|
Plagegeister aller Art und deren Bekämpfung: Optimizer Pro :-(Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
12.03.2014, 20:46 | #1 |
| Optimizer Pro :-( Halo, habe mir heute bei dem Download eines anderen Programmes des Optimizer Pro geholt. Ich habe diese Farbar Recovery runtergalden und gescannt. Nun weiss ich nicht weiter und bin echt ein Laie:-( Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 12-03-2014 Ran by Thomas (administrator) on BÄR on 12-03-2014 20:34:47 Running from C:\Users\Thomas\Downloads Windows 8.1 (X64) OS Language: German Standard Internet Explorer Version 11 Boot Mode: Normal The only official download link for FRST: Download link for 32-Bit version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ Download link for 64-Bit Version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ Download link from any site other than Bleeping Computer is unpermitted or outdated. See tutorial for FRST: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (Qualcomm Atheros Commnucations) C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\adminservice.exe (Acer Incorporated) C:\Program Files (x86)\Acer\Acer Cloud\CCDMonitorService.exe (Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe (Acer Incorporate) C:\Program Files\Acer\Acer Launch Manager\LMSvc.exe (Symantec Corporation) C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe (Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Nero AG) c:\Program Files (x86)\Nero\Update\NASvc.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (NVIDIA Corporation) C:\WINDOWS\system32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\WINDOWS\system32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe (Microsoft Corporation) C:\Windows\System32\skydrive.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (Acer Incorporate) C:\Program Files\Acer\Acer Launch Manager\LMEvent.exe (Acer Incorporate) C:\Program Files\Acer\Acer Launch Manager\LMTray.exe (Atheros Communications) C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtvStack.exe () C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\ActivateDesktop.exe (ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe (ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDTouch.exe (ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe (Intel Corporation) C:\Windows\System32\igfxtray.exe (Intel Corporation) C:\WINDOWS\system32\igfxsrvc.exe (Intel Corporation) C:\Windows\System32\hkcmd.exe (Intel Corporation) C:\Windows\System32\igfxpers.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe () C:\Users\Thomas\AppData\Local\Amazon Cloud Player\Amazon Music Helper.exe (Hewlett-Packard Co.) C:\Program Files\HP\HP Deskjet 3520 series\Bin\ScanToPCActivationApp.exe (Dolby Laboratories Inc.) C:\Dolby PCEE4\pcee4.exe (McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.8.141\SSScheduler.exe (Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe (Hewlett-Packard Co.) C:\Program Files\HP\HP Deskjet 3520 series\Bin\HPNetworkCommunicatorCom.exe (Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerTray.exe (Intel Corporation) C:\WINDOWS\system32\igfxext.exe (Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerEvent.exe (Microsoft Corporation) C:\WINDOWS\system32\dashost.exe (CyberLink) C:\Program Files (x86)\CyberLink\MediaEspresso\DeviceDetector\DeviceDetector.exe (Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe (Microsoft Corporation.) C:\Program Files (x86)\Microsoft\BingBar\7.3.124.0\SeaPort.exe (Amazon) C:\Users\Thomas\AppData\Local\Amazon Cloud Player\Amazon Cloud Player.exe (Amazon) C:\Users\Thomas\AppData\Local\Amazon Cloud Player\Amazon Cloud Player.exe (Microsoft Corporation) C:\Windows\SysWOW64\cmd.exe (Microsoft Corporation) C:\WINDOWS\SysWOW64\PING.EXE () C:\Users\Thomas\AppData\Local\Temp\~nsu.tmp\Au_.exe (Microsoft Corporation) C:\WINDOWS\SysWOW64\DllHost.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Adobe Systems, Inc.) C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_77.exe (Adobe Systems, Inc.) C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_77.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [ETDCtrl] - C:\Program Files\Elantech\ETDCtrl.exe [2890640 2013-04-10] (ELAN Microelectronics Corp.) HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13449288 2013-03-26] (Realtek Semiconductor) HKLM\...\Run: [RtHDVBg_Dolby] - C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1278024 2013-03-08] (Realtek Semiconductor) HKLM\...\Run: [NvBackend] - C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2234144 2014-02-05] (NVIDIA Corporation) HKLM\...\Run: [ShadowPlay] - C:\WINDOWS\system32\nvspcap64.dll [1179576 2014-02-05] (NVIDIA Corporation) HKLM-x32\...\Run: [Norton Online Backup] - C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuClient.exe [2994880 2012-08-15] (Symantec Corporation) HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-12-21] (Adobe Systems Incorporated) HKLM-x32\...\Run: [HP Software Update] - C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [49208 2011-10-28] (Hewlett-Packard) HKLM-x32\...\Run: [] - [X] Winlogon\Notify\igfxcui: C:\WINDOWS\system32\igfxdev.dll (Intel Corporation) HKLM\...\Policies\Explorer\Run: [BtvStack] - C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtvStack.exe [132224 2013-02-28] ( (Atheros Communications)) HKU\S-1-5-21-1042288249-1955762201-2030029956-1002\...\Run: [Amazon Cloud Player] - C:\Users\Thomas\AppData\Local\Amazon Cloud Player\Amazon Music Helper.exe [3140608 2014-01-14] () HKU\S-1-5-21-1042288249-1955762201-2030029956-1002\...\Run: [HP Deskjet 3520 series (NET)] - C:\Program Files\HP\HP Deskjet 3520 series\Bin\ScanToPCActivationApp.exe [2573416 2012-10-17] (Hewlett-Packard Co.) HKU\S-1-5-21-1042288249-1955762201-2030029956-1002\...\Run: [Optimizer Pro] - C:\Program Files (x86)\Optimizer Pro\OptProLauncher.exe [135160 2014-01-28] (PC Utilities Software Limited) HKU\S-1-5-21-1042288249-1955762201-2030029956-1002\...\MountPoints2: {90c5031e-9681-11e3-824f-0c84dc2e5f4a} - "D:\MatheTiger.EXE" AppInit_DLLs: C:\Windows\system32\nvinitx.dll => C:\Windows\system32\nvinitx.dll [174296 2014-03-04] (NVIDIA Corporation) AppInit_DLLs: ,C:\WINDOWS\system32\nvinitx.dll => C:\WINDOWS\system32\nvinitx.dll [174296 2014-03-04] (NVIDIA Corporation) AppInit_DLLs: C:\PROGRA~2\OPTIMI~1\OPTPRO~2.DLL => C:\Program Files (x86)\Optimizer Pro\OptProCrash_x64.dll [2681648 2014-03-12] () AppInit_DLLs-x32: c:\windows\syswow64\nvinit.dll => c:\windows\syswow64\nvinit.dll [148016 2014-03-04] (NVIDIA Corporation) AppInit_DLLs-x32: c:\progra~2\optimi~1\optpro~1.dll => C:\Program Files (x86)\Optimizer Pro\OptProCrash.dll [2961368 2014-03-12] () Startup: C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Tintenwarnungen überwachen - HP Deskjet 3520 series (Netzwerk).lnk ShortcutTarget: Tintenwarnungen überwachen - HP Deskjet 3520 series (Netzwerk).lnk -> C:\Program Files\HP\HP Deskjet 3520 series\Bin\HPStatusBL.dll (Hewlett-Packard Co.) ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/?pc=MSE1 HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.awesomehp.com/?type=hp&ts=1394651384&from=adks&uid=ST500LT012-9WS142_W0VB181XXXXXW0VB181X HKCU\Software\Microsoft\Internet Explorer\Main,First Home Page = hxxp://go.microsoft.com/fwlink/?LinkID=226786&Mkt=de-DE&Src=WD8&Tid=00031628&OHP=http%3A%2F%2Fwww.awesomehp.com%2F%3Ftype%3Dhp%26ts%3D1394651384%26from%3Dadks%26uid%3DST500LT012%2D9WS142%5FW0VB181XXXXXW0 VB181X&OSP=http%3A%2F%2Fwww.awesomehp.com%2Fweb%2F%3Ftype%3Dds%26ts%3D1394651384%26from%3Dadks%26uid%3DST500LT012%2D9WS142%5FW0VB181XXXXXW0VB181X%26q% 3D%7BsearchTerms%7D HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.awesomehp.com/web/?type=ds&ts=1394651384&from=adks&uid=ST500LT012-9WS142_W0VB181XXXXXW0VB181X&q={searchTerms} HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.awesomehp.com/?type=hp&ts=1394651384&from=adks&uid=ST500LT012-9WS142_W0VB181XXXXXW0VB181X HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/?pc=MSE1 HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.awesomehp.com/web/?type=ds&ts=1394651384&from=adks&uid=ST500LT012-9WS142_W0VB181XXXXXW0VB181X&q={searchTerms} HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.awesomehp.com/web/?type=ds&ts=1394651384&from=adks&uid=ST500LT012-9WS142_W0VB181XXXXXW0VB181X&q={searchTerms} HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.awesomehp.com/?type=hp&ts=1394651384&from=adks&uid=ST500LT012-9WS142_W0VB181XXXXXW0VB181X HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/?pc=MSE1 HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.awesomehp.com/web/?type=ds&ts=1394651384&from=adks&uid=ST500LT012-9WS142_W0VB181XXXXXW0VB181X&q={searchTerms} StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe hxxp://www.awesomehp.com/?type=sc&ts=1394651384&from=adks&uid=ST500LT012-9WS142_W0VB181XXXXXW0VB181X SearchScopes: HKLM - DefaultScope {80c554b9-c7f8-4a21-9471-06d606da78a2} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1 SearchScopes: HKLM - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.awesomehp.com/web/?type=ds&ts=1394651384&from=adks&uid=ST500LT012-9WS142_W0VB181XXXXXW0VB181X&q={searchTerms} SearchScopes: HKLM - {80c554b9-c7f8-4a21-9471-06d606da78a2} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1 SearchScopes: HKLM - {AA9A4890-4262-4441-8977-E2FFCBFB706C} URL = hxxp://de.yhs4.search.yahoo.com/yhs/search?hspart=acer&hsimp=yhs-acer_001&p={searchTerms} SearchScopes: HKLM - {CA940C80-7890-43CE-8948-9AC8F7571D50} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MAARJS SearchScopes: HKLM-x32 - DefaultScope {80c554b9-c7f8-4a21-9471-06d606da78a2} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1 SearchScopes: HKLM-x32 - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.awesomehp.com/web/?type=ds&ts=1394651384&from=adks&uid=ST500LT012-9WS142_W0VB181XXXXXW0VB181X&q={searchTerms} SearchScopes: HKLM-x32 - {80c554b9-c7f8-4a21-9471-06d606da78a2} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1 SearchScopes: HKLM-x32 - {AA9A4890-4262-4441-8977-E2FFCBFB706C} URL = hxxp://de.yhs4.search.yahoo.com/yhs/search?hspart=acer&hsimp=yhs-acer_001&p={searchTerms} SearchScopes: HKLM-x32 - {CA940C80-7890-43CE-8948-9AC8F7571D50} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MAARJS SearchScopes: HKCU - DefaultScope {80c554b9-c7f8-4a21-9471-06d606da78a2} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1 SearchScopes: HKCU - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.awesomehp.com/web/?type=ds&ts=1394651384&from=adks&uid=ST500LT012-9WS142_W0VB181XXXXXW0VB181X&q={searchTerms} SearchScopes: HKCU - {80c554b9-c7f8-4a21-9471-06d606da78a2} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1 SearchScopes: HKCU - {AA9A4890-4262-4441-8977-E2FFCBFB706C} URL = hxxp://de.yhs4.search.yahoo.com/yhs/search?hspart=acer&hsimp=yhs-acer_001&p={searchTerms} SearchScopes: HKCU - {CA940C80-7890-43CE-8948-9AC8F7571D50} URL = BHO: Bing Bar Helper - {1dad3af3-ef2f-4f64-ac4b-11789189fcb6} - C:\Program Files (x86)\Microsoft\BingBar\7.3.124.0\amd64\BingExt.dll (Microsoft Corporation.) BHO: CIESpeechBHO Class - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\IEPlugIn.dll (Qualcomm Atheros Commnucations) BHO-x32: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files\McAfee Security Scan\3.8.141\McAfeeMSS_IE.dll (McAfee, Inc.) BHO-x32: Bing Bar Helper - {1dad3af3-ef2f-4f64-ac4b-11789189fcb6} - C:\Program Files (x86)\Microsoft\BingBar\7.3.124.0\BingExt.dll (Microsoft Corporation.) Toolbar: HKLM - Bing Bar - {eec0f710-38b5-4aba-99bf-ec87564a4e13} - C:\Program Files (x86)\Microsoft\BingBar\7.3.124.0\amd64\BingExt.dll (Microsoft Corporation.) Toolbar: HKLM-x32 - Bing Bar - {eec0f710-38b5-4aba-99bf-ec87564a4e13} - C:\Program Files (x86)\Microsoft\BingBar\7.3.124.0\BingExt.dll (Microsoft Corporation.) Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 FireFox: ======== FF ProfilePath: C:\Users\Thomas\AppData\Roaming\Mozilla\Firefox\Profiles\cy3ez6pm.default FF user.js: detected! => C:\Users\Thomas\AppData\Roaming\Mozilla\Firefox\Profiles\cy3ez6pm.default\user.js FF NewTab: chrome://quick_start/content/index.html FF DefaultSearchEngine: awesomehp FF Plugin: @adobe.com/FlashPlayer - C:\WINDOWS\system32\Macromed\Flash\NPSWF64_12_0_0_77.dll () FF Plugin: @mcafee.com/MSC,version=10 - C:\Program Files\mcafee\msc\npMcSnFFPl64.dll No File FF Plugin-x32: @adobe.com/FlashPlayer - C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_77.dll () FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf - C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation) FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf - C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation) FF Plugin-x32: @mcafee.com/McAfeeMssPlugin - C:\Program Files\McAfee Security Scan\3.8.141\npMcAfeeMss.dll (McAfee, Inc.) FF Plugin-x32: @mcafee.com/MSC,version=10 - C:\Program Files (x86)\McAfee\msc\npMcSnFFPl.dll No File FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 - C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll () FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\awesomehp.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml FF Extension: Quick Start - C:\Users\Thomas\AppData\Roaming\Mozilla\Firefox\Profiles\cy3ez6pm.default\Extensions\quick_start@gmail.com [2014-03-12] FF HKLM-x32\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files (x86)\McAfee\SiteAdvisor FF HKLM-x32\...\Firefox\Extensions: [quick_start@gmail.com] - C:\Users\Thomas\AppData\Roaming\Mozilla\Firefox\Profiles\cy3ez6pm.default\extensions\quick_start@gmail.com FF Extension: Quick Start - C:\Users\Thomas\AppData\Roaming\Mozilla\Firefox\Profiles\cy3ez6pm.default\extensions\quick_start@gmail.com [2014-03-12] FF HKLM-x32\...\Thunderbird\Extensions: [msktbird@mcafee.com] - C:\Program Files\McAfee\MSK ==================== Services (Whitelisted) ================= R2 70e6ca8c; C:\Program Files (x86)\Optimizer Pro\OptProCrashSvc.dll [186496 2014-03-12] () R2 AtherosSvc; C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\adminservice.exe [227968 2013-02-28] (Qualcomm Atheros Commnucations) R2 CCDMonitorService; C:\Program Files (x86)\Acer\Acer Cloud\CCDMonitorService.exe [2615368 2013-02-27] (Acer Incorporated) R3 ePowerSvc; C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe [660040 2013-01-18] (Acer Incorporated) R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [128896 2013-02-18] (Intel Corporation) R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [165760 2013-02-18] (Intel Corporation) R2 LMSvc; C:\Program Files\Acer\Acer Launch Manager\LMSvc.exe [431656 2013-03-15] (Acer Incorporate) S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.8.141\McCHSvc.exe [289256 2014-01-16] (McAfee, Inc.) R2 NOBU; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [3943104 2012-08-15] (Symantec Corporation) R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1593632 2014-02-05] (NVIDIA Corporation) R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [16941856 2014-02-05] (NVIDIA Corporation) R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [348392 2013-10-31] (Microsoft Corporation) R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2013-10-31] (Microsoft Corporation) ==================== Drivers (Whitelisted) ==================== S0 ADP80XX; C:\Windows\System32\drivers\ADP80XX.SYS [782176 2013-08-22] (PMC-Sierra) S3 bcmfn2; C:\Windows\System32\drivers\bcmfn2.sys [17624 2013-08-13] (Windows (R) Win 7 DDK provider) S3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [77464 2013-02-28] (Qualcomm Atheros) R3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [224768 2013-08-22] (Microsoft Corporation) R1 ccSet_NARA; C:\Windows\system32\drivers\NARAx64\0401000.00E\ccSetx64.sys [168608 2012-05-26] (Symantec Corporation) S3 HipShieldK; C:\Windows\System32\drivers\HipShieldK.sys [197264 2012-05-28] (McAfee, Inc.) S3 iaLPSSi_GPIO; C:\Windows\System32\drivers\iaLPSSi_GPIO.sys [24568 2013-07-30] (Intel Corporation) S3 iaLPSSi_I2C; C:\Windows\System32\drivers\iaLPSSi_I2C.sys [99320 2013-07-25] (Intel Corporation) S0 iaStorAV; C:\Windows\System32\drivers\iaStorAV.sys [651248 2013-08-10] (Intel Corporation) R0 intelpep; C:\Windows\System32\drivers\intelpep.sys [39768 2014-02-15] (Microsoft Corporation) R3 LMDriver; C:\Windows\System32\drivers\LMDriver.sys [21360 2013-01-10] (Acer Incorporated) S0 LSI_SAS3; C:\Windows\System32\drivers\lsi_sas3.sys [81760 2013-08-22] (LSI Corporation) S3 mfencbdc; C:\Windows\system32\DRIVERS\mfencbdc.sys [328976 2012-11-02] (McAfee, Inc.) S3 mfencrk; C:\Windows\system32\DRIVERS\mfencrk.sys [97208 2012-11-02] (McAfee, Inc.) R3 NdisVirtualBus; C:\Windows\System32\drivers\NdisVirtualBus.sys [16384 2013-08-22] (Microsoft Corporation) S3 netvsc; C:\Windows\system32\DRIVERS\netvsc63.sys [87040 2013-08-22] (Microsoft Corporation) R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [39200 2013-12-27] (NVIDIA Corporation) S3 QRDCIO; C:\Windows\System32\drivers\QRDCIO.sys [9728 2009-10-20] (QUANTA) R3 RadioShim; C:\Windows\System32\drivers\RadioShim.sys [15704 2013-01-10] (Acer Incorporated) S3 ReFS; C:\Windows\System32\Drivers\ReFS.sys [924512 2013-08-22] (Microsoft Corporation) R3 RTSPER; C:\Windows\system32\DRIVERS\RtsPer.sys [455240 2013-03-05] (RTS Corporation) S3 SerCx2; C:\Windows\System32\drivers\SerCx2.sys [146776 2014-02-15] (Microsoft Corporation) S0 stornvme; C:\Windows\System32\drivers\stornvme.sys [57176 2013-11-14] (Microsoft Corporation) S3 UEFI; C:\Windows\System32\drivers\UEFI.sys [26976 2013-08-22] (Microsoft Corporation) R3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [124760 2013-10-31] (Microsoft Corporation) ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-03-12 20:34 - 2014-03-12 20:35 - 00020790 _____ () C:\Users\Thomas\Downloads\FRST.txt 2014-03-12 20:34 - 2014-03-12 20:34 - 02157056 _____ (Farbar) C:\Users\Thomas\Downloads\FRST64.exe 2014-03-12 20:34 - 