|
Plagegeister aller Art und deren Bekämpfung: Scan mit AdwCleaner 3.210 - Was mache ich mit den Ergebnissen?Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
20.05.2014, 16:09 | #1 |
| Scan mit AdwCleaner 3.210 - Was mache ich mit den Ergebnissen? Hallo zusammen, habe heute mit AdwCleaner 3.210 eine Suche gestartet und ein paar Ergebnisse erhalten. Code:
ATTFilter # AdwCleaner v3.210 - Bericht erstellt am 20/05/2014 um 16:33:25 # Aktualisiert 19/05/2014 von Xplode # Betriebssystem : Windows 7 Ultimate Service Pack 1 (64 bits) # Benutzername : Uwe - UWE_PC # Gestartet von : I:\AdwCleaner\adwcleaner_3.210.exe # Option : Suchen ***** [ Dienste ] ***** ***** [ Dateien / Ordner ] ***** Datei Gefunden : C:\Users\Uwe\AppData\Roaming\Mozilla\Firefox\Profiles\s93ejzf1.default\user.js Datei Gefunden : C:\Windows\System32\Tasks\FoxTab Datei Gefunden : C:\Windows\Tasks\Digital Sites.job Datei Gefunden : C:\Windows\Tasks\FoxTab.job Ordner Gefunden : C:\Users\Uwe\AppData\Roaming\DigitalSites ***** [ Verknüpfungen ] ***** ***** [ Registrierungsdatenbank ] ***** Schlüssel Gefunden : HKCU\Software\dsiteproducts Schlüssel Gefunden : [x64] HKCU\Software\dsiteproducts ***** [ Browser ] ***** -\\ Internet Explorer v11.0.9600.17041 -\\ Mozilla Firefox v26.0 (de) [ Datei : C:\Users\Uwe\AppData\Roaming\Mozilla\Firefox\Profiles\s93ejzf1.default\prefs.js ] Zeile gefunden : user_pref("iminent.ShowThankyouPixel", "0"); Zeile gefunden : user_pref("iminent.displayFavLinks", "1"); Zeile gefunden : user_pref("iminent.registerToolbarEvent102", "1376592884104"); Zeile gefunden : user_pref("iminent.version", "7.33.3.1"); Zeile gefunden : user_pref("iminent.versioning", "{\"CurrentVersion\":\"7.33.3.1\",\"InstallEventCTime\":1376589391018,\"InstallEvent\":\"True\"}"); Zeile gefunden : user_pref("iminent.webbooster.scripts.minibar.FavLinkSplitTestingClass", "v1"); Zeile gefunden : user_pref("iminent.webbooster.scripts.minibar.LayoutId", "1"); Zeile gefunden : user_pref("iminent.webbooster.scripts.minibar.ROOTEXTENSION", "chrome://iminentwebbooster/content/minibar"); Zeile gefunden : user_pref("iminent.webbooster.scripts.minibar.Services.BHPCode", "01"); Zeile gefunden : user_pref("iminent.webbooster.scripts.minibar.Services.DefaultEvent", "000"); Zeile gefunden : user_pref("iminent.webbooster.scripts.minibar.Services.DefaultWebSite", "000"); Zeile gefunden : user_pref("iminent.webbooster.scripts.minibar.Services.IminentClientCode", "11"); Zeile gefunden : user_pref("iminent.webbooster.scripts.minibar.Services.SmartFavCode", "02"); Zeile gefunden : user_pref("iminent.webbooster.scripts.minibar.ShowThankyouPixel", "0"); Zeile gefunden : user_pref("iminent.webbooster.scripts.minibar.displayFavLinks", "0"); Zeile gefunden : user_pref("iminent.webbooster.scripts.minibar.registerToolbarEvent102", "1375361692684"); Zeile gefunden : user_pref("iminent.webbooster.scripts.minibar.registerToolbarEvent134", "1376203532231"); Zeile gefunden : user_pref("iminent.webbooster.scripts.sslminibar.LayoutId", "1"); Zeile gefunden : user_pref("iminent.webbooster.scripts.sslminibar.ROOTEXTENSION", "chrome://iminentwebbooster/content/minibar"); Zeile gefunden : user_pref("iminent.webbooster.scripts.sslminibar.Services.BHPCode", "01"); Zeile gefunden : user_pref("iminent.webbooster.scripts.sslminibar.Services.DefaultEvent", "000"); Zeile gefunden : user_pref("iminent.webbooster.scripts.sslminibar.Services.DefaultWebSite", "000"); Zeile gefunden : user_pref("iminent.webbooster.scripts.sslminibar.Services.IminentClientCode", "11"); Zeile gefunden : user_pref("iminent.webbooster.scripts.sslminibar.Services.SmartFavCode", "02"); Zeile gefunden : user_pref("iminent.webbooster.scripts.sslminibar.ShowThankyouPixel", "0"); Zeile gefunden : user_pref("iminent.webbooster.scripts.sslminibar.displayFavLinks", "1"); Zeile gefunden : user_pref("iminent.webbooster.scripts.sslminibar.registerToolbarEvent102", "1376483410855"); Zeile gefunden : user_pref("iminent.webbooster.scripts.sslminibar.registerToolbarEvent109", "1375137678813"); Zeile gefunden : user_pref("iminent.webbooster.scripts.sslminibar.registerToolbarEvent111", "1375137678818"); Zeile gefunden : user_pref("iminent.webbooster.scripts.sslminibar.registerToolbarEvent112", "1375201452295"); Zeile gefunden : user_pref("iminent.webbooster.scripts.sslminibar.registerToolbarEvent122", "1375137678823"); Zeile gefunden : user_pref("iminent.webbooster.scripts.sslminibar.registerToolbarEvent134", "1376486755265"); ************************* AdwCleaner[R0].txt - [4381 octets] - [20/05/2014 15:42:44] AdwCleaner[R1].txt - [4418 octets] - [20/05/2014 15:54:43] AdwCleaner[R2].txt - [4478 octets] - [20/05/2014 16:10:38] AdwCleaner[R3].txt - [4394 octets] - [20/05/2014 16:33:25] ########## EOF - C:\AdwCleaner\AdwCleaner[R3].txt - [4454 octets] ########## Kann mit FoxTab und DigitalSites und vor allen Dingen mit den ganzen Einträgen im Firefox nichts anfangen. Kann das alles gelöscht werden? Mich irritiert, dass AdwCleaner manche Sachen findet, die Kaspersky IS 2014 und Malwarebytes unbedenklich zu finden scheinen. Über Hilfe würde ich mich freuen. LG Uwe |
20.05.2014, 16:24 | #2 |
/// the machine /// TB-Ausbilder | Scan mit AdwCleaner 3.210 - Was mache ich mit den Ergebnissen? hi,
__________________Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST 32-Bit | FRST 64-Bit (Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
__________________ |
20.05.2014, 16:41 | #3 |
| Scan mit AdwCleaner 3.210 - Was mache ich mit den Ergebnissen? Hallo schrauber,
__________________hier die Log-Files: FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 17-05-2014 Ran by Uwe (administrator) on UWE_PC on 20-05-2014 17:35:23 Running from J:\Installation\Programme\FarbarRecoveryScanToolFRST64 Platform: Windows 7 Ultimate Service Pack 1 (X64) OS Language: German Standard Internet Explorer Version 11 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (Wacom Technology, Corp.) C:\Program Files\Tablet\Wacom\WTabletServicePro.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe (DonationCoder) I:\ScreenshotCaptor\ScreenshotCaptor.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (Nuance Communications, Inc.) C:\Program Files (x86)\ScanSoft\PaperPort\pptd40nt.exe (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\avp.exe (Foxit Corporation) I:\FoxitReader\Foxit Cloud\FCUpdateService.exe (SafeNet Inc.) C:\Windows\System32\hasplms.exe (Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe (Intel Corporation) C:\Windows\System32\IPROSetMonitor.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe (X-Rite Inc.) C:\Program Files (x86)\X-Rite\Devices\Services\xrdd.exe (Microsoft Corporation) C:\Windows\System32\wisptis.exe (Microsoft Corporation) C:\Windows\System32\wisptis.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\avpui.exe (Samsung Electronics.) I:\SamsungMagician\Samsung Magician.exe (Wacom Technology, Corp.) C:\Program Files\Tablet\Wacom\Wacom_TabletUser.exe (Wacom Technology) C:\Program Files\Tablet\Wacom\WacomHost.exe (Wacom Technology, Corp.) C:\Program Files\Tablet\Wacom\Wacom_Tablet.exe (Wacom Technology, Corp.) C:\Program Files\Tablet\Wacom\Wacom_TouchUser.exe (Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe (Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\ink\InputPersonalization.exe (Mozilla Corporation) I:\Firefox\firefox.exe (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\klwtblfs.exe (Microsoft Corporation) C:\Program Files\Windows NT\Accessories\wordpad.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13662936 2013-10-24] (Realtek Semiconductor) HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [287592 2013-08-07] (Intel Corporation) HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2199840 2014-04-30] (NVIDIA Corporation) HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\nvspcap64.dll [1225920 2014-04-30] (NVIDIA Corporation) HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [292848 2013-04-26] (Intel Corporation) HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.) HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation) HKLM-x32\...\Run: [SSBkgdUpdate] => C:\Program Files (x86)\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe [210472 2006-10-25] (Nuance Communications, Inc.) HKLM-x32\...\Run: [PaperPort PTD] => C:\Program Files (x86)\ScanSoft\PaperPort\pptd40nt.exe [29984 2008-07-09] (Nuance Communications, Inc.) HKLM-x32\...\Run: [IndexSearch] => C:\Program Files (x86)\ScanSoft\PaperPort\IndexSearch.exe [46368 2008-07-09] (Nuance Communications, Inc.) HKLM-x32\...\Run: [PPort11reminder] => C:\Program Files (x86)\ScanSoft\PaperPort\Ereg\Ereg.exe [328992 2007-08-31] (Nuance Communications, Inc.) HKLM-x32\...\Run: [BrMfcWnd] => C:\Program Files (x86)\Brother\Brmfcmon\BrMfcWnd.exe [1159168 2009-05-26] (Brother Industries, Ltd.) HKU\S-1-5-21-1481056539-1685603913-1254335098-1000\...\Run: [Screenshot Captor] => I:\ScreenshotCaptor\ScreenshotCaptor.exe [7963832 2014-05-14] (DonationCoder) HKU\S-1-5-21-1481056539-1685603913-1254335098-1000\...\MountPoints2: {0cf8ded1-82a8-11e3-85c5-806e6f6e6963} - L:\setup.exe Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\i1Profiler Tray.lnk ShortcutTarget: i1Profiler Tray.lnk -> I:\x-write_i1Display\i1Profiler\i1ProfilerTray.exe () Startup: C:\Users\Uwe\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Samsung Magician.lnk ShortcutTarget: Samsung Magician.lnk -> I:\SamsungMagician\Samsung Magician.exe (Samsung Electronics.) ==================== Internet (Whitelisted) ==================== BHO: Content Blocker Plugin - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\x64\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO) BHO: Virtual Keyboard Plugin - {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\x64\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO) BHO: Safe Money Plugin - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\x64\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO) BHO: URL Advisor Plugin - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\x64\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO) BHO-x32: Content Blocker Plugin - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO) BHO-x32: Virtual Keyboard Plugin - {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO) BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - I:\Java\bin\ssv.dll (Oracle Corporation) BHO-x32: Safe Money Plugin - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO) BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - I:\Java\bin\jp2ssv.dll (Oracle Corporation) BHO-x32: URL Advisor Plugin - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO) Tcpip\Parameters: [DhcpNameServer] 10.0.0.1 FireFox: ======== FF ProfilePath: C:\Users\Uwe\AppData\Roaming\Mozilla\Firefox\C:\ProgramData\Kaspersky Lab\SafeBrowser\S-1-5-21-1481056539-1685603913-1254335098-1000\FireFox FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_13_0_0_214.dll () FF Plugin: @wacom.com/wtPlugin,version=2.1.0.3 - C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll (Wacom) FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_214.dll () FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf - I:\FoxitReader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation) FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf - I:\FoxitReader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation) FF Plugin-x32: @java.com/DTPlugin,version=10.55.2 - I:\Java\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=10.55.2 - I:\Java\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation) FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation) FF Plugin-x32: @videolan.org/vlc,version=2.1.3 - I:\VLC\npvlc.dll (VideoLAN) FF Plugin-x32: @wacom.com/wtPlugin,version=2.1.0.3 - C:\Program Files (x86)\TabletPlugins\npWacomTabletPlugin.dll (Wacom) FF Plugin HKCU: wacom.com/WacomTabletPlugin - C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll (Wacom) FF HKLM-x32\...\Firefox\Extensions: - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\url_advisor@kaspersky.com FF Extension: 卡巴斯基網址顧問 - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\url_advisor@kaspersky.com [2014-04-17] FF HKLM-x32\...\Firefox\Extensions: [virtual_keyboard@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\virtual_keyboard@kaspersky.com FF Extension: 虛擬鍵盤 - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\virtual_keyboard@kaspersky.com [2014-04-17] FF HKLM-x32\...\Firefox\Extensions: [content_blocker@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\content_blocker@kaspersky.com FF Extension: 惡意網站攔截器 - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\content_blocker@kaspersky.com [2014-04-17] FF HKLM-x32\...\Firefox\Extensions: [anti_banner@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\anti_banner@kaspersky.com FF Extension: Chặn quảng cáo - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\anti_banner@kaspersky.com [2014-04-17] FF HKLM-x32\...\Firefox\Extensions: [online_banking@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\online_banking@kaspersky.com FF Extension: Safe Money - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\online_banking@kaspersky.com [2014-04-17] FF StartMenuInternet: FIREFOX.EXE - I:\Firefox\firefox.exe ==================== Services (Whitelisted) ================= R2 AVP; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\avp.exe [214512 2013-10-17] (Kaspersky Lab ZAO) R2 FoxitCloudUpdateService; I:\FoxitReader\Foxit Cloud\FCUpdateService.exe [241728 2014-03-11] (Foxit Corporation) R2 hasplms; C:\Windows\system32\hasplms.exe [3750400 2009-12-16] (SafeNet Inc.) R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [15720 2013-08-07] (Intel Corporation) S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [828376 2013-08-27] (Intel(R) Corporation) R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-09-16] (Intel Corporation) R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1618888 2014-04-30] (NVIDIA Corporation) S4 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [21009352 2014-04-30] (NVIDIA Corporation) S3 SandraAgentSrv; I:\SiSoftSandraLite2014\SiSoftware Sandra Lite 2014.SP1c\RpcAgentSrv.exe [72344 2008-03-24] (SiSoftware) R2 WTabletServicePro; C:\Program Files\Tablet\Wacom\WTabletServicePro.exe [621336 2013-12-04] (Wacom Technology, Corp.) R2 xrdd.exe; C:\Program Files (x86)\X-Rite\Devices\Services\xrdd.exe [82800 2013-07-02] (X-Rite Inc.) ==================== Drivers (Whitelisted) ==================== R3 e1dexpress; C:\Windows\System32\DRIVERS\e1d62x64.sys [495376 2013-05-30] (Intel Corporation) R0 iaStorF; C:\Windows\System32\DRIVERS\iaStorF.sys [28008 2013-08-07] (Intel Corporation) R0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [458336 2014-04-17] (Kaspersky Lab ZAO) S4 klflt; C:\Windows\System32\DRIVERS\klflt.sys [115296 2014-04-17] (Kaspersky Lab ZAO) R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [625248 2014-04-17] (Kaspersky Lab ZAO) R1 KLIM6; C:\Windows\System32\DRIVERS\klim6.sys [29792 2013-10-17] (Kaspersky Lab ZAO) R3 klkbdflt; C:\Windows\System32\DRIVERS\klkbdflt.sys [29280 2014-04-17] (Kaspersky Lab ZAO) R3 klmouflt; C:\Windows\System32\DRIVERS\klmouflt.sys [29280 2013-10-17] (Kaspersky Lab ZAO) R1 klpd; C:\Windows\System32\DRIVERS\klpd.sys [15456 2013-04-12] (Kaspersky Lab ZAO) R1 kltdi; C:\Windows\System32\DRIVERS\kltdi.sys [55904 2013-05-14] (Kaspersky Lab ZAO) R1 kneps; C:\Windows\System32\DRIVERS\kneps.sys [178272 2014-04-17] (Kaspersky Lab ZAO) R3 MEIx64; C:\Windows\System32\DRIVERS\TeeDriverx64.sys [99288 2013-09-16] (Intel Corporation) R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [40392 2014-03-31] (NVIDIA Corporation) S3 SANDRA; I:\SiSoftSandraLite2014\SiSoftware Sandra Lite 2014.SP1c\WNt500x64\Sandra.sys [23112 2009-08-07] (SiSoftware) U5 UnlockerDriver5; I:\Unlocker\UnlockerDriver5.sys [12352 2010-07-01] () S3 VBoxUSB; C:\Windows\System32\Drivers\VBoxUSB.sys [115488 2014-03-25] (Oracle Corporation) R2 WinI2C-DDC; C:\Windows\system32\drivers\DDCDrv.sys [20832 2013-07-10] (Nicomsoft Ltd.) R2 WinI2C-DDC; C:\Windows\SysWOW64\drivers\DDCDrv.sys [10240 2013-07-10] (Nicomsoft Ltd.) S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X] S3 tsusbhub; system32\drivers\tsusbhub.sys [X] S3 VGPU; System32\drivers\rdvgkmd.sys [X] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-05-20 17:34 - 2014-05-20 17:35 - 00000000 ____D () C:\FRST 2014-05-20 15:42 - 2014-05-20 16:33 - 00000000 ____D () C:\AdwCleaner 2014-05-20 15:38 - 2014-05-20 15:38 - 00000588 _____ () C:\Windows\PFRO.log 2014-05-20 15:38 - 2014-05-20 15:38 - 00000056 _____ () C:\Windows\setupact.log 2014-05-20 15:38 - 2014-05-20 15:38 - 00000000 _____ () C:\Windows\setuperr.log 2014-05-20 11:33 - 2014-05-20 11:33 - 00000000 ____D () C:\Users\Uwe\AppData\Local\Help 2014-05-20 08:41 - 2014-05-20 08:41 - 00000000 ____D () C:\Users\Uwe\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR 2014-05-20 08:41 - 2014-05-20 08:41 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR 2014-05-20 08:37 - 2014-05-20 08:37 - 00000000 ____D () C:\Users\Uwe\AppData\Roaming\WinRAR 2014-05-20 01:14 - 2014-05-20 17:13 - 00043009 _____ () C:\Windows\WindowsUpdate.log 2014-05-20 00:54 - 2014-05-20 00:54 - 00000000 ____D () C:\Users\Uwe\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Xilisoft 2014-05-20 00:54 - 2014-05-20 00:54 - 00000000 ____D () C:\Users\Uwe\AppData\Local\Xilisoft Corporation 2014-05-20 00:38 - 2014-05-20 00:38 - 00000620 _____ () C:\Users\Uwe\Desktop\Revo Uninstaller.lnk 2014-05-20 00:19 - 2014-05-20 00:19 - 00045017 _____ () C:\Users\Uwe\AppData\Local\recently-used.xbel 2014-05-18 20:30 - 2014-05-18 20:30 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdMtpDr_01_09_00.Wdf 2014-05-18 12:01 - 2014-05-18 12:02 - 00000146 _____ () C:\Users\Uwe\AppData\Roaming\ReadMeDatensicherung.txt 2014-05-18 09:54 - 2014-05-20 16:17 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2014-05-18 09:54 - 2014-05-18 09:54 - 00000625 _____ () C:\Users\Public\Desktop\Malwarebytes.lnk 2014-05-18 09:54 - 2014-05-18 09:54 - 00000000 ____D () C:\ProgramData\Malwarebytes 2014-05-18 09:54 - 2014-04-03 09:51 - 00088280 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys 2014-05-18 09:54 - 2014-04-03 09:51 - 00063192 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys 2014-05-18 09:54 - 2014-04-03 09:50 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys 2014-05-15 18:55 - 2014-05-15 18:55 - 00000552 _____ () C:\Users\Uwe\Desktop\SpeedFan.lnk 2014-05-15 18:55 - 2014-05-15 18:55 - 00000045 _____ () C:\Windows\SysWOW64\initdebug.nfo 2014-05-15 17:46 - 2014-05-15 17:46 - 00000583 _____ () C:\Users\Uwe\Desktop\FurMark.lnk 2014-05-15 16:53 - 2014-05-06 06:40 - 23544320 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-05-15 16:53 - 2014-05-06 06:17 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-05-15 16:53 - 2014-05-06 05:25 - 17382912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2014-05-15 16:53 - 2014-05-06 05:07 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2014-05-15 16:53 - 2014-05-06 05:00 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2014-05-15 16:53 - 2014-05-06 04:10 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2014-05-15 13:07 - 2014-05-15 17:46 - 00000000 ____D () C:\Users\Uwe\AppData\Roaming\NVIDIA 2014-05-15 12:22 - 2014-05-09 08:14 - 00477184 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll 2014-05-15 12:22 - 2014-05-09 08:11 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll 2014-05-15 12:22 - 2014-04-12 04:22 - 00155072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys 2014-05-15 12:22 - 2014-04-12 04:22 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys 2014-05-15 12:22 - 2014-04-12 04:19 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll 2014-05-15 12:22 - 2014-04-12 04:19 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll 2014-05-15 12:22 - 2014-04-12 04:19 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe 2014-05-15 12:22 - 2014-04-12 04:19 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll 2014-05-15 12:22 - 2014-04-12 04:19 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll 2014-05-15 12:22 - 2014-04-12 04:12 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll 2014-05-15 12:22 - 2014-04-12 04:10 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll 2014-05-15 12:22 - 2014-03-25 04:43 - 14175744 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll 2014-05-15 12:22 - 2014-03-25 04:09 - 12874240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll 2014-05-15 12:22 - 2014-03-04 11:47 - 05550016 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe 2014-05-15 12:22 - 2014-03-04 11:44 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll 2014-05-15 12:22 - 2014-03-04 11:44 - 00722944 _____ (Microsoft Corporation) C:\Windows\system32\objsel.dll 2014-05-15 12:22 - 2014-03-04 11:44 - 00424960 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll 2014-05-15 12:22 - 2014-03-04 11:44 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll 2014-05-15 12:22 - 2014-03-04 11:44 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll 2014-05-15 12:22 - 2014-03-04 11:44 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll 2014-05-15 12:22 - 2014-03-04 11:44 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll 2014-05-15 12:22 - 2014-03-04 11:44 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\wincredprovider.dll 2014-05-15 12:22 - 2014-03-04 11:43 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe 2014-05-15 12:22 - 2014-03-04 11:43 - 00057344 _____ (Microsoft Corporation) C:\Windows\system32\cngprovider.dll 2014-05-15 12:22 - 2014-03-04 11:43 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\adprovider.dll 2014-05-15 12:22 - 2014-03-04 11:43 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\capiprovider.dll 2014-05-15 12:22 - 2014-03-04 11:43 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\dpapiprovider.dll 2014-05-15 12:22 - 2014-03-04 11:43 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\dimsroam.dll 2014-05-15 12:22 - 2014-03-04 11:43 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll 2014-05-15 12:22 - 2014-03-04 11:20 - 03969984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe 2014-05-15 12:22 - 2014-03-04 11:20 - 03914176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe 2014-05-15 12:22 - 2014-03-04 11:17 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll 2014-05-15 12:22 - 2014-03-04 11:17 - 00538112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\objsel.dll 2014-05-15 12:22 - 2014-03-04 11:17 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll 2014-05-15 12:22 - 2014-03-04 11:17 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll 2014-05-15 12:22 - 2014-03-04 11:17 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll 2014-05-15 12:22 - 2014-03-04 11:17 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll 2014-05-15 12:22 - 2014-03-04 11:17 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cngprovider.dll 2014-05-15 12:22 - 2014-03-04 11:17 - 00049664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adprovider.dll 2014-05-15 12:22 - 2014-03-04 11:17 - 00048128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\capiprovider.dll 2014-05-15 12:22 - 2014-03-04 11:17 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpapiprovider.dll 2014-05-15 12:22 - 2014-03-04 11:17 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dimsroam.dll 2014-05-15 12:22 - 2014-03-04 11:17 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wincredprovider.dll 2014-05-15 12:22 - 2014-03-04 11:17 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll 2014-05-15 12:22 - 2014-03-04 11:16 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll 2014-05-14 16:37 - 2014-05-14 16:37 - 00000000 ____D () C:\Users\Uwe\Documents\DonationCoder 2014-05-14 16:37 - 2014-05-14 16:37 - 00000000 ____D () C:\ProgramData\DonationCoder 2014-05-14 15:59 - 2014-03-31 18:42 - 00040392 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys 2014-05-14 15:59 - 2014-03-31 18:42 - 00034760 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll 2014-05-14 15:57 - 2014-05-14 15:58 - 00000000 ____D () C:\Users\Uwe\AppData\Local\NVIDIA 2014-05-14 15:57 - 2014-05-14 15:57 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation 2014-05-14 15:57 - 2014-05-14 15:57 - 00000000 ____D () C:\Program Files (x86)\AGEIA Technologies 2014-05-14 15:57 - 2014-04-30 20:29 - 01225920 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll 2014-05-14 15:57 - 2014-04-30 20:29 - 01081112 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll 2014-05-14 15:57 - 2014-03-04 13:32 - 00599840 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe 2014-05-14 15:56 - 2014-03-31 18:42 - 00037320 _____ (NVIDIA Corporation) C:\Windows\system32\nvaudcap64v.dll 2014-05-14 15:56 - 2014-03-04 16:35 - 31474976 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll 2014-05-14 15:56 - 2014-03-04 16:35 - 25255256 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll 2014-05-14 15:56 - 2014-03-04 16:35 - 23716640 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll 2014-05-14 15:56 - 2014-03-04 16:35 - 17755424 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll 2014-05-14 15:56 - 2014-03-04 16:35 - 17561544 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll 2014-05-14 15:56 - 2014-03-04 16:35 - 15783992 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll 2014-05-14 15:56 - 2014-03-04 16:35 - 12708128 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys 2014-05-14 15:56 - 2014-03-04 16:35 - 11636176 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll 2014-05-14 15:56 - 2014-03-04 16:35 - 11589272 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll 2014-05-14 15:56 - 2014-03-04 16:35 - 09728064 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll 2014-05-14 15:56 - 2014-03-04 16:35 - 09690424 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll 2014-05-14 15:56 - 2014-03-04 16:35 - 03143456 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll 2014-05-14 15:56 - 2014-03-04 16:35 - 02958792 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll 2014-05-14 15:56 - 2014-03-04 16:35 - 02783008 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll 2014-05-14 15:56 - 2014-03-04 16:35 - 02715264 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll 2014-05-14 15:56 - 2014-03-04 16:35 - 02411976 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll 2014-05-14 15:56 - 2014-03-04 16:35 - 01885472 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6433523.dll 2014-05-14 15:56 - 2014-03-04 16:35 - 01516488 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6433523.dll 2014-05-14 15:56 - 2014-03-04 16:35 - 00892704 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll 2014-05-14 15:56 - 2014-03-04 16:35 - 00877856 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll 2014-05-14 15:56 - 2014-03-04 16:35 - 00863064 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll 2014-05-14 15:56 - 2014-03-04 16:35 - 00846168 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll 2014-05-14 15:56 - 2014-03-04 16:35 - 00832936 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll 2014-05-14 15:56 - 2014-03-04 16:35 - 00353504 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll 2014-05-14 15:56 - 2014-03-04 16:35 - 00305600 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll 2014-05-14 15:56 - 2014-03-04 16:35 - 00174296 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll 2014-05-14 15:56 - 2014-03-04 16:35 - 00148016 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll 2014-05-14 15:56 - 2014-03-04 16:35 - 00062408 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll 2014-05-14 15:56 - 2014-03-04 16:35 - 00054216 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll 2014-05-14 15:56 - 2013-11-28 15:38 - 00197408 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvhda64v.sys 2014-05-14 15:56 - 2013-11-28 15:38 - 00031520 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdap64.dll 2014-05-14 15:56 - 2013-11-22 10:36 - 01515296 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdagenco6420103.dll 2014-05-14 15:50 - 2014-05-14 15:50 - 00000000 ____D () C:\Windows\pss 2014-05-14 15:38 - 2014-05-20 15:38 - 00000000 ____D () C:\ProgramData\NVIDIA 2014-05-14 15:36 - 2014-03-04 15:06 - 06714312 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll 2014-05-14 15:36 - 2014-03-04 15:06 - 03497816 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll 2014-05-14 15:36 - 2014-03-04 15:05 - 03649185 _____ () C:\Windows\system32\nvcoproc.bin 2014-05-14 15:36 - 2014-03-04 15:05 - 02558808 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll 2014-05-14 15:36 - 2014-03-04 15:05 - 00922968 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe 2014-05-14 15:36 - 2014-03-04 15:05 - 00386336 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll 2014-05-14 15:36 - 2014-03-04 15:05 - 00064968 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll 2014-05-14 15:01 - 2013-07-03 20:05 - 00552760 _____ (Intel Corporation) C:\Windows\system32\PROUnstl.exe 2014-05-14 15:01 - 2006-01-12 09:52 - 00001904 ____N () C:\Windows\system32\SetupBD.din 2014-05-14 14:55 - 2014-05-14 14:55 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel 2014-05-14 14:52 - 2014-05-14 14:52 - 00000000 ____D () C:\Windows\SysWOW64\RTCOM 2014-05-14 14:52 - 2014-05-14 14:52 - 00000000 ____D () C:\Program Files\Realtek 2014-05-14 14:52 - 2013-10-11 05:31 - 00947760 _____ (Sony Corporation) C:\Windows\system32\SFSS_APO.dll 2014-05-14 14:52 - 2013-10-09 14:12 - 02103040 _____ (Waves Audio Ltd.) C:\Windows\system32\WavesGUILib64.dll 2014-05-14 14:52 - 2013-08-23 21:14 - 01014016 _____ (SRS Labs, Inc.) C:\Windows\system32\slcnt64.dll 2014-05-14 14:52 - 2013-08-23 21:14 - 00897792 _____ (DTS, Inc.) C:\Windows\system32\sl3apo64.dll 2014-05-14 14:52 - 2013-08-23 21:14 - 00722688 _____ (DTS, Inc.) C:\Windows\system32\sltech64.dll 2014-05-14 14:52 - 2013-08-23 21:14 - 00244480 _____ (TODO: <Company name>) C:\Windows\system32\slprp64.dll 2014-05-14 14:52 - 2013-06-25 06:47 - 00871856 _____ (TOSHIBA Corporation) C:\Windows\system32\tossaeapo64.dll 2014-05-14 14:52 - 2013-06-25 06:47 - 00162224 _____ (TOSHIBA Corporation) C:\Windows\system32\toseaeapo64.dll 2014-05-14 14:52 - 2013-06-25 06:46 - 00582056 _____ (TOSHIBA Corporation) C:\Windows\system32\tosasfapo64.dll 2014-05-14 14:52 - 2012-01-30 05:43 - 00836544 _____ (TOSHIBA Corporation) C:\Windows\system32\tadefxapo264.dll 2014-05-14 14:52 - 2012-01-10 04:20 - 00065944 _____ (TOSHIBA CORPORATION.) C:\Windows\system32\tepeqapo64.dll 2014-05-14 14:52 - 2011-09-02 08:21 - 00221024 _____ (Synopsys, Inc.) C:\Windows\system32\SFNHK64.dll 2014-05-14 14:52 - 2011-09-02 08:21 - 00081248 _____ (Synopsys, Inc.) C:\Windows\system32\SFCOM64.dll 2014-05-14 14:52 - 2011-03-17 06:17 - 01361336 _____ (TOSHIBA Corporation) C:\Windows\system32\tosade.dll 2014-05-14 14:52 - 2011-03-07 11:11 - 00148416 _____ (TOSHIBA Corporation) C:\Windows\system32\tadefxapo.dll 2014-05-14 14:52 - 2009-11-24 03:55 - 00518896 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSX64.dll 2014-05-14 14:52 - 2009-11-24 03:55 - 00211184 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSH64.dll 2014-05-14 14:52 - 2009-11-24 03:55 - 00198896 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSHP64.dll 2014-05-14 14:52 - 2009-11-24 03:55 - 00155888 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSWOW64.dll 2014-05-14 14:51 - 2013-10-29 14:19 - 00151256 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoInstII64.dll 2014-05-14 14:51 - 2013-10-29 12:25 - 03698904 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RTKVHD64.sys 2014-05-14 14:51 - 2013-10-29 09:03 - 00676825 _____ () C:\Windows\system32\Drivers\RTAIODAT.DAT 2014-05-14 14:51 - 2013-10-29 08:57 - 38251008 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoRes64.dat 2014-05-14 14:51 - 2013-10-28 11:29 - 01021656 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkApi64.dll 2014-05-14 14:51 - 2013-10-21 04:46 - 02587352 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkAPO64.dll 2014-05-14 14:51 - 2013-10-18 10:41 - 01286360 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTCOM64.dll 2014-05-14 14:51 - 2013-10-15 21:43 - 00209096 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAC64.dll 2014-05-14 14:51 - 2013-10-11 06:47 - 00113576 _____ (Real Sound Lab SIA) C:\Windows\system32\CONEQMSAPOGUILibrary.dll 2014-05-14 14:51 - 2013-10-09 14:13 - 01921792 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRealtek264.dll 2014-05-14 14:51 - 2013-10-09 14:13 - 01345280 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO5064.dll 2014-05-14 14:51 - 2013-10-09 14:13 - 01286400 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxSpeechAPO64.dll 2014-05-14 14:51 - 2013-10-09 14:12 - 27644160 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioVnA64.dll 2014-05-14 14:51 - 2013-10-09 14:12 - 14152960 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRealtek64.dll 2014-05-14 14:51 - 2013-10-09 14:12 - 03714304 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioVnN64.dll 2014-05-14 14:51 - 2013-10-09 14:12 - 02036992 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioEQ64.dll 2014-05-14 14:51 - 2013-10-09 14:12 - 01012992 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPOShell64.dll 2014-05-14 14:51 - 2013-10-07 05:05 - 02810072 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtPgEx64.dll 2014-05-14 14:51 - 2013-10-06 18:26 - 00501184 _____ (DTS) C:\Windows\system32\DTSU2PLFX64.dll 2014-05-14 14:51 - 2013-10-06 18:26 - 00487360 _____ (DTS) C:\Windows\system32\DTSU2PGFX64.dll 2014-05-14 14:51 - 2013-10-06 18:26 - 00415680 _____ (DTS) C:\Windows\system32\DTSU2PREC64.dll 2014-05-14 14:51 - 2013-10-02 11:10 - 00617176 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtDataProc64.dll 2014-05-14 14:51 - 2013-10-02 03:43 - 00754488 _____ (ASUSTeKcomputer.Inc Inc) C:\Windows\system32\RTKSMSettingsIPC.dll 2014-05-14 14:51 - 2013-10-02 03:39 - 05538072 _____ (ASUSTeKcomputer.Inc Inc) C:\Windows\system32\RTKSMlfx.dll 2014-05-14 14:51 - 2013-09-09 22:02 - 06217904 _____ (Dolby Laboratories) C:\Windows\system32\DDPP64A.dll 2014-05-14 14:51 - 2013-09-09 22:02 - 00313520 _____ (Dolby Laboratories) C:\Windows\system32\DDPO64A.dll 2014-05-14 14:51 - 2013-09-09 22:01 - 01938608 _____ (Dolby Laboratories) C:\Windows\system32\DDPD64A.dll 2014-05-14 14:51 - 2013-09-09 22:01 - 00260272 _____ (Dolby