|
Log-Analyse und Auswertung: Ich kann es nicht beschreiben!aber ich weiss es ist was da (evtl. Rootkit, Shadow,Manipulation,Spionage)Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
28.02.2014, 00:38 | #1 |
| Ich kann es nicht beschreiben!aber ich weiss es ist was da (evtl. Rootkit, Shadow,Manipulation,Spionage) Hallo nettes Trojaner - Board - Team, ich hoffe Ihr könnt mir helfen, weil das Problem habe ich seit Weihnachten nicht im Griff bekommen ich probiere mal zu erläutern: Ich habe was auf dem Rechner!was sich nicht entfernen läßt trotzt: Formation/WriteZero/NeuInstallation/Windows usw.. wie komme ich drauf???also habe Daten durchforstet auf meinen Rechner die zb. heisen: Windows Schadow,Remote/virtuell/Visuell C++2005 ($) ,Script usw... zudem meine Vermutung!!Daten auf Platte die sich nicht entfernen lassen wollen!!! Problem an der ganzen Sache, ich habe keine Rechte(Admin) trotze Befehle wie (c:\net User Admin..) zudem wurde der Router manipuliert, sowie alle erdenkliche Software wie /Windows/Viren und Treiber!!) Ich bin Rat und Sprachlos!!! hier aktuelle Log: GMER 2.1.19357 - hxxp://www.gmer.net Rootkit scan 2014-02-28 00:14:07 Windows 6.1.7601 Service Pack 1 x64 \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-0 WDC_WD5000LPVT-22G33T0 rev.01.01A01 465,76GB Running: Gmer-19357.exe; Driver: C:\Users\ADMINI~1.SVE\AppData\Local\Temp\kxldypog.sys ---- Kernel code sections - GMER 2.1 ---- INITKDBG C:\Windows\system32\ntoskrnl.exe!ExDeleteNPagedLookasideList + 528 fffff80002e02000 45 bytes [00, 00, 16, 02, 4E, 74, 66, ...] INITKDBG C:\Windows\system32\ntoskrnl.exe!ExDeleteNPagedLookasideList + 575 fffff80002e0202f 29 bytes [00, 01, 00, 06, 00, 00, 00, ...] ---- User code sections - GMER 2.1 ---- .text C:\Program Files (x86)\G Data\InternetSecurity\Firewall\GDFirewallTray.exe[2072] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69 0000000075411465 2 bytes [41, 75] .text C:\Program Files (x86)\G Data\InternetSecurity\Firewall\GDFirewallTray.exe[2072] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155 00000000754114bb 2 bytes [41, 75] .text ... * 2 .text C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe[1892] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69 0000000075411465 2 bytes [41, 75] .text C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe[1892] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155 00000000754114bb 2 bytes [41, 75] .text ... * 2 ---- Threads - GMER 2.1 ---- Thread C:\Program Files\Windows Media Player\wmpnetwk.exe [4692:1888] 000007fefbdd2a7c Thread C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2004:1676] 0000000075427587 Thread C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2004:5012] 00000000636a758a Thread C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2004:524] 00000000779b2e65 Thread C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2004:5716] 00000000779b3e85 Thread C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2004:5148] 00000000779b3e85 Thread C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2004:4256] 00000000779b3e85 ---- Registry - GMER 2.1 ---- Reg HKLM\SYSTEM\CurrentControlSet\Control\Session Manager@PendingFileRenameOperations ????s_??????????????????.i??????? ??????????????r???????????????????????????0???? ???????????????????????????????????????????????????? ????????????t????????????????????????????????????????? D??/????????????????\???????????????s?????kerberos?msv1_0?schannel?wdigest?tspkg?pku2u?????????????????????????s?????????/???????????/?/????,??:???i?????evi???????,??? ????????????????????????????????,??????????r??? ??????????????????????????????D????????r????"??????k??????n???? ??????????????????????????????D???????r???? D??+??????????r???fvevol?rdyboost??t????N??????S?????eoo??@%SystemRoot%\system32\wiaservc.dll,-9?tem???+?+?+???????????????????????????????????????m????????????????????????s?????credssp.dll?????? ?????????????????????????????????????????????????????t???(??????P???????W????????????????????? ??????????? ???????P???????W???????P???????W???????????????????4???????????????????????????????? ??????????????????????????????????????????????????????????????????4?? ?????????? ????\???????????????????? ?????????????? Reg HKLM\SYSTEM\CurrentControlSet\Control\Winlogon\Notifications\Components\TrustedInstaller@Events Reg HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Parameters\Keys\74e5431ddf8f Reg HKLM\SYSTEM\CurrentControlSet\services\mbamchameleon@Type 2 Reg HKLM\SYSTEM\CurrentControlSet\services\mbamchameleon@Start 3 Reg HKLM\SYSTEM\CurrentControlSet\services\mbamchameleon@ErrorControl 1 Reg HKLM\SYSTEM\CurrentControlSet\services\mbamchameleon@Tag 3 Reg HKLM\SYSTEM\CurrentControlSet\services\mbamchameleon@ImagePath \??\C:\Windows\system32\drivers\mbamchameleon.sys Reg HKLM\SYSTEM\CurrentControlSet\services\mbamchameleon@DisplayName mbamchameleon Reg HKLM\SYSTEM\CurrentControlSet\services\mbamchameleon@Group FSFilter Activity Monitor Reg HKLM\SYSTEM\CurrentControlSet\services\mbamchameleon@WOW64 1 Reg HKLM\SYSTEM\CurrentControlSet\services\mbamchameleon@Protected C:\Program Files (x86)\Malwarebytes' Anti-Malware\Chameleon\ Reg HKLM\SYSTEM\CurrentControlSet\services\mbamchameleon\Instances Reg HKLM\SYSTEM\CurrentControlSet\services\mbamchameleon\Instances@DefaultInstance mbamchameleon Instance Reg HKLM\SYSTEM\CurrentControlSet\services\mbamchameleon\Instances\mbamchameleon Instance Reg HKLM\SYSTEM\CurrentControlSet\services\mbamchameleon\Instances\mbamchameleon Instance@Altitude 400900 Reg HKLM\SYSTEM\CurrentControlSet\services\mbamchameleon\Instances\mbamchameleon Instance@Flags 0 Reg HKLM\SYSTEM\CurrentControlSet\services\mbamchameleon Reg HKLM\SYSTEM\CurrentControlSet\services\MBAMProtector@Type 2 Reg HKLM\SYSTEM\CurrentControlSet\services\MBAMProtector@Start 3 Reg HKLM\SYSTEM\CurrentControlSet\services\MBAMProtector@ErrorControl 1 Reg HKLM\SYSTEM\CurrentControlSet\services\MBAMProtector@ImagePath \??\C:\Windows\system32\drivers\mbam.sys Reg HKLM\SYSTEM\CurrentControlSet\services\MBAMProtector@Group FSFilter Anti-Virus Reg HKLM\SYSTEM\CurrentControlSet\services\MBAMProtector@DependOnService FltMgr? Reg HKLM\SYSTEM\CurrentControlSet\services\MBAMProtector@WOW64 1 Reg HKLM\SYSTEM\CurrentControlSet\services\MBAMProtector\Instances Reg HKLM\SYSTEM\CurrentControlSet\services\MBAMProtector\Instances@DefaultInstance MBAMProtector Instance Reg HKLM\SYSTEM\CurrentControlSet\services\MBAMProtector\Instances\MBAMProtector Instance Reg HKLM\SYSTEM\CurrentControlSet\services\MBAMProtector\Instances\MBAMProtector Instance@Altitude 328800 Reg HKLM\SYSTEM\CurrentControlSet\services\MBAMProtector\Instances\MBAMProtector Instance@Flags 0 Reg HKLM\SYSTEM\CurrentControlSet\services\MBAMProtector Reg HKLM\SYSTEM\CurrentControlSet\services\MBAMScheduler@Type 16 Reg HKLM\SYSTEM\CurrentControlSet\services\MBAMScheduler@Start 2 Reg HKLM\SYSTEM\CurrentControlSet\services\MBAMScheduler@ErrorControl 1 Reg HKLM\SYSTEM\CurrentControlSet\services\MBAMScheduler@ImagePath "C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe" Reg HKLM\SYSTEM\CurrentControlSet\services\MBAMScheduler@WOW64 1 Reg HKLM\SYSTEM\CurrentControlSet\services\MBAMScheduler@ObjectName LocalSystem Reg HKLM\SYSTEM\CurrentControlSet\services\MBAMScheduler@Description Malwarebytes Anti-Malware scheduler Reg HKLM\SYSTEM\CurrentControlSet\services\MBAMScheduler Reg HKLM\SYSTEM\CurrentControlSet\services\MBAMService@Type 16 Reg HKLM\SYSTEM\CurrentControlSet\services\MBAMService@Start 2 Reg HKLM\SYSTEM\CurrentControlSet\services\MBAMService@ErrorControl 1 Reg HKLM\SYSTEM\CurrentControlSet\services\MBAMService@ImagePath "C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe" Reg HKLM\SYSTEM\CurrentControlSet\services\MBAMService@DependOnService MBAMProtector? Reg HKLM\SYSTEM\CurrentControlSet\services\MBAMService@WOW64 1 Reg HKLM\SYSTEM\CurrentControlSet\services\MBAMService@ObjectName LocalSystem Reg HKLM\SYSTEM\CurrentControlSet\services\MBAMService@Description Malwarebytes Anti-Malware service Reg HKLM\SYSTEM\CurrentControlSet\services\MBAMService@DelayedAutostart 0 Reg HKLM\SYSTEM\CurrentControlSet\services\MBAMService Reg HKLM\SYSTEM\CurrentControlSet\services\TrustedInstaller@Start 3 Reg HKLM\SYSTEM\CurrentControlSet\services\TrustedInstaller Reg HKLM\SYSTEM\ControlSet002\services\BTHPORT\Parameters\Keys\74e5431ddf8f (not active ControlSet) ---- EOF - GMER 2.1 ---- bitte um Hilfe!!! |
28.02.2014, 07:57 | #2 |
/// the machine /// TB-Ausbilder | Ich kann es nicht beschreiben!aber ich weiss es ist was da (evtl. Rootkit, Shadow,Manipulation,Spionage) hi,
__________________Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST 32-Bit | FRST 64-Bit (Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
__________________ |
02.03.2014, 01:36 | #3 |
| Ich kann es nicht beschreiben!aber ich weiss es ist was da (evtl. Rootkit, Shadow,Manipulation,Spionage) Wow Dankeschön für Deine Mühe...also:
__________________FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 01-03-2014 Ran by Devil (administrator) on WOHNUNG on 04-01-2014 01:08:19 Running from C:\Users\Devil\Downloads Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard Internet Explorer Version 9 Boot Mode: Normal The only official download link for FRST: Download link for 32-Bit version: Downloading Farbar Recovery Scan Tool Download link for 64-Bit Version: Downloading Farbar Recovery Scan Tool Download link from any site other than Bleeping Computer is unpermitted or outdated. See tutorial for FRST: FRST Tutorial - How to use Farbar Recovery Scan Tool - Geeks to Go Forums ==================== Processes (Whitelisted) ================= (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe (Microsoft Corporation) C:\Windows\system32\WLANExt.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\dsiwmis.exe (Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LMutilps32.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe (Symantec Corporation) C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe (Intel Corporation) C:\Windows\System32\igfxtray.exe (Intel Corporation) C:\Windows\System32\hkcmd.exe (Intel Corporation) C:\Windows\System32\igfxpers.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (Atheros Communications) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe (Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (Intel Corporation) C:\Windows\system32\igfxext.exe (Intel Corporation) C:\Windows\system32\igfxsrvc.exe (Synaptics Incorporated) C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE (Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerEvent.exe (CyberLink) C:\Program Files (x86)\Cyberlink\MediaEspresso\DeviceDetector\DeviceDetector.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe () C:\Program Files\Acer\Acer Instant Service\InstantUpdate\iuBrowserIEAgent.exe () C:\Program Files\Acer\Acer Instant Service\InstantUpdate\iuEmailOutlookAgent.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12452456 2012-02-22] (Realtek Semiconductor) HKLM\...\Run: [RtHDVBg_Dolby] - C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1158248 2012-02-08] (Realtek Semiconductor) HKLM\...\Run: [AtherosBtStack] - C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [1021056 2012-03-08] (Atheros Communications) HKLM\...\Run: [AthBtTray] - C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe [800896 2012-03-08] (Atheros Commnucations) HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2886416 2012-03-02] (Synaptics Incorporated) HKLM\...\Run: [Power Management] - C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe [1829768 2012-02-07] (Acer Incorporated) HKLM\...\Run: [InstantUpdate] - C:\Program Files\Acer\Acer Instant Service\InstantUpdate\iuDaemon.exe [124520 2012-04-06] () HKLM-x32\...\Run: [AvastUI.exe] - C:\Program Files\AVAST Software\Avast\AvastUI.exe [3568312 2014-01-03] (AVAST Software) HKLM-x32\...\Runonce: [GrpConv] - grpconv -o [X] Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation) HKU\S-1-5-21-3296752609-3879483925-2616702320-1001\...\Run: [HijackThis startup scan] - C:\Users\Devil\Desktop\HijackThis.exe /startupscan HKU\S-1-5-21-3296752609-3879483925-2616702320-1001\...\MountPoints2: E - E:\pcwstart.exe AppInit_DLLs: C:\Windows\system32\nvinitx.dll => C:\Windows\system32\nvinitx.dll [260928 2012-03-05] (NVIDIA Corporation) IFEO\taskmgr.exe: [Debugger] "C:\Program Files\Process Hacker 2\ProcessHacker.exe" Startup: C:\Users\Devil\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\_uninst_75627215.lnk ShortcutTarget: _uninst_75627215.lnk -> C:\Users\Devil\AppData\Local\Temp\_uninst_75627215.bat () ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = MSN Deutschland: Aktuelle Nachrichten, Outlook.com Email und Skype Login. HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN Deutschland: Aktuelle Nachrichten, Outlook.com Email und Skype Login. HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = MSN Deutschland: Aktuelle Nachrichten, Outlook.com Email und Skype Login. HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = MSN Deutschland: Aktuelle Nachrichten, Outlook.com Email und Skype Login. StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe SearchScopes: HKCU - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = BHO: avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software) BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software) Tcpip\Parameters: [DhcpNameServer] 192.168.0.1 FireFox: ======== FF ProfilePath: C:\Users\Devil\AppData\Roaming\Mozilla\Firefox\Profiles\h477be72.default FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.0.59 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\4.0.50401.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 - C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll () FF Plugin-x32: Adobe Reader - c:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml ==================== Services (Whitelisted) ================= R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-01-03] (AVAST Software) S4 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [127320 2012-03-16] () R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [162648 2012-03-16] (Intel Corporation) R2 NOBU; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [2804568 2010-06-01] (Symantec Corporation) S4 NTI IScheduleSvc; C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe [256536 2012-01-05] (NTI Corporation) S4 ZAtheros Wlan Agent; C:\Program Files (x86)\Atheros\Ath_WlanAgent.exe [76960 2012-02-27] (Atheros) ==================== Drivers (Whitelisted) ==================== R1 A2DDA; C:\EEK\RUN\a2ddax64.sys [26176 2013-09-24] (Emsisoft GmbH) R2 aswFsBlk; C:\Windows\system32\drivers\aswFsBlk.sys [38984 2014-01-03] (AVAST Software) R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [84328 2014-01-03] (AVAST Software) R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [92544 2014-01-03] (AVAST Software) R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2014-01-03] () R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1032416 2014-01-03] (AVAST Software) R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [409832 2014-01-03] (AVAST Software) R1 aswTdi; C:\Windows\system32\drivers\aswTdi.sys [65264 2014-01-03] (AVAST Software) R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [205320 2014-01-03] () S3 cleanhlp; C:\EEK\Run\cleanhlp64.sys [57024 2013-09-24] (Emsisoft GmbH) R1 KProcessHacker2; C:\Program Files\Process Hacker 2\kprocesshacker.sys [40088 2013-10-30] (wj32) ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-01-04 06:21 - 2014-01-04 06:20 - 00295922 _____ () C:\Windows\system32\perfi007.dat 2014-01-04 06:21 - 2014-01-04 06:20 - 00038104 _____ () C:\Windows\system32\perfd007.dat 2014-01-04 06:21 - 2014-01-04 00:26 - 00643866 _____ () C:\Windows\system32\perfh007.dat 2014-01-04 06:21 - 2014-01-04 00:26 - 00126394 _____ () C:\Windows\system32\perfc007.dat 2014-01-04 06:20 - 2014-01-04 06:20 - 00000000 ____D () C:\Windows\SysWOW64\XPSViewer 2014-01-04 06:20 - 2014-01-04 06:20 - 00000000 ____D () C:\Windows\SysWOW64\de 2014-01-04 06:20 - 2014-01-04 06:20 - 00000000 ____D () C:\Windows\SysWOW64\0407 2014-01-04 06:20 - 2014-01-04 06:20 - 00000000 ____D () C:\Windows\system32\de 2014-01-04 06:20 - 2014-01-04 06:20 - 00000000 ____D () C:\Windows\system32\0407 2014-01-04 06:14 - 2014-01-04 06:14 - 00000000 ____D () C:\Windows\NAPP_Dism_Log 2014-01-04 06:14 - 2014-01-03 22:05 - 00001964 _____ () C:\Windows\Patch.log 2014-01-04 06:13 - 2014-01-04 06:14 - 00005845 _____ () C:\Windows\WisGAPas.log 2014-01-04 06:13 - 2014-01-04 06:13 - 17790464 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-01-04 06:13 - 2014-01-04 06:13 - 12282368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2014-01-04 06:13 - 2014-01-04 06:13 - 10887168 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2014-01-04 06:13 - 2014-01-04 06:13 - 09705472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2014-01-04 06:13 - 2014-01-04 06:13 - 02382848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2014-01-04 06:13 - 2014-01-04 06:13 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-01-04 06:13 - 2014-01-04 06:13 - 02308096 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2014-01-04 06:13 - 2014-01-04 06:13 - 02144256 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2014-01-04 06:13 - 2014-01-04 06:13 - 01798656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2014-01-04 06:13 - 2014-01-04 06:13 - 01792000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2014-01-04 06:13 - 2014-01-04 06:13 - 01493504 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2014-01-04 06:13 - 2014-01-04 06:13 - 01427456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2014-01-04 06:13 - 2014-01-04 06:13 - 01390080 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2014-01-04 06:13 - 2014-01-04 06:13 - 01345536 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2014-01-04 06:13 - 2014-01-04 06:13 - 01127424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2014-01-04 06:13 - 2014-01-04 06:13 - 01103360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2014-01-04 06:13 - 2014-01-04 06:13 - 00818688 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2014-01-04 06:13 - 2014-01-04 06:13 - 00716800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2014-01-04 06:13 - 2014-01-04 06:13 - 00248320 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2014-01-04 06:13 - 2014-01-04 06:13 - 00237056 _____ (Microsoft Corporation) C:\Windows\system32\url.dll 2014-01-04 06:13 - 2014-01-04 06:13 - 00231936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll 2014-01-04 06:13 - 2014-01-04 06:13 - 00176640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2014-01-04 06:13 - 2014-01-04 06:13 - 00096256 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2014-01-04 06:13 - 2014-01-04 06:13 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2014-01-04 06:13 - 2014-01-04 06:13 - 00072704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2014-01-04 06:13 - 2014-01-04 06:13 - 00065024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2014-01-04 06:13 - 2014-01-04 06:13 - 00000918 _____ () C:\Windows\MOD01SET74DE0N0005.XML 2014-01-04 06:13 - 2014-01-03 22:11 - 00000267 _____ () C:\Windows\LaunApp.ini 2014-01-04 06:09 - 2014-01-04 06:09 - 03695416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat 2014-01-04 06:09 - 2014-01-04 06:09 - 03695416 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat 2014-01-04 06:09 - 2014-01-04 06:09 - 00697344 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2014-01-04 06:09 - 2014-01-04 06:09 - 00603648 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2014-01-04 06:09 - 2014-01-04 06:09 - 00580608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2014-01-04 06:09 - 2014-01-04 06:09 - 00534528 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2014-01-04 06:09 - 2014-01-04 06:09 - 00452608 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2014-01-04 06:09 - 2014-01-04 06:09 - 00448512 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2014-01-04 06:09 - 2014-01-04 06:09 - 00434176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2014-01-04 06:09 - 2014-01-04 06:09 - 00420864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2014-01-04 06:09 - 2014-01-04 06:09 - 00403248 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2014-01-04 06:09 - 2014-01-04 06:09 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec 2014-01-04 06:09 - 2014-01-04 06:09 - 00353792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2014-01-04 06:09 - 2014-01-04 06:09 - 00353584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2014-01-04 06:09 - 2014-01-04 06:09 - 00282112 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2014-01-04 06:09 - 2014-01-04 06:09 - 00267776 _____ (Microsoft Corporation) C:\Windows\system32\ieaksie.dll 2014-01-04 06:09 - 2014-01-04 06:09 - 00249344 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll 2014-01-04 06:09 - 2014-01-04 06:09 - 00227840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieaksie.dll 2014-01-04 06:09 - 2014-01-04 06:09 - 00223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2014-01-04 06:09 - 2014-01-04 06:09 - 00222208 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll 2014-01-04 06:09 - 2014-01-04 06:09 - 00203776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll 2014-01-04 06:09 - 2014-01-04 06:09 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2014-01-04 06:09 - 2014-01-04 06:09 - 00173056 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2014-01-04 06:09 - 2014-01-04 06:09 - 00165888 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe 2014-01-04 06:09 - 2014-01-04 06:09 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieakui.dll 2014-01-04 06:09 - 2014-01-04 06:09 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\ieakui.dll 2014-01-04 06:09 - 2014-01-04 06:09 - 00162304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2014-01-04 06:09 - 2014-01-04 06:09 - 00161792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll 2014-01-04 06:09 - 2014-01-04 06:09 - 00160256 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe 2014-01-04 06:09 - 2014-01-04 06:09 - 00160256 _____ (Microsoft Corporation) C:\Windows\system32\ieakeng.dll 2014-01-04 06:09 - 2014-01-04 06:09 - 00152064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe 2014-01-04 06:09 - 2014-01-04 06:09 - 00150528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe 2014-01-04 06:09 - 2014-01-04 06:09 - 00149504 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll 2014-01-04 06:09 - 2014-01-04 06:09 - 00145920 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll 2014-01-04 06:09 - 2014-01-04 06:09 - 00142848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2014-01-04 06:09 - 2014-01-04 06:09 - 00135168 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll 2014-01-04 06:09 - 2014-01-04 06:09 - 00130560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieakeng.dll 2014-01-04 06:09 - 2014-01-04 06:09 - 00123392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll 2014-01-04 06:09 - 2014-01-04 06:09 - 00118784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll 2014-01-04 06:09 - 2014-01-04 06:09 - 00114176 _____ (Microsoft Corporation) C:\Windows\system32\admparse.dll 2014-01-04 06:09 - 2014-01-04 06:09 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2014-01-04 06:09 - 2014-01-04 06:09 - 00110592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll 2014-01-04 06:09 - 2014-01-04 06:09 - 00103936 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll 2014-01-04 06:09 - 2014-01-04 06:09 - 00101888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\admparse.dll 2014-01-04 06:09 - 2014-01-04 06:09 - 00091648 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe 2014-01-04 06:09 - 2014-01-04 06:09 - 00089088 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe 2014-01-04 06:09 - 2014-01-04 06:09 - 00089088 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2014-01-04 06:09 - 2014-01-04 06:09 - 00086528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2014-01-04 06:09 - 2014-01-04 06:09 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2014-01-04 06:09 - 2014-01-04 06:09 - 00082432 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll 2014-01-04 06:09 - 2014-01-04 06:09 - 00078848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll 2014-01-04 06:09 - 2014-01-04 06:09 - 00076800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe 2014-01-04 06:09 - 2014-01-04 06:09 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx 2014-01-04 06:09 - 2014-01-04 06:09 - 00074752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe 2014-01-04 06:09 - 2014-01-04 06:09 - 00074752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2014-01-04 06:09 - 2014-01-04 06:09 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ie4uinit.exe 2014-01-04 06:09 - 2014-01-04 06:09 - 00066048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll 2014-01-04 06:09 - 2014-01-04 06:09 - 00065024 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll 2014-01-04 06:09 - 2014-01-04 06:09 - 00063488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx 2014-01-04 06:09 - 2014-01-04 06:09 - 00055296 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll 2014-01-04 06:09 - 2014-01-04 06:09 - 00054272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll 2014-01-04 06:09 - 2014-01-04 06:09 - 00049664 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll 2014-01-04 06:09 - 2014-01-04 06:09 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll 2014-01-04 06:09 - 2014-01-04 06:09 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll 2014-01-04 06:09 - 2014-01-04 06:09 - 00041472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll 2014-01-04 06:09 - 2014-01-04 06:09 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2014-01-04 06:09 - 2014-01-04 06:09 - 00035840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll 2014-01-04 06:09 - 2014-01-04 06:09 - 00031744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2014-01-04 06:09 - 2014-01-04 06:09 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll 2014-01-04 06:09 - 2014-01-04 06:09 - 00023552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll 2014-01-04 06:09 - 2014-01-04 06:09 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe 2014-01-04 06:09 - 2014-01-04 06:09 - 00011776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe 2014-01-04 06:09 - 2014-01-04 06:09 - 00010752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe 2014-01-04 06:09 - 2014-01-04 06:09 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe 2014-01-04 06:09 - 2012-06-14 08:49 - 00001586 __RSH () C:\Patch.rev 2014-01-04 06:09 - 2006-10-19 06:27 - 00000000 _____ () C:\Windows\SysWOW64\Drivers\1025_ACER_Acer_Aspire V5-571G.mrk 2014-01-04 06:09 - 2006-10-19 06:27 - 00000000 _____ () C:\Windows\system32\Drivers\1025_ACER_Acer_Aspire V5-571G.mrk 2014-01-04 06:06 - 2011-05-26 03:55 - 00281680 _____ (Dritek System Inc.) C:\Windows\UNINSTLMv4.EXE 2014-01-04 06:05 - 2012-03-02 02:39 - 00707856 _____ (Synaptics Incorporated) C:\Windows\system32\SynCOM.dll 2014-01-04 06:05 - 2012-03-02 02:39 - 00425232 _____ (Synaptics Incorporated) C:\Windows\system32\Drivers\SynTP.sys 2014-01-04 06:05 - 2012-03-02 02:39 - 00392464 _____ (Synaptics Incorporated) C:\Windows\SysWOW64\SynCOM.dll 2014-01-04 06:05 - 2012-03-02 02:39 - 00280336 _____ (Synaptics Incorporated) C:\Windows\system32\SynCtrl.dll 2014-01-04 06:05 - 2012-03-02 02:39 - 00229648 _____ (Synaptics Incorporated) C:\Windows\system32\SynTPAPI.dll 2014-01-04 06:05 - 2012-03-02 02:39 - 00224528 _____ (Synaptics Incorporated) C:\Windows\SysWOW64\SynCtrl.dll 2014-01-04 06:05 - 2012-03-02 02:39 - 00172304 _____ (Synaptics Incorporated) C:\Windows\system32\SynGlwPadShlExt.dll 2014-01-04 06:05 - 2012-03-02 02:39 - 00150800 _____ (Synaptics Incorporated) C:\Windows\system32\SynTPCo9.dll 2014-01-04 06:05 - 2012-03-02 02:39 - 00113936 _____ (Synaptics Incorporated) C:\Windows\SysWOW64\SynTPCOM.dll 2014-01-04 06:05 - 2012-03-02 02:39 - 00068880 _____ (Synaptics Incorporated) C:\Windows\SysWOW64\SynTPEnhPS.dll 2014-01-04 06:05 - 2011-09-15 04:11 - 01048576 _____ () C:\Windows\system32\syndata.bin 2014-01-04 06:04 - 2012-02-27 12:01 - 00788760 _____ (Intel Corporation) C:\Windows\system32\Drivers\iusb3xhc.sys 2014-01-04 06:04 - 2012-02-27 12:01 - 00356120 _____ (Intel Corporation) C:\Windows\system32\Drivers\iusb3hub.sys 2014-01-04 06:04 - 2012-02-27 12:01 - 00016152 _____ (Intel Corporation) C:\Windows\system32\Drivers\iusb3hcs.sys 2014-01-04 06:04 - 2011-11-11 02:04 - 00060184 _____ (Intel Corporation) C:\Windows\system32\Drivers\HECIx64.sys 2014-01-04 06:04 - 2009-07-14 22:21 - 01721576 _____ (Microsoft Corporation) C:\Windows\system32\WdfCoInstaller01009.dll 2014-01-04 06:03 - 2012-04-23 06:25 - 05888792 _____ (Intel Corporation) C:\Windows\system32\GfxUI.exe 2014-01-04 06:03 - 2012-04-23 06:25 - 00509720 _____ (Intel Corporation) C:\Windows\system32\igfxsrvc.exe 2014-01-04 06:03 - 2012-04-23 06:25 - 00439064 _____ (Intel Corporation) C:\Windows\system32\igfxpers.exe 2014-01-04 06:03 - 2012-04-23 06:25 - 00398616 _____ (Intel Corporation) C:\Windows\system32\hkcmd.exe 2014-01-04 06:03 - 2012-04-23 06:25 - 00276248 _____ (Intel Corporation) C:\Windows\SysWOW64\IntelCpHeciSvc.exe 2014-01-04 06:03 - 2012-04-23 06:25 - 00250136 _____ (Intel Corporation) C:\Windows\system32\igfxext.exe 2014-01-04 06:03 - 2012-04-23 06:25 - 00184600 _____ (Intel Corporation) C:\Windows\system32\difx64.exe 2014-01-04 06:03 - 2012-04-23 06:25 - 00170264 _____ (Intel Corporation) C:\Windows\system32\igfxtray.exe 2014-01-04 06:03 - 2012-03-27 04:42 - 00018656 _____ () C:\Windows\system32\iglhxs64.vp 2014-01-04 06:03 - 2012-03-27 04:25 - 00090112 _____ (Intel Corporation) C:\Windows\system32\igfxCoIn_v2712.dll 2014-01-04 06:03 - 2012-03-27 04:09 - 14748416 _____ (Intel Corporation) C:\Windows\system32\Drivers\igdkmd64.sys 2014-01-04 06:03 - 2012-03-27 04:09 - 08087040 _____ (Intel Corporation) C:\Windows\system32\igdumd64.dll 2014-01-04 06:03 - 2012-03-27 04:08 - 00963912 _____ () C:\Windows\SysWOW64\igkrng600.bin 2014-01-04 06:03 - 2012-03-27 04:08 - 00963912 _____ () C:\Windows\system32\igkrng600.bin 2014-01-04 06:03 - 2012-03-27 04:08 - 00261208 _____ () C:\Windows\SysWOW64\igfcg600m.bin 2014-01-04 06:03 - 2012-03-27 04:08 - 00261208 _____ () C:\Windows\system32\igfcg600m.bin 2014-01-04 06:03 - 2012-03-27 04:08 - 00145804 _____ () C:\Windows\SysWOW64\igcompkrng600.bin 2014-01-04 06:03 - 2012-03-27 04:08 - 00145804 _____ () C:\Windows\system32\igcompkrng600.bin 2014-01-04 06:03 - 2012-03-27 04:08 - 00079360 _____ () C:\Windows\system32\igdde64.dll 2014-01-04 06:03 - 2012-03-27 04:05 - 06121472 _____ (Intel Corporation) C:\Windows\SysWOW64\igdumd32.dll 2014-01-04 06:03 - 2012-03-27 04:03 - 00058880 _____ () C:\Windows\SysWOW64\igdde32.dll 2014-01-04 06:03 - 2012-03-27 03:58 - 09605632 _____ (Intel Corporation) C:\Windows\system32\igd10umd64.dll 2014-01-04 06:03 - 2012-03-27 03:47 - 07795200 _____ (Intel Corporation) C:\Windows\SysWOW64\igd10umd32.dll 2014-01-04 06:03 - 2012-03-27 03:05 - 18137088 _____ () C:\Windows\system32\ig4icd64.dll 2014-01-04 06:03 - 2012-03-27 02:47 - 13212672 _____ () C:\Windows\SysWOW64\ig4icd32.dll 2014-01-04 06:03 - 2012-03-27 02:40 - 00440320 _____ (Intel Corporation) C:\Windows\system32\igfxrell.lrc 2014-01-04 06:03 - 2012-03-27 02:40 - 00439808 _____ (Intel Corporation) C:\Windows\system32\igfxrfra.lrc 2014-01-04 06:03 - 2012-03-27 02:40 - 00439808 _____ (Intel Corporation) C:\Windows\system32\igfxresn.lrc 2014-01-04 06:03 - 2012-03-27 02:40 - 00439296 _____ (Intel Corporation) C:\Windows\system32\igfxrrus.lrc 2014-01-04 06:03 - 2012-03-27 02:40 - 00439296 _____ (Intel Corporation) C:\Windows\system32\igfxrrom.lrc 2014-01-04 06:03 - 2012-03-27 02:40 - 00438784 _____ (Intel Corporation) C:\Windows\system32\igfxrptg.lrc 2014-01-04 06:03 - 2012-03-27 02:40 - 00438784 _____ (Intel Corporation) C:\Windows\system32\igfxrplk.lrc 2014-01-04 06:03 - 2012-03-27 02:40 - 00438784 _____ (Intel Corporation) C:\Windows\system32\igfxrnld.lrc 2014-01-04 06:03 - 2012-03-27 02:40 - 00438784 _____ (Intel Corporation) C:\Windows\system32\igfxrita.lrc 2014-01-04 06:03 - 2012-03-27 02:40 - 00438784 _____ (Intel Corporation) C:\Windows\system32\igfxrhrv.lrc 2014-01-04 06:03 - 2012-03-27 02:40 - 00438784 _____ (Intel Corporation) C:\Windows\system32\igfxrdeu.lrc 2014-01-04 06:03 - 2012-03-27 02:40 - 00438272 _____ (Intel Corporation) C:\Windows\system32\igfxrsky.lrc 2014-01-04 06:03 - 2012-03-27 02:40 - 00438272 _____ (Intel Corporation) C:\Windows\system32\igfxrhun.lrc 2014-01-04 06:03 - 2012-03-27 02:40 - 00438272 _____ (Intel Corporation) C:\Windows\system32\igfxrfin.lrc 2014-01-04 06:03 - 2012-03-27 02:40 - 00438272 _____ (Intel