![]() |
|
Log-Analyse und Auswertung: "Windows Pc-Reparatur"Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
![]() | #1 |
| ![]() "Windows Pc-Reparatur" Hallo zusammen, ich habe in diesem Forum schon einen Thread gelesen, in der dasselbe Problem wie bei mir auftrat, also befürchte ich mal es ist was Ernstes... leider kam es in erstgenanntem Thread (http://www.trojaner-board.de/138420-...-entdeckt.html) zu keiner Diagnose. Es geht darum, dass, wenn ich meinen Browser öffne, ein Popup erscheint mit der Meldung "Ihr PC läuft langsamer als sonst? Ihr PC hat 14 Fehler und braucht 3 Reparaturen." Tatsächlich läuft mein PC langsamer als sonst und ein Klick auf das Popup führt zu folgender Seite : hxxp://de.reimageplus.com/lp/sys/index.php?tracking=aptv&banner=aptv&adgroup=1946&ads_name=direct&keyword=direct&context=MjAyNzg1Mjc0NzkyMzM6OjI3ODU6OjM6OkRFOjo1OjowODo6MDo6Mzo6MjY3Oj ozODc3OjoyNjcwMjA6OjE6OlVSTDo6MTk0Njo6MjUzNTo6OjoyNzQ3OTI6OjE6Ojc4NjQzMTM4NDo6MDo6MTAyOjowOjoxOjowOjowOjow Ich habe mir also wie in oben genanntem Thread empfohlen das Farbar Recovery Scan Tool heruntergeladen. Weil es zu lang wäre die beiden Dateien hier zu posten, werde ich sie als Antwort auf diesen Thread posten. Ich bedanke mich im Voraus für jegliche Hilfe MfG Ive FRST.txt FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 08-05-2014 02 Ran by Ive (administrator) on IVE-PC on 09-05-2014 09:13:21 Running from C:\Users\Ive\Downloads Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard Internet Explorer Version 11 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (Cisco Systems, Inc.) C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnagent.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (Microsoft Corporation) C:\Windows\System32\wlanext.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe (BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe (Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe (Intel Corporation) C:\Windows\System32\igfxtray.exe (Intel Corporation) C:\Windows\System32\hkcmd.exe (Intel Corporation) C:\Windows\System32\igfxpers.exe (Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe (McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.8.141\SSScheduler.exe (CyberLink Corp.) C:\Program Files (x86)\Acer\clear.fi\MVP\clear.fiAgent.exe (Dropbox, Inc.) C:\Users\Ive\AppData\Roaming\Dropbox\bin\Dropbox.exe (Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe (NTI Corporation) C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LManager.exe (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\dsiwmis.exe (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LMworker.exe (Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LMutilps32.exe (Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe (Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe (Dolby Laboratories Inc.) C:\Dolby PCEE4\pcee4.exe (CyberLink Corp.) C:\Program Files (x86)\Acer\clear.fi\Movie\clear.fiMovieService.exe (CyberLink) C:\Program Files (x86)\Acer\clear.fi\MVP\Kernel\DMR\DMREngine.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (SecureW2 B.V.) C:\Program Files (x86)\SecureW2\sw2_tray.exe (Acer Incorporated) C:\Program Files (x86)\Acer\Registration\GREGsvc.exe (Acer Incorporated) C:\Program Files\Acer\Acer Updater\UpdaterService.exe (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\MMDx64Fx.exe (Native Instruments GmbH) C:\Program Files\Common Files\Native Instruments\Hardware\NIHardwareService.exe (Symantec Corporation) C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-Agent.exe (Cisco Systems, Inc.) C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnui.exe (NTI Corporation) C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe (Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (PostgreSQL Global Development Group) C:\Program Files (x86)\PostgreSQL\9.0\bin\pg_ctl.exe (Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe (SplitCam Co.) C:\Program Files (x86)\SplitCam\SplitCamService.exe (PostgreSQL Global Development Group) C:\Program Files (x86)\PostgreSQL\9.0\bin\postgres.exe (BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-Service.exe (PostgreSQL Global Development Group) C:\Program Files (x86)\PostgreSQL\9.0\bin\postgres.exe (PostgreSQL Global Development Group) C:\Program Files (x86)\PostgreSQL\9.0\bin\postgres.exe (PostgreSQL Global Development Group) C:\Program Files (x86)\PostgreSQL\9.0\bin\postgres.exe (PostgreSQL Global Development Group) C:\Program Files (x86)\PostgreSQL\9.0\bin\postgres.exe (PostgreSQL Global Development Group) C:\Program Files (x86)\PostgreSQL\9.0\bin\postgres.exe (BlueStack Systems) C:\Program Files (x86)\BlueStacks\HD-Network.exe (BlueStack Systems) C:\Program Files (x86)\BlueStacks\HD-BlockDevice.exe (Intel Corporation) C:\Windows\System32\igfxext.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe (Intel Corporation) C:\Windows\System32\igfxsrvc.exe (Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerEvent.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe (BlueStack Systems) C:\Program Files (x86)\BlueStacks\HD-SharedFolder.exe (Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe (Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Conduit) C:\Program Files (x86)\SearchProtect\Main\bin\CltMngSvc.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe (Conduit) C:\Program Files (x86)\SearchProtect\SearchProtect\bin\cltmng.exe (Conduit) C:\Program Files (x86)\SearchProtect\UI\bin\cltmngui.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avcenter.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avscan.exe (Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_13_0_0_206.exe (Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_13_0_0_206.exe (Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE (Adobe Systems Incorporated) C:\Windows\System32\Macromed\Flash\FlashUtil64_13_0_0_206_ActiveX.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [IntelTBRunOnce] => wscript.exe //b //nologo "C:\Program Files\Intel\TurboBoost\RunTBGadgetOnce.vbs" HKLM\...\Run: [IntelPAN] => C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe [1935120 2011-05-02] (Intel(R) Corporation) HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2280232 2010-07-30] (Synaptics Incorporated) HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12673128 2011-08-16] (Realtek Semiconductor) HKLM\...\Run: [RtHDVBg_Dolby] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2277480 2011-08-16] (Realtek Semiconductor) HKLM\...\Run: [Power Management] => C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe [1831016 2011-08-02] (Acer Incorporated) HKLM-x32\...\Run: [Norton Online Backup] => C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuClient.exe [1155928 2010-06-02] (Symantec Corporation) HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated) HKLM-x32\...\Run: [BackupManagerTray] => C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe [297280 2011-04-24] (NTI Corporation) HKLM-x32\...\Run: [LManager] => C:\Program Files (x86)\Launch Manager\LManager.exe [1103440 2011-07-01] (Dritek System Inc.) HKLM-x32\...