|
Plagegeister aller Art und deren Bekämpfung: Malware? regleaner pro und search protectWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
09.02.2014, 12:03 | #17 |
| Malware? regleaner pro und search protect Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 07-02-2014
__________________Ran by STS at 2014-02-09 12:01:25 Run:1 Running from C:\Users\STS\Desktop Boot Mode: Normal ============================================== Content of fixlist: ***************** C:\Users\STS\AppData\Roaming\systweak C:\WINDOWS\system32\roboot64.exe SearchScopes: HKCU - DefaultScope {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = hxxp://search.conduit.com/Results.aspx?ctid=CT3315513& octid=EB_ORIGINAL_CTID&SearchSource=58&CUI=&UM=4&UP=SP067850BC-3764-4A3C-8D03-CFCCAB0BED1C&q={searchTerms}&SSPV= SearchScopes: HKCU - {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = hxxp://search.conduit.com/Results.aspx?ctid=CT3315513&octid=EB_ORIGINAL_CTID&SearchSource=58&CUI=&UM=4&UP=SP067850BC-3764-4A3C-8D03-CFCCAB0BED1C&q={searchTerms}&SSPV= FF SearchPlugin: C:\Users\STS\AppData\Roaming\Mozilla\Firefox\Profiles\4mh195t8.default\searchplugins\conduit-search.xml ***************** C:\Users\STS\AppData\Roaming\systweak => Moved successfully. C:\WINDOWS\system32\roboot64.exe => Moved successfully. HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value deleted successfully. HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} => Key deleted successfully. HKCR\CLSID\{014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} => Key not found. C:\Users\STS\AppData\Roaming\Mozilla\Firefox\Profiles\4mh195t8.default\searchplugins\conduit-search.xml => Moved successfully. ==== End of Fixlog ==== |
09.02.2014, 16:32 | #18 |
Ruhe in Frieden † 2019 | Malware? regleaner pro und search protect Danke, mir fehlt aber immer noch die addition.txt von FRST und ein aktuelles Malwarebytes-Log.
__________________
__________________ |
09.02.2014, 17:42 | #19 |
| Malware? regleaner pro und search protect Malwarebytes Anti-Malware (Test) 1.75.0.1300 www.malwarebytes.org Datenbank Version: v2014.02.08.05 Windows 8 x64 NTFS Internet Explorer 11.0.9600.16476 STS :: ARBEIT [Administrator] Schutz: Aktiviert 09.02.2014 16:52:31 mbam-log-2014-02-09 (16-52-31).txt Art des Suchlaufs: Vollständiger Suchlauf (C:\|D:\|) Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM Deaktivierte Suchlaufeinstellungen: P2P Durchsuchte Objekte: 340569 Laufzeit: 31 Minute(n), 55 Sekunde(n) Infizierte Speicherprozesse: 0 (Keine bösartigen Objekte gefunden) Infizierte Speichermodule: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungsschlüssel: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungswerte: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateiobjekte der Registrierung: 0 (Keine bösartigen Objekte gefunden) Infizierte Verzeichnisse: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateien: 0 (Keine bösartigen Objekte gefunden) (Ende) FRST Logfile: FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 09-02-2014 02 Ran by STS (administrator) on ARBEIT on 09-02-2014 17:39:53 Running from C:\Users\STS\Desktop Windows 8.1 (X64) OS Language: German Standard Internet Explorer Version 11 Boot Mode: Normal The only official download link for FRST: Download link for 32-Bit version: Downloading Farbar Recovery Scan Tool Download link for 64-Bit Version: Downloading Farbar Recovery Scan Tool Download link from any site other than Bleeping Computer is unpermitted or outdated. See tutorial for FRST: FRST Tutorial - How to use Farbar Recovery Scan Tool - Geeks to Go Forums ==================== Processes (Whitelisted) ================= (NVIDIA Corporation) C:\WINDOWS\system32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\avp.exe (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe () C:\Program Files (x86)\MyPublicWiFi\PublicWiFiService.exe (Microsoft Corporation) C:\WINDOWS\system32\dashost.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\WINDOWS\system32\nvvsvc.exe (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\avpui.exe (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (Intel Corporation) C:\Windows\System32\igfxtray.exe (Intel Corporation) C:\WINDOWS\system32\igfxsrvc.exe (Intel Corporation) C:\Windows\System32\hkcmd.exe (Intel Corporation) C:\Windows\System32\igfxpers.exe (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbam.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe ==================== Registry (Whitelisted) ================== Winlogon\Notify\igfxcui: C:\WINDOWS\system32\igfxdev.dll (Intel Corporation) HKU\S-1-5-21-2066293164-2638704917-626986965-1004\...\RunOnce: [WAB Migrate] - C:\Program Files\Windows Mail\wab.exe [516608 2013-08-22] (Microsoft Corporation) AppInit_DLLs: C:\Windows\system32\nvinitx.dll => C:\Windows\system32\nvinitx.dll [168616 2013-10-27] (NVIDIA Corporation) AppInit_DLLs-x32: C:\WINDOWS\SysWOW64\nvinit.dll => C:\WINDOWS\SysWOW64\nvinit.dll [141336 2013-10-27] (NVIDIA Corporation) ==================== Internet (Whitelisted) ==================== BHO: Content Blocker Plugin - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\x64\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO) BHO: Virtual Keyboard Plugin - {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\x64\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO) BHO: Safe Money Plugin - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\x64\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO) BHO: URL Advisor Plugin - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\x64\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO) BHO-x32: Content Blocker Plugin - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO) BHO-x32: Virtual Keyboard Plugin - {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO) BHO-x32: Safe Money Plugin - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO) BHO-x32: URL Advisor Plugin - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO) Tcpip\Parameters: [DhcpNameServer] 192.168.178.1 FireFox: ======== FF ProfilePath: C:\Users\STS\AppData\Roaming\Mozilla\Firefox\Profiles\4mh195t8.default FF Homepage: https://www.google.de/ FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation) FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation) FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml FF HKLM-x32\...\Firefox\Extensions: - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\url_advisor@kaspersky.com FF Extension: Kaspersky URL Advisor - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\url_advisor@kaspersky.com [2014-02-07] FF HKLM-x32\...\Firefox\Extensions: [virtual_keyboard@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\virtual_keyboard@kaspersky.com FF Extension: Virtual Keyboard - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\virtual_keyboard@kaspersky.com [2014-02-07] FF HKLM-x32\...\Firefox\Extensions: [content_blocker@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\content_blocker@kaspersky.com FF Extension: Dangerous Websites Blocker - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\content_blocker@kaspersky.com [2014-02-07] FF HKLM-x32\...\Firefox\Extensions: [anti_banner@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\anti_banner@kaspersky.com FF Extension: Anti-Banner - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\anti_banner@kaspersky.com [2014-02-07] FF HKLM-x32\...\Firefox\Extensions: [online_banking@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\online_banking@kaspersky.com FF Extension: Safe Money - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\online_banking@kaspersky.com [2014-02-07] ==================== Services (Whitelisted) ================= R2 AVP; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\avp.exe [214512 2013-10-17] (Kaspersky Lab ZAO) R2 HPSLPSVC; C:\Users\STS\AppData\Local\Temp\7zS6F22\hpslpsvc64.dll [1039360 2013-07-19] (Hewlett-Packard Co.) R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation) R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation) R2 MyPublicWiFiService; C:\Program Files (x86)\MyPublicWiFi\PublicWiFiService.exe [756224 2013-04-03] () S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [346872 2013-08-22] (Microsoft Corporation) S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23840 2013-08-22] (Microsoft Corporation) ==================== Drivers (Whitelisted) ==================== S0 ADP80XX; C:\Windows\System32\drivers\ADP80XX.SYS [782176 2013-08-22] (PMC-Sierra) S3 bcmfn2; C:\Windows\System32\drivers\bcmfn2.sys [17624 2013-08-13] (Windows (R) Win 7 DDK provider) S3 iaLPSSi_GPIO; C:\Windows\System32\drivers\iaLPSSi_GPIO.sys [24568 2013-07-30] (Intel Corporation) S3 iaLPSSi_I2C; C:\Windows\System32\drivers\iaLPSSi_I2C.sys [99320 2013-07-25] (Intel Corporation) S0 iaStorAV; C:\Windows\System32\drivers\iaStorAV.sys [651248 2013-08-10] (Intel Corporation) R0 intelpep; C:\Windows\System32\drivers\intelpep.sys [39768 2014-02-07] (Microsoft Corporation) R0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [458336 2014-02-07] (Kaspersky Lab ZAO) S0 klelam; C:\Windows\System32\DRIVERS\klelam.sys [29792 2014-02-07] (Kaspersky Lab) R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [623712 2014-02-07] (Kaspersky Lab ZAO) R1 KLIM6; C:\Windows\system32\DRIVERS\klim6.sys [30304 2013-10-17] (Kaspersky Lab ZAO) R3 klkbdflt; C:\Windows\system32\DRIVERS\klkbdflt.sys [29280 2013-10-17] (Kaspersky Lab ZAO) R3 klmouflt; C:\Windows\system32\DRIVERS\klmouflt.sys [29280 2013-10-17] (Kaspersky Lab ZAO) R1 klpd; C:\Windows\system32\DRIVERS\klpd.sys [15456 2013-04-12] (Kaspersky Lab ZAO) R1 klwfp; C:\Windows\system32\DRIVERS\klwfp.sys [64608 2013-05-07] (Kaspersky Lab ZAO) R1 kneps; C:\Windows\system32\DRIVERS\kneps.sys [178272 2014-02-07] (Kaspersky Lab ZAO) S0 LSI_SAS3; C:\Windows\System32\drivers\lsi_sas3.sys [81760 2013-08-22] (LSI Corporation) R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation) R1 ndiskhaz; C:\Windows\system32\DRIVERS\ndiskhaz.sys [30536 2012-12-07] (Khalil Azzouzi) R3 NdisVirtualBus; C:\Windows\System32\drivers\NdisVirtualBus.sys [16384 2013-08-22] (Microsoft Corporation) S3 netvsc; C:\Windows\system32\DRIVERS\netvsc63.sys [87040 2013-08-22] (Microsoft Corporation) R3 NETwNe64; C:\Windows\system32\DRIVERS\NETwew00.sys [3345376 2013-09-04] (Intel Corporation) S3 ReFS; C:\Windows\System32\Drivers\ReFS.sys [924512 2013-08-22] (Microsoft Corporation) S3 SerCx2; C:\Windows\System32\drivers\SerCx2.sys [146776 2014-02-07] (Microsoft Corporation) S0 stornvme; C:\Windows\System32\drivers\stornvme.sys [57176 2013-11-14] (Microsoft Corporation) S3 UEFI; C:\Windows\System32\drivers\UEFI.sys [26976 2013-08-22] (Microsoft Corporation) S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [124256 