2014-03-12 20:34 - 00000000 ____D () C:\FRST 2014-03-12 20:25 - 2014-03-12 20:25 - 00728960 _____ (Enigma Software Group USA, LLC.) C:\Users\Thomas\Downloads\SpyHunter-Installer.exe 2014-03-12 20:16 - 2014-03-12 20:16 - 00000000 ____D () C:\Users\Thomas\Documents\Optimizer Pro 2014-03-12 20:16 - 2014-03-12 20:16 - 00000000 ____D () C:\Users\Thomas\AppData\Roaming\Optimizer Pro 2014-03-12 20:12 - 2014-03-12 20:12 - 00004380 _____ () C:\WINDOWS\System32\Tasks\BrowserSafeguard Update Task 2014-03-12 20:12 - 2014-03-12 20:12 - 00003914 _____ () C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{55E675FA-B8CE-41E2-BEC0-DCE18DD74943} 2014-03-12 20:12 - 2014-03-12 20:12 - 00000000 ____D () C:\Program Files (x86)\Browsersafeguard 2014-03-12 20:11 - 2014-03-12 20:11 - 00001087 _____ () C:\Users\Thomas\Desktop\Optimizer Pro.lnk 2014-03-12 20:11 - 2014-03-12 20:11 - 00000000 ____D () C:\Program Files (x86)\Optimizer Pro 2014-03-12 20:10 - 2014-03-12 20:17 - 00000000 ____D () C:\ProgramData\WPM 2014-03-12 20:10 - 2014-03-12 20:17 - 00000000 ____D () C:\Program Files (x86)\SupTab 2014-03-12 20:10 - 2014-03-12 20:16 - 00000000 ____D () C:\ProgramData\IePluginService 2014-03-12 20:10 - 2014-03-12 20:10 - 00000000 ____D () C:\Users\Thomas\AppData\Roaming\SupTab 2014-03-12 20:09 - 2014-03-12 20:14 - 00000000 ____D () C:\Users\Thomas\AppData\Roaming\awesomehp 2014-03-12 20:08 - 2014-03-12 20:08 - 00220448 _____ (Fusion Install ) C:\Users\Thomas\Downloads\Setup.exe 2014-03-12 18:44 - 2014-03-12 18:44 - 00001376 _____ () C:\Users\Public\Desktop\GeForce Experience.lnk 2014-03-12 18:44 - 2014-03-12 18:44 - 00000000 ____D () C:\Users\Thomas\AppData\Local\NVIDIA Corporation 2014-03-12 18:43 - 2014-03-12 18:43 - 00000000 ____D () C:\Users\Thomas\AppData\Local\NVIDIA 2014-03-12 18:43 - 2014-02-05 10:31 - 01048152 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvspcap.dll 2014-03-12 18:43 - 2014-02-05 10:30 - 01179576 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvspcap64.dll 2014-03-12 18:43 - 2010-05-26 11:41 - 02401112 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_43.dll 2014-03-12 18:43 - 2010-05-26 11:41 - 00511328 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_43.dll 2014-03-12 18:43 - 2010-05-26 11:41 - 00276832 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx11_43.dll 2014-03-12 18:42 - 2014-03-12 18:44 - 00000000 ____D () C:\WINDOWS\SysWOW64\NV 2014-03-12 18:42 - 2014-03-12 18:44 - 00000000 ____D () C:\WINDOWS\system32\NV 2014-03-12 18:42 - 2014-03-12 18:42 - 00000000 ____D () C:\Program Files (x86)\AGEIA Technologies 2014-03-12 18:41 - 2014-03-12 18:44 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation 2014-03-12 18:41 - 2014-03-04 14:06 - 06714312 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll 2014-03-12 18:41 - 2014-03-04 14:06 - 03497816 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvc64.dll 2014-03-12 18:41 - 2014-03-04 14:05 - 03649185 _____ () C:\WINDOWS\system32\nvcoproc.bin 2014-03-12 18:41 - 2014-03-04 14:05 - 02558808 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvcr.dll 2014-03-12 18:41 - 2014-03-04 14:05 - 01075032 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshext.dll 2014-03-12 18:41 - 2014-03-04 14:05 - 00922968 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvvsvc.exe 2014-03-12 18:41 - 2014-03-04 14:05 - 00386336 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvmctray.dll 2014-03-12 18:41 - 2014-03-04 14:05 - 00067072 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshextr.dll 2014-03-12 18:41 - 2014-03-04 14:05 - 00064968 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvshext.dll 2014-03-12 18:38 - 2014-03-04 15:35 - 31474976 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvoglv64.dll 2014-03-12 18:38 - 2014-03-04 15:35 - 25255256 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcompiler.dll 2014-03-12 18:38 - 2014-03-04 15:35 - 23716640 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvoglv32.dll 2014-03-12 18:38 - 2014-03-04 15:35 - 18302384 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvwgf2umx.dll 2014-03-12 18:38 - 2014-03-04 15:35 - 17755424 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvd3dumx.dll 2014-03-12 18:38 - 2014-03-04 15:35 - 17561544 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcompiler.dll 2014-03-12 18:38 - 2014-03-04 15:35 - 15783992 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvwgf2um.dll 2014-03-12 18:38 - 2014-03-04 15:35 - 14709720 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvd3dum.dll 2014-03-12 18:38 - 2014-03-04 15:35 - 12708128 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvlddmkm.sys 2014-03-12 18:38 - 2014-03-04 15:35 - 11636176 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll 2014-03-12 18:38 - 2014-03-04 15:35 - 11589272 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvopencl.dll 2014-03-12 18:38 - 2014-03-04 15:35 - 09728064 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuda.dll 2014-03-12 18:38 - 2014-03-04 15:35 - 09690424 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvopencl.dll 2014-03-12 18:38 - 2014-03-04 15:35 - 03143456 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll 2014-03-12 18:38 - 2014-03-04 15:35 - 03093280 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvapi64.dll 2014-03-12 18:38 - 2014-03-04 15:35 - 02958792 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvid.dll 2014-03-12 18:38 - 2014-03-04 15:35 - 02783008 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvenc.dll 2014-03-12 18:38 - 2014-03-04 15:35 - 02715264 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvapi.dll 2014-03-12 18:38 - 2014-03-04 15:35 - 02411976 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvenc.dll 2014-03-12 18:38 - 2014-03-04 15:35 - 01885472 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispco6433523.dll 2014-03-12 18:38 - 2014-03-04 15:35 - 01516488 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispgenco6433523.dll 2014-03-12 18:38 - 2014-03-04 15:35 - 00947808 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvumdshimx.dll 2014-03-12 18:38 - 2014-03-04 15:35 - 00892704 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFR64.dll 2014-03-12 18:38 - 2014-03-04 15:35 - 00877856 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvFBC64.dll 2014-03-12 18:38 - 2014-03-04 15:35 - 00863064 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFR.dll 2014-03-12 18:38 - 2014-03-04 15:35 - 00846168 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvFBC.dll 2014-03-12 18:38 - 2014-03-04 15:35 - 00832936 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvumdshim.dll 2014-03-12 18:38 - 2014-03-04 15:35 - 00484296 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncodeAPI64.dll 2014-03-12 18:38 - 2014-03-04 15:35 - 00409544 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncodeAPI.dll 2014-03-12 18:38 - 2014-03-04 15:35 - 00377688 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFROpenGL.dll 2014-03-12 18:38 - 2014-03-04 15:35 - 00353504 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvoglshim64.dll 2014-03-12 18:38 - 2014-03-04 15:35 - 00333600 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFROpenGL.dll 2014-03-12 18:38 - 2014-03-04 15:35 - 00305600 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvoglshim32.dll 2014-03-12 18:38 - 2014-03-04 15:35 - 00174296 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvinitx.dll 2014-03-12 18:38 - 2014-03-04 15:35 - 00148016 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvinit.dll 2014-03-12 18:38 - 2014-03-04 15:35 - 00033736 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvpciflt.sys 2014-03-12 18:38 - 2014-03-04 15:35 - 00024544 _____ () C:\WINDOWS\system32\nvinfo.pb 2014-03-12 18:38 - 2013-12-27 19:42 - 00039200 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvvad64v.sys 2014-03-12 18:38 - 2013-12-27 19:42 - 00035104 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvaudcap64v.dll 2014-03-12 18:38 - 2013-12-27 19:42 - 00033056 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvaudcap32v.dll 2014-03-12 18:36 - 2014-03-12 18:36 - 00000000 ____D () C:\NVIDIA 2014-03-12 18:23 - 2014-03-12 18:26 - 276758080 _____ (NVIDIA Corporation) C:\Users\Thomas\Downloads\335.23-notebook-win8-win7-64bit-international-whql.exe 2014-03-12 13:31 - 2014-03-01 07:05 - 23133696 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll 2014-03-12 13:31 - 2014-03-01 05:58 - 02765824 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll 2014-03-12 13:31 - 2014-03-01 05:30 - 17074688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll 2014-03-12 13:31 - 2014-03-01 05:17 - 00218624 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe 2014-03-12 13:31 - 2014-03-01 04:54 - 05768704 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll 2014-03-12 13:31 - 2014-03-01 04:47 - 02168320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll 2014-03-12 13:31 - 2014-03-01 04:42 - 00627200 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll 2014-03-12 13:31 - 2014-03-01 04:18 - 13051904 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll 2014-03-12 13:31 - 2014-03-01 04:14 - 04244480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll 2014-03-12 13:31 - 2014-03-01 04:10 - 02334208 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll 2014-03-12 13:31 - 2014-03-01 04:03 - 00524288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll 2014-03-12 13:31 - 2014-03-01 03:57 - 11266048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll 2014-03-12 13:31 - 2014-03-01 03:38 - 01393664 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll 2014-03-12 13:31 - 2014-03-01 03:32 - 01820160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll 2014-03-12 13:31 - 2014-03-01 03:27 - 01156096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll 2014-03-12 13:31 - 2014-03-01 03:25 - 00817664 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll 2014-03-12 13:31 - 2014-03-01 03:25 - 00703488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll 2014-03-12 13:31 - 2014-01-31 17:15 - 00311640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\volsnap.sys 2014-03-12 13:31 - 2014-01-31 17:07 - 00233920 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll 2014-03-12 13:31 - 2014-01-31 17:06 - 02133208 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll 2014-03-12 13:31 - 2014-01-31 14:47 - 02143960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll 2014-03-12 13:31 - 2014-01-31 10:06 - 00716288 _____ (Microsoft Corporation) C:\WINDOWS\system32\swprv.dll 2014-03-12 13:31 - 2014-01-29 10:55 - 01287064 _____ (Microsoft Corporation) C:\WINDOWS\system32\kernel32.dll 2014-03-12 13:31 - 2014-01-29 09:53 - 00458616 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFault.exe 2014-03-12 13:31 - 2014-01-29 09:53 - 00407024 _____ (Microsoft Corporation) C:\WINDOWS\system32\Faultrep.dll 2014-03-12 13:31 - 2014-01-29 09:49 - 01928144 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll 2014-03-12 13:31 - 2014-01-29 09:47 - 02543960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys 2014-03-12 13:31 - 2014-01-29 08:44 - 01371824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\combase.dll 2014-03-12 13:31 - 2014-01-29 08:44 - 00408480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFault.exe 2014-03-12 13:31 - 2014-01-29 08:44 - 00369280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Faultrep.dll 2014-03-12 13:31 - 2014-01-29 07:41 - 00208896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpencom.dll 2014-03-12 13:31 - 2014-01-29 01:36 - 00249856 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpencom.dll 2014-03-12 13:31 - 2014-01-27 20:07 - 04175360 _____ (Microsoft Corporation) C:\WINDOWS\system32\dbgeng.dll 2014-03-12 13:31 - 2014-01-27 20:06 - 00064512 _____ (Microsoft Corporation) C:\WINDOWS\system32\tsgqec.dll 2014-03-12 13:31 - 2014-01-27 20:04 - 00160256 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWWIN.EXE 2014-03-12 13:31 - 2014-01-27 19:52 - 01036288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kernel32.dll 2014-03-12 13:31 - 2014-01-27 19:23 - 02873344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dbgeng.dll 2014-03-12 13:31 - 2014-01-27 19:21 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tsgqec.dll 2014-03-12 13:31 - 2014-01-27 19:20 - 00138752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DWWIN.EXE 2014-03-12 13:31 - 2014-01-27 19:15 - 01057280 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdvidcrl.dll 2014-03-12 13:31 - 2014-01-27 18:43 - 00855552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdvidcrl.dll 2014-03-12 13:31 - 2014-01-27 18:18 - 01486848 _____ (Microsoft Corporation) C:\WINDOWS\system32\dbghelp.dll 2014-03-12 13:31 - 2014-01-27 18:00 - 01238016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dbghelp.dll 2014-03-12 13:31 - 2014-01-27 16:58 - 05770752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll 2014-03-12 13:31 - 2014-01-27 16:50 - 06640640 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll 2014-03-12 13:31 - 2014-01-27 12:45 - 00386722 _____ () C:\WINDOWS\system32\ApnDatabase.xml 2014-03-12 13:31 - 2014-01-18 00:04 - 00764864 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll 2014-03-12 13:31 - 2014-01-17 22:54 - 00669352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll 2014-03-12 13:31 - 2013-12-21 15:51 - 06353960 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppsvc.exe 2014-03-12 13:31 - 2013-12-21 09:54 - 00447488 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppcomapi.dll 2014-03-12 13:31 - 2013-12-20 11:18 - 01643584 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi 2014-03-12 13:31 - 2013-12-20 11:18 - 01507704 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe 2014-03-12 13:31 - 2013-10-31 01:29 - 00236888 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdFilter.sys 2014-03-12 13:31 - 2013-10-31 01:29 - 00124760 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdNisDrv.sys 2014-03-12 13:31 - 2013-10-31 01:28 - 00035856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdBoot.sys 2014-03-12 13:30 - 2014-02-11 04:04 - 04189184 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys 2014-03-12 13:30 - 2014-02-11 03:43 - 00488448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\qedit.dll 2014-03-12 13:30 - 2014-02-11 03:04 - 00586240 _____ (Microsoft Corporation) C:\WINDOWS\system32\qedit.dll 2014-03-11 07:43 - 2014-03-11 07:43 - 00002079 _____ () C:\Users\Public\Desktop\Foxit Reader.lnk 2014-03-11 07:42 - 2014-03-11 07:43 - 00000000 ____D () C:\Users\Thomas\AppData\Roaming\Foxit Software 2014-03-11 07:42 - 2014-03-11 07:42 - 00000000 ____D () C:\Program Files (x86)\Foxit Software 2014-03-11 07:41 - 2014-03-11 07:41 - 39477656 _____ (Foxit Corporation ) C:\Users\Thomas\Downloads\foxitreader6010.1213_l10n_setup.exe 2014-03-06 12:23 - 2014-03-06 12:23 - 00003608 _____ () C:\WINDOWS\System32\Tasks\HPCustParticipation HP Deskjet 3520 series 2014-03-06 12:23 - 2014-03-06 12:23 - 00002241 _____ () C:\Users\Public\Desktop\HP Deskjet 3520 series.lnk 2014-03-06 12:23 - 2014-03-06 12:23 - 00002016 _____ () C:\Users\Public\Desktop\HP Photo Creations.lnk 2014-03-06 12:23 - 2014-03-06 12:23 - 00001188 _____ () C:\Users\Public\Desktop\Shop für Zubehör - HP Deskjet 3520 series.lnk 2014-03-06 12:23 - 2014-03-06 12:23 - 00000000 ____D () C:\Users\Thomas\AppData\Roaming\HpUpdate 2014-03-06 12:23 - 2014-03-06 12:23 - 00000000 ____D () C:\ProgramData\Visan 2014-03-06 12:23 - 2014-03-06 12:23 - 00000000 ____D () C:\ProgramData\HP Photo Creations 2014-03-06 12:23 - 2014-03-06 12:23 - 00000000 ____D () C:\Program Files\HP 2014-03-06 12:23 - 2014-03-06 12:23 - 00000000 ____D () C:\Program Files (x86)\HP Photo Creations 2014-03-06 12:23 - 2014-03-06 12:23 - 00000000 ____D () C:\Program Files (x86)\HP 2014-03-06 12:23 - 2012-10-17 04:31 - 00741480 ____N (Hewlett-Packard Co.) C:\WINDOWS\system32\HPDiscoPMB011.dll 2014-03-06 12:22 - 2014-03-06 12:22 - 00000057 _____ () C:\ProgramData\Ament.ini 2014-03-06 12:22 - 2014-03-06 12:22 - 00000000 ____D () C:\Users\Thomas\AppData\Local\HP 2014-03-06 11:33 - 2014-03-06 12:23 - 00000000 ____D () C:\ProgramData\HP 2014-02-28 15:11 - 2014-03-12 19:53 - 00000000 ____D () C:\Users\Thomas\AppData\Local\Amazon Cloud Player 2014-02-28 15:11 - 2014-02-28 15:11 - 00001266 _____ () C:\Users\Thomas\Desktop\Amazon Cloud Player.lnk 2014-02-28 15:11 - 2014-02-28 15:11 - 00000000 ____D () C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Amazon Cloud Player 2014-02-28 15:10 - 2014-02-28 15:10 - 36160080 _____ (Amazon) C:\Users\Thomas\Downloads\AmazonCloudPlayerInstaller_422.exe 2014-02-27 16:03 - 2014-02-27 16:30 - 00000000 ____D () C:\Users\Thomas\AppData\Local\clear.fi 2014-02-27 16:03 - 2014-02-27 16:03 - 00000000 ____D () C:\Users\Thomas\Documents\clear.fi 2014-02-27 16:03 - 2014-02-27 16:03 - 00000000 ____D () C:\Users\Public\OEM 2014-02-24 17:24 - 2014-02-24 17:24 - 00002048 _____ () C:\Users\Public\Desktop\Adobe Reader XI.lnk 2014-02-24 17:23 - 2014-02-24 17:25 - 00000000 ____D () C:\ProgramData\Adobe 2014-02-24 17:23 - 2014-02-24 17:23 - 00000000 ____D () C:\Program Files (x86)\Adobe 2014-02-19 19:44 - 2014-02-19 19:44 - 00000000 ____D () C:\Program Files\McAfee Security Scan 2014-02-19 06:28 - 2014-02-19 06:28 - 00000000 ___RD () C:\WINDOWS\BrowserChoice 2014-02-18 10:02 - 2014-01-19 08:38 - 00270496 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe 2014-02-16 21:08 - 2014-02-16 21:08 - 00000425 _____ () C:\WINDOWS\BRWMARK.INI 2014-02-16 21:08 - 2014-02-16 21:08 - 00000027 _____ () C:\WINDOWS\BRPP2KA.INI 2014-02-16 17:31 - 2014-02-16 17:31 - 00000892 _____ () C:\Users\Thomas\Desktop\MatheTiger 1 & 2 Demoversion.lnk 2014-02-16 17:31 - 2014-02-16 17:31 - 00000000 ____D () C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MatheTiger 1 & 2 Demoversion 2014-02-16 17:29 - 2014-02-16 17:30 - 00000000 ____D () C:\Mildenberger 2014-02-16 13:35 - 2014-03-12 19:50 - 00158720 ___SH () C:\Users\Thomas\Downloads\Thumbs.db 2014-02-15 21:52 - 2014-02-15 21:52 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_User_LocationProvider_01_11_00.Wdf 2014-02-15 21:51 - 2014-03-12 19:45 - 00000000 __RDO () C:\Users\Thomas\SkyDrive 2014-02-15 21:51 - 2014-02-15 21:51 - 00000000 ____D () C:\Users\Thomas\AppData\Local\BMExplorer 2014-02-15 21:50 - 2014-02-15 21:50 - 00000000 ____D () C:\Users\Thomas\Documents\Bluetooth Folder 2014-02-15 21:49 - 2014-03-12 20:14 - 00001463 _____ () C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2014-02-15 21:49 - 2014-02-15 21:49 - 00000020 ___SH () C:\Users\Thomas\ntuser.ini 2014-02-15 21:47 - 2014-02-15 21:47 - 00000000 _SHDL () C:\Users\Default\Vorlagen 2014-02-15 21:47 - 2014-02-15 21:47 - 00000000 _SHDL () C:\Users\Default\Startmenü 2014-02-15 21:47 - 2014-02-15 21:47 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung 2014-02-15 21:47 - 2014-02-15 21:47 - 00000000 _SHDL () C:\Users\Default\Lokale Einstellungen 2014-02-15 21:47 - 2014-02-15 21:47 - 00000000 _SHDL () C:\Users\Default\Eigene Dateien 2014-02-15 21:47 - 2014-02-15 21:47 - 00000000 _SHDL () C:\Users\Default\Druckumgebung 2014-02-15 21:47 - 2014-02-15 21:47 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik 2014-02-15 21:47 - 2014-02-15 21:47 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder 2014-02-15 21:47 - 2014-02-15 21:47 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-02-15 21:47 - 2014-02-15 21:47 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf 2014-02-15 21:47 - 2014-02-15 21:47 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Anwendungsdaten 2014-02-15 21:47 - 2014-02-15 21:47 - 00000000 _SHDL () C:\Users\Default\Anwendungsdaten 2014-02-15 21:47 - 2014-02-15 21:47 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik 2014-02-15 21:47 - 2014-02-15 21:47 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder 2014-02-15 21:47 - 2014-02-15 21:47 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-02-15 21:47 - 2014-02-15 21:47 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf 2014-02-15 21:47 - 2014-02-15 21:47 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Anwendungsdaten 2014-02-15 21:46 - 2014-02-15 21:46 - 00022960 _____ () C:\WINDOWS\system32\emptyregdb.dat 2014-02-15 21:38 - 2014-02-15 21:38 - 00000000 ____D () C:\WINDOWS\system32\config\bbimigrate 2014-02-15 21:37 - 2014-02-15 21:51 - 00000000 ____D () C:\Users\Thomas 2014-02-15 21:37 - 2014-02-15 21:46 - 00028578 _____ () C:\WINDOWS\diagwrn.xml 2014-02-15 21:37 - 2014-02-15 21:46 - 00028578 _____ () C:\WINDOWS\diagerr.xml 2014-02-15 21:37 - 2014-02-15 21:38 - 00000000 ___RD () C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools 2014-02-15 21:37 - 2014-02-15 21:37 - 00000000 _SHDL () C:\Users\Thomas\Vorlagen 2014-02-15 21:37 - 2014-02-15 21:37 - 00000000 _SHDL () C:\Users\Thomas\Startmenü 2014-02-15 21:37 - 2014-02-15 21:37 - 00000000 _SHDL () C:\Users\Thomas\Netzwerkumgebung 2014-02-15 21:37 - 2014-02-15 21:37 - 00000000 _SHDL () C:\Users\Thomas\Lokale Einstellungen 2014-02-15 21:37 - 2014-02-15 21:37 - 00000000 _SHDL () C:\Users\Thomas\Eigene Dateien 2014-02-15 21:37 - 2014-02-15 21:37 - 00000000 _SHDL () C:\Users\Thomas\Druckumgebung 2014-02-15 21:37 - 2014-02-15 21:37 - 00000000 _SHDL () C:\Users\Thomas\Documents\Eigene Musik 2014-02-15 21:37 - 2014-02-15 21:37 - 00000000 _SHDL () C:\Users\Thomas\Documents\Eigene Bilder 2014-02-15 21:37 - 2014-02-15 21:37 - 00000000 _SHDL () C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-02-15 21:37 - 2014-02-15 21:37 - 00000000 _SHDL () C:\Users\Thomas\AppData\Local\Verlauf 2014-02-15 21:37 - 2014-02-15 21:37 - 00000000 _SHDL () C:\Users\Thomas\AppData\Local\Anwendungsdaten 2014-02-15 21:37 - 2014-02-15 21:37 - 00000000 _SHDL () C:\Users\Thomas\Anwendungsdaten 2014-02-15 21:37 - 2013-08-22 16:36 - 00000000 ___RD () C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories 2014-02-15 21:37 - 2013-08-22 16:36 - 00000000 ___RD () C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility 2014-02-15 21:37 - 2013-08-22 16:36 - 00000000 ____D () C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance 2014-02-15 21:33 - 2014-03-12 20:05 - 01811622 _____ () C:\WINDOWS\WindowsUpdate.log 2014-02-15 21:33 - 2014-03-12 18:42 - 00000000 ____D () C:\ProgramData\NVIDIA 2014-02-15 21:33 - 2014-02-15 21:33 - 00000000 ____D () C:\WINDOWS\SysWOW64\RTCOM 2014-02-15 21:33 - 2014-02-15 21:33 - 00000000 ____D () C:\Program Files\Realtek 2014-02-15 21:32 - 2014-03-12 18:43 - 00000000 ____D () C:\Program Files\NVIDIA Corporation 2014-02-15 21:32 - 2014-03-12 18:43 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation 2014-02-15 21:32 - 2014-02-15 21:39 - 00000000 ____D () C:\Program Files (x86)\Intel 2014-02-15 21:32 - 2014-02-15 21:32 - 00000000 ____D () C:\Program Files\Elantech 2014-02-15 21:32 - 2013-12-21 00:02 - 00064000 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.DLL 2014-02-15 21:32 - 2013-12-21 00:02 - 00060416 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.DLL 2014-02-15 21:30 - 2014-02-17 17:53 - 00000000 ___DC () C:\WINDOWS\Panther 2014-02-15 21:29 - 2014-02-15 21:29 - 03395920 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSService.dll 2014-02-15 21:29 - 2014-02-15 21:29 - 01113040 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll 2014-02-15 21:29 - 2014-02-15 21:29 - 00848384 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSShared.dll 2014-02-15 21:29 - 2014-02-15 21:29 - 00835584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll 2014-02-15 21:29 - 2014-02-15 21:29 - 00787968 _____ (Microsoft Corporation) C:\WINDOWS\system32\uDWM.dll 2014-02-15 21:29 - 2014-02-15 21:29 - 00695808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSShared.dll 2014-02-15 21:29 - 2014-02-15 21:29 - 00570880 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdrm.dll 2014-02-15 21:29 - 2014-02-15 21:29 - 00548864 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll 2014-02-15 21:29 - 2014-02-15 21:29 - 00454656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll 2014-02-15 21:29 - 2014-02-15 21:29 - 00444928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msdrm.dll 2014-02-15 21:29 - 2014-02-15 21:29 - 00393216 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMPhoto.dll 2014-02-15 21:29 - 2014-02-15 21:29 - 00348160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMPhoto.dll 2014-02-15 21:29 - 2014-02-15 21:29 - 00249856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll 2014-02-15 21:29 - 2014-02-15 21:29 - 00206336 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSClient.dll 2014-02-15 21:29 - 2014-02-15 21:29 - 00189952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll 2014-02-15 21:29 - 2014-02-15 21:29 - 00174592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSClient.dll 2014-02-15 21:29 - 2014-02-15 21:29 - 00138240 _____ () C:\WINDOWS\system32\OEMLicense.dll 2014-02-15 21:29 - 2014-02-15 21:29 - 00103936 _____ () C:\WINDOWS\SysWOW64\OEMLicense.dll 2014-02-15 21:29 - 2014-02-15 21:29 - 00084480 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSCollect.exe 2014-02-15 21:29 - 2014-02-15 21:29 - 00075360 _____ (Microsoft Corporation) C:\WINDOWS\system32\imagehlp.dll 2014-02-15 21:29 - 2014-02-15 21:29 - 00070680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\imagehlp.dll 2014-02-15 21:29 - 2014-02-15 21:29 - 00018944 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcaui.exe 2014-02-15 21:29 - 2014-02-15 21:29 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pcaui.exe 2014-02-15 21:28 - 2014-02-15 21:28 - 02724864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb 2014-02-15 21:28 - 2014-02-15 21:28 - 02724864 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb 2014-02-15 21:28 - 2014-02-15 21:28 - 02041856 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl 2014-02-15 21:28 - 2014-02-15 21:28 - 01964032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl 2014-02-15 21:28 - 2014-02-15 21:28 - 00708608 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll 2014-02-15 21:28 - 2014-02-15 21:28 - 00615936 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDMAgent.exe 2014-02-15 21:28 - 2014-02-15 21:28 - 00553472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll 2014-02-15 21:28 - 2014-02-15 21:28 - 00287744 _____ (Microsoft Corporation) C:\WINDOWS\system32\mdmregistration.dll 2014-02-15 21:28 - 2014-02-15 21:28 - 00240128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mdmregistration.dll 2014-02-15 21:28 - 2014-02-15 21:28 - 00197120 _____ (Microsoft Corporation) C:\WINDOWS\system32\scrrun.dll 2014-02-15 21:28 - 2014-02-15 21:28 - 00195584 _____ (Microsoft Corporation) C:\WINDOWS\system32\msrating.dll 2014-02-15 21:28 - 2014-02-15 21:28 - 00164864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrating.dll 2014-02-15 21:28 - 2014-02-15 21:28 - 00156672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\scrrun.dll 2014-02-15 21:28 - 2014-02-15 21:28 - 00139264 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieUnatt.exe 2014-02-15 21:28 - 2014-02-15 21:28 - 00112128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieUnatt.exe 2014-02-15 21:28 - 2014-02-15 21:28 - 00111616 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwcollector.exe 2014-02-15 21:28 - 2014-02-15 21:28 - 00066048 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesetup.dll 2014-02-15 21:28 - 2014-02-15 21:28 - 00061952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iesetup.dll 2014-02-15 21:28 - 2014-02-15 21:28 - 00053760 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll 2014-02-15 21:28 - 2014-02-15 21:28 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieetwproxystub.dll 2014-02-15 21:28 - 2014-02-15 21:28 - 00048640 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwproxystub.dll 2014-02-15 21:28 - 2014-02-15 21:28 - 00043008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jsproxy.dll 2014-02-15 21:28 - 2014-02-15 21:28 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\system32\iernonce.dll 2014-02-15 21:28 - 2014-02-15 21:28 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iernonce.dll 2014-02-15 21:28 - 2014-02-15 21:28 - 00004096 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwcollectorres.dll 2014-02-15 21:27 - 2014-02-15 21:27 - 13209088 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll 2014-02-15 21:27 - 2014-02-15 21:27 - 11702272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll 2014-02-15 21:27 - 2014-02-15 21:27 - 07416832 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Search.dll 2014-02-15 21:27 - 2014-02-15 21:27 - 04961792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Search.dll 2014-02-15 21:27 - 2014-02-15 21:27 - 01462216 _____ (Microsoft Corporation) C:\WINDOWS\system32\propsys.dll 2014-02-15 21:27 - 2014-02-15 21:27 - 01202888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\propsys.dll 2014-02-15 21:27 - 2014-02-15 21:27 - 01105408 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFolder.dll 2014-02-15 21:27 - 2014-02-15 21:27 - 00830976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchFolder.dll 2014-02-15 21:27 - 2014-02-15 21:27 - 00009701 _____ () C:\WINDOWS\SysWOW64\connectedsearch-results.searchconnector-ms 2014-02-15 21:27 - 2014-02-15 21:27 - 00009701 _____ () C:\WINDOWS\system32\connectedsearch-results.searchconnector-ms 2014-02-15 21:26 - 2014-02-15 21:26 - 21196664 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 18642504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 18577920 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 13925888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 04604416 _____ (Microsoft Corporation) C:\WINDOWS\system32\d2d1.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 04217344 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncEngine.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 03936256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d2d1.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 03210528 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2vdec.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 02804528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msmpeg2vdec.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 02804224 _____ (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 02617344 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 02397184 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d10warp.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 02295808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 02071552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d10warp.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 01503232 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvc.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 01415680 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 01399176 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmde.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 01374384 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpmde.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 01227264 _____ (Microsoft Corporation) C:\WINDOWS\system32\mispace.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 01204968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winmde.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 01119064 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys 2014-02-15 21:26 - 2014-02-15 21:26 - 01020928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\actxprxy.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 00980480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mispace.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 00919040 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmCoreR.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 00870912 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDrive.exe 2014-02-15 21:26 - 2014-02-15 21:26 - 00834048 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 00809872 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 00745336 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleaut32.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 00744448 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncCore.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 00720384 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDriveTelemetry.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 00663680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 00637952 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncHost.exe 2014-02-15 21:26 - 2014-02-15 21:26 - 00628736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MrmCoreR.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 00589824 _____ (Microsoft Corporation) C:\WINDOWS\system32\rastls.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 00584192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncCore.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 00552624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleaut32.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 00513536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rastls.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 00479744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncHost.exe 2014-02-15 21:26 - 2014-02-15 21:26 - 00470016 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfds.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 00461824 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsGdiConverter.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 00433664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfds.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 00403456 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys 2014-02-15 21:26 - 2014-02-15 21:26 - 00336384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XpsGdiConverter.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 00306688 _____ (Microsoft Corporation) C:\WINDOWS\system32\msieftp.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 00282112 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemEventsBrokerServer.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 00273920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msieftp.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 00273408 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Graphics.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 00263168 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 00218112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Graphics.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 00207872 _____ (Microsoft Corporation) C:\WINDOWS\system32\deviceregistration.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 00202240 _____ (Microsoft Corporation) C:\WINDOWS\system32\ubpm.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 00142848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ipnat.sys 2014-02-15 21:26 - 2014-02-15 21:26 - 00142680 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBSTOR.SYS 2014-02-15 21:26 - 2014-02-15 21:26 - 00136704 _____ (Microsoft Corporation) C:\WINDOWS\system32\psmsrv.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 00121344 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDriveShell.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 00115712 _____ (Microsoft Corporation) C:\WINDOWS\system32\winbici.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 00105984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SkyDriveShell.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 00032088 _____ (Microsoft Corporation) C:\WINDOWS\system32\ploptin.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 00024064 _____ (Microsoft Corporation) C:\WINDOWS\system32\bi.