Corporation) C:\Windows\system32\igfxrcsy.lrc 2014-01-04 06:03 - 2012-03-27 02:40 - 00437760 _____ (Intel Corporation) C:\Windows\system32\igfxrtrk.lrc 2014-01-04 06:03 - 2012-03-27 02:40 - 00437760 _____ (Intel Corporation) C:\Windows\system32\igfxrsve.lrc 2014-01-04 06:03 - 2012-03-27 02:40 - 00437760 _____ (Intel Corporation) C:\Windows\system32\igfxrslv.lrc 2014-01-04 06:03 - 2012-03-27 02:40 - 00437760 _____ (Intel Corporation) C:\Windows\system32\igfxrptb.lrc 2014-01-04 06:03 - 2012-03-27 02:40 - 00437760 _____ (Intel Corporation) C:\Windows\system32\igfxrnor.lrc 2014-01-04 06:03 - 2012-03-27 02:40 - 00437248 _____ (Intel Corporation) C:\Windows\system32\igfxrtha.lrc 2014-01-04 06:03 - 2012-03-27 02:40 - 00437248 _____ (Intel Corporation) C:\Windows\system32\igfxrdan.lrc 2014-01-04 06:03 - 2012-03-27 02:40 - 00435712 _____ (Intel Corporation) C:\Windows\system32\igfxrheb.lrc 2014-01-04 06:03 - 2012-03-27 02:40 - 00435712 _____ (Intel Corporation) C:\Windows\system32\igfxrara.lrc 2014-01-04 06:03 - 2012-03-27 02:40 - 00432128 _____ (Intel Corporation) C:\Windows\system32\igfxrjpn.lrc 2014-01-04 06:03 - 2012-03-27 02:40 - 00430592 _____ (Intel Corporation) C:\Windows\system32\igfxrkor.lrc 2014-01-04 06:03 - 2012-03-27 02:40 - 00429056 _____ (Intel Corporation) C:\Windows\system32\igfxrcht.lrc 2014-01-04 06:03 - 2012-03-27 02:40 - 00428544 _____ (Intel Corporation) C:\Windows\system32\igfxrchs.lrc 2014-01-04 06:03 - 2012-03-27 02:40 - 00221877 _____ () C:\Windows\system32\Gfxres.th-TH.resources 2014-01-04 06:03 - 2012-03-27 02:40 - 00208522 _____ () C:\Windows\system32\Gfxres.el-GR.resources 2014-01-04 06:03 - 2012-03-27 02:40 - 00192378 _____ () C:\Windows\system32\Gfxres.ru-RU.resources 2014-01-04 06:03 - 2012-03-27 02:40 - 00164821 _____ () C:\Windows\system32\Gfxres.ar-SA.resources 2014-01-04 06:03 - 2012-03-27 02:40 - 00162150 _____ () C:\Windows\system32\Gfxres.ja-JP.resources 2014-01-04 06:03 - 2012-03-27 02:40 - 00157713 _____ () C:\Windows\system32\Gfxres.he-IL.resources 2014-01-04 06:03 - 2012-03-27 02:40 - 00148461 _____ () C:\Windows\system32\Gfxres.it-IT.resources 2014-01-04 06:03 - 2012-03-27 02:40 - 00147116 _____ () C:\Windows\system32\Gfxres.ko-KR.resources 2014-01-04 06:03 - 2012-03-27 02:40 - 00146125 _____ () C:\Windows\system32\Gfxres.es-ES.resources 2014-01-04 06:03 - 2012-03-27 02:40 - 00146008 _____ () C:\Windows\system32\Gfxres.de-DE.resources 2014-01-04 06:03 - 2012-03-27 02:40 - 00144790 _____ () C:\Windows\system32\Gfxres.ro-RO.resources 2014-01-04 06:03 - 2012-03-27 02:40 - 00144267 _____ () C:\Windows\system32\Gfxres.fr-FR.resources 2014-01-04 06:03 - 2012-03-27 02:40 - 00143564 _____ () C:\Windows\system32\Gfxres.tr-TR.resources 2014-01-04 06:03 - 2012-03-27 02:40 - 00143112 _____ () C:\Windows\system32\Gfxres.pt-BR.resources 2014-01-04 06:03 - 2012-03-27 02:40 - 00142797 _____ () C:\Windows\system32\Gfxres.nl-NL.resources 2014-01-04 06:03 - 2012-03-27 02:40 - 00142606 _____ () C:\Windows\system32\Gfxres.hu-HU.resources 2014-01-04 06:03 - 2012-03-27 02:40 - 00142079 _____ () C:\Windows\system32\Gfxres.pt-PT.resources 2014-01-04 06:03 - 2012-03-27 02:40 - 00141854 _____ () C:\Windows\system32\Gfxres.sv-SE.resources 2014-01-04 06:03 - 2012-03-27 02:40 - 00141421 _____ () C:\Windows\system32\Gfxres.pl-PL.resources 2014-01-04 06:03 - 2012-03-27 02:40 - 00141282 _____ () C:\Windows\system32\Gfxres.cs-CZ.resources 2014-01-04 06:03 - 2012-03-27 02:40 - 00140949 _____ () C:\Windows\system32\Gfxres.fi-FI.resources 2014-01-04 06:03 - 2012-03-27 02:40 - 00140548 _____ () C:\Windows\system32\Gfxres.sk-SK.resources 2014-01-04 06:03 - 2012-03-27 02:40 - 00139901 _____ () C:\Windows\system32\Gfxres.hr-HR.resources 2014-01-04 06:03 - 2012-03-27 02:40 - 00136850 _____ () C:\Windows\system32\Gfxres.sl-SI.resources 2014-01-04 06:03 - 2012-03-27 02:40 - 00136778 _____ () C:\Windows\system32\Gfxres.nb-NO.resources 2014-01-04 06:03 - 2012-03-27 02:40 - 00136261 _____ () C:\Windows\system32\Gfxres.da-DK.resources 2014-01-04 06:03 - 2012-03-27 02:40 - 00131674 _____ () C:\Windows\system32\Gfxres.en-US.resources 2014-01-04 06:03 - 2012-03-27 02:40 - 00126976 _____ (Intel Corporation) C:\Windows\system32\igfxcpl.cpl 2014-01-04 06:03 - 2012-03-27 02:40 - 00125306 _____ () C:\Windows\system32\Gfxres.zh-TW.resources 2014-01-04 06:03 - 2012-03-27 02:40 - 00123778 _____ () C:\Windows\system32\Gfxres.zh-CN.resources 2014-01-04 06:03 - 2012-03-27 02:39 - 00410624 _____ (Intel Corporation) C:\Windows\system32\igfxTMM.dll 2014-01-04 06:03 - 2012-03-27 02:39 - 00386560 _____ (Intel Corporation) C:\Windows\system32\igfxpph.dll 2014-01-04 06:03 - 2012-03-27 02:39 - 00063488 _____ (Intel Corporation) C:\Windows\system32\igfxsrvc.dll 2014-01-04 06:03 - 2012-03-27 02:39 - 00028672 _____ (Intel Corporation) C:\Windows\system32\igfxexps.dll 2014-01-04 06:03 - 2012-03-27 02:38 - 00434688 _____ (Intel Corporation) C:\Windows\system32\igfxdev.dll 2014-01-04 06:03 - 2012-03-27 02:38 - 00172032 _____ (Intel Corporation) C:\Windows\system32\gfxSrvc.dll 2014-01-04 06:03 - 2012-03-27 02:38 - 00110592 _____ (Intel Corporation) C:\Windows\system32\hccutils.dll 2014-01-04 06:03 - 2012-03-27 02:38 - 00009216 _____ ( ) C:\Windows\system32\IGFXDEVLib.dll 2014-01-04 06:03 - 2012-03-27 02:37 - 09007616 _____ (Intel Corporation) C:\Windows\system32\igfxress.dll 2014-01-04 06:03 - 2012-03-27 02:37 - 00286208 _____ (Intel Corporation) C:\Windows\system32\igfxrenu.lrc 2014-01-04 06:03 - 2012-03-27 02:37 - 00142336 _____ (Intel Corporation) C:\Windows\system32\igfxdo.dll 2014-01-04 06:03 - 2012-03-27 02:36 - 00025088 _____ (Intel Corporation) C:\Windows\SysWOW64\igfxexps32.dll 2014-01-04 06:03 - 2012-03-27 02:35 - 00325120 _____ (Intel Corporation) C:\Windows\SysWOW64\igfxdv32.dll 2014-01-04 06:03 - 2012-03-27 02:33 - 02967040 _____ (Intel Corporation) C:\Windows\system32\igfxcmjit64.dll 2014-01-04 06:03 - 2012-03-27 02:33 - 02321408 _____ (Intel Corporation) C:\Windows\SysWOW64\igfxcmjit32.dll 2014-01-04 06:03 - 2012-03-27 02:33 - 01981696 _____ () C:\Windows\system32\iglhxa64.cpa 2014-01-04 06:03 - 2012-03-27 02:33 - 00524800 _____ (Intel Corporation) C:\Windows\system32\iglhsip64.dll 2014-01-04 06:03 - 2012-03-27 02:33 - 00519680 _____ (Intel Corporation) C:\Windows\SysWOW64\iglhsip32.dll 2014-01-04 06:03 - 2012-03-27 02:33 - 00237056 _____ (Intel Corporation) C:\Windows\SysWOW64\igfxcmrt32.dll 2014-01-04 06:03 - 2012-03-27 02:33 - 00213504 _____ (Intel Corporation) C:\Windows\system32\iglhcp64.dll 2014-01-04 06:03 - 2012-03-27 02:33 - 00193024 _____ (Intel Corporation) C:\Windows\system32\igfxcmrt64.dll 2014-01-04 06:03 - 2012-03-27 02:33 - 00177152 _____ (Intel Corporation) C:\Windows\SysWOW64\iglhcp32.dll 2014-01-04 06:03 - 2012-03-27 02:33 - 00094208 _____ () C:\Windows\system32\IccLibDll_x64.dll 2014-01-04 06:03 - 2012-03-27 02:33 - 00059425 _____ () C:\Windows\system32\iglhxo64.vp 2014-01-04 06:03 - 2012-03-27 02:33 - 00059398 _____ () C:\Windows\system32\iglhxg64.vp 2014-01-04 06:03 - 2012-03-27 02:33 - 00059230 _____ () C:\Windows\system32\iglhxc64.vp 2014-01-04 06:03 - 2012-03-27 02:33 - 00059104 _____ () C:\Windows\system32\iglhxc64_dev.vp 2014-01-04 06:03 - 2012-03-27 02:33 - 00058796 _____ () C:\Windows\system32\iglhxg64_dev.vp 2014-01-04 06:03 - 2012-03-27 02:33 - 00058109 _____ () C:\Windows\system32\iglhxo64_dev.vp 2014-01-04 06:03 - 2012-03-27 02:33 - 00001074 _____ () C:\Windows\system32\iglhxa64.vp 2014-01-04 06:03 - 2011-12-06 13:23 - 00331264 _____ (Intel(R) Corporation) C:\Windows\system32\Drivers\IntcDAud.sys 2014-01-04 06:03 - 2011-12-06 13:22 - 00014848 _____ (Intel(R) Corporation) C:\Windows\system32\IntcDAuC.dll 2014-01-04 06:02 - 2014-01-04 06:02 - 00951680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys 2014-01-04 06:02 - 2014-01-03 22:26 - 00000226 _____ () C:\Windows\User.xml 2014-01-04 06:01 - 2014-01-04 06:25 - 00001375 _____ () C:\Windows\WPatchProgress.ini 2014-01-04 06:01 - 2014-01-04 06:13 - 00344171 _____ () C:\Windows\CapsuleDll.log 2014-01-04 06:01 - 2014-01-03 22:18 - 00000225 _____ () C:\Windows\Factory.xml 2014-01-04 06:01 - 2011-12-27 02:02 - 00519208 _____ (Wistron Corp.) C:\Windows\WGRegOfPEX64.exe 2014-01-04 06:01 - 2011-07-23 23:12 - 00434728 _____ (Wistron Corp.) C:\Windows\WisGAPasx64.exe 2014-01-04 06:01 - 2011-07-23 23:12 - 00357416 _____ (Wistron Corp.) C:\Windows\WisGAPas.exe 2014-01-04 06:01 - 2011-05-10 08:36 - 00494632 _____ (Wistron Corp.) C:\Windows\WISMVIMG.EXE 2014-01-04 06:01 - 2009-10-27 19:46 - 00342560 _____ (Acer Inc.) C:\Windows\ParseModule_X64.exe 2014-01-04 06:01 - 2009-10-27 19:46 - 00231968 _____ (Acer Inc.) C:\Windows\ParseModule_X86.exe 2014-01-04 06:01 - 2009-10-20 15:49 - 00333088 _____ (Wistron Corp.) C:\Windows\CAPSULE.DLL 2014-01-04 01:08 - 2014-01-04 01:08 - 00009823 _____ () C:\Users\Devil\Downloads\FRST.txt 2014-01-04 01:08 - 2014-01-04 01:08 - 00000000 ____D () C:\FRST 2014-01-04 01:07 - 2014-01-04 01:07 - 00000000 ____D () C:\Users\Devil\Desktop\tools 2014-01-04 01:00 - 2014-01-04 01:00 - 03645064 _____ (Piriform Ltd) C:\Users\Devil\Downloads\ccsetup410_slim.exe 2014-01-04 00:58 - 2014-01-04 00:58 - 02155520 _____ (Farbar) C:\Users\Devil\Downloads\FRST64.exe 2014-01-04 00:54 - 2014-01-04 00:54 - 00000000 ____D () C:\Users\Devil\AppData\Roaming\Malwarebytes 2014-01-04 00:54 - 2014-01-04 00:54 - 00000000 ____D () C:\ProgramData\Malwarebytes 2014-01-04 00:54 - 2014-01-04 00:54 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware 2014-01-04 00:54 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys 2014-01-04 00:43 - 2014-01-04 00:43 - 00000000 ____D () C:\ProgramData\Kaspersky Lab 2014-01-04 00:36 - 2012-06-02 23:19 - 02428952 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll 2014-01-04 00:36 - 2012-06-02 23:19 - 00701976 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll 2014-01-04 00:36 - 2012-06-02 23:19 - 00057880 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe 2014-01-04 00:36 - 2012-06-02 23:19 - 00044056 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll 2014-01-04 00:36 - 2012-06-02 23:19 - 00038424 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll 2014-01-04 00:36 - 2012-06-02 23:15 - 02622464 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll 2014-01-04 00:36 - 2012-06-02 23:15 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll 2014-01-04 00:36 - 2012-06-02 15:19 - 00186752 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll 2014-01-04 00:36 - 2012-06-02 15:15 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe 2014-01-04 00:22 - 2014-01-04 00:28 - 00000000 ____D () C:\Users\Devil\Documents\Bluetooth Folder 2014-01-04 00:22 - 2014-01-04 00:22 - 00000000 ____D () C:\Users\Devil\AppData\Local\BMExplorer 2014-01-03 23:57 - 2014-01-03 23:57 - 00000000 ____D () C:\Users\Devil\AppData\Roaming\Process Hacker 2 2014-01-03 23:53 - 2014-01-03 23:53 - 00000000 ____D () C:\Users\Devil\Documents\Neuer Ordner 2014-01-03 23:53 - 2014-01-03 23:53 - 00000000 ____D () C:\ProgramData\LockHunter 2014-01-03 23:51 - 2014-01-03 23:51 - 00000000 ____D () C:\Program Files\Process Hacker 2 2014-01-03 23:42 - 2014-01-03 23:42 - 00003544 ____N () C:\bootsqm.dat 2014-01-03 23:10 - 2014-01-04 00:38 - 00000000 ____D () C:\Users\Devil\AppData\Local\Mozilla 2014-01-03 23:10 - 2014-01-03 23:11 - 00000000 ____D () C:\Users\Devil\AppData\Roaming\Mozilla 2014-01-03 23:08 - 2014-01-04 00:47 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox 2014-01-03 23:08 - 2014-01-03 23:08 - 00014602 _____ () C:\HijackPatrol.log 2014-01-03 23:08 - 2014-01-03 23:08 - 00001155 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk 2014-01-03 23:08 - 2014-01-03 23:08 - 00000000 ____D () C:\Users\Devil\AppData\Roaming\WinPatrol 2014-01-03 23:08 - 2014-01-03 23:08 - 00000000 ____D () C:\ProgramData\Mozilla 2014-01-03 23:08 - 2014-01-03 23:08 - 00000000 ____D () C:\ProgramData\InstallMate 2014-01-03 23:08 - 2014-01-03 23:08 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service 2014-01-03 23:08 - 2014-01-03 23:08 - 00000000 ____D () C:\Program Files (x86)\BillP Studios 2014-01-03 23:06 - 2014-01-03 23:06 - 00000000 ____D () C:\Users\Devil\AppData\Roaming\LockHunter 2014-01-03 23:06 - 2014-01-03 23:06 - 00000000 ____D () C:\Program Files\LockHunter 2014-01-03 23:00 - 2014-01-03 23:00 - 00000550 _____ () C:\Users\Devil\Desktop\Emsisoft Emergency Kit.lnk 2014-01-03 22:59 - 2014-01-03 23:00 - 00000000 ____D () C:\EEK 2014-01-03 22:59 - 2014-01-03 22:59 - 00000000 ____D () C:\Users\Devil\AppData\Roaming\AVAST Software 2014-01-03 22:58 - 2014-01-03 22:58 - 00000000 ____D () C:\ProgramData\Lavasoft 2014-01-03 22:57 - 2014-01-03 22:57 - 01032416 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys 2014-01-03 22:57 - 2014-01-03 22:57 - 00409832 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys 2014-01-03 22:57 - 2014-01-03 22:57 - 00334648 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe 2014-01-03 22:57 - 2014-01-03 22:57 - 00205320 _____ () C:\Windows\system32\Drivers\aswVmm.sys 2014-01-03 22:57 - 2014-01-03 22:57 - 00092544 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys 2014-01-03 22:57 - 2014-01-03 22:57 - 00084328 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys 2014-01-03 22:57 - 2014-01-03 22:57 - 00065776 _____ () C:\Windows\system32\Drivers\aswRvrt.sys 2014-01-03 22:57 - 2014-01-03 22:57 - 00065264 _____ (AVAST Software) C:\Windows\system32\Drivers\aswTdi.sys 2014-01-03 22:57 - 2014-01-03 22:57 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr 2014-01-03 22:57 - 2014-01-03 22:57 - 00038984 _____ (AVAST Software) C:\Windows\system32\Drivers\aswFsBlk.sys 2014-01-03 22:57 - 2014-01-03 22:57 - 00001970 _____ () C:\Users\Public\Desktop\avast! Free Antivirus.lnk 2014-01-03 22:57 - 2014-01-03 22:57 - 00000350 ____H () C:\Windows\Tasks\avast! Emergency Update.job 2014-01-03 22:57 - 2014-01-03 22:57 - 00000000 ____D () C:\Program Files\AVAST Software 2014-01-03 22:56 - 2014-01-03 22:56 - 00409832 _____ (AVAST Software) C:\Windows\system32\Drivers\uomaedfu.sys 2014-01-03 22:56 - 2014-01-03 22:56 - 00409832 _____ (AVAST Software) C:\Windows\system32\Drivers\ftegstgg.sys 2014-01-03 22:55 - 2014-01-03 22:56 - 00000000 ____D () C:\ProgramData\AVAST Software 2014-01-03 22:55 - 2014-01-03 22:55 - 00000000 ____D () C:\Users\Devil\AppData\Roaming\Adobe 2014-01-03 22:55 - 2014-01-03 22:55 - 00000000 ____D () C:\Users\Devil\AppData\Local\Adobe 2014-01-03 22:25 - 2014-01-03 22:25 - 00002609 _____ () C:\Users\Public\Desktop\eBay.lnk 2014-01-03 22:25 - 2014-01-03 22:25 - 00001736 _____ () C:\Users\Public\Desktop\Online kaufen.lnk 2014-01-03 22:25 - 2014-01-03 22:25 - 00000000 ____D () C:\Program Files\Accessory Store 2014-01-03 22:25 - 2014-01-03 22:25 - 00000000 ____D () C:\Program Files (x86)\OEM 2014-01-03 22:24 - 2014-01-04 00:43 - 00000000 ___RD () C:\Users\Devil\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup 2014-01-03 22:24 - 2014-01-03 22:24 - 00059968 _____ () C:\Users\Devil\AppData\Local\GDIPFONTCACHEV1.DAT 2014-01-03 22:24 - 2014-01-03 22:24 - 00002078 _____ () C:\Users\Public\Desktop\Eurosport Player.lnk 2014-01-03 22:24 - 2014-01-03 22:24 - 00001447 _____ () C:\Users\Devil\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2014-01-03 22:24 - 2014-01-03 22:24 - 00001413 _____ () C:\Users\Devil\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk 2014-01-03 22:24 - 2014-01-03 22:24 - 00000995 _____ () C:\Users\Public\Desktop\Kobo.lnk 2014-01-03 22:24 - 2014-01-03 22:24 - 00000000 ___RD () C:\Users\Devil\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools 2014-01-03 22:24 - 2014-01-03 22:24 - 00000000 ____D () C:\Users\Devil\AppData\Roaming\Synaptics 2014-01-03 22:24 - 2014-01-03 22:24 - 00000000 ____D () C:\Users\Devil\AppData\Roaming\Screensaver 2014-01-03 22:24 - 2014-01-03 22:24 - 00000000 ____D () C:\Users\Devil\AppData\Roaming\Atheros 2014-01-03 22:24 - 2014-01-03 22:24 - 00000000 ____D () C:\Program Files\Preload 2014-01-03 22:24 - 2014-01-03 22:24 - 00000000 ____D () C:\Program Files (x86)\Kobo 2014-01-03 22:23 - 2014-01-03 22:25 - 00002614 _____ () C:\Windows\WisGRegOffer.log 2014-01-03 22:23 - 2014-01-03 22:24 - 00000000 ____D () C:\Users\Devil 2014-01-03 22:23 - 2014-01-03 22:23 - 00000122 _____ () C:\Windows\WLangUpt.log 2014-01-03 22:23 - 2014-01-03 22:23 - 00000020 ___SH () C:\Users\Devil\ntuser.ini 2014-01-03 22:23 - 2014-01-03 22:23 - 00000000 _SHDL () C:\Users\Devil\Vorlagen 2014-01-03 22:23 - 2014-01-03 22:23 - 00000000 _SHDL () C:\Users\Devil\Startmenü 2014-01-03 22:23 - 2014-01-03 22:23 - 00000000 _SHDL () C:\Users\Devil\Netzwerkumgebung 2014-01-03 22:23 - 2014-01-03 22:23 - 00000000 _SHDL () C:\Users\Devil\Lokale Einstellungen 2014-01-03 22:23 - 2014-01-03 22:23 - 00000000 _SHDL () C:\Users\Devil\Eigene Dateien 2014-01-03 22:23 - 2014-01-03 22:23 - 00000000 _SHDL () C:\Users\Devil\Druckumgebung 2014-01-03 22:23 - 2014-01-03 22:23 - 00000000 _SHDL () C:\Users\Devil\Documents\Eigene Musik 2014-01-03 22:23 - 2014-01-03 22:23 - 00000000 _SHDL () C:\Users\Devil\Documents\Eigene Bilder 2014-01-03 22:23 - 2014-01-03 22:23 - 00000000 _SHDL () C:\Users\Devil\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-01-03 22:23 - 2014-01-03 22:23 - 00000000 _SHDL () C:\Users\Devil\AppData\Local\Verlauf 2014-01-03 22:23 - 2014-01-03 22:23 - 00000000 _SHDL () C:\Users\Devil\AppData\Local\Anwendungsdaten 2014-01-03 22:23 - 2014-01-03 22:23 - 00000000 _SHDL () C:\Users\Devil\Anwendungsdaten 2014-01-03 22:23 - 2014-01-03 22:23 - 00000000 ____D () C:\Users\Devil\AppData\Local\VirtualStore 2014-01-03 22:23 - 2014-01-03 22:23 - 00000000 _____ () C:\Users\Devil\agent.log 2014-01-03 22:23 - 2012-06-05 16:08 - 00000000 ____D () C:\Users\Devil\AppData\Roaming\Macromedia 2014-01-03 22:23 - 2009-07-14 05:54 - 00000000 ___RD () C:\Users\Devil\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories 2014-01-03 22:23 - 2009-07-14 05:49 - 00000000 ___RD () C:\Users\Devil\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance 2014-01-03 22:22 - 2014-01-03 22:22 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Musik 2014-01-03 22:22 - 2014-01-03 22:22 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Bilder 2014-01-03 22:22 - 2014-01-03 22:22 - 00000000 _SHDL () C:\Users\Default\Vorlagen 2014-01-03 22:22 - 2014-01-03 22:22 - 00000000 _SHDL () C:\Users\Default\Startmenü 2014-01-03 22:22 - 2014-01-03 22:22 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung 2014-01-03 22:22 - 2014-01-03 22:22 - 00000000 _SHDL () C:\Users\Default\Lokale Einstellungen 2014-01-03 22:22 - 2014-01-03 22:22 - 00000000 _SHDL () C:\Users\Default\Eigene Dateien 2014-01-03 22:22 - 2014-01-03 22:22 - 00000000 _SHDL () C:\Users\Default\Druckumgebung 2014-01-03 22:22 - 2014-01-03 22:22 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik 2014-01-03 22:22 - 2014-01-03 22:22 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder 2014-01-03 22:22 - 2014-01-03 22:22 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-01-03 22:22 - 2014-01-03 22:22 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf 2014-01-03 22:22 - 2014-01-03 22:22 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Anwendungsdaten 2014-01-03 22:22 - 2014-01-03 22:22 - 00000000 _SHDL () C:\Users\Default\Anwendungsdaten 2014-01-03 22:22 - 2014-01-03 22:22 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik 2014-01-03 22:22 - 2014-01-03 22:22 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder 2014-01-03 22:22 - 2014-01-03 22:22 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-01-03 22:22 - 2014-01-03 22:22 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf 2014-01-03 22:22 - 2014-01-03 22:22 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Anwendungsdaten 2014-01-03 22:22 - 2014-01-03 22:22 - 00000000 _SHDL () C:\Programme 2014-01-03 22:22 - 2014-01-03 22:22 - 00000000 _SHDL () C:\ProgramData\Vorlagen 2014-01-03 22:22 - 2014-01-03 22:22 - 00000000 _SHDL () C:\ProgramData\Startmenü 2014-01-03 22:22 - 2014-01-03 22:22 - 00000000 _SHDL () C:\ProgramData\Favoriten 2014-01-03 22:22 - 2014-01-03 22:22 - 00000000 _SHDL () C:\ProgramData\Dokumente 2014-01-03 22:22 - 2014-01-03 22:22 - 00000000 _SHDL () C:\ProgramData\Anwendungsdaten 2014-01-03 22:22 - 2014-01-03 22:22 - 00000000 _SHDL () C:\Program Files\Gemeinsame Dateien 2014-01-03 22:22 - 2014-01-03 22:22 - 00000000 _SHDL () C:\Dokumente und Einstellungen 2014-01-03 22:22 - 2014-01-03 22:22 - 00000000 __SHD () C:\Recovery 2014-01-03 22:10 - 2014-01-03 22:10 - 00000000 ____D () C:\ProgramData\EgisTec 2014-01-03 22:06 - 2014-01-03 22:06 - 00000000 ____D () C:\Program Files (x86)\Microsoft Office 2014-01-03 22:04 - 2014-01-03 22:04 - 00000000 ___HD () C:\BOOK 2014-01-03 22:04 - 2014-01-03 22:04 - 00000000 ____D () C:\Windows\System32\Tasks\Recovery Management 2014-01-03 22:03 - 2014-01-03 22:03 - 00062776 _____ (Egis Technology Inc.) C:\Windows\system32\Drivers\mwlPSDVDisk.sys 2014-01-03 22:03 - 2014-01-03 22:03 - 00022648 _____ (Egis Technology Inc.) C:\Windows\system32\Drivers\mwlPSDFilter.sys 2014-01-03 22:03 - 2014-01-03 22:03 - 00020520 _____ (Egis Technology Inc.) C:\Windows\system32\Drivers\mwlPSDNserv.sys 2014-01-03 22:03 - 2014-01-03 22:03 - 00000000 ____D () C:\ProgramData\EgisTec IPS 2014-01-03 22:03 - 2014-01-03 22:03 - 00000000 ____D () C:\Program Files\EgisTec IPS 2014-01-03 22:03 - 2014-01-03 22:03 - 00000000 ____D () C:\Program Files (x86)\EgisTec Shredder 2014-01-03 22:03 - 2014-01-03 22:03 - 00000000 ____D () C:\Program Files (x86)\EgisTec MyWinLocker 2014-01-03 22:03 - 2014-01-03 22:03 - 00000000 ____D () C:\Program Files (x86)\EgisTec IPS 2014-01-03 22:02 - 2014-01-03 22:02 - 00000000 ____D () C:\Program Files (x86)\EgisTec MyWinLockerSuite 2014-01-03 21:59 - 2014-01-03 21:59 - 00003200 _____ () C:\Windows\System32\Tasks\DeviceDetector 2014-01-03 21:56 - 2014-01-03 21:58 - 00000000 ____D () C:\Program Files (x86)\Cyberlink 2014-01-03 21:55 - 2014-01-03 21:55 - 00001162 _____ () C:\Users\Public\Desktop\clear.fi Photo.lnk 2014-01-03 21:55 - 2014-01-03 21:55 - 00000032 _____ () C:\ProgramData\PS.log 2014-01-03 21:54 - 2014-01-03 21:55 - 00000000 ____D () C:\ProgramData\CLSK 2014-01-03 21:54 - 2014-01-03 21:54 - 00000000 ____D () C:\ProgramData\install_clap 2014-01-03 21:53 - 2014-01-03 21:56 - 00002454 _____ () C:\ProgramData\clear.fiSDK20.log 2014-01-03 21:53 - 2014-01-03 21:56 - 00000000 ____D () C:\ProgramData\CyberLink 2014-01-03 21:53 - 2014-01-03 21:55 - 00000000 ____D () C:\ProgramData\clear.fi 2014-01-03 21:53 - 2014-01-03 21:53 - 00001162 _____ () C:\Users\Public\Desktop\clear.fi Media.lnk 2014-01-03 21:52 - 2014-01-03 21:52 - 00000000 ____D () C:\ProgramData\Synaptics 2014-01-03 21:50 - 2014-01-03 21:50 - 00000184 _____ () C:\Windows\LMv4.UNI 2014-01-03 21:50 - 2014-01-03 21:50 - 00000000 ____D () C:\Windows\SysWOW64\sda 2014-01-03 21:50 - 2014-01-03 21:50 - 00000000 ____D () C:\Program Files (x86)\Launch Manager 2014-01-03 21:50 - 2012-02-02 02:06 - 09888872 _____ (Realtek Semiconductor Corp.) C:\Windows\SysWOW64\RtsBaStorIcon.dll 2014-01-03 21:50 - 2012-02-02 02:06 - 00292968 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RtsBaStor.sys 2014-01-03 21:49 - 2014-01-04 00:22 - 00000000 ____D () C:\ProgramData\Atheros 2014-01-03 21:49 - 2014-01-03 21:49 - 00006874 _____ () C:\Windows\DPINST.LOG 2014-01-03 21:49 - 2014-01-03 21:49 - 00001360 _____ () C:\Windows\Synaptics.log 2014-01-03 21:49 - 2014-01-03 21:49 - 00000032 _____ () C:\Windows\SysWOW64\setup.log 2014-01-03 21:49 - 2014-01-03 21:49 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_SynTP_01009.Wdf 2014-01-03 21:49 - 2014-01-03 21:49 - 00000000 ____D () C:\Windows\system32\nn-NO 2014-01-03 21:49 - 2014-01-03 21:49 - 00000000 ____D () C:\Program Files\Synaptics 2014-01-03 21:49 - 2014-01-03 21:49 - 00000000 ____D () C:\Program Files (x86)\Atheros 2014-01-03 21:49 - 2012-02-27 19:19 - 00442528 _____ (Atheros) C:\Windows\system32\athihvs.dll 2014-01-03 21:49 - 2012-02-27 19:19 - 00063648 _____ (Atheros) C:\Windows\system32\athihvui.dll 2014-01-03 21:49 - 2012-02-24 00:56 - 03545088 _____ (Qualcomm Atheros Communications, Inc.) C:\Windows\system32\Drivers\athrx.sys 2014-01-03 21:48 - 2014-01-03 21:48 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_btath_hcrp_01009.Wdf 2014-01-03 21:46 - 2014-01-03 23:56 - 00000000 ____D () C:\Program Files (x86)\Bluetooth Suite 2014-01-03 21:44 - 2014-01-03 21:44 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_iusb3hcs_01009.Wdf 2014-01-03 21:44 - 2012-02-27 12:00 - 00041984 _____ (Intel Corporation) C:\Windows\system32\Drivers\USB3Ver.dll 2014-01-03 21:43 - 2014-01-03 21:43 - 00000000 ____D () C:\Windows\SysWOW64\RTCOM 2014-01-03 21:43 - 2014-01-03 21:43 - 00000000 ____D () C:\Dolby PCEE4 2014-01-03 21:43 - 2012-03-10 05:41 - 00685160 _____ (Realtek ) C:\Windows\system32\Drivers\Rt64win7.sys 2014-01-03 21:43 - 2012-03-10 05:41 - 00107552 _____ (Realtek Semiconductor Corporation) C:\Windows\system32\RTNUninst64.dll 2014-01-03 21:43 - 2012-03-10 05:41 - 00074344 _____ (Realtek Semiconductor Corporation) C:\Windows\system32\RtNicProp64.dll 2014-01-03 21:42 - 2014-01-04 01:06 - 00000828 _____ () C:\Windows\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon.job 2014-01-03 21:42 - 2014-01-03 21:52 - 00000830 _____ () C:\Windows\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d.job 2014-01-03 21:42 - 2014-01-03 21:50 - 00000000 ____D () C:\Program Files (x86)\Realtek 2014-01-03 21:42 - 2014-01-03 21:42 - 00003492 _____ () C:\Windows\System32\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d 2014-01-03 21:42 - 2014-01-03 21:42 - 00003188 _____ () C:\Windows\System32\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon 2014-01-03 21:42 - 2014-01-03 21:42 - 00000000 ____D () C:\ProgramData\Intel 2014-01-03 21:42 - 2014-01-03 21:42 - 00000000 ____D () C:\Program Files\Realtek 2014-01-03 21:42 - 2014-01-03 21:42 - 00000000 ____D () C:\Program Files\Intel 2014-01-03 21:42 - 2012-03-22 00:38 - 00147746 _____ () C:\Windows\system32\Drivers\RtPCEE4.DAT 2014-01-03 21:42 - 2012-03-07 15:28 - 00015128 _____ () C:\Windows\system32\Drivers\IntelMEFWVer.dll 2014-01-03 21:42 - 2012-02-22 07:09 - 02657896 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtPgEx64.dll 2014-01-03 21:42 - 2012-02-22 06:25 - 04756200 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RTKVHD64.sys 2014-01-03 21:42 - 2012-02-22 04:45 - 02605400 _____ (Waves Audio Ltd.) C:\Windows\system32\WavesGUILib.dll 2014-01-03 21:42 - 2012-02-21 23:26 - 02528832 _____ (Fortemedia Corporation) C:\Windows\system32\FMAPO64.dll 2014-01-03 21:42 - 2012-02-21 22:35 - 03847272 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkAPO64.dll 2014-01-03 21:42 - 2012-02-20 23:57 - 00238744 _____ () C:\Windows\system32\Drivers\RTAIODAT.DAT 2014-01-03 21:42 - 2012-02-20 23:52 - 02729472 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoRes64.dat 2014-01-03 21:42 - 2012-02-18 04:53 - 00102504 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoInstII64.dll 2014-01-03 21:42 - 2012-02-18 00:54 - 00396632 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVolumeSDAPO.dll 2014-01-03 21:42 - 2012-02-14 09:05 - 08363864 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRealtek.dll 2014-01-03 21:42 - 2012-02-14 07:35 - 00978776 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPOShell64.dll 2014-01-03 21:42 - 2012-01-30 20:43 - 00836544 _____ (TOSHIBA Corporation) C:\Windows\system32\tadefxapo264.dll 2014-01-03 21:42 - 2012-01-24 07:30 - 00537456 _____ (DTS) C:\Windows\system32\DTSU2PLFX64.dll 2014-01-03 21:42 - 2012-01-24 07:30 - 00524656 _____ (DTS) C:\Windows\system32\DTSU2PGFX64.dll 2014-01-03 21:42 - 2012-01-24 07:30 - 00449392 _____ (DTS) C:\Windows\system32\DTSU2PREC64.dll 2014-01-03 21:42 - 2012-01-10 19:20 - 00065944 _____ (TOSHIBA CORPORATION.) C:\Windows\system32\tepeqapo64.dll 2014-01-03 21:42 - 2011-12-23 22:30 - 00823912 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkApi64.dll 2014-01-03 21:42 - 2011-12-21 00:32 - 00331880 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtlCPAPI64.dll 2014-01-03 21:42 - 2011-12-20 14:43 - 00220776 _____ (Sony Corporation) C:\Windows\system32\SFSS_APO.dll 2014-01-03 21:42 - 2011-12-19 02:58 - 02131288 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioEQ.dll 2014-01-03 21:42 - 2011-12-19 02:58 - 01247576 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRealtek264.dll 2014-01-03 21:42 - 2011-12-15 22:16 - 07163744 _____ (Dolby Laboratories) C:\Windows\system32\R4EEP64A.dll 2014-01-03 21:42 - 2011-12-15 22:16 - 00433504 _____ (Dolby Laboratories) C:\Windows\system32\R4EED64A.dll 2014-01-03 21:42 - 2011-12-15 22:16 - 00137056 _____ (Dolby Laboratories) C:\Windows\system32\R4EEL64A.dll 2014-01-03 21:42 - 2011-12-15 22:16 - 00120160 _____ (Dolby Laboratories) C:\Windows\system32\R4EEA64A.dll 2014-01-03 21:42 - 2011-12-15 22:16 - 00075104 _____ (Dolby Laboratories) C:\Windows\system32\R4EEG64A.dll 2014-01-03 21:42 - 2011-12-14 01:58 - 01560168 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTSnMg64.cpl 2014-01-03 21:42 - 2011-12-13 20:01 - 01698408 _____ (Realtek Semiconductor Corp.) C:\Windows\RtlExUpd.dll 2014-01-03 21:42 - 2011-11-23 01:28 - 00014952 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCoLDR64.dll 2014-01-03 21:42 - 2011-09-27 07:41 - 00000024 _____ () C:\Windows\system32\Drivers\rtkhdaud.dat 2014-01-03 21:42 - 2011-09-02 23:21 - 00221024 _____ (Synopsys, Inc.) C:\Windows\system32\SFNHK64.dll 2014-01-03 21:42 - 2011-09-02 23:21 - 00081248 _____ (Synopsys, Inc.) C:\Windows\system32\SFCOM64.dll 2014-01-03 21:42 - 2011-09-02 23:21 - 00078688 _____ (Synopsys, Inc.) C:\Windows\system32\SFAPO64.dll 2014-01-03 21:42 - 2011-08-24 02:00 - 00603984 _____ (Knowles Acoustics ) C:\Windows\system32\KAAPORT64.dll 2014-01-03 21:42 - 2011-07-23 04:35 - 01247848 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTCOM64.dll 2014-01-03 21:42 - 2011-05-31 18:42 - 01756264 _____ (DTS) C:\Windows\system32\DTSS2SpeakerDLL64.dll 2014-01-03 21:42 - 2011-05-31 18:42 - 01568360 _____ (DTS) C:\Windows\system32\DTSS2HeadphoneDLL64.dll 2014-01-03 21:42 - 2011-05-31 18:42 - 01486952 _____ (DTS) C:\Windows\system32\DTSBoostDLL64.dll 2014-01-03 21:42 - 2011-05-31 18:42 - 00728680 _____ (DTS) C:\Windows\system32\DTSBassEnhancementDLL64.dll 2014-01-03 21:42 - 2011-05-31 18:42 - 00712296 _____ (DTS) C:\Windows\system32\DTSSymmetryDLL64.dll 2014-01-03 21:42 - 2011-05-31 18:42 - 00693352 _____ (DTS) C:\Windows\system32\DTSVoiceClarityDLL64.dll 2014-01-03 21:42 - 2011-05-31 18:42 - 00491112 _____ (DTS) C:\Windows\system32\DTSNeoPCDLL64.dll 2014-01-03 21:42 - 2011-05-31 18:42 - 00432744 _____ (DTS) C:\Windows\system32\DTSLimiterDLL64.dll 2014-01-03 21:42 - 2011-05-31 18:42 - 00428648 _____ (DTS) C:\Windows\system32\DTSGainCompensatorDLL64.dll 2014-01-03 21:42 - 2011-05-31 18:42 - 00242792 _____ (DTS) C:\Windows\system32\DTSLFXAPO64.dll 2014-01-03 21:42 - 2011-05-31 18:42 - 00242792 _____ (DTS) C:\Windows\system32\DTSGFXAPO64.dll 2014-01-03 21:42 - 2011-05-31 18:42 - 00241768 _____ (DTS) C:\Windows\system32\DTSGFXAPONS64.dll 2014-01-03 21:42 - 2011-03-17 21:17 - 01361336 _____ (TOSHIBA Corporation) C:\Windows\system32\tosade.dll 2014-01-03 21:42 - 2011-03-08 02:11 - 00148416 _____ (TOSHIBA Corporation) C:\Windows\system32\tadefxapo.dll 2014-01-03 21:42 - 2010-11-08 16:31 - 00375128 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEP64A.dll 2014-01-03 21:42 - 2010-11-08 16:31 - 00310104 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DHT64.dll 2014-01-03 21:42 - 2010-11-08 16:31 - 00310104 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DAA64.dll 2014-01-03 21:42 - 2010-11-08 16:31 - 00204120 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEED64A.dll 2014-01-03 21:42 - 2010-11-08 16:31 - 00101208 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEL64A.dll 2014-01-03 21:42 - 2010-11-08 16:31 - 00078680 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEG64A.dll 2014-01-03 21:42 - 2010-11-04 03:30 - 00149608 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCfg64.dll 2014-01-03 21:42 - 2010-10-03 22:46 - 00341336 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO30.dll 2014-01-03 21:42 - 2010-09-27 18:34 - 00318808 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO20.dll 2014-01-03 21:42 - 2010-09-24 02:21 - 00039672 _____ () C:\Windows\system32\Drivers\RtPCEE3.DAT 2014-01-03 21:42 - 2010-07-23 01:48 - 00074064 _____ (Virage Logic Corporation / Sonic Focus) C:\Windows\SysWOW64\SFCOM.dll 2014-01-03 21:42 - 2010-07-23 01:37 - 00200800 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAC64.dll 2014-01-03 21:42 - 2010-03-22 22:21 - 00247560 _____ () C:\Windows\system32\Drivers\RTConvEQ.dat 2014-01-03 21:42 - 2010-03-22 22:21 - 00001448 _____ () C:\Windows\system32\Drivers\RtHdatEx.dat 2014-01-03 21:42 - 2010-02-12 00:45 - 00000176 _____ () C:\Windows\system32\Drivers\RTHDAEQ1.dat 2014-01-03 21:42 - 