\Run: [NUSB3MON] => C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [113288 2010-11-17] (Renesas Electronics Corporation) HKLM-x32\...\Run: [Dolby Advanced Audio v2] => C:\Dolby PCEE4\pcee4.exe [506712 2011-06-01] (Dolby Laboratories Inc.) HKLM-x32\...\Run: [SuiteTray] => C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe [341360 2011-09-20] (Egis Technology Inc.) HKLM-x32\...\Run: [ArcadeMovieService] => C:\Program Files (x86)\Acer\clear.fi\Movie\clear.fiMovieService.exe [177448 2011-08-26] (CyberLink Corp.) HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [43848 2014-02-12] (Apple Inc.) HKLM-x32\...\Run: [SecureW2 Tray] => C:\Program Files (x86)\SecureW2\sw2_tray.exe [287112 2012-04-10] (SecureW2 B.V.) HKLM-x32\...\Run: [LogMeIn Hamachi Ui] => C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [2345296 2013-10-01] (LogMeIn Inc.) HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation) HKLM-x32\...\Run: [BlueStacks Agent] => C:\Program Files (x86)\BlueStacks\HD-Agent.exe [807696 2013-12-20] (BlueStack Systems, Inc.) HKLM-x32\...\Run: [Cisco AnyConnect Secure Mobility Agent for Windows] => C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnui.exe [707472 2013-12-13] (Cisco Systems, Inc.) HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2014-01-17] (Apple Inc.) HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2014-02-21] (Apple Inc.) HKLM-x32\...\Run: [Avira Systray] => C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe [182352 2014-04-30] (Avira Operations GmbH & Co. KG) HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [689744 2014-05-06] (Avira Operations GmbH & Co. KG) Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation) HKU\.DEFAULT\...\RunOnce: [IsMyWinLockerReboot] - msiexec.exe /qn /x{voidguid} HKU\S-1-5-19\...\RunOnce: [IsMyWinLockerReboot] - msiexec.exe /qn /x{voidguid} HKU\S-1-5-20\...\RunOnce: [IsMyWinLockerReboot] - msiexec.exe /qn /x{voidguid} HKU\S-1-5-21-2813519919-2714014398-3896331259-1000\...\RunOnce: [IsMyWinLockerReboot] - msiexec.exe /qn /x{voidguid} HKU\S-1-5-21-2813519919-2714014398-3896331259-1001\...\Run: [Google Update] => C:\Users\Ive\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2012-09-18] (Google Inc.) HKU\S-1-5-21-2813519919-2714014398-3896331259-1001\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3672640 2013-03-14] (Disc Soft Ltd) HKU\S-1-5-21-2813519919-2714014398-3896331259-1001\...\MountPoints2: {58dcdcda-33ea-11e3-a065-dc0ea1583a4a} - E:\setup.exe HKU\S-1-5-21-2813519919-2714014398-3896331259-1002\...\RunOnce: [ScrSav] - C:\Program Files (x86)\Acer\Screensaver\run_Acer.exe [154144 2010-07-29] () AppInit_DLLs: C:\PROGRA~2\SearchProtect\SearchProtect\bin\SPVC64Loader.dll => C:\Program Files (x86)\SearchProtect\SearchProtect\bin\SPVC64Loader.dll [1355552 2014-04-08] (Conduit) AppInit_DLLs: C:\Windows\system32\nvinitx.dll => C:\Windows\system32\nvinitx.dll [241984 2011-10-16] (NVIDIA Corporation) AppInit_DLLs-x32: C:\PROGRA~2\SearchProtect\SearchProtect\bin\SPVC32Loader.dll => C:\Program Files (x86)\SearchProtect\SearchProtect\bin\SPVC32Loader.dll [1050912 2014-04-08] (Conduit) AppInit_DLLs-x32: C:\Windows\SysWOW64\nvinit.dll => C:\Windows\SysWOW64\nvinit.dll [203072 2011-10-16] (NVIDIA Corporation) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files\McAfee Security Scan\3.8.141\SSScheduler.exe (McAfee, Inc.) Startup: C:\Users\Ive\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk ShortcutTarget: Dropbox.lnk -> C:\Users\Ive\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.) ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://search.conduit.com/?gd=&ctid=CT3315513&octid=EB_ORIGINAL_CTID&ISID=MD53C7329-7D6D-4E7A-8406-3011F027A099&SearchSource=55&CUI=&UM=5&UP=SP20F4524F-5D64-42F9-830A-5ADF048C1D25&SSPV= HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://acer.msn.com SearchScopes: HKCU - DefaultScope {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = hxxp://search.conduit.com/Results.aspx?gd=&ctid=CT3315513&octid=EB_ORIGINAL_CTID&ISID=MD53C7329-7D6D-4E7A-8406-3011F027A099&SearchSource=58&CUI=&UM=5&UP=SP20F4524F-5D64-42F9-830A-5ADF048C1D25&q={searchTerms}&SSPV= SearchScopes: HKCU - {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = hxxp://search.conduit.com/Results.aspx?gd=&ctid=CT3315513&octid=EB_ORIGINAL_CTID&ISID=MD53C7329-7D6D-4E7A-8406-3011F027A099&SearchSource=58&CUI=&UM=5&UP=SP20F4524F-5D64-42F9-830A-5ADF048C1D25&q={searchTerms}&SSPV= SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKCU - {E64A7B45-BA44-4FCD-831F-F5316BCBB0C8} URL = hxxp://websearch.ask.com/redirect?client=ie&tb=ORJ&o=&src=kw&q={searchTerms}&locale=&apn_ptnrs=U3&apn_dtid=OSJ000YYES&apn_uid=08DE7418-970D-43C2-800A-9680FEB3E05E&apn_sauid=7E2E0954-8E83-44FC-9095-3A246DEFCA9C SearchScopes: HKCU - {FFEBBF0A-C22C-4172-89FF-45215A135AC8} URL = hxxp://search.icq.com/search/results.php?q=%s&ch_id=hm&search_mode=web BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO: Skype add-on for Internet Explorer - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation) BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) BHO-x32: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files\McAfee Security Scan\3.8.141\McAfeeMSS_IE.dll (McAfee, Inc.) BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO-x32: Skype Browser Helper - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation) BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) BHO-x32: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.) BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.) Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation) Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation) Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies) Hosts: 193.197.62.198 vpn.uni-ulm.de ###Cisco AnyConnect VPN client modified this file. Please do not modify contents until this comment is removed. Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 82.212.62.62 78.42.43.62 FireFox: ======== FF ProfilePath: C:\Users\Ive\AppData\Roaming\Mozilla\Firefox\Profiles\eviitu5k.default FF SearchEngineOrder.1: Ask.com FF Homepage: hxxp://search.conduit.com/?gd=&ctid=CT3315513&octid=EB_ORIGINAL_CTID&ISID=MD53C7329-7D6D-4E7A-8406-3011F027A099&SearchSource=55&CUI=&UM=5&UP=SP20F4524F-5D64-42F9-830A-5ADF048C1D25&SSPV= FF NetworkProxy: "ftp", "72.64.146.136" FF NetworkProxy: "ftp_port", 43 FF NetworkProxy: "http", "72.64.146.136" FF NetworkProxy: "http_port", 43 FF NetworkProxy: "no_proxies_on", "localhost, 127.0.0.1, stealthy.co" FF NetworkProxy: "share_proxy_settings", true FF NetworkProxy: "socks", "72.64.146.136" FF NetworkProxy: "socks_port", 43 FF NetworkProxy: "ssl", "72.64.146.136" FF NetworkProxy: "ssl_port", 43 FF NetworkProxy: "type", 0 FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_13_0_0_206.dll () FF Plugin: @microsoft.com/GENUINE - disabled No File FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation) FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF Plugin: @videolan.org/vlc,version=2.0.2 - F:\vlc\npvlc.dll No File FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_206.dll () FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\SysWOW64\Adobe\Director\np32dsw_1168638.dll (Adobe Systems, Inc.) FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll () FF Plugin-x32: @java.com/DTPlugin,version=10.55.