Zurück   Trojaner-Board > Malware entfernen > Log-Analyse und Auswertung
Firefox öffnet selbststängig Tabs und ändert ohne zu klicken die offene internet seite.

Firefox öffnet selbststängig Tabs und ändert ohne zu klicken die offene internet seite.


Log-Analyse und Auswertung: Firefox öffnet selbststängig Tabs und ändert ohne zu klicken die offene internet seite.

Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML.

Antwort
Alt 16.04.2014, 17:38   #1
ulumangulu
 
Firefox öffnet selbststängig Tabs und ändert ohne zu klicken die offene internet seite. - Standard

Firefox öffnet selbststängig Tabs und ändert ohne zu klicken die offene internet seite.


Moin zusammen,

wie schon im Titel zu lesen ist öffnet Firefox selbstständig Tabs und ändert ohne zu klicken die offene Internetseite. Auf den Seiten steht dann ich solle Windows reparieren, Java oder Firefox aktualisieren und oder auch Webplayer aktualisieren. Zusätzlich hab auf vielen bekannten Internetseiten viele Werbungen.

Benutze den Laptop sehr selten, bestimmt 3 wochen gar nicht benutzt. Hab Ihn heute erst wieder hochgefahren. Bei letzter Betriebsname des laptops nicht gehabt.

Hätte gerne eure Hilfe, vielleicht schaut ihr euch das mal an.

MFG


Bin mal nach checkliste gegangen---->

FRST

Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 16-04-2014 01
Ran by flow (administrator) on FLOW-PC on 16-04-2014 16:18:54
Running from C:\Users\flow\Desktop
Windows 7 Ultimate (X64) OS Language: German Standard
Internet Explorer Version 8
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ 
Download link for 64-Bit Version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ 
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(AMD) C:\Windows\system32\atiesrxx.exe
(AMD) C:\Windows\system32\atieclxx.exe
(Cherished Technololgy LIMITED) C:\ProgramData\IePluginService\PluginService.exe
(Microsoft Corporation) C:\Windows\system32\WLANExt.exe
(Cherished Technololgy LIMITED) C:\ProgramData\WPM\wprotectmanager.exe
() C:\Windows\snuvcdsm.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(LSI Corporation) C:\Program Files\LSI SoftModem\agr64svc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Synaptics Incorporated) C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE
(Raptr, Inc) C:\Program Files (x86)\Raptr\raptr.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Raptr, Inc) C:\Program Files (x86)\Raptr\raptr_im.exe
(Raptr Inc.) C:\Program Files (x86)\Raptr\raptr_ep64.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PrivacyIconClient.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Security Scan 2.0\kss.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Security Scan 2.0\kss.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_13_0_0_182.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_13_0_0_182.exe
(Microsoft Corporation) C:\Program Files\Windows NT\Accessories\wordpad.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [SNUVCDSM] => C:\Windows\snuvcdsm.exe [27184 2009-08-10] ()
HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [287592 2013-08-07] (Intel Corporation)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [3016944 2013-05-20] (Synaptics Incorporated)
HKLM\...\Run: [PLFSetL] => C:\Windows\PLFSetL.exe [94208 2008-07-03] (sonix)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13662936 2013-10-24] (Realtek Semiconductor)
HKLM-x32\...\Run: [IMSS] => C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe [111640 2010-02-04] ()
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-12-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [767200 2014-03-12] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [snp2uvc] => C:\Windows\vsnp2uvc.exe
HKLM-x32\...\Run: [snuvcdsm] => C:\Windows\snuvcdsm.exe [27184 2009-08-10] ()
HKLM-x32\...\Run: [PLFSetL] => C:\Windows\PLFSetL.exe [94208 2008-07-03] (sonix)
HKLM-x32\...\Run: [GrooveMonitor] => C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [31016 2006-10-27] (Microsoft Corporation)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [689744 2014-02-25] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKU\S-1-5-21-1172046568-1533955037-2512659160-1000\...\Run: [Raptr] => C:\Program Files (x86)\Raptr\raptrstub.exe [55360 2014-04-11] (Raptr, Inc)
HKU\S-1-5-21-1172046568-1533955037-2512659160-1000\...\Run: [KSS] => C:\Program Files (x86)\Kaspersky Lab\Kaspersky Security Scan 2.0\kss.exe [202328 2012-12-07] (Kaspersky Lab ZAO)
HKU\S-1-5-21-1172046568-1533955037-2512659160-1000\...\MountPoints2: {18622db0-ae9e-11e3-a467-806e6f6e6963} - D:\launcher\launcher.exe
AppInit_DLLs: C:\PROGRA~2\SupTab\SEARCH~2.DLL => C:\Program Files (x86)\SupTab\SearchProtect64.dll [96768 2014-03-05] (Skytech Co., Ltd.)
AppInit_DLLs-x32: C:\PROGRA~2\SupTab\SEARCH~1.DLL => C:\Program Files (x86)\SupTab\SearchProtect32.dll [85504 2014-03-05] (Skytech Co., Ltd.)
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://istart.webssearches.com/?type=hp&ts=1395346308&from=tugs&uid=HitachiXHTS545032B9A300_100203PBPC06QDFW22BLX
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x77FEB9E12844CF01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://istart.webssearches.com/?type=hp&ts=1395346308&from=tugs&uid=HitachiXHTS545032B9A300_100203PBPC06QDFW22BLX
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://istart.webssearches.com/web/?type=ds&ts=1395346308&from=tugs&uid=HitachiXHTS545032B9A300_100203PBPC06QDFW22BLX&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://istart.webssearches.com/?type=hp&ts=1395346308&from=tugs&uid=HitachiXHTS545032B9A300_100203PBPC06QDFW22BLX
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://istart.webssearches.com/?type=hp&ts=1395346308&from=tugs&uid=HitachiXHTS545032B9A300_100203PBPC06QDFW22BLX
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://istart.webssearches.com/web/?type=ds&ts=1395346308&from=tugs&uid=HitachiXHTS545032B9A300_100203PBPC06QDFW22BLX&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://istart.webssearches.com/web/?type=ds&ts=1395346308&from=tugs&uid=HitachiXHTS545032B9A300_100203PBPC06QDFW22BLX&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://istart.webssearches.com/?type=hp&ts=1395346308&from=tugs&uid=HitachiXHTS545032B9A300_100203PBPC06QDFW22BLX
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://istart.webssearches.com/?type=hp&ts=1395346308&from=tugs&uid=HitachiXHTS545032B9A300_100203PBPC06QDFW22BLX
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://istart.webssearches.com/web/?type=ds&ts=1395346308&from=tugs&uid=HitachiXHTS545032B9A300_100203PBPC06QDFW22BLX&q={searchTerms}
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe hxxp://istart.webssearches.com/?type=sc&ts=1395346308&from=tugs&uid=HitachiXHTS545032B9A300_100203PBPC06QDFW22BLX
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://istart.webssearches.com/web/?type=ds&ts=1395346308&from=tugs&uid=HitachiXHTS545032B9A300_100203PBPC06QDFW22BLX&q={searchTerms}
SearchScopes: HKLM - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://istart.webssearches.com/web/?type=ds&ts=1395346308&from=tugs&uid=HitachiXHTS545032B9A300_100203PBPC06QDFW22BLX&q={searchTerms}
SearchScopes: HKLM-x32 - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://istart.webssearches.com/web/?type=ds&ts=1395346308&from=tugs&uid=HitachiXHTS545032B9A300_100203PBPC06QDFW22BLX&q={searchTerms}
SearchScopes: HKLM-x32 - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://istart.webssearches.com/web/?type=ds&ts=1395346308&from=tugs&uid=HitachiXHTS545032B9A300_100203PBPC06QDFW22BLX&q={searchTerms}
SearchScopes: HKCU - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://istart.webssearches.com/web/?type=ds&ts=1395346308&from=tugs&uid=HitachiXHTS545032B9A300_100203PBPC06QDFW22BLX&q={searchTerms}
BHO: media enhance - {11111111-1111-1111-1111-110411411150} - C:\Program Files (x86)\media enhance\media enhance-bho64.dll (freeven)
BHO: HQTotalS - {11111111-1111-1111-1111-110511311172} - C:\Program Files (x86)\HQTotalS\HQTotalS-bho64.dll (HQplustotalS)
BHO-x32: media enhance - {11111111-1111-1111-1111-110411411150} - C:\Program Files (x86)\media enhance\media enhance-bho.dll (freeven)
BHO-x32: HQTotalS - {11111111-1111-1111-1111-110511311172} - C:\Program Files (x86)\HQTotalS\HQTotalS-bho.dll (HQplustotalS)
BHO-x32: IETabPage Class - {3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C} - C:\Program Files (x86)\SupTab\SupTab.dll (Thinknice Co. Limited)
BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Avira Savings Advisor BHO - {A18A516C-AA41-46A9-92DB-60208917E442} - C:\Program Files (x86)\avira\Internet Explorer\avira32.dll ()
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1 192.168.0.2

FireFox:
========
FF ProfilePath: C:\Users\flow\AppData\Roaming\Mozilla\Firefox\Profiles\8ku83a0o.default
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_13_0_0_182.dll ()
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_182.dll ()
FF Plugin-x32: @java.com/DTPlugin,version=10.55.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.55.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @videolan.org/vlc,version=2.1.3 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: media enhance - C:\Users\flow\AppData\Roaming\Mozilla\Firefox\Profiles\8ku83a0o.default\Extensions\0c822a17-a68f-4066-9257-d229458d21ca@9c178d17-dc61-4aaf-b2da-1425ac7300ac.com [2014-03-21]
FF Extension: Avira Savings Advisor - C:\Users\flow\AppData\Roaming\Mozilla\Firefox\Profiles\8ku83a0o.default\Extensions\ciuvo-extension@avira.de [2014-04-16]
FF Extension: HQTotalS - C:\Users\flow\AppData\Roaming\Mozilla\Firefox\Profiles\8ku83a0o.default\Extensions\ee5ad154-f909-4cc0-aa51-d7e94e3fb0af@36204afd-f43e-4917-9c71-8384e2e4d3ad.com [2014-03-21]

==================== Services (Whitelisted) =================

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440400 2014-02-25] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440400 2014-02-25] (Avira Operations GmbH & Co. KG)
R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [15720 2013-08-07] (Intel Corporation)
R2 IePluginService; C:\ProgramData\IePluginService\PluginService.exe [705136 2014-04-11] (Cherished Technololgy LIMITED)
R2 KSS; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Security Scan 2.0\kss.exe [202328 2012-12-07] (Kaspersky Lab ZAO)
R2 Wpm; C:\ProgramData\WPM\wprotectmanager.exe [496640 2014-03-20] (Cherished Technololgy LIMITED)

==================== Drivers (Whitelisted) ====================

R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [314016 2014-03-22] ()
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108440 2014-02-25] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131576 2014-02-25] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2014-02-25] (Avira Operations GmbH & Co. KG)
R0 iaStorF; C:\Windows\System32\DRIVERS\iaStorF.sys [28008 2013-08-07] (Intel Corporation)
R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [43680 2014-03-22] ()
R3 SNP2UVC; C:\Windows\System32\DRIVERS\snp2uvc.sys [1801088 2009-09-10] ()

