![]() |
|
Plagegeister aller Art und deren Bekämpfung: "Posadi17" ständig offen als Task im TaskmanagerWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
![]() | #11 |
![]() ![]() | ![]() "Posadi17" ständig offen als Task im Taskmanager ESET Log: Code:
ATTFilter ESETSmartInstaller@High as downloader log: all ok ESETSmartInstaller@High as downloader log: all ok # version=8 # OnlineScannerApp.exe=1.0.0.1 # OnlineScanner.ocx=1.0.0.6920 # api_version=3.0.2 # EOSSerial=e128b5a5287d6648affe0e51c187b6c5 # engine=18156 # end=finished # remove_checked=false # archives_checked=true # unwanted_checked=false # unsafe_checked=false # antistealth_checked=true # utc_time=2014-05-06 08:01:23 # local_time=2014-05-06 10:01:23 (+0100, Mitteleuropäische Sommerzeit) # country="Germany" # lang=1031 # osver=6.1.7601 NT Service Pack 1 # compatibility_mode=5893 16776573 100 94 40135 151036333 0 0 # scanned=368029 # found=1 # cleaned=0 # scan_time=11001 sh=E79CE0DA43C79F2A4E48A4F4A02905DE783FBD16 ft=1 fh=a9eb553813c219ce vn="NSIS/StartPage.CC Trojaner" ac=I fn="C:\Users\Robert\Downloads\vlc-2.1.4-win64.exe" Code:
ATTFilter Results of screen317's Security Check version 0.99.82 Windows 7 Service Pack 1 x64 (UAC is enabled) Internet Explorer 11 ``````````````Antivirus/Firewall Check:`````````````` G Data AntiVirus Antivirus up to date! `````````Anti-malware/Other Utilities Check:````````` Call of Duty: Ghosts - Multiplayer Java 7 Update 55 Adobe Flash Player 13.0.0.206 Mozilla Firefox (28.0) ````````Process Check: objlist.exe by Laurent```````` `````````````````System Health check````````````````` Total Fragmentation on Drive C: ````````````````````End of Log`````````````````````` FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 06-05-2014 Ran by Robert (administrator) on ROBERT-PC on 06-05-2014 22:26:36 Running from C:\Users\Robert\Desktop\Viren Bekämpfung Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard Internet Explorer Version 11 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (G Data Software AG) C:\Program Files (x86)\Common Files\G Data\GDScan\GDScan.exe (G Data Software AG) C:\Program Files (x86)\G Data\AntiVirus\AVK\AVKWCtlx64.exe (G Data Software AG) C:\Program Files (x86)\Common Files\G Data\AVKProxy\AVKProxy.exe (G Data Software AG) C:\Program Files (x86)\G Data\AntiVirus\AVK\AVKService.exe () C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcAppFlt.exe ( ) C:\Windows\System32\lxbkcoms.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe () C:\Windows\SysWOW64\PnkBstrA.exe () C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcIp.exe (G Data Software AG) C:\Program Files (x86)\Common Files\G Data\AVKProxy\AVKBap64.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Raid\nvraidservice.exe (Motorola Inc.) C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe (Lexmark International, Inc.) C:\Program Files (x86)\Lexmark X1100 Series\LXBKbmgr.exe (Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe (Lexmark International, Inc.) C:\Program Files (x86)\Lexmark X1100 Series\LXBKbmon.exe () C:\Users\Robert\AppData\Roaming\InetStat\inetstat.exe (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_13_0_0_206.exe (Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_13_0_0_206.exe () C:\Users\Robert\Desktop\Viren Bekämpfung\SecurityCheck.exe (Microsoft Corporation) C:\Windows\SysWOW64\cmd.exe (Microsoft Corporation) C:\Windows\SysWOW64\notepad.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2234144 2014-02-05] (NVIDIA Corporation) HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\nvspcap64.dll [1179576 2014-02-05] (NVIDIA Corporation) HKLM\...\Run: [NVRaidService] => C:\Program Files\NVIDIA Corporation\Raid\nvraidservice.exe [291944 2010-04-09] (NVIDIA Corporation) HKLM\...\Run: [SMSERIAL] => C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe [1702400 2009-10-26] (Motorola Inc.) HKLM\...\Run: [lxbkbmgr.exe] => C:\Program Files (x86)\Lexmark X1100 Series\lxbkbmgr.exe [74408 2008-02-28] (Lexmark International, Inc.) HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation) HKU\S-1-5-21-424595480-1972404840-2054867239-1000\...\Run: [InetStat] => C:\Users\Robert\AppData\Roaming\InetStat\inetstat.exe [1260648 2010-01-01] () HKU\S-1-5-21-424595480-1972404840-2054867239-1000\...\Policies\system: [LogonHoursAction] 2 HKU\S-1-5-21-424595480-1972404840-2054867239-1000\...\Policies\system: [DontDisplayLogonHoursWarnings] 1 GroupPolicyUsers\S-1-5-21-424595480-1972404840-2054867239-1005\User: Group Policy restriction detected <======= ATTENTION ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xB085F3C9B143CF01 HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe BHO: ExplorerWnd Helper - {10921475-03CE-4E04-90CE-E2E7EF20C814} - C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallExplorer64.dll (IObit) BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) Handler-x32: http\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation) Handler-x32: http\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation) Handler-x32: https\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation) Handler-x32: https\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation) Handler-x32: msdaipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation) Handler-x32: msdaipp\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation) Filter: text/xml - {807553E5-5146-11D5-A672-00B0D022E945} - No File Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 FireFox: ======== FF ProfilePath: C:\Users\Robert\AppData\Roaming\Mozilla\Firefox\Profiles\l1u5jtu5.default FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_13_0_0_206.dll () FF Plugin: @videolan.org/vlc,version=2.1.4 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_206.dll () FF Plugin-x32: @java.com/DTPlugin,version=10.55.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=10.55.