| |
| |||||||
Log-Analyse und Auswertung: Entfernen Rvzr-a.akamaihd.net wegen Pop ups und grüne doppelbalken mit pop up beim scrollenWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
 |
28.03.2014, 20:48
| #1 |
| |  Entfernen Rvzr-a.akamaihd.net wegen Pop ups und grüne doppelbalken mit pop up beim scrollen Malwarebytes Anti-Malware ,AdwCleaner,Junkware Removal Tool benutzt wie unter dem beispiel von rvzr-a.akamaihd.net entfernen 30.11.2013, 14:10 . Leider habe ich immer noch wahlose grüne Wörter in websites -Browser Opera und Chrome. Leider auch bei ca. jeder dritten Website ein Zusätzliche Pop up mit rvzr-a.akamaihd.net dass sich weiterverbindet und weiterverbindet um dann ...naja -ich brauche keine (Französiche) SINGELPLATTFORM Stehe kurz vor neu Installation. Ich arbeite mit W8.0 Wäre um Hilfe sehr dankbar. Eset online Scanner -und Spybot haben auch nicht geholfen und das alles trotz Kapersky. Werbung des Scrolls pop up ist PCHealtWeb.com Vielen dank im voraus für den Engel der mich vor Neuinstallation bewahrt. Grüsse RonanFRST Additions Logfile: Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 13-03-2014
Ran by PC at 2014-03-28 20:55:56
Running from C:\Users\PC\Desktop
Boot Mode: Normal
==========================================================
==================== Security Center ========================
AV: Kaspersky Anti-Virus (Enabled - Up to date) {179979E8-273D-D14E-0543-2861940E4886}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Kaspersky Anti-Virus (Enabled - Up to date) {ACF8980C-0107-DEC0-3FF3-1313EF89023B}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installed Programs ======================
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 3.8.0.1430 - Adobe Systems Incorporated)
Adobe AIR (x32 Version: 3.8.0.1430 - Adobe Systems Incorporated) Hidden
Adobe Dreamweaver CS6 (HKLM-x32\...\{A4ED5E53-7AA0-11E1-BF04-B2D4D4A5360E}) (Version: 12 - Adobe Systems Incorporated)
Adobe Flash Player 12 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 12.0.0.77 - Adobe Systems Incorporated)
Adobe Help Manager (HKLM-x32\...\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 4.0.244 - Adobe Systems Incorporated)
Adobe Help Manager (x32 Version: 4.0.244 - Adobe Systems Incorporated) Hidden
Adobe Widget Browser (HKLM-x32\...\com.adobe.WidgetBrowser) (Version: 2.0 Build 348 - Adobe Systems Incorporated.)
Adobe Widget Browser (x32 Version: 2.0.348 - Adobe Systems Incorporated.) Hidden
Bejeweled 3 (x32 Version: 2.2.0.98 - WildTangent) Hidden
Broadcom Card Reader Driver Installer (HKLM\...\{F0A7DF2F-0BE0-470F-B137-D7A19F977189}) (Version: 15.4.7.1 - Broadcom Corporation)
Classic Shell (HKLM\...\{FEA1590B-540A-41FC-A95C-664493C82A21}) (Version: 3.6.8 - IvoSoft)
CrypTool 1.4.31 (HKLM-x32\...\CrypTool) (Version: 1.4.31 - )
CutePDF Writer 3.0 (HKLM\...\CutePDF Writer Installation) (Version: 3.0 - CutePDF.com)
CyberLink PowerDVD 12 (HKLM-x32\...\InstallShield_{B46BEA36-0B71-4A4E-AE41-87241643FA0A}) (Version: 12.0.2826.57 - CyberLink Corp.)
CyberLink PowerDVD 12 (x32 Version: 12.0.2826.57 - CyberLink Corp.) Hidden
DAEMON Tools Lite (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.48.1.0347 - Disc Soft Ltd)
Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition (HKLM-x32\...\{91140000-0057-0000-0000-0000000FF1CE}_Office14.VISIOR_{92C42EDD-6524-4577-B2EB-6C68C63B6D4A}) (Version: - Microsoft)
Definition Update for Microsoft Office 2013 (KB2760587) 32-Bit Edition (HKLM-x32\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{CD3C2621-B611-4A30-BB37-81CA880AB895}) (Version: - Microsoft)
Delicious: Emily's Childhood Memories Premium Edition (x32 Version: 3.0.2.32 - WildTangent) Hidden
Der Herr der Ringe Online (HKCU\...\lotro_midres_de) (Version: - )
Dev-C++ (HKLM-x32\...\Dev-C++) (Version: 5.4.2 - )
ENIGMA (C:\Program Files (x86)\ENIGMA\) (HKLM-x32\...\ST5UNST #2) (Version: - )
ENIGMA (HKLM-x32\...\ST5UNST #1) (Version: - )
ESET Online Scanner v3 (HKLM-x32\...\ESET Online Scanner) (Version: - )
ETDWare PS/2-X64 11.6.16.003_WHQL (HKLM\...\Elantech) (Version: 11.6.16.003 - ELAN Microelectronic Corp.)
Express Burn (HKLM-x32\...\ExpressBurn) (Version: 4.69 - NCH Software)
Express Rip (HKLM-x32\...\ExpressRip) (Version: 1.94 - NCH Software)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 33.0.1750.154 - Google Inc.)
Google Toolbar for Internet Explorer (HKLM-x32\...\{2318C2B1-4965-11d4-9B18-009027A5CD4F}) (Version: 7.5.5111.1712 - Google Inc.)
Google Toolbar for Internet Explorer (x32 Version: 1.0.0 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.22.5 - Google Inc.) Hidden
Governor of Poker 2 Premium Edition (x32 Version: 2.2.0.110 - WildTangent) Hidden
Happy Cloud Client (HKCU\...\HappyCloud) (Version: 4.28 - Happy Cloud, Inc.)
HTTP Monitor (HKLM-x32\...\{5C603287-3F31-4FCB-9FB7-72C7F7D3E976}) (Version: 1.0.30 - \)
Identity Card (HKLM-x32\...\{3D9CB654-99AD-4301-89C6-0D12A790767C}) (Version: 2.00.3005 - Packard Bell)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.1.0.1252 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 9.17.10.2867 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 11.5.4.1001 - Intel Corporation)
Intel(R) SDK for OpenCL - CPU Only Runtime Package (HKLM-x32\...\{FCB3772C-B7D0-4933-B1A9-3707EBACC573}) (Version: 2.0.0.37149 - Intel Corporation)
Intel® Trusted Connect Service Client (Version: 1.24.388.1 - Intel Corporation) Hidden
Java 7 Update 51 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217051FF}) (Version: 7.0.510 - Oracle)
Java Auto Updater (x32 Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden
Jewel Match 3 (x32 Version: 2.2.0.98 - WildTangent) Hidden
John Deere Drive Green (x32 Version: 2.2.0.95 - WildTangent) Hidden
Kaspersky Anti-Virus (HKLM-x32\...\InstallWIX_{6F6873E3-5C92-4049-B511-231A138DD090}) (Version: 14.0.0.4651 - Kaspersky Lab)
Kaspersky Anti-Virus (x32 Version: 14.0.0.4651 - Kaspersky Lab) Hidden
Launch Manager (HKLM-x32\...\LManager) (Version: 7.0.10 - Packard Bell)
Live Updater (HKLM-x32\...\{EE26E302-876A-48D9-9058-3129E5B99999}) (Version: 2.00.3008 - Packard Bell)
Magic Academy (x32 Version: 2.2.0.98 - WildTangent) Hidden
Malwarebytes Anti-Malware Version 2.00.0.1000 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.00.0.1000 - Malwarebytes Corporation)
Microsoft Access MUI (German) 2013 (x32 Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft DCF MUI (German) 2013 (x32 Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Excel MUI (German) 2013 (x32 Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Groove MUI (German) 2013 (x32 Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft InfoPath MUI (German) 2013 (x32 Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Lync MUI (German) 2013 (x32 Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Office 64-bit Components 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Office Korrekturhilfen 2013 - Deutsch (x32 Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Office Office 64-bit Components 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office OSM MUI (German) 2013 (x32 Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Office OSM UX MUI (German) 2013 (x32 Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Office Professional Plus 2013 (HKLM-x32\...\Office15.PROPLUS) (Version: 15.0.4420.1017 - Microsoft Corporation)
Microsoft Office Professional Plus 2013 (x32 Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Office Proof (English) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (French) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Italian) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing (German) 2013 (x32 Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Office Proofing Tools 2013 - English (x32 Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Office Proofing Tools 2013 - Italiano (x32 Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Office Shared 64-bit MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared 64-bit MUI (German) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (German) 2013 (x32 Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Office Visio 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Visio MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft OneNote MUI (German) 2013 (x32 Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Outlook MUI (German) 2013 (x32 Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft PowerPoint MUI (German) 2013 (x32 Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Publisher MUI (German) 2013 (x32 Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30214.0 - Microsoft Corporation)
Microsoft Visio Professional 2010 (HKLM-x32\...\Office14.VISIOR) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Visio Viewer 2010 (HKLM-x32\...\{95140000-0052-0407-0000-0000000FF1CE}) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Word MUI (German) 2013 (x32 Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
MinGW-Get version 0.1-alpha-5 (HKLM-x32\...\{AC2C1BDB-1E91-4F94-B99C-E716FE2E9C75}_is1) (Version: 0.1-alpha-5 - MinGW)
MixPad Audiodatei-Mixer (HKLM-x32\...\MixPad) (Version: 3.37 - NCH Software)
MySQL Connector C++ 1.1.3 (HKLM\...\{5C7A1ED6-DC5F-4017-B363-3E80644B4BD0}) (Version: 1.1.3 - Oracle and/or its affiliates)
MySQL Connector J (HKLM-x32\...\{4C5FFB59-6222-45CA-9257-EFB93D5E1756}) (Version: 5.1.26 - Oracle Corporation)
MySQL Connector Net 6.7.4 (HKLM-x32\...\{D6952EDA-6AC4-4480-A060-BD6025B15BAD}) (Version: 6.7.4 - Oracle)
MySQL Connector/ODBC 5.2 64bit (community edition) (HKLM\...\{D8053A16-A50E-401C-B162-18119EB7CC33}) (Version: 5.2.5 - Oracle Corporation)
MySQL Documents 5.6 (HKLM-x32\...\{D5080D2C-37D0-4701-B74D-4A7449584E6D}) (Version: 5.6.14 - Oracle Corporation)
MySQL Examples and Samples 5.6 (HKLM-x32\...\{44D03537-3061-490B-BF0C-DACA4DEE8797}) (Version: 5.6.14 - Oracle Corporation)
MySQL For Excel 1.1.1 (HKLM-x32\...\{88C06BF4-9A84-42FE-A0B2-CB3A49DDBBF0}) (Version: 1.1.1 - Oracle)
MySQL Installer (HKLM-x32\...\{D8BAC677-5CCD-49FA-BF7D-21F65AB0EE0E}) (Version: 1.3.2.0 - Oracle Corporation)
MySQL Notifier 1.1.4 (HKLM-x32\...\{D7C3E617-EB02-47B3-8D0E-BF3E00D873D5}) (Version: 1.1.4 - Oracle)
MySQL Server 5.6 (HKLM\...\{23EEC459-9E65-4DCE-83B8-A1FDB44B9337}) (Version: 5.6.14 - Oracle Corporation)
MySQL Utilities (HKLM-x32\...\{6A494EFD-CFC6-4534-9E14-26D3F7D888DE}) (Version: 1.3.4 - Oracle)
MySQL Workbench 6.0 CE (HKLM-x32\...\{0B724473-51F5-49E8-958C-4BB3C0AAAF35}) (Version: 6.0.7 - Oracle Corporation)
Nessus (HKLM-x32\...\{B7E9816D-BC55-44A1-A7B4-A262E58D2485}) (Version: 4.2.1.9119 - Tenable Network Security, Inc.)
Nokia Connectivity Cable Driver (HKLM\...\{BC4AE628-81A4-4FC6-863A-7A9BA2E2531F}) (Version: 7.1.32.69 - )
Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.5.5 - Notepad++ Team)
Nvu 1.0 (HKLM-x32\...\Nvu_is1) (Version: 1.0 - Thorsten Fritz)
OpenOffice 4.0.1 (HKLM-x32\...\{47F460DA-D1BE-4D85-8DF2-AA1F31D3445F}) (Version: 4.01.9714 - Apache Software Foundation)
Opera Stable 20.0.1387.82 (HKLM-x32\...\Opera 20.0.1387.82) (Version: 20.0.1387.82 - Opera Software ASA)
Outils de vérification linguistique 2013 de Microsoft Office*- Français (x32 Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Packard Bell Device Fast-lane (HKLM\...\{3F62D2FD-13C1-49A2-8B5D-47623D9460D7}) (Version: 1.00.3011 - Packard Bell)
Packard Bell Power Management (HKLM\...\{91F52DE4-B789-42B0-9311-A349F10E5479}) (Version: 7.00.3013 - Packard Bell)
Packard Bell Recovery Management (HKLM\...\{07F2005A-8CAC-4A4B-83A2-DA98A722CA61}) (Version: 6.00.3016 - Packard Bell)
PC Tools Registry Mechanic 11.1 (HKLM-x32\...\Registry Mechanic_is1) (Version: 11.1 - PC Tools)
PDF Architect (HKLM-x32\...\{064A929A-4DE8-40CF-A901-BD40C14E4D25}) (Version: 1.1.83.9982 - pdfforge GmbH)
PDFCreator (HKLM\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 1.9.2 - pdfforge)
PlanetSide 2 (HKCU\...\SOE-PlanetSide 2 PSG) (Version: 1.0.3.183 - Sony Online Entertainment)
Plants vs. Zombies - Game of the Year (x32 Version: 2.2.0.98 - WildTangent) Hidden
Project 64 version 2.1.0.1 (HKLM-x32\...\Project 64_is1) (Version: 2.1.0.1 - )
Qualcomm Atheros Bluetooth Suite (64) (HKLM\...\{A84A4FB1-D703-48DB-89E0-68B6499D2801}) (Version: 8.0.0.220 - Qualcomm Atheros Communications)
Qualcomm Atheros WLAN and Bluetooth Client Installation Program (HKLM-x32\...\{28006915-2739-4EBE-B5E8-49B25D32EB33}) (Version: 11.41 - Qualcomm Atheros)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6657 - Realtek Semiconductor Corp.)
Reason 5.0 (HKLM-x32\...\Reason5_is1) (Version: 5.0 - Propellerhead Software AB)
ResultsAlpha (HKLM\...\ResultsAlpha) (Version: 2014.03.18.233345 - ResultsAlpha)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM-x32\...\{91140000-0057-0000-0000-0000000FF1CE}_Office14.VISIOR_{359ADBEC-068A-4CC9-9174-77AB8EDB867A}) (Version: - Microsoft)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (x32 Version: - Microsoft) Hidden
SIW 2013 Home Edition (HKLM-x32\...\{AB67580-257C-45FF-B8F4-C8C30682091A}_is1) (Version: 2013.05.14 - Topala Software Solutions)
Speccy (HKLM\...\Speccy) (Version: 1.25 - Piriform)
Spielkanäle (HKLM-x32\...\WildTangentGameProvider-packardbell-genres) (Version: 8.1.0.17 - WildTangent, Inc.)
Spotify (HKLM-x32\...\Spotify) (Version: 0.8.4.99.ga249b5f1 - Spotify AB)
Star Monkey (HKLM-x32\...\{5F72E9CC-157D-4D37-9D2A-42A8AC0A660D}) (Version: - )
Switch Audiodatei-Konverter (HKLM-x32\...\Switch) (Version: 4.53 - NCH Software)
System Requirements Lab CYRI (HKLM-x32\...\{F3FCB08B-E752-444D-86A0-0634A4F3B23D}) (Version: 6.0.8.0 - Husdawg, LLC)
Tales of Lagoona (x32 Version: 2.2.0.110 - WildTangent) Hidden
TeamViewer 8 (HKLM-x32\...\TeamViewer 8) (Version: 8.0.26038 - TeamViewer)
tools-linux (x32 Version: 9.2.3.1031769 - VMware, Inc.) Hidden
tools-windows (x32 Version: 9.2.3.1031769 - VMware, Inc.) Hidden
TopStyle Lite (Version 3.0) (HKLM-x32\...\TopStyle Lite (Version 3.0)) (Version: 3.1.0 - Bradbury Software, LLC)
upc cablecom assistant (HKLM-x32\...\upc cablecom assistant) (Version: 1.0.0.26 - upc cablecom GmbH)
upc cablecom assistant (x32 Version: 1.0.0.26 - upc cablecom GmbH) Hidden
Update for Microsoft Access 2013 (KB2768008) 32-Bit Edition (HKLM-x32\...\{90150000-0015-0407-0000-0000000FF1CE}_Office15.PROPLUS_{02DD2FBD-76D9-4B8B-AAE6-657542F4F6E6}) (Version: - Microsoft)
Update for Microsoft Access 2013 (KB2827233) 32-Bit Edition (HKLM-x32\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{FB31ABE4-BB41-4E9A-A252-1A4BC9DC8C43}) (Version: - Microsoft)
Update for Microsoft Filter Pack 2.0 (KB2837594) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.VISIOR_{D3C85176-ACCC-4AF0-817D-1BC803303B74}) (Version: - Microsoft)
Update for Microsoft Filter Pack 2.0 (KB2837594) 32-Bit Edition (HKLM-x32\...\{91140000-0057-0000-0000-0000000FF1CE}_Office14.VISIOR_{D3C85176-ACCC-4AF0-817D-1BC803303B74}) (Version: - Microsoft)
Update for Microsoft InfoPath 2013 (KB2837648) 32-Bit Edition (HKLM-x32\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{F15AA550-A0B9-44AD-9067-2294CCA51F1C}) (Version: - Microsoft)
Update for Microsoft Lync 2013 (KB2817678) 32-Bit Edition (HKLM-x32\...\{90150000-012B-0407-0000-0000000FF1CE}_Office15.PROPLUS_{7FBE2D23-9F3C-4983-B927-2A4BF600B7A7}) (Version: - Microsoft)
Update for Microsoft Lync 2013 (KB2863908) 32-Bit Edition (HKLM-x32\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{6764E50D-D076-41BC-B069-08DD488AE88B}) (Version: - Microsoft)
Update for Microsoft Lync 2013 (KB2863908) 32-Bit Edition (HKLM-x32\...\{90150000-002A-0000-1000-0000000FF1CE}_Office15.PROPLUS_{6764E50D-D076-41BC-B069-08DD488AE88B}) (Version: - Microsoft)
Update for Microsoft Lync 2013 (KB2863908) 32-Bit Edition (HKLM-x32\...\{90150000-012B-0407-0000-0000000FF1CE}_Office15.PROPLUS_{885A0D95-13A8-4A31-B01C-B02454F414AA}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2589298) 32-Bit Edition (HKLM-x32\...\{91140000-0057-0000-0000-0000000FF1CE}_Office14.VISIOR_{DADF7E25-FFA4-4D02-BE84-1DAE62C18516}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.VISIOR_{F4284D93-7AE8-4309-8CF3-9AD394F35F3A}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition (HKLM-x32\...\{91140000-0057-0000-0000-0000000FF1CE}_Office14.VISIOR_{F4284D93-7AE8-4309-8CF3-9AD394F35F3A}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2589375) 32-Bit Edition (HKLM-x32\...\{91140000-0057-0000-0000-0000000FF1CE}_Office14.VISIOR_{287A1E92-9E41-4BC1-8920-B3D0E9220800}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2597087) 32-Bit Edition (HKLM-x32\...\{91140000-0057-0000-0000-0000000FF1CE}_Office14.VISIOR_{9D69691D-823D-4C3E-9B12-563A3F520366}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.VISIOR_{ECFE33A3-B8B7-439A-ADE4-59FBD29EF9B8}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (HKLM-x32\...\{91140000-0057-0000-0000-0000000FF1CE}_Office14.VISIOR_{ECFE33A3-B8B7-439A-ADE4-59FBD29EF9B8}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition (HKLM-x32\...\{91140000-0057-0000-0000-0000000FF1CE}_Office14.VISIOR_{35698CB7-AAA2-4577-B505-DBFF504AEF23}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2794737) 32-Bit Edition (HKLM-x32\...\{91140000-0057-0000-0000-0000000FF1CE}_Office14.VISIOR_{5AA578BB-759C-40FD-9661-A737C0884541}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2850079) 32-Bit Edition (HKLM-x32\...\{90140000-001F-0407-0000-0000000FF1CE}_Office14.VISIOR_{C70D2038-A2C4-4A99-87DE-5272BB44F0CE}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2850079) 32-Bit Edition (HKLM-x32\...\{90140000-001F-040C-0000-0000000FF1CE}_Office14.VISIOR_{82F87E28-B18E-46D6-A399-E2F19CF5949B}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2863818) 32-Bit Edition (HKLM-x32\...\{90140000-001F-0409-0000-0000000FF1CE}_Office14.VISIOR_{83B1B530-7D9E-4C6A-907F-E979CEE9C295}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2878225) 32-Bit Edition (HKLM-x32\...\{91140000-0057-0000-0000-0000000FF1CE}_Office14.VISIOR_{EFF5EBA3-40AD-4859-85E7-3C1CF4F297EB}) (Version: - Microsoft)
Update for Microsoft Office 2013 (KB2726954) 32-Bit Edition (HKLM-x32\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{4F307363-49DA-4AE7-9D9D-DAA1FF59274F}) (Version: - Microsoft)
Update for Microsoft Office 2013 (KB2726996) 32-Bit Edition (HKLM-x32\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{6E6B2968-B9D7-40C9-9FC2-8E729DDBB39C}) (Version: - Microsoft)
Update for Microsoft Office 2013 (KB2726996) 32-Bit Edition (HKLM-x32\...\{90150000-006E-0407-0000-0000000FF1CE}_Office15.PROPLUS_{49893259-C896-4972-9B6C-6B75790945F1}) (Version: - Microsoft)
Update for Microsoft Office 2013 (KB2738038) 32-Bit Edition (HKLM-x32\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{AFDC9BDD-5608-4A21-8066-13E2ACE1EDB4}) (Version: - Microsoft)
Update for Microsoft Office 2013 (KB2760224) 32-Bit Edition (HKLM-x32\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{4F8AD68D-9F41-446E-AA81-C43BF88671BF}) (Version: - Microsoft)
Update for Microsoft Office 2013 (KB2760242) 32-Bit Edition (HKLM-x32\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{BCD0EA38-A8FB-4F3D-B04E-DFFB38BC7849}) (Version: - Microsoft)
Update for Microsoft Office 2013 (KB2760267) 32-Bit Edition (HKLM-x32\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{9E03AB38-EF60-4DE6-92FB-656E23403BFA}) (Version: - Microsoft)
Update for Microsoft Office 2013 (KB2760539) 32-Bit Edition (HKLM-x32\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{E58009CD-D950-4CAE-89B4-E97C3B78319B}) (Version: - Microsoft)
Update for Microsoft Office 2013 (KB2760553) 32-Bit Edition (HKLM-x32\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{03FC8649-9511-4FB1-BE34-67A442505DCF}) (Version: - Microsoft)
Update for Microsoft Office 2013 (KB2760610) 32-Bit Edition (HKLM-x32\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{B299B17D-874D-43DD-84AA-414BD9C70021}) (Version: - Microsoft)
Update for Microsoft Office 2013 (KB2760610) 32-Bit Edition (HKLM-x32\...\{90150000-002A-0000-1000-0000000FF1CE}_Office15.PROPLUS_{B299B17D-874D-43DD-84AA-414BD9C70021}) (Version: - Microsoft)
Update for Microsoft Office 2013 (KB2760610) 32-Bit Edition (HKLM-x32\...\{90150000-002A-0407-1000-0000000FF1CE}_Office15.PROPLUS_{65D789FD-9118-45AF-8DE4-F49F358A8525}) (Version: - Microsoft)
Update for Microsoft Office 2013 (KB2760610) 32-Bit Edition (HKLM-x32\...\{90150000-006E-0407-0000-0000000FF1CE}_Office15.PROPLUS_{65D789FD-9118-45AF-8DE4-F49F358A8525}) (Version: - Microsoft)
Update for Microsoft Office 2013 (KB2767845) 32-Bit Edition (HKLM-x32\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{7E8D777B-BD75-480D-AC03-AF9C3D83CDBF}) (Version: - Microsoft)
Update for Microsoft Office 2013 (KB2768016) 32-Bit Edition (HKLM-x32\...\{90150000-006E-0407-0000-0000000FF1CE}_Office15.PROPLUS_{B9DB28D9-15D0-4DDE-A123-C9B82AC9A579}) (Version: - Microsoft)
Update for Microsoft Office 2013 (KB2817314) 32-Bit Edition (HKLM-x32\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{B9A3A7A7-8B5B-4D07-9816-80EE2EA5B9B7}) (Version: - Microsoft)
Update for Microsoft Office 2013 (KB2817316) 32-Bit Edition (HKLM-x32\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{670559E6-5725-4B84-A16C-0859771F25DE}) (Version: - Microsoft)
Update for Microsoft Office 2013 (KB2817316) 32-Bit Edition (HKLM-x32\...\{90150000-0016-0407-0000-0000000FF1CE}_Office15.PROPLUS_{5EFADE14-CE0B-43BF-ADD2-850FCB79485F}) (Version: - Microsoft)
Update for Microsoft Office 2013 (KB2817316) 32-Bit Edition (HKLM-x32\...\{90150000-0016-0407-0000-0000000FF1CE}_Office15.PROPLUS_{8E942418-D7DE-48A4-8210-AD994006EFAA}) (Version: - Microsoft)
Update for Microsoft Office 2013 (KB2817490) 32-Bit Edition (HKLM-x32\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{188DFB16-BA3F-4AD3-9432-45C8FA64EC8B}) (Version: - Microsoft)
Update for Microsoft Office 2013 (KB2817490) 32-Bit Edition (HKLM-x32\...\{90150000-002A-0000-1000-0000000FF1CE}_Office15.PROPLUS_{188DFB16-BA3F-4AD3-9432-45C8FA64EC8B}) (Version: - Microsoft)
Update for Microsoft Office 2013 (KB2817626) 32-Bit Edition (HKLM-x32\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{BC369230-B0E0-4BB0-82D6-E93196060BFA}) (Version: - Microsoft)
Update for Microsoft Office 2013 (KB2826004) 32-Bit Edition (HKLM-x32\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{FD782270-0456-4B87-AC5E-C6EE2D063C48}) (Version: - Microsoft)
Update for Microsoft Office 2013 (KB2827225) 32-Bit Edition (HKLM-x32\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{C5CF8938-646A-41A5-A4E6-6EEE4205CBA4}) (Version: - Microsoft)
Update for Microsoft Office 2013 (KB2827227) 32-Bit Edition (HKLM-x32\...\{90150000-001F-0407-0000-0000000FF1CE}_Office15.PROPLUS_{08F8B8BC-97B5-4110-8FC1-A840DEAD0DF9}) (Version: - Microsoft)
Update for Microsoft Office 2013 (KB2827227) 32-Bit Edition (HKLM-x32\...\{90150000-001F-0409-0000-0000000FF1CE}_Office15.PROPLUS_{F75F8521-118D-4DE2-927F-073BE7B6DC7F}) (Version: - Microsoft)
Update for Microsoft Office 2013 (KB2827227) 32-Bit Edition (HKLM-x32\...\{90150000-001F-040C-0000-0000000FF1CE}_Office15.PROPLUS_{E11A0DDD-9F6D-49C6-8F02-850D44DD7639}) (Version: - Microsoft)
Update for Microsoft Office 2013 (KB2827227) 32-Bit Edition (HKLM-x32\...\{90150000-001F-0410-0000-0000000FF1CE}_Office15.PROPLUS_{A1416C8A-2BA0-43D0-BCD5-C6C29D029327}) (Version: - Microsoft)
Update for Microsoft Office 2013 (KB2827230) 32-Bit Edition (HKLM-x32\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{954A0EA5-CCCB-4B4E-8664-40E2CC8BBCBB}) (Version: - Microsoft)
Update for Microsoft Office 2013 (KB2827239) 32-Bit Edition (HKLM-x32\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{4B1A48FA-CAE2-49BB-A912-6F96AE7875D9}) (Version: - Microsoft)
Update for Microsoft Office 2013 (KB2827239) 32-Bit Edition (HKLM-x32\...\{90150000-002A-0000-1000-0000000FF1CE}_Office15.PROPLUS_{4B1A48FA-CAE2-49BB-A912-6F96AE7875D9}) (Version: - Microsoft)
Update for Microsoft Office 2013 (KB2837626) 32-Bit Edition (HKLM-x32\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{079FC22A-639F-4690-8512-F54DCD8493C7}) (Version: - Microsoft)
Update for Microsoft Office 2013 (KB2837637) 32-Bit Edition (HKLM-x32\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{13A97DC6-1E49-40B1-94E6-EB4CC3087607}) (Version: - Microsoft)
Update for Microsoft Office 2013 (KB2837637) 32-Bit Edition (HKLM-x32\...\{90150000-002A-0000-1000-0000000FF1CE}_Office15.PROPLUS_{13A97DC6-1E49-40B1-94E6-EB4CC3087607}) (Version: - Microsoft)
Update for Microsoft Office 2013 (KB2837638) 32-Bit Edition (HKLM-x32\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{C89EE024-ECC9-43EB-9D6A-52AB9B73ED63}) (Version: - Microsoft)
Update for Microsoft Office 2013 (KB2837655) 32-Bit Edition (HKLM-x32\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{2982593C-B10B-4757-A58A-7926ED063448}) (Version: - Microsoft)
Update for Microsoft Office 2013 (KB2837655) 32-Bit Edition (HKLM-x32\...\{90150000-006E-0407-0000-0000000FF1CE}_Office15.PROPLUS_{EBEB9885-E941-44AB-960A-FE4970ACB1F1}) (Version: - Microsoft)
Update for Microsoft Office 2013 (KB2850066) 32-Bit Edition (HKLM-x32\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{0AA960ED-0F9A-42EC-B9F4-52A104EB954D}) (Version: - Microsoft)
Update for Microsoft Office 2013 (KB2850066) 32-Bit Edition (HKLM-x32\...\{90150000-002A-0000-1000-0000000FF1CE}_Office15.PROPLUS_{0AA960ED-0F9A-42EC-B9F4-52A104EB954D}) (Version: - Microsoft)
Update for Microsoft OneNote 2010 (KB2837595) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.VISIOR_{51CCA922-A0CC-47C4-8910-6936D97CAC2E}) (Version: - Microsoft)
Update for Microsoft OneNote 2013 (KB2850063) 32-Bit Edition (HKLM-x32\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{FA115DB4-AD0A-4C2B-8713-DB15275B7426}) (Version: - Microsoft)
Update for Microsoft OneNote 2013 (KB2850063) 32-Bit Edition (HKLM-x32\...\{90150000-002A-0000-1000-0000000FF1CE}_Office15.PROPLUS_{FA115DB4-AD0A-4C2B-8713-DB15275B7426}) (Version: - Microsoft)
Update for Microsoft OneNote 2013 (KB2850063) 32-Bit Edition (HKLM-x32\...\{90150000-00A1-0407-0000-0000000FF1CE}_Office15.PROPLUS_{7E7400E8-36C5-4FA3-A75E-9F3BFE44EA7D}) (Version: - Microsoft)
Update for Microsoft Outlook 2013 (KB2863911) 32-Bit Edition (HKLM-x32\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{6022B459-32A4-4318-A9A4-815C0BCEF977}) (Version: - Microsoft)
Update for Microsoft Outlook 2013 (KB2863911) 32-Bit Edition (HKLM-x32\...\{90150000-001A-0407-0000-0000000FF1CE}_Office15.PROPLUS_{DA3F3D63-4C9F-407B-9CA1-39638F85BDDD}) (Version: - Microsoft)
Update for Microsoft PowerPoint 2013 (KB2767850) 32-Bit Edition (HKLM-x32\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{94A5E2C5-5F2C-4238-8387-F16873B7927C}) (Version: - Microsoft)
Update for Microsoft PowerPoint 2013 (KB2767850) 32-Bit Edition (HKLM-x32\...\{90150000-0018-0407-0000-0000000FF1CE}_Office15.PROPLUS_{A45FD7A9-2E67-41AA-8473-1463D10AAF55}) (Version: - Microsoft)
Update for Microsoft Project 2013 (KB2727085) 32-Bit Edition (HKLM-x32\...\{90150000-002A-0000-1000-0000000FF1CE}_Office15.PROPLUS_{DFC72135-28F1-48CD-B39A-AD28ED0AFEF5}) (Version: - Microsoft)
Update for Microsoft Publisher 2013 (KB2837635) 32-Bit Edition (HKLM-x32\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{696ACAB0-DCE3-4050-849A-629CE94A9E3A}) (Version: - Microsoft)
Update for Microsoft Publisher 2013 (KB2837635) 32-Bit Edition (HKLM-x32\...\{90150000-0019-0407-0000-0000000FF1CE}_Office15.PROPLUS_{67F8928F-664E-47A9-B283-3121D5F904CC}) (Version: - Microsoft)
Update for Microsoft SharePoint Workspace 2010 (KB2760601) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.VISIOR_{F9F5A080-AF38-4966-9A6B-C43DCA465035}) (Version: - Microsoft)
Update for Microsoft SkyDrive Pro (KB2817495) 32-Bit Edition (HKLM-x32\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{00ADF78E-D103-44D9-93FC-4E0B4255DF61}) (Version: - Microsoft)
Update for Microsoft SkyDrive Pro (KB2817495) 32-Bit Edition (HKLM-x32\...\{90150000-002A-0000-1000-0000000FF1CE}_Office15.PROPLUS_{00ADF78E-D103-44D9-93FC-4E0B4255DF61}) (Version: - Microsoft)
Update for Microsoft SkyDrive Pro (KB2837652) 32-Bit Edition (HKLM-x32\...\{90150000-002A-0407-1000-0000000FF1CE}_Office15.PROPLUS_{A499C133-698D-430B-970B-E5E2ABB28930}) (Version: - Microsoft)
Update for Microsoft SkyDrive Pro (KB2837652) 32-Bit Edition (HKLM-x32\...\{90150000-00BA-0407-0000-0000000FF1CE}_Office15.PROPLUS_{A499C133-698D-430B-970B-E5E2ABB28930}) (Version: - Microsoft)
Update for Microsoft Visio 2010 (KB2878227) 32-Bit Edition (HKLM-x32\...\{91140000-0057-0000-0000-0000000FF1CE}_Office14.VISIOR_{5D357893-40BA-4323-86BA-D97C66CD72F4}) (Version: - Microsoft)
Update for Microsoft Visio 2013 (KB2817306) 32-Bit Edition (HKLM-x32\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{166909FC-6736-4EE5-9491-1BF9A4EE84E7}) (Version: - Microsoft)
Update for Microsoft Visio Viewer 2013 (KB2768338) 32-Bit Edition (HKLM-x32\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{9CEFDC22-A298-451A-905E-28E42B90A563}) (Version: - Microsoft)
Update for Microsoft Word 2013 (KB2837647) 32-Bit Edition (HKLM-x32\...\{90150000-001A-0407-0000-0000000FF1CE}_Office15.PROPLUS_{E666A48D-62E6-4B76-AE27-128DD5C42684}) (Version: - Microsoft)
Update for Microsoft Word 2013 (KB2837647) 32-Bit Edition (HKLM-x32\...\{90150000-001B-0407-0000-0000000FF1CE}_Office15.PROPLUS_{E666A48D-62E6-4B76-AE27-128DD5C42684}) (Version: - Microsoft)
Update for Microsoft Word 2013 (KB2837647) 32-Bit Edition (HKLM-x32\...\{90150000-012B-0407-0000-0000000FF1CE}_Office15.PROPLUS_{E666A48D-62E6-4B76-AE27-128DD5C42684}) (Version: - Microsoft)
Update Installer for WildTangent Games App (x32 Version: - WildTangent) Hidden
VMLite Workstation (HKLM\...\{197F2BEF-2705-406E-8CEB-8E404FFFE414}) (Version: 3.2.6 - VMLite)
VMware Player (HKLM-x32\...\VMware_Player) (Version: 5.0.2 - VMware, Inc)
VMware Player (Version: 5.0.2 - VMware, Inc.) Hidden
War Thunder Launcher 1.0.1.278 (HKLM-x32\...\{ed8deea4-29fa-3932-9612-e2122d8a62d9}}_is1) (Version: - 2013 Gaijin Entertainment Corporation)
WavePad Audio-Editor (HKLM-x32\...\WavePad) (Version: 5.58 - NCH Software)
WildTangent Games (HKLM-x32\...\WildTangent wildgames Master Uninstall) (Version: 1.0.4.0 - WildTangent)
WildTangent Games App (x32 Version: 4.0.10.5 - WildTangent) Hidden
WinPcap 4.1.3 (HKLM-x32\...\WinPcapInst) (Version: 4.1.0.2980 - Riverbed Technology, Inc.)