2013-08-22] (Microsoft Corporation) U5 klflt; C:\Windows\System32\Drivers\klflt.sys [112224 2013-06-08] (Kaspersky Lab ZAO) ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-02-09 17:39 - 2014-02-09 17:40 - 00010593 _____ () C:\Users\STS\Desktop\FRST.txt 2014-02-09 17:39 - 2014-02-09 17:39 - 00000000 ____D () C:\Users\STS\Desktop\FRST-OlderVersion 2014-02-08 22:54 - 2014-02-08 22:54 - 00078309 _____ () C:\Users\STS\Downloads\FRST.txt 2014-02-08 22:54 - 2014-02-08 22:54 - 00009194 _____ () C:\Users\STS\Downloads\Addition.txt 2014-02-08 22:53 - 2014-02-09 17:39 - 00000000 ____D () C:\FRST 2014-02-08 22:52 - 2014-02-09 17:39 - 02170880 _____ (Farbar) C:\Users\STS\Desktop\FRST64.exe 2014-02-08 10:27 - 2014-02-08 10:27 - 00001125 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2014-02-08 10:27 - 2014-02-08 10:27 - 00000000 ____D () C:\Users\STS\AppData\Roaming\Malwarebytes 2014-02-08 10:27 - 2014-02-08 10:27 - 00000000 ____D () C:\ProgramData\Malwarebytes 2014-02-08 10:27 - 2014-02-08 10:27 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware 2014-02-08 10:27 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbam.sys 2014-02-08 10:25 - 2014-02-08 10:27 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\STS\Downloads\mbam-setup-1.75.0.1300.exe 2014-02-08 01:16 - 2014-02-08 01:16 - 00000999 _____ () C:\Users\Public\Desktop\MyPublicWiFi.lnk 2014-02-08 01:16 - 2014-02-08 01:16 - 00000000 ____D () C:\Program Files (x86)\MyPublicWiFi 2014-02-08 01:16 - 2012-12-07 11:28 - 00030536 _____ (Khalil Azzouzi) C:\WINDOWS\system32\Drivers\ndiskhaz.sys 2014-02-08 00:39 - 2014-02-07 23:20 - 01142856 _____ (TRUE Software ) C:\Users\STS\Desktop\MyPublicWiFi.exe 2014-02-07 23:20 - 2014-02-07 23:20 - 01142856 _____ (TRUE Software ) C:\Users\STS\Downloads\MyPublicWiFi.exe 2014-02-07 23:18 - 2014-02-07 23:18 - 00000000 ____D () C:\Users\STS\AppData\Roaming\MyPhoneExplorer 2014-02-07 23:17 - 2014-02-07 23:17 - 00002073 _____ () C:\Users\Public\Desktop\MyPhoneExplorer.lnk 2014-02-07 23:17 - 2014-02-07 23:17 - 00000000 ____D () C:\Program Files (x86)\MyPhoneExplorer 2014-02-07 23:12 - 2014-02-07 23:13 - 07080248 _____ () C:\Users\STS\Downloads\MyPhoneExplorer_Setup_1.8.5.exe 2014-02-07 21:25 - 2014-02-07 21:25 - 00000000 ____D () C:\ProgramData\HP 2014-02-07 21:23 - 2014-02-07 21:23 - 02338824 _____ () C:\Users\STS\Downloads\hppiw.exe 2014-02-07 21:19 - 2014-02-07 21:19 - 00003036 _____ () C:\WINDOWS\System32\Tasks\{66C4E4DE-7581-4E55-BEC2-BC510F0FA585} 2014-02-07 21:03 - 2014-02-07 21:07 - 00000691 _____ () C:\ProgramData\hpzinstall.log 2014-02-07 19:01 - 2014-02-07 19:01 - 00000000 ____D () C:\Users\STS\AppData\Roaming\Thunderbird 2014-02-07 19:01 - 2014-02-07 19:01 - 00000000 ____D () C:\Users\STS\AppData\Local\Thunderbird 2014-02-07 19:00 - 2014-02-07 19:00 - 00002102 _____ () C:\Users\Public\Desktop\Mozilla Thunderbird.lnk 2014-02-07 19:00 - 2014-02-07 19:00 - 00000000 ____D () C:\Program Files (x86)\Mozilla Thunderbird 2014-02-07 18:26 - 2014-02-07 18:28 - 21987088 _____ (Mozilla) C:\Users\STS\Downloads\Thunderbird Setup 24.3.0(1).exe 2014-02-07 17:36 - 2014-02-07 17:39 - 21987088 _____ (Mozilla) C:\Users\STS\Downloads\Thunderbird Setup 24.3.0.exe 2014-02-07 16:48 - 2014-02-07 16:48 - 00000000 ____D () C:\Users\STS\AppData\Roaming\OpenOffice 2014-02-07 15:27 - 2013-11-27 16:34 - 03210528 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2vdec.dll 2014-02-07 15:27 - 2013-11-27 09:20 - 04106240 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncEngine.dll 2014-02-07 15:27 - 2013-11-23 12:49 - 21196664 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll 2014-02-07 15:26 - 2013-12-09 01:34 - 01227264 _____ (Microsoft Corporation) C:\WINDOWS\system32\mispace.dll 2014-02-07 15:26 - 2013-12-09 01:04 - 00980480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mispace.dll 2014-02-07 15:26 - 2013-11-27 16:27 - 00809872 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll 2014-02-07 15:26 - 2013-11-27 15:00 - 00663680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll 2014-02-07 15:26 - 2013-11-27 14:47 - 02804528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msmpeg2vdec.dll 2014-02-07 15:26 - 2013-11-27 13:02 - 00142848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ipnat.sys 2014-02-07 15:26 - 2013-11-27 11:54 - 00461824 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsGdiConverter.dll 2014-02-07 15:26 - 2013-11-27 11:24 - 00306688 _____ (Microsoft Corporation) C:\WINDOWS\system32\msieftp.dll 2014-02-07 15:26 - 2013-11-27 11:08 - 00336384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XpsGdiConverter.dll 2014-02-07 15:26 - 2013-11-27 10:46 - 00273920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msieftp.dll 2014-02-07 15:26 - 2013-11-27 10:41 - 00136704 _____ (Microsoft Corporation) C:\WINDOWS\system32\psmsrv.dll 2014-02-07 15:26 - 2013-11-27 10:17 - 00263168 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll 2014-02-07 15:26 - 2013-11-27 10:10 - 00273408 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Graphics.dll 2014-02-07 15:26 - 2013-11-27 09:58 - 01503232 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvc.dll 2014-02-07 15:26 - 2013-11-27 09:56 - 00218112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Graphics.dll 2014-02-07 15:26 - 2013-11-27 05:01 - 00385614 _____ () C:\WINDOWS\system32\ApnDatabase.xml 2014-02-07 15:26 - 2013-11-26 14:22 - 01928144 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll 2014-02-07 15:26 - 2013-11-26 14:20 - 02131120 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll 2014-02-07 15:26 - 2013-11-26 14:20 - 01399176 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmde.dll 2014-02-07 15:26 - 2013-11-26 14:20 - 01374384 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpmde.dll 2014-02-07 15:26 - 2013-11-26 12:50 - 01371312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\combase.dll 2014-02-07 15:26 - 2013-11-26 12:44 - 02142936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll 2014-02-07 15:26 - 2013-11-26 12:44 - 01204968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winmde.dll 2014-02-07 15:26 - 2013-11-26 11:13 - 04191232 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys 2014-02-07 15:26 - 2013-11-26 10:21 - 18577920 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll 2014-02-07 15:26 - 2013-11-26 09:28 - 13925888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll 2014-02-07 15:26 - 2013-11-25 02:45 - 00142680 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBSTOR.SYS 2014-02-07 15:26 - 2013-11-25 02:32 - 01119064 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys 2014-02-07 15:26 - 2013-11-25 00:30 - 00513536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rastls.dll 2014-02-07 15:26 - 2013-11-25 00:28 - 00589824 _____ (Microsoft Corporation) C:\WINDOWS\system32\rastls.dll 2014-02-07 15:26 - 2013-11-23 13:47 - 00032088 _____ (Microsoft Corporation) C:\WINDOWS\system32\ploptin.dll 2014-02-07 15:26 - 2013-11-23 09:19 - 18642504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll 2014-02-07 15:26 - 2013-11-23 08:13 - 00024064 _____ (Microsoft Corporation) C:\WINDOWS\system32\bi.dll 2014-02-07 15:26 - 2013-11-23 08:13 - 00019456 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BtaMPM.sys 2014-02-07 15:26 - 2013-11-23 08:08 - 00403456 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys 2014-02-07 15:26 - 2013-11-23 05:50 - 00282112 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemEventsBrokerServer.dll 2014-02-07 15:26 - 2013-11-23 04:57 - 00637952 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncHost.exe 2014-02-07 15:26 - 2013-11-23 04:48 - 00479744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncHost.exe 2014-02-07 15:26 - 2013-11-23 04:25 - 00744448 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncCore.dll 2014-02-07 15:26 - 2013-11-23 04:25 - 00584192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncCore.dll 2014-02-07 15:26 - 2013-11-23 04:19 - 02617344 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll 2014-02-07 15:26 - 2013-11-23 04:15 - 02295808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll 2014-02-07 15:26 - 2013-11-21 07:58 - 00207872 _____ (Microsoft Corporation) C:\WINDOWS\system32\deviceregistration.dll 2014-02-07 15:26 - 2013-11-21 07:26 - 01415680 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll 2014-02-07 15:26 - 2013-11-16 06:11 - 00764856 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll 2014-02-07 15:26 - 2013-11-15 19:19 - 00669344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll 2014-02-07 15:26 - 2013-11-15 15:59 - 00470016 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfds.dll 2014-02-07 15:26 - 2013-11-15 15:25 - 00433664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfds.dll 2014-02-07 15:26 - 2013-11-15 15:08 - 00202240 _____ (Microsoft Corporation) C:\WINDOWS\system32\ubpm.dll 2014-02-07 15:26 - 2013-11-15 14:24 - 00834048 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll 2014-02-07 15:26 - 2013-11-05 21:12 - 02551128 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys 2014-02-07 15:26 - 2013-10-31 01:29 - 00745336 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleaut32.dll 2014-02-07 15:26 - 2013-10-31 00:41 - 00552624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleaut32.dll 2014-02-07 15:23 - 2013-12-11 08:55 - 00115712 _____ (Microsoft Corporation) C:\WINDOWS\system32\winbici.dll 2014-02-07 15:11 - 2014-02-07 15:11 - 00000000 ___RD () C:\WINDOWS\BrowserChoice 2014-02-07 15:00 - 2014-02-07 15:00 - 00001132 _____ () C:\Users\Public\Desktop\OpenOffice 4.0.1.lnk 2014-02-07 14:58 - 2014-02-07 14:59 - 00000000 ____D () C:\Program Files (x86)\OpenOffice 4 2014-02-07 14:53 - 2014-02-07 14:53 - 00000000 ____D () C:\Users\STS\Desktop\OpenOffice 4.0.1 (de) Installation Files 2014-02-07 13:38 - 2014-02-07 14:06 - 163606685 _____ () C:\Users\STS\Downloads\Apache_OpenOffice_4.0.1_Win_x86_install_de.exe 2014-02-07 13:24 - 2014-02-07 13:24 - 00002350 _____ () C:\Users\STS\Desktop\Sicherer Zahlungsverkehr.lnk 2014-02-07 13:24 - 2014-02-07 13:24 - 00001345 _____ () C:\Users\STS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Kaspersky Internet Security.lnk 2014-02-07 13:23 - 2014-02-07 13:23 - 00001144 _____ () C:\Users\Public\Desktop\Kaspersky Internet Security.lnk 2014-02-07 13:23 - 2013-05-06 09:13 - 00110176 _____ (Kaspersky Lab ZAO) C:\WINDOWS\system32\klfphc.dll 2014-02-07 13:22 - 2014-02-09 16:52 - 00000000 ____D () C:\ProgramData\Kaspersky Lab 2014-02-07 13:22 - 2014-02-07 14:17 - 00623712 _____ (Kaspersky Lab ZAO) C:\WINDOWS\system32\Drivers\klif.sys 2014-02-07 13:22 - 2014-02-07 13:22 - 00000000 ____D () C:\Program Files (x86)\Kaspersky Lab 2014-02-07 13:22 - 