|
Log-Analyse und Auswertung: HijackThis LogWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
11.07.2014, 21:42 | #1 |
| HijackThis Log Hallo ich habe meinen Laptop seit 2 Tagen wieder und habe dann Default-search.net bekommen! Ich bekomms nicht weg und mein Bruder empfohl mir HijackThis zu machen: Ich hab nichts gefunden und hab schon alles versucht aber ich hab es immer noch! Hier der Log: Logfile of Trend Micro HijackThis v2.0.4 Scan saved at 22:12:17, on 11.07.2014 Platform: Unknown Windows (WinNT 6.02.1008) MSIE: Internet Explorer v10.0 (10.00.9200.17028) Boot mode: Normal Running processes: C:\Program Files (x86)\Launch Manager\LManager.exe C:\Program Files (x86)\Overwolf\Overwolf.exe C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe C:\Program Files\AVAST Software\Avast\AvastUI.exe C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe C:\Users\Jasmin\Downloads\HiJackThis204.exe C:\Windows\syswow64\wwahost.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://de.yahoo.com?fr=hp-avast&type=avastbcl R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://de.search.yahoo.com/yhs/search?type=avastbcl&hspart=avast&hsimp=yhs-001&p={searchTerms} R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://rocket-find.com/?f=1&a=rckt_dsites02_14_28_ff&cd=2XzuyEtN2Y1L1Qzu0Bzzzzzz0EtA0CzytAzyyC0FyB0D0B0DtN0D0Tzu0SzytBtBtN1L2XzutBtFtBtCtFtCyEtFtCtN1L1CzutCyEtBzytDyD1V1StN1 L1G1B1V1N2Y1L1Qzu2StD0CtAtCtDzyyBzztGtAtAtA0EtGzy0EtD0BtGtD0BtDyBtGyEtD0DtCzy0C0ByC0E0DtA0B2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyBtAtCyEzyyCyDzztG0ByByBtCtG0C0F0 AzztG0FtByBzytGtB0A0BtAyByE0C0FtDtDyBtD2Q&cr=455567288&ir= R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = https://de.yahoo.com?fr=hp-avast&type=avastbcl R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://de.search.yahoo.com/yhs/search?type=avastbcl&hspart=avast&hsimp=yhs-001&p={searchTerms} R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://de.yahoo.com?fr=hp-avast&type=avastbcl R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = F2 - REG:system.ini: UserInit=userinit.exe O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll O2 - BHO: DVDVideoSoft.WebPageAdjuster - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - (no file) O4 - HKLM\..\Run: [RadioController] "C:\Program Files (x86)\RadioController\RfBtnHelper.exe" Start_Run O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui O4 - HKLM\..\Run: [LogMeIn Hamachi Ui] "C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" --auto-start O4 - HKCU\..\Run: [Overwolf] C:\Program Files (x86)\Overwolf\Overwolf.exe -silent O8 - Extra context menu item: Free YouTube Download - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\freeytvdownloader.htm O8 - Extra context menu item: Free YouTube to MP3 Converter - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\freeytmp3downloader.htm O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics O20 - AppInit_DLLs: O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing) O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\Windows\SysWow64\IntelCpHeciSvc.exe O23 - Service: Device Fast-lane Service (DeviceFastLaneService) - Acer Incorporated - C:\Program Files\Packard Bell\Packard Bell Device Fast-lane\DeviceFastLaneSvc.exe O23 - Service: Dritek WMI Service (DsiWMIService) - Dritek System Inc. - C:\Program Files (x86)\Launch Manager\dsiwmis.exe O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing) O23 - Service: ePower Service (ePowerSvc) - Acer Incorporated - C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerSvc.exe O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing) O23 - Service: GamesAppService - WildTangent, Inc. - C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe O23 - Service: Google Update-Dienst (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe O23 - Service: Google Update-Dienst (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe O23 - Service: LogMeIn Hamachi Tunneling Engine (Hamachi2Svc) - LogMeIn Inc. - C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe O23 - Service: Intel(R) Capability Licensing Service Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\HeciServer.exe O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: LMIGuardianSvc - LogMeIn, Inc. - C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing) O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: Overwolf Updater Windows SCM (OverwolfUpdater) - Overwolf LTD - C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe O23 - Service: Dritek RF Button Command Service (RfButtonDriverService) - Dritek System INC. - C:\Windows\RfBtnSvc64.exe O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing) O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing) O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing) O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing) O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing) O23 - Service: Intel(R) Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing) O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing) O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing) O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing) O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing) O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing) -- End of file - 8496 bytes Vielleicht könnt ihr mir helfen!! |
11.07.2014, 22:21 | #2 |
/// TB-Ausbilder /// Anleitungs-Guru | HijackThis Log Hi, HiJackthis nehmen wir nicht mehr...
__________________Mein Name ist Jürgen und ich werde Dir bei Deinem Problem behilflich sein. Zusammen schaffen wir das...
Hinweis: Ich kann Dir niemals eine Garantie geben, dass wir alle schädlichen Dateien finden werden. Eine Formatierung ist meist der schnellere und immer der sicherste Weg, aber auch nur bei wirklicher Malware empfehlenswert. Adware & Co. können wir sehr gut entfernen. Solltest Du Dich für eine Bereinigung entscheiden, arbeite solange mit, bis Du mein clean bekommst. Los geht's: Schritt 1 Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST 32-Bit | FRST 64-Bit (Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
Lesestoff Posten in CODE-Tags: So gehts... Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR, 7Z-Archive zu packen erschwert uns massiv die Arbeit, es sei denn natürlich die Datei wäre ansonsten zu groß für das Forum. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:
__________________ |
11.07.2014, 22:49 | #3 |
| HijackThis Log Also hier einmal Die FRST und in der weiteren Antwort kommt die Addition
__________________FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 11-07-2014 Ran by Jasmin (administrator) on OTAKU-PC on 11-07-2014 23:45:43 Running from C:\Users\Jasmin\Downloads Platform: Windows 8 (X64) OS Language: Deutsch (Deutschland) Internet Explorer Version 10 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\dsiwmis.exe (Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe (LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe (Dritek System INC.) C:\Windows\RfBtnSvc64.exe (LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LMutilps32.exe (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LManager.exe (Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.0.1119.516_x64__8wekyb3d8bbwe\LiveComm.exe (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\MMDx64Fx.exe (Intel Corporation) C:\Windows\System32\igfxext.exe (Microsoft Corporation) C:\Windows\SysWOW64\WWAHost.exe (Intel Corporation) C:\Windows\System32\igfxtray.exe (Intel Corporation) C:\Windows\System32\hkcmd.exe (Intel Corporation) C:\Windows\System32\igfxpers.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Overwolf LTD) C:\Program Files (x86)\Overwolf\Overwolf.exe (Dritek System Inc.) C:\Program Files (x86)\RadioController\RfBtnHelper.exe (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (Acer Incorporated) C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerTray.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe (LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe (Overwolf LTD) C:\Program Files (x86)\Common Files\Overwolf\0.76.1.0\OverwolfHelper.exe (Overwolf LTD) C:\Program Files (x86)\Common Files\Overwolf\0.76.1.0\OverwolfHelper64.exe (Acer Incorporated) C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerSvc.exe (Intel Corporation) C:\Windows\System32\igfxsrvc.exe (Acer Incorporated) C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerEvent.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12503184 2012-06-11] (Realtek Semiconductor) HKLM-x32\...\Run: [LManager] => [X] HKLM-x32\...\Run: [RadioController] => C:\Program Files (x86)\RadioController\RfBtnHelper.exe [111216 2014-07-03] (Dritek System Inc.) HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [256896 2014-05-07] (Oracle Corporation) HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [4086432 2014-07-09] (AVAST Software) HKLM-x32\...\Run: [LogMeIn Hamachi Ui] => C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [3816272 2014-06-23] (LogMeIn Inc.) Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation) HKU\S-1-5-21-1733027970-2465188296-4133737029-1001\...\Run: [Overwolf] => C:\Program Files (x86)\Overwolf\Overwolf.exe [39712 2014-06-10] (Overwolf LTD) IFEO\bitguard.exe: [Debugger] tasklist.exe IFEO\bprotect.exe: [Debugger] tasklist.exe IFEO\bpsvc.exe: [Debugger] tasklist.exe IFEO\browserdefender.exe: [Debugger] tasklist.exe IFEO\browserprotect.exe: [Debugger] tasklist.exe IFEO\browsersafeguard.exe: [Debugger] tasklist.exe IFEO\dprotectsvc.exe: [Debugger] tasklist.exe IFEO\jumpflip: [Debugger] tasklist.exe IFEO\protectedsearch.exe: [Debugger] tasklist.exe IFEO\searchinstaller.exe: [Debugger] tasklist.exe IFEO\searchprotection.exe: [Debugger] tasklist.exe IFEO\searchprotector.exe: [Debugger] tasklist.exe IFEO\searchsettings.exe: [Debugger] tasklist.exe IFEO\searchsettings64.exe: [Debugger] tasklist.exe IFEO\snapdo.exe: [Debugger] tasklist.exe IFEO\stinst32.exe: [Debugger] tasklist.exe IFEO\stinst64.exe: [Debugger] tasklist.exe IFEO\umbrella.exe: [Debugger] tasklist.exe IFEO\utiljumpflip.exe: [Debugger] tasklist.exe IFEO\volaro: [Debugger] tasklist.exe IFEO\vonteera: [Debugger] tasklist.exe IFEO\websteroids.exe: [Debugger] tasklist.exe IFEO\websteroidsservice.exe: [Debugger] tasklist.exe ShellIconOverlayIdentifiers: 00avast -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll (AVAST Software) ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://de.search.yahoo.com/yhs/search?type=avastbcl&hspart=avast&hsimp=yhs-001&p={searchTerms} HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://rocket-find.com/?f=1&a=rckt_dsites02_14_28_ff&cd=2XzuyEtN2Y1L1Qzu0Bzzzzzz0EtA0CzytAzyyC0FyB0D0B0DtN0D0Tzu0SzytBtBtN1L2XzutBtFtBtCtFtCyEtFtCtN1L1CzutCyEtBzytDyD1V1StN1L1G1B1V1N2Y1L1Qzu2StD0CtAtCtDzyyBzztGtAtAtA0EtGzy0EtD0BtGtD0BtDyBtGyEtD0DtCzy0C0ByC0E0DtA0B2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyBtAtCyEzyyCyDzztG0ByByBtCtG0C0F0AzztG0FtByBzytGtB0A0BtAyByE0C0FtDtDyBtD2Q&cr=455567288&ir= HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://de.yahoo.com?fr=hp-avast&type=avastbcl HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = https://de.yahoo.com?fr=hp-avast&type=avastbcl HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = https://de.search.yahoo.com/yhs/search?type=avastbcl&hspart=avast&hsimp=yhs-001&p={searchTerms} HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Bar = https://de.yahoo.com?fr=hp-avast&type=avastbcl StartMenuInternet: IEXPLORE.EXE - iexplore.exe SearchScopes: HKLM - DefaultScope {76442EC8-40C2-471B-ACB3-5E9D4E4C056C} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MAPBJS SearchScopes: HKLM - {76442EC8-40C2-471B-ACB3-5E9D4E4C056C} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MAPBJS SearchScopes: HKLM - {77AA745B-F4F8-45DA-9B14-61D2D95054C8} URL = SearchScopes: HKLM - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2503} URL = hxxp://www.default-search.net/search?sid=503&aid=102&itype=n&ver=13001&tm=403&src=ds&p={searchTerms} SearchScopes: HKLM - {AA9A4890-4262-4441-8977-E2FFCBFB706C} URL = hxxp://de.yhs4.search.yahoo.com/yhs/search?hspart=acer&hsimp=yhs-acer_001&p={searchTerms} SearchScopes: HKLM-x32 - DefaultScope {9CB96984-43C3-4D44-90EF-01466EFCF7BB} URL = https://de.search.yahoo.com/yhs/search?type=avastbcl&hspart=avast&hsimp=yhs-001&p={searchTerms} SearchScopes: HKLM-x32 - {76442EC8-40C2-471B-ACB3-5E9D4E4C056C} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MAPBJS SearchScopes: HKLM-x32 - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2503} URL = hxxp://www.default-search.net/search?sid=503&aid=102&itype=n&ver=13001&tm=403&src=ds&p={searchTerms} SearchScopes: HKLM-x32 - {9CB96984-43C3-4D44-90EF-01466EFCF7BB} URL = https://de.search.yahoo.com/yhs/search?type=avastbcl&hspart=avast&hsimp=yhs-001&p={searchTerms} SearchScopes: HKLM-x32 - {AA9A4890-4262-4441-8977-E2FFCBFB706C} URL = hxxp://de.yhs4.search.yahoo.com/yhs/search?hspart=acer&hsimp=yhs-acer_001&p={searchTerms} SearchScopes: HKCU - DefaultScope {9CB96984-43C3-4D44-90EF-01466EFCF7BB} URL = hxxp://rocket-find.com/results.php?f=4&q={searchTerms}&a=rckt_dsites02_14_28_ff&cd=2XzuyEtN2Y1L1Qzu0Bzzzzzz0EtA0CzytAzyyC0FyB0D0B0DtN0D0Tzu0SzytBtBtN1L2XzutBtFtBtCtFtCyEtFtCtN1L1CzutCyEtBzytDyD1V1StN1L1G1B1V1N2Y1L1Qzu2StD0CtAtCtDzyyBzztGtAtAtA0EtGzy0EtD0BtGtD0BtDyBtGyEtD0DtCzy0C0ByC0E0DtA0B2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyBtAtCyEzyyCyDzztG0ByByBtCtG0C0F0AzztG0FtByBzytGtB0A0BtAyByE0C0FtDtDyBtD2Q&cr=455567288&ir= SearchScopes: HKCU - {77AA745B-F4F8-45DA-9B14-61D2D95054C8} URL = https://de.search.yahoo.com/yhs/search?type=avastbcl&hspart=avast&hsimp=yhs-001&p={searchTerms} SearchScopes: HKCU - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2503} URL = hxxp://www.default-search.net/search?sid=503&aid=102&itype=n&ver=13001&tm=403&src=ds&p={searchTerms} SearchScopes: HKCU - {9CB96984-43C3-4D44-90EF-01466EFCF7BB} URL = hxxp://rocket-find.com/results.php?f=4&q={searchTerms}&a=rckt_dsites02_14_28_ff&cd=2XzuyEtN2Y1L1Qzu0Bzzzzzz0EtA0CzytAzyyC0FyB0D0B0DtN0D0Tzu0SzytBtBtN1L2XzutBtFtBtCtFtCyEtFtCtN1L1CzutCyEtBzytDyD1V1StN1L1G1B1V1N2Y1L1Qzu2StD0CtAtCtDzyyBzztGtAtAtA0EtGzy0EtD0BtGtD0BtDyBtGyEtD0DtCzy0C0ByC0E0DtA0B2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyBtAtCyEzyyCyDzztG0ByByBtCtG0C0F0AzztG0FtByBzytGtB0A0BtAyByE0C0FtDtDyBtD2Q&cr=455567288&ir= BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software) BHO: No Name - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - No File BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO-x32: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software) BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) Tcpip\Parameters: [DhcpNameServer] 192.168.178.1 FireFox: ======== FF ProfilePath: C:\Users\Jasmin\AppData\Roaming\Mozilla\Firefox\Profiles\8b47h064.default-1405114346193 FF Homepage: about:home FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_14_0_0_145.dll () FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_145.dll () FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation) FF Plugin-x32: @java.com/DTPlugin,version=10.60.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=10.60.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll No File FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 - C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll () FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\default-search.xml FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2014-07-09] FF HKCU\...\Firefox\Extensions: [{B64D9B05-48E1-4CEB-BF58-E0643994E900}] - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff Chrome: ======= CHR HomePage: hxxp://rocket-find.com/?f=1&a=rckt_dsites02_14_28_ff&cd=2XzuyEtN2Y1L1Qzu0Bzzzzzz0EtA0CzytAzyyC0FyB0D0B0DtN0D0Tzu0SzytBtBtN1L2XzutBtFtBtCtFtCyEtFtCtN1L1CzutCyEtBzytDyD1V1StN1L1G1B1V1N2Y1L1Qzu2StD0CtAtCtDzyyBzztGtAtAtA0EtGzy0EtD0BtGtD0BtDyBtGyEtD0DtCzy0C0ByC0E0DtA0B2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyBtAtCyEzyyCyDzztG0ByByBtCtG0C0F0AzztG0FtByBzytGtB0A0BtAyByE0C0FtDtDyBtD2Q&cr=455567288&ir= CHR StartupUrls: "hxxp://rocket-find.com/?f=7&a=rckt_dsites02_14_28_ff&cd=2XzuyEtN2Y1L1Qzu0Bzzzzzz0EtA0CzytAzyyC0FyB0D0B0DtN0D0Tzu0SzytBtBtN1L2XzutBtFtBtCtFtCyEtFtCtN1L1CzutCyEtBzytDyD1V1StN1L1G1B1V1N2Y1L1Qzu2StD0CtAtCtDzyyBzztGtAtAtA0EtGzy0EtD0BtGtD0BtDyBtGyEtD0DtCzy0C0ByC0E0DtA0B2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyBtAtCyEzyyCyDzztG0ByByBtCtG0C0F0AzztG0FtByBzytGtB0A0BtAyByE0C0FtDtDyBtD2Q&cr=455567288&ir=", "hxxp://www.default-search.net?sid=503&aid=102&itype=n&ver=13001&tm=403&src=hmp", "hxxp://www.google.com/" CHR NewTab: "chrome-extension://ibnjmihbbanannlbobkbmnmckjnmdnom/newtab.html" CHR DefaultSearchKeyword: ask.com CHR DefaultSearchProvider: default-search.net CHR DefaultSearchURL: hxxp://www.default-search.net/search?sid=503&aid=102&itype=n&ver=13001&tm=403&src=ds&p={searchTerms} CHR DefaultNewTabURL: CHR Extension: (Google Docs) - C:\Users\Jasmin\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-07-09] CHR Extension: (Google Drive) - C:\Users\Jasmin\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-07-09] CHR Extension: (YouTube) - C:\Users\Jasmin\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-07-09] CHR Extension: (Google-Suche) - C:\Users\Jasmin\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-07-09] CHR Extension: (Rocket New Tab) - C:\Users\Jasmin\AppData\Local\Google\Chrome\User Data\Default\Extensions\ibnjmihbbanannlbobkbmnmckjnmdnom [2014-07-10] CHR Extension: (Google Wallet) - C:\Users\Jasmin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-07-09] CHR Extension: (Google Mail) - C:\Users\Jasmin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-07-09] CHR HKCU\...\Chrome\Extension: [nikpibnbobmbdbheedjfogjlikpgpnhp] - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\DVDVideoSoftBrowserExtension.crx [2014-07-09] CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2014-07-09] CHR StartMenuInternet: Google Chrome - chrome.exe ==================== Services (Whitelisted) ================= R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-07-09] (AVAST Software) S3 DeviceFastLaneService; C:\Program Files\Packard Bell\Packard Bell Device Fast-lane\DeviceFastLaneSvc.exe [469648 2012-11-16] (Acer Incorporated) R3 ePowerSvc; C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerSvc.exe [662088 2013-03-15] (Acer Incorporated) R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [165760 2012-07-18] (Intel Corporation) R2 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [377616 2014-04-15] (LogMeIn, Inc.) S3 OverwolfUpdater; C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe [976672 2014-06-10] (Overwolf LTD) R2 RfButtonDriverService; C:\Windows\RfBtnSvc64.exe [96880 2014-07-03] (Dritek System INC.) S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [16056 2014-03-29] (Microsoft Corporation) ==================== Drivers (Whitelisted) ==================== R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29208 2014-07-09] () R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [79184 2014-07-09] (AVAST Software) R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93568 2014-07-09] (AVAST Software) R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2014-07-09] () R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1041168 2014-07-09] (AVAST Software) R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [427360 2014-07-09] (AVAST Software) R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [92008 2014-07-09] (AVAST Software) R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [224896 2014-07-09] () R3 BCM43XX; C:\Windows\system32\DRIVERS\bcmwl63a.sys [5139968 2012-06-02] (Broadcom Corporation) R1 F06DEFF2-5B9C-490D-910F-35D3A9119622; C:\Program Files (x86)\Settings Manager\systemk\x64\systemkmgrc2.cfg [41872 2014-06-11] (Aztec Media Inc) R3 Hamachi; C:\Windows\system32\DRIVERS\Hamdrv.sys [46136 2014-06-23] (LogMeIn Inc.) R3 Ps2Kb2Hid; C:\Windows\System32\drivers\aPs2Kb2Hid.sys [26736 2014-07-03] (Dritek System Inc.) S3 iscFlash; \??\C:\Users\ADMINI~1\AppData\Local\Temp\7zSF74.tmp\iscflashx64.sys [X] S3 PCDSRVC{9368CD8C-C29E3CF2-06020200}_0; \??