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=10.55.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @mcafee.com/McAfeeMssPlugin - C:\Program Files\McAfee Security Scan\3.8.141\npMcAfeeMss.dll (McAfee, Inc.) FF Plugin-x32: @microsoft.com/GENUINE - disabled No File FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~4\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~4\Office14\NPSPWRAP.DLL (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 - C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll () FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\Ive\AppData\Local\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.) FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\Ive\AppData\Local\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.) FF SearchPlugin: C:\Users\Ive\AppData\Roaming\Mozilla\Firefox\Profiles\eviitu5k.default\searchplugins\askcom.xml FF SearchPlugin: C:\Users\Ive\AppData\Roaming\Mozilla\Firefox\Profiles\eviitu5k.default\searchplugins\icq.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml FF Extension: ReminderFox - C:\Users\Ive\AppData\Roaming\Mozilla\Firefox\Profiles\eviitu5k.default\Extensions\{ada4b710-8346-4b82-8199-5de2b400a6ae} [2014-04-19] FF Extension: Ciuvo - C:\Users\Ive\AppData\Roaming\Mozilla\Firefox\Profiles\eviitu5k.default\Extensions\extension@ciuvo.com.xpi [2012-09-18] FF Extension: Stealthy - C:\Users\Ive\AppData\Roaming\Mozilla\Firefox\Profiles\eviitu5k.default\Extensions\stealthyextension@gmail.com.xpi [2013-01-27] FF Extension: Adblock Plus - C:\Users\Ive\AppData\Roaming\Mozilla\Firefox\Profiles\eviitu5k.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2012-09-18] FF Extension: No Name - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi [2014-04-30] Chrome: ======= CHR HomePage: CHR Extension: (SiteAdvisor) - C:\Users\Ive\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho [2012-09-18] CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2014-04-11] ==================== Services (Whitelisted) ================= R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440400 2014-05-06] (Avira Operations GmbH & Co. KG) R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440400 2014-05-06] (Avira Operations GmbH & Co. KG) R2 Avira.OE.ServiceHost; C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe [125008 2014-04-30] (Avira Operations GmbH & Co. KG) R2 BstHdAndroidSvc; C:\Program Files (x86)\BlueStacks\HD-Service.exe [402192 2013-12-20] (BlueStack Systems, Inc.) R2 BstHdLogRotatorSvc; C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe [385808 2013-12-20] (BlueStack Systems, Inc.) R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1390720 2014-04-11] (Microsoft Corporation) R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1764992 2014-04-11] (Microsoft Corporation) R2 CltMngSvc; C:\Program Files (x86)\SearchProtect\Main\bin\CltMngSvc.exe [2470688 2014-04-08] (Conduit) S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.8.141\McCHSvc.exe [289256 2014-01-16] (McAfee, Inc.) S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [340240 2011-05-02] () R2 NOBU; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [2804568 2010-06-02] (Symantec Corporation) R2 NTI IScheduleSvc; C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe [256832 2011-04-24] (NTI Corporation) R2 SpliCamService; C:\Program Files (x86)\SplitCam\SplitCamService.exe [311456 2013-10-23] (SplitCam Co.) R2 postgresql-x64-9.0; C:/Program Files (x86)/PostgreSQL/9.0/bin/pg_ctl.exe runservice -N "postgresql-x64-9.0" -D "C:/Program Files/PostgreSQL/9.0/data" -w [X] ==================== Drivers (Whitelisted) ==================== R3 automap; C:\Windows\System32\DRIVERS\automap.sys [18776 2012-04-19] (Focusrite Audio Engineering Limited) R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108440 2014-05-06] (Avira Operations GmbH & Co. KG) R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131576 2014-05-06] (Avira Operations GmbH & Co. KG) R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2014-05-06] (Avira Operations GmbH & Co. KG) R2 BstHdDrv; C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [114448 2013-12-20] (BlueStack Systems) R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2013-10-13] (DT Soft Ltd) S3 ffusb2audio; C:\Windows\System32\DRIVERS\ffusb2audio.sys [127280 2013-09-25] (Focusrite Audio Engineering Limited.) S3 NvnUsbAudio; C:\Windows\System32\DRIVERS\nvnusbaudio.sys [53552 2014-01-03] (Novation DMS Ltd.) R3 scvad_simple; C:\Windows\System32\drivers\SplitCamAudio.sys [23552 2013-04-24] (Windows (R) Win 7 DDK provider) R3 splitcam_hd_driver; C:\Windows\System32\DRIVERS\splitcam_hd_driver.sys [37496 2013-07-12] (Windows (R) Win 7 DDK provider) S3 vpnva; C:\Windows\System32\DRIVERS\vpnva64-6.sys [52080 2013-12-13] (Cisco Systems, Inc.) ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-05-09 09:13 - 2014-05-09 09:15 - 00025792 _____ () C:\Users\Ive\Downloads\FRST.txt 2014-05-09 09:13 - 2014-05-09 09:13 - 00000000 ____D () C:\FRST 2014-05-09 09:12 - 2014-05-09 09:12 - 02063872 _____ (Farbar) C:\Users\Ive\Downloads\FRST64.exe 2014-05-07 18:27 - 2014-05-07 18:27 - 00084720 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys 2014-05-07 11:08 - 2014-05-07 11:08 - 00000000 ____D () C:\Users\Ive\AppData\Roaming\Avira 2014-05-07 11:02 - 2014-05-06 19:49 - 00131576 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys 2014-05-07 11:02 - 2014-05-06 19:49 - 00108440 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys 2014-05-07 11:02 - 2014-05-06 19:49 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys 2014-05-07 00:19 - 2014-05-07 00:19 - 00000000 ___SD () C:\Windows\system32\CompatTel 2014-05-06 20:22 - 2014-04-14 04:24 - 00465408 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll 2014-05-06 20:22 - 2014-04-14 04:19 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll 2014-05-06 12:57 - 2014-05-06 12:57 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java 2014-05-06 12:57 - 2014-04-14 20:13 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll 2014-05-06 12:57 - 2014-04-14 20:05 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe 2014-05-06 12:57 - 2014-04-14 20:05 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe 2014-05-06 12:57 - 2014-04-14 20:04 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe 2014-05-06 12:56 - 2014-05-06 12:57 - 00004328 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_55-b14.log 2014-05-05 21:11 - 2014-05-05 21:14 - 397523882 _____ () C:\Users\Ive\Downloads\Guitar_Rig_5_510_PC.zip 2014-05-05 19:49 - 2014-05-05 19:49 - 00000000 ____D () C:\ProgramData\Package Cache 2014-05-05 19:48 - 2014-05-05 19:48 - 04530864 _____ (Avira Operations GmbH & Co. KG) C:\Users\Ive\Downloads\avira_de_av___ws.exe 2014-05-05 19:46 - 2014-05-07 11:02 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira 2014-05-05 19:46 - 2014-05-07 11:02 - 00000000 ____D () C:\ProgramData\Avira 2014-05-05 19:46 - 2014-05-07 11:02 - 00000000 ____D () C:\Program Files (x86)\Avira 2014-05-05 17:57 - 2014-05-08 13:56 - 00001244 _____ () C:\Users\Ive\Desktop\Focusrite USB 2.0 Audio Control Panel.lnk 2014-05-04 16:31 - 2014-05-04 16:31 - 00001015 _____ () C:\Users\Ive\Desktop\SplitCam.lnk 2014-05-04 16:31 - 2014-05-04 16:31 - 00000000 ____D () C:\Users\Ive\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SplitCam 2014-05-04 16:26 - 2013-04-24 10:45 - 00810496 _____ () C:\Windows\SysWOW64\xvidcore.dll 2014-05-04 16:26 - 2013-04-24 10:45 - 00183808 _____ () C:\Windows\SysWOW64\xvidvfw.dll 2014-05-04 16:26 - 2013-04-24 10:45 - 00080896 _____ () C:\Windows\SysWOW64\ff_vfw.dll 2014-05-04 16:26 - 2013-04-24 10:45 - 00000590 _____ () C:\Windows\SysWOW64\ff_vfw.dll.manifest 2014-05-04 16:24 - 2014-05-04 16:31 - 00000000 ____D () C:\Program Files (x86)\SplitCam 2014-05-04 16:24 - 2014-05-04 16:24 - 00000000 ____D () C:\Users\Ive\AppData\Local\SearchProtect 2014-05-04 16:24 - 2014-05-04 16:24 - 00000000 ____D () C:\Program Files (x86)\SearchProtect 2014-05-04 16:14 - 2014-05-04 16:15 - 74033640 _____ (SplitCam Co.) C:\Users\Ive\Downloads\nw_13504_splitcamsetupexe.exe 2014-05-04 16:14 - 2014-05-04 16:14 - 00613200 _____ (Chip Digital GmbH) C:\Users\Ive\Downloads\SplitCam - CHIP-Downloader(1).exe 2014-05-04 16:13 - 2014-05-04 16:13 - 00613200 _____ (Chip Digital GmbH) C:\Users\Ive\Downloads\SplitCam - CHIP-Downloader.exe 2014-05-04 13:35 - 2014-05-04 13:35 - 00000761 _____ () C:\Users\Ive\Desktop\Ableton Live 9 Lite (2).lnk 2014-05-04 13:34 - 2014-05-04 13:34 - 00000761 _____ () C:\Users\Ive\Desktop\Ableton Live 9 Lite.lnk 2014-05-04 13:32 - 2014-05-04 13:33 - 00000000 ____D () C:\Users\Ive\Desktop\cubasezeuch 2014-05-03 17:43 - 2014-04-29 16:01 - 23547904 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-05-03 17:43 - 2014-04-29 15:40 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-05-03 17:43 - 2014-04-29 14:48 - 17384448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2014-05-03 17:43 - 2014-04-29 14:34 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2014-05-03 17:02 - 2014-05-04 12:18 - 00000000 ____D () C:\Users\Ive\Documents\Ableton 2014-05-03 17:00 - 2014-05-03 17:08 - 00000000 ____D () C:\Users\Ive\AppData\Roaming\Ableton 2014-05-03 17:00 - 2014-05-03 17:00 - 00000000 ____D () C:\Program Files\Common Files\Propellerhead Software 2014-05-03 16:58 - 2014-05-03 16:58 - 00000761 _____ () C:\Users\Ive\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ableton Live 9 Lite.lnk 2014-05-03 16:16 - 2014-05-03 16:20 - 739524724 _____ () C:\Users\Ive\Downloads\ableton_live_lite_9.1.2_64.zip 2014-05-03 15:59 - 2014-05-03 16:08 - 954359199 _____ () C:\Users\Ive\Downloads\LOOPMASTERS_EXCITE_PACK2014.zip 2014-05-03 15:59 - 2014-05-03 15:59 - 01621480 _____ (Novation ) C:\Users\Ive\Downloads\bassstation-2.0(1).exe 2014-05-03 15:58 - 2014-05-03 15:58 - 01621480 _____ (Novation ) C:\Users\Ive\Downloads\bassstation-2.0.exe 2014-05-03 15:01 - 2014-05-03 15:01 - 00000000 ____D () C:\Users\Ive\AppData\Local\Novation 2014-05-03 14:59 - 2014-05-03 15:58 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Novation 2014-05-03 14:59 - 2014-05-03 15:58 - 00000000 ____D () C:\Program Files (x86)\Novation 2014-05-03 14:59 - 2014-05-03 14:59 - 00000000 ____D () C:\ProgramData\Propellerhead Software 2014-05-03 14:59 - 2014-05-03 14:59 - 00000000 ____D () C:\Program Files\Novation 2014-05-03 14:59 - 2014-01-03 12:22 - 00053552 _____ (Novation DMS Ltd.) C:\Windows\system32\Drivers\nvnusbaudio.sys 2014-05-03 14:59 - 2014-01-03 12:22 - 00021808 _____ (Novation DMS Ltd.) C:\Windows\system32\nvnusbaudio_coinst.dll 2014-05-03 14:59 - 2012-04-19 11:31 - 00018776 _____ (Focusrite Audio Engineering Limited) C:\Windows\system32\Drivers\automap.sys 2014-05-03 14:58 - 2014-05-03 14:58 - 28130144 _____ (Focusrite Audio Engineering Ltd. ) C:\Users\Ive\Downloads\automap-4.8.exe 2014-05-03 14:21 - 2014-05-03 16:08 - 00000000 ____D () C:\Program Files (x86)\VSTPlugIns 2014-05-03 14:21 - 2014-05-03 14:21 - 03491288 _____ (Focusrite ) C:\Users\Ive\Downloads\scarlett-plug-in-suite-1.5.exe 2014-05-03 14:21 - 2014-05-03 14:21 - 00000000 ____D () C:\Program Files (x86)\Focusrite 2014-05-03 11:11 - 2014-05-03 11:11 - 00000000 ____D () C:\Program Files\DIFX 2014-05-03 11:10 - 2014-05-03 14:21 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Focusrite 2014-05-03 11:10 - 2014-05-03 11:10 - 00000000 ____D () C:\Program Files\Focusrite 2014-05-03 11:10 - 2013-09-25 14:41 - 00022832 _____ (Focusrite Audio Engineering Limited.) C:\Windows\system32\ffusb2audio_coinst.dll 2014-05-03 11:10 - 2013-09-25 14:40 - 00127280 _____ (Focusrite Audio Engineering Limited.) C:\Windows\system32\Drivers\ffusb2audio.sys 2014-05-03 11:08 - 2014-05-03 11:08 - 00929768 _____ (Focusrite Audio Engineering Limited. ) C:\Users\Ive\Downloads\focusrite-usb-2-driver-2.5.1.exe 2014-04-30 12:09 - 2014-04-30 12:09 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox 2014-04-28 20:07 - 2014-04-28 20:07 - 17931952 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe 2014-04-22 20:31 - 2014-04-22 20:31 - 00000000 __SHD () C:\Users\Ive\AppData\Local\EmieUserList 2014-04-22 20:31 - 2014-04-22 20:31 - 00000000 __SHD () C:\Users\Ive\AppData\Local\EmieSiteList 2014-04-22 08:09 - 2014-03-06 11:31 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2014-04-22 08:09 - 2014-03-06 10:59 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2014-04-22 08:09 - 2014-03-06 10:57 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2014-04-22 08:09 - 2014-03-06 10:57 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2014-04-22 08:09 - 2014-03-06 10:53 - 02767360 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2014-04-22 08:09 - 2014-03-06 10:40 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2014-04-22 08:09 - 2014-03-06 10:39 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2014-04-22 08:09 - 2014-03-06 10:32 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2014-04-22 08:09 - 2014-03-06 10:29 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2014-04-22 08:09 - 2014-03-06 10:29 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2014-04-22 08:09 - 2014-03-06 10:28 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2014-04-22 08:09 - 2014-03-06 10:15 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2014-04-22 08:09 - 2014-03-06 10:11 - 05784064 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2014-04-22 08:09 - 2014-03-06 10:09 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2014-04-22 08:09 - 2014-03-06 10:03 - 00586240 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2014-04-22 08:09 - 2014-03-06 10:02 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2014-04-22 08:09 - 2014-03-06 10:02 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2014-04-22 08:09 - 2014-03-06 10:01 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2014-04-22 08:09 - 2014-03-06 09:56 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2014-04-22 08:09 - 2014-03-06 09:48 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2014-04-22 