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml ==================== Services (Whitelisted) ================= R2 AVKProxy; C:\Program Files (x86)\Common Files\G Data\AVKProxy\AVKProxy.exe [2244728 2014-02-12] (G Data Software AG) R2 AVKService; C:\Program Files (x86)\G Data\AntiVirus\AVK\AVKService.exe [914552 2013-12-19] (G Data Software AG) R2 AVKWCtl; C:\Program Files (x86)\G Data\AntiVirus\AVK\AVKWCtlx64.exe [2723400 2014-03-25] (G Data Software AG) R2 ForceWare Intelligent Application Manager (IAM); C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcAppFlt.exe [626208 2009-08-10] () R3 GDScan; C:\Program Files (x86)\Common Files\G Data\GDScan\GDScan.exe [700024 2014-02-03] (G Data Software AG) S2 LiveUpdateSvc; C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [2153792 2014-05-04] (IObit) R2 lxbk_device; C:\Windows\system32\lxbkcoms.exe [565928 2008-02-19] ( ) R2 lxbk_device; C:\Windows\SysWOW64\lxbkcoms.exe [537256 2008-02-19] ( ) R2 nSvcIp; C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcIp.exe [206880 2009-08-10] () R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1593632 2014-02-05] (NVIDIA Corporation) R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [16941856 2014-02-05] (NVIDIA Corporation) R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76888 2014-05-04] () ==================== Drivers (Whitelisted) ==================== U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation) R0 GDBehave; C:\Windows\System32\drivers\GDBehave.sys [57344 2014-04-08] (G Data Software AG) R3 GDKBFlt; C:\Windows\system32\drivers\GDKBFlt64.sys [22016 2014-04-08] (G Data Software AG) R1 GDMnIcpt; C:\Windows\system32\drivers\MiniIcpt.sys [135168 2014-04-08] (G Data Software AG) R3 GDPkIcpt; C:\Windows\system32\drivers\PktIcpt.sys [68608 2014-04-08] (G Data Software AG) R1 gdwfpcd; C:\Windows\System32\drivers\gdwfpcd64.sys [64000 2014-04-08] (G Data Software AG) R1 GRD; C:\Windows\system32\drivers\GRD.sys [106272 2014-04-09] (G Data Software) R1 HookCentre; C:\Windows\system32\drivers\HookCentre.sys [65024 2014-04-08] (G Data Software AG) R3 MODEMCSA; C:\Windows\System32\drivers\MODEMCSA.sys [24064 2009-07-14] (Microsoft Corporation) R3 MTsensor; C:\Windows\System32\DRIVERS\ASACPI.sys [8192 2005-03-29] () R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [39200 2013-12-27] (NVIDIA Corporation) R3 smserial; C:\Windows\System32\DRIVERS\smserial.sys [1202688 2009-10-26] (Motorola Inc.) ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-05-06 12:53 - 2014-05-06 12:53 - 00000000 ___SD () C:\Windows\system32\CompatTel 2014-05-06 10:52 - 2014-04-14 04:24 - 00465408 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll 2014-05-06 10:52 - 2014-04-14 04:19 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll 2014-05-05 19:57 - 2014-05-05 19:57 - 00000000 ____D () C:\Program Files (x86)\ESET 2014-05-05 08:15 - 2014-05-05 08:15 - 00000000 ____D () C:\Users\Gast 2\AppData\Roaming\ProductData 2014-05-04 16:31 - 2014-05-04 16:31 - 00004253 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_55-b14.log 2014-05-04 16:31 - 2014-05-04 16:31 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java 2014-05-04 16:31 - 2014-04-14 20:13 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll 2014-05-04 16:31 - 2014-04-14 20:05 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe 2014-05-04 16:31 - 2014-04-14 20:05 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe 2014-05-04 16:31 - 2014-04-14 20:04 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe 2014-05-04 16:27 - 2014-05-04 16:27 - 00000000 ____D () C:\Windows\Sun 2014-05-04 16:23 - 2014-05-04 16:23 - 00002888 _____ () C:\Windows\System32\Tasks\Uninstaller_SkipUac_Administrator 2014-05-04 16:23 - 2014-05-04 16:23 - 00001252 _____ () C:\Users\Robert\AppData\Roaming\Microsoft\Windows\Start Menu\Uninstall Programs.lnk 2014-05-04 16:23 - 2014-05-04 16:23 - 00000000 ____D () C:\Users\Robert\AppData\Roaming\ProductData 2014-05-04 16:23 - 2014-05-04 16:23 - 00000000 ____D () C:\Users\Robert\AppData\Roaming\IObit 2014-05-04 16:23 - 2014-05-04 16:23 - 00000000 ____D () C:\ProgramData\ProductData 2014-05-04 16:23 - 2014-05-04 16:23 - 00000000 ____D () C:\ProgramData\IObit 2014-05-04 16:23 - 2014-05-04 16:23 - 00000000 ____D () C:\Program Files (x86)\IObit 2014-05-04 16:17 - 2014-05-04 16:22 - 12569408 _____ (IObit) C:\Users\Robert\Downloads\iobituninstaller_3.2.0.128.exe 2014-05-04 14:56 - 2014-05-04 14:56 - 00291488 _____ () C:\Windows\SysWOW64\PnkBstrB.xtr 2014-05-04 14:56 - 2014-05-04 14:56 - 00000000 ____D () C:\Users\Robert\AppData\Local\PunkBuster 2014-05-04 14:46 - 2014-05-04 14:56 - 00291488 _____ () C:\Windows\SysWOW64\PnkBstrB.exe 2014-05-04 14:46 - 2014-05-04 14:46 - 00281872 _____ () C:\Windows\SysWOW64\PnkBstrB.ex0 2014-05-04 14:46 - 2014-05-04 14:46 - 00076888 _____ () C:\Windows\SysWOW64\PnkBstrA.exe 2014-05-04 14:46 - 2014-05-04 14:46 - 00000000 ____D () C:\Users\Robert\AppData\Local\Ubisoft 2014-05-04 14:45 - 2010-06-02 04:55 - 00527192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_7.dll 2014-05-04 14:45 - 2010-06-02 04:55 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_5.dll 2014-05-04 14:45 - 2010-05-26 11:41 - 02106216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_43.dll 2014-05-04 13:33 - 2014-05-06 22:26 - 00000000 ____D () C:\Users\Robert\Desktop\Viren Bekämpfung 2014-05-04 13:16 - 2014-05-04 13:16 - 00000000 ____D () C:\Windows\ERUNT 2014-05-04 13:06 - 2014-05-04 13:08 - 00000000 ____D () C:\AdwCleaner 2014-05-04 12:40 - 2014-05-04 12:40 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 2014-05-04 12:40 - 2014-05-04 12:40 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 2014-05-04 12:40 - 2014-04-03 09:51 - 00088280 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys 2014-05-04 12:40 - 2014-04-03 09:51 - 00063192 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys 2014-05-04 12:40 - 2014-04-03 09:50 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys 2014-05-04 09:33 - 2011-06-26 08:45 - 00256000 _____ () C:\Windows\PEV.exe 2014-05-04 09:33 - 2010-11-07 19:20 - 00208896 _____ () C:\Windows\MBR.exe 2014-05-04 09:33 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe 2014-05-04 09:33 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe 2014-05-04 09:33 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe 2014-05-04 09:33 - 