WinRAR 5.01 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.01.0 - win.rar GmbH)
Wireshark 1.10.6 (64-bit) (HKLM-x32\...\Wireshark) (Version: 1.10.6 - The Wireshark developer community, hxxp://www.wireshark.org)
XAMPP 1.5.1 (HKLM-x32\...\xampp) (Version: - )
==================== Restore Points =========================
18-03-2014 17:24:48 Windows Update
21-03-2014 10:00:58 PC Cleaner - Wiederherstellungspunkt vor der Bereinigung
24-03-2014 09:23:35 PC Cleaner - Wiederherstellungspunkt vor der Bereinigung
25-03-2014 19:22:07 PC Cleaner - Restore Point Before Cleaning
27-03-2014 13:57:42 PC Cleaner - Restore Point Before Cleaning
==================== Hosts content: ==========================
2012-07-26 06:26 - 2012-07-26 06:26 - 00000824 ____N C:\Windows\system32\Drivers\etc\hosts
==================== Scheduled Tasks (whitelisted) =============
Task: {0AA9695E-29AC-49B1-B0D1-4151826B2151} - System32\Tasks\Power Management => C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerTray.exe [2013-03-15] (Acer Incorporated)
Task: {13D4F50D-3DA0-46B1-A039-6C7F647B68D4} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-10-31] (Google Inc.)
Task: {1AAFF332-5C62-4558-9991-DAA649C4C9C5} - System32\Tasks\Microsoft\Windows\Sysmain\WsSwapAssessmentTask => Rundll32.exe sysmain.dll,PfSvWsSwapAssessmentTask
Task: {23A5D8BE-9196-40EB-BD89-794398B2B073} - System32\Tasks\Microsoft\Windows\WS\WSRefreshBannedAppsListTask => Rundll32.exe WSClient.dll,RefreshBannedAppsList
Task: {254A7BE0-7A5E-49C3-A6FE-20188980DFAB} - System32\Tasks\ALU => C:\Program Files (x86)\Packard Bell\Live Updater\updater.exe [2013-02-22] ()
Task: {2FF59F85-6FA2-4B78-8E82-C9F13E42613D} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office\Office15\msoia.exe [2012-10-01] (Microsoft Corporation)
Task: {5719976E-8861-4F3F-A822-253590036EC7} - \PC Health Advisor Defrag No Task File
Task: {5A07D794-771B-4DCF-8F32-FA8022A2DDD4} - System32\Tasks\RMAutoUpdate => C:\Program Files (x86)\PC Tools\PC Tools Registry Mechanic\SULauncher.exe [2012-08-21] (PC Tools)
Task: {5BA392E6-B239-4A19-9249-8936111027FB} - \ParetoLogic Update Version3 No Task File
Task: {697BC136-B29B-41F4-B87E-73F0E4C13A59} - System32\Tasks\Microsoft Office 15 Sync Maintenance for Kistler-PC Kistler => C:\Program Files (x86)\Microsoft Office\Office15\MsoSync.exe [2013-11-08] (Microsoft Corporation)
Task: {73E3857B-E9F5-4AE0-A659-65775E04365D} - System32\Tasks\RMSchedule => C:\Program Files (x86)\PC Tools\PC Tools Registry Mechanic\RegMech.exe [2012-08-21] (PC Tools)
Task: {881AE5FA-C852-4926-9E33-4119B8A8D444} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-03-11] (Adobe Systems Incorporated)
Task: {8897BE1A-74A4-4381-9E2B-33ADB439D850} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-10-31] (Google Inc.)
Task: {9581887D-F964-4C15-B6D3-C2BA620CEC9A} - System32\Tasks\ALUAgent => C:\Program Files (x86)\Packard Bell\Live Updater\liveupdater_agent.exe [2013-01-22] ()
Task: {962C7F41-9146-48A8-BC2E-0F8ED1DCA78B} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office\Office15\msoia.exe [2012-10-01] (Microsoft Corporation)
Task: {A72208BF-7A49-4FB8-B684-252375F3443A} - System32\Tasks\Microsoft\Windows\WS\License Validation => Rundll32.exe WSClient.dll,WSpTLR licensing
Task: {AD698376-5BAF-440D-B9F6-6D89DAEE5EE5} - System32\Tasks\Microsoft\Windows\Setup\Pre-staged GDR Notification => C:\Windows\system32\NotificationUI.exe [2013-08-16] (Microsoft Corporation)
Task: {C6A88F2D-53D2-4805-9D69-443738A1847C} - System32\Tasks\Microsoft\Windows\ApplicationData\CleanupTemporaryState => Rundll32.exe Windows.Storage.ApplicationData.dll,CleanupTemporaryState
Task: {C85C631B-6505-45CE-8698-C5A5270D9F4E} - System32\Tasks\AdobeAAMUpdater-1.0-Kistler-PC => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2012-04-04] (Adobe Systems Incorporated)
Task: {D682475A-1203-44A4-8513-11C7F63C7100} - \ParetoLogic Registration3 No Task File
Task: {EADB9535-E090-4658-A0EB-7DC4F7FCD39D} - \PC Health Advisor No Task File
Task: {EBF06DEC-4228-4813-AC0C-62821AE4E330} - System32\Tasks\Microsoft\Windows\Application Experience\StartupAppTask => Rundll32.exe Startupscan.dll,SusRunTask
Task: {F5FAB71A-6A93-4396-B990-ED3CECB22C56} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office15\OLicenseHeartbeat.exe
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\RMAutoUpdate.job => C:\Program Files (x86)\PC Tools\PC Tools Registry Mechanic\SULauncher.exe
Task: C:\Windows\Tasks\RMSchedule.job => C:\Program Files (x86)\PC Tools\PC Tools Registry Mechanic\RegMech.exe
==================== Loaded Modules (whitelisted) =============
2013-12-14 11:02 - 2012-10-04 19:49 - 00087152 _____ () C:\Windows\System32\cpwmon64.dll
2005-11-13 23:15 - 2005-11-13 23:15 - 00529408 _____ () C:\Program Files (x86)\xampp\FileZillaFTP\FileZillaServer.exe
2013-09-10 09:04 - 2013-09-10 09:04 - 12915712 _____ () C:\Program Files\MySQL\MySQL Server 5.6\bin\mysqld.exe
2010-08-11 14:18 - 2010-08-11 14:18 - 00202344 _____ () C:\Program Files\VMLite\VMLite Workstation\VBoxDDU.dll
2010-08-11 14:18 - 2010-08-11 14:18 - 02725480 _____ () C:\Program Files\VMLite\VMLite Workstation\VBoxRT.dll
2009-03-26 22:03 - 2009-03-26 22:03 - 01289728 _____ () C:\Program Files\VMLite\VMLite Workstation\LIBEAY32.dll
2014-03-27 19:51 - 2014-03-19 10:59 - 01380704 _____ () C:\Program Files (x86)\Opera\20.0.1387.82_0\opera_crashreporter.exe
2013-01-28 13:45 - 2013-01-28 13:45 - 00011264 _____ () C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\Modules\ActivateDesktopDebugger\ActivateDesktopDebugger.dll
2013-01-28 13:42 - 2013-01-28 13:42 - 00084992 _____ () C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\Modules\Map\MAP.dll
2013-03-06 05:15 - 2012-10-23 19:37 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll
2013-01-28 13:47 - 2013-01-28 13:47 - 00012928 _____ () C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\ActivateDesktop.exe
2005-07-25 11:11 - 2005-07-25 11:11 - 00077824 _____ () C:\Program Files (x86)\xampp\apache\bin\ZLIB1.dll
2005-11-29 02:18 - 2005-11-29 02:18 - 00225280 _____ () C:\Program Files (x86)\xampp\php\ext\php_ming.dll
2005-12-28 20:22 - 2005-12-28 20:22 - 01302528 _____ () C:\Program Files (x86)\xampp\apache\bin\LIBMYSQL.dll
2005-11-29 02:31 - 2005-11-29 02:31 - 00888832 _____ () C:\Program Files (x86)\xampp\php\ext\php_pdf.dll
2013-06-17 11:35 - 2013-06-17 11:35 - 00478400 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\dblite.dll
2013-05-08 13:52 - 2013-05-08 13:52 - 01270464 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\kpcengine.2.3.dll
2009-02-06 11:05 - 2009-02-06 11:05 - 00060416 _____ () C:\Program Files (x86)\Tenable\Nessus\zlib1.dll
2013-02-26 01:28 - 2013-02-26 01:28 - 01260624 _____ () C:\Program Files (x86)\VMware\VMware Player\libxml2.dll
2014-03-27 19:51 - 2014-03-19 10:59 - 00908640 _____ () C:\Program Files (x86)\Opera\20.0.1387.82_0\libglesv2.dll
2014-03-27 19:51 - 2014-03-19 10:59 - 00108896 _____ () C:\Program Files (x86)\Opera\20.0.1387.82_0\libegl.dll
2014-03-27 19:51 - 2014-03-19 10:59 - 00895328 _____ () C:\Program Files (x86)\Opera\20.0.1387.82_0\ffmpegsumo.dll
2013-05-21 21:32 - 2012-06-25 18:41 - 01198912 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll
2014-01-03 07:59 - 2014-02-10 18:04 - 00430080 _____ () C:\Windows\mod_frst.exe
==================== Alternate Data Streams (whitelisted) =========
AlternateDataStreams: C:\ProgramData\Temp:430C6D84
AlternateDataStreams: C:\ProgramData\Temp:D1B5B4F1
AlternateDataStreams: C:\ProgramData\Temp:DFC5A2B2
==================== Safe Mode (whitelisted) ===================
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CleanHlp => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CleanHlp.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\CleanHlp => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\CleanHlp.sys => ""="Driver"
==================== Disabled items from MSCONFIG ==============
==================== Faulty Device Manager Devices =============
==================== Event log errors: =========================
Application errors:
==================
Error: (03/28/2014 06:57:55 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_418ab7ef718b27ef.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_418ab7ef718b27ef.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_418ab7ef718b27ef.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_418ab7ef718b27ef.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_8937eec6860750f5.manifest.
Error: (03/28/2014 06:57:55 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_418ab7ef718b27ef.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_418ab7ef718b27ef.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_418ab7ef718b27ef.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_418ab7ef718b27ef.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_8937eec6860750f5.manifest.
Error: (03/28/2014 06:57:55 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_418ab7ef718b27ef.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_418ab7ef718b27ef.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_418ab7ef718b27ef.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_418ab7ef718b27ef.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_8937eec6860750f5.manifest.
Error: (03/28/2014 06:57:55 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_418ab7ef718b27ef.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_418ab7ef718b27ef.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_418ab7ef718b27ef.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_418ab7ef718b27ef.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_8937eec6860750f5.manifest.
Error: (03/28/2014 05:17:52 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: Explorer.EXE, Version: 6.2.9200.16628, Zeitstempel: 0x51a94434
Name des fehlerhaften Moduls: SHELL32.dll, Version: 6.2.9200.16774, Zeitstempel: 0x52a2843a
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0000000000004ab9
ID des fehlerhaften Prozesses: 0x1494
Startzeit der fehlerhaften Anwendung: 0xExplorer.EXE0
Pfad der fehlerhaften Anwendung: Explorer.EXE1
Pfad des fehlerhaften Moduls: Explorer.EXE2
Berichtskennung: Explorer.EXE3
Vollständiger Name des fehlerhaften Pakets: Explorer.EXE4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: Explorer.EXE5
Error: (03/28/2014 05:07:13 PM) (Source: Microsoft-Windows-Immersive-Shell) (User: Kistler)
Description: Bei der Aktivierung der App „microsoft.windowscommunicationsapps_8wekyb3d8bbwe!Microsoft.WindowsLive.Mail“ ist folgender Fehler aufgetreten: -2144927142. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.
Error: (03/28/2014 05:07:13 PM) (Source: Microsoft-Windows-Immersive-Shell) (User: Kistler)
Description: Bei der Aktivierung der App „microsoft.windowscommunicationsapps_8wekyb3d8bbwe!Microsoft.WindowsLive.Mail“ ist folgender Fehler aufgetreten: -2144927142. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.
Error: (03/28/2014 05:07:13 PM) (Source: Application Hang) (User: )
Description: Programm LiveComm.exe, Version 17.0.1119.516 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
Prozess-ID: 15bc
Startzeit: 01cf4a9fad40e0ed
Endzeit: 4294967295
Anwendungspfad: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.0.1119.516_x64__8wekyb3d8bbwe\LiveComm.exe
Berichts-ID: 04799a41-b693-11e3-bef2-b6246cb387cb
Vollständiger Name des fehlerhaften Pakets: microsoft.windowscommunicationsapps_17.0.1119.516_x64__8wekyb3d8bbwe
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: Microsoft.WindowsLive.Mail
Error: (03/28/2014 05:07:08 PM) (Source: Microsoft-Windows-Immersive-Shell) (User: Kistler)
Description: Die App „microsoft.windowscommunicationsapps_8wekyb3d8bbwe!Microsoft.WindowsLive.Mail“ wurde nicht innerhalb der vorgesehenen Zeit gestartet.
Error: (03/28/2014 03:56:16 PM) (Source: Microsoft-Windows-Immersive-Shell) (User: Kistler)
Description: Die App „microsoft.windowsphotos_8wekyb3d8bbwe!Microsoft.WindowsLive.ModernPhotos“ wurde nicht innerhalb der vorgesehenen Zeit gestartet.
System errors:
=============
Error: (03/28/2014 08:23:58 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Windows Media Player-Netzwerkfreigabedienst" ist vom Dienst "Windows Search" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
%%1058
Error: (03/28/2014 08:21:38 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "PDF Architect Service" wurde mit folgendem Fehler beendet:
%%2147500037
Error: (03/28/2014 07:54:57 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Windows Media Player-Netzwerkfreigabedienst" ist vom Dienst "Windows Search" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
%%1058
Error: (03/28/2014 07:52:24 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "PDF Architect Service" wurde mit folgendem Fehler beendet:
%%2147500037
Error: (03/28/2014 05:18:52 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Windows Media Player-Netzwerkfreigabedienst" ist vom Dienst "Windows Search" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
%%1058
Error: (03/28/2014 05:16:37 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "PDF Architect Service" wurde mit folgendem Fehler beendet:
%%2147500037
Error: (03/28/2014 05:13:24 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Windows Media Player-Netzwerkfreigabedienst" ist vom Dienst "Windows Search" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
%%1058
Error: (03/28/2014 05:12:50 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst MBAMService erreicht.
Error: (03/28/2014 05:11:09 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "PDF Architect Service" wurde mit folgendem Fehler beendet:
%%2147500037
Error: (03/28/2014 05:06:04 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "PDF Architect Service" wurde mit folgendem Fehler beendet:
%%2147500037
Microsoft Office Sessions:
=========================
Error: (03/28/2014 06:57:55 PM) (Source: SideBySide)(User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_418ab7ef718b27ef.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_8937eec6860750f5.manifestC:\Users\PC\Downloads\esetsmartinstaller_deu.exe
Error: (03/28/2014 06:57:55 PM) (Source: SideBySide)(User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_418ab7ef718b27ef.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_8937eec6860750f5.manifestC:\Users\PC\Downloads\esetsmartinstaller_enu.exe
Error: (03/28/2014 06:57:55 PM) (Source: SideBySide)(User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_418ab7ef718b27ef.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_8937eec6860750f5.manifestC:\Users\PC\Downloads\esetsmartinstaller_enu (1).exe
Error: (03/28/2014 06:57:55 PM) (Source: SideBySide)(User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_418ab7ef718b27ef.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9200.16579_none_8937eec6860750f5.manifestC:\Users\PC\Downloads\esetsmartinstaller_deu (1).exe
Error: (03/28/2014 05:17:52 PM) (Source: Application Error)(User: )
Description: Explorer.EXE6.2.9200.1662851a94434SHELL32.dll6.2.9200.1677452a2843ac00000050000000000004ab9149401cf4aa1243d1c16C:\Windows\Explorer.EXEC:\Windows\system32\SHELL32.dll8278f42b-b694-11e3-bef4-24fd52199e86
Error: (03/28/2014 05:07:13 PM) (Source: Microsoft-Windows-Immersive-Shell)(User: Kistler)
Description: microsoft.windowscommunicationsapps_8wekyb3d8bbwe!Microsoft.WindowsLive.Mail-2144927142
Error: (03/28/2014 05:07:13 PM) (Source: Microsoft-Windows-Immersive-Shell)(User: Kistler)
Description: microsoft.windowscommunicationsapps_8wekyb3d8bbwe!Microsoft.WindowsLive.Mail-2144927142
Error: (03/28/2014 05:07:13 PM) (Source: Application Hang)(User: )
Description: LiveComm.exe17.0.1119.51615bc01cf4a9fad40e0ed4294967295C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.0.1119.516_x64__8wekyb3d8bbwe\LiveComm.exe04799a41-b693-11e3-bef2-b6246cb387cbmicrosoft.windowscommunicationsapps_17.0.1119.516_x64__8wekyb3d8bbweMicrosoft.WindowsLive.Mail
Error: (03/28/2014 05:07:08 PM) (Source: Microsoft-Windows-Immersive-Shell)(User: Kistler)
Description: microsoft.windowscommunicationsapps_8wekyb3d8bbwe!Microsoft.WindowsLive.Mail
Error: (03/28/2014 03:56:16 PM) (Source: Microsoft-Windows-Immersive-Shell)(User: Kistler)
Description: microsoft.windowsphotos_8wekyb3d8bbwe!Microsoft.WindowsLive.ModernPhotos
==================== Memory info ===========================
Percentage of memory in use: 40%
Total physical RAM: 8007.27 MB
Available physical RAM: 4761.73 MB
Total Pagefile: 9223.27 MB
Available Pagefile: 4877.62 MB
Total Virtual: 8192 MB
Available Virtual: 8191.83 MB
==================== Drives ================================
Drive c: (Packard Bell) (Fixed) (Total:449.19 GB) (Free:232.44 GB) NTFS
Drive e: (IPFire_2.13) (CDROM) (Total:0.1 GB) (Free:0 GB) CDFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (Size: 466 GB) (Disk ID: 5FD80055)
Partition: GPT Partition Type.