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-04-16 16:18 - 2014-04-16 16:19 - 00014015 _____ () C:\Users\flow\Desktop\FRST.txt
2014-04-16 16:18 - 2014-04-16 16:18 - 00000000 ____D () C:\FRST
2014-04-16 16:16 - 2014-04-16 16:16 - 02158080 _____ (Farbar) C:\Users\flow\Desktop\FRST64.exe
2014-04-16 15:48 - 2014-04-16 16:15 - 00000470 _____ () C:\Users\flow\Desktop\defogger_disable.log
2014-04-16 15:48 - 2014-04-16 15:48 - 00000000 _____ () C:\Users\flow\defogger_reenable
2014-04-16 15:47 - 2014-04-16 15:47 - 00050477 _____ () C:\Users\flow\Desktop\Defogger.exe
2014-04-16 15:44 - 2014-04-16 15:44 - 00000000 ____D () C:\Users\flow\Documents\My Received Files
2014-04-16 15:44 - 2014-04-16 15:44 - 00000000 ____D () C:\Users\flow\AppData\Roaming\MusicNet
2014-04-16 14:48 - 2014-04-16 14:48 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-04-16 14:48 - 2014-04-16 14:48 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-04-16 14:48 - 2014-04-16 14:48 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-04-16 14:48 - 2014-04-16 14:48 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-04-16 14:48 - 2014-04-16 14:48 - 00000000 ____D () C:\ProgramData\Sun
2014-04-16 14:48 - 2014-04-16 14:48 - 00000000 ____D () C:\ProgramData\Oracle
2014-04-16 14:48 - 2014-04-16 14:48 - 00000000 ____D () C:\Program Files (x86)\Java
2014-04-16 14:18 - 2014-04-16 14:18 - 00001077 _____ () C:\Users\flow\Desktop\Kaspersky Security Scan.lnk
2014-04-16 14:18 - 2014-04-16 14:18 - 00000000 ____D () C:\Users\flow\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Kaspersky Security Scan
2014-04-16 14:18 - 2014-04-16 14:18 - 00000000 ____D () C:\ProgramData\Kaspersky Lab
2014-04-16 14:18 - 2014-04-16 14:18 - 00000000 ____D () C:\Program Files (x86)\Kaspersky Lab
2014-04-16 14:17 - 2014-04-16 14:17 - 00185944 _____ (Лаборатория Касперского) C:\Users\flow\Downloads\kss12.0.1.117abRU_EN_DE_FR_ES_IT_JA_PT_ZH_5623.exe
2014-04-16 12:16 - 2014-04-16 12:16 - 00000000 ____D () C:\Users\flow\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AMD Gaming Evolved
2014-04-16 11:18 - 2014-04-16 11:19 - 00624736 _____ () C:\Users\flow\Downloads\uplayermediaplayer-setup.exe
2014-04-16 11:18 - 2014-04-16 11:18 - 01299520 _____ (Uniblue Systems Limited ) C:\Users\flow\Downloads\speedupmypc.exe
2014-04-16 11:14 - 2014-04-16 11:14 - 00003408 _____ () C:\Windows\System32\Tasks\aviraSWU
2014-04-16 11:14 - 2014-04-16 11:14 - 00000000 ____D () C:\Users\flow\AppData\Roaming\Avira
2014-04-16 11:13 - 2014-04-16 11:13 - 00002070 _____ () C:\Users\Public\Desktop\Avira Control Center.lnk
2014-04-16 11:12 - 2014-04-16 11:14 - 00000000 ____D () C:\Program Files (x86)\Avira
2014-04-16 11:12 - 2014-04-16 11:12 - 00000000 ____D () C:\ProgramData\Avira
2014-04-16 11:12 - 2014-02-25 11:41 - 00131576 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2014-04-16 11:12 - 2014-02-25 11:41 - 00108440 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2014-04-16 11:12 - 2014-02-25 11:41 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys
2014-04-16 11:09 - 2014-04-16 11:10 - 138607664 _____ () C:\Users\flow\Downloads\avira_free_antivirus_de_14.0.3.350(1).exe
2014-04-16 11:08 - 2014-04-16 11:09 - 138607664 _____ () C:\Users\flow\Downloads\avira_free_antivirus_de_14.0.3.350.exe
2014-03-30 14:19 - 2014-03-30 14:19 - 00000000 ____D () C:\Program Files (x86)\Microsoft Works
2014-03-30 14:18 - 2014-03-30 14:18 - 00000000 ____D () C:\Windows\PCHEALTH
2014-03-30 14:18 - 2014-03-30 14:18 - 00000000 ____D () C:\Program Files (x86)\Microsoft Visual Studio
2014-03-30 14:10 - 2014-03-30 14:10 - 00000000 ____D () C:\Program Files\Microsoft Office
2014-03-30 14:10 - 2014-03-30 14:10 - 00000000 ____D () C:\Program Files (x86)\Microsoft Visual Studio 8
2014-03-30 14:09 - 2014-03-30 14:20 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-03-30 14:09 - 2014-03-30 14:18 - 00000000 ____D () C:\Program Files (x86)\Microsoft Office
2014-03-30 14:09 - 2014-03-30 14:09 - 00000000 __RHD () C:\MSOCache
2014-03-30 14:09 - 2014-03-30 14:09 - 00000000 ____D () C:\Users\flow\AppData\Local\Microsoft Help
2014-03-23 01:26 - 2014-03-26 19:02 - 00000000 ____D () C:\Users\flow\Documents\Anno 1404
2014-03-22 23:16 - 2014-03-22 23:17 - 00000000 ____D () C:\ProgramData\Tages
2014-03-22 23:16 - 2014-03-22 23:16 - 00003100 _____ () C:\Windows\System32\Tasks\{1CED218F-0795-40BD-BE77-78A657CF385A}
2014-03-22 22:12 - 2014-03-22 22:42 - 2996255074 _____ () C:\Users\flow\Desktop\anno-1404-gameliebe.com.zip
2014-03-22 20:17 - 2014-03-22 23:18 - 00000000 ____D () C:\Users\flow\AppData\Roaming\Ubisoft
2014-03-22 19:54 - 2014-03-22 19:54 - 00314016 _____ () C:\Windows\system32\Drivers\atksgt.sys
2014-03-22 19:54 - 2014-03-22 19:54 - 00043680 _____ () C:\Windows\system32\Drivers\lirsgt.sys
2014-03-22 19:54 - 2009-03-16 15:18 - 00521560 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_4.dll
2014-03-22 19:54 - 2009-03-16 15:18 - 00517448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_4.dll
2014-03-22 19:54 - 2009-03-16 15:18 - 00235352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_4.dll
2014-03-22 19:54 - 2009-03-16 15:18 - 00174936 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_4.dll
2014-03-22 19:54 - 2009-03-16 15:18 - 00073544 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_3.dll
2014-03-22 19:54 - 2009-03-16 15:18 - 00069448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_3.dll
2014-03-22 19:54 - 2009-03-16 15:18 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_6.dll
2014-03-22 19:54 - 2009-03-16 15:18 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_6.dll
2014-03-22 19:54 - 2009-03-09 16:27 - 05425496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_41.dll
2014-03-22 19:54 - 2009-03-09 16:27 - 04178264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_41.dll
2014-03-22 19:54 - 2009-03-09 16:27 - 02430312 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_41.dll
2014-03-22 19:54 - 2009-03-09 16:27 - 01846632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_41.dll
2014-03-22 19:54 - 2009-03-09 16:27 - 00520544 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_41.dll
2014-03-22 19:54 - 2009-03-09 16:27 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_41.dll
2014-03-22 19:54 - 2008-10-15 08:03 - 00518480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_3.dll
2014-03-22 19:54 - 2008-10-15 08:03 - 00514384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_3.dll
2014-03-22 19:54 - 2008-10-15 08:03 - 00235856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_3.dll
2014-03-22 19:54 - 2008-10-15 08:03 - 00175440 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_3.dll
2014-03-22 19:54 - 2008-10-15 08:03 - 00074576 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_2.dll
2014-03-22 19:54 - 2008-10-15 08:03 - 00070992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_2.dll
2014-03-22 19:54 - 2008-10-15 08:03 - 00025936 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_5.dll
2014-03-22 19:54 - 2008-10-15 08:03 - 00023376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_5.dll
2014-03-22 19:54 - 2008-10-15 07:22 - 05631312 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_40.dll
2014-03-22 19:54 - 2008-10-15 07:22 - 04379984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_40.dll
2014-03-22 19:54 - 2008-10-15 07:22 - 02605920 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_40.dll
2014-03-22 19:54 - 2008-10-15 07:22 - 02036576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_40.dll
2014-03-22 19:54 - 2008-10-15 07:22 - 00519000 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_40.dll
2014-03-22 19:54 - 2008-10-15 07:22 - 00452440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_40.dll
2014-03-22 19:54 - 2008-07-30 07:20 - 00513544 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_2.dll
2014-03-22 19:54 - 2008-07-30 07:20 - 00509448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_2.dll
2014-03-22 19:54 - 2008-07-30 07:20 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_2.dll
2014-03-22 19:54 - 2008-07-30 07:20 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_2.dll
2014-03-22 19:54 - 2008-07-30 07:20 - 00072200 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_1.dll
2014-03-22 19:54 - 2008-07-30 07:20 - 00068616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_1.dll
2014-03-22 19:54 - 2008-07-10 12:01 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_39.dll
2014-03-22 19:54 - 2008-07-10 12:00 - 04992520 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_39.dll
2014-03-22 19:54 - 2008-07-10 12:00 - 03851784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_39.dll
2014-03-22 19:54 - 2008-07-10 12:00 - 01942552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_39.dll
2014-03-22 19:54 - 2008-07-10 12:00 - 01493528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_39.dll
2014-03-22 19:54 - 2008-07-10 12:00 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_39.dll
2014-03-22 19:54 - 2008-05-30 15:19 - 00511496 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_1.dll
2014-03-22 19:54 - 2008-05-30 15:19 - 00507400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_1.dll
2014-03-22 19:54 - 2008-05-30 15:18 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_1.dll
2014-03-22 19:54 - 2008-05-30 15:18 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_1.dll
2014-03-22 19:54 - 2008-05-30 15:17 - 00068104 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_0.dll
2014-03-22 19:54 - 2008-05-30 15:17 - 00065032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_0.dll
2014-03-22 19:54 - 2008-05-30 15:17 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_4.dll
2014-03-22 19:54 - 2008-05-30 15:16 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_4.dll
2014-03-22 19:54 - 2008-05-30 15:11 - 04991496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_38.dll
2014-03-22 19:54 - 2008-05-30 15:11 - 03850760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_38.dll
2014-03-22 19:54 - 2008-05-30 15:11 - 01941528 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_38.dll
2014-03-22 19:54 - 2008-05-30 15:11 - 01491992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_38.dll
2014-03-22 19:54 - 2008-05-30 15:11 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_38.dll
2014-03-22 19:54 - 2008-05-30 15:11 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_38.dll
2014-03-22 19:54 - 2008-03-05 17:04 - 00489480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_0.dll
2014-03-22 19:54 - 2008-03-05 17:03 - 00479752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_0.dll
2014-03-22 19:54 - 2008-03-05 17:03 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_0.dll
2014-03-22 19:54 - 2008-03-05 17:03 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_0.dll
2014-03-22 19:54 - 2008-03-05 17:00 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_3.dll
2014-03-22 19:54 - 2008-03-05 17:00 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_3.dll
2014-03-22 19:54 - 2008-03-05 16:56 - 04910088 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_37.dll
2014-03-22 19:54 - 2008-03-05 16:56 - 03786760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_37.dll
2014-03-22 19:54 - 2008-03-05 16:56 - 01860120 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_37.dll
2014-03-22 19:54 - 2008-03-05 16:56 - 01420824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_37.dll
2014-03-22 19:54 - 2008-02-06 00:07 - 00529424 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_37.dll
2014-03-22 19:54 - 2008-02-06 00:07 - 00462864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_37.dll
2014-03-22 19:54 - 2007-10-22 04:40 - 00411656 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_10.dll
2014-03-22 19:54 - 2007-10-22 04:39 - 00267272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_10.dll
2014-03-22 19:54 - 2007-10-22 04:37 - 00021000 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_2.dll
2014-03-22 19:54 - 2007-10-22 04:37 - 00017928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_2.dll
2014-03-22 19:54 - 2007-10-12 16:14 - 05081608 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_36.dll
2014-03-22 19:54 - 2007-10-12 16:14 - 03734536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_36.dll
2014-03-22 19:54 - 2007-10-12 16:14 - 02006552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_36.dll
2014-03-22 19:54 - 2007-10-12 16:14 - 01374232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_36.dll
2014-03-22 19:54 - 2007-10-02 10:56 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_36.dll
2014-03-22 19:54 - 2007-10-02 10:56 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_36.dll
2014-03-22 19:54 - 2007-07-20 01:57 - 00411496 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_9.dll
2014-03-22 19:54 - 2007-07-20 01:57 - 00267112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_9.dll
2014-03-22 19:54 - 2007-07-19 19:14 - 05073256 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_35.dll
2014-03-22 19:54 - 2007-07-19 19:14 - 03727720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_35.dll
2014-03-22 19:54 - 2007-07-19 19:14 - 01985904 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_35.dll
2014-03-22 19:54 - 2007-07-19 19:14 - 01358192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_35.dll
2014-03-22 19:54 - 2007-07-19 19:14 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_35.dll
2014-03-22 19:54 - 2007-07-19 19:14 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_35.dll
2014-03-22 19:54 - 2007-06-20 21:49 - 00409960 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_8.dll
2014-03-22 19:54 - 2007-06-20 21:46 - 00266088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_8.dll
2014-03-22 19:54 - 2007-05-16 17:45 - 04496232 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_34.dll
2014-03-22 19:54 - 2007-05-16 17:45 - 03497832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_34.dll
2014-03-22 19:54 - 2007-05-16 17:45 - 01401200 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_34.dll
2014-03-22 19:54 - 2007-05-16 17:45 - 01124720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_34.dll
2014-03-22 19:54 - 2007-05-16 17:45 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_34.dll
2014-03-22 19:54 - 2007-05-16 17:45 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_34.dll
2014-03-22 19:54 - 2007-04-04 19:55 - 00403304 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_7.dll
2014-03-22 19:54 - 2007-04-04 19:55 - 00261480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_7.dll
2014-03-22 19:54 - 2007-04-04 19:54 - 00107368 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_3.dll
2014-03-22 19:54 - 2007-04-04 19:53 - 00081768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_3.dll
2014-03-22 19:54 - 2007-03-15 17:57 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_33.dll
2014-03-22 19:54 - 2007-03-15 17:57 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_33.dll
2014-03-22 19:54 - 2007-03-12 17:42 - 04494184 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_33.dll
2014-03-22 19:54 - 2007-03-12 17:42 - 03495784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_33.dll