08:09 - 2014-03-06 09:47 - 02178048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2014-04-22 08:09 - 2014-03-06 09:46 - 04254720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2014-04-22 08:09 - 2014-03-06 09:46 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2014-04-22 08:09 - 2014-03-06 09:45 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2014-04-22 08:09 - 2014-03-06 09:42 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2014-04-22 08:09 - 2014-03-06 09:40 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2014-04-22 08:09 - 2014-03-06 09:38 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2014-04-22 08:09 - 2014-03-06 09:36 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2014-04-22 08:09 - 2014-03-06 09:22 - 00367616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2014-04-22 08:09 - 2014-03-06 09:21 - 00628736 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2014-04-22 08:09 - 2014-03-06 09:13 - 00032256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2014-04-22 08:09 - 2014-03-06 09:11 - 02043904 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2014-04-22 08:09 - 2014-03-06 09:07 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2014-04-22 08:09 - 2014-03-06 09:01 - 00244224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2014-04-22 08:09 - 2014-03-06 08:53 - 13551104 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2014-04-22 08:09 - 2014-03-06 08:46 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2014-04-22 08:09 - 2014-03-06 08:40 - 01967104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2014-04-22 08:09 - 2014-03-06 08:36 - 11745792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2014-04-22 08:09 - 2014-03-06 08:22 - 02260480 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2014-04-22 08:09 - 2014-03-06 07:58 - 01400832 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2014-04-22 08:09 - 2014-03-06 07:50 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2014-04-22 08:09 - 2014-03-06 07:43 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2014-04-22 08:09 - 2014-03-06 07:41 - 01789440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2014-04-22 08:09 - 2014-03-06 07:36 - 01143808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2014-04-17 23:42 - 2014-04-17 23:42 - 00001048 _____ () C:\Users\Public\Desktop\Guitar Rig 5.lnk 2014-04-17 23:42 - 2014-04-17 23:42 - 00000000 __HDC () C:\ProgramData\{B7072B15-6E80-42FF-A9AE-4E62AF2B2418} 2014-04-17 23:41 - 2014-04-17 23:41 - 00000000 __HDC () C:\ProgramData\{95B4F0ED-951F-4D36-B068-5EC1C4C19C14} 2014-04-17 23:41 - 2014-04-17 23:41 - 00000000 __HDC () C:\ProgramData\{30FA7941-4170-4C83-A9A8-FDF01C431704} 2014-04-17 23:29 - 2014-04-17 23:29 - 00000000 __HDC () C:\ProgramData\{ACEB5C90-39F7-4044-91EF-FBD59A59D240} 2014-04-17 23:24 - 2014-04-17 23:24 - 00000000 ____D () C:\Users\Ive\Desktop\Native.Instruments.Guitar.Rig.5.Pro+Update v5.1.1.UNLOCKED-R2R 2014-04-17 23:11 - 2014-04-17 23:11 - 00000000 ____D () C:\Users\Ive\Desktop\DYNAMiCS-WiN 2014-04-17 22:48 - 2014-04-17 22:48 - 00000000 __HDC () C:\ProgramData\{AB38F02B-C891-457C-B8C8-DA9D96EFA317} 2014-04-17 22:48 - 2014-04-17 22:48 - 00000000 __HDC () C:\ProgramData\{27D02406-6F0F-419F-AF2F-A4EE19D2E463} 2014-04-17 22:45 - 2014-04-17 22:45 - 00000000 __HDC () C:\ProgramData\{91377244-4B4E-4A81-9F72-FA41DECB3D8F} 2014-04-17 22:45 - 2014-04-17 22:45 - 00000000 ____D () C:\Users\Public\Documents\Scarbee Vintage Keys Library 2014-04-17 22:44 - 2014-04-17 22:45 - 00000000 ____D () C:\Users\Public\Documents\Upright Piano Library 2014-04-17 22:44 - 2014-04-17 22:44 - 00000000 __HDC () C:\ProgramData\{F2026C51-8509-47B4-816D-CCD2DB993FC1} 2014-04-17 22:40 - 2014-04-17 23:18 - 00000000 ____D () C:\Users\Public\Documents\Scarbee MM-Bass Library 2014-04-17 22:40 - 2014-04-17 22:40 - 00000000 __HDC () C:\ProgramData\{DFB8047B-FF22-438D-90BD-83E8B78F83D7} 2014-04-17 22:39 - 2014-04-17 22:39 - 00000000 __HDC () C:\ProgramData\{68233086-CF7D-452D-8519-A7815257EC6B} 2014-04-17 22:39 - 2014-04-17 22:39 - 00000000 ____D () C:\Users\Public\Documents\New York Concert Grand Library 2014-04-17 22:37 - 2014-04-17 22:38 - 00000000 ____D () C:\Users\Public\Documents\Berlin Concert Grand Library 2014-04-17 22:36 - 2014-04-17 22:36 - 00000000 __HDC () C:\ProgramData\{80A0A482-175E-4DE8-9D32-C8C8463D1362} 2014-04-17 22:34 - 2014-04-17 22:36 - 00000000 ____D () C:\Users\Public\Documents\Vintage Organs Library 2014-04-17 22:33 - 2014-04-17 22:34 - 00000000 __HDC () C:\ProgramData\{35B46D49-85E2-40EA-8EC6-43B281EDD8E7} 2014-04-17 22:16 - 2014-04-17 22:17 - 00000000 ____D () C:\Users\Public\Documents\Kontakt Factory Library 2014-04-17 22:16 - 2014-04-17 22:16 - 00000000 __HDC () C:\ProgramData\{E9CDB61C-771D-42BB-B441-4CA7622ACA52} 2014-04-17 22:04 - 2014-04-17 22:09 - 00000000 ____D () C:\Users\Public\Documents\Battery 3 Library 2014-04-17 22:03 - 2014-04-17 22:03 - 00000000 __HDC () C:\ProgramData\{CA03436C-933D-4ADA-9E89-2C39CC03E904} 2014-04-17 22:03 - 2014-04-17 22:03 - 00000000 __HDC () C:\ProgramData\{588D017F-D30B-4C08-8A10-1FEF7D039369} 2014-04-17 22:03 - 2014-04-17 22:03 - 00000000 __HDC () C:\ProgramData\{0A583E76-A7A0-45F8-9386-AEE1E529A4DE} 2014-04-17 22:03 - 2014-04-17 22:03 - 00000000 ____D () C:\Users\Public\Documents\The Finger R2 2014-04-17 22:03 - 2014-04-17 22:03 - 00000000 ____D () C:\Users\Public\Documents\Reflektor Library 2014-04-17 22:03 - 2014-04-17 22:03 - 00000000 ____D () C:\Users\Public\Documents\Reaktor Spark R2 2014-04-17 22:02 - 2014-04-17 22:02 - 00000000 __HDC () C:\ProgramData\{DC597CF0-DB39-40C2-9F8C-CF9D0A386548} 2014-04-17 22:02 - 2014-04-17 22:02 - 00000000 __HDC () C:\ProgramData\{D04E7E60-5F77-4E61-9CD4-7AEC5E15C525} 2014-04-17 22:02 - 2014-04-17 22:02 - 00000000 __HDC () C:\ProgramData\{B0DF9098-245E-479F-A4ED-B5F91EA4948B} 2014-04-17 22:02 - 2014-04-17 22:02 - 00000000 __HDC () C:\ProgramData\{6E467D89-1963-440B-84F9-852C8150E323} 2014-04-17 22:02 - 2014-04-17 22:02 - 00000000 __HDC () C:\ProgramData\{3DFBC806-D62A-4312-81FF-5F343DDCB5DC} 2014-04-17 22:02 - 2014-04-17 22:02 - 00000000 ____D () C:\Users\Public\Documents\Transient Master 2014-04-17 22:02 - 2014-04-17 22:02 - 00000000 ____D () C:\Users\Public\Documents\Traktors 12 2014-04-17 22:02 - 2014-04-17 22:02 - 00000000 ____D () C:\Users\Public\Documents\Reaktor Prism 2014-04-17 22:02 - 2014-04-17 22:02 - 00000000 ____D () C:\Users\Public\Documents\Rammfire 2014-04-17 22:02 - 2014-04-17 22:02 - 00000000 ____D () C:\Users\Public\Documents\Battery Library Importer for Maschine 2014-04-17 22:01 - 2014-04-17 22:01 - 00000000 __HDC () C:\ProgramData\{DE181BBE-2522-484E-A620-BDCFB298DC87} 2014-04-17 21:56 - 2014-04-17 21:56 - 00000000 __HDC () C:\ProgramData\{E26B3878-7CEC-469C-B449-5CAA336DF8CD} 2014-04-17 21:48 - 2014-04-17 21:48 - 00000000 __HDC () C:\ProgramData\{3006A797-CDFA-44FC-98EF-155579E2CDBF} 2014-04-17 21:47 - 2014-04-17 21:47 - 00000000 __HDC () C:\ProgramData\{C2A88E6D-FA3D-462B-BDFF-A09B1EFA8FBE} 2014-04-17 21:42 - 2014-04-17 23:41 - 00000000 ____D () C:\Program Files\Common Files\Native Instruments 2014-04-17 