\c:\users\admini~1\appdata\local\temp\5ubvy7wmjiym\pcdrdiag\bin\pcdsrvc_x64.pkms [X] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-07-11 23:39 - 2014-07-11 23:39 - 00020874 _____ () C:\Users\Jasmin\Downloads\Addition.txt 2014-07-11 23:38 - 2014-07-11 23:45 - 00017453 _____ () C:\Users\Jasmin\Downloads\FRST.txt 2014-07-11 23:37 - 2014-07-11 23:45 - 00000000 ____D () C:\FRST 2014-07-11 23:36 - 2014-07-11 23:37 - 02084864 _____ (Farbar) C:\Users\Jasmin\Downloads\FRST64.exe 2014-07-11 23:35 - 2014-07-11 23:36 - 01075200 _____ (Farbar) C:\Users\Jasmin\Downloads\FRST.exe 2014-07-11 23:04 - 2014-07-11 23:04 - 00002774 _____ () C:\Windows\System32\Tasks\CCleanerSkipUAC 2014-07-11 23:04 - 2014-07-11 23:04 - 00000794 _____ () C:\Users\Public\Desktop\CCleaner.lnk 2014-07-11 23:04 - 2014-07-11 23:04 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner 2014-07-11 23:04 - 2014-07-11 23:04 - 00000000 ____D () C:\Program Files\CCleaner 2014-07-11 22:55 - 2014-07-11 22:56 - 04812672 _____ (Piriform Ltd) C:\Users\Jasmin\Downloads\ccsetup415.exe 2014-07-11 22:53 - 2014-07-11 22:56 - 20564496 _____ (Mozilla) C:\Users\Jasmin\Downloads\Firefox Setup 19.0.exe 2014-07-11 22:43 - 2014-07-11 22:44 - 00307760 _____ () C:\Windows\system32\FNTCACHE.DAT 2014-07-11 22:30 - 2014-07-11 22:30 - 00000000 ____D () C:\Users\Jasmin\Downloads\backups 2014-07-11 22:12 - 2014-07-11 22:28 - 00008781 _____ () C:\Users\Jasmin\Downloads\hijackthis.log 2014-07-11 22:05 - 2014-07-11 22:05 - 00388608 _____ (Trend Micro Inc.) C:\Users\Jasmin\Downloads\HiJackThis204.exe 2014-07-11 14:47 - 2014-07-11 22:59 - 00001175 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk 2014-07-11 14:47 - 2014-07-11 22:59 - 00001163 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk 2014-07-11 14:47 - 2014-07-11 22:59 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service 2014-07-11 14:47 - 2014-07-11 14:48 - 00000000 ____D () C:\Users\Jasmin\AppData\Roaming\Mozilla 2014-07-10 23:02 - 2014-07-10 23:06 - 00000000 ___RD () C:\Windows\BrowserChoice 2014-07-10 23:02 - 2014-07-10 23:02 - 00000000 ___SD () C:\Windows\system32\CompatTel 2014-07-10 22:51 - 2014-07-10 22:53 - 00000000 ____D () C:\Windows\system32\MRT 2014-07-10 22:51 - 2014-06-26 17:40 - 96441528 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2014-07-10 22:27 - 2014-07-10 22:27 - 00000000 ___SD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenOffice 4.0.1 2014-07-10 22:27 - 2014-07-10 22:27 - 00000000 ____D () C:\Users\Jasmin\AppData\Roaming\1H1Q 2014-07-10 22:26 - 2014-07-10 22:26 - 00000000 ____D () C:\Program Files (x86)\OpenOffice 4 2014-07-10 22:13 - 2014-07-11 23:13 - 00000314 _____ () C:\Windows\Tasks\Rocket Updater.job 2014-07-10 22:13 - 2014-07-10 22:21 - 00000000 ____D () C:\Users\Jasmin\AppData\Roaming\Systweak 2014-07-10 22:13 - 2014-07-10 22:15 - 00000000 ____D () C:\Program Files (x86)\RegClean Pro 2014-07-10 22:13 - 2014-07-10 22:13 - 00002652 _____ () C:\Windows\System32\Tasks\Rocket Updater 2014-07-10 22:13 - 2014-07-10 22:13 - 00000000 ____D () C:\Users\Jasmin\AppData\Roaming\RocketUpdater 2014-07-10 22:13 - 2014-06-30 17:55 - 00020328 _____ (Systweak Inc., (www.systweak.com)) C:\Windows\system32\roboot64.exe 2014-07-10 22:12 - 2014-07-10 22:12 - 00802760 _____ ( ) C:\Users\Jasmin\Downloads\Open OfficeSetup.exe 2014-07-10 21:47 - 2014-06-26 22:53 - 00703968 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2014-07-10 21:47 - 2014-06-26 22:53 - 00105440 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2014-07-10 20:23 - 2014-07-11 23:32 - 00000000 ____D () C:\Users\Jasmin\Desktop\Rinmaru 2014-07-10 19:46 - 2014-07-11 23:41 - 00000000 ____D () C:\Users\Jasmin\Desktop\Programme 2014-07-10 19:21 - 2014-07-10 19:49 - 00000000 ____D () C:\Program Files\paint.net 2014-07-10 19:20 - 2014-07-10 19:43 - 00000000 ____D () C:\Users\Jasmin\AppData\Local\paint.net 2014-07-10 13:14 - 2014-07-11 23:05 - 00000000 ____D () C:\Users\Jasmin\AppData\Local\LogMeIn Hamachi 2014-07-10 13:14 - 2014-07-10 13:14 - 00000000 ____D () C:\Users\Jasmin\AppData\Local\LogMeIn 2014-07-10 13:14 - 2014-07-10 13:14 - 00000000 ____D () C:\ProgramData\LogMeIn 2014-07-09 23:42 - 2014-07-09 23:42 - 00003728 _____ () C:\Windows\System32\Tasks\Overwolf Updater Task 2014-07-09 23:42 - 2014-07-09 23:42 - 00000000 ____D () C:\Users\Jasmin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Overwolf 2014-07-09 23:42 - 2014-07-09 23:42 - 00000000 ____D () C:\ProgramData\Overwolf 2014-07-09 23:42 - 2014-07-09 23:42 - 00000000 ____D () C:\Program Files (x86)\Overwolf 2014-07-09 23:39 - 2014-07-11 22:46 - 00000000 ____D () C:\Users\Jasmin\AppData\Local\Overwolf 2014-07-09 23:38 - 2014-07-09 23:39 - 01248032 _____ (Overwolf) C:\Users\Jasmin\Downloads\OverwolfInstaller.exe 2014-07-09 21:18 - 2014-07-09 21:18 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi 2014-07-09 21:18 - 2014-07-09 21:18 - 00000000 ____D () C:\Program Files (x86)\LogMeIn Hamachi 2014-07-09 21:00 - 2014-07-09 21:00 - 00000000 ____D () C:\Users\Jasmin\AppData\Local\Macromedia 2014-07-09 20:57 - 2014-07-11 22:47 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job 2014-07-09 20:57 - 2014-07-09 21:02 - 00003772 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater 2014-07-09 20:57 - 2014-07-09 20:57 - 00000000 ____D () C:\ProgramData\McAfee 2014-07-09 18:38 - 2014-07-11 15:05 - 00000000 ____D () C:\Users\Jasmin\Desktop\Jasi 2014-07-09 17:28 - 2014-07-09 17:28 - 00000000 ____D () C:\Users\Jasmin\AppData\Roaming\Macromedia 2014-07-09 17:27 - 2014-07-09 17:27 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft 2014-07-09 17:25 - 2014-07-09 17:25 - 00000000 ____D () C:\Users\Jasmin\AppData\Roaming\Settings Manager 2014-07-09 17:24 - 2014-07-10 12:50 - 00000000 ____D () C:\ProgramData\systemk 2014-07-09 17:24 - 2014-07-09 17:27 - 00000000 ____D () C:\Program Files (x86)\DVDVideoSoft 2014-07-09 17:24 - 2014-07-09 17:24 - 00000000 ____D () C:\Users\Jasmin\AppData\Roaming\OpenCandy 2014-07-09 17:24 - 2014-07-09 17:24 - 00000000 ____D () C:\Program Files (x86)\Settings Manager 2014-07-09 16:16 - 2014-07-09 17:27 - 00000000 ____D () C:\Users\Jasmin\AppData\Roaming\DVDVideoSoft 2014-07-09 16:13 - 2014-07-11 23:45 - 00043520 ___SH () C:\Users\Jasmin\Downloads\Thumbs.db 2014-07-09 15:20 - 2014-06-19 04:12 - 02239488 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2014-07-09 15:20 - 2014-06-19 04:12 - 01366528 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2014-07-09 15:20 - 2014-06-19 04:12 - 00915968 _____ (Microsoft Corporation) C:\Windows\system32\uxtheme.dll 2014-07-09 15:20 - 2014-06-19 04:12 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\UXInit.dll 2014-07-09 15:20 - 2014-06-19 04:12 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2014-07-09 15:20 - 2014-06-19 04:11 - 19277312 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-07-09 15:20 - 2014-06-19 04:11 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2014-07-09 15:20 - 2014-06-19 04:11 - 00097792 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2014-07-09 15:20 - 2014-06-19 04:10 - 15369728 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2014-07-09 15:20 - 2014-06-19 04:10 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2014-07-09 15:20 - 2014-06-19 04:10 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2014-07-09 15:20 - 2014-06-19 04:10 - 00452096 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2014-07-09 15:20 - 2014-06-19 04:10 - 00281600 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2014-07-09 15:20 - 2014-06-19 04:10 - 00255488 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2014-07-09 15:20 - 2014-06-19 04:10 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2014-07-09 15:20 - 2014-06-19 04:10 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2014-07-09 15:20 - 2014-06-19 04:10 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2014-07-09 15:20 - 2014-06-19 04:10 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2014-07-09 15:20 - 2014-06-19 04:09 - 01508864 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2014-07-09 15:20 - 2014-06-19 02:53 - 01766400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2014-07-09 15:20 - 2014-06-19 02:53 - 01141760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2014-07-09 15:20 - 2014-06-19 02:53 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2014-07-09 15:20 - 2014-06-19 02:53 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2014-07-09 15:20 - 2014-06-19 02:53 - 00044032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UXInit.dll 2014-07-09 15:20 - 2014-06-19 02:52 - 13732352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2014-07-09 15:20 - 2014-06-19 02:52 - 01440768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2014-07-09 15:20 - 2014-06-19 02:52 - 00357888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2014-07-09 15:20 - 2014-06-19 02:52 - 00226816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2014-07-09 15:20 - 2014-06-19 02:52 - 00226816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2014-07-09 15:20 - 2014-06-19 02:52 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2014-07-09 15:20 - 2014-06-19 02:52 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2014-07-09 15:20 - 2014-06-19 02:52 - 00039936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2014-07-09 15:20 - 2014-06-19 02:52 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2014-07-09 15:20 - 2014-06-19 02:33 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-07-09 15:20 - 2014-06-19 02:30 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2014-07-09 15:20 - 2014-06-19 00:05 - 00534528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\uxtheme.dll 2014-07-09 15:19 - 2014-06-19 04:10 - 03959296 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2014-07-09 15:19 - 2014-06-19 04:10 - 02650624 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2014-07-09 15:19 - 2014-06-19 02:53 - 14368768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2014-07-09 15:19 - 2014-06-19 02:53 - 00080896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2014-07-09 15:19 - 2014-06-19 02:52 - 02863616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2014-07-09 15:19 - 2014-06-19 02:52 - 02051072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2014-07-09 15:19 - 2014-06-19 02:52 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2014-07-09 15:11 - 2013-08-10 07:21 - 00448512 _____ (Microsoft Corporation) C:\Windows\system32\SettingSync.dll 2014-07-09 15:11 - 2013-08-10 07:21 - 00128512 _____ (Microsoft Corporation) C:\Windows\system32\SettingSyncInfo.dll 2014-07-09 15:11 - 2013-08-10 05:58 - 00356352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SettingSync.dll 2014-07-09 15:11 - 2013-08-02 08:28 - 00222208 _____ (Microsoft Corporation) C:\Windows\system32\shdocvw.dll 2014-07-09 15:11 - 2013-08-02 07:08 - 00199168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shdocvw.dll 2014-07-09 15:11 - 2013-07-25 01:10 - 00158208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mbsmsapi.dll 2014-07-09 15:11 - 2013-07-25 01:06 - 00225280 _____ (Microsoft Corporation) C:\Windows\system32\mbsmsapi.dll 2014-07-09 15:11 - 2013-04-10 01:17 - 01125888 _____ (Microsoft Corporation) C:\Windows\system32\msctf.dll 2014-07-09 15:11 - 2013-04-10 00:29 - 00893952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msctf.dll 2014-07-09 15:09 - 2014-07-11 23:06 - 00000000 ____D () C:\Users\Jasmin\AppData\Roaming\TS3Client 2014-07-09 15:08 - 2014-02-04 01:56 - 00332632 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys 2014-07-09 15:08 - 2014-02-04 01:56 - 00278872 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msiscsi.sys 2014-07-09 15:08 - 2014-01-31 02:48 - 00485888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSDApi.dll 2014-07-09 15:08 - 2014-01-31 02:06 - 00599040 _____ (Microsoft Corporation) C:\Windows\system32\WSDApi.dll 2014-07-09 15:08 - 2014-01-27 05:39 - 01939288 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys 2014-07-09 15:08 - 2014-01-16 01:42 - 00118784 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dfsc.sys 2014-07-09 15:08 - 2014-01-11 08:48 - 05979648 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll 2014-07-09 15:08 - 2014-01-11 07:06 - 05092352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll 2014-07-09 15:08 - 2014-01-03 01:35 - 00365568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsGdiConverter.dll 2014-07-09 15:08 - 2014-01-03 01:32 - 00523264 _____ (Microsoft Corporation) C:\Windows\system32\XpsGdiConverter.dll 2014-07-09 15:00 - 2013-08-03 08:40 - 01374208 _____ (Microsoft Corporation) C:\Windows\system32\wdc.dll 2014-07-09 15:00 - 2013-08-03 08:40 - 00566784 _____ (Microsoft Corporation) C:\Windows\system32\wvc.dll 2014-07-09 15:00 - 2013-08-03 08:40 - 00462336 _____ (Microsoft Corporation) C:\Windows\system32\sysmon.ocx 2014-07-09 15:00 - 2013-08-03 07:14 - 00399360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sysmon.ocx 2014-07-09 15:00 - 2013-08-03 07:13 - 01245696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdc.dll 2014-07-09 15:00 - 2013-08-03 07:13 - 00437248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wvc.dll 2014-07-09 14:47 - 2014-07-09 14:47 - 00001613 _____ () C:\Users\Public\Desktop\Play League of Legends.lnk 2014-07-09 14:47 - 2014-07-09 14:47 - 00000000 __SHD () C:\Windows\SysWOW64\AI_RecycleBin 2014-07-09 14:47 - 2014-07-09 14:47 - 00000000 ____D () C:\Riot Games 2014-07-09 14:47 - 2014-07-09 14:47 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\League of Legends 2014-07-09 14:47 - 2008-07-31 10:41 - 00068616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_1.dll 2014-07-09 14:47 - 2008-07-31 10:40 - 00509448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_2.dll 2014-07-09 14:47 - 2008-07-12 08:18 - 03851784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_39.dll 2014-07-09 14:47 - 2008-07-12 08:18 - 01493528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_39.dll 2014-07-09 14:47 - 2008-07-12 08:18 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_39.dll 2014-07-09 14:46 - 2014-07-09 14:46 - 00000000 ____D () C:\Program Files (x86)\Pando Networks 2014-07-09 14:45 - 2014-07-09 14:45 - 00000000 ____D () C:\Users\Jasmin\AppData\Roaming\Riot Games 2014-07-09 14:44 - 2014-04-30 00:32 - 01301504 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll 2014-07-09 14:44 - 2014-04-30 00:22 - 01023488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll 2014-07-09 14:44 - 2014-04-19 11:39 - 00628024 _____ (Microsoft Corporation) C:\Windows\system32\NotificationUI.exe 2014-07-09 14:44 - 2013-08-16 07:41 - 00058200 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dam.sys 2014-07-09 14:44 - 2013-08-16 07:39 - 02371728 _____ (Microsoft Corporation) C:\Windows\system32\WSService.dll 2014-07-09 14:44 - 2013-08-16 07:22 - 04917760 _____ (Microsoft Corporation) C:\Windows\system32\sppsvc.exe 2014-07-09 14:44 - 2013-08-16 07:21 - 01164288 _____ (Microsoft Corporation) C:\Windows\system32\sppobjs.dll 2014-07-09 14:44 - 2013-08-16 07:21 - 00368640 _____ (Microsoft Corporation) C:\Windows\system32\sppwinob.dll 2014-07-09 14:44 - 2013-08-16 07:21 - 00204800 _____ (Microsoft Corporation) C:\Windows\system32\WSClient.dll 2014-07-09 14:44 - 2013-08-16 07:21 - 00183808 _____ (Microsoft Corporation) C:\Windows\system32\WSSync.dll 2014-07-09 14:44 - 2013-08-16 07:21 - 00120320 _____ (Microsoft Corporation) C:\Windows\system32\sppc.dll 2014-07-09 14:44 - 2013-08-16 07:21 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\setupcln.dll 2014-07-09 14:44 - 2013-08-16 07:20 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll 2014-07-09 14:44 - 2013-08-16 00:43 - 00167424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSClient.dll 2014-07-09 14:44 - 2013-08-16 00:43 - 00159232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSSync.dll 2014-07-09 14:44 - 2013-08-16 00:43 - 00083968 _____ () C:\Windows\SysWOW64\OEMLicense.dll 2014-07-09 14:44 - 2013-08-16 00:42 - 00091648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sppc.dll 2014-07-09 14:44 - 2013-08-16 00:42 - 00076800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setupcln.dll 2014-07-09 14:43 - 2014-05-03 07:47 - 03246592 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll 2014-07-09 14:43 - 2014-05-03 05:34 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll 2014-07-09 14:43 - 2014-03-28 21:19 - 00035856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdBoot.sys 2014-07-09 14:43 - 2014-03-24 00:11 - 00269592 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdFilter.sys 2014-07-09 14:43 - 2013-10-10 13:53 - 00096600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wfplwfs.sys 2014-07-09 14:43 - 2013-10-10 11:21 - 01160192 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL 2014-07-09 14:43 - 2013-10-10 11:20 - 00723968 _____ (Microsoft Corporation) C:\Windows\system32\BFE.DLL 2014-07-09 14:43 - 2013-07-06 02:15 - 00652288 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll 2014-07-09 14:43 - 2013-07-04 04:13 - 00541696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comctl32.dll 2014-07-09 14:43 - 2013-06-10 21:16 - 00888832 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll 2014-07-09 14:43 - 2013-06-10 21:15 - 00381952 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL 2014-07-09 14:43 - 2013-06-10 21:10 - 00702464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nshwfp.dll 2014-07-09 14:43 - 2013-06-10 21:10 - 00245248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FWPUCLNT.DLL 2014-07-09 14:42 - 2014-07-09 14:42 - 00001178 _____ () C:\Users\Public\Desktop\TeamSpeak 3 Client.lnk 2014-07-09 14:42 - 2014-07-09 14:42 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamSpeak 3 Client 2014-07-09 14:42 - 2014-07-09 14:42 - 00000000 ____D () C:\Program Files (x86)\TeamSpeak 3 Client 2014-07-09 14:42 - 2014-05-03 08:34 - 06974808 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe 2014-07-09 14:42 - 2014-05-03 08:33 - 01824808 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll 2014-07-09 14:42 - 2014-05-03 06:51 - 01408976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll 2014-07-09 14:42 - 2014-05-02 00:37 - 01023488 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll 2014-07-09 14:42 - 2014-04-30 00:32 - 00126464 _____ (Microsoft Corporation) C:\Windows\system32\Robocopy.exe 2014-07-09 14:42 - 2014-04-30 00:32 - 00106496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Robocopy.exe 2014-07-09 14:42 - 2014-04-24 01:51 - 00566784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSShared.dll 2014-07-09 14:42 - 2014-04-24 01:51 - 00124928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll 2014-07-09 14:42 - 2014-04-24 01:38 - 00693760 _____ (Microsoft Corporation) C:\Windows\system32\WSShared.dll 2014-07-09 14:42 - 2014-04-24 01:38 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll 2014-07-09 14:42 - 2014-04-03 13:19 - 00328024 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Classpnp.sys 2014-07-09 14:42 - 2014-04-03 05:44 - 00619008 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys 2014-07-09 14:42 - 2014-04-01 00:08 - 00387268 _____ () C:\Windows\system32\ApnDatabase.xml 2014-07-09 14:42 - 2014-03-25 01:42 - 00305152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wusa.exe 2014-07-09 14:42 - 2014-03-25 00:56 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\wusa.exe 2014-07-09 14:42 - 2014-02-08 06:34 - 00071168 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hdaudbus.sys 2014-07-09 14:42 - 2014-01-31 02:48 - 00143872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.dll 2014-07-09 14:42 - 2014-01-13 01:30 - 02238976 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll 2014-07-09 14:42 - 2014-01-13 01:30 - 02032640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll 2014-07-09 14:42 - 2013-11-20 02:15 - 03842560 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll 2014-07-09 14:42 - 2013-11-20 01:57 - 03288576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll 2014-07-09 14:42 - 2013-10-19 07:45 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll 2014-07-09 14:42 - 2013-10-19 06:04 - 00059392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll 2014-07-09 14:42 - 2013-08-16 07:21 - 00198656 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.dll 2014-07-09 14:42 - 2013-07-25 01:10 - 10799104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.dll 2014-07-09 14:42 - 2013-07-25 01:07 - 13661696 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.dll 2014-07-09 14:42 - 2013-07-02 00:14 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbprint.sys 2014-07-09 14:42 - 2013-06-29 05:08 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidparse.sys 2014-07-09 14:41 - 2014-06-06 16:06 - 00596480 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll 2014-07-09 14:41 - 2014-06-06 12:17 - 00497152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll 2014-07-09 14:41 - 2014-04-03 13:22 - 02233176 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys 2014-07-09 14:41 - 2013-09-14 00:36 - 00247296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ubpm.dll 2014-07-09 14:41 - 2013-09-14 00:33 - 00328192 _____ (Microsoft Corporation) C:\Windows\system32\ubpm.dll 2014-07-09 14:41 - 2013-08-30 07:43 - 00061784 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\crashdmp.sys 2014-07-09 14:41 - 2013-08-30 07:20 - 01173504 _____ (Microsoft Corporation) C:\Windows\system32\UIAutomationCore.dll 2014-07-09 14:41 - 2013-08-30 01:48 - 00914432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIAutomationCore.dll 2014-07-09 14:41 - 2013-08-21 08:39 - 00465240 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fvevol.sys 2014-07-09 14:41 - 2013-08-16 07:21 - 00049664 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll 2014-07-09 14:41 - 2013-08-16 07:21 - 00049152 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll 2014-07-09 14:41 - 2013-08-16 00:43 - 00020992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll 2014-07-09 14:41 - 2013-08-10 08:30 - 00151896 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tpm.sys 2014-07-09 14:41 - 2013-07-13 08:18 - 00337408 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll 2014-07-09 14:41 - 2013-07-13 08:16 - 00068096 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll 2014-07-09 14:41 - 2013-07-13 08:15 - 00124416 _____ (Microsoft Corporation) C:\Windows\system32\apprepapi.dll 2014-07-09 14:41 - 2013-07-13 08:15 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\apprepsync.dll 2014-07-09 14:41 - 2013-07-13 06:24 - 00261120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll 2014-07-09 14:41 - 2013-07-13 06:23 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apprepapi.dll 2014-07-09 14:41 - 2013-07-13 06:23 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apprepsync.dll 2014-07-09 14:41 - 2013-07-09 10:04 - 00120144 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msgpioclx.sys 2014-07-09 14:41 - 2013-07-09 08:18 - 00439488 _____ (Microsoft Corporation) C:\Windows\system32\WerFault.exe 2014-07-09 14:41 - 2013-07-09 06:25 - 00385768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WerFault.exe 2014-07-09 14:41 - 2013-07-09 05:57 - 00245760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\LocationApi.dll 2014-07-09 14:41 - 2013-07-09 00:46 - 00543744 _____ (Microsoft Corporation) C:\Windows\system32\wwanmm.dll 2014-07-09 14:41 - 2013-07-09 00:46 - 00414208 _____ (Microsoft Corporation) C:\Windows\system32\wwanconn.dll 2014-07-09 14:41 - 2013-07-09 00:46 - 00370688 _____ (Microsoft Corporation) C:\Windows\system32\Wwanadvui.dll 2014-07-09 14:41 - 2013-07-09 00:45 - 00312832 _____ (Microsoft Corporation) C:\Windows\system32\LocationApi.dll 2014-07-09 14:41 - 2013-07-03 02:23 - 00391168 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.BackgroundTransfer.dll 2014-07-09 14:41 - 2013-07-03 02:22 - 02839552 _____ (Microsoft Corporation) C:\Windows\system32\msftedit.dll 2014-07-09 14:41 - 2013-07-03 02:11 - 00268800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Networking.BackgroundTransfer.dll 2014-07-09 14:41 - 2013-07-03 02:10 - 02273792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msftedit.dll 2014-07-09 14:41 - 2013-07-01 00:30 - 00067072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\openfiles.exe 2014-07-09 14:41 - 2013-07-01 00:29 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\openfiles.exe 2014-07-09 14:41 - 2013-06-29 08:15 - 00195416 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\sdbus.sys 2014-07-09 14:41 - 2013-06-29 08:15 - 00125784 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dumpsd.sys 2014-07-09 14:41 - 2013-06-26 05:01 - 00321536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\udfs.sys 2014-07-09 14:41 - 2013-06-26 04:59 - 00341504 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\HdAudio.sys 2014-07-09 14:41 - 2013-06-25 00:54 - 00447488 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll 2014-07-09 14:41 - 2013-06-25 00:54 - 00263680 _____ (Microsoft Corporation) C:\Windows\system32\wcmsvc.dll 2014-07-09 14:41 - 2013-06-25 00:54 - 00074240 _____ (Microsoft Corporation) C:\Windows\system32\wcmcsp.dll 2014-07-09 14:41 - 2013-06-19 07:36 - 00183808 _____ (Microsoft Corporation) C:\Windows\system32\winmmbase.dll 2014-07-09 14:41 - 2013-06-19 07:36 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\winmm.dll 2014-07-09 14:41 - 2013-06-19 00:38 - 00160256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winmmbase.dll 2014-07-09 14:41 - 2013-06-19 00:38 - 00125440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winmm.dll 2014-07-09 14:41 - 2013-06-12 01:43 - 00154112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WinSCard.dll 2014-07-09 14:41 - 2013-06-12 01:26 - 00230912 _____ (Microsoft Corporation) C:\Windows\system32\WinSCard.dll 2014-07-09 14:41 - 2013-06-06 10:03 - 00119040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBSTOR.SYS 2014-07-09 14:40 - 2014-04-12 