==================== End Of Log ============================
Geändert von Ronan (28.03.2014 um 21:08 Uhr) |
|
28.03.2014, 21:20
| #2 |
  |  Entfernen Rvzr-a.akamaihd.net wegen Pop ups und grüne doppelbalken mit pop up beim scrollen Hallo, Ronan und
__________________ Kannst du mir bitte auch die FRST.txt und die Logs von Malwarebytes, AdwCleaner, Junkware Removal Tool und ESET geben? |
|
28.03.2014, 21:32
| #3 |
| | Entfernen Rvzr-a.akamaihd.net wegen Pop ups und grüne doppelbalken mit pop up beim scrollen Hallo
__________________das ging schnell-muss das nochmals laufen lassen...hab sonst nichts mehr vor...bitte ein wenig Geduld.. FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 13-03-2014 Ran by PC (administrator) on KISTLER on 28-03-2014 21:30:42 Running from C:\Users\PC\Desktop Windows 8 (X64) OS Language: German Standard Internet Explorer Version 10 Boot Mode: Normal The only official download link for FRST: Download link for 32-Bit version: Downloading Farbar Recovery Scan Tool Download link for 64-Bit Version: Downloading Farbar Recovery Scan Tool Download link from any site other than Bleeping Computer is unpermitted or outdated. See tutorial for FRST: FRST Tutorial - How to use Farbar Recovery Scan Tool - Malware Removal Guides and Tutorials ==================== Processes (Whitelisted) ================= (IvoSoft) C:\Program Files\Classic Shell\ClassicShellService.exe (Apache Software Foundation) C:\Program Files (x86)\xampp\apache\bin\apache.exe (Qualcomm Atheros Commnucations) C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\adminservice.exe (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\avp.exe (Broadcom Corp.) C:\Program Files\Broadcom\MemoryCard\BrcmCardReader.exe (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\dsiwmis.exe (Microsoft Corporation) C:\Windows\system32\dashost.exe (ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDService.exe () C:\Program Files (x86)\xampp\FileZillaFTP\FileZillaServer.exe (Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe (Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe (Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe (Apache Software Foundation) C:\Program Files (x86)\xampp\apache\bin\apache.exe () C:\Program Files\MySQL\MySQL Server 5.6\bin\mysqld.exe (PC Tools) C:\Program Files (x86)\Common Files\PC Tools\sMonitor\StartManSvc.exe (IvoSoft) C:\Program Files\Classic Shell\ClassicStartMenu.exe (ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe (pdfforge GmbH) C:\Program Files (x86)\PDF Architect\HelperService.exe (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LMutilps32.exe (Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbam.exe (Dritek System INC.) C:\Windows\RfBtnSvc64.exe (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LManager.exe (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe (Tenable Network Security, Inc) C:\Program Files (x86)\Tenable\Nessus\nessus-service.exe (Tenable Network Security, Inc) C:\Program Files (x86)\Tenable\Nessus\nessusd.exe (VMLite, Inc.) C:\Program Files\VMLite\VMLite Workstation\VMLiteService.exe (VMware, Inc.) C:\Windows\SysWOW64\vmnat.exe (VMware, Inc.) C:\Windows\SysWOW64\vmnetdhcp.exe (VMware, Inc.) C:\Program Files (x86)\VMware\VMware Player\vmware-authd.exe (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer.exe (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\MMDx64Fx.exe (Acer Incorporated) C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerTray.exe (Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.0.1119.516_x64__8wekyb3d8bbwe\LiveComm.exe (Intel Corporation) C:\Windows\system32\igfxext.exe (Intel Corporation) C:\Windows\system32\igfxsrvc.exe (ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe (Opera Software) C:\Program Files (x86)\Opera\20.0.1387.82_0\opera.exe () C:\Program Files (x86)\Opera\20.0.1387.82_0\opera_crashreporter.exe (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\tv_w32.exe (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\tv_x64.exe (Acer Incorporated) C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerSvc.exe (Atheros Communications) C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtvStack.exe (Intel Corporation) C:\Windows\System32\igfxtray.exe (Intel Corporation) C:\Windows\System32\hkcmd.exe (Intel Corporation) C:\Windows\System32\igfxpers.exe () C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\ActivateDesktop.exe (Opera Software) C:\Program Files (x86)\Opera\20.0.1387.82_0\opera.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\avpui.exe (Dritek System Inc.) C:\Program Files (x86)\RadioController\RfBtnHelper.exe (PC Tools) C:\Program Files (x86)\Common Files\PC Tools\sMonitor\SSDMonitor.exe (Opera Software) C:\Program Files (x86)\Opera\20.0.1387.82_0\opera.exe (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (Opera Software) C:\Program Files (x86)\Opera\20.0.1387.82_0\opera.exe (Opera Software) C:\Program Files (x86)\Opera\20.0.1387.82_0\opera.exe (Opera Software) C:\Program Files (x86)\Opera\20.0.1387.82_0\opera.exe (Opera Software) C:\Program Files (x86)\Opera\20.0.1387.82_0\opera.exe (Opera Software) C:\Program Files (x86)\Opera\20.0.1387.82_0\opera.exe (Opera Software) C:\Program Files (x86)\Opera\20.0.1387.82_0\opera.exe (Opera Software) C:\Program Files (x86)\Opera\20.0.1387.82_0\opera.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (Opera Software) C:\Program Files (x86)\Opera\20.0.1387.82_0\opera.exe (Opera Software) C:\Program Files (x86)\Opera\20.0.1387.82_0\opera.exe (Opera Software) C:\Program Files (x86)\Opera\20.0.1387.82_0\opera.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [ETDCtrl] - C:\Program Files\Elantech\ETDCtrl.exe [2873744 2012-11-20] (ELAN Microelectronics Corp.) HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12503184 2012-06-11] (Realtek Semiconductor) HKLM\...\Run: [Logitech Download Assistant] - C:\Windows\System32\LogiLDA.dll [3933496 2012-09-20] (Logitech, Inc.) HKLM\...\Run: [AdobeAAMUpdater-1.0] - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [446392 2012-04-04] (Adobe Systems Incorporated) HKLM-x32\...\Run: [RadioController] - C:\Program Files (x86)\RadioController\RfBtnHelper.exe [111216 2013-05-21] (Dritek System Inc.) HKLM-x32\...\Run: [SSDMonitor] - C:\Program Files (x86)\Common Files\PC Tools\sMonitor\SSDMonitor.exe [105120 2012-08-21] (PC Tools) HKLM-x32\...\Run: [AdobeCS6ServiceManager] - C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1073312 2012-03-09] (Adobe Systems Incorporated) HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation) Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation) HKLM\...\Policies\Explorer\Run: [BtvStack] - C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtvStack.exe [132736 2013-01-28] ( (Atheros Communications)) HKU\S-1-5-21-3751542578-3293368922-2753858418-1001\...\Run: [swg] - C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2013-11-30] (Google Inc.) HKU\S-1-5-21-3751542578-3293368922-2753858418-1001\...\Run: [DAEMON Tools Lite] - C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3675352 2013-10-28] (Disc Soft Ltd) HKU\S-1-5-21-3751542578-3293368922-2753858418-1001\...\RunOnce: [Application Restart #1] - C:\Users\PC\AppData\Local\Pokki\Engine\pokki.exe --disable-internal-flash --noerrdialogs --no-message-box --disable-extensions --disable-web-security --disable-web-resources --disable-client-side-phishing-detection --enable-file-cookies --disable-sync --disable-breakpad --disable-bundled-ppapi-flash --disable-sync-tabs --disable-speech-input --disable-custom-jumplist --process-per-tab --debug-devtools-frontend="C:\Users\PC\AppData\Local\Pokki\Engine\inspector" --no-first-run --lang=en-US --disable-component-update --disable-prompt-on-repost --no-startup-window --disable-translate --disable-logging --disable-desktop-notifications --disable-gpu-process-prelaunch --flag-switches-begin --flag-switches-end --restore-last-session HKU\S-1-5-21-3751542578-3293368922-2753858418-1001\...\MountPoints2: E - "E:\LaunchU3.exe" -a HKU\S-1-5-21-3751542578-3293368922-2753858418-1001\...\MountPoints2: {27f172d8-ac2b-11e3-bed4-ff8fd3873c86} - "G:\LaunchU3.exe" -a HKU\S-1-5-21-3751542578-3293368922-2753858418-1001\...\MountPoints2: {70ff6613-a514-11e3-becf-24fd52199e86} - "E:\LaunchU3.exe" -a HKU\S-1-5-21-3751542578-3293368922-2753858418-1001\...\MountPoints2: {8f908f8c-5399-11e3-beac-20898483e6bc} - "E:\LaunchU3.exe" -a ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN Deutschland: Aktuelle Nachrichten, Outlook.com Email und Skype Login. SearchScopes: HKLM - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKLM - {AA9A4890-4262-4441-8977-E2FFCBFB706C} URL = hxxp://ch.yhs4.search.yahoo.com/yhs/search?hspart=acer&hsimp=yhs-acer_001&p={searchTerms} SearchScopes: HKLM - {AC251AE8-941D-4772-8042-2B930CB6ECE3} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MAPBJS SearchScopes: HKLM-x32 - {AA9A4890-4262-4441-8977-E2FFCBFB706C} URL = hxxp://ch.yhs4.search.yahoo.com/yhs/search?hspart=acer&hsimp=yhs-acer_001&p={searchTerms} SearchScopes: HKLM-x32 - {AC251AE8-941D-4772-8042-2B930CB6ECE3} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MAPBJS SearchScopes: HKCU - URL hxxp://www.trovigo.com/Results.aspx?gd=&ctid=CT3324416&octid=EB_ORIGINAL_CTID&SearchSource=58&CUI=&UM=5&UP=SP9F6479D8-98BB-4B36-975E-B0811D346762&q={searchTerms}&SSPV= SearchScopes: HKCU - SuggestionsURL_JSON hxxp://suggest.search.conduit.com/CSuggestJson.ashx?prefix={searchTerms} SearchScopes: HKCU - {AA9A4890-4262-4441-8977-E2FFCBFB706C} URL = hxxp://ch.yhs4.search.yahoo.com/yhs/search?hspart=acer&hsimp=yhs-acer_001&p={searchTerms} SearchScopes: HKCU - {AC251AE8-941D-4772-8042-2B930CB6ECE3} URL = BHO: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation) BHO: ExplorerBHO Class - {449D0D6E-2412-4E61-B68F-1CB625CD9E52} - C:\Program Files\Classic Shell\ClassicExplorer64.dll (IvoSoft) BHO: Content Blocker Plugin - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\x64\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO) BHO: Virtual Keyboard Plugin - {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\x64\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO) BHO: CIESpeechBHO Class - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\IEPlugIn.dll (Qualcomm Atheros Commnucations) BHO: Safe Money Plugin - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\x64\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO) BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.) BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation) BHO: URL Advisor Plugin - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\x64\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO) BHO: ClassicIE9BHO Class - {EA801577-E6AD-4BD5-8F71-4BE0154331A4} - C:\Program Files\Classic Shell\ClassicIE9DLL_64.dll (IvoSoft) BHO-x32: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation) BHO-x32: PDF Architect Helper - {3A2D5EBA-F86D-4BD3-A177-019765996711} - C:\Program Files (x86)\PDF Architect\PDFIEHelper.dll (pdfforge GmbH) BHO-x32: ExplorerBHO Class - {449D0D6E-2412-4E61-B68F-1CB625CD9E52} - C:\Program Files\Classic Shell\ClassicExplorer32.dll (IvoSoft) BHO-x32: Content Blocker Plugin - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO) BHO-x32: Virtual Keyboard Plugin - {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO) BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO-x32: Safe Money Plugin - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO) BHO-x32: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.) BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) BHO-x32: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) BHO-x32: URL Advisor Plugin - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO) BHO-x32: ClassicIE9BHO Class - {EA801577-E6AD-4BD5-8F71-4BE0154331A4} - C:\Program Files\Classic Shell\ClassicIE9DLL_32.dll (IvoSoft) Toolbar: HKLM - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer64.dll (IvoSoft) Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.) Toolbar: HKLM-x32 - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer32.dll (IvoSoft) Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.) Toolbar: HKCU - No Name - {472734EA-242A-422B-ADF8-83D1E48CC825} - No File Toolbar: HKCU - Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.) DPF: HKLM-x32 {17492023-C23A-453E-A040-C7C580BBF700} hxxp://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab Tcpip\Parameters: [DhcpNameServer] 62.2.24.162 62.2.17.61 62.2.24.158 62.2.17.60 Tcpip\..\Interfaces\{52D9687F-A6D2-4457-A7C6-70F448192C7B}: [NameServer]8.8.8.8,8.8.4.4,4.2.2.1,4.2.2.2,208.67.222.222,208.67.220.220,8.26.56.26,8.20.247.20,156.154.70.1,156.154.71.1 Tcpip\..\Interfaces\{9B073C18-34FF-4FB1-B731-7BB2C6F0BD57}: [NameServer]8.8.8.8,8.8.4.4,4.2.2.1,4.2.2.2,208.67.222.222,208.67.220.220,8.26.56.26,8.20.247.20,156.154.70.1,156.154.71.1 Chrome: ======= CHR Extension: (Kaspersky Protection) - C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\blbkdnmdcafmfhinpmnlhhddbepgkeaa [2014-03-27] CHR Extension: (Modul zur Link-Untersuchung) - C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\dchlnpcodkpfdpacogkljefecpegganj [2013-10-31] CHR Extension: (Modul zum Sperren von gefährlichen Webseiten) - C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\hghkgaeecgjhjkannahfamoehjmkjail [2013-10-31] CHR Extension: (Virtual Keyboard) - C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\jagncdcchgajhfhijbbhecadmaiegcmh [2013-10-31] CHR Extension: (Google Wallet) - C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-10-31] CHR HKLM-x32\...\Chrome\Extension: [blbkdnmdcafmfhinpmnlhhddbepgkeaa] - https://chrome.google.com/webstore/detail/blbkdnmdcafmfhinpmnlhhddbepgkeaa [2013-10-31] CHR HKLM-x32\...\Chrome\Extension: [dchlnpcodkpfdpacogkljefecpegganj] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\ChromeExt\urladvisor.crx [2013-06-28] CHR HKLM-x32\...\Chrome\Extension: [hghkgaeecgjhjkannahfamoehjmkjail] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\ChromeExt\content_blocker_chrome.crx [2013-06-28] CHR HKLM-x32\...\Chrome\Extension: [jagncdcchgajhfhijbbhecadmaiegcmh] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\ChromeExt\virtkbd.crx [2014-03-21] ==================== Services (Whitelisted) ================= R2 Apache2; C:\Program Files (x86)\xampp\apache\bin\apache.exe [20537 2005-12-01] (Apache Software Foundation) R2 AtherosSvc; C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\adminservice.exe [227456 2013-01-28] (Qualcomm Atheros Commnucations) R2 AVP; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\avp.exe [214512 2013-10-01] (Kaspersky Lab ZAO) R2 BrcmCardReader; C:\Program Files\Broadcom\MemoryCard\BrcmCardReader.exe [176640 2012-08-21] (Broadcom Corp.) R2 ClassicShellService; C:\Program Files\Classic Shell\ClassicShellService.exe [68608 2013-06-29] (IvoSoft) S3 DeviceFastLaneService; C:\Program Files\Packard Bell\Packard Bell Device Fast-lane\DeviceFastLaneSvc.exe [469648 2012-11-16] (Acer Incorporated) R3 ePowerSvc; C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerSvc.exe [662088 2013-03-15] (Acer Incorporated) R2 ETDService; C:\Program Files\Elantech\ETDService.exe [100752 2012-11-20] (ELAN Microelectronics Corp.) R2 FileZilla Server; C:\Program Files (x86)\xampp\FileZillaFTP\FileZillaServer.exe [529408 2005-11-13] () R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [165760 2012-07-18] (Intel Corporation) R2 MBAMScheduler; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe [1809720 2014-03-05] (Malwarebytes Corporation) R2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [857912 2014-03-05] (Malwarebytes Corporation) R2 MySQL56; C:\ProgramData\MySQL\MySQL Server 5.6\my.ini [14244 2013-10-09] () R2 PCToolsSSDMonitorSvc; C:\Program Files (x86)\Common Files\PC Tools\sMonitor\StartManSvc.exe [794272 2012-08-21] (PC Tools) R2 PDF Architect Helper Service; C:\Program Files (x86)\PDF Architect\HelperService.exe [1320496 2013-04-08] (pdfforge GmbH) S2 PDF Architect Service; C:\Program Files (x86)\PDF Architect\ConversionService.exe [799280 2013-04-08] (pdfforge GmbH) R2 RfButtonDriverService; C:\Windows\RfBtnSvc64.exe [96880 2013-05-21] (Dritek System INC.) S3 rpcapd; C:\Program Files (x86)\WinPcap\rpcapd.exe [118520 2013-03-01] (Riverbed Technology, Inc.) R2 Tenable Nessus; C:\Program Files (x86)\Tenable\Nessus\nessus-service.exe [10240 2010-02-17] (Tenable Network Security, Inc) R2 VMLiteService; C:\Program Files\VMLite\VMLite Workstation\VMLiteService.exe [426600 2010-08-21] (VMLite, Inc.) S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [16048 2013-10-25] (Microsoft Corporation) ==================== Drivers (Whitelisted) ==================== S3 dot4; C:\Windows\system32\DRIVERS\Dot4.sys [151968 2012-10-19] (Windows (R) Win 7 DDK provider) S3 Dot4Print; C:\Windows\System32\drivers\Dot4Prt.sys [27040 2012-10-19] (Windows (R) Win 7 DDK provider) R1 dtsoftbus01; C:\Windows\System32\drivers\dtsoftbus01.sys [283064 2014-03-06] (Disc Soft Ltd) R0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [458336 2013-11-09] (Kaspersky Lab ZAO) S0 klelam; C:\Windows\System32\DRIVERS\klelam.sys [29792 2013-12-19] (Kaspersky Lab) S4 klflt; C:\Windows\System32\DRIVERS\klflt.sys [115296 2014-03-21] (Kaspersky Lab ZAO) R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [625760 2014-03-21] (Kaspersky Lab ZAO) R1 KLIM6; C:\Windows\system32\DRIVERS\klim6.sys [30304 2013-10-01] (Kaspersky Lab ZAO) R3 klkbdflt; C:\Windows\system32\DRIVERS\klkbdflt.sys [29280 2014-02-17] (Kaspersky Lab ZAO) R3 klmouflt; C:\Windows\system32\DRIVERS\klmouflt.sys [29280 2013-10-01] (Kaspersky Lab ZAO) R1 klpd; C:\Windows\system32\DRIVERS\klpd.sys [15456 2013-04-12] (Kaspersky Lab ZAO) R1 klwfp; C:\Windows\system32\DRIVERS\klwfp.sys [65120 2014-03-21] (Kaspersky Lab ZAO) R1 kneps; C:\Windows\system32\DRIVERS\kneps.sys [178272 2013-12-19] (Kaspersky Lab ZAO) R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-03-05] (Malwarebytes Corporation) R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [119512 2014-03-28] (Malwarebytes Corporation) R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63192 2014-03-05] (Malwarebytes Corporation) R2 NPF; C:\Windows\System32\drivers\npf.sys [36600 2013-03-01] (Riverbed Technology, Inc.) R3 Ps2Kb2Hid; C:\Windows\System32\drivers\aPs2Kb2Hid.sys [26736 2013-05-21] (Dritek System Inc.) R1 VBoxDrv; C:\Windows\System32\drivers\VBoxDrv.sys [204328 2010-08-11] (VMLite, Inc.) R3 VBoxNetAdp; C:\Windows\system32\DRIVERS\VBoxNetAdp.sys [146216 2010-08-11] (VMLite, Inc.) R3 VBoxNetFlt; C:\Windows\system32\DRIVERS\VBoxNetFlt.sys [165800 2010-08-11] (VMLite, Inc.) R3 vmkbd2; C:\Windows\system32\drivers\VMkbd.sys [33360 2013-02-26] (VMware, Inc.) R1 vmlitedrv; C:\Windows\System32\drivers\vmlitedrv.sys [14952 2010-08-03] (VMLite, Inc.) R3 vmlitestor; C:\Windows\system32\DRIVERS\vmlitestor.sys [177768 2010-08-11] (VMLite, Inc.) S3 VMLiteUSB; C:\Windows\System32\Drivers\VMLiteUSB.sys [150120 2010-08-11] (VMLite, Inc.) R1 VMLiteUSBMon; C:\Windows\System32\drivers\vmliteusbmon.sys [135272 2010-08-18] (VMLite, Inc.) R0 vsock; C:\Windows\System32\drivers\vsock.sys [70296 2012-10-24] (VMware, Inc.) S3 WUDFWpdComp; C:\Windows\system32\DRIVERS\WUDFRd.sys [198656 2012-07-26] (Microsoft Corporation) S3 cleanhlp; \??\C:\Program Files (x86)\Emsisoft Anti-Malware\cleanhlp64.sys [X] S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [X] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-03-28 21:30 - 2014-03-28 21:30 - 00022838 _____ () C:\Users\PC\Desktop\FRST.txt 2014-03-28 20:55 - 2014-03-28 20:56 - 00054887 _____ () C:\Users\PC\Desktop\Addition.txt 2014-03-28 20:24 - 2014-03-28 20:20 - 00050477 _____ () C:\Users\PC\Desktop\Defogger (1).exe 2014-03-28 20:20 - 2014-03-28 20:20 - 00050477 _____ () C:\Users\PC\Downloads\Defogger.exe 2014-03-28 20:20 - 2014-03-28 20:20 - 00050477 _____ () C:\Users\PC\Downloads\Defogger (1).exe 2014-03-28 20:20 - 2014-03-28 20:20 - 00000536 _____ () C:\Users\PC\Downloads\defogger_disable.log 2014-03-28 20:20 - 2014-03-28 20:20 - 00000338 _____ () C:\Users\PC\Downloads\defogger_enable.log 2014-03-28 19:49 - 2014-03-26 15:58 - 01950720 _____ () C:\Users\PC\Desktop\adwcleaner_3.022 (3).exe 2014-03-28 19:21 - 2014-03-28 19:53 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\36710840.sys 2014-03-28 19:20 - 2014-03-28 19:20 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\15E8686E.sys 2014-03-28 19:13 - 2014-03-28 19:07 - 02157056 _____ (Farbar) C:\Users\PC\Desktop\FRST64.exe 2014-03-28 19:07 - 2014-03-28 20:56 - 00000000 ____D () C:\FRST 2014-03-28 19:07 - 2014-03-28 19:07 - 02157056 _____ (Farbar) C:\Users\PC\Downloads\FRST64.exe 2014-03-28 19:00 - 2014-03-28 19:00 - 00058082 _____ () C:\Windows\SysWOW64\AppLog.log 2014-03-28 16:24 - 2014-03-28 16:24 - 00000968 _____ () C:\Windows\PFRO.log 2014-03-28 11:34 - 2014-03-28 11:34 - 00000017 _____ () C:\Users\PC\AppData\Local\resmon.resmoncfg 2014-03-28 10:58 - 2014-03-28 10:58 - 00002120 _____ () C:\Users\PC\Documents\bookmark.htm 2014-03-27 20:35 - 2014-03-28 18:52 - 00294481 _____ () C:\Windows\WindowsUpdate.log 2014-03-27 20:35 - 2014-03-27 20:35 - 76353536 _____ () C:\Windows\system32\config\software.rrr 2014-03-27 20:35 - 2014-03-27 20:35 - 03690496 _____ () C:\Users\PC\s-1-5-21-3751542578-3293368922-2753858418-1001.rrr 2014-03-27 20:35 - 2014-03-27 20:35 - 00221184 _____ () C:\Windows\system32\config\default.rrr 2014-03-27 20:35 - 2014-03-27 20:35 - 00008192 _____ () C:\Users\Gast\s-1-5-21-3751542578-3293368922-2753858418-501.rrr 2014-03-27 20:05 - 2014-03-27 20:05 - 00000000 ____D () C:\Windows\ERUNT 2014-03-27 20:02 - 2014-03-27 20:02 - 01037734 _____ (Thisisu) C:\Users\PC\Downloads\JRT_6.1.2.exe 2014-03-27 20:02 - 2014-03-23 22:41 - 01038974 _____ (Thisisu) C:\Users\PC\Desktop\JRT_NEW.exe 2014-03-27 19:51 - 2014-03-27 19:51 - 00001145 _____ () C:\Users\Public\Desktop\Opera.lnk 2014-03-27 19:50 - 2014-03-27 19:51 - 34734328 _____ (Opera Software ASA) C:\Users\PC\Downloads\Opera_20.0.1387.82_Setup.exe 2014-03-27 19:30 - 2014-03-27 20:27 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\48230029.sys 2014-03-27 14:03 - 2014-03-27 14:03 - 00000000 ____D () C:\Users\PC\Downloads\SpybotPortable 2014-03-27 14:02 - 2014-03-27 14:03 - 57330680 _____ (PortableApps.com) C:\Users\PC\Downloads\SpybotPortable_2.2.paf.exe 2014-03-27 09:45 - 2014-03-27 09:45 - 00000000 ____D () C:\Program Files (x86)\ENIGMA 2014-03-27 09:45 - 1997-01-16 00:00 - 00071680 _____ (Microsoft Corporation) C:\Windows\ST5UNST.EXE 2014-03-27 09:43 - 2014-03-27 09:44 - 00005685 _____ () C:\ST5UNST.LOG 2014-03-27 09:43 - 2005-05-13 17:18 - 00042914 _____ () C:\Enigma.hlp 2014-03-27 09:43 - 2005-05-13 17:16 - 01893888 _____ () C:\ENIGMA.exe 2014-03-27 09:43 - 2005-05-13 16:48 - 00003935 _____ () C:\Readme.txt 2014-03-27 09:43 - 2000-05-22 00:00 - 00140488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\COMDLG32.OCX 2014-03-27 09:43 - 1998-06-05 23:32 - 01355776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSVBVM50.dll 2014-03-27 09:43 - 1997-01-16 00:00 - 00029696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\VB5StKit.dll 2014-03-27 08:52 - 2014-03-27 11:04 - 00000000 ____D () C:\Program Files (x86)\CrypTool 2014-03-27 08:52 - 2014-03-27 08:52 - 00000000 ____D () C:\Users\PC\AppData\Roaming\CrypTool 2014-03-27 08:50 - 2014-03-27 08:51 - 67554681 _____ () C:\Users\PC\Downloads\SetupCrypTool_1_4_31_Beta6b_r3670_VS2008_de.exe 2014-03-26 19:24 - 2014-03-26 19:24 - 00316092 _____ () C:\Users\PC\Downloads\WG Physik.zip 2014-03-26 15:57 - 2014-03-26 15:58 - 01950720 _____ () C:\Users\PC\Downloads\adwcleaner_3.022 (3).exe 2014-03-26 15:49 - 2014-03-26 15:49 - 01950720 _____ () C:\Users\PC\Downloads\adwcleaner_3.022 (2).exe 2014-03-26 15:12 - 2014-03-26 15:33 - 00000000 ____D () C:\Users\PC\AppData\Roaming\Nico Mak Computing 2014-03-26 15:12 - 2014-03-26 15:12 - 04892480 _____ (WinZip International LLC ) C:\Users\PC\Downloads\wzmp_8 (1).exe 2014-03-26 15:10 - 2014-03-26 15:10 - 00001134 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2014-03-26 15:10 - 2014-03-26 15:10 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 2014-03-26 15:10 - 2014-03-05 09:26 - 00088280 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys 2014-03-26 15:10 - 2014-03-05 09:26 - 00063192 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys 2014-03-26 15:10 - 2014-03-05 09:26 