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 00019456 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BtaMPM.sys 2014-02-15 21:24 - 2014-02-15 21:24 - 07399256 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe 2014-02-15 21:24 - 2014-02-15 21:24 - 02896896 _____ (Microsoft Corporation) C:\WINDOWS\system32\msftedit.dll 2014-02-15 21:24 - 2014-02-15 21:24 - 02570240 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers.dll 2014-02-15 21:24 - 2014-02-15 21:24 - 02266624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msftedit.dll 2014-02-15 21:24 - 2014-02-15 21:24 - 02152448 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml3.dll 2014-02-15 21:24 - 2014-02-15 21:24 - 02143744 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll 2014-02-15 21:24 - 2014-02-15 21:24 - 02140888 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll 2014-02-15 21:24 - 2014-02-15 21:24 - 01843712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Display.dll 2014-02-15 21:24 - 2014-02-15 21:24 - 01816576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Display.dll 2014-02-15 21:24 - 2014-02-15 21:24 - 01765384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11.dll 2014-02-15 21:24 - 2014-02-15 21:24 - 01765376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll 2014-02-15 21:24 - 2014-02-15 21:24 - 01756160 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMPDMC.exe 2014-02-15 21:24 - 2014-02-15 21:24 - 01530200 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys 2014-02-15 21:24 - 2014-02-15 21:24 - 01476184 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi 2014-02-15 21:24 - 2014-02-15 21:24 - 01391104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMPDMC.exe 2014-02-15 21:24 - 2014-02-15 21:24 - 01345536 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe 2014-02-15 21:24 - 2014-02-15 21:24 - 01317376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml3.dll 2014-02-15 21:24 - 2014-02-15 21:24 - 01302528 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll 2014-02-15 21:24 - 2014-02-15 21:24 - 00922624 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.dll 2014-02-15 21:24 - 2014-02-15 21:24 - 00747008 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidcli.dll 2014-02-15 21:24 - 2014-02-15 21:24 - 00566784 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpncore.dll 2014-02-15 21:24 - 2014-02-15 21:24 - 00544768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlidcli.dll 2014-02-15 21:24 - 2014-02-15 21:24 - 00516496 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll 2014-02-15 21:24 - 2014-02-15 21:24 - 00406400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxgi.dll 2014-02-15 21:24 - 2014-02-15 21:24 - 00382808 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys 2014-02-15 21:24 - 2014-02-15 21:24 - 00372568 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\spaceport.sys 2014-02-15 21:24 - 2014-02-15 21:24 - 00358896 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcomp.dll 2014-02-15 21:24 - 2014-02-15 21:24 - 00325464 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBXHCI.SYS 2014-02-15 21:24 - 2014-02-15 21:24 - 00254464 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll 2014-02-15 21:24 - 2014-02-15 21:24 - 00225792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dcomp.dll 2014-02-15 21:24 - 2014-02-15 21:24 - 00198656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppXDeploymentClient.dll 2014-02-15 21:24 - 2014-02-15 21:24 - 00146776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\SerCx2.sys 2014-02-15 21:24 - 2014-02-15 21:24 - 00086872 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pdc.sys 2014-02-15 21:24 - 2014-02-15 21:24 - 00039768 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\intelpep.sys 2014-02-15 21:24 - 2014-02-15 21:24 - 00030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\CredentialMigrationHandler.dll 2014-02-15 21:24 - 2014-02-15 21:24 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CredentialMigrationHandler.dll 2014-02-15 21:23 - 2014-02-15 21:23 - 00262144 _____ () C:\WINDOWS\system32\config\userdiff 2014-02-15 21:21 - 2014-02-15 21:21 - 00000000 ____D () C:\WINDOWS\SysWOW64\XPSViewer 2014-02-15 21:21 - 2014-02-15 21:21 - 00000000 ____D () C:\Program Files\Reference Assemblies 2014-02-15 21:21 - 2014-02-15 21:21 - 00000000 ____D () C:\Program Files\MSBuild 2014-02-15 21:21 - 2014-02-15 21:21 - 00000000 ____D () C:\Program Files (x86)\Reference Assemblies 2014-02-15 21:21 - 2014-02-15 21:21 - 00000000 ____D () C:\Program Files (x86)\MSBuild 2014-02-15 21:20 - 2013-08-03 05:48 - 01166520 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationNative_v0300.dll 2014-02-15 21:20 - 2013-08-03 05:48 - 00124112 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll 2014-02-15 21:20 - 2013-08-03 05:48 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe 2014-02-15 21:20 - 2013-08-03 05:41 - 00778936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationNative_v0300.dll 2014-02-15 21:20 - 2013-08-03 05:41 - 00102608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll 2014-02-15 21:20 - 2013-08-03 05:41 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TsWpfWrp.exe 2014-02-15 20:51 - 2014-02-15 21:46 - 00006602 _____ () C:\WINDOWS\comsetup.log 2014-02-15 18:44 - 2014-02-15 18:45 - 00000000 ____D () C:\WINDOWS\system32\MRT 2014-02-15 18:44 - 2014-02-04 19:09 - 88567024 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe 2014-02-15 18:37 - 2014-02-16 16:41 - 00000000 ____D () C:\Users\Thomas\Documents\Windows 8_1-Upgrade-Assistent-Dateien 2014-02-15 18:37 - 2014-02-15 18:37 - 00025722 _____ () C:\Users\Thomas\Documents\Windows 8_1-Upgrade-Assistent.html 2014-02-15 18:37 - 2013-05-04 05:51 - 00014848 ____N (Microsoft) C:\WINDOWS\system32\rars.rs 2014-02-15 18:37 - 2013-05-04 05:10 - 00014848 ____N (Microsoft) C:\WINDOWS\SysWOW64\rars.rs 2014-02-15 18:32 - 2014-02-15 18:32 - 04954736 _____ (Microsoft Corporation) C:\Users\Thomas\Downloads\WindowsUpgradeAssistant.exe 2014-02-15 18:22 - 2014-02-15 18:22 - 00000000 ____D () C:\Users\Thomas\AppData\Local\Macromedia 2014-02-15 18:20 - 2014-03-12 20:09 - 00000884 _____ () C:\WINDOWS\Tasks\Adobe Flash Player Updater.job 2014-02-15 18:20 - 2014-03-12 14:09 - 00003772 _____ () C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater 2014-02-15 18:20 - 2014-02-19 19:44 - 00001956 _____ () C:\Users\Public\Desktop\McAfee Security Scan Plus.lnk 2014-02-15 18:20 - 2014-02-15 18:20 - 00000000 ____D () C:\ProgramData\McAfee Security Scan 2014-02-15 18:19 - 2014-03-11 07:38 - 00000000 ____D () C:\Users\Thomas\AppData\Local\Adobe 2014-02-15 18:16 - 2014-02-15 18:16 - 00000000 ____D () C:\Users\Thomas\AppData\Roaming\Mozilla 2014-02-15 18:16 - 2014-02-15 18:16 - 00000000 ____D () C:\Users\Thomas\AppData\Local\Mozilla 2014-02-15 18:15 - 2014-03-12 20:14 - 00001160 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk 2014-02-15 18:15 - 2014-02-15 18:15 - 24490112 _____ (Mozilla) C:\Users\Thomas\Downloads\Firefox_Setup_27.0.1.exe 2014-02-15 18:15 - 2014-02-15 18:15 - 00000000 ____D () C:\ProgramData\Mozilla 2014-02-15 18:15 - 2014-02-15 18:15 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service 2014-02-15 18:15 - 2014-02-15 18:15 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox 2014-02-15 18:03 - 2014-03-12 20:29 - 00003598 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1042288249-1955762201-2030029956-1002 2014-02-15 17:59 - 2014-02-15 17:59 - 00000000 ____D () C:\Users\Thomas\AppData\Roaming\Macromedia 2014-02-15 17:58 - 2014-02-15 17:58 - 00000000 ____D () C:\Users\Thomas\AppData\Roaming\Atheros 2014-02-15 17:57 - 2014-03-12 20:17 - 00000000 ___RD () C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup 2014-02-15 17:57 - 2014-02-24 17:24 - 00000000 ____D () C:\Users\Thomas\AppData\Roaming\Adobe 2014-02-15 17:57 - 2014-02-15 21:49 - 00000000 ___RD () C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools 2014-02-15 17:57 - 2014-02-15 17:57 - 00000000 ____D () C:\WINDOWS\System32\Tasks\WPD 2014-02-15 17:57 - 2014-02-15 17:57 - 00000000 ____D () C:\Users\Thomas\AppData\Local\VirtualStore 2014-02-15 17:57 - 2014-02-15 17:57 - 00000000 ____D () C:\ProgramData\OEM_YAHOO 2014-02-15 17:56 - 2014-03-06 11:34 - 00000000 ____D () C:\Users\Thomas\AppData\Local\Packages 2014-02-15 17:40 - 2014-02-15 21:30 - 00000000 __SHD () C:\Recovery 2014-02-15 17:40 - 2014-02-15 17:41 - 00000000 _____ () C:\Recovery.txt 2014-02-15 16:53 - 2014-02-15 16:53 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf 2014-02-15 16:41 - 2014-02-15 16:41 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Musik 2014-02-15 16:41 - 2014-02-15 16:41 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Bilder 2014-02-15 16:41 - 2014-02-15 16:41 - 00000000 _SHDL () C:\Users\Default.migrated\Vorlagen 2014-02-15 16:41 - 2014-02-15 16:41 - 00000000 _SHDL () C:\Users\Default.migrated\Startmenü 2014-02-15 16:41 - 2014-02-15 16:41 - 00000000 _SHDL () C:\Users\Default.migrated\Netzwerkumgebung 2014-02-15 16:41 - 2014-02-15 16:41 - 00000000 _SHDL () C:\Users\Default.migrated\Lokale Einstellungen 2014-02-15 16:41 - 2014-02-15 16:41 - 00000000 _SHDL () C:\Users\Default.migrated\Eigene Dateien 2014-02-15 16:41 - 2014-02-15 16:41 - 00000000 _SHDL () C:\Users\Default.migrated\Druckumgebung 2014-02-15 16:41 - 2014-02-15 16:41 - 00000000 _SHDL () C:\Users\Default.migrated\Documents\Eigene Musik 2014-02-15 16:41 - 2014-02-15 16:41 - 00000000 _SHDL () C:\Users\Default.migrated\Documents\Eigene Bilder 2014-02-15 16:41 - 2014-02-15 16:41 - 00000000 _SHDL () C:\Users\Default.migrated\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-02-15 16:41 - 2014-02-15 16:41 - 00000000 _SHDL () C:\Users\Default.migrated\AppData\Local\Verlauf 2014-02-15 16:41 - 2014-02-15 16:41 - 00000000 _SHDL () C:\Users\Default.migrated\AppData\Local\Anwendungsdaten 2014-02-15 16:41 - 2014-02-15 16:41 - 00000000 _SHDL () C:\Users\Default.migrated\Anwendungsdaten 2014-02-15 16:41 - 2014-02-15 16:41 - 00000000 _SHDL () C:\Programme 2014-02-15 16:41 - 2014-02-15 16:41 - 00000000 _SHDL () C:\ProgramData\Vorlagen 2014-02-15 16:41 - 2014-02-15 16:41 - 00000000 _SHDL () C:\ProgramData\Startmenü 2014-02-15 16:41 - 2014-02-15 16:41 - 00000000 _SHDL () C:\ProgramData\Dokumente 2014-02-15 16:41 - 2014-02-15 16:41 - 00000000 _SHDL () C:\ProgramData\Anwendungsdaten 2014-02-15 16:41 - 2014-02-15 16:41 - 00000000 _SHDL () C:\Program Files\Gemeinsame Dateien 2014-02-15 16:41 - 2014-02-15 16:41 - 00000000 _SHDL () C:\Dokumente und Einstellungen ==================== One Month Modified Files and Folders ======= 2014-03-12 20:35 - 2014-03-12 20:34 - 00020790 _____ () C:\Users\Thomas\Downloads\FRST.txt 2014-03-12 20:34 - 2014-03-12 20:34 - 02157056 _____ (Farbar) C:\Users\Thomas\Downloads\FRST64.exe 2014-03-12 20:34 - 2014-03-12 20:34 - 00000000 ____D () C:\FRST 2014-03-12 20:29 - 2014-02-15 18:03 - 00003598 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1042288249-1955762201-2030029956-1002 2014-03-12 20:25 - 2014-03-12 20:25 - 00728960 _____ (Enigma Software Group USA, LLC.) C:\Users\Thomas\Downloads\SpyHunter-Installer.exe 2014-03-12 20:17 - 2014-03-12 20:10 - 00000000 ____D () C:\ProgramData\WPM 2014-03-12 20:17 - 2014-03-12 20:10 - 00000000 ____D () C:\Program Files (x86)\SupTab 2014-03-12 20:17 - 2014-02-15 17:57 - 00000000 ___RD () C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup 2014-03-12 20:16 - 2014-03-12 20:16 - 00000000 ____D () C:\Users\Thomas\Documents\Optimizer Pro 2014-03-12 20:16 - 2014-03-12 20:16 - 00000000 ____D () C:\Users\Thomas\AppData\Roaming\Optimizer Pro 2014-03-12 20:16 - 2014-03-12 20:10 - 00000000 ____D () C:\ProgramData\IePluginService 2014-03-12 20:14 - 2014-03-12 20:09 - 00000000 ____D () C:\Users\Thomas\AppData\Roaming\awesomehp 2014-03-12 20:14 - 2014-02-15 21:49 - 00001463 _____ () C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2014-03-12 20:14 - 2014-02-15 18:15 - 00001160 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk 2014-03-12 20:12 - 2014-03-12 20:12 - 00004380 _____ () C:\WINDOWS\System32\Tasks\BrowserSafeguard Update Task 2014-03-12 20:12 - 2014-03-12 20:12 - 00003914 _____ () C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{55E675FA-B8CE-41E2-BEC0-DCE18DD74943} 2014-03-12 20:12 - 2014-03-12 20:12 - 00000000 ____D () C:\Program Files (x86)\Browsersafeguard 2014-03-12 20:11 - 2014-03-12 20:11 - 00001087 _____ () C:\Users\Thomas\Desktop\Optimizer Pro.lnk 2014-03-12 20:11 - 2014-03-12 20:11 - 00000000 ____D () C:\Program Files (x86)\Optimizer Pro 2014-03-12 20:10 - 2014-03-12 20:10 - 00000000 ____D () C:\Users\Thomas\AppData\Roaming\SupTab 2014-03-12 20:09 - 2014-02-15 18:20 - 00000884 _____ () C:\WINDOWS\Tasks\Adobe Flash Player Updater.job 2014-03-12 20:08 - 2014-03-12 20:08 - 00220448 _____ (Fusion Install ) C:\Users\Thomas\Downloads\Setup.exe 2014-03-12 20:05 - 2014-02-15 21:33 - 01811622 _____ () C:\WINDOWS\WindowsUpdate.log 2014-03-12 20:00 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\sru 2014-03-12 19:55 - 2013-11-14 08:27 - 01776918 _____ () C:\WINDOWS\system32\PerfStringBackup.INI 2014-03-12 19:55 - 2013-11-14 08:11 - 00765582 _____ () C:\WINDOWS\system32\perfh007.dat 2014-03-12 19:55 - 2013-11-14 08:11 - 00159366 _____ () C:\WINDOWS\system32\perfc007.dat 2014-03-12 19:54 - 2013-08-22 15:46 - 00330726 _____ () C:\WINDOWS\setupact.log 2014-03-12 19:53 - 2014-02-28 15:11 - 00000000 ____D () C:\Users\Thomas\AppData\Local\Amazon Cloud Player 2014-03-12 19:50 - 2014-02-16 13:35 - 00158720 ___SH () C:\Users\Thomas\Downloads\Thumbs.db 2014-03-12 19:45 - 2014-02-15 21:51 - 00000000 __RDO () C:\Users\Thomas\SkyDrive 2014-03-12 18:44 - 2014-03-12 18:44 - 00001376 _____ () C:\Users\Public\Desktop\GeForce Experience.lnk 2014-03-12 18:44 - 2014-03-12 18:44 - 00000000 ____D () C:\Users\Thomas\AppData\Local\NVIDIA Corporation 2014-03-12 18:44 - 2014-03-12 18:42 - 00000000 ____D () C:\WINDOWS\SysWOW64\NV 2014-03-12 18:44 - 2014-03-12 18:42 - 00000000 ____D () C:\WINDOWS\system32\NV 2014-03-12 18:44 - 2014-03-12 18:41 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation 2014-03-12 18:43 - 2014-03-12 18:43 - 00000000 ____D () C:\Users\Thomas\AppData\Local\NVIDIA 2014-03-12 18:43 - 2014-02-15 21:32 - 00000000 ____D () C:\Program Files\NVIDIA Corporation 2014-03-12 18:43 - 2014-02-15 21:32 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation 2014-03-12 18:42 - 2014-03-12 18:42 - 00000000 ____D () C:\Program Files (x86)\AGEIA Technologies 2014-03-12 18:42 - 2014-02-15 21:33 - 00000000 ____D () C:\ProgramData\NVIDIA 2014-03-12 18:41 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\Help 2014-03-12 18:39 - 2013-08-22 15:45 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT 2014-03-12 18:38 - 2013-08-22 14:25 - 00262144 ___SH () C:\WINDOWS\system32\config\BBI 2014-03-12 18:36 - 2014-03-12 18:36 - 00000000 ____D () C:\NVIDIA 2014-03-12 18:26 - 2014-03-12 18:23 - 276758080 _____ (NVIDIA Corporation) C:\Users\Thomas\Downloads\335.23-notebook-win8-win7-64bit-international-whql.exe 2014-03-12 18:13 - 2013-08-22 15:44 - 00335992 _____ () C:\WINDOWS\system32\FNTCACHE.DAT 2014-03-12 14:24 - 2013-08-22 16:36 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools 2014-03-12 14:24 - 2013-08-22 16:36 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools 2014-03-12 14:24 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files\Windows Defender 2014-03-12 14:24 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files (x86)\Windows Defender 2014-03-12 14:09 - 2014-02-15 18:20 - 00003772 _____ () C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater 2014-03-12 13:37 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\AppReadiness 2014-03-11 07:43 - 2014-03-11 07:43 - 00002079 _____ () C:\Users\Public\Desktop\Foxit Reader.lnk 2014-03-11 07:43 - 2014-03-11 07:42 - 00000000 ____D () C:\Users\Thomas\AppData\Roaming\Foxit Software 2014-03-11 07:42 - 2014-03-11 07:42 - 00000000 ____D () C:\Program Files (x86)\Foxit Software 2014-03-11 07:41 - 2014-03-11 07:41 - 39477656 _____ (Foxit Corporation ) C:\Users\Thomas\Downloads\foxitreader6010.1213_l10n_setup.exe 2014-03-11 07:38 - 2014-02-15 18:19 - 00000000 ____D () C:\Users\Thomas\AppData\Local\Adobe 2014-03-09 10:59 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\NDF 2014-03-06 12:29 - 2013-11-13 23:18 - 00004506 _____ () C:\WINDOWS\PFRO.log 2014-03-06 12:23 - 2014-03-06 12:23 - 00003608 _____ () C:\WINDOWS\System32\Tasks\HPCustParticipation HP Deskjet 3520 series 2014-03-06 12:23 - 2014-03-06 12:23 - 00002241 _____ () C:\Users\Public\Desktop\HP Deskjet 3520 series.lnk 2014-03-06 12:23 - 2014-03-06 12:23 - 00002016 _____ () C:\Users\Public\Desktop\HP Photo Creations.lnk 2014-03-06 12:23 - 2014-03-06 12:23 - 00001188 _____ () C:\Users\Public\Desktop\Shop für Zubehör - HP Deskjet 3520 series.lnk 2014-03-06 12:23 - 2014-03-06 12:23 - 00000000 ____D () C:\Users\Thomas\AppData\Roaming\HpUpdate 2014-03-06 12:23 - 2014-03-06 12:23 - 00000000 ____D () C:\ProgramData\Visan 2014-03-06 12:23 - 2014-03-06 12:23 - 00000000 ____D () C:\ProgramData\HP Photo Creations 2014-03-06 12:23 - 2014-03-06 12:23 - 00000000 ____D () C:\Program Files\HP 2014-03-06 12:23 - 2014-03-06 12:23 - 00000000 ____D () C:\Program Files (x86)\HP Photo Creations 2014-03-06 12:23 - 2014-03-06 12:23 - 00000000 ____D () C:\Program Files (x86)\HP 2014-03-06 12:23 - 2014-03-06 11:33 - 00000000 ____D () C:\ProgramData\HP 2014-03-06 12:22 - 2014-03-06 12:22 - 00000057 _____ () C:\ProgramData\Ament.ini 2014-03-06 12:22 - 2014-03-06 12:22 - 00000000 ____D () C:\Users\Thomas\AppData\Local\HP 2014-03-06 11:34 - 2014-02-15 17:56 - 00000000 ____D () C:\Users\Thomas\AppData\Local\Packages 2014-03-04 23:53 - 2013-08-22 16:38 - 00693240 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe 2014-03-04 23:53 - 2013-08-22 16:38 - 00105464 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl 2014-03-04 15:35 - 2014-03-12 18:38 - 31474976 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvoglv64.dll 2014-03-04 15:35 - 2014-03-12 18:38 - 25255256 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcompiler.dll 2014-03-04 15:35 - 2014-03-12 18:38 - 23716640 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvoglv32.dll 2014-03-04 15:35 - 2014-03-12 18:38 - 18302384 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvwgf2umx.dll 2014-03-04 15:35 - 2014-03-12 18:38 - 17755424 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvd3dumx.dll 2014-03-04 15:35 - 2014-03-12 18:38 - 17561544 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcompiler.dll 2014-03-04 15:35 - 2014-03-12 18:38 - 15783992 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvwgf2um.dll 2014-03-04 15:35 - 2014-03-12 18:38 - 14709720 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvd3dum.dll 2014-03-04 15:35 - 2014-03-12 18:38 - 12708128 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvlddmkm.sys 2014-03-04 15:35 - 2014-03-12 18:38 - 11636176 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll 2014-03-04 15:35 - 2014-03-12 18:38 - 11589272 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvopencl.dll 2014-03-04 15:35 - 2014-03-12 18:38 - 09728064 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuda.dll 2014-03-04 15:35 - 2014-03-12 18:38 - 09690424 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvopencl.dll 2014-03-04 15:35 - 2014-03-12 18:38 - 03143456 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll 2014-03-04 15:35 - 2014-03-12 18:38 - 03093280 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvapi64.dll 2014-03-04 15:35 - 2014-03-12 18:38 - 02958792 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvid.dll 2014-03-04 15:35 - 2014-03-12 18:38 - 02783008 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvenc.dll 2014-03-04 15:35 - 2014-03-12 18:38 - 02715264 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvapi.dll 2014-03-04 15:35 - 2014-03-12 18:38 - 02411976 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvenc.dll 2014-03-04 15:35 - 2014-03-12 18:38 - 01885472 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispco6433523.dll 2014-03-04 15:35 - 2014-03-12 18:38 - 01516488 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispgenco6433523.dll 2014-03-04 15:35 - 2014-03-12 18:38 - 00947808 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvumdshimx.dll 2014-03-04 15:35 - 2014-03-12 18:38 - 00892704 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFR64.dll 2014-03-04 15:35 - 2014-03-12 18:38 - 00877856 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvFBC64.dll 2014-03-04 15:35 - 2014-03-12 18:38 - 00863064 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFR.dll 2014-03-04 15:35 - 2014-03-12 18:38 - 00846168 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvFBC.dll 2014-03-04 15:35 - 2014-03-12 18:38 - 00832936 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvumdshim.dll 2014-03-04 15:35 - 2014-03-12 18:38 - 00484296 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncodeAPI64.dll 2014-03-04 15:35 - 2014-03-12 18:38 - 00409544 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncodeAPI.dll 2014-03-04 15:35 - 2014-03-12 18:38 - 00377688 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFROpenGL.dll 2014-03-04 15:35 - 2014-03-12 18:38 - 00353504 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvoglshim64.dll 2014-03-04 15:35 - 2014-03-12 18:38 - 00333600 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFROpenGL.dll 2014-03-04 15:35 - 2014-03-12 18:38 - 00305600 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvoglshim32.dll 2014-03-04 15:35 - 2014-03-12 18:38 - 00174296 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvinitx.dll 2014-03-04 15:35 - 2014-03-12 18:38 - 00148016 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvinit.dll 2014-03-04 15:35 - 2014-03-12 18:38 - 00033736 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvpciflt.sys 2014-03-04 15:35 - 2014-03-12 18:38 - 00024544 _____ () C:\WINDOWS\system32\nvinfo.pb 2014-03-04 14:06 - 2014-03-12 18:41 - 06714312 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll 2014-03-04 14:06 - 2014-03-12 18:41 - 03497816 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvc64.dll 2014-03-04 14:05 - 2014-03-12 18:41 - 03649185 _____ () C:\WINDOWS\system32\nvcoproc.bin 2014-03-04 14:05 - 2014-03-12 18:41 - 02558808 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvcr.dll 2014-03-04 14:05 - 2014-03-12 18:41 - 01075032 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshext.dll 2014-03-04 14:05 - 2014-03-12 18:41 - 00922968 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvvsvc.exe 2014-03-04 14:05 - 2014-03-12 18:41 - 00386336 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvmctray.dll 2014-03-04 14:05 - 2014-03-12 18:41 - 00067072 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshextr.dll 2014-03-04 14:05 - 2014-03-12 18:41 - 00064968 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvshext.dll 2014-03-01 07:05 - 2014-03-12 13:31 - 23133696 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll 2014-03-01 05:58 - 2014-03-12 13:31 - 02765824 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll 2014-03-01 05:30 - 2014-03-12 13:31 - 17074688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll 2014-03-01 05:17 - 2014-03-12 13:31 - 00218624 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe 2014-03-01 04:54 - 2014-03-12 13:31 - 05768704 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll 2014-03-01 04:47 - 2014-03-12 13:31 - 02168320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll 2014-03-01 04:42 - 2014-03-12 13:31 - 00627200 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll 2014-03-01 04:18 - 2014-03-12 13:31 - 13051904 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll 2014-03-01 04:14 - 2014-03-12 13:31 - 04244480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll 2014-03-01 04:10 - 2014-03-12 13:31 - 02334208 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll 2014-03-01 04:03 - 2014-03-12 13:31 - 00524288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll 2014-03-01 03:57 - 2014-03-12 13:31 - 11266048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll 2014-03-01 03:38 - 2014-03-12 13:31 - 01393664 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll 2014-03-01 03:32 - 2014-03-12 13:31 - 01820160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll 2014-03-01 03:27 - 2014-03-12 13:31 - 01156096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll 2014-03-01 03:25 - 2014-03-12 13:31 - 00817664 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll 2014-03-01 03:25 - 2014-03-12 13:31 - 00703488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll 2014-02-28 15:11 - 2014-02-28 15:11 - 00001266 _____ () C:\Users\Thomas\Desktop\Amazon Cloud Player.lnk 2014-02-28 15:11 - 2014-02-28 15:11 - 00000000 ____D () C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Amazon Cloud Player 2014-02-28 15:10 - 2014-02-28 15:10 - 36160080 _____ (Amazon) C:\Users\Thomas\Downloads\AmazonCloudPlayerInstaller_422.exe 2014-02-27 16:30 - 2014-02-27 16:03 - 00000000 ____D () C:\Users\Thomas\AppData\Local\clear.fi 2014-02-27 16:03 - 2014-02-27 16:03 - 00000000 ____D () C:\Users\Thomas\Documents\clear.fi 2014-02-27 16:03 - 2014-02-27 16:03 - 00000000 ____D () C:\Users\Public\OEM 2014-02-25 17:57 - 2013-06-27 20:29 - 00000000 ____D () C:\ProgramData\Norton 2014-02-24 17:25 - 2014-02-24 17:23 - 00000000 ____D () C:\ProgramData\Adobe 2014-02-24 17:24 - 2014-02-24 17:24 - 00002048 _____ () C:\Users\Public\Desktop\Adobe Reader XI.lnk 2014-02-24 17:24 - 2014-02-15 17:57 - 00000000 ____D () C:\Users\Thomas\AppData\Roaming\Adobe 2014-02-24 17:23 - 2014-02-24 17:23 - 00000000 ____D () C:\Program Files (x86)\Adobe 2014-02-20 08:08 - 2013-08-22 14:25 - 00262144 ___SH () C:\WINDOWS\system32\config\ELAM 2014-02-19 19:44 - 2014-02-19 19:44 - 00000000 ____D () C:\Program Files\McAfee Security Scan 2014-02-19 19:44 - 2014-02-15 18:20 - 00001956 _____ () C:\Users\Public\Desktop\McAfee Security Scan Plus.lnk 2014-02-19 19:44 - 2013-05-13 03:35 - 00000000 ____D () C:\ProgramData\McAfee 2014-02-19 16:14 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\rescache 2014-02-19 06:28 - 2014-02-19 06:28 - 00000000 ___RD () C:\WINDOWS\BrowserChoice 2014-02-19 06:26 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\restore 2014-02-17 17:53 - 2014-02-15 21:30 - 00000000 ___DC () C:\WINDOWS\Panther 2014-02-16 21:08 - 2014-02-16 21:08 - 00000425 _____ () C:\WINDOWS\BRWMARK.INI 2014-02-16 21:08 - 2014-02-16 21:08 - 00000027 _____ () C:\WINDOWS\BRPP2KA.INI 2014-02-16 17:31 - 2014-02-16 17:31 - 00000892 _____ () C:\Users\Thomas\Desktop\MatheTiger 1 & 2 Demoversion.lnk 2014-02-16 17:31 - 2014-02-16 17:31 - 00000000 ____D () C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MatheTiger 1 & 2 Demoversion 2014-02-16 17:30 - 2014-02-16 17:29 - 00000000 ____D () C:\Mildenberger 2014-02-16 16:41 - 2014-02-15 18:37 - 00000000 ____D () C:\Users\Thomas\Documents\Windows 8_1-Upgrade-Assistent-Dateien 2014-02-15 21:52 - 2014-02-15 21:52 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_User_LocationProvider_01_11_00.Wdf 2014-02-15 21:51 - 2014-02-15 21:51 - 00000000 ____D () C:\Users\Thomas\AppData\Local\BMExplorer 2014-02-15 21:51 - 2014-02-15 21:37 - 00000000 ____D () C:\Users\Thomas 2014-02-15 21:50 - 2014-02-15 21:50 - 00000000 ____D () C:\Users\Thomas\Documents\Bluetooth Folder 2014-02-15 21:50 - 2013-06-27 20:19 - 00000000 ____D () C:\ProgramData\Atheros 2014-02-15 21:49 - 2014-02-15 21:49 - 00000020 ___SH () C:\Users\Thomas\ntuser.ini 2014-02-15 21:49 - 2014-02-15 17:57 - 00000000 ___RD () C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools 2014-02-15 21:47 - 2014-02-15 21:47 - 00000000 _SHDL () C:\Users\Default\Vorlagen 2014-02-15 21:47 - 2014-02-15 21:47 - 00000000 _SHDL () C:\Users\Default\Startmenü 2014-02-15 21:47 - 2014-02-15 21:47 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung 2014-02-15 21:47 - 2014-02-15 21:47 - 00000000 _SHDL () C:\Users\Default\Lokale Einstellungen 2014-02-15 21:47 - 2014-02-15 21:47 - 00000000 _SHDL () C:\Users\Default\Eigene Dateien 2014-02-15 21:47 - 2014-02-15 21:47 - 00000000 _SHDL () C:\Users\Default\Druckumgebung 2014-02-15 21:47 - 2014-02-15 21:47 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik 2014-02-15 21:47 - 2014-02-15 21:47 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder 2014-02-15 21:47 - 2014-02-15 21:47 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-02-15 21:47 - 2014-02-15 21:47 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf 2014-02-15 21:47 - 2014-02-15 21:47 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Anwendungsdaten 2014-02-15 21:47 - 2014-02-15 21:47 - 00000000 _SHDL () C:\Users\Default\Anwendungsdaten 2014-02-15 21:47 - 2014-02-15 21:47 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik 2014-02-15 21:47 - 2014-02-15 21:47 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder 2014-02-15 21:47 - 2014-02-15 21:47 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-02-15 21:47 - 2014-02-15 21:47 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf 2014-02-15 21:47 - 2014-02-15 21:47 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Anwendungsdaten 2014-02-15 21:47 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\Registration 2014-02-15 21:47 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files\Windows NT 2014-02-15 21:47 - 2013-08-22 14:36 - 00000000 __RHD () C:\Users\Default 2014-02-15 21:46 - 2014-02-15 21:46 - 00022960 _____ () C:\WINDOWS\system32\emptyregdb.dat 2014-02-15 21:46 - 2014-02-15 21:37 - 00028578 _____ () C:\WINDOWS\diagwrn.xml 2014-02-15 21:46 - 2014-02-15 21:37 - 00028578 _____ () C:\WINDOWS\diagerr.xml 2014-02-15 21:46 - 2014-02-15 20:51 - 00006602 _____ () C:\WINDOWS\comsetup.log 2014-02-15 21:44 - 2013-08-22 16:36 - 00000000 __RSD () C:\WINDOWS\Media 2014-02-15 21:44 - 2013-08-22 16:36 - 00000000 __RHD () C:\Users\Public\Libraries 2014-02-15 21:41 - 2013-08-22 14:36 - 00000000 ____D () C:\WINDOWS\system32\Sysprep 2014-02-15 21:40 - 2013-08-22 16:37 - 00004893 _____ () C:\WINDOWS\DtcInstall.log 2014-02-15 21:40 - 2012-07-26 06:37 - 00000000 ____D () C:\Users\Default.migrated 2014-02-15 21:39 - 2014-02-15 21:32 - 00000000 ____D () C:\Program Files (x86)\Intel 2014-02-15 21:39 - 2013-11-14 08:11 - 00000000 ____D () C:\WINDOWS\SysWOW64\WCN 2014-02-15 21:39 - 2013-11-14 08:11 - 00000000 ____D () C:\WINDOWS\SysWOW64\sysprep 2014-02-15 21:39 - 2013-11-14 08:11 - 00000000 ____D () C:\WINDOWS\system32\WCN 2014-02-15 21:39 - 2013-08-22 16:43 - 00000000 ____D () C:\WINDOWS\DigitalLocker 2014-02-15 21:39 - 2013-08-22 16:36 - 00000000 __SHD () C:\Program Files\Windows Sidebar 2014-02-15 21:39 - 2013-08-22 16:36 - 00000000 __SHD () C:\Program Files (x86)\Windows Sidebar 2014-02-15 21:39 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\migwiz 2014-02-15 21:39 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\IME 2014-02-15 21:39 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\WinBioPlugIns 2014-02-15 21:39 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\spool 2014-02-15 21:39 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\IME 2014-02-15 21:39 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\IME 2014-02-15 21:39 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files\Common Files\microsoft shared 2014-02-15 21:39 - 2013-08-22 14:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\SMI 2014-02-15 21:39 - 2013-08-22 14:36 - 00000000 ____D () C:\WINDOWS\system32\oobe 2014-02-15 21:39 - 2013-06-27 20:05 - 00000000 ____D () C:\WINDOWS\SysWOW64\sda 2014-02-15 21:39 - 2013-05-13 03:23 - 00000000 ____D () C:\ProgramData\PRICache 2014-02-15 21:38 - 2014-02-15 21:38 - 00000000 ____D () C:\WINDOWS\system32\config\bbimigrate 2014-02-15 21:38 - 2014-02-15 21:37 - 00000000 ___RD () C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools 2014-02-15 21:38 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\Recovery 2014-02-15 21:37 - 2014-02-15 21:37 - 00000000 _SHDL () C:\Users\Thomas\Vorlagen 2014-02-15 21:37 - 2014-02-15 21:37 - 00000000 _SHDL () C:\Users\Thomas\Startmenü 2014-02-15 21:37 - 2014-02-15 21:37 - 00000000 _SHDL () C:\Users\Thomas\Netzwerkumgebung 2014-02-15 21:37 - 2014-02-15 21:37 - 00000000 _SHDL () C:\Users\Thomas\Lokale Einstellungen 2014-02-15 21:37 - 2014-02-15 21:37 - 00000000 _SHDL () C:\Users\Thomas\Eigene Dateien 2014-02-15 21:37 - 2014-02-15 21:37 - 00000000 _SHDL () C:\Users\Thomas\Druckumgebung 2014-02-15 21:37 - 2014-02-15 21:37 - 00000000 _SHDL () C:\Users\Thomas\Documents\Eigene Musik 2014-02-15 21:37 - 2014-02-15 21:37 - 00000000 _SHDL () C:\Users\Thomas\Documents\Eigene Bilder 2014-02-15 21:37 - 2014-02-15 21:37 - 00000000 _SHDL () C:\Users\Thomas\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-02-15 21:37 - 2014-02-15 21:37 - 00000000 _SHDL () C:\Users\Thomas\AppData\Local\Verlauf 2014-02-15 21:37 - 2014-02-15 21:37 - 00000000 _SHDL () C:\Users\Thomas\AppData\Local\Anwendungsdaten 2014-02-15 21:37 - 2014-02-15 21:37 - 00000000 _SHDL () C:\Users\Thomas\Anwendungsdaten 2014-02-15 21:33 - 2014-02-15 21:33 - 00000000 ____D () C:\WINDOWS\SysWOW64\RTCOM 2014-02-15 21:33 - 2014-02-15 21:33 - 00000000 ____D () C:\Program Files\Realtek 2014-02-15 21:33 - 2013-08-22 15:46 - 00000084 _____ () C:\WINDOWS\setuperr.log 2014-02-15 21:32 - 2014-02-15 21:32 - 00000000 ____D () C:\Program Files\Elantech 2014-02-15 21:30 - 2014-02-15 17:40 - 00000000 __SHD () C:\Recovery 2014-02-15 21:30 - 2013-08-22 16:36 - 00262144 _____ () C:\WINDOWS\system32\config\BCD-Template 2014-02-15 21:29 - 2014-02-15 21:29 - 03395920 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSService.dll 2014-02-15 21:29 - 2014-02-15 21:29 - 01113040 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll 2014-02-15 21:29 - 2014-02-15 21:29 - 00848384 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSShared.dll 2014-02-15 21:29 - 2014-02-15 21:29 - 00835584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll 2014-02-15 21:29 - 2014-02-15 21:29 - 00787968 _____ (Microsoft Corporation) C:\WINDOWS\system32\uDWM.dll 2014-02-15 21:29 - 2014-02-15 21:29 - 00695808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSShared.dll 2014-02-15 21:29 - 2014-02-15 21:29 - 00570880 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdrm.dll 2014-02-15 21:29 - 2014-02-15 21:29 - 00548864 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll 2014-02-15 21:29 - 2014-02-15 21:29 - 00454656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll 2014-02-15 21:29 - 2014-02-15 21:29 - 00444928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msdrm.dll 2014-02-15 21:29 - 2014-02-15 21:29 - 00393216 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMPhoto.dll 2014-02-15 21:29 - 2014-02-15 21:29 - 00348160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMPhoto.dll 2014-02-15 21:29 - 2014-02-15 21:29 - 00249856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll 2014-02-15 21:29 - 2014-02-15 21:29 - 00206336 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSClient.dll 2014-02-15 21:29 - 2014-02-15 21:29 - 00189952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll 2014-02-15 21:29 - 2014-02-15 21:29 - 00174592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSClient.dll 2014-02-15 21:29 - 2014-02-15 21:29 - 00138240 _____ () C:\WINDOWS\system32\OEMLicense.dll 2014-02-15 21:29 - 2014-02-15 21:29 - 00103936 _____ () C:\WINDOWS\SysWOW64\OEMLicense.dll 2014-02-15 21:29 - 2014-02-15 21:29 - 00084480 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSCollect.exe 2014-02-15 21:29 - 2014-02-15 21:29 - 00075360 _____ (Microsoft Corporation) C:\WINDOWS\system32\imagehlp.dll 2014-02-15 21:29 - 2014-02-15 21:29 - 