11:27 - 00172888 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys 2014-07-09 14:40 - 2014-04-12 11:10 - 00578048 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe 2014-07-09 14:40 - 2014-04-12 11:09 - 01043968 _____ (Microsoft Corporation) C:\Windows\system32\usercpl.dll 2014-07-09 14:40 - 2014-04-12 11:09 - 00208896 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll 2014-07-09 14:40 - 2014-04-12 11:09 - 00094720 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll 2014-07-09 14:40 - 2014-04-12 11:08 - 00827904 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll 2014-07-09 14:40 - 2014-04-12 11:08 - 00318464 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll 2014-07-09 14:40 - 2014-04-12 11:07 - 00020480 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll 2014-07-09 14:40 - 2014-04-12 09:23 - 00961536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usercpl.dll 2014-07-09 14:40 - 2014-04-12 09:23 - 00273920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll 2014-07-09 14:40 - 2014-04-12 09:23 - 00178688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll 2014-07-09 14:40 - 2014-04-12 09:23 - 00076800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll 2014-07-09 14:40 - 2014-04-12 09:22 - 00666624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll 2014-07-09 14:40 - 2014-04-12 09:22 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll 2014-07-09 14:40 - 2014-04-12 08:58 - 00014848 _____ (Microsoft Corporation) C:\Windows\system32\workerdd.dll 2014-07-09 14:40 - 2014-03-11 05:25 - 00100184 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys 2014-07-09 14:40 - 2014-03-11 02:41 - 00559104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\objsel.dll 2014-07-09 14:40 - 2014-03-11 02:41 - 00323072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll 2014-07-09 14:40 - 2014-03-11 02:41 - 00038400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dimsroam.dll 2014-07-09 14:40 - 2014-03-11 02:39 - 00035840 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe 2014-07-09 14:40 - 2014-03-11 02:38 - 00982016 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll 2014-07-09 14:40 - 2014-03-11 02:38 - 00684032 _____ (Microsoft Corporation) C:\Windows\system32\objsel.dll 2014-07-09 14:40 - 2014-03-11 02:38 - 00419328 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll 2014-07-09 14:40 - 2014-03-11 02:38 - 00179712 _____ (Microsoft Corporation) C:\Windows\system32\dpapisrv.dll 2014-07-09 14:40 - 2014-03-11 02:38 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll 2014-07-09 14:40 - 2014-03-11 02:38 - 00045056 _____ (Microsoft Corporation) C:\Windows\system32\dimsroam.dll 2014-07-09 14:40 - 2014-03-11 02:38 - 00027648 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll 2014-07-09 14:40 - 2014-03-10 05:05 - 00668160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll 2014-07-09 14:40 - 2014-03-10 03:27 - 00099840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll 2014-07-09 14:40 - 2014-03-04 01:07 - 00570216 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys 2014-07-09 14:40 - 2013-10-31 07:56 - 00915968 _____ (Microsoft Corporation) C:\Windows\system32\MPSSVC.dll 2014-07-09 14:40 - 2013-10-31 07:56 - 00758784 _____ (Microsoft Corporation) C:\Windows\system32\FirewallAPI.dll 2014-07-09 14:40 - 2013-10-31 06:01 - 00550400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FirewallAPI.dll 2014-07-09 14:40 - 2013-10-31 05:42 - 00074752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mpsdrv.sys 2014-07-09 14:40 - 2013-10-13 22:49 - 00100696 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\disk.sys 2014-07-09 14:40 - 2013-10-10 11:32 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cscript.exe 2014-07-09 14:40 - 2013-10-10 11:30 - 00162304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scrobj.dll 2014-07-09 14:40 - 2013-10-10 11:30 - 00156160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scrrun.dll 2014-07-09 14:40 - 2013-10-10 11:24 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx 2014-07-09 14:40 - 2013-10-10 11:23 - 00146944 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe 2014-07-09 14:40 - 2013-10-10 11:22 - 00222720 _____ (Microsoft Corporation) C:\Windows\system32\scrobj.dll 2014-07-09 14:40 - 2013-10-10 11:22 - 00194048 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll 2014-07-09 14:40 - 2013-08-27 07:21 - 00227840 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll 2014-07-09 14:40 - 2013-08-27 07:19 - 00104448 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll 2014-07-09 14:40 - 2013-08-27 00:29 - 00199168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WebClnt.dll 2014-07-09 14:40 - 2013-08-27 00:28 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\davclnt.dll 2014-07-09 14:37 - 2014-07-01 00:42 - 00702464 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll 2014-07-09 14:37 - 2014-07-01 00:42 - 00394240 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll 2014-07-09 14:37 - 2014-07-01 00:42 - 00087552 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll 2014-07-09 14:37 - 2014-06-28 05:35 - 00556544 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll 2014-07-09 14:37 - 2013-11-23 08:43 - 00420864 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll 2014-07-09 14:37 - 2013-11-23 07:05 - 00368640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll 2014-07-09 14:37 - 2013-11-01 07:38 - 00312320 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll 2014-07-09 14:37 - 2013-11-01 05:49 - 00273408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msieftp.dll 2014-07-09 14:37 - 2013-08-23 09:22 - 02062848 _____ (Microsoft Corporation) C:\Windows\system32\d3d11.dll 2014-07-09 14:37 - 2013-08-23 03:44 - 01711616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll 2014-07-09 14:36 - 2014-03-28 10:23 - 01287168 _____ (Microsoft Corporation) C:\Windows\system32\schedsvc.dll 2014-07-09 14:36 - 2014-01-31 02:48 - 01339392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll 2014-07-09 14:36 - 2014-01-31 02:06 - 01628160 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll 2014-07-09 14:36 - 2013-12-05 01:43 - 00583680 _____ (Microsoft Corporation) C:\Windows\system32\msdrm.dll 2014-07-09 14:36 - 2013-12-05 01:37 - 00451072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdrm.dll 2014-07-09 14:36 - 2013-10-02 01:37 - 02035712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll 2014-07-09 14:36 - 2013-10-02 01:26 - 02304512 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll 2014-07-09 14:36 - 2013-08-02 08:28 - 10116608 _____ (Microsoft Corporation) C:\Windows\system32\twinui.dll 2014-07-09 14:36 - 2013-08-02 07:08 - 08858112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.dll 2014-07-09 14:36 - 2013-03-22 05:49 - 02382336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\esent.dll 2014-07-09 14:36 - 2013-03-22 00:47 - 02851840 _____ (Microsoft Corporation) C:\Windows\system32\esent.dll 2014-07-09 14:34 - 2014-06-18 01:27 - 01440256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\osk.exe 2014-07-09 14:34 - 2014-06-18 01:24 - 01557504 _____ (Microsoft Corporation) C:\Windows\system32\osk.exe 2014-07-09 14:34 - 2014-06-11 06:18 - 04038144 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2014-07-09 14:34 - 2014-05-30 01:31 - 00452608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SHCore.dll 2014-07-09 14:34 - 2014-05-30 01:03 - 00588288 _____ (Microsoft Corporation) C:\Windows\system32\SHCore.dll 2014-07-09 14:34 - 2014-05-30 01:02 - 01281536 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll 2014-07-09 14:34 - 2014-05-30 01:02 - 00439808 _____ (Microsoft Corporation) C:\Windows\system32\lsm.dll 2014-07-09 14:34 - 2014-03-28 10:23 - 19759104 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll 2014-07-09 14:34 - 2014-03-28 08:18 - 17562112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll 2014-07-09 14:33 - 2013-10-09 03:33 - 00059416 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe 2014-07-09 14:33 - 2013-10-09 00:30 - 00628736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll 2014-07-09 14:33 - 2013-10-09 00:30 - 00126976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll 2014-07-09 14:33 - 2013-10-09 00:30 - 00084992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll 2014-07-09 14:33 - 2013-10-09 00:30 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe 2014-07-09 14:33 - 2013-10-09 00:28 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe 2014-07-09 14:33 - 2013-10-09 00:27 - 03279872 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll 2014-07-09 14:33 - 2013-10-09 00:27 - 01622016 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll 2014-07-09 14:33 - 2013-10-09 00:27 - 00773120 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll 2014-07-09 14:33 - 2013-10-09 00:27 - 00252928 _____ (Microsoft Corporation) C:\Windows\system32\WUSettingsProvider.dll 2014-07-09 14:33 - 2013-10-09 00:27 - 00175104 _____ (Microsoft Corporation) C:\Windows\system32\storewuauth.dll 2014-07-09 14:33 - 2013-10-09 00:27 - 00142848 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll 2014-07-09 14:33 - 2013-10-09 00:27 - 00099328 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll 2014-07-09 14:33 - 2013-10-05 08:10 - 00285016 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\spaceport.sys 2014-07-09 14:33 - 2013-10-02 04:50 - 00447320 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBHUB3.SYS 2014-07-09 14:33 - 2013-09-28 07:48 - 00778752 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll 2014-07-09 14:33 - 2013-09-28 05:58 - 00551424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll 2014-07-09 14:33 - 2013-09-19 09:32 - 01455448 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys 2014-07-09 14:33 - 2013-08-30 07:19 - 00626688 _____ (Microsoft Corporation) C:\Windows\system32\resutils.dll 2014-07-09 14:33 - 2013-08-30 07:18 - 00374784 _____ (Microsoft Corporation) C:\Windows\system32\clusapi.dll 2014-07-09 14:33 - 2013-08-30 01:48 - 00488960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\resutils.dll 2014-07-09 14:33 - 2013-08-30 01:47 - 00302080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\clusapi.dll 2014-07-09 14:32 - 2014-07-09 14:32 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr 2014-07-09 14:32 - 2013-12-09 02:45 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2014-07-09 14:32 - 2013-12-09 01:59 - 00600064 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2014-07-09 14:31 - 2014-06-03 00:33 - 00265216 _____ (Microsoft Corporation) C:\Windows\system32\InkEd.dll 2014-07-09 14:31 - 2013-10-02 01:37 - 01569280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll 2014-07-09 14:31 - 2013-10-02 01:26 - 01890816 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll 2014-07-09 14:31 - 2013-08-07 07:15 - 00144896 _____ (Microsoft Corporation) C:\Windows\system32\tssdisai.dll 2014-07-09 14:31 - 2013-07-06 00:02 - 00099328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbcir.sys 2014-07-09 14:31 - 2013-07-06 00:01 - 00210560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbvideo.sys 2014-07-09 14:31 - 2013-06-22 07:45 - 00785624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys 2014-07-09 14:31 - 2013-06-22 07:45 - 00054488 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdfLdr.sys 2014-07-09 14:31 - 2013-05-24 01:02 - 01314816 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll 2014-07-09 14:31 - 2013-05-24 00:25 - 00694272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll 2014-07-09 14:29 - 2013-07-01 03:42 - 00623448 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys 2014-07-09 14:29 - 2013-07-01 03:42 - 00498008 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys 2014-07-09 14:29 - 2013-07-01 03:42 - 00079192 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys 2014-07-09 14:29 - 2013-07-01 03:42 - 00021848 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys 2014-07-09 14:29 - 2013-06-29 05:07 - 00032256 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys 2014-07-09 14:29 - 2013-06-29 05:06 - 00120832 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys 2014-07-09 14:29 - 2013-05-27 01:17 - 00035328 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll 2014-07-09 14:29 - 2013-05-27 00:59 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll 2014-07-09 14:29 - 2013-05-25 05:15 - 00362496 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll 2014-07-09 14:29 - 2013-05-25 04:32 - 00300032 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll 2014-07-09 14:27 - 2013-07-20 00:13 - 00124112 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll 2014-07-09 14:27 - 2013-07-20 00:13 - 00102608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll 2014-07-09 14:26 - 2013-07-02 03:41 - 00337752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBXHCI.SYS 2014-07-09 14:26 - 2013-07-02 03:41 - 00213336 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\UCX01000.SYS 2014-07-09 14:25 - 2014-07-09 14:25 - 00000000 ____D () C:\Users\Jasmin\AppData\Roaming\AVAST Software 2014-07-09 14:25 - 2014-05-30 00:24 - 00576512 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys 2014-07-09 14:23 - 2014-07-09 14:32 - 00003924 _____ () C:\Windows\System32\Tasks\avast! Emergency Update 2014-07-09 14:23 - 2014-07-09 14:23 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome 2014-07-09 14:23 - 2014-07-09 14:23 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast 2014-07-09 14:23 - 2014-03-07 02:47 - 01419264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll 2014-07-09 14:23 - 2014-03-07 02:08 - 01845760 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll 2014-07-09 14:23 - 2013-09-28 05:35 - 00288768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys 2014-07-09 14:12 - 2014-07-11 23:22 - 00001128 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2014-07-09 14:12 - 2014-07-11 22:45 - 00001124 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2014-07-09 14:12 - 2014-07-09 15:17 - 00004100 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA 2014-07-09 14:12 - 2014-07-09 15:17 - 00003864 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore 2014-07-09 14:12 - 2014-07-09 14:32 - 01041168 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsnx.sys 2014-07-09 14:12 - 2014-07-09 14:32 - 00427360 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsp.sys 2014-07-09 14:12 - 2014-07-09 14:32 - 00307344 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe 2014-07-09 14:12 - 2014-07-09 14:32 - 00224896 _____ () C:\Windows\system32\Drivers\aswVmm.sys 2014-07-09 14:12 - 2014-07-09 14:32 - 00093568 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys 2014-07-09 14:12 - 2014-07-09 14:32 - 00092008 _____ (AVAST Software) C:\Windows\system32\Drivers\aswstm.sys 2014-07-09 14:12 - 2014-07-09 14:32 - 00079184 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys 2014-07-09 14:12 - 2014-07-09 14:32 - 00065776 _____ () C:\Windows\system32\Drivers\aswRvrt.sys 2014-07-09 14:12 - 2014-07-09 14:32 - 00029208 _____ () C:\Windows\system32\Drivers\aswHwid.sys 2014-07-09 14:12 - 2014-07-09 14:25 - 00000000 ____D () C:\Users\Jasmin\AppData\Local\Google 2014-07-09 14:12 - 2014-07-09 14:22 - 00000000 ____D () C:\Program Files (x86)\Google 2014-07-09 14:12 - 2014-07-09 14:12 - 01039096 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsnx.sys.1404908618500 2014-07-09 14:12 - 2014-07-09 14:12 - 00423240 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsp.sys.1404908618500 2014-07-09 14:12 - 2014-07-09 14:12 - 00085328 _____ (AVAST Software) C:\Windows\system32\Drivers\aswstm.sys.1404908618500 2014-07-09 14:11 - 2014-07-09 14:11 - 00000000 ____D () C:\ProgramData\AVAST Software 2014-07-09 14:11 - 2014-07-09 14:11 - 00000000 ____D () C:\Program Files\AVAST Software 2014-07-09 14:10 - 2014-07-09 14:27 - 86969248 _____ (DVDVideoSoft Ltd. ) C:\Users\Jasmin\Downloads\FreeStudio.exe 2014-07-09 14:10 - 2014-03-01 11:47 - 01258496 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll 2014-07-09 14:10 - 2014-03-01 11:47 - 01120768 _____ (Microsoft Corporation) C:\Windows\system32\gpedit.dll 2014-07-09 14:10 - 2014-03-01 10:07 - 01075200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gpedit.dll 2014-07-09 14:10 - 2014-03-01 08:59 - 00974848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll 2014-07-09 14:10 - 2014-02-27 01:18 - 00370688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys 2014-07-09 14:10 - 2014-02-27 01:18 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys 2014-07-09 14:10 - 2014-02-27 01:18 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys 2014-07-09 14:10 - 2014-02-15 06:15 - 00078336 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\IPMIDrv.sys 2014-07-09 14:10 - 2013-11-26 01:17 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidclass.sys 2014-07-09 14:09 - 2014-07-09 14:09 - 01110476 _____ () C:\Users\Jasmin\Downloads\7z920.exe 2014-07-09 14:08 - 2014-07-09 14:08 - 00000000 ____D () C:\ProgramData\APN 2014-07-09 14:07 - 2014-07-11 23:13 - 00000000 ____D () C:\Users\Jasmin\AppData\Roaming\.minecraft 2014-07-09 14:07 - 2014-07-09 14:07 - 00000000 ____D () C:\ProgramData\Oracle 2014-07-09 14:06 - 2014-07-09 14:06 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe 2014-07-09 14:06 - 2014-07-09 14:06 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe 2014-07-09 14:06 - 2014-07-09 14:06 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe 2014-07-09 14:06 - 2014-07-09 14:06 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll 2014-07-09 14:06 - 2014-07-09 14:06 - 00000000 ____D () C:\ProgramData\Sun 2014-07-09 14:06 - 2014-07-09 14:06 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java 2014-07-09 14:06 - 2014-07-09 14:06 - 00000000 ____D () C:\Program Files (x86)\Java 2014-07-09 14:05 - 2014-07-09 14:07 - 27336464 _____ (TeamSpeak Systems GmbH) C:\Users\Jasmin\Downloads\TeamSpeak3-Client-win32-3.0.15.exe 2014-07-09 14:02 - 2014-07-09 14:02 - 00918952 _____ (Oracle Corporation) C:\Users\Jasmin\Downloads\jxpiinstall.exe 2014-07-09 13:52 - 2014-07-09 13:55 - 34888568 _____ (Riot Games) C:\Users\Jasmin\Downloads\LeagueofLegends_EUW_Installer_06_12_13.exe 2014-07-09 13:51 - 2014-07-09 13:51 - 00675988 _____ () C:\Users\Jasmin\Desktop\Minecraft.exe 2014-07-09 13:49 - 2014-07-09 13:55 - 94714880 _____ (AVAST Software) C:\Users\Jasmin\Downloads\avast_free_antivirus_setup_21514.exe 2014-07-09 13:36 - 2014-07-11 22:58 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox 2014-07-09 13:36 - 2014-07-09 13:37 - 00000000 ____D () C:\Users\Jasmin\AppData\Local\Mozilla 2014-07-09 13:36 - 2014-07-09 13:36 - 00000000 ____D () C:\ProgramData\Mozilla 2014-07-09 13:32 - 2014-07-09 13:32 - 00284288 _____ (Mozilla) C:\Users\Jasmin\Downloads\Firefox Setup Stub 30.0.exe 2014-07-09 13:25 - 2012-11-20 12:48 - 02213776 _____ (ELAN Microelectronics Corp.) C:\Windows\ETDUninst.dll 2014-07-09 13:24 - 2014-07-11 15:29 - 00003600 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1733027970-2465188296-4133737029-1001 2014-07-09 13:21 - 2014-07-11 23:06 - 00000000 ____D () C:\Users\Jasmin\AppData\Local\CrashDumps 2014-07-09 13:17 - 2014-07-09 13:17 - 00001454 _____ () C:\Users\Jasmin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2014-07-09 13:17 - 2014-07-09 13:17 - 00000000 ____D () C:\Windows\System32\Tasks\WPD 2014-07-09 13:17 - 2014-07-09 13:17 - 00000000 ____D () C:\Users\Jasmin\AppData\Roaming\Adobe 2014-07-09 13:16 - 2014-07-09 13:16 - 00000000 ____D () C:\Users\Jasmin\AppData\Roaming\lm 2014-07-09 13:15 - 2014-07-11 22:08 - 00000000 ____D () C:\Users\Jasmin\AppData\Local\VirtualStore 2014-07-09 13:14 - 2014-07-10 23:06 - 00000000 ____D () C:\Users\Jasmin\AppData\Local\Packages 2014-07-09 13:14 - 2014-07-09 18:34 - 00000000 ____D () C:\Users\Jasmin 2014-07-09 13:14 - 2014-07-09 13:14 - 00000020 ___SH () C:\Users\Jasmin\ntuser.ini 2014-07-09 13:14 - 2014-07-09 13:14 - 00000000 _SHDL () C:\Users\Jasmin\Vorlagen 2014-07-09 13:14 - 2014-07-09 13:14 - 00000000 _SHDL () C:\Users\Jasmin\Startmenü 2014-07-09 13:14 - 2014-07-09 13:14 - 00000000 _SHDL () C:\Users\Jasmin\Netzwerkumgebung 2014-07-09 13:14 - 2014-07-09 13:14 - 00000000 _SHDL () C:\Users\Jasmin\Lokale Einstellungen 2014-07-09 13:14 - 2014-07-09 13:14 - 00000000 _SHDL () C:\Users\Jasmin\Eigene Dateien 2014-07-09 13:14 - 2014-07-09 13:14 - 00000000 _SHDL () C:\Users\Jasmin\Druckumgebung 2014-07-09 13:14 - 2014-07-09 13:14 - 00000000 _SHDL () C:\Users\Jasmin\Documents\Eigene Musik 2014-07-09 13:14 - 2014-07-09 13:14 - 00000000 _SHDL () C:\Users\Jasmin\Documents\Eigene Bilder 2014-07-09 13:14 - 2014-07-09 13:14 - 00000000 _SHDL () C:\Users\Jasmin\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-07-09 13:14 - 2014-07-09 13:14 - 00000000 _SHDL () C:\Users\Jasmin\AppData\Local\Verlauf 2014-07-09 13:14 - 2014-07-09 13:14 - 00000000 _SHDL () C:\Users\Jasmin\AppData\Local\Anwendungsdaten 2014-07-09 13:14 - 2014-07-09 13:14 - 00000000 _SHDL () C:\Users\Jasmin\Anwendungsdaten 2014-07-09 13:14 - 2014-07-03 12:42 - 00000000 ___RD () C:\Users\Jasmin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools 2014-07-09 13:14 - 2014-05-26 14:00 - 00000000 ___RD () C:\Users\Jasmin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility 2014-07-09 13:14 - 2012-07-26 10:13 - 00000000 ___RD () C:\Users\Jasmin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories 2014-07-09 13:14 - 2012-07-26 10:13 - 00000000 ____D () C:\Users\Jasmin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance 2014-07-03 22:24 - 2014-07-10 23:33 - 00753134 _____ () C:\Windows\system32\perfh007.dat 2014-07-03 22:24 - 2014-07-10 23:33 - 00155826 _____ () C:\Windows\system32\perfc007.dat 2014-07-03 22:24 - 2014-07-03 22:24 - 00305546 _____ () C:\Windows\system32\perfi007.dat 2014-07-03 22:24 - 2014-07-03 22:24 - 00040390 _____ () C:\Windows\system32\perfd007.dat 2014-07-03 22:24 - 2014-07-03 22:24 - 00000000 ___HD () C:\sources 2014-07-03 22:24 - 2014-07-03 22:24 - 00000000 ____D () C:\Windows\SysWOW64\XPSViewer 2014-07-03 22:24 - 2014-07-03 22:24 - 00000000 ____D () C:\Windows\SysWOW64\de 2014-07-03 22:24 - 2014-07-03 22:24 - 00000000 ____D () C:\Windows\SysWOW64\0407 2014-07-03 22:24 - 2014-07-03 22:24 - 00000000 ____D () C:\Windows\system32\de 2014-07-03 22:24 - 2014-07-03 22:24 - 00000000 ____D () C:\Windows\system32\0407 2014-07-03 22:18 - 2014-07-03 22:18 - 00000000 ____D () C:\Windows\NAPP_Dism_Log 2014-07-03 13:49 - 2014-07-03 13:49 - 00000000 ____D () C:\ProgramData\OEM_YAHOO 2014-07-03 13:49 - 2014-07-03 13:49 - 00000000 ____D () C:\Program Files\Preload 2014-07-03 13:45 - 2014-07-03 13:45 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Musik 2014-07-03 13:45 - 2014-07-03 13:45 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Bilder 2014-07-03 13:45 - 2014-07-03 13:45 - 00000000 _SHDL () C:\Users\Default\Vorlagen 2014-07-03 13:45 - 2014-07-03 13:45 - 00000000 _SHDL () C:\Users\Default\Startmenü 2014-07-03 13:45 - 2014-07-03 13:45 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung 2014-07-03 