2014-03-22 19:54 - 2007-03-12 17:42 - 01400176 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_33.dll
2014-03-22 19:54 - 2007-03-12 17:42 - 01123696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_33.dll
2014-03-22 19:54 - 2007-03-05 13:42 - 00017688 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_1.dll
2014-03-22 19:54 - 2007-03-05 13:42 - 00015128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_1.dll
2014-03-22 19:54 - 2007-01-24 16:27 - 00393576 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_6.dll
2014-03-22 19:54 - 2007-01-24 16:27 - 00255848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_6.dll
2014-03-22 19:54 - 2006-12-08 13:02 - 00251672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_5.dll
2014-03-22 19:54 - 2006-12-08 13:00 - 00390424 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_5.dll
2014-03-22 19:54 - 2006-11-29 14:06 - 04398360 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_32.dll
2014-03-22 19:54 - 2006-11-29 14:06 - 03426072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_32.dll
2014-03-22 19:54 - 2006-11-29 14:06 - 00469264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10.dll
2014-03-22 19:54 - 2006-11-29 14:06 - 00440080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10.dll
2014-03-22 19:54 - 2006-09-28 17:05 - 03977496 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_31.dll
2014-03-22 19:54 - 2006-09-28 17:05 - 02414360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_31.dll
2014-03-22 19:54 - 2006-09-28 17:05 - 00237848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_4.dll
2014-03-22 19:54 - 2006-09-28 17:04 - 00364824 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_4.dll
2014-03-22 19:54 - 2006-07-28 10:31 - 00083736 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_2.dll
2014-03-22 19:54 - 2006-07-28 10:30 - 00363288 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_3.dll
2014-03-22 19:54 - 2006-07-28 10:30 - 00236824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_3.dll
2014-03-22 19:54 - 2006-07-28 10:30 - 00062744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_2.dll
2014-03-22 19:54 - 2006-05-31 08:24 - 00230168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_2.dll
2014-03-22 19:54 - 2006-05-31 08:22 - 00354072 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_2.dll
2014-03-22 19:54 - 2006-03-31 13:40 - 00352464 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_1.dll
2014-03-22 19:54 - 2006-03-31 13:39 - 00229584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_1.dll
2014-03-22 19:54 - 2006-03-31 13:39 - 00083664 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_1.dll
2014-03-22 19:54 - 2006-03-31 13:39 - 00062672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_1.dll
2014-03-22 19:53 - 2014-03-22 23:10 - 00027446 _____ () C:\Windows\DirectX.log
2014-03-22 19:53 - 2006-03-31 13:41 - 03927248 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_30.dll
2014-03-22 19:53 - 2006-03-31 13:40 - 02388176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_30.dll
2014-03-22 19:53 - 2006-02-03 09:43 - 03830992 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_29.dll
2014-03-22 19:53 - 2006-02-03 09:43 - 02332368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_29.dll
2014-03-22 19:53 - 2006-02-03 09:42 - 00355536 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_0.dll
2014-03-22 19:53 - 2006-02-03 09:42 - 00230096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_0.dll
2014-03-22 19:53 - 2006-02-03 09:41 - 00016592 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_0.dll
2014-03-22 19:53 - 2006-02-03 09:41 - 00014032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_0.dll
2014-03-22 19:53 - 2005-12-05 19:09 - 03815120 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_28.dll
2014-03-22 19:53 - 2005-12-05 19:09 - 02323664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_28.dll
2014-03-22 19:53 - 2005-07-22 20:59 - 03807440 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_27.dll
2014-03-22 19:53 - 2005-07-22 20:59 - 02319568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_27.dll
2014-03-22 19:53 - 2005-05-26 16:34 - 03767504 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_26.dll
2014-03-22 19:53 - 2005-05-26 16:34 - 02297552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_26.dll
2014-03-22 19:53 - 2005-03-18 18:19 - 03823312 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_25.dll
2014-03-22 19:53 - 2005-03-18 18:19 - 02337488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_25.dll
2014-03-22 19:53 - 2005-02-05 20:45 - 03544272 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_24.dll
2014-03-22 19:53 - 2005-02-05 20:45 - 02222800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_24.dll
2014-03-22 19:51 - 2014-03-22 19:51 - 00000000 ____D () C:\Program Files (x86)\Ubisoft
2014-03-22 19:47 - 2014-04-16 11:44 - 00000000 ____D () C:\Users\flow\AppData\Local\Microsoft Games
2014-03-21 12:58 - 2014-03-21 12:58 - 00000000 ____D () C:\Users\flow\AppData\Local\Macromedia
2014-03-21 12:29 - 2014-03-21 12:29 - 00000000 ____D () C:\Users\flow\AppData\Roaming\Mozilla
2014-03-21 12:29 - 2014-03-21 12:29 - 00000000 ____D () C:\Users\flow\AppData\Local\Mozilla
2014-03-21 12:29 - 2014-03-21 12:29 - 00000000 ____D () C:\ProgramData\Mozilla
2014-03-21 12:29 - 2014-03-21 12:29 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-03-21 12:29 - 2014-03-21 12:29 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-03-21 12:24 - 2014-03-21 12:24 - 00000000 ____D () C:\Users\flow\Desktop\LAN_BROADCOM_12.2.2.2_Win7x86x64_Aspire 5740
2014-03-21 12:24 - 2009-08-06 04:43 - 00320040 _____ (Broadcom Corporation) C:\Windows\system32\Drivers\k57nd60a.sys
2014-03-20 22:45 - 2014-03-20 22:45 - 00000000 ____D () C:\Windows\system32\appmgmt
2014-03-20 22:13 - 2014-04-16 15:13 - 00001576 _____ () C:\Windows\Tasks\media enhance-updater.job
2014-03-20 22:13 - 2014-04-16 15:13 - 00001488 _____ () C:\Windows\Tasks\HQTotalS-updater.job
2014-03-20 22:13 - 2014-04-16 15:13 - 00001430 _____ () C:\Windows\Tasks\media enhance-enabler.job
2014-03-20 22:13 - 2014-03-20 22:13 - 00004606 _____ () C:\Windows\System32\Tasks\media enhance-updater
2014-03-20 22:13 - 2014-03-20 22:13 - 00004562 _____ () C:\Windows\System32\Tasks\media enhance-codedownloader
2014-03-20 22:13 - 2014-03-20 22:13 - 00004518 _____ () C:\Windows\System32\Tasks\HQTotalS-updater
2014-03-20 22:13 - 2014-03-20 22:13 - 00004460 _____ () C:\Windows\System32\Tasks\media enhance-enabler
2014-03-20 22:12 - 2014-04-16 10:46 - 00000000 ____D () C:\ProgramData\IePluginService
2014-03-20 22:12 - 2014-03-20 22:13 - 00004372 _____ () C:\Windows\System32\Tasks\HQTotalS-enabler
2014-03-20 22:12 - 2014-03-20 22:13 - 00000000 ____D () C:\ProgramData\WPM
2014-03-20 22:12 - 2014-03-20 22:13 - 00000000 ____D () C:\Program Files (x86)\SupTab
2014-03-20 22:12 - 2014-03-20 22:12 - 00000380 _____ () C:\Windows\Tasks\APSnotifierPP1.job
2014-03-20 22:12 - 2014-03-20 22:12 - 00000000 ____D () C:\Users\flow\AppData\Roaming\SupTab
2014-03-20 22:11 - 2014-04-16 15:16 - 00002516 _____ () C:\Windows\Tasks\HQTotalS-firefoxinstaller.job
2014-03-20 22:11 - 2014-04-16 15:13 - 00001532 _____ () C:\Windows\Tasks\media enhance-codedownloader.job
2014-03-20 22:11 - 2014-04-16 15:13 - 00001342 _____ () C:\Windows\Tasks\HQTotalS-enabler.job
2014-03-20 22:11 - 2014-04-16 15:11 - 00003098 _____ () C:\Windows\Tasks\media enhance-chromeinstaller.job
2014-03-20 22:11 - 2014-04-16 15:11 - 00002360 _____ () C:\Windows\Tasks\media enhance-firefoxinstaller.job
2014-03-20 22:11 - 2014-04-16 15:11 - 00001442 _____ () C:\Windows\Tasks\HQTotalS-codedownloader.job
2014-03-20 22:11 - 2014-03-20 22:13 - 00004472 _____ () C:\Windows\System32\Tasks\HQTotalS-codedownloader
2014-03-20 22:11 - 2014-03-20 22:13 - 00000000 ____D () C:\Program Files (x86)\media enhance
2014-03-20 22:11 - 2014-03-20 22:12 - 00000312 _____ () C:\Users\flow\AppData\Roaming\aps.uninstall.scan.results
2014-03-20 22:11 - 2014-03-20 22:11 - 01172664 _____ (AnyProtect.com) C:\Users\flow\AppData\Local\nsu77C3.tmp
2014-03-20 22:10 - 2014-04-16 15:11 - 00003078 _____ () C:\Windows\Tasks\HQTotalS-chromeinstaller.job
2014-03-20 22:10 - 2014-03-20 22:44 - 00000444 __RSH () C:\ProgramData\ntuser.pol
2014-03-20 22:10 - 2014-03-20 22:13 - 00000000 ____D () C:\Program Files (x86)\HQTotalS
2014-03-20 20:23 - 2014-03-20 20:23 - 00000000 ____D () C:\Windows\SysWOW64\RTCOM
2014-03-20 20:23 - 2014-03-20 20:23 - 00000000 ____D () C:\Program Files\Realtek
2014-03-20 20:23 - 2013-11-05 20:47 - 03707864 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RTKVHD64.sys
2014-03-20 20:23 - 2013-11-05 19:54 - 38385664 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoRes64.dat
2014-03-20 20:23 - 2013-11-05 16:48 - 00681905 _____ () C:\Windows\system32\Drivers\RTAIODAT.DAT
2014-03-20 20:23 - 2013-11-04 20:26 - 00153304 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoInstII64.dll
2014-03-20 20:23 - 2013-11-04 12:11 - 02587864 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkAPO64.dll
2014-03-20 20:23 - 2013-10-30 17:31 - 00929080 _____ (Nahimic Inc) C:\Windows\system32\NAHIMICAPOSettingsIPC.dll
2014-03-20 20:23 - 2013-10-28 18:29 - 01021656 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkApi64.dll
2014-03-20 20:23 - 2013-10-25 11:49 - 05751576 _____ (Nahimic Inc) C:\Windows\system32\NAHIMICAPOlfx.dll
2014-03-20 20:23 - 2013-10-18 17:41 - 01286360 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTCOM64.dll
2014-03-20 20:23 - 2013-10-11 12:31 - 00947760 _____ (Sony Corporation) C:\Windows\system32\SFSS_APO.dll
2014-03-20 20:23 - 2013-10-09 21:13 - 01286400 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxSpeechAPO64.dll
2014-03-20 20:23 - 2013-10-09 21:12 - 03714304 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioVnN64.dll
2014-03-20 20:23 - 2013-10-09 21:12 - 02103040 _____ (Waves Audio Ltd.) C:\Windows\system32\WavesGUILib64.dll
2014-03-20 20:23 - 2013-10-07 12:05 - 02810072 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtPgEx64.dll
2014-03-20 20:23 - 2013-10-02 18:10 - 00617176 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtDataProc64.dll
2014-03-20 20:23 - 2013-09-09 16:32 - 05681192 _____ () C:\Windows\system32\Drivers\rtvienna.dat
2014-03-20 20:23 - 2013-08-24 04:14 - 01014016 _____ (SRS Labs, Inc.) C:\Windows\system32\slcnt64.dll
2014-03-20 20:23 - 2013-08-24 04:14 - 00897792 _____ (DTS, Inc.) C:\Windows\system32\sl3apo64.dll
2014-03-20 20:23 - 2013-08-24 04:14 - 00722688 _____ (DTS, Inc.) C:\Windows\system32\sltech64.dll
2014-03-20 20:23 - 2013-08-24 04:14 - 00244480 _____ (TODO: <Company name>) C:\Windows\system32\slprp64.dll
2014-03-20 20:23 - 2013-08-14 17:36 - 00662784 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVolumeSDAPO.dll
2014-03-20 20:23 - 2013-08-14 17:35 - 00907008 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVoiceAPO2064.dll
2014-03-20 20:23 - 2013-06-25 13:47 - 00871856 _____ (TOSHIBA Corporation) C:\Windows\system32\tossaeapo64.dll
2014-03-20 20:23 - 2013-06-25 13:47 - 00162224 _____ (TOSHIBA Corporation) C:\Windows\system32\toseaeapo64.dll
2014-03-20 20:23 - 2013-06-25 13:46 - 00582056 _____ (TOSHIBA Corporation) C:\Windows\system32\tosasfapo64.dll
2014-03-20 20:23 - 2013-04-24 18:16 - 01662024 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTSnMg64.cpl
2014-03-20 20:23 - 2013-04-03 15:13 - 00906800 _____ (Sony Corporation) C:\Windows\system32\MISS_APO.dll
2014-03-20 20:23 - 2012-08-31 20:18 - 07164176 _____ (Dolby Laboratories) C:\Windows\system32\R4EEP64A.dll
2014-03-20 20:23 - 2012-08-31 20:17 - 00434960 _____ (Dolby Laboratories) C:\Windows\system32\R4EED64A.dll
2014-03-20 20:23 - 2012-08-31 20:17 - 00141584 _____ (Dolby Laboratories) C:\Windows\system32\R4EEL64A.dll
2014-03-20 20:23 - 2012-08-31 20:17 - 00124176 _____ (Dolby Laboratories) C:\Windows\system32\R4EEA64A.dll
2014-03-20 20:23 - 2012-08-31 20:17 - 00075024 _____ (Dolby Laboratories) C:\Windows\system32\R4EEG64A.dll
2014-03-20 20:23 - 2012-01-30 12:43 - 00836544 _____ (TOSHIBA Corporation) C:\Windows\system32\tadefxapo264.dll
2014-03-20 20:23 - 2012-01-10 11:20 - 00065944 _____ (TOSHIBA CORPORATION.) C:\Windows\system32\tepeqapo64.dll
2014-03-20 20:23 - 2011-12-20 16:32 - 00331880 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtlCPAPI64.dll
2014-03-20 20:23 - 2011-11-22 17:28 - 00014952 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCoLDR64.dll
2014-03-20 20:23 - 2011-09-02 15:21 - 00221024 _____ (Synopsys, Inc.) C:\Windows\system32\SFNHK64.dll
2014-03-20 20:23 - 2011-09-02 15:21 - 00081248 _____ (Synopsys, Inc.) C:\Windows\system32\SFCOM64.dll
2014-03-20 20:23 - 2011-09-02 15:21 - 00078688 _____ (Synopsys, Inc.) C:\Windows\system32\SFAPO64.dll
2014-03-20 20:23 - 2011-03-17 13:17 - 01361336 _____ (TOSHIBA Corporation) C:\Windows\system32\tosade.dll
2014-03-20 20:23 - 2011-03-07 18:11 - 00148416 _____ (TOSHIBA Corporation) C:\Windows\system32\tadefxapo.dll
2014-03-20 20:23 - 2010-11-08 08:31 - 00375128 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEP64A.dll
2014-03-20 20:23 - 2010-11-08 08:31 - 00310104 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DHT64.dll
2014-03-20 20:23 - 2010-11-08 08:31 - 00310104 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DAA64.dll
2014-03-20 20:23 - 2010-11-08 08:31 - 00204120 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEED64A.dll
2014-03-20 20:23 - 2010-11-08 08:31 - 00101208 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEL64A.dll
2014-03-20 20:23 - 2010-11-08 08:31 - 00078680 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEG64A.dll
2014-03-20 20:23 - 2010-11-03 19:30 - 00149608 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCfg64.dll
2014-03-20 20:23 - 2010-07-22 17:48 - 00074064 _____ (Virage Logic Corporation / Sonic Focus) C:\Windows\SysWOW64\SFCOM.dll
2014-03-20 20:23 - 2009-11-24 10:55 - 00518896 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSX64.dll
2014-03-20 20:23 - 2009-11-24 10:55 - 00211184 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSH64.dll
2014-03-20 20:23 - 2009-11-24 10:55 - 00198896 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSHP64.dll
2014-03-20 20:23 - 2009-11-24 10:55 - 00155888 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSWOW64.dll
2014-03-20 20:22 - 2013-10-16 04:43 - 00209096 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAC64.dll
2014-03-20 20:22 - 2013-10-11 13:47 - 00113576 _____ (Real Sound Lab SIA) C:\Windows\system32\CONEQMSAPOGUILibrary.dll
2014-03-20 20:22 - 2013-10-09 21:13 - 01921792 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRealtek264.dll
2014-03-20 20:22 - 2013-10-09 21:13 - 01345280 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO5064.dll
2014-03-20 20:22 - 2013-10-09 21:12 - 27644160 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioVnA64.dll
2014-03-20 20:22 - 2013-10-09 21:12 - 14152960 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRealtek64.dll
2014-03-20 20:22 - 2013-10-09 21:12 - 02036992 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioEQ64.dll
2014-03-20 20:22 - 2013-10-09 21:12 - 01012992 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPOShell64.dll