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys 2014-03-26 15:09 - 2014-03-26 15:09 - 17523384 _____ (Malwarebytes Corporation ) C:\Users\PC\Downloads\mbam-setup-2.0.0.1000 (3).exe 2014-03-26 15:09 - 2014-03-26 15:09 - 17523384 _____ (Malwarebytes Corporation ) C:\Users\PC\Downloads\mbam-setup-2.0.0.1000 (2).exe 2014-03-26 13:47 - 2014-03-26 13:47 - 00000000 _____ () C:\autoexec.bat 2014-03-26 13:46 - 2014-03-26 14:33 - 00000000 ____D () C:\Windows\ACF5FE1B377240688B872D2A6EFD0A05.TMP 2014-03-26 13:46 - 2014-03-26 13:46 - 00000000 ____D () C:\Program Files\Enigma Software Group 2014-03-26 13:46 - 2012-06-22 11:01 - 00022704 ____N () C:\Windows\system32\Drivers\EsgScanner.sys 2014-03-26 13:32 - 2014-03-26 13:32 - 01950720 _____ () C:\Users\PC\Downloads\adwcleaner_3.022 (1).exe 2014-03-26 12:58 - 2014-03-28 20:22 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2014-03-26 12:58 - 2014-03-26 12:58 - 17523384 _____ (Malwarebytes Corporation ) C:\Users\PC\Downloads\mbam-setup-2.0.0.1000.exe 2014-03-26 12:58 - 2014-03-26 12:58 - 17523384 _____ (Malwarebytes Corporation ) C:\Users\PC\Downloads\mbam-setup-2.0.0.1000 (1).exe 2014-03-25 20:14 - 2014-03-25 20:14 - 00000500 _____ () C:\EamClean.log 2014-03-25 17:02 - 2014-03-26 12:36 - 00000000 ____D () C:\Users\PC\Documents\Anti-Malware 2014-03-25 17:02 - 2014-03-26 12:36 - 00000000 ____D () C:\Program Files (x86)\Emsisoft Anti-Malware 2014-03-25 15:55 - 2014-03-25 15:55 - 00000000 ____D () C:\Users\PC\AppData\Local\Norman Malware Cleaner 2014-03-25 15:50 - 2014-03-25 15:52 - 312761032 _____ (Norman Shark AS) C:\Users\PC\Downloads\Norman_Malware208_Cleaner.exe 2014-03-24 15:39 - 2014-03-24 15:39 - 00000000 ____D () C:\Users\Public\Documents\sun 2014-03-24 15:22 - 2014-03-24 15:22 - 04892480 _____ (WinZip International LLC ) C:\Users\PC\Downloads\wzmp_8.exe 2014-03-24 11:18 - 2014-03-24 11:18 - 02347384 _____ (ESET) C:\Users\PC\Downloads\esetsmartinstaller_deu.exe 2014-03-24 11:18 - 2014-03-24 11:18 - 02347384 _____ (ESET) C:\Users\PC\Downloads\esetsmartinstaller_deu (1).exe 2014-03-24 10:55 - 2014-03-28 19:54 - 00000000 ____D () C:\AdwCleaner 2014-03-24 10:55 - 2014-03-24 10:55 - 01950720 _____ () C:\Users\PC\Downloads\adwcleaner_3.022.exe 2014-03-24 09:35 - 2014-03-24 09:35 - 02347384 _____ (ESET) C:\Users\PC\Downloads\esetsmartinstaller_enu (1).exe 2014-03-22 18:16 - 2014-03-22 18:16 - 02347384 _____ (ESET) C:\Users\PC\Downloads\esetsmartinstaller_enu.exe 2014-03-22 18:16 - 2014-03-22 18:16 - 00000000 ____D () C:\Program Files (x86)\ESET 2014-03-22 17:25 - 2014-03-26 12:38 - 00000000 ____D () C:\Program Files (x86)\Advanced Disk Recovery 2014-03-21 23:58 - 2014-03-21 23:58 - 00000000 ____D () C:\Users\PC\AppData\Local\PDFCreator 2014-03-21 20:18 - 2014-03-21 20:17 - 00625760 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klif.sys 2014-03-21 20:18 - 2014-03-21 20:17 - 00115296 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klflt.sys 2014-03-21 20:18 - 2014-03-21 20:17 - 00065120 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klwfp.sys 2014-03-21 20:12 - 2014-03-21 20:12 - 01330072 _____ (CodecPerformer) C:\Users\PC\Downloads\CodecPerformerSetup (1).exe 2014-03-21 20:11 - 2014-03-21 20:11 - 01330072 _____ (CodecPerformer) C:\Users\PC\Downloads\CodecPerformerSetup.exe 2014-03-21 13:42 - 2014-03-21 19:53 - 00000000 ___DC () C:\Users\PC\AppData\Local\MigWiz 2014-03-21 11:23 - 2014-03-21 11:28 - 00000000 ____D () C:\Neuer Ordner (2) 2014-03-21 11:08 - 2014-03-27 20:35 - 00000000 ____D () C:\Users\Gast 2014-03-21 11:08 - 2014-03-21 11:08 - 00000000 ____D () C:\Program Files\Wireshark 2014-03-21 11:07 - 2014-03-21 11:07 - 00001112 _____ () C:\Users\Public\Desktop\OpenOffice 4.0.1.lnk 2014-03-21 10:44 - 2014-03-21 10:44 - 00450986 _____ () C:\Users\PC\Downloads\Zeugnis.zip 2014-03-21 10:41 - 2014-03-21 10:41 - 00254976 _____ () C:\Users\PC\Downloads\M124 Teil C HandOut (1).ppt 2014-03-21 10:41 - 2014-03-21 10:41 - 00236032 _____ () C:\Users\PC\Downloads\M124 Teil C HandOut.ppt 2014-03-21 10:38 - 2014-03-21 10:38 - 00410898 _____ () C:\Users\PC\Downloads\TB124_pdfs_11_15.rar 2014-03-20 11:27 - 2014-03-20 11:27 - 00695648 _____ () C:\Users\PC\Downloads\lmc-1.2.35-win32-Downloader (2).exe 2014-03-20 11:27 - 2014-03-20 11:27 - 00695648 _____ () C:\Users\PC\Downloads\lmc-1.2.35-win32-Downloader (1).exe 2014-03-20 11:25 - 2014-03-20 11:25 - 00695648 _____ () C:\Users\PC\Downloads\lmc-1.2.35-win32-Downloader.exe 2014-03-19 11:43 - 2014-03-19 11:43 - 01955184 _____ (Acro Software Inc. ) C:\Users\PC\Downloads\CuteWriter.exe 2014-03-19 11:43 - 2014-03-19 11:43 - 01955184 _____ (Acro Software Inc. ) C:\Users\PC\Downloads\CuteWriter (1).exe 2014-03-19 11:33 - 2014-03-19 11:33 - 00001017 _____ () C:\Users\PC\Desktop\PDF Architect.lnk 2014-03-19 11:32 - 2014-03-19 11:32 - 00000852 _____ () C:\Users\Public\Desktop\PDFCreator.lnk 2014-03-19 11:32 - 2014-03-19 11:32 - 00000000 ____D () C:\Users\PC\Documents\PDF Architect Files 2014-03-19 11:32 - 2014-03-19 11:32 - 00000000 ____D () C:\Program Files\PDFCreator 2014-03-19 11:32 - 2014-03-19 11:32 - 00000000 ____D () C:\Program Files (x86)\PDF Architect 2014-03-19 11:32 - 2014-01-31 12:22 - 00110776 _____ (pdfforge GmbH) C:\Windows\system32\pdfcmon.dll 2014-03-19 11:31 - 2014-03-19 11:31 - 00000000 ____D () C:\Users\PC\AppData\Roaming\PCSpeed 2014-03-19 11:31 - 2014-03-19 11:31 - 00000000 ____D () C:\ProgramData\PCSpeed 2014-03-19 11:20 - 2014-03-19 11:20 - 00450404 _____ () C:\Users\PC\Downloads\Scann (1).zip 2014-03-18 17:48 - 2014-03-18 17:49 - 06294991 _____ () C:\Users\PC\Downloads\News from France (1).zip 2014-03-18 17:48 - 2014-03-18 17:48 - 06294991 _____ () C:\Users\PC\Downloads\News from France.zip 2014-03-17 16:49 - 2014-03-17 16:49 - 00162220 _____ () C:\Users\PC\Documents\loos.rns 2014-03-15 22:12 - 2013-10-25 08:34 - 00035856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdBoot.sys 2014-03-15 22:12 - 2013-10-24 23:34 - 00248240 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdFilter.sys 2014-03-15 20:19 - 2014-01-31 01:48 - 01339392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll 2014-03-15 20:19 - 2014-01-31 01:06 - 01628160 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll 2014-03-14 21:37 - 2014-02-23 09:13 - 02241536 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2014-03-14 21:37 - 2014-02-23 09:13 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2014-03-14 21:37 - 2014-02-23 09:13 - 00915968 _____ (Microsoft Corporation) C:\Windows\system32\uxtheme.dll 2014-03-14 21:37 - 2014-02-23 09:13 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\UXInit.dll 2014-03-14 21:37 - 2014-02-23 09:13 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2014-03-14 21:37 - 2014-02-23 09:12 - 19273216 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-03-14 21:37 - 2014-02-23 09:12 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2014-03-14 21:37 - 2014-02-23 09:12 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2014-03-14 21:37 - 2014-02-23 09:11 - 15404032 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2014-03-14 21:37 - 2014-02-23 09:11 - 03960320 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2014-03-14 21:37 - 2014-02-23 09:11 - 02648576 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2014-03-14 21:37 - 2014-02-23 09:11 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2014-03-14 21:37 - 2014-02-23 09:11 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2014-03-14 21:37 - 2014-02-23 09:11 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2014-03-14 21:37 - 2014-02-23 09:11 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2014-03-14 21:37 - 2014-02-23 09:11 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2014-03-14 21:37 - 2014-02-23 07:54 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2014-03-14 21:37 - 2014-02-23 07:54 - 01140736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2014-03-14 21:37 - 2014-02-23 07:54 - 00044032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UXInit.dll 2014-03-14 21:37 - 2014-02-23 07:53 - 14358016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2014-03-14 21:37 - 2014-02-23 07:53 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2014-03-14 21:37 - 2014-02-23 07:53 - 02877952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2014-03-14 21:37 - 2014-02-23 07:53 - 02049024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2014-03-14 21:37 - 2014-02-23 07:53 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2014-03-14 21:37 - 2014-02-23 07:53 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2014-03-14 21:37 - 2014-02-23 07:53 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2014-03-14 21:37 - 2014-02-23 07:53 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2014-03-14 21:37 - 2014-02-23 07:53 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2014-03-14 21:37 - 2014-02-23 07:53 - 00039936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2014-03-14 21:37 - 2014-02-23 07:53 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2014-03-14 21:37 - 2014-02-23 07:35 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-03-14 21:37 - 2014-02-23 07:31 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2014-03-14 21:37 - 2014-02-23 05:06 - 00534528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\uxtheme.dll 2014-03-14 13:56 - 2014-03-14 13:57 - 107806720 _____ () C:\Users\PC\Downloads\ipfire-2.13.i586-full-core75 (1).iso 2014-03-14 13:44 - 2014-03-27 20:56 - 00000000 ____D () C:\Users\PC\Desktop\TB124XP 2014-03-14 13:41 - 2014-03-21 11:34 - 00453056 _____ () C:\Windows\system32\FNTCACHE.DAT 2014-03-14 13:21 - 2014-03-04 23:52 - 00694240 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2014-03-14 13:21 - 2014-03-04 23:52 - 00078304 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2014-03-14 12:26 - 2014-02-08 05:34 - 04036608 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2014-03-14 12:25 - 2013-12-07 07:36 - 19751936 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll 2014-03-14 12:25 - 2013-12-07 06:15 - 17560576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll 2014-03-14 12:24 - 2014-02-06 00:41 - 00595968 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll 2014-03-14 12:24 - 2014-02-06 00:37 - 00496640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll 2014-03-14 12:23 - 2014-03-14 12:23 - 00000000 ____D () C:\Program Files\Microsoft Silverlight 2014-03-14 12:23 - 2014-03-14 12:23 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight 2014-03-14 11:50 - 2014-03-14 11:50 - 107806720 _____ () C:\Users\PC\Downloads\ipfire-2.13.i586-full-core75.iso 2014-03-14 10:51 - 2014-03-14 10:51 - 00376953 _____ () C:\Users\PC\Downloads\TB124_pdfs_06_10 (1).rar 2014-03-14 10:41 - 2014-03-14 10:41 - 00376953 _____ () C:\Users\PC\Downloads\TB124_pdfs_06_10.rar 2014-03-14 08:52 - 2014-03-14 08:52 - 00450404 _____ () C:\Users\PC\Downloads\Scann.zip 2014-03-13 11:54 - 2014-03-13 11:54 - 00000000 ____D () C:\unzipped 2014-03-08 10:52 - 2014-03-08 10:54 - 22892386 _____ () C:\Users\PC\Downloads\torbrowser-install-3.5.2.1_en-US.exe 2014-03-07 11:30 - 2014-03-07 11:30 - 00468685 _____ () C:\Users\PC\Downloads\TB124_pdfs_00_05.rar 2014-03-06 14:10 - 2014-03-24 16:41 - 00000000 ____D () C:\Program Files (x86)\South Park The Stick of Truth 2014-03-06 14:08 - 2014-03-06 14:08 - 00283064 _____ (Disc Soft Ltd) C:\Windows\system32\Drivers\dtsoftbus01.sys 2014-03-06 14:08 - 2014-03-06 14:08 - 00001974 _____ () C:\Users\Public\Desktop\DAEMON Tools Lite.lnk 2014-03-06 14:08 - 2014-03-06 14:08 - 00000000 ____D () C:\Program Files (x86)\DAEMON Tools Lite 2014-03-06 14:07 - 2014-03-06 14:09 - 00000000 ____D () C:\Users\PC\AppData\Roaming\DAEMON Tools Lite 2014-03-06 14:05 - 2014-03-06 14:09 - 00000000 ____D () C:\ProgramData\DAEMON Tools Lite 2014-03-04 19:46 - 2014-03-04 19:46 - 00000000 ____D () C:\Users\PC\Desktop\MP_2.Sem 2014-03-04 19:45 - 2014-03-04 19:45 - 00434129 _____ () C:\Users\PC\Downloads\MP_2.Sem.rar 2014-02-28 12:59 - 2014-02-28 12:59 - 04845384 _____ (Piriform Ltd) C:\Users\PC\Downloads\spsetup125.exe 2014-02-28 12:59 - 2014-02-28 12:59 - 00000808 _____ () C:\Users\Public\Desktop\Speccy.lnk 2014-02-28 12:59 - 2014-02-28 12:59 - 00000000 ____D () C:\Program Files\Speccy 2014-02-28 11:46 - 2013-12-13 14:51 - 00993304 _____ (NCH Software) C:\Users\PC\Desktop\wpsetup - Kopie.exe 2014-02-28 11:46 - 2013-11-22 12:00 - 27973080 _____ (Wireshark development team) C:\Users\PC\Desktop\Wireshark-win64-1.10.3 - Kopie.exe 2014-02-28 11:46 - 2013-11-09 18:09 - 04208536 _____ (2013 Gaijin Entertainment Corporation ) C:\Users\PC\Desktop\wt_launcher_1.0.1.278 (1) - Kopie.exe 2014-02-28 11:46 - 2013-11-09 18:02 - 04208536 _____ (2013 Gaijin Entertainment Corporation ) C:\Users\PC\Desktop\wt_launcher_1.0.1.278 - Kopie.exe 2014-02-28 11:46 - 2013-10-05 07:37 - 02074056 _____ () C:\Users\PC\Desktop\winrar-x64-500d - Kopie.exe 2014-02-28 11:45 - 2014-02-16 12:36 - 00047506 _____ () C:\Users\PC\Desktop\SYSU-324-013 (3) - Kopie.ics 2014-02-28 11:45 - 2014-02-16 12:35 - 00047636 _____ () C:\Users\PC\Desktop\Vor lauter... (1) - Kopie.zip 2014-02-28 11:45 - 2014-02-13 11:51 - 00047636 _____ () C:\Users\PC\Desktop\Vor lauter... - Kopie.zip 2014-02-28 11:45 - 2014-02-13 11:50 - 00047506 _____ () C:\Users\PC\Desktop\SYSU-324-013 (2) - Kopie.ics 2014-02-28 11:45 - 2014-02-13 11:50 - 00047506 _____ () C:\Users\PC\Desktop\SYSU-324-013 (1) - Kopie.ics 2014-02-28 11:45 - 2014-02-13 11:43 - 00047506 _____ () C:\Users\PC\Desktop\SYSU-324-013 - Kopie.ics 2014-02-28 11:45 - 2014-01-30 10:49 - 24394803 _____ () C:\Users\PC\Desktop\torbrowser-install-3.5.1_de - Kopie.exe 2014-02-28 11:45 - 2014-01-24 08:43 - 00004080 _____ () C:\Users\PC\Desktop\VirtualHost (2) - Kopie.zip 2014-02-28 11:45 - 2014-01-23 22:02 - 00004080 _____ () C:\Users\PC\Desktop\VirtualHost (1) - Kopie.zip 2014-02-28 11:45 - 2014-01-23 09:39 - 00004080 _____ () C:\Users\PC\Desktop\VirtualHost - Kopie.zip 2014-02-28 11:45 - 2014-01-16 09:20 - 00915128 _____ (Riverbed Technology, Inc.) C:\Users\PC\Desktop\WinPcap_4_1_3 (4) - Kopie.exe 2014-02-28 11:45 - 2014-01-16 09:20 - 00915128 _____ (Riverbed Technology, Inc.) C:\Users\PC\Desktop\WinPcap_4_1_3 (3) - Kopie.exe 2014-02-28 11:45 - 2014-01-16 09:14 - 00915128 _____ (Riverbed Technology, Inc.) C:\Users\PC\Desktop\WinPcap_4_1_3 (2) - Kopie.exe 2014-02-28 11:45 - 2014-01-16 09:14 - 00915128 _____ (Riverbed Technology, Inc.) C:\Users\PC\Desktop\WinPcap_4_1_3 (1) - Kopie.exe 2014-02-28 11:45 - 2014-01-16 09:14 - 00915128 _____ (Riverbed Technology, Inc.) C:\Users\PC\Desktop\WinPcap_4_1_3 - Kopie.exe 2014-02-28 11:45 - 2014-01-15 20:08 - 00209689 _____ () C:\Users\PC\Desktop\WG testmuster (1) - Kopie.zip 2014-02-28 11:45 - 2014-01-15 20:05 - 00209689 _____ () C:\Users\PC\Desktop\WG testmuster - Kopie.zip 2014-02-28 11:45 - 2014-01-04 21:07 - 04538368 _____ () C:\Users\PC\Desktop\SkypeWebPlugin-2.2.12059.16911 (2) - Kopie.msi 2014-02-28 11:45 - 2013-12-15 14:57 - 04538368 _____ () C:\Users\PC\Desktop\SkypeWebPlugin-2.2.12059.16911 (1) - Kopie.msi 2014-02-28 11:45 - 2013-12-15 14:55 - 04538368 _____ () C:\Users\PC\Desktop\SkypeWebPlugin-2.2.12059.16911 - Kopie.msi 2014-02-28 11:45 - 2013-12-14 11:34 - 06951048 _____ (Microsoft Corporation) C:\Users\PC\Desktop\Silverlight - Kopie.exe 2014-02-28 11:45 - 2013-11-30 08:50 - 68253288 _____ (VMLite, Inc.) C:\Users\PC\Desktop\VMLiteWorkstationSetup326 (1) - Kopie.exe 2014-02-28 11:45 - 2013-11-30 08:50 - 68253288 _____ (VMLite, Inc.) C:\Users\PC\Desktop\VMLiteWorkstationSetup326 - Kopie.exe 2014-02-28 11:45 - 2013-11-30 08:47 - 486678800 _____ (Microsoft Corporation) C:\Users\PC\Desktop\WindowsXPMode_de-de - Kopie.exe 2014-02-28 11:45 - 2013-11-25 19:51 - 05831344 _____ (TeamViewer GmbH) C:\Users\PC\Desktop\TeamViewer_Setup_de-eof - Kopie.exe 2014-02-28 11:45 - 2013-11-15 09:32 - 00719360 _____ () C:\Users\PC\Desktop\SDM_DE (1) - Kopie.msi 2014-02-28 11:45 - 2013-11-15 09:32 - 00719360 _____ () C:\Users\PC\Desktop\SDM_DE - Kopie.msi 2014-02-28 11:45 - 2013-10-10 12:08 - 00000288 _____ () C:\Users\PC\Desktop\Tabelle_erstellen - Kopie.rar 2014-02-28 11:44 - 2013-08-21 13:41 - 542212452 _____ () C:\Users\PC\Desktop\ronny - Kopie.zip 2014-02-28 11:43 - 2014-02-12 16:19 - 00733013 _____ () C:\Users\PC\Desktop\Outlook (1) - Kopie.zip 2014-02-28 11:43 - 2014-01-31 18:52 - 01158016 _____ () C:\Users\PC\Desktop\Modul 307_Präsentation - Kopie.pptx 2014-02-28 11:43 - 2014-01-23 22:02 - 00074377 _____ () C:\Users\PC\Desktop\Lösung der 1 Woche - Kopie.zip 2014-02-28 11:43 - 2014-01-23 09:40 - 01256210 _____ () C:\Users\PC\Desktop\Einstellung Netzwerkkarte - Kopie.zip 2014-02-28 11:43 - 2014-01-23 09:39 - 00318486 _____ () C:\Users\PC\Desktop\Installationsdokumentation neu - Kopie.zip 2014-02-28 11:43 - 2014-01-15 20:04 - 00004305 _____ () C:\Users\PC\Desktop\image001 - Kopie.emz 2014-02-28 11:43 - 2013-12-21 13:29 - 107773952 _____ () C:\Users\PC\Desktop\ipfire-2.13.i586-full-core73 (1) - Kopie.iso 2014-02-28 11:43 - 2013-12-21 09:55 - 107773952 _____ () C:\Users\PC\Desktop\ipfire-2.13.i586-full-core73 - Kopie.iso 2014-02-28 11:43 - 2013-12-19 19:58 - 04010464 _____ () C:\Users\PC\Desktop\LOTROProgressive_de_1.368 (1) - Kopie.exe 2014-02-28 11:43 - 2013-12-19 19:58 - 04010464 _____ () C:\Users\PC\Desktop\LOTROProgressive_de_1.368 - Kopie.exe 2014-02-28 11:43 - 2013-12-19 19:54 - 08711768 _____ () C:\Users\PC\Desktop\LOTROProgressive_de_4.28 (2) - Kopie.exe 2014-02-28 11:43 - 2013-12-19 19:53 - 08711768 _____ () C:\Users\PC\Desktop\LOTROProgressive_de_4.28 (1) - Kopie.exe 2014-02-28 11:43 - 2013-12-19 19:50 - 08711768 _____ () C:\Users\PC\Desktop\LOTROProgressive_de_4.28 - Kopie.exe 2014-02-28 11:43 - 2013-12-14 11:34 - 00265752 _____ (Secure By Design Inc.) C:\Users\PC\Desktop\Ninite CutePDF Installer (1) - Kopie.exe 2014-02-28 11:43 - 2013-12-14 10:59 - 00265752 _____ (Secure By Design Inc.) C:\Users\PC\Desktop\Ninite CutePDF Installer - Kopie.exe 2014-02-28 11:43 - 2013-12-13 17:23 - 00031992 _____ () C:\Users\PC\Desktop\einsatzkompetenz08-12sys - Kopie.ashx 2014-02-28 11:43 - 2013-12-13 14:54 - 01628578 _____ () C:\Users\PC\Desktop\Portscanner3.0.0.0 - Kopie.zip 2014-02-28 11:43 - 2013-12-06 09:38 - 05249448 _____ (ParetoLogic Inc.) C:\Users\PC\Desktop\ParetoLogic PC Health Advisor_de - Kopie.exe 2014-02-28 11:43 - 2013-12-05 08:55 - 00013304 _____ () C:\Users\PC\Desktop\Prüfungsresultate - Kopie.xlsx 2014-02-28 11:43 - 2013-11-21 09:07 - 15220658 _____ () C:\Users\PC\Desktop\pdfsam-2.2.2-out - Kopie.zip 2014-02-28 11:43 - 2013-11-18 18:19 - 06640543 _____ () C:\Users\PC\Desktop\mein erstes Programm - Kopie.exe 2014-02-28 11:43 - 2013-11-18 18:16 - 00011944 _____ () C:\Users\PC\Desktop\mein erstes Programm - Kopie.cpp 2014-02-28 11:43 - 2013-11-18 17:52 - 16198832 _____ (Geek Software GmbH ) C:\Users\PC\Desktop\pdf24-creator-6.0.1 - Kopie.exe 2014-02-28 11:43 - 2013-11-16 19:15 - 00258961 _____ () C:\Users\PC\Desktop\Outlook - Kopie.zip 2014-02-28 11:43 - 2013-09-05 09:33 - 00044138 _____ () C:\Users\PC\Desktop\m100 Übungen Kapitel 1 - Kopie.zip 2014-02-28 11:43 - 2013-09-05 09:33 - 00043600 _____ () C:\Users\PC\Desktop\m100 Übungen Kapitel 2 - Kopie.zip 2014-02-28 11:42 - 2014-02-28 10:36 - 02437369 _____ () C:\Users\PC\Desktop\CPU_Typen (1) - Kopie.rar 2014-02-28 11:42 - 2014-02-28 09:59 - 02437369 _____ () C:\Users\PC\Desktop\CPU_Typen - Kopie.rar 2014-02-28 11:42 - 2014-02-17 14:22 - 00031992 _____ () C:\Users\PC\Desktop\einsatzkompetenz08-12sys (6) - Kopie.ashx 2014-02-28 11:42 - 2014-02-11 10:43 - 00921000 _____ (Oracle Corporation) C:\Users\PC\Desktop\chromeinstall-7u51 - Kopie.exe 2014-02-28 11:42 - 2014-01-25 19:05 - 00499619 _____ () C:\Users\PC\Desktop\bewerbung - Kopie.zip 2014-02-28 11:42 - 2014-01-23 22:00 - 00831705 _____ () C:\Users\PC\Desktop\DNS-Einrichten mit Yast einrichten - Kopie.zip 2014-02-28 11:42 - 2014-01-10 11:10 - 00031992 _____ () C:\Users\PC\Desktop\einsatzkompetenz08-12sys (5) - Kopie.ashx 2014-02-28 11:42 - 2013-12-13 17:23 - 00031992 _____ () C:\Users\PC\Desktop\einsatzkompetenz08-12sys (4) - Kopie.ashx 2014-02-28 11:42 - 2013-12-13 17:23 - 00031992 _____ () C:\Users\PC\Desktop\einsatzkompetenz08-12sys (3) - Kopie.ashx 2014-02-28 11:42 - 2013-12-13 17:23 - 00031992 _____ () C:\Users\PC\Desktop\einsatzkompetenz08-12sys (2) - Kopie.ashx 2014-02-28 11:42 - 2013-12-13 17:23 - 00031992 _____ () C:\Users\PC\Desktop\einsatzkompetenz08-12sys (1) - Kopie.ashx 2014-02-28 11:42 - 2013-12-05 14:05 - 00123035 _____ () C:\Users\PC\Desktop\Die naechste Pruefung - Kopie.zip 2014-02-28 11:42 - 2013-11-22 19:40 - 03372904 _____ (Best Removal Tool - Uninstall Tool,Uninstall Software and Remove Software with Software Uninstall tool ) C:\Users\PC\Desktop\BestRemovalTool_Setup - Kopie.exe 2014-02-28 11:42 - 2013-11-14 08:59 - 67670658 _____ () C:\Users\PC\Desktop\Altes Modulbuch 101 (1) - Kopie.zip 2014-02-28 11:42 - 2013-11-14 08:49 - 67670658 _____ () C:\Users\PC\Desktop\Altes Modulbuch 101 - Kopie.zip 2014-02-28 11:42 - 2013-11-14 08:45 - 00242734 _____ () C:\Users\PC\Desktop\ZP001 - Kopie.zip 2014-02-28 11:42 - 2013-11-14 08:41 - 03327721 _____ () C:\Users\PC\Desktop\Aufgaben 2.1%2C 2.2 - Kopie.rar 2014-02-28 11:42 - 2013-11-14 08:41 - 00068162 _____ () C:\Users\PC\Desktop\Aufgaben - Kopie.rar 2014-02-28 11:42 - 2013-11-14 08:36 - 00040232 _____ () C:\Users\PC\Desktop\Aufgaben 4.4-4.6 (1) - Kopie.zip 2014-02-28 11:42 - 2013-11-14 08:33 - 00040232 _____ () C:\Users\PC\Desktop\Aufgaben 4.4-4.6 - Kopie.zip 2014-02-28 11:42 - 2013-10-31 12:13 - 00819184 _____ (Google Inc.) C:\Users\PC\Desktop\ChromeSetup - Kopie.exe 2014-02-28 11:42 - 2013-09-21 12:35 - 06083952 _____ (Systweak Software ) C:\Users\PC\Desktop\advancedfileoptimizersetup_stg - Kopie.exe 2014-02-28 11:42 - 2013-09-20 16:11 - 06083952 _____ (Systweak Software ) C:\Users\PC\Desktop\advancedfileoptimizersetup_RAR (1) - Kopie.exe 2014-02-28 11:42 - 2013-09-12 09:35 - 06529865 _____ () C:\Users\PC\Desktop\dict-en - Kopie.oxt 2014-02-28 11:42 - 2013-08-23 08:06 - 162401424 _____ () C:\Users\PC\Desktop\Apache_OpenOffice_4.0.0_Win_x86_install_de - Kopie.exe 2014-02-28 11:17 - 2014-02-28 11:17 - 00000000 ____D () C:\Users\PC\Desktop\TB124W7InstDirs 2014-02-28 10:36 - 2014-02-28 10:36 - 02437369 _____ () C:\Users\PC\Desktop\CPU_Typen (1).rar 2014-02-28 09:59 - 2014-02-28 09:59 - 02437369 _____ () C:\Users\PC\Desktop\CPU_Typen.rar 2014-02-27 09:28 - 2014-02-27 09:28 - 00001106 _____ () C:\Users\Public\Desktop\TeamViewer 8.lnk ==================== One Month Modified Files and Folders ======= 2014-03-28 21:30 - 2014-03-28 21:30 - 00022838 _____ () C:\Users\PC\Desktop\FRST.txt 2014-03-28 21:30 - 2014-03-28 19:07 - 00000000 ____D () C:\FRST 2014-03-28 21:29 - 2013-10-31 12:13 - 00001118 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2014-03-28 21:09 - 2013-09-25 10:33 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job 2014-03-28 21:02 - 2012-07-26 09:12 - 00000000 ____D () C:\Windows\system32\sru 2014-03-28 20:58 - 2013-09-03 16:42 - 00000000 ____D () C:\ProgramData\Kaspersky Lab 2014-03-28 20:56 - 2014-03-28 20:55 - 00054887 _____ () C:\Users\PC\Desktop\Addition.txt 2014-03-28 20:48 - 2014-01-16 10:40 - 00005114 _____ () C:\Windows\System32\Tasks\Microsoft Office 15 Sync Maintenance for Kistler-PC Kistler 2014-03-28 20:29 - 2013-10-31 12:13 - 00001114 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2014-03-28 20:26 - 2013-08-08 16:08 - 00003598 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3751542578-3293368922-2753858418-1001 2014-03-28 20:22 - 2014-03-26 12:58 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2014-03-28 20:22 - 2013-08-17 22:15 - 00000312 _____ () C:\Windows\Tasks\RMAutoUpdate.job 2014-03-28 20:21 - 2014-02-13 13:07 - 00001024 _____ () C:\.rnd 2014-03-28 20:21 - 2013-08-23 10:15 - 00000000 ____D () C:\ProgramData\VMware 2014-03-28 20:21 - 2012-07-26 08:22 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2014-03-28 20:21 - 2012-07-26 06:26 - 00524288 ___SH () C:\Windows\system32\config\BBI 2014-03-28 20:20 - 2014-03-28 20:24 - 00050477 _____ () C:\Users\PC\Desktop\Defogger (1).exe 2014-03-28 20:20 - 2014-03-28 20:20 - 00050477 _____ () C:\Users\PC\Downloads\Defogger.exe 2014-03-28 20:20 - 2014-03-28 20:20 - 00050477 _____ () C:\Users\PC\Downloads\Defogger (1).exe 2014-03-28 20:20 - 2014-03-28 20:20 - 00000536 _____ () C:\Users\PC\Downloads\defogger_disable.log 2014-03-28 20:20 - 2014-03-28 20:20 - 00000338 _____ () C:\Users\PC\Downloads\defogger_enable.log 2014-03-28 20:20 - 2013-06-27 15:00 - 00000000 ____D () C:\Users\PC 2014-03-28 19:54 - 2014-03-24 10:55 - 00000000 ____D () C:\AdwCleaner 2014-03-28 19:53 - 2014-03-28 19:21 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\36710840.sys 2014-03-28 19:20 - 2014-03-28 19:20 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\15E8686E.sys 2014-03-28 19:07 - 2014-03-28 19:13 - 02157056 _____ (Farbar) C:\Users\PC\Desktop\FRST64.exe 2014-03-28 19:07 - 2014-03-28 19:07 - 02157056 _____ (Farbar) C:\Users\PC\Downloads\FRST64.exe 2014-03-28 19:00 - 2014-03-28 19:00 - 00058082 _____ () C:\Windows\SysWOW64\AppLog.log 2014-03-28 19:00 - 2013-08-17 22:15 - 00000314 _____ () C:\Windows\Tasks\RMSchedule.job 2014-03-28 18:52 - 2014-03-27 20:35 - 00294481 _____ () C:\Windows\WindowsUpdate.log 2014-03-28 18:52 - 2013-05-21 21:04 - 00756280 _____ () C:\Windows\system32\perfh007.dat 2014-03-28 18:52 - 2013-05-21 21:04 - 00157208 _____ () C:\Windows\system32\perfc007.dat 2014-03-28 18:52 - 2012-07-26 08:28 - 01755112 _____ () C:\Windows\system32\PerfStringBackup.INI 2014-03-28 17:17 - 2013-08-12 20:44 - 00000000 ____D () C:\Users\PC\AppData\Local\CrashDumps 2014-03-28 16:24 - 2014-03-28 16:24 - 00000968 _____ () C:\Windows\PFRO.log 2014-03-28 15:53 - 2012-07-26 09:12 - 00000000 ____D () C:\Windows\system32\NDF 2014-03-28 11:34 - 2014-03-28 11:34 - 00000017 _____ () C:\Users\PC\AppData\Local\resmon.resmoncfg 2014-03-28 10:58 - 2014-03-28 10:58 - 00002120 _____ () C:\Users\PC\Documents\bookmark.htm 2014-03-28 08:29 - 2013-09-04 11:37 - 00000000 ____D () C:\Users\PC\AppData\Local\Adobe 2014-03-27 20:56 - 2014-03-14 13:44 - 00000000 ____D () C:\Users\PC\Desktop\TB124XP 2014-03-27 20:56 - 2013-08-30 10:56 - 00000000 ____D () C:\Users\PC\AppData\Local\VMware 2014-03-27 20:55 - 2013-08-30 10:43 - 00000000 ____D () C:\Users\PC\AppData\Roaming\VMware 2014-03-27 20:48 - 2013-11-30 08:52 - 00000000 ____D () C:\Users\PC\VMLites 2014-03-27 20:35 - 2014-03-27 20:35 - 76353536 _____ () C:\Windows\system32\config\software.rrr 2014-03-27 20:35 - 2014-03-27 20:35 - 03690496 _____ () C:\Users\PC\s-1-5-21-3751542578-3293368922-2753858418-1001.rrr 2014-03-27 20:35 - 2014-03-27 20:35 - 00221184 _____ () C:\Windows\system32\config\default.rrr 2014-03-27 20:35 - 2014-03-27 20:35 - 00008192 _____ () C:\Users\Gast\s-1-5-21-3751542578-3293368922-2753858418-501.rrr 2014-03-27 20:35 - 2014-03-21 11:08 - 00000000 ____D () C:\Users\Gast 2014-03-27 20:27 - 2014-03-27 19:30 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\48230029.sys 2014-03-27 20:05 - 2014-03-27 20:05 - 00000000 ____D () C:\Windows\ERUNT 2014-03-27 20:02 - 2014-03-27 20:02 - 01037734 _____ (Thisisu) C:\Users\PC\Downloads\JRT_6.1.2.exe 2014-03-27 19:51 - 2014-03-27 19:51 - 00001145 _____ () C:\Users\Public\Desktop\Opera.lnk 2014-03-27 19:51 - 2014-03-27 19:50 - 34734328 _____ (Opera Software ASA) C:\Users\PC\Downloads\Opera_20.0.1387.82_Setup.exe 2014-03-27 19:51 - 2013-08-29 18:58 - 00000000 ____D () C:\Program Files (x86)\Opera 2014-03-27 14:53 - 2013-09-06 10:06 - 00286720 ___SH () C:\Users\PC\Desktop\Thumbs.db 2014-03-27 14:37 - 2013-08-30 09:24 - 00064512 ___SH () C:\Users\PC\Downloads\Thumbs.db 2014-03-27 14:03 - 2014-03-27 14:03 - 00000000 ____D () C:\Users\PC\Downloads\SpybotPortable 2014-03-27 14:03 - 2014-03-27 14:02 - 57330680 _____ (PortableApps.com) C:\Users\PC\Downloads\SpybotPortable_2.2.paf.exe 2014-03-27 11:04 - 2014-03-27 08:52 - 00000000 ____D () C:\Program Files (x86)\CrypTool 2014-03-27 09:45 - 2014-03-27 09:45 - 00000000 ____D () C:\Program Files (x86)\ENIGMA 2014-03-27 09:45 - 2013-06-27 15:03 - 00000000 ___RD () C:\Users\PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup 2014-03-27 09:44 - 2014-03-27 09:43 - 00005685 _____ () C:\ST5UNST.LOG 2014-03-27 08:52 - 2014-03-27 08:52 - 00000000 ____D () C:\Users\PC\AppData\Roaming\CrypTool 2014-03-27 08:51 - 2014-03-27 08:50 - 67554681 _____ () C:\Users\PC\Downloads\SetupCrypTool_1_4_31_Beta6b_r3670_VS2008_de.exe 2014-03-27 08:38 - 2013-06-27 15:00 - 00000000 ____D () C:\Users\PC\AppData\Local\Packages 2014-03-26 19:24 - 2014-03-26 19:24 - 00316092 _____ () C:\Users\PC\Downloads\WG Physik.zip 2014-03-26 15:58 - 2014-03-28 19:49 - 01950720 _____ () C:\Users\PC\Desktop\adwcleaner_3.022 (3).exe 2014-03-26 15:58 - 2014-03-26 15:57 - 01950720 _____ () C:\Users\PC\Downloads\adwcleaner_3.022 (3).exe 2014-03-26 15:49 - 2014-03-26 15:49 - 01950720 _____ () C:\Users\PC\Downloads\adwcleaner_3.022 (2).exe 2014-03-26 15:33 - 2014-03-26 15:12 - 00000000 ____D () C:\Users\PC\AppData\Roaming\Nico Mak Computing 2014-03-26 15:12 - 2014-03-26 15:12 - 04892480 _____ (WinZip International LLC ) C:\Users\PC\Downloads\wzmp_8 (1).exe 2014-03-26 15:10 - 2014-03-26 15:10 - 00001134 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2014-03-26 15:10 - 2014-03-26 15:10 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 2014-03-26 15:09 - 2014-03-26 15:09 - 17523384 _____ (Malwarebytes Corporation ) C:\Users\PC\Downloads\mbam-setup-2.0.0.1000 (3).exe 2014-03-26 15:09 - 2014-03-26 15:09 - 17523384 _____ (Malwarebytes Corporation ) C:\Users\PC\Downloads\mbam-setup-2.0.0.1000 (2).exe 2014-03-26 14:33 - 2014-03-26 13:46 - 00000000 ____D () C:\Windows\ACF5FE1B377240688B872D2A6EFD0A05.TMP 2014-03-26 13:47 - 2014-03-26 13:47 - 00000000 _____ () C:\autoexec.bat 2014-03-26 13:46 - 2014-03-26 13:46 - 00000000 ____D () C:\Program Files\Enigma Software Group 2014-03-26 13:32 - 2014-03-26 13:32 - 01950720 _____ () C:\Users\PC\Downloads\adwcleaner_3.022 (1).exe 2014-03-26 12:58 - 2014-03-26 12:58 - 17523384 _____ (Malwarebytes Corporation ) C:\Users\PC\Downloads\mbam-setup-2.0.0.1000.exe 2014-03-26 12:58 - 2014-03-26 12:58 - 17523384 _____ (Malwarebytes Corporation ) C:\Users\PC\Downloads\mbam-setup-2.0.0.1000 (1).exe 2014-03-26 12:58 - 2013-08-17 21:48 - 00000000 ____D () C:\ProgramData\Malwarebytes 2014-03-26 12:51 - 2013-12-09 00:06 - 00000000 ____D () C:\Users\PC\Desktop\Programme 2014-03-26 12:38 - 2014-03-22 17:25 - 00000000 ____D () C:\Program Files (x86)\Advanced Disk Recovery 2014-03-26 12:36 - 2014-03-25 17:02 - 00000000 ____D () C:\Users\PC\Documents\Anti-Malware 2014-03-26 12:36 - 2014-03-25 17:02 - 00000000 ____D () C:\Program Files (x86)\Emsisoft Anti-Malware 2014-03-25 20:14 - 2014-03-25 20:14 - 00000500 _____ () C:\EamClean.log 2014-03-25 15:55 - 2014-03-25 15:55 - 00000000 ____D () C:\Users\PC\AppData\Local\Norman Malware Cleaner 2014-03-25 15:52 - 2014-03-25 15:50 - 312761032 _____ (Norman Shark AS) C:\Users\PC\Downloads\Norman_Malware208_Cleaner.exe 2014-03-25 12:11 - 2013-12-14 11:03 - 00000000 ____D () C:\Users\PC\AppData\Local\CutePDF Writer 2014-03-25 11:30 - 2013-12-13 14:51 - 00000000 ____D () C:\Users\PC\AppData\Roaming\NCH Software 2014-03-24 16:41 - 2014-03-06 14:10 - 00000000 ____D () C:\Program Files (x86)\South Park The Stick of Truth 2014-03-24 15:39 - 2014-03-24 15:39 - 00000000 ____D () C:\Users\Public\Documents\sun 2014-03-24 15:22 - 2014-03-24 15:22 - 04892480 _____ (WinZip International LLC ) C:\Users\PC\Downloads\wzmp_8.exe 2014-03-24 11:18 - 2014-03-24 11:18 - 02347384 _____ (ESET) C:\Users\PC\Downloads\esetsmartinstaller_deu.exe 2014-03-24 11:18 - 2014-03-24 11:18 - 02347384 _____ (ESET) C:\Users\PC\Downloads\esetsmartinstaller_deu (1).exe 2014-03-24 10:55 - 2014-03-24 10:55 - 01950720 _____ () C:\Users\PC\Downloads\adwcleaner_3.022.exe 2014-03-24 09:48 - 2013-11-16 19:07 - 00000000 ____D () C:\Users\PC\Bewerbungm 2014-03-24 09:35 - 2014-03-24 09:35 - 02347384 _____ (ESET) C:\Users\PC\Downloads\esetsmartinstaller_enu (1).exe 2014-03-23 22:41 - 2014-03-27 20:02 - 01038974 _____ (Thisisu) C:\Users\PC\Desktop\JRT_NEW.exe 2014-03-22 18:16 - 2014-03-22 18:16 - 02347384 _____ (ESET) C:\Users\PC\Downloads\esetsmartinstaller_enu.exe 2014-03-22 18:16 - 2014-03-22 18:16 - 00000000 ____D () C:\Program Files (x86)\ESET 2014-03-21 23:58 - 2014-03-21 23:58 - 00000000 ____D () C:\Users\PC\AppData\Local\PDFCreator 2014-03-21 20:17 - 2014-03-21 20:18 - 00625760 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klif.sys 2014-03-21 20:17 - 2014-03-21 20:18 - 00115296 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klflt.sys 2014-03-21 20:17 - 2014-03-21 20:18 - 00065120 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klwfp.sys 2014-03-21 20:12 - 2014-03-21 20:12 - 01330072 _____ (CodecPerformer) C:\Users\PC\Downloads\CodecPerformerSetup (1).exe 2014-03-21 20:11 - 2014-03-21 20:11 - 01330072 _____ (CodecPerformer) C:\Users\PC\Downloads\CodecPerformerSetup.exe 2014-03-21 19:53 - 2014-03-21 13:42 - 00000000 ___DC () C:\Users\PC\AppData\Local\MigWiz 2014-03-21 11:38 - 2012-07-26 06:26 - 00000367 _____ () C:\Windows\win.ini 2014-03-21 11:34 - 2014-03-14 13:41 - 00453056 _____ () C:\Windows\system32\FNTCACHE.DAT 2014-03-21 11:34 - 2013-10-05 07:39 - 00000000 ____D () C:\Program Files\WinRAR 2014-03-21 11:28 - 2014-03-21 11:23 - 00000000 ____D () C:\Neuer Ordner (2) 2014-03-21 11:08 - 2014-03-21 11:08 - 00000000 ____D () C:\Program Files\Wireshark 2014-03-21 11:08 - 2013-08-23 08:09 - 00000000 ____D () C:\Program Files (x86)\OpenOffice 4 2014-03-21 11:07 - 2014-03-21 11:07 - 00001112 _____ () C:\Users\Public\Desktop\OpenOffice 4.0.1.lnk 2014-03-21 11:03 - 2013-10-05 07:39 - 00000000 ____D () C:\Users\PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR 2014-03-21 11:03 - 2013-08-24 08:33 - 00000000 ____D () C:\Users\PC\AppData\Roaming\Notepad++ 2014-03-21 11:03 - 2013-08-24 08:33 - 00000000 ____D () C:\Program Files (x86)\Notepad++ 2014-03-21 11:01 - 2013-09-06 06:10 - 00000000 ____D () C:\Windows\Minidump 2014-03-21 11:01 - 2013-03-06 05:20 - 00000000 ____D () C:\Windows\Panther 2014-03-21 10:44 - 2014-03-21 10:44 - 00450986 _____ () C:\Users\PC\Downloads\Zeugnis.zip 2014-03-21 10:41 - 2014-03-21 10:41 - 00254976 _____ () C:\Users\PC\Downloads\M124 Teil C HandOut (1).ppt 2014-03-21 10:41 - 2014-03-21 10:41 - 00236032 _____ () C:\Users\PC\Downloads\M124 Teil C HandOut.ppt 2014-03-21 10:38 - 2014-03-21 10:38 - 00410898 _____ () C:\Users\PC\Downloads\TB124_pdfs_11_15.rar 2014-03-20 11:27 - 2014-03-20 11:27 - 00695648 _____ () C:\Users\PC\Downloads\lmc-1.2.35-win32-Downloader (2).exe 2014-03-20 11:27 - 2014-03-20 11:27 - 00695648 _____ () C:\Users\PC\Downloads\lmc-1.2.35-win32-Downloader (1).exe 2014-03-20 11:25 - 2014-03-20 11:25 - 00695648 _____ () C:\Users\PC\Downloads\lmc-1.2.35-win32-Downloader.exe 2014-03-19 23:09 - 2012-07-26 09:12 - 00000000 ____D () C:\Windows\AUInstallAgent 2014-03-19 11:43 - 2014-03-19 11:43 - 01955184 _____ (Acro Software Inc. ) C:\Users\PC\Downloads\CuteWriter.exe 2014-03-19 11:43 - 2014-03-19 11:43 - 01955184 _____ (Acro Software Inc. ) C:\Users\PC\Downloads\CuteWriter (1).exe 2014-03-19 11:33 - 2014-03-19 11:33 - 00001017 _____ () C:\Users\PC\Desktop\PDF Architect.lnk 2014-03-19 11:32 - 2014-03-19 11:32 - 00000852 _____ () C:\Users\Public\Desktop\PDFCreator.lnk 2014-03-19 11:32 - 2014-03-19 11:32 - 00000000 ____D () C:\Users\PC\Documents\PDF Architect Files 2014-03-19 11:32 - 2014-03-19 11:32 - 00000000 ____D () C:\Program Files\PDFCreator 2014-03-19 11:32 - 2014-03-19 11:32 - 00000000 ____D () C:\Program Files (x86)\PDF Architect 2014-03-19 11:31 - 2014-03-19 11:31 - 00000000 ____D () C:\Users\PC\AppData\Roaming\PCSpeed 2014-03-19 11:31 - 2014-03-19 11:31 - 00000000 ____D () C:\ProgramData\PCSpeed 2014-03-19 11:20 - 2014-03-19 11:20 - 00450404 _____ () C:\Users\PC\Downloads\Scann (1).zip 2014-03-18 18:32 - 2013-08-14 07:47 - 00000000 ____D () C:\Windows\system32\MRT 2014-03-18 18:29 - 2013-09-14 08:13 - 00000000 ____D () C:\ProgramData\Microsoft Help 2014-03-18 18:29 - 2013-06-27 15:54 - 90015360 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2014-03-18 18:29 - 2012-07-26 06:26 - 00262144 ___SH () C:\Windows\system32\config\ELAM 2014-03-18 17:49 - 2014-03-18 17:48 - 06294991 _____ () C:\Users\PC\Downloads\News from France (1).zip 2014-03-18 17:48 - 2014-03-18 17:48 - 06294991 _____ () C:\Users\PC\Downloads\News from France.zip 2014-03-17 16:49 - 2014-03-17 16:49 - 00162220 _____ () C:\Users\PC\Documents\loos.rns 2014-03-16 16:58 - 2012-07-26 09:12 - 00000000 ____D () C:\Windows\rescache 2014-03-16 16:18 - 2012-07-26 09:12 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools 2014-03-16 16:18 - 2012-07-26 09:12 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools 2014-03-16 16:18 - 2012-07-26 09:12 - 00000000 ____D () C:\Program Files\Windows Defender 2014-03-16 16:18 - 2012-07-26 09:12 - 00000000 ____D () C:\Program Files (x86)\Windows Defender 2014-03-15 20:31 - 2013-10-31 12:13 - 00002189 ____H () C:\Users\Public\Desktop\Google Chrome.lnk 2014-03-14 13:57 - 2014-03-14 13:56 - 107806720 _____ () C:\Users\PC\Downloads\ipfire-2.13.i586-full-core75 (1).iso 2014-03-14 13:36 - 2012-07-26 09:12 - 00000000 ____D () C:\Windows\system32\FxsTmp 2014-03-14 13:22 - 2013-06-27 15:03 - 00000000 ___RD () C:\Users\PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools 2014-03-14 13:17 - 2012-07-26 09:12 - 00000000 ___RD () C:\Windows\ToastData 2014-03-14 12:27 - 2013-11-15 09:35 - 00000039 _____ () C:\Windows\vbaddin.ini 2014-03-14 12:23 - 2014-03-14 12:23 - 00000000 ____D () C:\Program Files\Microsoft Silverlight 2014-03-14 12:23 - 2014-03-14 12:23 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight 2014-03-14 11:57 - 2013-08-30 12:26 - 00000000 ____D () C:\Users\PC\Documents\Virtual Machines 2014-03-14 11:50 - 2014-03-14 11:50 - 107806720 _____ () C:\Users\PC\Downloads\ipfire-2.13.i586-full-core75.iso 2014-03-14 10:51 - 2014-03-14 10:51 - 00376953 _____ () C:\Users\PC\Downloads\TB124_pdfs_06_10 (1).rar 2014-03-14 10:41 - 2014-03-14 10:41 - 00376953 _____ () C:\Users\PC\Downloads\TB124_pdfs_06_10.rar 2014-03-14 08:52 - 2014-03-14 08:52 - 00450404 _____ () C:\Users\PC\Downloads\Scann.zip 2014-03-13 11:54 - 2014-03-13 11:54 - 00000000 ____D () C:\unzipped 2014-03-11 20:09 - 2013-09-25 10:33 - 00003772 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater 2014-03-08 10:54 - 2014-03-08 10:52 - 22892386 _____ () C:\Users\PC\Downloads\torbrowser-install-3.5.2.1_en-US.exe 2014-03-07 13:05 - 2013-10-24 08:06 - 00000000 ____D () C:\Users\PC\wiss 2014-03-07 11:30 - 2014-03-07 11:30 - 00468685 _____ () C:\Users\PC\Downloads\TB124_pdfs_00_05.rar 2014-03-06 14:17 - 2013-11-09 18:01 - 00000000 ____D () C:\Users\PC\Documents\My Games 2014-03-06 14:09 - 2014-03-06 14:07 - 00000000 ____D () C:\Users\PC\AppData\Roaming\DAEMON Tools Lite 2014-03-06 14:09 - 2014-03-06 14:05 - 00000000 ____D () C:\ProgramData\DAEMON Tools Lite 2014-03-06 14:08 - 2014-03-06 14:08 - 00283064 _____ (Disc Soft Ltd) C:\Windows\system32\Drivers\dtsoftbus01.sys 2014-03-06 14:08 - 2014-03-06 14:08 - 00001974 _____ () C:\Users\Public\Desktop\DAEMON Tools Lite.lnk 2014-03-06 14:08 - 2014-03-06 14:08 - 00000000 ____D () C:\Program Files (x86)\DAEMON Tools Lite 2014-03-05 09:26 - 2014-03-26 15:10 - 00088280 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys 2014-03-05 09:26 - 2014-03-26 15:10 - 00063192 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys 2014-03-05 09:26 - 2014-03-26 15:10 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys 2014-03-04 23:52 - 2014-03-14 13:21 - 00694240 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2014-03-04 23:52 - 2014-03-14 13:21 - 00078304 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2014-03-04 19:46 - 2014-03-04 19:46 - 00000000 ____D () C:\Users\PC\Desktop\MP_2.Sem 2014-03-04 19:45 - 2014-03-04 19:45 - 00434129 _____ () C:\Users\PC\Downloads\MP_2.Sem.rar 2014-02-28 12:59 - 2014-02-28 12:59 - 04845384 _____ (Piriform Ltd) C:\Users\PC\Downloads\spsetup125.exe 2014-02-28 12:59 - 2014-02-28 12:59 - 00000808 _____ () C:\Users\Public\Desktop\Speccy.lnk 2014-02-28 12:59 - 2014-02-28 12:59 - 00000000 ____D () C:\Program Files\Speccy 2014-02-28 11:17 - 2014-02-28 11:17 - 00000000 ____D () C:\Users\PC\Desktop\TB124W7InstDirs 2014-02-28 10:36 - 2014-02-28 11:42 - 02437369 _____ () C:\Users\PC\Desktop\CPU_Typen (1) - Kopie.rar 2014-02-28 10:36 - 2014-02-28 10:36 - 02437369 _____ () C:\Users\PC\Desktop\CPU_Typen (1).rar 2014-02-28 09:59 - 2014-02-28 11:42 - 02437369 _____ () C:\Users\PC\Desktop\CPU_Typen - Kopie.rar 2014-02-28 09:59 - 2014-02-28 09:59 - 02437369 _____ () C:\Users\PC\Desktop\CPU_Typen.rar 2014-02-27 10:35 - 2013-12-07 15:58 - 00000000 ____D () C:\Users\PC\AppData\Roaming\TeamViewer 2014-02-27 09:28 - 2014-02-27 09:28 - 00001106 _____ () C:\Users\Public\Desktop\TeamViewer 8.lnk Files to move or delete: ==================== C:\Users\PC\setup.exe C:\Users\PC\siw13-setup.exe C:\Users\PC\visioviewer_14.0.4750.1000.exe Some content of TEMP: ==================== C:\Users\PC\AppData\Local\Temp\Quarantine.exe ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\rpcss.dll => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2014-03-28 09:35 ==================== End Of Log ============================ --- --- --- |
|
28.03.2014, 21:40
| #4 |
| | Entfernen Rvzr-a.akamaihd.net wegen Pop ups und grüne doppelbalken mit pop up beim scrollen Mach keine neuen Logs. Ich versuche so schnell wie möglich dir neue Anweisungen zu geben.  |
|
28.03.2014, 22:22
| #5 |
| | Entfernen Rvzr-a.akamaihd.net wegen Pop ups und grüne doppelbalken mit pop up beim scrollen Anti-Malwarebbytes Malwarebytes Anti-Malware Malwarebytes | Free Anti-Malware & Internet Security Software Suchlauf Datum: 28.03.2014 Suchlauf-Zeit: 21:54:42 Logdatei: log von anti-m.txt Administrator: Ja Version: 2.00.0.1000 Malware Datenbank: v2014.03.28.07 Rootkit Datenbank: v2014.03.27.01 Lizenz: Testversion Malware Schutz: Aktiviert Bösartiger Webseiten Schutz: Aktiviert Chameleon: Deaktiviert Betriebssystem: Windows 8 CPU: x64 Dateisystem: NTFS Benutzer: PC Suchlauf-Art: Bedrohungs-Suchlauf Ergebnis: Abgeschlossen Durchsuchte Objekte: 295411 Verstrichene Zeit: 19 Min, 48 Sek Speicher: Aktiviert Autostart: Aktiviert Dateisystem: Aktiviert Archive: Aktiviert Rootkits: Aktiviert Shuriken: Aktiviert PUP: Aktiviert PUM: Aktiviert Prozesse: 0 (No malicious items detected) Module: 0 (No malicious items detected) Registrierungsschlüssel: 0 (No malicious items detected) Registrierungswerte: 0 (No malicious items detected) Registrierungsdaten: 0 (No malicious items detected) Ordner: 0 (No malicious items detected) Dateien: 0 (No malicious items detected) Physische Sektoren: 0 (No malicious items detected) (end) AdwCleaner Logfile: Code:
ATTFilter # AdwCleaner v3.022 - Bericht erstellt am 28/03/2014 um 21:58:29
# Aktualisiert 13/03/2014 von Xplode
# Betriebssystem : Windows 8 (64 bits)
# Benutzername : PC - KISTLER
# Gestartet von : C:\Users\PC\Desktop\adwcleaner_3.022 (3).exe
# Option : Suchen
***** [ Dienste ] *****
***** [ Dateien / Ordner ] *****
***** [ Verknüpfungen ] *****
***** [ Registrierungsdatenbank ] *****
***** [ Browser ] *****
-\\ Internet Explorer v10.0.9200.16843
-\\ Google Chrome v33.0.1750.154
[ Datei : C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\preferences ]
*************************
AdwCleaner[R0].txt - [10005 octets] - [24/03/2014 10:56:51]
AdwCleaner[R1].txt - [1009 octets] - [24/03/2014 15:21:43]
AdwCleaner[R2].txt - [1333 octets] - [26/03/2014 13:32:33]
AdwCleaner[R3].txt - [1072 octets] - [26/03/2014 15:50:10]
AdwCleaner[R4].txt - [1452 octets] - [27/03/2014 10:47:30]
AdwCleaner[R5].txt - [1512 octets] - [27/03/2014 14:47:22]
AdwCleaner[R6].txt - [1419 octets] - [27/03/2014 20:22:46]
AdwCleaner[R7].txt - [1555 octets] - [28/03/2014 19:50:15]
AdwCleaner[R8].txt - [1112 octets] - [28/03/2014 21:58:29]
AdwCleaner[S0].txt - [8521 octets] - [24/03/2014 11:01:21]
AdwCleaner[S1].txt - [1347 octets] - [26/03/2014 13:32:49]
AdwCleaner[S2].txt - [1134 octets] - [26/03/2014 15:51:09]
AdwCleaner[S3].txt - [1529 octets] - [27/03/2014 14:52:17]
AdwCleaner[S4].txt - [1480 octets] - [27/03/2014 20:24:53]
AdwCleaner[S5].txt - [1618 octets] - [28/03/2014 19:50:33]
########## EOF - C:\AdwCleaner\AdwCleaner[R8].txt - [1532 octets] ##########
Nach dem NeustartAdwCleaner Logfile: Code:
ATTFilter # AdwCleaner v3.022 - Bericht erstellt am 28/03/2014 um 21:59:52
# Aktualisiert 13/03/2014 von Xplode
# Betriebssystem : Windows 8 (64 bits)
# Benutzername : PC - KISTLER
# Gestartet von : C:\Users\PC\Desktop\adwcleaner_3.022 (3).exe
# Option : Löschen
***** [ Dienste ] *****
***** [ Dateien / Ordner ] *****
***** [ Verknüpfungen ] *****
***** [ Registrierungsdatenbank ] *****
***** [ Browser ] *****
-\\ Internet Explorer v10.0.9200.16843
-\\ Google Chrome v33.0.1750.154
[ Datei : C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\preferences ]
*************************
AdwCleaner[R0].txt - [10005 octets] - [24/03/2014 10:56:51]
AdwCleaner[R1].txt - [1009 octets] - [24/03/2014 15:21:43]
AdwCleaner[R2].txt - [1333 octets] - [26/03/2014 13:32:33]
AdwCleaner[R3].txt - [1072 octets] - [26/03/2014 15:50:10]
AdwCleaner[R4].txt - [1452 octets] - [27/03/2014 10:47:30]
AdwCleaner[R5].txt - [1512 octets] - [27/03/2014 14:47:22]
AdwCleaner[R6].txt - [1419 octets] - [27/03/2014 20:22:46]
AdwCleaner[R7].txt - [1555 octets] - [28/03/2014 19:50:15]
AdwCleaner[R8].txt - [1612 octets] - [28/03/2014 21:58:49]
AdwCleaner[S0].txt - [8521 octets] - [24/03/2014 11:01:21]
AdwCleaner[S1].txt - [1347 octets] - [26/03/2014 13:32:49]
AdwCleaner[S2].txt - [1134 octets] - [26/03/2014 15:51:09]
AdwCleaner[S3].txt - [1529 octets] - [27/03/2014 14:52:17]
AdwCleaner[S4].txt - [1480 octets] - [27/03/2014 20:24:53]
AdwCleaner[S5].txt - [1618 octets] - [28/03/2014 19:50:33]
AdwCleaner[S6].txt - [1533 octets] - [28/03/2014 21:59:52]
########## EOF - C:\AdwCleaner\AdwCleaner[S6].txt - [1593 octets] ##########
Code:
ATTFilter ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.3 (03.23.2014:1)
OS: Windows 8 x64
Ran by PC on 28.03.2014 at 22:06:49.10
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~ Services
~~~ Registry Values
~~~ Registry Keys
~~~ Files
Failed to delete: [File] C:\Windows\Tasks\rmschedule.job
~~~ Folders
~~~ Event Viewer Logs were cleared
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 28.03.2014 at 22:14:11.65
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
ohhh ---keine neuen Logs...habs erst jetzt gesehen .hihi |
|
29.03.2014, 10:30
| #6 |
| | Entfernen Rvzr-a.akamaihd.net wegen Pop ups und grüne doppelbalken mit pop up beim scrollen Führe die Programme trozdem aus, obwohl du es schon getan hast. Schritt 1 Klicke bitte auf den Windowsbutton in der Taskleiste und dort wiederum auf "Systemsteuerung". Wenn du hier angelangt bist, gehe auf "Programme deinstallieren" unter "Programme". Hier kannst du nun folgende Programm deinstallieren.
Schritt 2 Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster. Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument Code:
ATTFilter SearchScopes: HKLM - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKCU - URL hxxp://www.trovigo.com/Results.aspx?gd=&ctid=CT3324416&octid=EB_ORIGINAL_CTID&SearchSource=58&CUI=&UM=5&UP=SP9F6479D8-98BB-4B36-975E-B0811D346762&q={searchTerms}&SSPV=
SearchScopes: HKCU - SuggestionsURL_JSON hxxp://suggest.search.conduit.com/CSuggestJson.ashx?prefix={searchTerms}
SearchScopes: HKCU - {AC251AE8-941D-4772-8042-2B930CB6ECE3} URL =
AlternateDataStreams: C:\ProgramData\Temp:430C6D84
AlternateDataStreams: C:\ProgramData\Temp:D1B5B4F1
AlternateDataStreams: C:\ProgramData\Temp:DFC5A2B2
2014-03-19 11:31 - 2014-03-19 11:31 - 00000000 ____D () C:\Users\PC\AppData\Roaming\PCSpeed
2014-03-19 11:31 - 2014-03-19 11:31 - 00000000 ____D () C:\ProgramData\PCSpeed
S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [X]
2014-03-26 13:46 - 2014-03-26 13:46 - 00000000 ____D () C:\Program Files\Enigma Software Group
2014-03-26 13:46 - 2012-06-22 11:01 - 00022704 ____N () C:\Windows\system32\Drivers\EsgScanner.sys
2014-03-27 09:45 - 2014-03-27 09:45 - 00000000 ____D () C:\Program Files (x86)\ENIGMA
2014-03-27 09:45 - 1997-01-16 00:00 - 00071680 _____ (Microsoft Corporation) C:\Windows\ST5UNST.EXE
2014-03-27 09:43 - 2014-03-27 09:44 - 00005685 _____ () C:\ST5UNST.LOG
2014-03-27 09:43 - 2005-05-13 17:18 - 00042914 _____ () C:\Enigma.hlp
2014-03-27 09:43 - 2005-05-13 17:16 - 01893888 _____ () C:\ENIGMA.exe
2014-03-27 09:43 - 2005-05-13 16:48 - 00003935 _____ () C:\Readme.txt
C:\Users\PC\setup.exe
C:\Users\PC\siw13-setup.exe
C:\Users\PC\visioviewer_14.0.4750.1000.exe
Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
Schritt 3 ESET Online Scanner
Schritt 4 Starte noch einmal FRST.