13:45 - 2014-07-03 13:45 - 00000000 _SHDL () C:\Users\Default\Lokale Einstellungen 2014-07-03 13:45 - 2014-07-03 13:45 - 00000000 _SHDL () C:\Users\Default\Eigene Dateien 2014-07-03 13:45 - 2014-07-03 13:45 - 00000000 _SHDL () C:\Users\Default\Druckumgebung 2014-07-03 13:45 - 2014-07-03 13:45 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik 2014-07-03 13:45 - 2014-07-03 13:45 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder 2014-07-03 13:45 - 2014-07-03 13:45 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-07-03 13:45 - 2014-07-03 13:45 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf 2014-07-03 13:45 - 2014-07-03 13:45 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Anwendungsdaten 2014-07-03 13:45 - 2014-07-03 13:45 - 00000000 _SHDL () C:\Users\Default\Anwendungsdaten 2014-07-03 13:45 - 2014-07-03 13:45 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik 2014-07-03 13:45 - 2014-07-03 13:45 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder 2014-07-03 13:45 - 2014-07-03 13:45 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-07-03 13:45 - 2014-07-03 13:45 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf 2014-07-03 13:45 - 2014-07-03 13:45 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Anwendungsdaten 2014-07-03 13:45 - 2014-07-03 13:45 - 00000000 _SHDL () C:\Programme 2014-07-03 13:45 - 2014-07-03 13:45 - 00000000 _SHDL () C:\ProgramData\Vorlagen 2014-07-03 13:45 - 2014-07-03 13:45 - 00000000 _SHDL () C:\ProgramData\Startmenü 2014-07-03 13:45 - 2014-07-03 13:45 - 00000000 _SHDL () C:\ProgramData\Microsoft\Windows\Start Menu\Programme 2014-07-03 13:45 - 2014-07-03 13:45 - 00000000 _SHDL () C:\ProgramData\Dokumente 2014-07-03 13:45 - 2014-07-03 13:45 - 00000000 _SHDL () C:\ProgramData\Anwendungsdaten 2014-07-03 13:45 - 2014-07-03 13:45 - 00000000 _SHDL () C:\Program Files\Gemeinsame Dateien 2014-07-03 13:45 - 2014-07-03 13:45 - 00000000 _SHDL () C:\Dokumente und Einstellungen 2014-07-03 13:19 - 2014-07-03 13:19 - 00003596 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1733027970-2465188296-4133737029-500 2014-07-03 13:11 - 2014-07-03 13:11 - 00002946 _____ () C:\Windows\System32\Tasks\Power Management 2014-07-03 13:11 - 2014-07-03 13:11 - 00000000 ____D () C:\ProgramData\OEM 2014-07-03 13:10 - 2014-07-03 13:10 - 00000000 ____D () C:\ProgramData\Symantec 2014-07-03 13:10 - 2014-07-03 13:10 - 00000000 ____D () C:\ProgramData\boost_interprocess 2014-07-03 13:09 - 2014-07-03 13:09 - 00000000 ____D () C:\Program Files (x86)\Microsoft Office 2014-07-03 13:09 - 2013-02-20 19:44 - 00002004 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office.lnk 2014-07-03 13:06 - 2014-07-09 13:24 - 00000000 ____D () C:\Users\Public\CyberLink 2014-07-03 13:06 - 2014-07-09 13:24 - 00000000 ____D () C:\ProgramData\CyberLink 2014-07-03 13:06 - 2014-07-03 13:06 - 00000000 ____D () C:\ProgramData\CLSK 2014-07-03 13:04 - 2014-07-03 13:05 - 00000000 ____D () C:\ProgramData\Temp 2014-07-03 13:04 - 2014-07-03 13:04 - 00000000 ____D () C:\ProgramData\install_clap 2014-07-03 13:02 - 2014-07-03 13:02 - 00000040 _____ () C:\Windows\spotify.preload 2014-07-03 12:58 - 2014-07-03 12:58 - 04398192 _____ (Broadcom Corporation) C:\Windows\system32\bcmihvsrv64.dll 2014-07-03 12:58 - 2014-07-03 12:58 - 03664736 _____ (Broadcom Corporation) C:\Windows\system32\bcmihvui64.dll 2014-07-03 12:56 - 2014-07-03 12:56 - 00000000 ____D () C:\Windows\SysWOW64\RTCOM 2014-07-03 12:55 - 2014-07-03 12:56 - 00000000 ___HD () C:\Program Files (x86)\Temp 2014-07-03 12:55 - 2014-07-03 12:55 - 00000000 ____D () C:\Program Files\Realtek 2014-07-03 12:55 - 2014-07-03 12:55 - 00000000 ____D () C:\Program Files (x86)\Realtek 2014-07-03 12:55 - 2012-06-28 03:31 - 00016494 _____ () C:\Windows\system32\Drivers\RtPCEE4.DAT 2014-07-03 12:55 - 2012-06-12 12:10 - 04060560 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RTKVHD64.sys 2014-07-03 12:55 - 2012-06-11 08:44 - 00290813 _____ () C:\Windows\system32\Drivers\RTAIODAT.DAT 2014-07-03 12:55 - 2012-06-08 10:18 - 03615888 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkAPO64.dll 2014-07-03 12:55 - 2012-06-06 05:14 - 00584320 _____ (Sony Corporation) C:\Windows\system32\SFSS_APO.dll 2014-07-03 12:55 - 2012-06-06 04:44 - 00869520 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkApi64.dll 2014-07-03 12:55 - 2012-06-05 05:38 - 05096448 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoRes64.dat 2014-07-03 12:55 - 2012-06-01 03:37 - 02674320 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtPgEx64.dll 2014-07-03 12:55 - 2012-05-31 12:08 - 00105616 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoInstII64.dll 2014-07-03 12:55 - 2012-05-25 12:06 - 01706640 _____ (Realtek Semiconductor Corp.) C:\Windows\RtlExUpd.dll 2014-07-03 12:55 - 2012-05-17 05:29 - 07163744 _____ (Dolby Laboratories) C:\Windows\system32\R4EEP64A.dll 2014-07-03 12:55 - 2012-05-17 05:29 - 00433504 _____ (Dolby Laboratories) C:\Windows\system32\R4EED64A.dll 2014-07-03 12:55 - 2012-05-17 05:29 - 00141152 _____ (Dolby Laboratories) C:\Windows\system32\R4EEL64A.dll 2014-07-03 12:55 - 2012-05-17 05:29 - 00123744 _____ (Dolby Laboratories) C:\Windows\system32\R4EEA64A.dll 2014-07-03 12:55 - 2012-05-17 05:29 - 00074592 _____ (Dolby Laboratories) C:\Windows\system32\R4EEG64A.dll 2014-07-03 12:55 - 2012-05-10 09:22 - 01262696 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTCOM64.dll 2014-07-03 12:55 - 2012-04-10 08:40 - 02533952 _____ (Fortemedia Corporation) C:\Windows\system32\FMAPO64.dll 2014-07-03 12:55 - 2012-04-03 12:42 - 01345368 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRealtek264.dll 2014-07-03 12:55 - 2012-04-03 12:42 - 01015640 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPOShell64.dll 2014-07-03 12:55 - 2012-03-08 05:47 - 00202336 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAC64.dll 2014-07-03 12:55 - 2012-03-08 05:47 - 00108640 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAR64.dll 2014-07-03 12:55 - 2012-02-21 13:45 - 02605400 _____ (Waves Audio Ltd.) C:\Windows\system32\WavesGUILib.dll 2014-07-03 12:55 - 2012-02-17 09:54 - 00396632 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVolumeSDAPO.dll 2014-07-03 12:55 - 2012-02-13 18:05 - 08363864 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRealtek.dll 2014-07-03 12:55 - 2012-02-06 09:04 - 00000712 _____ () C:\Windows\system32\Drivers\RTEQEX0.dat 2014-07-03 12:55 - 2012-01-30 05:43 - 00836544 _____ (TOSHIBA Corporation) C:\Windows\system32\tadefxapo264.dll 2014-07-03 12:55 - 2012-01-23 16:30 - 00537456 _____ (DTS) C:\Windows\system32\DTSU2PLFX64.dll 2014-07-03 12:55 - 2012-01-23 16:30 - 00524656 _____ (DTS) C:\Windows\system32\DTSU2PGFX64.dll 2014-07-03 12:55 - 2012-01-23 16:30 - 00449392 _____ (DTS) C:\Windows\system32\DTSU2PREC64.dll 2014-07-03 12:55 - 2012-01-10 04:20 - 00065944 _____ (TOSHIBA CORPORATION.) C:\Windows\system32\tepeqapo64.dll 2014-07-03 12:55 - 2011-12-20 09:32 - 00331880 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtlCPAPI64.dll 2014-07-03 12:55 - 2011-12-18 11:58 - 02131288 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioEQ.dll 2014-07-03 12:55 - 2011-12-13 10:58 - 01560168 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTSnMg64.cpl 2014-07-03 12:55 - 2011-11-22 10:28 - 00014952 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCoLDR64.dll 2014-07-03 12:55 - 2011-09-26 16:41 - 00000024 _____ () C:\Windows\system32\Drivers\rtkhdaud.dat 2014-07-03 12:55 - 2011-09-02 08:21 - 00221024 _____ (Synopsys, Inc.) C:\Windows\system32\SFNHK64.dll 2014-07-03 12:55 - 2011-09-02 08:21 - 00081248 _____ (Synopsys, Inc.) C:\Windows\system32\SFCOM64.dll 2014-07-03 12:55 - 2011-09-02 08:21 - 00078688 _____ (Synopsys, Inc.) C:\Windows\system32\SFAPO64.dll 2014-07-03 12:55 - 2011-08-23 11:00 - 00603984 _____ (Knowles Acoustics ) C:\Windows\system32\KAAPORT64.dll 2014-07-03 12:55 - 2011-05-31 03:42 - 01756264 _____ (DTS) C:\Windows\system32\DTSS2SpeakerDLL64.dll 2014-07-03 12:55 - 2011-05-31 03:42 - 01568360 _____ (DTS) C:\Windows\system32\DTSS2HeadphoneDLL64.dll 2014-07-03 12:55 - 2011-05-31 03:42 - 01486952 _____ (DTS) C:\Windows\system32\DTSBoostDLL64.dll 2014-07-03 12:55 - 2011-05-31 03:42 - 00728680 _____ (DTS) C:\Windows\system32\DTSBassEnhancementDLL64.dll 2014-07-03 12:55 - 2011-05-31 03:42 - 00712296 _____ (DTS) C:\Windows\system32\DTSSymmetryDLL64.dll 2014-07-03 12:55 - 2011-05-31 03:42 - 00693352 _____ (DTS) C:\Windows\system32\DTSVoiceClarityDLL64.dll 2014-07-03 12:55 - 2011-05-31 03:42 - 00491112 _____ (DTS) C:\Windows\system32\DTSNeoPCDLL64.dll 2014-07-03 12:55 - 2011-05-31 03:42 - 00432744 _____ (DTS) C:\Windows\system32\DTSLimiterDLL64.dll 2014-07-03 12:55 - 2011-05-31 03:42 - 00428648 _____ (DTS) C:\Windows\system32\DTSGainCompensatorDLL64.dll 2014-07-03 12:55 - 2011-05-31 03:42 - 00242792 _____ (DTS) C:\Windows\system32\DTSLFXAPO64.dll 2014-07-03 12:55 - 2011-05-31 03:42 - 00242792 _____ (DTS) C:\Windows\system32\DTSGFXAPO64.dll 2014-07-03 12:55 - 2011-05-31 03:42 - 00241768 _____ (DTS) C:\Windows\system32\DTSGFXAPONS64.dll 2014-07-03 12:55 - 2011-03-17 06:17 - 01361336 _____ (TOSHIBA Corporation) C:\Windows\system32\tosade.dll 2014-07-03 12:55 - 2011-03-07 11:11 - 00148416 _____ (TOSHIBA Corporation) C:\Windows\system32\tadefxapo.dll 2014-07-03 12:55 - 2010-11-08 01:31 - 00375128 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEP64A.dll 2014-07-03 12:55 - 2010-11-08 01:31 - 00310104 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DHT64.dll 2014-07-03 12:55 - 2010-11-08 01:31 - 00310104 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DAA64.dll 2014-07-03 12:55 - 2010-11-08 01:31 - 00204120 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEED64A.dll 2014-07-03 12:55 - 2010-11-08 01:31 - 00101208 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEL64A.dll 2014-07-03 12:55 - 2010-11-08 01:31 - 00078680 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEG64A.dll 2014-07-03 12:55 - 2010-11-03 12:30 - 00149608 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCfg64.dll 2014-07-03 12:55 - 2010-10-03 07:46 - 00341336 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO30.dll 2014-07-03 12:55 - 2010-09-27 03:34 - 00318808 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO20.dll 2014-07-03 12:55 - 2010-09-23 11:21 - 00039672 _____ () C:\Windows\system32\Drivers\RtPCEE3.DAT 2014-07-03 12:55 - 2010-07-22 10:48 - 00074064 _____ (Virage Logic Corporation / Sonic Focus) C:\Windows\SysWOW64\SFCOM.dll 2014-07-03 12:55 - 2010-03-22 07:21 - 00247560 _____ () C:\Windows\system32\Drivers\RTConvEQ.dat 2014-07-03 12:55 - 2010-03-22 07:21 - 00001448 _____ () C:\Windows\system32\Drivers\RtHdatEx.dat 2014-07-03 12:55 - 2010-02-11 09:45 - 00000176 _____ () C:\Windows\system32\Drivers\RTHDAEQ1.dat 2014-07-03 12:55 - 2010-01-26 15:52 - 00000520 _____ () C:\Windows\system32\Drivers\RTEQEX3.dat 2014-07-03 12:55 - 2009-11-24 03:55 - 00518896 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSX64.dll 2014-07-03 12:55 - 2009-11-24 03:55 - 00211184 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSH64.dll 2014-07-03 12:55 - 2009-11-24 03:55 - 00198896 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSHP64.dll 2014-07-03 12:55 - 2009-11-24 03:55 - 00155888 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSWOW64.dll 2014-07-03 12:55 - 2008-08-21 07:43 - 00000520 _____ () C:\Windows\system32\Drivers\RTEQEX2.dat 2014-07-03 12:55 - 2005-06-26 23:29 - 00000520 _____ () C:\Windows\system32\Drivers\RTEQEX1.dat 2014-07-03 12:53 - 2014-07-03 12:53 - 00284240 _____ (Dritek System Inc.) C:\Windows\UnInstRfBtn.EXE 2014-07-03 12:53 - 2014-07-03 12:53 - 00096880 _____ (Dritek System INC.) C:\Windows\RfBtnSvc64.exe 2014-07-03 12:53 - 2014-07-03 12:53 - 00026736 _____ (Dritek System Inc.) C:\Windows\system32\Drivers\aPs2Kb2Hid.sys 2014-07-03 12:53 - 2014-07-03 12:53 - 00000186 _____ () C:\Windows\UnInstRfBtn.UNI 2014-07-03 12:53 - 2014-07-03 12:53 - 00000000 ____D () C:\Program Files (x86)\RadioController 2014-07-03 12:52 - 2014-07-03 12:52 - 00000000 ____D () C:\Program Files\Intel 2014-07-03 12:52 - 2012-06-22 02:13 - 00015168 _____ (Intel Corporation) C:\Windows\system32\Drivers\IntelMEFWVer.dll 2014-07-03 12:51 - 2014-07-03 12:51 - 00000184 _____ () C:\Windows\LMv7.UNI 2014-07-03 12:50 - 2014-07-03 12:51 - 00000000 ____D () C:\Program Files (x86)\Launch Manager 2014-07-03 12:49 - 2014-07-03 12:49 - 00000000 ____D () C:\Windows\Downloaded Installations 2014-07-03 12:47 - 2012-07-04 04:55 - 00053248 _____ (Windows XP Bundled build C-Centric Single User) C:\Windows\SysWOW64\CSVer.dll 2014-07-03 12:46 - 2014-07-03 13:04 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information 2014-07-03 12:46 - 2012-08-16 13:33 - 00645952 _____ (Intel Corporation) C:\Windows\system32\Drivers\iaStorA.sys 2014-07-03 12:44 - 2012-11-10 06:23 - 00148480 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe 2014-07-03 12:44 - 2012-11-10 06:23 - 00132608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\poqexec.exe 2014-07-03 12:44 - 2012-11-10 06:22 - 00126976 _____ (Microsoft Corporation) C:\Windows\system32\RDWebAI.dll 2014-07-03 12:44 - 2012-11-10 06:22 - 00122880 _____ (Microsoft Corporation) C:\Windows\system32\VmHostAI.dll 2014-07-03 12:44 - 2012-11-10 06:20 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\appserverai.dll 2014-07-03 12:41 - 2014-07-11 23:14 - 01654150 _____ () C:\Windows\WindowsUpdate.log 2014-07-03 12:37 - 2014-07-03 12:37 - 00015820 _____ () C:\Windows\system32\results.xml 2014-07-03 12:35 - 2014-07-03 12:52 - 00000000 ____D () C:\ProgramData\Intel 2014-07-03 12:35 - 2014-07-03 12:35 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel 2014-07-03 12:34 - 2014-07-03 12:52 - 00000000 ____D () C:\Program Files (x86)\Intel 2014-07-03 12:34 - 2014-07-03 12:34 - 00000000 ___HD () C:\Intel 2014-07-03 12:34 - 2012-10-23 20:37 - 00056832 _____ (Khronos Group) C:\Windows\system32\OpenCL.DLL 2014-07-03 12:34 - 2012-10-23 20:37 - 00056320 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.DLL 2014-06-23 11:42 - 2014-06-23 11:42 - 00046136 ____H (LogMeIn Inc.) C:\Windows\system32\Drivers\Hamdrv.sys ==================== One Month Modified Files and Folders ======= 2014-07-11 23:45 - 2014-07-11 23:38 - 00017453 _____ () C:\Users\Jasmin\Downloads\FRST.txt 2014-07-11 23:45 - 2014-07-11 23:37 - 00000000 ____D () C:\FRST 2014-07-11 23:45 - 2014-07-09 16:13 - 00043520 ___SH () C:\Users\Jasmin\Downloads\Thumbs.db 2014-07-11 23:41 - 2014-07-10 19:46 - 00000000 ____D () C:\Users\Jasmin\Desktop\Programme 2014-07-11 23:39 - 2014-07-11 23:39 - 00020874 _____ () C:\Users\Jasmin\Downloads\Addition.txt 2014-07-11 23:37 - 2014-07-11 23:36 - 02084864 _____ (Farbar) C:\Users\Jasmin\Downloads\FRST64.exe 2014-07-11 23:36 - 2014-07-11 23:35 - 01075200 _____ (Farbar) C:\Users\Jasmin\Downloads\FRST.exe 2014-07-11 23:32 - 2014-07-10 20:23 - 00000000 ____D () C:\Users\Jasmin\Desktop\Rinmaru 2014-07-11 23:22 - 2014-07-09 14:12 - 00001128 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2014-07-11 23:14 - 2014-07-03 12:41 - 01654150 _____ () C:\Windows\WindowsUpdate.log 2014-07-11 23:13 - 2014-07-10 22:13 - 00000314 _____ () C:\Windows\Tasks\Rocket Updater.job 2014-07-11 23:13 - 2014-07-09 14:07 - 00000000 ____D () C:\Users\Jasmin\AppData\Roaming\.minecraft 2014-07-11 23:06 - 2014-07-09 15:09 - 00000000 ____D () C:\Users\Jasmin\AppData\Roaming\TS3Client 2014-07-11 23:06 - 2014-07-09 13:21 - 00000000 ____D () C:\Users\Jasmin\AppData\Local\CrashDumps 2014-07-11 23:06 - 2014-05-26 14:23 - 00000000 ____D () C:\Windows\Panther 2014-07-11 23:05 - 2014-07-10 13:14 - 00000000 ____D () C:\Users\Jasmin\AppData\Local\LogMeIn Hamachi 2014-07-11 23:04 - 2014-07-11 23:04 - 00002774 _____ () C:\Windows\System32\Tasks\CCleanerSkipUAC 2014-07-11 23:04 - 2014-07-11 23:04 - 00000794 _____ () C:\Users\Public\Desktop\CCleaner.lnk 2014-07-11 23:04 - 2014-07-11 23:04 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner 2014-07-11 23:04 - 2014-07-11 23:04 - 00000000 ____D () C:\Program Files\CCleaner 2014-07-11 23:00 - 2012-07-26 10:12 - 00000000 ____D () C:\Windows\system32\sru 2014-07-11 22:59 - 2014-07-11 14:47 - 00001175 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk 2014-07-11 22:59 - 2014-07-11 14:47 - 00001163 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk 2014-07-11 22:59 - 2014-07-11 14:47 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service 2014-07-11 22:58 - 2014-07-09 13:36 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox 2014-07-11 22:56 - 2014-07-11 22:55 - 04812672 _____ (Piriform Ltd) C:\Users\Jasmin\Downloads\ccsetup415.exe 2014-07-11 22:56 - 2014-07-11 22:53 - 20564496 _____ (Mozilla) C:\Users\Jasmin\Downloads\Firefox Setup 19.0.exe 2014-07-11 22:47 - 2014-07-09 20:57 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job 2014-07-11 22:46 - 2014-07-09 23:39 - 00000000 ____D () C:\Users\Jasmin\AppData\Local\Overwolf 2014-07-11 22:45 - 2014-07-09 14:12 - 00001124 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2014-07-11 22:44 - 2014-07-11 22:43 - 00307760 _____ () C:\Windows\system32\FNTCACHE.DAT 2014-07-11 22:44 - 2012-07-26 09:22 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2014-07-11 22:43 - 2012-07-26 07:26 - 00262144 ___SH () C:\Windows\system32\config\BBI 2014-07-11 22:30 - 2014-07-11 22:30 - 00000000 ____D () C:\Users\Jasmin\Downloads\backups 2014-07-11 22:28 - 2014-07-11 22:12 - 00008781 _____ () C:\Users\Jasmin\Downloads\hijackthis.log 2014-07-11 22:08 - 2014-07-09 13:15 - 00000000 ____D () C:\Users\Jasmin\AppData\Local\VirtualStore 2014-07-11 22:05 - 2014-07-11 22:05 - 00388608 _____ (Trend Micro Inc.) C:\Users\Jasmin\Downloads\HiJackThis204.exe 2014-07-11 21:57 - 2012-07-26 09:59 - 00000000 ____D () C:\Windows\CbsTemp 2014-07-11 15:29 - 2014-07-09 13:24 - 00003600 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1733027970-2465188296-4133737029-1001 2014-07-11 15:05 - 2014-07-09 18:38 - 00000000 ____D () C:\Users\Jasmin\Desktop\Jasi 2014-07-11 14:48 - 2014-07-11 14:47 - 00000000 ____D () C:\Users\Jasmin\AppData\Roaming\Mozilla 2014-07-10 23:33 - 2014-07-03 22:24 - 00753134 _____ () C:\Windows\system32\perfh007.dat 2014-07-10 23:33 - 2014-07-03 22:24 - 00155826 _____ () C:\Windows\system32\perfc007.dat 2014-07-10 23:33 - 2012-07-26 09:28 - 01745416 _____ () C:\Windows\system32\PerfStringBackup.INI 2014-07-10 23:06 - 2014-07-10 23:02 - 00000000 ___RD () C:\Windows\BrowserChoice 2014-07-10 23:06 - 2014-07-09 13:14 - 00000000 ____D () C:\Users\Jasmin\AppData\Local\Packages 2014-07-10 23:06 - 2014-05-26 13:31 - 00000000 ____D () C:\ProgramData\PRICache 2014-07-10 23:02 - 2014-07-10 23:02 - 00000000 ___SD () C:\Windows\system32\CompatTel 2014-07-10 23:02 - 2012-07-26 10:12 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools 2014-07-10 23:02 - 2012-07-26 10:12 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools 2014-07-10 23:02 - 2012-07-26 10:12 - 00000000 ____D () C:\Windows\WinStore 2014-07-10 23:02 - 2012-07-26 10:12 - 00000000 ____D () C:\Windows\PolicyDefinitions 2014-07-10 23:02 - 2012-07-26 10:12 - 00000000 ____D () C:\Program Files\Windows Defender 2014-07-10 23:02 - 2012-07-26 10:12 - 00000000 ____D () C:\Program Files\Common Files\microsoft shared 2014-07-10 23:02 - 2012-07-26 10:12 - 00000000 ____D () C:\Program Files (x86)\Windows Defender 2014-07-10 23:01 - 2012-07-26 07:38 - 00000000 ____D () C:\Windows\system32\oobe 2014-07-10 23:00 - 2012-07-26 10:12 - 00000000 ___RD () C:\Windows\ToastData 2014-07-10 22:53 - 2014-07-10 22:51 - 00000000 ____D () C:\Windows\system32\MRT 2014-07-10 22:51 - 2012-07-26 07:26 - 00262144 ___SH () C:\Windows\system32\config\ELAM 2014-07-10 22:37 - 2012-07-26 10:12 - 00000000 ____D () C:\Windows\AUInstallAgent 2014-07-10 22:27 - 2014-07-10 22:27 - 00000000 ___SD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenOffice 4.0.1 2014-07-10 22:27 - 2014-07-10 22:27 - 00000000 ____D () C:\Users\Jasmin\AppData\Roaming\1H1Q 2014-07-10 22:26 - 2014-07-10 22:26 - 00000000 ____D () C:\Program Files (x86)\OpenOffice 4 2014-07-10 22:21 - 2014-07-10 22:13 - 00000000 ____D () C:\Users\Jasmin\AppData\Roaming\Systweak 2014-07-10 22:15 - 2014-07-10 22:13 - 00000000 ____D () C:\Program Files (x86)\RegClean Pro 2014-07-10 22:13 - 2014-07-10 22:13 - 00002652 _____ () C:\Windows\System32\Tasks\Rocket Updater 2014-07-10 22:13 - 2014-07-10 22:13 - 00000000 ____D () C:\Users\Jasmin\AppData\Roaming\RocketUpdater 2014-07-10 22:12 - 2014-07-10 22:12 - 00802760 _____ ( ) C:\Users\Jasmin\Downloads\Open OfficeSetup.exe 2014-07-10 20:51 - 2012-07-26 10:12 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility 2014-07-10 20:51 - 2012-07-26 10:12 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility 2014-07-10 20:51 - 2012-07-26 10:12 - 00000000 ____D () C:\Windows\system32\SecureBootUpdates 2014-07-10 20:51 - 2012-07-26 09:52 - 00000000 ____D () C:\Program Files\Windows Journal 2014-07-10 19:49 - 2014-07-10 19:21 - 00000000 ____D () C:\Program Files\paint.net 2014-07-10 19:43 - 2014-07-10 19:20 - 00000000 ____D () C:\Users\Jasmin\AppData\Local\paint.net 2014-07-10 13:14 - 2014-07-10 13:14 - 00000000 ____D () C:\Users\Jasmin\AppData\Local\LogMeIn 2014-07-10 13:14 - 2014-07-10 13:14 - 00000000 ____D () C:\ProgramData\LogMeIn 2014-07-10 12:50 - 2014-07-09 17:24 - 00000000 ____D () C:\ProgramData\systemk 2014-07-09 23:42 - 2014-07-09 23:42 - 00003728 _____ () C:\Windows\System32\Tasks\Overwolf Updater Task 2014-07-09 23:42 - 2014-07-09 23:42 - 00000000 ____D () C:\Users\Jasmin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Overwolf 2014-07-09 23:42 - 2014-07-09 23:42 - 00000000 ____D () C:\ProgramData\Overwolf 2014-07-09 23:42 - 2014-07-09 23:42 - 00000000 ____D () C:\Program Files (x86)\Overwolf 2014-07-09 23:39 - 2014-07-09 23:38 - 01248032 _____ (Overwolf) C:\Users\Jasmin\Downloads\OverwolfInstaller.exe 2014-07-09 21:18 - 2014-07-09 21:18 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi 2014-07-09 21:18 - 2014-07-09 21:18 - 00000000 ____D () C:\Program Files (x86)\LogMeIn Hamachi 2014-07-09 21:02 - 2014-07-09 20:57 - 00003772 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater 2014-07-09 21:00 - 2014-07-09 21:00 - 00000000 ____D () C:\Users\Jasmin\AppData\Local\Macromedia 2014-07-09 20:57 - 2014-07-09 20:57 - 00000000 ____D () C:\ProgramData\McAfee 2014-07-09 18:34 - 2014-07-09 13:14 - 00000000 ____D () C:\Users\Jasmin 2014-07-09 17:28 - 2014-07-09 17:28 - 00000000 ____D () C:\Users\Jasmin\AppData\Roaming\Macromedia 2014-07-09 17:27 - 2014-07-09 17:27 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft 2014-07-09 17:27 - 2014-07-09 17:24 - 00000000 ____D () C:\Program Files (x86)\DVDVideoSoft 2014-07-09 17:27 - 2014-07-09 16:16 - 00000000 ____D () C:\Users\Jasmin\AppData\Roaming\DVDVideoSoft 2014-07-09 17:25 - 2014-07-09 17:25 - 00000000 ____D () C:\Users\Jasmin\AppData\Roaming\Settings Manager 2014-07-09 17:24 - 2014-07-09 17:24 - 00000000 ____D () C:\Users\Jasmin\AppData\Roaming\OpenCandy 2014-07-09 17:24 - 2014-07-09 17:24 - 00000000 ____D () C:\Program Files (x86)\Settings Manager 2014-07-09 15:17 - 2014-07-09 