2000-08-31 02:00 - 00098816 _____ () C:\Windows\sed.exe 2014-05-04 09:33 - 2000-08-31 02:00 - 00080412 _____ () C:\Windows\grep.exe 2014-05-04 09:33 - 2000-08-31 02:00 - 00068096 _____ () C:\Windows\zip.exe 2014-05-04 09:30 - 2014-05-04 09:42 - 00000000 ____D () C:\Qoobox 2014-05-04 09:29 - 2014-05-04 09:40 - 00000000 ____D () C:\Windows\erdnt 2014-05-03 11:01 - 2014-04-29 16:01 - 23547904 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-05-03 11:01 - 2014-04-29 15:40 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-05-03 11:01 - 2014-04-29 14:48 - 17384448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2014-05-03 11:01 - 2014-04-29 14:34 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2014-05-02 13:26 - 2014-05-02 13:26 - 01110476 _____ () C:\Users\Robert\Downloads\7z920.exe 2014-05-02 13:26 - 2014-05-02 13:26 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip 2014-05-02 13:26 - 2014-05-02 13:26 - 00000000 ____D () C:\Program Files (x86)\7-Zip 2014-05-02 12:42 - 2014-05-02 12:43 - 00000000 ____D () C:\ProgramData\Max Secure 2014-05-02 11:07 - 2014-05-02 11:07 - 00000202 _____ () C:\Users\Robert\Desktop\Call of Duty Ghosts - Multiplayer.url 2014-04-29 17:52 - 2014-05-06 22:26 - 00000000 ____D () C:\FRST 2014-04-28 18:40 - 2014-05-04 12:47 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2014-04-28 18:39 - 2014-04-28 18:39 - 00000000 ____D () C:\ProgramData\Malwarebytes 2014-04-28 18:38 - 2014-04-28 18:39 - 17305616 _____ (Malwarebytes Corporation ) C:\Users\Robert\Downloads\mbam-setup-2.0.1.1004.exe 2014-04-24 22:43 - 2014-04-24 22:43 - 00000000 ____D () C:\Users\Robert\AppData\Roaming\dvdcss 2014-04-22 14:59 - 2014-04-22 14:59 - 00000000 ____D () C:\Users\Robert\AppData\Local\Adobe 2014-04-21 18:24 - 2014-04-24 22:48 - 00000000 ____D () C:\Users\Robert\AppData\Roaming\vlc 2014-04-21 18:23 - 2014-04-21 18:23 - 00000871 _____ () C:\Users\Public\Desktop\VLC media player.lnk 2014-04-21 18:23 - 2014-04-21 18:23 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN 2014-04-21 18:23 - 2014-04-21 18:23 - 00000000 ____D () C:\Program Files\VideoLAN 2014-04-21 18:18 - 2014-04-21 18:19 - 25910056 _____ () C:\Users\Robert\Downloads\vlc-2.1.4-win64.exe 2014-04-18 14:52 - 2014-04-18 14:52 - 00001095 _____ () C:\Users\Public\Desktop\All-In-One-Center des Lexmark X1100 Series.lnk 2014-04-18 14:43 - 2014-05-04 14:02 - 00000245 _____ () C:\Windows\Lexstat.ini 2014-04-18 12:43 - 2014-04-18 12:43 - 00000000 ____D () C:\Program Files\Lexmark X1100 Series 2014-04-18 12:42 - 2014-04-18 14:44 - 00014750 _____ () C:\Windows\system32\LexFiles.ulf 2014-04-18 12:42 - 2014-04-18 14:44 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lexmark X1100 Series 2014-04-18 12:42 - 2014-04-18 14:44 - 00000000 ____D () C:\Program Files (x86)\Lexmark X1100 Series 2014-04-18 12:42 - 2008-02-19 10:12 - 00565928 _____ ( ) C:\Windows\system32\lxbkcoms.exe 2014-04-18 12:42 - 2008-02-19 10:12 - 00537256 _____ ( ) C:\Windows\SysWOW64\lxbkcoms.exe 2014-04-18 12:42 - 2008-02-19 10:12 - 00385704 _____ ( ) C:\Windows\SysWOW64\lxbkih.exe 2014-04-18 12:42 - 2008-02-19 10:12 - 00381608 _____ ( ) C:\Windows\SysWOW64\lxbkcfg.exe 2014-04-18 12:42 - 2008-02-19 10:12 - 00235688 _____ ( ) C:\Windows\system32\lxbkcfg.exe 2014-04-18 12:42 - 2008-02-19 10:12 - 00233128 _____ ( ) C:\Windows\system32\lxbkih.exe 2014-04-18 12:42 - 2008-02-19 10:12 - 00180904 _____ ( ) C:\Windows\SysWOW64\lxbkppls.exe 2014-04-18 12:42 - 2008-02-19 10:04 - 00001525 _____ () C:\Windows\SysWOW64\lxbk.loc 2014-04-18 12:42 - 2008-02-19 10:04 - 00001525 _____ () C:\Windows\system32\lxbk.loc 2014-04-18 12:42 - 2006-12-14 11:47 - 00077824 _____ (Lexmark International, Inc.) C:\Windows\system32\lxbkinsr.dll 2014-04-18 12:42 - 2006-12-14 11:45 - 00444928 _____ (Lexmark International Inc.) C:\Windows\system32\lxbkjswr.dll 2014-04-18 12:42 - 2006-12-14 11:45 - 00078848 _____ (Lexmark International Inc.) C:\Windows\system32\lxbkcur.dll 2014-04-18 12:42 - 2006-12-14 09:18 - 00094208 _____ (Lexmark International, Inc.) C:\Windows\SysWOW64\lxbkinsr.dll 2014-04-18 12:42 - 2006-12-14 09:17 - 00462848 _____ (Lexmark International Inc.) C:\Windows\SysWOW64\lxbkjswr.dll 2014-04-18 12:42 - 2006-12-14 09:17 - 00094208 _____ (Lexmark International Inc.) C:\Windows\SysWOW64\lxbkcur.dll 2014-04-18 12:42 - 2006-11-30 16:47 - 00177664 _____ (Lexmark International, Inc.) C:\Windows\system32\lxbkins.dll 2014-04-18 12:42 - 2006-11-30 16:47 - 00135168 _____ (Lexmark International Inc.) C:\Windows\system32\lxbkinsb.dll 2014-04-18 12:42 - 2006-11-30 16:45 - 00567808 _____ () C:\Windows\system32\lxbkutil.dll 2014-04-18 12:42 - 2006-11-30 16:45 - 00079360 _____ (Lexmark International Inc.) C:\Windows\system32\lxbkcu.dll 2014-04-18 12:42 - 2006-11-30 14:35 - 00155648 _____ (Lexmark International Inc.) C:\Windows\SysWOW64\lxbkinsb.dll 2014-04-18 12:42 - 2006-11-30 14:35 - 00131072 _____ (Lexmark International, Inc.) C:\Windows\SysWOW64\lxbkins.dll 2014-04-18 12:42 - 2006-11-30 14:34 - 00413696 _____ () C:\Windows\SysWOW64\lxbkutil.dll 2014-04-18 12:42 - 2006-11-30 14:34 - 00073728 _____ (Lexmark International Inc.) C:\Windows\SysWOW64\lxbkcu.dll 2014-04-18 12:42 - 2006-11-09 21:29 - 00062464 _____ (Lexmark International) C:\Windows\system32\LXBKcfg.dll 2014-04-18 12:42 - 2006-11-09 21:28 - 00073728 _____ (Lexmark International) C:\Windows\SysWOW64\LXBKcfg.dll 2014-04-18 12:42 - 2006-11-06 18:56 - 00409600 _____ ( ) C:\Windows\system32\lxbkpmui.dll 2014-04-18 12:42 - 2006-11-06 18:53 - 01417728 _____ ( ) C:\Windows\system32\lxbkserv.dll 2014-04-18 12:42 - 2006-11-06 18:38 - 00249856 _____ ( ) C:\Windows\system32\lxbkcomm.dll 2014-04-18 12:42 - 2006-11-06 18:34 - 00487424 _____ ( ) C:\Windows\system32\lxbklmpm.dll 2014-04-18 12:42 - 2006-11-06 18:32 - 00194048 _____ () C:\Windows\system32\LXBKinst.dll 2014-04-18 12:42 - 2006-11-06 18:31 - 00226816 _____ ( ) C:\Windows\system32\lxbkiesc.dll 2014-04-18 12:42 - 2006-11-06 18:27 - 00010752 _____ ( ) C:\Windows\system32\lxbkpplc.dll 2014-04-18 12:42 - 2006-11-06 18:25 - 00695808 _____ ( ) C:\Windows\system32\lxbkcomc.dll 2014-04-18 12:42 - 2006-11-06 18:24 - 00035328 _____ ( ) C:\Windows\system32\lxbkprox.dll 2014-04-18 12:42 - 2006-11-06 18:14 - 00238592 _____ ( ) C:\Windows\system32\lxbkinpa.dll 2014-04-18 12:42 - 2006-11-06 18:12 - 01099264 _____ ( ) C:\Windows\system32\lxbkusb1.dll 2014-04-18 12:42 - 2006-11-06 18:05 - 00305152 _____ ( ) C:\Windows\system32\LXBKhcp.dll 2014-04-18 12:42 - 2006-11-06 18:03 - 00659456 _____ ( ) C:\Windows\system32\lxbkhbn3.dll 2014-04-18 12:42 - 2006-11-06 17:37 - 00643072 _____ ( ) C:\Windows\SysWOW64\lxbkpmui.dll 2014-04-18 12:42 - 2006-11-06 17:35 - 01224704 _____ ( ) C:\Windows\SysWOW64\lxbkserv.dll 2014-04-18 12:42 - 2006-11-06 17:28 - 00421888 _____ ( ) C:\Windows\SysWOW64\lxbkcomm.dll 2014-04-18 12:42 - 2006-11-06 17:26 - 00585728 _____ ( ) C:\Windows\SysWOW64\lxbklmpm.dll 2014-04-18 12:42 - 2006-11-06 17:25 - 00274432 _____ () C:\Windows\SysWOW64\LXBKinst.dll 2014-04-18 12:42 - 2006-11-06 17:24 - 00397312 _____ ( ) C:\Windows\SysWOW64\lxbkiesc.dll 2014-04-18 12:42 - 2006-11-06 17:21 - 00094208 _____ ( ) C:\Windows\SysWOW64\lxbkpplc.dll 2014-04-18 12:42 - 2006-11-06 17:20 - 00684032 _____ ( ) C:\Windows\SysWOW64\lxbkcomc.dll 2014-04-18 12:42 - 2006-11-06 17:20 - 00163840 _____ ( ) C:\Windows\SysWOW64\lxbkprox.dll 2014-04-18 12:42 - 2006-11-06 17:12 - 00413696 _____ ( ) C:\Windows\SysWOW64\lxbkinpa.dll 2014-04-18 12:42 - 2006-11-06 17:11 - 00991232 _____ ( ) C:\Windows\SysWOW64\lxbkusb1.dll 2014-04-18 12:42 - 2006-11-06 17:07 - 00696320 _____ ( ) C:\Windows\SysWOW64\lxbkhbn3.dll 2014-04-18 12:42 - 2006-09-18 12:23 - 00983101 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lxbkgf.dll 2014-04-18 12:35 - 2014-04-18 12:38 - 59110056 _____ () C:\Users\Robert\Downloads\cjsX1100GE.exe 2014-04-18 00:53 - 2014-04-18 00:53 - 00000000 __SHD () C:\Users\Gast 2\AppData\Local\EmieUserList 2014-04-18 00:53 - 2014-04-18 00:53 - 00000000 __SHD () C:\Users\Gast 2\AppData\Local\EmieSiteList 2014-04-17 18:21 - 2014-04-17 18:21 - 00000000 ____D () C:\Users\Gast 2\AppData\Roaming\Macromedia 2014-04-17 18:21 - 2014-04-17 18:21 - 00000000 ____D () C:\Users\Gast 2\AppData\Local\Macromedia 2014-04-16 19:25 - 2014-04-16 19:25 - 01069776 _____ (Solid State Networks) C:\Users\Robert\Downloads\install_flashplayer13x32_mssd_aaa_aih.exe 2014-04-16 19:25 - 2014-04-16 19:25 - 00000000 ____D () C:\Users\Robert\AppData\Roaming\Macromedia 2014-04-16 19:25 - 2014-04-16 19:25 - 00000000 ____D () C:\Users\Robert\AppData\Local\Macromedia 2014-04-16 19:23 - 2014-05-06 22:18 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job 2014-04-16 19:23 - 2014-04-28 19:18 - 00692400 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2014-04-16 19:23 - 2014-04-28 19:18 - 00070832 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2014-04-16 19:23 - 2014-04-28 19:18 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater 2014-04-16 19:23 - 2014-04-16 19:23 - 00000000 ____D () C:\Windows\SysWOW64\Macromed 2014-04-16 19:23 - 2014-04-16 19:23 - 00000000 ____D () C:\Windows\system32\Macromed 2014-04-16 13:23 - 2014-04-16 13:23 - 00000000 ____D () C:\Users\Gast 2\AppData\Roaming\Mozilla 2014-04-16 13:23 - 2014-04-16 13:23 - 00000000 ____D () C:\Users\Gast 2\AppData\Local\NVIDIA Corporation 2014-04-16 13:23 - 2014-04-16 13:23 - 00000000 ____D () C:\Users\Gast 2\AppData\Local\Mozilla 2014-04-16 13:22 - 2014-04-16 13:22 - 00000000 ____D () C:\Users\Gast 2\AppData\Local\NVIDIA 2014-04-16 11:18 - 2014-04-16 11:18 - 00000000 ____D () C:\Users\Robert\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games 2014-04-16 11:03 - 2014-04-16 11:03 - 00001159 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk 2014-04-16 11:03 - 2014-04-16 11:03 - 00001147 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk 2014-04-16 11:03 - 2014-04-16 11:03 - 00000000 ____D () C:\Users\Robert\AppData\Roaming\Mozilla 2014-04-16 11:03 - 2014-04-16 11:03 - 00000000 ____D () C:\Users\Robert\AppData\Local\Mozilla 2014-04-16 11:03 - 2014-04-16 11:03 - 00000000 ____D () C:\ProgramData\Mozilla 2014-04-16 11:03 - 2014-04-16 11:03 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service 2014-04-16 11:03 - 2014-04-16 11:03 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox 2014-04-16 10:46 - 2014-04-16 10:46 - 00000695 _____ () C:\Users\Robert\Desktop\Call of Duty Mehrspieler.lnk 2014-04-16 10:46 - 2014-04-16 10:46 - 00000695 _____ () C:\Users\Robert\Desktop\Call of Duty Einzelspieler.lnk 2014-04-16 10:46 - 2014-04-16 10:46 - 00000695 _____ () C:\Users\Gast 2\Desktop\Call of Duty Mehrspieler.lnk 2014-04-16 10:46 - 2014-04-16 10:46 - 00000695 _____ () C:\Users\Gast 2\Desktop\Call of Duty Einzelspieler.lnk 2014-04-16 10:46 - 2014-04-16 10:46 - 00000000 ____D () C:\Users\Robert\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Call of Duty 2014-04-16 10:46 - 2014-04-16 10:46 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Call of Duty 2014-04-16 10:44 - 2014-04-16 10:44 - 00003062 _____ () C:\Windows\System32\Tasks\{4061F626-E4C9-48B2-9D8B-7D876AF48815} 2014-04-16 10:24 - 2014-04-16 10:46 - 00000745 _____ () C:\Windows\CoD.INI 2014-04-16 10:19 - 2014-04-16 10:19 - 00000000 ____D () C:\Program Files\Motorola 2014-04-15 09:01 - 2014-04-15 09:01 - 00000000 ____D () C:\Users\Robert\AppData\Local\SlimWare Utilities Inc 2014-04-15 09:01 - 2014-04-15 09:01 - 00000000 ____D () C:\Users\Public\Documents\Downloaded Installers 2014-04-15 09:00 - 2014-04-15 09:00 - 00858432 _____ (SlimWare Utilities, Inc.) C:\Users\Robert\Downloads\SlimDrivers-setup_32705.exe 2014-04-15 09:00 - 2014-04-15 09:00 - 00858432 _____ (SlimWare Utilities, Inc.) C:\Users\Robert\Downloads\SlimDrivers-setup_32705 (1).exe 2014-04-10 20:21 - 2014-03-06 11:31 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2014-04-10 20:21 - 2014-03-06 10:59 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2014-04-10 20:21 - 2014-03-06 10:57 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2014-04-10 20:21 - 2014-03-06 10:40 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2014-04-10 20:21 - 2014-03-06 10:39 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2014-04-10 20:21 - 2014-03-06 10:32 