2013-06-08 20:18 - 00112224 _____ (Kaspersky Lab ZAO) C:\WINDOWS\system32\Drivers\klflt.sys 2014-02-07 12:44 - 2014-02-07 13:19 - 256314176 _____ () C:\Users\STS\Downloads\kis14.0.0.4651abDE_5155(1).exe 2014-02-07 11:50 - 2014-02-07 11:50 - 00001454 _____ () C:\Users\STS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2014-02-07 11:49 - 2014-02-07 11:49 - 00000020 ___SH () C:\Users\STS\ntuser.ini 2014-02-07 11:40 - 2014-02-07 11:40 - 00000000 _SHDL () C:\Users\Default\Vorlagen 2014-02-07 11:40 - 2014-02-07 11:40 - 00000000 _SHDL () C:\Users\Default\Startmenü 2014-02-07 11:40 - 2014-02-07 11:40 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung 2014-02-07 11:40 - 2014-02-07 11:40 - 00000000 _SHDL () C:\Users\Default\Lokale Einstellungen 2014-02-07 11:40 - 2014-02-07 11:40 - 00000000 _SHDL () C:\Users\Default\Eigene Dateien 2014-02-07 11:40 - 2014-02-07 11:40 - 00000000 _SHDL () C:\Users\Default\Druckumgebung 2014-02-07 11:40 - 2014-02-07 11:40 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik 2014-02-07 11:40 - 2014-02-07 11:40 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder 2014-02-07 11:40 - 2014-02-07 11:40 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-02-07 11:40 - 2014-02-07 11:40 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf 2014-02-07 11:40 - 2014-02-07 11:40 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Anwendungsdaten 2014-02-07 11:40 - 2014-02-07 11:40 - 00000000 _SHDL () C:\Users\Default\Anwendungsdaten 2014-02-07 11:40 - 2014-02-07 11:40 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik 2014-02-07 11:40 - 2014-02-07 11:40 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder 2014-02-07 11:40 - 2014-02-07 11:40 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-02-07 11:40 - 2014-02-07 11:40 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf 2014-02-07 11:40 - 2014-02-07 11:40 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Anwendungsdaten 2014-02-07 11:39 - 2014-02-07 11:39 - 00022960 _____ () C:\WINDOWS\system32\emptyregdb.dat 2014-02-07 11:37 - 2014-02-07 11:37 - 00000020 ___SH () C:\Users\UpdatusUser\ntuser.ini 2014-02-07 11:28 - 2014-02-07 11:28 - 00000000 ____D () C:\WINDOWS\system32\config\bbimigrate 2014-02-07 11:27 - 2014-02-08 01:09 - 00000000 ____D () C:\Users\STS 2014-02-07 11:27 - 2014-02-07 11:39 - 00028578 _____ () C:\WINDOWS\diagwrn.xml 2014-02-07 11:27 - 2014-02-07 11:39 - 00028578 _____ () C:\WINDOWS\diagerr.xml 2014-02-07 11:27 - 2014-02-07 11:28 - 00000000 ___RD () C:\Users\STS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools 2014-02-07 11:27 - 2014-02-07 11:27 - 00000000 _SHDL () C:\Users\UpdatusUser\Vorlagen 2014-02-07 11:27 - 2014-02-07 11:27 - 00000000 _SHDL () C:\Users\UpdatusUser\Startmenü 2014-02-07 11:27 - 2014-02-07 11:27 - 00000000 _SHDL () C:\Users\UpdatusUser\Netzwerkumgebung 2014-02-07 11:27 - 2014-02-07 11:27 - 00000000 _SHDL () C:\Users\UpdatusUser\Lokale Einstellungen 2014-02-07 11:27 - 2014-02-07 11:27 - 00000000 _SHDL () C:\Users\UpdatusUser\Eigene Dateien 2014-02-07 11:27 - 2014-02-07 11:27 - 00000000 _SHDL () C:\Users\UpdatusUser\Druckumgebung 2014-02-07 11:27 - 2014-02-07 11:27 - 00000000 _SHDL () C:\Users\UpdatusUser\Documents\Eigene Musik 2014-02-07 11:27 - 2014-02-07 11:27 - 00000000 _SHDL () C:\Users\UpdatusUser\Documents\Eigene Bilder 2014-02-07 11:27 - 2014-02-07 11:27 - 00000000 _SHDL () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-02-07 11:27 - 2014-02-07 11:27 - 00000000 _SHDL () C:\Users\UpdatusUser\AppData\Local\Verlauf 2014-02-07 11:27 - 2014-02-07 11:27 - 00000000 _SHDL () C:\Users\UpdatusUser\AppData\Local\Anwendungsdaten 2014-02-07 11:27 - 2014-02-07 11:27 - 00000000 _SHDL () C:\Users\UpdatusUser\Anwendungsdaten 2014-02-07 11:27 - 2014-02-07 11:27 - 00000000 _SHDL () C:\Users\STS\Vorlagen 2014-02-07 11:27 - 2014-02-07 11:27 - 00000000 _SHDL () C:\Users\STS\Startmenü 2014-02-07 11:27 - 2014-02-07 11:27 - 00000000 _SHDL () C:\Users\STS\Netzwerkumgebung 2014-02-07 11:27 - 2014-02-07 11:27 - 00000000 _SHDL () C:\Users\STS\Lokale Einstellungen 2014-02-07 11:27 - 2014-02-07 11:27 - 00000000 _SHDL () C:\Users\STS\Eigene Dateien 2014-02-07 11:27 - 2014-02-07 11:27 - 00000000 _SHDL () C:\Users\STS\Druckumgebung 2014-02-07 11:27 - 2014-02-07 11:27 - 00000000 _SHDL () C:\Users\STS\Documents\Eigene Musik 2014-02-07 11:27 - 2014-02-07 11:27 - 00000000 _SHDL () C:\Users\STS\Documents\Eigene Bilder 2014-02-07 11:27 - 2014-02-07 11:27 - 00000000 _SHDL () C:\Users\STS\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-02-07 11:27 - 2014-02-07 11:27 - 00000000 _SHDL () C:\Users\STS\AppData\Local\Verlauf 2014-02-07 11:27 - 2014-02-07 11:27 - 00000000 _SHDL () C:\Users\STS\AppData\Local\Anwendungsdaten 2014-02-07 11:27 - 2014-02-07 11:27 - 00000000 _SHDL () C:\Users\STS\Anwendungsdaten 2014-02-07 11:27 - 2014-02-07 11:27 - 00000000 ___RD () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools 2014-02-07 11:27 - 2013-08-22 16:36 - 00000000 ___RD () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories 2014-02-07 11:27 - 2013-08-22 16:36 - 00000000 ___RD () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility 2014-02-07 11:27 - 2013-08-22 16:36 - 00000000 ___RD () C:\Users\STS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories 2014-02-07 11:27 - 2013-08-22 16:36 - 00000000 ___RD () C:\Users\STS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility 2014-02-07 11:27 - 2013-08-22 16:36 - 00000000 ____D () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance 2014-02-07 11:27 - 2013-08-22 16:36 - 00000000 ____D () C:\Users\STS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance 2014-02-07 11:21 - 2014-02-09 17:10 - 01781820 _____ () C:\WINDOWS\WindowsUpdate.log 2014-02-07 11:21 - 2014-02-08 12:32 - 00000000 ____D () C:\ProgramData\NVIDIA 2014-02-07 11:21 - 2014-02-07 11:30 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation 2014-02-07 11:21 - 2014-02-07 11:30 - 00000000 ____D () C:\Program Files\NVIDIA Corporation 2014-02-07 11:21 - 2014-02-07 11:30 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation 2014-02-07 11:21 - 2014-02-07 11:21 - 00000000 ____D () C:\WINDOWS\SysWOW64\NV 2014-02-07 11:21 - 2014-02-07 11:21 - 00000000 ____D () C:\WINDOWS\system32\NV 2014-02-07 11:21 - 2013-10-23 09:20 - 06669600 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll 2014-02-07 11:21 - 2013-10-23 09:20 - 03489568 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvc64.dll 2014-02-07 11:21 - 2013-10-23 09:20 - 03426956 _____ () C:\WINDOWS\system32\nvcoproc.bin 2014-02-07 11:21 - 2013-10-23 09:20 - 02559776 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvcr.dll 2014-02-07 11:21 - 2013-10-23 09:20 - 01064224 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshext.dll 2014-02-07 11:21 - 2013-10-23 09:20 - 00922912 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvvsvc.exe 2014-02-07 11:21 - 2013-10-23 09:20 - 00219424 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvmctray.dll 2014-02-07 11:21 - 2013-10-23 09:20 - 00067072 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshextr.dll 2014-02-07 11:21 - 2013-10-23 09:20 - 00063776 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvshext.dll 2014-02-07 11:20 - 2014-02-07 11:20 - 00000000 ____D () C:\Program Files\Intel 2014-02-07 11:20 - 2013-12-21 00:02 - 00064000 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.DLL 2014-02-07 11:20 - 2013-12-21 00:02 - 00060416 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.DLL 2014-02-07 11:17 - 2014-02-08 18:07 - 00000000 ___DC () C:\WINDOWS\Panther 2014-02-07 11:01 - 2014-02-07 11:01 - 03395920 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSService.dll 2014-02-07 11:01 - 2014-02-07 11:01 - 00848384 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSShared.dll 2014-02-07 11:01 - 2014-02-07 11:01 - 00787968 _____ (Microsoft Corporation) C:\WINDOWS\system32\uDWM.dll 2014-02-07 11:01 - 2014-02-07 11:01 - 00695808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSShared.dll 2014-02-07 11:01 - 2014-02-07 11:01 - 00615936 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDMAgent.exe 2014-02-07 11:01 - 2014-02-07 11:01 - 00393216 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMPhoto.dll 2014-02-07 11:01 - 2014-02-07 11:01 - 00348160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMPhoto.dll 2014-02-07 11:01 - 2014-02-07 11:01 - 00287744 _____ (Microsoft Corporation) C:\WINDOWS\system32\mdmregistration.dll 2014-02-07 11:01 - 2014-02-07 11:01 - 00249856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll 2014-02-07 11:01 - 2014-02-07 11:01 - 00240128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mdmregistration.dll 2014-02-07 11:01 - 2014-02-07 11:01 - 00206336 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSClient.dll 2014-02-07 11:01 - 2014-02-07 11:01 - 00197120 _____ (Microsoft Corporation) C:\WINDOWS\system32\scrrun.dll 2014-02-07 11:01 - 2014-02-07 11:01 - 00189952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll 2014-02-07 11:01 - 2014-02-07 11:01 - 00174592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSClient.dll 2014-02-07 11:01 - 2014-02-07 11:01 - 00156672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\scrrun.dll 2014-02-07 11:01 - 2014-02-07 11:01 - 00138240 _____ () C:\WINDOWS\system32\OEMLicense.dll 2014-02-07 11:01 - 2014-02-07 11:01 - 00103936 _____ () C:\WINDOWS\SysWOW64\OEMLicense.dll 2014-02-07 11:01 - 2014-02-07 11:01 - 00084480 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSCollect.exe 2014-02-07 11:01 - 2014-02-07 11:01 - 00075360 _____ (Microsoft Corporation) C:\WINDOWS\system32\imagehlp.dll 2014-02-07 11:01 - 2014-02-07 11:01 - 00070680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\imagehlp.dll 2014-02-07 11:00 - 2014-02-07 11:00 - 23183360 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll 2014-02-07 11:00 - 2014-02-07 11:00 - 17112576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll 2014-02-07 11:00 - 2014-02-07 11:00 - 13177344 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll 2014-02-07 11:00 - 2014-02-07 11:00 - 12996608 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll 2014-02-07 11:00 - 2014-02-07 11:00 - 11674624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll 2014-02-07 11:00 - 2014-02-07 11:00 - 11221504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll 2014-02-07 11:00 - 2014-02-07 11:00 - 07399256 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe 2014-02-07 11:00 - 2014-02-07 11:00 - 05769216 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll 2014-02-07 11:00 - 2014-02-07 11:00 - 04243968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll 2014-02-07 11:00 - 2014-02-07 11:00 - 02896896 _____ (Microsoft Corporation) C:\WINDOWS\system32\msftedit.dll 