14:12 - 00004100 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA 2014-07-09 15:17 - 2014-07-09 14:12 - 00003864 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore 2014-07-09 14:47 - 2014-07-09 14:47 - 00001613 _____ () C:\Users\Public\Desktop\Play League of Legends.lnk 2014-07-09 14:47 - 2014-07-09 14:47 - 00000000 __SHD () C:\Windows\SysWOW64\AI_RecycleBin 2014-07-09 14:47 - 2014-07-09 14:47 - 00000000 ____D () C:\Riot Games 2014-07-09 14:47 - 2014-07-09 14:47 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\League of Legends 2014-07-09 14:46 - 2014-07-09 14:46 - 00000000 ____D () C:\Program Files (x86)\Pando Networks 2014-07-09 14:45 - 2014-07-09 14:45 - 00000000 ____D () C:\Users\Jasmin\AppData\Roaming\Riot Games 2014-07-09 14:42 - 2014-07-09 14:42 - 00001178 _____ () C:\Users\Public\Desktop\TeamSpeak 3 Client.lnk 2014-07-09 14:42 - 2014-07-09 14:42 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamSpeak 3 Client 2014-07-09 14:42 - 2014-07-09 14:42 - 00000000 ____D () C:\Program Files (x86)\TeamSpeak 3 Client 2014-07-09 14:32 - 2014-07-09 14:32 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr 2014-07-09 14:32 - 2014-07-09 14:23 - 00003924 _____ () C:\Windows\System32\Tasks\avast! Emergency Update 2014-07-09 14:32 - 2014-07-09 14:12 - 01041168 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsnx.sys 2014-07-09 14:32 - 2014-07-09 14:12 - 00427360 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsp.sys 2014-07-09 14:32 - 2014-07-09 14:12 - 00307344 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe 2014-07-09 14:32 - 2014-07-09 14:12 - 00224896 _____ () C:\Windows\system32\Drivers\aswVmm.sys 2014-07-09 14:32 - 2014-07-09 14:12 - 00093568 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys 2014-07-09 14:32 - 2014-07-09 14:12 - 00092008 _____ (AVAST Software) C:\Windows\system32\Drivers\aswstm.sys 2014-07-09 14:32 - 2014-07-09 14:12 - 00079184 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys 2014-07-09 14:32 - 2014-07-09 14:12 - 00065776 _____ () C:\Windows\system32\Drivers\aswRvrt.sys 2014-07-09 14:32 - 2014-07-09 14:12 - 00029208 _____ () C:\Windows\system32\Drivers\aswHwid.sys 2014-07-09 14:27 - 2014-07-09 14:10 - 86969248 _____ (DVDVideoSoft Ltd. ) C:\Users\Jasmin\Downloads\FreeStudio.exe 2014-07-09 14:25 - 2014-07-09 14:25 - 00000000 ____D () C:\Users\Jasmin\AppData\Roaming\AVAST Software 2014-07-09 14:25 - 2014-07-09 14:12 - 00000000 ____D () C:\Users\Jasmin\AppData\Local\Google 2014-07-09 14:23 - 2014-07-09 14:23 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome 2014-07-09 14:23 - 2014-07-09 14:23 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast 2014-07-09 14:22 - 2014-07-09 14:12 - 00000000 ____D () C:\Program Files (x86)\Google 2014-07-09 14:12 - 2014-07-09 14:12 - 01039096 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsnx.sys.1404908618500 2014-07-09 14:12 - 2014-07-09 14:12 - 00423240 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsp.sys.1404908618500 2014-07-09 14:12 - 2014-07-09 14:12 - 00085328 _____ (AVAST Software) C:\Windows\system32\Drivers\aswstm.sys.1404908618500 2014-07-09 14:11 - 2014-07-09 14:11 - 00000000 ____D () C:\ProgramData\AVAST Software 2014-07-09 14:11 - 2014-07-09 14:11 - 00000000 ____D () C:\Program Files\AVAST Software 2014-07-09 14:09 - 2014-07-09 14:09 - 01110476 _____ () C:\Users\Jasmin\Downloads\7z920.exe 2014-07-09 14:08 - 2014-07-09 14:08 - 00000000 ____D () C:\ProgramData\APN 2014-07-09 14:07 - 2014-07-09 14:07 - 00000000 ____D () C:\ProgramData\Oracle 2014-07-09 14:07 - 2014-07-09 14:05 - 27336464 _____ (TeamSpeak Systems GmbH) C:\Users\Jasmin\Downloads\TeamSpeak3-Client-win32-3.0.15.exe 2014-07-09 14:06 - 2014-07-09 14:06 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe 2014-07-09 14:06 - 2014-07-09 14:06 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe 2014-07-09 14:06 - 2014-07-09 14:06 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe 2014-07-09 14:06 - 2014-07-09 14:06 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll 2014-07-09 14:06 - 2014-07-09 14:06 - 00000000 ____D () C:\ProgramData\Sun 2014-07-09 14:06 - 2014-07-09 14:06 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java 2014-07-09 14:06 - 2014-07-09 14:06 - 00000000 ____D () C:\Program Files (x86)\Java 2014-07-09 14:02 - 2014-07-09 14:02 - 00918952 _____ (Oracle Corporation) C:\Users\Jasmin\Downloads\jxpiinstall.exe 2014-07-09 13:55 - 2014-07-09 13:52 - 34888568 _____ (Riot Games) C:\Users\Jasmin\Downloads\LeagueofLegends_EUW_Installer_06_12_13.exe 2014-07-09 13:55 - 2014-07-09 13:49 - 94714880 _____ (AVAST Software) C:\Users\Jasmin\Downloads\avast_free_antivirus_setup_21514.exe 2014-07-09 13:51 - 2014-07-09 13:51 - 00675988 _____ () C:\Users\Jasmin\Desktop\Minecraft.exe 2014-07-09 13:40 - 2014-05-26 14:07 - 00000000 ____D () C:\ProgramData\Norton 2014-07-09 13:39 - 2012-07-26 10:12 - 00000000 ___HD () C:\Windows\ELAMBKUP 2014-07-09 13:37 - 2014-07-09 13:36 - 00000000 ____D () C:\Users\Jasmin\AppData\Local\Mozilla 2014-07-09 13:37 - 2014-05-26 14:05 - 00000000 ____D () C:\ProgramData\Nero 2014-07-09 13:36 - 2014-07-09 13:36 - 00000000 ____D () C:\ProgramData\Mozilla 2014-07-09 13:32 - 2014-07-09 13:32 - 00284288 _____ (Mozilla) C:\Users\Jasmin\Downloads\Firefox Setup Stub 30.0.exe 2014-07-09 13:24 - 2014-07-03 13:06 - 00000000 ____D () C:\Users\Public\CyberLink 2014-07-09 13:24 - 2014-07-03 13:06 - 00000000 ____D () C:\ProgramData\CyberLink 2014-07-09 13:21 - 2012-07-26 10:12 - 00000000 ____D () C:\Windows\system32\restore 2014-07-09 13:17 - 2014-07-09 13:17 - 00001454 _____ () C:\Users\Jasmin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2014-07-09 13:17 - 2014-07-09 13:17 - 00000000 ____D () C:\Windows\System32\Tasks\WPD 2014-07-09 13:17 - 2014-07-09 13:17 - 00000000 ____D () C:\Users\Jasmin\AppData\Roaming\Adobe 2014-07-09 13:16 - 2014-07-09 13:16 - 00000000 ____D () C:\Users\Jasmin\AppData\Roaming\lm 2014-07-09 13:14 - 2014-07-09 13:14 - 00000020 ___SH () C:\Users\Jasmin\ntuser.ini 2014-07-09 13:14 - 2014-07-09 13:14 - 00000000 _SHDL () C:\Users\Jasmin\Vorlagen 2014-07-09 13:14 - 2014-07-09 13:14 - 00000000 _SHDL () C:\Users\Jasmin\Startmenü 2014-07-09 13:14 - 2014-07-09 13:14 - 00000000 _SHDL () C:\Users\Jasmin\Netzwerkumgebung 2014-07-09 13:14 - 2014-07-09 13:14 - 00000000 _SHDL () C:\Users\Jasmin\Lokale Einstellungen 2014-07-09 13:14 - 2014-07-09 13:14 - 00000000 _SHDL () C:\Users\Jasmin\Eigene Dateien 2014-07-09 13:14 - 2014-07-09 13:14 - 00000000 _SHDL () C:\Users\Jasmin\Druckumgebung 2014-07-09 13:14 - 2014-07-09 13:14 - 00000000 _SHDL () C:\Users\Jasmin\Documents\Eigene Musik 2014-07-09 13:14 - 2014-07-09 13:14 - 00000000 _SHDL () C:\Users\Jasmin\Documents\Eigene Bilder 2014-07-09 13:14 - 2014-07-09 13:14 - 00000000 _SHDL () C:\Users\Jasmin\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-07-09 13:14 - 2014-07-09 13:14 - 00000000 _SHDL () C:\Users\Jasmin\AppData\Local\Verlauf 2014-07-09 13:14 - 2014-07-09 13:14 - 00000000 _SHDL () C:\Users\Jasmin\AppData\Local\Anwendungsdaten 2014-07-09 13:14 - 2014-07-09 13:14 - 00000000 _SHDL () C:\Users\Jasmin\Anwendungsdaten 2014-07-09 13:14 - 2012-07-26 10:12 - 00000000 ___RD () C:\Windows\ImmersiveControlPanel 2014-07-07 15:32 - 2012-07-26 10:12 - 00000000 ____D () C:\Windows\rescache 2014-07-07 12:20 - 2012-07-26 07:38 - 00000000 ____D () C:\Windows\system32\Sysprep 2014-07-03 23:43 - 2012-07-26 10:13 - 00262144 _____ () C:\Windows\system32\config\BCD-Template 2014-07-03 22:28 - 2012-07-26 10:12 - 00000000 ____D () C:\Windows\SysWOW64\MUI 2014-07-03 22:28 - 2012-07-26 10:12 - 00000000 ____D () C:\Windows\system32\MUI 2014-07-03 22:28 - 2012-07-26 09:49 - 00000000 ____D () C:\Windows\SysWOW64\winrm 2014-07-03 22:28 - 2012-07-26 09:49 - 00000000 ____D () C:\Windows\SysWOW64\WCN 2014-07-03 22:28 - 2012-07-26 09:49 - 00000000 ____D () C:\Windows\SysWOW64\sysprep 2014-07-03 22:28 - 2012-07-26 09:49 - 00000000 ____D () C:\Windows\SysWOW64\slmgr 2014-07-03 22:28 - 2012-07-26 09:49 - 00000000 ____D () C:\Windows\system32\winrm 2014-07-03 22:28 - 2012-07-26 09:49 - 00000000 ____D () C:\Windows\system32\WCN 2014-07-03 22:28 - 2012-07-26 09:49 - 00000000 ____D () C:\Windows\system32\slmgr 2014-07-03 22:28 - 2012-07-26 07:38 - 00000000 ____D () C:\Windows\SysWOW64\oobe 2014-07-03 22:28 - 2012-07-26 07:38 - 00000000 ____D () C:\Windows\system32\Dism 2014-07-03 22:24 - 2014-07-03 22:24 - 00305546 _____ () C:\Windows\system32\perfi007.dat 2014-07-03 22:24 - 2014-07-03 22:24 - 00040390 _____ () C:\Windows\system32\perfd007.dat 2014-07-03 22:24 - 2014-07-03 22:24 - 00000000 ___HD () C:\sources 2014-07-03 22:24 - 2014-07-03 22:24 - 00000000 ____D () C:\Windows\SysWOW64\XPSViewer 2014-07-03 22:24 - 2014-07-03 22:24 - 00000000 ____D () C:\Windows\SysWOW64\de 2014-07-03 22:24 - 2014-07-03 22:24 - 00000000 ____D () C:\Windows\SysWOW64\0407 2014-07-03 22:24 - 2014-07-03 22:24 - 00000000 ____D () C:\Windows\system32\de 2014-07-03 22:24 - 2014-07-03 22:24 - 00000000 ____D () C:\Windows\system32\0407 2014-07-03 22:24 - 2012-07-26 10:18 - 00000000 ____D () C:\Windows\DigitalLocker 2014-07-03 22:24 - 2012-07-26 10:12 - 00000000 ____D () C:\Windows\SysWOW64\setup 2014-07-03 22:24 - 2012-07-26 10:12 - 00000000 ____D () C:\Windows\SysWOW64\migwiz 2014-07-03 22:24 - 2012-07-26 10:12 - 00000000 ____D () C:\Windows\SysWOW64\Com 2014-07-03 22:24 - 2012-07-26 10:12 - 00000000 ____D () C:\Windows\system32\WinBioPlugIns 2014-07-03 22:24 - 2012-07-26 10:12 - 00000000 ____D () C:\Windows\system32\SystemResetPlatform 2014-07-03 22:24 - 2012-07-26 10:12 - 00000000 ____D () C:\Windows\system32\setup 2014-07-03 22:24 - 2012-07-26 10:12 - 00000000 ____D () C:\Windows\system32\migwiz 2014-07-03 22:24 - 2012-07-26 10:12 - 00000000 ____D () C:\Windows\system32\Com 2014-07-03 22:24 - 2012-07-26 10:12 - 00000000 ____D () C:\Windows\IME 2014-07-03 22:24 - 2012-07-26 10:12 - 00000000 ____D () C:\Program Files\Windows Photo Viewer 2014-07-03 22:24 - 2012-07-26 10:12 - 00000000 ____D () C:\Program Files\Common Files\System 2014-07-03 22:24 - 2012-07-26 10:12 - 00000000 ____D () C:\Program Files (x86)\Windows Photo Viewer 2014-07-03 22:24 - 2012-07-26 09:49 - 00000000 ____D () C:\Windows\SysWOW64\Printing_Admin_Scripts 2014-07-03 22:24 - 2012-07-26 09:49 - 00000000 ____D () C:\Windows\system32\Printing_Admin_Scripts 2014-07-03 22:24 - 2012-07-26 07:38 - 00000000 ____D () C:\Windows\SysWOW64\Dism 2014-07-03 22:18 - 2014-07-03 22:18 - 00000000 ____D () C:\Windows\NAPP_Dism_Log 2014-07-03 13:49 - 2014-07-03 13:49 - 00000000 ____D () C:\ProgramData\OEM_YAHOO 2014-07-03 13:49 - 2014-07-03 13:49 - 00000000 ____D () C:\Program Files\Preload 2014-07-03 13:49 - 2014-05-26 14:20 - 00000000 ___HD () C:\OEM 2014-07-03 13:45 - 2014-07-03 13:45 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Musik 2014-07-03 13:45 - 2014-07-03 13:45 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Bilder 2014-07-03 13:45 - 2014-07-03 13:45 - 00000000 _SHDL () C:\Users\Default\Vorlagen 2014-07-03 13:45 - 2014-07-03 13:45 - 00000000 _SHDL () C:\Users\Default\Startmenü 2014-07-03 13:45 - 2014-07-03 13:45 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung 2014-07-03 13:45 - 2014-07-03 13:45 - 00000000 _SHDL () C:\Users\Default\Lokale Einstellungen 2014-07-03 13:45 - 2014-07-03 13:45 - 00000000 _SHDL () C:\Users\Default\Eigene Dateien 2014-07-03 13:45 - 2014-07-03 13:45 - 00000000 _SHDL () C:\Users\Default\Druckumgebung 2014-07-03 13:45 - 2014-07-03 13:45 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik 2014-07-03 13:45 - 2014-07-03 13:45 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder 2014-07-03 13:45 - 2014-07-03 13:45 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-07-03 13:45 - 2014-07-03 13:45 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf 2014-07-03 13:45 - 2014-07-03 13:45 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Anwendungsdaten 2014-07-03 13:45 - 2014-07-03 13:45 - 00000000 _SHDL () C:\Users\Default\Anwendungsdaten 2014-07-03 13:45 - 2014-07-03 13:45 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik 2014-07-03 13:45 - 2014-07-03 13:45 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder 2014-07-03 13:45 - 2014-07-03 13:45 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-07-03 13:45 - 2014-07-03 13:45 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf 2014-07-03 13:45 - 2014-07-03 13:45 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Anwendungsdaten 2014-07-03 13:45 - 2014-07-03 13:45 - 00000000 _SHDL () C:\Programme 2014-07-03 13:45 - 2014-07-03 13:45 - 00000000 _SHDL () C:\ProgramData\Vorlagen 2014-07-03 13:45 - 2014-07-03 13:45 - 00000000 _SHDL () C:\ProgramData\Startmenü 2014-07-03 13:45 - 2014-07-03 13:45 - 00000000 _SHDL () C:\ProgramData\Microsoft\Windows\Start Menu\Programme 2014-07-03 13:45 - 2014-07-03 13:45 - 00000000 _SHDL () C:\ProgramData\Dokumente 2014-07-03 13:45 - 2014-07-03 13:45 - 00000000 _SHDL () C:\ProgramData\Anwendungsdaten 2014-07-03 13:45 - 2014-07-03 13:45 - 00000000 _SHDL () C:\Program Files\Gemeinsame Dateien 2014-07-03 13:45 - 2014-07-03 13:45 - 00000000 _SHDL () C:\Dokumente und Einstellungen 2014-07-03 13:45 - 2012-07-26 07:37 - 00000000 __RHD () C:\Users\Default 2014-07-03 13:23 - 2012-07-26 10:12 - 00000000 ____D () C:\Windows\system32\Recovery 2014-07-03 13:19 - 2014-07-03 13:19 - 00003596 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1733027970-2465188296-4133737029-500 2014-07-03 13:12 - 2014-05-26 14:04 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Packard Bell 2014-07-03 13:11 - 2014-07-03 13:11 - 00002946 _____ () C:\Windows\System32\Tasks\Power Management 2014-07-03 13:11 - 2014-07-03 13:11 - 00000000 ____D () C:\ProgramData\OEM 2014-07-03 13:11 - 2014-05-26 14:04 - 00000000 ____D () C:\Program Files\Packard Bell 2014-07-03 13:10 - 2014-07-03 13:10 - 00000000 ____D () C:\ProgramData\Symantec 2014-07-03 13:10 - 2014-07-03 13:10 - 00000000 ____D () C:\ProgramData\boost_interprocess 2014-07-03 13:09 - 2014-07-03 13:09 - 00000000 ____D () C:\Program Files (x86)\Microsoft Office 2014-07-03 13:06 - 2014-07-03 13:06 - 00000000 ____D () C:\ProgramData\CLSK 2014-07-03 13:05 - 2014-07-03 13:04 - 00000000 ____D () C:\ProgramData\Temp 2014-07-03 13:04 - 2014-07-03 13:04 - 00000000 ____D () C:\ProgramData\install_clap 2014-07-03 13:04 - 2014-07-03 12:46 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information 2014-07-03 13:02 - 2014-07-03 13:02 - 00000040 _____ () C:\Windows\spotify.preload 2014-07-03 12:58 - 2014-07-03 12:58 - 04398192 _____ (Broadcom Corporation) C:\Windows\system32\bcmihvsrv64.dll 2014-07-03 12:58 - 2014-07-03 12:58 - 03664736 _____ (Broadcom Corporation) C:\Windows\system32\bcmihvui64.dll 2014-07-03 12:56 - 2014-07-03 12:56 - 00000000 ____D () C:\Windows\SysWOW64\RTCOM 2014-07-03 12:56 - 2014-07-03 12:55 - 00000000 ___HD () C:\Program Files (x86)\Temp 2014-07-03 12:55 - 2014-07-03 12:55 - 00000000 ____D () C:\Program Files\Realtek 2014-07-03 12:55 - 2014-07-03 12:55 - 00000000 ____D () C:\Program Files (x86)\Realtek 2014-07-03 12:53 - 2014-07-03 12:53 - 00284240 _____ (Dritek System Inc.) C:\Windows\UnInstRfBtn.EXE 2014-07-03 12:53 - 2014-07-03 12:53 - 00096880 _____ (Dritek System INC.) C:\Windows\RfBtnSvc64.exe 2014-07-03 12:53 - 2014-07-03 12:53 - 00026736 _____ (Dritek System Inc.) C:\Windows\system32\Drivers\aPs2Kb2Hid.sys 2014-07-03 12:53 - 2014-07-03 12:53 - 00000186 _____ () C:\Windows\UnInstRfBtn.UNI 2014-07-03 12:53 - 2014-07-03 12:53 - 00000000 ____D () C:\Program Files (x86)\RadioController 2014-07-03 12:52 - 2014-07-03 12:52 - 00000000 ____D () C:\Program Files\Intel 2014-07-03 12:52 - 2014-07-03 12:35 - 00000000 ____D () C:\ProgramData\Intel 2014-07-03 12:52 - 2014-07-03 12:34 - 00000000 ____D () C:\Program Files (x86)\Intel 2014-07-03 12:51 - 2014-07-03 12:51 - 00000184 _____ () C:\Windows\LMv7.UNI 2014-07-03 12:51 - 2014-07-03 12:50 - 00000000 ____D () C:\Program Files (x86)\Launch Manager 2014-07-03 12:49 - 2014-07-03 12:49 - 00000000 ____D () C:\Windows\Downloaded Installations 2014-07-03 12:44 - 2012-07-26 07:37 - 00000000 ____D () C:\Windows\servicing 2014-07-03 12:42 - 2014-07-09 13:14 - 00000000 ___RD () C:\Users\Jasmin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools 2014-07-03 12:37 - 2014-07-03 12:37 - 00015820 _____ () C:\Windows\system32\results.xml 2014-07-03 12:35 - 2014-07-03 12:35 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel 2014-07-03 12:34 - 2014-07-03 12:34 - 00000000 ___HD () C:\Intel 2014-07-01 00:42 - 2014-07-09 14:37 - 00702464 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll 2014-07-01 00:42 - 2014-07-09 14:37 - 00394240 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll 2014-07-01 00:42 - 2014-07-09 14:37 - 00087552 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll 2014-06-30 17:55 - 2014-07-10 22:13 - 00020328 _____ (Systweak Inc., (www.systweak.com)) C:\Windows\system32\roboot64.exe 2014-06-28 05:35 - 2014-07-09 14:37 - 00556544 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll 2014-06-26 22:53 - 2014-07-10 21:47 - 00703968 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2014-06-26 22:53 - 2014-07-10 21:47 - 00105440 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2014-06-26 17:40 - 2014-07-10 22:51 - 96441528 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2014-06-23 11:42 - 2014-06-23 11:42 - 00046136 ____H (LogMeIn Inc.) C:\Windows\system32\Drivers\Hamdrv.sys 2014-06-19 04:12 - 2014-07-09 15:20 - 02239488 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2014-06-19 04:12 - 2014-07-09 15:20 - 01366528 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2014-06-19 04:12 - 2014-07-09 15:20 - 00915968 _____ (Microsoft Corporation) C:\Windows\system32\uxtheme.dll 2014-06-19 04:12 - 2014-07-09 15:20 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\UXInit.dll 2014-06-19 04:12 - 2014-07-09 15:20 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2014-06-19 04:11 - 2014-07-09 15:20 - 19277312 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-06-19 04:11 - 2014-07-09 15:20 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2014-06-19 04:11 - 2014-07-09 15:20 - 00097792 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2014-06-19 04:10 - 2014-07-09 15:20 - 15369728 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2014-06-19 04:10 - 2014-07-09 15:20 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2014-06-19 04:10 - 2014-07-09 15:20 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2014-06-19 04:10 - 2014-07-09 15:20 - 00452096 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2014-06-19 04:10 - 2014-07-09 15:20 - 00281600 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2014-06-19 04:10 - 2014-07-09 15:20 - 00255488 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2014-06-19 04:10 - 2014-07-09 15:20 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2014-06-19 04:10 - 2014-07-09 15:20 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2014-06-19 04:10 - 2014-07-09 15:20 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2014-06-19 04:10 - 2014-07-09 15:20 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2014-06-19 04:10 - 2014-07-09 15:19 - 03959296 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2014-06-19 04:10 - 2014-07-09 15:19 - 02650624 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2014-06-19 04:09 - 2014-07-09 15:20 - 01508864 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2014-06-19 02:53 - 2014-07-09 15:20 - 01766400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2014-06-19 02:53 - 2014-07-09 15:20 - 01141760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2014-06-19 02:53 - 2014-07-09 15:20 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2014-06-19 02:53 - 2014-07-09 15:20 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2014-06-19 02:53 - 2014-07-09 15:20 - 00044032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UXInit.dll 2014-06-19 02:53 - 2014-07-09 15:19 - 14368768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2014-06-19 02:53 - 2014-07-09 15:19 - 00080896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2014-06-19 02:52 - 2014-07-09 15:20 - 13732352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2014-06-19 02:52 - 2014-07-09 15:20 - 01440768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2014-06-19 02:52 - 2014-07-09 15:20 - 00357888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2014-06-19 02:52 - 2014-07-09 15:20 - 00226816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2014-06-19 02:52 - 2014-07-09 15:20 - 00226816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2014-06-19 02:52 - 2014-07-09 15:20 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2014-06-19 02:52 - 2014-07-09 15:20 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2014-06-19 02:52 - 2014-07-09 15:20 - 00039936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2014-06-19 02:52 - 2014-07-09 15:20 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2014-06-19 02:52 - 2014-07-09 15:19 - 02863616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2014-06-19 02:52 - 2014-07-09 15:19 - 02051072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2014-06-19 02:52 - 2014-07-09 15:19 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2014-06-19 02:33 - 2014-07-09 15:20 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-06-19 02:30 - 2014-07-09 15:20 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2014-06-19 00:05 - 2014-07-09 15:20 - 00534528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\uxtheme.dll 2014-06-18 01:27 - 2014-07-09 14:34 - 01440256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\osk.exe 2014-06-18 01:24 - 2014-07-09 14:34 - 01557504 _____ (Microsoft Corporation) C:\Windows\system32\osk.exe 2014-06-11 06:18 - 2014-07-09 14:34 - 04038144 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => File is digitally signed C:\Windows\System32\wininit.exe => File is digitally signed C:\Windows\explorer.exe => File is digitally signed C:\Windows\SysWOW64\explorer.exe => File is digitally signed C:\Windows\System32\svchost.exe => File is digitally signed C:\Windows\SysWOW64\svchost.exe => File is digitally signed C:\Windows\System32\services.exe => File is digitally signed C:\Windows\System32\User32.dll => File is digitally signed C:\Windows\SysWOW64\User32.dll => File is digitally signed C:\Windows\System32\userinit.exe => File is digitally signed C:\Windows\SysWOW64\userinit.exe => File is digitally signed C:\Windows\System32\rpcss.dll => File is digitally signed C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2014-05-26 13:24 ==================== End Of Log ============================ --- --- --- Die Addition bekomm ich leider nicht mehr Aber ich kann dir Sagen was ich alles versucht habe um dieses Default-Search.net weg zubekommen! |
11.07.2014, 22:58 | #4 |
/// TB-Ausbilder /// Anleitungs-Guru | HijackThis Log Die Addition wird benötigt. Scan wiederholen bitte: Schritt 1 Bitte starte FRST erneut, markiere auch die checkbox und drücke auf Scan. Bitte poste mir den Inhalt der beiden Logs die erstellt werden.