21:38 - 2014-04-17 23:46 - 00000000 ____D () C:\Program Files\Native Instruments 2014-04-17 21:38 - 2014-04-17 23:41 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Native Instruments 2014-04-17 21:38 - 2014-04-17 23:36 - 00000000 ____D () C:\ProgramData\Native Instruments 2014-04-17 21:20 - 2009-10-11 21:58 - 01177600 _____ (AD) C:\Windows\SysWOW64\SYNSOEMU.DLL 2014-04-17 21:18 - 2014-04-17 21:18 - 00000000 ____D () C:\ProgramData\VST3 Presets 2014-04-17 21:12 - 2014-04-17 21:12 - 00000000 ____D () C:\Users\Ive\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steinberg HALionOne 2014-04-17 21:12 - 2014-04-17 21:12 - 00000000 ____D () C:\ProgramData\Steinberg 2014-04-17 21:11 - 2014-04-17 21:11 - 00002134 _____ () C:\Users\Ive\Desktop\Cubase 5.lnk 2014-04-17 21:10 - 2014-04-17 21:22 - 00000000 ____D () C:\Users\Ive\AppData\Roaming\Steinberg 2014-04-17 21:10 - 2014-04-17 21:19 - 00000000 ____D () C:\Users\Ive\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steinberg Cubase 5 2014-04-17 21:10 - 2014-04-17 21:11 - 00000000 ____D () C:\Program Files (x86)\Steinberg 2014-04-11 09:45 - 2014-04-11 09:45 - 00005233 _____ () C:\Users\Ive\Downloads\aimpsoundoutbpm.zip 2014-04-10 19:14 - 2014-04-10 19:14 - 00000358 _____ () C:\Users\Ive\Downloads\unbenannt(3) 2014-04-10 10:47 - 2014-03-04 11:44 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll 2014-04-10 10:47 - 2014-03-04 11:44 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll 2014-04-10 10:47 - 2014-03-04 11:44 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll 2014-04-10 10:47 - 2014-03-04 11:44 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll 2014-04-10 10:47 - 2014-03-04 11:44 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll 2014-04-10 10:47 - 2014-03-04 11:17 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll 2014-04-10 10:47 - 2014-03-04 11:16 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll 2014-04-10 10:47 - 2014-03-04 11:16 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe 2014-04-10 10:47 - 2014-03-04 11:16 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll 2014-04-10 10:47 - 2014-03-04 10:09 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe 2014-04-10 10:47 - 2014-03-04 10:09 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe 2014-04-10 10:47 - 2014-02-04 04:35 - 00274880 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msiscsi.sys 2014-04-10 10:47 - 2014-02-04 04:35 - 00190912 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys 2014-04-10 10:47 - 2014-02-04 04:35 - 00027584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Diskdump.sys 2014-04-10 10:47 - 2014-02-04 04:28 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\iologmsg.dll 2014-04-10 10:47 - 2014-02-04 04:00 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iologmsg.dll 2014-04-10 10:47 - 2014-01-24 04:37 - 01684928 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys ==================== One Month Modified Files and Folders ======= 2014-05-09 09:15 - 2014-05-09 09:13 - 00025792 _____ () C:\Users\Ive\Downloads\FRST.txt 2014-05-09 09:13 - 2014-05-09 09:13 - 00000000 ____D () C:\FRST 2014-05-09 09:12 - 2014-05-09 09:12 - 02063872 _____ (Farbar) C:\Users\Ive\Downloads\FRST64.exe 2014-05-09 09:07 - 2012-09-18 18:35 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job 2014-05-09 08:47 - 2013-11-26 12:29 - 00000514 _____ () C:\Windows\Tasks\MATLAB R2013b Startup Accelerator.job 2014-05-09 08:47 - 2009-07-14 06:45 - 00016976 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-05-09 08:47 - 2009-07-14 06:45 - 00016976 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-05-09 08:44 - 2012-02-15 01:02 - 01958525 _____ () C:\Windows\WindowsUpdate.log 2014-05-09 08:40 - 2013-10-17 18:02 - 00000000 ____D () C:\Users\Ive\AppData\Local\LogMeIn Hamachi 2014-05-09 08:39 - 2013-03-31 20:29 - 00000000 ____D () C:\Users\Ive\AppData\Roaming\Dropbox 2014-05-09 08:39 - 2012-09-18 01:28 - 00000000 ____D () C:\ProgramData\clear.fi 2014-05-09 08:38 - 2013-03-31 20:34 - 00000000 ___RD () C:\Users\Ive\Dropbox 2014-05-09 08:37 - 2012-09-18 17:26 - 00001112 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2813519919-2714014398-3896331259-1001UA.job 2014-05-09 08:36 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2014-05-09 08:36 - 2009-07-14 06:51 - 00155502 _____ () C:\Windows\setupact.log 2014-05-08 15:37 - 2012-09-18 17:26 - 00001060 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2813519919-2714014398-3896331259-1001Core.job 2014-05-08 15:32 - 2012-09-18 17:26 - 00004078 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2813519919-2714014398-3896331259-1001UA 2014-05-08 15:32 - 2012-09-18 17:26 - 00003682 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2813519919-2714014398-3896331259-1001Core 2014-05-08 13:56 - 2014-05-05 17:57 - 00001244 _____ () C:\Users\Ive\Desktop\Focusrite USB 2.0 Audio Control Panel.lnk 2014-05-08 13:56 - 2014-03-03 05:08 - 00092672 ___SH () C:\Users\Ive\Desktop\Thumbs.db 2014-05-07 18:27 - 2014-05-07 18:27 - 00084720 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys 2014-05-07 18:25 - 2010-11-21 05:47 - 00334566 _____ () C:\Windows\PFRO.log 2014-05-07 11:08 - 2014-05-07 11:08 - 00000000 ____D () C:\Users\Ive\AppData\Roaming\Avira 2014-05-07 11:02 - 2014-05-05 19:46 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira 2014-05-07 11:02 - 2014-05-05 19:46 - 00000000 ____D () C:\ProgramData\Avira 2014-05-07 11:02 - 2014-05-05 19:46 - 00000000 ____D () C:\Program Files (x86)\Avira 2014-05-07 11:01 - 2014-04-03 05:55 - 00000000 ____D () C:\Program Files (x86)\Opera 2014-05-07 00:19 - 2014-05-07 00:19 - 00000000 ___SD () C:\Windows\system32\CompatTel 2014-05-07 00:18 - 2012-09-17 16:38 - 00000000 ____D () C:\Users\Ive\AppData\Roaming\Skype 2014-05-06 19:49 - 2014-05-07 11:02 - 00131576 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys 2014-05-06 19:49 - 2014-05-07 11:02 - 00108440 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys 2014-05-06 19:49 - 2014-05-07 11:02 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys 2014-05-06 13:01 - 2013-11-15 02:10 - 00000000 ____D () C:\ProgramData\Oracle 2014-05-06 12:57 - 2014-05-06 12:57 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java 2014-05-06 12:57 - 2014-05-06 12:56 - 00004328 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_55-b14.log 2014-05-06 12:57 - 2013-02-15 14:41 - 00000000 ____D () C:\Program Files (x86)\Java 2014-05-05 21:14 - 2014-05-05 21:11 - 397523882 _____ () C:\Users\Ive\Downloads\Guitar_Rig_5_510_PC.zip 2014-05-05 19:49 - 2014-05-05 19:49 - 00000000 ____D () C:\ProgramData\Package Cache 2014-05-05 19:48 - 2014-05-05 19:48 - 04530864 _____ (Avira Operations GmbH & Co. KG) C:\Users\Ive\Downloads\avira_de_av___ws.exe 2014-05-04 16:31 - 2014-05-04 16:31 - 00001015 _____ () C:\Users\Ive\Desktop\SplitCam.lnk 2014-05-04 16:31 - 2014-05-04 16:31 - 00000000 ____D () C:\Users\Ive\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SplitCam 2014-05-04 16:31 - 2014-05-04 16:24 - 00000000 ____D () C:\Program Files (x86)\SplitCam 2014-05-04 16:24 - 2014-05-04 16:24 - 