00070680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\imagehlp.dll 2014-02-15 21:29 - 2014-02-15 21:29 - 00018944 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcaui.exe 2014-02-15 21:29 - 2014-02-15 21:29 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pcaui.exe 2014-02-15 21:29 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\WinStore 2014-02-15 21:28 - 2014-02-15 21:28 - 02724864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb 2014-02-15 21:28 - 2014-02-15 21:28 - 02724864 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb 2014-02-15 21:28 - 2014-02-15 21:28 - 02041856 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl 2014-02-15 21:28 - 2014-02-15 21:28 - 01964032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl 2014-02-15 21:28 - 2014-02-15 21:28 - 00708608 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll 2014-02-15 21:28 - 2014-02-15 21:28 - 00615936 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDMAgent.exe 2014-02-15 21:28 - 2014-02-15 21:28 - 00553472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll 2014-02-15 21:28 - 2014-02-15 21:28 - 00287744 _____ (Microsoft Corporation) C:\WINDOWS\system32\mdmregistration.dll 2014-02-15 21:28 - 2014-02-15 21:28 - 00240128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mdmregistration.dll 2014-02-15 21:28 - 2014-02-15 21:28 - 00197120 _____ (Microsoft Corporation) C:\WINDOWS\system32\scrrun.dll 2014-02-15 21:28 - 2014-02-15 21:28 - 00195584 _____ (Microsoft Corporation) C:\WINDOWS\system32\msrating.dll 2014-02-15 21:28 - 2014-02-15 21:28 - 00164864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrating.dll 2014-02-15 21:28 - 2014-02-15 21:28 - 00156672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\scrrun.dll 2014-02-15 21:28 - 2014-02-15 21:28 - 00139264 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieUnatt.exe 2014-02-15 21:28 - 2014-02-15 21:28 - 00112128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieUnatt.exe 2014-02-15 21:28 - 2014-02-15 21:28 - 00111616 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwcollector.exe 2014-02-15 21:28 - 2014-02-15 21:28 - 00066048 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesetup.dll 2014-02-15 21:28 - 2014-02-15 21:28 - 00061952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iesetup.dll 2014-02-15 21:28 - 2014-02-15 21:28 - 00053760 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll 2014-02-15 21:28 - 2014-02-15 21:28 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieetwproxystub.dll 2014-02-15 21:28 - 2014-02-15 21:28 - 00048640 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwproxystub.dll 2014-02-15 21:28 - 2014-02-15 21:28 - 00043008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jsproxy.dll 2014-02-15 21:28 - 2014-02-15 21:28 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\system32\iernonce.dll 2014-02-15 21:28 - 2014-02-15 21:28 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iernonce.dll 2014-02-15 21:28 - 2014-02-15 21:28 - 00004096 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwcollectorres.dll 2014-02-15 21:27 - 2014-02-15 21:27 - 13209088 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll 2014-02-15 21:27 - 2014-02-15 21:27 - 11702272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll 2014-02-15 21:27 - 2014-02-15 21:27 - 07416832 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Search.dll 2014-02-15 21:27 - 2014-02-15 21:27 - 04961792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Search.dll 2014-02-15 21:27 - 2014-02-15 21:27 - 01462216 _____ (Microsoft Corporation) C:\WINDOWS\system32\propsys.dll 2014-02-15 21:27 - 2014-02-15 21:27 - 01202888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\propsys.dll 2014-02-15 21:27 - 2014-02-15 21:27 - 01105408 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFolder.dll 2014-02-15 21:27 - 2014-02-15 21:27 - 00830976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchFolder.dll 2014-02-15 21:27 - 2014-02-15 21:27 - 00009701 _____ () C:\WINDOWS\SysWOW64\connectedsearch-results.searchconnector-ms 2014-02-15 21:27 - 2014-02-15 21:27 - 00009701 _____ () C:\WINDOWS\system32\connectedsearch-results.searchconnector-ms 2014-02-15 21:27 - 2013-08-22 16:36 - 00000000 ___RD () C:\WINDOWS\ToastData 2014-02-15 21:27 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\MediaViewer 2014-02-15 21:27 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\FileManager 2014-02-15 21:27 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\Camera 2014-02-15 21:26 - 2014-02-15 21:26 - 21196664 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 18642504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 18577920 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 13925888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 04604416 _____ (Microsoft Corporation) C:\WINDOWS\system32\d2d1.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 04217344 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncEngine.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 03936256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d2d1.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 03210528 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2vdec.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 02804528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msmpeg2vdec.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 02804224 _____ (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 02617344 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 02397184 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d10warp.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 02295808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 02071552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d10warp.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 01503232 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvc.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 01415680 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 01399176 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmde.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 01374384 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpmde.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 01227264 _____ (Microsoft Corporation) C:\WINDOWS\system32\mispace.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 01204968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winmde.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 01119064 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys 2014-02-15 21:26 - 2014-02-15 21:26 - 01020928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\actxprxy.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 00980480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mispace.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 00919040 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmCoreR.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 00870912 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDrive.exe 2014-02-15 21:26 - 2014-02-15 21:26 - 00834048 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 00809872 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 00745336 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleaut32.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 00744448 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncCore.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 00720384 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDriveTelemetry.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 00663680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 00637952 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncHost.exe 2014-02-15 21:26 - 2014-02-15 21:26 - 00628736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MrmCoreR.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 00589824 _____ (Microsoft Corporation) C:\WINDOWS\system32\rastls.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 00584192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncCore.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 00552624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleaut32.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 00513536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rastls.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 00479744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncHost.exe 2014-02-15 21:26 - 2014-02-15 21:26 - 00470016 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfds.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 00461824 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsGdiConverter.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 00433664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfds.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 00403456 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys 2014-02-15 21:26 - 2014-02-15 21:26 - 00336384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XpsGdiConverter.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 00306688 _____ (Microsoft Corporation) C:\WINDOWS\system32\msieftp.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 00282112 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemEventsBrokerServer.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 00273920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msieftp.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 00273408 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Graphics.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 00263168 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 00218112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Graphics.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 00207872 _____ (Microsoft Corporation) C:\WINDOWS\system32\deviceregistration.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 00202240 _____ (Microsoft Corporation) C:\WINDOWS\system32\ubpm.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 00142848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ipnat.sys 2014-02-15 21:26 - 2014-02-15 21:26 - 00142680 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBSTOR.SYS 2014-02-15 21:26 - 2014-02-15 21:26 - 00136704 _____ (Microsoft Corporation) C:\WINDOWS\system32\psmsrv.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 00121344 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDriveShell.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 00115712 _____ (Microsoft Corporation) C:\WINDOWS\system32\winbici.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 00105984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SkyDriveShell.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 00032088 _____ (Microsoft Corporation) C:\WINDOWS\system32\ploptin.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 00024064 _____ (Microsoft Corporation) C:\WINDOWS\system32\bi.dll 2014-02-15 21:26 - 2014-02-15 21:26 - 00019456 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BtaMPM.sys 2014-02-15 21:26 - 2013-08-22 14:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\Dism 2014-02-15 21:26 - 2013-08-22 14:36 - 00000000 ____D () C:\WINDOWS\system32\Dism 2014-02-15 21:24 - 2014-02-15 21:24 - 07399256 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe 2014-02-15 21:24 - 2014-02-15 21:24 - 02896896 _____ (Microsoft Corporation) C:\WINDOWS\system32\msftedit.dll 2014-02-15 21:24 - 2014-02-15 21:24 - 02570240 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers.dll 2014-02-15 21:24 - 2014-02-15 21:24 - 02266624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msftedit.dll 2014-02-15 21:24 - 2014-02-15 21:24 - 02152448 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml3.dll 2014-02-15 21:24 - 2014-02-15 21:24 - 02143744 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll 2014-02-15 21:24 - 2014-02-15 21:24 - 02140888 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll 2014-02-15 21:24 - 2014-02-15 21:24 - 01843712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Display.dll 2014-02-15 21:24 - 2014-02-15 21:24 - 01816576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Display.dll 2014-02-15 21:24 - 2014-02-15 21:24 - 01765384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11.dll 2014-02-15 21:24 - 2014-02-15 21:24 - 01765376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll 2014-02-15 21:24 - 2014-02-15 21:24 - 01756160 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMPDMC.exe 2014-02-15 21:24 - 2014-02-15 21:24 - 01530200 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys 2014-02-15 21:24 - 2014-02-15 21:24 - 01476184 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi 2014-02-15 21:24 - 2014-02-15 21:24 - 01391104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMPDMC.exe 2014-02-15 21:24 - 2014-02-15 21:24 - 01345536 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe 2014-02-15 21:24 - 2014-02-15 21:24 - 01317376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml3.dll 2014-02-15 21:24 - 2014-02-15 21:24 - 01302528 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll 2014-02-15 21:24 - 2014-02-15 21:24 - 00922624 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.dll 2014-02-15 21:24 - 2014-02-15 21:24 - 00747008 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidcli.dll 2014-02-15 21:24 - 2014-02-15 21:24 - 00566784 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpncore.dll 2014-02-15 21:24 - 2014-02-15 21:24 - 00544768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlidcli.dll 2014-02-15 21:24 - 2014-02-15 21:24 - 00516496 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll 2014-02-15 21:24 - 2014-02-15 21:24 - 00406400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxgi.dll 2014-02-15 21:24 - 2014-02-15 21:24 - 00382808 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys 2014-02-15 21:24 - 2014-02-15 21:24 - 00372568 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\spaceport.sys 2014-02-15 21:24 - 2014-02-15 21:24 - 00358896 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcomp.dll 2014-02-15 21:24 - 2014-02-15 21:24 - 00325464 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBXHCI.SYS 2014-02-15 21:24 - 2014-02-15 21:24 - 00254464 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll 2014-02-15 21:24 - 2014-02-15 21:24 - 00225792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dcomp.dll 2014-02-15 21:24 - 2014-02-15 21:24 - 00198656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppXDeploymentClient.dll 2014-02-15 21:24 - 2014-02-15 21:24 - 00146776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\SerCx2.sys 2014-02-15 21:24 - 2014-02-15 21:24 - 00086872 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pdc.sys 2014-02-15 21:24 - 2014-02-15 21:24 - 00039768 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\intelpep.sys 2014-02-15 21:24 - 2014-02-15 21:24 - 00030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\CredentialMigrationHandler.dll 2014-02-15 21:24 - 2014-02-15 21:24 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CredentialMigrationHandler.dll 2014-02-15 21:23 - 2014-02-15 21:23 - 00262144 _____ () C:\WINDOWS\system32\config\userdiff 2014-02-15 21:21 - 2014-02-15 21:21 - 00000000 ____D () C:\WINDOWS\SysWOW64\XPSViewer 2014-02-15 21:21 - 2014-02-15 21:21 - 00000000 ____D () C:\Program Files\Reference Assemblies 2014-02-15 21:21 - 2014-02-15 21:21 - 00000000 ____D () C:\Program Files\MSBuild 2014-02-15 21:21 - 2014-02-15 21:21 - 00000000 ____D () C:\Program Files (x86)\Reference Assemblies 2014-02-15 21:21 - 2014-02-15 21:21 - 00000000 ____D () C:\Program Files (x86)\MSBuild 2014-02-15 21:21 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\MUI 2014-02-15 21:21 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\MUI 2014-02-15 21:15 - 2013-06-27 19:48 - 01285343 _____ () C:\WINDOWS\WindowsUpdate (1).log 2014-02-15 18:45 - 2014-02-15 18:44 - 00000000 ____D () C:\WINDOWS\system32\MRT 2014-02-15 18:37 - 2014-02-15 18:37 - 00025722 _____ () C:\Users\Thomas\Documents\Windows 8_1-Upgrade-Assistent.html 2014-02-15 18:32 - 2014-02-15 18:32 - 04954736 _____ (Microsoft Corporation) C:\Users\Thomas\Downloads\WindowsUpgradeAssistant.exe 2014-02-15 18:22 - 2014-02-15 18:22 - 00000000 ____D () C:\Users\Thomas\AppData\Local\Macromedia 2014-02-15 18:20 - 2014-02-15 18:20 - 00000000 ____D () C:\ProgramData\McAfee Security Scan 2014-02-15 18:16 - 2014-02-15 18:16 - 00000000 ____D () C:\Users\Thomas\AppData\Roaming\Mozilla 2014-02-15 18:16 - 2014-02-15 18:16 - 00000000 ____D () C:\Users\Thomas\AppData\Local\Mozilla 2014-02-15 18:15 - 2014-02-15 18:15 - 24490112 _____ (Mozilla) C:\Users\Thomas\Downloads\Firefox_Setup_27.0.1.exe 2014-02-15 18:15 - 2014-02-15 18:15 - 00000000 ____D () C:\ProgramData\Mozilla 2014-02-15 18:15 - 2014-02-15 18:15 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service 2014-02-15 18:15 - 2014-02-15 18:15 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox 2014-02-15 17:59 - 2014-02-15 17:59 - 00000000 ____D () C:\Users\Thomas\AppData\Roaming\Macromedia 2014-02-15 17:58 - 2014-02-15 17:58 - 00000000 ____D () C:\Users\Thomas\AppData\Roaming\Atheros 2014-02-15 17:58 - 2013-05-13 04:16 - 00000000 ___HD () C:\OEM 2014-02-15 17:57 - 2014-02-15 17:57 - 00000000 ____D () C:\WINDOWS\System32\Tasks\WPD 2014-02-15 17:57 - 2014-02-15 17:57 - 00000000 ____D () C:\Users\Thomas\AppData\Local\VirtualStore 2014-02-15 17:57 - 2014-02-15 17:57 - 00000000 ____D () C:\ProgramData\OEM_YAHOO 2014-02-15 17:41 - 2014-02-15 17:40 - 00000000 _____ () C:\Recovery.txt 2014-02-15 16:53 - 2014-02-15 16:53 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf 2014-02-15 16:41 - 2014-02-15 16:41 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Musik 2014-02-15 16:41 - 2014-02-15 16:41 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Bilder 2014-02-15 16:41 - 2014-02-15 16:41 - 00000000 _SHDL () C:\Users\Default.migrated\Vorlagen 2014-02-15 16:41 - 2014-02-15 16:41 - 00000000 _SHDL () C:\Users\Default.migrated\Startmenü 2014-02-15 16:41 - 2014-02-15 16:41 - 00000000 _SHDL () C:\Users\Default.migrated\Netzwerkumgebung 2014-02-15 16:41 - 2014-02-15 16:41 - 00000000 _SHDL () C:\Users\Default.migrated\Lokale Einstellungen 2014-02-15 16:41 - 2014-02-15 16:41 - 00000000 _SHDL () C:\Users\Default.migrated\Eigene Dateien 2014-02-15 16:41 - 2014-02-15 16:41 - 00000000 _SHDL () C:\Users\Default.migrated\Druckumgebung 2014-02-15 16:41 - 2014-02-15 16:41 - 00000000 _SHDL () C:\Users\Default.migrated\Documents\Eigene Musik 2014-02-15 16:41 - 2014-02-15 16:41 - 00000000 _SHDL () C:\Users\Default.migrated\Documents\Eigene Bilder 2014-02-15 16:41 - 2014-02-15 16:41 - 00000000 _SHDL () C:\Users\Default.migrated\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-02-15 16:41 - 2014-02-15 16:41 - 00000000 _SHDL () C:\Users\Default.migrated\AppData\Local\Verlauf 2014-02-15 16:41 - 2014-02-15 16:41 - 00000000 _SHDL () C:\Users\Default.migrated\AppData\Local\Anwendungsdaten 2014-02-15 16:41 - 2014-02-15 16:41 - 00000000 _SHDL () C:\Users\Default.migrated\Anwendungsdaten 2014-02-15 16:41 - 2014-02-15 16:41 - 00000000 _SHDL () C:\Programme 2014-02-15 16:41 - 2014-02-15 16:41 - 00000000 _SHDL () C:\ProgramData\Vorlagen 2014-02-15 16:41 - 2014-02-15 16:41 - 00000000 _SHDL () C:\ProgramData\Startmenü 2014-02-15 16:41 - 2014-02-15 16:41 - 00000000 _SHDL () C:\ProgramData\Dokumente 2014-02-15 16:41 - 2014-02-15 16:41 - 00000000 _SHDL () C:\ProgramData\Anwendungsdaten 2014-02-15 16:41 - 2014-02-15 16:41 - 00000000 _SHDL () C:\Program Files\Gemeinsame Dateien 2014-02-15 16:41 - 2014-02-15 16:41 - 00000000 _SHDL () C:\Dokumente und Einstellungen 2014-02-11 04:04 - 2014-03-12 13:30 - 04189184 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys 2014-02-11 03:43 - 2014-03-12 13:30 - 00488448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\qedit.dll 2014-02-11 03:04 - 2014-03-12 13:30 - 00586240 _____ (Microsoft Corporation) C:\WINDOWS\system32\qedit.dll Some content of TEMP: ==================== C:\Users\Thomas\AppData\Local\Temp\BackupSetup.exe C:\Users\Thomas\AppData\Local\Temp\SHSetup.exe C:\Users\Thomas\AppData\Local\Temp\System.Data.SQLite.dll C:\Users\Thomas\AppData\Local\Temp\System.Data.SQLite41120.dll ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\rpcss.dll => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys [2014-03-12 13:31] - [2014-01-31 17:15] - 0311640 ____A (Microsoft Corporation) C85C075DE5B6D0FE116043054DE8EE02 LastRegBack: 2014-03-10 09:22 ==================== End Of Log ============================ |