2014-02-07 11:00 - 2014-02-07 11:00 - 02764288 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll 2014-02-07 11:00 - 2014-02-07 11:00 - 02570240 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers.dll 2014-02-07 11:00 - 2014-02-07 11:00 - 02334208 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll 2014-02-07 11:00 - 2014-02-07 11:00 - 02266624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msftedit.dll 2014-02-07 11:00 - 2014-02-07 11:00 - 02166784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll 2014-02-07 11:00 - 2014-02-07 11:00 - 02143744 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll 2014-02-07 11:00 - 2014-02-07 11:00 - 02140888 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll 2014-02-07 11:00 - 2014-02-07 11:00 - 01995264 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl 2014-02-07 11:00 - 2014-02-07 11:00 - 01928192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl 2014-02-07 11:00 - 2014-02-07 11:00 - 01843712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Display.dll 2014-02-07 11:00 - 2014-02-07 11:00 - 01820160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll 2014-02-07 11:00 - 2014-02-07 11:00 - 01816576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Display.dll 2014-02-07 11:00 - 2014-02-07 11:00 - 01765384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11.dll 2014-02-07 11:00 - 2014-02-07 11:00 - 01765376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll 2014-02-07 11:00 - 2014-02-07 11:00 - 01756160 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMPDMC.exe 2014-02-07 11:00 - 2014-02-07 11:00 - 01642016 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi 2014-02-07 11:00 - 2014-02-07 11:00 - 01530200 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys 2014-02-07 11:00 - 2014-02-07 11:00 - 01506680 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe 2014-02-07 11:00 - 2014-02-07 11:00 - 01476184 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi 2014-02-07 11:00 - 2014-02-07 11:00 - 01395200 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll 2014-02-07 11:00 - 2014-02-07 11:00 - 01391104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMPDMC.exe 2014-02-07 11:00 - 2014-02-07 11:00 - 01345536 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe 2014-02-07 11:00 - 2014-02-07 11:00 - 01302528 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll 2014-02-07 11:00 - 2014-02-07 11:00 - 01157632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll 2014-02-07 11:00 - 2014-02-07 11:00 - 00922624 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.dll 2014-02-07 11:00 - 2014-02-07 11:00 - 00817664 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll 2014-02-07 11:00 - 2014-02-07 11:00 - 00747008 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidcli.dll 2014-02-07 11:00 - 2014-02-07 11:00 - 00703488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll 2014-02-07 11:00 - 2014-02-07 11:00 - 00568832 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDrive.exe 2014-02-07 11:00 - 2014-02-07 11:00 - 00566784 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpncore.dll 2014-02-07 11:00 - 2014-02-07 11:00 - 00544768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlidcli.dll 2014-02-07 11:00 - 2014-02-07 11:00 - 00516496 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll 2014-02-07 11:00 - 2014-02-07 11:00 - 00406400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxgi.dll 2014-02-07 11:00 - 2014-02-07 11:00 - 00382808 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys 2014-02-07 11:00 - 2014-02-07 11:00 - 00372568 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\spaceport.sys 2014-02-07 11:00 - 2014-02-07 11:00 - 00358896 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcomp.dll 2014-02-07 11:00 - 2014-02-07 11:00 - 00325464 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBXHCI.SYS 2014-02-07 11:00 - 2014-02-07 11:00 - 00254464 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll 2014-02-07 11:00 - 2014-02-07 11:00 - 00225792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dcomp.dll 2014-02-07 11:00 - 2014-02-07 11:00 - 00218624 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe 2014-02-07 11:00 - 2014-02-07 11:00 - 00198656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppXDeploymentClient.dll 2014-02-07 11:00 - 2014-02-07 11:00 - 00146776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\SerCx2.sys 2014-02-07 11:00 - 2014-02-07 11:00 - 00086872 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pdc.sys 2014-02-07 11:00 - 2014-02-07 11:00 - 00039768 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\intelpep.sys 2014-02-07 11:00 - 2014-02-07 11:00 - 00030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\CredentialMigrationHandler.dll 2014-02-07 11:00 - 2014-02-07 11:00 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CredentialMigrationHandler.dll 2014-02-07 10:59 - 2014-02-07 10:59 - 00262144 _____ () C:\WINDOWS\system32\config\userdiff 2014-02-07 10:24 - 2014-02-07 11:39 - 00006654 _____ () C:\WINDOWS\comsetup.log 2014-02-06 23:57 - 2014-02-07 23:23 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service 2014-02-06 23:57 - 2014-02-06 23:57 - 00001151 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk 2014-02-06 23:57 - 2014-02-06 23:57 - 00000000 ____D () C:\Users\STS\AppData\Roaming\Mozilla 2014-02-06 23:57 - 2014-02-06 23:57 - 00000000 ____D () C:\Users\STS\AppData\Local\Mozilla 2014-02-06 23:57 - 2014-02-06 23:57 - 00000000 ____D () C:\ProgramData\Mozilla 2014-02-06 23:57 - 2014-02-06 23:57 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox 2014-02-06 23:50 - 2014-02-06 23:51 - 00003542 _____ () C:\WINDOWS\System32\Tasks\CreateChoiceProcessTask 2014-02-06 23:50 - 2014-02-06 23:50 - 00002065 _____ () C:\Users\Public\Desktop\3D Vision Photo Viewer.lnk 2014-02-06 23:19 - 2014-02-06 23:19 - 00000136 _____ () C:\WINDOWS\system32\netcfg-212843.txt 2014-02-06 23:19 - 2014-02-06 23:19 - 00000134 _____ () C:\WINDOWS\system32\netcfg-212671.txt 2014-02-06 23:19 - 2014-02-06 23:19 - 00000134 _____ () C:\WINDOWS\system32\netcfg-208859.txt 2014-02-06 22:24 - 2014-01-19 08:33 - 00270496 _____ (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe 2014-02-06 21:49 - 2014-02-06 21:50 - 00000000 ____D () C:\WINDOWS\system32\MRT 2014-02-06 21:49 - 2014-01-06 16:20 - 86054176 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe 2014-02-06 21:14 - 2014-02-06 21:14 - 00000000 ____D () C:\Program Files (x86)\Intel 2014-02-06 19:51 - 2013-05-04 05:51 - 00014848 ____N (Microsoft) C:\WINDOWS\system32\rars.rs 2014-02-06 19:51 - 2013-05-04 05:10 - 00014848 ____N (Microsoft) C:\WINDOWS\SysWOW64\rars.rs 2014-02-06 19:34 - 2014-02-08 11:32 - 00003598 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-2066293164-2638704917-626986965-1001 2014-02-06 19:29 - 2014-02-06 19:29 - 00000117 _____ () C:\WINDOWS\system32\netcfg-3766140.txt 2014-02-06 18:54 - 2014-02-06 18:54 - 00000117 _____ () C:\WINDOWS\system32\netcfg-1694828.txt 2014-02-06 18:51 - 2014-02-06 18:51 - 00000117 _____ () C:\WINDOWS\system32\netcfg-1503312.txt 2014-02-06 18:51 - 2014-02-06 18:51 - 00000117 _____ () C:\WINDOWS\system32\netcfg-1469703.txt 2014-02-06 18:50 - 2014-02-06 18:50 - 00000117 _____ () C:\WINDOWS\system32\netcfg-1423109.txt 2014-02-06 18:50 - 2014-02-06 18:50 - 00000117 _____ () C:\WINDOWS\system32\netcfg-1422328.txt 2014-02-06 18:44 - 2014-02-07 16:47 - 00000000 ___RD () C:\Users\STS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup 2014-02-06 18:44 - 2014-02-07 16:47 - 00000000 ___RD () C:\Users\STS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools 2014-02-06 18:44 - 2014-02-06 18:44 - 00000000 ____D () C:\WINDOWS\System32\Tasks\WPD 2014-02-06 18:44 - 2014-02-06 18:44 - 00000000 ____D () C:\Users\STS\AppData\Roaming\Adobe 2014-02-06 18:43 - 2014-02-07 15:11 - 00000000 ____D () C:\Users\STS\AppData\Local\Packages 2014-02-06 18:43 - 2014-02-07 11:30 - 00000000 ____D () C:\ProgramData\PRICache 2014-02-06 18:43 - 2014-02-07 10:39 - 01397491 _____ () C:\WINDOWS\WindowsUpdate (1).log 2014-02-06 18:43 - 2014-02-06 18:43 - 00000000 ____D () C:\Users\STS\AppData\Local\VirtualStore 2014-02-06 18:40 - 2014-02-06 18:40 - 00000117 _____ () C:\WINDOWS\system32\netcfg-836750.txt 2014-02-06 18:40 - 2014-02-06 18:40 - 00000117 _____ () C:\WINDOWS\system32\netcfg-832812.txt 2014-02-06 18:28 - 2014-02-06 18:28 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Musik 2014-02-06 18:28 - 2014-02-06 18:28 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Bilder 2014-02-06 18:28 - 2014-02-06 18:28 - 00000000 _SHDL () C:\Users\Default.migrated\Vorlagen 2014-02-06 18:28 - 2014-02-06 18:28 - 00000000 _SHDL () C:\Users\Default.migrated\Startmenü 2014-02-06 18:28 - 2014-02-06 18:28 - 00000000 _SHDL () C:\Users\Default.migrated\Netzwerkumgebung 2014-02-06 18:28 - 2014-02-06 18:28 - 00000000 _SHDL () C:\Users\Default.migrated\Lokale Einstellungen 2014-02-06 18:28 - 2014-02-06 18:28 - 00000000 _SHDL () C:\Users\Default.migrated\Eigene Dateien 2014-02-06 18:28 - 2014-02-06 18:28 - 00000000 _SHDL () C:\Users\Default.migrated\Druckumgebung 2014-02-06 18:28 - 2014-02-06 18:28 - 00000000 _SHDL () C:\Users\Default.migrated\Documents\Eigene Musik 2014-02-06 18:28 - 2014-02-06 18:28 - 00000000 _SHDL () C:\Users\Default.migrated\Documents\Eigene Bilder 2014-02-06 18:28 - 2014-02-06 18:28 - 00000000 _SHDL () C:\Users\Default.migrated\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-02-06 18:28 - 2014-02-06 18:28 - 00000000 _SHDL () C:\Users\Default.migrated\AppData\Local\Verlauf 2014-02-06 18:28 - 2014-02-06 18:28 - 00000000 _SHDL () C:\Users\Default.migrated\AppData\Local\Anwendungsdaten 2014-02-06 18:28 - 2014-02-06 18:28 - 00000000 _SHDL () C:\Users\Default.migrated\Anwendungsdaten 2014-02-06 18:28 - 2014-02-06 18:28 - 00000000 _SHDL () C:\ProgramData\Vorlagen 2014-02-06 18:28 - 2014-02-06 18:28 - 00000000 _SHDL () C:\ProgramData\Startmenü 2014-02-06 18:28 - 2014-02-06 18:28 - 00000000 _SHDL () C:\ProgramData\Dokumente 2014-02-06 18:28 - 2014-02-06 18:28 - 00000000 _SHDL () C:\ProgramData\Anwendungsdaten 2014-02-06 18:28 - 2014-02-06 18:28 - 00000000 _SHDL () C:\Program Files\Gemeinsame Dateien 2014-02-06 17:58 - 2014-02-06 17:58 - 00001136 _____ () C:\WINDOWS\system32\netcfg-198546.txt 2014-02-06 17:58 - 2014-02-06 17:58 - 00001136 _____ () C:\WINDOWS\system32\netcfg-170734.txt 2014-02-06 17:58 - 2014-02-06 17:58 - 00000197 _____ () C:\WINDOWS\system32\netcfg-199390.txt 2014-02-06 17:58 - 2014-02-06 17:58 - 00000185 _____ () C:\WINDOWS\system32\netcfg-183640.txt 2014-02-06 17:58 - 2014-02-06 17:58 - 00000164 _____ () C:\WINDOWS\system32\netcfg-176390.txt 2014-02-06 17:58 - 2014-02-06 17:58 - 00000161 _____ () C:\WINDOWS\system32\netcfg-178875.txt 2014-02-06 17:58 - 2014-02-06 17:58 - 00000160 _____ () C:\WINDOWS\system32\netcfg-178421.txt 2014-02-06 17:58 - 2014-02-06 17:58 - 00000160 _____ () C:\WINDOWS\system32\netcfg-177500.txt 2014-02-06 17:58 - 2014-02-06 17:58 - 00000160 _____ () C:\WINDOWS\system32\netcfg-175843.txt 2014-02-06 17:58 - 2014-02-06 17:58 - 00000159 _____ () C:\WINDOWS\system32\netcfg-177062.txt 2014-02-06 17:58 - 2014-02-06 17:58 - 00000157 _____ () C:\WINDOWS\system32\netcfg-177890.txt 2014-02-06 17:58 - 2014-02-06 17:58 - 00000157 _____ () C:\WINDOWS\system32\netcfg-169515.txt 2014-02-06 17:58 - 2014-02-06 17:58 - 00000150 _____ () C:\WINDOWS\system32\netcfg-176750.txt ==================== One Month Modified Files and Folders ======= 2014-02-09 17:40 - 2014-02-09 17:39 - 00010593 _____ () C:\Users\STS\Desktop\FRST.txt 2014-02-09 17:39 - 2014-02-09 17:39 - 00000000 ____D () C:\Users\STS\Desktop\FRST-OlderVersion 2014-02-09 17:39 - 2014-02-08 22:53 - 00000000 ____D () C:\FRST 2014-02-09 17:39 - 2014-02-08 22:52 - 02170880 _____ (Farbar) C:\Users\STS\Desktop\FRST64.exe 2014-02-09 17:10 - 2014-02-07 11:21 - 01781820 _____ () C:\WINDOWS\WindowsUpdate.log 2014-02-09 17:00 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\sru 2014-02-09 16:52 - 2014-02-07 13:22 - 00000000 ____D () C:\ProgramData\Kaspersky Lab 2014-02-08 22:54 - 2014-02-08 22:54 - 00078309 _____ () C:\Users\STS\Downloads\FRST.txt 2014-02-08 22:54 - 2014-02-08 22:54 - 00009194 _____ () C:\Users\STS\Downloads\Addition.txt 2014-02-08 18:07 - 2014-02-07 11:17 - 00000000 ___DC () C:\WINDOWS\Panther 2014-02-08 12:32 - 2014-02-07 11:21 - 00000000 ____D () C:\ProgramData\NVIDIA 2014-02-08 12:32 - 2013-11-13 23:18 - 00004686 _____ () C:\WINDOWS\PFRO.log 2014-02-08 12:32 - 2013-08-22 15:45 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT 2014-02-08 11:32 - 2014-02-06 19:34 - 00003598 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-2066293164-2638704917-626986965-1001 2014-02-08 10:27 - 2014-02-08 10:27 - 00001125 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2014-02-08 10:27 - 2014-02-08 10:27 - 00000000 ____D () C:\Users\STS\AppData\Roaming\Malwarebytes 2014-02-08 10:27 - 2014-02-08 10:27 - 00000000 ____D () C:\ProgramData\Malwarebytes 2014-02-08 10:27 - 2014-02-08 10:27 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware 2014-02-08 10:27 - 2014-02-08 10:25 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\STS\Downloads\mbam-setup-1.75.0.1300.exe 2014-02-08 01:16 - 2014-02-08 01:16 - 00000999 _____ () C:\Users\Public\Desktop\MyPublicWiFi.lnk 2014-02-08 01:16 - 2014-02-08 01:16 - 00000000 ____D () C:\Program Files (x86)\MyPublicWiFi 2014-02-08 01:09 - 2014-02-07 11:27 - 00000000 ____D () C:\Users\STS 2014-02-07 23:55 - 2013-11-14 08:27 - 01686150 _____ () C:\WINDOWS\system32\PerfStringBackup.INI 2014-02-07 23:55 - 2013-11-14 08:11 - 00727930 _____ () C:\WINDOWS\system32\perfh007.dat 2014-02-07 23:55 - 2013-11-14 08:11 - 00151586 _____ () C:\WINDOWS\system32\perfc007.dat 2014-02-07 23:37 - 2013-08-22 14:25 - 00262144 ___SH () C:\WINDOWS\system32\config\BBI 2014-02-07 23:23 - 2014-02-06 23:57 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service 2014-02-07 23:20 - 2014-02-08 00:39 - 01142856 _____ (TRUE Software ) C:\Users\STS\Desktop\MyPublicWiFi.exe 2014-02-07 23:20 - 2014-02-07 23:20 - 01142856 _____ (TRUE Software ) C:\Users\STS\Downloads\MyPublicWiFi.exe 2014-02-07 23:18 - 2014-02-07 23:18 - 00000000 ____D () C:\Users\STS\AppData\Roaming\MyPhoneExplorer 2014-02-07 23:17 - 2014-02-07 23:17 - 00002073 _____ () C:\Users\Public\Desktop\MyPhoneExplorer.lnk 2014-02-07 23:17 - 2014-02-07 23:17 - 00000000 ____D () C:\Program Files (x86)\MyPhoneExplorer 2014-02-07 23:13 - 2014-02-07 23:12 - 07080248 _____ () C:\Users\STS\Downloads\MyPhoneExplorer_Setup_1.8.5.exe 2014-02-07 21:27 - 2013-08-22 16:36 - 00000000 ___HD () C:\WINDOWS\system32\GroupPolicy 2014-02-07 21:27 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\GroupPolicy 2014-02-07 21:25 - 2014-02-07 21:25 - 00000000 ____D () C:\ProgramData\HP 2014-02-07 21:23 - 2014-02-07 21:23 - 02338824 _____ () C:\Users\STS\Downloads\hppiw.exe 2014-02-07 21:19 - 2014-02-07 21:19 - 00003036 _____ () C:\WINDOWS\System32\Tasks\{66C4E4DE-7581-4E55-BEC2-BC510F0FA585} 2014-02-07 21:07 - 2014-02-07 21:03 - 00000691 _____ () C:\ProgramData\hpzinstall.log 2014-02-07 19:01 - 2014-02-07 19:01 - 00000000 ____D () C:\Users\STS\AppData\Roaming\Thunderbird 2014-02-07 19:01 - 2014-02-07 19:01 - 00000000 ____D () C:\Users\STS\AppData\Local\Thunderbird 2014-02-07 19:00 - 2014-02-07 19:00 - 00002102 _____ () C:\Users\Public\Desktop\Mozilla Thunderbird.lnk 2014-02-07 19:00 - 2014-02-07 19:00 - 00000000 ____D () C:\Program Files (x86)\Mozilla Thunderbird 2014-02-07 18:28 - 2014-02-07 18:26 - 21987088 _____ (Mozilla) C:\Users\STS\Downloads\Thunderbird Setup 24.3.0(1).exe 2014-02-07 17:39 - 2014-02-07 17:36 - 21987088 _____ (Mozilla) C:\Users\STS\Downloads\Thunderbird Setup 24.3.0.exe 2014-02-07 17:24 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\AppReadiness 2014-02-07 16:48 - 2014-02-07 16:48 - 00000000 ____D () C:\Users\STS\AppData\Roaming\OpenOffice 2014-02-07 16:47 - 2014-02-06 18:44 - 00000000 ___RD () C:\Users\STS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup 2014-02-07 16:47 - 2014-02-06 18:44 - 00000000 ___RD () C:\Users\STS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools 2014-02-07 15:49 - 2013-08-22 15:44 - 00360464 _____ () C:\WINDOWS\system32\FNTCACHE.DAT 2014-02-07 15:45 - 2013-08-22 16:36 - 00000000 ___RD () C:\WINDOWS\ToastData 2014-02-07 15:45 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\MediaViewer 2014-02-07 15:45 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\FileManager 2014-02-07 15:45 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\Camera 2014-02-07 15:45 - 2013-08-22 14:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\Dism 2014-02-07 15:45 - 2013-08-22 14:36 - 00000000 ____D () C:\WINDOWS\system32\Dism 2014-02-07 15:11 - 2014-02-07 15:11 - 00000000 ___RD () C:\WINDOWS\BrowserChoice 2014-02-07 15:11 - 2014-02-06 18:43 - 00000000 ____D () C:\Users\STS\AppData\Local\Packages 2014-02-07 15:00 - 2014-02-07 15:00 - 00001132 _____ () C:\Users\Public\Desktop\OpenOffice 4.0.1.lnk 2014-02-07 14:59 - 2014-02-07 14:58 - 00000000 ____D () C:\Program Files (x86)\OpenOffice 4 2014-02-07 14:56 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files\Common Files\microsoft shared 2014-02-07 14:54 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\restore 2014-02-07 14:53 - 2014-02-07 14:53 - 00000000 ____D () C:\Users\STS\Desktop\OpenOffice 4.0.1 (de) Installation Files 2014-02-07 14:17 - 2014-02-07 13:22 - 00623712 _____ (Kaspersky Lab ZAO) C:\WINDOWS\system32\Drivers\klif.sys 2014-02-07 14:17 - 2013-10-17 15:47 - 00458336 _____ (Kaspersky Lab ZAO) C:\WINDOWS\system32\Drivers\kl1.sys 2014-02-07 14:17 - 2013-06-06 17:38 - 00178272 _____ (Kaspersky Lab ZAO) C:\WINDOWS\system32\Drivers\kneps.sys 2014-02-07 14:17 - 2012-07-27 18:38 - 00029792 _____ (Kaspersky Lab) C:\WINDOWS\system32\Drivers\klelam.sys 2014-02-07 14:06 - 2014-02-07 13:38 - 163606685 _____ () C:\Users\STS\Downloads\Apache_OpenOffice_4.0.1_Win_x86_install_de.exe 2014-02-07 13:24 - 2014-02-07 13:24 - 00002350 _____ () C:\Users\STS\Desktop\Sicherer Zahlungsverkehr.lnk 2014-02-07 13:24 - 2014-02-07 13:24 - 00001345 _____ () C:\Users\STS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Kaspersky Internet Security.lnk 2014-02-07 13:23 - 2014-02-07 13:23 - 00001144 _____ () C:\Users\Public\Desktop\Kaspersky Internet Security.lnk 2014-02-07 13:23 - 2013-08-22 14:25 - 00262144 ___SH () C:\WINDOWS\system32\config\ELAM 2014-02-07 13:22 - 2014-02-07 13:22 - 00000000 ____D () C:\Program Files (x86)\Kaspersky Lab 2014-02-07 13:22 - 2012-07-26 09:12 - 00000000 ___HD () C:\WINDOWS\ELAMBKUP 2014-02-07 13:19 - 2014-02-07 12:44 - 256314176 _____ () C:\Users\STS\Downloads\kis14.0.0.4651abDE_5155(1).exe 2014-02-07 11:50 - 2014-02-07 11:50 - 00001454 _____ () C:\Users\STS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2014-02-07 11:49 - 2014-02-07 11:49 - 00000020 ___SH () C:\Users\STS\ntuser.ini 2014-02-07 11:41 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\rescache 2014-02-07 11:40 - 2014-02-07 11:40 - 00000000 _SHDL () C:\Users\Default\Vorlagen 2014-02-07 11:40 - 2014-02-07 11:40 - 00000000 _SHDL () C:\Users\Default\Startmenü 2014-02-07 11:40 - 2014-02-07 11:40 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung 2014-02-07 11:40 - 2014-02-07 11:40 - 00000000 _SHDL () C:\Users\Default\Lokale Einstellungen 2014-02-07 11:40 - 2014-02-07 11:40 - 00000000 _SHDL () C:\Users\Default\Eigene Dateien 2014-02-07 11:40 - 2014-02-07 11:40 - 00000000 _SHDL () C:\Users\Default\Druckumgebung 2014-02-07 11:40 - 2014-02-07 11:40 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik 2014-02-07 11:40 - 2014-02-07 11:40 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder 2014-02-07 11:40 - 2014-02-07 11:40 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-02-07 11:40 - 2014-02-07 11:40 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf 2014-02-07 11:40 - 2014-02-07 11:40 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Anwendungsdaten 2014-02-07 11:40 - 2014-02-07 11:40 - 00000000 _SHDL () C:\Users\Default\Anwendungsdaten 2014-02-07 11:40 - 2014-02-07 11:40 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik 2014-02-07 11:40 - 2014-02-07 11:40 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder 2014-02-07 11:40 - 2014-02-07 11:40 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-02-07 11:40 - 2014-02-07 11:40 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf 2014-02-07 11:40 - 2014-02-07 11:40 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Anwendungsdaten 2014-02-07 11:40 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files\Windows NT 2014-02-07 11:40 - 2013-08-22 14:36 - 00000000 __RHD () C:\Users\Default 2014-02-07 11:39 - 2014-02-07 11:39 - 00022960 _____ () C:\WINDOWS\system32\emptyregdb.dat 2014-02-07 11:39 - 2014-02-07 11:27 - 00028578 _____ () C:\WINDOWS\diagwrn.xml 2014-02-07 11:39 - 2014-02-07 11:27 - 00028578 _____ () C:\WINDOWS\diagerr.xml 2014-02-07 11:39 - 2014-02-07 10:24 - 00006654 _____ () C:\WINDOWS\comsetup.log 2014-02-07 11:39 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\Registration 2014-02-07 11:39 - 2013-08-22 15:46 - 00327699 _____ () C:\WINDOWS\setupact.log 2014-02-07 11:37 - 2014-02-07 11:37 - 00000020 ___SH () C:\Users\UpdatusUser\ntuser.ini 2014-02-07 11:36 - 2013-08-22 16:36 - 00000000 __RSD () C:\WINDOWS\Media 2014-02-07 11:36 - 2013-08-22 16:36 - 00000000 __RHD () C:\Users\Public\Libraries 2014-02-07 11:32 - 