2010-01-27 06:52 - 00000520 _____ () C:\Windows\system32\Drivers\RTEQEX3.dat 2014-01-03 21:42 - 2009-11-24 18:55 - 00518896 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSX64.dll 2014-01-03 21:42 - 2009-11-24 18:55 - 00211184 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSH64.dll 2014-01-03 21:42 - 2009-11-24 18:55 - 00198896 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSHP64.dll 2014-01-03 21:42 - 2009-11-24 18:55 - 00155888 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSWOW64.dll 2014-01-03 21:42 - 2009-11-18 03:12 - 00108960 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAR64.dll 2014-01-03 21:42 - 2008-08-21 22:43 - 00000520 _____ () C:\Windows\system32\Drivers\RTEQEX2.dat 2014-01-03 21:42 - 2005-06-27 14:29 - 00000520 _____ () C:\Windows\system32\Drivers\RTEQEX1.dat 2014-01-03 21:42 - 2005-06-27 14:29 - 00000520 _____ () C:\Windows\system32\Drivers\RTEQEX0.dat 2014-01-03 21:41 - 2014-01-03 21:52 - 00000000 ____D () C:\Windows\SysWOW64\NV 2014-01-03 21:41 - 2014-01-03 21:52 - 00000000 ____D () C:\Windows\system32\NV 2014-01-03 21:40 - 2014-01-03 21:41 - 00000000 ____D () C:\ProgramData\NVIDIA 2014-01-03 21:40 - 2014-01-03 21:40 - 00000020 ___SH () C:\Users\UpdatusUser\ntuser.ini 2014-01-03 21:40 - 2014-01-03 21:40 - 00000000 _SHDL () C:\Users\UpdatusUser\Vorlagen 2014-01-03 21:40 - 2014-01-03 21:40 - 00000000 _SHDL () C:\Users\UpdatusUser\Startmenü 2014-01-03 21:40 - 2014-01-03 21:40 - 00000000 _SHDL () C:\Users\UpdatusUser\Netzwerkumgebung 2014-01-03 21:40 - 2014-01-03 21:40 - 00000000 _SHDL () C:\Users\UpdatusUser\Lokale Einstellungen 2014-01-03 21:40 - 2014-01-03 21:40 - 00000000 _SHDL () C:\Users\UpdatusUser\Eigene Dateien 2014-01-03 21:40 - 2014-01-03 21:40 - 00000000 _SHDL () C:\Users\UpdatusUser\Druckumgebung 2014-01-03 21:40 - 2014-01-03 21:40 - 00000000 _SHDL () C:\Users\UpdatusUser\Documents\Eigene Musik 2014-01-03 21:40 - 2014-01-03 21:40 - 00000000 _SHDL () C:\Users\UpdatusUser\Documents\Eigene Bilder 2014-01-03 21:40 - 2014-01-03 21:40 - 00000000 _SHDL () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-01-03 21:40 - 2014-01-03 21:40 - 00000000 _SHDL () C:\Users\UpdatusUser\AppData\Local\Verlauf 2014-01-03 21:40 - 2014-01-03 21:40 - 00000000 _SHDL () C:\Users\UpdatusUser\AppData\Local\Anwendungsdaten 2014-01-03 21:40 - 2014-01-03 21:40 - 00000000 _SHDL () C:\Users\UpdatusUser\Anwendungsdaten 2014-01-03 21:40 - 2012-06-05 16:08 - 00000000 ____D () C:\Users\UpdatusUser\AppData\Roaming\Macromedia 2014-01-03 21:40 - 2012-03-04 23:04 - 03090752 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll 2014-01-03 21:40 - 2012-03-04 23:03 - 06083392 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll 2014-01-03 21:40 - 2012-03-04 23:02 - 02944183 _____ () C:\Windows\system32\nvcoproc.bin 2014-01-03 21:40 - 2012-03-04 23:02 - 02561856 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll 2014-01-03 21:40 - 2012-03-04 23:02 - 00889664 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe 2014-01-03 21:40 - 2012-03-04 23:02 - 00850752 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshext.dll 2014-01-03 21:40 - 2012-03-04 23:02 - 00118080 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll 2014-01-03 21:40 - 2012-03-04 23:02 - 00063296 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll 2014-01-03 21:40 - 2012-03-04 23:02 - 00055616 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshextr.dll 2014-01-03 21:40 - 2009-07-14 05:54 - 00000000 ___RD () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories 2014-01-03 21:40 - 2009-07-14 05:49 - 00000000 ___RD () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance 2014-01-03 21:39 - 2014-01-03 21:42 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation 2014-01-03 21:39 - 2014-01-03 21:40 - 00000000 ____D () C:\Program Files\NVIDIA Corporation 2014-01-03 21:39 - 2014-01-03 21:39 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation 2014-01-03 21:39 - 2012-03-05 13:22 - 25555776 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll 2014-01-03 21:39 - 2012-03-05 13:22 - 25222464 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll 2014-01-03 21:39 - 2012-03-05 13:22 - 19456320 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll 2014-01-03 21:39 - 2012-03-05 13:22 - 17663296 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll 2014-01-03 21:39 - 2012-03-05 13:22 - 17543488 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll 2014-01-03 21:39 - 2012-03-05 13:22 - 15028544 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll 2014-01-03 21:39 - 2012-03-05 13:22 - 14332224 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys 2014-01-03 21:39 - 2012-03-05 13:22 - 09732416 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll 2014-01-03 21:39 - 2012-03-05 13:22 - 08038208 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll 2014-01-03 21:39 - 2012-03-05 13:22 - 07726912 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll 2014-01-03 21:39 - 2012-03-05 13:22 - 05920064 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll 2014-01-03 21:39 - 2012-03-05 13:22 - 02873664 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll 2014-01-03 21:39 - 2012-03-05 13:22 - 02677568 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll 2014-01-03 21:39 - 2012-03-05 13:22 - 02673984 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll 2014-01-03 21:39 - 2012-03-05 13:22 - 02518336 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll 2014-01-03 21:39 - 2012-03-05 13:22 - 02438464 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll 2014-01-03 21:39 - 2012-03-05 13:22 - 02316608 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll 2014-01-03 21:39 - 2012-03-05 13:22 - 01737536 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco64.dll 2014-01-03 21:39 - 2012-03-05 13:22 - 01466176 _____ (NVIDIA Corporation) C:\Windows\system32\nvgenco64.dll 2014-01-03 21:39 - 2012-03-05 13:22 - 00963392 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll 2014-01-03 21:39 - 2012-03-05 13:22 - 00813376 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll 2014-01-03 21:39 - 2012-03-05 13:22 - 00364352 _____ (NVIDIA Corporation) C:\Windows\system32\nvdecodemft.dll 2014-01-03 21:39 - 2012-03-05 13:22 - 00301376 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvdecodemft.dll 2014-01-03 21:39 - 2012-03-05 13:22 - 00260928 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll 2014-01-03 21:39 - 2012-03-05 13:22 - 00215360 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll 2014-01-03 21:39 - 2012-03-05 13:22 - 00028992 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvpciflt.sys 2014-01-03 21:39 - 2012-03-05 13:22 - 00012780 _____ () C:\Windows\system32\nvinfo.pb 2014-01-03 21:37 - 2012-03-21 23:39 - 00121344 _____ (Intel Corporation) C:\Windows\system32\IntelOpenCL64.dll 2014-01-03 21:37 - 2012-03-21 23:39 - 00020992 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll 2014-01-03 21:37 - 2012-03-21 23:33 - 00086528 _____ (Intel Corporation) C:\Windows\SysWOW64\IntelOpenCL32.dll 2014-01-03 21:37 - 2012-03-21 23:32 - 00017920 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll 2014-01-03 21:36 - 2014-01-03 21:36 - 00000000 ____D () C:\Program Files\Common Files\Intel 2014-01-03 21:34 - 2011-11-29 19:40 - 00568600 _____ (Intel Corporation) C:\Windows\system32\Drivers\iaStor.sys 2014-01-03 21:33 - 2014-01-03 21:44 - 00000000 ____D () C:\Program Files (x86)\Intel 2014-01-03 21:33 - 2014-01-03 21:36 - 00000000 ___HD () C:\Intel 2014-01-03 21:33 - 2012-01-16 11:06 - 00053248 _____ (Windows XP Bundled build C-Centric Single User) C:\Windows\SysWOW64\CSVer.dll 2014-01-03 21:32 - 2012-02-10 07:36 - 01544192 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll 2014-01-03 21:32 - 2012-02-10 06:38 - 01077248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll 2014-01-03 21:32 - 2012-02-03 05:34 - 03145728 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2014-01-03 21:32 - 2012-01-25 07:38 - 00149504 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorekmts.dll 2014-01-03 21:32 - 2012-01-25 07:38 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\rdpwsx.dll 2014-01-03 21:32 - 2012-01-25 07:33 - 00009216 _____ (Microsoft Corporation) C:\Windows\system32\rdrmemptylst.exe 2014-01-03 21:32 - 2011-11-19 16:20 - 05559152 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe 2014-01-03 21:32 - 2011-11-19 15:50 - 03968368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe 2014-01-03 21:32 - 2011-11-19 15:50 - 03913584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe 2014-01-03 21:31 - 2014-01-04 01:08 - 01766010 _____ () C:\Windows\WindowsUpdate.log 2014-01-03 21:31 - 2012-02-17 07:38 - 01031680 _____ (Microsoft Corporation) C:\Windows\system32\rdpcore.dll 2014-01-03 21:31 - 2012-02-17 06:34 - 00826880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpcore.dll 2014-01-03 21:31 - 2012-02-17 05:58 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpwd.sys 2014-01-03 21:31 - 2012-02-17 05:57 - 00023552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdtcp.sys ==================== One Month Modified Files and Folders ======= 2014-01-04 06:26 - 2009-07-14 06:38 - 00025600 ___SH () C:\Windows\system32\config\BCD-Template.LOG 2014-01-04 06:26 - 2009-07-14 06:32 - 00028672 _____ () C:\Windows\system32\config\BCD-Template 2014-01-04 06:25 - 2014-01-04 06:01 - 00001375 _____ () C:\Windows\WPatchProgress.ini 2014-01-04 06:25 - 2010-11-21 08:06 - 00000000 ____D () C:\Windows\SysWOW64\winrm 2014-01-04 06:25 - 2010-11-21 08:06 - 00000000 ____D () C:\Windows\SysWOW64\WCN 2014-01-04 06:25 - 2010-11-21 08:06 - 00000000 ____D () C:\Windows\SysWOW64\sysprep 2014-01-04 06:25 - 2010-11-21 08:06 - 00000000 ____D () C:\Windows\SysWOW64\slmgr 2014-01-04 06:25 - 2010-11-21 08:06 - 00000000 ____D () C:\Windows\system32\winrm 2014-01-04 06:25 - 2010-11-21 08:06 - 00000000 ____D () C:\Windows\system32\WCN 2014-01-04 06:25 - 2010-11-21 08:06 - 00000000 ____D () C:\Windows\system32\slmgr 2014-01-04 06:25 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\SysWOW64\oobe 2014-01-04 06:25 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\SysWOW64\MUI 2014-01-04 06:25 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\MUI 2014-01-04 06:25 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\Dism 2014-01-04 06:25 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\servicing 2014-01-04 06:25 - 2009-03-12 10:30 - 00000000 ____D () C:\Windows\LP 2014-01-04 06:20 - 2014-01-04 06:21 - 00295922 _____ () C:\Windows\system32\perfi007.dat 2014-01-04 06:20 - 2014-01-04 06:21 - 00038104 _____ () C:\Windows\system32\perfd007.dat 2014-01-04 06:20 - 2014-01-04 06:20 - 00000000 ____D () C:\Windows\SysWOW64\XPSViewer 2014-01-04 06:20 - 2014-01-04 06:20 - 00000000 ____D () C:\Windows\SysWOW64\de 2014-01-04 06:20 - 2014-01-04 06:20 - 00000000 ____D () C:\Windows\SysWOW64\0407 2014-01-04 06:20 - 2014-01-04 06:20 - 00000000 ____D () C:\Windows\system32\de 2014-01-04 06:20 - 2014-01-04 06:20 - 00000000 ____D () C:\Windows\system32\0407 2014-01-04 06:20 - 2010-11-21 08:06 - 00000000 ____D () C:\Windows\SysWOW64\Printing_Admin_Scripts 2014-01-04 06:20 - 2010-11-21 08:06 - 00000000 ____D () C:\Windows\system32\Printing_Admin_Scripts 2014-01-04 06:20 - 2009-07-14 06:37 - 00000000 ____D () C:\Windows\DigitalLocker 2014-01-04 06:20 - 2009-07-14 06:32 - 00000000 ____D () C:\Windows\system32\WinBioPlugIns 2014-01-04 06:20 - 2009-07-14 06:32 - 00000000 ____D () C:\Program Files\Windows Photo Viewer 2014-01-04 06:20 - 2009-07-14 06:32 - 00000000 ____D () C:\Program Files\Windows Defender 2014-01-04 06:20 - 2009-07-14 06:32 - 00000000 ____D () C:\Program Files\DVD Maker 2014-01-04 06:20 - 2009-07-14 06:32 - 00000000 ____D () C:\Program Files (x86)\Windows Photo Viewer 2014-01-04 06:20 - 2009-07-14 06:32 - 00000000 ____D () C:\Program Files (x86)\Windows Defender 2014-01-04 06:20 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\SysWOW64\Setup 2014-01-04 06:20 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\SysWOW64\migwiz 2014-01-04 06:20 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\SysWOW64\Dism 2014-01-04 06:20 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\SysWOW64\com 2014-01-04 06:20 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\Setup 2014-01-04 06:20 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\oobe 2014-01-04 06:20 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\migwiz 2014-01-04 06:20 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\com 2014-01-04 06:20 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\PolicyDefinitions 2014-01-04 06:20 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\IME 2014-01-04 06:20 - 2009-07-14 04:20 - 00000000 ____D () C:\Program Files\Common Files\System 2014-01-04 06:14 - 2014-01-04 06:14 - 00000000 ____D () C:\Windows\NAPP_Dism_Log 2014-01-04 06:14 - 2014-01-04 06:13 - 00005845 _____ () C:\Windows\WisGAPas.log 2014-01-04 06:13 - 2014-01-04 06:13 - 17790464 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-01-04 06:13 - 2014-01-04 06:13 - 12282368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2014-01-04 06:13 - 2014-01-04 06:13 - 10887168 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2014-01-04 06:13 - 2014-01-04 06:13 - 09705472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2014-01-04 06:13 - 2014-01-04 06:13 - 02382848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2014-01-04 06:13 - 2014-01-04 06:13 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-01-04 06:13 - 2014-01-04 06:13 - 02308096 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2014-01-04 06:13 - 2014-01-04 06:13 - 02144256 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2014-01-04 06:13 - 2014-01-04 06:13 - 01798656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2014-01-04 06:13 - 2014-01-04 06:13 - 01792000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2014-01-04 06:13 - 2014-01-04 06:13 - 01493504 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2014-01-04 06:13 - 2014-01-04 06:13 - 01427456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2014-01-04 06:13 - 2014-01-04 06:13 - 01390080 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2014-01-04 06:13 - 2014-01-04 06:13 - 01345536 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2014-01-04 06:13 - 2014-01-04 06:13 - 01127424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2014-01-04 06:13 - 2014-01-04 06:13 - 01103360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2014-01-04 06:13 - 2014-01-04 06:13 - 00818688 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2014-01-04 06:13 - 2014-01-04 06:13 - 00716800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2014-01-04 06:13 - 2014-01-04 06:13 - 00248320 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2014-01-04 06:13 - 2014-01-04 06:13 - 00237056 _____ (Microsoft Corporation) C:\Windows\system32\url.dll 2014-01-04 06:13 - 2014-01-04 06:13 - 00231936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll 2014-01-04 06:13 - 2014-01-04 06:13 - 00176640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2014-01-04 06:13 - 2014-01-04 06:13 - 00096256 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2014-01-04 06:13 - 2014-01-04 06:13 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2014-01-04 06:13 - 2014-01-04 06:13 - 00072704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2014-01-04 06:13 - 2014-01-04 06:13 - 00065024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2014-01-04 06:13 - 2014-01-04 06:13 - 00000918 _____ () C:\Windows\MOD01SET74DE0N0005.XML 2014-01-04 06:13 - 2014-01-04 06:01 - 00344171 _____ () C:\Windows\CapsuleDll.log 2014-01-04 06:13 - 2012-06-05 15:55 - 00024913 _____ () C:\Windows\InfoBOM.xml 2014-01-04 06:09 - 2014-01-04 06:09 - 03695416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat 2014-01-04 06:09 - 2014-01-04 06:09 - 03695416 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat 2014-01-04 06:09 - 2014-01-04 06:09 - 00697344 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2014-01-04 06:09 - 2014-01-04 06:09 - 00603648 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2014-01-04 06:09 - 2014-01-04 06:09 - 00580608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2014-01-04 06:09 - 2014-01-04 06:09 - 00534528 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2014-01-04 06:09 - 2014-01-04 06:09 - 00452608 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2014-01-04 