2014-03-20 20:22 - 2013-10-07 01:26 - 00501184 _____ (DTS) C:\Windows\system32\DTSU2PLFX64.dll
2014-03-20 20:22 - 2013-10-07 01:26 - 00487360 _____ (DTS) C:\Windows\system32\DTSU2PGFX64.dll
2014-03-20 20:22 - 2013-10-07 01:26 - 00415680 _____ (DTS) C:\Windows\system32\DTSU2PREC64.dll
2014-03-20 20:22 - 2013-09-10 05:02 - 06217904 _____ (Dolby Laboratories) C:\Windows\system32\DDPP64A.dll
2014-03-20 20:22 - 2013-09-10 05:02 - 00313520 _____ (Dolby Laboratories) C:\Windows\system32\DDPO64A.dll
2014-03-20 20:22 - 2013-09-10 05:01 - 01938608 _____ (Dolby Laboratories) C:\Windows\system32\DDPD64A.dll
2014-03-20 20:22 - 2013-09-10 05:01 - 00260272 _____ (Dolby Laboratories) C:\Windows\system32\DDPA64.dll
2014-03-20 20:22 - 2013-08-20 18:37 - 00605496 _____ () C:\Windows\system32\audioLibVc.dll
2014-03-20 20:22 - 2013-08-14 17:35 - 01084160 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO4064.dll
2014-03-20 20:22 - 2013-08-14 17:35 - 00663296 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO30.dll
2014-03-20 20:22 - 2013-08-05 19:11 - 02743328 _____ (Fortemedia Corporation) C:\Windows\system32\FMAPO64.dll
2014-03-20 20:22 - 2013-07-23 16:39 - 00790272 _____ (Waves Audio Ltd.) C:\Windows\SysWOW64\MaxxAudioAPOShell.dll
2014-03-20 20:22 - 2013-06-21 12:01 - 00109848 _____ () C:\Windows\system32\AcpiServiceVnA64.dll
2014-03-20 20:22 - 2012-03-08 12:47 - 00108640 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAR64.dll
2014-03-20 20:22 - 2011-08-23 18:00 - 00603984 _____ (Knowles Acoustics ) C:\Windows\system32\KAAPORT64.dll
2014-03-20 20:22 - 2011-05-31 10:42 - 01756264 _____ (DTS) C:\Windows\system32\DTSS2SpeakerDLL64.dll
2014-03-20 20:22 - 2011-05-31 10:42 - 01568360 _____ (DTS) C:\Windows\system32\DTSS2HeadphoneDLL64.dll
2014-03-20 20:22 - 2011-05-31 10:42 - 01486952 _____ (DTS) C:\Windows\system32\DTSBoostDLL64.dll
2014-03-20 20:22 - 2011-05-31 10:42 - 00728680 _____ (DTS) C:\Windows\system32\DTSBassEnhancementDLL64.dll
2014-03-20 20:22 - 2011-05-31 10:42 - 00712296 _____ (DTS) C:\Windows\system32\DTSSymmetryDLL64.dll
2014-03-20 20:22 - 2011-05-31 10:42 - 00693352 _____ (DTS) C:\Windows\system32\DTSVoiceClarityDLL64.dll
2014-03-20 20:22 - 2011-05-31 10:42 - 00491112 _____ (DTS) C:\Windows\system32\DTSNeoPCDLL64.dll
2014-03-20 20:22 - 2011-05-31 10:42 - 00432744 _____ (DTS) C:\Windows\system32\DTSLimiterDLL64.dll
2014-03-20 20:22 - 2011-05-31 10:42 - 00428648 _____ (DTS) C:\Windows\system32\DTSGainCompensatorDLL64.dll
2014-03-20 20:22 - 2011-05-31 10:42 - 00242792 _____ (DTS) C:\Windows\system32\DTSLFXAPO64.dll
2014-03-20 20:22 - 2011-05-31 10:42 - 00242792 _____ (DTS) C:\Windows\system32\DTSGFXAPO64.dll
2014-03-20 20:22 - 2011-05-31 10:42 - 00241768 _____ (DTS) C:\Windows\system32\DTSGFXAPONS64.dll
2014-03-20 20:22 - 2010-09-27 10:34 - 00318808 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO20.dll
2014-03-20 20:20 - 2014-04-16 12:14 - 00101096 _____ () C:\Windows\PFRO.log
2014-03-20 20:19 - 2014-03-20 20:19 - 00000000 ____D () C:\Program Files (x86)\Realtek
2014-03-20 19:41 - 2014-03-20 19:41 - 00000000 ____D () C:\Users\flow\AppData\Roaming\Synaptics
2014-03-20 19:38 - 2014-03-20 19:39 - 00007800 _____ () C:\Windows\DPINST.LOG
2014-03-20 19:38 - 2014-03-20 19:38 - 00001408 _____ () C:\Windows\Synaptics.log
2014-03-20 19:38 - 2014-03-20 19:38 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_SynTP_01009.Wdf
2014-03-20 19:38 - 2014-03-20 19:38 - 00000000 ____D () C:\Program Files\Synaptics
2014-03-20 16:32 - 2014-03-20 16:32 - 00000000 ____D () C:\Users\flow\AppData\Roaming\Intel Corporation
2014-03-20 16:32 - 2014-03-20 16:32 - 00000000 ____D () C:\ProgramData\Intel
2014-03-20 16:32 - 2014-03-20 16:32 - 00000000 ____D () C:\Program Files\Intel
2014-03-20 16:31 - 2014-03-20 16:31 - 00000000 ____D () C:\Users\flow\Intel
2014-03-20 16:12 - 2014-03-20 16:12 - 00000000 ____D () C:\Users\flow\AppData\Roaming\ATI
2014-03-20 16:12 - 2014-03-20 16:12 - 00000000 ____D () C:\Users\flow\AppData\Local\ATI
2014-03-20 16:12 - 2014-03-20 16:12 - 00000000 ____D () C:\ProgramData\ATI
2014-03-20 16:11 - 2014-03-20 16:11 - 00000000 _____ () C:\Windows\ativpsrm.bin
2014-03-20 16:09 - 2014-03-20 20:17 - 00000000 ____D () C:\Windows\SUYIN NB Cam
2014-03-20 16:09 - 2014-03-20 16:09 - 00000000 ____D () C:\Users\flow\AppData\Roaming\InstallShield
2014-03-20 16:09 - 2009-09-10 20:18 - 00239616 _____ ( ) C:\Windows\SysWOW64\rsnp2uvc.dll
2014-03-20 16:09 - 2009-09-10 20:17 - 00238080 _____ ( ) C:\Windows\system32\rsnp2uvc.dll
2014-03-20 16:09 - 2009-09-10 19:30 - 01801088 _____ () C:\Windows\system32\Drivers\snp2uvc.sys
2014-03-20 16:09 - 2009-08-10 17:14 - 00027184 _____ () C:\Windows\snuvcdsm.exe
2014-03-20 16:09 - 2009-05-11 18:39 - 00000323 _____ () C:\Windows\PidList.ini
2014-03-20 16:09 - 2008-12-29 18:14 - 00035456 _____ () C:\Windows\system32\Drivers\sncduvc.sys
2014-03-20 16:09 - 2008-07-03 16:58 - 00094208 _____ (sonix) C:\Windows\PLFSetL.exe
2014-03-20 16:05 - 2014-03-20 16:05 - 00000000 ____D () C:\Program Files\WinRAR
2014-03-20 15:57 - 2014-03-20 15:57 - 00000000 ____D () C:\Windows\Options
2014-03-20 15:57 - 2014-03-20 15:57 - 00000000 ____D () C:\Program Files\LSI SoftModem
2014-03-20 15:57 - 2009-06-09 13:28 - 00064000 ____N (LSI Corporation) C:\Windows\SysWOW64\agrsmdel.exe
2014-03-20 15:57 - 2009-03-27 19:12 - 00014848 ____N (LSI Corporation) C:\Windows\SysWOW64\agrsco64.dll
2014-03-20 15:56 - 2009-07-21 14:03 - 01208320 _____ (LSI Corporation) C:\Windows\system32\Drivers\agrsm64.sys
2014-03-20 15:56 - 2009-06-09 13:34 - 00042496 _____ (LSI Corporation) C:\Windows\agrdel64.exe
2014-03-20 15:56 - 2009-06-09 13:28 - 00064000 _____ (LSI Corporation) C:\Windows\agrsmdel.exe
2014-03-20 15:56 - 2009-03-27 19:12 - 00014848 _____ (LSI Corporation) C:\Windows\system32\agrsco64.dll
2014-03-20 15:53 - 2013-08-05 11:50 - 00053248 _____ (Windows XP Bundled build C-Centric Single User) C:\Windows\SysWOW64\CSVer.dll
2014-03-20 15:41 - 2014-03-20 15:41 - 00000000 ____H () C:\ProgramData\DP45977C.lfl
2014-03-20 15:40 - 2014-03-22 23:06 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-03-20 15:40 - 2013-09-13 19:44 - 02080472 _____ (Realtek Semiconductor Corp.) C:\Windows\RtlExUpd.dll
2014-03-20 15:33 - 2014-03-20 15:33 - 00000000 ____D () C:\ProgramData\DriverGenius
2014-03-20 15:09 - 2014-03-20 15:24 - 00000000 ____D () C:\Users\flow\AppData\Roaming\vlc
2014-03-20 15:09 - 2014-03-20 15:09 - 00000000 ____D () C:\Program Files (x86)\VideoLAN
2014-03-20 15:05 - 2014-03-20 15:05 - 00000000 ____D () C:\Users\flow\AppData\Roaming\library_dir
2014-03-20 15:04 - 2014-04-16 14:13 - 00000000 ____D () C:\Users\flow\AppData\Roaming\Raptr
2014-03-20 15:04 - 2014-04-16 12:15 - 00000000 ____D () C:\Program Files (x86)\Raptr
2014-03-20 15:04 - 2014-03-20 15:04 - 00000000 ____D () C:\ProgramData\AMD
2014-03-20 15:04 - 2014-03-20 15:04 - 00000000 ____D () C:\Program Files (x86)\AMD AVT
2014-03-20 15:03 - 2014-03-20 15:03 - 00000000 ____D () C:\Program Files\AMD
2014-03-20 15:01 - 2014-03-20 16:32 - 01646762 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2014-03-20 15:01 - 2014-03-20 15:01 - 00000000 ____D () C:\Program Files\Common Files\ATI Technologies
2014-03-20 15:01 - 2014-03-20 15:01 - 00000000 ____D () C:\Program Files (x86)\ATI Technologies
2014-03-20 14:59 - 2009-11-25 12:47 - 01942856 _____ (Microsoft Corporation) C:\Windows\system32\dfshim.dll
2014-03-20 14:59 - 2009-11-25 12:47 - 01130824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dfshim.dll
2014-03-20 14:59 - 2009-11-25 12:47 - 00444752 _____ (Microsoft Corporation) C:\Windows\system32\mscoree.dll
2014-03-20 14:59 - 2009-11-25 12:47 - 00320352 _____ (Microsoft Corporation) C:\Windows\system32\PresentationHost.exe
2014-03-20 14:59 - 2009-11-25 12:47 - 00297808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mscoree.dll
2014-03-20 14:59 - 2009-11-25 12:47 - 00295264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationHost.exe
2014-03-20 14:59 - 2009-11-25 12:47 - 00109912 _____ (Microsoft Corporation) C:\Windows\system32\PresentationHostProxy.dll
2014-03-20 14:59 - 2009-11-25 12:47 - 00099176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationHostProxy.dll
2014-03-20 14:59 - 2009-11-25 12:47 - 00049472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netfxperf.dll
2014-03-20 14:59 - 2009-11-25 12:47 - 00048960 _____ (Microsoft Corporation) C:\Windows\system32\netfxperf.dll
2014-03-20 14:58 - 2014-03-20 15:04 - 00000000 ____D () C:\Program Files\ATI Technologies
2014-03-20 14:58 - 2014-03-20 15:01 - 00000000 ____D () C:\ProgramData\Package Cache
2014-03-20 14:58 - 2014-03-20 14:58 - 00000000 ____D () C:\Program Files\ATI
2014-03-20 14:57 - 2014-03-20 14:57 - 00000000 ____D () C:\AMD
2014-03-20 14:11 - 2014-03-20 14:12 - 00000000 ____D () C:\ProgramData\Adobe
2014-03-20 14:11 - 2014-03-20 14:11 - 00000000 ____D () C:\Program Files (x86)\Adobe
2014-03-20 14:10 - 2014-04-16 12:19 - 00000000 ____D () C:\Users\flow\AppData\Local\Adobe
2014-03-20 13:16 - 2014-04-16 15:53 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-03-20 13:16 - 2014-04-16 12:19 - 00692400 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-03-20 13:16 - 2014-04-16 12:19 - 00070832 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-03-20 13:16 - 2014-04-16 12:19 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-03-20 13:16 - 2014-03-20 14:11 - 00000000 ____D () C:\Users\flow\AppData\Roaming\Adobe
2014-03-20 13:16 - 2014-03-20 13:16 - 00000000 ____D () C:\Windows\SysWOW64\Macromed
2014-03-20 13:16 - 2014-03-20 13:16 - 00000000 ____D () C:\Windows\system32\Macromed
2014-03-20 13:16 - 2014-03-20 13:16 - 00000000 ____D () C:\Users\flow\AppData\Roaming\Macromedia
2014-03-20 13:05 - 2012-11-22 02:04 - 06534248 _____ (Broadcom Corporation) C:\Windows\system32\Drivers\BCMWL664.SYS
2014-03-20 13:05 - 2012-11-22 02:03 - 00095584 _____ (Broadcom Corporation) C:\Windows\system32\bcmwlcoi.dll
2014-03-20 13:05 - 2012-11-22 01:19 - 03659264 _____ (Broadcom Corporation) C:\Windows\system32\bcmihvui64.dll
2014-03-20 13:05 - 2012-11-22 01:12 - 04395520 _____ (Broadcom Corporation) C:\Windows\system32\bcmihvsrv64.dll
2014-03-20 13:03 - 2014-03-20 15:54 - 00000000 ____D () C:\Program Files (x86)\Intel
2014-03-20 12:55 - 2014-03-20 12:55 - 00000000 ____D () C:\Intel
2014-03-20 12:34 - 2014-03-20 12:34 - 00000000 ____D () C:\Users\flow\AppData\Roaming\WinRAR
2014-03-20 12:34 - 2014-03-20 12:34 - 00000000 ____D () C:\Program Files (x86)\WinRAR
2014-03-20 11:24 - 2014-03-20 11:24 - 00000000 ____D () C:\Users\flow\AppData\Local\Drivers_For_Free
2014-03-20 11:23 - 2014-03-20 11:23 - 00000000 ____D () C:\Users\flow\AppData\Roaming\Drivers For Free
2014-03-18 17:41 - 2014-03-31 08:45 - 00108840 _____ () C:\Users\flow\AppData\Local\GDIPFONTCACHEV1.DAT
2014-03-18 17:41 - 2014-03-19 09:25 - 00000404 _____ () C:\Windows\Tasks\DriverEasy Scheduled Scan.job
2014-03-18 17:41 - 2014-03-18 17:41 - 00003808 _____ () C:\Windows\System32\Tasks\DriverEasy Scheduled Scan
2014-03-18 17:41 - 2014-03-18 17:41 - 00000000 ____D () C:\Users\flow\AppData\Roaming\Easeware
2014-03-18 17:40 - 2014-03-18 17:40 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdFs_01_09_00.Wdf
2014-03-18 15:31 - 2014-03-18 15:31 - 00000000 ____D () C:\Program Files (x86)\MicroProse
2014-03-18 15:31 - 1997-05-29 17:31 - 00315904 _____ (InstallShield Software Corporation ) C:\Windows\IsUn0407.exe
2014-03-18 15:13 - 2014-03-18 17:26 - 00000000 ____D () C:\Users\flow\AppData\Local\VirtualStore
2014-03-18 15:13 - 2014-03-18 15:13 - 00000020 ___SH () C:\Users\flow\ntuser.ini
2014-03-18 15:13 - 2014-03-18 15:13 - 00000000 _SHDL () C:\Users\flow\Vorlagen
2014-03-18 15:13 - 2014-03-18 15:13 - 00000000 _SHDL () C:\Users\flow\Startmenü
2014-03-18 15:13 - 2014-03-18 15:13 - 00000000 _SHDL () C:\Users\flow\Netzwerkumgebung
2014-03-18 15:13 - 2014-03-18 15:13 - 00000000 _SHDL () C:\Users\flow\Lokale Einstellungen
2014-03-18 15:13 - 2014-03-18 15:13 - 00000000 _SHDL () C:\Users\flow\Eigene Dateien
2014-03-18 15:13 - 2014-03-18 15:13 - 00000000 _SHDL () C:\Users\flow\Druckumgebung
2014-03-18 15:13 - 2014-03-18 15:13 - 00000000 _SHDL () C:\Users\flow\Documents\Eigene Musik
2014-03-18 15:13 - 2014-03-18 15:13 - 00000000 _SHDL () C:\Users\flow\Documents\Eigene Bilder
2014-03-18 15:13 - 2014-03-18 15:13 - 00000000 _SHDL () C:\Users\flow\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-03-18 15:13 - 2014-03-18 15:13 - 00000000 _SHDL () C:\Users\flow\AppData\Local\Verlauf
2014-03-18 15:13 - 2014-03-18 15:13 - 00000000 _SHDL () C:\Users\flow\AppData\Local\Anwendungsdaten
2014-03-18 15:13 - 2014-03-18 15:13 - 00000000 _SHDL () C:\Users\flow\Anwendungsdaten
2014-03-18 15:11 - 2014-04-16 14:15 - 00375977 _____ () C:\Windows\WindowsUpdate.log
2014-03-18 15:09 - 2014-03-18 15:09 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Musik
2014-03-18 15:09 - 2014-03-18 15:09 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Bilder
2014-03-18 15:09 - 2014-03-18 15:09 - 00000000 _SHDL () C:\Users\Default\Vorlagen
2014-03-18 15:09 - 2014-03-18 15:09 - 00000000 _SHDL () C:\Users\Default\Startmenü
2014-03-18 15:09 - 2014-03-18 15:09 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung
2014-03-18 15:09 - 2014-03-18 15:09 - 00000000 _SHDL () C:\Users\Default\Lokale Einstellungen
2014-03-18 15:09 - 2014-03-18 15:09 - 00000000 _SHDL () C:\Users\Default\Eigene Dateien
2014-03-18 15:09 - 2014-03-18 15:09 - 00000000 _SHDL () C:\Users\Default\Druckumgebung
2014-03-18 15:09 - 2014-03-18 15:09 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik
2014-03-18 15:09 - 2014-03-18 15:09 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder
2014-03-18 15:09 - 2014-03-18 15:09 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-03-18 15:09 - 2014-03-18 15:09 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf
2014-03-18 15:09 - 2014-03-18 15:09 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Anwendungsdaten
2014-03-18 15:09 - 2014-03-18 15:09 - 00000000 _SHDL () C:\Users\Default\Anwendungsdaten
2014-03-18 15:09 - 2014-03-18 15:09 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik
2014-03-18 15:09 - 2014-03-18 15:09 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder
2014-03-18 15:09 - 2014-03-18 15:09 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-03-18 15:09 - 2014-03-18 15:09 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf
2014-03-18 15:09 - 2014-03-18 15:09 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Anwendungsdaten
2014-03-18 15:09 - 2014-03-18 15:09 - 00000000 _SHDL () C:\Programme
2014-03-18 15:09 - 2014-03-18 15:09 - 00000000 _SHDL () C:\ProgramData\Vorlagen
2014-03-18 15:09 - 2014-03-18 15:09 - 00000000 _SHDL () C:\ProgramData\Startmenü
2014-03-18 15:09 - 2014-03-18 15:09 - 00000000 _SHDL () C:\ProgramData\Favoriten
2014-03-18 15:09 - 2014-03-18 15:09 - 00000000 _SHDL () C:\ProgramData\Dokumente
2014-03-18 15:09 - 2014-03-18 15:09 - 00000000 _SHDL () C:\ProgramData\Anwendungsdaten
2014-03-18 15:09 - 2014-03-18 15:09 - 00000000 _SHDL () C:\Program Files\Gemeinsame Dateien
2014-03-18 15:09 - 2014-03-18 15:09 - 00000000 _SHDL () C:\Dokumente und Einstellungen
2014-03-18 15:09 - 2014-03-18 15:09 - 00000000 __SHD () C:\Recovery
2014-03-18 15:06 - 2014-03-18 15:06 - 00000000 ____D () C:\Windows\CSC