Laboratories) C:\Windows\system32\DDPA64.dll 2014-05-14 14:51 - 2013-09-09 09:32 - 05681192 _____ () C:\Windows\system32\Drivers\rtvienna.dat 2014-05-14 14:51 - 2013-08-20 11:37 - 00605496 _____ () C:\Windows\system32\audioLibVc.dll 2014-05-14 14:51 - 2013-08-14 10:36 - 00662784 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVolumeSDAPO.dll 2014-05-14 14:51 - 2013-08-14 10:35 - 01084160 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO4064.dll 2014-05-14 14:51 - 2013-08-14 10:35 - 00907008 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVoiceAPO2064.dll 2014-05-14 14:51 - 2013-08-14 10:35 - 00663296 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO30.dll 2014-05-14 14:51 - 2013-08-05 12:11 - 02743328 _____ (Fortemedia Corporation) C:\Windows\system32\FMAPO64.dll 2014-05-14 14:51 - 2013-07-23 09:39 - 00790272 _____ (Waves Audio Ltd.) C:\Windows\SysWOW64\MaxxAudioAPOShell.dll 2014-05-14 14:51 - 2013-06-21 05:01 - 00109848 _____ () C:\Windows\system32\AcpiServiceVnA64.dll 2014-05-14 14:51 - 2013-04-24 11:16 - 01662024 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTSnMg64.cpl 2014-05-14 14:51 - 2013-04-03 08:13 - 00906800 _____ (Sony Corporation) C:\Windows\system32\MISS_APO.dll 2014-05-14 14:51 - 2012-08-31 13:18 - 07164176 _____ (Dolby Laboratories) C:\Windows\system32\R4EEP64A.dll 2014-05-14 14:51 - 2012-08-31 13:17 - 00434960 _____ (Dolby Laboratories) C:\Windows\system32\R4EED64A.dll 2014-05-14 14:51 - 2012-08-31 13:17 - 00141584 _____ (Dolby Laboratories) C:\Windows\system32\R4EEL64A.dll 2014-05-14 14:51 - 2012-08-31 13:17 - 00124176 _____ (Dolby Laboratories) C:\Windows\system32\R4EEA64A.dll 2014-05-14 14:51 - 2012-08-31 13:17 - 00075024 _____ (Dolby Laboratories) C:\Windows\system32\R4EEG64A.dll 2014-05-14 14:51 - 2012-03-08 05:47 - 00108640 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAR64.dll 2014-05-14 14:51 - 2011-12-20 09:32 - 00331880 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtlCPAPI64.dll 2014-05-14 14:51 - 2011-11-22 10:28 - 00014952 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCoLDR64.dll 2014-05-14 14:51 - 2011-09-02 08:21 - 00078688 _____ (Synopsys, Inc.) C:\Windows\system32\SFAPO64.dll 2014-05-14 14:51 - 2011-08-23 11:00 - 00603984 _____ (Knowles Acoustics ) C:\Windows\system32\KAAPORT64.dll 2014-05-14 14:51 - 2011-05-31 03:42 - 01756264 _____ (DTS) C:\Windows\system32\DTSS2SpeakerDLL64.dll 2014-05-14 14:51 - 2011-05-31 03:42 - 01568360 _____ (DTS) C:\Windows\system32\DTSS2HeadphoneDLL64.dll 2014-05-14 14:51 - 2011-05-31 03:42 - 01486952 _____ (DTS) C:\Windows\system32\DTSBoostDLL64.dll 2014-05-14 14:51 - 2011-05-31 03:42 - 00728680 _____ (DTS) C:\Windows\system32\DTSBassEnhancementDLL64.dll 2014-05-14 14:51 - 2011-05-31 03:42 - 00712296 _____ (DTS) C:\Windows\system32\DTSSymmetryDLL64.dll 2014-05-14 14:51 - 2011-05-31 03:42 - 00693352 _____ (DTS) C:\Windows\system32\DTSVoiceClarityDLL64.dll 2014-05-14 14:51 - 2011-05-31 03:42 - 00491112 _____ (DTS) C:\Windows\system32\DTSNeoPCDLL64.dll 2014-05-14 14:51 - 2011-05-31 03:42 - 00432744 _____ (DTS) C:\Windows\system32\DTSLimiterDLL64.dll 2014-05-14 14:51 - 2011-05-31 03:42 - 00428648 _____ (DTS) C:\Windows\system32\DTSGainCompensatorDLL64.dll 2014-05-14 14:51 - 2011-05-31 03:42 - 00242792 _____ (DTS) C:\Windows\system32\DTSLFXAPO64.dll 2014-05-14 14:51 - 2011-05-31 03:42 - 00242792 _____ (DTS) C:\Windows\system32\DTSGFXAPO64.dll 2014-05-14 14:51 - 2011-05-31 03:42 - 00241768 _____ (DTS) C:\Windows\system32\DTSGFXAPONS64.dll 2014-05-14 14:51 - 2010-11-08 01:31 - 00375128 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEP64A.dll 2014-05-14 14:51 - 2010-11-08 01:31 - 00310104 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DHT64.dll 2014-05-14 14:51 - 2010-11-08 01:31 - 00310104 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DAA64.dll 2014-05-14 14:51 - 2010-11-08 01:31 - 00204120 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEED64A.dll 2014-05-14 14:51 - 2010-11-08 01:31 - 00101208 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEL64A.dll 2014-05-14 14:51 - 2010-11-08 01:31 - 00078680 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEG64A.dll 2014-05-14 14:51 - 2010-11-03 12:30 - 00149608 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCfg64.dll 2014-05-14 14:51 - 2010-09-27 03:34 - 00318808 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO20.dll 2014-05-14 14:51 - 2010-07-22 10:48 - 00074064 _____ (Virage Logic Corporation / Sonic Focus) C:\Windows\SysWOW64\SFCOM.dll 2014-05-14 14:50 - 2014-05-14 14:50 - 00000000 ____D () C:\Program Files (x86)\Realtek 2014-05-14 14:49 - 2013-05-30 02:54 - 00495376 _____ (Intel Corporation) C:\Windows\system32\Drivers\e1d62x64.sys 2014-05-14 14:49 - 2013-05-10 21:48 - 00073480 _____ (Intel Corporation) C:\Windows\system32\e1dmsg.dll 2014-05-14 14:49 - 2013-03-01 22:42 - 00101152 _____ (Intel Corporation) C:\Windows\system32\NicInstD.dll 2014-05-14 14:49 - 2012-01-06 08:03 - 00003114 _____ () C:\Windows\system32\e1d62x64.din 2014-05-14 14:49 - 2009-05-26 04:05 - 00036472 _____ (Intel Corporation) C:\Windows\system32\NicCo36.dll 2014-05-12 14:57 - 2014-05-12 14:57 - 00000804 _____ () C:\Users\Uwe\Desktop\CPU-Z.lnk 2014-05-12 14:31 - 2014-05-12 14:31 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CPUID 2014-05-12 14:27 - 2014-05-12 14:27 - 00000859 _____ () C:\Users\Uwe\Desktop\GPU-Z.lnk 2014-05-11 12:23 - 2014-05-11 12:22 - 00000687 _____ () C:\Users\Uwe\Dokumente - Verknüpfung.lnk 2014-05-07 08:26 - 2014-05-14 14:29 - 00692400 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2014-05-07 08:26 - 2014-05-14 14:29 - 00070832 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2014-05-04 16:29 - 2014-05-04 16:29 - 00000000 ____D () C:\Program Files (x86)\MSXML 4.0 2014-05-04 10:08 - 2014-05-04 10:08 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime 2014-05-04 10:08 - 2014-05-04 10:08 - 00000000 ____D () C:\ProgramData\Apple Computer 2014-05-04 09:39 - 2014-05-04 09:39 - 00000000 ____D () C:\Users\Uwe\AppData\Local\Scansoft 2014-05-04 09:37 - 2014-05-04 09:37 - 00000425 _____ () C:\Windows\BRWMARK.INI 2014-05-04 09:37 - 2014-05-04 09:37 - 00000218 _____ () C:\Windows\Brpfx04a.ini 2014-05-04 09:37 - 2014-05-04 09:37 - 00000085 _____ () C:\Windows\brpcfx.ini 2014-05-04 09:37 - 2014-05-04 09:37 - 00000027 _____ () C:\Windows\BRPP2KA.INI 2014-05-04 09:37 - 2014-05-04 09:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Brother 2014-05-04 09:36 - 2014-05-04 09:36 - 00000066 _____ () C:\Windows\Brfaxrx.ini 2014-05-04 09:36 - 2014-05-04 09:36 - 00000050 _____ () C:\Windows\system32\bridf08a.dat 2014-05-04 09:36 - 2014-05-04 09:36 - 00000000 ____D () C:\Users\Public\Documents\BrFaxRx 2014-05-04 09:36 - 2014-05-04 09:36 - 00000000 ____D () C:\Program Files (x86)\Brother 2014-05-04 09:36 - 2009-07-21 15:32 - 01560064 _____ (Brother Industries, Ltd.) C:\Windows\system32\BrWia09b.dll 2014-05-04 09:36 - 2009-02-24 14:01 - 00082944 ____N (Brother Industries, Ltd.) C:\Windows\system32\BrNetSti.dll 2014-05-04 09:36 - 2009-02-24 12:52 - 00058368 ____N (Brother Industries,Ltd.) C:\Windows\system32\BrWiaNCp.dll 2014-05-04 09:36 - 2009-02-24 12:52 - 00047616 ____N (Brother Industries,Ltd) C:\Windows\system32\Brnsplg.dll 2014-05-04 09:36 - 2008-10-17 20:04 - 00179712 ____N (Brother Industries, Ltd.) C:\Windows\system32\BrfxDA5b.dll 2014-05-04 09:36 - 2008-08-23 19:17 - 00118784 ____N (Brother Industries,LTD.) C:\Windows\SysWOW64\BrMfNt.dll 2014-05-04 09:36 - 2008-06-17 15:35 - 00207872 ____N (brother) C:\Windows\system32\NSSRH64.dll 2014-05-04 09:36 - 2008-06-17 15:33 - 00167936 ____N (brother) C:\Windows\SysWOW64\NSSearch.dll 2014-05-04 09:36 - 2007-12-13 22:16 - 00073728 ____N (Brother Industries Ltd.) C:\Windows\SysWOW64\BrDctF2.dll 2014-05-04 09:36 - 2007-12-13 22:16 - 00005632 ____N (Brother Industries Ltd.) C:\Windows\SysWOW64\BrDctF2L.dll 2014-05-04 09:36 - 2007-12-13 22:16 - 00003072 ____N (Brother Industries Ltd.) C:\Windows\SysWOW64\BrDctF2S.dll 2014-05-04 09:36 - 2006-12-28 13:39 - 00176128 ____N (Brother Industries, Ltd.) C:\Windows\SysWOW64\BroSNMP.dll 2014-05-04 09:36 - 2006-07-07 12:40 - 00073728 ____N (Brother Industories Ltd. P&S Company) C:\Windows\SysWOW64\BRCrypt.dll 2014-05-04 09:36 - 2005-04-22 13:36 - 00143360 ____N () C:\Windows\system32\BrSNMP64.dll 2014-05-04 09:36 - 2003-11-28 18:57 - 00000000 _____ () C:\Windows\brdfxspd.dat 2014-05-04 09:36 - 2002-11-26 13:43 - 00106496 ____N () C:\Windows\SysWOW64\BrMuSNMP.dll 2014-05-04 09:31 - 2014-05-04 09:31 - 00000000 ____D () C:\Program Files\Nuance 2014-05-04 09:30 - 2014-05-04 09:38 - 00000000 ____D () C:\ProgramData\InstallShield 2014-05-04 09:30 - 2014-05-04 09:30 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ScanSoft PaperPort 11 2014-05-04 09:30 - 2008-03-28 13:24 - 00031864 _____ () C:\Windows\maxlink.ini 2014-05-04 09:29 - 2014-05-04 09:30 - 00000000 ____D () C:\ProgramData\ScanSoft 2014-05-04 09:29 - 2014-05-04 09:29 - 00000000 ____D () C:\Program Files (x86)\ScanSoft 2014-05-04 09:28 - 2014-05-04 09:28 - 00000000 ____D () C:\ProgramData\Brother 2014-05-03 17:42 - 2014-05-03 17:42 - 00000923 _____ () C:\Users\Uwe\Desktop\RealTemp.lnk 2014-05-02 14:31 - 2014-05-15 16:54 - 00000000 ___SD () C:\Windows\system32\CompatTel 2014-04-22 00:54 - 2010-04-13 12:54 - 00131072 _____ (SafeNet Inc.) C:\Windows\system32\Drivers\aksfridge.sys 2014-04-22 00:54 - 2010-04-12 13:29 - 00074496 _____ (SafeNet Inc.) C:\Windows\system32\Drivers\aksdf.sys 2014-04-22 00:54 - 2009-12-16 17:44 - 03750400 _____ (SafeNet Inc.) C:\Windows\system32\hasplms.exe 2014-04-22 00:54 - 2009-12-16 17:44 - 03750400 _____ (SafeNet Inc.) C:\Windows\system32\aksllmtp.exe 2014-04-22 00:54 - 2009-03-13 11:55 - 00318464 _____ (Aladdin Knowledge Systems Ltd.) C:\Windows\system32\Drivers\hardlock.sys 2014-04-22 00:53 - 2014-05-20 15:38 - 00001316 ____H () C:\Windows\Tasks\{DD8046B0-2077-4899-AFCD-A0D034E183D4}.job 2014-04-22 00:53 - 2014-05-05 08:00 - 00000388 _____ () C:\Windows\Tasks\X-Rite Device Services Software Updater.job 2014-04-22 00:53 - 2014-04-22 00:53 - 00003486 _____ () C:\Windows\System32\Tasks\{DD8046B0-2077-4899-AFCD-A0D034E183D4} 2014-04-22 00:53 - 2014-04-22 00:53 - 00002866 _____ () C:\Windows\System32\Tasks\X-Rite Device Services Software Updater 2014-04-22 00:53 - 2014-04-22 00:53 - 00000832 _____ () C:\Users\Public\Desktop\i1Profiler.lnk 2014-04-22 00:53 - 2014-04-22 00:53 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\X-Rite 2014-04-22 00:53 - 2014-04-22 00:53 - 00000000 ____D () C:\Program Files (x86)\X-Rite 2014-04-22 00:53 - 2013-07-10 10:55 - 00145920 _____ (Nicomsoft Ltd.) C:\Windows\system32\DDCHelper.dll 2014-04-22 00:53 - 2013-07-10 10:55 - 00131584 _____ (Nicomsoft Ltd.) C:\Windows\SysWOW64\DDCHelper.dll 2014-04-22 00:53 - 2013-07-10 10:55 - 00125440 _____ (Nicomsoft Ltd.) C:\Windows\system32\DDCHelperX.dll 2014-04-22 00:53 - 2013-07-10 10:55 - 00108032 _____ (Nicomsoft Ltd.) C:\Windows\SysWOW64\DDCHelperX.dll 2014-04-22 00:53 - 2013-07-10 10:55 - 00020832 _____ (Nicomsoft Ltd.) C:\Windows\system32\Drivers\DDCDrv.sys 2014-04-22 00:53 - 2013-07-10 10:55 - 00010240 _____ (Nicomsoft Ltd.) C:\Windows\SysWOW64\Drivers\DDCDrv.sys 2014-04-21 12:03 - 2014-05-16 09:50 - 00000000 ___RD () C:\Users\Uwe\AppData\Roaming\X-Rite 2014-04-21 11:58 - 2014-04-21 12:07 - 00000000 ____D () C:\ProgramData\X-Rite ==================== One Month Modified Files and Folders ======= 2014-05-20 17:35 - 2014-05-20 17:34 - 00000000 ____D () C:\FRST 2014-05-20 17:19 - 2014-01-29 17:07 - 00000288 _____ () C:\Windows\Tasks\FoxTab.job 2014-05-20 17:13 - 2014-05-20 01:14 - 00043009 _____ () C:\Windows\WindowsUpdate.log 2014-05-20 17:00 - 2014-01-29 17:07 - 00000300 _____ () C:\Windows\Tasks\Digital Sites.job 2014-05-20 16:33 - 2014-05-20 15:42 - 00000000 ____D () C:\AdwCleaner 2014-05-20 16:17 - 2014-05-18 09:54 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2014-05-20 16:09 - 2014-04-17 23:20 - 00000000 ____D () C:\ProgramData\Kaspersky Lab 2014-05-20 15:43 - 2009-07-14 06:45 - 00014192 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-05-20 15:43 - 2009-07-14 06:45 - 00014192 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-05-20 15:42 - 2009-07-14 19:58 - 00700454 _____ () C:\Windows\system32\perfh007.dat 2014-05-20 15:42 - 2009-07-14 19:58 - 00150092 _____ () C:\Windows\system32\perfc007.dat 2014-05-20 15:42 - 2009-07-14 07:13 - 01624034 _____ () C:\Windows\system32\PerfStringBackup.INI 2014-05-20 15:38 - 2014-05-20 15:38 - 00000588 _____ () C:\Windows\PFRO.log 2014-05-20 15:38 - 2014-05-20 15:38 - 00000056 _____ () C:\Windows\setupact.log 2014-05-20 15:38 - 2014-05-20 15:38 - 00000000 _____ () C:\Windows\setuperr.log 2014-05-20 15:38 - 2014-05-14 15:38 - 00000000 ____D () C:\ProgramData\NVIDIA 2014-05-20 15:38 - 2014-04-22 00:53 - 00001316 ____H () C:\Windows\Tasks\{DD8046B0-2077-4899-AFCD-A0D034E183D4}.job 2014-05-20 15:38 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2014-05-20 13:15 - 2014-04-16 10:23 - 00000000 ____D () C:\Users\Uwe\.VirtualBox 2014-05-20 11:33 - 2014-05-20 11:33 - 00000000 ____D () C:\Users\Uwe\AppData\Local\Help 2014-05-20 08:41 - 2014-05-20 08:41 - 00000000 ____D () C:\Users\Uwe\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR 2014-05-20 08:41 - 2014-05-20 08:41 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR 2014-05-20 08:37 - 2014-05-20 08:37 - 00000000 ____D () C:\Users\Uwe\AppData\Roaming\WinRAR 2014-05-20 00:54 - 2014-05-20 00:54 - 00000000 ____D () C:\Users\Uwe\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Xilisoft 2014-05-20 00:54 - 2014-05-20 00:54 - 00000000 ____D () C:\Users\Uwe\AppData\Local\Xilisoft Corporation 2014-05-20 00:38 - 2014-05-20 00:38 - 00000620 _____ () C:\Users\Uwe\Desktop\Revo Uninstaller.lnk 2014-05-20 00:19 - 2014-05-20 00:19 - 00045017 _____ () C:\Users\Uwe\AppData\Local\recently-used.xbel 2014-05-20 00:19 - 2014-01-22 02:39 - 00000000 ____D () C:\Users\Uwe\AppData\Local\gtk-2.0 2014-05-20 00:19 - 2014-01-22 02:36 - 00000000 ____D () C:\Users\Uwe\.gimp-2.8 2014-05-18 20:30 - 2014-05-18 20:30 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdMtpDr_01_09_00.Wdf 2014-05-18 12:02 - 2014-05-18 12:01 - 00000146 _____ () C:\Users\Uwe\AppData\Roaming\ReadMeDatensicherung.txt 2014-05-18 09:54 - 2014-05-18 09:54 - 00000625 _____ () C:\Users\Public\Desktop\Malwarebytes.lnk 2014-05-18 09:54 - 2014-05-18 09:54 - 00000000 ____D () C:\ProgramData\Malwarebytes 2014-05-16 12:32 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache 2014-05-16 10:15 - 2014-03-21 03:52 - 00000000 ___RD () C:\gurm 2014-05-16 09:52 - 2014-01-22 00:01 - 00000000 ___RD () C:\Users\Uwe\AppData\Roaming\Blender Foundation 2014-05-16 09:51 - 2014-03-31 22:23 - 00000000 ___RD () C:\Users\Uwe\AppData\Roaming\krita 2014-05-16 09:51 - 2014-01-23 13:01 - 00000000 ___RD () C:\Users\Uwe\AppData\Roaming\inkscape 2014-05-16 09:51 - 2014-01-21 16:58 - 00000000 ___RD () C:\Users\Uwe\AppData\Roaming\Mozilla 2014-05-16 09:50 - 2014-04-21 12:03 - 00000000 ___RD () C:\Users\Uwe\AppData\Roaming\X-Rite 2014-05-16 09:50 - 2014-03-19 17:51 - 00000000 ___RD () C:\Users\Uwe\AppData\Roaming\WTablet 2014-05-15 18:55 - 2014-05-15 18:55 - 00000552 _____ () C:\Users\Uwe\Desktop\SpeedFan.lnk 2014-05-15 18:55 - 2014-05-15 18:55 - 00000045 _____ () C:\Windows\SysWOW64\initdebug.nfo 2014-05-15 17:46 - 2014-05-15 17:46 - 00000583 _____ () C:\Users\Uwe\Desktop\FurMark.lnk 2014-05-15 17:46 - 2014-05-15 13:07 - 00000000 ____D () C:\Users\Uwe\AppData\Roaming\NVIDIA 2014-05-15 16:54 - 2014-05-02 14:31 - 00000000 ___SD () C:\Windows\system32\CompatTel 2014-05-15 16:54 - 2014-01-21 14:27 - 00000000 ___RD () C:\Users\Uwe\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup 2014-05-15 16:54 - 2014-01-21 14:27 - 00000000 ___RD () C:\Users\Uwe\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools 2014-05-15 16:54 - 2014-01-21 14:27 - 00000000 ____D () C:\Users\Uwe 2014-05-15 16:54 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\PolicyDefinitions 2014-05-15 16:53 - 2014-01-21 15:14 - 00000000 ____D () C:\Windows\system32\MRT 2014-05-15 16:52 - 2010-02-10 00:33 - 93223848 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2014-05-14 16:37 - 2014-05-14 16:37 - 00000000 ____D () C:\Users\Uwe\Documents\DonationCoder 2014-05-14 16:37 - 2014-05-14 16:37 - 00000000 ____D () C:\ProgramData\DonationCoder 2014-05-14 15:59 - 2014-01-21 16:37 - 00000000 ____D () C:\Users\Uwe\AppData\Local\NVIDIA Corporation 2014-05-14 15:59 - 2014-01-21 15:39 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation 2014-05-14 15:59 - 2014-01-21 15:39 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation 2014-05-14 15:58 - 2014-05-14 15:57 - 00000000 ____D () C:\Users\Uwe\AppData\Local\NVIDIA 2014-05-14 15:57 - 2014-05-14 15:57 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation 2014-05-14 15:57 - 2014-05-14 15:57 - 00000000 ____D () C:\Program Files (x86)\AGEIA Technologies 2014-05-14 15:57 - 2014-01-21 15:39 - 00000000 ____D () C:\Program Files\NVIDIA Corporation 2014-05-14 15:50 - 2014-05-14 15:50 - 00000000 ____D () C:\Windows\pss 2014-05-14 15:50 - 2009-07-14 05:20 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup 2014-05-14 15:36 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\Help 2014-05-14 15:01 - 2014-01-21 