12.03.2014, 20:47 | #2 |
| Optimizer Pro :-( FRST Additions Logfile:
__________________Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 12-03-2014 Ran by Thomas at 2014-03-12 20:35:47 Running from C:\Users\Thomas\Downloads Boot Mode: Normal ========================================================== ==================== Security Center ======================== AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} ==================== Installed Programs ====================== clear.fi SDK - Video 2 (x32 Version: 2.1.2606 - CyberLink Corp.) Hidden clear.fi SDK- Movie 2 (x32 Version: 2.1.2606 - CyberLink Corp.) Hidden Acer Launch Manager (HKLM\...\{C18D55BD-1EC6-466D-B763-8EEDDDA9100E}) (Version: 8.00.3003 - Acer Incorporated) Acer Power Management (HKLM\...\{91F52DE4-B789-42B0-9311-A349F10E5479}) (Version: 7.00.3012 - Acer Incorporated) Acer Recovery Management (HKLM\...\{07F2005A-8CAC-4A4B-83A2-DA98A722CA61}) (Version: 6.00.3016 - Acer Incorporated) Acer USB Charge Manager (HKLM\...\{07E867C5-0C48-40FF-A013-DDAF4565AD47}) (Version: 2.00.3004 - Acer Incorporated) AcerCloud Docs (HKLM-x32\...\{CA4FE8B0-298C-4E5D-A486-F33B126D6A0A}) (Version: 1.01.2008 - Acer Incorporated) AcerCloud Portal (HKLM-x32\...\{A5AD0B17-F34D-49BE-A157-C8B3D52ACD13}) (Version: 2.02.2022 - Acer Incorporated) Adobe Flash Player 12 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 12.0.0.77 - Adobe Systems Incorporated) Adobe Reader XI (11.0.06) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.06 - Adobe Systems Incorporated) Amazon Cloud Player (HKCU\...\Amazon Amazon Cloud Player) (Version: 2.3.0.422 - Amazon Services LLC) Bejeweled 3 (x32 Version: 2.2.0.98 - WildTangent) Hidden Bing Bar (HKLM-x32\...\{FF6DD716-7B10-4269-9F19-FFB07AC4CD95}) (Version: 7.3.124.0 - Microsoft Corporation) BrowserSafeguard (HKLM-x32\...\Browsersafeguard) (Version: - Browsersafeguard) <==== ATTENTION clear.fi Media (HKLM-x32\...\{E9AF1707-3F3A-49E2-8345-4F2D629D0876}) (Version: 2.02.2012 - Acer Incorporated) clear.fi Photo (HKLM-x32\...\{B5AD89F2-03D3-4206-8487-018298007DD0}) (Version: 2.02.2016 - Acer Incorporated) CyberLink MediaEspresso 6.5 (HKLM-x32\...\InstallShield_{E3739848-5329-48E3-8D28-5BBD6E8BE384}) (Version: 6.5.3729_45993 - CyberLink Corp.) CyberLink MediaEspresso 6.5 (x32 Version: 6.5.3729_45993 - CyberLink Corp.) Hidden Delicious: Emily's Childhood Memories Premium Edition (x32 Version: 3.0.2.32 - WildTangent) Hidden Dolby Home Theater v4 (HKLM-x32\...\{B26438B4-BF51-49C3-9567-7F14A5E40CB9}) (Version: 7.2.8000.17 - Dolby Laboratories Inc) ETDWare PS/2-X64 11.6.22.201_WHQL (HKLM\...\Elantech) (Version: 11.6.22.201 - ELAN Microelectronic Corp.) Foxit Reader (HKLM-x32\...\Foxit Reader_is1) (Version: 6.0.10.1213 - Foxit Corporation) GeForce Experience NvStream Client Components (Version: 1.6.28 - NVIDIA Corporation) Hidden Governor of Poker 2 Premium Edition (x32 Version: 2.2.0.110 - WildTangent) Hidden HP Deskjet 3520 series - Grundlegende Software für das Gerät (HKLM\...\{15B2F0E3-3FAC-4495-B0FD-398EECFA4100}) (Version: 28.0.1315.0 - Hewlett-Packard Co.) HP Deskjet 3520 series Hilfe (HKLM-x32\...\{6B953497-169C-4929-9AA9-A9F510347468}) (Version: 27.0.0 - Hewlett Packard) HP Deskjet 3520 series Setup Guide (HKLM-x32\...\{AEEDCEB7-00B8-4BE1-B492-AB04803D5F1E}) (Version: 27.0.0 - Hewlett Packard) HP Photo Creations (HKLM-x32\...\HP Photo Creations) (Version: 1.0.0.7702 - HP) HP Update (HKLM-x32\...\{6F1C00D2-25C2-4CBA-8126-AE9A6E2E9CD5}) (Version: 5.003.003.001 - Hewlett-Packard) Identity Card (HKLM-x32\...\{3D9CB654-99AD-4301-89C6-0D12A790767C}) (Version: 2.00.3006 - Acer Incorporated) Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.1.0.1281 - Intel Corporation) Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.3379 - Intel Corporation) Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 12.0.0.1083 - Intel Corporation) Intel(R) Rapid Storage Technology (Version: 12.0.0.1083 - Intel Corporation) Hidden Intel(R) SDK for OpenCL - CPU Only Runtime Package (HKLM-x32\...\{FCB3772C-B7D0-4933-B1A9-3707EBACC573}) (Version: 2.0.0.37149 - Intel Corporation) Intel® Trusted Connect Service Client (Version: 1.24.738.1 - Intel Corporation) Hidden Jewel Match 3 (x32 Version: 2.2.0.98 - WildTangent) Hidden John Deere Drive Green (x32 Version: 2.2.0.95 - WildTangent) Hidden Live Updater (HKLM-x32\...\{EE26E302-876A-48D9-9058-3129E5B99999}) (Version: 2.00.3010 - Acer Incorporated) Magic Academy (x32 Version: 2.2.0.98 - WildTangent) Hidden McAfee Security Scan Plus (HKLM\...\McAfee Security Scan) (Version: 3.8.141.11 - McAfee, Inc.) Microsoft Office (HKLM-x32\...\{90150000-0138-0409-0000-0000000FF1CE}) (Version: 15.0.4454.1510 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual Studio 2005 Tools for Office Runtime (x32 Version: 8.0.60940.0 - Microsoft Corporation) Hidden Mozilla Firefox 27.0.1 (x86 de) (HKLM-x32\...\Mozilla Firefox 27.0.1 (x86 de)) (Version: 27.0.1 - Mozilla) Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 27.0.1 - Mozilla) Nero BackItUp (x32 Version: 12.5.5000 - Nero AG) Hidden Nero BackItUp 12 Essentials OEM.a01 (HKLM-x32\...\{4CA8F973-6377-4ABF-9ED5-CC2323B3C000}) (Version: 12.5.00500 - Nero AG) Nero BackItUp Help (CHM) (x32 Version: 12.0.10000 - Nero AG) Hidden Nero ControlCenter (x32 Version: 11.0.15600 - Nero AG) Hidden Nero ControlCenter Help (CHM) (x32 Version: 12.0.7000 - Nero AG) Hidden Nero Core Components (x32 Version: 11.0.20200 - Nero AG) Hidden Nero Launcher (x32 Version: 12.2.7000 - Nero AG) Hidden Nero RescueAgent (x32 Version: 12.0.3001 - Nero AG) Hidden Nero RescueAgent Help (CHM) (x32 Version: 12.0.7000 - Nero AG) Hidden Nero Update (x32 Version: 11.0.11800.31.0 - Nero AG) Hidden Norton Online Backup (HKLM-x32\...\{40A66DF6-22D3-44B5-A7D3-83B118A2C0DC}) (Version: 2.2.3.51r2 - Symantec Corporation) Norton Online Backup ARA (x32 Version: 4.1.0.14 - Symantec Corporation) Hidden NVIDIA GeForce Experience 1.8.2.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 1.8.2.1 - NVIDIA Corporation) NVIDIA Grafiktreiber 335.23 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 335.23 - NVIDIA Corporation) NVIDIA Install Application (Version: 2.1002.147.1067 - NVIDIA Corporation) Hidden NVIDIA LED Visualizer 1.0 (Version: 1.0 - NVIDIA Corporation) Hidden NVIDIA Network Service (Version: 1.0 - NVIDIA Corporation) Hidden NVIDIA Optimus Update 11.10.13 (Version: 11.10.13 - NVIDIA Corporation) Hidden NVIDIA PhysX (x32 Version: 9.13.1220 - NVIDIA Corporation) Hidden NVIDIA PhysX-Systemsoftware 9.13.1220 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.13.1220 - NVIDIA Corporation) NVIDIA ShadowPlay 11.10.13 (Version: 11.10.13 - NVIDIA Corporation) Hidden NVIDIA Systemsteuerung 335.23 (Version: 335.23 - NVIDIA Corporation) Hidden NVIDIA Update 11.10.13 (Version: 11.10.13 - NVIDIA Corporation) Hidden NVIDIA Update Core (Version: 11.10.13 - NVIDIA Corporation) Hidden NVIDIA Virtual Audio 1.2.20 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_VirtualAudio.Driver) (Version: 1.2.20 - NVIDIA Corporation) Office Addin (HKLM-x32\...\{6D2BBE1D-E600-4695-BA37-0B0E605542CC}) (Version: 2.02.2008 - Acer) Optimizer Pro v3.2 (HKLM-x32\...\Optimizer Pro_is1) (Version: - ) <==== ATTENTION Plants vs. Zombies - Game of the Year (x32 Version: 2.2.0.98 - WildTangent) Hidden Prerequisite installer (x32 Version: 12.0.0003 - Nero AG) Hidden Qualcomm Atheros Bluetooth Suite (64) (HKLM\...\{A84A4FB1-D703-48DB-89E0-68B6499D2801}) (Version: 8.0.0.222 - Qualcomm Atheros Communications) Qualcomm Atheros WLAN and Bluetooth Client Installation Program (HKLM-x32\...\{28006915-2739-4EBE-B5E8-49B25D32EB33}) (Version: 11.43 - Qualcomm Atheros) Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.14.327.2013 - Realtek) Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6870 - Realtek Semiconductor Corp.) Realtek PCIE Card Reader (HKLM-x32\...\{C9661090-C134-46E8-90B2-76D72355C2A6}) (Version: 6.2.9200.21222 - Realtek Semiconductor Corp.) Shared C Run-time for x64 (HKLM\...\{EF79C448-6946-4D71-8134-03407888C054}) (Version: 10.0.0 - McAfee) SHIELD Streaming (Version: 1.7.321 - NVIDIA Corporation) Hidden Spotify (HKLM-x32\...\Spotify) (Version: 0.8.4.99.ga249b5f1 - Spotify AB) Studie zur Verbesserung von HP Deskjet 3520 series Produkten (HKLM\...\{A5BB6A58-BC1A-48A7-BB19-1768A80CF9C9}) (Version: 28.0.1315.0 - Hewlett-Packard Co.) Tales of Lagoona (x32 Version: 2.2.0.110 - WildTangent) Hidden Update Installer for WildTangent Games App (x32 Version: - WildTangent) Hidden Visual Studio 2005 Tools for Office Second Edition Runtime (HKLM-x32\...\Microsoft Visual Studio 2005 Tools for Office Runtime) (Version: - Microsoft Corporation) Visual Studio Tools for the Office system 3.0 Runtime (HKLM-x32\...\Visual Studio Tools for the Office system 3.0 Runtime) (Version: - Microsoft Corporation) Visual Studio Tools for the Office system 3.0 Runtime (x32 Version: 9.0.30729 - Microsoft Corporation) Hidden Visual Studio Tools for the Office system 3.0 Runtime Service Pack 1 (KB949258) (HKLM-x32\...\{8FB53850-246A-3507-8ADE-0060093FFEA6}.KB949258) (Version: 1 - Microsoft Corporation) WildTangent Games (HKLM-x32\...\WildTangent wildgames Master Uninstall) (Version: 1.0.4.0 - WildTangent) WildTangent Games App (x32 Version: 4.0.10.5 - WildTangent) Hidden ==================== Restore Points ========================= 19-02-2014 05:26:47 Windows Update 28-02-2014 09:38:58 Geplanter Prüfpunkt 10-03-2014 08:44:33 Geplanter Prüfpunkt 12-03-2014 17:43:26 DirectX wurde installiert ==================== Hosts content: ========================== 2013-08-22 14:25 - 2013-08-22 14:25 - 00000824 ____A C:\WINDOWS\system32\Drivers\etc\hosts ==================== Scheduled Tasks (whitelisted) ============= Task: {05293577-D647-4185-B859-C94839A0B2E3} - System32\Tasks\Microsoft\Windows\SettingSync\NetworkStateChangeTask Task: {0B545118-B563-42FC-8D07-B78F602FCF34} - System32\Tasks\Microsoft\Windows\WS\WSRefreshBannedAppsListTask => Rundll32.exe WSClient.dll,RefreshBannedAppsList Task: {0E3C50E9-F57F-4A74-9B51-1F73B540EEE1} - System32\Tasks\HPCustParticipation HP Deskjet 3520 series => C:\Program Files\HP\HP Deskjet 3520 series\Bin\HPCustPartic.exe [2012-10-17] (Hewlett-Packard Co.) Task: {1343DF05-4305-4183-AA89-87334130DE20} - System32\Tasks\Power Management => C:\Program Files\Acer\Acer Power Management\ePowerTray.exe [2013-01-18] (Acer Incorporated) Task: {2085BF56-520D-4951-B7C0-DF34AF90CC6A} - System32\Tasks\Microsoft\Windows\Sysmain\WsSwapAssessmentTask => Rundll32.exe sysmain.dll,PfSvWsSwapAssessmentTask Task: {2C9C0C6C-2A74-46F2-858A-4389D253EAD0} - System32\Tasks\Microsoft\Windows\Sysmain\HybridDriveCachePrepopulate Task: {352E6CA0-7314-4DF4-89C4-682368D80D57} - System32\Tasks\Microsoft\Windows\Workplace Join\Automatic-Workplace-Join => C:\Windows\System32\AutoWorkplace.exe [2013-08-22] (Microsoft Corporation) Task: {3B6D8A73-F20B-4C93-B8FB-56A154F172D2} - System32\Tasks\Microsoft\Windows\Time Zone\SynchronizeTimeZone => C:\Windows\system32\tzsync.exe [2013-08-22] (Microsoft Corporation) Task: {49754026-21E1-41FC-94FD-727AFE414FE7} - System32\Tasks\Microsoft\Windows\Sysmain\HybridDriveCacheRebalance Task: {582339AA-55CB-446D-9C0A-E237D27C9460} - System32\Tasks\DeviceDetector => C:\Program Files (x86)\CyberLink\MediaEspresso\DeviceDetector\DeviceDetector.exe [2013-02-08] (CyberLink) Task: {6AA91E8C-DDBD-4979-8464-4062F7681A19} - System32\Tasks\Microsoft\Windows\Plug and Play\Plug and Play Cleanup Task: {6DFCB649-0769-4F83-BB10-F60F235F6D3D} - System32\Tasks\Microsoft\Windows\SkyDrive\Idle Sync Maintenance Task Task: {73B1B253-CE67-4501-AE1A-377DD1D68B65} - System32\Tasks\Microsoft\Windows\Application Experience\StartupAppTask => Rundll32.exe Startupscan.dll,SusRunTask Task: {77F1D869-6E65-4079-A2A0-E2023408EF97} - System32\Tasks\Microsoft\Windows\ApplicationData\CleanupTemporaryState => Rundll32.exe Windows.Storage.ApplicationData.dll,CleanupTemporaryState Task: {78EFC060-E0BD-4EAD-A7A1-C2638D6DB14D} - System32\Tasks\Adobe Flash Player Updater => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-03-12] (Adobe Systems Incorporated) Task: {872D0E53-FD2E-41E3-B431-698AF82882CE} - System32\Tasks\Microsoft\Windows\SkyDrive\Routine Maintenance Task Task: {8A147FC9-B2A6-482F-87EE-887E9FD0DD68} - System32\Tasks\ALUAgent => C:\Program Files (x86)\Acer\Live Updater\liveupdater_agent.exe [2013-01-22] () Task: {8CC813C9-712A-41EF-9512-B233444FC669} - System32\Tasks\Microsoft\Windows\AppxDeploymentClient\Pre-staged app cleanup => Rundll32.exe %windir%\system32\AppxDeploymentClient.dll,AppxPreStageCleanupRunTask Task: {8D2957A6-67D8-4A83-B7B8-73854BBA8216} - System32\Tasks\Launch Manager => C:\Program Files\Acer\Acer Launch Manager\LMLauncher.exe [2013-03-15] (Acer Incorporate) Task: {956507D4-D9D7-4975-90C9-6DBB6AF98E31} - System32\Tasks\BrowserSafeguard Update Task => C:\Program Files (x86)\Browsersafeguard\uninstall.BrowserSafeguard.exe [2014-03-12] () <==== ATTENTION Task: {9FF4C139-5234-410C-B7FA-23EE2FD2AB53} - System32\Tasks\Microsoft\Windows\Work Folders\Work Folders Maintenance Work Task: {A05877D2-FF03-4811-8546-ACE94E4E760B} - System32\Tasks\ALU => C:\Program Files (x86)\Acer\Live Updater\updater.exe [2013-03-13] () Task: {C6760A82-0257-4CA4-BD02-26C9C94700D8} - System32\Tasks\Dolby Selector => C:\Dolby PCEE4\pcee4.exe [2012-08-31] (Dolby Laboratories Inc.) Task: {CFD7C21A-808B-487B-A6EC-8A10E44E8360} - System32\Tasks\Microsoft\Windows\SettingSync\BackupTask Task: {D88FEC9E-A82A-46F9-87E2-B6B97B301C1A} - System32\Tasks\Microsoft\Windows\WS\License Validation => Rundll32.exe WSClient.dll,WSpTLR licensing Task: {DA46820F-FF8A-4B5E-A6B2-B12185DCFFFB} - System32\Tasks\Microsoft\Windows\Work Folders\Work Folders Logon Synchronization Task: {E6D378FA-E068-4BCB-80DE-56D43A249507} - System32\Tasks\Microsoft\Windows\RecoveryEnvironment\VerifyWinRE Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe ==================== Loaded Modules (whitelisted) ============= 2014-03-12 18:41 - 2014-03-04 14:05 - 00116056 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll 2013-02-28 17:05 - 2013-02-28 17:05 - 00011264 _____ () C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\Modules\ActivateDesktopDebugger\ActivateDesktopDebugger.dll 2013-02-28 17:02 - 2013-02-28 17:02 - 00086016 _____ () C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\Modules\Map\MAP.dll 2013-02-28 17:06 - 2013-02-28 17:06 - 00012928 _____ () C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\ActivateDesktop.exe 2013-12-21 00:02 - 2013-12-21 00:02 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll 2014-02-28 15:11 - 2014-01-14 20:46 - 03140608 _____ () C:\Users\Thomas\AppData\Local\Amazon Cloud Player\Amazon Music Helper.exe 2014-03-12 20:11 - 2014-03-12 20:11 - 02681648 _____ () C:\Program Files (x86)\Optimizer Pro\OptProCrash_x64.dll 2014-03-12 20:15 - 2014-03-12 20:11 - 00085094 _____ () C:\Users\Thomas\AppData\Local\Temp\~nsu.tmp\Au_.exe 2013-06-27 19:53 - 2013-02-18 06:38 - 01198912 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll 2014-02-28 15:11 - 2014-01-14 20:46 - 34612224 _____ () C:\Users\Thomas\AppData\Local\Amazon Cloud Player\libcef.dll 2014-02-28 15:11 - 2014-01-14 20:46 - 00814080 _____ () C:\Users\Thomas\AppData\Local\Amazon Cloud Player\tag.dll 