__________________ Gruß deeprybka Lob, Kritik, Wünsche? Spende fürs trojaner-board? _______________________________________________ „Neminem laede, immo omnes, quantum potes, iuva.“ Arthur Schopenhauer |
11.07.2014, 23:11 | #5 |
| HijackThis Log Okay hier ist endlich der Addition Log!FRST Additions Logfile: Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 11-07-2014 Ran by Jasmin at 2014-07-11 23:39:05 Running from C:\Users\Jasmin\Downloads Boot Mode: Normal ========================================================== ==================== Security Center ======================== AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736} ==================== Installed Programs ====================== Adobe Flash Player 14 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 14.0.0.145 - Adobe Systems Incorporated) avast! Free Antivirus (HKLM-x32\...\Avast) (Version: 9.0.2021 - AVAST Software) Bejeweled 3 (x32 Version: 2.2.0.98 - WildTangent) Hidden CCleaner (HKLM\...\CCleaner) (Version: 4.15 - Piriform) Delicious: Emily's Childhood Memories Premium Edition (x32 Version: 3.0.2.32 - WildTangent) Hidden Dritek Radio Controller (HKLM-x32\...\RadioController) (Version: 2.02.2001.0803 - Dritek System Inc.) Google Chrome (HKLM-x32\...\Google Chrome) (Version: 35.0.1916.153 - Google Inc.) Google Update Helper (x32 Version: 1.3.24.15 - Google Inc.) Hidden Governor of Poker 2 Premium Edition (x32 Version: 2.2.0.110 - WildTangent) Hidden Identity Card (HKLM-x32\...\{3D9CB654-99AD-4301-89C6-0D12A790767C}) (Version: 2.00.3005 - Packard Bell) Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.1.0.1252 - Intel Corporation) Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 9.17.10.2867 - Intel Corporation) Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 11.5.4.1001 - Intel Corporation) Intel(R) SDK for OpenCL - CPU Only Runtime Package (HKLM-x32\...\{FCB3772C-B7D0-4933-B1A9-3707EBACC573}) (Version: 2.0.0.37149 - Intel Corporation) Intel® Trusted Connect Service Client (Version: 1.24.388.1 - Intel Corporation) Hidden Java 7 Update 60 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F03217060FF}) (Version: 7.0.600 - Oracle) Java Auto Updater (x32 Version: 2.1.60.19 - Oracle, Inc.) Hidden Jewel Match 3 (x32 Version: 2.2.0.98 - WildTangent) Hidden John Deere Drive Green (x32 Version: 2.2.0.95 - WildTangent) Hidden Launch Manager (HKLM-x32\...\LManager) (Version: 7.0.10 - Packard Bell) League of Legends (HKLM-x32\...\League of Legends 3.0.1) (Version: 3.0.1 - Riot Games ) League of Legends (x32 Version: 3.0.1 - Riot Games ) Hidden Live Updater (HKLM-x32\...\{EE26E302-876A-48D9-9058-3129E5B99999}) (Version: 2.00.3008 - Packard Bell) LogMeIn Hamachi (HKLM-x32\...\LogMeIn Hamachi) (Version: 2.2.0.214 - LogMeIn, Inc.) LogMeIn Hamachi (x32 Version: 2.2.0.214 - LogMeIn, Inc.) Hidden Magic Academy (x32 Version: 2.2.0.98 - WildTangent) Hidden Microsoft Office (HKLM-x32\...\{90150000-0138-0409-0000-0000000FF1CE}) (Version: 15.0.4454.1510 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Mozilla Firefox 19.0 (x86 en-US) (HKLM-x32\...\Mozilla Firefox 19.0 (x86 en-US)) (Version: 19.0 - Mozilla) Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 19.0 - Mozilla) Open Office Packages (HKCU\...\Open Office Packages) (Version: - ) <==== ATTENTION OpenOffice 4.0.1 (HKLM-x32\...\{47F460DA-D1BE-4D85-8DF2-AA1F31D3445F}) (Version: 4.01.9714 - Apache Software Foundation) Overwolf (HKLM-x32\...\Overwolf) (Version: 0.76.1.0 - Overwolf Ltd.) Packard Bell Device Fast-lane (HKLM\...\{3F62D2FD-13C1-49A2-8B5D-47623D9460D7}) (Version: 1.00.3011 - Packard Bell) Packard Bell Power Management (HKLM\...\{91F52DE4-B789-42B0-9311-A349F10E5479}) (Version: 7.00.3013 - Packard Bell) Packard Bell Recovery Management (HKLM\...\{07F2005A-8CAC-4A4B-83A2-DA98A722CA61}) (Version: 6.00.3016 - Packard Bell) Plants vs. Zombies - Game of the Year (x32 Version: 2.2.0.98 - WildTangent) Hidden Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6657 - Realtek Semiconductor Corp.) Tales of Lagoona (x32 Version: 2.2.0.110 - WildTangent) Hidden TeamSpeak 3 Client (HKLM-x32\...\TeamSpeak 3 Client) (Version: 3.0.15 - TeamSpeak Systems GmbH) Update Installer for WildTangent Games App (x32 Version: - WildTangent) Hidden WildTangent Games (HKLM-x32\...\WildTangent wildgames Master Uninstall) (Version: 1.0.4.0 - WildTangent) WildTangent Games App (x32 Version: 4.0.10.5 - WildTangent) Hidden ==================== Restore Points ========================= 09-07-2014 11:21:50 Removed Broadcom Card Reader Driver Installer. 10-07-2014 17:20:29 paint.net v4.0 ==================== Hosts content: ========================== 2012-07-26 07:26 - 2012-07-26 07:26 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts ==================== Scheduled Tasks (whitelisted) ============= Task: {04ADB57C-A3E0-4871-A896-B7E93C1A9542} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-07-09] (Adobe Systems Incorporated) Task: {177504E2-EC18-4692-889E-A66C10F7FE35} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2014-07-09] (AVAST Software) Task: {1AAFF332-5C62-4558-9991-DAA649C4C9C5} - System32\Tasks\Microsoft\Windows\Sysmain\WsSwapAssessmentTask => Rundll32.exe sysmain.dll,PfSvWsSwapAssessmentTask Task: {23A5D8BE-9196-40EB-BD89-794398B2B073} - System32\Tasks\Microsoft\Windows\WS\WSRefreshBannedAppsListTask => Rundll32.exe WSClient.dll,RefreshBannedAppsList Task: {3CAF37E8-EB39-46EF-AA5C-AA014A138F05} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-07-09] (Google Inc.) Task: {432152DC-D82C-44E1-9679-2764DE868EBE} - System32\Tasks\Microsoft\Windows\Setup\Pre-staged GDR Notification => C:\Windows\system32\NotificationUI.exe [2014-04-19] (Microsoft Corporation) Task: {454D9883-3C96-4010-AD21-B0600C10AC6C} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-06-24] (Piriform Ltd) Task: {46F484F6-42B2-473D-A870-653CD479565A} - System32\Tasks\Overwolf Updater Task => C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe [2014-06-10] (Overwolf LTD) Task: {504FFFF4-D742-410D-B121-13FF661D482B} - System32\Tasks\Rocket Updater => C:\Users\Jasmin\AppData\Roaming\RocketUpdater\UpdateProc\UpdateTask.exe [2013-04-12] () Task: {5FB2B40B-10BB-4048-AF85-331F231449F9} - System32\Tasks\ALU => C:\Program Files (x86)\Packard Bell\Live Updater\updater.exe [2013-02-22] () Task: {680BAAD9-2749-495D-8137-D27A20A457EA} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-07-09] (Google Inc.) Task: {6B157698-2113-4DE7-B291-E6574C95961F} - System32\Tasks\Power Management => C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerTray.exe [2013-03-15] (Acer Incorporated) Task: {7DC986C1-F05B-4D1D-BCC6-7CF85B520D0B} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\Windows\system32\MRT.exe [2014-06-26] (Microsoft Corporation) Task: {8D6BDB9F-9F66-44AC-98CC-61A87BE71534} - System32\Tasks\ALUAgent => C:\Program Files (x86)\Packard Bell\Live Updater\liveupdater_agent.exe [2013-01-22] () Task: {A72208BF-7A49-4FB8-B684-252375F3443A} - System32\Tasks\Microsoft\Windows\WS\License Validation => Rundll32.exe WSClient.dll,WSpTLR licensing Task: {C6A88F2D-53D2-4805-9D69-443738A1847C} - System32\Tasks\Microsoft\Windows\ApplicationData\CleanupTemporaryState => Rundll32.exe Windows.Storage.ApplicationData.dll,CleanupTemporaryState Task: {EBF06DEC-4228-4813-AC0C-62821AE4E330} - System32\Tasks\Microsoft\Windows\Application Experience\StartupAppTask => Rundll32.exe Startupscan.dll,SusRunTask Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\Rocket Updater.job => C:\Users\Jasmin\AppData\Roaming\ROCKET~1\UPDATE~1\UPDATE~1.EXE <==== ATTENTION ==================== Loaded Modules (whitelisted) ============= 2014-07-09 17:25 - 2014-06-11 17:05 - 00662544 _____ () C:\Program Files (x86)\Settings Manager\systemk\x64\sysapcrt.dll 2014-05-26 14:21 - 2012-10-23 20:37 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll 2014-07-09 17:25 - 2014-06-11 17:05 - 00488464 _____ () C:\Program Files (x86)\Settings Manager\systemk\sysapcrt.dll 2014-07-09 14:32 - 2014-07-09 14:32 - 00301152 _____ () C:\Program Files\AVAST Software\Avast\aswProperty.dll 2014-07-11 14:50 - 2014-07-11 14:50 - 02792448 _____ () C:\Program Files\AVAST Software\Avast\defs\14071100\algo.dll 2014-07-11 22:45 - 2014-07-11 22:45 - 02792448 _____ () C:\Program Files\AVAST Software\Avast\defs\14071101\algo.dll 2014-06-10 11:53 - 2014-06-10 11:53 - 00025600 _____ () C:\Program Files (x86)\Overwolf\0.76.1.0\CoreAudioApi.dll 2014-07-09 14:32 - 2014-07-09 14:32 - 19329904 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll 2014-07-03 12:52 - 2012-06-25 19:41 - 01198912 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll 2014-07-09 17:25 - 2014-06-11 17:04 - 00019472 _____ () C:\Program Files (x86)\Settings Manager\systemk\syskldr.dll 2014-07-11 14:47 - 2013-02-16 02:35 - 03067288 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll ==================== Alternate Data Streams (whitelisted) ========= ==================== Safe Mode (whitelisted) =================== HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Hamachi2Svc => ""="Service" ==================== EXE Association (whitelisted) ============= ==================== MSCONFIG/TASK MANAGER disabled items ========= ==================== Faulty Device Manager Devices ============= Name: Description: Class Guid: Manufacturer: Service: Problem: : The drivers for this device are not installed. (Code 28) Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard. Name: Description: Class Guid: Manufacturer: Service: Problem: : The drivers for this device are not installed. (Code 28) Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard. ==================== Event log errors: ========================= Application errors: ================== Error: (07/11/2014 10:35:56 PM) (Source: Application Hang) (EventID: 1002) (User: ) Description: Programm wwahost.exe, Version 6.2.9200.16420 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen. Prozess-ID: 14b8 Startzeit: 01cf9d43b40e507b Endzeit: 4294967295 Anwendungspfad: C:\Windows\syswow64\wwahost.exe Berichts-ID: f36bfc61-093a-11e4-be83-b888e3c9396f Vollständiger Name des fehlerhaften Pakets: Microsoft.SkypeApp_1.9.0.2016_x86__kzf8qxf38zg5c Anwendungs-ID, die relativ zum fehlerhaften Paket ist: App Error: (07/11/2014 10:35:53 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 2484) (User: OTAKU-PC) Description: Das Paket „Microsoft.SkypeApp_1.9.0.2016_x86__kzf8qxf38zg5c“ wurde beendet, da das Anhalten zu lange dauerte. Error: (07/11/2014 10:07:12 PM) (Source: Application Hang) (EventID: 1002) (User: ) Description: Programm wwahost.exe, Version 6.2.9200.16420 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen. Prozess-ID: 17b8 Startzeit: 01cf9d05d7473efc Endzeit: 4294967295 Anwendungspfad: C:\Windows\syswow64\wwahost.exe Berichts-ID: ed93755a-0936-11e4-be83-b888e3c9396f Vollständiger Name des fehlerhaften Pakets: Microsoft.SkypeApp_1.9.0.2016_x86__kzf8qxf38zg5c Anwendungs-ID, die relativ zum fehlerhaften Paket ist: App Error: (07/11/2014 10:07:05 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 2484) (User: OTAKU-PC) Description: Das Paket „Microsoft.SkypeApp_1.9.0.2016_x86__kzf8qxf38zg5c“ wurde beendet, da das Anhalten zu lange dauerte. Error: (07/11/2014 03:29:56 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 2486) (User: OTAKU-PC) Description: Die App „microsoft.windowsphotos_8wekyb3d8bbwe!Microsoft.WindowsLive.ModernPhotos“ wurde nicht innerhalb der vorgesehenen Zeit gestartet. Error: (07/11/2014 02:44:08 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 2484) (User: OTAKU-PC) Description: Das Paket „Microsoft.SkypeApp_1.9.0.2016_x86__kzf8qxf38zg5c“ wurde beendet, da das Anhalten zu lange dauerte. Error: (07/10/2014 10:19:15 PM) (Source: Application Hang) (EventID: 1002) (User: ) Description: Programm wwahost.exe, Version 6.2.9200.16420 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen. Prozess-ID: ce8 Startzeit: 01cf9c77f2644e44 Endzeit: 4294967295 Anwendungspfad: C:\Windows\syswow64\wwahost.exe Berichts-ID: 63a8b420-086f-11e4-be81-b888e3c9396f Vollständiger Name des fehlerhaften Pakets: Microsoft.SkypeApp_1.9.0.2016_x86__kzf8qxf38zg5c Anwendungs-ID, die relativ zum fehlerhaften Paket ist: App Error: (07/10/2014 10:18:43 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 2484) (User: OTAKU-PC) Description: Das Paket „Microsoft.SkypeApp_1.9.0.2016_x86__kzf8qxf38zg5c“ wurde beendet, da das Anhalten zu lange dauerte. Error: (07/10/2014 09:59:20 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 2486) (User: OTAKU-PC) Description: Die App „microsoft.windowsphotos_8wekyb3d8bbwe!Microsoft.WindowsLive.ModernPhotos“ wurde nicht innerhalb der vorgesehenen Zeit gestartet. Error: (07/10/2014 07:40:00 PM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: ) Description: 80070005 System errors: ============= Error: (07/11/2014 10:43:34 PM) (Source: Microsoft-Windows-Kernel-General) (EventID: 6) (User: NT-AUTORITÄT) Description: 0xc000014d0 Error: (07/10/2014 11:04:09 PM) (Source: Microsoft-Windows-Kernel-General) (EventID: 6) (User: NT-AUTORITÄT) Description: 0xc000014d0 Error: (07/10/2014 11:02:02 PM) (Source: Service Control Manager) (EventID: 7031) (User: ) Description: Der Dienst "Druckwarteschlange" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 5000 Millisekunden durchgeführt: Neustart des Diensts. Error: (07/10/2014 10:58:56 PM) (Source: Microsoft-Windows-Kernel-General) (EventID: 6) (User: NT-AUTORITÄT) Description: 0xc000014d0 Error: (07/10/2014 10:21:15 PM) (Source: Service Control Manager) (EventID: 7031) (User: ) Description: Der Dienst "RBClientService" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 15000 Millisekunden durchgeführt: Neustart des Diensts. Error: (07/10/2014 10:20:12 PM) (Source: Service Control Manager) (EventID: 7031) (User: ) Description: Der Dienst "Update NetCrawl" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 5000 Millisekunden durchgeführt: Neustart des Diensts. Error: (07/10/2014 08:52:55 PM) (Source: Microsoft-Windows-Kernel-General) (EventID: 6) (User: NT-AUTORITÄT) Description: 0xc000014d0 Error: (07/10/2014 01:13:16 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Der Dienst "LogMeIn Hamachi Tunneling Engine" wurde aufgrund folgenden Fehlers nicht gestartet: %%1053 Error: (07/10/2014 01:13:16 PM) (Source: Service Control Manager) (EventID: 7009) (User: ) Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst LogMeIn Hamachi Tunneling Engine erreicht. Error: (07/10/2014 01:12:02 PM) (Source: Microsoft-Windows-Kernel-General) (EventID: 6) (User: NT-AUTORITÄT) Description: 0xc000014d0 Microsoft Office Sessions: ========================= Error: (07/11/2014 10:35:56 PM) (Source: Application Hang) (EventID: 1002) (User: ) Description: wwahost.exe6.2.9200.1642014b801cf9d43b40e507b4294967295C:\Windows\syswow64\wwahost.exef36bfc61-093a-11e4-be83-b888e3c9396fMicrosoft.SkypeApp_1.9.0.2016_x86__kzf8qxf38zg5cApp Error: (07/11/2014 10:35:53 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 2484) (User: OTAKU-PC) Description: Microsoft.SkypeApp_1.9.0.2016_x86__kzf8qxf38zg5c Error: (07/11/2014 10:07:12 PM) (Source: Application Hang) (EventID: 1002) (User: ) Description: wwahost.exe6.2.9200.1642017b801cf9d05d7473efc4294967295C:\Windows\syswow64\wwahost.exeed93755a-0936-11e4-be83-b888e3c9396fMicrosoft.SkypeApp_1.9.0.2016_x86__kzf8qxf38zg5cApp Error: (07/11/2014 10:07:05 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 2484) (User: OTAKU-PC) Description: Microsoft.SkypeApp_1.9.0.2016_x86__kzf8qxf38zg5c Error: (07/11/2014 03:29:56 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 2486) (User: OTAKU-PC) Description: microsoft.windowsphotos_8wekyb3d8bbwe!Microsoft.WindowsLive.ModernPhotos Error: (07/11/2014 02:44:08 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 2484) (User: OTAKU-PC) Description: Microsoft.SkypeApp_1.9.0.2016_x86__kzf8qxf38zg5c Error: (07/10/2014 10:19:15 PM) (Source: Application Hang) (EventID: 1002) (User: ) Description: wwahost.exe6.2.9200.16420ce801cf9c77f2644e444294967295C:\Windows\syswow64\wwahost.exe63a8b420-086f-11e4-be81-b888e3c9396fMicrosoft.SkypeApp_1.9.0.2016_x86__kzf8qxf38zg5cApp Error: (07/10/2014 10:18:43 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 2484) (User: OTAKU-PC) Description: Microsoft.SkypeApp_1.9.0.2016_x86__kzf8qxf38zg5c Error: (07/10/2014 09:59:20 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 2486) (User: OTAKU-PC) Description: microsoft.windowsphotos_8wekyb3d8bbwe!Microsoft.WindowsLive.ModernPhotos Error: (07/10/2014 07:40:00 PM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: ) Description: 80070005 ==================== Memory info =========================== Percentage of memory in use: 37% Total physical RAM: 3985.27 MB Available physical RAM: 2498.57 MB Total Pagefile: 7569.27 MB Available Pagefile: 5991.37 MB Total Virtual: 8192 MB Available Virtual: 8191.77 MB ==================== Drives ================================ Drive c: (Packard Bell) (Fixed) (Total:222.33 GB) (Free:184.39 GB) NTFS Drive d: (DATA) (Fixed) (Total:222.33 GB) (Free:222.21 GB) NTFS Drive e: (130820_1008) (CDROM) (Total:1.34 GB) (Free:0 GB) UDF ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (Size: 466 GB) (Disk ID: 6528EC57) Partition: GPT Partition Type. ==================== End Of Log ============================ |
11.07.2014, 23:21 | #6 |
/// TB-Ausbilder /// Anleitungs-Guru | HijackThis Log Schritt 1 Bitte deinstalliere folgende Programme: Open Office Packages Versuche es bei Windows 8 mit der Windowstaste + X über . Sollte das nicht gehen, lade Dir bitte Revo Uninstallerhier herunter. Entpacke die zip-Datei auf den Desktop.
Wenn Du ein Programm nicht deinstallieren kannst, mach mit dem nächsten weiter. Auch wenn am Ende noch Programme übrig geblieben sind, führe den nächsten Schritt aus: Schritt 2 Downloade Dir bitte AdwCleaner auf deinen Desktop.
Schritt 3 Bitte lade Dir zoek.exe von hier: http://hijackthis.nl/smeenk/
Schritt 4 Bitte starte FRST erneut, markiere auch die checkbox und drücke auf Scan. Bitte poste mir den Inhalt der beiden Logs die erstellt werden.
__________________ --> HijackThis Log |
12.07.2014, 19:02 | #7 |
| HijackThis Log Okay hier nochmal meine Fragen: Was soll oich Deinstallieren? Und ich habe nur OpenOffice kein Packages? Und kann ich nachdem default-seach.net weg ist alles wieder von meinem Lappi schmeißen? |
12.07.2014, 20:24 | #8 |
/// TB-Ausbilder /// Anleitungs-Guru | HijackThis LogCode:
ATTFilter Open Office Packages (HKCU\...\Open Office Packages) (Version: - ) <==== ATTENTION Wenn die Bereinigung abgeschlossen ist, werden auch die Programme entfernt.
__________________ Gruß deeprybka Lob, Kritik, Wünsche? Spende fürs trojaner-board? _______________________________________________ „Neminem laede, immo omnes, quantum potes, iuva.“ Arthur Schopenhauer |
12.07.2014, 20:34 | #9 |
| HijackThis Log Oh ok ich habs entfernt und nu is das Default-seach.net weg? |
12.07.2014, 21:01 | #10 |
/// TB-Ausbilder /// Anleitungs-Guru | HijackThis Log Du sollst doch die geposteten Schritte abarbeiten!
__________________ Gruß deeprybka Lob, Kritik, Wünsche? Spende fürs trojaner-board? _______________________________________________ „Neminem laede, immo omnes, quantum potes, iuva.“ Arthur Schopenhauer |
12.07.2014, 21:25 | #11 |
| HijackThis Log Hier die LogdateinAdwCleaner Logfile: Code:
ATTFilter # AdwCleaner v3.215 - Bericht erstellt am 12/07/2014 um 22:21:04 # Aktualisiert 09/07/2014 von Xplode # Betriebssystem : Windows 8 (64 bits) # Benutzername : Jasmin - OTAKU-PC # Gestartet von : C:\Users\Jasmin\Downloads\adwcleaner_3.215.exe # Option : Löschen ***** [ Dienste ] ***** Dienst Gelöscht : F06DEFF2-5B9C-490D-910F-35D3A9119622 ***** [ Dateien / Ordner ] ***** Ordner Gelöscht : C:\ProgramData\apn Ordner Gelöscht : C:\ProgramData\systemk Ordner Gelöscht : C:\Program Files (x86)\RegClean Pro Ordner Gelöscht : C:\Program Files (x86)\Settings Manager Ordner Gelöscht : C:\Users\Jasmin\AppData\Roaming\OpenCandy Ordner Gelöscht : C:\Users\Jasmin\AppData\Roaming\RocketUpdater Ordner Gelöscht : C:\Users\Jasmin\AppData\Roaming\Settings Manager Ordner Gelöscht : C:\Users\Jasmin\AppData\Roaming\Systweak Ordner Gelöscht : C:\Users\Jasmin\AppData\Local\Google\Chrome\User Data\Default\Extensions\ibnjmihbbanannlbobkbmnmckjnmdnom Datei Gelöscht : C:\Windows\System32\roboot64.exe Datei Gelöscht : C:\Users\Jasmin\AppData\Roaming\Mozilla\Firefox\Profiles\8b47h064.default-1405114346193\invalidprefs.js Datei Gelöscht : C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\default-search.xml ***** [ Verknüpfungen ] ***** ***** [ Registrierungsdatenbank ] ***** Schlüssel Gelöscht : HKCU\Software\Google\Chrome\Extensions\ibnjmihbbanannlbobkbmnmckjnmdnom Schlüssel Gelöscht : HKLM\SOFTWARE\Google\Chrome\Extensions\ibnjmihbbanannlbobkbmnmckjnmdnom Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Google\Chrome\Extensions\ibnjmihbbanannlbobkbmnmckjnmdnom Schlüssel Gelöscht : HKCU\Software\Google\Chrome\Extensions\nikpibnbobmbdbheedjfogjlikpgpnhp Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\bitguard.exe Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\bprotect.exe Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\browserdefender.exe Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\browserprotect.exe Wert Gelöscht : HKLM\SYSTEM\ControlSet001\Control\Session Manager\AppCertDlls [x64] Wert Gelöscht : HKLM\SYSTEM\ControlSet001\Control\Session Manager\AppCertDlls [x86] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3} Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6} Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6} Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{4D9101D6-5BA0-4048-BDDE-7E2DF54C8C47} Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{77AA745B-F4F8-45DA-9B14-61D2D95054C8} Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{AA9A4890-4262-4441-8977-E2FFCBFB706C} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{77AA745B-F4F8-45DA-9B14-61D2D95054C8} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{AA9A4890-4262-4441-8977-E2FFCBFB706C} Schlüssel Gelöscht : HKCU\Software\InstallCore Schlüssel Gelöscht : HKCU\Software\Linkey Schlüssel Gelöscht : HKCU\Software\OCS Schlüssel Gelöscht : HKCU\Software\SystemK Schlüssel Gelöscht : HKCU\Software\systweak Schlüssel Gelöscht : HKLM\Software\SystemK Schlüssel Gelöscht : HKLM\Software\systweak Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\bpsvc.exe Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\browsersafeguard.exe Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\dprotectsvc.exe Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\jumpflip Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\protectedsearch.exe Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\searchinstaller.exe Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\searchprotection.exe Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\searchprotector.exe Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\searchsettings.exe Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\searchsettings64.exe Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\snapdo.exe Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\stinst32.exe Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\stinst64.exe Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\umbrella.exe Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\utiljumpflip.exe Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\volaro Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\vonteera Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\websteroids.exe Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\websteroidsservice.exe ***** [ Browser ] ***** -\\ Internet Explorer v10.0.9200.17028 -\\ Mozilla Firefox v30.0 (en-US) [ Datei : C:\Users\Jasmin\AppData\Roaming\Mozilla\Firefox\Profiles\8b47h064.default-1405114346193\prefs.js ] Zeile gelöscht : user_pref("browser.startup.homepage", "hxxp://www.default-search.net?sid=503&aid=102&itype=n&ver=13001&tm=403&src=hmp"); -\\ Google Chrome v35.0.1916.153 [ Datei : C:\Users\Jasmin\AppData\Local\Google\Chrome\User Data\Default\preferences ] Gelöscht [Startup_urls] : hxxp://rocket-find.com/?f=7&a=rckt_dsites02_14_28_ff&cd=2XzuyEtN2Y1L1Qzu0Bzzzzzz0EtA0CzytAzyyC0FyB0D0B0DtN0D0Tzu0SzytBtBtN1L2XzutBtFtBtCtFtCyEtFtCtN1L1CzutCyEtBzytDyD1V1StN1L1G1B1V1N2Y1L1Qzu2StD0CtAtCtDzyyBzztGtAtAtA0EtGzy0EtD0BtGtD0BtDyBtGyEtD0DtCzy0C0ByC0E0DtA0B2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyBtAtCyEzyyCyDzztG0ByByBtCtG0C0F0AzztG0FtByBzytGtB0A0BtAyByE0C0FtDtDyBtD2Q&cr=455567288&ir= Gelöscht [Startup_urls] : hxxp://www.default-search.net?sid=503&aid=102&itype=n&ver=13001&tm=403&src=hmp Gelöscht [Homepage] : hxxp://rocket-find.com/?f=1&a=rckt_dsites02_14_28_ff&cd=2XzuyEtN2Y1L1Qzu0Bzzzzzz0EtA0CzytAzyyC0FyB0D0B0DtN0D0Tzu0SzytBtBtN1L2XzutBtFtBtCtFtCyEtFtCtN1L1CzutCyEtBzytDyD1V1StN1L1G1B1V1N2Y1L1Qzu2StD0CtAtCtDzyyBzztGtAtAtA0EtGzy0EtD0BtGtD0BtDyBtGyEtD0DtCzy0C0ByC0E0DtA0B2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyBtAtCyEzyyCyDzztG0ByByBtCtG0C0F0AzztG0FtByBzytGtB0A0BtAyByE0C0FtDtDyBtD2Q&cr=455567288&ir= Gelöscht [Extension] : ibnjmihbbanannlbobkbmnmckjnmdnom ************************* AdwCleaner[R0].txt - [8606 octets] - [12/07/2014 22:19:32] AdwCleaner[S0].txt - [7492 octets] - [12/07/2014 22:21:04] ########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [7552 octets] ########## |
12.07.2014, 22:59 | #12 |
/// TB-Ausbilder /// Anleitungs-Guru | HijackThis Log OK...und weiter mit den anderen Schritten...