|
|
29.03.2014, 19:31
| #7 |
| | Entfernen Rvzr-a.akamaihd.net wegen Pop ups und grüne doppelbalken mit pop up beim scrollen Hallo Habe Enigma Deinstalliert( War die Code Maschine die Im 2. Weltkrieg benutzt wurde-habe die erst nach dem auftreten der probleme installiert) Und ResultsAlpha war nicht zu finden-oder war das der hersteller der App(bin ein schneller Drücker). Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 13-03-2014 Ran by PC at 2014-03-29 19:20:06 Run:2 Running from C:\Users\PC\Desktop Boot Mode: Normal ============================================== Content of fixlist: ***************** SearchScopes: HKLM - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKCU - URL hxxp://www.trovigo.com/Results.aspx?gd=&ctid=CT3324416&octid=EB_ORIGINAL_CTID&SearchSource=58&CUI=&UM=5&UP=SP9F6479D8-98BB-4B36-975E-B0811D346762&q={searchTerms}&SSPV= SearchScopes: HKCU - SuggestionsURL_JSON hxxp://suggest.search.conduit.com/CSuggestJson.ashx?prefix={searchTerms} SearchScopes: HKCU - {AC251AE8-941D-4772-8042-2B930CB6ECE3} URL = AlternateDataStreams: C:\ProgramData\Temp:430C6D84 AlternateDataStreams: C:\ProgramData\Temp  1B5B4F1AlternateDataStreams: C:\ProgramData\Temp FC5A2B22014-03-19 11:31 - 2014-03-19 11:31 - 00000000 ____D () C:\Users\PC\AppData\Roaming\PCSpeed 2014-03-19 11:31 - 2014-03-19 11:31 - 00000000 ____D () C:\ProgramData\PCSpeed S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [X] 2014-03-26 13:46 - 2014-03-26 13:46 - 00000000 ____D () C:\Program Files\Enigma Software Group 2014-03-26 13:46 - 2012-06-22 11:01 - 00022704 ____N () C:\Windows\system32\Drivers\EsgScanner.sys 2014-03-27 09:45 - 2014-03-27 09:45 - 00000000 ____D () C:\Program Files (x86)\ENIGMA 2014-03-27 09:45 - 1997-01-16 00:00 - 00071680 _____ (Microsoft Corporation) C:\Windows\ST5UNST.EXE 2014-03-27 09:43 - 2014-03-27 09:44 - 00005685 _____ () C:\ST5UNST.LOG 2014-03-27 09:43 - 2005-05-13 17:18 - 00042914 _____ () C:\Enigma.hlp 2014-03-27 09:43 - 2005-05-13 17:16 - 01893888 _____ () C:\ENIGMA.exe 2014-03-27 09:43 - 2005-05-13 16:48 - 00003935 _____ () C:\Readme.txt C:\Users\PC\setup.exe C:\Users\PC\siw13-setup.exe C:\Users\PC\visioviewer_14.0.4750.1000.exe ***************** HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value was restored successfully. HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\URL => Value deleted successfully. HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\SuggestionsURL_JSON => Value deleted successfully. HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{AC251AE8-941D-4772-8042-2B930CB6ECE3} => Key deleted successfully. HKCR\CLSID\{AC251AE8-941D-4772-8042-2B930CB6ECE3} => Key not found. C:\ProgramData\Temp => ":430C6D84" ADS removed successfully. C:\ProgramData\Temp => " 1B5B4F1" ADS removed successfully.C:\ProgramData\Temp => " FC5A2B2" ADS removed successfully.C:\Users\PC\AppData\Roaming\PCSpeed => Moved successfully. C:\ProgramData\PCSpeed => Moved successfully. esgiguard => Service deleted successfully. C:\Program Files\Enigma Software Group => Moved successfully. C:\Windows\system32\Drivers\EsgScanner.sys => Moved successfully. "C:\Program Files (x86)\ENIGMA" => File/Directory not found. C:\Windows\ST5UNST.EXE => Moved successfully. "C:\ST5UNST.LOG" => File/Directory not found. "C:\Enigma.hlp" => File/Directory not found. "C:\ENIGMA.exe" => File/Directory not found. "C:\Readme.txt" => File/Directory not found. C:\Users\PC\setup.exe => Moved successfully. C:\Users\PC\siw13-setup.exe => Moved successfully. C:\Users\PC\visioviewer_14.0.4750.1000.exe => Moved successfully. ==== End of Fixlog ==== ok---der Eset habe letzte Nacht 8h laufen lassen bis 91 %...musste dann wieder ins Studium..Also ich werde mich dann zum Frühstück wieder melden(habe den Remove Found Threads Haken entfernt -vielleicht gehts jetzts schneller-bin schon bei 54 %) . Danke  das ergebnis von 91 % VC:\Users\PC\Documents\stick v\Emu\setup_Project64_2.1.exe Win32/Adware.Lollipop.D Anwendung Geändert von Ronan (29.03.2014 um 19:45 Uhr) |
|
30.03.2014, 13:21
| #8 |
| | Entfernen Rvzr-a.akamaihd.net wegen Pop ups und grüne doppelbalken mit pop up beim scrollen ESETSmartInstaller@High as downloader log: all ok # version=8 # OnlineScannerApp.exe=1.0.0.1 # OnlineScanner.ocx=1.0.0.6920 # api_version=3.0.2 # EOSSerial=fd48d54ab3dca34a9aa65da067a3df63 # engine=17676 # end=finished # remove_checked=false # archives_checked=true # unwanted_checked=false # unsafe_checked=false # antistealth_checked=true # utc_time=2014-03-29 10:49:34 # local_time=2014-03-29 11:49:34 (+0100, Mitteleuropäische Zeit) # country="Switzerland" # lang=1031 # osver=6.2.9200 NT # compatibility_mode=5893 16776574 100 94 1150280 43029795 0 0 # scanned=338303 # found=1 # cleaned=0 # scan_time=15028 sh=EE51BC65E632624027E2DD83F44A75784323D247 ft=1 fh=6e4c94e45ea75834 vn="Win32/Adware.Lollipop.D Anwendung" ac=I fn="C:\Users\PC\Documents\stick v\Emu\setup_Project64_2.1.exe" FRST Logfile: FRST Logfile: FRST Logfile: FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 13-03-2014 Ran by PC (administrator) on KISTLER on 30-03-2014 14:17:34 Running from C:\Users\PC\Desktop Windows 8 (X64) OS Language: German Standard Internet Explorer Version 10 Boot Mode: Normal The only official download link for FRST: Download link for 32-Bit version: Downloading Farbar Recovery Scan Tool Download link for 64-Bit Version: Downloading Farbar Recovery Scan Tool Download link from any site other than Bleeping Computer is unpermitted or outdated. See tutorial for FRST: FRST Tutorial - How to use Farbar Recovery Scan Tool - Malware Removal Guides and Tutorials ==================== Processes (Whitelisted) ================= (IvoSoft) C:\Program Files\Classic Shell\ClassicShellService.exe (Apache Software Foundation) C:\Program Files (x86)\xampp\apache\bin\apache.exe (Qualcomm Atheros Commnucations) C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\adminservice.exe (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\avp.exe (Broadcom Corp.) C:\Program Files\Broadcom\MemoryCard\BrcmCardReader.exe (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\dsiwmis.exe (Microsoft Corporation) C:\Windows\system32\dashost.exe (ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDService.exe () C:\Program Files (x86)\xampp\FileZillaFTP\FileZillaServer.exe (Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe (Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe (Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe () C:\Program Files\MySQL\MySQL Server 5.6\bin\mysqld.exe (Apache Software Foundation) C:\Program Files (x86)\xampp\apache\bin\apache.exe (PC Tools) C:\Program Files (x86)\Common Files\PC Tools\sMonitor\StartManSvc.exe (pdfforge GmbH) C:\Program Files (x86)\PDF Architect\HelperService.exe (Dritek System INC.) C:\Windows\RfBtnSvc64.exe (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe (Tenable Network Security, Inc) C:\Program Files (x86)\Tenable\Nessus\nessus-service.exe (Tenable Network Security, Inc) C:\Program Files (x86)\Tenable\Nessus\nessusd.exe (VMLite, Inc.) C:\Program Files\VMLite\VMLite Workstation\VMLiteService.exe (VMware, Inc.) C:\Windows\SysWOW64\vmnat.exe (VMware, Inc.) C:\Windows\SysWOW64\vmnetdhcp.exe (VMware, Inc.) C:\Program Files (x86)\VMware\VMware Player\vmware-authd.exe (Acer Incorporated) C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerSvc.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (pdfforge GmbH) C:\Program Files (x86)\PDF Architect\ConversionService.exe (Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer.exe (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\avpui.exe (IvoSoft) C:\Program Files\Classic Shell\ClassicStartMenu.exe (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LMutilps32.exe (ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe (Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbam.exe (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\tv_w32.exe (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\tv_x64.exe (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LManager.exe (ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe (Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.0.1119.516_x64__8wekyb3d8bbwe\LiveComm.exe (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\MMDx64Fx.exe (Intel Corporation) C:\Windows\system32\igfxext.exe (Acer Incorporated) C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerTray.exe (Atheros Communications) C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtvStack.exe (Intel Corporation) C:\Windows\System32\igfxtray.exe (Intel Corporation) C:\Windows\System32\hkcmd.exe (Intel Corporation) C:\Windows\System32\igfxpers.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Intel Corporation) C:\Windows\system32\igfxsrvc.exe () C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\ActivateDesktop.exe (Dritek System Inc.) C:\Program Files (x86)\RadioController\RfBtnHelper.exe (PC Tools) C:\Program Files (x86)\Common Files\PC Tools\sMonitor\SSDMonitor.exe (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (Acer Incorporated) C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerEvent.exe (Opera Software) C:\Program Files (x86)\Opera\20.0.1387.82_0\opera.exe () C:\Program Files (x86)\Opera\20.0.1387.82_0\opera_crashreporter.exe (Opera Software) C:\Program Files (x86)\Opera\20.0.1387.82_0\opera.exe (Opera Software) C:\Program Files (x86)\Opera\20.0.1387.82_0\opera.exe (Opera Software) C:\Program Files (x86)\Opera\20.0.1387.82_0\opera.exe (Opera Software) C:\Program Files (x86)\Opera\20.0.1387.82_0\opera.exe (Opera Software) C:\Program Files (x86)\Opera\20.0.1387.82_0\opera.exe (Opera Software) C:\Program Files (x86)\Opera\20.0.1387.82_0\opera.exe (Opera Software) C:\Program Files (x86)\Opera\20.0.1387.82_0\opera.exe (Opera Software) C:\Program Files (x86)\Opera\20.0.1387.82_0\opera.exe (Acer Incorporated) C:\Program Files\Packard Bell\Packard Bell Device Fast-lane\DeviceFastLaneSvc.exe (Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\AAM Updates Notifier.exe (Microsoft Corporation) C:\Windows\splwow64.exe (Apache Software Foundation) C:\Program Files (x86)\OpenOffice 4\program\swriter.exe (Apache Software Foundation) C:\Program Files (x86)\OpenOffice 4\program\soffice.exe (Apache Software Foundation) C:\Program Files (x86)\OpenOffice 4\program\soffice.bin (Opera Software) C:\Program Files (x86)\Opera\20.0.1387.82_0\opera.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [ETDCtrl] - C:\Program Files\Elantech\ETDCtrl.exe [2873744 2012-11-20] (ELAN Microelectronics Corp.) HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12503184 2012-06-11] (Realtek Semiconductor) HKLM\...\Run: [Logitech Download Assistant] - C:\Windows\System32\LogiLDA.dll [3933496 2012-09-20] (Logitech, Inc.) HKLM\...\Run: [AdobeAAMUpdater-1.0] - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [446392 2012-04-04] (Adobe Systems Incorporated) HKLM-x32\...\Run: [RadioController] - C:\Program Files (x86)\RadioController\RfBtnHelper.exe [111216 2013-05-21] (Dritek System Inc.) HKLM-x32\...\Run: [SSDMonitor] - C:\Program Files (x86)\Common Files\PC Tools\sMonitor\SSDMonitor.exe [105120 2012-08-21] (PC Tools) HKLM-x32\...\Run: [AdobeCS6ServiceManager] - C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1073312 2012-03-09] (Adobe Systems Incorporated) HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation) Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation) HKLM\...\Policies\Explorer\Run: [BtvStack] - C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtvStack.exe [132736 2013-01-28] ( (Atheros Communications)) HKU\S-1-5-21-3751542578-3293368922-2753858418-1001\...\Run: [swg] - C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2013-11-30] (Google Inc.) HKU\S-1-5-21-3751542578-3293368922-2753858418-1001\...\Run: [DAEMON Tools Lite] - C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3675352 2013-10-28] (Disc Soft Ltd) HKU\S-1-5-21-3751542578-3293368922-2753858418-1001\...\RunOnce: [Application Restart #1] - C:\Users\PC\AppData\Local\Pokki\Engine\pokki.exe --disable-internal-flash --noerrdialogs --no-message-box --disable-extensions --disable-web-security --disable-web-resources --disable-client-side-phishing-detection --enable-file-cookies --disable-sync --disable-breakpad --disable-bundled-ppapi-flash --disable-sync-tabs --disable-speech-input --disable-custom-jumplist --process-per-tab --debug-devtools-frontend="C:\Users\PC\AppData\Local\Pokki\Engine\inspector" --no-first-run --lang=en-US --disable-component-update --disable-prompt-on-repost --no-startup-window --disable-translate --disable-logging --disable-desktop-notifications --disable-gpu-process-prelaunch --flag-switches-begin --flag-switches-end --restore-last-session HKU\S-1-5-21-3751542578-3293368922-2753858418-1001\...\MountPoints2: E - "E:\LaunchU3.exe" -a HKU\S-1-5-21-3751542578-3293368922-2753858418-1001\...\MountPoints2: {27f172d8-ac2b-11e3-bed4-ff8fd3873c86} - "G:\LaunchU3.exe" -a HKU\S-1-5-21-3751542578-3293368922-2753858418-1001\...\MountPoints2: {70ff6613-a514-11e3-becf-24fd52199e86} - "E:\LaunchU3.exe" -a HKU\S-1-5-21-3751542578-3293368922-2753858418-1001\...\MountPoints2: {8f908f8c-5399-11e3-beac-20898483e6bc} - "E:\LaunchU3.exe" -a HKU\S-1-5-21-3751542578-3293368922-2753858418-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [swg] - C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2013-11-30] (Google Inc.) HKU\S-1-5-21-3751542578-3293368922-2753858418-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [DAEMON Tools Lite] - C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3675352 2013-10-28] (Disc Soft Ltd) HKU\S-1-5-21-3751542578-3293368922-2753858418-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\RunOnce: [Application Restart #1] - C:\Users\PC\AppData\Local\Pokki\Engine\pokki.exe --disable-internal-flash --noerrdialogs --no-message-box --disable-extensions --disable-web-security --disable-web-resources --disable-client-side-phishing-detection --enable-file-cookies --disable-sync --disable-breakpad --disable-bundled-ppapi-flash --disable-sync-tabs --disable-speech-input --disable-custom-jumplist --process-per-tab --debug-devtools-frontend="C:\Users\PC\AppData\Local\Pokki\Engine\inspector" --no-first-run --lang=en-US --disable-component-update --disable-prompt-on-repost --no-startup-window --disable-translate --disable-logging --disable-desktop-notifications --disable-gpu-process-prelaunch --flag-switches-begin --flag-switches-end --restore-last-session HKU\S-1-5-21-3751542578-3293368922-2753858418-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\MountPoints2: E - "E:\LaunchU3.exe" -a HKU\S-1-5-21-3751542578-3293368922-2753858418-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\MountPoints2: {27f172d8-ac2b-11e3-bed4-ff8fd3873c86} - "G:\LaunchU3.exe" -a HKU\S-1-5-21-3751542578-3293368922-2753858418-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\MountPoints2: {70ff6613-a514-11e3-becf-24fd52199e86} - "E:\LaunchU3.exe" -a HKU\S-1-5-21-3751542578-3293368922-2753858418-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\MountPoints2: {8f908f8c-5399-11e3-beac-20898483e6bc} - "E:\LaunchU3.exe" -a ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN Deutschland: Aktuelle Nachrichten, Outlook.com Email und Skype Login. SearchScopes: HKLM - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKLM - {AA9A4890-4262-4441-8977-E2FFCBFB706C} URL = hxxp://ch.yhs4.search.yahoo.com/yhs/search?hspart=acer&hsimp=yhs-acer_001&p={searchTerms} SearchScopes: HKLM - {AC251AE8-941D-4772-8042-2B930CB6ECE3} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MAPBJS SearchScopes: HKLM-x32 - {AA9A4890-4262-4441-8977-E2FFCBFB706C} URL = hxxp://ch.yhs4.search.yahoo.com/yhs/search?hspart=acer&hsimp=yhs-acer_001&p={searchTerms} SearchScopes: HKLM-x32 - {AC251AE8-941D-4772-8042-2B930CB6ECE3} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MAPBJS SearchScopes: HKCU - {AA9A4890-4262-4441-8977-E2FFCBFB706C} URL = hxxp://ch.yhs4.search.yahoo.com/yhs/search?hspart=acer&hsimp=yhs-acer_001&p={searchTerms} BHO: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation) BHO: ExplorerBHO Class - {449D0D6E-2412-4E61-B68F-1CB625CD9E52} - C:\Program Files\Classic Shell\ClassicExplorer64.dll (IvoSoft) BHO: Content Blocker Plugin - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\x64\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO) BHO: Virtual Keyboard Plugin - {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\x64\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO) BHO: CIESpeechBHO Class - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\IEPlugIn.dll (Qualcomm Atheros Commnucations) BHO: Safe Money Plugin - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\x64\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO) BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.) BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation) BHO: URL Advisor Plugin - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\x64\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO) BHO: ClassicIE9BHO Class - {EA801577-E6AD-4BD5-8F71-4BE0154331A4} - C:\Program Files\Classic Shell\ClassicIE9DLL_64.dll (IvoSoft) BHO-x32: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation) BHO-x32: PDF Architect Helper - {3A2D5EBA-F86D-4BD3-A177-019765996711} - C:\Program Files (x86)\PDF Architect\PDFIEHelper.dll (pdfforge GmbH) BHO-x32: ExplorerBHO Class - {449D0D6E-2412-4E61-B68F-1CB625CD9E52} - C:\Program Files\Classic Shell\ClassicExplorer32.dll (IvoSoft) BHO-x32: Content Blocker Plugin - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO) BHO-x32: Virtual Keyboard Plugin - {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO) BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO-x32: Safe Money Plugin - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO) BHO-x32: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.) BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) BHO-x32: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) BHO-x32: URL Advisor Plugin - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO) BHO-x32: ClassicIE9BHO Class - {EA801577-E6AD-4BD5-8F71-4BE0154331A4} - C:\Program Files\Classic Shell\ClassicIE9DLL_32.dll (IvoSoft) Toolbar: HKLM - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer64.dll (IvoSoft) Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.) Toolbar: HKLM-x32 - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer32.dll (IvoSoft) Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.) Toolbar: HKCU - No Name - {472734EA-242A-422B-ADF8-83D1E48CC825} - No File Toolbar: HKCU - Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.) DPF: HKLM-x32 {17492023-C23A-453E-A040-C7C580BBF700} hxxp://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab Tcpip\Parameters: [DhcpNameServer] 62.2.24.162 62.2.17.61 62.2.24.158 62.2.17.60 Tcpip\..\Interfaces\{52D9687F-A6D2-4457-A7C6-70F448192C7B}: [NameServer]8.8.8.8,8.8.4.4,4.2.2.1,4.2.2.2,208.67.222.222,208.67.220.220,8.26.56.26,8.20.247.20,156.154.70.1,156.154.71.1 Tcpip\..\Interfaces\{9B073C18-34FF-4FB1-B731-7BB2C6F0BD57}: [NameServer]8.8.8.8,8.8.4.4,4.2.2.1,4.2.2.2,208.67.222.222,208.67.220.220,8.26.56.26,8.20.247.20,156.154.70.1,156.154.71.1 Chrome: ======= CHR Extension: (Kaspersky Protection) - C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\blbkdnmdcafmfhinpmnlhhddbepgkeaa [2014-03-27] CHR Extension: (Modul zur Link-Untersuchung) - C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\dchlnpcodkpfdpacogkljefecpegganj [2013-10-31] CHR Extension: (Modul zum Sperren von gefährlichen Webseiten) - C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\hghkgaeecgjhjkannahfamoehjmkjail [2013-10-31] CHR Extension: (Virtual Keyboard) - C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\jagncdcchgajhfhijbbhecadmaiegcmh [2013-10-31] CHR Extension: (Google Wallet) - C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-10-31] CHR HKLM-x32\...\Chrome\Extension: [blbkdnmdcafmfhinpmnlhhddbepgkeaa] - https://chrome.google.com/webstore/detail/blbkdnmdcafmfhinpmnlhhddbepgkeaa [2013-10-31] CHR HKLM-x32\...\Chrome\Extension: [dchlnpcodkpfdpacogkljefecpegganj] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\ChromeExt\urladvisor.crx [2013-06-28] CHR HKLM-x32\...\Chrome\Extension: [hghkgaeecgjhjkannahfamoehjmkjail] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\ChromeExt\content_blocker_chrome.crx [2013-06-28] CHR HKLM-x32\...\Chrome\Extension: [jagncdcchgajhfhijbbhecadmaiegcmh] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\ChromeExt\virtkbd.crx [2014-03-21] ==================== Services (Whitelisted) ================= R2 Apache2; C:\Program Files (x86)\xampp\apache\bin\apache.exe [20537 2005-12-01] (Apache Software Foundation) R2 AtherosSvc; C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\adminservice.exe [227456 2013-01-28] (Qualcomm Atheros Commnucations) R2 AVP; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 14.0.0\avp.exe [214512 2013-10-01] (Kaspersky Lab ZAO) R2 BrcmCardReader; C:\Program Files\Broadcom\MemoryCard\BrcmCardReader.exe [176640 2012-08-21] (Broadcom Corp.) R2 ClassicShellService; C:\Program Files\Classic Shell\ClassicShellService.exe [68608 2013-06-29] (IvoSoft) R3 DeviceFastLaneService; C:\Program Files\Packard Bell\Packard Bell Device Fast-lane\DeviceFastLaneSvc.exe [469648 2012-11-17] (Acer Incorporated) R3 ePowerSvc; C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerSvc.exe [662088 2013-03-16] (Acer Incorporated) R2 ETDService; C:\Program Files\Elantech\ETDService.exe [100752 2012-11-20] (ELAN Microelectronics Corp.) R2 FileZilla Server; C:\Program Files (x86)\xampp\FileZillaFTP\FileZillaServer.exe [529408 2005-11-14] () R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [165760 2012-07-18] (Intel Corporation) R2 MBAMScheduler; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe [1809720 2014-03-05] (Malwarebytes Corporation) R2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [857912 2014-03-05] (Malwarebytes Corporation) R2 MySQL56; C:\ProgramData\MySQL\MySQL Server 5.6\my.ini [14244 2013-10-09] () R2 PCToolsSSDMonitorSvc; C:\Program Files (x86)\Common Files\PC Tools\sMonitor\StartManSvc.exe [794272 2012-08-21] (PC Tools) R2 PDF Architect Helper Service; C:\Program Files (x86)\PDF Architect\HelperService.exe [1320496 2013-04-08] (pdfforge GmbH) R2 PDF Architect Service; C:\Program Files (x86)\PDF Architect\ConversionService.exe [799280 2013-04-08] (pdfforge GmbH) R2 RfButtonDriverService; C:\Windows\RfBtnSvc64.exe [96880 2013-05-21] (Dritek System INC.) S3 rpcapd; C:\Program Files (x86)\WinPcap\rpcapd.exe [118520 2013-03-01] (Riverbed Technology, Inc.) R2 Tenable Nessus; C:\Program Files (x86)\Tenable\Nessus\nessus-service.exe [10240 2010-02-17] (Tenable Network Security, Inc) R2 VMLiteService; C:\Program Files\VMLite\VMLite Workstation\VMLiteService.exe [426600 2010-08-21] (VMLite, Inc.) S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [16048 2013-10-25] (Microsoft Corporation) ==================== Drivers (Whitelisted) ==================== S3 dot4; C:\Windows\system32\DRIVERS\Dot4.sys [151968 2012-10-19] (Windows (R) Win 7 DDK provider) S3 Dot4Print; C:\Windows\System32\drivers\Dot4Prt.sys [27040 2012-10-19] (Windows (R) Win 7 DDK provider) R1 dtsoftbus01; C:\Windows\System32\drivers\dtsoftbus01.sys [283064 2014-03-06] (Disc Soft Ltd) R0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [458336 2013-11-09] (Kaspersky Lab ZAO) S0 klelam; C:\Windows\System32\DRIVERS\klelam.sys [29792 2013-12-19] (Kaspersky Lab) S4 klflt; C:\Windows\System32\DRIVERS\klflt.sys [115296 2014-03-21] (Kaspersky Lab ZAO) R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [625760 2014-03-21] (Kaspersky Lab ZAO) R1 KLIM6; C:\Windows\system32\DRIVERS\klim6.sys [30304 2013-10-01] (Kaspersky Lab ZAO) R3 klkbdflt; C:\Windows\system32\DRIVERS\klkbdflt.sys [29280 2014-02-17] (Kaspersky Lab ZAO) R3 klmouflt; C:\Windows\system32\DRIVERS\klmouflt.sys [29280 2013-10-01] (Kaspersky Lab ZAO) R1 klpd; C:\Windows\system32\DRIVERS\klpd.sys [15456 2013-04-12] (Kaspersky Lab ZAO) R1 klwfp; C:\Windows\system32\DRIVERS\klwfp.sys [65120 2014-03-21] (Kaspersky Lab ZAO) R1 kneps; C:\Windows\system32\DRIVERS\kneps.sys [178272 2013-12-19] (Kaspersky Lab ZAO) R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-03-05] (Malwarebytes Corporation) R3 MBAMSwissArmy; C:\Windows\system32\drivers\44251B9B.sys [119512 2014-03-30] (Malwarebytes Corporation) R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63192 2014-03-05] (Malwarebytes Corporation) R2 NPF; C:\Windows\System32\drivers\npf.sys [36600 2013-03-01] (Riverbed Technology, Inc.) R3 Ps2Kb2Hid; C:\Windows\System32\drivers\aPs2Kb2Hid.sys [26736 2013-05-21] (Dritek System Inc.) R1 VBoxDrv; C:\Windows\System32\drivers\VBoxDrv.sys [204328 2010-08-11] (VMLite, Inc.) R3 VBoxNetAdp; C:\Windows\system32\DRIVERS\VBoxNetAdp.sys [146216 2010-08-11] (VMLite, Inc.) R3 VBoxNetFlt; C:\Windows\system32\DRIVERS\VBoxNetFlt.sys [165800 2010-08-11] (VMLite, Inc.) R3 vmkbd2; C:\Windows\system32\drivers\VMkbd.sys [33360 2013-02-26] (VMware, Inc.) R1 vmlitedrv; C:\Windows\System32\drivers\vmlitedrv.sys [14952 2010-08-03] (VMLite, Inc.) R3 vmlitestor; C:\Windows\system32\DRIVERS\vmlitestor.sys [177768 2010-08-11] (VMLite, Inc.) S3 VMLiteUSB; C:\Windows\System32\Drivers\VMLiteUSB.sys [150120 2010-08-11] (VMLite, Inc.) R1 VMLiteUSBMon; C:\Windows\System32\drivers\vmliteusbmon.sys [135272 2010-08-18] (VMLite, Inc.) R0 vsock; C:\Windows\System32\drivers\vsock.sys [70296 2012-10-24] (VMware, Inc.) S3 WUDFWpdComp; C:\Windows\system32\DRIVERS\WUDFRd.sys [198656 2012-07-26] (Microsoft Corporation) S3 cleanhlp; \??