==================== One Month Modified Files and Folders =======

2014-04-16 16:19 - 2014-04-16 16:18 - 00014015 _____ () C:\Users\flow\Desktop\FRST.txt
2014-04-16 16:18 - 2014-04-16 16:18 - 00000000 ____D () C:\FRST
2014-04-16 16:16 - 2014-04-16 16:16 - 02158080 _____ (Farbar) C:\Users\flow\Desktop\FRST64.exe
2014-04-16 16:15 - 2014-04-16 15:48 - 00000470 _____ () C:\Users\flow\Desktop\defogger_disable.log
2014-04-16 15:53 - 2014-03-20 13:16 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-04-16 15:48 - 2014-04-16 15:48 - 00000000 _____ () C:\Users\flow\defogger_reenable
2014-04-16 15:47 - 2014-04-16 15:47 - 00050477 _____ () C:\Users\flow\Desktop\Defogger.exe
2014-04-16 15:44 - 2014-04-16 15:44 - 00000000 ____D () C:\Users\flow\Documents\My Received Files
2014-04-16 15:44 - 2014-04-16 15:44 - 00000000 ____D () C:\Users\flow\AppData\Roaming\MusicNet
2014-04-16 15:16 - 2014-03-20 22:11 - 00002516 _____ () C:\Windows\Tasks\HQTotalS-firefoxinstaller.job
2014-04-16 15:13 - 2014-03-20 22:13 - 00001576 _____ () C:\Windows\Tasks\media enhance-updater.job
2014-04-16 15:13 - 2014-03-20 22:13 - 00001488 _____ () C:\Windows\Tasks\HQTotalS-updater.job
2014-04-16 15:13 - 2014-03-20 22:13 - 00001430 _____ () C:\Windows\Tasks\media enhance-enabler.job
2014-04-16 15:13 - 2014-03-20 22:11 - 00001532 _____ () C:\Windows\Tasks\media enhance-codedownloader.job
2014-04-16 15:13 - 2014-03-20 22:11 - 00001342 _____ () C:\Windows\Tasks\HQTotalS-enabler.job
2014-04-16 15:11 - 2014-03-20 22:11 - 00003098 _____ () C:\Windows\Tasks\media enhance-chromeinstaller.job
2014-04-16 15:11 - 2014-03-20 22:11 - 00002360 _____ () C:\Windows\Tasks\media enhance-firefoxinstaller.job
2014-04-16 15:11 - 2014-03-20 22:11 - 00001442 _____ () C:\Windows\Tasks\HQTotalS-codedownloader.job
2014-04-16 15:11 - 2014-03-20 22:10 - 00003078 _____ () C:\Windows\Tasks\HQTotalS-chromeinstaller.job
2014-04-16 14:48 - 2014-04-16 14:48 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-04-16 14:48 - 2014-04-16 14:48 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-04-16 14:48 - 2014-04-16 14:48 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-04-16 14:48 - 2014-04-16 14:48 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-04-16 14:48 - 2014-04-16 14:48 - 00000000 ____D () C:\ProgramData\Sun
2014-04-16 14:48 - 2014-04-16 14:48 - 00000000 ____D () C:\ProgramData\Oracle
2014-04-16 14:48 - 2014-04-16 14:48 - 00000000 ____D () C:\Program Files (x86)\Java
2014-04-16 14:18 - 2014-04-16 14:18 - 00001077 _____ () C:\Users\flow\Desktop\Kaspersky Security Scan.lnk
2014-04-16 14:18 - 2014-04-16 14:18 - 00000000 ____D () C:\Users\flow\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Kaspersky Security Scan
2014-04-16 14:18 - 2014-04-16 14:18 - 00000000 ____D () C:\ProgramData\Kaspersky Lab
2014-04-16 14:18 - 2014-04-16 14:18 - 00000000 ____D () C:\Program Files (x86)\Kaspersky Lab
2014-04-16 14:17 - 2014-04-16 14:17 - 00185944 _____ (Лаборатория Касперского) C:\Users\flow\Downloads\kss12.0.1.117abRU_EN_DE_FR_ES_IT_JA_PT_ZH_5623.exe
2014-04-16 14:17 - 2009-07-14 19:58 - 00699964 _____ () C:\Windows\system32\perfh007.dat
2014-04-16 14:17 - 2009-07-14 19:58 - 00149570 _____ () C:\Windows\system32\perfc007.dat
2014-04-16 14:17 - 2009-07-14 07:13 - 01621742 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-04-16 14:16 - 2009-07-14 06:45 - 00014016 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-04-16 14:16 - 2009-07-14 06:45 - 00014016 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-04-16 14:15 - 2014-03-18 15:11 - 00375977 _____ () C:\Windows\WindowsUpdate.log
2014-04-16 14:13 - 2014-03-20 15:04 - 00000000 ____D () C:\Users\flow\AppData\Roaming\Raptr
2014-04-16 14:11 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-04-16 14:11 - 2009-07-14 06:51 - 00033742 _____ () C:\Windows\setupact.log
2014-04-16 12:19 - 2014-03-20 14:10 - 00000000 ____D () C:\Users\flow\AppData\Local\Adobe
2014-04-16 12:19 - 2014-03-20 13:16 - 00692400 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-04-16 12:19 - 2014-03-20 13:16 - 00070832 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-04-16 12:19 - 2014-03-20 13:16 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-04-16 12:16 - 2014-04-16 12:16 - 00000000 ____D () C:\Users\flow\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AMD Gaming Evolved
2014-04-16 12:15 - 2014-03-20 15:04 - 00000000 ____D () C:\Program Files (x86)\Raptr
2014-04-16 12:14 - 2014-03-20 20:20 - 00101096 _____ () C:\Windows\PFRO.log
2014-04-16 11:44 - 2014-03-22 19:47 - 00000000 ____D () C:\Users\flow\AppData\Local\Microsoft Games
2014-04-16 11:19 - 2014-04-16 11:18 - 00624736 _____ () C:\Users\flow\Downloads\uplayermediaplayer-setup.exe
2014-04-16 11:18 - 2014-04-16 11:18 - 01299520 _____ (Uniblue Systems Limited ) C:\Users\flow\Downloads\speedupmypc.exe
2014-04-16 11:14 - 2014-04-16 11:14 - 00003408 _____ () C:\Windows\System32\Tasks\aviraSWU
2014-04-16 11:14 - 2014-04-16 11:14 - 00000000 ____D () C:\Users\flow\AppData\Roaming\Avira
2014-04-16 11:14 - 2014-04-16 11:12 - 00000000 ____D () C:\Program Files (x86)\Avira
2014-04-16 11:13 - 2014-04-16 11:13 - 00002070 _____ () C:\Users\Public\Desktop\Avira Control Center.lnk
2014-04-16 11:12 - 2014-04-16 11:12 - 00000000 ____D () C:\ProgramData\Avira
2014-04-16 11:10 - 2014-04-16 11:09 - 138607664 _____ () C:\Users\flow\Downloads\avira_free_antivirus_de_14.0.3.350(1).exe
2014-04-16 11:09 - 2014-04-16 11:08 - 138607664 _____ () C:\Users\flow\Downloads\avira_free_antivirus_de_14.0.3.350.exe
2014-04-16 10:46 - 2014-03-20 22:12 - 00000000 ____D () C:\ProgramData\IePluginService
2014-03-31 08:45 - 2014-03-18 17:41 - 00108840 _____ () C:\Users\flow\AppData\Local\GDIPFONTCACHEV1.DAT
2014-03-31 08:45 - 2009-07-14 06:45 - 00416336 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-03-30 14:20 - 2014-03-30 14:09 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-03-30 14:19 - 2014-03-30 14:19 - 00000000 ____D () C:\Program Files (x86)\Microsoft Works
2014-03-30 14:19 - 2009-07-14 07:32 - 00000000 ____D () C:\Program Files (x86)\MSBuild
2014-03-30 14:18 - 2014-03-30 14:18 - 00000000 ____D () C:\Windows\PCHEALTH
2014-03-30 14:18 - 2014-03-30 14:18 - 00000000 ____D () C:\Program Files (x86)\Microsoft Visual Studio
2014-03-30 14:18 - 2014-03-30 14:09 - 00000000 ____D () C:\Program Files (x86)\Microsoft Office
2014-03-30 14:18 - 2009-07-14 20:18 - 00000000 ____D () C:\Windows\ShellNew
2014-03-30 14:17 - 2009-07-14 05:20 - 00000000 ____D () C:\Program Files\Common Files\Microsoft Shared
2014-03-30 14:10 - 2014-03-30 14:10 - 00000000 ____D () C:\Program Files\Microsoft Office
2014-03-30 14:10 - 2014-03-30 14:10 - 00000000 ____D () C:\Program Files (x86)\Microsoft Visual Studio 8
2014-03-30 14:10 - 2009-07-14 04:34 - 00000478 _____ () C:\Windows\win.ini
2014-03-30 14:09 - 2014-03-30 14:09 - 00000000 __RHD () C:\MSOCache
2014-03-30 14:09 - 2014-03-30 14:09 - 00000000 ____D () C:\Users\flow\AppData\Local\Microsoft Help
2014-03-26 19:02 - 2014-03-23 01:26 - 00000000 ____D () C:\Users\flow\Documents\Anno 1404
2014-03-22 23:18 - 2014-03-22 20:17 - 00000000 ____D () C:\Users\flow\AppData\Roaming\Ubisoft
2014-03-22 23:17 - 2014-03-22 23:16 - 00000000 ____D () C:\ProgramData\Tages
2014-03-22 23:16 - 2014-03-22 23:16 - 00003100 _____ () C:\Windows\System32\Tasks\{1CED218F-0795-40BD-BE77-78A657CF385A}
2014-03-22 23:10 - 2014-03-22 19:53 - 00027446 _____ () C:\Windows\DirectX.log
2014-03-22 23:06 - 2014-03-20 15:40 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-03-22 22:42 - 2014-03-22 22:12 - 2996255074 _____ () C:\Users\flow\Desktop\anno-1404-gameliebe.com.zip
2014-03-22 19:54 - 2014-03-22 19:54 - 00314016 _____ () C:\Windows\system32\Drivers\atksgt.sys
2014-03-22 19:54 - 2014-03-22 19:54 - 00043680 _____ () C:\Windows\system32\Drivers\lirsgt.sys
2014-03-22 19:51 - 2014-03-22 19:51 - 00000000 ____D () C:\Program Files (x86)\Ubisoft
2014-03-21 12:58 - 2014-03-21 12:58 - 00000000 ____D () C:\Users\flow\AppData\Local\Macromedia
2014-03-21 12:29 - 2014-03-21 12:29 - 00000000 ____D () C:\Users\flow\AppData\Roaming\Mozilla
2014-03-21 12:29 - 2014-03-21 12:29 - 00000000 ____D () C:\Users\flow\AppData\Local\Mozilla
2014-03-21 12:29 - 2014-03-21 12:29 - 00000000 ____D () C:\ProgramData\Mozilla
2014-03-21 12:29 - 2014-03-21 12:29 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-03-21 12:29 - 2014-03-21 12:29 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-03-21 12:24 - 2014-03-21 12:24 - 00000000 ____D () C:\Users\flow\Desktop\LAN_BROADCOM_12.2.2.2_Win7x86x64_Aspire 5740
2014-03-20 22:45 - 2014-03-20 22:45 - 00000000 ____D () C:\Windows\system32\appmgmt
2014-03-20 22:44 - 2014-03-20 22:10 - 00000444 __RSH () C:\ProgramData\ntuser.pol
2014-03-20 22:13 - 2014-03-20 22:13 - 00004606 _____ () C:\Windows\System32\Tasks\media enhance-updater
2014-03-20 22:13 - 2014-03-20 22:13 - 00004562 _____ () C:\Windows\System32\Tasks\media enhance-codedownloader
2014-03-20 22:13 - 2014-03-20 22:13 - 00004518 _____ () C:\Windows\System32\Tasks\HQTotalS-updater
2014-03-20 22:13 - 2014-03-20 22:13 - 00004460 _____ () C:\Windows\System32\Tasks\media enhance-enabler
2014-03-20 22:13 - 2014-03-20 22:12 - 00004372 _____ () C:\Windows\System32\Tasks\HQTotalS-enabler
2014-03-20 22:13 - 2014-03-20 22:12 - 00000000 ____D () C:\ProgramData\WPM
2014-03-20 22:13 - 2014-03-20 22:12 - 00000000 ____D () C:\Program Files (x86)\SupTab
2014-03-20 22:13 - 2014-03-20 22:11 - 00004472 _____ () C:\Windows\System32\Tasks\HQTotalS-codedownloader
2014-03-20 22:13 - 2014-03-20 22:11 - 00000000 ____D () C:\Program Files (x86)\media enhance
2014-03-20 22:13 - 2014-03-20 22:10 - 00000000 ____D () C:\Program Files (x86)\HQTotalS
2014-03-20 22:12 - 2014-03-20 22:12 - 00000380 _____ () C:\Windows\Tasks\APSnotifierPP1.job
2014-03-20 22:12 - 2014-03-20 22:12 - 00000000 ____D () C:\Users\flow\AppData\Roaming\SupTab
2014-03-20 22:12 - 2014-03-20 22:11 - 00000312 _____ () C:\Users\flow\AppData\Roaming\aps.uninstall.scan.results
2014-03-20 22:11 - 2014-03-20 22:11 - 01172664 _____ (AnyProtect.com) C:\Users\flow\AppData\Local\nsu77C3.tmp
2014-03-20 22:10 - 2009-07-14 05:20 - 00000000 ___HD () C:\Windows\system32\GroupPolicy
2014-03-20 22:10 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\GroupPolicy
2014-03-20 20:23 - 2014-03-20 20:23 - 00000000 ____D () C:\Windows\SysWOW64\RTCOM
2014-03-20 20:23 - 2014-03-20 20:23 - 00000000 ____D () C:\Program Files\Realtek
2014-03-20 20:19 - 2014-03-20 20:19 - 00000000 ____D () C:\Program Files (x86)\Realtek
2014-03-20 20:17 - 2014-03-20 16:09 - 00000000 ____D () C:\Windows\SUYIN NB Cam
2014-03-20 20:12 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-03-20 19:41 - 2014-03-20 19:41 - 00000000 ____D () C:\Users\flow\AppData\Roaming\Synaptics
2014-03-20 19:39 - 2014-03-20 19:38 - 00007800 _____ () C:\Windows\DPINST.LOG
2014-03-20 19:38 - 2014-03-20 19:38 - 00001408 _____ () C:\Windows\Synaptics.log
2014-03-20 19:38 - 2014-03-20 19:38 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_SynTP_01009.Wdf
2014-03-20 19:38 - 2014-03-20 19:38 - 00000000 ____D () C:\Program Files\Synaptics
2014-03-20 16:32 - 2014-03-20 16:32 - 00000000 ____D () C:\Users\flow\AppData\Roaming\Intel Corporation
2014-03-20 16:32 - 2014-03-20 16:32 - 00000000 ____D () C:\ProgramData\Intel
2014-03-20 16:32 - 2014-03-20 16:32 - 00000000 ____D () C:\Program Files\Intel
2014-03-20 16:32 - 2014-03-20 15:01 - 01646762 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2014-03-20 16:31 - 2014-03-20 16:31 - 00000000 ____D () C:\Users\flow\Intel
2014-03-20 16:12 - 2014-03-20 16:12 - 00000000 ____D () C:\Users\flow\AppData\Roaming\ATI
2014-03-20 16:12 - 2014-03-20 16:12 - 00000000 ____D () C:\Users\flow\AppData\Local\ATI
2014-03-20 16:12 - 2014-03-20 16:12 - 00000000 ____D () C:\ProgramData\ATI
2014-03-20 16:11 - 2014-03-20 16:11 - 00000000 _____ () C:\Windows\ativpsrm.bin
2014-03-20 16:09 - 2014-03-20 16:09 - 00000000 ____D () C:\Users\flow\AppData\Roaming\InstallShield
2014-03-20 16:05 - 2014-03-20 16:05 - 00000000 ____D () C:\Program Files\WinRAR
2014-03-20 15:57 - 2014-03-20 15:57 - 00000000 ____D () C:\Windows\Options
2014-03-20 15:57 - 2014-03-20 15:57 - 00000000 ____D () C:\Program Files\LSI SoftModem
2014-03-20 15:54 - 2014-03-20 13:03 - 00000000 ____D () C:\Program Files (x86)\Intel
2014-03-20 15:41 - 2014-03-20 15:41 - 00000000 ____H () C:\ProgramData\DP45977C.lfl
2014-03-20 15:33 - 2014-03-20 15:33 - 00000000 ____D () C:\ProgramData\DriverGenius
2014-03-20 15:24 - 2014-03-20 15:09 - 00000000 ____D () C:\Users\flow\AppData\Roaming\vlc
2014-03-20 15:09 - 2014-03-20 15:09 - 00000000 ____D () C:\Program Files (x86)\VideoLAN
2014-03-20 15:05 - 2014-03-20 15:05 - 00000000 ____D () C:\Users\flow\AppData\Roaming\library_dir
2014-03-20 15:04 - 2014-03-20 15:04 - 00000000 ____D () C:\ProgramData\AMD
2014-03-20 15:04 - 2014-03-20 15:04 - 00000000 ____D () C:\Program Files (x86)\AMD AVT
2014-03-20 15:04 - 2014-03-20 14:58 - 00000000 ____D () C:\Program Files\ATI Technologies
2014-03-20 15:03 - 2014-03-20 15:03 - 00000000 ____D () C:\Program Files\AMD
2014-03-20 15:01 - 2014-03-20 15:01 - 00000000 ____D () C:\Program Files\Common Files\ATI Technologies
2014-03-20 15:01 - 2014-03-20 15:01 - 00000000 ____D () C:\Program Files (x86)\ATI Technologies
2014-03-20 15:01 - 2014-03-20 14:58 - 00000000 ____D () C:\ProgramData\Package Cache
2014-03-20 14:58 - 2014-03-20 14:58 - 00000000 ____D () C:\Program Files\ATI
2014-03-20 14:57 - 2014-03-20 14:57 - 00000000 ____D () C:\AMD
2014-03-20 14:12 - 2014-03-20 14:11 - 00000000 ____D () C:\ProgramData\Adobe
2014-03-20 14:11 - 2014-03-20 14:11 - 00000000 ____D () C:\Program Files (x86)\Adobe
2014-03-20 14:11 - 2014-03-20 13:16 - 00000000 ____D () C:\Users\flow\AppData\Roaming\Adobe
2014-03-20 13:16 - 2014-03-20 13:16 - 00000000 ____D () C:\Windows\SysWOW64\Macromed
2014-03-20 13:16 - 2014-03-20 13:16 - 00000000 ____D () C:\Windows\system32\Macromed
2014-03-20 13:16 - 2014-03-20 13:16 - 00000000 ____D () C:\Users\flow\AppData\Roaming\Macromedia
2014-03-20 12:55 - 2014-03-20 12:55 - 00000000 ____D () C:\Intel
2014-03-20 12:34 - 2014-03-20 12:34 - 00000000 ____D () C:\Users\flow\AppData\Roaming\WinRAR
2014-03-20 12:34 - 2014-03-20 12:34 - 00000000 ____D () C:\Program Files (x86)\WinRAR
2014-03-20 11:24 - 2014-03-20 11:24 - 00000000 ____D () C:\Users\flow\AppData\Local\Drivers_For_Free
2014-03-20 11:23 - 2014-03-20 11:23 - 00000000 ____D () C:\Users\flow\AppData\Roaming\Drivers For Free
2014-03-19 09:25 - 2014-03-18 17:41 - 00000404 _____ () C:\Windows\Tasks\DriverEasy Scheduled Scan.job
2014-03-19 09:25 - 2009-07-14 07:09 - 00000000 ____D () C:\Windows\System32\Tasks\WPD
2014-03-18 20:28 - 2009-07-14 05:20 - 00000000 __RHD () C:\Users\Public\Libraries
2014-03-18 18:29 - 2009-07-14 07:32 - 00000000 ____D () C:\Windows\system32\restore
2014-03-18 17:41 - 2014-03-18 17:41 - 00003808 _____ () C:\Windows\System32\Tasks\DriverEasy Scheduled Scan
2014-03-18 17:41 - 2014-03-18 17:41 - 00000000 ____D () C:\Users\flow\AppData\Roaming\Easeware
2014-03-18 17:40 - 2014-03-18 17:40 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdFs_01_09_00.Wdf
2014-03-18 17:26 - 2014-03-18 15:13 - 00000000 ____D () C:\Users\flow\AppData\Local\VirtualStore
2014-03-18 15:31 - 2014-03-18 15:31 - 00000000 ____D () C:\Program Files (x86)\MicroProse
2014-03-18 15:13 - 2014-03-18 15:13 - 00000020 ___SH () C:\Users\flow\ntuser.ini
2014-03-18 15:13 - 2014-03-18 15:13 - 00000000 _SHDL () C:\Users\flow\Vorlagen
2014-03-18 15:13 - 2014-03-18 15:13 - 00000000 _SHDL () C:\Users\flow\Startmenü
2014-03-18 15:13 - 2014-03-18 15:13 - 00000000 _SHDL () C:\Users\flow\Netzwerkumgebung
2014-03-18 15:13 - 2014-03-18 15:13 - 00000000 _SHDL () C:\Users\flow\Lokale Einstellungen
2014-03-18 15:13 - 2014-03-18 15:13 - 00000000 _SHDL () C:\Users\flow\Eigene Dateien
2014-03-18 15:13 - 2014-03-18 15:13 - 00000000 _SHDL () C:\Users\flow\Druckumgebung
2014-03-18 15:13 - 2014-03-18 15:13 - 00000000 _SHDL () C:\Users\flow\Documents\Eigene Musik
2014-03-18 15:13 - 2014-03-18 15:13 - 00000000 _SHDL () C:\Users\flow\Documents\Eigene Bilder
2014-03-18 15:13 - 2014-03-18 15:13 - 00000000 _SHDL () C:\Users\flow\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-03-18 15:13 - 2014-03-18 15:13 - 00000000 _SHDL () C:\Users\flow\AppData\Local\Verlauf
2014-03-18 15:13 - 2014-03-18 15:13 - 00000000 _SHDL () C:\Users\flow\AppData\Local\Anwendungsdaten
2014-03-18 15:13 - 2014-03-18 15:13 - 00000000 _SHDL () C:\Users\flow\Anwendungsdaten
2014-03-18 15:10 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache
2014-03-18 15:09 - 2014-03-18 15:09 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Musik
2014-03-18 15:09 - 2014-03-18 15:09 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Bilder
2014-03-18 15:09 - 2014-03-18 15:09 - 00000000 _SHDL () C:\Users\Default\Vorlagen
2014-03-18 15:09 - 2014-03-18 15:09 - 00000000 _SHDL () C:\Users\Default\Startmenü
2014-03-18 15:09 - 2014-03-18 15:09 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung
2014-03-18 15:09 - 2014-03-18 15:09 - 00000000 _SHDL () C:\Users\Default\Lokale Einstellungen
2014-03-18 15:09 - 2014-03-18 15:09 - 00000000 _SHDL () C:\Users\Default\Eigene Dateien
2014-03-18 15:09 - 2014-03-18 15:09 - 00000000 _SHDL () C:\Users\Default\Druckumgebung
2014-03-18 15:09 - 2014-03-18 15:09 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik
2014-03-18 15:09 - 2014-03-18 15:09 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder
2014-03-18 15:09 - 2014-03-18 15:09 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-03-18 15:09 - 2014-03-18 15:09 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf
2014-03-18 15:09 - 2014-03-18 15:09 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Anwendungsdaten
2014-03-18 15:09 - 2014-03-18 15:09 - 00000000 _SHDL () C:\Users\Default\Anwendungsdaten
2014-03-18 15:09 - 2014-03-18 15:09 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik
2014-03-18 15:09 - 2014-03-18 15:09 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder
2014-03-18 15:09 - 2014-03-18 15:09 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-03-18 15:09 - 2014-03-18 15:09 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf
2014-03-18 15:09 - 2014-03-18 15:09 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Anwendungsdaten
2014-03-18 15:09 - 2014-03-18 15:09 - 00000000 _SHDL () C:\Programme
2014-03-18 15:09 - 2014-03-18 15:09 - 00000000 _SHDL () C:\ProgramData\Vorlagen
2014-03-18 15:09 - 2014-03-18 15:09 - 00000000 _SHDL () C:\ProgramData\Startmenü
2014-03-18 15:09 - 2014-03-18 15:09 - 00000000 _SHDL () C:\ProgramData\Favoriten
2014-03-18 15:09 - 2014-03-18 15:09 - 00000000 _SHDL () C:\ProgramData\Dokumente
2014-03-18 15:09 - 2014-03-18 15:09 - 00000000 _SHDL () C:\ProgramData\Anwendungsdaten
2014-03-18 15:09 - 2014-03-18 15:09 - 00000000 _SHDL () C:\Program Files\Gemeinsame Dateien
2014-03-18 15:09 - 2014-03-18 15:09 - 00000000 _SHDL () C:\Dokumente und Einstellungen
2014-03-18 15:09 - 2014-03-18 15:09 - 00000000 __SHD () C:\Recovery
2014-03-18 15:09 - 2009-07-14 05:20 - 00000000 __RHD () C:\Users\Default
2014-03-18 15:09 - 2009-07-14 05:20 - 00000000 ____D () C:\Program Files\Windows NT
2014-03-18 15:08 - 2009-10-14 08:04 - 00000000 ____D () C:\Windows\Panther
2014-03-18 15:08 - 2009-10-14 07:06 - 00005767 _____ () C:\Windows\TSSysprep.log
2014-03-18 15:08 - 2009-07-14 06:46 - 00003806 _____ () C:\Windows\DtcInstall.log
2014-03-18 15:06 - 2014-03-18 15:06 - 00000000 ____D () C:\Windows\CSC
2014-03-18 15:05 - 2009-07-14 07:38 - 00025600 ___SH () C:\Windows\system32\config\BCD-Template.LOG
2014-03-18 15:05 - 2009-07-14 07:32 - 00028672 _____ () C:\Windows\system32\config\BCD-Template

Some content of TEMP:
====================
C:\Users\flow\AppData\Local\Temp\avgnt.exe
C:\Users\flow\AppData\Local\Temp\BackupSetup.exe
C:\Users\flow\AppData\Local\Temp\Java[1].exe
C:\Users\flow\AppData\Local\Temp\ose00000.exe
C:\Users\flow\AppData\Local\Temp\PCCheckupInstaller.exe
C:\Users\flow\AppData\Local\Temp\raptrpatch.exe
C:\Users\flow\AppData\Local\Temp\raptr_stub.exe
C:\Users\flow\AppData\Local\Temp\vcredist_x64.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-03-30 01:25

==================== End Of Log ============================
Addition

Code:
ATTFilter
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 16-04-2014 01
Ran by flow at 2014-04-16 16:19:27
Running from C:\Users\flow\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Avira Desktop (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AS: Avira Desktop (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