__________________ Gruß deeprybka Lob, Kritik, Wünsche? Spende fürs trojaner-board? _______________________________________________ „Neminem laede, immo omnes, quantum potes, iuva.“ Arthur Schopenhauer |
12.07.2014, 23:22 | #13 |
| HijackThis Log So hier die Zoekdaten: Zoek.exe v5.0.0.0 Updated 12-July-2014 Tool run by Jasmin on 12.07.2014 at 23:55:40,99. Microsoft Windows 8 6.2.9200 x64 Running in: Normal Mode Internet Access Detected Launched: C:\Users\Jasmin\Downloads\zoek.exe [Scan all users] [Script inserted] ==== System Restore Info ====================== 12.07.2014 23:57:04 Zoek.exe System Restore Point Created Succesfully. ==== Deleting CLSID Registry Keys ====================== HKEY_USERS\S-1-5-21-1733027970-2465188296-4133737029-1001\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2503} deleted successfully HKEY_USERS\S-1-5-21-1733027970-2465188296-4133737029-1001\Software\Microsoft\Internet Explorer\SearchScopes\{9CB96984-43C3-4D44-90EF-01466EFCF7BB} deleted successfully HKEY_USERS\S-1-5-21-1733027970-2465188296-4133737029-1001\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} deleted successfully HKEY_USERS\S-1-5-21-1733027970-2465188296-4133737029-1001\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} deleted successfully HKEY_USERS\S-1-5-21-1733027970-2465188296-4133737029-1001\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{6D53EC84-6AAE-4787-AEEE-F4628F01010C} deleted successfully HKEY_USERS\S-1-5-21-1733027970-2465188296-4133737029-1001\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{6D53EC84-6AAE-4787-AEEE-F4628F01010C} deleted successfully HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6} deleted successfully ==== Deleting CLSID Registry Values ====================== HKEY_USERS\S-1-5-21-1733027970-2465188296-4133737029-1001\Software\Mozilla\Firefox\Extensions\{B64D9B05-48E1-4CEB-BF58-E0643994E900} deleted successfully ==== Deleting Services ====================== ==== FireFox Fix ====================== Deleted from C:\Users\Jasmin\AppData\Roaming\Mozilla\Firefox\Profiles\8b47h064.default-1405114346193\prefs.js: Added to C:\Users\Jasmin\AppData\Roaming\Mozilla\Firefox\Profiles\8b47h064.default-1405114346193\prefs.js: user_pref("browser.startup.homepage", "hxxp://www.google.com"); user_pref("browser.search.defaulturl", "hxxp://www.google.com/search?btnG=Google+Search&q="); user_pref("browser.newtab.url", "hxxp://www.google.com/"); user_pref("browser.search.defaultengine", "Google"); user_pref("browser.search.defaultenginename", "Google"); user_pref("browser.search.selectedEngine", "Google"); user_pref("browser.search.order.1", "Google"); user_pref("keyword.URL", "hxxp://www.google.com/search?btnG=Google+Search&q="); user_pref("browser.search.suggest.enabled", true); user_pref("browser.search.useDBForOrder", true); ==== Deleting Files \ Folders ====================== C:\Windows\sysWoW64\config\systemprofile\AppData\Roaming\Systweak deleted C:\PROGRA~3\boost_interprocess deleted C:\Users\Jasmin\Searches deleted C:\Windows\tasks\Rocket Updater.job deleted C:\windows\SysNative\tasks\Rocket Updater deleted C:\Windows\SysWow64\AI_RecycleBin deleted "C:\Windows\Installer\364f0.msi" deleted "C:\Windows\Installer\174667.msi" deleted ==== Firefox Extensions Registry ====================== [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Mozilla\Firefox\Extensions] "wrc@avast.com"="C:\Program Files\AVAST Software\Avast\WebRep\FF" [09.07.2014 14:32] ==== Firefox Extensions ====================== AppDir: C:\Program Files (x86)\Mozilla Firefox - Default - %AppDir%\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} ==== Firefox Plugins ====================== Profilepath: C:\Users\Jasmin\AppData\Roaming\Mozilla\Firefox\Profiles\8b47h064.default-1405114346193 4390CCD3790F8D9C427C0C29590C62D7 - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_145.dll - Shockwave Flash ==== Chrome Look ====================== HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions gomekmidlodglbbmalcneegieacbdmki - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx[09.07.2014 14:32] ==== Set IE to Default ====================== Old Values: [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] "Start Page"="https://de.yahoo.com?fr=hp-avast&type=avastbcl" "Search Page"="https://de.search.yahoo.com/yhs/search?type=avastbcl&hspart=avast&hsimp=yhs-001&p={searchTerms}" "Search Bar"="https://de.yahoo.com?fr=hp-avast&type=avastbcl" [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main] "Start Page"="https://de.yahoo.com?fr=hp-avast&type=avastbcl" "Search Page"="https://de.search.yahoo.com/yhs/search?type=avastbcl&hspart=avast&hsimp=yhs-001&p={searchTerms}" "Search Bar"="https://de.yahoo.com?fr=hp-avast&type=avastbcl" [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Main] "Start Page"="https://de.yahoo.com?fr=hp-avast&type=avastbcl" "Search Page"="https://de.search.yahoo.com/yhs/search?type=avastbcl&hspart=avast&hsimp=yhs-001&p={searchTerms}" "Search Bar"="https://de.yahoo.com?fr=hp-avast&type=avastbcl" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\AboutURLs] "Tabs"="about:newtab" [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\AboutURLs] "Tabs"="about:newtab" [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes] No DefaultScope Set For HKCU New Values: [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] "Search Page"="hxxp://go.microsoft.com/fwlink/?LinkId=54896" "Search Bar"="hxxp://go.microsoft.com/fwlink/?LinkId=54896" "Start Page"="hxxp://www.google.com" [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main] "Search Page"="hxxp://go.microsoft.com/fwlink/?LinkId=54896" "Search Bar"="hxxp://go.microsoft.com/fwlink/?LinkId=54896" "Start Page"="hxxp://go.microsoft.com/fwlink/?LinkId=69157" [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Main] "Search Page"="hxxp://go.microsoft.com/fwlink/?LinkId=54896" "Search Bar"="hxxp://go.microsoft.com/fwlink/?LinkId=54896" "Start Page"="hxxp://go.microsoft.com/fwlink/?LinkId=69157" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\AboutURLs] "Tabs"="res://ieframe.dll/tabswelcome.htm" [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\AboutURLs] "Tabs"="res://ieframe.dll/tabswelcome.htm" [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes] "DefaultScope"="{6A1806CD-94D4-4689-BA73-E35EA1EA9990}" ==== All HKCU SearchScopes ====================== HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes {0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="hxxp://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC" {6A1806CD-94D4-4689-BA73-E35EA1EA9990} Google Url="hxxp://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}" ==== Reset Google Chrome ====================== C:\Users\Jasmin\AppData\Local\Google\Chrome\User Data\Default\preferences was reset successfully C:\Users\Jasmin\AppData\Local\Google\Chrome\User Data\Default\Web Data was reset successfully ==== Deleting Registry Keys ====================== HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\203E62EEA6789D84098513925E9B9999 deleted successfully HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\F60730A4A66673047777F5728467D401 deleted successfully HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{4A03706F-666A-4037-7777-5F2748764D10} deleted successfully HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{EE26E302-876A-48D9-9058-3129E5B99999} deleted successfully HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\203E62EEA6789D84098513925E9B9999 deleted successfully HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\F60730A4A66673047777F5728467D401 deleted successfully ==== Empty IE Cache ====================== C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Users\Jasmin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Users\Jasmin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully C:\Windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Windows\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully ==== Empty FireFox Cache ====================== C:\Users\Jasmin\AppData\Local\Mozilla\Firefox\Profiles\8b47h064.default-1405114346193\Cache emptied successfully ==== Empty Chrome Cache ====================== C:\Users\Jasmin\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully ==== Empty All Flash Cache ====================== Flash Cache Emptied Successfully ==== Empty All Java Cache ====================== Java Cache cleared successfully ==== C:\zoek_backup content ====================== C:\zoek_backup (files=10 folders=9 3601548 bytes) ==== Empty Temp Folders ====================== C:\Users\Default\AppData\Local\Temp emptied successfully C:\Users\Default User\AppData\Local\Temp emptied successfully C:\Users\Jasmin\AppData\Local\Temp will be emptied at reboot C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp emptied successfully C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully C:\Windows\Temp will be emptied at reboot ==== After Reboot ====================== ==== Empty Temp Folders ====================== C:\Windows\Temp successfully emptied C:\Users\Jasmin\AppData\Local\Temp successfully emptied ==== Empty Recycle Bin ====================== C:\$RECYCLE.BIN successfully emptied ==== EOF on 13.07.2014 at 0:15:54,39 ====================== Der FRST log: FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 11-07-2014 Ran by Jasmin (administrator) on OTAKU-PC on 13-07-2014 00:19:47 Running from C:\Users\Jasmin\Desktop\Programme Platform: Windows 8 (X64) OS Language: Deutsch (Deutschland) Internet Explorer Version 10 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\dsiwmis.exe (Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe (LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe (Dritek System INC.) C:\Windows\RfBtnSvc64.exe (LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LMutilps32.exe (LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LManager.exe (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\MMDx64Fx.exe (Intel Corporation) C:\Windows\System32\igfxext.exe (Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.0.1119.516_x64__8wekyb3d8bbwe\LiveComm.exe (Acer Incorporated) C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerTray.exe (Microsoft Corporation) C:\Windows\SysWOW64\WWAHost.exe (Intel Corporation) C:\Windows\System32\igfxtray.exe (Intel Corporation) C:\Windows\System32\hkcmd.exe (Intel Corporation) C:\Windows\System32\igfxpers.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Overwolf LTD) C:\Program Files (x86)\Overwolf\Overwolf.exe (Dritek System Inc.) C:\Program Files (x86)\RadioController\RfBtnHelper.exe (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe (Acer Incorporated) C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerSvc.exe (Intel Corporation) C:\Windows\System32\igfxsrvc.exe (Acer Incorporated) C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerEvent.exe (Overwolf LTD) C:\Program Files (x86)\Common Files\Overwolf\0.76.1.0\OverwolfHelper.exe (Overwolf LTD) C:\Program Files (x86)\Common Files\Overwolf\0.76.1.0\OverwolfHelper64.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe (Oracle Corporation) C:\Program Files (x86)\Java\jre7\bin\javaw.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Oracle Corporation) C:\Program Files (x86)\Java\jre7\bin\javaw.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12503184 2012-06-11] (Realtek Semiconductor) HKLM-x32\...\Run: [LManager] => [X] HKLM-x32\...\Run: [RadioController] => C:\Program Files (x86)\RadioController\RfBtnHelper.exe [111216 2014-07-03] (Dritek System Inc.) HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [256896 2014-05-07] (Oracle Corporation) HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [4086432 2014-07-09] (AVAST Software) HKLM-x32\...\Run: [LogMeIn Hamachi Ui] => C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [3816272 2014-06-23] (LogMeIn Inc.) Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation) HKU\S-1-5-21-1733027970-2465188296-4133737029-1001\...\Run: [Overwolf] => C:\Program Files (x86)\Overwolf\Overwolf.exe [39712 2014-06-10] (Overwolf LTD) ShellIconOverlayIdentifiers: 00avast -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll (AVAST Software) ==================== Internet (Whitelisted) ==================== StartMenuInternet: IEXPLORE.EXE - iexplore.exe SearchScopes: HKLM - DefaultScope {76442EC8-40C2-471B-ACB3-5E9D4E4C056C} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MAPBJS SearchScopes: HKLM - {76442EC8-40C2-471B-ACB3-5E9D4E4C056C} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MAPBJS SearchScopes: HKLM-x32 - DefaultScope value is missing. SearchScopes: HKLM-x32 - {76442EC8-40C2-471B-ACB3-5E9D4E4C056C} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MAPBJS SearchScopes: HKCU - DefaultScope {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = hxxp://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage} SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = hxxp://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage} BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software) BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO-x32: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software) BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) Tcpip\Parameters: [DhcpNameServer] 192.168.178.1 FireFox: ======== FF ProfilePath: C:\Users\Jasmin\AppData\Roaming\Mozilla\Firefox\Profiles\8b47h064.default-1405114346193 FF NewTab: hxxp://www.google.com/ FF SearchEngineOrder.1: Google FF SelectedSearchEngine: Google FF Homepage: hxxp://www.google.com FF Keyword.URL: hxxp://www.google.com/search?btnG=Google+Search&q= FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_14_0_0_145.dll () FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_145.dll () FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation) FF Plugin-x32: @java.com/DTPlugin,version=10.60.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=10.60.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll No File FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 - C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll () FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2014-07-09] Chrome: ======= Error reading preferences. Please check "preferences" file for possible corruption. <======= ATTENTION CHR Extension: (Google Docs) - C:\Users\Jasmin\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-07-09] CHR Extension: (Google Drive) - C:\Users\Jasmin\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-07-09] CHR Extension: (YouTube) - C:\Users\Jasmin\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-07-09] CHR Extension: (Google Search) - C:\Users\Jasmin\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-07-09] CHR Extension: (No Name) - C:\Users\Jasmin\AppData\Local\Google\Chrome\User Data\Default\Extensions\ibnjmihbbanannlbobkbmnmckjnmdnom [2014-07-10] CHR Extension: (Google Wallet) - C:\Users\Jasmin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-07-09] CHR Extension: (Gmail) - C:\Users\Jasmin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-07-09] CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2014-07-09] CHR StartMenuInternet: Google Chrome - chrome.exe ==================== Services (Whitelisted) ================= R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-07-09] (AVAST Software) S3 DeviceFastLaneService; C:\Program Files\Packard Bell\Packard Bell Device Fast-lane\DeviceFastLaneSvc.exe [469648 2012-11-16] (Acer Incorporated) R3 ePowerSvc; C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerSvc.exe [662088 2013-03-15] (Acer Incorporated) R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [165760 2012-07-18] (Intel Corporation) R2 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [377616 2014-04-15] (LogMeIn, Inc.) S3 OverwolfUpdater; C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe [976672 2014-06-10] (Overwolf LTD) R2 RfButtonDriverService; C:\Windows\RfBtnSvc64.exe [96880 2014-07-03] (Dritek System INC.) S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [16056 2014-03-29] (Microsoft Corporation) ==================== Drivers (Whitelisted) ==================== R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29208 2014-07-09] () R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [79184 2014-07-09] (AVAST Software) R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93568 2014-07-09] (AVAST Software) R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2014-07-09] () R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1041168 2014-07-09] (AVAST Software) R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [427360 2014-07-09] (AVAST Software) R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [92008 2014-07-09] (AVAST Software) R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [224896 2014-07-09] () R3 BCM43XX; C:\Windows\system32\DRIVERS\bcmwl63a.sys [5139968 2012-06-02] (Broadcom Corporation) R3 Hamachi; C:\Windows\system32\DRIVERS\Hamdrv.sys [46136 2014-06-23] (LogMeIn Inc.) R3 Ps2Kb2Hid; C:\Windows\System32\drivers\aPs2Kb2Hid.sys [26736 2014-07-03] (Dritek System Inc.) S3 iscFlash; \??\C:\Users\ADMINI~1\AppData\Local\Temp\7zSF74.tmp\iscflashx64.sys [X] S3 PCDSRVC{9368CD8C-C29E3CF2-06020200}_0; \??\c:\users\admini~1\appdata\local\temp\5ubvy7wmjiym\pcdrdiag\bin\pcdsrvc_x64.pkms [X] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-07-13 00:13 - 2014-07-12 23:55 - 00024064 _____ () C:\Windows\zoek-delete.exe 2014-07-12 23:56 - 2014-07-13 00:15 - 00010222 _____ () C:\zoek-results.log 2014-07-12 23:55 - 2014-07-13 00:09 - 00000000 ____D () C:\zoek_backup 2014-07-12 23:55 - 2014-07-12 23:55 - 01285120 _____ () C:\Users\Jasmin\Downloads\zoek.exe 2014-07-12 22:22 - 2014-07-13 00:14 - 00001442 _____ () C:\Windows\PFRO.log 2014-07-12 22:20 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\SysWOW64\sqlite3.dll 2014-07-12 22:19 - 2014-07-12 22:21 - 00000000 ____D () C:\AdwCleaner 2014-07-12 22:18 - 2014-07-12 22:18 - 01348263 _____ () C:\Users\Jasmin\Downloads\adwcleaner_3.215.exe 2014-07-12 21:49 - 2014-07-12 21:49 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox 2014-07-11 23:50 - 2014-07-11 23:51 - 00000000 ____D () C:\Users\Jasmin\Downloads\SetUps 2014-07-11 23:37 - 2014-07-13 00:19 - 00000000 ____D () C:\FRST 2014-07-11 23:04 - 2014-07-11 23:04 - 00002774 _____ () C:\Windows\System32\Tasks\CCleanerSkipUAC 2014-07-11 23:04 - 2014-07-11 23:04 - 00000794 _____ () C:\Users\Public\Desktop\CCleaner.lnk 2014-07-11 23:04 - 2014-07-11 23:04 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner 2014-07-11 23:04 - 2014-07-11 23:04 - 00000000 ____D () C:\Program Files\CCleaner 2014-07-11 22:43 - 2014-07-11 22:44 - 00307760 _____ () C:\Windows\system32\FNTCACHE.DAT 2014-07-11 22:30 - 2014-07-11 22:30 - 00000000 ____D () C:\Users\Jasmin\Downloads\backups 2014-07-11 14:47 - 2014-07-12 22:22 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service 2014-07-11 14:47 - 2014-07-11 22:59 - 00001175 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk 2014-07-11 14:47 - 2014-07-11 22:59 - 00001163 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk 2014-07-11 14:47 - 2014-07-11 14:48 - 00000000 ____D () C:\Users\Jasmin\AppData\Roaming\Mozilla 2014-07-10 23:02 - 2014-07-10 23:06 - 00000000 ___RD () C:\Windows\BrowserChoice 2014-07-10 23:02 - 2014-07-10 23:02 - 00000000 ___SD () C:\Windows\system32\CompatTel 2014-07-10 22:51 - 2014-07-10 22:53 - 00000000 ____D () C:\Windows\system32\MRT 2014-07-10 22:51 - 2014-06-26 17:40 - 96441528 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2014-07-10 22:27 - 2014-07-10 22:27 - 00000000 ___SD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenOffice 4.0.1 2014-07-10 22:26 - 2014-07-10 22:26 - 00000000 ____D () C:\Program Files (x86)\OpenOffice 4 2014-07-10 21:47 - 2014-06-26 22:53 - 00703968 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2014-07-10 21:47 - 2014-06-26 22:53 - 00105440 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2014-07-10 20:23 - 2014-07-11 23:32 - 00000000 ____D () C:\Users\Jasmin\Desktop\Rinmaru 2014-07-10 19:46 - 2014-07-13 00:19 - 00000000 ____D () C:\Users\Jasmin\Desktop\Programme 2014-07-10 19:21 - 2014-07-10 19:49 - 00000000 ____D () C:\Program Files\paint.net 2014-07-10 19:20 - 2014-07-10 19:43 - 00000000 ____D () C:\Users\Jasmin\AppData\Local\paint.net 2014-07-10 13:14 - 2014-07-13 00:16 - 00000000 ____D () C:\Users\Jasmin\AppData\Local\LogMeIn Hamachi 2014-07-10 13:14 - 2014-07-10 13:14 - 00000000 ____D () C:\Users\Jasmin\AppData\Local\LogMeIn 2014-07-10 13:14 - 2014-07-10 13:14 - 00000000 ____D () C:\ProgramData\LogMeIn 2014-07-09 23:42 - 2014-07-09 23:42 - 00003728 _____ () C:\Windows\System32\Tasks\Overwolf Updater Task 2014-07-09 23:42 - 2014-07-09 23:42 - 00000000 ____D () C:\Users\Jasmin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Overwolf 2014-07-09 23:42 - 2014-07-09 23:42 - 00000000 ____D () C:\ProgramData\Overwolf 2014-07-09 23:42 - 2014-07-09 23:42 - 00000000 ____D () C:\Program Files (x86)\Overwolf 2014-07-09 23:39 - 2014-07-13 00:16 - 00000000 ____D () C:\Users\Jasmin\AppData\Local\Overwolf 2014-07-09 21:18 - 2014-07-09 21:18 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi 2014-07-09 21:18 - 2014-07-09 21:18 - 00000000 ____D () C:\Program Files (x86)\LogMeIn Hamachi 2014-07-09 21:00 - 2014-07-09 21:00 - 00000000 ____D () C:\Users\Jasmin\AppData\Local\Macromedia 2014-07-09 20:57 - 2014-07-12 23:47 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job 2014-07-09 20:57 - 2014-07-09 21:02 - 00003772 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater 2014-07-09 20:57 - 2014-07-09 20:57 - 00000000 ____D () C:\ProgramData\McAfee 2014-07-09 18:38 - 2014-07-11 23:51 - 00000000 ____D () C:\Users\Jasmin\Desktop\Jasi 2014-07-09 17:28 - 2014-07-09 17:28 - 00000000 ____D () C:\Users\Jasmin\AppData\Roaming\Macromedia 2014-07-09 17:27 - 2014-07-12 20:24 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft 2014-07-09 17:24 - 2014-07-12 20:24 - 00000000 ____D () C:\Program Files (x86)\DVDVideoSoft 2014-07-09 16:16 - 2014-07-12 20:53 - 00000000 ____D () C:\Users\Jasmin\AppData\Roaming\DVDVideoSoft 2014-07-09 16:13 - 2014-07-11 23:50 - 00043520 ___SH () C:\Users\Jasmin\Downloads\Thumbs.db 2014-07-09 15:20 - 2014-06-19 04:12 - 02239488 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2014-07-09 15:20 - 2014-06-19 04:12 - 01366528 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2014-07-09 15:20 - 2014-06-19 04:12 - 00915968 _____ (Microsoft Corporation) C:\Windows\system32\uxtheme.dll 2014-07-09 15:20 - 2014-06-19 04:12 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\UXInit.dll 2014-07-09 15:20 - 2014-06-19 04:12 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2014-07-09 15:20 - 2014-06-19 04:11 - 19277312 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-07-09 15:20 - 2014-06-19 04:11 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2014-07-09 15:20 - 2014-06-19 04:11 - 00097792 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2014-07-09 15:20 - 2014-06-19 04:10 - 15369728 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2014-07-09 15:20 - 2014-06-19 04:10 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2014-07-09 15:20 - 2014-06-19 04:10 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2014-07-09 15:20 - 2014-06-19 04:10 - 00452096 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2014-07-09 15:20 - 2014-06-19 04:10 - 00281600 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2014-07-09 15:20 - 2014-06-19 04:10 - 00255488 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2014-07-09 15:20 - 2014-06-19 04:10 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2014-07-09 15:20 - 2014-06-19 04:10 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2014-07-09 15:20 - 2014-06-19 04:10 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2014-07-09 15:20 - 2014-06-19 04:10 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2014-07-09 15:20 - 2014-06-19 04:09 - 01508864 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2014-07-09 15:20 - 2014-06-19 02:53 - 01766400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2014-07-09 15:20 - 2014-06-19 02:53 - 01141760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2014-07-09 15:20 - 2014-06-19 02:53 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2014-07-09 15:20 - 2014-06-19 02:53 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2014-07-09 15:20 - 2014-06-19 02:53 - 00044032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UXInit.dll 2014-07-09 15:20 - 2014-06-19 02:52 - 13732352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2014-07-09 15:20 - 2014-06-19 02:52 - 01440768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2014-07-09 15:20 - 2014-06-19 02:52 - 00357888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2014-07-09 15:20 - 2014-06-19 02:52 - 00226816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2014-07-09 15:20 - 2014-06-19 02:52 - 00226816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2014-07-09 15:20 - 2014-06-19 02:52 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2014-07-09 15:20 - 2014-06-19 02:52 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2014-07-09 15:20 - 2014-06-19 02:52 - 00039936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2014-07-09 15:20 - 2014-06-19 02:52 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2014-07-09 15:20 - 2014-06-19 02:33 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-07-09 15:20 - 2014-06-19 02:30 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2014-07-09 15:20 - 2014-06-19 00:05 - 00534528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\uxtheme.dll 2014-07-09 15:19 - 2014-06-19 04:10 - 03959296 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2014-07-09 15:19 - 2014-06-19 04:10 - 02650624 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2014-07-09 15:19 - 2014-06-19 02:53 - 14368768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2014-07-09 15:19 - 2014-06-19 02:53 - 00080896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2014-07-09 15:19 - 2014-06-19 02:52 - 02863616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2014-07-09 15:19 - 2014-06-19 02:52 - 02051072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2014-07-09 15:19 - 2014-06-19 02:52 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2014-07-09 15:11 - 2013-08-10 07:21 - 00448512 _____ (Microsoft Corporation) C:\Windows\system32\SettingSync.dll 2014-07-09 15:11 - 2013-08-10 07:21 - 00128512 _____ (Microsoft Corporation) C:\Windows\system32\SettingSyncInfo.dll 2014-07-09 15:11 - 2013-08-10 05:58 - 00356352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SettingSync.dll 2014-07-09 15:11 - 2013-08-02 08:28 - 00222208 _____ (Microsoft Corporation) C:\Windows\system32\shdocvw.dll 2014-07-09 15:11 - 2013-08-02 07:08 - 00199168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shdocvw.dll 2014-07-09 15:11 - 2013-07-25 01:10 - 00158208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mbsmsapi.dll 2014-07-09 15:11 - 2013-07-25 01:06 - 00225280 _____ (Microsoft Corporation) C:\Windows\system32\mbsmsapi.dll 2014-07-09 15:11 - 2013-04-10 01:17 - 01125888 _____ (Microsoft Corporation) C:\Windows\system32\msctf.dll 2014-07-09 15:11 - 2013-04-10 00:29 - 00893952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msctf.dll 2014-07-09 15:09 - 2014-07-12 21:51 - 00000000 ____D () C:\Users\Jasmin\AppData\Roaming\TS3Client 2014-07-09 15:08 - 2014-02-04 01:56 - 00332632 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys 2014-07-09 15:08 - 2014-02-04 01:56 - 00278872 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msiscsi.sys 2014-07-09 15:08 - 2014-01-31 02:48 - 00485888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSDApi.dll 2014-07-09 15:08 - 2014-01-31 02:06 - 00599040 _____ (Microsoft Corporation) C:\Windows\system32\WSDApi.dll 2014-07-09 15:08 - 2014-01-27 05:39 - 01939288 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys 2014-07-09 15:08 - 2014-01-16 01:42 - 00118784 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dfsc.sys 2014-07-09 15:08 - 2014-01-11 08:48 - 05979648 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll 2014-07-09 15:08 - 2014-01-11 07:06 - 05092352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll 2014-07-09 15:08 - 2014-01-03 01:35 - 00365568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsGdiConverter.dll 2014-07-09 15:08 - 2014-01-03 01:32 - 00523264 _____ (Microsoft Corporation) C:\Windows\system32\XpsGdiConverter.dll 2014-07-09 15:00 - 2013-08-03 08:40 - 01374208 _____ (Microsoft Corporation) C:\Windows\system32\wdc.dll 2014-07-09 15:00 - 2013-08-03 08:40 - 00566784 _____ (Microsoft Corporation) C:\Windows\system32\wvc.dll 2014-07-09 15:00 - 2013-08-03 08:40 - 00462336 _____ (Microsoft Corporation) C:\Windows\system32\sysmon.ocx 2014-07-09 15:00 - 2013-08-03 07:14 - 00399360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sysmon.ocx 2014-07-09 15:00 - 2013-08-03 07:13 - 01245696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdc.dll 2014-07-09 15:00 - 2013-08-03 07:13 - 00437248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wvc.dll 2014-07-09 14:47 - 2014-07-09 14:47 - 00001613 _____ () C:\Users\Public\Desktop\Play League of Legends.lnk 2014-07-09 14:47 - 2014-07-09 14:47 - 00000000 ____D () C:\Riot Games 2014-07-09 14:47 - 2014-07-09 14:47 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\League of Legends 2014-07-09 14:47 - 2008-07-31 10:41 - 00068616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_1.dll 2014-07-09 14:47 - 2008-07-31 10:40 - 00509448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_2.dll 2014-07-09 14:47 - 2008-07-12 08:18 - 03851784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_39.dll 2014-07-09 14:47 - 2008-07-12 08:18 - 01493528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_39.dll 2014-07-09 14:47 - 2008-07-12 08:18 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_39.dll 2014-07-09 14:46 - 2014-07-09 14:46 - 00000000 ____D () C:\Program Files (x86)\Pando Networks 2014-07-09 14:45 - 2014-07-09 14:45 - 00000000 ____D () C:\Users\Jasmin\AppData\Roaming\Riot Games 2014-07-09 14:44 - 2014-04-30 00:32 - 01301504 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll 2014-07-09 14:44 - 2014-04-30 00:22 - 01023488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll 2014-07-09 14:44 - 2014-04-19 11:39 - 00628024 _____ (Microsoft Corporation) C:\Windows\system32\NotificationUI.exe 2014-07-09 14:44 - 2013-08-16 07:41 - 00058200 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dam.sys 