06:09 - 2014-01-04 06:09 - 00448512 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2014-01-04 06:09 - 2014-01-04 06:09 - 00434176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2014-01-04 06:09 - 2014-01-04 06:09 - 00420864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2014-01-04 06:09 - 2014-01-04 06:09 - 00403248 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2014-01-04 06:09 - 2014-01-04 06:09 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec 2014-01-04 06:09 - 2014-01-04 06:09 - 00353792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2014-01-04 06:09 - 2014-01-04 06:09 - 00353584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2014-01-04 06:09 - 2014-01-04 06:09 - 00282112 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2014-01-04 06:09 - 2014-01-04 06:09 - 00267776 _____ (Microsoft Corporation) C:\Windows\system32\ieaksie.dll 2014-01-04 06:09 - 2014-01-04 06:09 - 00249344 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll 2014-01-04 06:09 - 2014-01-04 06:09 - 00227840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieaksie.dll 2014-01-04 06:09 - 2014-01-04 06:09 - 00223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2014-01-04 06:09 - 2014-01-04 06:09 - 00222208 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll 2014-01-04 06:09 - 2014-01-04 06:09 - 00203776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll 2014-01-04 06:09 - 2014-01-04 06:09 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2014-01-04 06:09 - 2014-01-04 06:09 - 00173056 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2014-01-04 06:09 - 2014-01-04 06:09 - 00165888 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe 2014-01-04 06:09 - 2014-01-04 06:09 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieakui.dll 2014-01-04 06:09 - 2014-01-04 06:09 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\ieakui.dll 2014-01-04 06:09 - 2014-01-04 06:09 - 00162304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2014-01-04 06:09 - 2014-01-04 06:09 - 00161792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll 2014-01-04 06:09 - 2014-01-04 06:09 - 00160256 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe 2014-01-04 06:09 - 2014-01-04 06:09 - 00160256 _____ (Microsoft Corporation) C:\Windows\system32\ieakeng.dll 2014-01-04 06:09 - 2014-01-04 06:09 - 00152064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe 2014-01-04 06:09 - 2014-01-04 06:09 - 00150528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe 2014-01-04 06:09 - 2014-01-04 06:09 - 00149504 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll 2014-01-04 06:09 - 2014-01-04 06:09 - 00145920 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll 2014-01-04 06:09 - 2014-01-04 06:09 - 00142848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2014-01-04 06:09 - 2014-01-04 06:09 - 00135168 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll 2014-01-04 06:09 - 2014-01-04 06:09 - 00130560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieakeng.dll 2014-01-04 06:09 - 2014-01-04 06:09 - 00123392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll 2014-01-04 06:09 - 2014-01-04 06:09 - 00118784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll 2014-01-04 06:09 - 2014-01-04 06:09 - 00114176 _____ (Microsoft Corporation) C:\Windows\system32\admparse.dll 2014-01-04 06:09 - 2014-01-04 06:09 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2014-01-04 06:09 - 2014-01-04 06:09 - 00110592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll 2014-01-04 06:09 - 2014-01-04 06:09 - 00103936 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll 2014-01-04 06:09 - 2014-01-04 06:09 - 00101888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\admparse.dll 2014-01-04 06:09 - 2014-01-04 06:09 - 00091648 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe 2014-01-04 06:09 - 2014-01-04 06:09 - 00089088 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe 2014-01-04 06:09 - 2014-01-04 06:09 - 00089088 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2014-01-04 06:09 - 2014-01-04 06:09 - 00086528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2014-01-04 06:09 - 2014-01-04 06:09 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2014-01-04 06:09 - 2014-01-04 06:09 - 00082432 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll 2014-01-04 06:09 - 2014-01-04 06:09 - 00078848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll 2014-01-04 06:09 - 2014-01-04 06:09 - 00076800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe 2014-01-04 06:09 - 2014-01-04 06:09 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx 2014-01-04 06:09 - 2014-01-04 06:09 - 00074752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe 2014-01-04 06:09 - 2014-01-04 06:09 - 00074752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2014-01-04 06:09 - 2014-01-04 06:09 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ie4uinit.exe 2014-01-04 06:09 - 2014-01-04 06:09 - 00066048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll 2014-01-04 06:09 - 2014-01-04 06:09 - 00065024 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll 2014-01-04 06:09 - 2014-01-04 06:09 - 00063488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx 2014-01-04 06:09 - 2014-01-04 06:09 - 00055296 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll 2014-01-04 06:09 - 2014-01-04 06:09 - 00054272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll 2014-01-04 06:09 - 2014-01-04 06:09 - 00049664 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll 2014-01-04 06:09 - 2014-01-04 06:09 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll 2014-01-04 06:09 - 2014-01-04 06:09 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll 2014-01-04 06:09 - 2014-01-04 06:09 - 00041472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll 2014-01-04 06:09 - 2014-01-04 06:09 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2014-01-04 06:09 - 2014-01-04 06:09 - 00035840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll 2014-01-04 06:09 - 2014-01-04 06:09 - 00031744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2014-01-04 06:09 - 2014-01-04 06:09 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll 2014-01-04 06:09 - 2014-01-04 06:09 - 00023552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll 2014-01-04 06:09 - 2014-01-04 06:09 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe 2014-01-04 06:09 - 2014-01-04 06:09 - 00011776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe 2014-01-04 06:09 - 2014-01-04 06:09 - 00010752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe 2014-01-04 06:09 - 2014-01-04 06:09 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe 2014-01-04 06:02 - 2014-01-04 06:02 - 00951680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys 2014-01-04 01:08 - 2014-01-04 01:08 - 00009823 _____ () C:\Users\Devil\Downloads\FRST.txt 2014-01-04 01:08 - 2014-01-04 01:08 - 00000000 ____D () C:\FRST 2014-01-04 01:08 - 2014-01-03 21:31 - 01766010 _____ () C:\Windows\WindowsUpdate.log 2014-01-04 01:08 - 2009-07-14 05:45 - 00024192 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-01-04 01:08 - 2009-07-14 05:45 - 00024192 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-01-04 01:07 - 2014-01-04 01:07 - 00000000 ____D () C:\Users\Devil\Desktop\tools 2014-01-04 01:06 - 2014-01-03 21:42 - 00000828 _____ () C:\Windows\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon.job 2014-01-04 01:05 - 2012-06-05 15:50 - 00000830 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job 2014-01-04 01:05 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2014-01-04 01:05 - 2009-07-14 05:51 - 00043958 _____ () C:\Windows\setupact.log 2014-01-04 01:00 - 2014-01-04 01:00 - 03645064 _____ (Piriform Ltd) C:\Users\Devil\Downloads\ccsetup410_slim.exe 2014-01-04 00:58 - 2014-01-04 00:58 - 02155520 _____ (Farbar) C:\Users\Devil\Downloads\FRST64.exe 2014-01-04 00:54 - 2014-01-04 00:54 - 00000000 ____D () C:\Users\Devil\AppData\Roaming\Malwarebytes 2014-01-04 00:54 - 2014-01-04 00:54 - 00000000 ____D () C:\ProgramData\Malwarebytes 2014-01-04 00:54 - 2014-01-04 00:54 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware 2014-01-04 00:47 - 2014-01-03 23:08 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox 2014-01-04 00:43 - 2014-01-04 00:43 - 00000000 ____D () C:\ProgramData\Kaspersky Lab 2014-01-04 00:43 - 2014-01-03 22:24 - 00000000 ___RD () C:\Users\Devil\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup 2014-01-04 00:38 - 2014-01-03 23:10 - 00000000 ____D () C:\Users\Devil\AppData\Local\Mozilla 2014-01-04 00:36 - 2009-07-14 06:32 - 00000000 ____D () C:\Windows\system32\restore 2014-01-04 00:28 - 2014-01-04 00:22 - 00000000 ____D () C:\Users\Devil\Documents\Bluetooth Folder 2014-01-04 00:26 - 2014-01-04 06:21 - 00643866 _____ () C:\Windows\system32\perfh007.dat 2014-01-04 00:26 - 2014-01-04 06:21 - 00126394 _____ () C:\Windows\system32\perfc007.dat 2014-01-04 00:26 - 2009-07-14 06:13 - 01472002 _____ () C:\Windows\system32\PerfStringBackup.INI 2014-01-04 00:22 - 2014-01-04 00:22 - 00000000 ____D () C:\Users\Devil\AppData\Local\BMExplorer 2014-01-04 00:22 - 2014-01-03 21:49 - 00000000 ____D () C:\ProgramData\Atheros 2014-01-04 00:14 - 2012-06-05 15:50 - 00003768 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater 2014-01-03 23:57 - 2014-01-03 23:57 - 00000000 ____D () C:\Users\Devil\AppData\Roaming\Process Hacker 2 2014-01-03 23:56 - 2014-01-03 21:46 - 00000000 ____D () C:\Program Files (x86)\Bluetooth Suite 2014-01-03 23:53 - 2014-01-03 23:53 - 00000000 ____D () C:\Users\Devil\Documents\Neuer Ordner 2014-01-03 23:53 - 2014-01-03 23:53 - 00000000 ____D () C:\ProgramData\LockHunter 2014-01-03 23:51 - 2014-01-03 23:51 - 00000000 ____D () C:\Program Files\Process Hacker 2 2014-01-03 23:43 - 2010-11-21 04:47 - 00007702 _____ () C:\Windows\PFRO.log 2014-01-03 23:42 - 2014-01-03 23:42 - 00003544 ____N () C:\bootsqm.dat 2014-01-03 23:14 - 2009-07-14 06:32 - 00000000 ____D () C:\Program Files\Windows Sidebar 2014-01-03 23:14 - 2009-07-14 06:32 - 00000000 ____D () C:\Program Files (x86)\Windows Sidebar 2014-01-03 23:11 - 2014-01-03 23:10 - 00000000 ____D () C:\Users\Devil\AppData\Roaming\Mozilla 2014-01-03 23:08 - 2014-01-03 23:08 - 00014602 _____ () C:\HijackPatrol.log 2014-01-03 23:08 - 2014-01-03 23:08 - 00001155 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk 2014-01-03 23:08 - 2014-01-03 23:08 - 00000000 ____D () C:\Users\Devil\AppData\Roaming\WinPatrol 2014-01-03 23:08 - 2014-01-03 23:08 - 00000000 ____D () C:\ProgramData\Mozilla 2014-01-03 23:08 - 2014-01-03 23:08 - 00000000 ____D () C:\ProgramData\InstallMate 2014-01-03 23:08 - 2014-01-03 23:08 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service 2014-01-03 23:08 - 2014-01-03 23:08 - 00000000 ____D () C:\Program Files (x86)\BillP Studios 2014-01-03 23:06 - 2014-01-03 23:06 - 00000000 ____D () C:\Users\Devil\AppData\Roaming\LockHunter 2014-01-03 23:06 - 2014-01-03 23:06 - 00000000 ____D () C:\Program Files\LockHunter 2014-01-03 23:00 - 2014-01-03 23:00 - 00000550 _____ () C:\Users\Devil\Desktop\Emsisoft Emergency Kit.lnk 2014-01-03 23:00 - 2014-01-03 22:59 - 00000000 ____D () C:\EEK 2014-01-03 22:59 - 2014-01-03 22:59 - 00000000 ____D () C:\Users\Devil\AppData\Roaming\AVAST Software 2014-01-03 22:58 - 2014-01-03 22:58 - 00000000 ____D () C:\ProgramData\Lavasoft 2014-01-03 22:57 - 2014-01-03 22:57 - 01032416 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys 2014-01-03 22:57 - 2014-01-03 22:57 - 00409832 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys 2014-01-03 22:57 - 2014-01-03 22:57 - 00334648 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe 2014-01-03 22:57 - 2014-01-03 22:57 - 00205320 _____ () C:\Windows\system32\Drivers\aswVmm.sys 2014-01-03 22:57 - 2014-01-03 22:57 - 00092544 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys 2014-01-03 22:57 - 2014-01-03 22:57 - 00084328 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys 2014-01-03 22:57 - 2014-01-03 22:57 - 00065776 _____ () C:\Windows\system32\Drivers\aswRvrt.sys 2014-01-03 22:57 - 2014-01-03 22:57 - 00065264 _____ (AVAST Software) C:\Windows\system32\Drivers\aswTdi.sys 2014-01-03 22:57 - 2014-01-03 22:57 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr 2014-01-03 22:57 - 2014-01-03 22:57 - 00038984 _____ (AVAST Software) C:\Windows\system32\Drivers\aswFsBlk.sys 2014-01-03 22:57 - 2014-01-03 22:57 - 00001970 _____ () C:\Users\Public\Desktop\avast! Free Antivirus.lnk 2014-01-03 22:57 - 2014-01-03 22:57 - 00000350 ____H () C:\Windows\Tasks\avast! Emergency Update.job 2014-01-03 22:57 - 2014-01-03 22:57 - 00000000 ____D () C:\Program Files\AVAST Software 2014-01-03 22:56 - 2014-01-03 22:56 - 00409832 _____ (AVAST Software) C:\Windows\system32\Drivers\uomaedfu.sys 2014-01-03 22:56 - 2014-01-03 22:56 - 00409832 _____ (AVAST Software) C:\Windows\system32\Drivers\ftegstgg.sys 2014-01-03 22:56 - 2014-01-03 22:55 - 00000000 ____D () C:\ProgramData\AVAST Software 2014-01-03 22:55 - 2014-01-03 22:55 - 00000000 ____D () C:\Users\Devil\AppData\Roaming\Adobe 2014-01-03 22:55 - 2014-01-03 22:55 - 00000000 ____D () C:\Users\Devil\AppData\Local\Adobe 2014-01-03 22:34 - 2012-06-05 15:56 - 00000000 ____D () C:\ProgramData\McAfee 2014-01-03 22:34 - 2012-06-05 15:56 - 00000000 ____D () C:\Program Files (x86)\McAfee 2014-01-03 22:26 - 2014-01-04 06:02 - 00000226 _____ () C:\Windows\User.xml 2014-01-03 22:26 - 2012-06-05 15:24 - 01900215 _____ () C:\Windows\launApp.log 2014-01-03 22:26 - 2012-03-24 02:30 - 00000000 ___HD () C:\Elements 2014-01-03 22:26 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\Help 2014-01-03 22:25 - 2014-01-03 22:25 - 00002609 _____ () C:\Users\Public\Desktop\eBay.lnk 2014-01-03 22:25 - 2014-01-03 22:25 - 00001736 _____ () C:\Users\Public\Desktop\Online kaufen.lnk 2014-01-03 22:25 - 2014-01-03 22:25 - 00000000 ____D () C:\Program Files\Accessory Store 2014-01-03 22:25 - 2014-01-03 22:25 - 00000000 ____D () C:\Program Files (x86)\OEM 2014-01-03 22:25 - 2014-01-03 22:23 - 00002614 _____ () C:\Windows\WisGRegOffer.log 2014-01-03 22:25 - 2012-06-05 15:58 - 00000000 ____D () C:\ProgramData\oem 2014-01-03 22:24 - 2014-01-03 22:24 - 00059968 _____ () C:\Users\Devil\AppData\Local\GDIPFONTCACHEV1.DAT 2014-01-03 22:24 - 2014-01-03 22:24 - 00002078 _____ () C:\Users\Public\Desktop\Eurosport Player.lnk 2014-01-03 22:24 - 2014-01-03 22:24 - 00001447 _____ () C:\Users\Devil\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2014-01-03 22:24 - 2014-01-03 22:24 - 00001413 _____ () C:\Users\Devil\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk 2014-01-03 22:24 - 2014-01-03 22:24 - 00000995 _____ () C:\Users\Public\Desktop\Kobo.lnk 2014-01-03 22:24 - 2014-01-03 22:24 - 00000000 ___RD () C:\Users\Devil\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools 2014-01-03 22:24 - 2014-01-03 22:24 - 00000000 ____D () C:\Users\Devil\AppData\Roaming\Synaptics 2014-01-03 22:24 - 2014-01-03 22:24 - 00000000 ____D () C:\Users\Devil\AppData\Roaming\Screensaver 2014-01-03 22:24 - 2014-01-03 22:24 - 00000000 ____D () C:\Users\Devil\AppData\Roaming\Atheros 2014-01-03 22:24 - 2014-01-03 22:24 - 00000000 ____D () C:\Program Files\Preload 2014-01-03 22:24 - 2014-01-03 22:24 - 00000000 ____D () C:\Program Files (x86)\Kobo 2014-01-03 22:24 - 2014-01-03 22:23 - 00000000 ____D () C:\Users\Devil 2014-01-03 22:23 - 2014-01-03 22:23 - 00000122 _____ () C:\Windows\WLangUpt.log 2014-01-03 22:23 - 2014-01-03 22:23 - 00000020 ___SH () C:\Users\Devil\ntuser.ini 2014-01-03 22:23 - 2014-01-03 22:23 - 00000000 _SHDL () C:\Users\Devil\Vorlagen 2014-01-03 22:23 - 2014-01-03 22:23 - 00000000 _SHDL () C:\Users\Devil\Startmenü 2014-01-03 22:23 - 2014-01-03 22:23 - 00000000 _SHDL () C:\Users\Devil\Netzwerkumgebung 2014-01-03 22:23 - 2014-01-03 22:23 - 00000000 _SHDL () C:\Users\Devil\Lokale Einstellungen 2014-01-03 22:23 - 2014-01-03 22:23 - 00000000 _SHDL () C:\Users\Devil\Eigene Dateien 2014-01-03 22:23 - 2014-01-03 22:23 - 00000000 _SHDL () C:\Users\Devil\Druckumgebung 2014-01-03 22:23 - 2014-01-03 22:23 - 00000000 _SHDL () C:\Users\Devil\Documents\Eigene Musik 2014-01-03 22:23 - 2014-01-03 22:23 - 00000000 _SHDL () C:\Users\Devil\Documents\Eigene Bilder 2014-01-03 22:23 - 2014-01-03 22:23 - 00000000 _SHDL () C:\Users\Devil\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-01-03 22:23 - 2014-01-03 22:23 - 00000000 _SHDL () C:\Users\Devil\AppData\Local\Verlauf 2014-01-03 22:23 - 2014-01-03 22:23 - 00000000 _SHDL () C:\Users\Devil\AppData\Local\Anwendungsdaten 2014-01-03 22:23 - 2014-01-03 22:23 - 00000000 _SHDL () C:\Users\Devil\Anwendungsdaten 2014-01-03 22:23 - 2014-01-03 22:23 - 00000000 ____D () C:\Users\Devil\AppData\Local\VirtualStore 2014-01-03 22:23 - 2014-01-03 22:23 - 00000000 _____ () C:\Users\Devil\agent.log 2014-01-03 22:23 - 2012-06-05 15:56 - 00000000 __SHD () C:\OEM 2014-01-03 22:23 - 2012-06-05 15:55 - 00565200 _____ () C:\Windows\PLaunch.log 2014-01-03 22:23 - 2012-06-05 15:55 - 00000218 __RSH () C:\Preload.rev 2014-01-03 22:23 - 2012-06-05 15:55 - 00000168 _____ () C:\Windows\WisLangCode.ini 2014-01-03 22:23 - 2012-06-05 15:24 - 00009090 _____ () C:\Windows\PatchFul.log 2014-01-03 22:23 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\rescache 2014-01-03 22:22 - 2014-01-03 22:22 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Musik 2014-01-03 22:22 - 2014-01-03 22:22 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Bilder 2014-01-03 22:22 - 2014-01-03 22:22 - 00000000 _SHDL () C:\Users\Default\Vorlagen 2014-01-03 22:22 - 2014-01-03 22:22 - 00000000 _SHDL () C:\Users\Default\Startmenü 2014-01-03 22:22 - 2014-01-03 22:22 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung 2014-01-03 22:22 - 2014-01-03 22:22 - 00000000 _SHDL () C:\Users\Default\Lokale Einstellungen 2014-01-03 22:22 - 2014-01-03 22:22 - 00000000 _SHDL () C:\Users\Default\Eigene Dateien 2014-01-03 22:22 - 2014-01-03 22:22 - 00000000 _SHDL () C:\Users\Default\Druckumgebung 2014-01-03 22:22 - 2014-01-03 22:22 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik 2014-01-03 22:22 - 2014-01-03 22:22 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder 2014-01-03 22:22 - 2014-01-03 22:22 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-01-03 22:22 - 2014-01-03 22:22 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf 2014-01-03 22:22 - 2014-01-03 22:22 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Anwendungsdaten 2014-01-03 22:22 - 2014-01-03 22:22 - 00000000 _SHDL () C:\Users\Default\Anwendungsdaten 2014-01-03 22:22 - 2014-01-03 22:22 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik 2014-01-03 22:22 - 2014-01-03 22:22 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder 2014-01-03 22:22 - 2014-01-03 22:22 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-01-03 22:22 - 2014-01-03 22:22 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf 2014-01-03 22:22 - 2014-01-03 22:22 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Anwendungsdaten 2014-01-03 22:22 - 2014-01-03 22:22 - 00000000 _SHDL () C:\Programme 2014-01-03 22:22 - 2014-01-03 22:22 - 00000000 _SHDL () C:\ProgramData\Vorlagen 2014-01-03 22:22 - 2014-01-03 22:22 - 00000000 _SHDL () C:\ProgramData\Startmenü 2014-01-03 22:22 - 2014-01-03 22:22 - 00000000 _SHDL () C:\ProgramData\Favoriten 2014-01-03 22:22 - 2014-01-03 22:22 - 00000000 _SHDL () C:\ProgramData\Dokumente 2014-01-03 22:22 - 2014-01-03 22:22 - 00000000 _SHDL () C:\ProgramData\Anwendungsdaten 2014-01-03 22:22 - 2014-01-03 22:22 - 00000000 _SHDL () C:\Program Files\Gemeinsame Dateien 2014-01-03 22:22 - 2014-01-03 22:22 - 00000000 _SHDL () C:\Dokumente und Einstellungen 2014-01-03 22:22 - 2014-01-03 22:22 - 00000000 __SHD () C:\Recovery 2014-01-03 22:22 - 2009-07-14 04:20 - 00000000 __RHD () C:\Users\Default 2014-01-03 22:22 - 2009-07-14 04:20 - 00000000 ____D () C:\Program Files\Windows NT 2014-01-03 22:18 - 2014-01-04 06:01 - 00000225 _____ () C:\Windows\Factory.xml 2014-01-03 22:18 - 2012-06-05 15:55 - 00000225 _____ () C:\Windows\RCD.xml 2014-01-03 22:17 - 2012-03-24 02:58 - 00000000 ____D () C:\Windows\Panther 2014-01-03 22:17 - 2009-07-14 05:46 - 00005075 _____ () C:\Windows\DtcInstall.log 2014-01-03 22:17 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\sysprep 2014-01-03 22:11 - 2014-01-04 06:13 - 00000267 _____ () C:\Windows\LaunApp.ini 2014-01-03 22:10 - 2014-01-03 22:10 - 00000000 ____D () C:\ProgramData\EgisTec 2014-01-03 22:06 - 2014-01-03 22:06 - 00000000 ____D () C:\Program Files (x86)\Microsoft Office 2014-01-03 22:05 - 2014-01-04 06:14 - 00001964 _____ () C:\Windows\Patch.log 2014-01-03 22:05 - 2011-02-12 04:43 - 00000000 ____D () C:\Windows\DeployWinRE2 2014-01-03 22:05 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\Recovery 2014-01-03 22:04 - 2014-01-03 22:04 - 00000000 ___HD () C:\BOOK 2014-01-03 22:04 - 2014-01-03 22:04 - 00000000 ____D () C:\Windows\System32\Tasks\Recovery Management 2014-01-03 22:04 - 2012-06-05 16:47 - 00000000 ____D () C:\Program Files\Acer 2014-01-03 22:04 - 2012-06-05 16:47 - 00000000 ____D () C:\Program Files (x86)\Acer 2014-01-03 22:04 - 2012-06-05 15:54 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information 2014-01-03 22:03 - 2014-01-03 22:03 - 00062776 _____ (Egis Technology Inc.) C:\Windows\system32\Drivers\mwlPSDVDisk.sys 2014-01-03 22:03 - 2014-01-03 22:03 - 00022648 _____ (Egis Technology Inc.) C:\Windows\system32\Drivers\mwlPSDFilter.sys 2014-01-03 22:03 - 2014-01-03 22:03 - 00020520 _____ (Egis Technology Inc.) C:\Windows\system32\Drivers\mwlPSDNserv.sys 2014-01-03 22:03 - 2014-01-03 22:03 - 00000000 ____D () C:\ProgramData\EgisTec IPS 2014-01-03 22:03 - 2014-01-03 22:03 - 00000000 ____D () C:\Program Files\EgisTec IPS 2014-01-03 22:03 - 2014-01-03 22:03 - 00000000 ____D () C:\Program Files (x86)\EgisTec Shredder 2014-01-03 22:03 - 2014-01-03 22:03 - 00000000 ____D () C:\Program Files (x86)\EgisTec MyWinLocker 2014-01-03 22:03 - 2014-01-03 22:03 - 00000000 ____D () C:\Program Files (x86)\EgisTec IPS 2014-01-03 22:02 - 2014-01-03 22:02 - 00000000 ____D () C:\Program Files (x86)\EgisTec MyWinLockerSuite 2014-01-03 21:59 - 2014-01-03 21:59 - 00003200 _____ () C:\Windows\System32\Tasks\DeviceDetector 2014-01-03 21:58 - 2014-01-03 21:56 - 00000000 ____D () C:\Program Files (x86)\Cyberlink 2014-01-03 21:56 - 2014-01-03 21:53 - 00002454 _____ () C:\ProgramData\clear.fiSDK20.log 2014-01-03 21:56 - 2014-01-03 21:53 - 00000000 ____D () C:\ProgramData\CyberLink 2014-01-03 21:55 - 2014-01-03 21:55 - 00001162 _____ () C:\Users\Public\Desktop\clear.fi Photo.lnk 2014-01-03 21:55 - 2014-01-03 21:55 - 00000032 _____ () C:\ProgramData\PS.log 2014-01-03 21:55 - 2014-01-03 21:54 - 00000000 ____D () C:\ProgramData\CLSK 2014-01-03 21:55 - 2014-01-03 21:53 - 00000000 ____D () C:\ProgramData\clear.fi 2014-01-03 21:54 - 2014-01-03 21:54 - 00000000 ____D () C:\ProgramData\install_clap 2014-01-03 21:53 - 2014-01-03 21:53 - 00001162 _____ () C:\Users\Public\Desktop\clear.fi Media.lnk 2014-01-03 21:52 - 2014-01-03 21:52 - 00000000 ____D () C:\ProgramData\Synaptics 2014-01-03 21:52 - 2014-01-03 21:42 - 00000830 _____ () C:\Windows\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d.job 2014-01-03 21:52 - 2014-01-03 21:41 - 00000000 ____D () C:\Windows\SysWOW64\NV 2014-01-03 21:52 - 2014-01-03 21:41 - 00000000 ____D () C:\Windows\system32\NV 2014-01-03 21:50 - 2014-01-03 21:50 - 00000184 _____ () C:\Windows\LMv4.UNI 2014-01-03 21:50 - 2014-01-03 21:50 - 00000000 ____D () C:\Windows\SysWOW64\sda 2014-01-03 21:50 - 2014-01-03 21:50 - 00000000 ____D () C:\Program Files (x86)\Launch Manager 2014-01-03 21:50 - 2014-01-03 21:42 - 00000000 ____D () C:\Program Files (x86)\Realtek 2014-01-03 21:49 - 2014-01-03 21:49 - 00006874 _____ () C:\Windows\DPINST.LOG 2014-01-03 21:49 - 2014-01-03 21:49 - 00001360 _____ () C:\Windows\Synaptics.log 2014-01-03 21:49 - 2014-01-03 21:49 - 00000032 _____ () C:\Windows\SysWOW64\setup.log 2014-01-03 21:49 - 2014-01-03 21:49 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_SynTP_01009.Wdf 2014-01-03 21:49 - 2014-01-03 21:49 - 00000000 ____D () C:\Windows\system32\nn-NO 2014-01-03 21:49 - 2014-01-03 21:49 - 00000000 ____D () C:\Program Files\Synaptics 2014-01-03 21:49 - 2014-01-03 21:49 - 00000000 ____D () C:\Program Files (x86)\Atheros 2014-01-03 21:49 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\tr-TR 2014-01-03 21:48 - 2014-01-03 21:48 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_btath_hcrp_01009.Wdf 2014-01-03 21:46 - 2012-03-08 16:49 - 00246804 _____ () C:\Windows\system32\Drivers\AtherosBt.bin 2014-01-03 21:46 - 2012-03-08 16:49 - 00001796 _____ () C:\Windows\system32\Drivers\ramps_0x11020000_40.dfu 2014-01-03 21:46 - 2012-03-08 16:49 - 00001434 _____ () C:\Windows\system32\Drivers\ramps_0x31010000_40.dfu 2014-01-03 21:46 - 2012-03-08 16:49 - 00001242 _____ () C:\Windows\system32\Drivers\ramps_0x01020200_40_0x01.dfu 2014-01-03 21:46 - 2012-03-08 16:49 - 00001228 _____ () C:\Windows\system32\Drivers\ramps_0x01020200_40_0x04.dfu 2014-01-03 21:46 - 2012-03-08 16:49 - 00001214 _____ () C:\Windows\system32\Drivers\ramps_0x01020200_40_0x03.dfu 2014-01-03 21:46 - 2012-03-08 16:49 - 00001204 _____ () C:\Windows\system32\Drivers\ramps_0x01020200_40_0x02.dfu 2014-01-03 21:46 - 2012-03-08 16:49 - 00001204 _____ () C:\Windows\system32\Drivers\ramps_0x01020200_40.dfu 2014-01-03 21:46 - 2012-03-08 16:49 - 00001198 _____ () C:\Windows\system32\Drivers\ramps_0x01020200_26.dfu 2014-01-03 21:46 - 2012-03-08 16:49 - 00001192 _____ () C:\Windows\system32\Drivers\ramps_0x01020200_26_0x01.dfu 2014-01-03 21:44 - 2014-01-03 21:44 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_iusb3hcs_01009.Wdf 2014-01-03 21:44 - 2014-01-03 21:33 - 00000000 ____D () C:\Program Files (x86)\Intel 2014-01-03 21:43 - 2014-01-03 21:43 - 00000000 ____D () C:\Windows\SysWOW64\RTCOM 2014-01-03 21:43 - 2014-01-03 21:43 - 00000000 ____D () C:\Dolby PCEE4 2014-01-03 21:42 - 2014-01-03 21:42 - 00003492 _____ () C:\Windows\System32\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d 2014-01-03 21:42 - 2014-01-03 21:42 - 00003188 _____ () C:\Windows\System32\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon 2014-01-03 21:42 - 2014-01-03 21:42 - 00000000 ____D () C:\ProgramData\Intel 2014-01-03 21:42 - 2014-01-03 21:42 - 00000000 ____D () C:\Program Files\Realtek 2014-01-03 21:42 - 2014-01-03 21:42 - 00000000 ____D () C:\Program Files\Intel 2014-01-03 21:42 - 2014-01-03 21:39 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation 2014-01-03 21:42 - 2009-07-14 04:20 - 00000000 ____D () C:\Program Files\Common Files\Microsoft Shared 2014-01-03 21:41 - 2014-01-03 21:40 - 00000000 ____D () C:\ProgramData\NVIDIA 2014-01-03 21:40 - 2014-01-03 21:40 - 00000020 ___SH () C:\Users\UpdatusUser\ntuser.ini 2014-01-03 21:40 - 2014-01-03 21:40 - 00000000 _SHDL () C:\Users\UpdatusUser\Vorlagen 2014-01-03 21:40 - 2014-01-03 21:40 - 00000000 _SHDL () C:\Users\UpdatusUser\Startmenü 2014-01-03 21:40 - 2014-01-03 21:40 - 00000000 _SHDL () C:\Users\UpdatusUser\Netzwerkumgebung 2014-01-03 21:40 - 2014-01-03 21:40 - 00000000 _SHDL () C:\Users\UpdatusUser\Lokale Einstellungen 2014-01-03 21:40 - 2014-01-03 21:40 - 00000000 _SHDL () C:\Users\UpdatusUser\Eigene Dateien 2014-01-03 21:40 - 2014-01-03 21:40 - 00000000 _SHDL () C:\Users\UpdatusUser\Druckumgebung 2014-01-03 21:40 - 2014-01-03 21:40 - 00000000 _SHDL () C:\Users\UpdatusUser\Documents\Eigene Musik 2014-01-03 21:40 - 2014-01-03 21:40 - 00000000 _SHDL () C:\Users\UpdatusUser\Documents\Eigene Bilder 2014-01-03 21:40 - 2014-01-03 21:40 - 00000000 _SHDL () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-01-03 21:40 - 2014-01-03 21:40 - 00000000 _SHDL () C:\Users\UpdatusUser\AppData\Local\Verlauf 2014-01-03 21:40 - 2014-01-03 21:40 - 00000000 _SHDL () C:\Users\UpdatusUser\AppData\Local\Anwendungsdaten 2014-01-03 21:40 - 2014-01-03 21:40 - 00000000 _SHDL () C:\Users\UpdatusUser\Anwendungsdaten 2014-01-03 21:40 - 2014-01-03 21:39 - 00000000 ____D () C:\Program Files\NVIDIA Corporation 2014-01-03 21:39 - 2014-01-03 21:39 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation 2014-01-03 21:36 - 2014-01-03 21:36 - 00000000 ____D () C:\Program Files\Common Files\Intel 2014-01-03 21:36 - 2014-01-03 21:33 - 00000000 ___HD () C:\Intel 2014-01-03 21:35 - 2009-07-14 05:45 - 00283104 _____ () C:\Windows\system32\FNTCACHE.DAT 2014-01-03 21:28 - 2012-03-24 02:00 - 00005949 _____ () C:\Windows\TSSysprep.log Files to move or delete: ==================== C:\Windows\system32\nvinitx.dll ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\rpcss.dll => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2012-03-24 01:59 ==================== End Of Log ============================ |
02.03.2014, 01:38 | #4 |
| Ich kann es nicht beschreiben!aber ich weiss es ist was da (evtl. Rootkit, Shadow,Manipulation,Spionage) Additional scan result of Farbar Recovery Scan Tool (x64) Version: 01-03-2014 Ran by Devil at 2014-01-04 01:09:23 Running from C:\Users\Devil\Downloads Boot Mode: Normal ========================================================== ==================== Security Center ======================== AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B} AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736} ==================== Installed Programs ====================== clear.fi SDK - MVP 2 (x32 Version: 2.0.1505 - CyberLink Corp.) Hidden clear.fi SDK- Movie 2 (x32 Version: 2.0.1502 - CyberLink Corp.) Hidden Acer Backup Manager (HKLM-x32\...\InstallShield_{0B61BBD5-DA3C-409A-8730-0C3DC3B0F270}) (Version: 3.0.0.100 - NTI Corporation) Acer Crystal Eye Webcam (HKLM-x32\...\InstallShield_{A0382E3C-7384-429A-9BFA-AF5888E5A193}) (Version: 1.5.2728.00 - CyberLink Corp.) Acer Crystal Eye Webcam (x32 Version: 1.5.2728.00 - CyberLink Corp.) Hidden Acer ePower Management (HKLM-x32\...\{3DB0448D-AD82-4923-B305-D001E521A964}) (Version: 6.00.3010 - Acer Incorporated) Acer eRecovery Management (HKLM-x32\...\{7F811A54-5A09-4579-90E1-C93498E230D9}) (Version: 5.00.3507 - Acer Incorporated) Acer Games (HKLM-x32\...\WildTangent acer Master Uninstall) (Version: 1.0.2.5 - WildTangent) Acer Instant Update Service (HKLM\...\{36674AE9-6D3D-48D6-BC7B-209F556D65EE}) (Version: 1.00.3004 - Acer Incorporated) Acer Registration (HKLM-x32\...\Acer Registration) (Version: 1.04.3506 - Acer Incorporated) Acer ScreenSaver (HKLM-x32\...\Acer Screensaver) (Version: 20.11.1107.1418 - Acer Incorporated) Acer Updater (HKLM-x32\...\{EE171732-BEB4-4576-887D-CB62727F01CA}) (Version: 1.02.3501 - Acer Incorporated) Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 2.6.0.19120 - Adobe Systems Incorporated) Adobe AIR (x32 Version: 2.6.0.19120 - Adobe Systems Incorporated) Hidden Adobe Flash Player 11 ActiveX 64-bit (HKLM\...\Adobe Flash Player ActiveX) (Version: 11.2.202.222 - Adobe Systems Incorporated) Adobe Reader X (10.1.0) MUI (HKLM-x32\...\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}) (Version: 10.1.0 - Adobe Systems Incorporated) Agatha Christie - Death on the Nile (x32 Version: 2.2.0.98 - WildTangent) Hidden Atheros Bluetooth Suite (64) (HKLM\...\{230D1595-57DA-4933-8C4E-375797EBB7E1}) (Version: 7.4.0.126 - Atheros) Atheros Driver Installation Program (HKLM-x32\...\{28006915-2739-4EBE-B5E8-49B25D32EB33}) (Version: 10.0 - Atheros) avast! Free Antivirus (HKLM-x32\...\Avast) (Version: 9.0.2008 - Avast Software) Backup Manager V3 (x32 Version: 3.0.0.100 - NTI Corporation) Hidden Bejeweled 3 (x32 Version: 2.2.0.98 - WildTangent) Hidden Bing Bar (HKLM-x32\...\{C28D96C0-6A90-459E-A077-A6706F4EC0FC}) (Version: 7.0.765.0 - Microsoft Corporation) Chuzzle Deluxe (x32 Version: 2.2.0.95 - WildTangent) Hidden clear.fi Media (HKLM-x32\...\{E9AF1707-3F3A-49E2-8345-4F2D629D0876}) (Version: 2.00.3004 - Acer Incorporated) clear.fi Photo (HKLM-x32\...\{B5AD89F2-03D3-4206-8487-018298007DD0}) (Version: 2.00.3004 - Acer Incorporated) CyberLink MediaEspresso (HKLM-x32\...\InstallShield_{E3739848-5329-48E3-8D28-5BBD6E8BE384}) (Version: 6.5.1720_38230 - CyberLink Corp.) CyberLink MediaEspresso (x32 Version: 6.5.1720_38230 - CyberLink Corp.) Hidden D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden Dolby Advanced Audio v2 (HKLM-x32\...\{B9E70C7A-9F85-4A39-A4A3-BFA3C3BF7613}) (Version: 7.2.7000.7 - Dolby Laboratories Inc) eBay Worldwide (HKLM-x32\...\{D3E5A972-9A15-427D-AE78-8181A5FD943C}) (Version: 2.2.0409 - OEM) Evernote v. 4.5.2 (HKLM-x32\...\{F77EF646-19EB-11E1-9A9E-984BE15F174E}) (Version: 4.5.2.5866 - Evernote Corp.) FATE (x32 Version: 2.2.0.97 - WildTangent) Hidden Final Drive: Nitro (x32 Version: 2.2.0.95 - WildTangent) Hidden Fooz Kids (HKLM-x32\...\FoozKids) (Version: 3.1.2 - FUHU, Inc.) Fooz Kids (x32 Version: 3.1.2 - FUHU, Inc.) Hidden Fooz Kids Platform (HKLM-x32\...