\C:\Program Files (x86)\Emsisoft Anti-Malware\cleanhlp64.sys [X] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-03-30 14:17 - 2014-03-30 14:17 - 00024923 _____ () C:\Users\PC\Desktop\FRST.txt 2014-03-30 14:03 - 2014-03-30 14:03 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\44251B9B.sys 2014-03-29 08:16 - 2014-03-29 08:16 - 00000093 _____ () C:\Users\PC\Desktop\gefahr.txt 2014-03-28 23:44 - 2014-03-28 23:44 - 07702726 _____ () C:\Users\PC\Downloads\M129.zip 2014-03-28 23:15 - 2014-03-24 12:18 - 02347384 _____ (ESET) C:\Users\PC\Desktop\esetsmartinstaller_deu (1).exe 2014-03-28 21:24 - 2014-03-28 21:20 - 00050477 _____ () C:\Users\PC\Desktop\Defogger (1).exe 2014-03-28 21:20 - 2014-03-28 21:20 - 00050477 _____ () C:\Users\PC\Downloads\Defogger.exe 2014-03-28 21:20 - 2014-03-28 21:20 - 00050477 _____ () C:\Users\PC\Downloads\Defogger (1).exe 2014-03-28 21:20 - 2014-03-28 21:20 - 00000536 _____ () C:\Users\PC\Downloads\defogger_disable.log 2014-03-28 21:20 - 2014-03-28 21:20 - 00000338 _____ () C:\Users\PC\Downloads\defogger_enable.log 2014-03-28 20:49 - 2014-03-26 16:58 - 01950720 _____ () C:\Users\PC\Desktop\adwcleaner_3.022 (3).exe 2014-03-28 20:21 - 2014-03-28 20:53 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\36710840.sys 2014-03-28 20:20 - 2014-03-28 20:20 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\15E8686E.sys 2014-03-28 20:13 - 2014-03-28 20:07 - 02157056 _____ (Farbar) C:\Users\PC\Desktop\FRST64.exe 2014-03-28 20:07 - 2014-03-29 20:20 - 00000000 ____D () C:\FRST 2014-03-28 20:07 - 2014-03-28 20:07 - 02157056 _____ (Farbar) C:\Users\PC\Downloads\FRST64.exe 2014-03-28 20:00 - 2014-03-28 20:00 - 00058082 _____ () C:\Windows\SysWOW64\AppLog.log 2014-03-28 17:24 - 2014-03-28 17:24 - 00000968 _____ () C:\Windows\PFRO.log 2014-03-28 12:34 - 2014-03-28 12:34 - 00000017 _____ () C:\Users\PC\AppData\Local\resmon.resmoncfg 2014-03-28 11:58 - 2014-03-28 11:58 - 00002120 _____ () C:\Users\PC\Documents\bookmark.htm 2014-03-27 21:35 - 2014-03-28 19:52 - 00294481 _____ () C:\Windows\WindowsUpdate.log 2014-03-27 21:35 - 2014-03-27 21:35 - 76353536 _____ () C:\Windows\system32\config\software.rrr 2014-03-27 21:35 - 2014-03-27 21:35 - 03690496 _____ () C:\Users\PC\s-1-5-21-3751542578-3293368922-2753858418-1001.rrr 2014-03-27 21:35 - 2014-03-27 21:35 - 00221184 _____ () C:\Windows\system32\config\default.rrr 2014-03-27 21:35 - 2014-03-27 21:35 - 00008192 _____ () C:\Users\Gast\s-1-5-21-3751542578-3293368922-2753858418-501.rrr 2014-03-27 21:05 - 2014-03-27 21:05 - 00000000 ____D () C:\Windows\ERUNT 2014-03-27 21:02 - 2014-03-27 21:02 - 01037734 _____ (Thisisu) C:\Users\PC\Downloads\JRT_6.1.2.exe 2014-03-27 21:02 - 2014-03-23 23:41 - 01038974 _____ (Thisisu) C:\Users\PC\Desktop\JRT_NEW.exe 2014-03-27 20:51 - 2014-03-27 20:51 - 00001145 _____ () C:\Users\Public\Desktop\Opera.lnk 2014-03-27 20:50 - 2014-03-27 20:51 - 34734328 _____ (Opera Software ASA) C:\Users\PC\Downloads\Opera_20.0.1387.82_Setup.exe 2014-03-27 20:30 - 2014-03-29 09:27 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\48230029.sys 2014-03-27 15:03 - 2014-03-27 15:03 - 00000000 ____D () C:\Users\PC\Downloads\SpybotPortable 2014-03-27 15:02 - 2014-03-27 15:03 - 57330680 _____ (PortableApps.com) C:\Users\PC\Downloads\SpybotPortable_2.2.paf.exe 2014-03-27 10:43 - 1998-06-06 00:32 - 01355776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSVBVM50.dll 2014-03-27 09:52 - 2014-03-27 12:04 - 00000000 ____D () C:\Program Files (x86)\CrypTool 2014-03-27 09:52 - 2014-03-27 09:52 - 00000000 ____D () C:\Users\PC\AppData\Roaming\CrypTool 2014-03-27 09:50 - 2014-03-27 09:51 - 67554681 _____ () C:\Users\PC\Downloads\SetupCrypTool_1_4_31_Beta6b_r3670_VS2008_de.exe 2014-03-26 20:24 - 2014-03-26 20:24 - 00316092 _____ () C:\Users\PC\Downloads\WG Physik.zip 2014-03-26 16:57 - 2014-03-26 16:58 - 01950720 _____ () C:\Users\PC\Downloads\adwcleaner_3.022 (3).exe 2014-03-26 16:49 - 2014-03-26 16:49 - 01950720 _____ () C:\Users\PC\Downloads\adwcleaner_3.022 (2).exe 2014-03-26 16:12 - 2014-03-26 16:33 - 00000000 ____D () C:\Users\PC\AppData\Roaming\Nico Mak Computing 2014-03-26 16:12 - 2014-03-26 16:12 - 04892480 _____ (WinZip International LLC ) C:\Users\PC\Downloads\wzmp_8 (1).exe 2014-03-26 16:10 - 2014-03-26 16:10 - 00001134 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2014-03-26 16:10 - 2014-03-26 16:10 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 2014-03-26 16:10 - 2014-03-05 10:26 - 00088280 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys 2014-03-26 16:10 - 2014-03-05 10:26 - 00063192 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys 2014-03-26 16:10 - 2014-03-05 10:26 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys 2014-03-26 16:09 - 2014-03-26 16:09 - 17523384 _____ (Malwarebytes Corporation ) C:\Users\PC\Downloads\mbam-setup-2.0.0.1000 (3).exe 2014-03-26 16:09 - 2014-03-26 16:09 - 17523384 _____ (Malwarebytes Corporation ) C:\Users\PC\Downloads\mbam-setup-2.0.0.1000 (2).exe 2014-03-26 14:47 - 2014-03-26 14:47 - 00000000 _____ () C:\autoexec.bat 2014-03-26 14:46 - 2014-03-26 15:33 - 00000000 ____D () C:\Windows\ACF5FE1B377240688B872D2A6EFD0A05.TMP 2014-03-26 14:32 - 2014-03-26 14:32 - 01950720 _____ () C:\Users\PC\Downloads\adwcleaner_3.022 (1).exe 2014-03-26 13:58 - 2014-03-30 00:37 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2014-03-26 13:58 - 2014-03-26 13:58 - 17523384 _____ (Malwarebytes Corporation ) C:\Users\PC\Downloads\mbam-setup-2.0.0.1000.exe 2014-03-26 13:58 - 2014-03-26 13:58 - 17523384 _____ (Malwarebytes Corporation ) C:\Users\PC\Downloads\mbam-setup-2.0.0.1000 (1).exe 2014-03-25 21:14 - 2014-03-25 21:14 - 00000500 _____ () C:\EamClean.log 2014-03-25 18:02 - 2014-03-26 13:36 - 00000000 ____D () C:\Users\PC\Documents\Anti-Malware 2014-03-25 18:02 - 2014-03-26 13:36 - 00000000 ____D () C:\Program Files (x86)\Emsisoft Anti-Malware 2014-03-25 16:55 - 2014-03-25 16:55 - 00000000 ____D () C:\Users\PC\AppData\Local\Norman Malware Cleaner 2014-03-25 16:50 - 2014-03-25 16:52 - 312761032 _____ (Norman Shark AS) C:\Users\PC\Downloads\Norman_Malware208_Cleaner.exe 2014-03-24 16:39 - 2014-03-24 16:39 - 00000000 ____D () C:\Users\Public\Documents\sun 2014-03-24 16:22 - 2014-03-24 16:22 - 04892480 _____ (WinZip International LLC ) C:\Users\PC\Downloads\wzmp_8.exe 2014-03-24 12:18 - 2014-03-24 12:18 - 02347384 _____ (ESET) C:\Users\PC\Downloads\esetsmartinstaller_deu.exe 2014-03-24 12:18 - 2014-03-24 12:18 - 02347384 _____ (ESET) C:\Users\PC\Downloads\esetsmartinstaller_deu (1).exe 2014-03-24 11:55 - 2014-03-28 23:06 - 00000000 ____D () C:\AdwCleaner 2014-03-24 11:55 - 2014-03-24 11:55 - 01950720 _____ () C:\Users\PC\Downloads\adwcleaner_3.022.exe 2014-03-24 10:35 - 2014-03-24 10:35 - 02347384 _____ (ESET) C:\Users\PC\Downloads\esetsmartinstaller_enu (1).exe 2014-03-22 19:16 - 2014-03-22 19:16 - 02347384 _____ (ESET) C:\Users\PC\Downloads\esetsmartinstaller_enu.exe 2014-03-22 19:16 - 2014-03-22 19:16 - 00000000 ____D () C:\Program Files (x86)\ESET 2014-03-22 18:25 - 2014-03-26 13:38 - 00000000 ____D () C:\Program Files (x86)\Advanced Disk Recovery 2014-03-22 00:58 - 2014-03-22 00:58 - 00000000 ____D () C:\Users\PC\AppData\Local\PDFCreator 2014-03-21 21:18 - 2014-03-21 21:17 - 00625760 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klif.sys 2014-03-21 21:18 - 2014-03-21 21:17 - 00115296 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klflt.sys 2014-03-21 21:18 - 2014-03-21 21:17 - 00065120 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klwfp.sys 2014-03-21 21:12 - 2014-03-21 21:12 - 01330072 _____ (CodecPerformer) C:\Users\PC\Downloads\CodecPerformerSetup (1).exe 2014-03-21 21:11 - 2014-03-21 21:11 - 01330072 _____ (CodecPerformer) C:\Users\PC\Downloads\CodecPerformerSetup.exe 2014-03-21 14:42 - 2014-03-21 20:53 - 00000000 ___DC () C:\Users\PC\AppData\Local\MigWiz 2014-03-21 12:23 - 2014-03-21 12:28 - 00000000 ____D () C:\Neuer Ordner (2) 2014-03-21 12:08 - 2014-03-27 21:35 - 00000000 ____D () C:\Users\Gast 2014-03-21 12:08 - 2014-03-21 12:08 - 00000000 ____D () C:\Program Files\Wireshark 2014-03-21 12:07 - 2014-03-21 12:07 - 00001112 _____ () C:\Users\Public\Desktop\OpenOffice 4.0.1.lnk 2014-03-21 11:44 - 2014-03-21 11:44 - 00450986 _____ () C:\Users\PC\Downloads\Zeugnis.zip 2014-03-21 11:41 - 2014-03-21 11:41 - 00254976 _____ () C:\Users\PC\Downloads\M124 Teil C HandOut (1).ppt 2014-03-21 11:41 - 2014-03-21 11:41 - 00236032 _____ () C:\Users\PC\Downloads\M124 Teil C HandOut.ppt 2014-03-21 11:38 - 2014-03-21 11:38 - 00410898 _____ () C:\Users\PC\Downloads\TB124_pdfs_11_15.rar 2014-03-20 12:27 - 2014-03-20 12:27 - 00695648 _____ () C:\Users\PC\Downloads\lmc-1.2.35-win32-Downloader (2).exe 2014-03-20 12:27 - 2014-03-20 12:27 - 00695648 _____ () C:\Users\PC\Downloads\lmc-1.2.35-win32-Downloader (1).exe 2014-03-20 12:25 - 2014-03-20 12:25 - 00695648 _____ () C:\Users\PC\Downloads\lmc-1.2.35-win32-Downloader.exe 2014-03-19 12:43 - 2014-03-19 12:43 - 01955184 _____ (Acro Software Inc. ) C:\Users\PC\Downloads\CuteWriter.exe 2014-03-19 12:43 - 2014-03-19 12:43 - 01955184 _____ (Acro Software Inc. ) C:\Users\PC\Downloads\CuteWriter (1).exe 2014-03-19 12:32 - 2014-03-19 12:32 - 00000000 ____D () C:\Users\PC\Documents\PDF Architect Files 2014-03-19 12:32 - 2014-03-19 12:32 - 00000000 ____D () C:\Program Files\PDFCreator 2014-03-19 12:32 - 2014-03-19 12:32 - 00000000 ____D () C:\Program Files (x86)\PDF Architect 2014-03-19 12:32 - 2014-01-31 13:22 - 00110776 _____ (pdfforge GmbH) C:\Windows\system32\pdfcmon.dll 2014-03-19 12:20 - 2014-03-19 12:20 - 00450404 _____ () C:\Users\PC\Downloads\Scann (1).zip 2014-03-18 18:48 - 2014-03-18 18:49 - 06294991 _____ () C:\Users\PC\Downloads\News from France (1).zip 2014-03-18 18:48 - 2014-03-18 18:48 - 06294991 _____ () C:\Users\PC\Downloads\News from France.zip 2014-03-17 17:49 - 2014-03-17 17:49 - 00162220 _____ () C:\Users\PC\Documents\loos.rns 2014-03-15 23:12 - 2013-10-25 09:34 - 00035856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdBoot.sys 2014-03-15 23:12 - 2013-10-25 00:34 - 00248240 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdFilter.sys 2014-03-15 21:19 - 2014-01-31 02:48 - 01339392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll 2014-03-15 21:19 - 2014-01-31 02:06 - 01628160 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll 2014-03-14 22:37 - 2014-02-23 10:13 - 02241536 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2014-03-14 22:37 - 2014-02-23 10:13 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2014-03-14 22:37 - 2014-02-23 10:13 - 00915968 _____ (Microsoft Corporation) C:\Windows\system32\uxtheme.dll 2014-03-14 22:37 - 2014-02-23 10:13 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\UXInit.dll 2014-03-14 22:37 - 2014-02-23 10:13 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2014-03-14 22:37 - 2014-02-23 10:12 - 19273216 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-03-14 22:37 - 2014-02-23 10:12 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2014-03-14 22:37 - 2014-02-23 10:12 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2014-03-14 22:37 - 2014-02-23 10:11 - 15404032 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2014-03-14 22:37 - 2014-02-23 10:11 - 03960320 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2014-03-14 22:37 - 2014-02-23 10:11 - 02648576 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2014-03-14 22:37 - 2014-02-23 10:11 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2014-03-14 22:37 - 2014-02-23 10:11 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2014-03-14 22:37 - 2014-02-23 10:11 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2014-03-14 22:37 - 2014-02-23 10:11 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2014-03-14 22:37 - 2014-02-23 10:11 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2014-03-14 22:37 - 2014-02-23 08:54 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2014-03-14 22:37 - 2014-02-23 08:54 - 01140736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2014-03-14 22:37 - 2014-02-23 08:54 - 00044032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UXInit.dll 2014-03-14 22:37 - 2014-02-23 08:53 - 14358016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2014-03-14 22:37 - 2014-02-23 08:53 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2014-03-14 22:37 - 2014-02-23 08:53 - 02877952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2014-03-14 22:37 - 2014-02-23 08:53 - 02049024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2014-03-14 22:37 - 2014-02-23 08:53 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2014-03-14 22:37 - 2014-02-23 08:53 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2014-03-14 22:37 - 2014-02-23 08:53 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2014-03-14 22:37 - 2014-02-23 08:53 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2014-03-14 22:37 - 2014-02-23 08:53 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2014-03-14 22:37 - 2014-02-23 08:53 - 00039936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2014-03-14 22:37 - 2014-02-23 08:53 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2014-03-14 22:37 - 2014-02-23 08:35 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-03-14 22:37 - 2014-02-23 08:31 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2014-03-14 22:37 - 2014-02-23 06:06 - 00534528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\uxtheme.dll 2014-03-14 14:56 - 2014-03-14 14:57 - 107806720 _____ () C:\Users\PC\Downloads\ipfire-2.13.i586-full-core75 (1).iso 2014-03-14 14:41 - 2014-03-21 12:34 - 00453056 _____ () C:\Windows\system32\FNTCACHE.DAT 2014-03-14 14:21 - 2014-03-05 00:52 - 00694240 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2014-03-14 14:21 - 2014-03-05 00:52 - 00078304 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2014-03-14 13:26 - 2014-02-08 06:34 - 04036608 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2014-03-14 13:25 - 2013-12-07 08:36 - 19751936 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll 2014-03-14 13:25 - 2013-12-07 07:15 - 17560576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll 2014-03-14 13:24 - 2014-02-06 01:41 - 00595968 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll 2014-03-14 13:24 - 2014-02-06 01:37 - 00496640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll 2014-03-14 13:23 - 2014-03-14 13:23 - 00000000 ____D () C:\Program Files\Microsoft Silverlight 2014-03-14 13:23 - 2014-03-14 13:23 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight 2014-03-14 12:50 - 2014-03-14 12:50 - 107806720 _____ () C:\Users\PC\Downloads\ipfire-2.13.i586-full-core75.iso 2014-03-14 11:51 - 2014-03-14 11:51 - 00376953 _____ () C:\Users\PC\Downloads\TB124_pdfs_06_10 (1).rar 2014-03-14 11:41 - 2014-03-14 11:41 - 00376953 _____ () C:\Users\PC\Downloads\TB124_pdfs_06_10.rar 2014-03-14 09:52 - 2014-03-14 09:52 - 00450404 _____ () C:\Users\PC\Downloads\Scann.zip 2014-03-13 12:54 - 2014-03-13 12:54 - 00000000 ____D () C:\unzipped 2014-03-08 11:52 - 2014-03-08 11:54 - 22892386 _____ () C:\Users\PC\Downloads\torbrowser-install-3.5.2.1_en-US.exe 2014-03-07 12:30 - 2014-03-07 12:30 - 00468685 _____ () C:\Users\PC\Downloads\TB124_pdfs_00_05.rar 2014-03-06 15:10 - 2014-03-24 17:41 - 00000000 ____D () C:\Program Files (x86)\South Park The Stick of Truth 2014-03-06 15:08 - 2014-03-06 15:08 - 00283064 _____ (Disc Soft Ltd) C:\Windows\system32\Drivers\dtsoftbus01.sys 2014-03-06 15:08 - 2014-03-06 15:08 - 00000000 ____D () C:\Program Files (x86)\DAEMON Tools Lite 2014-03-06 15:07 - 2014-03-06 15:09 - 00000000 ____D () C:\Users\PC\AppData\Roaming\DAEMON Tools Lite 2014-03-06 15:05 - 2014-03-06 15:09 - 00000000 ____D () C:\ProgramData\DAEMON Tools Lite 2014-03-04 20:46 - 2014-03-04 20:46 - 00000000 ____D () C:\Users\PC\Desktop\MP_2.Sem 2014-03-04 20:45 - 2014-03-04 20:45 - 00434129 _____ () C:\Users\PC\Downloads\MP_2.Sem.rar 2014-02-28 13:59 - 2014-02-28 13:59 - 04845384 _____ (Piriform Ltd) C:\Users\PC\Downloads\spsetup125.exe 2014-02-28 13:59 - 2014-02-28 13:59 - 00000808 _____ () C:\Users\Public\Desktop\Speccy.lnk 2014-02-28 13:59 - 2014-02-28 13:59 - 00000000 ____D () C:\Program Files\Speccy 2014-02-28 12:46 - 2013-12-13 15:51 - 00993304 _____ (NCH Software) C:\Users\PC\Desktop\wpsetup - Kopie.exe 2014-02-28 12:46 - 2013-11-22 13:00 - 27973080 _____ (Wireshark development team) C:\Users\PC\Desktop\Wireshark-win64-1.10.3 - Kopie.exe 2014-02-28 12:46 - 2013-11-09 19:09 - 04208536 _____ (2013 Gaijin Entertainment Corporation ) C:\Users\PC\Desktop\wt_launcher_1.0.1.278 (1) - Kopie.exe 2014-02-28 12:46 - 2013-11-09 19:02 - 04208536 _____ (2013 Gaijin Entertainment Corporation ) C:\Users\PC\Desktop\wt_launcher_1.0.1.278 - Kopie.exe 2014-02-28 12:46 - 2013-10-05 08:37 - 02074056 _____ () C:\Users\PC\Desktop\winrar-x64-500d - Kopie.exe 2014-02-28 12:45 - 2014-02-16 13:36 - 00047506 _____ () C:\Users\PC\Desktop\SYSU-324-013 (3) - Kopie.ics 2014-02-28 12:45 - 2014-02-16 13:35 - 00047636 _____ () C:\Users\PC\Desktop\Vor lauter... (1) - Kopie.zip 2014-02-28 12:45 - 2014-02-13 12:51 - 00047636 _____ () C:\Users\PC\Desktop\Vor lauter... - Kopie.zip 2014-02-28 12:45 - 2014-02-13 12:50 - 00047506 _____ () C:\Users\PC\Desktop\SYSU-324-013 (2) - Kopie.ics 2014-02-28 12:45 - 2014-02-13 12:50 - 00047506 _____ () C:\Users\PC\Desktop\SYSU-324-013 (1) - Kopie.ics 2014-02-28 12:45 - 2014-02-13 12:43 - 00047506 _____ () C:\Users\PC\Desktop\SYSU-324-013 - Kopie.ics 2014-02-28 12:45 - 2014-01-30 11:49 - 24394803 _____ () C:\Users\PC\Desktop\torbrowser-install-3.5.1_de - Kopie.exe 2014-02-28 12:45 - 2014-01-24 09:43 - 00004080 _____ () C:\Users\PC\Desktop\VirtualHost (2) - Kopie.zip 2014-02-28 12:45 - 2014-01-23 23:02 - 00004080 _____ () C:\Users\PC\Desktop\VirtualHost (1) - Kopie.zip 2014-02-28 12:45 - 2014-01-23 10:39 - 00004080 _____ () C:\Users\PC\Desktop\VirtualHost - Kopie.zip 2014-02-28 12:45 - 2014-01-16 10:20 - 00915128 _____ (Riverbed Technology, Inc.) C:\Users\PC\Desktop\WinPcap_4_1_3 (4) - Kopie.exe 2014-02-28 12:45 - 2014-01-16 10:20 - 00915128 _____ (Riverbed Technology, Inc.) C:\Users\PC\Desktop\WinPcap_4_1_3 (3) - Kopie.exe 2014-02-28 12:45 - 2014-01-16 10:14 - 00915128 _____ (Riverbed Technology, Inc.) C:\Users\PC\Desktop\WinPcap_4_1_3 (2) - Kopie.exe 2014-02-28 12:45 - 2014-01-16 10:14 - 00915128 _____ (Riverbed Technology, Inc.) C:\Users\PC\Desktop\WinPcap_4_1_3 (1) - Kopie.exe 2014-02-28 12:45 - 2014-01-16 10:14 - 00915128 _____ (Riverbed Technology, Inc.) C:\Users\PC\Desktop\WinPcap_4_1_3 - Kopie.exe 2014-02-28 12:45 - 2014-01-15 21:08 - 00209689 _____ () C:\Users\PC\Desktop\WG testmuster (1) - Kopie.zip 2014-02-28 12:45 - 2014-01-15 21:05 - 00209689 _____ () C:\Users\PC\Desktop\WG testmuster - Kopie.zip 2014-02-28 12:45 - 2014-01-04 22:07 - 04538368 _____ () C:\Users\PC\Desktop\SkypeWebPlugin-2.2.12059.16911 (2) - Kopie.msi 2014-02-28 12:45 - 2013-12-15 15:57 - 04538368 _____ () C:\Users\PC\Desktop\SkypeWebPlugin-2.2.12059.16911 (1) - Kopie.msi 2014-02-28 12:45 - 2013-12-15 15:55 - 04538368 _____ () C:\Users\PC\Desktop\SkypeWebPlugin-2.2.12059.16911 - Kopie.msi 2014-02-28 12:45 - 2013-12-14 12:34 - 06951048 _____ (Microsoft Corporation) C:\Users\PC\Desktop\Silverlight - Kopie.exe 2014-02-28 12:45 - 2013-11-30 09:50 - 68253288 _____ (VMLite, Inc.) C:\Users\PC\Desktop\VMLiteWorkstationSetup326 (1) - Kopie.exe 2014-02-28 12:45 - 2013-11-30 09:50 - 68253288 _____ (VMLite, Inc.) C:\Users\PC\Desktop\VMLiteWorkstationSetup326 - Kopie.exe 2014-02-28 12:45 - 2013-11-30 09:47 - 486678800 _____ (Microsoft Corporation) C:\Users\PC\Desktop\WindowsXPMode_de-de - Kopie.exe 2014-02-28 12:45 - 2013-11-25 20:51 - 05831344 _____ (TeamViewer GmbH) C:\Users\PC\Desktop\TeamViewer_Setup_de-eof - Kopie.exe 2014-02-28 12:45 - 2013-11-15 10:32 - 00719360 _____ () C:\Users\PC\Desktop\SDM_DE (1) - Kopie.msi 2014-02-28 12:45 - 2013-11-15 10:32 - 00719360 _____ () C:\Users\PC\Desktop\SDM_DE - Kopie.msi 2014-02-28 12:45 - 2013-10-10 13:08 - 00000288 _____ () C:\Users\PC\Desktop\Tabelle_erstellen - Kopie.rar 2014-02-28 12:44 - 2013-08-21 14:41 - 542212452 _____ () C:\Users\PC\Desktop\ronny - Kopie.zip 2014-02-28 12:43 - 2014-02-12 17:19 - 00733013 _____ () C:\Users\PC\Desktop\Outlook (1) - Kopie.zip 2014-02-28 12:43 - 2014-01-31 19:52 - 01158016 _____ () C:\Users\PC\Desktop\Modul 307_Präsentation - Kopie.pptx 2014-02-28 12:43 - 2014-01-23 23:02 - 00074377 _____ () C:\Users\PC\Desktop\Lösung der 1 Woche - Kopie.zip 2014-02-28 12:43 - 2014-01-23 10:40 - 01256210 _____ () C:\Users\PC\Desktop\Einstellung Netzwerkkarte - Kopie.zip 2014-02-28 12:43 - 2014-01-23 10:39 - 00318486 _____ () C:\Users\PC\Desktop\Installationsdokumentation neu - Kopie.zip 2014-02-28 12:43 - 2014-01-15 21:04 - 00004305 _____ () C:\Users\PC\Desktop\image001 - Kopie.emz 2014-02-28 12:43 - 2013-12-21 14:29 - 107773952 _____ () C:\Users\PC\Desktop\ipfire-2.13.i586-full-core73 (1) - Kopie.iso 2014-02-28 12:43 - 2013-12-21 10:55 - 107773952 _____ () C:\Users\PC\Desktop\ipfire-2.13.i586-full-core73 - Kopie.iso 2014-02-28 12:43 - 2013-12-19 20:58 - 04010464 _____ () C:\Users\PC\Desktop\LOTROProgressive_de_1.368 (1) - Kopie.exe 2014-02-28 12:43 - 2013-12-19 20:58 - 04010464 _____ () C:\Users\PC\Desktop\LOTROProgressive_de_1.368 - Kopie.exe 2014-02-28 12:43 - 2013-12-19 20:54 - 08711768 _____ () C:\Users\PC\Desktop\LOTROProgressive_de_4.28 (2) - Kopie.exe 2014-02-28 12:43 - 2013-12-19 20:53 - 08711768 _____ () C:\Users\PC\Desktop\LOTROProgressive_de_4.28 (1) - Kopie.exe 2014-02-28 12:43 - 2013-12-19 20:50 - 08711768 _____ () C:\Users\PC\Desktop\LOTROProgressive_de_4.28 - Kopie.exe 2014-02-28 12:43 - 2013-12-14 12:34 - 00265752 _____ (Secure By Design Inc.) C:\Users\PC\Desktop\Ninite CutePDF Installer (1) - Kopie.exe 2014-02-28 12:43 - 2013-12-14 11:59 - 00265752 _____ (Secure By Design Inc.) C:\Users\PC\Desktop\Ninite CutePDF Installer - Kopie.exe 2014-02-28 12:43 - 2013-12-13 18:23 - 00031992 _____ () C:\Users\PC\Desktop\einsatzkompetenz08-12sys - Kopie.ashx 2014-02-28 12:43 - 2013-12-13 15:54 - 01628578 _____ () C:\Users\PC\Desktop\Portscanner3.0.0.0 - Kopie.zip 2014-02-28 12:43 - 2013-12-06 10:38 - 05249448 _____ (ParetoLogic Inc.) C:\Users\PC\Desktop\ParetoLogic PC Health Advisor_de - Kopie.exe 2014-02-28 12:43 - 2013-12-05 09:55 - 00013304 _____ () C:\Users\PC\Desktop\Prüfungsresultate - Kopie.xlsx 2014-02-28 12:43 - 2013-11-21 10:07 - 15220658 _____ () C:\Users\PC\Desktop\pdfsam-2.2.2-out - Kopie.zip 2014-02-28 12:43 - 2013-11-18 19:19 - 06640543 _____ () C:\Users\PC\Desktop\mein erstes Programm - Kopie.exe 2014-02-28 12:43 - 2013-11-18 19:16 - 00011944 _____ () C:\Users\PC\Desktop\mein erstes Programm - Kopie.cpp 2014-02-28 12:43 - 2013-11-18 18:52 - 16198832 _____ (Geek Software GmbH ) C:\Users\PC\Desktop\pdf24-creator-6.0.1 - Kopie.exe 2014-02-28 12:43 - 2013-11-16 20:15 - 00258961 _____ () C:\Users\PC\Desktop\Outlook - Kopie.zip 2014-02-28 12:43 - 2013-09-05 10:33 - 00044138 _____ () C:\Users\PC\Desktop\m100 Übungen Kapitel 1 - Kopie.zip 2014-02-28 12:43 - 2013-09-05 10:33 - 00043600 _____ () C:\Users\PC\Desktop\m100 Übungen Kapitel 2 - Kopie.zip 2014-02-28 12:42 - 2014-02-28 11:36 - 02437369 _____ () C:\Users\PC\Desktop\CPU_Typen (1) - Kopie.rar 2014-02-28 12:42 - 2014-02-28 10:59 - 02437369 _____ () C:\Users\PC\Desktop\CPU_Typen - Kopie.rar 2014-02-28 12:42 - 2014-02-17 15:22 - 00031992 _____ () C:\Users\PC\Desktop\einsatzkompetenz08-12sys (6) - Kopie.ashx 2014-02-28 12:42 - 2014-02-11 11:43 - 00921000 _____ (Oracle Corporation) C:\Users\PC\Desktop\chromeinstall-7u51 - Kopie.exe 2014-02-28 12:42 - 2014-01-25 20:05 - 00499619 _____ () C:\Users\PC\Desktop\bewerbung - Kopie.zip 2014-02-28 12:42 - 2014-01-23 23:00 - 00831705 _____ () C:\Users\PC\Desktop\DNS-Einrichten mit Yast einrichten - Kopie.zip 2014-02-28 12:42 - 2014-01-10 12:10 - 00031992 _____ () C:\Users\PC\Desktop\einsatzkompetenz08-12sys (5) - Kopie.ashx 2014-02-28 12:42 - 2013-12-13 18:23 - 00031992 _____ () C:\Users\PC\Desktop\einsatzkompetenz08-12sys (4) - Kopie.ashx 2014-02-28 12:42 - 2013-12-13 18:23 - 00031992 _____ () C:\Users\PC\Desktop\einsatzkompetenz08-12sys (3) - Kopie.ashx 2014-02-28 12:42 - 2013-12-13 18:23 - 00031992 _____ () C:\Users\PC\Desktop\einsatzkompetenz08-12sys (2) - Kopie.ashx 2014-02-28 12:42 - 2013-12-13 18:23 - 00031992 _____ () C:\Users\PC\Desktop\einsatzkompetenz08-12sys (1) - Kopie.ashx 2014-02-28 12:42 - 2013-12-05 15:05 - 00123035 _____ () C:\Users\PC\Desktop\Die naechste Pruefung - Kopie.zip 2014-02-28 12:42 - 2013-11-22 20:40 - 03372904 _____ (Best Removal Tool - Uninstall Tool,Uninstall Software and Remove Software with Software Uninstall tool ) C:\Users\PC\Desktop\BestRemovalTool_Setup - Kopie.exe 2014-02-28 12:42 - 2013-11-14 09:59 - 67670658 _____ () C:\Users\PC\Desktop\Altes Modulbuch 101 (1) - Kopie.zip 2014-02-28 12:42 - 2013-11-14 09:49 - 67670658 _____ () C:\Users\PC\Desktop\Altes Modulbuch 101 - Kopie.zip 2014-02-28 12:42 - 2013-11-14 09:45 - 00242734 _____ () C:\Users\PC\Desktop\ZP001 - Kopie.zip 2014-02-28 12:42 - 2013-11-14 09:41 - 03327721 _____ () C:\Users\PC\Desktop\Aufgaben 2.1%2C 2.2 - Kopie.rar 2014-02-28 12:42 - 2013-11-14 09:41 - 00068162 _____ () C:\Users\PC\Desktop\Aufgaben - Kopie.rar 2014-02-28 12:42 - 2013-11-14 09:36 - 00040232 _____ () C:\Users\PC\Desktop\Aufgaben 4.4-4.6 (1) - Kopie.zip 2014-02-28 12:42 - 2013-11-14 09:33 - 00040232 _____ () C:\Users\PC\Desktop\Aufgaben 4.4-4.6 - Kopie.zip 2014-02-28 12:42 - 2013-10-31 13:13 - 00819184 _____ (Google Inc.) C:\Users\PC\Desktop\ChromeSetup - Kopie.exe 2014-02-28 12:42 - 2013-09-21 13:35 - 06083952 _____ (Systweak Software ) C:\Users\PC\Desktop\advancedfileoptimizersetup_stg - Kopie.exe 2014-02-28 12:42 - 2013-09-20 17:11 - 06083952 _____ (Systweak Software ) C:\Users\PC\Desktop\advancedfileoptimizersetup_RAR (1) - Kopie.exe 2014-02-28 12:42 - 2013-09-12 10:35 - 06529865 _____ () C:\Users\PC\Desktop\dict-en - Kopie.oxt 2014-02-28 12:42 - 2013-08-23 09:06 - 162401424 _____ () C:\Users\PC\Desktop\Apache_OpenOffice_4.0.0_Win_x86_install_de - Kopie.exe 2014-02-28 11:36 - 2014-02-28 11:36 - 02437369 _____ () C:\Users\PC\Desktop\CPU_Typen (1).rar 2014-02-28 10:59 - 2014-02-28 10:59 - 02437369 _____ () C:\Users\PC\Desktop\CPU_Typen.rar ==================== One Month Modified Files and Folders ======= 2014-03-30 14:17 - 2014-03-30 14:17 - 00024923 _____ () C:\Users\PC\Desktop\FRST.txt 2014-03-30 14:17 - 2014-03-28 20:07 - 00000000 ____D () C:\FRST 2014-03-30 14:09 - 2013-09-25 11:33 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job 2014-03-30 14:07 - 2013-09-04 12:37 - 00000000 ____D () C:\Users\PC\AppData\Local\Adobe 2014-03-30 14:06 - 2014-01-16 11:40 - 00005116 _____ () C:\Windows\System32\Tasks\Microsoft Office 15 Sync Maintenance for Kistler-PC Kistler 2014-03-30 14:03 - 2014-03-30 14:03 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\44251B9B.sys 2014-03-30 14:02 - 2012-07-26 10:12 - 00000000 ____D () C:\Windows\system32\sru 2014-03-30 00:53 - 2013-08-08 17:08 - 00003600 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3751542578-3293368922-2753858418-1001 2014-03-30 00:37 - 2014-03-26 13:58 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2014-03-30 00:29 - 2013-10-31 13:13 - 00001118 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2014-03-30 00:29 - 2013-09-03 17:42 - 00000000 ____D () C:\ProgramData\Kaspersky Lab 2014-03-29 22:50 - 2013-08-12 21:44 - 00000000 ____D () C:\Users\PC\AppData\Local\CrashDumps 2014-03-29 21:29 - 2013-10-31 13:13 - 00001114 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2014-03-29 20:20 - 2013-06-27 16:00 - 00000000 ____D () C:\Users\PC 2014-03-29 20:08 - 2013-08-17 23:15 - 00000312 _____ () C:\Windows\Tasks\RMAutoUpdate.job 2014-03-29 09:27 - 2014-03-27 20:30 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\48230029.sys 2014-03-29 08:16 - 2014-03-29 08:16 - 00000093 _____ () C:\Users\PC\Desktop\gefahr.txt 2014-03-29 02:18 - 2013-09-07 09:46 - 00000000 ____D () C:\Users\PC\AppData\Roaming\PapDesigner 2014-03-29 02:14 - 2013-12-09 01:06 - 00000000 ____D () C:\Users\PC\Desktop\Programme 2014-03-28 23:44 - 2014-03-28 23:44 - 07702726 _____ () C:\Users\PC\Downloads\M129.zip 2014-03-28 23:41 - 2013-05-21 22:04 - 00756280 _____ () C:\Windows\system32\perfh007.dat 2014-03-28 23:41 - 2013-05-21 22:04 - 00157208 _____ () C:\Windows\system32\perfc007.dat 2014-03-28 23:41 - 2012-07-26 09:28 - 01755112 _____ () C:\Windows\system32\PerfStringBackup.INI 2014-03-28 23:06 - 2014-03-24 11:55 - 00000000 ____D () C:\AdwCleaner 2014-03-28 23:01 - 2014-02-13 14:07 - 00001024 _____ () C:\.rnd 2014-03-28 23:01 - 2013-08-23 11:15 - 00000000 ____D () C:\ProgramData\VMware 2014-03-28 23:00 - 2012-07-26 09:22 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2014-03-28 21:21 - 2012-07-26 07:26 - 00524288 ___SH () C:\Windows\system32\config\BBI 2014-03-28 21:20 - 2014-03-28 21:24 - 00050477 _____ () C:\Users\PC\Desktop\Defogger (1).exe 2014-03-28 21:20 - 2014-03-28 21:20 - 00050477 _____ () C:\Users\PC\Downloads\Defogger.exe 2014-03-28 21:20 - 2014-03-28 21:20 - 00050477 _____ () C:\Users\PC\Downloads\Defogger (1).exe 2014-03-28 21:20 - 2014-03-28 21:20 - 00000536 _____ () C:\Users\PC\Downloads\defogger_disable.log 2014-03-28 21:20 - 2014-03-28 21:20 - 00000338 _____ () C:\Users\PC\Downloads\defogger_enable.log 2014-03-28 20:53 - 2014-03-28 20:21 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\36710840.sys 2014-03-28 20:20 - 2014-03-28 20:20 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\15E8686E.sys 2014-03-28 20:07 - 2014-03-28 20:13 - 02157056 _____ (Farbar) C:\Users\PC\Desktop\FRST64.exe 2014-03-28 20:07 - 2014-03-28 20:07 - 02157056 _____ (Farbar) C:\Users\PC\Downloads\FRST64.exe 2014-03-28 20:00 - 2014-03-28 20:00 - 00058082 _____ () C:\Windows\SysWOW64\AppLog.log 2014-03-28 20:00 - 2013-08-17 23:15 - 00000314 _____ () C:\Windows\Tasks\RMSchedule.job 2014-03-28 19:52 - 2014-03-27 21:35 - 00294481 _____ () C:\Windows\WindowsUpdate.log 2014-03-28 17:24 - 2014-03-28 17:24 - 00000968 _____ () C:\Windows\PFRO.log 2014-03-28 16:53 - 2012-07-26 10:12 - 00000000 ____D () C:\Windows\system32\NDF 2014-03-28 12:34 - 2014-03-28 12:34 - 00000017 _____ () C:\Users\PC\AppData\Local\resmon.resmoncfg 2014-03-28 11:58 - 2014-03-28 11:58 - 00002120 _____ () C:\Users\PC\Documents\bookmark.htm 2014-03-27 21:56 - 2013-08-30 11:56 - 00000000 ____D () C:\Users\PC\AppData\Local\VMware 2014-03-27 21:55 - 2013-08-30 11:43 - 00000000 ____D () C:\Users\PC\AppData\Roaming\VMware 2014-03-27 21:48 - 2013-11-30 09:52 - 00000000 ____D () C:\Users\PC\VMLites 2014-03-27 21:35 - 2014-03-27 21:35 - 76353536 _____ () C:\Windows\system32\config\software.rrr 2014-03-27 21:35 - 2014-03-27 21:35 - 03690496 _____ () C:\Users\PC\s-1-5-21-3751542578-3293368922-2753858418-1001.rrr 2014-03-27 21:35 - 2014-03-27 21:35 - 00221184 _____ () C:\Windows\system32\config\default.rrr 2014-03-27 21:35 - 2014-03-27 21:35 - 00008192 _____ () C:\Users\Gast\s-1-5-21-3751542578-3293368922-2753858418-501.rrr 2014-03-27 21:35 - 2014-03-21 12:08 - 00000000 ____D () C:\Users\Gast 2014-03-27 21:05 - 2014-03-27 21:05 - 00000000 ____D () C:\Windows\ERUNT 2014-03-27 21:02 - 2014-03-27 21:02 - 01037734 _____ (Thisisu) C:\Users\PC\Downloads\JRT_6.1.2.exe 2014-03-27 20:51 - 2014-03-27 20:51 - 00001145 _____ () C:\Users\Public\Desktop\Opera.lnk 2014-03-27 20:51 - 2014-03-27 20:50 - 34734328 _____ (Opera Software ASA) C:\Users\PC\Downloads\Opera_20.0.1387.82_Setup.exe 2014-03-27 20:51 - 2013-08-29 19:58 - 00000000 ____D () C:\Program Files (x86)\Opera 2014-03-27 15:53 - 2013-09-06 11:06 - 00286720 ___SH () C:\Users\PC\Desktop\Thumbs.db 2014-03-27 15:37 - 2013-08-30 10:24 - 00064512 ___SH () C:\Users\PC\Downloads\Thumbs.db 2014-03-27 15:03 - 2014-03-27 15:03 - 00000000 ____D () C:\Users\PC\Downloads\SpybotPortable 2014-03-27 15:03 - 2014-03-27 15:02 - 57330680 _____ (PortableApps.com) C:\Users\PC\Downloads\SpybotPortable_2.2.paf.exe 2014-03-27 12:04 - 2014-03-27 09:52 - 00000000 ____D () C:\Program Files (x86)\CrypTool 2014-03-27 10:45 - 2013-06-27 16:03 - 00000000 ___RD () C:\Users\PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup 2014-03-27 09:52 - 2014-03-27 09:52 - 00000000 ____D () C:\Users\PC\AppData\Roaming\CrypTool 2014-03-27 09:51 - 2014-03-27 09:50 - 67554681 _____ () C:\Users\PC\Downloads\SetupCrypTool_1_4_31_Beta6b_r3670_VS2008_de.exe 2014-03-27 09:38 - 2013-06-27 16:00 - 00000000 ____D () C:\Users\PC\AppData\Local\Packages 2014-03-26 20:24 - 2014-03-26 20:24 - 00316092 _____ () C:\Users\PC\Downloads\WG Physik.zip 2014-03-26 16:58 - 2014-03-28 20:49 - 01950720 _____ () C:\Users\PC\Desktop\adwcleaner_3.022 (3).exe 2014-03-26 16:58 - 2014-03-26 16:57 - 01950720 _____ () C:\Users\PC\Downloads\adwcleaner_3.022 (3).exe 2014-03-26 16:49 - 2014-03-26 16:49 - 01950720 _____ () C:\Users\PC\Downloads\adwcleaner_3.022 (2).exe 2014-03-26 16:33 - 2014-03-26 16:12 - 00000000 ____D () C:\Users\PC\AppData\Roaming\Nico Mak Computing 2014-03-26 16:12 - 2014-03-26 16:12 - 04892480 _____ (WinZip International LLC ) C:\Users\PC\Downloads\wzmp_8 (1).exe 2014-03-26 16:10 - 2014-03-26 16:10 - 00001134 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2014-03-26 16:10 - 2014-03-26 16:10 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 2014-03-26 16:09 - 2014-03-26 16:09 - 17523384 _____ (Malwarebytes Corporation ) C:\Users\PC\Downloads\mbam-setup-2.0.0.1000 (3).exe 2014-03-26 16:09 - 2014-03-26 16:09 - 17523384 _____ (Malwarebytes Corporation ) C:\Users\PC\Downloads\mbam-setup-2.0.0.1000 (2).exe 2014-03-26 15:33 - 2014-03-26 14:46 - 00000000 ____D () C:\Windows\ACF5FE1B377240688B872D2A6EFD0A05.TMP 2014-03-26 14:47 - 2014-03-26 14:47 - 00000000 _____ () C:\autoexec.bat 2014-03-26 14:32 - 2014-03-26 14:32 - 01950720 _____ () C:\Users\PC\Downloads\adwcleaner_3.022 (1).exe 2014-03-26 13:58 - 2014-03-26 13:58 - 17523384 _____ (Malwarebytes Corporation ) C:\Users\PC\Downloads\mbam-setup-2.0.0.1000.exe 2014-03-26 13:58 - 2014-03-26 13:58 - 17523384 _____ (Malwarebytes Corporation ) C:\Users\PC\Downloads\mbam-setup-2.0.0.1000 (1).exe 2014-03-26 13:58 - 2013-08-17 22:48 - 00000000 ____D () C:\ProgramData\Malwarebytes 2014-03-26 13:38 - 2014-03-22 18:25 - 00000000 ____D () C:\Program Files (x86)\Advanced Disk Recovery 2014-03-26 13:36 - 2014-03-25 18:02 - 00000000 ____D () C:\Users\PC\Documents\Anti-Malware 2014-03-26 13:36 - 2014-03-25 18:02 - 00000000 ____D () C:\Program Files (x86)\Emsisoft Anti-Malware 2014-03-25 21:14 - 2014-03-25 21:14 - 00000500 _____ () C:\EamClean.log 2014-03-25 16:55 - 2014-03-25 16:55 - 00000000 ____D () C:\Users\PC\AppData\Local\Norman Malware Cleaner 2014-03-25 16:52 - 2014-03-25 16:50 - 312761032 _____ (Norman Shark AS) C:\Users\PC\Downloads\Norman_Malware208_Cleaner.exe 2014-03-25 13:11 - 2013-12-14 12:03 - 00000000 ____D () C:\Users\PC\AppData\Local\CutePDF Writer 2014-03-25 12:30 - 2013-12-13 15:51 - 00000000 ____D () C:\Users\PC\AppData\Roaming\NCH Software 2014-03-24 17:41 - 2014-03-06 15:10 - 00000000 ____D () C:\Program Files (x86)\South Park The Stick of Truth 2014-03-24 16:39 - 2014-03-24 16:39 - 00000000 ____D () C:\Users\Public\Documents\sun 2014-03-24 16:22 - 2014-03-24 16:22 - 04892480 _____ (WinZip International LLC ) C:\Users\PC\Downloads\wzmp_8.exe 2014-03-24 12:18 - 2014-03-28 23:15 - 02347384 _____ (ESET) C:\Users\PC\Desktop\esetsmartinstaller_deu (1).exe 2014-03-24 12:18 - 2014-03-24 12:18 - 02347384 _____ (ESET) C:\Users\PC\Downloads\esetsmartinstaller_deu.exe 2014-03-24 12:18 - 2014-03-24 12:18 - 02347384 _____ (ESET) C:\Users\PC\Downloads\esetsmartinstaller_deu (1).exe 2014-03-24 11:55 - 2014-03-24 11:55 - 01950720 _____ () C:\Users\PC\Downloads\adwcleaner_3.022.exe 2014-03-24 10:48 - 2013-11-16 20:07 - 00000000 ____D () C:\Users\PC\Bewerbungm 2014-03-24 10:35 - 2014-03-24 10:35 - 02347384 _____ (ESET) C:\Users\PC\Downloads\esetsmartinstaller_enu (1).exe 2014-03-23 23:41 - 2014-03-27 21:02 - 01038974 _____ (Thisisu) C:\Users\PC\Desktop\JRT_NEW.exe 2014-03-22 19:16 - 2014-03-22 19:16 - 02347384 _____ (ESET) C:\Users\PC\Downloads\esetsmartinstaller_enu.exe 2014-03-22 19:16 - 2014-03-22 19:16 - 00000000 ____D () C:\Program Files (x86)\ESET 2014-03-22 00:58 - 2014-03-22 00:58 - 00000000 ____D () C:\Users\PC\AppData\Local\PDFCreator 2014-03-21 21:17 - 2014-03-21 21:18 - 00625760 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klif.sys 2014-03-21 21:17 - 2014-03-21 21:18 - 00115296 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klflt.sys 2014-03-21 21:17 - 2014-03-21 21:18 - 00065120 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klwfp.sys 2014-03-21 21:12 - 2014-03-21 21:12 - 01330072 _____ (CodecPerformer) C:\Users\PC\Downloads\CodecPerformerSetup (1).exe 2014-03-21 21:11 - 2014-03-21 21:11 - 01330072 _____ (CodecPerformer) C:\Users\PC\Downloads\CodecPerformerSetup.exe 2014-03-21 20:53 - 2014-03-21 14:42 - 00000000 ___DC () C:\Users\PC\AppData\Local\MigWiz 2014-03-21 12:38 - 2012-07-26 07:26 - 00000367 _____ () C:\Windows\win.ini 2014-03-21 12:34 - 2014-03-14 14:41 - 00453056 _____ () C:\Windows\system32\FNTCACHE.DAT 2014-03-21 12:34 - 2013-10-05 08:39 - 00000000 ____D () C:\Program Files\WinRAR 2014-03-21 12:28 - 2014-03-21 12:23 - 00000000 ____D () C:\Neuer Ordner (2) 2014-03-21 12:08 - 2014-03-21 12:08 - 00000000 ____D () C:\Program Files\Wireshark 2014-03-21 12:08 - 2013-08-23 09:09 - 00000000 ____D () C:\Program Files (x86)\OpenOffice 4 2014-03-21 12:07 - 2014-03-21 12:07 - 00001112 _____ () C:\Users\Public\Desktop\OpenOffice 4.0.1.lnk 2014-03-21 12:03 - 2013-10-05 08:39 - 00000000 ____D () C:\Users\PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR 2014-03-21 12:03 - 2013-08-24 09:33 - 00000000 ____D () C:\Users\PC\AppData\Roaming\Notepad++ 2014-03-21 12:03 - 2013-08-24 09:33 - 00000000 ____D () C:\Program Files (x86)\Notepad++ 2014-03-21 12:01 - 2013-09-06 07:10 - 00000000 ____D () C:\Windows\Minidump 2014-03-21 12:01 - 2013-03-06 06:20 - 00000000 ____D () C:\Windows\Panther 2014-03-21 11:44 - 2014-03-21 11:44 - 00450986 _____ () C:\Users\PC\Downloads\Zeugnis.zip 2014-03-21 11:41 - 2014-03-21 11:41 - 00254976 _____ () C:\Users\PC\Downloads\M124 Teil C HandOut (1).ppt 2014-03-21 11:41 - 2014-03-21 11:41 - 00236032 _____ () C:\Users\PC\Downloads\M124 Teil C HandOut.ppt 2014-03-21 11:38 - 2014-03-21 11:38 - 00410898 _____ () C:\Users\PC\Downloads\TB124_pdfs_11_15.rar 2014-03-20 12:27 - 2014-03-20 12:27 - 00695648 _____ () C:\Users\PC\Downloads\lmc-1.2.35-win32-Downloader (2).exe 2014-03-20 12:27 - 2014-03-20 12:27 - 00695648 _____ () C:\Users\PC\Downloads\lmc-1.2.35-win32-Downloader (1).exe 2014-03-20 12:25 - 2014-03-20 12:25 - 00695648 _____ () C:\Users\PC\Downloads\lmc-1.2.35-win32-Downloader.exe 2014-03-20 00:09 - 2012-07-26 10:12 - 00000000 ____D () C:\Windows\AUInstallAgent 2014-03-19 12:43 - 2014-03-19 12:43 - 01955184 _____ (Acro Software Inc. ) C:\Users\PC\Downloads\CuteWriter.exe 2014-03-19 12:43 - 2014-03-19 12:43 - 01955184 _____ (Acro Software Inc. ) C:\Users\PC\Downloads\CuteWriter (1).exe 2014-03-19 12:32 - 2014-03-19 12:32 - 00000000 ____D () C:\Users\PC\Documents\PDF Architect Files 2014-03-19 12:32 - 2014-03-19 12:32 - 00000000 ____D () C:\Program Files\PDFCreator 2014-03-19 12:32 - 2014-03-19 12:32 - 00000000 ____D () C:\Program Files (x86)\PDF Architect 2014-03-19 12:20 - 2014-03-19 12:20 - 00450404 _____ () C:\Users\PC\Downloads\Scann (1).zip 2014-03-18 19:32 - 2013-08-14 08:47 - 00000000 ____D () C:\Windows\system32\MRT 2014-03-18 19:29 - 2013-09-14 09:13 - 00000000 ____D () C:\ProgramData\Microsoft Help 2014-03-18 19:29 - 2013-06-27 16:54 - 90015360 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2014-03-18 19:29 - 2012-07-26 07:26 - 00262144 ___SH () C:\Windows\system32\config\ELAM 2014-03-18 18:49 - 2014-03-18 18:48 - 06294991 _____ () C:\Users\PC\Downloads\News from France (1).zip 2014-03-18 18:48 - 2014-03-18 18:48 - 06294991 _____ () C:\Users\PC\Downloads\News from France.zip 2014-03-17 17:49 - 2014-03-17 17:49 - 00162220 _____ () C:\Users\PC\Documents\loos.rns 2014-03-16 17:58 - 2012-07-26 10:12 - 00000000 ____D () C:\Windows\rescache 2014-03-16 17:18 - 2012-07-26 10:12 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools 2014-03-16 17:18 - 2012-07-26 10:12 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools 2014-03-16 17:18 - 2012-07-26 10:12 - 00000000 ____D () C:\Program Files\Windows Defender 2014-03-16 17:18 - 2012-07-26 10:12 - 00000000 ____D () C:\Program Files (x86)\Windows Defender 2014-03-15 21:31 - 2013-10-31 13:13 - 00002189 ____H () C:\Users\Public\Desktop\Google Chrome.lnk 2014-03-14 14:57 - 2014-03-14 14:56 - 107806720 _____ () C:\Users\PC\Downloads\ipfire-2.13.i586-full-core75 (1).iso 2014-03-14 14:36 - 2012-07-26 10:12 - 00000000 ____D () C:\Windows\system32\FxsTmp 2014-03-14 14:22 - 2013-06-27 16:03 - 00000000 ___RD () C:\Users\PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools 2014-03-14 14:17 - 2012-07-26 10:12 - 00000000 ___RD () C:\Windows\ToastData 2014-03-14 13:27 - 2013-11-15 10:35 - 00000039 _____ () C:\Windows\vbaddin.ini 2014-03-14 13:23 - 2014-03-14 13:23 - 00000000 ____D () C:\Program Files\Microsoft Silverlight 2014-03-14 13:23 - 2014-03-14 13:23 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight 2014-03-14 12:57 - 2013-08-30 13:26 - 00000000 ____D () C:\Users\PC\Documents\Virtual Machines 2014-03-14 12:50 - 2014-03-14 12:50 - 107806720 _____ () C:\Users\PC\Downloads\ipfire-2.13.i586-full-core75.iso 2014-03-14 11:51 - 2014-03-14 11:51 - 00376953 _____ () C:\Users\PC\Downloads\TB124_pdfs_06_10 (1).rar 2014-03-14 11:41 - 2014-03-14 11:41 - 00376953 _____ () C:\Users\PC\Downloads\TB124_pdfs_06_10.rar 2014-03-14 09:52 - 2014-03-14 09:52 - 00450404 _____ () C:\Users\PC\Downloads\Scann.zip 2014-03-13 12:54 - 2014-03-13 12:54 - 00000000 ____D () C:\unzipped 2014-03-11 21:09 - 2013-09-25 11:33 - 00003772 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater 2014-03-08 11:54 - 2014-03-08 11:52 - 22892386 _____ () C:\Users\PC\Downloads\torbrowser-install-3.5.2.1_en-US.exe 2014-03-07 14:05 - 2013-10-24 09:06 - 00000000 ____D () C:\Users\PC\wiss 2014-03-07 12:30 - 2014-03-07 12:30 - 00468685 _____ () C:\Users\PC\Downloads\TB124_pdfs_00_05.rar 2014-03-06 15:17 - 2013-11-09 19:01 - 00000000 ____D () C:\Users\PC\Documents\My Games 2014-03-06 15:09 - 2014-03-06 15:07 - 00000000 ____D () C:\Users\PC\AppData\Roaming\DAEMON Tools Lite 2014-03-06 15:09 - 2014-03-06 15:05 - 00000000 ____D () C:\ProgramData\DAEMON Tools Lite 2014-03-06 15:08 - 2014-03-06 15:08 - 00283064 _____ (Disc Soft Ltd) C:\Windows\system32\Drivers\dtsoftbus01.sys 2014-03-06 15:08 - 2014-03-06 15:08 - 00000000 ____D () C:\Program Files (x86)\DAEMON Tools Lite 2014-03-05 10:26 - 2014-03-26 16:10 - 00088280 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys 2014-03-05 10:26 - 2014-03-26 16:10 - 00063192 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys 2014-03-05 10:26 - 2014-03-26 16:10 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys 2014-03-05 00:52 - 2014-03-14 14:21 - 00694240 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2014-03-05 00:52 - 2014-03-14 14:21 - 00078304 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2014-03-04 20:46 - 2014-03-04 20:46 - 00000000 ____D () C:\Users\PC\Desktop\MP_2.Sem 2014-03-04 20:45 - 2014-03-04 20:45 - 00434129 _____ () C:\Users\PC\Downloads\MP_2.Sem.rar 2014-02-28 13:59 - 2014-02-28 13:59 - 04845384 _____ (Piriform Ltd) C:\Users\PC\Downloads\spsetup125.exe 2014-02-28 13:59 - 2014-02-28 13:59 - 00000808 _____ () C:\Users\Public\Desktop\Speccy.lnk 2014-02-28 13:59 - 2014-02-28 13:59 - 00000000 ____D () C:\Program Files\Speccy 2014-02-28 11:36 - 2014-02-28 12:42 - 02437369 _____ () C:\Users\PC\Desktop\CPU_Typen (1) - Kopie.rar 2014-02-28 11:36 - 2014-02-28 11:36 - 02437369 _____ () C:\Users\PC\Desktop\CPU_Typen (1).rar 2014-02-28 10:59 - 2014-02-28 12:42 - 02437369 _____ () C:\Users\PC\Desktop\CPU_Typen - Kopie.rar 2014-02-28 10:59 - 2014-02-28 10:59 - 02437369 _____ () C:\Users\PC\Desktop\CPU_Typen.rar Some content of TEMP: ==================== C:\Users\PC\AppData\Local\Temp\Quarantine.exe ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\rpcss.dll => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2014-03-28 10:35 ==================== End Of Log ============================ --- --- --- --- --- --- --- --- --- --- --- ---    Leider sind beide Probleme noch vorhanden. ResultsAlpha konnte manuel nicht gefunden werden und um es unter Programme zu deinstallieren. Geändert von Ronan (30.03.2014 um 13:29 Uhr) |
|
31.03.2014, 07:33
| #9 |
| | Entfernen Rvzr-a.akamaihd.net wegen Pop ups und grüne doppelbalken mit pop up beim scrollen Versuchen wir es mir Revo. Schritt 1 Donwloade dir bitte Revo Uninstaller. Starte es und suche nacheinander folgende Programme raus. Klicke dabei nach jedem Programm auf Uninstall und wähle Moderat.
Ist ResultsAlpha nun weg? |
|
31.03.2014, 10:48
| #10 |
| |  Entfernen Rvzr-a.akamaihd.net wegen Pop ups und grüne doppelbalken mit pop up beim scrollen Finde das ResultsAlpha NICHT,weder bei Programme noch mit Revo Uninstaller. Könnte es sein das sich hierbei MinGWGet version 0.1 -alpha-5 tarnt ?hxxp://www.msys-gmbh.de/index.php/startseite.html wohl heher nicht. Geändert von Ronan (31.03.2014 um 11:44 Uhr) |
|
31.03.2014, 13:50
| #11 |
| | Entfernen Rvzr-a.akamaihd.net wegen Pop ups und grüne doppelbalken mit pop up beim scrollen Suchen wir mal nach ResultsAlpha. Schritt 1 Lade SystemLook von jpshortstuff von einem der folgenden Spiegel herunter und speichere das Tool auf dem Desktop. SystemLook (64 bit)
|
|
01.04.2014, 09:10
| #12 |
| | Entfernen Rvzr-a.akamaihd.net wegen Pop ups und grüne doppelbalken mit pop up beim scrollen SystemLook 30.07.11 by jpshortstuff Log created at 15:16 on 31/03/2014 by PC Administrator - Elevation successful No Context: Code: No Context: --------- ========== reg ========== [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\ResultsAlpha] "DisplayName"="ResultsAlpha" "InstallTime"="2014-03-20 11:30:19" "Publisher"="ResultsAlpha" "HelpLink"="mailto:support@resultsalpha.net" "URLUpdateInfo"="hxxp://resultsalpha.net" "URLInfoAbout"="hxxp://resultsalpha.net/support" "DisplayVersion"="2014.03.18.233345" "NoModify"= 0x0000000001 (1) "NoRepair"= 0x0000000001 (1) "EstimatedSize"= 0x0000000b0e (2830) ========== folderfind ========== Searching for "*ResultsAlpha*" No folders found. ========== regfind ========== Searching for "*ResultsAlpha*" No data found. Searching for "---------" 2 versuch. SystemLook 30.07.11 by jpshortstuff Log created at 15:23 on 31/03/2014 by PC Administrator - Elevation successful ========== folderfind ========== Searching for "*ResultsAlpha*" No folders found. ========== regfind ========== Searching for "*ResultsAlpha*" No data found. -= EOF =- Das pop up erscheint weiterhin-verbindet sich aber nicht mehr weiter. Aus doppelbalken wurden 1 Balken und die wahlosen Wörter sind nach wie vor Grün. |
|
01.04.2014, 16:51
| #13 |
| | Entfernen Rvzr-a.akamaihd.net wegen Pop ups und grüne doppelbalken mit pop up beim scrollen Setzen wir Chrome mal zurück. Schritt 1 Starte bitte Revo Uninstaller und deinstalliere damit Chrome. Keine Daten behalten, reste entfernen lassen und danach Chrome wieder neuinstallieren. Jetzt nach dieser Anleitung Chrome zurücksetzen. Browsereinstellungen zurücksetzen Ist die Werbung nun verschwunden? |
|
01.04.2014, 18:32
| #14 |
| |  Entfernen Rvzr-a.akamaihd.net wegen Pop ups und grüne doppelbalken mit pop up beim scrollen  Habe chrome und Opera deinstalliert (opera schon vor Tagen-und neuinstalliert-hatte nichts gebracht)Jetzt mit Revo und wircklich alles gelöscht und siehe- Da ist mein Pc ist geheilt Ich danke Dir herzlichst das Du Dich meinem Problem angenommen hast vielleicht frage ich Dich mal über einzelheiten der einzelnen Schritte. Danke Danke Danke!!!!!!!! |
|
02.04.2014, 07:44
| #15 |
| | Entfernen Rvzr-a.akamaihd.net wegen Pop ups und grüne doppelbalken mit pop up beim scrollen Dann haben wir es geschaft. Wenn du zufrieden bist, kannst du mir hier gerne danken. Updates Bitte lade dir von Microsoft die neuste Version des Internet Explorers runter: Laden Sie Internet Explorer herunter Klicke nun auf den Windowsbutton in der Taskleiste und dort wiederum auf "Systemsteuerung". Wenn du hier angelangt bist, gehe auf "Programme deinstallieren" unter "Programme". Deinstalliere hier alle alten Java- und Flash-Versionen. Falls du Java brauchst kannst du es wieder herunter laden:
Öffne bitte mit beiden Browsern Adobe - Adobe Flash Player installieren und lade dir die neueste Version herunter. Entferne beim installieren den Haken bei McAfee Security Plus. Ich sehe in deinen Logs nichts gefährliches mehr. Cleanup Die Reihenfolge ist hier entscheidend.
Tipps  Welches Antiviren-Programm soll ich nehmen?Es gibt kein Antiviren-Programm, dass alle schädlinge findet. Du kannst dich nicht 100%-ig auf das Programm verlassen, es hängt immernoch von deinem Verhalten ab. Mit dem richtigen Verhalten schützt du dich am besten davor, dass du überhaupt infiziert wirst.
Nutze immer nur ein Antiviren Programm, da mehrere sich gegenseitig blockieren werden und es somit mehr schadet, als es nutzt. Falls du mehr als einen installiert hast, entscheide dich für einen von denen und deinstalliere die anderen. Halte ausserdem dein Antiviren-Programm immer aktuell, denn durch eine veraltete Datenbank kann das das Programm die neuen Infektionen nicht finden.
Du kannst auch regelmäßig einen On-Demand Scanner laufen lassen um dir eine zweite Meinung zu holen. Ein On-Demand Scanner läuft im gegensatz zu einem normalem Antiviren-Programm nicht ständig mit sondern nur wenn du ihm sagst, dass er das System scannen soll.
Was sollte ich vor dem Runterladen beachten?
Sonstige Tipps
Wenn du das Trojaner-Board untersützten willst, kannst du gerne Spenden. Ich wünsche dir noch eine schöne Zeit. |
|
| Themen zu Entfernen Rvzr-a.akamaihd.net wegen Pop ups und grüne doppelbalken mit pop up beim scrollen |
| brauche, entferne, entfernen, geholfen, grüne wörter, hilfe, ipfire, junkware, livecomm.exe, malwarebytes, neuinstallation, outlook 2013, packard bell, pop up, pop ups, removal, rvzr-a.akamaihd.net, scanner, scrollen, spybot, spyhunter, spyhunter entfernen, trotz, websites, wildtangent games, win32/adware.lollipop.d, windowsapps, wörter |
Linear-Darstellung