00000000 ____D () C:\Users\Ive\AppData\Local\SearchProtect 2014-05-04 16:24 - 2014-05-04 16:24 - 00000000 ____D () C:\Program Files (x86)\SearchProtect 2014-05-04 16:15 - 2014-05-04 16:14 - 74033640 _____ (SplitCam Co.) C:\Users\Ive\Downloads\nw_13504_splitcamsetupexe.exe 2014-05-04 16:14 - 2014-05-04 16:14 - 00613200 _____ (Chip Digital GmbH) C:\Users\Ive\Downloads\SplitCam - CHIP-Downloader(1).exe 2014-05-04 16:13 - 2014-05-04 16:13 - 00613200 _____ (Chip Digital GmbH) C:\Users\Ive\Downloads\SplitCam - CHIP-Downloader.exe 2014-05-04 13:35 - 2014-05-04 13:35 - 00000761 _____ () C:\Users\Ive\Desktop\Ableton Live 9 Lite (2).lnk 2014-05-04 13:34 - 2014-05-04 13:34 - 00000761 _____ () C:\Users\Ive\Desktop\Ableton Live 9 Lite.lnk 2014-05-04 13:33 - 2014-05-04 13:32 - 00000000 ____D () C:\Users\Ive\Desktop\cubasezeuch 2014-05-04 12:18 - 2014-05-03 17:02 - 00000000 ____D () C:\Users\Ive\Documents\Ableton 2014-05-03 23:00 - 2013-01-30 14:32 - 00000000 ____D () C:\Users\postgres 2014-05-03 17:08 - 2014-05-03 17:00 - 00000000 ____D () C:\Users\Ive\AppData\Roaming\Ableton 2014-05-03 17:00 - 2014-05-03 17:00 - 00000000 ____D () C:\Program Files\Common Files\Propellerhead Software 2014-05-03 16:58 - 2014-05-03 16:58 - 00000761 _____ () C:\Users\Ive\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ableton Live 9 Lite.lnk 2014-05-03 16:20 - 2014-05-03 16:16 - 739524724 _____ () C:\Users\Ive\Downloads\ableton_live_lite_9.1.2_64.zip 2014-05-03 16:08 - 2014-05-03 15:59 - 954359199 _____ () C:\Users\Ive\Downloads\LOOPMASTERS_EXCITE_PACK2014.zip 2014-05-03 16:08 - 2014-05-03 14:21 - 00000000 ____D () C:\Program Files (x86)\VSTPlugIns 2014-05-03 15:59 - 2014-05-03 15:59 - 01621480 _____ (Novation ) C:\Users\Ive\Downloads\bassstation-2.0(1).exe 2014-05-03 15:58 - 2014-05-03 15:58 - 01621480 _____ (Novation ) C:\Users\Ive\Downloads\bassstation-2.0.exe 2014-05-03 15:58 - 2014-05-03 14:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Novation 2014-05-03 15:58 - 2014-05-03 14:59 - 00000000 ____D () C:\Program Files (x86)\Novation 2014-05-03 15:01 - 2014-05-03 15:01 - 00000000 ____D () C:\Users\Ive\AppData\Local\Novation 2014-05-03 14:59 - 2014-05-03 14:59 - 00000000 ____D () C:\ProgramData\Propellerhead Software 2014-05-03 14:59 - 2014-05-03 14:59 - 00000000 ____D () C:\Program Files\Novation 2014-05-03 14:58 - 2014-05-03 14:58 - 28130144 _____ (Focusrite Audio Engineering Ltd. ) C:\Users\Ive\Downloads\automap-4.8.exe 2014-05-03 14:21 - 2014-05-03 14:21 - 03491288 _____ (Focusrite ) C:\Users\Ive\Downloads\scarlett-plug-in-suite-1.5.exe 2014-05-03 14:21 - 2014-05-03 14:21 - 00000000 ____D () C:\Program Files (x86)\Focusrite 2014-05-03 14:21 - 2014-05-03 11:10 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Focusrite 2014-05-03 11:38 - 2013-09-29 17:42 - 00000000 ____D () C:\Users\Ive\AppData\Roaming\Audacity 2014-05-03 11:11 - 2014-05-03 11:11 - 00000000 ____D () C:\Program Files\DIFX 2014-05-03 11:11 - 2012-02-15 01:14 - 00017758 _____ () C:\Windows\DPINST.LOG 2014-05-03 11:10 - 2014-05-03 11:10 - 00000000 ____D () C:\Program Files\Focusrite 2014-05-03 11:08 - 2014-05-03 11:08 - 00929768 _____ (Focusrite Audio Engineering Limited. ) C:\Users\Ive\Downloads\focusrite-usb-2-driver-2.5.1.exe 2014-05-01 22:00 - 2012-09-23 19:12 - 00000000 ____D () C:\Users\Ive\AppData\Roaming\vlc 2014-05-01 04:00 - 2012-09-18 17:32 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service 2014-04-30 12:09 - 2014-04-30 12:09 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox 2014-04-29 16:01 - 2014-05-03 17:43 - 23547904 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-04-29 15:40 - 2014-05-03 17:43 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-04-29 14:48 - 2014-05-03 17:43 - 17384448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2014-04-29 14:34 - 2014-05-03 17:43 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2014-04-28 20:07 - 2014-04-28 20:07 - 17931952 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe 2014-04-28 20:07 - 2012-09-18 18:35 - 00692400 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2014-04-28 20:07 - 2012-09-18 18:35 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater 2014-04-28 20:07 - 2011-10-14 06:45 - 00070832 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2014-04-27 19:22 - 2011-10-14 06:26 - 00000000 ___RD () C:\Program Files (x86)\Skype 2014-04-25 22:06 - 2012-10-16 10:33 - 00000000 ____D () C:\Users\Ive\AppData\Roaming\AIMP3 2014-04-23 13:47 - 2012-02-15 09:55 - 01661644 _____ () C:\Windows\system32\perfh007.dat 2014-04-23 13:47 - 2012-02-15 09:55 - 00457854 _____ () C:\Windows\system32\perfc007.dat 2014-04-23 13:47 - 2009-07-14 07:13 - 00006500 _____ () C:\Windows\system32\PerfStringBackup.INI 2014-04-22 20:31 - 2014-04-22 20:31 - 00000000 __SHD () C:\Users\Ive\AppData\Local\EmieUserList 2014-04-22 20:31 - 2014-04-22 20:31 - 00000000 __SHD () C:\Users\Ive\AppData\Local\EmieSiteList 2014-04-22 09:20 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\PolicyDefinitions 2014-04-20 19:25 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\NDF 2014-04-17 23:46 - 2014-04-17 21:38 - 00000000 ____D () C:\Program Files\Native Instruments 2014-04-17 23:45 - 2013-01-16 13:11 - 00000000 ____D () C:\Users\Ive\Documents\Native Instruments 2014-04-17 23:45 - 2013-01-16 13:11 - 00000000 ____D () C:\Users\Ive\AppData\Local\Native Instruments 2014-04-17 23:42 - 2014-04-17 23:42 - 00001048 _____ () C:\Users\Public\Desktop\Guitar Rig 5.lnk 2014-04-17 23:42 - 2014-04-17 23:42 - 00000000 __HDC () C:\ProgramData\{B7072B15-6E80-42FF-A9AE-4E62AF2B2418} 2014-04-17 23:41 - 2014-04-17 23:41 - 00000000 __HDC () C:\ProgramData\{95B4F0ED-951F-4D36-B068-5EC1C4C19C14} 2014-04-17 23:41 - 2014-04-17 23:41 - 00000000 __HDC () C:\ProgramData\{30FA7941-4170-4C83-A9A8-FDF01C431704} 2014-04-17 23:41 - 2014-04-17 21:42 - 00000000 ____D () C:\Program Files\Common Files\Native Instruments 2014-04-17 23:41 - 2014-04-17 21:38 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Native Instruments 2014-04-17 23:36 - 2014-04-17 21:38 - 00000000 ____D () C:\ProgramData\Native Instruments 2014-04-17 23:29 - 2014-04-17 23:29 - 00000000 __HDC () C:\ProgramData\{ACEB5C90-39F7-4044-91EF-FBD59A59D240} 2014-04-17 23:24 - 2014-04-17 23:24 - 00000000 ____D () C:\Users\Ive\Desktop\Native.Instruments.Guitar.Rig.5.Pro+Update v5.1.1.UNLOCKED-R2R 2014-04-17 23:18 - 2014-04-17 22:40 - 00000000 ____D () C:\Users\Public\Documents\Scarbee MM-Bass Library 2014-04-17 23:11 - 2014-04-17 23:11 - 00000000 ____D () C:\Users\Ive\Desktop\DYNAMiCS-WiN 2014-04-17 22:48 - 2014-04-17 22:48 - 00000000 __HDC () C:\ProgramData\{AB38F02B-C891-457C-B8C8-DA9D96EFA317} 2014-04-17 22:48 - 2014-04-17 22:48 - 00000000 __HDC () C:\ProgramData\{27D02406-6F0F-419F-AF2F-A4EE19D2E463} 2014-04-17 22:45 - 2014-04-17 22:45 - 00000000 __HDC () C:\ProgramData\{91377244-4B4E-4A81-9F72-FA41DECB3D8F} 2014-04-17 22:45 - 2014-04-17 22:45 - 00000000 ____D () C:\Users\Public\Documents\Scarbee Vintage Keys Library 2014-04-17 22:45 - 2014-04-17 22:44 - 00000000 ____D () C:\Users\Public\Documents\Upright Piano Library 2014-04-17 22:44 - 2014-04-17 