\{8D68CE08-9A14-4B7B-9857-3C646A2F34C7}) (Version: 2.1 - FUHU, Inc.) Fotogalerija Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Galeria de Fotografias do Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Galería fotográfica de Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Galeria fotogràfica del Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Galeria fotografii usługi Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Galerie de photos Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Galerie foto Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Identity Card (HKLM-x32\...\Identity Card) (Version: 1.00.3501 - Acer Incorporated) Insaniquarium Deluxe (x32 Version: 2.2.0.97 - WildTangent) Hidden Intel(R) Manageability Engine Firmware Recovery Agent (HKLM-x32\...\{A6C48A9F-694A-4234-B3AA-62590B668927}) (Version: 1.0.0.35342 - Intel Corporation) Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.0.4.1441 - Intel Corporation) Intel(R) OpenCL CPU Runtime (HKLM-x32\...\{FCB3772C-B7D0-4933-B1A9-3707EBACC573}) (Version: - Intel Corporation) Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 8.15.10.2712 - Intel Corporation) Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 11.0.0.1032 - Intel Corporation) Intel(R) USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 1.0.4.220 - Intel Corporation) Intel® Trusted Connect Service Client (HKLM\...\{09536BA1-E498-4CC3-B834-D884A67D7E34}) (Version: 1.23.605.1 - Intel Corporation) Jewel Match 3 (x32 Version: 2.2.0.98 - WildTangent) Hidden Jewel Quest Mysteries: The Seventh Gate Collector's Edition (x32 Version: 2.2.0.98 - WildTangent) Hidden John Deere Drive Green (x32 Version: 2.2.0.95 - WildTangent) Hidden Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Kobo (HKLM-x32\...\Kobo) (Version: 2.1.5 - Kobo Inc.) Launch Manager (HKLM-x32\...\LManager) (Version: 5.1.15 - Acer Inc.) LockHunter 3.1, 32/64 bit (HKLM\...\LockHunter_is1) (Version: - Crystal Rich Ltd) Malwarebytes Anti-Malware Version 1.75.0.1300 (HKLM-x32\...\Malwarebytes' Anti-Malware_is1) (Version: 1.75.0.1300 - Malwarebytes Corporation) Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) Hidden Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden Microsoft Office 2010 (HKLM-x32\...\{95140000-0070-0000-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation) Microsoft Silverlight (HKLM-x32\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 4.0.50401.0 - Microsoft Corporation) Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Mozilla Firefox 25.0.1 (x86 de) (HKLM-x32\...\Mozilla Firefox 25.0.1 (x86 de)) (Version: 25.0.1 - Mozilla) Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 25.0.1 - Mozilla) MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden MSVCRT_amd64 (x32 Version: 15.4.2862.0708 - Microsoft) Hidden MyWinLocker (Version: 4.0.14.27 - Egis Technology Inc.) Hidden MyWinLocker 4 (x32 Version: 4.0.14.27 - Egis Technology Inc.) Hidden MyWinLocker Suite (HKLM-x32\...\InstallShield_{17DF9714-60C9-43C9-A9C2-32BCAED44CBE}) (Version: 4.0.14.19 - Egis Technology Inc.) MyWinLocker Suite (x32 Version: 4.0.14.19 - Egis Technology Inc.) Hidden newsXpresso (HKLM-x32\...\InstallShield_{613C0AC5-3A67-4B94-8B13-9176AD83F5BF}) (Version: 1.0.0.40 - esobi Inc.) newsXpresso (x32 Version: 1.0.0.40 - esobi Inc.) Hidden Norton Online Backup (HKLM-x32\...\{40A66DF6-22D3-44B5-A7D3-83B118A2C0DC}) (Version: 2.1.17869 - Symantec Corporation) NTI Media Maker 9 (HKLM-x32\...\InstallShield_{D3D5C4E8-040F-4C6F-8105-41D43CF94F44}) (Version: 9.0.2.9006 - NTI Corporation) NTI Media Maker 9 (x32 Version: 9.0.2.9006 - NTI Corporation) Hidden NVIDIA Grafiktreiber 296.16 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 296.16 - NVIDIA Corporation) NVIDIA Install Application (Version: 2.1002.62.312 - NVIDIA Corporation) Hidden NVIDIA Optimus 1.7.12 (Version: 1.7.12 - NVIDIA Corporation) Hidden NVIDIA PhysX (HKLM-x32\...\{46ED2B64-85C7-4E1F-920C-A555B21F2E4C}) (Version: 9.11.1111 - NVIDIA Corporation) NVIDIA Systemsteuerung 296.16 (Version: 296.16 - NVIDIA Corporation) Hidden NVIDIA Update 1.7.12 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 1.7.12 - NVIDIA Corporation) NVIDIA Update Components (Version: 1.7.12 - NVIDIA Corporation) Hidden Penguins! (x32 Version: 2.2.0.98 - WildTangent) Hidden Plants vs. Zombies - Game of the Year (x32 Version: 2.2.0.98 - WildTangent) Hidden Poczta usługi Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Podstawowe programy Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Polar Bowler (x32 Version: 2.2.0.97 - WildTangent) Hidden Pošta Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Process Hacker 2.32 (r5524) (HKLM\...\Process_Hacker2_is1) (Version: 2.32.0.5524 - wj32) Raccolta foto di Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.54.309.2012 - Realtek) Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6577 - Realtek Semiconductor Corp.) Realtek PCIE Card Reader (HKLM-x32\...\{C1594429-8296-4652-BF54-9DBE4932A44C}) (Version: 6.1.7601.27015 - Realtek Semiconductor Corp.) Shredder (Version: 2.0.8.9 - Egis Technology Inc.) Hidden Shredder (x32 Version: 2.0.8.9 - Egis Technology Inc.) Hidden Skype™ 5.5 (HKLM-x32\...\{AA59DDE4-B672-4621-A016-4C248204957A}) (Version: 5.5.117 - Skype Technologies S.A.) Slingo Deluxe (x32 Version: 2.2.0.95 - WildTangent) Hidden Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 16.0.2.0 - Synaptics Incorporated) Tales of Lagoona (x32 Version: 2.2.0.98 - WildTangent) Hidden Torchlight (x32 Version: 2.2.0.98 - WildTangent) Hidden Update Installer for WildTangent Games App (x32 Version: - WildTangent) Hidden Virtual Villagers 4 - The Tree of Life (x32 Version: 2.2.0.97 - WildTangent) Hidden Wedding Dash (x32 Version: 2.2.0.95 - WildTangent) Hidden Welcome Center (HKLM-x32\...\Acer Welcome Center) (Version: 1.02.3507 - Acer Incorporated) WildTangent Games App (Acer Games) (x32 Version: 4.0.5.32 - WildTangent) Hidden Windows Live Communications Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3538.0513 - Microsoft Corporation) Windows Live Essentials (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Fotogaléria (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Fotogalerie (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Fotogalleri (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Fotoğraf Galerisi (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Fotótár (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Galeria de Fotos (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Galerija fotografija (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live ID Sign-in Assistant (Version: 7.250.4232.0 - Microsoft Corporation) Hidden Windows Live Installer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Language Selector (Version: 15.4.3538.0513 - Microsoft Corporation) Hidden Windows Live Mail (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Mesh (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Messenger (x32 Version: 15.4.3538.0513 - Microsoft Corporation) Hidden Windows Live Messenger (x32 Version: 15.4.3538.0513 - Корпорация Майкрософт) Hidden Windows Live MIME IFilter (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Movie Maker (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Photo Common (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Photo Gallery (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live PIMT Platform (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden Windows Live Remote Client (Version: 15.4.5722.2 - Microsoft Corporation) Hidden Windows Live Remote Client Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden Windows Live Remote Service (Version: 15.4.5722.2 - Microsoft Corporation) Hidden Windows Live Remote Service Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden Windows Live SOXE (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Temel Parçalar (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live UX Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden Windows Live Writer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Writer Resources (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live 影像中心 (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live 程式集 (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Liven asennustyökalu (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Liven sähköposti (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Liven valokuvavalikoima (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden WinPatrol (HKLM\...\{84481A87-2316-4923-8FAB-3BA8CA29323D}) (Version: 29.1.2013 - BillP Studios) Zuma Deluxe (x32 Version: 2.2.0.95 - WildTangent) Hidden Συλλογή φωτογραφιών του Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Основные компоненты Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Почта Windows Live (x32 Version: 15.4.3502.0922 - Корпорация Майкрософт) Hidden Фотоальбом Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Фотогалерия на Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden גלריית התמונות של Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden بريد Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden معرض صور Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden ==================== Restore Points ========================= 03-01-2014 23:36:02 Windows Update ==================== Hosts content: ========================== 2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts ==================== Scheduled Tasks (whitelisted) ============= Task: {318C3371-259E-4955-98FB-22D272C83B4A} - System32\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe [2011-11-25] (Intel Corporation) Task: {6B7EA3AB-EEEC-48DD-8E97-19681B068321} - System32\Tasks\UALU notificatin => C:\Program Files\Acer\Acer Updater\UALU.exe [2012-02-07] (Acer Incorporated) Task: {8C738521-6B6B-4AA7-BD61-DA827AE76DEF} - System32\Tasks\Recovery Management\Burn Notification => C:\Program Files\Acer\Acer eRecovery Management\NotificationCenter\Notification.exe [2012-01-18] (Acer) Task: {9FB5491F-6BC5-4140-9098-EF474F9709EF} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-06-05] (Adobe Systems Incorporated) Task: {A9B74C1C-4A9D-4C31-B129-4B8FBD4BA617} - System32\Tasks\DeviceDetector => C:\Program Files (x86)\Cyberlink\MediaEspresso\DeviceDetector\DeviceDetector.exe [2011-05-20] (CyberLink) Task: {C6BD63FB-72D1-4624-8F56-B0A7246EBF56} - System32\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe [2011-11-25] (Intel Corporation) Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\Windows\Tasks\avast! Emergency Update.job => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe Task: C:\Windows\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon.job => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe Task: C:\Windows\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d.job => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe ==================== Loaded Modules (whitelisted) ============= 2009-01-21 16:45 - 2009-01-21 16:45 - 01401856 _____ () C:\Program Files (x86)\EgisTec MyWinLocker\x64\LIBEAY32.dll 2014-01-04 06:03 - 2012-03-27 02:33 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll 2012-04-06 20:29 - 2012-04-06 20:29 - 00040552 _____ () C:\Program Files\Acer\Acer Instant Service\InstantUpdate\iuBrowserIEAgent.exe 2012-04-06 20:29 - 2012-04-06 20:29 - 00022120 _____ () C:\Program Files\Acer\Acer Instant Service\InstantUpdate\iuEmailOutlookAgent.exe 2014-01-04 00:36 - 2014-03-01 19:29 - 02186240 _____ () C:\Program Files\AVAST Software\Avast\defs\14030102\algo.dll 2014-01-03 22:57 - 2014-01-03 22:57 - 19336120 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll 2014-01-03 21:42 - 2012-03-07 15:27 - 01198872 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll ==================== Alternate Data Streams (whitelisted) ========= ==================== Safe Mode (whitelisted) =================== HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CleanHlp => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CleanHlp.sys => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\CleanHlp => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\CleanHlp.sys => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\McMPFSvc => ""="Service" ==================== Disabled items from MSCONFIG ============== ==================== Faulty Device Manager Devices ============= ==================== Event log errors: ========================= Application errors: ================== Error: (01/03/2014 11:12:23 PM) (Source: System Restore) (User: ) Description: Fehler beim Erstellen des Wiederherstellungspunkts (Prozess = C:\Windows\servicing\TrustedInstaller.exe; Beschreibung = Windows Modules Installer; Fehler = 0x8007043c). Error: (01/03/2014 11:10:38 PM) (Source: MsiInstaller) (User: Wohnung) Description: Product: NTI Media Maker 9 -- Error 1719.Windows Installer service could not be accessed. Contact your support personnel to verify that it is properly registered and enabled. Error: (01/03/2014 10:57:08 PM) (Source: System Restore) (User: ) Description: Fehler beim Erstellen des Wiederherstellungspunkts (Prozess = C:\Users\Devil\AppData\Local\Temp\_av_iup.tm~a00708\instup.exe /sfx /sfxstorage:"C:\Users\Devil\AppData\Local\Temp\_av_iup.tm~a00708" /edition:1 /prod:ais ; Beschreibung = avast! antivirus system restore point; Fehler = 0x8007043c). System errors: ============= Error: (01/04/2014 01:04:40 AM) (Source: Service Control Manager) (User: ) Description: Der Dienst "avast! Antivirus" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 5000 Millisekunden durchgeführt: Neustart des Diensts. Error: (01/03/2014 11:13:25 PM) (Source: DCOM) (User: ) Description: 1084VSS{0B5A2C52-3EB9-470A-96E2-6C6D4570E40F} Error: (01/03/2014 11:07:20 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%1068 Error: (01/03/2014 11:07:20 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%1068 Error: (01/03/2014 11:06:48 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%1068 Error: (01/03/2014 11:04:31 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%1068 Error: (01/03/2014 11:04:06 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%1068 Error: (01/03/2014 11:03:46 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%1068 Error: (01/03/2014 11:03:30 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%1068 Error: (01/03/2014 11:03:08 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%1068 Microsoft Office Sessions: ========================= Error: (01/03/2014 11:12:23 PM) (Source: System Restore)(User: ) Description: C:\Windows\servicing\TrustedInstaller.exeWindows Modules Installer0x8007043c Error: (01/03/2014 11:10:38 PM) (Source: MsiInstaller)(User: Wohnung) Description: Product: NTI Media Maker 9 -- Error 1719.Windows Installer service could not be accessed. Contact your support personnel to verify that it is properly registered and enabled.(NULL)(NULL)(NULL)(NULL)(NULL) Error: (01/03/2014 10:57:08 PM) (Source: System Restore)(User: ) Description: C:\Users\Devil\AppData\Local\Temp\_av_iup.tm~a00708\instup.exe /sfx /sfxstorage:"C:\Users\Devil\AppData\Local\Temp\_av_iup.tm~a00708" /edition:1 /prod:ais avast! antivirus system restore point0x8007043c ==================== Memory info =========================== Percentage of memory in use: 31% Total physical RAM: 5937.6 MB Available physical RAM: 4048.63 MB Total Pagefile: 11873.39 MB Available Pagefile: 9946.02 MB Total Virtual: 8192 MB Available Virtual: 8191.82 MB ==================== Drives ================================ Drive c: (ACER) (Fixed) (Total:133.55 GB) (Free:95.97 GB) NTFS Drive e: (05 Jan 2014) (CDROM) (Total:0.36 GB) (Free:0 GB) UDF ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: 5B1FBFBC) Partition 1: (Not Active) - (Size=21 GB) - (Type=27) Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=134 GB) - (Type=07 NTFS) Partition 4: (Not Active) - (Size=312 GB) - (Type=07 NTFS) ==================== End ============================ Geändert von globelblade (02.03.2014 um 01:45 Uhr) |
03.03.2014, 08:11 | #5 | |
/// the machine /// TB-Ausbilder | Ich kann es nicht beschreiben!aber ich weiss es ist was da (evtl. Rootkit, Shadow,Manipulation,Spionage)Zitat:
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
Themen zu Ich kann es nicht beschreiben!aber ich weiss es ist was da (evtl. Rootkit, Shadow,Manipulation,Spionage) |
entfernen, firewall, harddisk, log, malwarebytes, manipulation, ntoskrnl.exe, nvidia, object, problem, registry, rootkit, router, scan, security, shadow, software, start, system, system32, temp, treiber, trojaner, update, windows media player, winlogon, wmp |