Adobe Flash Player 13 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 13.0.0.182 - Adobe Systems Incorporated)
AMD Accelerated Video Transcoding (Version: 13.30.100.40312 - Advanced Micro Devices, Inc.) Hidden
AMD Catalyst Install Manager (HKLM\...\{8F3C9854-8EB9-3D28-4AD7-E3ADD800C7E3}) (Version: 8.0.916.0 - Advanced Micro Devices, Inc.)
AMD Drag and Drop Transcoding (Version: 2.00.0000 - Advanced Micro Devices, Inc.) Hidden
AMD Wireless Display v3.0 (Version: 1.0.0.15 - Advanced Micro Devices, Inc.) Hidden
ANNO 1404 (Demo) (HKLM-x32\...\{712538AF-06AE-4F7F-B246-617034495FE6}) (Version: 1.00.0000 - Ubisoft)
Anno 1404 (Demo) (x32 Version: 1.00.0000 - Ubisoft) Hidden
ANNO 1404 (HKLM-x32\...\{3D9CF3CA-3AB0-4A82-9853-D7C43FD1D775}) (Version: 1.03.0000 - Ubisoft)
Anno 1404 (x32 Version: 1.00.0000 - Ubisoft) Hidden
Avira Free Antivirus (HKLM-x32\...\Avira AntiVir Desktop) (Version: 14.0.3.350 - Avira)
Avira Savings Advisor (HKLM-x32\...\{A18A516C-AA41-46A9-92DB-60208917E442}) (Version: 1.5.14 - Avira)
ccc-utility64 (Version: 2014.0312.1131.18796 - Advanced Micro Devices, Inc.) Hidden
iMesh (HKLM-x32\...\iMesh) (Version: 12.5.0.134600 - iMesh Inc) <==== ATTENTION
Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 12.8.0.1016 - Intel Corporation)
Intel(R) Rapid Storage Technology (Version: 12.8.0.1016 - Intel Corporation) Hidden
Java 7 Update 55 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217055FF}) (Version: 7.0.550 - Oracle)
Java Auto Updater (x32 Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden
Kaspersky Security Scan (HKLM-x32\...\InstallWIX_{56009CA3-423B-41F8-884A-E5B049534F15}) (Version: 12.0.1.340 - Kaspersky Lab)
Kaspersky Security Scan (x32 Version: 12.0.1.340 - Kaspersky Lab) Hidden
LSI HDA Modem (HKLM\...\LSI Soft Modem) (Version: 2.2.97 - LSI Corporation)
Microsoft .NET Framework 4.5 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50709 - Microsoft Corporation)
Microsoft .NET Framework 4.5 (Version: 4.5.50709 - Microsoft Corporation) Hidden
Microsoft Office Access MUI (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Enterprise 2007 (HKLM-x32\...\ENTERPRISE) (Version: 12.0.4518.1014 - Microsoft Corporation)
Microsoft Office Enterprise 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Excel MUI (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Groove MUI (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office InfoPath MUI (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Office 64-bit Components 2007 (Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office OneNote MUI (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Outlook MUI (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Proof (English) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Proof (French) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Proof (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Proof (Italian) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Proofing (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Publisher MUI (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Shared 64-bit MUI (German) 2007 (Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Word MUI (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version:  - )
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.30319 (HKLM\...\{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.50727 (Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.50727 (Version: 11.0.50727 - Microsoft Corporation) Hidden
Mozilla Firefox 28.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 28.0 (x86 de)) (Version: 28.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 28.0 - Mozilla)
Raptr (HKLM-x32\...\Raptr) (Version:  - )
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 16.3.12.37 - Synaptics Incorporated)
WinRAR 5.10 beta 1 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.10.1 - win.rar GmbH)

==================== Restore Points  =========================

29-03-2014 23:00:01 Geplanter Prüfpunkt
30-03-2014 12:08:55 Installed Microsoft Office Enterprise 2007
16-04-2014 12:47:32 Installed Java 7 Update 55

==================== Hosts content: ==========================

2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {0FC50692-08F1-4558-9516-B72E07F67EDA} - System32\Tasks\media enhance-chromeinstaller => C:\Program Files (x86)\media enhance\media enhance-chromeinstaller.exe [2014-03-20] (freeven) <==== ATTENTION
Task: {12E10347-69BD-45D5-8959-6047CBCD67AA} - System32\Tasks\HQTotalS-chromeinstaller => C:\Program Files (x86)\HQTotalS\HQTotalS-chromeinstaller.exe [2014-03-20] (HQplustotalS)
Task: {1A3A19D6-1F3D-4DFD-B3E9-DC9DC8BDF62C} - System32\Tasks\HQTotalS-enabler => C:\Program Files (x86)\HQTotalS\HQTotalS-enabler.exe [2014-03-20] (HQplustotalS) <==== ATTENTION
Task: {1EBE096C-DFD6-472E-BEF4-6A7145CDC0C6} - System32\Tasks\HQTotalS-codedownloader => C:\Program Files (x86)\HQTotalS\HQTotalS-codedownloader.exe [2014-03-20] (HQplustotalS)
Task: {20028911-B7E1-44D6-A619-0454C8097BB4} - System32\Tasks\aviraSWU => Cscript.exe "C:\Program Files (x86)\avira\Internet Explorer\swu.vbs"
Task: {36B4F779-DDF6-4DD5-801B-32E46AC38A77} - System32\Tasks\media enhance-enabler => C:\Program Files (x86)\media enhance\media enhance-enabler.exe [2014-03-20] (freeven) <==== ATTENTION
Task: {454DA84E-C47D-4F97-81A8-8FF9733692C4} - System32\Tasks\media enhance-firefoxinstaller => C:\Program Files (x86)\media enhance\media enhance-firefoxinstaller.exe [2014-03-20] (freeven) <==== ATTENTION
Task: {49464DCE-CA8D-4C23-9F68-257C69488EDB} - System32\Tasks\media enhance-codedownloader => C:\Program Files (x86)\media enhance\media enhance-codedownloader.exe [2014-03-20] (freeven) <==== ATTENTION
Task: {653F36DD-766A-4C71-8426-4D92A700754D} - System32\Tasks\HQTotalS-updater => C:\Program Files (x86)\HQTotalS\HQTotalS-updater.exe [2014-03-20] (HQplustotalS)
Task: {81939A1D-7FC9-4D70-9A6B-31E4A14138AD} - System32\Tasks\HQTotalS-firefoxinstaller => C:\Program Files (x86)\HQTotalS\HQTotalS-firefoxinstaller.exe [2014-03-20] (HQplustotalS)
Task: {93E206DE-0A36-43B4-A579-6E459367CACD} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-04-16] (Adobe Systems Incorporated)
Task: {9509A210-4BF5-46ED-BA74-838B98CA57A1} - System32\Tasks\DriverEasy Scheduled Scan => C:\Program Files\Easeware\DriverEasy\DriverEasy.exe
Task: {D04378D4-7CBD-453E-927C-547DA3E6F29C} - System32\Tasks\media enhance-updater => C:\Program Files (x86)\media enhance\media enhance-updater.exe [2014-03-20] (freeven) <==== ATTENTION
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\APSnotifierPP1.job => C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe
Task: C:\Windows\Tasks\DriverEasy Scheduled Scan.job => C:\Program Files\Easeware\DriverEasy\DriverEasy.exe
Task: C:\Windows\Tasks\HQTotalS-chromeinstaller.job => C:\Program Files (x86)\HQTotalS\HQTotalS-chromeinstaller.exe
Task: C:\Windows\Tasks\HQTotalS-codedownloader.job => C:\Program Files (x86)\HQTotalS\HQTotalS-codedownloader.exe
Task: C:\Windows\Tasks\HQTotalS-enabler.job => C:\Program Files (x86)\HQTotalS\HQTotalS-enabler.exe <==== ATTENTION
Task: C:\Windows\Tasks\HQTotalS-firefoxinstaller.job => C:\Program Files (x86)\HQTotalS\HQTotalS-firefoxinstaller.exe
Task: C:\Windows\Tasks\HQTotalS-updater.job => C:\Program Files (x86)\HQTotalS\HQTotalS-updater.exe
Task: C:\Windows\Tasks\media enhance-chromeinstaller.job => C:\Program Files (x86)\media enhance\media enhance-chromeinstaller.exe <==== ATTENTION
Task: C:\Windows\Tasks\media enhance-codedownloader.job => C:\Program Files (x86)\media enhance\media enhance-codedownloader.exe <==== ATTENTION
Task: C:\Windows\Tasks\media enhance-enabler.job => C:\Program Files (x86)\media enhance\media enhance-enabler.exe <==== ATTENTION
Task: C:\Windows\Tasks\media enhance-firefoxinstaller.job => C:\Program Files (x86)\media enhance\media enhance-firefoxinstaller.exe <==== ATTENTION
Task: C:\Windows\Tasks\media enhance-updater.job => C:\Program Files (x86)\media enhance\media enhance-updater.exe <==== ATTENTION

==================== Loaded Modules (whitelisted) =============

2014-03-20 16:09 - 2009-08-10 17:14 - 00027184 _____ () C:\Windows\snuvcdsm.exe
2014-04-16 11:12 - 2014-02-25 11:41 - 00394808 _____ () C:\Program Files (x86)\Avira\AntiVir Desktop\sqlite3.dll
2010-11-23 00:56 - 2010-11-23 00:56 - 00087040 _____ () C:\Program Files (x86)\Raptr\_ctypes.pyd
2010-11-23 00:56 - 2010-11-23 00:56 - 00043008 _____ () C:\Program Files (x86)\Raptr\_socket.pyd
2010-11-23 00:56 - 2010-11-23 00:56 - 00805376 _____ () C:\Program Files (x86)\Raptr\_ssl.pyd
2014-02-22 00:32 - 2014-02-22 00:32 - 05812736 _____ () C:\Program Files (x86)\Raptr\PyQt4.QtGui.pyd
2014-02-22 00:32 - 2014-02-22 00:32 - 00067584 _____ () C:\Program Files (x86)\Raptr\sip.pyd
2014-02-22 00:32 - 2014-02-22 00:32 - 01662464 _____ () C:\Program Files (x86)\Raptr\PyQt4.QtCore.pyd
2014-02-22 00:32 - 2014-02-22 00:32 - 00494592 _____ () C:\Program Files (x86)\Raptr\PyQt4.QtNetwork.pyd
2010-11-23 00:57 - 2010-11-23 00:57 - 00096256 _____ () C:\Program Files (x86)\Raptr\win32api.pyd
2010-11-23 00:56 - 2010-11-23 00:56 - 00110592 _____ () C:\Program Files (x86)\Raptr\pywintypes26.dll
2010-11-23 00:56 - 2010-11-23 00:56 - 00324608 _____ () C:\Program Files (x86)\Raptr\PIL._imaging.pyd
2010-11-23 00:56 - 2010-11-23 00:56 - 00356864 _____ () C:\Program Files (x86)\Raptr\_hashlib.pyd
2010-11-23 00:57 - 2010-11-23 00:57 - 00036352 _____ () C:\Program Files (x86)\Raptr\win32process.pyd
2010-11-23 00:57 - 2010-11-23 00:57 - 00111104 _____ () C:\Program Files (x86)\Raptr\win32file.pyd
2010-11-23 00:56 - 2010-11-23 00:56 - 00124928 _____ () C:\Program Files (x86)\Raptr\_elementtree.pyd
2010-11-23 00:56 - 2010-11-23 00:56 - 00127488 _____ () C:\Program Files (x86)\Raptr\pyexpat.pyd
2012-02-06 22:28 - 2012-02-06 22:28 - 00031744 _____ () C:\Program Files (x86)\Raptr\Crypto.Cipher.AES.pyd
2012-02-06 22:28 - 2012-02-06 22:28 - 00010752 _____ () C:\Program Files (x86)\Raptr\Crypto.Random.OSRNG.winrandom.pyd
2012-02-06 22:28 - 2012-02-06 22:28 - 00011264 _____ () C:\Program Files (x86)\Raptr\Crypto.Util._counter.pyd
2011-05-10 21:01 - 2011-05-10 21:01 - 00030208 _____ () C:\Program Files (x86)\Raptr\simplejson._speedups.pyd
2014-02-22 00:32 - 2014-02-22 00:32 - 00313856 _____ () C:\Program Files (x86)\Raptr\PyQt4.QtWebKit.pyd
2010-11-23 00:56 - 2010-11-23 00:56 - 00044544 _____ () C:\Program Files (x86)\Raptr\_sqlite3.pyd
2011-02-15 20:17 - 2011-02-15 20:17 - 00417501 _____ () C:\Program Files (x86)\Raptr\sqlite3.dll
2010-11-23 00:56 - 2010-11-23 00:56 - 00354304 _____ () C:\Program Files (x86)\Raptr\pythoncom26.dll
2010-11-23 00:57 - 2010-11-23 00:57 - 00016384 _____ () C:\Program Files (x86)\Raptr\win32trace.pyd
2010-11-23 00:57 - 2010-11-23 00:57 - 00167936 _____ () C:\Program Files (x86)\Raptr\win32gui.pyd
2010-11-23 00:56 - 2010-11-23 00:56 - 00009216 _____ () C:\Program Files (x86)\Raptr\winsound.pyd
2010-11-23 00:56 - 2010-11-23 00:56 - 00010240 _____ () C:\Program Files (x86)\Raptr\select.pyd
2013-11-21 02:05 - 2013-11-21 02:05 - 00256000 _____ () C:\Program Files (x86)\Raptr\amd_ags.dll
2010-11-23 00:56 - 2010-11-23 00:56 - 00583680 _____ () C:\Program Files (x86)\Raptr\unicodedata.pyd
2014-04-16 12:19 - 2014-04-16 12:19 - 16351920 _____ () C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_182.dll
2010-11-23 00:57 - 2010-11-23 00:57 - 00141312 _____ () C:\Program Files (x86)\Raptr\gobject._gobject.pyd
2012-10-27 09:53 - 2012-10-27 09:53 - 02717595 _____ () C:\Program Files (x86)\Raptr\heliotrope._purple.pyd
2011-02-15 20:17 - 2011-02-15 20:17 - 01213633 _____ () C:\Program Files (x86)\Raptr\libxml2-2.dll
2010-11-23 01:06 - 2010-11-23 01:06 - 00055808 _____ () C:\Program Files (x86)\Raptr\zlib1.dll
2013-05-10 01:52 - 2013-05-10 01:52 - 00495680 _____ () C:\Program Files (x86)\Raptr\plugins\libaim.dll
2013-05-10 01:52 - 2013-05-10 01:52 - 01183699 _____ () C:\Program Files (x86)\Raptr\liboscar.dll
2013-05-10 01:52 - 2013-05-10 01:52 - 00483306 _____ () C:\Program Files (x86)\Raptr\plugins\libicq.dll
2013-05-03 20:57 - 2013-05-03 20:57 - 00655356 _____ () C:\Program Files (x86)\Raptr\plugins\libirc.dll
2013-05-03 20:56 - 2013-05-03 20:56 - 01306387 _____ () C:\Program Files (x86)\Raptr\plugins\libmsn.dll
2013-05-03 20:56 - 2013-05-03 20:56 - 00565461 _____ () C:\Program Files (x86)\Raptr\plugins\libxmpp.dll
2013-05-03 20:57 - 2013-05-03 20:57 - 01640221 _____ () C:\Program Files (x86)\Raptr\libjabber.dll
2013-05-03 20:56 - 2013-05-03 20:56 - 00506276 _____ () C:\Program Files (x86)\Raptr\plugins\libyahoo.dll
2013-05-03 20:57 - 2013-05-03 20:57 - 01053730 _____ () C:\Program Files (x86)\Raptr\libymsg.dll
2013-05-03 20:57 - 2013-05-03 20:57 - 00497782 _____ () C:\Program Files (x86)\Raptr\plugins\libyahoojp.dll
2013-05-03 20:57 - 2013-05-03 20:57 - 00603326 _____ () C:\Program Files (x86)\Raptr\plugins\ssl-nss.dll
2013-05-03 20:57 - 2013-05-03 20:57 - 00474199 _____ () C:\Program Files (x86)\Raptr\plugins\ssl.dll
2012-12-07 15:15 - 2012-12-07 15:15 - 02126264 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky Security Scan 2.0\QtCore4.dll
2012-12-07 15:15 - 2012-12-07 15:15 - 07422392 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky Security Scan 2.0\QtGui4.dll
2012-12-07 15:15 - 2012-12-07 15:15 - 02453944 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky Security Scan 2.0\QtDeclarative4.dll
2012-12-07 15:15 - 2012-12-07 15:15 - 01270200 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky Security Scan 2.0\QtScript4.dll
2012-12-07 15:15 - 2012-12-07 15:15 - 00192952 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky Security Scan 2.0\QtSql4.dll
2012-12-07 15:15 - 2012-12-07 15:15 - 00795064 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky Security Scan 2.0\QtNetwork4.dll
2011-09-05 19:36 - 2011-09-05 19:36 - 00025088 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky Security Scan 2.0\imageformats\qgif4.dll
2011-09-05 19:36 - 2011-09-05 19:36 - 00180224 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky Security Scan 2.0\imageformats\qjpeg4.dll
2014-03-21 12:29 - 2014-03-15 10:40 - 03642480 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll

==================== Alternate Data Streams (whitelisted) =========


==================== Safe Mode (whitelisted) ===================


==================== Disabled items from MSCONFIG ==============


==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (03/21/2014 00:53:45 PM) (Source: Application Hang) (User: )
Description: Programm gpw.exe, Version 1.0.0.1 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 8e4

Startzeit: 01cf44f38f26d962

Endzeit: 16

Anwendungspfad: C:\Program Files (x86)\MicroProse\Grand Prix World\gpw.exe

Berichts-ID:

Error: (03/21/2014 00:47:40 PM) (Source: Application Hang) (User: )
Description: Programm gpw.exe, Version 1.0.0.1 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: dc

Startzeit: 01cf44f2c93cfcce

Endzeit: 16

Anwendungspfad: C:\Program Files (x86)\MicroProse\Grand Prix World\gpw.exe

Berichts-ID:

Error: (03/21/2014 00:45:34 PM) (Source: Application Hang) (User: )
Description: Programm gpw.exe, Version 1.0.0.1 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 6c4

Startzeit: 01cf44f26f327091

Endzeit: 15

Anwendungspfad: C:\Program Files (x86)\MicroProse\Grand Prix World\gpw.exe

Berichts-ID:

Error: (03/20/2014 10:16:41 PM) (Source: Application Hang) (User: )
Description: Programm _iu14D2N.tmp, Version 51.1052.0.0 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 14b4

Startzeit: 01cf4478a02c547f

Endzeit: 0

Anwendungspfad: C:\Users\flow\AppData\Local\Temp\_iu14D2N.tmp

Berichts-ID:

Error: (03/20/2014 10:12:35 PM) (Source: Application Hang) (User: )
Description: Programm AnyProtect.exe, Version 1.0.0.1 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 15a0

Startzeit: 01cf4478a178165a

Endzeit: 0

Anwendungspfad: C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe

Berichts-ID: f7928ba2-b06b-11e3-afd5-00262d8faee2

Error: (03/20/2014 08:35:42 PM) (Source: Application Hang) (User: )
Description: Programm GPW.ICD, Version 1.0.0.1 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 2f0

Startzeit: 01cf446ad3190209

Endzeit: 0

Anwendungspfad: C:\Program Files (x86)\MicroProse\Grand Prix World\GPW.ICD

Berichts-ID:

Error: (03/20/2014 07:53:26 PM) (Source: RasClient) (User: )
Description: CoID={82368204-421C-4E82-9CA5-4CAB739DACED}: Der Benutzer "flow-PC\flow" hat eine Verbindung mit dem Namen "Breitbandverbindung" gewählt, die Verbindung konnte jedoch nicht hergestellt werden. Der durch den Fehler zurückgegebene Ursachencode lautet: 651.