2013-11-14 08:11 - 00000000 ____D () C:\WINDOWS\SysWOW64\winrm 2014-02-07 11:32 - 2013-11-14 08:11 - 00000000 ____D () C:\WINDOWS\SysWOW64\WCN 2014-02-07 11:32 - 2013-11-14 08:11 - 00000000 ____D () C:\WINDOWS\SysWOW64\sysprep 2014-02-07 11:32 - 2013-11-14 08:11 - 00000000 ____D () C:\WINDOWS\SysWOW64\slmgr 2014-02-07 11:32 - 2013-11-14 08:11 - 00000000 ____D () C:\WINDOWS\SysWOW64\Printing_Admin_Scripts 2014-02-07 11:32 - 2013-08-22 16:37 - 00004893 _____ () C:\WINDOWS\DtcInstall.log 2014-02-07 11:32 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\WinStore 2014-02-07 11:32 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\MUI 2014-02-07 11:32 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\migwiz 2014-02-07 11:32 - 2013-08-22 14:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\SMI 2014-02-07 11:32 - 2013-08-22 14:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\oobe 2014-02-07 11:32 - 2012-07-26 06:37 - 00000000 ____D () C:\Users\Default.migrated 2014-02-07 11:31 - 2013-11-14 08:11 - 00000000 ____D () C:\WINDOWS\system32\winrm 2014-02-07 11:31 - 2013-11-14 08:11 - 00000000 ____D () C:\WINDOWS\system32\WCN 2014-02-07 11:31 - 2013-11-14 08:11 - 00000000 ____D () C:\WINDOWS\system32\slmgr 2014-02-07 11:31 - 2013-11-14 08:11 - 00000000 ____D () C:\WINDOWS\system32\Printing_Admin_Scripts 2014-02-07 11:31 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\IME 2014-02-07 11:31 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\WinBioPlugIns 2014-02-07 11:31 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\SystemResetPlatform 2014-02-07 11:31 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\spool 2014-02-07 11:31 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\MUI 2014-02-07 11:31 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\IME 2014-02-07 11:31 - 2013-08-22 14:36 - 00000000 ____D () C:\WINDOWS\system32\Sysprep 2014-02-07 11:31 - 2013-08-22 14:36 - 00000000 ____D () C:\WINDOWS\system32\oobe 2014-02-07 11:30 - 2014-02-07 11:21 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation 2014-02-07 11:30 - 2014-02-07 11:21 - 00000000 ____D () C:\Program Files\NVIDIA Corporation 2014-02-07 11:30 - 2014-02-07 11:21 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation 2014-02-07 11:30 - 2014-02-06 18:43 - 00000000 ____D () C:\ProgramData\PRICache 2014-02-07 11:30 - 2013-11-14 08:13 - 00000000 ____D () C:\Program Files\Windows Journal 2014-02-07 11:30 - 2013-08-22 16:43 - 00000000 ____D () C:\WINDOWS\DigitalLocker 2014-02-07 11:30 - 2013-08-22 16:36 - 00000000 __SHD () C:\Program Files\Windows Sidebar 2014-02-07 11:30 - 2013-08-22 16:36 - 00000000 __SHD () C:\Program Files (x86)\Windows Sidebar 2014-02-07 11:30 - 2013-08-22 16:36 - 00000000 ___RD () C:\WINDOWS\ImmersiveControlPanel 2014-02-07 11:30 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\PolicyDefinitions 2014-02-07 11:30 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\IME 2014-02-07 11:30 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\Help 2014-02-07 11:30 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files\Windows Photo Viewer 2014-02-07 11:30 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files\Common Files\System 2014-02-07 11:30 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files (x86)\Windows Photo Viewer 2014-02-07 11:28 - 2014-02-07 11:28 - 00000000 ____D () C:\WINDOWS\system32\config\bbimigrate 2014-02-07 11:28 - 2014-02-07 11:27 - 00000000 ___RD () C:\Users\STS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools 2014-02-07 11:28 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\Recovery 2014-02-07 11:27 - 2014-02-07 11:27 - 00000000 _SHDL () C:\Users\UpdatusUser\Vorlagen 2014-02-07 11:27 - 2014-02-07 11:27 - 00000000 _SHDL () C:\Users\UpdatusUser\Startmenü 2014-02-07 11:27 - 2014-02-07 11:27 - 00000000 _SHDL () C:\Users\UpdatusUser\Netzwerkumgebung 2014-02-07 11:27 - 2014-02-07 11:27 - 00000000 _SHDL () C:\Users\UpdatusUser\Lokale Einstellungen 2014-02-07 11:27 - 2014-02-07 11:27 - 00000000 _SHDL () C:\Users\UpdatusUser\Eigene Dateien 2014-02-07 11:27 - 2014-02-07 11:27 - 00000000 _SHDL () C:\Users\UpdatusUser\Druckumgebung 2014-02-07 11:27 - 2014-02-07 11:27 - 00000000 _SHDL () C:\Users\UpdatusUser\Documents\Eigene Musik 2014-02-07 11:27 - 2014-02-07 11:27 - 00000000 _SHDL () C:\Users\UpdatusUser\Documents\Eigene Bilder 2014-02-07 11:27 - 2014-02-07 11:27 - 00000000 _SHDL () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-02-07 11:27 - 2014-02-07 11:27 - 00000000 _SHDL () C:\Users\UpdatusUser\AppData\Local\Verlauf 2014-02-07 11:27 - 2014-02-07 11:27 - 00000000 _SHDL () C:\Users\UpdatusUser\AppData\Local\Anwendungsdaten 2014-02-07 11:27 - 2014-02-07 11:27 - 00000000 _SHDL () C:\Users\UpdatusUser\Anwendungsdaten 2014-02-07 11:27 - 2014-02-07 11:27 - 00000000 _SHDL () C:\Users\STS\Vorlagen 2014-02-07 11:27 - 2014-02-07 11:27 - 00000000 _SHDL () C:\Users\STS\Startmenü 2014-02-07 11:27 - 2014-02-07 11:27 - 00000000 _SHDL () C:\Users\STS\Netzwerkumgebung 2014-02-07 11:27 - 2014-02-07 11:27 - 00000000 _SHDL () C:\Users\STS\Lokale Einstellungen 2014-02-07 11:27 - 2014-02-07 11:27 - 00000000 _SHDL () C:\Users\STS\Eigene Dateien 2014-02-07 11:27 - 2014-02-07 11:27 - 00000000 _SHDL () C:\Users\STS\Druckumgebung 2014-02-07 11:27 - 2014-02-07 11:27 - 00000000 _SHDL () C:\Users\STS\Documents\Eigene Musik 2014-02-07 11:27 - 2014-02-07 11:27 - 00000000 _SHDL () C:\Users\STS\Documents\Eigene Bilder 2014-02-07 11:27 - 2014-02-07 11:27 - 00000000 _SHDL () C:\Users\STS\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-02-07 11:27 - 2014-02-07 11:27 - 00000000 _SHDL () C:\Users\STS\AppData\Local\Verlauf 2014-02-07 11:27 - 2014-02-07 11:27 - 00000000 _SHDL () C:\Users\STS\AppData\Local\Anwendungsdaten 2014-02-07 11:27 - 2014-02-07 11:27 - 00000000 _SHDL () C:\Users\STS\Anwendungsdaten 2014-02-07 11:27 - 2014-02-07 11:27 - 00000000 ___RD () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools 2014-02-07 11:21 - 2014-02-07 11:21 - 00000000 ____D () C:\WINDOWS\SysWOW64\NV 2014-02-07 11:21 - 2014-02-07 11:21 - 00000000 ____D () C:\WINDOWS\system32\NV 2014-02-07 11:20 - 2014-02-07 11:20 - 00000000 ____D () C:\Program Files\Intel 2014-02-07 11:17 - 2013-10-16 14:44 - 00000000 __SHD () C:\Recovery 2014-02-07 11:15 - 2013-08-22 16:36 - 00262144 _____ () C:\WINDOWS\system32\config\BCD-Template 2014-02-07 11:01 - 2014-02-07 11:01 - 03395920 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSService.dll 2014-02-07 11:01 - 2014-02-07 11:01 - 00848384 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSShared.dll 2014-02-07 11:01 - 2014-02-07 11:01 - 00787968 _____ (Microsoft Corporation) C:\WINDOWS\system32\uDWM.dll 2014-02-07 11:01 - 2014-02-07 11:01 - 00695808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSShared.dll 2014-02-07 11:01 - 2014-02-07 11:01 - 00615936 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDMAgent.exe 2014-02-07 11:01 - 2014-02-07 11:01 - 00393216 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMPhoto.dll 2014-02-07 11:01 - 2014-02-07 11:01 - 00348160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMPhoto.dll 2014-02-07 11:01 - 2014-02-07 11:01 - 00287744 _____ (Microsoft Corporation) C:\WINDOWS\system32\mdmregistration.dll 2014-02-07 11:01 - 2014-02-07 11:01 - 00249856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll 2014-02-07 11:01 - 2014-02-07 11:01 - 00240128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mdmregistration.dll 2014-02-07 11:01 - 2014-02-07 11:01 - 00206336 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSClient.dll 2014-02-07 11:01 - 2014-02-07 11:01 - 00197120 _____ (Microsoft Corporation) C:\WINDOWS\system32\scrrun.dll 2014-02-07 11:01 - 2014-02-07 11:01 - 00189952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll 2014-02-07 11:01 - 2014-02-07 11:01 - 00174592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSClient.dll 2014-02-07 11:01 - 2014-02-07 11:01 - 00156672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\scrrun.dll 2014-02-07 11:01 - 2014-02-07 11:01 - 00138240 _____ () C:\WINDOWS\system32\OEMLicense.dll 2014-02-07 11:01 - 2014-02-07 11:01 - 00103936 _____ () C:\WINDOWS\SysWOW64\OEMLicense.dll 2014-02-07 11:01 - 2014-02-07 11:01 - 00084480 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSCollect.exe 2014-02-07 11:01 - 2014-02-07 11:01 - 00075360 _____ (Microsoft Corporation) C:\WINDOWS\system32\imagehlp.dll 2014-02-07 11:01 - 2014-02-07 11:01 - 00070680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\imagehlp.dll 2014-02-07 11:00 - 2014-02-07 11:00 - 23183360 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll 2014-02-07 11:00 - 2014-02-07 11:00 - 17112576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll 2014-02-07 11:00 - 2014-02-07 11:00 - 13177344 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll 2014-02-07 11:00 - 2014-02-07 11:00 - 12996608 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll 2014-02-07 11:00 - 2014-02-07 11:00 - 11674624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll 2014-02-07 11:00 - 2014-02-07 11:00 - 11221504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll 2014-02-07 11:00 - 2014-02-07 11:00 - 07399256 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe 2014-02-07 11:00 - 2014-02-07 11:00 - 05769216 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll 2014-02-07 11:00 - 2014-02-07 11:00 - 04243968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll 2014-02-07 11:00 - 2014-02-07 11:00 - 02896896 _____ (Microsoft Corporation) C:\WINDOWS\system32\msftedit.dll 2014-02-07 11:00 - 2014-02-07 11:00 - 02764288 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll 2014-02-07 11:00 - 2014-02-07 11:00 - 02570240 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers.dll 2014-02-07 11:00 - 2014-02-07 11:00 - 02334208 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll 2014-02-07 11:00 - 2014-02-07 11:00 - 02266624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msftedit.dll 2014-02-07 11:00 - 2014-02-07 11:00 - 02166784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll 2014-02-07 11:00 - 2014-02-07 11:00 - 02143744 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll 2014-02-07 11:00 - 2014-02-07 11:00 - 02140888 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll 2014-02-07 11:00 - 2014-02-07 11:00 - 01995264 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl 2014-02-07 11:00 - 2014-02-07 11:00 - 01928192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl 2014-02-07 11:00 - 2014-02-07 11:00 - 01843712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Display.dll 2014-02-07 11:00 - 2014-02-07 11:00 - 01820160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll 2014-02-07 11:00 - 2014-02-07 11:00 - 