15:01 - 00000000 ____D () C:\Program Files\Intel 2014-05-14 14:55 - 2014-05-14 14:55 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel 2014-05-14 14:54 - 2014-01-21 16:24 - 00000000 ____D () C:\Program Files (x86)\Intel 2014-05-14 14:52 - 2014-05-14 14:52 - 00000000 ____D () C:\Windows\SysWOW64\RTCOM 2014-05-14 14:52 - 2014-05-14 14:52 - 00000000 ____D () C:\Program Files\Realtek 2014-05-14 14:51 - 2014-01-21 16:22 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information 2014-05-14 14:50 - 2014-05-14 14:50 - 00000000 ____D () C:\Program Files (x86)\Realtek 2014-05-14 14:29 - 2014-05-07 08:26 - 00692400 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2014-05-14 14:29 - 2014-05-07 08:26 - 00070832 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2014-05-13 11:08 - 2014-02-05 17:36 - 00004560 _____ () C:\Users\Uwe\AppData\Roaming\CamStudio.cfg 2014-05-13 11:08 - 2014-02-05 17:36 - 00000408 _____ () C:\Users\Uwe\AppData\Roaming\CamShapes.ini 2014-05-13 11:08 - 2014-02-05 17:36 - 00000408 _____ () C:\Users\Uwe\AppData\Roaming\CamLayout.ini 2014-05-13 11:08 - 2014-02-05 17:36 - 00000138 _____ () C:\Users\Uwe\AppData\Roaming\Camdata.ini 2014-05-13 11:05 - 2014-02-05 17:35 - 00000096 _____ () C:\Users\Uwe\AppData\Roaming\version2.xml 2014-05-12 14:57 - 2014-05-12 14:57 - 00000804 _____ () C:\Users\Uwe\Desktop\CPU-Z.lnk 2014-05-12 14:31 - 2014-05-12 14:31 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CPUID 2014-05-12 14:27 - 2014-05-12 14:27 - 00000859 _____ () C:\Users\Uwe\Desktop\GPU-Z.lnk 2014-05-12 12:48 - 2009-07-14 07:08 - 00032640 _____ () C:\Windows\Tasks\SCHEDLGU.TXT 2014-05-11 12:22 - 2014-05-11 12:23 - 00000687 _____ () C:\Users\Uwe\Dokumente - Verknüpfung.lnk 2014-05-11 12:13 - 2014-01-21 14:27 - 00000000 ___RD () C:\Users\Uwe\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories 2014-05-11 12:13 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\registration 2014-05-11 11:26 - 2014-02-15 16:54 - 00000000 ____D () C:\Users\Uwe\AppData\Roaming\vlc 2014-05-09 08:14 - 2014-05-15 12:22 - 00477184 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll 2014-05-09 08:11 - 2014-05-15 12:22 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll 2014-05-08 13:41 - 2014-01-21 16:16 - 00000000 ____D () C:\Users\Uwe\AppData\Roaming\Adobe 2014-05-07 08:26 - 2014-01-21 18:54 - 00000000 ____D () C:\Users\Uwe\AppData\Local\Adobe 2014-05-06 06:40 - 2014-05-15 16:53 - 23544320 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-05-06 06:17 - 2014-05-15 16:53 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-05-06 05:25 - 2014-05-15 16:53 - 17382912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2014-05-06 05:07 - 2014-05-15 16:53 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2014-05-06 05:00 - 2014-05-15 16:53 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2014-05-06 04:10 - 2014-05-15 16:53 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2014-05-05 08:00 - 2014-04-22 00:53 - 00000388 _____ () C:\Windows\Tasks\X-Rite Device Services Software Updater.job 2014-05-04 16:29 - 2014-05-04 16:29 - 00000000 ____D () C:\Program Files (x86)\MSXML 4.0 2014-05-04 10:08 - 2014-05-04 10:08 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime 2014-05-04 10:08 - 2014-05-04 10:08 - 00000000 ____D () C:\ProgramData\Apple Computer 2014-05-04 09:40 - 2014-01-21 16:26 - 00064496 _____ () C:\Users\Uwe\AppData\Local\GDIPFONTCACHEV1.DAT 2014-05-04 09:39 - 2014-05-04 09:39 - 00000000 ____D () C:\Users\Uwe\AppData\Local\Scansoft 2014-05-04 09:39 - 2009-07-14 06:45 - 00294736 _____ () C:\Windows\system32\FNTCACHE.DAT 2014-05-04 09:38 - 2014-05-04 09:30 - 00000000 ____D () C:\ProgramData\InstallShield 2014-05-04 09:37 - 2014-05-04 09:37 - 00000425 _____ () C:\Windows\BRWMARK.INI 2014-05-04 09:37 - 2014-05-04 09:37 - 00000218 _____ () C:\Windows\Brpfx04a.ini 2014-05-04 09:37 - 2014-05-04 09:37 - 00000085 _____ () C:\Windows\brpcfx.ini 2014-05-04 09:37 - 2014-05-04 09:37 - 00000027 _____ () C:\Windows\BRPP2KA.INI 2014-05-04 09:37 - 2014-05-04 09:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Brother 2014-05-04 09:36 - 2014-05-04 09:36 - 00000066 _____ () C:\Windows\Brfaxrx.ini 2014-05-04 09:36 - 2014-05-04 09:36 - 00000050 _____ () C:\Windows\system32\bridf08a.dat 2014-05-04 09:36 - 2014-05-04 09:36 - 00000000 ____D () C:\Users\Public\Documents\BrFaxRx 2014-05-04 09:36 - 2014-05-04 09:36 - 00000000 ____D () C:\Program Files (x86)\Brother 2014-05-04 09:31 - 2014-05-04 09:31 - 00000000 ____D () C:\Program Files\Nuance 2014-05-04 09:30 - 2014-05-04 09:30 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ScanSoft PaperPort 11 2014-05-04 09:30 - 2014-05-04 09:29 - 00000000 ____D () C:\ProgramData\ScanSoft 2014-05-04 09:29 - 2014-05-04 09:29 - 00000000 ____D () C:\Program Files (x86)\ScanSoft 2014-05-04 09:28 - 2014-05-04 09:28 - 00000000 ____D () C:\ProgramData\Brother 2014-05-03 17:42 - 2014-05-03 17:42 - 00000923 _____ () C:\Users\Uwe\Desktop\RealTemp.lnk 2014-04-30 20:29 - 2014-05-14 15:57 - 01225920 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll 2014-04-30 20:29 - 2014-05-14 15:57 - 01081112 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll 2014-04-28 16:36 - 2014-04-16 10:26 - 00000000 ____D () C:\Users\Uwe\VirtualBox VMs 2014-04-28 09:32 - 2014-03-22 03:02 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\XnView 2014-04-25 08:40 - 2014-01-22 15:27 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe 2014-04-25 08:40 - 2014-01-22 15:27 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe 2014-04-25 08:40 - 2014-01-22 15:27 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe 2014-04-25 08:40 - 2014-01-22 15:27 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll 2014-04-25 08:40 - 2014-01-22 15:27 - 00000000 ____D () C:\ProgramData\Oracle 2014-04-24 23:59 - 2014-01-21 19:05 - 00000000 ____D () C:\Users\Uwe\AppData\Roaming\Foxit Software 2014-04-22 00:54 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\Setup 2014-04-22 00:53 - 2014-04-22 00:53 - 00003486 _____ () C:\Windows\System32\Tasks\{DD8046B0-2077-4899-AFCD-A0D034E183D4} 2014-04-22 00:53 - 2014-04-22 00:53 - 00002866 _____ () C:\Windows\System32\Tasks\X-Rite Device Services Software Updater 2014-04-22 00:53 - 2014-04-22 00:53 - 00000832 _____ () C:\Users\Public\Desktop\i1Profiler.lnk 2014-04-22 00:53 - 2014-04-22 00:53 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\X-Rite 2014-04-22 00:53 - 2014-04-22 00:53 - 00000000 ____D () C:\Program Files (x86)\X-Rite 2014-04-22 00:48 - 2014-03-19 17:50 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wacom Tablett 2014-04-22 00:47 - 2014-03-19 17:50 - 00000000 ____D () C:\Program Files\TabletPlugins 2014-04-22 00:47 - 2014-03-19 17:50 - 00000000 ____D () C:\Program Files\Tablet 2014-04-22 00:47 - 2014-03-19 17:50 - 00000000 ____D () C:\Program Files (x86)\TabletPlugins 2014-04-22 00:47 - 2014-01-22 15:27 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java 2014-04-22 00:47 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\AppCompat 2014-04-21 12:07 - 2014-04-21 11:58 - 00000000 ____D () C:\ProgramData\X-Rite Files to move or delete: ==================== C:\Users\Uwe\AppData\Roaming\CamLayout.ini C:\Users\Uwe\AppData\Roaming\CamShapes.ini C:\Windows\Tasks\{DD8046B0-2077-4899-AFCD-A0D034E183D4}.job ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe [2014-05-15 12:22] - [2014-03-04 11:43] - 0455168 ____A (Microsoft Corporation) 88AB9B72B4BF3963A0DE0820B4B0B06C C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\rpcss.dll => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2014-05-19 00:54 ==================== End Of Log ============================ --- --- --- --- --- --- Addition: Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 17-05-2014 Ran by Uwe at 2014-05-20 17:35:33 Running from J:\Installation\Programme\FarbarRecoveryScanToolFRST64 Boot Mode: Normal ========================================================== ==================== Security Center ======================== AV: Kaspersky Internet Security (Enabled - Up to date) {179979E8-273D-D14E-0543-2861940E4886} AS: Kaspersky Internet Security (Enabled - Up to date) {ACF8980C-0107-DEC0-3FF3-1313EF89023B} AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} FW: Kaspersky Internet Security (Enabled) {2FA2F8CD-6D52-D016-2E1C-81546ADD0FFD} ==================== Installed Programs ====================== 7-Zip 9.20 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0920-000001000000}) (Version: 9.20.00.0 - Igor Pavlov) abrMate version 1.1 (HKLM-x32\...\abrMate_is1) (Version: 1.1 - ) Adobe Flash Player 13 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 13.0.0.214 - Adobe Systems Incorporated) Apple Application Support (HKLM-x32\...\{46F044A5-CE8B-4196-984E-5BD6525E361D}) (Version: 2.3.6 - Apple Inc.) Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.) Brother MFL-Pro Suite MFC-5890CN (HKLM-x32\...\{20E970DF-A7B2-4345-9DEB-72213A29645E}) (Version: 1.0.1.0 - Brother Industries, Ltd.) CamStudio 2.7.2 (HKLM\...\{04B83666-3A62-452B-85D3-70F8117F2329}_is1) (Version: 2.7.2 - CamStudio Open Source) CamStudio Lossless Codec v1.5 (HKLM-x32\...\camcodec) (Version: 1.5 - CamStudio) CCleaner (HKLM\...\CCleaner) (Version: 4.06 - Piriform) CDBurnerXP (HKLM-x32\...\{7E265513-8CDA-4631-B696-F40D983F3B07}_is1) (Version: 4.5.2.4478 - CDBurnerXP) ColorPicker Version 2.5 (HKLM-x32\...\{2A999A57-4530-41AC-AF6B-E5B7A28BA357}_is1) (Version: 2.5 - Cronoxyd.de) CPUID CPU-Z 1.69.2 (HKLM\...\CPUID CPU-Z_is1) (Version: - ) Folderico 4.0 RC12 (HKLM-x32\...\Folderico) (Version: 4.0 RC12 - Shedko ( www.softq.org )) Foxit Cloud (HKLM-x32\...\{41914D8B-9D6E-4764-A1F9-BC43FB6782C1}_is1) (Version: 1.3.99.311 - Foxit Corporation) Foxit Reader (HKLM-x32\...\Foxit Reader_is1) (Version: 6.2.0.429 - Foxit Corporation) Geeks3D FurMark 1.13.0 (HKLM-x32\...\{2397CAD4-2263-4CD0-96BE-E43A980B9C9A}_is1) (Version: - Geeks3D) GIMP 2.8.10 (HKLM\...\GIMP-2_is1) (Version: 2.8.10 - The GIMP Team) Google Books Downloader version 2.3 (HKLM-x32\...\{216729B6-014A-F413-814F-F17F74FBA113}_is1) (Version: 2.3 - GBOOKSDOWNLOADER.COM) i1Profiler (HKLM-x32\...\i1Profiler_is1) (Version: 1.5.0 - X-Rite) Inkscape 0.48.4 (HKLM-x32\...\Inkscape) (Version: 0.48.4 - ) Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.5.15.1730 - Intel Corporation) Intel(R) Network Connections 18.5.54.0 (HKLM\...\PROSetDX) (Version: 18.5.54.0 - Intel) Intel(R) Network Connections 18.5.54.0 (Version: 18.5.54.0 - Intel) Hidden Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 12.8.0.1016 - Intel Corporation) Intel(R) Rapid Storage Technology (Version: 12.8.0.1016 - Intel Corporation) Hidden Intel(R) USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 2.5.0.19 - Intel Corporation) Intel® Trusted Connect Service Client (Version: 1.31.8.1 - Intel Corporation) Hidden Java 7 Update 55 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217055FF}) (Version: 7.0.550 - Oracle) Java Auto Updater (x32 Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden Kaspersky Internet Security (HKLM-x32\...\InstallWIX_{6F6873E3-5C92-4049-B511-231A138DD090}) (Version: 14.0.0.4651 - Kaspersky Lab) Kaspersky Internet Security (x32 Version: 14.0.0.4651 - Kaspersky Lab) Hidden Krita Desktop (x64) 2.8.0.2 (HKLM\...\{301359D0-9736-4B53-B145-E7A99DDAA61A}) (Version: 2.8.0.2 - KO GmbH) Malwarebytes Anti-Malware Version 2.0.1.1004 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.1.1004 - Malwarebytes Corporation) Mandelbulber 64-bit OpenCL (HKLM-x32\...\071592D0-6A2A-41B8-A86F-25977C29DAED) (Version: 1.21-1 - Krzysztof Marczak) Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation) Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation) Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{b341426f-8543-4e0d-96c3-e976f8ec5ab6}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 (Version: 11.0.61030 - Microsoft Corporation) Hidden Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 (Version: 11.0.61030 - Microsoft Corporation) Hidden Mozilla Firefox 26.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 26.0 (x86 de)) (Version: 26.0 - Mozilla) Mozilla Firefox 29.0.1 (x86 de) (HKCU\...\Mozilla Firefox 29.0.1 (x86 de)) (Version: 29.0.1 - Mozilla) Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 26.0 - Mozilla) MSI Afterburner 2.3.1 (HKLM-x32\...\Afterburner) (Version: 2.3.1 - MSI Co., LTD) MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation) MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation) NVIDIA 3D Vision Controller-Treiber 335.21 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 335.21 - NVIDIA Corporation) NVIDIA 3D Vision Treiber 335.23 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 335.23 - NVIDIA Corporation) NVIDIA GeForce Experience 2.0.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.0.1 - NVIDIA Corporation) NVIDIA Grafiktreiber 335.23 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 335.23 - NVIDIA Corporation) NVIDIA HD-Audiotreiber 1.3.30.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.30.1 - NVIDIA Corporation) NVIDIA Install Application (Version: 2.1002.151.1095 - NVIDIA Corporation) Hidden NVIDIA LED Visualizer 1.0 (Version: 1.0 - NVIDIA Corporation) Hidden NVIDIA Network Service (Version: 1.0 - NVIDIA Corporation) Hidden NVIDIA PhysX (x32 Version: 9.13.1220 - NVIDIA Corporation) Hidden NVIDIA PhysX-Systemsoftware 9.13.1220 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.13.1220 - NVIDIA Corporation) NVIDIA ShadowPlay 12.4.67 (Version: 12.4.67 - NVIDIA Corporation) Hidden NVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.13.3523 - NVIDIA Corporation) Hidden NVIDIA Systemsteuerung 335.23 (Version: 335.23 - NVIDIA Corporation) Hidden NVIDIA Update 12.4.67 (Version: 12.4.67 - NVIDIA Corporation) Hidden NVIDIA Update Core (Version: 12.4.67 - NVIDIA Corporation) Hidden NVIDIA Virtual Audio 1.2.23 (Version: 1.2.23 - NVIDIA Corporation) Hidden OpenOffice 4.0.1 (HKLM-x32\...\{0AEC308E-7EB3-47F7-BB59-F2C9C6166B27}) (Version: 4.01.9714 - Apache Software Foundation) Oracle VM VirtualBox 4.3.10 (HKLM\...\{3EC092F5-9457-4C31-8E8A-BBE4BB2A59FF}) (Version: 4.3.10 - Oracle Corporation) PaperPort Image Printer 64-bit (HKLM\...\{ABA4FAF1-6389-45F9-92CE-3914A4E5C471}) (Version: 1.00.0000 - Nuance Communications, Inc.) QuickTime 7 (HKLM-x32\...\{111EE7DF-FC45-40C7-98A7-753AC46B12FB}) (Version: 7.75.80.95 - Apple Inc.) Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7076 - Realtek Semiconductor Corp.) Revo Uninstaller 1.95 (HKLM-x32\...\Revo Uninstaller) (Version: 1.95 - VS Revo Group) Samsung Magician (HKLM-x32\...\{29AE3F9F-7158-4ca7-B1ED-28A73ECDB215}_is1) (Version: 4.3.0 - Samsung Electronics) Samsung_MonSetup (HKLM-x32\...\{8EA79DBF-D637-448A-89D6-410A087A4493}) (Version: 1.00.0000 - Samsung) ScanSoft PaperPort 11 (HKLM-x32\...\{02570AE0-BEE0-4A6C-BE3F-D806E9F2EA17}) (Version: 11.2.0000 - Nuance Communications, Inc.) Screenshot Captor 4.8.5 (HKLM-x32\...\ScreenshotCaptor_is1) (Version: - ) SHIELD Streaming (Version: 2.1.108 - NVIDIA Corporation) Hidden SiSoftware Sandra Lite 2014.SP1c (HKLM\...\{C3113E55-7BCB-4de3-8EBF-60E6CE6B2396}_is1) (Version: 20.25.2014.4 - SiSoftware) SpeedFan (remove only) (HKLM-x32\...\SpeedFan) (Version: - ) Total Commander 64-bit (Remove or Repair) (HKLM\...\Totalcmd64) (Version: 8.01 - Ghisler Software GmbH) Unlocker 1.9.2 (HKLM\...\Unlocker) (Version: 1.9.2 - Cedrick Collomb) VC_CRT_x64 (Version: 1.02.0000 - Intel Corporation) Hidden VLC media player 2.1.3 (HKLM-x32\...\VLC media player) (Version: 2.1.3 - VideoLAN) Wacom Tablett (HKLM\...\Wacom Tablet Driver) (Version: 6.3.7-6 - Wacom Technology Corp.) WebTablet FB Plugin 32 bit (HKLM-x32\...\Wacom WebTabletPlugin for Internet Explorer and Netscape) (Version: 2.1.0.3 - Wacom Technology Corp.) WebTablet FB Plugin 64 bit (HKLM\...\Wacom WebTabletPlugin for Internet Explorer and Netscape) (Version: 2.1.0.3 - Wacom Technology Corp.) WinFF 1.5.3 (Codename EMMA) (HKLM-x32\...\WinFF_is1) (Version: - WinFF.org) WinRAR 5.01 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.01.0 - win.rar GmbH) XMedia Recode Version 3.1.7.9 (HKLM-x32\...\{DDA3C325-47B2-4730-9672-BF3771C08799}_is1) (Version: 3.1.7.9 - XMedia Recode) XnView 2.22 (HKLM-x32\...\XnView_is1) (Version: 2.22 - Gougelet Pierre-e) XnView Shell Extension 3.5.0 (64bits) (HKLM-x32\...\XnView Shell Extension_is1) (Version: 3.5.0 - Gougelet Pierre-e) X-Rite Device Services Manager (HKLM-x32\...