Error: (03/20/2014 07:50:32 PM) (Source: RasClient) (User: )
Description: CoID={37C83D27-611F-45FD-8998-ED36A52BAB1E}: Der Benutzer "flow-PC\flow" hat eine Verbindung mit dem Namen "Breitbandverbindung" gewählt, die Verbindung konnte jedoch nicht hergestellt werden. Der durch den Fehler zurückgegebene Ursachencode lautet: 651.

Error: (03/20/2014 07:47:01 PM) (Source: RasClient) (User: )
Description: CoID={37CD74F7-7F56-4409-B400-143547160CA3}: Der Benutzer "flow-PC\flow" hat eine Verbindung mit dem Namen "Breitbandverbindung" gewählt, die Verbindung konnte jedoch nicht hergestellt werden. Der durch den Fehler zurückgegebene Ursachencode lautet: 651.

Error: (03/20/2014 07:37:34 PM) (Source: Application Hang) (User: )
Description: Programm GPW.ICD, Version 1.0.0.1 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: fec

Startzeit: 01cf44629642c9e7

Endzeit: 28

Anwendungspfad: C:\Program Files (x86)\MicroProse\Grand Prix World\GPW.ICD

Berichts-ID:


System errors:
=============
Error: (04/16/2014 02:11:06 PM) (Source: EventLog) (User: )
Description: Das System wurde zuvor am ‎16.‎04.‎2014 um 13:00:22 unerwartet heruntergefahren.

Error: (04/16/2014 00:40:47 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1068

Error: (04/16/2014 00:40:47 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1068

Error: (04/16/2014 00:40:47 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1068

Error: (04/16/2014 00:40:47 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1068

Error: (04/16/2014 00:40:47 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1068

Error: (04/16/2014 00:40:47 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1068

Error: (04/16/2014 00:40:47 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1068

Error: (04/16/2014 00:40:47 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1068

Error: (04/16/2014 00:40:47 PM) (Source: DCOM) (User: )
Description: 1084WSearch{9E175B6D-F52A-11D8-B9A5-505054503030}


Microsoft Office Sessions:
=========================

==================== Memory info =========================== 

Percentage of memory in use: 61%
Total physical RAM: 3956.5 MB
Available physical RAM: 1504.26 MB
Total Pagefile: 7911.15 MB
Available Pagefile: 4940.38 MB
Total Virtual: 8192 MB
Available Virtual: 8191.79 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:97.56 GB) (Free:58.4 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 298 GB) (Disk ID: BAB1BAB1)

Partition: GPT Partition Type.

==================== End Of Log ============================

Kommt sofort Gmar----->

Alt 16.04.2014, 17:39   #2
ulumangulu
 
Firefox öffnet selbststängig Tabs und ändert ohne zu klicken die offene internet seite. - Standard

Firefox öffnet selbststängig Tabs und ändert ohne zu klicken die offene internet seite.


Gmar


Code:
ATTFilter
GMER 2.1.19357 - hxxp://www.gmer.net
Rootkit scan 2014-04-16 17:12:40
Windows 6.1.7600  x64 \Device\Harddisk0\DR0 -> \Device\00000066 Hitachi_ rev.PB3O 298,09GB
Running: Gmer-19357.exe; Driver: C:\Users\flow\AppData\Local\Temp\kxldypob.sys


---- Kernel code sections - GMER 2.1 ----

INITKDBG  C:\Windows\system32\ntoskrnl.exe                                                                                                                                                                       suspicious modification

---- User code sections - GMER 2.1 ----

.text     C:\ProgramData\IePluginService\PluginService.exe[1668] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExW + 17                                                                                         0000000075531401 2 bytes JMP 753deb26 C:\Windows\syswow64\kernel32.dll
.text     C:\ProgramData\IePluginService\PluginService.exe[1668] C:\Windows\syswow64\PSAPI.DLL!EnumProcessModules + 17                                                                                           0000000075531419 2 bytes JMP 753eb513 C:\Windows\syswow64\kernel32.dll
.text     C:\ProgramData\IePluginService\PluginService.exe[1668] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 17                                                                                         0000000075531431 2 bytes JMP 75468609 C:\Windows\syswow64\kernel32.dll
.text     C:\ProgramData\IePluginService\PluginService.exe[1668] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 42                                                                                         000000007553144a 2 bytes CALL 753c1dfa C:\Windows\syswow64\kernel32.dll
.text     ...                                                                                                                                                                                                    * 9
.text     C:\ProgramData\IePluginService\PluginService.exe[1668] C:\Windows\syswow64\PSAPI.DLL!EnumDeviceDrivers + 17                                                                                            00000000755314dd 2 bytes JMP 75467efe C:\Windows\syswow64\kernel32.dll
.text     C:\ProgramData\IePluginService\PluginService.exe[1668] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameA + 17                                                                                     00000000755314f5 2 bytes JMP 754680d8 C:\Windows\syswow64\kernel32.dll
.text     C:\ProgramData\IePluginService\PluginService.exe[1668] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSetEx + 17                                                                                            000000007553150d 2 bytes JMP 75467df4 C:\Windows\syswow64\kernel32.dll
.text     C:\ProgramData\IePluginService\PluginService.exe[1668] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameW + 17                                                                                     0000000075531525 2 bytes JMP 754681c2 C:\Windows\syswow64\kernel32.dll
.text     C:\ProgramData\IePluginService\PluginService.exe[1668] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameW + 17                                                                                           000000007553153d 2 bytes JMP 753df088 C:\Windows\syswow64\kernel32.dll
.text     C:\ProgramData\IePluginService\PluginService.exe[1668] C:\Windows\syswow64\PSAPI.DLL!EnumProcesses + 17                                                                                                0000000075531555 2 bytes JMP 753eb885 C:\Windows\syswow64\kernel32.dll
.text     C:\ProgramData\IePluginService\PluginService.exe[1668] C:\Windows\syswow64\PSAPI.DLL!GetProcessMemoryInfo + 17                                                                                         000000007553156d 2 bytes JMP 754686c1 C:\Windows\syswow64\kernel32.dll
.text     C:\ProgramData\IePluginService\PluginService.exe[1668] C:\Windows\syswow64\PSAPI.DLL!GetPerformanceInfo + 17                                                                                           0000000075531585 2 bytes JMP 75468222 C:\Windows\syswow64\kernel32.dll
.text     C:\ProgramData\IePluginService\PluginService.exe[1668] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSet + 17                                                                                              000000007553159d 2 bytes JMP 75467db8 C:\Windows\syswow64\kernel32.dll
.text     C:\ProgramData\IePluginService\PluginService.exe[1668] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameA + 17                                                                                           00000000755315b5 2 bytes JMP 753df121 C:\Windows\syswow64\kernel32.dll
.text     C:\ProgramData\IePluginService\PluginService.exe[1668] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExA + 17                                                                                         00000000755315cd 2 bytes JMP 753eb29f C:\Windows\syswow64\kernel32.dll
.text     C:\ProgramData\IePluginService\PluginService.exe[1668] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 20                                                                                     00000000755316b2 2 bytes JMP 75468584 C:\Windows\syswow64\kernel32.dll
.text     C:\ProgramData\IePluginService\PluginService.exe[1668] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 31                                                                                     00000000755316bd 2 bytes JMP 75467d4d C:\Windows\syswow64\kernel32.dll
.text     C:\Program Files (x86)\Kaspersky Lab\Kaspersky Security Scan 2.0\kss.exe[2160] C:\Windows\SysWOW64\ntdll.dll!NtProtectVirtualMemory                                                                    00000000777bffd8 5 bytes JMP 00000001698f1986
.text     C:\Windows\snuvcdsm.exe[1952] C:\Windows\SysWOW64\ksuser.dll!KsCreatePin + 35                                                                                                                          0000000073fa11a8 2 bytes [FA, 73]
.text     C:\Windows\snuvcdsm.exe[1952] C:\Windows\SysWOW64\ksuser.dll!KsCreatePin + 248                                                                                                                         0000000073fa127d 2 bytes CALL 753c14dd C:\Windows\syswow64\kernel32.dll
.text     ...                                                                                                                                                                                                    * 6
.text     C:\Windows\snuvcdsm.exe[1952] C:\Windows\SysWOW64\ksuser.dll!KsCreateAllocator + 21                                                                                                                    0000000073fa13a8 2 bytes [FA, 73]
.text     C:\Windows\snuvcdsm.exe[1952] C:\Windows\SysWOW64\ksuser.dll!KsCreateClock + 21                                                                                                                        0000000073fa1422 2 bytes [FA, 73]
.text     C:\Windows\snuvcdsm.exe[1952] C:\Windows\SysWOW64\ksuser.dll!KsCreateTopologyNode + 19                                                                                                                 0000000073fa1498 2 bytes [FA, 73]
.text     C:\Windows\snuvcdsm.exe[1952] C:\Windows\SysWOW64\d3d8thk.dll!OsThunkD3dContextCreate + 4                                                                                                              0000000073f91825 2 bytes JMP 76f45e8d C:\Windows\syswow64\GDI32.dll
.text     C:\Windows\snuvcdsm.exe[1952] C:\Windows\SysWOW64\d3d8thk.dll!OsThunkD3dContextDestroy + 4                                                                                                             0000000073f91830 2 bytes JMP 76f45ead C:\Windows\syswow64\GDI32.dll
.text     C:\Windows\snuvcdsm.exe[1952] C:\Windows\SysWOW64\d3d8thk.dll!OsThunkD3dContextDestroyAll + 4                                                                                                          0000000073f9183b 2 bytes JMP 76f45ecd C:\Windows\syswow64\GDI32.dll
.text     C:\Windows\snuvcdsm.exe[1952] C:\Windows\SysWOW64\d3d8thk.dll!OsThunkD3dDrawPrimitives2 + 4                                                                                                            0000000073f91846 2 bytes JMP 76f4576d C:\Windows\syswow64\GDI32.dll
.text     C:\Windows\snuvcdsm.exe[1952] C:\Windows\SysWOW64\d3d8thk.dll!OsThunkD3dValidateTextureStageState + 4                                                                                                  0000000073f91851 2 bytes JMP 76f45eed C:\Windows\syswow64\GDI32.dll
.text     C:\Windows\snuvcdsm.exe[1952] C:\Windows\SysWOW64\d3d8thk.dll!OsThunkDdAddAttachedSurface + 4                                                                                                          0000000073f9185c 2 bytes JMP 76f45fcd C:\Windows\syswow64\GDI32.dll
.text     C:\Windows\snuvcdsm.exe[1952] C:\Windows\SysWOW64\d3d8thk.dll!OsThunkDdAlphaBlt + 4                                                                                                                    0000000073f91867 2 bytes JMP 76f45fed C:\Windows\syswow64\GDI32.dll
.text     C:\Windows\snuvcdsm.exe[1952] C:\Windows\SysWOW64\d3d8thk.dll!OsThunkDdAttachSurface + 4                                                                                                               0000000073f91872 2 bytes JMP 76f4600d C:\Windows\syswow64\GDI32.dll
.text     C:\Windows\snuvcdsm.exe[1952] C:\Windows\SysWOW64\d3d8thk.dll!OsThunkDdBeginMoCompFrame + 4                                                                                                            0000000073f9187d 2 bytes JMP 76f4602d C:\Windows\syswow64\GDI32.dll
.text     C:\Windows\snuvcdsm.exe[1952] C:\Windows\SysWOW64\d3d8thk.dll!OsThunkDdBlt + 4                                                                                                                         0000000073f91888 2 bytes JMP 76f4578d C:\Windows\syswow64\GDI32.dll
.text     C:\Windows\snuvcdsm.exe[1952] C:\Windows\SysWOW64\d3d8thk.dll!OsThunkDdCanCreateD3DBuffer + 4                                                                                                          0000000073f91893 2 bytes JMP 76f4604d C:\Windows\syswow64\GDI32.dll
.text     C:\Windows\snuvcdsm.exe[1952] C:\Windows\SysWOW64\d3d8thk.dll!OsThunkDdCanCreateSurface + 4                                                                                                            0000000073f9189e 2 bytes JMP 76f4580d C:\Windows\syswow64\GDI32.dll
.text     C:\Windows\snuvcdsm.exe[1952] C:\Windows\SysWOW64\d3d8thk.dll!OsThunkDdColorControl + 4                                                                                                                0000000073f918a9 2 bytes JMP 76f4606d C:\Windows\syswow64\GDI32.dll
.text     C:\Windows\snuvcdsm.exe[1952] C:\Windows\SysWOW64\d3d8thk.dll!OsThunkDdCreateD3DBuffer + 4                                                                                                             0000000073f918b4 2 bytes JMP 76f4608d C:\Windows\syswow64\GDI32.dll
.text     C:\Windows\snuvcdsm.exe[1952] C:\Windows\SysWOW64\d3d8thk.dll!OsThunkDdCreateDirectDrawObject + 4                                                                                                      0000000073f918bf 2 bytes JMP 76f11a12 C:\Windows\syswow64\GDI32.dll
.text     C:\Windows\snuvcdsm.exe[1952] C:\Windows\SysWOW64\d3d8thk.dll!OsThunkDdCreateMoComp + 4                                                                                                                0000000073f918ca 2 bytes JMP 76f460cd C:\Windows\syswow64\GDI32.dll
.text     C:\Windows\snuvcdsm.exe[1952] C:\Windows\SysWOW64\d3d8thk.dll!OsThunkDdCreateSurface + 4                                                                                                               0000000073f918d5 2 bytes JMP 76f4582d C:\Windows\syswow64\GDI32.dll
.text     C:\Windows\snuvcdsm.exe[1952] C:\Windows\SysWOW64\d3d8thk.dll!OsThunkDdCreateSurfaceEx + 4                                                                                                             0000000073f918e0 2 bytes JMP 76f458ad C:\Windows\syswow64\GDI32.dll
.text     C:\Windows\snuvcdsm.exe[1952] C:\Windows\SysWOW64\d3d8thk.dll!OsThunkDdCreateSurfaceObject + 4                                                                                                         0000000073f918eb 2 bytes JMP 76f458cd C:\Windows\syswow64\GDI32.dll
.text     C:\Windows\snuvcdsm.exe[1952] C:\Windows\SysWOW64\d3d8thk.dll!OsThunkDdDeleteDirectDrawObject + 4                                                                                                      0000000073f918f6 2 bytes JMP 76f4662d C:\Windows\syswow64\GDI32.dll
.text     C:\Windows\snuvcdsm.exe[1952] C:\Windows\SysWOW64\d3d8thk.dll!OsThunkDdDeleteSurfaceObject + 4                                                                                                         0000000073f91901 2 bytes JMP 76f457ed C:\Windows\syswow64\GDI32.dll
.text     C:\Windows\snuvcdsm.exe[1952] C:\Windows\SysWOW64\d3d8thk.dll!OsThunkDdDestroyD3DBuffer + 4                                                                                                            0000000073f9190c 2 bytes JMP 76f4664d C:\Windows\syswow64\GDI32.dll
.text     C:\Windows\snuvcdsm.exe[1952] C:\Windows\SysWOW64\d3d8thk.dll!OsThunkDdDestroyMoComp + 4                                                                                                               0000000073f91917 2 bytes JMP 76f4668d C:\Windows\syswow64\GDI32.dll
.text     C:\Windows\snuvcdsm.exe[1952] C:\Windows\SysWOW64\d3d8thk.dll!OsThunkDdDestroySurface + 4                                                                                                              0000000073f91922 2 bytes JMP 76f4584d C:\Windows\syswow64\GDI32.dll
.text     C:\Windows\snuvcdsm.exe[1952] C:\Windows\SysWOW64\d3d8thk.dll!OsThunkDdEndMoCompFrame + 4                                                                                                              0000000073f9192d 2 bytes JMP 76f466ad C:\Windows\syswow64\GDI32.dll
.text     C:\Windows\snuvcdsm.exe[1952] C:\Windows\SysWOW64\d3d8thk.dll!OsThunkDdFlip + 4                                                                                                                        0000000073f91938 2 bytes JMP 76f466cd C:\Windows\syswow64\GDI32.dll
.text     C:\Windows\snuvcdsm.exe[1952] C:\Windows\SysWOW64\d3d8thk.dll!OsThunkDdFlipToGDISurface + 4                                                                                                            0000000073f91943 2 bytes JMP 76f466ed C:\Windows\syswow64\GDI32.dll
.text     C:\Windows\snuvcdsm.exe[1952] C:\Windows\SysWOW64\d3d8thk.dll!OsThunkDdGetAvailDriverMemory + 4                                                                                                        0000000073f9194e 2 bytes JMP 76f4670d C:\Windows\syswow64\GDI32.dll
.text     C:\Windows\snuvcdsm.exe[1952] C:\Windows\SysWOW64\d3d8thk.dll!OsThunkDdGetBltStatus + 4                                                                                                                0000000073f91959 2 bytes JMP 76f4672d C:\Windows\syswow64\GDI32.dll
.text     C:\Windows\snuvcdsm.exe[1952] C:\Windows\SysWOW64\d3d8thk.dll!OsThunkDdGetDC + 4                                                                                                                       0000000073f91964 2 bytes JMP 76f4674d C:\Windows\syswow64\GDI32.dll
.text     C:\Windows\snuvcdsm.exe[1952] C:\Windows\SysWOW64\d3d8thk.dll!OsThunkDdGetDriverInfo + 4                                                                                                               0000000073f9196f 2 bytes JMP 76f4676d C:\Windows\syswow64\GDI32.dll
.text     C:\Windows\snuvcdsm.exe[1952] C:\Windows\SysWOW64\d3d8thk.dll!OsThunkDdGetDriverState + 4                                                                                                              0000000073f9197a 2 bytes JMP 76f4678d C:\Windows\syswow64\GDI32.dll
.text     C:\Windows\snuvcdsm.exe[1952] C:\Windows\SysWOW64\d3d8thk.dll!OsThunkDdGetDxHandle + 4                                                                                                                 0000000073f91985 2 bytes JMP 76f467ad C:\Windows\syswow64\GDI32.dll
.text     C:\Windows\snuvcdsm.exe[1952] C:\Windows\SysWOW64\d3d8thk.dll!OsThunkDdGetFlipStatus + 4                                                                                                               0000000073f91990 2 bytes JMP 76f467cd C:\Windows\syswow64\GDI32.dll
.text     C:\Windows\snuvcdsm.exe[1952] C:\Windows\SysWOW64\d3d8thk.dll!OsThunkDdGetInternalMoCompInfo + 4                                                                                                       0000000073f9199b 2 bytes JMP 76f467ed C:\Windows\syswow64\GDI32.dll
.text     C:\Windows\snuvcdsm.exe[1952] C:\Windows\SysWOW64\d3d8thk.dll!OsThunkDdGetMoCompBuffInfo + 4                                                                                                           0000000073f919a6 2 bytes JMP 76f4680d C:\Windows\syswow64\GDI32.dll
.text     C:\Windows\snuvcdsm.exe[1952] C:\Windows\SysWOW64\d3d8thk.dll!OsThunkDdGetMoCompFormats + 4                                                                                                            0000000073f919b1 2 bytes JMP 76f4682d C:\Windows\syswow64\GDI32.dll
.text     C:\Windows\snuvcdsm.exe[1952] C:\Windows\SysWOW64\d3d8thk.dll!OsThunkDdGetMoCompGuids + 4                                                                                                              0000000073f919bc 2 bytes JMP 76f4684d C:\Windows\syswow64\GDI32.dll
.text     C:\Windows\snuvcdsm.exe[1952] C:\Windows\SysWOW64\d3d8thk.dll!OsThunkDdGetScanLine + 4                                                                                                                 0000000073f919c7 2 bytes JMP 76f4686d C:\Windows\syswow64\GDI32.dll
.text     C:\Windows\snuvcdsm.exe[1952] C:\Windows\SysWOW64\d3d8thk.dll!OsThunkDdLock + 4                                                                                                                        0000000073f919d2 2 bytes JMP 76f4688d C:\Windows\syswow64\GDI32.dll
.text     C:\Windows\snuvcdsm.exe[1952] C:\Windows\SysWOW64\d3d8thk.dll!OsThunkDdLockD3D + 4                                                                                                                     0000000073f919dd 2 bytes JMP 76f458ed C:\Windows\syswow64\GDI32.dll
.text     C:\Windows\snuvcdsm.exe[1952] C:\Windows\SysWOW64\d3d8thk.dll!OsThunkDdQueryDirectDrawObject + 4                                                                                                       0000000073f919e8 2 bytes JMP 76f468cd C:\Windows\syswow64\GDI32.dll
.text     C:\Windows\snuvcdsm.exe[1952] C:\Windows\SysWOW64\d3d8thk.dll!OsThunkDdQueryMoCompStatus + 4                                                                                                           0000000073f919f3 2 bytes JMP 76f468ed C:\Windows\syswow64\GDI32.dll
.text     C:\Windows\snuvcdsm.exe[1952] C:\Windows\SysWOW64\d3d8thk.dll!OsThunkDdReenableDirectDrawObject + 4                                                                                                    0000000073f919fe 2 bytes JMP 76f4692b C:\Windows\syswow64\GDI32.dll
.text     C:\Windows\snuvcdsm.exe[1952] C:\Windows\SysWOW64\d3d8thk.dll!OsThunkDdReleaseDC + 4                                                                                                                   0000000073f91a09 2 bytes JMP 76f4694b C:\Windows\syswow64\GDI32.dll
.text     C:\Windows\snuvcdsm.exe[1952] C:\Windows\SysWOW64\d3d8thk.dll!OsThunkDdRenderMoComp + 4                                                                                                                0000000073f91a14 2 bytes JMP 76f4696b C:\Windows\syswow64\GDI32.dll
.text     C:\Windows\snuvcdsm.exe[1952] C:\Windows\SysWOW64\d3d8thk.dll!OsThunkDdResetVisrgn + 4                                                                                                                 0000000073f91a1f 2 bytes JMP 76f4586d C:\Windows\syswow64\GDI32.dll
.text     C:\Windows\snuvcdsm.exe[1952] C:\Windows\SysWOW64\d3d8thk.dll!OsThunkDdSetColorKey + 4                                                                                                                 0000000073f91a2a 2 bytes JMP 76f4698b C:\Windows\syswow64\GDI32.dll
.text     C:\Windows\snuvcdsm.exe[1952] C:\Windows\SysWOW64\d3d8thk.dll!OsThunkDdSetExclusiveMode + 4                                                                                                            0000000073f91a35 2 bytes JMP 76f469ab C:\Windows\syswow64\GDI32.dll
.text     C:\Windows\snuvcdsm.exe[1952] C:\Windows\SysWOW64\d3d8thk.dll!OsThunkDdSetGammaRamp + 4                                                                                                                0000000073f91a40 2 bytes JMP 76f469cb C:\Windows\syswow64\GDI32.dll
.text     C:\Windows\snuvcdsm.exe[1952] C:\Windows\SysWOW64\d3d8thk.dll!OsThunkDdSetOverlayPosition + 4                                                                                                          0000000073f91a4b 2 bytes JMP 76f469eb C:\Windows\syswow64\GDI32.dll
.text     C:\Windows\snuvcdsm.exe[1952] C:\Windows\SysWOW64\d3d8thk.dll!OsThunkDdUnattachSurface + 4                                                                                                             0000000073f91a56 2 bytes JMP 76f46a0b C:\Windows\syswow64\GDI32.dll
.text     C:\Windows\snuvcdsm.exe[1952] C:\Windows\SysWOW64\d3d8thk.dll!OsThunkDdUnlock + 4                                                                                                                      0000000073f91a61 2 bytes JMP 76f46a2b C:\Windows\syswow64\GDI32.dll
.text     C:\Windows\snuvcdsm.exe[1952] C:\Windows\SysWOW64\d3d8thk.dll!OsThunkDdUnlockD3D + 4                                                                                                                   0000000073f91a6c 2 bytes JMP 76f4590d C:\Windows\syswow64\GDI32.dll
.text     C:\Windows\snuvcdsm.exe[1952] C:\Windows\SysWOW64\d3d8thk.dll!OsThunkDdUpdateOverlay + 4                                                                                                               0000000073f91a77 2 bytes JMP 76f46a4b C:\Windows\syswow64\GDI32.dll
.text     C:\Windows\snuvcdsm.exe[1952] C:\Windows\SysWOW64\d3d8thk.dll!OsThunkDdWaitForVerticalBlank + 4                                                                                                        0000000073f91a82 2 bytes JMP 76f46a6b C:\Windows\syswow64\GDI32.dll
.text     C:\Windows\snuvcdsm.exe[1952] C:\Windows\SysWOW64\d3d8thk.dll!OsThunkDdWaitForVerticalBlank + 52                                                                                                       0000000073f91ab2 2 bytes JMP 76a2dc75 C:\Windows\syswow64\msvcrt.dll
.text     C:\PROGRA~2\Raptr\raptr_im.exe[3212] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExW + 17                                                                                                           0000000075531401 2 bytes JMP 753deb26 C:\Windows\syswow64\kernel32.dll
.text     C:\PROGRA~2\Raptr\raptr_im.exe[3212] C:\Windows\syswow64\PSAPI.DLL!EnumProcessModules + 17                                                                                                             0000000075531419 2 bytes JMP 753eb513 C:\Windows\syswow64\kernel32.dll
.text     C:\PROGRA~2\Raptr\raptr_im.exe[3212] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 17                                                                                                           0000000075531431 2 bytes JMP 75468609 C:\Windows\syswow64\kernel32.dll
.text     C:\PROGRA~2\Raptr\raptr_im.exe[3212] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 42                                                                                                           000000007553144a 2 bytes CALL 753c1dfa C:\Windows\syswow64\kernel32.dll
.text     ...                                                                                                                                                                                                    * 9
.text     C:\PROGRA~2\Raptr\raptr_im.exe[3212] C:\Windows\syswow64\PSAPI.DLL!EnumDeviceDrivers + 17                                                                                                              00000000755314dd 2 bytes JMP 75467efe C:\Windows\syswow64\kernel32.dll
.text     C:\PROGRA~2\Raptr\raptr_im.exe[3212] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameA + 17                                                                                                       00000000755314f5 2 bytes JMP 754680d8 C:\Windows\syswow64\kernel32.dll
.text     C:\PROGRA~2\Raptr\raptr_im.exe[3212] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSetEx + 17                                                                                                              000000007553150d 2 bytes JMP 75467df4 C:\Windows\syswow64\kernel32.dll
.text     C:\PROGRA~2\Raptr\raptr_im.exe[3212] C:\Windows\syswow64\PSAPI.DLL!GetDeviceDriverBaseNameW + 17                                                                                                       0000000075531525 2 bytes JMP 754681c2 C:\Windows\syswow64\kernel32.dll
.text     C:\PROGRA~2\Raptr\raptr_im.exe[3212] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameW + 17                                                                                                             000000007553153d 2 bytes JMP 753df088 C:\Windows\syswow64\kernel32.dll
.text     C:\PROGRA~2\Raptr\raptr_im.exe[3212] C:\Windows\syswow64\PSAPI.DLL!EnumProcesses + 17                                                                                                                  0000000075531555 2 bytes JMP 753eb885 C:\Windows\syswow64\kernel32.dll
.text     C:\PROGRA~2\Raptr\raptr_im.exe[3212] C:\Windows\syswow64\PSAPI.DLL!GetProcessMemoryInfo + 17                                                                                                           000000007553156d 2 bytes JMP 754686c1 C:\Windows\syswow64\kernel32.dll
.text     C:\PROGRA~2\Raptr\raptr_im.exe[3212] C:\Windows\syswow64\PSAPI.DLL!GetPerformanceInfo + 17                                                                                                             0000000075531585 2 bytes JMP 75468222 C:\Windows\syswow64\kernel32.dll
.text     C:\PROGRA~2\Raptr\raptr_im.exe[3212] C:\Windows\syswow64\PSAPI.DLL!QueryWorkingSet + 17                                                                                                                000000007553159d 2 bytes JMP 75467db8 C:\Windows\syswow64\kernel32.dll
.text     C:\PROGRA~2\Raptr\raptr_im.exe[3212] C:\Windows\syswow64\PSAPI.DLL!GetModuleBaseNameA + 17                                                                                                             00000000755315b5 2 bytes JMP 753df121 C:\Windows\syswow64\kernel32.dll
.text     C:\PROGRA~2\Raptr\raptr_im.exe[3212] C:\Windows\syswow64\PSAPI.DLL!GetModuleFileNameExA + 17                                                                                                           00000000755315cd 2 bytes JMP 753eb29f C:\Windows\syswow64\kernel32.dll
.text     C:\PROGRA~2\Raptr\raptr_im.exe[3212] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 20                                                                                                       00000000755316b2 2 bytes JMP 75468584 C:\Windows\syswow64\kernel32.dll
.text     C:\PROGRA~2\Raptr\raptr_im.exe[3212] C:\Windows\syswow64\PSAPI.DLL!GetProcessImageFileNameW + 31                                                                                                       00000000755316bd 2 bytes JMP 75467d4d C:\Windows\syswow64\kernel32.dll
---- Processes - GMER 2.1 ----