01816576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Display.dll 2014-02-07 11:00 - 2014-02-07 11:00 - 01765384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11.dll 2014-02-07 11:00 - 2014-02-07 11:00 - 01765376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll 2014-02-07 11:00 - 2014-02-07 11:00 - 01756160 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMPDMC.exe 2014-02-07 11:00 - 2014-02-07 11:00 - 01642016 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi 2014-02-07 11:00 - 2014-02-07 11:00 - 01530200 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys 2014-02-07 11:00 - 2014-02-07 11:00 - 01506680 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe 2014-02-07 11:00 - 2014-02-07 11:00 - 01476184 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi 2014-02-07 11:00 - 2014-02-07 11:00 - 01395200 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll 2014-02-07 11:00 - 2014-02-07 11:00 - 01391104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMPDMC.exe 2014-02-07 11:00 - 2014-02-07 11:00 - 01345536 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe 2014-02-07 11:00 - 2014-02-07 11:00 - 01302528 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll 2014-02-07 11:00 - 2014-02-07 11:00 - 01157632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll 2014-02-07 11:00 - 2014-02-07 11:00 - 00922624 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.dll 2014-02-07 11:00 - 2014-02-07 11:00 - 00817664 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll 2014-02-07 11:00 - 2014-02-07 11:00 - 00747008 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidcli.dll 2014-02-07 11:00 - 2014-02-07 11:00 - 00703488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll 2014-02-07 11:00 - 2014-02-07 11:00 - 00568832 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDrive.exe 2014-02-07 11:00 - 2014-02-07 11:00 - 00566784 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpncore.dll 2014-02-07 11:00 - 2014-02-07 11:00 - 00544768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlidcli.dll 2014-02-07 11:00 - 2014-02-07 11:00 - 00516496 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll 2014-02-07 11:00 - 2014-02-07 11:00 - 00406400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxgi.dll 2014-02-07 11:00 - 2014-02-07 11:00 - 00382808 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys 2014-02-07 11:00 - 2014-02-07 11:00 - 00372568 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\spaceport.sys 2014-02-07 11:00 - 2014-02-07 11:00 - 00358896 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcomp.dll 2014-02-07 11:00 - 2014-02-07 11:00 - 00325464 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBXHCI.SYS 2014-02-07 11:00 - 2014-02-07 11:00 - 00254464 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll 2014-02-07 11:00 - 2014-02-07 11:00 - 00225792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dcomp.dll 2014-02-07 11:00 - 2014-02-07 11:00 - 00218624 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe 2014-02-07 11:00 - 2014-02-07 11:00 - 00198656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppXDeploymentClient.dll 2014-02-07 11:00 - 2014-02-07 11:00 - 00146776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\SerCx2.sys 2014-02-07 11:00 - 2014-02-07 11:00 - 00086872 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pdc.sys 2014-02-07 11:00 - 2014-02-07 11:00 - 00039768 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\intelpep.sys 2014-02-07 11:00 - 2014-02-07 11:00 - 00030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\CredentialMigrationHandler.dll 2014-02-07 11:00 - 2014-02-07 11:00 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CredentialMigrationHandler.dll 2014-02-07 10:59 - 2014-02-07 10:59 - 00262144 _____ () C:\WINDOWS\system32\config\userdiff 2014-02-07 10:39 - 2014-02-06 18:43 - 01397491 _____ () C:\WINDOWS\WindowsUpdate (1).log 2014-02-07 09:23 - 2012-07-26 09:12 - 00000000 ____D () C:\WINDOWS\AUInstallAgent 2014-02-07 01:43 - 2012-08-30 08:04 - 00749116 _____ () C:\WINDOWS\system32\perfh015.dat 2014-02-07 01:43 - 2012-08-30 08:04 - 00151616 _____ () C:\WINDOWS\system32\perfc015.dat 2014-02-07 01:43 - 2012-08-30 08:02 - 00741758 _____ () C:\WINDOWS\system32\prfh0816.dat 2014-02-07 01:43 - 2012-08-30 08:02 - 00152194 _____ () C:\WINDOWS\system32\prfc0816.dat 2014-02-07 01:43 - 2012-08-30 07:59 - 00695714 _____ () C:\WINDOWS\system32\perfh00E.dat 2014-02-07 01:43 - 2012-08-30 07:59 - 00166238 _____ () C:\WINDOWS\system32\perfc00E.dat 2014-02-07 01:43 - 2012-08-30 07:54 - 00420230 _____ () C:\WINDOWS\system32\perfh006.dat 2014-02-07 01:43 - 2012-08-30 07:54 - 00071642 _____ () C:\WINDOWS\system32\perfc006.dat 2014-02-07 01:43 - 2012-08-30 07:49 - 00745136 _____ () C:\WINDOWS\system32\perfh010.dat 2014-02-07 01:43 - 2012-08-30 07:49 - 00144828 _____ () C:\WINDOWS\system32\perfc010.dat 2014-02-07 01:43 - 2012-08-30 07:44 - 00753602 _____ () C:\WINDOWS\system32\perfh00C.dat 2014-02-07 01:43 - 2012-08-30 07:44 - 00147304 _____ () C:\WINDOWS\system32\perfc00C.dat 2014-02-06 23:57 - 2014-02-06 23:57 - 00001151 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk 2014-02-06 23:57 - 2014-02-06 23:57 - 00000000 ____D () C:\Users\STS\AppData\Roaming\Mozilla 2014-02-06 23:57 - 2014-02-06 23:57 - 00000000 ____D () C:\Users\STS\AppData\Local\Mozilla 2014-02-06 23:57 - 2014-02-06 23:57 - 00000000 ____D () C:\ProgramData\Mozilla 2014-02-06 23:57 - 2014-02-06 23:57 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox 2014-02-06 23:51 - 2014-02-06 23:50 - 00003542 _____ () C:\WINDOWS\System32\Tasks\CreateChoiceProcessTask 2014-02-06 23:50 - 2014-02-06 23:50 - 00002065 _____ () C:\Users\Public\Desktop\3D Vision Photo Viewer.lnk 2014-02-06 23:19 - 2014-02-06 23:19 - 00000136 _____ () C:\WINDOWS\system32\netcfg-212843.txt 2014-02-06 23:19 - 2014-02-06 23:19 - 00000134 _____ () C:\WINDOWS\system32\netcfg-212671.txt 2014-02-06 23:19 - 2014-02-06 23:19 - 00000134 _____ () C:\WINDOWS\system32\netcfg-208859.txt 2014-02-06 21:50 - 2014-02-06 21:49 - 00000000 ____D () C:\WINDOWS\system32\MRT 2014-02-06 21:14 - 2014-02-06 21:14 - 00000000 ____D () C:\Program Files (x86)\Intel 2014-02-06 19:29 - 2014-02-06 19:29 - 00000117 _____ () C:\WINDOWS\system32\netcfg-3766140.txt 2014-02-06 18:54 - 2014-02-06 18:54 - 00000117 _____ () C:\WINDOWS\system32\netcfg-1694828.txt 2014-02-06 18:51 - 2014-02-06 18:51 - 00000117 _____ () C:\WINDOWS\system32\netcfg-1503312.txt 2014-02-06 18:51 - 2014-02-06 18:51 - 00000117 _____ () C:\WINDOWS\system32\netcfg-1469703.txt 2014-02-06 18:50 - 2014-02-06 18:50 - 00000117 _____ () C:\WINDOWS\system32\netcfg-1423109.txt 2014-02-06 18:50 - 2014-02-06 18:50 - 00000117 _____ () C:\WINDOWS\system32\netcfg-1422328.txt 2014-02-06 18:44 - 2014-02-06 18:44 - 00000000 ____D () C:\WINDOWS\System32\Tasks\WPD 2014-02-06 18:44 - 2014-02-06 18:44 - 00000000 ____D () C:\Users\STS\AppData\Roaming\Adobe 2014-02-06 18:43 - 2014-02-06 18:43 - 00000000 ____D () C:\Users\STS\AppData\Local\VirtualStore 2014-02-06 18:40 - 2014-02-06 18:40 - 00000117 _____ () C:\WINDOWS\system32\netcfg-836750.txt 2014-02-06 18:40 - 2014-02-06 18:40 - 00000117 _____ () C:\WINDOWS\system32\netcfg-832812.txt 2014-02-06 18:28 - 2014-02-06 18:28 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Musik 2014-02-06 18:28 - 2014-02-06 18:28 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Bilder 2014-02-06 18:28 - 2014-02-06 18:28 - 00000000 _SHDL () C:\Users\Default.migrated\Vorlagen 2014-02-06 18:28 - 2014-02-06 18:28 - 00000000 _SHDL () C:\Users\Default.migrated\Startmenü 2014-02-06 18:28 - 2014-02-06 18:28 - 00000000 _SHDL () C:\Users\Default.migrated\Netzwerkumgebung 2014-02-06 18:28 - 2014-02-06 18:28 - 00000000 _SHDL () C:\Users\Default.migrated\Lokale Einstellungen 2014-02-06 18:28 - 2014-02-06 18:28 - 00000000 _SHDL () C:\Users\Default.migrated\Eigene Dateien 2014-02-06 18:28 - 2014-02-06 18:28 - 00000000 _SHDL () C:\Users\Default.migrated\Druckumgebung 2014-02-06 18:28 - 2014-02-06 18:28 - 00000000 _SHDL () C:\Users\Default.migrated\Documents\Eigene Musik 2014-02-06 18:28 - 2014-02-06 18:28 - 00000000 _SHDL () C:\Users\Default.migrated\Documents\Eigene Bilder 2014-02-06 18:28 - 2014-02-06 18:28 - 00000000 _SHDL () C:\Users\Default.migrated\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-02-06 18:28 - 2014-02-06 18:28 - 00000000 _SHDL () C:\Users\Default.migrated\AppData\Local\Verlauf 2014-02-06 18:28 - 2014-02-06 18:28 - 00000000 _SHDL () C:\Users\Default.migrated\AppData\Local\Anwendungsdaten 2014-02-06 18:28 - 2014-02-06 18:28 - 00000000 _SHDL () C:\Users\Default.migrated\Anwendungsdaten 2014-02-06 18:28 - 2014-02-06 18:28 - 00000000 _SHDL () C:\ProgramData\Vorlagen 2014-02-06 18:28 - 2014-02-06 18:28 - 00000000 _SHDL () C:\ProgramData\Startmenü 2014-02-06 18:28 - 2014-02-06 18:28 - 00000000 _SHDL () C:\ProgramData\Dokumente 2014-02-06 18:28 - 2014-02-06 18:28 - 00000000 _SHDL () C:\ProgramData\Anwendungsdaten 2014-02-06 18:28 - 2014-02-06 18:28 - 00000000 _SHDL () C:\Program Files\Gemeinsame Dateien 2014-02-06 17:58 - 2014-02-06 17:58 - 00001136 _____ () C:\WINDOWS\system32\netcfg-198546.txt 2014-02-06 17:58 - 2014-02-06 17:58 - 00001136 _____ () C:\WINDOWS\system32\netcfg-170734.txt 2014-02-06 17:58 - 2014-02-06 17:58 - 00000197 _____ () C:\WINDOWS\system32\netcfg-199390.txt 2014-02-06 17:58 - 2014-02-06 17:58 - 00000185 _____ () C:\WINDOWS\system32\netcfg-183640.txt 2014-02-06 17:58 - 2014-02-06 17:58 - 00000164 _____ () C:\WINDOWS\system32\netcfg-176390.txt 2014-02-06 17:58 - 2014-02-06 17:58 - 00000161 _____ () C:\WINDOWS\system32\netcfg-178875.txt 2014-02-06 17:58 - 2014-02-06 17:58 - 00000160 _____ () C:\WINDOWS\system32\netcfg-178421.txt 2014-02-06 17:58 - 2014-02-06 17:58 - 00000160 _____ () C:\WINDOWS\system32\netcfg-177500.txt 2014-02-06 17:58 - 2014-02-06 17:58 - 00000160 _____ () C:\WINDOWS\system32\netcfg-175843.txt 2014-02-06 17:58 - 2014-02-06 17:58 - 00000159 _____ () C:\WINDOWS\system32\netcfg-177062.txt 2014-02-06 17:58 - 2014-02-06 17:58 - 00000157 _____ () C:\WINDOWS\system32\netcfg-177890.txt 2014-02-06 17:58 - 2014-02-06 17:58 - 00000157 _____ () C:\WINDOWS\system32\netcfg-169515.txt 2014-02-06 17:58 - 2014-02-06 17:58 - 00000150 _____ () C:\WINDOWS\system32\netcfg-176750.txt 2014-01-30 21:47 - 2013-08-22 16:38 - 00693240 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe 2014-01-30 21:47 - 2013-08-22 16:38 - 00105464 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl 2014-01-19 08:33 - 2014-02-06 22:24 - 00270496 _____ (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\rpcss.dll => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2014-02-07 11:19 ==================== End Of Log ============================ --- --- --- --- --- --- FRST