2014-03-12 20:11 - 2014-03-12 20:11 - 00186496 _____ () C:\Program Files (x86)\Optimizer Pro\OptProCrashSvc.dll 2014-03-12 20:11 - 2014-03-12 20:11 - 02961368 _____ () C:\Program Files (x86)\Optimizer Pro\OptProCrash.dll 2014-03-12 20:17 - 2014-03-12 20:17 - 00011264 _____ () C:\Users\Thomas\AppData\Local\Temp\nscAE03.tmp\System.dll 2014-02-15 18:15 - 2014-02-13 01:36 - 03578992 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll ==================== Alternate Data Streams (whitelisted) ========= AlternateDataStreams: C:\Users\Thomas\SkyDrive:ms-properties ==================== Safe Mode (whitelisted) =================== ==================== Disabled items from MSCONFIG ============== ==================== Faulty Device Manager Devices ============= Name: Bluetooth Audio Device Description: Bluetooth Audio Device Class Guid: {4d36e96c-e325-11ce-bfc1-08002be10318} Manufacturer: Qualcomm Atheros Communications Service: BTATH_A2DP Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. Name: Virtual Bluetooth Support (Include Audio) Description: Virtual Bluetooth Support (Include Audio) Class Guid: {c7c038ad-1f2d-44d4-b2fe-d912be20e6d5} Manufacturer: Qualcomm Atheros Communications Service: AthBTPort Problem: : This device is not working properly because Windows cannot load the drivers required for this device. (Code 31) Resolution: Update the driver Name: Bluetooth LWFLT Device Description: Bluetooth LWFLT Device Class Guid: {c7c038ad-1f2d-44d4-b2fe-d912be20e6d5} Manufacturer: Qualcomm Atheros Communications Service: BTATH_LWFLT Problem: : This device is not working properly because Windows cannot load the drivers required for this device. (Code 31) Resolution: Update the driver ==================== Event log errors: ========================= Application errors: ================== Error: (03/12/2014 06:44:52 PM) (Source: C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe) (User: ) Description: C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exeCan't get user token [1008] Error: (03/12/2014 02:14:44 PM) (Source: Application Hang) (User: ) Description: Programm firefox.exe, Version 27.0.1.5156 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen. Prozess-ID: 2314 Startzeit: 01cf3dee570477bb Endzeit: 46 Anwendungspfad: C:\Program Files (x86)\Mozilla Firefox\firefox.exe Berichts-ID: 43e3789f-a9e8-11e3-be77-0c84dc2e5f4a Vollständiger Name des fehlerhaften Pakets: Anwendungs-ID, die relativ zum fehlerhaften Paket ist: Error: (03/11/2014 09:18:22 AM) (Source: Microsoft-Windows-Immersive-Shell) (User: BÄR) Description: Bei der Aktivierung der App „FileManager_cw5n1h2txyewy!Microsoft.Windows.PhotoManager“ ist folgender Fehler aufgetreten: -2144927142. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“. Error: (03/11/2014 09:18:22 AM) (Source: Application Hang) (User: ) Description: Programm PhotosApp.exe, Version 6.3.9600.16507 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen. Prozess-ID: 29f8 Startzeit: 01cf3d026d37af28 Endzeit: 4294967295 Anwendungspfad: C:\WINDOWS\FileManager\PhotosApp.exe Berichts-ID: b55a8648-a8f5-11e3-be77-0c84dc2e5f4a Vollständiger Name des fehlerhaften Pakets: FileManager_6.3.9600.16384_neutral_neutral_cw5n1h2txyewy Anwendungs-ID, die relativ zum fehlerhaften Paket ist: Microsoft.Windows.PhotoManager Error: (03/11/2014 09:18:20 AM) (Source: Microsoft-Windows-Immersive-Shell) (User: BÄR) Description: Die App „FileManager_6.3.9600.16384_neutral_neutral_cw5n1h2txyewy+Microsoft.Windows.PhotoManager“ wurde nicht innerhalb der vorgesehenen Zeit gestartet. Error: (03/10/2014 08:36:38 PM) (Source: Microsoft-Windows-LocationProvider) (User: NT-AUTORITÄT) Description: There was an error with the Windows Location Provider database Error: (03/10/2014 08:25:30 PM) (Source: Customer Experience Improvement Program) (User: ) Description: 80070005 Error: (03/10/2014 06:49:27 PM) (Source: Application Hang) (User: ) Description: Programm PhotosApp.exe, Version 6.3.9600.16507 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen. Prozess-ID: 1fec Startzeit: 01cf3c89073e16b8 Endzeit: 4294967295 Anwendungspfad: C:\WINDOWS\FileManager\PhotosApp.exe Berichts-ID: 5055ccc9-a87c-11e3-be77-0c84dc2e5f4a Vollständiger Name des fehlerhaften Pakets: FileManager_6.3.9600.16384_neutral_neutral_cw5n1h2txyewy Anwendungs-ID, die relativ zum fehlerhaften Paket ist: Microsoft.Windows.PhotoManager Error: (03/10/2014 06:49:24 PM) (Source: Microsoft-Windows-Immersive-Shell) (User: BÄR) Description: Bei der Aktivierung der App „FileManager_cw5n1h2txyewy!Microsoft.Windows.PhotoManager“ ist folgender Fehler aufgetreten: -2144927142. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“. Error: (03/10/2014 06:49:20 PM) (Source: Microsoft-Windows-Immersive-Shell) (User: BÄR) Description: Die App „FileManager_6.3.9600.16384_neutral_neutral_cw5n1h2txyewy+Microsoft.Windows.PhotoManager“ wurde nicht innerhalb der vorgesehenen Zeit gestartet. System errors: ============= Error: (03/12/2014 08:15:32 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Update EnhanceTronic" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 5000 Millisekunden durchgeführt: Neustart des Diensts. Error: (03/12/2014 01:29:36 PM) (Source: DCOM) (User: NT-AUTORITÄT) Description: ComputerstandardLokalAktivierung{C2F03A33-21F5-47FA-B4BB-156362A2F239}{316CDED5-E4AE-4B15-9113-7055D84DCC97}NT-AUTORITÄTLokaler DienstS-1-5-19LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar Error: (03/11/2014 01:57:44 PM) (Source: BTHUSB) (User: ) Description: Der lokale Bluetooth-Adapter ist aus einem unbekannten Grund fehlgeschlagen und wird nicht verwendet. Der Treiber wurde entladen. Error: (03/11/2014 00:42:49 PM) (Source: BTHUSB) (User: ) Description: Der lokale Bluetooth-Adapter ist aus einem unbekannten Grund fehlgeschlagen und wird nicht verwendet. Der Treiber wurde entladen. Error: (03/11/2014 11:28:55 AM) (Source: BTHUSB) (User: ) Description: Der lokale Bluetooth-Adapter ist aus einem unbekannten Grund fehlgeschlagen und wird nicht verwendet. Der Treiber wurde entladen. Error: (03/11/2014 10:58:42 AM) (Source: BTHUSB) (User: ) Description: Der lokale Bluetooth-Adapter ist aus einem unbekannten Grund fehlgeschlagen und wird nicht verwendet. Der Treiber wurde entladen. Error: (03/11/2014 10:53:25 AM) (Source: BTHUSB) (User: ) Description: Der lokale Bluetooth-Adapter ist aus einem unbekannten Grund fehlgeschlagen und wird nicht verwendet. Der Treiber wurde entladen. Error: (03/11/2014 10:00:01 AM) (Source: DCOM) (User: NT-AUTORITÄT) Description: ComputerstandardLokalAktivierung{C2F03A33-21F5-47FA-B4BB-156362A2F239}{316CDED5-E4AE-4B15-9113-7055D84DCC97}NT-AUTORITÄTLokaler DienstS-1-5-19LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar Error: (03/11/2014 09:54:36 AM) (Source: BTHUSB) (User: ) Description: Der lokale Bluetooth-Adapter ist aus einem unbekannten Grund fehlgeschlagen und wird nicht verwendet. Der Treiber wurde entladen. Error: (03/11/2014 08:49:17 AM) (Source: BTHUSB) (User: ) Description: Der lokale Bluetooth-Adapter ist aus einem unbekannten Grund fehlgeschlagen und wird nicht verwendet. Der Treiber wurde entladen. Microsoft Office Sessions: ========================= Error: (03/12/2014 06:44:52 PM) (Source: C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe)(User: ) Description: C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exeCan't get user token [1008] Error: (03/12/2014 02:14:44 PM) (Source: Application Hang)(User: ) Description: firefox.exe27.0.1.5156231401cf3dee570477bb46C:\Program Files (x86)\Mozilla Firefox\firefox.exe43e3789f-a9e8-11e3-be77-0c84dc2e5f4a Error: (03/11/2014 09:18:22 AM) (Source: Microsoft-Windows-Immersive-Shell)(User: BÄR) Description: FileManager_cw5n1h2txyewy!Microsoft.Windows.PhotoManager-2144927142 Error: (03/11/2014 09:18:22 AM) (Source: Application Hang)(User: ) Description: PhotosApp.exe6.3.9600.1650729f801cf3d026d37af284294967295C:\WINDOWS\FileManager\PhotosApp.exeb55a8648-a8f5-11e3-be77-0c84dc2e5f4aFileManager_6.3.9600.16384_neutral_neutral_cw5n1h2txyewyMicrosoft.Windows.PhotoManager Error: (03/11/2014 09:18:20 AM) (Source: Microsoft-Windows-Immersive-Shell)(User: BÄR) Description: FileManager_6.3.9600.16384_neutral_neutral_cw5n1h2txyewy+Microsoft.Windows.PhotoManager Error: (03/10/2014 08:36:38 PM) (Source: Microsoft-Windows-LocationProvider)(User: NT-AUTORITÄT) Description: -2147024883 Error: (03/10/2014 08:25:30 PM) (Source: Customer Experience Improvement Program)(User: ) Description: 80070005 Error: (03/10/2014 06:49:27 PM) (Source: Application Hang)(User: ) Description: PhotosApp.exe6.3.9600.165071fec01cf3c89073e16b84294967295C:\WINDOWS\FileManager\PhotosApp.exe5055ccc9-a87c-11e3-be77-0c84dc2e5f4aFileManager_6.3.9600.16384_neutral_neutral_cw5n1h2txyewyMicrosoft.Windows.PhotoManager Error: (03/10/2014 06:49:24 PM) (Source: Microsoft-Windows-Immersive-Shell)(User: BÄR) Description: FileManager_cw5n1h2txyewy!Microsoft.Windows.PhotoManager-2144927142 Error: (03/10/2014 06:49:20 PM) (Source: Microsoft-Windows-Immersive-Shell)(User: BÄR) Description: FileManager_6.3.9600.16384_neutral_neutral_cw5n1h2txyewy+Microsoft.Windows.PhotoManager ==================== Memory info =========================== Percentage of memory in use: 23% Total physical RAM: 8067.27 MB Available physical RAM: 6137.47 MB Total Pagefile: 9347.27 MB Available Pagefile: 7008.57 MB Total Virtual: 131072 MB Available Virtual: 131071.79 MB ==================== Drives ================================ Drive c: (Windows 8) (Fixed) (Total:449.11 GB) (Free:411.33 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (Size: 466 GB) (Disk ID: 24A70EF7) Partition: GPT Partition Type. ==================== End Of Log ============================ |
13.03.2014, 20:39 | #3 |
/// the machine /// TB-Ausbilder | Optimizer Pro :-(So funktioniert es: Posten in CODE-Tags Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR, 7Z-Archive zu packen erschwert mir massiv die Arbeit, es sei denn natürlich die Datei wäre ansonsten zu gross für das Forum. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:
Jede Software, die in der Additional.txt aufgeführt ist mit dem Zusatz <==ATTENTION mit Revo Uninstaller deinstallieren, mit Revo auch die Reste moderat entfernen lassen. Revo Uninstaller - Download - Filepony Downloade Dir bitte Malwarebytes Anti-Malware
Downloade Dir bitte AdwCleaner auf deinen Desktop.
Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
und ein frisches FRST log bitte.
__________________ |
17.03.2014, 14:43 | #4 |
| Optimizer Pro :-( Das kam bei dem Malwarebytes Programm raus Malwarebytes Anti-Malware (Test) 1.75.0.1300 www.malwarebytes.org Datenbank Version: v2014.03.17.04 Windows 8 x64 NTFS Internet Explorer 11.0.9600.16521 Thomas :: BÄR [Administrator] Schutz: Aktiviert 17.03.2014 14:33:55 mbam-log-2014-03-17 (14-33-55).txt Art des Suchlaufs: Quick-Scan Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM Deaktivierte Suchlaufeinstellungen: P2P Durchsuchte Objekte: 231124 Laufzeit: 4 Minute(n), 25 Sekunde(n) Infizierte Speicherprozesse: 0 (Keine bösartigen Objekte gefunden) Infizierte Speichermodule: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungsschlüssel: 12 HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C} (PUP.Optional.SupTab.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C} (PUP.Optional.SupTab.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{F530D5E8-9D18-4CBA-B7CC-95944F9EBE3D} (PUP.Optional.EnhanceTronic.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{F530D5E8-9D18-4CBA-B7CC-95944F9EBE3D} (PUP.Optional.EnhanceTronic.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Browsersafeguard (PUP.Optional.BrowserSafeGuard.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86} (PUP.Optional.Qone8) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCU\Software\AppDataLow\Software\PriceGong (PUP.Optional.PriceGong.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCU\Software\InstallCore\1I1T1Q1S (PUP.Optional.InstallCore.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCU\SOFTWARE\INSTALLCORE (PUP.Optional.InstallCore.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKLM\SOFTWARE\BROWSERSAFEGUARD (PUP.Optional.BrowserSafeGuard.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86} (PUP.Optional.Qone8) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKLM\Software\awesomehpSoftware (PUP.Optional.Awesomehp.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. Infizierte Registrierungswerte: 2 HKCU\Software\InstallCore|tb (PUP.Optional.InstallCore.A) -> Daten: 0N2X1N -> Erfolgreich gelöscht und in Quarantäne gestellt. HKLM\SOFTWARE\Browsersafeguard|sourceid (PUP.Optional.BrowserSafeGuard.A) -> Daten: google_browsersafeguard-CPC-Display-DE-300x250-startfreedownload.com-42227562670 -> Erfolgreich gelöscht und in Quarantäne gestellt. Infizierte Dateiobjekte der Registrierung: 4 HKCU\SOFTWARE\Microsoft\Internet Explorer\Main|Default_Page_URL (PUP.Optional.Awesomehp.A) -> Bösartig: (hxxp://www.awesomehp.com/?type=hp&ts=1394651384&from=adks&uid=ST500LT012-9WS142_W0VB181XXXXXW0VB181X) Gut: (hxxp://www.google.com) -> Erfolgreich ersetzt und in Quarantäne gestellt. HKLM\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command| (PUP.Optional.Awesomehp.A) -> Bösartig: (C:\Program Files\Internet Explorer\iexplore.exe hxxp://www.awesomehp.com/?type=sc&ts=1394651384&from=adks&uid=ST500LT012-9WS142_W0VB181XXXXXW0VB181X) Gut: (iexplore.exe) -> Erfolgreich ersetzt und in Quarantäne gestellt. HKLM\SOFTWARE\Microsoft\Internet Explorer\Main|Default_Search_URL (PUP.Optional.Awesomehp.A) -> Bösartig: (hxxp://www.awesomehp.com/web/?type=ds&ts=1394651384&from=adks&uid=ST500LT012-9WS142_W0VB181XXXXXW0VB181X&q={searchTerms}) Gut: (hxxp://www.google.com) -> Erfolgreich ersetzt und in Quarantäne gestellt. HKLM\Software\Microsoft\Internet Explorer\Main|Default_Page_URL (PUP.Optional.Awesomehp.A) -> Bösartig: (hxxp://www.awesomehp.com/?type=hp&ts=1394651384&from=adks&uid=ST500LT012-9WS142_W0VB181XXXXXW0VB181X) Gut: (hxxp://www.google.com) -> Erfolgreich ersetzt und in Quarantäne gestellt. Infizierte Verzeichnisse: 6 C:\Program Files (x86)\Browsersafeguard (PUP.Optional.BrowserSafeGuard.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Browsersafeguard\Resources (PUP.Optional.BrowserSafeGuard.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BrowserSafeguard (PUP.Optional.BrowserSafeGuard) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Thomas\AppData\Roaming\systweak\Advanced System Protector (PUP.Optional.AdvancedSystemProtector.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\ProgramData\IePluginService (PUP.Optional.IePluginService.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\ProgramData\IePluginService\update (PUP.Optional.IePluginService.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. Infizierte Dateien: 16 C:\Users\Thomas\AppData\Roaming\SupTab\SupTab.dll (PUP.Optional.SupTab.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Thomas\Downloads\Setup.exe (PUP.Optional.OptimumInstaller.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\awesomehp.xml (PUP.Optional.Awesomehp.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Browsersafeguard\ewebstorewrapper.dll (PUP.Optional.BrowserSafeGuard.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Browsersafeguard\makecert.exe (PUP.Optional.BrowserSafeGuard.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Browsersafeguard\TrustedRoot.cer (PUP.Optional.BrowserSafeGuard.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Browsersafeguard\uninstall.BrowserSafeguard.exe (PUP.Optional.BrowserSafeGuard.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Browsersafeguard\Resources\certutil.exe (PUP.Optional.BrowserSafeGuard.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Browsersafeguard\Resources\libnspr4.dll (PUP.Optional.BrowserSafeGuard.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Browsersafeguard\Resources\libplc4.dll (PUP.Optional.BrowserSafeGuard.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Browsersafeguard\Resources\libplds4.dll (PUP.Optional.BrowserSafeGuard.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Browsersafeguard\Resources\nss3.dll (PUP.Optional.BrowserSafeGuard.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Browsersafeguard\Resources\smime3.dll (PUP.Optional.BrowserSafeGuard.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Browsersafeguard\Resources\softokn3.dll (PUP.Optional.BrowserSafeGuard.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BrowserSafeguard\BrowserSafeguard.lnk (PUP.Optional.BrowserSafeGuard) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\ProgramData\IePluginService\update\conf (PUP.Optional.IePluginService.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. (Ende) |
18.03.2014, 10:51 | #5 |
/// the machine /// TB-Ausbilder | Optimizer Pro :-( Codetags? Restliche Logfiles? Revo gemacht?
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
19.05.2014, 13:43 | #6 |
| Optimizer Pro :-( So ich wollte kein neues Thema aufmachen. Ich habe die 3 Ordner hinzugefügt, sieht man daraus etwas? |
20.05.2014, 10:01 | #7 |
/// the machine /// TB-Ausbilder | Optimizer Pro :-( Brauchst Du immer 2 Monate? Logs bitte immer in den Thread posten. Zur Not aufteilen und mehrere Posts nutzen. Ich kann auf Arbeit keine Anhänge öffnen, danke. So funktioniert es: Posten in CODE-Tags Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR, 7Z-Archive zu packen erschwert mir massiv die Arbeit, es sei denn natürlich die Datei wäre ansonsten zu gross für das Forum. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
20.05.2014, 16:43 | #8 |
| Optimizer Pro :-( Normalerweise nicht, aber wegen Umzug hatte ich kein Internet, sorry |
21.05.2014, 08:30 | #9 |
/// the machine /// TB-Ausbilder | Optimizer Pro :-( ok, dann bitte Logs wie oben beschrieben in den Thread posten.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |