AppData\Roaming\Tropico 4 2014-01-10 01:49 - 2014-01-10 01:49 - 00000000 ____D C:\Users\Hanni\AppData\Roaming\Kalypso Media 2014-01-09 16:35 - 2012-11-07 22:23 - 00000000 ____D C:\Windows\pss 2014-01-09 13:36 - 2012-09-07 11:49 - 00000000 ____D C:\Users\Hanni\AppData\Roaming\Skype 2014-01-09 12:54 - 2014-01-09 12:50 - 00000000 ____D C:\Users\Hanni\AppData\Roaming\HP 2014-01-09 12:54 - 2014-01-09 12:44 - 00000000 ____D C:\ProgramData\HP 2014-01-09 12:53 - 2012-09-06 00:33 - 00134160 _____ C:\Users\Hanni\AppData\Local\GDIPFONTCACHEV1.DAT 2014-01-09 12:50 - 2014-01-09 12:50 - 00000000 ____D C:\ProgramData\WEBREG 2014-01-09 12:50 - 2014-01-09 12:44 - 00000806 _____ C:\ProgramData\hpzinstall.log 2014-01-09 12:49 - 2014-01-09 12:49 - 00003148 _____ C:\Windows\System32\Tasks\SidebarExecute 2014-01-09 12:49 - 2014-01-09 12:49 - 00000000 ____D C:\Users\Hanni\AppData\Local\HP 2014-01-09 12:49 - 2014-01-09 12:44 - 00245350 _____ C:\Windows\hpoins19.dat 2014-01-09 12:48 - 2014-01-09 12:48 - 00001365 _____ C:\Users\Public\Desktop\HP Solution Center.lnk 2014-01-09 12:48 - 2014-01-09 12:48 - 00000000 ____D C:\Windows\SysWOW64\spool 2014-01-09 12:48 - 2014-01-09 12:48 - 00000000 ____D C:\ProgramData\HP Product Assistant 2014-01-09 12:48 - 2014-01-09 12:47 - 00000000 ____D C:\Program Files (x86)\HP 2014-01-09 12:42 - 2014-01-09 12:35 - 380301136 _____ C:\Users\Hanni\Downloads\AIO_CDB_NonNet_Full_Win_WW_130_141.exe 2014-01-06 14:46 - 2014-01-06 14:46 - 26675832 _____ C:\Users\Hanni\Downloads\The Passion HiFi - Bomb Show.wav 2014-01-06 14:41 - 2014-01-06 14:41 - 39513696 _____ C:\Users\Hanni\Downloads\The Passion HiFi - I Love U Baby.wav 2014-01-06 14:41 - 2014-01-06 14:40 - 34550180 _____ C:\Users\Hanni\Downloads\The Passion HiFi - Laws of Movement.wav 2014-01-05 17:38 - 2014-01-05 17:38 - 00002725 _____ C:\Users\Public\Desktop\GK1.lnk 2014-01-05 17:38 - 2014-01-05 17:38 - 00000000 ____D C:\Program Files (x86)\Elsevier 2014-01-05 16:14 - 2014-01-05 16:14 - 00000000 ___RD C:\Users\Hanni\Documents\Ubisoft 2014-01-05 16:14 - 2012-08-28 20:07 - 00354464 _____ C:\Windows\DirectX.log 2014-01-02 01:43 - 2014-01-02 01:43 - 00000000 ____D C:\Users\Hanni\Documents\How To Survive Saves 2014-01-02 01:25 - 2013-01-05 18:02 - 00000000 ____D C:\Users\Hanni\Documents\Telltale Games 2014-01-02 00:48 - 2013-01-02 22:48 - 00000000 ____D C:\Users\Hanni\AppData\Local\Daedalic Entertainment 2014-01-01 18:57 - 2012-11-28 21:02 - 00000000 ____D C:\Users\Hanni\Documents\My Games 2014-01-01 18:55 - 2014-01-01 18:40 - 00012976 _____ C:\Users\Hanni\Desktop\Elsz Me Em 2013.xlsx 2013-12-30 18:34 - 2013-12-30 18:21 - 00000000 ____D C:\Users\Hanni\AppData\Local\Ubisoft 2013-12-30 18:21 - 2013-12-30 18:21 - 00000000 __SHD C:\Users\Hanni\AppData\Roaming\wyUpdate AU 2013-12-30 00:52 - 2012-08-28 20:18 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information 2013-12-30 00:39 - 2013-12-29 23:28 - 00000000 ____D C:\Users\Hanni\Documents\Shadowrun Returns 2013-12-29 23:26 - 2013-12-29 23:26 - 00000000 ____D C:\Users\Hanni\AppData\Local\Harebrained Schemes 2013-12-29 21:20 - 2013-08-19 16:19 - 00000000 ____D C:\Users\Hanni\Downloads\Rest 2013-12-29 17:42 - 2012-12-18 15:57 - 00000000 ____D C:\Users\Hanni\AppData\Roaming\Ubisoft 2013-12-29 14:47 - 2013-10-28 17:01 - 00000000 ____D C:\Users\Hanni\AppData\Roaming\Origin 2013-12-29 14:47 - 2013-10-28 16:56 - 00000000 ____D C:\Program Files (x86)\Origin 2013-12-20 15:22 - 2012-12-07 21:59 - 00000000 ___RD C:\Program Files (x86)\Skype 2013-12-20 15:22 - 2012-09-07 11:49 - 00000000 ____D C:\ProgramData\Skype 2013-12-19 23:43 - 2013-03-16 22:31 - 00000000 ____D C:\Users\Hanni\AppData\Roaming\.minecraft 2013-12-19 11:42 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache 2013-12-19 09:44 - 2012-09-06 00:33 - 00001439 _____ C:\Users\Hanni\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2013-12-19 09:43 - 2012-09-07 16:35 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2013-12-19 03:13 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\PolicyDefinitions 2013-12-19 02:55 - 2013-12-19 02:52 - 00009768 _____ C:\Windows\IE11_main.log 2013-12-19 02:53 - 2013-12-19 02:53 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2013-12-19 02:53 - 2013-12-19 02:53 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2013-12-19 02:53 - 2013-12-19 02:53 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll 2013-12-19 02:53 - 2013-12-19 02:53 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2013-12-19 02:53 - 2013-12-19 02:53 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2013-12-19 02:53 - 2013-12-19 02:53 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll 2013-12-19 02:53 - 2013-12-19 02:53 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2013-12-19 02:53 - 2013-12-19 02:53 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat 2013-12-19 02:53 - 2013-12-19 02:53 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat 2013-12-19 02:53 - 2013-12-19 02:53 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2013-12-19 02:53 - 2013-12-19 02:53 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2013-12-19 02:53 - 2013-12-19 02:53 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2013-12-19 02:53 - 2013-12-19 02:53 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2013-12-19 02:53 - 2013-12-19 02:53 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2013-12-19 02:53 - 2013-12-19 02:53 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2013-12-19 02:53 - 2013-12-19 02:53 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2013-12-19 02:53 - 2013-12-19 02:53 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec 2013-12-19 02:53 - 2013-12-19 02:53 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2013-12-19 02:53 - 2013-12-19 02:53 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2013-12-19 02:53 - 2013-12-19 02:53 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll 2013-12-19 02:53 - 2013-12-19 02:53 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2013-12-19 02:53 - 2013-12-19 02:53 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll 2013-12-19 02:53 - 2013-12-19 02:53 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2013-12-19 02:53 - 2013-12-19 02:53 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll 2013-12-19 02:53 - 2013-12-19 02:53 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll 2013-12-19 02:53 - 2013-12-19 02:53 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll 2013-12-19 02:53 - 2013-12-19 02:53 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll 2013-12-19 02:53 - 2013-12-19 02:53 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2013-12-19 02:53 - 2013-12-19 02:53 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll 2013-12-19 02:53 - 2013-12-19 02:53 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll 2013-12-19 02:53 - 2013-12-19 02:53 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe 2013-12-19 02:53 - 2013-12-19 02:53 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2013-12-19 02:53 - 2013-12-19 02:53 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe 2013-12-19 02:53 - 2013-12-19 02:53 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll 2013-12-19 02:53 - 2013-12-19 02:53 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe 2013-12-19 02:53 - 2013-12-19 02:53 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe 2013-12-19 02:53 - 2013-12-19 02:53 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll 2013-12-19 02:53 - 2013-12-19 02:53 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll 2013-12-19 02:53 - 2013-12-19 02:53 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll 2013-12-19 02:53 - 2013-12-19 02:53 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll 2013-12-19 02:53 - 2013-12-19 02:53 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2013-12-19 02:53 - 2013-12-19 02:53 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll 2013-12-19 02:53 - 2013-12-19 02:53 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2013-12-19 02:53 - 2013-12-19 02:53 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll 2013-12-19 02:53 - 2013-12-19 02:53 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe 2013-12-19 02:53 - 2013-12-19 02:53 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2013-12-19 02:53 - 2013-12-19 02:53 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe 2013-12-19 02:53 - 2013-12-19 02:53 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2013-12-19 02:53 - 2013-12-19 02:53 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2013-12-19 02:53 - 2013-12-19 02:53 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll 2013-12-19 02:53 - 2013-12-19 02:53 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll 2013-12-19 02:53 - 2013-12-19 02:53 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx 2013-12-19 02:53 - 2013-12-19 02:53 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe 2013-12-19 02:53 - 2013-12-19 02:53 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe 2013-12-19 02:53 - 2013-12-19 02:53 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2013-12-19 02:53 - 2013-12-19 02:53 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll 2013-12-19 02:53 - 2013-12-19 02:53 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx 2013-12-19 02:53 - 2013-12-19 02:53 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll 2013-12-19 02:53 - 2013-12-19 02:53 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll 2013-12-19 02:53 - 2013-12-19 02:53 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2013-12-19 02:53 - 2013-12-19 02:53 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll 2013-12-19 02:53 - 2013-12-19 02:53 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll 2013-12-19 02:53 - 2013-12-19 02:53 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2013-12-19 02:53 - 2013-12-19 02:53 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll 2013-12-19 02:53 - 2013-12-19 02:53 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll 2013-12-19 02:53 - 2013-12-19 02:53 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll 2013-12-19 02:53 - 2013-12-19 02:53 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll 2013-12-19 02:53 - 2013-12-19 02:53 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2013-12-19 02:53 - 2013-12-19 02:53 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll 2013-12-19 02:53 - 2013-12-19 02:53 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2013-12-19 02:53 - 2013-12-19 02:53 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2013-12-19 02:53 - 2013-12-19 02:53 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll 2013-12-19 02:53 - 2013-12-19 02:53 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll 2013-12-19 02:53 - 2013-12-19 02:53 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe 2013-12-19 02:53 - 2013-12-19 02:53 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe 2013-12-19 02:53 - 2013-12-19 02:53 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe 2013-12-19 02:53 - 2013-12-19 02:53 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe 2013-12-17 00:54 - 2013-12-17 00:54 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69 2013-12-17 00:54 - 2013-12-17 00:54 - 00000000 ____D C:\Program Files\iTunes 2013-12-17 00:54 - 2013-12-17 00:54 - 00000000 ____D C:\Program Files\iPod 2013-12-17 00:54 - 2013-12-17 00:54 - 00000000 ____D C:\Program Files (x86)\iTunes 2013-12-16 13:09 - 2013-01-18 23:41 - 00000000 ____D C:\ProgramData\Solidshield 2013-12-16 12:10 - 2013-12-15 17:29 - 00000000 ____D C:\Program Files (x86)\Mozilla Thunderbird 2013-12-16 12:08 - 2012-09-23 17:42 - 00018960 _____ (Logitech, Inc.) C:\Windows\system32\Drivers\LNonPnP.sys 2013-12-16 12:08 - 2012-09-23 17:42 - 00004412 _____ C:\Windows\LkmdfCoInst.log 2013-12-16 11:28 - 2013-12-16 11:27 - 00000000 ____D C:\Users\Hanni\Desktop\Immu 2013-12-16 11:23 - 2013-12-16 11:17 - 00000000 ____D C:\Users\Hanni\Desktop\Umwelt 2013-12-16 01:38 - 2013-10-15 17:17 - 00000000 ____D C:\Users\Hanni\AppData\Roaming\Wacom Some content of TEMP: ==================== C:\Users\Hanni\AppData\Local\Temp\avgnt.exe C:\Users\Hanni\AppData\Local\Temp\nsd6C11.exe C:\Users\Hanni\AppData\Local\Temp\nsd7C82.tmp.tbFree.dll C:\Users\Hanni\AppData\Local\Temp\nsn3526.exe C:\Users\Hanni\AppData\Local\Temp\nsn823C.exe C:\Users\Hanni\AppData\Local\Temp\nso1CF6.exe C:\Users\Hanni\AppData\Local\Temp\nssBF1E.exe C:\Users\Hanni\AppData\Local\Temp\nsx87AB.exe C:\Users\Hanni\AppData\Local\Temp\ose00000.exe C:\Users\Hanni\AppData\Local\Temp\SPStub.exe C:\Users\Hanni\AppData\Local\Temp\tbFree.dll C:\Users\Hanni\AppData\Local\Temp\_isB843.exe ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\rpcss.dll => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2014-01-09 15:10 ==================== End Of Log ============================ --- --- --- Additional: Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 15-01-2014 01
Ran by Hanni at 2014-01-15 20:01:49
Running from C:\Users\Hanni\Downloads
Boot Mode: Normal
==========================================================
==================== Security Center ========================
AV: Avira Desktop (Enabled - Up to date) {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}
AS: Avira Desktop (Enabled - Up to date) {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installed Programs ======================
µTorrent (x32 Version: 3.3.0.29082 - BitTorrent Inc.)
64 Bit HP CIO Components Installer (Version: 6.2.1 - Hewlett-Packard) Hidden
7-Zip 9.20 (x64 edition) (Version: 9.20.00.0 - Igor Pavlov)
A New Beginning - Final Cut (x32 Version: - Daedalic Entertainment)
Adobe AIR (x32 Version: 2.6.0.19140 - Adobe Systems Incorporated)
Adobe AIR (x32 Version: 2.6.0.19140 - Adobe Systems Incorporated) Hidden
Adobe Flash Player 11 Plugin (x32 Version: 11.9.900.170 - Adobe Systems Incorporated)
Adobe Flash Player ActiveX (x32 Version: 9.0.124.0 - Adobe Systems Incorporated)
Adobe Reader X (10.1.4) - Deutsch (x32 Version: 10.1.4 - Adobe Systems Incorporated)
AIO_CDB_ProductContext (x32 Version: 130.0.365.000 - Hewlett-Packard) Hidden
AIO_CDB_Software (x32 Version: 130.0.365.000 - Hewlett-Packard) Hidden
AIO_Scan (x32 Version: 130.0.421.000 - Hewlett-Packard) Hidden
Amazon MP3-Downloader 1.0.18 (HKCU Version: 1.0.18 - Amazon Services LLC)
AMD Accelerated Video Transcoding (Version: 13.20.100.30905 - Advanced Micro Devices, Inc.) Hidden
AMD Catalyst Control Center (x32 Version: 2013.0905.312.3832 - Ihr Firmenname) Hidden
AMD Catalyst Install Manager (Version: 8.0.915.0 - Advanced Micro Devices, Inc.)
AMD Drag and Drop Transcoding (Version: 2.00.0000 - Advanced Micro Devices, Inc.) Hidden
AMD Media Foundation Decoders (Version: 1.0.80905.0331 - Advanced Micro Devices, Inc.) Hidden
AMD Wireless Display v3.0 (Version: 1.0.0.14 - Advanced Micro Devices, Inc.) Hidden
ANNO 1404 - Königsedition (x32 Version: 1.02.0000 - Ubisoft)
Anno 1701 (x32 Version: 1.02 - Sunflowers)
AoA DVD Ripper (x32 Version: - AoAMedia.Com)
Apple Application Support (x32 Version: 2.3.6 - Apple Inc.)
Apple Mobile Device Support (Version: 7.0.0.117 - Apple Inc.)
Apple Software Update (x32 Version: 2.1.3.127 - Apple Inc.)
Assassin’s Creed® III (x32 Version: - Ubisoft Montreal)
Assassin's Creed Brotherhood (x32 Version: - )
Assassin's Creed II (x32 Version: - Ubisoft Montreal)
Assassin's Creed Revelations (x32 Version: - Ubisoft)
Audacity 2.0.5 (x32 Version: 2.0.5 - Audacity Team)
Audible Download Manager (x32 Version: 6.6.0.15 - Audible, Inc.)
Avira Free Antivirus (x32 Version: 14.0.2.286 - Avira)
Bastion (x32 Version: - Supergiant Games)
Batman: Arkham City GOTY (x32 Version: - Rocksteady Studios)
BioShock (x32 Version: - 2K Boston)
BioShock Infinite (x32 Version: - Irrational Games)
Bonjour (Version: 3.0.0.10 - Apple Inc.)
BufferChm (x32 Version: 130.0.331.000 - Hewlett-Packard) Hidden
Call of Duty(R) 4 - Modern Warfare(TM) 1.6 Patch (x32 Version: - ) Hidden
Call of Duty(R) 4 - Modern Warfare(TM) 1.7 Patch (x32 Version: - ) Hidden
Catalyst Control Center - Branding (x32 Version: 1.00.0000 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Graphics Previews Common (x32 Version: 2013.0905.312.3832 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center InstallProxy (x32 Version: 2013.0905.312.3832 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Localization All (x32 Version: 2013.0905.312.3832 - Advanced Micro Devices, Inc.) Hidden
CCC Help Chinese Standard (x32 Version: 2013.0905.0311.3832 - Advanced Micro Devices, Inc.) Hidden
CCC Help Chinese Traditional (x32 Version: 2013.0905.0311.3832 - Advanced Micro Devices, Inc.) Hidden
CCC Help Czech (x32 Version: 2013.0905.0311.3832 - Advanced Micro Devices, Inc.) Hidden
CCC Help Danish (x32 Version: 2013.0905.0311.3832 - Advanced Micro Devices, Inc.) Hidden
CCC Help Dutch (x32 Version: 2013.0905.0311.3832 - Advanced Micro Devices, Inc.) Hidden
CCC Help English (x32 Version: 2013.0905.0311.3832 - Advanced Micro Devices, Inc.) Hidden
CCC Help Finnish (x32 Version: 2013.0905.0311.3832 - Advanced Micro Devices, Inc.) Hidden
CCC Help French (x32 Version: 2013.0905.0311.3832 - Advanced Micro Devices, Inc.) Hidden
CCC Help German (x32 Version: 2013.0905.0311.3832 - Advanced Micro Devices, Inc.) Hidden
CCC Help Greek (x32 Version: 2013.0905.0311.3832 - Advanced Micro Devices, Inc.) Hidden
CCC Help Hungarian (x32 Version: 2013.0905.0311.3832 - Advanced Micro Devices, Inc.) Hidden
CCC Help Italian (x32 Version: 2013.0905.0311.3832 - Advanced Micro Devices, Inc.) Hidden
CCC Help Japanese (x32 Version: 2013.0905.0311.3832 - Advanced Micro Devices, Inc.) Hidden
CCC Help Korean (x32 Version: 2013.0905.0311.3832 - Advanced Micro Devices, Inc.) Hidden
CCC Help Norwegian (x32 Version: 2013.0905.0311.3832 - Advanced Micro Devices, Inc.) Hidden
CCC Help Polish (x32 Version: 2013.0905.0311.3832 - Advanced Micro Devices, Inc.) Hidden
CCC Help Portuguese (x32 Version: 2013.0905.0311.3832 - Advanced Micro Devices, Inc.) Hidden
CCC Help Russian (x32 Version: 2013.0905.0311.3832 - Advanced Micro Devices, Inc.) Hidden
CCC Help Spanish (x32 Version: 2013.0905.0311.3832 - Advanced Micro Devices, Inc.) Hidden
CCC Help Swedish (x32 Version: 2013.0905.0311.3832 - Advanced Micro Devices, Inc.) Hidden
CCC Help Thai (x32 Version: 2013.0905.0311.3832 - Advanced Micro Devices, Inc.) Hidden
CCC Help Turkish (x32 Version: 2013.0905.0311.3832 - Advanced Micro Devices, Inc.) Hidden
ccc-utility64 (Version: 2013.0905.312.3832 - Advanced Micro Devices, Inc.) Hidden
Chaos on Deponia (x32 Version: - )
Common RTP 1.0 (x32 Version: - )
Copy (x32 Version: 130.0.428.000 - Hewlett-Packard) Hidden
Crysis 2 Maximum Edition (x32 Version: - Crytek Studios)
CyberLink Media Suite (x32 Version: 8.0.3216 - CyberLink Corp.)
CyberLink Media Suite (x32 Version: 8.0.3216 - CyberLink Corp.) Hidden
CyberLink PhotoNow (x32 Version: 1.1.7717 - CyberLink Corp.)
CyberLink PhotoNow (x32 Version: 1.1.7717 - CyberLink Corp.) Hidden
CyberLink Power2Go (x32 Version: 7.0.0.2211 - CyberLink Corp.)
CyberLink Power2Go (x32 Version: 7.0.0.2211 - CyberLink Corp.) Hidden
CyberLink PowerDirector (x32 Version: 9.0.0.3419 - CyberLink Corp.)
CyberLink PowerDirector (x32 Version: 9.0.0.3419 - CyberLink Corp.) Hidden
CyberLink PowerDVD 10 (x32 Version: 10.0.3507.52 - CyberLink Corp.)
CyberLink PowerDVD 10 (x32 Version: 10.0.3507.52 - CyberLink Corp.) Hidden
CyberLink WaveEditor (x32 Version: 1.0.1.3320 - CyberLink Corp.)
CyberLink WaveEditor (x32 Version: 1.0.1.3320 - CyberLink Corp.) Hidden
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
DAEMON Tools Lite (x32 Version: 4.46.1.0327 - DT Soft Ltd)
Definition Update for Microsoft Office 2013 (KB2760587) 64-Bit Edition (Version: - Microsoft)
Deponia (x32 Version: - )
Destinations (x32 Version: 130.0.0.0 - Hewlett-Packard) Hidden
DeviceDiscovery (x32 Version: 130.0.465.000 - Hewlett-Packard) Hidden
Diablo (HKCU Version: - )
Diablo (x32 Version: - )
Diablo II (HKCU Version: - )
Diablo II (x32 Version: - )
DivX-Setup (x32 Version: 2.6.1.87 - DivX, LLC)
DocProc (x32 Version: 13.0.0.0 - Hewlett-Packard) Hidden
Duel of Champions (x32 Version: - Ubisoft)
Dust: An Elysian Tail (x32 Version: - Humble Hearts LLC)
eReg (x32 Version: 1.20.138.34 - Logitech, Inc.) Hidden
F300 (x32 Version: 130.0.365.000 - Hewlett-Packard) Hidden
F300_Help (x32 Version: 82.0.242.000 - Hewlett-Packard) Hidden
F300Trb (x32 Version: 82.0.242.000 - Hewlett-Packard) Hidden
Far Cry 3 (x32 Version: 1.05 - Ubisoft)
Fax (x32 Version: 130.0.418.000 - Hewlett-Packard) Hidden
FlatOut: Ultimate Carnage (x32 Version: - BugBear)
Fraps (remove only) (x32 Version: - )
Free System Utilities (x32 Version: 1.1.3.0 - Covus Freemium GmbH)
Free SystemUtilities (x32 Version: 1.1.3.0 - Covus Freemium GmbH) Hidden
Free YouTube to MP3 Converter version 3.12.20.1230 (x32 Version: 3.12.20.1230 - DVDVideoSoft Ltd.)
Giana Sisters: Twisted Dreams (x32 Version: - )
GPBaseService2 (x32 Version: 130.0.371.000 - Hewlett-Packard) Hidden
Hitman: Absolution (x32 Version: - Square Enix)
Hitman: Sniper Challenge (x32 Version: - IO Interactive)
Hotkey 6.0030 (x32 Version: 6.0030 - NoteBook)
Hotkey 6.0030 (x32 Version: 6.0030 - NoteBook) Hidden
Hotline Miami (x32 Version: - )
How to Survive (x32 Version: - )
HP Imaging Device Functions 13.0 (Version: 13.0 - HP)
HP Photosmart Essential 3.5 (Version: 3.5 - HP)
HP Photosmart Officejet and Deskjet All-In-One Driver Software 13.0 Rel. B (Version: 13.0 - HP)
HP Smart Web Printing 4.51 (Version: 4.51 - HP)
HP Solution Center 13.0 (Version: 13.0 - HP)
HP Update (x32 Version: 4.000.011.006 - Hewlett-Packard)
HPPhotoGadget (x32 Version: 130.0.282.000 - Hewlett-Packard) Hidden
HPPhotoSmartDiscLabelContent1 (x32 Version: 2.04.0000 - Hewlett-Packard) Hidden
HPPhotosmartEssential (x32 Version: 2.04.0000 - Hewlett-Packard) Hidden
HPProductAssistant (x32 Version: 130.0.371.000 - Hewlett-Packard) Hidden
IL Download Manager (x32 Version: - Image-Line bvba)
Intel Extreme Tuning Utility (x32 Version: 3.1.5.0 - Intel Corporation)
Intel(R) Control Center (x32 Version: 1.2.1.1007 - Intel Corporation)
Intel(R) Management Engine Components (x32 Version: 8.0.1.1399 - Intel Corporation)
Intel(R) Processor Graphics (x32 Version: 9.18.10.3165 - Intel Corporation)
Intel(R) Rapid Storage Technology (x32 Version: 11.0.0.1032 - Intel Corporation)
Intel(R) SDK for OpenCL - CPU Only Runtime Package (x32 Version: 3.0.0.63463 - Intel Corporation)
Intel(R) USB 3.0 eXtensible Host Controller Driver (x32 Version: 1.0.3.214 - Intel Corporation)
Intel® Trusted Connect Service Client (Version: 1.23.219.2 - Intel Corporation)
Intel® Watchdog Timer Driver (Intel® WDT) (x32 Version: - Intel Corporation)
iTunes (Version: 11.1.3.8 - Apple Inc.)
Java 7 Update 9 (x32 Version: 7.0.90 - Oracle)
Java Auto Updater (x32 Version: 2.1.9.0 - Sun Microsystems, Inc.) Hidden
Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Logitech Gaming Software (Version: 8.40.83 - Logitech Inc.) Hidden
Logitech Gaming Software 8.40 (Version: 8.40.83 - Logitech Inc.)
Logitech SetPoint 6.32 (Version: 6.32.20 - Logitech)
Magicka (x32 Version: - Arrowhead Game Studios AB)
Malwarebytes Anti-Malware Version 1.75.0.1300 (x32 Version: 1.75.0.1300 - Malwarebytes Corporation)
Mark of the Ninja (x32 Version: - )
Mass Effect 2 (x32 Version: 1.02 - Electronic Arts, Inc.)
mediscript_gk1_0312 (x32 Version: 2.59 - Elsevier)
Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Messenger Companion (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Microsoft .NET Framework 1.1 (x32 Version: 1.1.4322 - Microsoft)
Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (Deutsch) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Access MUI (English) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Access Setup Metadata MUI (English) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden
Microsoft DCF MUI (English) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Excel MUI (English) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Games for Windows - LIVE (x32 Version: 3.0.86.0 - Microsoft Corporation)
Microsoft Games for Windows - LIVE Redistributable (x32 Version: 3.0.17.0 - Microsoft Corporation)
Microsoft Groove MUI (English) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft InfoPath MUI (English) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Lync MUI (English) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Mathematics (64-bit) (Version: 4.0 - Microsoft Corporation)
Microsoft Office 32-bit Components 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Office Korrekturhilfen 2013 - Deutsch (Version: 15.0.4420.1017 - Microsoft Corporation)
Microsoft Office OSM MUI (English) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Office OSM UX MUI (English) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Office Professional Plus 2013 (Version: 15.0.4420.1017 - Microsoft Corporation)
Microsoft Office Professional Plus 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Office Proofing (English) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Office Proofing Tools 2013 - English (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Office Proofing Tools 2013 - Español (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Office Shared 32-bit MUI (English) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (English) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Office Shared Setup Metadata MUI (English) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft OneNote MUI (English) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Outlook MUI (English) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft PowerPoint MUI (English) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Publisher MUI (English) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Silverlight (Version: 5.1.20913.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.50727.42 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (x32 Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (x32 Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (x32 Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.60610 (Version: 11.0.60610 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.60610 (Version: 11.0.60610 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.60610 (x32 Version: 11.0.60610 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.60610 (x32 Version: 11.0.60610 - Microsoft Corporation) Hidden
Microsoft Word MUI (English) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Xbox 360 Accessories 1.2 (Version: 1.20.146.0 - Microsoft)
Microsoft XNA Framework Redistributable 3.1 (x32 Version: 3.1.10527.0 - Microsoft Corporation)
Microsoft XNA Framework Redistributable 4.0 (x32 Version: 4.0.20823.0 - Microsoft Corporation)
Microsoft XNA Framework Redistributable 4.0 Refresh (x32 Version: 4.0.30901.0 - Microsoft Corporation)
Minecraft1.5.0 (x32 Version: - )
Mozilla Firefox 26.0 (x86 de) (x32 Version: 26.0 - Mozilla)
Mozilla Maintenance Service (x32 Version: 24.2.0 - Mozilla)
Mozilla Thunderbird 24.2.0 (x86 de) (x32 Version: 24.2.0 - Mozilla)
MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSVCRT_amd64 (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSXML 4.0 SP3 Parser (KB2758694) (x32 Version: 4.30.2117.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (x32 Version: 4.30.2100.0 - Microsoft Corporation)
MyFreeCodec (HKCU Version: - )
Natural Selection 2 (x32 Version: - Unknown Worlds Entertainment)
Need for Speed(TM) Hot Pursuit (x32 Version: 1.0.0.0 - Electronic Arts)
NetSpeedMonitor 2.5.4.0 x64 (Version: 2.5.4.0 - Florian Gilles)
Network64 (Version: 130.0.572.000 - Hewlett-Packard) Hidden
Nexus Mod Manager (Version: 0.46.0 - Black Tree Gaming)
NVIDIA 3D Vision Controller Driver (x32 Version: 266.19 - NVIDIA Corporation)
NVIDIA PhysX (x32 Version: 9.10.0513 - NVIDIA Corporation)
OCR Software by I.R.I.S. 13.0 (Version: 13.0 - HP)
Octoshape add-in for Adobe Flash Player (HKCU Version: - )
OpenAL (x32 Version: - )
Origin (x32 Version: 9.3.10.4710 - Electronic Arts, Inc.)
Outils de vérification linguistique 2013 de Microsoft Office*- Français (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Path of Exile (x32 Version: - Grinding Gear Games)
Portal 2 (x32 Version: - Valve)
Prince of Persia (x32 Version: - Ubisoft)
Prison Architect (x32 Version: - Introversion Software)
PunkBuster Services (x32 Version: 0.993 - Even Balance, Inc.)
PX Profile Update (x32 Version: 1.00.1. - AMD) Hidden
Rayman Origins (x32 Version: 1.00 - Ubisoft)
Realtek Ethernet Controller Driver (x32 Version: 7.52.203.2012 - Realtek)
Realtek High Definition Audio Driver (x32 Version: 6.0.1.6526 - Realtek Semiconductor Corp.)
Realtek PCIE Card Reader (x32 Version: 6.1.7601.27015 - Realtek Semiconductor Corp.)
Recettear: An Item Shop's Tale (x32 Version: - )
Reus (x32 Version: - Abbey Games)
Rockstar Games Social Club (x32 Version: 1.1.0.1 - Rockstar Games)
RPG MAKER VX Ace (x32 Version: 1.01a - Enterbrain)
RPG MAKER VX Ace RTP (x32 Version: 1.00 - Enterbrain)
RPG Maker VX RTP (x32 Version: 1.02 - Enterbrain)
RTP for RM2K (Png, Wav, Midi, Fonts) (x32 Version: - )
Samsung Kies (x32 Version: 2.6.0.13074_14 - Samsung Electronics Co., Ltd.)
Samsung Kies (x32 Version: 2.6.0.13074_14 - Samsung Electronics Co., Ltd.) Hidden
Samsung Story Album Viewer (x32 Version: 1.0.0.13054_1 - Samsung Electronics Co., Ltd.)
Samsung Story Album Viewer (x32 Version: 1.0.0.13054_1 - Samsung Electronics Co., Ltd.) Hidden
SAMSUNG USB Driver for Mobile Phones (Version: 1.5.27.0 - SAMSUNG Electronics Co., Ltd.)
Sang-Froid - Tales of Werewolves (x32 Version: - Artifice Studio)
Scan (x32 Version: 13.0.0.0 - Hewlett-Packard) Hidden
Shadowrun Returns (x32 Version: - Harebrained Schemes)
Sins of a Solar Empire (x32 Version: 1.00.00 - Stardock Entertainment, Inc.) Hidden
Skype™ 6.11 (x32 Version: 6.11.102 - Skype Technologies S.A.)
SmartWebPrinting (x32 Version: 130.0.457.000 - Hewlett-Packard) Hidden
SolutionCenter (x32 Version: 130.0.373.000 - Hewlett-Packard) Hidden
StarCraft (x32 Version: - Blizzard Entertainment)
State of Decay (x32 Version: - Undead Labs)
Status (x32 Version: 130.0.469.000 - Hewlett-Packard) Hidden
Steam (x32 Version: 1.0.0.0 - Valve Corporation)
Super Meat Boy (x32 Version: - )
Synaptics Pointing Device Driver (Version: 15.0.8.0 - Synaptics Incorporated)
Terraria (x32 Version: - Re-Logic)
Text-To-Speech-Runtime (x32 Version: 1.0.0.0 - Magix Development GmbH)
The Cave (x32 Version: - hxxp://www.doublefine.com)
The Elder Scrolls V: Skyrim (x32 Version: - Bethesda Game Studios)
The Walking Dead: Season Two (x32 Version: - Telltale Games)
The Witcher: Enhanced Edition (x32 Version: - CD Projekt RED)
THX TruStudio Pro (x32 Version: TAMB-CVS1D-1-LB R07 - Creative Technology Limited)
Tomb Raider (x32 Version: - Crystal Dynamics)
Toolbox (x32 Version: 130.0.648.000 - Hewlett-Packard) Hidden
TrayApp (x32 Version: 130.0.422.000 - Hewlett-Packard) Hidden
Trials Evolution Gold Edition (x32 Version: - Redlynx Ltd)
Tropico 4 (x32 Version: - Haemimont Games)
Ubisoft Game Launcher (x32 Version: 1.0.0.0 - UBISOFT)
Unity Web Player (HKCU Version: - Unity Technologies ApS)
UnloadSupport (x32 Version: 11.0.0 - Hewlett-Packard) Hidden
Update for Microsoft Access 2013 (KB2768008) 64-Bit Edition (Version: - Microsoft)
Update for Microsoft Access 2013 (KB2827233) 64-Bit Edition (Version: - Microsoft)
Update for Microsoft InfoPath 2013 (KB2837648) 64-Bit Edition (Version: - Microsoft)
Update for Microsoft Lync 2013 (KB2817678) 64-Bit Edition (Version: - Microsoft)
Update for Microsoft Office 2013 (KB2726954) 64-Bit Edition (Version: - Microsoft)
Update for Microsoft Office 2013 (KB2726996) 64-Bit Edition (Version: - Microsoft)
Update for Microsoft Office 2013 (KB2738038) 64-Bit Edition (Version: - Microsoft)
Update for Microsoft Office 2013 (KB2760224) 64-Bit Edition (Version: - Microsoft)
Update for Microsoft Office 2013 (KB2760242) 64-Bit Edition (Version: - Microsoft)
Update for Microsoft Office 2013 (KB2760267) 64-Bit Edition (Version: - Microsoft)
Update for Microsoft Office 2013 (KB2760539) 64-Bit Edition (Version: - Microsoft)
Update for Microsoft Office 2013 (KB2760553) 64-Bit Edition (Version: - Microsoft)
Update for Microsoft Office 2013 (KB2760610) 64-Bit Edition (Version: - Microsoft)
Update for Microsoft Office 2013 (KB2767845) 64-Bit Edition (Version: - Microsoft)
Update for Microsoft Office 2013 (KB2768016) 64-Bit Edition (Version: - Microsoft)
Update for Microsoft Office 2013 (KB2817314) 64-Bit Edition (Version: - Microsoft)
Update for Microsoft Office 2013 (KB2817316) 64-Bit Edition (Version: - Microsoft)
Update for Microsoft Office 2013 (KB2817490) 64-Bit Edition (Version: - Microsoft)
Update for Microsoft Office 2013 (KB2817626) 64-Bit Edition (Version: - Microsoft)
Update for Microsoft Office 2013 (KB2826004) 64-Bit Edition (Version: - Microsoft)
Update for Microsoft Office 2013 (KB2827225) 64-Bit Edition (Version: - Microsoft)
Update for Microsoft Office 2013 (KB2827227) 64-Bit Edition (Version: - Microsoft)
Update for Microsoft Office 2013 (KB2827230) 64-Bit Edition (Version: - Microsoft)
Update for Microsoft Office 2013 (KB2827239) 64-Bit Edition (Version: - Microsoft)
Update for Microsoft Office 2013 (KB2837626) 64-Bit Edition (Version: - Microsoft)
Update for Microsoft Office 2013 (KB2837637) 64-Bit Edition (Version: - Microsoft)
Update for Microsoft Office 2013 (KB2837638) 64-Bit Edition (Version: - Microsoft)
Update for Microsoft Office 2013 (KB2837655) 64-Bit Edition (Version: - Microsoft)
Update for Microsoft Office 2013 (KB2850066) 64-Bit Edition (Version: - Microsoft)
Update for Microsoft OneNote 2013 (KB2850063) 64-Bit Edition (Version: - Microsoft)
Update for Microsoft Outlook 2013 (KB2850061) 64-Bit Edition (Version: - Microsoft)
Update for Microsoft PowerPoint 2013 (KB2767850) 64-Bit Edition (Version: - Microsoft)
Update for Microsoft Project 2013 (KB2727085) 64-Bit Edition (Version: - Microsoft)
Update for Microsoft Publisher 2013 (KB2837635) 64-Bit Edition (Version: - Microsoft)
Update for Microsoft SkyDrive Pro (KB2817495) 64-Bit Edition (Version: - Microsoft)
Update for Microsoft SkyDrive Pro (KB2837652) 64-Bit Edition (Version: - Microsoft)
Update for Microsoft Visio 2013 (KB2817306) 64-Bit Edition (Version: - Microsoft)
Update for Microsoft Visio Viewer 2013 (KB2768338) 64-Bit Edition (Version: - Microsoft)
Update for Microsoft Word 2013 (KB2837647) 64-Bit Edition (Version: - Microsoft)
Updater (x32 Version: 2.6.53 - Creative Island Media, LLC)
VC80CRTRedist - 8.0.50727.6195 (x32 Version: 1.2.0 - DivX, Inc) Hidden
VIS (x32 Version: - )
Visual C++ 9.0 CRT (x86) WinSXS MSM (x32 Version: 9.0 - Microsoft Corporation) Hidden
VLC media player 2.0.2 (Version: 2.0.2 - VideoLAN)
VLC media player 2.0.8 (x32 Version: 2.0.8 - VideoLAN)
Wacom (Version: 5.3.2-1 - Wacom Technology Corp.)