22:44 - 00000000 __HDC () C:\ProgramData\{F2026C51-8509-47B4-816D-CCD2DB993FC1} 2014-04-17 22:40 - 2014-04-17 22:40 - 00000000 __HDC () C:\ProgramData\{DFB8047B-FF22-438D-90BD-83E8B78F83D7} 2014-04-17 22:39 - 2014-04-17 22:39 - 00000000 __HDC () C:\ProgramData\{68233086-CF7D-452D-8519-A7815257EC6B} 2014-04-17 22:39 - 2014-04-17 22:39 - 00000000 ____D () C:\Users\Public\Documents\New York Concert Grand Library 2014-04-17 22:38 - 2014-04-17 22:37 - 00000000 ____D () C:\Users\Public\Documents\Berlin Concert Grand Library 2014-04-17 22:36 - 2014-04-17 22:36 - 00000000 __HDC () C:\ProgramData\{80A0A482-175E-4DE8-9D32-C8C8463D1362} 2014-04-17 22:36 - 2014-04-17 22:34 - 00000000 ____D () C:\Users\Public\Documents\Vintage Organs Library 2014-04-17 22:34 - 2014-04-17 22:33 - 00000000 __HDC () C:\ProgramData\{35B46D49-85E2-40EA-8EC6-43B281EDD8E7} 2014-04-17 22:17 - 2014-04-17 22:16 - 00000000 ____D () C:\Users\Public\Documents\Kontakt Factory Library 2014-04-17 22:16 - 2014-04-17 22:16 - 00000000 __HDC () C:\ProgramData\{E9CDB61C-771D-42BB-B441-4CA7622ACA52} 2014-04-17 22:09 - 2014-04-17 22:04 - 00000000 ____D () C:\Users\Public\Documents\Battery 3 Library 2014-04-17 22:03 - 2014-04-17 22:03 - 00000000 __HDC () C:\ProgramData\{CA03436C-933D-4ADA-9E89-2C39CC03E904} 2014-04-17 22:03 - 2014-04-17 22:03 - 00000000 __HDC () C:\ProgramData\{588D017F-D30B-4C08-8A10-1FEF7D039369} 2014-04-17 22:03 - 2014-04-17 22:03 - 00000000 __HDC () C:\ProgramData\{0A583E76-A7A0-45F8-9386-AEE1E529A4DE} 2014-04-17 22:03 - 2014-04-17 22:03 - 00000000 ____D () C:\Users\Public\Documents\The Finger R2 2014-04-17 22:03 - 2014-04-17 22:03 - 00000000 ____D () C:\Users\Public\Documents\Reflektor Library 2014-04-17 22:03 - 2014-04-17 22:03 - 00000000 ____D () C:\Users\Public\Documents\Reaktor Spark R2 2014-04-17 22:02 - 2014-04-17 22:02 - 00000000 __HDC () C:\ProgramData\{DC597CF0-DB39-40C2-9F8C-CF9D0A386548} 2014-04-17 22:02 - 2014-04-17 22:02 - 00000000 __HDC () C:\ProgramData\{D04E7E60-5F77-4E61-9CD4-7AEC5E15C525} 2014-04-17 22:02 - 2014-04-17 22:02 - 00000000 __HDC () C:\ProgramData\{B0DF9098-245E-479F-A4ED-B5F91EA4948B} 2014-04-17 22:02 - 2014-04-17 22:02 - 00000000 __HDC () C:\ProgramData\{6E467D89-1963-440B-84F9-852C8150E323} 2014-04-17 22:02 - 2014-04-17 22:02 - 00000000 __HDC () C:\ProgramData\{3DFBC806-D62A-4312-81FF-5F343DDCB5DC} 2014-04-17 22:02 - 2014-04-17 22:02 - 00000000 ____D () C:\Users\Public\Documents\Transient Master 2014-04-17 22:02 - 2014-04-17 22:02 - 00000000 ____D () C:\Users\Public\Documents\Traktors 12 2014-04-17 22:02 - 2014-04-17 22:02 - 00000000 ____D () C:\Users\Public\Documents\Reaktor Prism 2014-04-17 22:02 - 2014-04-17 22:02 - 00000000 ____D () C:\Users\Public\Documents\Rammfire 2014-04-17 22:02 - 2014-04-17 22:02 - 00000000 ____D () C:\Users\Public\Documents\Battery Library Importer for Maschine 2014-04-17 22:01 - 2014-04-17 22:01 - 00000000 __HDC () C:\ProgramData\{DE181BBE-2522-484E-A620-BDCFB298DC87} 2014-04-17 21:56 - 2014-04-17 21:56 - 00000000 __HDC () C:\ProgramData\{E26B3878-7CEC-469C-B449-5CAA336DF8CD} 2014-04-17 21:48 - 2014-04-17 21:48 - 00000000 __HDC () C:\ProgramData\{3006A797-CDFA-44FC-98EF-155579E2CDBF} 2014-04-17 21:47 - 2014-04-17 21:47 - 00000000 __HDC () C:\ProgramData\{C2A88E6D-FA3D-462B-BDFF-A09B1EFA8FBE} 2014-04-17 21:22 - 2014-04-17 21:10 - 00000000 ____D () C:\Users\Ive\AppData\Roaming\Steinberg 2014-04-17 21:19 - 2014-04-17 21:10 - 00000000 ____D () C:\Users\Ive\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steinberg Cubase 5 2014-04-17 21:18 - 2014-04-17 21:18 - 00000000 ____D () C:\ProgramData\VST3 Presets 2014-04-17 21:12 - 2014-04-17 21:12 - 00000000 ____D () C:\Users\Ive\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steinberg HALionOne 2014-04-17 21:12 - 2014-04-17 21:12 - 00000000 ____D () C:\ProgramData\Steinberg 2014-04-17 21:11 - 2014-04-17 21:11 - 00002134 _____ () C:\Users\Ive\Desktop\Cubase 5.lnk 2014-04-17 21:11 - 2014-04-17 21:10 - 00000000 ____D () C:\Program Files (x86)\Steinberg 2014-04-15 17:26 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache 2014-04-14 20:13 - 2014-05-06 12:57 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll 2014-04-14 20:05 - 2014-05-06 12:57 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe 2014-04-14 20:05 - 2014-05-06 12:57 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe 2014-04-14 20:04 - 2014-05-06 12:57 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe 2014-04-14 04:24 - 2014-05-06 20:22 - 00465408 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll 2014-04-14 04:19 - 2014-05-06 20:22 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll 2014-04-11 09:45 - 2014-04-11 09:45 - 00005233 _____ () C:\Users\Ive\Downloads\aimpsoundoutbpm.zip 2014-04-10 19:14 - 2014-04-10 19:14 - 00000358 _____ () C:\Users\Ive\Downloads\unbenannt(3) 2014-04-10 17:39 - 2012-10-30 15:06 - 00000000 ____D () C:\ProgramData\Microsoft Help 2014-04-09 20:10 - 2013-12-25 16:31 - 00000000 ____D () C:\Users\Ive\AppData\Roaming\BitTorrent Some content of TEMP: ==================== C:\Users\Ive\AppData\Local\Temp\AskSLib.dll C:\Users\Ive\AppData\Local\Temp\avgnt.exe C:\Users\Ive\AppData\Local\Temp\fp_pl_pfs_installer-1.exe C:\Users\Ive\AppData\Local\Temp\fp_pl_pfs_installer.exe C:\Users\Ive\AppData\Local\Temp\icqsetup.exe C:\Users\Ive\AppData\Local\Temp\install_flashplayer11x32_mssa_aih.exe C:\Users\Ive\AppData\Local\Temp\install_reader10_de_mssd_aih.exe C:\Users\Ive\AppData\Local\Temp\jre-7u13-windows-i586-iftw.exe C:\Users\Ive\AppData\Local\Temp\jre-7u17-windows-i586-iftw.exe C:\Users\Ive\AppData\Local\Temp\jre-7u21-windows-i586-iftw.exe C:\Users\Ive\AppData\Local\Temp\jre-7u25-windows-i586-iftw.exe C:\Users\Ive\AppData\Local\Temp\jre-7u45-windows-i586-iftw.exe C:\Users\Ive\AppData\Local\Temp\jre-7u51-windows-i586-iftw.exe C:\Users\Ive\AppData\Local\Temp\jre-7u55-windows-i586-iftw.exe C:\Users\Ive\AppData\Local\Temp\nsg3D97.exe C:\Users\Ive\AppData\Local\Temp\nsgE1DC.exe C:\Users\Ive\AppData\Local\Temp\nsqDA7B.exe C:\Users\Ive\AppData\Local\Temp\nsr376F.exe C:\Users\Ive\AppData\Local\Temp\nsw43C0.exe C:\Users\Ive\AppData\Local\Temp\nswD3E6.exe C:\Users\Ive\AppData\Local\Temp\OperaBrowser-17.0.exe C:\Users\Ive\AppData\Local\Temp\plus-hd-2-6.exe C:\Users\Ive\AppData\Local\Temp\SkypeSetup.exe C:\Users\Ive\AppData\Local\Temp\SpotifyUninstall.exe C:\Users\Ive\AppData\Local\Temp\vlc-2.0.5-win32.exe C:\Users\Ive\AppData\Local\Temp\vlc-2.0.7-win32.exe C:\Users\Ive\AppData\Local\Temp\vlc-2.0.8-win32.exe C:\Users\Ive\AppData\Local\Temp\vlc-2.1.1-win32.exe C:\Users\Ive\AppData\Local\Temp\vlc-2.1.3-win32.exe ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\rpcss.dll => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2014-04-19 12:23 ==================== End Of Log ============================ --- --- --- |
Themen zu "Windows Pc-Reparatur" |
ads, antwort, banner, bingbar, bluestacks, brauch, browser, dasselbe, dateien, fehler, folge, forum, hallo zusammen, klick, langsamer, launch, meldung, msiexec.exe, popup, posten, problem, recovery, scan, seite, spark, thread, tool, tracking, windows, wscript.exe, zusammen |