\{DD8046B0-2077-4899-AFCD-A0D034E183D4}) (Version: 2.3.75 - X-Rite) ==================== Restore Points ========================= 14-05-2014 13:57:36 DirectX wurde installiert 14-05-2014 13:59:36 DirectX wurde installiert 15-05-2014 14:52:37 Windows Update 15-05-2014 15:11:41 NachBereinigung_15052014_1711 19-05-2014 23:02:08 Revo Uninstaller's restore point - Xilisoft ISO Pro 19-05-2014 23:06:03 Revo Uninstaller's restore point - Bild-Master 1.0.3.7 20-05-2014 13:38:44 NachBereinigung_20052014_1538 ==================== Hosts content: ========================== 2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts ==================== Scheduled Tasks (whitelisted) ============= Task: {1E34CEFD-6A2E-4660-B84C-62FA3788F854} - System32\Tasks\Microsoft\Windows\TabletPC\InputPersonalization => C:\Program Files\Common Files\Microsoft Shared\Ink\InputPersonalization.exe [2009-07-14] (Microsoft Corporation) Task: {268B3AD0-ECD5-48F7-B821-3A20AE688A4D} - System32\Tasks\X-Rite Device Services Software Updater => C:\Program Files (x86)\X-Rite\Devices\Services\XRD Software Update.exe [2013-07-02] (X-Rite Inc.) Task: {42E2A840-69A9-4A85-9F99-F88FB79251E3} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.) Task: {60D05BF0-8A90-4A2C-9CF0-AA58F5C1163C} - System32\Tasks\CCleanerSkipUAC => I:\CCleaner\CCleaner.exe [2013-09-19] (Piriform Ltd) Task: {BCACD2A9-9CBD-4BF8-9370-E3523F0D8DF0} - System32\Tasks\{DD8046B0-2077-4899-AFCD-A0D034E183D4} => C:\Users\Uwe\AppData\Local\Temp\is-0L684.tmp\XRD Manager.exe <==== ATTENTION Task: {C0A38CC9-BBC0-4E90-872B-DAA306EE7A26} - System32\Tasks\Microsoft\LUT Loader\Lut Loader XRGamma => I:\x-write_i1Display\i1Profiler\XRGamma.exe [2011-06-21] (LOGO Kommunikations- und Drucktechnik GmbH & Co. KG) Task: {CC268F0F-929E-4C8F-93E2-DD2F0A860075} - System32\Tasks\FoxTab => C:\Users\Uwe\AppData\Roaming\FoxTab\UpdateProc\UpdateTask.exe <==== ATTENTION Task: {E6BC832D-353C-4C1F-9E2B-B1474074B2ED} - \Digital Sites No Task File <==== ATTENTION Task: C:\Windows\Tasks\Digital Sites.job => C:\Users\Uwe\AppData\Roaming\DigitalSites\UpdateProc\UpdateTask.exe <==== ATTENTION Task: C:\Windows\Tasks\FoxTab.job => C:\Users\Uwe\AppData\Roaming\FoxTab\UpdateProc\UpdateTask.exe <==== ATTENTION Task: C:\Windows\Tasks\X-Rite Device Services Software Updater.job => C:\Program Files (x86)\X-Rite\Devices\Services\XRD Software Update.exe Task: C:\Windows\Tasks\{DD8046B0-2077-4899-AFCD-A0D034E183D4}.job => C:\Users\Uwe\AppData\Local\Temp\is-0L684.tmp\XRD Manager.exe ==================== Loaded Modules (whitelisted) ============= 2014-05-14 15:36 - 2014-03-04 15:05 - 00116056 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll 2014-05-04 09:36 - 2005-04-22 13:36 - 00143360 ____N () C:\Windows\system32\BrSNMP64.dll 2014-03-19 17:50 - 2013-12-04 18:35 - 01185048 _____ () C:\Program Files\Tablet\Wacom\libxml2.dll 2013-06-17 12:35 - 2013-06-17 12:35 - 00478400 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\dblite.dll 2013-05-08 14:52 - 2013-05-08 14:52 - 01270464 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\kpcengine.2.3.dll 2013-06-21 13:29 - 2013-06-21 13:29 - 01588224 _____ () C:\Program Files (x86)\X-Rite\Devices\rm200\GoldenEye.dll 2013-06-21 13:29 - 2013-06-21 13:29 - 02633728 _____ () C:\Program Files (x86)\X-Rite\Devices\colormunki\colormunki.dll 2014-01-21 17:04 - 2013-11-28 13:14 - 00013824 _____ () I:\SamsungMagician\SAMSUNG_SSD.dll 2014-01-21 17:04 - 2013-11-28 19:59 - 00098816 _____ () I:\SamsungMagician\PAL.dll 2014-01-21 17:04 - 2013-11-28 19:59 - 00034304 _____ () I:\SamsungMagician\SATA.dll 2014-01-21 17:04 - 2013-11-28 19:59 - 00032768 _____ () I:\SamsungMagician\SAT.dll 2014-01-21 17:04 - 2013-11-28 20:00 - 00031232 _____ () I:\SamsungMagician\SMINI.dll 2014-01-21 17:04 - 2013-11-28 19:59 - 00029696 _____ () I:\SamsungMagician\SAS.dll 2014-01-21 16:27 - 2013-09-16 13:17 - 01242584 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll 2014-05-10 10:58 - 2014-05-10 10:58 - 03839088 _____ () I:\Firefox\mozjs.dll ==================== Alternate Data Streams (whitelisted) ========= ==================== Safe Mode (whitelisted) =================== ==================== EXE Association (whitelisted) ============= ==================== Disabled items from MSCONFIG ============== MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^XRGamma.lnk => C:\Windows\pss\XRGamma.lnk.CommonStartup MSCONFIG\startupreg: ControlCenter3 => C:\Program Files (x86)\Brother\ControlCenter3\brctrcen.exe /autorun MSCONFIG\startupreg: QuickTime Task => "I:\Quicktime\QTTask.exe" -atboottime ==================== Faulty Device Manager Devices ============= ==================== Event log errors: ========================= Application errors: ================== Error: (05/20/2014 03:58:05 PM) (Source: Application Hang) (EventID: 1002) (User: ) Description: Programm mbam.exe, Version 1.0.0.500 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen. Prozess-ID: db8 Startzeit: 01cf74337bc954cc Endzeit: 0 Anwendungspfad: I:\MalwarebytesAntiMalware\mbam.exe Berichts-ID: c2017049-e026-11e3-bdcd-94de807b9bf2 Error: (05/20/2014 03:38:11 PM) (Source: Windows Search Service) (EventID: 7010) (User: ) Description: Der Index kann nicht initialisiert werden. Details: Der Inhaltsindexkatalog ist fehlerhaft. (HRESULT : 0xc0041801) (0xc0041801) Error: (05/20/2014 03:38:11 PM) (Source: Windows Search Service) (EventID: 3058) (User: ) Description: Die Anwendung kann nicht initialisiert werden. Kontext: Windows Anwendung Details: Der Inhaltsindexkatalog ist fehlerhaft. (HRESULT : 0xc0041801) (0xc0041801) Error: (05/20/2014 03:38:11 PM) (Source: Windows Search Service) (EventID: 3028) (User: ) Description: Das Gatherer-Objekt kann nicht initialisiert werden. Kontext: Windows Anwendung, SystemIndex Katalog Details: Der Inhaltsindexkatalog ist fehlerhaft. (HRESULT : 0xc0041801) (0xc0041801) Error: (05/20/2014 03:38:11 PM) (Source: Windows Search Service) (EventID: 3029) (User: ) Description: Plug-In in <Search.TripoliIndexer> kann nicht initialisiert werden. Kontext: Windows Anwendung, SystemIndex Katalog Details: Element nicht gefunden. (HRESULT : 0x80070490) (0x80070490) Error: (05/20/2014 03:38:11 PM) (Source: Windows Search Service) (EventID: 3029) (User: ) Description: Plug-In in <Search.JetPropStore> kann nicht initialisiert werden. Kontext: Windows Anwendung, SystemIndex Katalog Details: Der Inhaltsindexkatalog ist fehlerhaft. (HRESULT : 0xc0041801) (0xc0041801) Error: (05/20/2014 03:38:11 PM) (Source: Windows Search Service) (EventID: 9002) (User: ) Description: Die Eigenschaftenspeicherdaten können von Windows Search nicht geladen werden. Kontext: Windows Anwendung, SystemIndex Katalog Details: Die Inhaltsindexdatenbank ist fehlerhaft. (HRESULT : 0xc0041800) (0xc0041800) Error: (05/20/2014 03:38:11 PM) (Source: Windows Search Service) (EventID: 7042) (User: ) Description: Windows Search wird aufgrund eines Problems bei der Indizierung The catalog is corrupt beendet. Details: Der Inhaltsindexkatalog ist fehlerhaft. (HRESULT : 0xc0041801) (0xc0041801) Error: (05/20/2014 03:38:11 PM) (Source: Windows Search Service) (EventID: 7040) (User: ) Description: Vom Suchdienst wurden beschädigte Datendateien im Index {id=4700} erkannt. Vom Dienst wird versucht, dieses Problem durch Neuerstellung des Indexes automatisch zu beheben. Details: Der Inhaltsindexkatalog ist fehlerhaft. (HRESULT : 0xc0041801) (0xc0041801) Error: (05/20/2014 03:38:11 PM) (Source: Windows Search Service) (EventID: 9000) (User: ) Description: Der Jet-Eigenschaftenspeicher kann von Windows Search nicht geöffnet werden. Details: 0x%08x (0xc0041800 - Die Inhaltsindexdatenbank ist fehlerhaft. (HRESULT : 0xc0041800)) System errors: ============= Error: (05/20/2014 03:38:15 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Der Dienst "Windows Search" wurde aufgrund folgenden Fehlers nicht gestartet: %%1053 Error: (05/20/2014 03:38:15 PM) (Source: Service Control Manager) (EventID: 7009) (User: ) Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Windows Search erreicht. Error: (05/20/2014 03:38:15 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Der Dienst "Windows Search" wurde aufgrund folgenden Fehlers nicht gestartet: %%1053 Error: (05/20/2014 03:38:15 PM) (Source: Service Control Manager) (EventID: 7009) (User: ) Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Windows Search erreicht. Error: (05/20/2014 03:38:15 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Der Dienst "Windows Search" wurde aufgrund folgenden Fehlers nicht gestartet: %%1053 Error: (05/20/2014 03:38:15 PM) (Source: Service Control Manager) (EventID: 7009) (User: ) Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Windows Search erreicht. Error: (05/20/2014 03:38:15 PM) (Source: DCOM) (EventID: 10005) (User: ) Description: 1053WSearch{7D096C5F-AC08-4F1F-BEB7-5C22C517CE39} Error: (05/20/2014 03:38:15 PM) (Source: DCOM) (EventID: 10005) (User: ) Description: 1053WSearch{9E175B6D-F52A-11D8-B9A5-505054503030} Error: (05/20/2014 03:38:11 PM) (Source: Service Control Manager) (EventID: 7031) (User: ) Description: Der Dienst "Windows Search" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 30000 Millisekunden durchgeführt: Neustart des Diensts. Error: (05/20/2014 03:38:11 PM) (Source: Service Control Manager) (EventID: 7024) (User: ) Description: Der Dienst "Windows Search" wurde mit folgendem dienstspezifischem Fehler beendet: %%-1073473535. Microsoft Office Sessions: ========================= Error: (05/20/2014 03:58:05 PM) (Source: Application Hang) (EventID: 1002) (User: ) Description: mbam.exe1.0.0.500db801cf74337bc954cc0I:\MalwarebytesAntiMalware\mbam.exec2017049-e026-11e3-bdcd-94de807b9bf2 Error: (05/20/2014 03:38:11 PM) (Source: Windows Search Service) (EventID: 7010) (User: ) Description: Details: Der Inhaltsindexkatalog ist fehlerhaft. (HRESULT : 0xc0041801) (0xc0041801) Error: (05/20/2014 03:38:11 PM) (Source: Windows Search Service) (EventID: 3058) (User: ) Description: Kontext: Windows Anwendung Details: Der Inhaltsindexkatalog ist fehlerhaft. (HRESULT : 0xc0041801) (0xc0041801) Error: (05/20/2014 03:38:11 PM) (Source: Windows Search Service) (EventID: 3028) (User: ) Description: Kontext: Windows Anwendung, SystemIndex Katalog Details: Der Inhaltsindexkatalog ist fehlerhaft. (HRESULT : 0xc0041801) (0xc0041801) Error: (05/20/2014 03:38:11 PM) (Source: Windows Search Service) (EventID: 3029) (User: ) Description: Kontext: Windows Anwendung, SystemIndex Katalog Details: Element nicht gefunden. (HRESULT : 0x80070490) (0x80070490) Search.TripoliIndexer Error: (05/20/2014 03:38:11 PM) (Source: Windows Search Service) (EventID: 3029) (User: ) Description: Kontext: Windows Anwendung, SystemIndex Katalog Details: Der Inhaltsindexkatalog ist fehlerhaft. (HRESULT : 0xc0041801) (0xc0041801) Search.JetPropStore Error: (05/20/2014 03:38:11 PM) (Source: Windows Search Service) (EventID: 9002) (User: ) Description: Kontext: Windows Anwendung, SystemIndex Katalog Details: Die Inhaltsindexdatenbank ist fehlerhaft. (HRESULT : 0xc0041800) (0xc0041800) Error: (05/20/2014 03:38:11 PM) (Source: Windows Search Service) (EventID: 7042) (User: ) Description: Details: Der Inhaltsindexkatalog ist fehlerhaft. (HRESULT : 0xc0041801) (0xc0041801) The catalog is corrupt Error: (05/20/2014 03:38:11 PM) (Source: Windows Search Service) (EventID: 7040) (User: ) Description: Details: Der Inhaltsindexkatalog ist fehlerhaft. (HRESULT : 0xc0041801) (0xc0041801) 4700 Error: (05/20/2014 03:38:11 PM) (Source: Windows Search Service) (EventID: 9000) (User: ) Description: Details: 0x%08x (0xc0041800 - Die Inhaltsindexdatenbank ist fehlerhaft. (HRESULT : 0xc0041800)) CodeIntegrity Errors: =================================== Date: 2014-05-20 12:40:25.211 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-05-20 12:40:25.211 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-05-20 12:40:25.211 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-05-20 12:40:25.211 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\KLELAMX64\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-05-20 12:40:25.211 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\KLELAMX64\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-05-20 12:40:25.211 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\KLELAMX64\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-05-20 02:03:55.021 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-05-20 02:03:55.020 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-05-20 02:03:55.019 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-05-20 02:01:07.297 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\KLELAMX64\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. ==================== Memory info =========================== Percentage of memory in use: 15% Total physical RAM: 16320.53 MB Available physical RAM: 13714.43 MB Total Pagefile: 16518.71 MB Available Pagefile: 13571.19 MB Total Virtual: 8192 MB Available Virtual: 8191.83 MB ==================== Drives ================================ Drive c: (System) (Fixed) (Total:80 GB) (Free:44.59 GB) NTFS Drive d: (VirtualWin) (Fixed) (Total:80 GB) (Free:19.72 GB) NTFS Drive e: (VirtualWin_2) (Fixed) (Total:31.79 GB) (Free:11.7 GB) NTFS Drive f: (RUS) (Fixed) (Total:20 GB) (Free:19.91 GB) NTFS Drive i: (Software) (Fixed) (Total:31.68 GB) (Free:28.12 GB) NTFS Drive j: (Daten) (Fixed) (Total:1680 GB) (Free:1479.3 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 112 GB) (Disk ID: AF7F44A0) Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=80 GB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=32 GB) - (Type=07 NTFS) ======================================================== Disk: 1 (Size: 112 GB) (Disk ID: AF7F44B8) Partition: GPT Partition Type. ======================================================== Disk: 2 (MBR Code: Windows 7 or 8) (Size: 1863 GB) (Disk ID: 5746564E) Partition 1: (Not Active) - (Size=20 GB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=-395142234112) - (Type=07 NTFS) ==================== End Of Log ============================ |
21.05.2014, 08:30 | #4 |
/// the machine /// TB-Ausbilder | Scan mit AdwCleaner 3.210 - Was mache ich mit den Ergebnissen? Funde von AdwCleaner löschen lassen. Downloade Dir bitte Malwarebytes Anti-Malware
Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
und ein frisches FRST log bitte.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
24.05.2014, 13:54 | #5 |
| Scan mit AdwCleaner 3.210 - Was mache ich mit den Ergebnissen? Hallo schrauber, vielen Dank für die Unterstützung und Entschuldigung wegen der späten Rückmeldung. Hier die LogFiles: Code:
ATTFilter Malwarebytes Anti-Malware www.malwarebytes.org Suchlauf Datum: 20.05.2014 Suchlauf-Zeit: 16:18:03 Logdatei: mbam.txt Administrator: Ja Version: 2.00.1.1004 Malware Datenbank: v2014.05.20.02 Rootkit Datenbank: v2014.03.27.01 Lizenz: Kostenlos Malware Schutz: Deaktiviert Bösartiger Webseiten Schutz: Deaktiviert Chameleon: Deaktiviert Betriebssystem: Windows 7 Service Pack 1 CPU: x64 Dateisystem: NTFS Benutzer: Uwe Suchlauf-Art: Bedrohungs-Suchlauf Ergebnis: Abgeschlossen Durchsuchte Objekte: 1 Verstrichene Zeit: 0 Min, 4 Sek Speicher: Deaktiviert Autostart: Deaktiviert Dateisystem: Aktiviert Archive: Aktiviert Rootkits: Deaktiviert Shuriken: Aktiviert PUP: Aktiviert PUM: Aktiviert Prozesse: 0 (No malicious items detected) Module: 0 (No malicious items detected) Registrierungsschlüssel: 0 (No malicious items detected) Registrierungswerte: 0 (No malicious items detected) Registrierungsdaten: 0 (No malicious items detected) Ordner: 0 (No malicious items detected) Dateien: 0 (No malicious items detected) Physische Sektoren: 0 (No malicious items detected) (end) Code:
ATTFilter ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Junkware Removal Tool (JRT) by Thisisu Version: 6.1.4 (04.06.2014:1) OS: Windows 7 Ultimate x64 Ran by Uwe on 24.05.2014 at 14:37:07,56 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~ Services ~~~ Registry Values ~~~ Registry Keys ~~~ Files ~~~ Folders ~~~ Event Viewer Logs were cleared ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Scan was completed on 24.05.2014 at 14:40:51,19 End of JRT log ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 24-05-2014 Ran by Uwe (administrator) on UWE_PC on 24-05-2014 14:45:08 Running from I:\FarbarRecovery ScanToolFRST64 Platform: Windows 7 Ultimate Service Pack 1 (X64) OS Language: German Standard Internet Explorer Version 11 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (Wacom Technology, Corp.) C:\Program Files\Tablet\Wacom\WTabletServicePro.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (Microsoft Corporation) C:\Windows\System32\wisptis.exe (Foxit Corporation) I:\FoxitReader\Foxit Cloud\FCUpdateService.exe (Microsoft Corporation) C:\Windows\System32\wisptis.exe (SafeNet Inc.) C:\Windows\System32\hasplms.exe (Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe (Intel Corporation) C:\Windows\System32\IPROSetMonitor.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe (X-Rite Inc.) C:\Program Files (x86)\X-Rite\Devices\Services\xrdd.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe (DonationCoder) I:\ScreenshotCaptor\ScreenshotCaptor.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (Nuance Communications, Inc.) C:\Program Files (x86)\ScanSoft\PaperPort\pptd40nt.exe (Brother Industries, Ltd.) C:\Program Files (x86)\Brother\Brmfcmon\BrMfcWnd.exe (Brother Industries, Ltd.) C:\Program Files (x86)\Brother\Brmfcmon\BrMfimon.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (Wacom Technology, Corp.) C:\Program Files\Tablet\Wacom\Wacom_TabletUser.exe (Wacom Technology) C:\Program Files\Tablet\Wacom\WacomHost.exe (Wacom Technology, Corp.) C:\Program Files\Tablet\Wacom\Wacom_Tablet.exe (Wacom Technology, Corp.) C:\Program Files\Tablet\Wacom\Wacom_TouchUser.exe (Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe (Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\ink\InputPersonalization.exe (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\klwtblfs.exe (Microsoft Corporation) C:\Windows\splwow64.exe (Microsoft Corporation) C:\Windows\System32\PrintIsolationHost.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13662936 2013-10-24] (Realtek Semiconductor) HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [287592 2013-08-07] (Intel Corporation) HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2199840 2014-04-30] (NVIDIA Corporation) HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\nvspcap64.dll [1225920 2014-04-30] (NVIDIA Corporation) HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [292848 2013-04-26] (Intel Corporation) HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.) HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation) HKLM-x32\...\Run: [SSBkgdUpdate] => C:\Program Files (x86)\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe [210472 2006-10-25] (Nuance Communications, Inc.) HKLM-x32\...\Run: [PaperPort PTD] => C:\Program Files (x86)\ScanSoft\PaperPort\pptd40nt.exe [29984 2008-07-09] (Nuance Communications, Inc.) HKLM-x32\...\Run: [IndexSearch] => C:\Program Files (x86)\ScanSoft\PaperPort\IndexSearch.exe [46368 2008-07-09] (Nuance Communications, Inc.) HKLM-x32\...\Run: [PPort11reminder] => C:\Program Files (x86)\ScanSoft\PaperPort\Ereg\Ereg.exe [328992 2007-08-31] (Nuance Communications, Inc.) HKLM-x32\...\Run: [BrMfcWnd] => C:\Program Files (x86)\Brother\Brmfcmon\BrMfcWnd.exe [1159168 2009-05-26] (Brother Industries, Ltd.) HKU\S-1-5-21-1481056539-1685603913-1254335098-1000\...\Run: [Screenshot Captor] => I:\ScreenshotCaptor\ScreenshotCaptor.exe [7963832 2014-05-14] (DonationCoder) HKU\S-1-5-21-1481056539-1685603913-1254335098-1000\...\MountPoints2: {0cf8ded1-82a8-11e3-85c5-806e6f6e6963} - L:\setup.exe Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\i1Profiler Tray.lnk ShortcutTarget: i1Profiler Tray.lnk -> I:\x-write_i1Display\i1Profiler\i1ProfilerTray.exe () Startup: C:\Users\Uwe\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Samsung Magician.lnk ShortcutTarget: Samsung Magician.lnk -> I:\SamsungMagician\Samsung Magician.exe (Samsung Electronics.) ==================== Internet (Whitelisted) ==================== BHO: Content Blocker Plugin - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\x64\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO) BHO: Virtual Keyboard Plugin - {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\x64\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO) BHO: Safe Money Plugin - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\x64\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO) BHO: URL Advisor Plugin - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\x64\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO) BHO-x32: Content Blocker Plugin - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO) BHO-x32: Virtual Keyboard Plugin - {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO) BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - I:\Java\bin\ssv.dll (Oracle Corporation) BHO-x32: Safe Money Plugin - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO) BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - I:\Java\bin\jp2ssv.dll (Oracle Corporation) BHO-x32: URL Advisor Plugin - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO) Tcpip\Parameters: [DhcpNameServer] 10.0.0.1 FireFox: ======== FF ProfilePath: C:\ProgramData\Kaspersky Lab\SafeBrowser\S-1-5-21-1481056539-1685603913-1254335098-1000\FireFox FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_13_0_0_214.dll () FF Plugin: @wacom.com/wtPlugin,version=2.1.0.3 - C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll (Wacom) FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_214.dll () FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf - I:\FoxitReader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation) FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf - I:\FoxitReader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation) FF Plugin-x32: @java.com/DTPlugin,version=10.55.2 - I:\Java\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=10.55.2 - I:\Java\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation) FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation) FF Plugin-x32: @videolan.org/vlc,version=2.1.3 - I:\VLC\npvlc.dll (VideoLAN) FF Plugin-x32: @wacom.com/wtPlugin,version=2.1.0.3 - C:\Program Files (x86)\TabletPlugins\npWacomTabletPlugin.dll (Wacom) FF Plugin HKCU: wacom.com/WacomTabletPlugin - C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll (Wacom) FF HKLM-x32\...\Firefox\Extensions: - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\url_advisor@kaspersky.com FF Extension: 卡巴斯基網址顧問 - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\url_advisor@kaspersky.com [2014-04-17] FF HKLM-x32\...\Firefox\Extensions: [virtual_keyboard@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\virtual_keyboard@kaspersky.com FF Extension: 虛擬鍵盤 - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\virtual_keyboard@kaspersky.com [2014-04-17] FF HKLM-x32\...\Firefox\Extensions: [content_blocker@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\content_blocker@kaspersky.com FF Extension: 惡意網站攔截器 - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\content_blocker@kaspersky.com [2014-04-17] FF HKLM-x32\...\Firefox\Extensions: [anti_banner@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\anti_banner@kaspersky.com FF Extension: Chặn quảng cáo - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\anti_banner@kaspersky.com [2014-04-17] FF HKLM-x32\...\Firefox\Extensions: [online_banking@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\online_banking@kaspersky.com FF Extension: Safe Money - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\online_banking@kaspersky.com [2014-04-17] FF StartMenuInternet: FIREFOX.EXE - I:\Firefox\firefox.exe ==================== Services (Whitelisted) ================= S2 AVP; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\avp.exe [214512 2013-10-17] (Kaspersky Lab ZAO) R2 FoxitCloudUpdateService; I:\FoxitReader\Foxit Cloud\FCUpdateService.exe [241728 2014-03-11] (Foxit Corporation) R2 hasplms; C:\Windows\system32\hasplms.exe [3750400 2009-12-16] (SafeNet Inc.) R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [15720 2013-08-07] (Intel Corporation) S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [828376 2013-08-27] (Intel(R) Corporation) R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-09-16] (Intel Corporation) R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1618888 2014-04-30] (NVIDIA Corporation) S4 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [21009352 2014-04-30] (NVIDIA Corporation) S3 SandraAgentSrv; I:\SiSoftSandraLite2014\SiSoftware Sandra Lite 2014.SP1c\RpcAgentSrv.exe [72344 2008-03-24] (SiSoftware) R2 WTabletServicePro; C:\Program Files\Tablet\Wacom\WTabletServicePro.exe [621336 2013-12-04] (Wacom Technology, Corp.) R2 xrdd.exe; C:\Program Files (x86)\X-Rite\Devices\Services\xrdd.exe [82800 2013-07-02] (X-Rite Inc.) ==================== Drivers (Whitelisted) ==================== R3 e1dexpress; C:\Windows\System32\DRIVERS\e1d62x64.sys [495376 2013-05-30] (Intel Corporation) R0 iaStorF; C:\Windows\System32\DRIVERS\iaStorF.sys [28008 2013-08-07] (Intel Corporation) R0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [458336 2014-04-17] (Kaspersky Lab ZAO) S4 klflt; C:\Windows\System32\DRIVERS\klflt.sys [115296 2014-04-17] (Kaspersky Lab ZAO) R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [625248 2014-04-17] (Kaspersky Lab ZAO) R1 KLIM6; C:\Windows\System32\DRIVERS\klim6.sys [29792 2013-10-17] (Kaspersky Lab ZAO) R3 klkbdflt; C:\Windows\System32\DRIVERS\klkbdflt.sys [29280 2014-04-17] (Kaspersky Lab ZAO) R3 klmouflt; C:\Windows\System32\DRIVERS\klmouflt.sys [29280 2013-10-17] (Kaspersky Lab ZAO) R1 klpd; C:\Windows\System32\DRIVERS\klpd.sys [15456 2013-04-12] (Kaspersky Lab ZAO) R1 kltdi; C:\Windows\System32\DRIVERS\kltdi.sys [55904 2013-05-14] (Kaspersky Lab ZAO) R1 kneps; C:\Windows\System32\DRIVERS\kneps.sys [178272 2014-04-17] (Kaspersky Lab ZAO) R3 MEIx64; C:\Windows\System32\DRIVERS\TeeDriverx64.sys [99288 2013-09-16] (Intel Corporation) R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [40392 2014-03-31] (NVIDIA Corporation) S3 SANDRA; I:\SiSoftSandraLite2014\SiSoftware Sandra Lite 2014.SP1c\WNt500x64\Sandra.sys [23112 2009-08-07] (SiSoftware) U5 UnlockerDriver5; I:\Unlocker\UnlockerDriver5.sys [12352 2010-07-01] () S3 VBoxUSB; C:\Windows\System32\Drivers\VBoxUSB.sys [115488 2014-03-25] (Oracle Corporation) R2 WinI2C-DDC; C:\Windows\system32\drivers\DDCDrv.sys [20832 2013-07-10] (Nicomsoft Ltd.) R2 WinI2C-DDC; C:\Windows\SysWOW64\drivers\DDCDrv.sys [10240 2013-07-10] (Nicomsoft Ltd.) S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X] S3 tsusbhub; system32\drivers\tsusbhub.sys [X] S3 VGPU; System32\drivers\rdvgkmd.sys [X] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-05-24 14:40 - 2014-05-24 14:40 - 00000619 _____ () C:\Users\Uwe\Desktop\JRT.txt 2014-05-24 14:24 - 2014-05-24 14:24 - 00000000 ____D () C:\Windows\ERUNT 2014-05-24 14:20 - 2014-05-24 14:20 - 00001146 _____ () C:\Users\Uwe\Desktop\mbam.txt 2014-05-24 13:53 - 2014-05-24 13:53 - 00000310 _____ () C:\Windows\PFRO.log 2014-05-24 13:27 - 2014-05-24 14:27 - 00000224 _____ () C:\Windows\setupact.log 2014-05-24 13:27 - 2014-05-24 13:27 - 00000000 _____ () C:\Windows\setuperr.log 2014-05-23 14:40 - 2014-05-23 14:40 - 00000000 ____D () C:\Users\Uwe\Desktop\GottModus.{ED7BA470-8E54-465E-825C-99712043E01C} 2014-05-20 17:34 - 2014-05-24 14:45 - 00000000 ____D () C:\FRST 2014-05-20 15:42 - 2014-05-24 13:51 - 00000000 ____D () C:\AdwCleaner 2014-05-20 11:33 - 2014-05-20 11:33 - 00000000 ____D () C:\Users\Uwe\AppData\Local\Help 2014-05-20 08:41 - 2014-05-20 08:41 - 00000000 ____D () C:\Users\Uwe\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR 2014-05-20 08:41 - 2014-05-20 08:41 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR 2014-05-20 08:37 - 2014-05-20 08:37 - 00000000 ____D () C:\Users\Uwe\AppData\Roaming\WinRAR 2014-05-20 01:14 - 2014-05-24 14:27 - 00266689 _____ () C:\Windows\WindowsUpdate.log 2014-05-20 00:54 - 2014-05-20 00:54 - 00000000 ____D () C:\Users\Uwe\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Xilisoft 2014-05-20 00:54 - 2014-05-20 00:54 - 00000000 ____D () C:\Users\Uwe\AppData\Local\Xilisoft Corporation 2014-05-20 00:38 - 2014-05-20 00:38 - 00000620 _____ () C:\Users\Uwe\Desktop\Revo Uninstaller.lnk 2014-05-20 00:19 - 2014-05-20 00:19 - 00045017 _____ () C:\Users\Uwe\AppData\Local\recently-used.xbel 2014-05-18 20:30 - 2014-05-18 20:30 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdMtpDr_01_09_00.Wdf 2014-05-18 12:01 - 2014-05-18 12:02 - 00000146 _____ () C:\Users\Uwe\AppData\Roaming\ReadMeDatensicherung.txt 2014-05-18 09:54 - 2014-05-24 14:17 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2014-05-18 09:54 - 2014-05-18 09:54 - 00000625 _____ () C:\Users\Public\Desktop\Malwarebytes.lnk 2014-05-18 09:54 - 2014-05-18 09:54 - 00000000 ____D () C:\ProgramData\Malwarebytes 2014-05-18 09:54 - 2014-04-03 09:51 - 00088280 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys 2014-05-18 09:54 - 2014-04-03 09:51 - 00063192 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys 2014-05-18 09:54 - 2014-04-03 09:50 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys 2014-05-15 18:55 - 2014-05-15 18:55 - 00000552 _____ () C:\Users\Uwe\Desktop\SpeedFan.lnk 2014-05-15 18:55 - 2014-05-15 18:55 - 00000045 _____ () C:\Windows\SysWOW64\initdebug.nfo 2014-05-15 17:46 - 2014-05-15 17:46 - 00000583 _____ () C:\Users\Uwe\Desktop\FurMark.lnk 2014-05-15 16:53 - 2014-05-06 06:40 - 23544320 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-05-15 16:53 - 2014-05-06 06:17 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-05-15 16:53 - 2014-05-06 05:25 - 17382912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2014-05-15 16:53 - 2014-05-06 05:07 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2014-05-15 16:53 - 2014-05-06 05:00 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2014-05-15 16:53 - 2014-05-06 04:10 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2014-05-15 13:07 - 2014-05-15 17:46 - 00000000 ____D () C:\Users\Uwe\AppData\Roaming\NVIDIA 2014-05-15 12:22 - 2014-05-09 08:14 - 00477184 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll 2014-05-15 12:22 - 2014-05-09 08:11 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll 2014-05-15 12:22 - 2014-04-12 04:22 - 00155072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys 2014-05-15 12:22 - 2014-04-12 04:22 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys 2014-05-15 12:22 - 2014-04-12 04:19 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll 2014-05-15 12:22 - 2014-04-12 04:19 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll 2014-05-15 12:22 - 2014-04-12 04:19 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe 2014-05-15 12:22 - 2014-04-12 04:19 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll 2014-05-15 12:22 - 2014-04-12 04:19 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll 2014-05-15 12:22 - 2014-04-12 04:12 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll 2014-05-15 12:22 - 2014-04-12 04:10 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll 2014-05-15 12:22 - 2014-03-25 04:43 - 14175744 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll 2014-05-15 12:22 - 2014-03-25 04:09 - 12874240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll 2014-05-15 12:22 - 2014-03-04 11:47 - 05550016 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe 2014-05-15 12:22 - 2014-03-04 11:44 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll 2014-05-15 12:22 - 2014-03-04 11:44 - 00722944 _____ (Microsoft Corporation) C:\Windows\system32\objsel.dll 2014-05-15 12:22 - 2014-03-04 11:44 - 00424960 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll 2014-05-15 12:22 - 2014-03-04 11:44 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll 2014-05-15 12:22 - 2014-03-04 11:44 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll 2014-05-15 12:22 - 2014-03-04 11:44 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll 2014-05-15 12:22 - 2014-03-04 11:44 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll 2014-05-15 12:22 - 2014-03-04 11:44 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\wincredprovider.dll 2014-05-15 12:22 - 2014-03-04 11:43 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe 2014-05-15 12:22 - 2014-03-04 11:43 - 00057344 _____ (Microsoft Corporation) C:\Windows\system32\cngprovider.dll 2014-05-15 12:22 - 2014-03-04 11:43 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\adprovider.dll 2014-05-15 12:22 - 2014-03-04 11:43 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\capiprovider.dll 2014-05-15 12:22 - 2014-03-04 11:43 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\dpapiprovider.dll 2014-05-15 12:22 - 2014-03-04 11:43 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\dimsroam.dll 2014-05-15 12:22 - 2014-03-04 11:43 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll 2014-05-15 12:22 - 2014-03-04 11:20 - 03969984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe 2014-05-15 12:22 - 2014-03-04 11:20 - 03914176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe 2014-05-15 12:22 - 2014-03-04 11:17 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll 2014-05-15 12:22 - 2014-03-04 11:17 - 00538112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\objsel.dll 2014-05-15 12:22 - 2014-03-04 11:17 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll 2014-05-15 12:22 - 2014-03-04 11:17 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll 2014-05-15 12:22 - 2014-03-04 11:17 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll 2014-05-15 12:22 - 2014-03-04 11:17 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll 2014-05-15 12:22 - 2014-03-04 11:17 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cngprovider.dll 2014-05-15 12:22 - 2014-03-04 11:17 - 00049664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adprovider.dll 2014-05-15 12:22 - 2014-03-04 11:17 - 00048128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\capiprovider.dll 2014-05-15 12:22 - 2014-03-04 11:17 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpapiprovider.dll 2014-05-15 12:22 - 2014-03-04 11:17 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dimsroam.dll 2014-05-15 12:22 - 2014-03-04 11:17 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wincredprovider.dll 2014-05-15 12:22 - 2014-03-04 11:17 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll 2014-05-15 12:22 - 2014-03-04 11:16 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll 2014-05-14 16:37 - 2014-05-14 16:37 - 00000000 ____D () C:\Users\Uwe\Documents\DonationCoder 2014-05-14 16:37 - 2014-05-14 16:37 - 00000000 ____D () C:\ProgramData\DonationCoder 2014-05-14 15:59 - 2014-03-31 18:42 - 00040392 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys 2014-05-14 15:59 - 2014-03-31 18:42 - 00034760 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll 2014-05-14 15:57 - 2014-05-14 15:58 - 00000000 ____D () C:\Users\Uwe\AppData\Local\NVIDIA 2014-05-14 15:57 - 2014-05-14 15:57 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation 2014-05-14 15:57 - 2014-05-14 15:57 - 00000000 ____D () C:\Program Files (x86)\AGEIA Technologies 2014-05-14 15:57 - 2014-04-30 20:29 - 01225920 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll 2014-05-14 15:57 - 2014-04-30 20:29 - 01081112 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll 2014-05-14 15:57 - 2014-03-04 13:32 - 00599840 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe 2014-05-14 15:56 - 2014-03-31 18:42 - 00037320 _____ (NVIDIA Corporation) C:\Windows\system32\nvaudcap64v.dll 2014-05-14 15:56 - 2014-03-04 16:35 - 31474976 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll 2014-05-14 15:56 - 2014-03-04 16:35 - 25255256 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll 2014-05-14 15:56 - 2014-03-04 16:35 - 23716640 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll 2014-05-14 15:56 - 2014-03-04 16:35 - 17755424 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll 2014-05-14 15:56 - 2014-03-04 16:35 - 17561544 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll 2014-05-14 15:56 - 2014-03-04 16:35 - 15783992 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll 2014-05-14 15:56 - 2014-03-04 16:35 - 12708128 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys 2014-05-14 15:56 - 2014-03-04 16:35 - 11636176 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll 2014-05-14 15:56 - 2014-03-04 16:35 - 11589272 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll 2014-05-14 15:56 - 2014-03-04 16:35 - 09728064 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll 2014-05-14 15:56 - 2014-03-04 16:35 - 09690424 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll 2014-05-14 15:56 - 2014-03-04 16:35 - 03143456 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll 2014-05-14 15:56 - 2014-03-04 16:35 - 02958792 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll 2014-05-14 15:56 - 2014-03-04 16:35 - 02783008 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll 2014-05-14 15:56 - 2014-03-04 16:35 - 02715264 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll 2014-05-14 15:56 - 2014-03-04 16:35 - 02411976 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll 2014-05-14 15:56 - 2014-03-04 16:35 - 01885472 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6433523.dll 2014-05-14 15:56 - 2014-03-04 16:35 - 01516488 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6433523.dll 2014-05-14 15:56 - 2014-03-04 16:35 - 00892704 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll 2014-05-14 15:56 - 2014-03-04 16:35 - 00877856 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll 2014-05-14 15:56 - 2014-03-04 16:35 - 00863064 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll 2014-05-14 15:56 - 2014-03-04 16:35 - 00846168 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll 2014-05-14 15:56 - 2014-03-04 16:35 - 00832936 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll 2014-05-14 15:56 - 2014-03-04 16:35 - 00353504 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll 2014-05-14 15:56 - 2014-03-04 16:35 - 00305600 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll 2014-05-14 15:56 - 2014-03-04 16:35 - 00174296 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll 2014-05-14 15:56 - 2014-03-04 16:35 - 00148016 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll 2014-05-14 15:56 - 2014-03-04 16:35 - 00062408 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll 2014-05-14 15:56 - 2014-03-04 16:35 - 00054216 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll 2014-05-14 15:56 - 2013-11-28 15:38 - 00197408 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvhda64v.sys 2014-05-14 15:56 - 2013-11-28 15:38 - 00031520 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdap64.dll 2014-05-14 15:56 - 2013-11-22 10:36 - 01515296 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdagenco6420103.dll 2014-05-14 15:50 - 2014-05-14 15:50 - 00000000 ____D () C:\Windows\pss 2014-05-14 15:38 - 2014-05-24 14:27 - 00000000 ____D () C:\ProgramData\NVIDIA 2014-05-14 15:36 - 2014-03-04 15:06 - 06714312 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll 2014-05-14 15:36 - 2014-03-04 15:06 - 03497816 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll 2014-05-14 15:36 - 2014-03-04 15:05 - 03649185 _____ () C:\Windows\system32\nvcoproc.bin 2014-05-14 15:36 - 2014-03-04 15:05 - 02558808 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll 2014-05-14 15:36 - 2014-03-04 15:05 - 00922968 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe 2014-05-14 15:36 - 2014-03-04 15:05 - 00386336 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll 2014-05-14 15:36 - 2014-03-04 15:05 - 00064968 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll 2014-05-14 15:01 - 2013-07-03 20:05 - 00552760 _____ (Intel Corporation) C:\Windows\system32\PROUnstl.exe 2014-05-14 15:01 - 2006-01-12 09:52 - 00001904 ____N () C:\Windows\system32\SetupBD.din 2014-05-14 14:55 - 2014-05-14 14:55 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel 2014-05-14 14:52 - 2014-05-14 14:52 - 00000000 ____D () C:\Windows\SysWOW64\RTCOM 2014-05-14 14:52 - 2014-05-14 14:52 - 00000000 ____D () C:\Program Files\Realtek 2014-05-14 14:52 - 2013-10-11 05:31 - 00947760 _____ (Sony Corporation) C:\Windows\system32\SFSS_APO.dll 2014-05-14 14:52 - 2013-10-09 14:12 - 02103040 _____ (Waves Audio Ltd.) C:\Windows\system32\WavesGUILib64.dll 2014-05-14 14:52 - 2013-08-23 21:14 - 01014016 _____ (SRS Labs, Inc.) C:\Windows\system32\slcnt64.dll 2014-05-14 14:52 - 2013-08-23 21:14 - 00897792 _____ (DTS, Inc.) C:\Windows\system32\sl3apo64.dll 2014-05-14 14:52 - 2013-08-23 21:14 - 00722688 _____ (DTS, Inc.) C:\Windows\system32\sltech64.dll 2014-05-14 14:52 - 2013-08-23 21:14 - 00244480 _____ (TODO: <Company name>) C:\Windows\system32\slprp64.dll 2014-05-14 14:52 - 2013-06-25 06:47 - 00871856 _____ (TOSHIBA Corporation) C:\Windows\system32\tossaeapo64.dll 2014-05-14 14:52 - 2013-06-25 06:47 - 00162224 _____ (TOSHIBA Corporation) C:\Windows\system32\toseaeapo64.dll 2014-05-14 14:52 - 2013-06-25 06:46 - 00582056 _____ (TOSHIBA Corporation) C:\Windows\system32\tosasfapo64.dll 2014-05-14 14:52 - 2012-01-30 05:43 - 00836544 _____ (TOSHIBA Corporation) C:\Windows\system32\tadefxapo264.dll 2014-05-14 14:52 - 2012-01-10 04:20 - 00065944 _____ (TOSHIBA CORPORATION.) C:\Windows\system32\tepeqapo64.dll 2014-05-14 14:52 - 2011-09-02 08:21 - 00221024 _____ (Synopsys, Inc.) C:\Windows\system32\SFNHK64.dll 2014-05-14 14:52 - 2011-09-02 08:21 - 00081248 _____ (Synopsys, Inc.) C:\Windows\system32\SFCOM64.dll 2014-05-14 14:52 - 2011-03-17 06:17 - 01361336 _____ (TOSHIBA Corporation) C:\Windows\system32\tosade.dll 2014-05-14 14:52 - 2011-03-07 11:11 - 00148416 _____ (TOSHIBA Corporation) C:\Windows\system32\tadefxapo.dll 2014-05-14 14:52 - 2009-11-24 03:55 - 00518896 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSX64.dll 2014-05-14 14:52 - 2009-11-24 03:55 - 00211184 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSH64.dll 2014-05-14 14:52 - 2009-11-24 03:55 - 00198896 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSHP64.dll 2014-05-14 14:52 - 2009-11-24 03:55 - 00155888 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSWOW64.dll 2014-05-14 14:51 - 2013-10-29 14:19 - 00151256 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoInstII64.dll 2014-05-14 14:51 - 2013-10-29 12:25 - 03698904 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RTKVHD64.sys 2014-05-14 14:51 - 2013-10-29 09:03 - 00676825 _____ () C:\Windows\system32\Drivers\RTAIODAT.DAT 2014-05-14 14:51 - 2013-10-29 08:57 - 38251008 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoRes64.dat 2014-05-14 14:51 - 2013-10-28 11:29 - 01021656 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkApi64.dll 2014-05-14 14:51 - 2013-10-21 04:46 - 02587352 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkAPO64.dll 2014-05-14 14:51 - 2013-10-18 10:41 - 01286360 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTCOM64.dll 2014-05-14 14:51 - 2013-10-15 21:43 - 00209096 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAC64.dll 2014-05-14 14:51 - 2013-10-11 06:47 - 00113576 _____ (Real Sound Lab SIA) C:\Windows\system32\CONEQMSAPOGUILibrary.dll 2014-05-14 14:51 - 2013-10-09 14:13 - 01921792 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRealtek264.dll 2014-05-14 14:51 - 2013-10-09 14:13 - 01345280 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO5064.dll 2014-05-14 14:51 - 2013-10-09 14:13 - 01286400 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxSpeechAPO64.dll 2014-05-14 14:51 - 2013-10-09 14:12 - 27644160 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioVnA64.dll 2014-05-14 14:51 - 2013-10-09 14:12 - 14152960 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRealtek64.dll 2014-05-14 14:51 - 2013-10-09 14:12 - 03714304 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioVnN64.dll 2014-05-14 14:51 - 2013-10-09 14:12 - 02036992 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioEQ64.dll 2014-05-14 14:51 - 2013-10-09 14:12 - 01012992 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPOShell64.dll 2014-05-14 14:51 - 2013-10-07 05:05 - 02810072 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtPgEx64.dll 2014-05-14 14:51 - 2013-10-06 18:26 - 00501184 _____ (DTS) C:\Windows\system32\DTSU2PLFX64.dll 2014-05-14 14:51 - 2013-10-06 18:26 - 00487360 _____ (DTS) C:\Windows\system32\DTSU2PGFX64.dll 2014-05-14 14:51 - 2013-10-06 18:26 - 00415680 _____ (DTS) C:\Windows\system32\DTSU2PREC64.dll 2014-05-14 14:51 - 2013-10-02 11:10 - 00617176 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtDataProc64.dll 2014-05-14 14:51 - 2013-10-02 03:43 - 00754488 _____ (ASUSTeKcomputer.Inc Inc) C:\Windows\system32\RTKSMSettingsIPC.dll 2014-05-14 14:51 - 2013-10-02 03:39 - 05538072 _____ (ASUSTeKcomputer.Inc Inc) C:\Windows\system32\RTKSMlfx.dll 2014-05-14 14:51 - 2013-09-09 22:02 - 06217904 _____ (Dolby Laboratories) C:\Windows\system32\DDPP64A.dll 2014-05-14 14:51 - 2013-09-09 22:02 - 00313520 _____ (Dolby Laboratories) C:\Windows\system32\DDPO64A.dll 2014-05-14 14:51 - 2013-09-09 22:01 - 01938608 _____ (Dolby Laboratories) C:\Windows\system32\DDPD64A.dll 2014-05-14 14:51 - 2013-09-09 22:01 - 00260272 _____ (Dolby Laboratories) C:\Windows\system32\DDPA64.dll 2014-05-14 14:51 - 2013-09-09 09:32 - 05681192 _____ () C:\Windows\system32\Drivers\rtvienna.dat 2014-05-14 14:51 - 2013-08-20 11:37 - 00605496 _____ () C:\Windows\system32\audioLibVc.dll 2014-05-14 14:51 - 2013-08-14 10:36 - 00662784 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVolumeSDAPO.dll 2014-05-14 14:51 - 2013-08-14 10:35 - 01084160 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO4064.dll 2014-05-14 14:51 - 2013-08-14 10:35 - 00907008 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVoiceAPO2064.dll 2014-05-14 14:51 - 2013-08-14 10:35 - 00663296 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO30.dll 2014-05-14 14:51 - 2013-08-05 12:11 - 02743328 _____ (Fortemedia Corporation) C:\Windows\system32\FMAPO64.dll 2014-05-14 14:51 - 2013-07-23 09:39 - 00790272 _____ (Waves Audio Ltd.) C:\Windows\SysWOW64\MaxxAudioAPOShell.dll 2014-05-14 14:51 - 2013-06-21 05:01 - 00109848 _____ () C:\Windows\system32\AcpiServiceVnA64.dll 2014-05-14 14:51 - 2013-04-24 11:16 - 01662024 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTSnMg64.cpl 2014-05-14 14:51 - 2013-04-03 08:13 - 00906800 _____ (Sony Corporation) C:\Windows\system32\MISS_APO.dll 2014-05-14 14:51 - 2012-08-31 13:18 - 07164176 _____ (Dolby Laboratories) C:\Windows\system32\R4EEP64A.dll 2014-05-14 14:51 - 2012-08-31 13:17 - 00434960 _____ (Dolby Laboratories) C:\Windows\system32\R4EED64A.dll 2014-05-14 14:51 - 2012-08-31 13:17 - 00141584 _____ (Dolby Laboratories) C:\Windows\system32\R4EEL64A.dll 2014-05-14 14:51 - 2012-08-31 13:17 - 00124176 _____ (Dolby Laboratories) C:\Windows\system32\R4EEA64A.dll 2014-05-14 14:51 - 2012-08-31 13:17 - 00075024 _____ (Dolby Laboratories) C:\Windows\system32\R4EEG64A.dll 2014-05-14 14:51 - 2012-03-08 05:47 - 00108640 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAR64.dll 2014-05-14 14:51 - 2011-12-20 09:32 - 00331880 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtlCPAPI64.dll 2014-05-14 14:51 - 2011-11-22 10:28 - 00014952 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCoLDR64.dll 2014-05-14 14:51 - 2011-09-02 08:21 - 00078688 _____ (Synopsys, Inc.) C:\Windows\system32\SFAPO64.dll 2014-05-14 14:51 - 2011-08-23 11:00 - 00603984 _____ (Knowles Acoustics ) C:\Windows\system32\KAAPORT64.dll 2014-05-14 14:51 - 2011-05-31 03:42 - 01756264 _____ (DTS) C:\Windows\system32\DTSS2SpeakerDLL64.dll 2014-05-14 14:51 - 2011-05-31 03:42 - 01568360 _____ (DTS) C:\Windows\system32\DTSS2HeadphoneDLL64.dll 2014-05-14 14:51 - 2011-05-31 03:42 - 01486952 _____ (DTS) C:\Windows\system32\DTSBoostDLL64.dll 2014-05-14 14:51 - 2011-05-31 03:42 - 00728680 _____ (DTS) C:\Windows\system32\DTSBassEnhancementDLL64.dll 2014-05-14 14:51 - 2011-05-31 03:42 - 00712296 _____ (DTS) C:\Windows\system32\DTSSymmetryDLL64.dll 2014-05-14 14:51 - 2011-05-31 03:42 - 00693352 _____ (DTS) C:\Windows\system32\DTSVoiceClarityDLL64.dll 2014-05-14 14:51 - 2011-05-31 03:42 - 00491112 _____ (DTS) C:\Windows\system32\DTSNeoPCDLL64.dll 2014-05-14 14:51 - 2011-05-31 03:42 - 00432744 _____ (DTS) C:\Windows\system32\DTSLimiterDLL64.dll 2014-05-14 14:51 - 2011-05-31 03:42 - 00428648 _____ (DTS) C:\Windows\system32\DTSGainCompensatorDLL64.dll 2014-05-14 14:51 - 2011-05-31 03:42 - 00242792 _____ (DTS) C:\Windows\system32\DTSLFXAPO64.dll 2014-05-14 14:51 - 2011-05-31 03:42 - 00242792 _____ (DTS) C:\Windows\system32\DTSGFXAPO64.dll 2014-05-14 14:51 - 2011-05-31 03:42 - 00241768 _____ (DTS) C:\Windows\system32\DTSGFXAPONS64.dll 2014-05-14 14:51 - 2010-11-08 01:31 - 00375128 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEP64A.dll 2014-05-14 14:51 - 2010-11-08 01:31 - 00310104 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DHT64.dll 2014-05-14 14:51 - 2010-11-08 01:31 - 00310104 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DAA64.dll 2014-05-14 14:51 - 2010-11-08 01:31 - 00204120 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEED64A.dll 2014-05-14 14:51 - 2010-11-08 01:31 - 00101208 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEL64A.dll 2014-05-14 14:51 - 2010-11-08 01:31 - 00078680 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEG64A.dll 2014-05-14 14:51 - 2010-11-03 12:30 - 00149608 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCfg64.dll 2014-05-14 14:51 - 2010-09-27 03:34 - 00318808 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO20.dll 2014-05-14 14:51 - 2010-07-22 10:48 - 00074064 _____ (Virage Logic Corporation / Sonic Focus) C:\Windows\SysWOW64\SFCOM.dll 2014-05-14 14:50 - 2014-05-14 14:50 - 00000000 ____D () C:\Program Files (x86)\Realtek 2014-05-14 14:49 - 2013-05-30 02:54 - 00495376 _____ (Intel Corporation) C:\Windows\system32\Drivers\e1d62x64.sys 2014-05-14 14:49 - 2013-05-10 21:48 - 00073480 _____ (Intel Corporation) C:\Windows\system32\e1dmsg.dll 2014-05-14 14:49 - 2013-03-01 22:42 - 00101152 _____ (Intel Corporation) C:\Windows\system32\NicInstD.dll 2014-05-14 14:49 - 2012-01-06 08:03 - 00003114 _____ () C:\Windows\system32\e1d62x64.din 2014-05-14 14:49 - 2009-05-26 04:05 - 00036472 _____ (Intel Corporation) C:\Windows\system32\NicCo36.dll 2014-05-12 14:57 - 2014-05-12 14:57 - 00000804 _____ () C:\Users\Uwe\Desktop\CPU-Z.lnk 2014-05-12 14:31 - 2014-05-12 14:31 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CPUID 2014-05-12 14:27 - 2014-05-12 14:27 - 00000859 _____ () C:\Users\Uwe\Desktop\GPU-Z.lnk 2014-05-11 12:23 - 2014-05-11 12:22 - 00000687 _____ () C:\Users\Uwe\Dokumente - Verknüpfung.lnk 2014-05-07 08:26 - 2014-05-14 14:29 - 00692400 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2014-05-07 08:26 - 2014-05-14 14:29 - 00070832 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2014-05-04 16:29 - 2014-05-04 16:29 - 00000000 ____D () C:\Program Files (x86)\MSXML 4.0 2014-05-04 10:08 - 2014-05-04 10:08 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime 2014-05-04 10:08 - 2014-05-04 10:08 - 00000000 ____D () C:\ProgramData\Apple Computer 2014-05-04 09:39 - 2014-05-04 09:39 - 00000000 ____D () C:\Users\Uwe\AppData\Local\Scansoft 2014-05-04 09:37 - 2014-05-04 09:37 - 00000425 _____ () C:\Windows\BRWMARK.INI 2014-05-04 09:37 - 2014-05-04 09:37 - 00000218 _____ () C:\Windows\Brpfx04a.ini 2014-05-04 09:37 - 2014-05-04 09:37 - 00000085 _____ () C:\Windows\brpcfx.ini 2014-05-04 09:37 - 2014-05-04 09:37 - 00000027 _____ () C:\Windows\BRPP2KA.INI 2014-05-04 09:37 - 2014-05-04 09:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Brother 2014-05-04 09:36 - 2014-05-04 09:36 - 00000066 _____ () C:\Windows\Brfaxrx.ini 2014-05-04 09:36 - 2014-05-04 09:36 - 00000050 _____ () C:\Windows\system32\bridf08a.dat 2014-05-04 09:36 - 2014-05-04 09:36 - 00000000 ____D () C:\Users\Public\Documents\BrFaxRx 2014-05-04 09:36 - 2014-05-04 09:36 - 00000000 ____D () C:\Program Files (x86)\Brother 2014-05-04 09:36 - 2009-07-21 15:32 - 01560064 _____ (Brother Industries, Ltd.) C:\Windows\system32\BrWia09b.dll 2014-05-04 09:36 - 2009-02-24 14:01 - 00082944 ____N (Brother Industries, Ltd.) C:\Windows\system32\BrNetSti.dll 2014-05-04 09:36 - 2009-02-24 12:52 - 00058368 ____N (Brother Industries,Ltd.) C:\Windows\system32\BrWiaNCp.dll 