Additions Logfile: Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 09-02-2014 02 Ran by STS at 2014-02-09 17:40:34 Running from C:\Users\STS\Desktop Boot Mode: Normal ========================================================== ==================== Security Center ======================== AV: Kaspersky Internet Security (Enabled - Up to date) {179979E8-273D-D14E-0543-2861940E4886} AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: Kaspersky Internet Security (Enabled - Up to date) {ACF8980C-0107-DEC0-3FF3-1313EF89023B} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} FW: Kaspersky Internet Security (Enabled) {2FA2F8CD-6D52-D016-2E1C-81546ADD0FFD} ==================== Installed Programs ====================== Intel(R) Processor Graphics (x32 Version: 10.18.10.3379 - Intel Corporation) Kaspersky Internet Security (x32 Version: 14.0.0.4651 - Kaspersky Lab) Kaspersky Internet Security (x32 Version: 14.0.0.4651 - Kaspersky Lab) Hidden Malwarebytes Anti-Malware Version 1.75.0.1300 (x32 Version: 1.75.0.1300 - Malwarebytes Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161 - Microsoft Corporation) Mozilla Firefox 27.0 (x86 de) (x32 Version: 27.0 - Mozilla) Mozilla Maintenance Service (x32 Version: 24.3.0 - Mozilla) Mozilla Thunderbird 24.3.0 (x86 de) (x32 Version: 24.3.0 - Mozilla) MyPhoneExplorer (x32 Version: 1.8.5 - F.J. Wechselberger) MyPublicWiFi 5.1 (x32 Version: - TRUE Software) NVIDIA 3D Vision Treiber 331.65 (Version: 331.65 - NVIDIA Corporation) NVIDIA Grafiktreiber 331.65 (Version: 331.65 - NVIDIA Corporation) NVIDIA Install Application (Version: 2.1002.133.889 - NVIDIA Corporation) Hidden NVIDIA Optimus 1.15.2 (Version: 1.15.2 - NVIDIA Corporation) Hidden NVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.13.3165 - NVIDIA Corporation) Hidden NVIDIA Systemsteuerung 331.65 (Version: 331.65 - NVIDIA Corporation) Hidden NVIDIA Update 1.15.2 (Version: 1.15.2 - NVIDIA Corporation) NVIDIA Update Components (Version: 1.15.2 - NVIDIA Corporation) Hidden OpenOffice 4.0.1 (x32 Version: 4.01.9714 - Apache Software Foundation) ==================== Restore Points ========================= 07-02-2014 13:54:17 Installed Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 ==================== Hosts content: ========================== 2013-08-22 14:25 - 2013-08-22 14:25 - 00000824 ____A C:\WINDOWS\system32\Drivers\etc\hosts ==================== Scheduled Tasks (whitelisted) ============= Task: {05293577-D647-4185-B859-C94839A0B2E3} - System32\Tasks\Microsoft\Windows\SettingSync\NetworkStateChangeTask Task: {0B545118-B563-42FC-8D07-B78F602FCF34} - System32\Tasks\Microsoft\Windows\WS\WSRefreshBannedAppsListTask => Rundll32.exe WSClient.dll,RefreshBannedAppsList Task: {2085BF56-520D-4951-B7C0-DF34AF90CC6A} - System32\Tasks\Microsoft\Windows\Sysmain\WsSwapAssessmentTask => Rundll32.exe sysmain.dll,PfSvWsSwapAssessmentTask Task: {2C9C0C6C-2A74-46F2-858A-4389D253EAD0} - System32\Tasks\Microsoft\Windows\Sysmain\HybridDriveCachePrepopulate Task: {352E6CA0-7314-4DF4-89C4-682368D80D57} - System32\Tasks\Microsoft\Windows\Workplace Join\Automatic-Workplace-Join => C:\Windows\System32\AutoWorkplace.exe [2013-08-22] (Microsoft Corporation) Task: {3B6D8A73-F20B-4C93-B8FB-56A154F172D2} - System32\Tasks\Microsoft\Windows\Time Zone\SynchronizeTimeZone => C:\Windows\system32\tzsync.exe [2013-08-22] (Microsoft Corporation) Task: {49754026-21E1-41FC-94FD-727AFE414FE7} - System32\Tasks\Microsoft\Windows\Sysmain\HybridDriveCacheRebalance Task: {6AA91E8C-DDBD-4979-8464-4062F7681A19} - System32\Tasks\Microsoft\Windows\Plug and Play\Plug and Play Cleanup Task: {6DFCB649-0769-4F83-BB10-F60F235F6D3D} - System32\Tasks\Microsoft\Windows\SkyDrive\Idle Sync Maintenance Task Task: {73B1B253-CE67-4501-AE1A-377DD1D68B65} - System32\Tasks\Microsoft\Windows\Application Experience\StartupAppTask => Rundll32.exe Startupscan.dll,SusRunTask Task: {77F1D869-6E65-4079-A2A0-E2023408EF97} - System32\Tasks\Microsoft\Windows\ApplicationData\CleanupTemporaryState => Rundll32.exe Windows.Storage.ApplicationData.dll,CleanupTemporaryState Task: {872D0E53-FD2E-41E3-B431-698AF82882CE} - System32\Tasks\Microsoft\Windows\SkyDrive\Routine Maintenance Task Task: {8CC813C9-712A-41EF-9512-B233444FC669} - System32\Tasks\Microsoft\Windows\AppxDeploymentClient\Pre-staged app cleanup => Rundll32.exe %windir%\system32\AppxDeploymentClient.dll,AppxPreStageCleanupRunTask Task: {9FF4C139-5234-410C-B7FA-23EE2FD2AB53} - System32\Tasks\Microsoft\Windows\Work Folders\Work Folders Maintenance Work Task: {CFD7C21A-808B-487B-A6EC-8A10E44E8360} - System32\Tasks\Microsoft\Windows\SettingSync\BackupTask Task: {D88FEC9E-A82A-46F9-87E2-B6B97B301C1A} - System32\Tasks\Microsoft\Windows\WS\License Validation => Rundll32.exe WSClient.dll,WSpTLR licensing Task: {DA46820F-FF8A-4B5E-A6B2-B12185DCFFFB} - System32\Tasks\Microsoft\Windows\Work Folders\Work Folders Logon Synchronization Task: {E6D378FA-E068-4BCB-80DE-56D43A249507} - System32\Tasks\Microsoft\Windows\RecoveryEnvironment\VerifyWinRE ==================== Loaded Modules (whitelisted) ============= 2013-12-21 00:02 - 2013-12-21 00:02 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll 2013-06-17 12:35 - 2013-06-17 12:35 - 00478400 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\dblite.dll 2013-10-27 09:03 - 2013-10-27 09:03 - 00013088 _____ () C:\Program Files (x86)\NVIDIA Corporation\CoProcManager\detoured.dll 2014-02-06 23:57 - 2014-01-28 07:54 - 03583600 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll ==================== Alternate Data Streams (whitelisted) ========= ==================== Safe Mode (whitelisted) =================== ==================== Faulty Device Manager Devices ============= Name: Officejet Pro K550 Description: Officejet Pro K550 Class Guid: {4d36e971-e325-11ce-bfc1-08002be10318} Manufacturer: HP Service: Problem: : This device is disabled. (Code 22) Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions. ==================== Event log errors: ========================= Application errors: ================== System errors: ============= Error: (02/09/2014 00:09:44 PM) (Source: DCOM) (User: Arbeit) Description: {1B1F472E-3221-4826-97DB-2C2324D389AE} Error: (02/09/2014 00:09:14 PM) (Source: DCOM) (User: Arbeit) Description: {BF6C1E47-86EC-4194-9CE5-13C15DCB2001} Error: (02/08/2014 04:23:17 AM) (Source: DCOM) (User: Arbeit) Description: {1B1F472E-3221-4826-97DB-2C2324D389AE} Error: (02/08/2014 04:22:47 AM) (Source: DCOM) (User: Arbeit) Description: {BF6C1E47-86EC-4194-9CE5-13C15DCB2001} Error: (02/08/2014 01:09:56 AM) (Source: Service Control Manager) (User: ) Description: Der Dienst "MyPublicWiFi Service" wurde aufgrund folgenden Fehlers nicht gestartet: %%2 Error: (02/08/2014 00:51:06 AM) (Source: EventLog) (User: ) Description: Das System wurde zuvor am 08.02.2014 um 00:33:37 unerwartet heruntergefahren. Error: (02/07/2014 03:45:32 PM) (Source: DCOM) (User: Arbeit) Description: {9BA05972-F6A8-11CF-A442-00A0C90A8F39} Error: (02/07/2014 02:17:36 PM) (Source: Service Control Manager) (User: ) Description: Der Aufruf "ScRegSetValueExW" ist für "FailureActions" aufgrund folgenden Fehlers fehlgeschlagen: %%5 Error: (02/07/2014 11:39:52 AM) (Source: NETLOGON) (User: ) Description: Dieser Computer ist als Mitglied einer Arbeitsgruppe konfiguriert, nicht als Mitglied einer Domäne. Der Anmeldedienst braucht bei dieser Konfiguration nicht gestartet zu sein. Error: (02/07/2014 11:39:21 AM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Computerbrowser" ist vom Dienst "Arbeitsstationsdienst" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%1058 Microsoft Office Sessions: ========================= ==================== Memory info =========================== Percentage of memory in use: 42% Total physical RAM: 3977.04 MB Available physical RAM: 2277.74 MB Total Pagefile: 5385.04 MB Available Pagefile: 3449.04 MB Total Virtual: 131072 MB Available Virtual: 131071.84 MB ==================== Drives ================================ Drive c: (Boot) (Fixed) (Total:869.46 GB) (Free:846.02 GB) NTFS Drive d: (Recover) (Fixed) (Total:60 GB) (Free:38.53 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (Size: 932 GB) (Disk ID: 00000000) Partition: GPT Partition Type ==================== End Of Log ============================ |
10.02.2014, 10:26 | #20 |
Ruhe in Frieden † 2019 | Malware? regleaner pro und search protect Hallo zwirn, Mehrere Anti-Virus-Programme Code:
ATTFilter Windows Defender Kaspersky >OK< So wie ich es sehe, haben wir damit alles Schadhafte entfernt. Deine Logs sind sauber. Abschließend räumen wir noch etwas auf und dann bekommst du noch etwas Lesestoff von mir. Schritt 1 Falls Du Malwarebytes-Antimalware nicht mehr benötigst, kannst Du es einfach über die Programmdeinstallation deinstallieren. Ich empfehle Dir aber Malwarebytes zu behalten, und damit einmal die Woche einen Kontrollscan zu machen. Schritt 2 Downloade dir bitte delfix auf deinen Desktop.
Nun zum Schluss noch ein paar Tipps zur Absicherung deines Systems. Aktualität des Systems Es ist extrem wichtig, dass sowohl dein System als auch die darauf installierte sicherheitsrelevante Software (Flash Player, PDF-Reader und besonders Java, sofern vorhanden) aktuell sind.
Antivirensoftware
Zusätzlicher Schutz
Alternative Browser Andere Browser tendieren zu etwas mehr Sicherheit als der Internet Explorer, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden.
Systemleistung Lösche regelmäßig deine temporären Dateien. Ich empfehle hierzu TFC Halte dich fern von jeglichen Registry Cleanern. Diese schaden deinem System mehr als dass sie es schneller machen. Verhaltensregeln zum sichereren Surfen
Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so das ich diesen Thread aus meinen Abos löschen kann. Falls Du Lob oder Kritik abgeben möchtest, kannst Du das sehr gerne hier tun. Wenn Du etwas für das Forum und unsere Arbeit spenden möchtest, so kannst Du das hier tun. |
10.02.2014, 11:14 | #21 |
| Malware? regleaner pro und search protect Hallo Sandra, erstmal herzlichen Dank soweit!!! Unter Win8.1 und Programme deinstallieren taucht der Defender nicht auf. Wenn ich unter Suche Defender eingebe und dann das Defender-Icon anklicke bekomme ich die Meldung: App wurde deaktiviert. Sonst passiert da nix?? LG Zwirn |
10.02.2014, 12:23 | #23 |
| Malware? regleaner pro und search protect Ich denke das wars für den Moment. Herzlichen und lieben Dank für die Hilfe!!!!!!!! Liebe Grüße Zwirn |
Themen zu Malware? regleaner pro und search protect |
falsch, illegale, kaspersky, langsam, laptop, malware, malware?, medion, neues, office, programme, protect, regcleaner, regcleaner pro, search, search protect, seite, seiten, software, troja, trojanerboard, update, win, win 8.1 |