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2014-04-10 20:21 - 2014-03-06 10:29 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2014-04-10 20:21 - 2014-03-06 10:28 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2014-04-10 20:21 - 2014-03-06 10:09 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2014-04-10 20:21 - 2014-03-06 10:03 - 00586240 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2014-04-10 20:21 - 2014-03-06 10:02 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2014-04-10 20:21 - 2014-03-06 10:02 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2014-04-10 20:21 - 2014-03-06 09:56 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2014-04-10 20:21 - 2014-03-06 09:48 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2014-04-10 20:21 - 2014-03-06 09:46 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2014-04-10 20:21 - 2014-03-06 09:45 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2014-04-10 20:21 - 2014-03-06 09:42 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2014-04-10 20:21 - 2014-03-06 09:40 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2014-04-10 20:21 - 2014-03-06 09:38 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2014-04-10 20:21 - 2014-03-06 09:22 - 00367616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2014-04-10 20:21 - 2014-03-06 09:21 - 00628736 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2014-04-10 20:21 - 2014-03-06 09:13 - 00032256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2014-04-10 20:21 - 2014-03-06 09:07 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2014-04-10 20:21 - 2014-03-06 09:01 - 00244224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2014-04-10 20:21 - 2014-03-06 08:46 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2014-04-10 20:20 - 2014-03-06 10:57 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2014-04-10 20:20 - 2014-03-06 10:53 - 02767360 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2014-04-10 20:20 - 2014-03-06 10:29 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2014-04-10 20:20 - 2014-03-06 10:15 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2014-04-10 20:20 - 2014-03-06 10:11 - 05784064 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2014-04-10 20:20 - 2014-03-06 10:01 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2014-04-10 20:20 - 2014-03-06 09:47 - 02178048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2014-04-10 20:20 - 2014-03-06 09:46 - 04254720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2014-04-10 20:20 - 2014-03-06 09:36 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2014-04-10 20:20 - 2014-03-06 09:11 - 02043904 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2014-04-10 20:20 - 2014-03-06 08:53 - 13551104 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2014-04-10 20:20 - 2014-03-06 08:40 - 01967104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2014-04-10 20:20 - 2014-03-06 08:36 - 11745792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2014-04-10 20:20 - 2014-03-06 08:22 - 02260480 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2014-04-10 20:20 - 2014-03-06 07:58 - 01400832 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2014-04-10 20:20 - 2014-03-06 07:50 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2014-04-10 20:20 - 2014-03-06 07:43 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2014-04-10 20:20 - 2014-03-06 07:41 - 01789440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2014-04-10 20:20 - 2014-03-06 07:36 - 01143808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2014-04-10 17:27 - 2014-03-04 11:44 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll 2014-04-10 17:27 - 2014-03-04 11:44 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll 2014-04-10 17:27 - 2014-03-04 11:44 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll 2014-04-10 17:27 - 2014-03-04 11:44 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll 2014-04-10 17:27 - 2014-03-04 11:44 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll 2014-04-10 17:27 - 2014-03-04 11:17 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll 2014-04-10 17:27 - 2014-03-04 11:16 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll 2014-04-10 17:27 - 2014-03-04 11:16 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe 2014-04-10 17:27 - 2014-03-04 11:16 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll 2014-04-10 17:27 - 2014-03-04 10:09 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe 2014-04-10 17:27 - 2014-03-04 10:09 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe 2014-04-10 17:27 - 2014-02-04 04:35 - 00274880 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msiscsi.sys 2014-04-10 17:27 - 2014-02-04 04:35 - 00190912 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys 2014-04-10 17:27 - 2014-02-04 04:35 - 00027584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Diskdump.sys 2014-04-10 17:27 - 2014-02-04 04:28 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\iologmsg.dll 2014-04-10 17:27 - 2014-02-04 04:00 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iologmsg.dll 2014-04-10 17:27 - 2014-01-24 04:37 - 01684928 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys 2014-04-09 18:01 - 2014-04-09 18:01 - 00001421 _____ () C:\Users\Gast 2\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2014-04-09 18:01 - 2014-04-09 18:01 - 00001330 __RSH () C:\Users\Gast 2\ntuser.pol 2014-04-09 18:01 - 2014-04-09 18:01 - 00000020 ___SH () C:\Users\Gast 2\ntuser.ini 2014-04-09 18:01 - 2014-04-09 18:01 - 00000000 _SHDL () C:\Users\Gast 2\Vorlagen 2014-04-09 18:01 - 2014-04-09 18:01 - 00000000 _SHDL () C:\Users\Gast 2\Startmenü 2014-04-09 18:01 - 2014-04-09 18:01 - 00000000 _SHDL () C:\Users\Gast 2\Netzwerkumgebung 2014-04-09 18:01 - 2014-04-09 18:01 - 00000000 _SHDL () C:\Users\Gast 2\Lokale Einstellungen 2014-04-09 18:01 - 2014-04-09 18:01 - 00000000 _SHDL () C:\Users\Gast 2\Eigene Dateien 2014-04-09 18:01 - 2014-04-09 18:01 - 00000000 _SHDL () C:\Users\Gast 2\Druckumgebung 2014-04-09 18:01 - 2014-04-09 18:01 - 00000000 _SHDL () C:\Users\Gast 2\Documents\Eigene Musik 