2014-05-04 09:36 - 2009-02-24 12:52 - 00047616 ____N (Brother Industries,Ltd) C:\Windows\system32\Brnsplg.dll 2014-05-04 09:36 - 2008-10-17 20:04 - 00179712 ____N (Brother Industries, Ltd.) C:\Windows\system32\BrfxDA5b.dll 2014-05-04 09:36 - 2008-08-23 19:17 - 00118784 ____N (Brother Industries,LTD.) C:\Windows\SysWOW64\BrMfNt.dll 2014-05-04 09:36 - 2008-06-17 15:35 - 00207872 ____N (brother) C:\Windows\system32\NSSRH64.dll 2014-05-04 09:36 - 2008-06-17 15:33 - 00167936 ____N (brother) C:\Windows\SysWOW64\NSSearch.dll 2014-05-04 09:36 - 2007-12-13 22:16 - 00073728 ____N (Brother Industries Ltd.) C:\Windows\SysWOW64\BrDctF2.dll 2014-05-04 09:36 - 2007-12-13 22:16 - 00005632 ____N (Brother Industries Ltd.) C:\Windows\SysWOW64\BrDctF2L.dll 2014-05-04 09:36 - 2007-12-13 22:16 - 00003072 ____N (Brother Industries Ltd.) C:\Windows\SysWOW64\BrDctF2S.dll 2014-05-04 09:36 - 2006-12-28 13:39 - 00176128 ____N (Brother Industries, Ltd.) C:\Windows\SysWOW64\BroSNMP.dll 2014-05-04 09:36 - 2006-07-07 12:40 - 00073728 ____N (Brother Industories Ltd. P&S Company) C:\Windows\SysWOW64\BRCrypt.dll 2014-05-04 09:36 - 2005-04-22 13:36 - 00143360 ____N () C:\Windows\system32\BrSNMP64.dll 2014-05-04 09:36 - 2003-11-28 18:57 - 00000000 _____ () C:\Windows\brdfxspd.dat 2014-05-04 09:36 - 2002-11-26 13:43 - 00106496 ____N () C:\Windows\SysWOW64\BrMuSNMP.dll 2014-05-04 09:31 - 2014-05-04 09:31 - 00000000 ____D () C:\Program Files\Nuance 2014-05-04 09:30 - 2014-05-04 09:38 - 00000000 ____D () C:\ProgramData\InstallShield 2014-05-04 09:30 - 2014-05-04 09:30 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ScanSoft PaperPort 11 2014-05-04 09:30 - 2008-03-28 13:24 - 00031864 _____ () C:\Windows\maxlink.ini 2014-05-04 09:29 - 2014-05-04 09:30 - 00000000 ____D () C:\ProgramData\ScanSoft 2014-05-04 09:29 - 2014-05-04 09:29 - 00000000 ____D () C:\Program Files (x86)\ScanSoft 2014-05-04 09:28 - 2014-05-04 09:28 - 00000000 ____D () C:\ProgramData\Brother 2014-05-03 17:42 - 2014-05-03 17:42 - 00000923 _____ () C:\Users\Uwe\Desktop\RealTemp.lnk 2014-05-02 14:31 - 2014-05-15 16:54 - 00000000 ___SD () C:\Windows\system32\CompatTel ==================== One Month Modified Files and Folders ======= 2014-05-24 14:45 - 2014-05-20 17:34 - 00000000 ____D () C:\FRST 2014-05-24 14:40 - 2014-05-24 14:40 - 00000619 _____ () C:\Users\Uwe\Desktop\JRT.txt 2014-05-24 14:32 - 2009-07-14 06:45 - 00014192 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-05-24 14:32 - 2009-07-14 06:45 - 00014192 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-05-24 14:31 - 2009-07-14 19:58 - 00700454 _____ () C:\Windows\system32\perfh007.dat 2014-05-24 14:31 - 2009-07-14 19:58 - 00150092 _____ () C:\Windows\system32\perfc007.dat 2014-05-24 14:31 - 2009-07-14 07:13 - 01624034 _____ () C:\Windows\system32\PerfStringBackup.INI 2014-05-24 14:30 - 2014-05-20 01:14 - 00266689 _____ () C:\Windows\WindowsUpdate.log 2014-05-24 14:27 - 2014-05-24 13:27 - 00000224 _____ () C:\Windows\setupact.log 2014-05-24 14:27 - 2014-05-14 15:38 - 00000000 ____D () C:\ProgramData\NVIDIA 2014-05-24 14:27 - 2014-04-22 00:53 - 00001316 ____H () C:\Windows\Tasks\{DD8046B0-2077-4899-AFCD-A0D034E183D4}.job 2014-05-24 14:27 - 2014-04-17 23:20 - 00000000 ____D () C:\ProgramData\Kaspersky Lab 2014-05-24 14:27 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2014-05-24 14:24 - 2014-05-24 14:24 - 00000000 ____D () C:\Windows\ERUNT 2014-05-24 14:20 - 2014-05-24 14:20 - 00001146 _____ () C:\Users\Uwe\Desktop\mbam.txt 2014-05-24 14:17 - 2014-05-18 09:54 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2014-05-24 13:53 - 2014-05-24 13:53 - 00000310 _____ () C:\Windows\PFRO.log 2014-05-24 13:51 - 2014-05-20 15:42 - 00000000 ____D () C:\AdwCleaner 2014-05-24 13:27 - 2014-05-24 13:27 - 00000000 _____ () C:\Windows\setuperr.log 2014-05-23 17:43 - 2014-02-15 16:54 - 00000000 ____D () C:\Users\Uwe\AppData\Roaming\vlc 2014-05-23 17:43 - 2014-01-21 14:27 - 00000000 ____D () C:\Users\Uwe 2014-05-23 17:43 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\registration 2014-05-23 17:31 - 2014-04-16 10:23 - 00000000 ____D () C:\Users\Uwe\.VirtualBox 2014-05-23 14:55 - 2014-01-21 14:27 - 00000000 ___RD () C:\Users\Uwe\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories 2014-05-23 14:40 - 2014-05-23 14:40 - 00000000 ____D () C:\Users\Uwe\Desktop\GottModus.{ED7BA470-8E54-465E-825C-99712043E01C} 2014-05-21 17:15 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\NDF 2014-05-21 17:15 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\AppCompat 2014-05-20 11:33 - 2014-05-20 11:33 - 00000000 ____D () C:\Users\Uwe\AppData\Local\Help 2014-05-20 08:41 - 2014-05-20 08:41 - 00000000 ____D () C:\Users\Uwe\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR 2014-05-20 08:41 - 2014-05-20 08:41 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR 2014-05-20 08:37 - 2014-05-20 08:37 - 00000000 ____D () C:\Users\Uwe\AppData\Roaming\WinRAR 2014-05-20 00:54 - 2014-05-20 00:54 - 00000000 ____D () C:\Users\Uwe\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Xilisoft 2014-05-20 00:54 - 2014-05-20 00:54 - 00000000 ____D () C:\Users\Uwe\AppData\Local\Xilisoft Corporation 2014-05-20 00:38 - 2014-05-20 00:38 - 00000620 _____ () C:\Users\Uwe\Desktop\Revo Uninstaller.lnk 2014-05-20 00:19 - 2014-05-20 00:19 - 00045017 _____ () C:\Users\Uwe\AppData\Local\recently-used.xbel 2014-05-20 00:19 - 2014-01-22 02:39 - 00000000 ____D () C:\Users\Uwe\AppData\Local\gtk-2.0 2014-05-20 00:19 - 2014-01-22 02:36 - 00000000 ____D () C:\Users\Uwe\.gimp-2.8 2014-05-18 20:30 - 2014-05-18 20:30 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdMtpDr_01_09_00.Wdf 2014-05-18 12:02 - 2014-05-18 12:01 - 00000146 _____ () C:\Users\Uwe\AppData\Roaming\ReadMeDatensicherung.txt 2014-05-18 09:54 - 2014-05-18 09:54 - 00000625 _____ () C:\Users\Public\Desktop\Malwarebytes.lnk 2014-05-18 09:54 - 2014-05-18 09:54 - 00000000 ____D () C:\ProgramData\Malwarebytes 2014-05-16 12:32 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache 2014-05-16 10:15 - 2014-03-21 03:52 - 00000000 ___RD () C:\gurm 2014-05-16 09:52 - 2014-01-22 00:01 - 00000000 ___RD () C:\Users\Uwe\AppData\Roaming\Blender Foundation 2014-05-16 09:51 - 2014-03-31 22:23 - 00000000 ___RD () C:\Users\Uwe\AppData\Roaming\krita 2014-05-16 09:51 - 2014-01-23 13:01 - 00000000 ___RD () C:\Users\Uwe\AppData\Roaming\inkscape 2014-05-16 09:51 - 2014-01-21 16:58 - 00000000 ___RD () C:\Users\Uwe\AppData\Roaming\Mozilla 2014-05-16 09:50 - 2014-04-21 12:03 - 00000000 ___RD () C:\Users\Uwe\AppData\Roaming\X-Rite 2014-05-16 09:50 - 2014-03-19 17:51 - 00000000 ___RD () C:\Users\Uwe\AppData\Roaming\WTablet 2014-05-15 18:55 - 2014-05-15 18:55 - 00000552 _____ () C:\Users\Uwe\Desktop\SpeedFan.lnk 2014-05-15 18:55 - 2014-05-15 18:55 - 00000045 _____ () C:\Windows\SysWOW64\initdebug.nfo 2014-05-15 17:46 - 2014-05-15 17:46 - 00000583 _____ () C:\Users\Uwe\Desktop\FurMark.lnk 2014-05-15 17:46 - 2014-05-15 13:07 - 00000000 ____D () C:\Users\Uwe\AppData\Roaming\NVIDIA 2014-05-15 16:54 - 2014-05-02 14:31 - 00000000 ___SD () C:\Windows\system32\CompatTel 2014-05-15 16:54 - 2014-01-21 14:27 - 00000000 ___RD () C:\Users\Uwe\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup 2014-05-15 16:54 - 2014-01-21 14:27 - 00000000 ___RD () C:\Users\Uwe\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools 2014-05-15 16:54 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\PolicyDefinitions 2014-05-15 16:53 - 2014-01-21 15:14 - 00000000 ____D () C:\Windows\system32\MRT 2014-05-15 16:52 - 2010-02-10 00:33 - 93223848 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2014-05-14 16:37 - 2014-05-14 16:37 - 00000000 ____D () C:\Users\Uwe\Documents\DonationCoder 2014-05-14 16:37 - 2014-05-14 16:37 - 00000000 ____D () C:\ProgramData\DonationCoder 2014-05-14 15:59 - 2014-01-21 16:37 - 00000000 ____D () C:\Users\Uwe\AppData\Local\NVIDIA Corporation 2014-05-14 15:59 - 2014-01-21 15:39 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation 2014-05-14 15:59 - 2014-01-21 15:39 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation 2014-05-14 15:58 - 2014-05-14 15:57 - 00000000 ____D () C:\Users\Uwe\AppData\Local\NVIDIA 2014-05-14 15:57 - 2014-05-14 15:57 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation 2014-05-14 15:57 - 2014-05-14 15:57 - 00000000 ____D () C:\Program Files (x86)\AGEIA Technologies 2014-05-14 15:57 - 2014-01-21 15:39 - 00000000 ____D () C:\Program Files\NVIDIA Corporation 2014-05-14 15:50 - 2014-05-14 15:50 - 00000000 ____D () C:\Windows\pss 2014-05-14 15:50 - 2009-07-14 05:20 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup 2014-05-14 15:36 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\Help 2014-05-14 15:01 - 2014-01-21 15:01 - 00000000 ____D () C:\Program Files\Intel 2014-05-14 14:55 - 2014-05-14 14:55 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel 2014-05-14 14:54 - 2014-01-21 16:24 - 00000000 ____D () C:\Program Files (x86)\Intel 2014-05-14 14:52 - 2014-05-14 14:52 - 00000000 ____D () C:\Windows\SysWOW64\RTCOM 2014-05-14 14:52 - 2014-05-14 14:52 - 00000000 ____D () C:\Program Files\Realtek 2014-05-14 14:51 - 2014-01-21 16:22 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information 2014-05-14 14:50 - 2014-05-14 14:50 - 00000000 ____D () C:\Program Files (x86)\Realtek 2014-05-14 14:29 - 2014-05-07 08:26 - 00692400 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2014-05-14 14:29 - 2014-05-07 08:26 - 00070832 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2014-05-13 11:08 - 2014-02-05 17:36 - 00004560 _____ () C:\Users\Uwe\AppData\Roaming\CamStudio.cfg 2014-05-13 11:08 - 2014-02-05 17:36 - 00000408 _____ () C:\Users\Uwe\AppData\Roaming\CamShapes.ini 2014-05-13 11:08 - 2014-02-05 17:36 - 00000408 _____ () C:\Users\Uwe\AppData\Roaming\CamLayout.ini 2014-05-13 11:08 - 2014-02-05 17:36 - 00000138 _____ () C:\Users\Uwe\AppData\Roaming\Camdata.ini 2014-05-13 11:05 - 2014-02-05 17:35 - 00000096 _____ () C:\Users\Uwe\AppData\Roaming\version2.xml 2014-05-12 14:57 - 2014-05-12 14:57 - 00000804 _____ () C:\Users\Uwe\Desktop\CPU-Z.lnk 2014-05-12 14:31 - 2014-05-12 14:31 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CPUID 2014-05-12 14:27 - 2014-05-12 14:27 - 00000859 _____ () C:\Users\Uwe\Desktop\GPU-Z.lnk 2014-05-12 12:48 - 2009-07-14 07:08 - 00032640 _____ () C:\Windows\Tasks\SCHEDLGU.TXT 2014-05-11 12:22 - 2014-05-11 12:23 - 00000687 _____ () C:\Users\Uwe\Dokumente - Verknüpfung.lnk 2014-05-09 08:14 - 2014-05-15 12:22 - 00477184 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll 2014-05-09 08:11 - 2014-05-15 12:22 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll 2014-05-08 13:41 - 2014-01-21 16:16 - 00000000 ____D () C:\Users\Uwe\AppData\Roaming\Adobe 2014-05-07 08:26 - 2014-01-21 18:54 - 00000000 ____D () C:\Users\Uwe\AppData\Local\Adobe 2014-05-06 06:40 - 2014-05-15 16:53 - 23544320 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-05-06 06:17 - 2014-05-15 16:53 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-05-06 05:25 - 2014-05-15 16:53 - 17382912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2014-05-06 05:07 - 2014-05-15 16:53 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2014-05-06 05:00 - 2014-05-15 16:53 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2014-05-06 04:10 - 2014-05-15 16:53 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2014-05-05 08:00 - 2014-04-22 00:53 - 00000388 _____ () C:\Windows\Tasks\X-Rite Device Services Software Updater.job 2014-05-04 16:29 - 2014-05-04 16:29 - 00000000 ____D () C:\Program Files (x86)\MSXML 4.0 2014-05-04 10:08 - 2014-05-04 10:08 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime 2014-05-04 10:08 - 2014-05-04 10:08 - 00000000 ____D () C:\ProgramData\Apple Computer 2014-05-04 09:40 - 2014-01-21 16:26 - 00064496 _____ () C:\Users\Uwe\AppData\Local\GDIPFONTCACHEV1.DAT 2014-05-04 09:39 - 2014-05-04 09:39 - 00000000 ____D () C:\Users\Uwe\AppData\Local\Scansoft 2014-05-04 09:39 - 2009-07-14 06:45 - 00294736 _____ () C:\Windows\system32\FNTCACHE.DAT 2014-05-04 09:38 - 2014-05-04 09:30 - 00000000 ____D () C:\ProgramData\InstallShield 2014-05-04 09:37 - 2014-05-04 09:37 - 00000425 _____ () C:\Windows\BRWMARK.INI 2014-05-04 09:37 - 2014-05-04 09:37 - 00000218 _____ () C:\Windows\Brpfx04a.ini 2014-05-04 09:37 - 2014-05-04 09:37 - 00000085 _____ () C:\Windows\brpcfx.ini 2014-05-04 09:37 - 2014-05-04 09:37 - 00000027 _____ () C:\Windows\BRPP2KA.INI 2014-05-04 09:37 - 2014-05-04 09:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Brother 2014-05-04 09:36 - 2014-05-04 09:36 - 00000066 _____ () C:\Windows\Brfaxrx.ini 2014-05-04 09:36 - 2014-05-04 09:36 - 00000050 _____ () C:\Windows\system32\bridf08a.dat 2014-05-04 09:36 - 2014-05-04 09:36 - 00000000 ____D () C:\Users\Public\Documents\BrFaxRx 2014-05-04 09:36 - 2014-05-04 09:36 - 00000000 ____D () C:\Program Files (x86)\Brother 2014-05-04 09:31 - 2014-05-04 09:31 - 00000000 ____D () C:\Program Files\Nuance 2014-05-04 09:30 - 2014-05-04 09:30 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ScanSoft PaperPort 11 2014-05-04 09:30 - 2014-05-04 09:29 - 00000000 ____D () C:\ProgramData\ScanSoft 2014-05-04 09:29 - 2014-05-04 09:29 - 00000000 ____D () C:\Program Files (x86)\ScanSoft 2014-05-04 09:28 - 2014-05-04 09:28 - 00000000 ____D () C:\ProgramData\Brother 2014-05-03 17:42 - 2014-05-03 17:42 - 00000923 _____ () C:\Users\Uwe\Desktop\RealTemp.lnk 2014-04-30 20:29 - 2014-05-14 15:57 - 01225920 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll 2014-04-30 20:29 - 2014-05-14 15:57 - 01081112 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll 2014-04-28 16:36 - 2014-04-16 10:26 - 00000000 ____D () C:\Users\Uwe\VirtualBox VMs 2014-04-28 09:32 - 2014-03-22 03:02 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\XnView 2014-04-25 08:40 - 2014-01-22 15:27 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe 2014-04-25 08:40 - 2014-01-22 15:27 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe 2014-04-25 08:40 - 2014-01-22 15:27 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe 2014-04-25 08:40 - 2014-01-22 15:27 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll 2014-04-25 08:40 - 2014-01-22 15:27 - 00000000 ____D () C:\ProgramData\Oracle 2014-04-24 23:59 - 2014-01-21 19:05 - 00000000 ____D () C:\Users\Uwe\AppData\Roaming\Foxit Software Files to move or delete: ==================== C:\Users\Uwe\AppData\Roaming\CamLayout.ini C:\Users\Uwe\AppData\Roaming\CamShapes.ini C:\Windows\Tasks\{DD8046B0-2077-4899-AFCD-A0D034E183D4}.job Some content of TEMP: ==================== C:\Users\Uwe\AppData\Local\Temp\Quarantine.exe ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\rpcss.dll => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2014-05-19 00:54 ==================== End Of Log ============================ --- --- --- LG Uwe |
25.05.2014, 06:54 | #6 |
/// the machine /// TB-Ausbilder | Scan mit AdwCleaner 3.210 - Was mache ich mit den Ergebnissen?ESET Online Scanner
Downloade Dir bitte SecurityCheck und:
und ein frisches FRST log bitte. Noch Probleme?
__________________ --> Scan mit AdwCleaner 3.210 - Was mache ich mit den Ergebnissen? |
26.05.2014, 16:17 | #7 |
| Scan mit AdwCleaner 3.210 - Was mache ich mit den Ergebnissen? Hallo schrauber, danke für deine weitere Hilfe. Eine Frage jedoch: Was bedeutet es faktisch, wenn ich einem Online-Scanner wie ESET Zugriff auf mein System gewähre? Habe bei diesem Thema leider unmittelbar Bedenken. Verstehst du das? Gibt es denn anhand des letzten FRST-Log Files noch Anzeichen für einen Befall und Grund, weiterzusuchen? LG Uwe |
27.05.2014, 12:23 | #8 |
/// the machine /// TB-Ausbilder | Scan mit AdwCleaner 3.210 - Was mache ich mit den Ergebnissen? nochn paar reste, die dann zusammen mit dem Ergebnis von ESET gefixt würden. Was genau sind deine Bedenken? Der Onlinescan nimmt jede Datei in die Hand, genau wie dein AV Programm. Der Onlinescanner lädt die Dateien aber nicht auf irgend einen Server, Du lädst den Onlinescanner mit Signaturen runter, also es wird nichts deinen PC verlassen, falls das deine Sorge ist.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
06.06.2014, 11:39 | #9 |
| Scan mit AdwCleaner 3.210 - Was mache ich mit den Ergebnissen? Hallo schrauber, finde im Moment keine Zeit, weiter zu machen. Habs aber noch im Hinterkopf. Danke LG Uwe |
07.06.2014, 05:51 | #10 |
/// the machine /// TB-Ausbilder | Scan mit AdwCleaner 3.210 - Was mache ich mit den Ergebnissen? ok.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
14.11.2014, 16:13 | #11 |
| Scan mit AdwCleaner 3.210 - Was mache ich mit den Ergebnissen? Hallo schrauber. Das Thema kann geschlossen werden. Zu lange her. Bei neuen Fragen schlage ich wieder hier auf. Vielen Dank für eure Hilfe. |
15.11.2014, 12:10 | #12 |
/// the machine /// TB-Ausbilder | Scan mit AdwCleaner 3.210 - Was mache ich mit den Ergebnissen? ok.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
Themen zu Scan mit AdwCleaner 3.210 - Was mache ich mit den Ergebnissen? |
appdata, bericht, betriebssystem, browser, c:\windows, code, dateien, digital, explorer, firefox, gelöscht, gen, hallo zusammen, internet, internet explorer, kaspersky, malwarebytes, mozilla, ordner, registrierungsdatenbank, roaming, scan, software, suche, system32, windows |