WebCam Installer (x32 Version: 4.04 - WebCam) Hidden
WebReg (x32 Version: 130.0.132.017 - Hewlett-Packard) Hidden
WebTablet FB Plugin 32 bit (x32 Version: 2.1.0.2 - Wacom Technology Corp.)
WebTablet FB Plugin 64 bit (Version: 2.1.0.2 - Wacom Technology Corp.)
Windows Live Communications Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Essentials (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Essentials (x32 Version: 15.4.3538.0513 - Microsoft Corporation)
Windows Live Family Safety (Version: 15.4.3538.0513 - Microsoft Corporation) Hidden
Windows Live Fotogalerie (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live ID Sign-in Assistant (Version: 7.250.4232.0 - Microsoft Corporation) Hidden
Windows Live Installer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Language Selector (Version: 15.4.3538.0513 - Microsoft Corporation) Hidden
Windows Live Mail (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Mesh (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Mesh ActiveX control for remote connections (x32 Version: 15.4.5722.2 - Microsoft Corporation)
Windows Live Messenger (x32 Version: 15.4.3538.0513 - Microsoft Corporation) Hidden
Windows Live Messenger Companion Core (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live MIME IFilter (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Movie Maker (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Photo Common (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Photo Gallery (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live PIMT Platform (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden
Windows Live Remote Client (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Client Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Service (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Service Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live SOXE (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live UX Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden
Windows Live Writer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Writer Resources (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Media Player Firefox Plugin (x32 Version: 1.0.0.8 - Microsoft Corp)
XCOM: Enemy Unknown (x32 Version: - Firaxis Games)
XviD 1.1 final uninstall (x32 Version: 1.1 - XviD team (Koepi))
==================== Restore Points =========================
11-01-2014 13:14:37 Windows Update
14-01-2014 23:45:36 Windows Update
15-01-2014 16:38:02 Free System Utilities
15-01-2014 16:40:46 Free System Utilities 15/01/2014 17:40:46
15-01-2014 16:42:00 Free System Utilities 15/01/2014 17:42:00
15-01-2014 16:42:40 Free System Utilities 15/01/2014 17:42:40
15-01-2014 17:00:23 Free System Utilities
15-01-2014 17:00:36 Free System Utilities
15-01-2014 17:10:47 Free System Utilities 15/01/2014 18:10:47
==================== Hosts content: ==========================
2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
==================== Scheduled Tasks (whitelisted) =============
Task: {13415A97-20E2-4738-B423-7977C0ECF5F5} - System32\Tasks\Software Updater Ui => C:\Program Files (x86)\SoftwareUpdater\SoftwareUpdater.Ui.exe [2014-01-15] ()
Task: {4F199EC9-0CF4-4780-BF45-0C4F7AA84938} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => D:\Office2013\Office15\msoia.exe [2012-10-01] (Microsoft Corporation)
Task: {5381034E-8E53-41DD-853E-4D71CA3BC99F} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => D:\Office2013\Office15\msoia.exe [2012-10-01] (Microsoft Corporation)
Task: {57671201-9E9B-457F-94D2-7EF7299912AC} - System32\Tasks\Freemium1ClickMaint => C:\Users\Hanni\Downloads\1Click.exe
Task: {88A108ED-F241-418F-A79E-5BD093068A8C} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office15\OLicenseHeartbeat.exe [2012-10-01] (Microsoft Corporation)
Task: {8DA26DB6-E5B0-4F85-9720-17FE74D0828B} - System32\Tasks\AutoKMS => C:\Windows\AutoKMS\AutoKMS.exe [2013-12-11] ()
Task: {C388DCAA-BDFA-4CDF-AEF2-29324F29DE4F} - System32\Tasks\Software Updater => C:\Program Files (x86)\SoftwareUpdater\SoftwareUpdater.Bootstrapper.exe [2014-01-15] ()
==================== Loaded Modules (whitelisted) =============
2012-08-28 20:20 - 2010-11-12 11:38 - 00241152 _____ () C:\Windows\SYSTEM32\APOMgr64.DLL
2011-10-07 10:39 - 2011-10-07 10:39 - 01304856 _____ () C:\Program Files\Logitech\SetPointP\Macros\MacroCore.dll
2012-06-13 15:06 - 2012-03-26 10:33 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll
2012-11-27 17:42 - 2012-12-11 12:07 - 01184640 _____ () C:\Program Files\Tablet\Pen\libxml2.dll
2012-12-17 00:27 - 2012-09-19 18:17 - 00397088 _____ () C:\Program Files (x86)\Avira\AntiVir Desktop\sqlite3.dll
2012-05-30 19:06 - 2012-05-30 19:06 - 00087912 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2012-05-30 19:06 - 2012-05-30 19:06 - 01242512 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2009-06-06 13:50 - 2009-06-06 13:50 - 00019968 _____ () C:\Program Files (x86)\Hotkey\Audiodll.dll
2012-08-28 20:20 - 2010-11-01 16:34 - 00159744 ____N () C:\Program Files (x86)\Creative\THX TruStudio Pro\THXAudioCP\de-DE\THXAudio.resources.dll
2013-08-18 15:15 - 2013-08-18 15:15 - 00172032 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_32\IsdiInterop\991a8d378a3e64b31c0f4770ba9ae071\IsdiInterop.ni.dll
2012-08-28 20:21 - 2011-11-29 19:00 - 00059392 _____ () C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll
2012-08-28 20:18 - 2012-01-20 04:23 - 01198872 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll
2013-12-12 02:39 - 2013-12-12 02:39 - 03559024 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
2013-10-17 11:25 - 2013-10-17 11:25 - 08866472 _____ () C:\Program Files (x86)\Microsoft Office\Office15\1033\GrooveIntlResource.dll
2013-12-15 17:29 - 2013-12-15 17:29 - 03017840 _____ () C:\Program Files (x86)\Mozilla Thunderbird\mozjs.dll
2013-12-15 17:29 - 2013-12-15 17:29 - 00158832 _____ () C:\Program Files (x86)\Mozilla Thunderbird\NSLDAP32V60.dll
2013-12-15 17:29 - 2013-12-15 17:29 - 00023152 _____ () C:\Program Files (x86)\Mozilla Thunderbird\NSLDAPPR32V60.dll
==================== Alternate Data Streams (whitelisted) =========
AlternateDataStreams: C:\ProgramData\Temp:30FD0CBD
==================== Safe Mode (whitelisted) ===================
==================== Faulty Device Manager Devices =============
Name: Photosmart B110 series
Description: Photosmart B110 series
Class Guid: {4d36e971-e325-11ce-bfc1-08002be10318}
Manufacturer: HP
Service:
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
==================== Event log errors: =========================
Application errors:
==================
Error: (01/15/2014 06:33:15 PM) (Source: Application Hang) (User: )
Description: Programm sidebar.exe, Version 6.1.7601.17514 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
Prozess-ID: 3b0
Startzeit: 01cf121223bb8b9a
Endzeit: 2
Anwendungspfad: C:\Program Files\Windows Sidebar\sidebar.exe
Berichts-ID: c63a6826-7e0a-11e3-9d1e-0090f5d6b968
Error: (01/15/2014 05:59:52 PM) (Source: CltMngSvc) (User: )
Description: CltMngSvcServiceInstall: Fail to Start serviceSearch Protect by Conduit Updater (Error: 1056)
Error: (01/15/2014 05:59:33 PM) (Source: CltMngSvc) (User: )
Description: CltMngSvcServiceMain Version 2. (Error: 87)
Error: (01/15/2014 05:52:14 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: SynTPEnh.exe, Version: 15.0.8.0, Zeitstempel: 0x4b74c68e
Name des fehlerhaften Moduls: SynTPEnh.exe, Version: 15.0.8.0, Zeitstempel: 0x4b74c68e
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0000000000051f2a
ID des fehlerhaften Prozesses: 0xe6c
Startzeit der fehlerhaften Anwendung: 0xSynTPEnh.exe0
Pfad der fehlerhaften Anwendung: SynTPEnh.exe1
Pfad des fehlerhaften Moduls: SynTPEnh.exe2
Berichtskennung: SynTPEnh.exe3
Error: (01/15/2014 05:51:59 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (01/15/2014 05:51:55 PM) (Source: ATIeRecord) (User: )
Description: ATI EEU Client has failed to start
Error: (01/15/2014 04:57:48 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (01/15/2014 04:56:24 PM) (Source: ATIeRecord) (User: )
Description: ATI EEU Client has failed to start
Error: (01/11/2014 00:50:48 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (01/10/2014 09:55:34 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
System errors:
=============
Error: (01/15/2014 06:09:48 PM) (Source: Service Control Manager) (User: )
Description: Der Versuch des Dienststeuerungs-Managers, nach dem unerwarteten Beenden des Dienstes "Update veberGreat" Korrekturmaßnahmen (Neustart des Diensts) durchzuführen, ist fehlgeschlagen. Fehler:
%%1058
Error: (01/15/2014 06:09:43 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Update veberGreat" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 5000 Millisekunden durchgeführt: Neustart des Diensts.
Error: (01/15/2014 05:52:12 PM) (Source: Service Control Manager) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
ASPI32
Error: (01/15/2014 05:51:43 PM) (Source: Application Popup) (User: )
Description: Aufgrund der Inkompatibilität mit diesem System wurde \SystemRoot\SysWow64\Drivers\ASPI32.SYS nicht geladen. Wenden Sie sich an den Softwarehersteller, um eine kompatible Version des Treibers zu erhalten.
Error: (01/15/2014 05:51:17 PM) (Source: DCOM) (User: )
Description: {E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
Error: (01/15/2014 04:56:23 PM) (Source: Service Control Manager) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
ASPI32
Error: (01/15/2014 04:55:51 PM) (Source: Application Popup) (User: )
Description: Aufgrund der Inkompatibilität mit diesem System wurde \SystemRoot\SysWow64\Drivers\ASPI32.SYS nicht geladen. Wenden Sie sich an den Softwarehersteller, um eine kompatible Version des Treibers zu erhalten.
Error: (01/15/2014 04:55:02 PM) (Source: Service Control Manager) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
ASPI32
Error: (01/15/2014 04:54:30 PM) (Source: Application Popup) (User: )
Description: Aufgrund der Inkompatibilität mit diesem System wurde \SystemRoot\SysWow64\Drivers\ASPI32.SYS nicht geladen. Wenden Sie sich an den Softwarehersteller, um eine kompatible Version des Treibers zu erhalten.
Error: (01/15/2014 04:54:01 PM) (Source: DCOM) (User: )
Description: {E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
Microsoft Office Sessions:
=========================
Error: (01/15/2014 06:33:15 PM) (Source: Application Hang)(User: )
Description: sidebar.exe6.1.7601.175143b001cf121223bb8b9a2C:\Program Files\Windows Sidebar\sidebar.exec63a6826-7e0a-11e3-9d1e-0090f5d6b968
Error: (01/15/2014 05:59:52 PM) (Source: CltMngSvc)(User: )
Description: CltMngSvcServiceInstall: Fail to Start serviceSearch Protect by Conduit Updater (Error: 1056)
Error: (01/15/2014 05:59:33 PM) (Source: CltMngSvc)(User: )
Description: CltMngSvcServiceMain Version 2. (Error: 87)
Error: (01/15/2014 05:52:14 PM) (Source: Application Error)(User: )
Description: SynTPEnh.exe15.0.8.04b74c68eSynTPEnh.exe15.0.8.04b74c68ec00000050000000000051f2ae6c01cf12121b66c278C:\Program Files\Synaptics\SynTP\SynTPEnh.exeC:\Program Files\Synaptics\SynTP\SynTPEnh.exe61efc4ea-7e05-11e3-9d1e-0090f5d6b968
Error: (01/15/2014 05:51:59 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (01/15/2014 05:51:55 PM) (Source: ATIeRecord)(User: )
Description:
Error: (01/15/2014 04:57:48 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (01/15/2014 04:56:24 PM) (Source: ATIeRecord)(User: )
Description:
Error: (01/11/2014 00:50:48 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (01/10/2014 09:55:34 AM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
CodeIntegrity Errors:
===================================
Date: 2012-12-21 04:46:11.066
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files (x86)\RivaTuner v2.24 MSI Master Overclocking Arena 2009 edition\RivaTuner64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2012-12-21 04:46:11.051
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files (x86)\RivaTuner v2.24 MSI Master Overclocking Arena 2009 edition\RivaTuner64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2012-12-21 04:46:10.025
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files (x86)\RivaTuner v2.24 MSI Master Overclocking Arena 2009 edition\RivaTuner64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2012-12-21 04:46:10.010
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files (x86)\RivaTuner v2.24 MSI Master Overclocking Arena 2009 edition\RivaTuner64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2012-12-21 04:46:08.993
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files (x86)\RivaTuner v2.24 MSI Master Overclocking Arena 2009 edition\RivaTuner64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2012-12-21 04:46:08.978
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files (x86)\RivaTuner v2.24 MSI Master Overclocking Arena 2009 edition\RivaTuner64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2012-12-21 04:46:07.961
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files (x86)\RivaTuner v2.24 MSI Master Overclocking Arena 2009 edition\RivaTuner64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2012-12-21 04:46:07.946
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files (x86)\RivaTuner v2.24 MSI Master Overclocking Arena 2009 edition\RivaTuner64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2012-12-21 04:46:03.875
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files (x86)\RivaTuner v2.24 MSI Master Overclocking Arena 2009 edition\RivaTuner64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2012-12-21 04:46:03.859
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files (x86)\RivaTuner v2.24 MSI Master Overclocking Arena 2009 edition\RivaTuner64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
==================== Memory info ===========================
Percentage of memory in use: 33%
Total physical RAM: 8088.47 MB
Available physical RAM: 5407.82 MB
Total Pagefile: 16175.13 MB
Available Pagefile: 12759.06 MB
Total Virtual: 8192 MB
Available Virtual: 8191.81 MB
==================== Drives ================================
Drive c: (Windows System) (Fixed) (Total:111.33 GB) (Free:30.66 GB) NTFS
Drive d: () (Fixed) (Total:698.63 GB) (Free:374.29 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 119 GB) (Disk ID: D0579E74)
Partition 1: (Not Active) - (Size=8 GB) - (Type=27)
Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=111 GB) - (Type=07 NTFS)
========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 699 GB) (Disk ID: D0579E5E)
Partition 1: (Not Active) - (Size=699 GB) - (Type=07 NTFS)
==================== End Of Log ============================
|
|
16.01.2014, 13:32
| #4 |
| | Free System Utilities installierte verdächtige Programme Malwarebytes: Code:
ATTFilter Malwarebytes Anti-Malware (Test) 1.75.0.1300 www.malwarebytes.org Datenbank Version: v2014.01.15.08 Windows 7 Service Pack 1 x64 NTFS Internet Explorer 11.0.9600.16476 Hanni :: HANNI-XMG [Administrator] Schutz: Aktiviert 15/01/2014 19:33:45 mbam-log-2014-01-15 (19-33-45).txt Art des Suchlaufs: Quick-Scan Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM Deaktivierte Suchlaufeinstellungen: P2P Durchsuchte Objekte: 215115 Laufzeit: 2 Minute(n), 12 Sekunde(n) Infizierte Speicherprozesse: 5 C:\ProgramData\RHelpers\IeHelper\IeHelper.exe (PUP.Optional.SearchDonkey.A) -> 8372 -> Keine Aktion durchgeführt. C:\ProgramData\RHelpers\ChromeHelper\ChromeHelper.exe (PUP.Optional.SearchDonkey.A) -> 4808 -> Keine Aktion durchgeführt. C:\ProgramData\RHelpers\FirefoxHelper\FirefoxHelper.exe (PUP.Optional.SearchDonkey.A) -> 10488 -> Keine Aktion durchgeführt. C:\ProgramData\InternetUpdater\InternetUpdaterService.exe (PUP.Optional.InternetUpdater.A) -> 8868 -> Löschen bei Neustart. C:\ProgramData\Updater\updater.exe (Trojan.Agent) -> 8220 -> Löschen bei Neustart. Infizierte Speichermodule: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungsschlüssel: 14 HKCR\CLSID\{051E9166-B275-4683-907B-372FAE22BC7C} (PUP.Optional.WebSteroids.A) -> Keine Aktion durchgeführt. HKCR\CLSID\{E5A7A645-8318-4895-B85C-EDC606B80DB6} (PUP.Optional.DynConIE.A) -> Keine Aktion durchgeführt. HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{44ED99E2-16A6-4B89-80D6-5B21CF42E78B} (PUP.Optional.SafeMonitor.A) -> Keine Aktion durchgeführt. HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{44ED99E2-16A6-4B89-80D6-5B21CF42E78B} (PUP.Optional.SafeMonitor.A) -> Keine Aktion durchgeführt. HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{B31866D6-C268-4C1F-A40D-D2CF874AC95C} (PUP.Optional.VeberGreat.A) -> Keine Aktion durchgeführt. HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{B31866D6-C268-4C1F-A40D-D2CF874AC95C} (PUP.Optional.VeberGreat.A) -> Keine Aktion durchgeführt. HKLM\SYSTEM\CurrentControlSet\Services\InternetUpdater (PUP.Optional.InternetUpdater.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\InternetUpdater (PUP.Optional.InternetUpdater.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCU\Software\AppDataLow\Software\Crossrider (PUP.Optional.CrossRider.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCU\Software\Conduit\FF (PUP.Optional.Conduit.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCU\SOFTWARE\INSTALLCORE (PUP.Optional.InstallCore.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCU\SOFTWARE\SWEETIM (PUP.Optional.SweetIM.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKLM\SYSTEM\CurrentControlSet\Services\Update veberGreat (PUP.Optional.VeberGreat.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKLM\SOFTWARE\SWEETIM (PUP.Optional.SweetIM.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. Infizierte Registrierungswerte: 6 HKCU\Software\InstallCore|tb (PUP.Optional.InstallCore.A) -> Daten: 1V1C1R1T2V0L0K0F1Y -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCU\Software\Microsoft\Windows\CurrentVersion\Run|Updater (Trojan.Agent) -> Daten: C:\ProgramData\Updater\Updater.exe -> Erfolgreich gelöscht und in Quarantäne gestellt. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run|Updater (Trojan.Agent) -> Daten: C:\ProgramData\Updater\Updater.exe -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCU\Software\SweetIM|simapp_id (PUP.Optional.SweetIM.A) -> Daten: {F9D8EF27-2B69-11E2-9E2F-E24C90CFD51D} -> Erfolgreich gelöscht und in Quarantäne gestellt. HKLM\SYSTEM\CurrentControlSet\Services\InternetUpdater|ImagePath (PUP.Optional.InternetUpdater.A) -> Daten: "C:\ProgramData\InternetUpdater\InternetUpdaterService.exe" -> Erfolgreich gelöscht und in Quarantäne gestellt. HKLM\Software\SweetIM|simapp_id (PUP.Optional.SweetIM.A) -> Daten: {F9D8EF27-2B69-11E2-9E2F-E24C90CFD51D} -> Erfolgreich gelöscht und in Quarantäne gestellt. Infizierte Dateiobjekte der Registrierung: 2 HKCU\SOFTWARE\Microsoft\Internet Explorer\Main|Start Page (PUP.Optional.Conduit.A) -> Bösartig: (hxxp://search.conduit.com/?ctid=CT3311336&octid=CT3311336&SearchSource=61&CUI=UN21837181293132817&UM=2&UP=SP3176E1FC-18BA-4EB8-B367-3AE538B1E788&SSPV=) Gut: (hxxp://www.google.com) -> Erfolgreich ersetzt und in Quarantäne gestellt. HKCR\regfile\shell\open\command| (Broken.OpenCommand) -> Bösartig: ("regedit.exe" "%1") Gut: (regedit.exe "%1") -> Erfolgreich ersetzt und in Quarantäne gestellt. Infizierte Verzeichnisse: 13 C:\ProgramData\InternetUpdater (PUP.Optional.InternetUpdater.A) -> Löschen bei Neustart. C:\Users\Hanni\AppData\Local\Temp\ct3288691 (PUP.Optional.Conduit.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Hanni\AppData\Local\Temp\ct3297265 (PUP.Optional.Conduit.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Hanni\AppData\Local\Temp\ct3297861 (PUP.Optional.Conduit.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Hanni\AppData\Local\Temp\ct3311336 (PUP.Optional.Conduit.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Hanni\AppData\Local\Temp\ct3311336\xpi (PUP.Optional.Conduit.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Hanni\AppData\Local\Temp\ct3311336\xpi\defaults (PUP.Optional.Conduit.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Hanni\AppData\Local\Temp\ct3311336\xpi\defaults\preferences (PUP.Optional.Conduit.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\ProgramData\Conduit\IE (PUP.Optional.Conduit.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\ProgramData\Conduit\IE\CT3311336 (PUP.Optional.Conduit.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\ProgramData\RHelpers\ChromeHelper (PUP.Optional.Searchagent) -> Löschen bei Neustart. C:\ProgramData\RHelpers\FirefoxHelper (PUP.Optional.Searchagent) -> Löschen bei Neustart. C:\ProgramData\RHelpers\IeHelper (PUP.Optional.Searchagent) -> Löschen bei Neustart. Infizierte Dateien: 44 C:\ProgramData\RHelpers\IeHelper\IeHelper.exe (PUP.Optional.SearchDonkey.A) -> Keine Aktion durchgeführt. C:\ProgramData\RHelpers\ChromeHelper\ChromeHelper.exe (PUP.Optional.SearchDonkey.A) -> Keine Aktion durchgeführt. C:\ProgramData\RHelpers\FirefoxHelper\FirefoxHelper.exe (PUP.Optional.SearchDonkey.A) -> Keine Aktion durchgeführt. C:\Users\Hanni\AppData\Local\Temp\nsd6C11.exe (PUP.Optional.Conduit.A) -> Keine Aktion durchgeführt. C:\Users\Hanni\AppData\Local\Temp\nsd7C82.tmp.tbFree.dll (PUP.Optional.Conduit) -> Keine Aktion durchgeführt. C:\Users\Hanni\AppData\Local\Temp\nsn3526.exe (PUP.Optional.Conduit.A) -> Keine Aktion durchgeführt. C:\Users\Hanni\AppData\Local\Temp\nsn823C.exe (PUP.Optional.Conduit.A) -> Keine Aktion durchgeführt. C:\Users\Hanni\AppData\Local\Temp\nso1CF6.exe (PUP.Optional.SearchProtect.A) -> Keine Aktion durchgeführt. C:\Users\Hanni\AppData\Local\Temp\nssBF1E.exe (PUP.Optional.SearchProtect.A) -> Keine Aktion durchgeführt. C:\Users\Hanni\AppData\Local\Temp\nsx87AB.exe (PUP.Optional.Conduit.A) -> Keine Aktion durchgeführt. C:\Users\Hanni\AppData\Local\Temp\SPStub.exe (PUP.Optional.Conduit.A) -> Keine Aktion durchgeführt. C:\Users\Hanni\AppData\Local\Temp\tbFree.dll (PUP.Optional.Conduit) -> Keine Aktion durchgeführt. C:\Users\Hanni\AppData\Local\Temp\AU\SPSetup.exe (PUP.Optional.Conduit.A) -> Keine Aktion durchgeführt. C:\Users\Hanni\AppData\Local\Temp\AU\SPUpdater.exe (PUP.Optional.Conduit.A) -> Keine Aktion durchgeführt. C:\Users\Hanni\AppData\Local\Temp\ct3311336\ctbe.exe (PUP.Optional.Conduit.A) -> Keine Aktion durchgeführt. C:\Users\Hanni\AppData\Local\Temp\ct3311336\ffLogic.exe (PUP.Optional.Conduit.A) -> Keine Aktion durchgeführt. C:\Users\Hanni\AppData\Local\Temp\ct3311336\spff.exe (PUP.Optional.Conduit.A) -> Keine Aktion durchgeführt. C:\Users\Hanni\AppData\Local\Temp\ct3311336\statisticsStub.exe (PUP.Optional.Conduit.A) -> Keine Aktion durchgeführt. C:\Users\Hanni\AppData\Local\Temp\ct3311336\stub.exe (PUP.Optional.Conduit.A) -> Keine Aktion durchgeführt. C:\Windows\Temp\nsd4464.exe (PUP.Optional.SearchProtect.A) -> Keine Aktion durchgeführt. C:\Windows\Temp\nsn8932.exe (PUP.Optional.SearchProtect.A) -> Keine Aktion durchgeführt. C:\Windows\Temp\nsy43A8.exe (PUP.Optional.SearchProtect.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Windows\Temp\nsy452D.exe (PUP.Optional.Conduit.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Hanni\AppData\Local\DownloadGuide\mconduitinstaller.exe (PUP.Optional.Conduit.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Hanni\AppData\Local\DownloadGuide\plus-hd-3-8.exe (Heuristics.Shuriken) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Hanni\AppData\Local\DownloadGuide\rcpsetup_covus_covus.exe (PUP.Optional.RegCleanerPro) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Hanni\AppData\Local\DownloadGuide\Setup.exe (PUP.Optional.SearchDonkey.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Hanni\AppData\Local\DownloadGuide\sp-downloader.exe (PUP.Optional.Conduit.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Hanni\AppData\Local\DownloadGuide\SPIdentifier.exe (PUP.Optional.Conduit.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\ProgramData\InternetUpdater\InternetUpdater.ico (PUP.Optional.InternetUpdater.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\ProgramData\InternetUpdater\app.dat (PUP.Optional.InternetUpdater.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\ProgramData\InternetUpdater\data.dat (PUP.Optional.InternetUpdater.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\ProgramData\InternetUpdater\InternetUpdaterService.exe (PUP.Optional.InternetUpdater.A) -> Löschen bei Neustart. C:\ProgramData\InternetUpdater\InternetUpdaterService.exe.config (PUP.Optional.InternetUpdater.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\ProgramData\InternetUpdater\Uninstall.exe (PUP.Optional.InternetUpdater.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\ProgramData\Updater\updater.exe (Trojan.Agent) -> Löschen bei Neustart. C:\Users\Hanni\AppData\Local\Temp\ct3311336\chromeid.txt (PUP.Optional.Conduit.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Hanni\AppData\Local\Temp\ct3311336\conduit.xml (PUP.Optional.Conduit.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Hanni\AppData\Local\Temp\ct3311336\CT3311336.xpi (PUP.Optional.Conduit.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Hanni\AppData\Local\Temp\ct3311336\setup.ini.txt (PUP.Optional.Conduit.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Hanni\AppData\Local\Temp\ct3311336\version.txt (PUP.Optional.Conduit.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Hanni\AppData\Local\Temp\ct3311336\xpi\install.rdf (PUP.Optional.Conduit.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Hanni\AppData\Local\Temp\ct3311336\xpi\defaults\preferences\defaults.js (PUP.Optional.Conduit.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\ProgramData\Conduit\IE\CT3311336\UninstallerUI.exe (PUP.Optional.Conduit.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. (Ende) |
|
17.01.2014, 12:06
| #5 |
| /// the machine /// TB-Ausbilder | Free System Utilities installierte verdächtige Programme MBAM Funde auch löschen lassen, dann: Downloade Dir bitte  AdwCleaner auf deinen Desktop.
Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
und ein frisches FRST log bitte.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
17.01.2014, 13:28
| #6 |
| | Free System Utilities installierte verdächtige Programme Jetzt funktioniert Avira nicht mehr. Ich starte gleich mal neu, um zu schauen, ob das Problem bestehen bleibt. Hier die Logs: AdwCleaner Logfile: Code:
ATTFilter # AdwCleaner v3.017 - Bericht erstellt am 17/01/2014 um 13:09:23
# Aktualisiert 12/01/2014 von Xplode
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)
# Benutzername : Hanni - HANNI-XMG
# Gestartet von : C:\Users\Hanni\Desktop\adwcleaner.exe
# Option : Löschen
***** [ Dienste ] *****
[#] Dienst Gelöscht : SystemStoreService
***** [ Dateien / Ordner ] *****
Ordner Gelöscht : C:\ProgramData\Conduit
Ordner Gelöscht : C:\ProgramData\RHelpers
Ordner Gelöscht : C:\Program Files (x86)\SoftwareUpdater
Ordner Gelöscht : C:\Windows\SysWOW64\Searchprotect
Ordner Gelöscht : C:\Users\Hanni\AppData\Local\DownloadGuide
Ordner Gelöscht : C:\Users\Hanni\AppData\Local\SoftwareUpdater
Ordner Gelöscht : C:\Users\Hanni\AppData\LocalLow\boost_interprocess
Ordner Gelöscht : C:\Users\Hanni\AppData\LocalLow\Conduit
Ordner Gelöscht : C:\Users\Hanni\AppData\Roaming\Systweak
Ordner Gelöscht : C:\Users\Hanni\AppData\Roaming\Windows Net Data
Ordner Gelöscht : C:\Users\Hanni\AppData\Roaming\Mozilla\Firefox\Profiles\qngyj133.default\Extensions\EFGLQA@78ETGYN-0W7FN789T87.COM
Datei Gelöscht : C:\Windows\System32\roboot64.exe
Datei Gelöscht : C:\Users\Hanni\AppData\Roaming\Mozilla\Firefox\Profiles\qngyj133.default\user.js
Datei Gelöscht : C:\Windows\System32\Tasks\Software Updater Ui
Datei Gelöscht : C:\Windows\System32\Tasks\Software Updater
***** [ Verknüpfungen ] *****
***** [ Registrierungsdatenbank ] *****
Wert Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [Updater]
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\secman.DLL
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\secman.OutlookSecurityManager
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\secman.OutlookSecurityManager.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\BundleSweetIMSetup_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\BundleSweetIMSetup_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\sweetim_rasapi32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\sweetim_rasmancs
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\sweetpacksupdatemanager_rasapi32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SweetPacksUpdateManager_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\14919ea49a8f3b4aa3cf1058d9a64cec
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Toolbar.CT3311336
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_windows-virtual-pc_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_windows-virtual-pc_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{0A18A436-2A7A-49F3-A488-30538A2F6323}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{4D076AB4-7562-427A-B5D2-BD96E19DEE56}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{007EFBDF-8A5D-4930-97CC-A4B437CBA777}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{826D7151-8D99-434B-8540-082B8C2AE556}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8FFE}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{11549FE4-7C5A-4C17-9FC3-56FC5162A994}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{014DB5FA-EAFB-4592-A95B-F44D3EE87FA9}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8FFE}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gelöscht : HKCU\Software\Conduit
Schlüssel Gelöscht : HKCU\Software\Softonic
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\ConduitSearchScopes
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\DynConIE
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\SmartBar
Schlüssel Gelöscht : HKLM\Software\Conduit
Schlüssel Gelöscht : HKLM\Software\systweak
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\DivX\Install\Setup\WizardLayout\ConduitToolbar
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\systweak
***** [ Browser ] *****
-\\ Internet Explorer v11.0.9600.16428
-\\ Mozilla Firefox v26.0 (de)
[ Datei : C:\Users\Hanni\AppData\Roaming\Mozilla\Firefox\Profiles\qngyj133.default\prefs.js ]
Zeile gelöscht : user_pref("Smartbar.SearchFromAddressBarSavedUrl", "hxxp://www.google.de/search?lr=&ie=UTF-8&oe=UTF-8&q=");
Zeile gelöscht : user_pref("browser.newtabpage.pinned", "[{\"url\":\"hxxp://an-server.pote.hu/\",\"title\":\"PTE-AOK Anatomy\"},{\"url\":\"hxxp://www.tagesschau.de/\",\"title\":\"Aktuelle Nachrichten - Inland Ausland [...]
Zeile gelöscht : user_pref("browser.search.defaultthis.engineName", "Freemium DE Customized Web Search");
Zeile gelöscht : user_pref("extensions.crossrider.bic", "14396da81ae2e328fb66d6eeefdaadd6");
Zeile gelöscht : user_pref("smartbar.machineId", "EKAQSOMVHQ7IDGASAXU2FWXZEOBCGCZD0TQEQAC4353GCHOFGWWXFOT/RV0O/E0OD0XYAGL0MD1XOYTDYQEPPW");
*************************
AdwCleaner[R0].txt - [6618 octets] - [17/01/2014 13:06:26]
AdwCleaner[S0].txt - [6238 octets] - [17/01/2014 13:09:23]
########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [6298 octets] ##########
JRT Logfile: Code:
ATTFilter ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.0 (01.07.2014:1)
OS: Windows 7 Home Premium x64
Ran by Hanni on 17/01/2014 at 13:20:37.02
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~ Services
~~~ Registry Values
~~~ Registry Keys
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-3072951526-2563614190-1768229059-1000\Software\sweetim
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\softwareupdater_rasapi32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\softwareupdater_rasmancs
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\covus freemium gmbh
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{4A925154-73DA-43D8-83EE-E5AC2A86C8C0}
~~~ Files
~~~ Folders
~~~ FireFox
Emptied folder: C:\Users\Hanni\AppData\Roaming\mozilla\firefox\profiles\qngyj133.default\minidumps [210 files]
~~~ Event Viewer Logs were cleared
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 17/01/2014 at 13:22:20.86
Computer was rebooted
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
FRST Logfile: FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 15-01-2014 01
Ran by Hanni (administrator) on HANNI-XMG on 17-01-2014 13:22:59
Running from C:\Users\Hanni\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
() C:\Program Files (x86)\Hotkey\PowerBiosServer.exe
() C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Logitech, Inc.) C:\Program Files\Logitech\SetPointP\SetPoint.exe
(Logitech, Inc.) C:\Program Files\Common Files\Logishrd\KHAL3\KHALMNPR.exe
(Logitech Inc.) C:\Program Files\Logitech Gaming Software\LCore.exe
(Microsoft Corporation) C:\Program Files\Microsoft Xbox 360 Accessories\XBoxStat.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
() C:\Program Files (x86)\Hotkey\Hotkey.exe
(Creative Technology Ltd) C:\Program Files (x86)\Creative\THX TruStudio Pro\THXAudioCP\THXAudio.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Advanced Micro Devices, Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuSchd2.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\Digital Imaging\bin\HpqSRmon.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Extreme Tuning Utility\XtuService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2052392 2010-02-11] (Synaptics Incorporated)
HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13374568 2011-12-13] (Realtek Semiconductor)
HKLM\...\Run: [THXCfg64] - C:\Windows\system32\THXCfg64.dll [25600 2010-09-14] (Creative Technology Ltd.)
HKLM\...\Run: [Logitech Download Assistant] - C:\Windows\System32\LogiLDA.dll [1832760 2012-09-20] (Logitech, Inc.)
HKLM\...\Run: [EvtMgr6] - C:\Program Files\Logitech\SetPointP\SetPoint.exe [1744152 2011-10-07] (Logitech, Inc.)
HKLM\...\Run: [Launch LCore] - C:\Program Files\Logitech Gaming Software\LCore.exe [7406392 2012-11-29] (Logitech Inc.)
HKLM\...\Run: [XboxStat] - C:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe [825184 2009-09-30] (Microsoft Corporation)
HKLM-x32\...\Run: [THX Audio Control Panel] - C:\Program Files (x86)\Creative\THX TruStudio Pro\THXAudioCP\THXAudio.exe [1374720 2010-11-01] (Creative Technology Ltd)
HKLM-x32\...\Run: [IAStorIcon] - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284440 2011-11-29] (Intel Corporation)
HKLM-x32\...\Run: [USB3MON] - C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [291608 2012-01-26] (Intel Corporation)
HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [684600 2013-12-12] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [766208 2013-09-05] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-11-02] (Apple Inc.)
HKLM-x32\...\Run: [HP Software Update] - C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [54840 2007-05-08] (Hewlett-Packard)
HKLM-x32\...\Run: [hpqSRMon] - C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSRMon.exe [150528 2008-07-22] (Hewlett-Packard)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
Winlogon\Notify\LBTWlgn: c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll (Logitech, Inc.)
IFEO\taskmgr.exe: [Debugger] "C:\TASKMANAGER\PROCEXP.EXE"
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.mysn.de
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKCU - {AD481DD3-1766-48DB-A169-002963D7B607} URL =
BHO: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - D:\Office2013\Office15\OCHelper.dll No File
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - D:\OFFICE~1\Office15\URLREDIR.DLL No File
BHO-x32: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll (Hewlett-Packard Co.)
BHO-x32: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO-x32: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll No File
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll (Microsoft Corporation)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MIF5BA~1\Office15\URLREDIR.DLL No File
BHO-x32: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\PROGRA~2\MIF5BA~1\Office15\GROOVEEX.DLL No File
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll (Hewlett-Packard Co.)
DPF: HKLM {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
DPF: HKLM-x32 {6C269571-C6D7-4818-BCA4-32A035E8C884} hxxp://ccfiles.creative.com/Web/softwareupdate/su/ocx/15102/CTSUEng.cab
DPF: HKLM-x32 {D4B68B83-8710-488B-A692-D74B50BA558E} hxxp://ccfiles.creative.com/Web/softwareupdate/ocx/15113/CTPIDPDE.cab
DPF: HKLM-x32 {F6ACF75C-C32C-447B-9BEF-46B766368D29} hxxp://ccfiles.creative.com/Web/softwareupdate/ocx/130321/CTPID.cab
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - D:\Office2013\Office15\MSOSB.DLL No File
Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files (x86)\Microsoft Office\Office15\MSOSB.DLL No File
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
FireFox:
========
FF ProfilePath: C:\Users\Hanni\AppData\Roaming\Mozilla\Firefox\Profiles\qngyj133.default
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll ()
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 - D:\OFFICE~1\Office15\NPSPWRAP.DLL No File
FF Plugin: @videolan.org/vlc,version=2.0.2 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: @wacom.com/wtPlugin,version=2.1.0.2 - C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll (Wacom)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin-x32: @divx.com/DivX Web Player Plug-In,version=1.0.0 - C:\Program Files (x86)\DivX\DivX Web Player\npdivx32.dll (DivX, LLC)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.0.59 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.7.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.9.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @microsoft.com/Lync,version=15.0 - C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll (Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MIF5BA~1\Office15\NPSPWRAP.DLL No File
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @videolan.org/vlc,version=2.0.8 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @wacom.com/wtPlugin,version=2.1.0.2 - C:\Program Files (x86)\TabletPlugins\npWacomTabletPlugin.dll (Wacom)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @phonostar.de/phonostar - C:\Program Files (x86)\dradio-Recorder\npphonostarDetectNP.dll No File
FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\Hanni\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF Plugin HKCU: amazon.com/AmazonMP3DownloaderPlugin - C:\Users\Hanni\AppData\Local\Program Files\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin10181.dll (Amazon.com, Inc.)
FF Plugin HKCU: ubisoft.com/uplaypc - C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll ()
FF Plugin HKCU: wacom.com/WacomTabletPlugin - C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll (Wacom)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\np-mswmp.dll (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npMeetingJoinPluginOC.dll (Microsoft Corporation)
FF SearchPlugin: C:\Users\Hanni\AppData\Roaming\Mozilla\Firefox\Profiles\qngyj133.default\searchplugins\youtube-videosuche.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazonAniSearchdotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazonSempervideodotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF Extension: FoxyProxy Standard - C:\Users\Hanni\AppData\Roaming\Mozilla\Firefox\Profiles\qngyj133.default\Extensions\foxyproxy@eric.h.jung [2013-10-27]
FF Extension: Ghostery - C:\Users\Hanni\AppData\Roaming\Mozilla\Firefox\Profiles\qngyj133.default\Extensions\firefox@ghostery.com.xpi [2013-08-14]
FF Extension: Magic Actions for YouTube™ - C:\Users\Hanni\AppData\Roaming\Mozilla\Firefox\Profiles\qngyj133.default\Extensions\jid0-UVAeBCfd34Kk5usS8A1CBiobvM8@jetpack.xpi [2013-03-16]
FF Extension: New Tab Tools - C:\Users\Hanni\AppData\Roaming\Mozilla\Firefox\Profiles\qngyj133.default\Extensions\newtabtools@darktrojan.net.xpi [2012-10-23]
FF Extension: NoScript - C:\Users\Hanni\AppData\Roaming\Mozilla\Firefox\Profiles\qngyj133.default\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi [2012-10-07]
FF Extension: Adblock Plus - C:\Users\Hanni\AppData\Roaming\Mozilla\Firefox\Profiles\qngyj133.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2012-09-06]
FF HKLM-x32\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF Extension: HP Smart Web Printing - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2014-01-09]
FF HKCU\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF Extension: HP Smart Web Printing - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2014-01-09]
FF HKCU\...\Firefox\Extensions: [{B64D9B05-48E1-4CEB-BF58-E0643994E900}] - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff\
FF Extension: Download videos and MP3s from YouTube - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff\ []
==================== Services (Whitelisted) =================
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440376 2013-12-12] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440376 2013-11-14] (Avira Operations GmbH & Co. KG)
S2 CLKMSVC10_38F51D56; C:\Program Files (x86)\CyberLink\PowerDVD10\NavFilter\kmsvc.exe [241648 2011-04-20] (CyberLink)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [161560 2012-01-20] (Intel Corporation)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76888 2013-12-02] ()
R2 PowerBiosServer; C:\Program Files (x86)\Hotkey\PowerBiosServer.exe [35328 2011-02-18] ()
R2 RichVideo; C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [247152 2010-08-19] ()
S4 WTabletServiceCon; C:\Program Files\Tablet\Pen\WTabletServiceCon.exe [619904 2012-12-11] (Wacom Technology, Corp.)
R2 XTU3SERVICE; C:\Program Files (x86)\Intel\Extreme Tuning Utility\XtuService.exe [14848 2012-01-11] (Intel Corporation)
S3 Futuremark SystemInfo Service; "C:\Program Files (x86)\Futuremark\Futuremark SystemInfo\FMSISvc.exe" [x]
==================== Drivers (Whitelisted) ====================
R3 AcpiCtlDrv; C:\Windows\system32\drivers\AcpiCtlDrv.sys [25848 2011-06-28] (Intel Corporation)
R3 Ak27x64; C:\Windows\System32\DRIVERS\Ak27x64.sys [2740328 2012-03-07] (Bigfoot Networks, Inc.)
R0 amdkmpfd; C:\Windows\System32\DRIVERS\amdkmpfd.sys [36096 2013-05-21] (Advanced Micro Devices, Inc.)
S1 ASPI32; C:\Windows\SysWow64\Drivers\ASPI32.sys [16877 2002-07-17] (Adaptec)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108440 2013-12-12] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131576 2013-12-12] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-10-07] (Avira Operations GmbH & Co. KG)
R2 iocbios2; C:\Program Files (x86)\Intel\Extreme Tuning Utility\Drivers\IocDriver\64bit\iocbios2.sys [22776 2011-12-22] (Intel Corporation)
S3 LADF_BakerCOnly; C:\Windows\System32\DRIVERS\ladfBakerCamd64.sys [410184 2011-03-18] (Logitech)
S3 LADF_BakerROnly; C:\Windows\System32\DRIVERS\ladfBakerRamd64.sys [335688 2011-03-18] (Logitech)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
S3 NvStUSB; C:\Windows\system32\drivers\nvstusb.sys [121960 2010-12-12] ()
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [564824 2012-11-28] (Duplex Secure Ltd.)
S3 VUSB3HUB; C:\Windows\system32\drivers\ViaHub3.sys [63488 2010-09-03] (VIA Technologies, Inc.)
S3 cpuz135; \??\C:\Windows\TEMP\cpuz135\cpuz135_x64.sys [x]
S3 getbus; \??\C:\Users\Hanni\AppData\Local\Temp\getbus.sys [x]
S3 GPU-Z; \??\C:\Users\Hanni\AppData\Local\Temp\GPU-Z.sys [x]
S3 VBoxNetFlt; system32\DRIVERS\VBoxNetFlt.sys [x]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2014-01-17 13:22 - 2014-01-17 13:22 - 00019317 _____ C:\Users\Hanni\Desktop\FRST.txt
2014-01-17 13:22 - 2014-01-17 13:22 - 00001432 _____ C:\Users\Hanni\Desktop\JRT.txt
2014-01-17 13:17 - 2014-01-17 13:17 - 00000000 ____D C:\Windows\ERUNT
2014-01-17 13:16 - 2014-01-17 13:16 - 01037068 _____ (Thisisu) C:\Users\Hanni\Desktop\JRT.exe
2014-01-17 13:12 - 2014-01-17 13:12 - 00006402 _____ C:\Users\Hanni\Desktop\AdwCleaner[S0].txt
2014-01-17 13:06 - 2014-01-17 13:09 - 00000000 ____D C:\AdwCleaner
2014-01-17 13:04 - 2014-01-17 13:05 - 01236282 _____ C:\Users\Hanni\Desktop\adwcleaner.exe
2014-01-15 20:07 - 2014-01-15 20:07 - 00023988 _____ C:\Users\Hanni\Desktop\Logs 20-08 15-01-2014.zip
2014-01-15 20:01 - 2014-01-15 20:01 - 00000000 ____D C:\FRST
2014-01-15 19:59 - 2014-01-15 20:00 - 02076160 _____ (Farbar) C:\Users\Hanni\Desktop\FRST64.exe
2014-01-15 19:30 - 2014-01-15 19:30 - 00000000 ____D C:\Users\Hanni\AppData\Roaming\Malwarebytes
2014-01-15 19:30 - 2014-01-15 19:30 - 00000000 ____D C:\ProgramData\Malwarebytes
2014-01-15 19:30 - 2014-01-15 19:30 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-01-15 19:30 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-01-15 19:28 - 2014-01-15 19:28 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Hanni\Downloads\mbam-setup-1.75.0.1300.exe
2014-01-15 18:15 - 2014-01-15 18:26 - 00000000 ____D C:\Users\Hanni\AppData\Local\FreeSystemUtilities
2014-01-15 18:00 - 2014-01-15 18:00 - 00000000 ____D C:\ProgramData\Updater
2014-01-15 18:00 - 2014-01-15 18:00 - 00000000 ____D C:\ProgramData\FreeSystemUtilities
2014-01-15 17:54 - 2014-01-15 17:54 - 00000000 ____D C:\Users\Hanni\AppData\Local\Software Updater
2014-01-15 17:48 - 2014-01-15 17:48 - 00000032 _____ C:\Users\Hanni\Desktop\script.cmd
2014-01-15 17:39 - 2014-01-15 17:44 - 00000000 ____D C:\Users\Hanni\AppData\Local\Freemium
2014-01-15 17:38 - 2014-01-15 19:29 - 00003754 _____ C:\Windows\System32\Tasks\Freemium1ClickMaint
2014-01-15 00:45 - 2013-11-27 02:41 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2014-01-15 00:45 - 2013-11-27 02:41 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2014-01-15 00:45 - 2013-11-27 02:41 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2014-01-15 00:45 - 2013-11-27 02:41 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2014-01-15 00:45 - 2013-11-27 02:41 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2014-01-15 00:45 - 2013-11-27 02:41 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys
2014-01-15 00:45 - 2013-11-27 02:41 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2014-01-15 00:45 - 2013-11-26 12:40 - 00376768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2014-01-15 00:45 - 2013-11-26 11:32 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-01-10 22:17 - 2014-01-10 22:18 - 00000000 ____D C:\Users\Hanni\AppData\Roaming\DVDVideoSoft
2014-01-10 01:51 - 2014-01-10 02:04 - 00000000 ____D C:\Users\Hanni\AppData\Roaming\Tropico 4
2014-01-10 01:49 - 2014-01-10 01:49 - 00000000 ____D C:\Users\Hanni\AppData\Roaming\Kalypso Media
2014-01-09 12:50 - 2014-01-09 12:54 - 00000000 ____D C:\Users\Hanni\AppData\Roaming\HP
2014-01-09 12:50 - 2014-01-09 12:50 - 00000000 ____D C:\ProgramData\WEBREG
2014-01-09 12:49 - 2014-01-09 12:49 - 00003148 _____ C:\Windows\System32\Tasks\SidebarExecute
2014-01-09 12:49 - 2014-01-09 12:49 - 00000000 ____D C:\Users\Hanni\AppData\Local\HP
2014-01-09 12:48 - 2014-01-09 12:48 - 00001365 _____ C:\Users\Public\Desktop\HP Solution Center.lnk
2014-01-09 12:48 - 2014-01-09 12:48 - 00000000 ____D C:\Windows\SysWOW64\spool
2014-01-09 12:48 - 2014-01-09 12:48 - 00000000 ____D C:\ProgramData\HP Product Assistant
2014-01-09 12:47 - 2014-01-09 12:48 - 00000000 ____D C:\Program Files (x86)\HP
2014-01-09 12:44 - 2014-01-09 12:54 - 00000000 ____D C:\ProgramData\HP
2014-01-09 12:44 - 2014-01-09 12:50 - 00000806 _____ C:\ProgramData\hpzinstall.log
2014-01-09 12:44 - 2014-01-09 12:49 - 00245350 _____ C:\Windows\hpoins19.dat
2014-01-09 12:44 - 2009-10-20 05:30 - 00013898 ____N C:\Windows\hpomdl19.dat
2014-01-09 12:44 - 2009-07-08 11:51 - 00861184 _____ (Hewlett-Packard) C:\Windows\system32\hpowiav1.dll
2014-01-09 12:44 - 2009-07-08 11:51 - 00730624 _____ (Hewlett-Packard Co.) C:\Windows\system32\hpotscl1.dll
2014-01-09 12:44 - 2009-07-08 11:51 - 00642360 _____ (Hewlett-Packard) C:\Windows\system32\hpzids40.dll
2014-01-09 12:44 - 2009-07-08 11:51 - 00498176 _____ (Hewlett-Packard Co.) C:\Windows\system32\hpovst01.dll
2014-01-06 14:46 - 2014-01-06 14:46 - 26675832 _____ C:\Users\Hanni\Downloads\The Passion HiFi - Bomb Show.wav
2014-01-06 14:41 - 2014-01-06 14:41 - 39513696 _____ C:\Users\Hanni\Downloads\The Passion HiFi - I Love U Baby.wav
2014-01-06 14:40 - 2014-01-06 14:41 - 34550180 _____ C:\Users\Hanni\Downloads\The Passion HiFi - Laws of Movement.wav
2014-01-05 16:14 - 2014-01-05 16:14 - 00000000 ___RD C:\Users\Hanni\Documents\Ubisoft
2014-01-03 13:22 - 2014-01-16 22:57 - 00015411 _____ C:\Users\Hanni\Documents\TombRaider.log
2014-01-02 01:43 - 2014-01-02 01:43 - 00000000 ____D C:\Users\Hanni\Documents\How To Survive Saves
2014-01-01 18:40 - 2014-01-01 18:55 - 00012976 _____ C:\Users\Hanni\Desktop\Elsz Me Em 2013.xlsx
2013-12-30 18:21 - 2014-01-17 00:58 - 00000000 __SHD C:\Users\Hanni\wc
2013-12-30 18:21 - 2013-12-30 18:34 - 00000000 ____D C:\Users\Hanni\AppData\Local\Ubisoft
2013-12-30 18:21 - 2013-12-30 18:21 - 00000000 __SHD C:\Users\Hanni\AppData\Roaming\wyUpdate AU
2013-12-29 23:28 - 2013-12-30 00:39 - 00000000 ____D C:\Users\Hanni\Documents\Shadowrun Returns
2013-12-29 23:26 - 2013-12-29 23:26 - 00000000 ____D C:\Users\Hanni\AppData\Local\Harebrained Schemes
2013-12-29 17:39 - 2014-01-11 22:19 - 00000000 ____D C:\Users\Hanni\Desktop\Grüne Folien
2013-12-29 13:17 - 2013-11-26 12:54 - 23183360 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-12-29 13:17 - 2013-11-26 11:19 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-12-29 13:17 - 2013-11-26 11:18 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2013-12-29 13:17 - 2013-11-26 11:11 - 17112576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-12-29 13:17 - 2013-11-26 10:48 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-12-29 13:17 - 2013-11-26 10:46 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2013-12-29 13:17 - 2013-11-26 10:41 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-12-29 13:17 - 2013-11-26 10:29 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-12-29 13:17 - 2013-11-26 10:27 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-12-29 13:17 - 2013-11-26 10:23 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-12-29 13:17 - 2013-11-26 10:21 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-12-29 13:17 - 2013-11-26 10:18 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-12-29 13:17 - 2013-11-26 10:18 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2013-12-29 13:17 - 2013-11-26 10:16 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2013-12-29 13:17 - 2013-11-26 09:57 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-12-29 13:17 - 2013-11-26 09:38 - 02166784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-12-29 13:17 - 2013-11-26 09:38 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-12-29 13:17 - 2013-11-26 09:35 - 05769216 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-12-29 13:17 - 2013-11-26 09:32 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-12-29 13:17 - 2013-11-26 09:28 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2013-12-29 13:17 - 2013-11-26 09:16 - 04243968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-12-29 13:17 - 2013-11-26 09:02 - 01995264 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-12-29 13:17 - 2013-11-26 08:48 - 12996608 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-12-29 13:17 - 2013-11-26 08:32 - 01928192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-12-29 13:17 - 2013-11-26 08:26 - 11221504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-12-29 13:17 - 2013-11-26 08:07 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-12-29 13:17 - 2013-11-26 07:40 - 01395200 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-12-29 13:17 - 2013-11-26 07:34 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2013-12-29 13:17 - 2013-11-26 07:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-12-29 13:17 - 2013-11-26 07:33 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-12-29 13:17 - 2013-11-26 07:27 - 01157632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-12-19 02:55 - 2013-10-14 18:00 - 00028368 _____ (Microsoft Corporation) C:\Windows\system32\IEUDINIT.EXE
2013-12-19 02:53 - 2013-12-19 02:53 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2013-12-19 02:53 - 2013-12-19 02:53 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2013-12-19 02:53 - 2013-12-19 02:53 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2013-12-19 02:53 - 2013-12-19 02:53 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2013-12-19 02:53 - 2013-12-19 02:53 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-12-19 02:53 - 2013-12-19 02:53 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2013-12-19 02:53 - 2013-12-19 02:53 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2013-12-19 02:53 - 2013-12-19 02:53 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2013-12-19 02:53 - 2013-12-19 02:53 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2013-12-19 02:53 - 2013-12-19 02:53 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-12-19 02:53 - 2013-12-19 02:53 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2013-12-19 02:53 - 2013-12-19 02:53 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-12-19 02:53 - 2013-12-19 02:53 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2013-12-19 02:53 - 2013-12-19 02:53 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-12-19 02:53 - 2013-12-19 02:53 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-12-19 02:53 - 2013-12-19 02:53 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2013-12-19 02:53 - 2013-12-19 02:53 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2013-12-19 02:53 - 2013-12-19 02:53 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2013-12-19 02:53 - 2013-12-19 02:53 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2013-12-19 02:53 - 2013-12-19 02:53 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2013-12-19 02:52 - 2013-12-19 02:55 - 00009768 _____ C:\Windows\IE11_main.log
==================== One Month Modified Files and Folders =======
2014-01-17 13:23 - 2014-01-17 13:22 - 00019317 _____ C:\Users\Hanni\Desktop\FRST.txt
2014-01-17 13:23 - 2013-05-01 11:49 - 00011264 _____ C:\Users\Hanni\Desktop\Datenvolumen.db
2014-01-17 13:22 - 2014-01-17 13:22 - 00001432 _____ C:\Users\Hanni\Desktop\JRT.txt
2014-01-17 13:20 - 2013-12-11 22:49 - 00003490 _____ C:\Windows\System32\Tasks\AutoKMS
2014-01-17 13:19 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2014-01-17 13:19 - 2009-07-14 05:51 - 00164499 _____ C:\Windows\setupact.log
2014-01-17 13:18 - 2012-09-06 00:33 - 01894707 _____ C:\Windows\WindowsUpdate.log
2014-01-17 13:17 - 2014-01-17 13:17 - 00000000 ____D C:\Windows\ERUNT
2014-01-17 13:17 - 2009-07-14 05:45 - 00021872 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-01-17 13:17 - 2009-07-14 05:45 - 00021872 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-01-17 13:16 - 2014-01-17 13:16 - 01037068 _____ (Thisisu) C:\Users\Hanni\Desktop\JRT.exe
2014-01-17 13:16 - 2010-11-21 07:50 - 00710752 _____ C:\Windows\system32\perfh007.dat
2014-01-17 13:16 - 2010-11-21 07:50 - 00155050 _____ C:\Windows\system32\perfc007.dat
2014-01-17 13:16 - 2009-07-14 06:13 - 01651750 _____ C:\Windows\system32\PerfStringBackup.INI
2014-01-17 13:13 - 2012-10-28 14:57 - 00000000 ____D C:\Taskmanager
2014-01-17 13:12 - 2014-01-17 13:12 - 00006402 _____ C:\Users\Hanni\Desktop\AdwCleaner[S0].txt
2014-01-17 13:11 - 2010-11-21 04:47 - 00313338 _____ C:\Windows\PFRO.log
2014-01-17 13:09 - 2014-01-17 13:06 - 00000000 ____D C:\AdwCleaner
2014-01-17 13:05 - 2014-01-17 13:04 - 01236282 _____ C:\Users\Hanni\Desktop\adwcleaner.exe
2014-01-17 13:02 - 2012-09-29 23:41 - 00000000 ____D C:\Program Files (x86)\Enterbrain
2014-01-17 12:42 - 2013-03-17 05:33 - 00000000 ____D C:\Users\Hanni\Desktop\Programme
2014-01-17 12:34 - 2013-02-13 01:50 - 00000000 ____D C:\Users\Hanni\AppData\Roaming\uTorrent
2014-01-17 12:34 - 2012-12-13 13:50 - 00000000 ____D C:\Program Files (x86)\Steam
2014-01-17 11:34 - 2012-09-06 20:46 - 00000000 ____D C:\Users\Hanni\AppData\Roaming\vlc
2014-01-17 00:58 - 2013-12-30 18:21 - 00000000 __SHD C:\Users\Hanni\wc
2014-01-16 22:57 - 2014-01-03 13:22 - 00015411 _____ C:\Users\Hanni\Documents\TombRaider.log
2014-01-16 17:32 - 2012-09-07 11:49 - 00000000 ____D C:\Users\Hanni\AppData\Roaming\Skype
2014-01-16 13:17 - 2009-07-14 06:08 - 00032632 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2014-01-15 20:21 - 2014-01-15 18:00 - 00000000 ____D C:\ProgramData\Updater
2014-01-15 20:07 - 2014-01-15 20:07 - 00023988 _____ C:\Users\Hanni\Desktop\Logs 20-08 15-01-2014.zip
2014-01-15 20:01 - 2014-01-15 20:01 - 00000000 ____D C:\FRST
2014-01-15 20:00 - 2014-01-15 19:59 - 02076160 _____ (Farbar) C:\Users\Hanni\Desktop\FRST64.exe
2014-01-15 19:30 - 2014-01-15 19:30 - 00000000 ____D C:\Users\Hanni\AppData\Roaming\Malwarebytes
2014-01-15 19:30 - 2014-01-15 19:30 - 00000000 ____D C:\ProgramData\Malwarebytes
2014-01-15 19:30 - 2014-01-15 19:30 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-01-15 19:29 - 2014-01-15 17:38 - 00003754 _____ C:\Windows\System32\Tasks\Freemium1ClickMaint
2014-01-15 19:28 - 2014-01-15 19:28 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Hanni\Downloads\mbam-setup-1.75.0.1300.exe
2014-01-15 18:26 - 2014-01-15 18:15 - 00000000 ____D C:\Users\Hanni\AppData\Local\FreeSystemUtilities
2014-01-15 18:00 - 2014-01-15 18:00 - 00000000 ____D C:\ProgramData\FreeSystemUtilities
2014-01-15 18:00 - 2013-06-13 18:24 - 00000000 ____D C:\ProgramData\Package Cache
2014-01-15 17:54 - 2014-01-15 17:54 - 00000000 ____D C:\Users\Hanni\AppData\Local\Software Updater
2014-01-15 17:51 - 2012-09-06 00:33 - 00000000 ____D C:\Users\Hanni
2014-01-15 17:48 - 2014-01-15 17:48 - 00000032 _____ C:\Users\Hanni\Desktop\script.cmd
2014-01-15 17:44 - 2014-01-15 17:39 - 00000000 ____D C:\Users\Hanni\AppData\Local\Freemium
2014-01-15 17:40 - 2012-09-29 11:46 - 00000000 ____D C:\Users\Hanni\Desktop\Games
2014-01-15 16:54 - 2009-07-14 05:45 - 00473640 _____ C:\Windows\system32\FNTCACHE.DAT
2014-01-15 00:47 - 2013-12-11 22:46 - 00000000 ____D C:\ProgramData\Microsoft Help
2014-01-15 00:47 - 2009-07-14 03:34 - 00000513 _____ C:\Windows\win.ini
2014-01-15 00:46 - 2013-07-11 11:42 - 00000000 ____D C:\Windows\system32\MRT
2014-01-15 00:45 - 2012-09-06 13:23 - 86054176 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-01-11 22:19 - 2013-12-29 17:39 - 00000000 ____D C:\Users\Hanni\Desktop\Grüne Folien
2014-01-11 15:08 - 2013-12-11 22:46 - 00000000 ____D C:\Users\Hanni\AppData\Local\Microsoft Help
2014-01-10 22:18 - 2014-01-10 22:17 - 00000000 ____D C:\Users\Hanni\AppData\Roaming\DVDVideoSoft
2014-01-10 02:04 - 2014-01-10 01:51 - 00000000 ____D C:\Users\Hanni\AppData\Roaming\Tropico 4
2014-01-10 01:49 - 2014-01-10 01:49 - 00000000 ____D C:\Users\Hanni\AppData\Roaming\Kalypso Media
2014-01-09 16:35 - 2012-11-07 22:23 - 00000000 ____D C:\Windows\pss
2014-01-09 12:54 - 2014-01-09 12:50 - 00000000 ____D C:\Users\Hanni\AppData\Roaming\HP
2014-01-09 12:54 - 2014-01-09 12:44 - 00000000 ____D C:\ProgramData\HP
2014-01-09 12:53 - 2012-09-06 00:33 - 00134160 _____ C:\Users\Hanni\AppData\Local\GDIPFONTCACHEV1.DAT
2014-01-09 12:50 - 2014-01-09 12:50 - 00000000 ____D C:\ProgramData\WEBREG
2014-01-09 12:50 - 2014-01-09 12:44 - 00000806 _____ C:\ProgramData\hpzinstall.log
2014-01-09 12:49 - 2014-01-09 12:49 - 00003148 _____ C:\Windows\System32\Tasks\SidebarExecute
2014-01-09 12:49 - 2014-01-09 12:49 - 00000000 ____D C:\Users\Hanni\AppData\Local\HP
2014-01-09 12:49 - 2014-01-09 12:44 - 00245350 _____ C:\Windows\hpoins19.dat
2014-01-09 12:48 - 2014-01-09 12:48 - 00001365 _____ C:\Users\Public\Desktop\HP Solution Center.lnk
2014-01-09 12:48 - 2014-01-09 12:48 - 00000000 ____D C:\Windows\SysWOW64\spool
2014-01-09 12:48 - 2014-01-09 12:48 - 00000000 ____D C:\ProgramData\HP Product Assistant
2014-01-09 12:48 - 2014-01-09 12:47 - 00000000 ____D C:\Program Files (x86)\HP
2014-01-06 14:46 - 2014-01-06 14:46 - 26675832 _____ C:\Users\Hanni\Downloads\The Passion HiFi - Bomb Show.wav
2014-01-06 14:41 - 2014-01-06 14:41 - 39513696 _____ C:\Users\Hanni\Downloads\The Passion HiFi - I Love U Baby.wav
2014-01-06 14:41 - 2014-01-06 14:40 - 34550180 _____ C:\Users\Hanni\Downloads\The Passion HiFi - Laws of Movement.wav
2014-01-05 16:14 - 2014-01-05 16:14 - 00000000 ___RD C:\Users\Hanni\Documents\Ubisoft
2014-01-05 16:14 - 2012-08-28 20:07 - 00354464 _____ C:\Windows\DirectX.log
2014-01-02 01:43 - 2014-01-02 01:43 - 00000000 ____D C:\Users\Hanni\Documents\How To Survive Saves
2014-01-02 01:25 - 2013-01-05 18:02 - 00000000 ____D C:\Users\Hanni\Documents\Telltale Games
2014-01-02 00:48 - 2013-01-02 22:48 - 00000000 ____D C:\Users\Hanni\AppData\Local\Daedalic Entertainment
2014-01-01 18:57 - 2012-11-28 21:02 - 00000000 ____D C:\Users\Hanni\Documents\My Games
2014-01-01 18:55 - 2014-01-01 18:40 - 00012976 _____ C:\Users\Hanni\Desktop\Elsz Me Em 2013.xlsx
2013-12-30 18:34 - 2013-12-30 18:21 - 00000000 ____D C:\Users\Hanni\AppData\Local\Ubisoft
2013-12-30 18:21 - 2013-12-30 18:21 - 00000000 __SHD C:\Users\Hanni\AppData\Roaming\wyUpdate AU
2013-12-30 00:52 - 2012-08-28 20:18 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2013-12-30 00:39 - 2013-12-29 23:28 - 00000000 ____D C:\Users\Hanni\Documents\Shadowrun Returns
2013-12-29 23:26 - 2013-12-29 23:26 - 00000000 ____D C:\Users\Hanni\AppData\Local\Harebrained Schemes
2013-12-29 17:42 - 2012-12-18 15:57 - 00000000 ____D C:\Users\Hanni\AppData\Roaming\Ubisoft
2013-12-29 14:47 - 2013-10-28 17:01 - 00000000 ____D C:\Users\Hanni\AppData\Roaming\Origin
2013-12-29 14:47 - 2013-10-28 16:56 - 00000000 ____D C:\Program Files (x86)\Origin
2013-12-20 15:22 - 2012-12-07 21:59 - 00000000 ___RD C:\Program Files (x86)\Skype
2013-12-20 15:22 - 2012-09-07 11:49 - 00000000 ____D C:\ProgramData\Skype
2013-12-19 23:43 - 2013-03-16 22:31 - 00000000 ____D C:\Users\Hanni\AppData\Roaming\.minecraft
2013-12-19 11:42 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache
2013-12-19 09:44 - 2012-09-06 00:33 - 00001439 _____ C:\Users\Hanni\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2013-12-19 09:43 - 2012-09-07 16:35 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-12-19 03:13 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2013-12-19 02:55 - 2013-12-19 02:52 - 00009768 _____ C:\Windows\IE11_main.log
2013-12-19 02:53 - 2013-12-19 02:53 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2013-12-19 02:53 - 2013-12-19 02:53 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2013-12-19 02:53 - 2013-12-19 02:53 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2013-12-19 02:53 - 2013-12-19 02:53 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2013-12-19 02:53 - 2013-12-19 02:53 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-12-19 02:53 - 2013-12-19 02:53 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2013-12-19 02:53 - 2013-12-19 02:53 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2013-12-19 02:53 - 2013-12-19 02:53 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2013-12-19 02:53 - 2013-12-19 02:53 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2013-12-19 02:53 - 2013-12-19 02:53 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-12-19 02:53 - 2013-12-19 02:53 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2013-12-19 02:53 - 2013-12-19 02:53 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-12-19 02:53 - 2013-12-19 02:53 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2013-12-19 02:53 - 2013-12-19 02:53 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-12-19 02:53 - 2013-12-19 02:53 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-12-19 02:53 - 2013-12-19 02:53 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2013-12-19 02:53 - 2013-12-19 02:53 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2013-12-19 02:53 - 2013-12-19 02:53 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2013-12-19 02:53 - 2013-12-19 02:53 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2013-12-19 02:53 - 2013-12-19 02:53 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
Some content of TEMP:
====================
C:\Users\Hanni\AppData\Local\Temp\avgnt.exe
C:\Users\Hanni\AppData\Local\Temp\nsd6C11.exe
C:\Users\Hanni\AppData\Local\Temp\nsn3526.exe
C:\Users\Hanni\AppData\Local\Temp\nsn823C.exe
C:\Users\Hanni\AppData\Local\Temp\nso1CF6.exe
C:\Users\Hanni\AppData\Local\Temp\nssBF1E.exe
C:\Users\Hanni\AppData\Local\Temp\nsx87AB.exe
C:\Users\Hanni\AppData\Local\Temp\ose00000.exe
C:\Users\Hanni\AppData\Local\Temp\Quarantine.exe
C:\Users\Hanni\AppData\Local\Temp\SPStub.exe
C:\Users\Hanni\AppData\Local\Temp\tbFree.dll
C:\Users\Hanni\AppData\Local\Temp\_isB843.exe
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2014-01-09 15:10
==================== End Of Log ============================
--- --- --- --- --- --- EDIT: Avira läuft wieder. EDIT2: Hat MBAM grade geblockt: Code:
ATTFilter 2014/01/17 14:17:41 +0100 HANNI-XMG Hanni IP-BLOCK 91.202.63.160 (Type: outgoing, Port: 49551, Process: firefox.exe)
2014/01/17 14:17:49 +0100 HANNI-XMG Hanni IP-BLOCK 193.107.16.240 (Type: outgoing, Port: 49552, Process: firefox.exe)
Geändert von Colonios (17.01.2014 um 14:19 Uhr) |
|
18.01.2014, 07:27
| #7 |
| /// the machine /// TB-Ausbilder | Free System Utilities installierte verdächtige Programme Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster. Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument Code:
ATTFilter IFEO\taskmgr.exe: [Debugger] "C:\TASKMANAGER\PROCEXP.EXE"
Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
Downloade Dir bitte TFC ( von Oldtimer ) und speichere die Datei auf dem Desktop. Schließe nun alle offenen Programme und trenne Dich von dem Internet. Doppelklick auf die TFC.exe und drücke auf Start. Sollte TFC nicht alle Dateien löschen können wird es einen Neustart verlangen. Dies bitte zulassen. Firefox komplett deinstallieren, keine Daten behalten, neu installieren, dann: https://support.mozilla.org/de/kb/fi...einfach-loesen ESET Online Scanner
Downloade Dir bitte  SecurityCheck und:
und ein frisches FRST log bitte. Noch Probleme? 
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
18.01.2014, 12:25
| #8 |
| | Free System Utilities installierte verdächtige ProgrammeCode:
ATTFilter Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 15-01-2014 01
Ran by Hanni at 2014-01-18 10:08:57 Run:1
Running from C:\Users\Hanni\Desktop
Boot Mode: Normal
==============================================
Content of fixlist:
*****************
IFEO\taskmgr.exe: [Debugger] "C:\TASKMANAGER\PROCEXP.EXE"
*****************
HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\taskmgr.exe => Key deleted successfully.
==== End of Fixlog ====
Code:
ATTFilter ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=1d6636c84155ea4e88ede40c594d6dab
# engine=16700
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2014-01-18 11:07:46
# local_time=2014-01-18 12:07:46 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# lang=1033
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=774 16777213 71 77 45400 49003 0 0
# compatibility_mode=5893 16776573 100 94 65777 141673116 0 0
# scanned=317427
# found=0
# cleaned=0
# scan_time=5294
Code:
ATTFilter Results of screen317's Security Check version 0.99.79 Windows 7 Service Pack 1 x64 (UAC is enabled) Internet Explorer 11 ``````````````Antivirus/Firewall Check:`````````````` avast! Antivirus Antivirus up to date! `````````Anti-malware/Other Utilities Check:````````` Malwarebytes Anti-Malware Version 1.75.0.1300 Java 7 Update 9 Java version out of Date! Adobe Flash Player 11.9.900.170 Adobe Reader 10.1.4 Adobe Reader out of Date! Mozilla Firefox (26.0) Mozilla Thunderbird (24.2.0) ````````Process Check: objlist.exe by Laurent```````` Malwarebytes Anti-Malware mbamservice.exe Malwarebytes' Anti-Malware mbamscheduler.exe AVAST Software Avast AvastSvc.exe AVAST Software Avast AvastUI.exe `````````````````System Health check````````````````` Total Fragmentation on Drive C: ````````````````````End of Log`````````````````````` FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 15-01-2014 01
Ran by Hanni (administrator) on HANNI-XMG on 18-01-2014 12:13:23
Running from C:\Users\Hanni\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
() C:\Program Files (x86)\Hotkey\PowerBiosServer.exe
() C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Logitech, Inc.) C:\Program Files\Logitech\SetPointP\SetPoint.exe
(Logitech, Inc.) C:\Program Files\Common Files\Logishrd\KHAL3\KHALMNPR.exe
(Logitech Inc.) C:\Program Files\Logitech Gaming Software\LCore.exe
(Microsoft Corporation) C:\Program Files\Microsoft Xbox 360 Accessories\XBoxStat.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Extreme Tuning Utility\XtuService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2052392 2010-02-11] (Synaptics Incorporated)
HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13374568 2011-12-13] (Realtek Semiconductor)
HKLM\...\Run: [THXCfg64] - C:\Windows\system32\THXCfg64.dll [25600 2010-09-14] (Creative Technology Ltd.)
HKLM\...\Run: [Logitech Download Assistant] - C:\Windows\System32\LogiLDA.dll [1832760 2012-09-20] (Logitech, Inc.)
HKLM\...\Run: [EvtMgr6] - C:\Program Files\Logitech\SetPointP\SetPoint.exe [1744152 2011-10-07] (Logitech, Inc.)
HKLM\...\Run: [Launch LCore] - C:\Program Files\Logitech Gaming Software\LCore.exe [7406392 2012-11-29] (Logitech Inc.)
HKLM\...\Run: [XboxStat] - C:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe [825184 2009-09-30] (Microsoft Corporation)
HKLM-x32\...\Run: [THX Audio Control Panel] - C:\Program Files (x86)\Creative\THX TruStudio Pro\THXAudioCP\THXAudio.exe [1374720 2010-11-01] (Creative Technology Ltd)
HKLM-x32\...\Run: [IAStorIcon] - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284440 2011-11-29] (Intel Corporation)
HKLM-x32\...\Run: [USB3MON] - C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [291608 2012-01-26] (Intel Corporation)
HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [766208 2013-09-05] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-11-02] (Apple Inc.)
HKLM-x32\...\Run: [HP Software Update] - C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [54840 2007-05-08] (Hewlett-Packard)
HKLM-x32\...\Run: [hpqSRMon] - C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSRMon.exe [150528 2008-07-22] (Hewlett-Packard)
HKLM-x32\...\Run: [AvastUI.exe] - C:\Program Files\AVAST Software\Avast\AvastUI.exe [3764024 2014-01-17] (AVAST Software)
HKLM-x32\...\RunOnce: [20131224] - C:\Program Files\AVAST Software\Avast\setup\emupdate\663d3527-a781-44a9-a324-155ee95b79c7.exe /check [181136 2014-01-18] (AVAST Software)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
Winlogon\Notify\LBTWlgn: c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll (Logitech, Inc.)
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.mysn.de
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKCU - DefaultScope {AD481DD3-1766-48DB-A169-002963D7B607} URL =
SearchScopes: HKCU - {AD481DD3-1766-48DB-A169-002963D7B607} URL =
BHO: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - D:\Office2013\Office15\OCHelper.dll No File
BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - D:\OFFICE~1\Office15\URLREDIR.DLL No File
BHO-x32: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll (Hewlett-Packard Co.)
BHO-x32: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO-x32: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll No File
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll (Microsoft Corporation)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MIF5BA~1\Office15\URLREDIR.DLL No File
BHO-x32: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\PROGRA~2\MIF5BA~1\Office15\GROOVEEX.DLL No File
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll (Hewlett-Packard Co.)
Toolbar: HKLM - avast! Online Security - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
Toolbar: HKLM-x32 - avast! Online Security - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
DPF: HKLM {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
DPF: HKLM-x32 {6C269571-C6D7-4818-BCA4-32A035E8C884} hxxp://ccfiles.creative.com/Web/softwareupdate/su/ocx/15102/CTSUEng.cab
DPF: HKLM-x32 {D4B68B83-8710-488B-A692-D74B50BA558E} hxxp://ccfiles.creative.com/Web/softwareupdate/ocx/15113/CTPIDPDE.cab
DPF: HKLM-x32 {F6ACF75C-C32C-447B-9BEF-46B766368D29} hxxp://ccfiles.creative.com/Web/softwareupdate/ocx/130321/CTPID.cab
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - D:\Office2013\Office15\MSOSB.DLL No File
Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files (x86)\Microsoft Office\Office15\MSOSB.DLL No File
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
FireFox:
========
FF ProfilePath: C:\Users\Hanni\AppData\Roaming\Mozilla\Firefox\Profiles\pe0jxh6l.default
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll ()
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 - D:\OFFICE~1\Office15\NPSPWRAP.DLL No File
FF Plugin: @videolan.org/vlc,version=2.0.2 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: @wacom.com/wtPlugin,version=2.1.0.2 - C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll (Wacom)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin-x32: @divx.com/DivX Web Player Plug-In,version=1.0.0 - C:\Program Files (x86)\DivX\DivX Web Player\npdivx32.dll (DivX, LLC)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.0.59 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.7.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.9.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @microsoft.com/Lync,version=15.0 - C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll (Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MIF5BA~1\Office15\NPSPWRAP.DLL No File
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @videolan.org/vlc,version=2.0.8 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @wacom.com/wtPlugin,version=2.1.0.2 - C:\Program Files (x86)\TabletPlugins\npWacomTabletPlugin.dll (Wacom)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @phonostar.de/phonostar - C:\Program Files (x86)\dradio-Recorder\npphonostarDetectNP.dll No File
FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\Hanni\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF Plugin HKCU: amazon.com/AmazonMP3DownloaderPlugin - C:\Users\Hanni\AppData\Local\Program Files\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin10181.dll (Amazon.com, Inc.)
FF Plugin HKCU: ubisoft.com/uplaypc - C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll ()
FF Plugin HKCU: wacom.com/WacomTabletPlugin - C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll (Wacom)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\np-mswmp.dll (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npMeetingJoinPluginOC.dll (Microsoft Corporation)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazonAniSearchdotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazonSempervideodotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Ghostery - C:\Users\Hanni\AppData\Roaming\Mozilla\Firefox\Profiles\pe0jxh6l.default\Extensions\firefox@ghostery.com.xpi [2014-01-18]
FF Extension: NoScript - C:\Users\Hanni\AppData\Roaming\Mozilla\Firefox\Profiles\pe0jxh6l.default\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi [2014-01-18]
FF Extension: Adblock Plus - C:\Users\Hanni\AppData\Roaming\Mozilla\Firefox\Profiles\pe0jxh6l.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-01-18]
FF HKLM-x32\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF Extension: HP Smart Web Printing - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2014-01-09]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2014-01-17]
FF HKCU\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF Extension: HP Smart Web Printing - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2014-01-09]
FF HKCU\...\Firefox\Extensions: [{B64D9B05-48E1-4CEB-BF58-E0643994E900}] - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff\
FF Extension: Download videos and MP3s from YouTube - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff\ []
==================== Services (Whitelisted) =================
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-01-17] (AVAST Software)
S2 CLKMSVC10_38F51D56; C:\Program Files (x86)\CyberLink\PowerDVD10\NavFilter\kmsvc.exe [241648 2011-04-20] (CyberLink)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [161560 2012-01-20] (Intel Corporation)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76888 2013-12-02] ()
R2 PowerBiosServer; C:\Program Files (x86)\Hotkey\PowerBiosServer.exe [35328 2011-02-18] ()
R2 RichVideo; C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [247152 2010-08-19] ()
S4 WTabletServiceCon; C:\Program Files\Tablet\Pen\WTabletServiceCon.exe [619904 2012-12-11] (Wacom Technology, Corp.)
R2 XTU3SERVICE; C:\Program Files (x86)\Intel\Extreme Tuning Utility\XtuService.exe [14848 2012-01-11] (Intel Corporation)
S3 Futuremark SystemInfo Service; "C:\Program Files (x86)\Futuremark\Futuremark SystemInfo\FMSISvc.exe" [x]
==================== Drivers (Whitelisted) ====================
R3 AcpiCtlDrv; C:\Windows\system32\drivers\AcpiCtlDrv.sys [25848 2011-06-28] (Intel Corporation)
R3 Ak27x64; C:\Windows\System32\DRIVERS\Ak27x64.sys [2740328 2012-03-07] (Bigfoot Networks, Inc.)
R0 amdkmpfd; C:\Windows\System32\DRIVERS\amdkmpfd.sys [36096 2013-05-21] (Advanced Micro Devices, Inc.)
S1 ASPI32; C:\Windows\SysWow64\Drivers\ASPI32.sys [16877 2002-07-17] (Adaptec)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [78648 2014-01-17] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [92544 2014-01-17] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2014-01-17] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1034464 2014-01-17] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [422216 2014-01-17] (AVAST Software)
R3 aswStm; C:\Windows\system32\drivers\aswStm.sys [79672 2014-01-18] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [207904 2014-01-17] ()
R2 iocbios2; C:\Program Files (x86)\Intel\Extreme Tuning Utility\Drivers\IocDriver\64bit\iocbios2.sys [22776 2011-12-22] (Intel Corporation)
S3 LADF_BakerCOnly; C:\Windows\System32\DRIVERS\ladfBakerCamd64.sys [410184 2011-03-18] (Logitech)
S3 LADF_BakerROnly; C:\Windows\System32\DRIVERS\ladfBakerRamd64.sys [335688 2011-03-18] (Logitech)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
S3 NvStUSB; C:\Windows\system32\drivers\nvstusb.sys [121960 2010-12-12] ()
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [564824 2012-11-28] (Duplex Secure Ltd.)
S3 VUSB3HUB; C:\Windows\system32\drivers\ViaHub3.sys [63488 2010-09-03] (VIA Technologies, Inc.)
S3 cpuz135; \??\C:\Windows\TEMP\cpuz135\cpuz135_x64.sys [x]
S3 getbus; \??\C:\Users\Hanni\AppData\Local\Temp\getbus.sys [x]
S3 GPU-Z; \??\C:\Users\Hanni\AppData\Local\Temp\GPU-Z.sys [x]
S3 VBoxNetFlt; system32\DRIVERS\VBoxNetFlt.sys [x]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2014-01-18 12:12 - 2014-01-18 12:12 - 00001033 _____ C:\Users\Hanni\Desktop\checkup.txt
2014-01-18 12:11 - 2014-01-18 12:11 - 00987425 _____ C:\Users\Hanni\Desktop\SecurityCheck.exe
2014-01-18 10:37 - 2014-01-18 10:37 - 02347384 _____ (ESET) C:\Users\Hanni\Downloads\esetsmartinstaller_enu.exe
2014-01-18 10:24 - 2014-01-18 10:24 - 00283096 _____ (Mozilla) C:\Users\Hanni\Downloads\Firefox Setup Stub 26.0.exe
2014-01-18 10:10 - 2014-01-18 10:10 - 00448512 _____ (OldTimer Tools) C:\Users\Hanni\Desktop\TFC.exe
2014-01-17 23:31 - 2014-01-18 11:31 - 00079672 _____ (AVAST Software) C:\Windows\system32\Drivers\aswstm.sys
2014-01-17 23:31 - 2014-01-17 23:35 - 00004182 _____ C:\Windows\System32\Tasks\avast! Emergency Update
2014-01-17 23:31 - 2014-01-17 23:31 - 01034464 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2014-01-17 23:31 - 2014-01-17 23:31 - 00422216 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys
2014-01-17 23:31 - 2014-01-17 23:31 - 00334136 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2014-01-17 23:31 - 2014-01-17 23:31 - 00207904 _____ C:\Windows\system32\Drivers\aswVmm.sys
2014-01-17 23:31 - 2014-01-17 23:31 - 00092544 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2014-01-17 23:31 - 2014-01-17 23:31 - 00082744 _____ (AVAST Software) C:\Windows\system32\Drivers\aswstm.sys.1390041085
2014-01-17 23:31 - 2014-01-17 23:31 - 00078648 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2014-01-17 23:31 - 2014-01-17 23:31 - 00065776 _____ C:\Windows\system32\Drivers\aswRvrt.sys
2014-01-17 23:31 - 2014-01-17 23:31 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr
2014-01-17 23:31 - 2014-01-17 23:31 - 00000000 ____D C:\Users\Hanni\AppData\Roaming\AVAST Software
2014-01-17 23:30 - 2014-01-17 23:30 - 00000000 ____D C:\Program Files\AVAST Software
2014-01-17 23:28 - 2014-01-17 23:28 - 00000000 ____D C:\ProgramData\AVAST Software
2014-01-17 23:27 - 2014-01-17 23:28 - 91412976 _____ (AVAST Software) C:\Users\Hanni\Downloads\avast_free_antivirus_setup.exe
2014-01-17 21:46 - 2014-01-17 22:02 - 00000000 ____D C:\Users\Hanni\AppData\Local\Valdis_Story_AC
2014-01-17 17:49 - 2014-01-17 17:50 - 00000000 ____D C:\Users\Hanni\AppData\Local\Darksiders
2014-01-17 17:48 - 2014-01-17 17:48 - 00000000 ____D C:\Program Files (x86)\THQ
2014-01-17 13:22 - 2014-01-18 12:13 - 00019214 _____ C:\Users\Hanni\Desktop\FRST.txt
2014-01-17 13:22 - 2014-01-17 13:22 - 00001432 _____ C:\Users\Hanni\Desktop\JRT.txt
2014-01-17 13:17 - 2014-01-17 13:17 - 00000000 ____D C:\Windows\ERUNT
2014-01-17 13:16 - 2014-01-17 13:16 - 01037068 _____ (Thisisu) C:\Users\Hanni\Desktop\JRT.exe
2014-01-17 13:12 - 2014-01-17 13:12 - 00006402 _____ C:\Users\Hanni\Desktop\AdwCleaner[S0].txt
2014-01-17 13:06 - 2014-01-17 13:09 - 00000000 ____D C:\AdwCleaner
2014-01-17 13:04 - 2014-01-17 13:05 - 01236282 _____ C:\Users\Hanni\Desktop\adwcleaner.exe
2014-01-15 20:07 - 2014-01-15 20:07 - 00023988 _____ C:\Users\Hanni\Desktop\Logs 20-08 15-01-2014.zip
2014-01-15 20:01 - 2014-01-15 20:01 - 00000000 ____D C:\FRST
2014-01-15 19:59 - 2014-01-15 20:00 - 02076160 _____ (Farbar) C:\Users\Hanni\Desktop\FRST64.exe
2014-01-15 19:30 - 2014-01-15 19:30 - 00000000 ____D C:\Users\Hanni\AppData\Roaming\Malwarebytes
2014-01-15 19:30 - 2014-01-15 19:30 - 00000000 ____D C:\ProgramData\Malwarebytes
2014-01-15 19:30 - 2014-01-15 19:30 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-01-15 19:30 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-01-15 19:28 - 2014-01-15 19:28 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Hanni\Downloads\mbam-setup-1.75.0.1300.exe
2014-01-15 18:15 - 2014-01-15 18:26 - 00000000 ____D C:\Users\Hanni\AppData\Local\FreeSystemUtilities
2014-01-15 18:00 - 2014-01-15 20:21 - 00000000 ____D C:\ProgramData\Updater
2014-01-15 18:00 - 2014-01-15 18:00 - 00000000 ____D C:\ProgramData\FreeSystemUtilities
2014-01-15 17:54 - 2014-01-15 17:54 - 00000000 ____D C:\Users\Hanni\AppData\Local\Software Updater
2014-01-15 17:48 - 2014-01-15 17:48 - 00000032 _____ C:\Users\Hanni\Desktop\script.cmd
2014-01-15 17:39 - 2014-01-15 17:44 - 00000000 ____D C:\Users\Hanni\AppData\Local\Freemium
2014-01-15 17:38 - 2014-01-15 19:29 - 00003754 _____ C:\Windows\System32\Tasks\Freemium1ClickMaint
2014-01-15 00:45 - 2013-11-27 02:41 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2014-01-15 00:45 - 2013-11-27 02:41 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2014-01-15 00:45 - 2013-11-27 02:41 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2014-01-15 00:45 - 2013-11-27 02:41 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2014-01-15 00:45 - 2013-11-27 02:41 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2014-01-15 00:45 - 2013-11-27 02:41 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys
2014-01-15 00:45 - 2013-11-27 02:41 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2014-01-15 00:45 - 2013-11-26 12:40 - 00376768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2014-01-15 00:45 - 2013-11-26 11:32 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-01-10 22:17 - 2014-01-10 22:18 - 00000000 ____D C:\Users\Hanni\AppData\Roaming\DVDVideoSoft
2014-01-10 01:51 - 2014-01-10 02:04 - 00000000 ____D C:\Users\Hanni\AppData\Roaming\Tropico 4
2014-01-10 01:49 - 2014-01-10 01:49 - 00000000 ____D C:\Users\Hanni\AppData\Roaming\Kalypso Media
2014-01-09 12:50 - 2014-01-09 12:54 - 00000000 ____D C:\Users\Hanni\AppData\Roaming\HP
2014-01-09 12:50 - 2014-01-09 12:50 - 00000000 ____D C:\ProgramData\WEBREG
2014-01-09 12:49 - 2014-01-09 12:49 - 00003148 _____ C:\Windows\System32\Tasks\SidebarExecute
2014-01-09 12:49 - 2014-01-09 12:49 - 00000000 ____D C:\Users\Hanni\AppData\Local\HP
2014-01-09 12:48 - 2014-01-09 12:48 - 00001365 _____ C:\Users\Public\Desktop\HP Solution Center.lnk
2014-01-09 12:48 - 2014-01-09 12:48 - 00000000 ____D C:\Windows\SysWOW64\spool
2014-01-09 12:48 - 2014-01-09 12:48 - 00000000 ____D C:\ProgramData\HP Product Assistant
2014-01-09 12:47 - 2014-01-09 12:48 - 00000000 ____D C:\Program Files (x86)\HP
2014-01-09 12:44 - 2014-01-09 12:54 - 00000000 ____D C:\ProgramData\HP
2014-01-09 12:44 - 2014-01-09 12:50 - 00000806 _____ C:\ProgramData\hpzinstall.log
2014-01-09 12:44 - 2014-01-09 12:49 - 00245350 _____ C:\Windows\hpoins19.dat
2014-01-09 12:44 - 2009-10-20 05:30 - 00013898 ____N C:\Windows\hpomdl19.dat
2014-01-09 12:44 - 2009-07-08 11:51 - 00861184 _____ (Hewlett-Packard) C:\Windows\system32\hpowiav1.dll
2014-01-09 12:44 - 2009-07-08 11:51 - 00730624 _____ (Hewlett-Packard Co.) C:\Windows\system32\hpotscl1.dll
2014-01-09 12:44 - 2009-07-08 11:51 - 00642360 _____ (Hewlett-Packard) C:\Windows\system32\hpzids40.dll
2014-01-09 12:44 - 2009-07-08 11:51 - 00498176 _____ (Hewlett-Packard Co.) C:\Windows\system32\hpovst01.dll
2014-01-06 14:46 - 2014-01-06 14:46 - 26675832 _____ C:\Users\Hanni\Downloads\The Passion HiFi - Bomb Show.wav
2014-01-06 14:41 - 2014-01-06 14:41 - 39513696 _____ C:\Users\Hanni\Downloads\The Passion HiFi - I Love U Baby.wav
2014-01-06 14:40 - 2014-01-06 14:41 - 34550180 _____ C:\Users\Hanni\Downloads\The Passion HiFi - Laws of Movement.wav
2014-01-05 16:14 - 2014-01-05 16:14 - 00000000 ___RD C:\Users\Hanni\Documents\Ubisoft
2014-01-03 13:22 - 2014-01-16 22:57 - 00015411 _____ C:\Users\Hanni\Documents\TombRaider.log
2014-01-02 01:43 - 2014-01-02 01:43 - 00000000 ____D C:\Users\Hanni\Documents\How To Survive Saves
2014-01-01 18:40 - 2014-01-01 18:55 - 00012976 _____ C:\Users\Hanni\Desktop\Elsz Me Em 2013.xlsx
2013-12-30 18:21 - 2014-01-18 02:31 - 00000000 __SHD C:\Users\Hanni\wc
2013-12-30 18:21 - 2013-12-30 18:34 - 00000000 ____D C:\Users\Hanni\AppData\Local\Ubisoft
2013-12-30 18:21 - 2013-12-30 18:21 - 00000000 __SHD C:\Users\Hanni\AppData\Roaming\wyUpdate AU
2013-12-29 23:28 - 2013-12-30 00:39 - 00000000 ____D C:\Users\Hanni\Documents\Shadowrun Returns
2013-12-29 23:26 - 2013-12-29 23:26 - 00000000 ____D C:\Users\Hanni\AppData\Local\Harebrained Schemes
2013-12-29 17:39 - 2014-01-11 22:19 - 00000000 ____D C:\Users\Hanni\Desktop\Grüne Folien
2013-12-29 13:17 - 2013-11-26 12:54 - 23183360 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-12-29 13:17 - 2013-11-26 11:19 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-12-29 13:17 - 2013-11-26 11:18 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2013-12-29 13:17 - 2013-11-26 11:11 - 17112576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-12-29 13:17 - 2013-11-26 10:48 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-12-29 13:17 - 2013-11-26 10:46 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2013-12-29 13:17 - 2013-11-26 10:41 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-12-29 13:17 - 2013-11-26 10:29 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-12-29 13:17 - 2013-11-26 10:27 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-12-29 13:17 - 2013-11-26 10:23 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-12-29 13:17 - 2013-11-26 10:21 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-12-29 13:17 - 2013-11-26 10:18 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-12-29 13:17 - 2013-11-26 10:18 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2013-12-29 13:17 - 2013-11-26 10:16 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2013-12-29 13:17 - 2013-11-26 09:57 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-12-29 13:17 - 2013-11-26 09:38 - 02166784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-12-29 13:17 - 2013-11-26 09:38 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-12-29 13:17 - 2013-11-26 09:35 - 05769216 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-12-29 13:17 - 2013-11-26 09:32 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-12-29 13:17 - 2013-11-26 09:28 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2013-12-29 13:17 - 2013-11-26 09:16 - 04243968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-12-29 13:17 - 2013-11-26 09:02 - 01995264 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-12-29 13:17 - 2013-11-26 08:48 - 12996608 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-12-29 13:17 - 2013-11-26 08:32 - 01928192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-12-29 13:17 - 2013-11-26 08:26 - 11221504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-12-29 13:17 - 2013-11-26 08:07 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-12-29 13:17 - 2013-11-26 07:40 - 01395200 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-12-29 13:17 - 2013-11-26 07:34 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2013-12-29 13:17 - 2013-11-26 07:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-12-29 13:17 - 2013-11-26 07:33 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-12-29 13:17 - 2013-11-26 07:27 - 01157632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-12-19 02:55 - 2013-10-14 18:00 - 00028368 _____ (Microsoft Corporation) C:\Windows\system32\IEUDINIT.EXE