Process   C:\ProgramData\IePluginService\PluginService.exe (*** suspicious ***) @ C:\ProgramData\IePluginService\PluginService.exe [1668] (IePlugin Service/Cherished Technololgy LIMITED)(2014-03-20 20:13:08)  0000000001060000
Process   C:\ProgramData\WPM\wprotectmanager.exe (*** suspicious ***) @ C:\ProgramData\WPM\wprotectmanager.exe [1728] (WPM Service/Cherished Technololgy LIMITED)(2                                              0000000001110000

---- EOF - GMER 2.1 ----
__________________
Alt 18.04.2014, 14:23   #3
schrauber
/// the machine
/// TB-Ausbilder
 
Firefox öffnet selbststängig Tabs und ändert ohne zu klicken die offene internet seite. - Standard

Firefox öffnet selbststängig Tabs und ändert ohne zu klicken die offene internet seite.


hi,

Scan mit Combofix
WARNUNG an die MITLESER:
Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!

Downloade dir bitte Combofix vom folgenden Downloadspiegel: Link
  • WICHTIG: Speichere Combofix auf deinem Desktop.
  • Deaktiviere bitte alle deine Antivirensoftware sowie Malware/Spyware Scanner. Diese können Combofix bei der Arbeit stören. Combofix meckert auch manchmal trotzdem noch, das kannst du dann ignorieren, mir aber bitte mitteilen.
  • Starte die Combofix.exe und folge den Anweisungen auf dem Bildschirm.
  • Während Combofix läuft bitte nicht am Computer arbeiten, die Maus bewegen oder ins Combofixfenster klicken!
  • Wenn Combofix fertig ist, wird es ein Logfile erstellen.
  • Bitte poste die C:\Combofix.txt in deiner nächsten Antwort (möglichst in CODE-Tags).
Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten
Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.
starte den Rechner einfach neu. Dies sollte das Problem beheben.

__________________
__________________
Antwort

Themen zu Firefox öffnet selbststängig Tabs und ändert ohne zu klicken die offene internet seite.
adobe, antivir, antivirus, avira, avira savings advisor, betriebs, browser, checkliste, defender, device driver, excel, fehler, firefox, flash player, focus, iexplore.exe, installation, internet, kaspersky, mozilla, realtek, registry, scan, security, services.exe, software, svchost.exe, system, vcredist, windows, windows reparieren, windows xp


« istart websearch entfernen | Run.dll - Module beschädigt? -VPNs funktionieren nicht mehr »


Ähnliche Themen: Firefox öffnet selbststängig Tabs und ändert ohne zu klicken die offene internet seite.


  1. Firefox: ungewünschte Tabs öffnen sich bei klicken auf jegliche Links
    Plagegeister aller Art und deren Bekämpfung - 06.10.2015 (1)
  2. Firefox öffnet bei klicken Werbung & und Programm "lomrdjhy" im Hintergrund
    Plagegeister aller Art und deren Bekämpfung - 12.04.2015 (3)
  3. Beim Klicken auf einen Menüpunkt öffnet sich immer zusätzlich die gleiche fremde Seite
    Plagegeister aller Art und deren Bekämpfung - 08.03.2015 (5)
  4. Win7 Pro: Firefox öffnet Popups / Tabs und ändert Text zu Links
    Log-Analyse und Auswertung - 31.10.2014 (11)
  5. Firefox öffnet eigenständig Werbeseiten in Tabs, auch wenn Firefox grad nicht verwendet wird
    Plagegeister aller Art und deren Bekämpfung - 20.07.2014 (20)
  6. Firefox öffnet Tabs
    Plagegeister aller Art und deren Bekämpfung - 23.05.2014 (21)
  7. Mozilla Firefox Pupups und neue Tabs: ohne Besuch Webseiten
    Log-Analyse und Auswertung - 14.02.2014 (4)
  8. Opera öffnet static.salesresource Seite ohne Einwilligung
    Log-Analyse und Auswertung - 05.11.2013 (11)
  9. Firefox öffnet selbständig neue Tabs der folgenden Seite network.adsmarket.com
    Plagegeister aller Art und deren Bekämpfung - 11.05.2013 (17)
  10. Firefox / Internet Explorer öffnet Werbung in neuen Tabs
    Log-Analyse und Auswertung - 11.02.2012 (7)
  11. Firefox bzw. Internet Explorer öffnet Tabs/Fenster mit Werbung
    Plagegeister aller Art und deren Bekämpfung - 04.08.2011 (13)
  12. Firefox öffnet ohne ersichtlichen Grund eine leere Seite
    Plagegeister aller Art und deren Bekämpfung - 09.07.2011 (12)
  13. Firefox öffnet im Leerlauf eine Merkwürde Seite ohne Inhalt.
    Plagegeister aller Art und deren Bekämpfung - 13.06.2011 (9)
  14. Internet Explorer schließt ohne das ich das will tabs
    Log-Analyse und Auswertung - 02.05.2011 (13)
  15. Firefox öffnet ständig Werbung und öffnet nie die gewünschte Seite
    Log-Analyse und Auswertung - 05.06.2009 (2)
  16. FIREFOX öffnet immer Firefox Hilfe Tabs
    Mülltonne - 22.12.2008 (0)
  17. Ständige Werbung-ohne klicken!(Internet Explorer)
    Log-Analyse und Auswertung - 01.07.2008 (1)
Anleitungen und Tipps

- Für alle Hilfesuchenden! Was beachten?

- Anleitung: MyStartSearch.com entfernen

- Anleitung: WebSearches löschen

- Hilfe: iStartSurf entfernen – so gehts!

- Anleitung: Omiga Plus richtig entfernen

- Browser Viren entfernen


Zum Thema Firefox öffnet selbststängig Tabs und ändert ohne zu klicken die offene internet seite. - Moin zusammen, wie schon im Titel zu lesen ist öffnet Firefox selbstständig Tabs und ändert ohne zu klicken die offene Internetseite. Auf den Seiten steht dann ich solle Windows reparieren, - Firefox öffnet selbststängig Tabs und ändert ohne zu klicken die offene internet seite....
Archiv
Du betrachtest: Firefox öffnet selbststängig Tabs und ändert ohne zu klicken die offene internet seite. auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55