2014-04-09 18:01 - 2014-04-09 18:01 - 00000000 _SHDL () C:\Users\Gast 2\Documents\Eigene Bilder 2014-04-09 18:01 - 2014-04-09 18:01 - 00000000 _SHDL () C:\Users\Gast 2\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-04-09 18:01 - 2014-04-09 18:01 - 00000000 _SHDL () C:\Users\Gast 2\AppData\Local\Verlauf 2014-04-09 18:01 - 2014-04-09 18:01 - 00000000 _SHDL () C:\Users\Gast 2\AppData\Local\Anwendungsdaten 2014-04-09 18:01 - 2014-04-09 18:01 - 00000000 _SHDL () C:\Users\Gast 2\Anwendungsdaten 2014-04-09 18:01 - 2014-04-09 18:01 - 00000000 ___RD () C:\Users\Gast 2\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup 2014-04-09 18:01 - 2014-04-09 18:01 - 00000000 ___RD () C:\Users\Gast 2\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools 2014-04-09 18:01 - 2014-04-09 18:01 - 00000000 ____D () C:\Users\Gast 2\AppData\Roaming\Adobe 2014-04-09 18:01 - 2014-04-09 18:01 - 00000000 ____D () C:\Users\Gast 2\AppData\Local\VirtualStore 2014-04-09 18:01 - 2014-04-09 18:01 - 00000000 ____D () C:\Users\Gast 2 2014-04-09 18:01 - 2009-07-14 06:54 - 00000000 ___RD () C:\Users\Gast 2\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories 2014-04-09 18:01 - 2009-07-14 06:49 - 00000000 ___RD () C:\Users\Gast 2\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance 2014-04-09 17:43 - 2014-04-09 17:43 - 00106272 _____ (G Data Software) C:\Windows\system32\Drivers\GRD.sys 2014-04-09 17:43 - 2014-04-09 17:43 - 00018160 _____ (G Data Software) C:\Windows\system32\Drivers\GdPhyMem.sys 2014-04-09 17:12 - 2014-04-09 17:14 - 00000680 __RSH () C:\Users\Robert\ntuser.pol 2014-04-09 16:44 - 2014-04-09 18:02 - 00000000 ____D () C:\Users\Gast 2\Desktop\Daten Aldi Pc 2014-04-08 08:22 - 2014-04-08 08:22 - 00022016 _____ (G Data Software AG) C:\Windows\system32\Drivers\GDKBFlt64.sys 2014-04-08 08:22 - 2014-04-08 08:22 - 00002058 _____ () C:\Windows\DPINST.LOG 2014-04-08 08:22 - 2014-04-08 08:22 - 00001929 _____ () C:\Users\Public\Desktop\G Data AntiVirus.lnk 2014-04-08 08:22 - 2014-04-08 08:22 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_GDKBFlt64_01007.Wdf 2014-04-08 08:22 - 2014-04-08 08:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\G Data AntiVirus ==================== One Month Modified Files and Folders ======= 2014-05-06 22:26 - 2014-05-04 13:33 - 00000000 ____D () C:\Users\Robert\Desktop\Viren Bekämpfung 2014-05-06 22:26 - 2014-04-29 17:52 - 00000000 ____D () C:\FRST 2014-05-06 22:26 - 2010-01-01 12:30 - 00000000 ____D () C:\Users\Robert\AppData\Roaming\NetSpeedMonitor 2014-05-06 22:18 - 2014-04-16 19:23 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job 2014-05-06 19:00 - 2014-03-19 21:59 - 01131860 _____ () C:\Windows\WindowsUpdate.log 2014-05-06 17:56 - 2009-07-14 06:45 - 00021664 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-05-06 17:56 - 2009-07-14 06:45 - 00021664 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-05-06 17:49 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2014-05-06 17:49 - 2009-07-14 06:51 - 00041425 _____ () C:\Windows\setupact.log 2014-05-06 12:53 - 2014-05-06 12:53 - 00000000 ___SD () C:\Windows\system32\CompatTel 2014-05-06 10:46 - 2010-11-21 05:47 - 00016126 _____ () C:\Windows\PFRO.log 2014-05-05 19:57 - 2014-05-05 19:57 - 00000000 ____D () C:\Program Files (x86)\ESET 2014-05-05 08:15 - 2014-05-05 08:15 - 00000000 ____D () C:\Users\Gast 2\AppData\Roaming\ProductData 2014-05-04 16:31 - 2014-05-04 16:31 - 00004253 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_55-b14.log 2014-05-04 16:31 - 2014-05-04 16:31 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java 2014-05-04 16:31 - 2014-04-05 16:06 - 00000000 ____D () C:\Program Files (x86)\Java 2014-05-04 16:31 - 2014-04-05 16:00 - 00000000 ____D () C:\ProgramData\Oracle 2014-05-04 16:27 - 2014-05-04 16:27 - 00000000 ____D () C:\Windows\Sun 2014-05-04 16:23 - 2014-05-04 16:23 - 00002888 _____ () C:\Windows\System32\Tasks\Uninstaller_SkipUac_Administrator 2014-05-04 16:23 - 2014-05-04 16:23 - 00001252 _____ () C:\Users\Robert\AppData\Roaming\Microsoft\Windows\Start Menu\Uninstall Programs.lnk 2014-05-04 16:23 - 2014-05-04 16:23 - 00000000 ____D () C:\Users\Robert\AppData\Roaming\ProductData 2014-05-04 16:23 - 2014-05-04 16:23 - 00000000 ____D () C:\Users\Robert\AppData\Roaming\IObit 2014-05-04 16:23 - 2014-05-04 16:23 - 00000000 ____D () C:\ProgramData\ProductData 2014-05-04 16:23 - 2014-05-04 16:23 - 00000000 ____D () C:\ProgramData\IObit 2014-05-04 16:23 - 2014-05-04 16:23 - 00000000 ____D () C:\Program Files (x86)\IObit 2014-05-04 16:23 - 2014-03-19 23:30 - 00064320 _____ () C:\Users\Robert\AppData\Local\GDIPFONTCACHEV1.DAT 2014-05-04 16:22 - 2014-05-04 16:17 - 12569408 _____ (IObit) C:\Users\Robert\Downloads\iobituninstaller_3.2.0.128.exe 2014-05-04 15:15 - 2014-03-30 11:53 - 00000000 ____D () C:\Users\Robert\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam 2014-05-04 14:56 - 2014-05-04 14:56 - 00291488 _____ () C:\Windows\SysWOW64\PnkBstrB.xtr 2014-05-04 14:56 - 2014-05-04 14:56 - 00000000 ____D () C:\Users\Robert\AppData\Local\PunkBuster 2014-05-04 14:56 - 2014-05-04 14:46 - 00291488 _____ () C:\Windows\SysWOW64\PnkBstrB.exe 2014-05-04 14:46 - 2014-05-04 14:46 - 00281872 _____ () C:\Windows\SysWOW64\PnkBstrB.ex0 2014-05-04 14:46 - 2014-05-04 14:46 - 00076888 _____ () C:\Windows\SysWOW64\PnkBstrA.exe 2014-05-04 14:46 - 2014-05-04 14:46 - 00000000 ____D () C:\Users\Robert\AppData\Local\Ubisoft 2014-05-04 14:02 - 2014-04-18 14:43 - 00000245 _____ () C:\Windows\Lexstat.ini 2014-05-04 13:16 - 2014-05-04 13:16 - 00000000 ____D () C:\Windows\ERUNT 2014-05-04 13:08 - 2014-05-04 13:06 - 00000000 ____D () C:\AdwCleaner 2014-05-04 12:47 - 2014-04-28 18:40 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2014-05-04 12:40 - 2014-05-04 12:40 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 2014-05-04 12:40 - 2014-05-04 12:40 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 2014-05-04 09:42 - 2014-05-04 09:30 - 00000000 ____D () C:\Qoobox 2014-05-04 09:42 - 2009-07-14 05:20 - 00000000 __RHD () C:\Users\Default 2014-05-04 09:40 - 2014-05-04 09:29 - 00000000 ____D () C:\Windows\erdnt 2014-05-04 09:40 - 2009-07-14 04:34 - 00000215 _____ () C:\Windows\system.ini 2014-05-02 17:58 - 2009-07-14 06:45 - 00289048 _____ () C:\Windows\system32\FNTCACHE.DAT 2014-05-02 13:26 - 2014-05-02 13:26 - 01110476 _____ () C:\Users\Robert\Downloads\7z920.exe 2014-05-02 13:26 - 2014-05-02 13:26 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip 2014-05-02 13:26 - 2014-05-02 13:26 - 00000000 ____D () C:\Program Files (x86)\7-Zip 2014-05-02 12:43 - 2014-05-02 12:42 - 00000000 ____D () C:\ProgramData\Max Secure 2014-05-02 11:07 - 2014-05-02 11:07 - 00000202 _____ () C:\Users\Robert\Desktop\Call of Duty Ghosts - Multiplayer.url 2014-04-29 16:01 - 2014-05-03 11:01 - 23547904 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-04-29 15:40 - 2014-05-03 11:01 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-04-29 14:48 - 2014-05-03 11:01 - 17384448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2014-04-29 14:34 - 2014-05-03 11:01 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2014-04-28 19:18 - 2014-04-16 19:23 - 00692400 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2014-04-28 19:18 - 2014-04-16 19:23 - 00070832 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2014-04-28 19:18 - 2014-04-16 19:23 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater 2014-04-28 18:39 - 2014-04-28 18:39 - 00000000 ____D () C:\ProgramData\Malwarebytes 2014-04-28 18:39 - 2014-04-28 18:38 - 17305616 _____ (Malwarebytes Corporation ) C:\Users\Robert\Downloads\mbam-setup-2.0.1.1004.exe 2014-04-27 19:21 - 2011-04-12 09:43 - 00698688 _____ () C:\Windows\system32\perfh007.dat 2014-04-27 19:21 - 2011-04-12 09:43 - 00148828 _____ () C:\Windows\system32\perfc007.dat 2014-04-27 19:21 - 2009-07-14 07:13 - 01618320 _____ () C:\Windows\system32\PerfStringBackup.INI 2014-04-24 22:48 - 2014-04-21 18:24 - 00000000 ____D () C:\Users\Robert\AppData\Roaming\vlc 2014-04-24 22:43 - 2014-04-24 22:43 - 00000000 ____D () C:\Users\Robert\AppData\Roaming\dvdcss 2014-04-22 14:59 - 2014-04-22 14:59 - 00000000 ____D () C:\Users\Robert\AppData\Local\Adobe 2014-04-22 14:59 - 2014-03-20 23:50 - 00000000 ____D () C:\Users\Robert\AppData\Roaming\Adobe 2014-04-21 18:23 - 2014-04-21 18:23 - 00000871 _____ () C:\Users\Public\Desktop\VLC media player.lnk 2014-04-21 18:23 - 2014-04-21 18:23 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN 2014-04-21 18:23 - 2014-04-21 18:23 - 00000000 ____D () C:\Program Files\VideoLAN 2014-04-21 18:19 - 2014-04-21 18:18 - 25910056 _____ () C:\Users\Robert\Downloads\vlc-2.1.4-win64.exe 2014-04-18 14:52 - 2014-04-18 14:52 - 00001095 _____ () C:\Users\Public\Desktop\All-In-One-Center des Lexmark X1100 Series.lnk 2014-04-18 14:44 - 2014-04-18 12:42 - 00014750 _____ () C:\Windows\system32\LexFiles.ulf 2014-04-18 14:44 - 2014-04-18 12:42 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lexmark X1100 Series 2014-04-18 14:44 - 2014-04-18 12:42 - 00000000 ____D () C:\Program Files (x86)\Lexmark X1100 Series 2014-04-18 12:43 - 2014-04-18 12:43 - 00000000 ____D () C:\Program Files\Lexmark X1100 Series 2014-04-18 12:38 - 2014-04-18 12:35 - 59110056 _____ () C:\Users\Robert\Downloads\cjsX1100GE.exe 2014-04-18 00:53 - 2014-04-18 00:53 - 00000000 __SHD () C:\Users\Gast 2\AppData\Local\EmieUserList 2014-04-18 00:53 - 2014-04-18 00:53 - 00000000 __SHD () C:\Users\Gast 2\AppData\Local\EmieSiteList 2014-04-17 18:21 - 2014-04-17 18:21 - 00000000 ____D () C:\Users\Gast 2\AppData\Roaming\Macromedia 2014-04-17 18:21 - 2014-04-17 18:21 - 00000000 ____D () C:\Users\Gast 2\AppData\Local\Macromedia 2014-04-16 19:25 - 2014-04-16 19:25 - 01069776 _____ (Solid State Networks) C:\Users\Robert\Downloads\install_flashplayer13x32_mssd_aaa_aih.exe 2014-04-16 19:25 - 2014-04-16 19:25 - 00000000 ____D () C:\Users\Robert\AppData\Roaming\Macromedia 2014-04-16 19:25 - 2014-04-16 19:25 - 00000000 ____D () C:\Users\Robert\AppData\Local\Macromedia 2014-04-16 19:23 - 2014-04-16 19:23 - 00000000 ____D () C:\Windows\SysWOW64\Macromed 2014-04-16 19:23 - 2014-04-16 19:23 - 00000000 ____D () C:\Windows\system32\Macromed 2014-04-16 13:23 - 2014-04-16 13:23 - 00000000 ____D () C:\Users\Gast 2\AppData\Roaming\Mozilla 2014-04-16 13:23 - 2014-04-16 13:23 - 00000000 ____D () C:\Users\Gast 2\AppData\Local\NVIDIA Corporation 2014-04-16 13:23 - 2014-04-16 13:23 - 00000000 ____D () C:\Users\Gast 2\AppData\Local\Mozilla 2014-04-16 13:22 - 2014-04-16 13:22 - 00000000 ____D () C:\Users\Gast 2\AppData\Local\NVIDIA 2014-04-16 13:22 - 2009-07-14 07:09 - 00000000 ____D () C:\Windows\System32\Tasks\WPD 2014-04-16 11:18 - 2014-04-16 11:18 - 00000000 ____D () C:\Users\Robert\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games 2014-04-16 11:03 - 2014-04-16 11:03 - 00001159 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk 2014-04-16 11:03 - 2014-04-16 11:03 - 00001147 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk 2014-04-16 11:03 - 2014-04-16 11:03 - 00000000 ____D () C:\Users\Robert\AppData\Roaming\Mozilla 2014-04-16 11:03 - 2014-04-16 11:03 - 00000000 ____D () C:\Users\Robert\AppData\Local\Mozilla 2014-04-16 11:03 - 2014-04-16 11:03 - 00000000 ____D () C:\ProgramData\Mozilla 2014-04-16 11:03 - 2014-04-16 11:03 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service 2014-04-16 11:03 - 2014-04-16 11:03 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox 2014-04-16 10:50 - 2014-03-19 23:00 - 00000000 ____D () C:\Program Files (x86)\Google 2014-04-16 10:49 - 2014-03-19 23:00 - 00000000 ____D () C:\Users\Robert\AppData\Local\Google 2014-04-16 10:47 - 2014-03-20 00:27 - 00195266 _____ () C:\Windows\DirectX.log 2014-04-16 10:46 - 2014-04-16 10:46 - 00000695 _____ () C:\Users\Robert\Desktop\Call of Duty Mehrspieler.lnk 2014-04-16 10:46 - 2014-04-16 10:46 - 00000695 _____ () C:\Users\Robert\Desktop\Call of Duty Einzelspieler.lnk 2014-04-16 10:46 - 2014-04-16 10:46 - 00000695 _____ () C:\Users\Gast 2\Desktop\Call of Duty Mehrspieler.lnk 2014-04-16 10:46 - 2014-04-16 10:46 - 00000695 _____ () C:\Users\Gast 2\Desktop\Call of Duty Einzelspieler.lnk 2014-04-16 10:46 - 2014-04-16 10:46 - 00000000 ____D () C:\Users\Robert\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Call