2013-12-19 02:53 - 2013-12-19 02:53 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2013-12-19 02:53 - 2013-12-19 02:53 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2013-12-19 02:53 - 2013-12-19 02:53 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2013-12-19 02:53 - 2013-12-19 02:53 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2013-12-19 02:53 - 2013-12-19 02:53 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-12-19 02:53 - 2013-12-19 02:53 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2013-12-19 02:53 - 2013-12-19 02:53 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2013-12-19 02:53 - 2013-12-19 02:53 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2013-12-19 02:53 - 2013-12-19 02:53 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2013-12-19 02:53 - 2013-12-19 02:53 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-12-19 02:53 - 2013-12-19 02:53 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2013-12-19 02:53 - 2013-12-19 02:53 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-12-19 02:53 - 2013-12-19 02:53 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2013-12-19 02:53 - 2013-12-19 02:53 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-12-19 02:53 - 2013-12-19 02:53 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-12-19 02:53 - 2013-12-19 02:53 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2013-12-19 02:53 - 2013-12-19 02:53 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2013-12-19 02:53 - 2013-12-19 02:53 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2013-12-19 02:53 - 2013-12-19 02:53 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2013-12-19 02:53 - 2013-12-19 02:53 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2013-12-19 02:52 - 2013-12-19 02:55 - 00009768 _____ C:\Windows\IE11_main.log
==================== One Month Modified Files and Folders =======
2014-01-18 12:13 - 2014-01-17 13:22 - 00019214 _____ C:\Users\Hanni\Desktop\FRST.txt
2014-01-18 12:12 - 2014-01-18 12:12 - 00001033 _____ C:\Users\Hanni\Desktop\checkup.txt
2014-01-18 12:12 - 2013-05-01 11:49 - 00011264 _____ C:\Users\Hanni\Desktop\Datenvolumen.db
2014-01-18 12:11 - 2014-01-18 12:11 - 00987425 _____ C:\Users\Hanni\Desktop\SecurityCheck.exe
2014-01-18 11:31 - 2014-01-17 23:31 - 00079672 _____ (AVAST Software) C:\Windows\system32\Drivers\aswstm.sys
2014-01-18 10:37 - 2014-01-18 10:37 - 02347384 _____ (ESET) C:\Users\Hanni\Downloads\esetsmartinstaller_enu.exe
2014-01-18 10:25 - 2013-12-12 02:39 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2014-01-18 10:25 - 2012-09-05 23:02 - 00000000 ____D C:\Users\Hanni\AppData\Roaming\Mozilla
2014-01-18 10:24 - 2014-01-18 10:24 - 00283096 _____ (Mozilla) C:\Users\Hanni\Downloads\Firefox Setup Stub 26.0.exe
2014-01-18 10:15 - 2012-09-06 00:33 - 01939537 _____ C:\Windows\WindowsUpdate.log
2014-01-18 10:14 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\NDF
2014-01-18 10:10 - 2014-01-18 10:10 - 00448512 _____ (OldTimer Tools) C:\Users\Hanni\Desktop\TFC.exe
2014-01-18 10:04 - 2009-07-14 05:51 - 00164779 _____ C:\Windows\setupact.log
2014-01-18 02:31 - 2013-12-30 18:21 - 00000000 __SHD C:\Users\Hanni\wc
2014-01-18 02:16 - 2012-12-13 13:50 - 00000000 ____D C:\Program Files (x86)\Steam
2014-01-17 23:39 - 2010-11-21 07:50 - 00710752 _____ C:\Windows\system32\perfh007.dat
2014-01-17 23:39 - 2010-11-21 07:50 - 00155050 _____ C:\Windows\system32\perfc007.dat
2014-01-17 23:39 - 2009-07-14 06:13 - 01651750 _____ C:\Windows\system32\PerfStringBackup.INI
2014-01-17 23:39 - 2009-07-14 05:45 - 00021872 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-01-17 23:39 - 2009-07-14 05:45 - 00021872 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-01-17 23:35 - 2014-01-17 23:31 - 00004182 _____ C:\Windows\System32\Tasks\avast! Emergency Update
2014-01-17 23:34 - 2013-12-11 22:49 - 00003490 _____ C:\Windows\System32\Tasks\AutoKMS
2014-01-17 23:34 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2014-01-17 23:33 - 2010-11-21 04:47 - 00313904 _____ C:\Windows\PFRO.log
2014-01-17 23:31 - 2014-01-17 23:31 - 01034464 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2014-01-17 23:31 - 2014-01-17 23:31 - 00422216 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys
2014-01-17 23:31 - 2014-01-17 23:31 - 00334136 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2014-01-17 23:31 - 2014-01-17 23:31 - 00207904 _____ C:\Windows\system32\Drivers\aswVmm.sys
2014-01-17 23:31 - 2014-01-17 23:31 - 00092544 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2014-01-17 23:31 - 2014-01-17 23:31 - 00082744 _____ (AVAST Software) C:\Windows\system32\Drivers\aswstm.sys.1390041085
2014-01-17 23:31 - 2014-01-17 23:31 - 00078648 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2014-01-17 23:31 - 2014-01-17 23:31 - 00065776 _____ C:\Windows\system32\Drivers\aswRvrt.sys
2014-01-17 23:31 - 2014-01-17 23:31 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr
2014-01-17 23:31 - 2014-01-17 23:31 - 00000000 ____D C:\Users\Hanni\AppData\Roaming\AVAST Software
2014-01-17 23:30 - 2014-01-17 23:30 - 00000000 ____D C:\Program Files\AVAST Software
2014-01-17 23:28 - 2014-01-17 23:28 - 00000000 ____D C:\ProgramData\AVAST Software
2014-01-17 23:28 - 2014-01-17 23:27 - 91412976 _____ (AVAST Software) C:\Users\Hanni\Downloads\avast_free_antivirus_setup.exe
2014-01-17 22:09 - 2013-01-18 23:41 - 00000000 ____D C:\ProgramData\Solidshield
2014-01-17 22:06 - 2012-09-29 11:46 - 00000000 ____D C:\Users\Hanni\Desktop\Games
2014-01-17 22:02 - 2014-01-17 21:46 - 00000000 ____D C:\Users\Hanni\AppData\Local\Valdis_Story_AC
2014-01-17 17:50 - 2014-01-17 17:49 - 00000000 ____D C:\Users\Hanni\AppData\Local\Darksiders
2014-01-17 17:49 - 2012-11-28 21:02 - 00000000 ____D C:\Users\Hanni\Documents\My Games
2014-01-17 17:48 - 2014-01-17 17:48 - 00000000 ____D C:\Program Files (x86)\THQ
2014-01-17 17:48 - 2013-01-20 18:11 - 00000000 ____D C:\Windows\SysWOW64\directx
2014-01-17 17:48 - 2012-08-28 20:07 - 00357957 _____ C:\Windows\DirectX.log
2014-01-17 13:22 - 2014-01-17 13:22 - 00001432 _____ C:\Users\Hanni\Desktop\JRT.txt
2014-01-17 13:17 - 2014-01-17 13:17 - 00000000 ____D C:\Windows\ERUNT
2014-01-17 13:16 - 2014-01-17 13:16 - 01037068 _____ (Thisisu) C:\Users\Hanni\Desktop\JRT.exe
2014-01-17 13:13 - 2012-10-28 14:57 - 00000000 ____D C:\Taskmanager
2014-01-17 13:12 - 2014-01-17 13:12 - 00006402 _____ C:\Users\Hanni\Desktop\AdwCleaner[S0].txt
2014-01-17 13:09 - 2014-01-17 13:06 - 00000000 ____D C:\AdwCleaner
2014-01-17 13:05 - 2014-01-17 13:04 - 01236282 _____ C:\Users\Hanni\Desktop\adwcleaner.exe
2014-01-17 13:02 - 2012-09-29 23:41 - 00000000 ____D C:\Program Files (x86)\Enterbrain
2014-01-17 12:42 - 2013-03-17 05:33 - 00000000 ____D C:\Users\Hanni\Desktop\Programme
2014-01-17 12:34 - 2013-02-13 01:50 - 00000000 ____D C:\Users\Hanni\AppData\Roaming\uTorrent
2014-01-17 11:34 - 2012-09-06 20:46 - 00000000 ____D C:\Users\Hanni\AppData\Roaming\vlc
2014-01-16 22:57 - 2014-01-03 13:22 - 00015411 _____ C:\Users\Hanni\Documents\TombRaider.log
2014-01-16 17:32 - 2012-09-07 11:49 - 00000000 ____D C:\Users\Hanni\AppData\Roaming\Skype
2014-01-16 13:17 - 2009-07-14 06:08 - 00032632 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2014-01-15 20:21 - 2014-01-15 18:00 - 00000000 ____D C:\ProgramData\Updater
2014-01-15 20:07 - 2014-01-15 20:07 - 00023988 _____ C:\Users\Hanni\Desktop\Logs 20-08 15-01-2014.zip
2014-01-15 20:01 - 2014-01-15 20:01 - 00000000 ____D C:\FRST
2014-01-15 20:00 - 2014-01-15 19:59 - 02076160 _____ (Farbar) C:\Users\Hanni\Desktop\FRST64.exe
2014-01-15 19:30 - 2014-01-15 19:30 - 00000000 ____D C:\Users\Hanni\AppData\Roaming\Malwarebytes
2014-01-15 19:30 - 2014-01-15 19:30 - 00000000 ____D C:\ProgramData\Malwarebytes
2014-01-15 19:30 - 2014-01-15 19:30 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-01-15 19:29 - 2014-01-15 17:38 - 00003754 _____ C:\Windows\System32\Tasks\Freemium1ClickMaint
2014-01-15 19:28 - 2014-01-15 19:28 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Hanni\Downloads\mbam-setup-1.75.0.1300.exe
2014-01-15 18:26 - 2014-01-15 18:15 - 00000000 ____D C:\Users\Hanni\AppData\Local\FreeSystemUtilities
2014-01-15 18:00 - 2014-01-15 18:00 - 00000000 ____D C:\ProgramData\FreeSystemUtilities
2014-01-15 18:00 - 2013-06-13 18:24 - 00000000 ____D C:\ProgramData\Package Cache
2014-01-15 17:54 - 2014-01-15 17:54 - 00000000 ____D C:\Users\Hanni\AppData\Local\Software Updater
2014-01-15 17:51 - 2012-09-06 00:33 - 00000000 ____D C:\Users\Hanni
2014-01-15 17:48 - 2014-01-15 17:48 - 00000032 _____ C:\Users\Hanni\Desktop\script.cmd
2014-01-15 17:44 - 2014-01-15 17:39 - 00000000 ____D C:\Users\Hanni\AppData\Local\Freemium
2014-01-15 16:54 - 2009-07-14 05:45 - 00473640 _____ C:\Windows\system32\FNTCACHE.DAT
2014-01-15 00:47 - 2013-12-11 22:46 - 00000000 ____D C:\ProgramData\Microsoft Help
2014-01-15 00:47 - 2009-07-14 03:34 - 00000513 _____ C:\Windows\win.ini
2014-01-15 00:46 - 2013-07-11 11:42 - 00000000 ____D C:\Windows\system32\MRT
2014-01-15 00:45 - 2012-09-06 13:23 - 86054176 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-01-11 22:19 - 2013-12-29 17:39 - 00000000 ____D C:\Users\Hanni\Desktop\Grüne Folien
2014-01-11 15:08 - 2013-12-11 22:46 - 00000000 ____D C:\Users\Hanni\AppData\Local\Microsoft Help
2014-01-10 22:18 - 2014-01-10 22:17 - 00000000 ____D C:\Users\Hanni\AppData\Roaming\DVDVideoSoft
2014-01-10 02:04 - 2014-01-10 01:51 - 00000000 ____D C:\Users\Hanni\AppData\Roaming\Tropico 4
2014-01-10 01:49 - 2014-01-10 01:49 - 00000000 ____D C:\Users\Hanni\AppData\Roaming\Kalypso Media
2014-01-09 16:35 - 2012-11-07 22:23 - 00000000 ____D C:\Windows\pss
2014-01-09 12:54 - 2014-01-09 12:50 - 00000000 ____D C:\Users\Hanni\AppData\Roaming\HP
2014-01-09 12:54 - 2014-01-09 12:44 - 00000000 ____D C:\ProgramData\HP
2014-01-09 12:53 - 2012-09-06 00:33 - 00134160 _____ C:\Users\Hanni\AppData\Local\GDIPFONTCACHEV1.DAT
2014-01-09 12:50 - 2014-01-09 12:50 - 00000000 ____D C:\ProgramData\WEBREG
2014-01-09 12:50 - 2014-01-09 12:44 - 00000806 _____ C:\ProgramData\hpzinstall.log
2014-01-09 12:49 - 2014-01-09 12:49 - 00003148 _____ C:\Windows\System32\Tasks\SidebarExecute
2014-01-09 12:49 - 2014-01-09 12:49 - 00000000 ____D C:\Users\Hanni\AppData\Local\HP
2014-01-09 12:49 - 2014-01-09 12:44 - 00245350 _____ C:\Windows\hpoins19.dat
2014-01-09 12:48 - 2014-01-09 12:48 - 00001365 _____ C:\Users\Public\Desktop\HP Solution Center.lnk
2014-01-09 12:48 - 2014-01-09 12:48 - 00000000 ____D C:\Windows\SysWOW64\spool
2014-01-09 12:48 - 2014-01-09 12:48 - 00000000 ____D C:\ProgramData\HP Product Assistant
2014-01-09 12:48 - 2014-01-09 12:47 - 00000000 ____D C:\Program Files (x86)\HP
2014-01-06 14:46 - 2014-01-06 14:46 - 26675832 _____ C:\Users\Hanni\Downloads\The Passion HiFi - Bomb Show.wav
2014-01-06 14:41 - 2014-01-06 14:41 - 39513696 _____ C:\Users\Hanni\Downloads\The Passion HiFi - I Love U Baby.wav
2014-01-06 14:41 - 2014-01-06 14:40 - 34550180 _____ C:\Users\Hanni\Downloads\The Passion HiFi - Laws of Movement.wav
2014-01-05 16:14 - 2014-01-05 16:14 - 00000000 ___RD C:\Users\Hanni\Documents\Ubisoft
2014-01-02 01:43 - 2014-01-02 01:43 - 00000000 ____D C:\Users\Hanni\Documents\How To Survive Saves
2014-01-02 01:25 - 2013-01-05 18:02 - 00000000 ____D C:\Users\Hanni\Documents\Telltale Games
2014-01-02 00:48 - 2013-01-02 22:48 - 00000000 ____D C:\Users\Hanni\AppData\Local\Daedalic Entertainment
2014-01-01 18:55 - 2014-01-01 18:40 - 00012976 _____ C:\Users\Hanni\Desktop\Elsz Me Em 2013.xlsx
2013-12-30 18:34 - 2013-12-30 18:21 - 00000000 ____D C:\Users\Hanni\AppData\Local\Ubisoft
2013-12-30 18:21 - 2013-12-30 18:21 - 00000000 __SHD C:\Users\Hanni\AppData\Roaming\wyUpdate AU
2013-12-30 00:52 - 2012-08-28 20:18 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2013-12-30 00:39 - 2013-12-29 23:28 - 00000000 ____D C:\Users\Hanni\Documents\Shadowrun Returns
2013-12-29 23:26 - 2013-12-29 23:26 - 00000000 ____D C:\Users\Hanni\AppData\Local\Harebrained Schemes
2013-12-29 17:42 - 2012-12-18 15:57 - 00000000 ____D C:\Users\Hanni\AppData\Roaming\Ubisoft
2013-12-29 14:47 - 2013-10-28 17:01 - 00000000 ____D C:\Users\Hanni\AppData\Roaming\Origin
2013-12-29 14:47 - 2013-10-28 16:56 - 00000000 ____D C:\Program Files (x86)\Origin
2013-12-20 15:22 - 2012-12-07 21:59 - 00000000 ___RD C:\Program Files (x86)\Skype
2013-12-20 15:22 - 2012-09-07 11:49 - 00000000 ____D C:\ProgramData\Skype
2013-12-19 23:43 - 2013-03-16 22:31 - 00000000 ____D C:\Users\Hanni\AppData\Roaming\.minecraft
2013-12-19 11:42 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache
2013-12-19 09:44 - 2012-09-06 00:33 - 00001439 _____ C:\Users\Hanni\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2013-12-19 09:43 - 2012-09-07 16:35 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-12-19 03:13 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2013-12-19 02:55 - 2013-12-19 02:52 - 00009768 _____ C:\Windows\IE11_main.log
2013-12-19 02:53 - 2013-12-19 02:53 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2013-12-19 02:53 - 2013-12-19 02:53 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2013-12-19 02:53 - 2013-12-19 02:53 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2013-12-19 02:53 - 2013-12-19 02:53 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2013-12-19 02:53 - 2013-12-19 02:53 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-12-19 02:53 - 2013-12-19 02:53 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2013-12-19 02:53 - 2013-12-19 02:53 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2013-12-19 02:53 - 2013-12-19 02:53 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2013-12-19 02:53 - 2013-12-19 02:53 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2013-12-19 02:53 - 2013-12-19 02:53 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-12-19 02:53 - 2013-12-19 02:53 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2013-12-19 02:53 - 2013-12-19 02:53 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-12-19 02:53 - 2013-12-19 02:53 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2013-12-19 02:53 - 2013-12-19 02:53 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-12-19 02:53 - 2013-12-19 02:53 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-12-19 02:53 - 2013-12-19 02:53 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2013-12-19 02:53 - 2013-12-19 02:53 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-12-19 02:53 - 2013-12-19 02:53 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2013-12-19 02:53 - 2013-12-19 02:53 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2013-12-19 02:53 - 2013-12-19 02:53 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2013-12-19 02:53 - 2013-12-19 02:53 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2014-01-09 15:10
==================== End Of Log ============================
Noch ein paar Fragen an Dich: Ich habe eigentlich den "Process Explorer" benutzt, den hast Du ja jetzt raus gekickt. Ist etwas gegen das Programm einzuwenden? Es gilt ja als detailreicher und besser als der Windows-Taskmanager. Dann habe ich seit dem Scan mit einem der Programme das Problem, dass mein Synaptics Trackpad Treiber bim Hochfahren abschmiert und die erweiterten Funktionen meines Pads nicht mehr laufen (zwei Finger scrollen etc.). Wenn ich in der Systemsteuerung auf "Maus" klicke, dann kommt die Fehlermeldung: "Allgemeine Windows-Shell-DLL funktioniert nicht mehr". Wie kann ich das beheben? Ansonsten bin ich, wie Du vllt. siehst auf Avast! umgestiegen und beobachte ansonsten keine Probleme oder Auffälligkeiten mehr. Danke Dir für deine Hilfe bisher  |
|
19.01.2014, 09:33
| #9 |
| /// the machine /// TB-Ausbilder | Free System Utilities installierte verdächtige Programme Java und Adobe updaten. Ich hab nicht den Process Explorer gekickt, sondern nur enen Registry Eintrag. Touchpad Treiber neu installiren. Java und Adobe updaten. Fertig Falls Du Lob oder Kritik loswerden möchtest kannst Du das hier tun Die Reihenfolge ist hier entscheidend.
Hier noch ein paar Tipps zur Absicherung deines Systems. Ich kann garnicht zu oft erwähnen, wie wichtig es ist, dass dein System Up to Date ist.
Anti- Viren Software
Zusätzlicher Schutz
Sicheres Browsen
Alternative Browser Andere Browser tendieren zu etwas mehr Sicherheit als der IE, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden.
Performance Bereinige regelmäßig deine Temp Files. Ich empfehle hierzu TFC Halte dich fern von jedlichen Registry Cleanern. Diese Schaden deinem System mehr als sie helfen. Hier ein paar ( englishe ) Links Miekemoes Blogspot ( MVP ) Bill Castner ( MVP ) Don'ts
Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so das ich diesen Thread aus meinen Abos löschen kann.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
19.01.2014, 13:37
| #10 |
| | Free System Utilities installierte verdächtige Programme Perfekt, läuft alles (: Danke! |
|
20.01.2014, 11:13
| #11 |
| /// the machine /// TB-Ausbilder | Free System Utilities installierte verdächtige Programme Gern Geschehen
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
Linear-Darstellung