of Duty 2014-04-16 10:46 - 2014-04-16 10:46 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Call of Duty 2014-04-16 10:46 - 2014-04-16 10:24 - 00000745 _____ () C:\Windows\CoD.INI 2014-04-16 10:44 - 2014-04-16 10:44 - 00003062 _____ () C:\Windows\System32\Tasks\{4061F626-E4C9-48B2-9D8B-7D876AF48815} 2014-04-16 10:19 - 2014-04-16 10:19 - 00000000 ____D () C:\Program Files\Motorola 2014-04-15 09:01 - 2014-04-15 09:01 - 00000000 ____D () C:\Users\Robert\AppData\Local\SlimWare Utilities Inc 2014-04-15 09:01 - 2014-04-15 09:01 - 00000000 ____D () C:\Users\Public\Documents\Downloaded Installers 2014-04-15 09:00 - 2014-04-15 09:00 - 00858432 _____ (SlimWare Utilities, Inc.) C:\Users\Robert\Downloads\SlimDrivers-setup_32705.exe 2014-04-15 09:00 - 2014-04-15 09:00 - 00858432 _____ (SlimWare Utilities, Inc.) C:\Users\Robert\Downloads\SlimDrivers-setup_32705 (1).exe 2014-04-14 20:13 - 2014-05-04 16:31 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll 2014-04-14 20:05 - 2014-05-04 16:31 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe 2014-04-14 20:05 - 2014-05-04 16:31 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe 2014-04-14 20:04 - 2014-05-04 16:31 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe 2014-04-14 04:24 - 2014-05-06 10:52 - 00465408 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll 2014-04-14 04:19 - 2014-05-06 10:52 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll 2014-04-10 21:11 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache 2014-04-10 20:39 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\PolicyDefinitions 2014-04-10 17:19 - 2014-03-20 21:47 - 00000000 ____D () C:\Windows\system32\MRT 2014-04-10 17:17 - 2014-03-20 21:47 - 90655440 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2014-04-09 18:02 - 2014-04-09 16:44 - 00000000 ____D () C:\Users\Gast 2\Desktop\Daten Aldi Pc 2014-04-09 18:01 - 2014-04-09 18:01 - 00001421 _____ () C:\Users\Gast 2\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2014-04-09 18:01 - 2014-04-09 18:01 - 00001330 __RSH () C:\Users\Gast 2\ntuser.pol 2014-04-09 18:01 - 2014-04-09 18:01 - 00000020 ___SH () C:\Users\Gast 2\ntuser.ini 2014-04-09 18:01 - 2014-04-09 18:01 - 00000000 _SHDL () C:\Users\Gast 2\Vorlagen 2014-04-09 18:01 - 2014-04-09 18:01 - 00000000 _SHDL () C:\Users\Gast 2\Startmenü 2014-04-09 18:01 - 2014-04-09 18:01 - 00000000 _SHDL () C:\Users\Gast 2\Netzwerkumgebung 2014-04-09 18:01 - 2014-04-09 18:01 - 00000000 _SHDL () C:\Users\Gast 2\Lokale Einstellungen 2014-04-09 18:01 - 2014-04-09 18:01 - 00000000 _SHDL () C:\Users\Gast 2\Eigene Dateien 2014-04-09 18:01 - 2014-04-09 18:01 - 00000000 _SHDL () C:\Users\Gast 2\Druckumgebung 2014-04-09 18:01 - 2014-04-09 18:01 - 00000000 _SHDL () C:\Users\Gast 2\Documents\Eigene Musik 2014-04-09 18:01 - 2014-04-09 18:01 - 00000000 _SHDL () C:\Users\Gast 2\Documents\Eigene Bilder 2014-04-09 18:01 - 2014-04-09 18:01 - 00000000 _SHDL () C:\Users\Gast 2\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-04-09 18:01 - 2014-04-09 18:01 - 00000000 _SHDL () C:\Users\Gast 2\AppData\Local\Verlauf 2014-04-09 18:01 - 2014-04-09 18:01 - 00000000 _SHDL () C:\Users\Gast 2\AppData\Local\Anwendungsdaten 2014-04-09 18:01 - 2014-04-09 18:01 - 00000000 _SHDL () C:\Users\Gast 2\Anwendungsdaten 2014-04-09 18:01 - 2014-04-09 18:01 - 00000000 ___RD () C:\Users\Gast 2\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup 2014-04-09 18:01 - 2014-04-09 18:01 - 00000000 ___RD () C:\Users\Gast 2\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools 2014-04-09 18:01 - 2014-04-09 18:01 - 00000000 ____D () C:\Users\Gast 2\AppData\Roaming\Adobe 2014-04-09 18:01 - 2014-04-09 18:01 - 00000000 ____D () C:\Users\Gast 2\AppData\Local\VirtualStore 2014-04-09 18:01 - 2014-04-09 18:01 - 00000000 ____D () C:\Users\Gast 2 2014-04-09 17:43 - 2014-04-09 17:43 - 00106272 _____ (G Data Software) C:\Windows\system32\Drivers\GRD.sys 2014-04-09 17:43 - 2014-04-09 17:43 - 00018160 _____ (G Data Software) C:\Windows\system32\Drivers\GdPhyMem.sys 2014-04-09 17:14 - 2014-04-09 17:12 - 00000680 __RSH () C:\Users\Robert\ntuser.pol 2014-04-09 17:14 - 2014-03-19 22:23 - 00000000 ____D () C:\Users\Robert 2014-04-09 17:12 - 2009-07-14 05:20 - 00000000 ___HD () C:\Windows\system32\GroupPolicy 2014-04-08 08:23 - 2014-03-19 23:27 - 00068608 _____ (G Data Software AG) C:\Windows\system32\Drivers\PktIcpt.sys 2014-04-08 08:22 - 2014-04-08 08:22 - 00022016 _____ (G Data Software AG) C:\Windows\system32\Drivers\GDKBFlt64.sys 2014-04-08 08:22 - 2014-04-08 08:22 - 00002058 _____ () C:\Windows\DPINST.LOG 2014-04-08 08:22 - 2014-04-08 08:22 - 00001929 _____ () C:\Users\Public\Desktop\G Data AntiVirus.lnk 2014-04-08 08:22 - 2014-04-08 08:22 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_GDKBFlt64_01007.Wdf 2014-04-08 08:22 - 2014-04-08 08:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\G Data AntiVirus 2014-04-08 08:22 - 2014-03-19 23:24 - 00135168 _____ (G Data Software AG) C:\Windows\system32\Drivers\MiniIcpt.sys 2014-04-08 08:22 - 2014-03-19 23:24 - 00065024 _____ (G Data Software AG) C:\Windows\system32\Drivers\HookCentre.sys 2014-04-08 08:22 - 2014-03-19 23:24 - 00064000 _____ (G Data Software AG) C:\Windows\system32\Drivers\gdwfpcd64.sys 2014-04-08 08:22 - 2014-03-19 23:24 - 00057344 _____ (G Data Software AG) C:\Windows\system32\Drivers\GDBehave.sys 2014-04-08 08:21 - 2014-03-19 23:22 - 00000000 ____D () C:\ProgramData\G Data Some content of TEMP: ==================== C:\Users\Gast 2\AppData\Local\Temp\rtdrvmon.exe C:\Users\Robert\AppData\Local\Temp\Quarantine.exe C:\Users\Robert\AppData\Local\Temp\rtdrvmon.exe ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\rpcss.dll => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2014-04-26 13:28 ==================== End Of Log ============================ Posadi ist noch offen |
Themen zu "Posadi17" ständig offen als Task im Taskmanager |
abend, betrifft, erhalte, erhalten, frage, guten, home, infos, knapp, monate, offene, posadi17, posadi17 entfernen, premium, probleme, rechner, schließe, schließen, taskmanager, ultima, website, win, win7 |