2014-07-09 14:44 - 2013-08-16 07:39 - 02371728 _____ (Microsoft Corporation) C:\Windows\system32\WSService.dll 2014-07-09 14:44 - 2013-08-16 07:22 - 04917760 _____ (Microsoft Corporation) C:\Windows\system32\sppsvc.exe 2014-07-09 14:44 - 2013-08-16 07:21 - 01164288 _____ (Microsoft Corporation) C:\Windows\system32\sppobjs.dll 2014-07-09 14:44 - 2013-08-16 07:21 - 00368640 _____ (Microsoft Corporation) C:\Windows\system32\sppwinob.dll 2014-07-09 14:44 - 2013-08-16 07:21 - 00204800 _____ (Microsoft Corporation) C:\Windows\system32\WSClient.dll 2014-07-09 14:44 - 2013-08-16 07:21 - 00183808 _____ (Microsoft Corporation) C:\Windows\system32\WSSync.dll 2014-07-09 14:44 - 2013-08-16 07:21 - 00120320 _____ (Microsoft Corporation) C:\Windows\system32\sppc.dll 2014-07-09 14:44 - 2013-08-16 07:21 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\setupcln.dll 2014-07-09 14:44 - 2013-08-16 07:20 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll 2014-07-09 14:44 - 2013-08-16 00:43 - 00167424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSClient.dll 2014-07-09 14:44 - 2013-08-16 00:43 - 00159232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSSync.dll 2014-07-09 14:44 - 2013-08-16 00:43 - 00083968 _____ () C:\Windows\SysWOW64\OEMLicense.dll 2014-07-09 14:44 - 2013-08-16 00:42 - 00091648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sppc.dll 2014-07-09 14:44 - 2013-08-16 00:42 - 00076800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setupcln.dll 2014-07-09 14:43 - 2014-05-03 07:47 - 03246592 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll 2014-07-09 14:43 - 2014-05-03 05:34 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll 2014-07-09 14:43 - 2014-03-28 21:19 - 00035856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdBoot.sys 2014-07-09 14:43 - 2014-03-24 00:11 - 00269592 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdFilter.sys 2014-07-09 14:43 - 2013-10-10 13:53 - 00096600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wfplwfs.sys 2014-07-09 14:43 - 2013-10-10 11:21 - 01160192 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL 2014-07-09 14:43 - 2013-10-10 11:20 - 00723968 _____ (Microsoft Corporation) C:\Windows\system32\BFE.DLL 2014-07-09 14:43 - 2013-07-06 02:15 - 00652288 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll 2014-07-09 14:43 - 2013-07-04 04:13 - 00541696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comctl32.dll 2014-07-09 14:43 - 2013-06-10 21:16 - 00888832 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll 2014-07-09 14:43 - 2013-06-10 21:15 - 00381952 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL 2014-07-09 14:43 - 2013-06-10 21:10 - 00702464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nshwfp.dll 2014-07-09 14:43 - 2013-06-10 21:10 - 00245248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FWPUCLNT.DLL 2014-07-09 14:42 - 2014-07-09 14:42 - 00001178 _____ () C:\Users\Public\Desktop\TeamSpeak 3 Client.lnk 2014-07-09 14:42 - 2014-07-09 14:42 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamSpeak 3 Client 2014-07-09 14:42 - 2014-07-09 14:42 - 00000000 ____D () C:\Program Files (x86)\TeamSpeak 3 Client 2014-07-09 14:42 - 2014-05-03 08:34 - 06974808 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe 2014-07-09 14:42 - 2014-05-03 08:33 - 01824808 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll 2014-07-09 14:42 - 2014-05-03 06:51 - 01408976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll 2014-07-09 14:42 - 2014-05-02 00:37 - 01023488 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll 2014-07-09 14:42 - 2014-04-30 00:32 - 00126464 _____ (Microsoft Corporation) C:\Windows\system32\Robocopy.exe 2014-07-09 14:42 - 2014-04-30 00:32 - 00106496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Robocopy.exe 2014-07-09 14:42 - 2014-04-24 01:51 - 00566784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSShared.dll 2014-07-09 14:42 - 2014-04-24 01:51 - 00124928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll 2014-07-09 14:42 - 2014-04-24 01:38 - 00693760 _____ (Microsoft Corporation) C:\Windows\system32\WSShared.dll 2014-07-09 14:42 - 2014-04-24 01:38 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll 2014-07-09 14:42 - 2014-04-03 13:19 - 00328024 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Classpnp.sys 2014-07-09 14:42 - 2014-04-03 05:44 - 00619008 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys 2014-07-09 14:42 - 2014-04-01 00:08 - 00387268 _____ () C:\Windows\system32\ApnDatabase.xml 2014-07-09 14:42 - 2014-03-25 01:42 - 00305152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wusa.exe 2014-07-09 14:42 - 2014-03-25 00:56 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\wusa.exe 2014-07-09 14:42 - 2014-02-08 06:34 - 00071168 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hdaudbus.sys 2014-07-09 14:42 - 2014-01-31 02:48 - 00143872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.dll 2014-07-09 14:42 - 2014-01-13 01:30 - 02238976 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll 2014-07-09 14:42 - 2014-01-13 01:30 - 02032640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll 2014-07-09 14:42 - 2013-11-20 02:15 - 03842560 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll 2014-07-09 14:42 - 2013-11-20 01:57 - 03288576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll 2014-07-09 14:42 - 2013-10-19 07:45 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll 2014-07-09 14:42 - 2013-10-19 06:04 - 00059392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll 2014-07-09 14:42 - 2013-08-16 07:21 - 00198656 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.dll 2014-07-09 14:42 - 2013-07-25 01:10 - 10799104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.dll 2014-07-09 14:42 - 2013-07-25 01:07 - 13661696 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.dll 2014-07-09 14:42 - 2013-07-02 00:14 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbprint.sys 2014-07-09 14:42 - 2013-06-29 05:08 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidparse.sys 2014-07-09 14:41 - 2014-06-06 16:06 - 00596480 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll 2014-07-09 14:41 - 2014-06-06 12:17 - 00497152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll 2014-07-09 14:41 - 2014-04-03 13:22 - 02233176 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys 2014-07-09 14:41 - 2013-09-14 00:36 - 00247296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ubpm.dll 2014-07-09 14:41 - 2013-09-14 00:33 - 00328192 _____ (Microsoft Corporation) C:\Windows\system32\ubpm.dll 2014-07-09 14:41 - 2013-08-30 07:43 - 00061784 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\crashdmp.sys 2014-07-09 14:41 - 2013-08-30 07:20 - 01173504 _____ (Microsoft Corporation) C:\Windows\system32\UIAutomationCore.dll 2014-07-09 14:41 - 2013-08-30 01:48 - 00914432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIAutomationCore.dll 2014-07-09 14:41 - 2013-08-21 08:39 - 00465240 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fvevol.sys 2014-07-09 14:41 - 2013-08-16 07:21 - 00049664 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll 2014-07-09 14:41 - 2013-08-16 07:21 - 00049152 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll 2014-07-09 14:41 - 2013-08-16 00:43 - 00020992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll 2014-07-09 14:41 - 2013-08-10 08:30 - 00151896 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tpm.sys 2014-07-09 14:41 - 2013-07-13 08:18 - 00337408 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll 2014-07-09 14:41 - 2013-07-13 08:16 - 00068096 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll 2014-07-09 14:41 - 2013-07-13 08:15 - 00124416 _____ (Microsoft Corporation) C:\Windows\system32\apprepapi.dll 2014-07-09 14:41 - 2013-07-13 08:15 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\apprepsync.dll 2014-07-09 14:41 - 2013-07-13 06:24 - 00261120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll 2014-07-09 14:41 - 2013-07-13 06:23 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apprepapi.dll 2014-07-09 14:41 - 2013-07-13 06:23 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apprepsync.dll 2014-07-09 14:41 - 2013-07-09 10:04 - 00120144 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msgpioclx.sys 2014-07-09 14:41 - 2013-07-09 08:18 - 00439488 _____ (Microsoft Corporation) C:\Windows\system32\WerFault.exe 2014-07-09 14:41 - 2013-07-09 06:25 - 00385768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WerFault.exe 2014-07-09 14:41 - 2013-07-09 05:57 - 00245760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\LocationApi.dll 2014-07-09 14:41 - 2013-07-09 00:46 - 00543744 _____ (Microsoft Corporation) C:\Windows\system32\wwanmm.dll 2014-07-09 14:41 - 2013-07-09 00:46 - 00414208 _____ (Microsoft Corporation) C:\Windows\system32\wwanconn.dll 2014-07-09 14:41 - 2013-07-09 00:46 - 00370688 _____ (Microsoft Corporation) C:\Windows\system32\Wwanadvui.dll 2014-07-09 14:41 - 2013-07-09 00:45 - 00312832 _____ (Microsoft Corporation) C:\Windows\system32\LocationApi.dll 2014-07-09 14:41 - 2013-07-03 02:23 - 00391168 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.BackgroundTransfer.dll 2014-07-09 14:41 - 2013-07-03 02:22 - 02839552 _____ (Microsoft Corporation) C:\Windows\system32\msftedit.dll 2014-07-09 14:41 - 2013-07-03 02:11 - 00268800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Networking.BackgroundTransfer.dll 2014-07-09 14:41 - 2013-07-03 02:10 - 02273792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msftedit.dll 2014-07-09 14:41 - 2013-07-01 00:30 - 00067072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\openfiles.exe 2014-07-09 14:41 - 2013-07-01 00:29 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\openfiles.exe 2014-07-09 14:41 - 2013-06-29 08:15 - 00195416 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\sdbus.sys 2014-07-09 14:41 - 2013-06-29 08:15 - 00125784 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dumpsd.sys 2014-07-09 14:41 - 2013-06-26 05:01 - 00321536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\udfs.sys 2014-07-09 14:41 - 2013-06-26 04:59 - 00341504 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\HdAudio.sys 2014-07-09 14:41 - 2013-06-25 00:54 - 00447488 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll 2014-07-09 14:41 - 2013-06-25 00:54 - 00263680 _____ (Microsoft Corporation) C:\Windows\system32\wcmsvc.dll 2014-07-09 14:41 - 2013-06-25 00:54 - 00074240 _____ (Microsoft Corporation) C:\Windows\system32\wcmcsp.dll 2014-07-09 14:41 - 2013-06-19 07:36 - 00183808 _____ (Microsoft Corporation) C:\Windows\system32\winmmbase.dll 2014-07-09 14:41 - 2013-06-19 07:36 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\winmm.dll 2014-07-09 14:41 - 2013-06-19 00:38 - 00160256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winmmbase.dll 2014-07-09 14:41 - 2013-06-19 00:38 - 00125440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winmm.dll 2014-07-09 14:41 - 2013-06-12 01:43 - 00154112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WinSCard.dll 2014-07-09 14:41 - 2013-06-12 01:26 - 00230912 _____ (Microsoft Corporation) C:\Windows\system32\WinSCard.dll 2014-07-09 14:41 - 2013-06-06 10:03 - 00119040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBSTOR.SYS 2014-07-09 14:40 - 2014-04-12 11:27 - 00172888 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys 2014-07-09 14:40 - 2014-04-12 11:10 - 00578048 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe 2014-07-09 14:40 - 2014-04-12 11:09 - 01043968 _____ (Microsoft Corporation) C:\Windows\system32\usercpl.dll 2014-07-09 14:40 - 2014-04-12 11:09 - 00208896 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll 2014-07-09 14:40 - 2014-04-12 11:09 - 00094720 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll 2014-07-09 14:40 - 2014-04-12 11:08 - 00827904 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll 2014-07-09 14:40 - 2014-04-12 11:08 - 00318464 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll 2014-07-09 14:40 - 2014-04-12 11:07 - 00020480 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll 2014-07-09 14:40 - 2014-04-12 09:23 - 00961536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usercpl.dll 2014-07-09 14:40 - 2014-04-12 09:23 - 00273920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll 2014-07-09 14:40 - 2014-04-12 09:23 - 00178688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll 2014-07-09 14:40 - 2014-04-12 09:23 - 00076800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll 2014-07-09 14:40 - 2014-04-12 09:22 - 00666624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll 2014-07-09 14:40 - 2014-04-12 09:22 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll 2014-07-09 14:40 - 2014-04-12 08:58 - 00014848 _____ (Microsoft Corporation) C:\Windows\system32\workerdd.dll 2014-07-09 14:40 - 2014-03-11 05:25 - 00100184 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys 2014-07-09 14:40 - 2014-03-11 02:41 - 00559104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\objsel.dll 2014-07-09 14:40 - 2014-03-11 02:41 - 00323072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll 2014-07-09 14:40 - 2014-03-11 02:41 - 00038400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dimsroam.dll 2014-07-09 14:40 - 2014-03-11 02:39 - 00035840 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe 2014-07-09 14:40 - 2014-03-11 02:38 - 00982016 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll 2014-07-09 14:40 - 2014-03-11 02:38 - 00684032 _____ (Microsoft Corporation) C:\Windows\system32\objsel.dll 2014-07-09 14:40 - 2014-03-11 02:38 - 00419328 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll 2014-07-09 14:40 - 2014-03-11 02:38 - 00179712 _____ (Microsoft Corporation) C:\Windows\system32\dpapisrv.dll 2014-07-09 14:40 - 2014-03-11 02:38 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll 2014-07-09 14:40 - 2014-03-11 02:38 - 00045056 _____ (Microsoft Corporation) C:\Windows\system32\dimsroam.dll 2014-07-09 14:40 - 2014-03-11 02:38 - 00027648 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll 2014-07-09 14:40 - 2014-03-10 05:05 - 00668160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll 2014-07-09 14:40 - 2014-03-10 03:27 - 00099840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll 2014-07-09 14:40 - 2014-03-04 01:07 - 00570216 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys 2014-07-09 14:40 - 2013-10-31 07:56 - 00915968 _____ (Microsoft Corporation) C:\Windows\system32\MPSSVC.dll 2014-07-09 14:40 - 2013-10-31 07:56 - 00758784 _____ (Microsoft Corporation) C:\Windows\system32\FirewallAPI.dll 2014-07-09 14:40 - 2013-10-31 06:01 - 00550400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FirewallAPI.dll 2014-07-09 14:40 - 2013-10-31 05:42 - 00074752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mpsdrv.sys 2014-07-09 14:40 - 2013-10-13 22:49 - 00100696 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\disk.sys 2014-07-09 14:40 - 2013-10-10 11:32 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cscript.exe 2014-07-09 14:40 - 2013-10-10 11:30 - 00162304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scrobj.dll 2014-07-09 14:40 - 2013-10-10 11:30 - 00156160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scrrun.dll 2014-07-09 14:40 - 2013-10-10 11:24 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx 2014-07-09 14:40 - 2013-10-10 11:23 - 00146944 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe 2014-07-09 14:40 - 2013-10-10 11:22 - 00222720 _____ (Microsoft Corporation) C:\Windows\system32\scrobj.dll 2014-07-09 14:40 - 2013-10-10 11:22 - 00194048 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll 2014-07-09 14:40 - 2013-08-27 07:21 - 00227840 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll 2014-07-09 14:40 - 2013-08-27 07:19 - 00104448 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll 2014-07-09 14:40 - 2013-08-27 00:29 - 00199168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WebClnt.dll 2014-07-09 14:40 - 2013-08-27 00:28 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\davclnt.dll 2014-07-09 14:37 - 2014-07-01 00:42 - 00702464 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll 2014-07-09 14:37 - 2014-07-01 00:42 - 00394240 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll 2014-07-09 14:37 - 2014-07-01 00:42 - 00087552 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll 2014-07-09 14:37 - 2014-06-28 05:35 - 00556544 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll 2014-07-09 14:37 - 2013-11-23 08:43 - 00420864 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll 2014-07-09 14:37 - 2013-11-23 07:05 - 00368640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll 2014-07-09 14:37 - 2013-11-01 07:38 - 00312320 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll 2014-07-09 14:37 - 2013-11-01 05:49 - 00273408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msieftp.dll 2014-07-09 14:37 - 2013-08-23 09:22 - 02062848 _____ (Microsoft Corporation) C:\Windows\system32\d3d11.dll 2014-07-09 14:37 - 2013-08-23 03:44 - 01711616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll 2014-07-09 14:36 - 2014-03-28 10:23 - 01287168 _____ (Microsoft Corporation) C:\Windows\system32\schedsvc.dll 2014-07-09 14:36 - 2014-01-31 02:48 - 01339392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll 2014-07-09 14:36 - 2014-01-31 02:06 - 01628160 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll 2014-07-09 14:36 - 2013-12-05 01:43 - 00583680 _____ (Microsoft Corporation) C:\Windows\system32\msdrm.dll 2014-07-09 14:36 - 2013-12-05 01:37 - 00451072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdrm.dll 2014-07-09 14:36 - 2013-10-02 01:37 - 02035712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll 2014-07-09 14:36 - 2013-10-02 01:26 - 02304512 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll 2014-07-09 14:36 - 2013-08-02 08:28 - 10116608 _____ (Microsoft Corporation) C:\Windows\system32\twinui.dll 2014-07-09 14:36 - 2013-08-02 07:08 - 08858112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.dll 2014-07-09 14:36 - 2013-03-22 05:49 - 02382336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\esent.dll 2014-07-09 14:36 - 2013-03-22 00:47 - 02851840 _____ (Microsoft Corporation) C:\Windows\system32\esent.dll 2014-07-09 14:34 - 2014-06-18 01:27 - 01440256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\osk.exe 2014-07-09 14:34 - 2014-06-18 01:24 - 01557504 _____ (Microsoft Corporation) C:\Windows\system32\osk.exe 2014-07-09 14:34 - 2014-06-11 06:18 - 04038144 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2014-07-09 14:34 - 2014-05-30 01:31 - 00452608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SHCore.dll 2014-07-09 14:34 - 2014-05-30 01:03 - 00588288 _____ (Microsoft Corporation) C:\Windows\system32\SHCore.dll 2014-07-09 14:34 - 2014-05-30 01:02 - 01281536 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll 2014-07-09 14:34 - 2014-05-30 01:02 - 00439808 _____ (Microsoft Corporation) C:\Windows\system32\lsm.dll 2014-07-09 14:34 - 2014-03-28 10:23 - 19759104 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll 2014-07-09 14:34 - 2014-03-28 08:18 - 17562112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll 2014-07-09 14:33 - 2013-10-09 03:33 - 00059416 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe 2014-07-09 14:33 - 2013-10-09 00:30 - 00628736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll 2014-07-09 14:33 - 2013-10-09 00:30 - 00126976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll 2014-07-09 14:33 - 2013-10-09 00:30 - 00084992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll 2014-07-09 14:33 - 2013-10-09 00:30 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe 2014-07-09 14:33 - 2013-10-09 00:28 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe 2014-07-09 14:33 - 2013-10-09 00:27 - 03279872 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll 2014-07-09 14:33 - 2013-10-09 00:27 - 01622016 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll 2014-07-09 14:33 - 2013-10-09 00:27 - 00773120 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll 2014-07-09 14:33 - 2013-10-09 00:27 - 00252928 _____ (Microsoft Corporation) C:\Windows\system32\WUSettingsProvider.dll 2014-07-09 14:33 - 2013-10-09 00:27 - 00175104 _____ (Microsoft Corporation) C:\Windows\system32\storewuauth.dll 2014-07-09 14:33 - 2013-10-09 00:27 - 00142848 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll 2014-07-09 14:33 - 2013-10-09 00:27 - 00099328 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll 2014-07-09 14:33 - 2013-10-05 08:10 - 00285016 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\spaceport.sys 2014-07-09 14:33 - 2013-10-02 04:50 - 00447320 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBHUB3.SYS 2014-07-09 14:33 - 2013-09-28 07:48 - 00778752 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll 2014-07-09 14:33 - 2013-09-28 05:58 - 00551424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll 2014-07-09 14:33 - 2013-09-19 09:32 - 01455448 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys 2014-07-09 14:33 - 2013-08-30 07:19 - 00626688 _____ (Microsoft Corporation) C:\Windows\system32\resutils.dll 2014-07-09 14:33 - 2013-08-30 07:18 - 00374784 _____ (Microsoft Corporation) C:\Windows\system32\clusapi.dll 2014-07-09 14:33 - 2013-08-30 01:48 - 00488960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\resutils.dll 2014-07-09 14:33 - 2013-08-30 01:47 - 00302080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\clusapi.dll 2014-07-09 14:32 - 2014-07-09 14:32 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr 2014-07-09 14:32 - 2013-12-09 02:45 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2014-07-09 14:32 - 2013-12-09 01:59 - 00600064 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2014-07-09 14:31 - 2014-06-03 00:33 - 00265216 _____ (Microsoft Corporation) C:\Windows\system32\InkEd.dll 2014-07-09 14:31 - 2013-10-02 01:37 - 01569280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll 2014-07-09 14:31 - 2013-10-02 01:26 - 01890816 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll 2014-07-09 14:31 - 2013-08-07 07:15 - 00144896 _____ (Microsoft Corporation) C:\Windows\system32\tssdisai.dll 2014-07-09 14:31 - 2013-07-06 00:02 - 00099328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbcir.sys 2014-07-09 14:31 - 2013-07-06 00:01 - 00210560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbvideo.sys 2014-07-09 14:31 - 2013-06-22 07:45 - 00785624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys 2014-07-09 14:31 - 2013-06-22 07:45 - 00054488 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdfLdr.sys 2014-07-09 14:31 - 2013-05-24 01:02 - 01314816 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll 2014-07-09 14:31 - 2013-05-24 00:25 - 00694272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll 2014-07-09 14:29 - 2013-07-01 03:42 - 00623448 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys 2014-07-09 14:29 - 2013-07-01 03:42 - 00498008 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys 2014-07-09 14:29 - 2013-07-01 03:42 - 00079192 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys 2014-07-09 14:29 - 2013-07-01 03:42 - 00021848 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys 2014-07-09 14:29 - 2013-06-29 05:07 - 00032256 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys 2014-07-09 14:29 - 2013-06-29 05:06 - 00120832 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys 2014-07-09 14:29 - 2013-05-27 01:17 - 00035328 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll 2014-07-09 14:29 - 2013-05-27 00:59 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll 2014-07-09 14:29 - 2013-05-25 05:15 - 00362496 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll 2014-07-09 14:29 - 2013-05-25 04:32 - 00300032 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll 2014-07-09 14:27 - 2013-07-20 00:13 - 00124112 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll 2014-07-09 14:27 - 2013-07-20 00:13 - 00102608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll 2014-07-09 14:26 - 2013-07-02 03:41 - 00337752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBXHCI.SYS 2014-07-09 14:26 - 2013-07-02 03:41 - 00213336 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\UCX01000.SYS 2014-07-09 14:25 - 2014-07-09 14:25 - 00000000 ____D () C:\Users\Jasmin\AppData\Roaming\AVAST Software 2014-07-09 14:25 - 2014-05-30 00:24 - 00576512 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys 2014-07-09 14:23 - 2014-07-09 14:32 - 00003924 _____ () C:\Windows\System32\Tasks\avast! Emergency Update 2014-07-09 14:23 - 2014-07-09 14:23 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome 2014-07-09 14:23 - 2014-07-09 14:23 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast 2014-07-09 14:23 - 2014-03-07 02:47 - 01419264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll 2014-07-09 14:23 - 2014-03-07 02:08 - 01845760 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll 2014-07-09 14:23 - 2013-09-28 05:35 - 00288768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys 2014-07-09 14:12 - 2014-07-13 00:16 - 00001124 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2014-07-09 14:12 - 2014-07-12 23:22 - 00001128 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2014-07-09 14:12 - 2014-07-09 15:17 - 00004100 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA 2014-07-09 14:12 - 2014-07-09 15:17 - 00003864 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore 2014-07-09 14:12 - 2014-07-09 14:32 - 01041168 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsnx.sys 2014-07-09 14:12 - 2014-07-09 14:32 - 00427360 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsp.sys 2014-07-09 14:12 - 2014-07-09 14:32 - 00307344 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe 2014-07-09 14:12 - 2014-07-09 14:32 - 00224896 _____ () C:\Windows\system32\Drivers\aswVmm.sys 2014-07-09 14:12 - 2014-07-09 14:32 - 00093568 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys 2014-07-09 14:12 - 2014-07-09 14:32 - 00092008 _____ (AVAST Software) C:\Windows\system32\Drivers\aswstm.sys 2014-07-09 14:12 - 2014-07-09 14:32 - 00079184 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys 2014-07-09 14:12 - 2014-07-09 14:32 - 00065776 _____ () C:\Windows\system32\Drivers\aswRvrt.sys 2014-07-09 14:12 - 2014-07-09 14:32 - 00029208 _____ () C:\Windows\system32\Drivers\aswHwid.sys 2014-07-09 14:12 - 2014-07-09 14:25 - 00000000 ____D () C:\Users\Jasmin\AppData\Local\Google 2014-07-09 14:12 - 2014-07-09 14:22 - 00000000 ____D () C:\Program Files (x86)\Google 2014-07-09 14:12 - 2014-07-09 14:12 - 01039096 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsnx.sys.1404908618500 2014-07-09 14:12 - 2014-07-09 14:12 - 00423240 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsp.sys.1404908618500 2014-07-09 14:12 - 2014-07-09 14:12 - 00085328 _____ (AVAST Software) C:\Windows\system32\Drivers\aswstm.sys.1404908618500 2014-07-09 14:11 - 2014-07-09 14:11 - 00000000 ____D () C:\ProgramData\AVAST Software 2014-07-09 14:11 - 2014-07-09 14:11 - 00000000 ____D () C:\Program Files\AVAST Software 2014-07-09 14:10 - 2014-03-01 11:47 - 01258496 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll 2014-07-09 14:10 - 2014-03-01 11:47 - 01120768 _____ (Microsoft Corporation) C:\Windows\system32\gpedit.dll 2014-07-09 14:10 - 2014-03-01 10:07 - 01075200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gpedit.dll 2014-07-09 14:10 - 2014-03-01 08:59 - 00974848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll 2014-07-09 14:10 - 2014-02-27 01:18 - 00370688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys 2014-07-09 14:10 - 2014-02-27 01:18 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys 2014-07-09 14:10 - 2014-02-27 01:18 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys 2014-07-09 14:10 - 2014-02-15 06:15 - 00078336 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\IPMIDrv.sys 2014-07-09 14:10 - 2013-11-26 01:17 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidclass.sys 2014-07-09 14:07 - 2014-07-13 00:18 - 00000000 ____D () C:\Users\Jasmin\AppData\Roaming\.minecraft 2014-07-09 14:07 - 2014-07-09 14:07 - 00000000 ____D () C:\ProgramData\Oracle 2014-07-09 14:06 - 2014-07-09 14:06 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe 2014-07-09 14:06 - 2014-07-09 14:06 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe 2014-07-09 14:06 - 2014-07-09 14:06 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe 2014-07-09 14:06 - 2014-07-09 14:06 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll 2014-07-09 14:06 - 2014-07-09 14:06 - 00000000 ____D () C:\ProgramData\Sun 2014-07-09 14:06 - 2014-07-09 14:06 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java 2014-07-09 14:06 - 2014-07-09 14:06 - 00000000 ____D () C:\Program Files (x86)\Java 2014-07-09 13:51 - 2014-07-09 13:51 - 00675988 _____ () C:\Users\Jasmin\Desktop\Minecraft.exe 2014-07-09 13:36 - 2014-07-09 13:37 - 00000000 ____D () C:\Users\Jasmin\AppData\Local\Mozilla 2014-07-09 13:36 - 2014-07-09 13:36 - 00000000 ____D () C:\ProgramData\Mozilla 2014-07-09 13:25 - 2012-11-20 12:48 - 02213776 _____ (ELAN Microelectronics Corp.) C:\Windows\ETDUninst.dll 2014-07-09 13:24 - 2014-07-11 15:29 - 00003600 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1733027970-2465188296-4133737029-1001 2014-07-09 13:21 - 2014-07-11 23:06 - 00000000 ____D () C:\Users\Jasmin\AppData\Local\CrashDumps 2014-07-09 13:17 - 2014-07-09 13:17 - 00001454 _____ () C:\Users\Jasmin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2014-07-09 13:17 - 2014-07-09 13:17 - 00000000 ____D () C:\Windows\System32\Tasks\WPD 2014-07-09 13:17 - 2014-07-09 13:17 - 00000000 ____D () C:\Users\Jasmin\AppData\Roaming\Adobe 2014-07-09 13:16 - 2014-07-09 13:16 - 00000000 ____D () C:\Users\Jasmin\AppData\Roaming\lm 2014-07-09 13:15 - 2014-07-11 22:08 - 00000000 ____D () C:\Users\Jasmin\AppData\Local\VirtualStore 2014-07-09 13:14 - 2014-07-13 00:09 - 00000000 ____D () C:\Users\Jasmin 2014-07-09 13:14 - 2014-07-10 23:06 - 00000000 ____D () C:\Users\Jasmin\AppData\Local\Packages 2014-07-09 13:14 - 2014-07-09 13:14 - 00000020 ___SH () C:\Users\Jasmin\ntuser.ini 2014-07-09 13:14 - 2014-07-09 13:14 - 00000000 _SHDL () C:\Users\Jasmin\Vorlagen 2014-07-09 13:14 - 2014-07-09 13:14 - 00000000 _SHDL () C:\Users\Jasmin\Startmenü 2014-07-09 13:14 - 2014-07-09 13:14 - 00000000 _SHDL () C:\Users\Jasmin\Netzwerkumgebung 2014-07-09 13:14 - 2014-07-09 13:14 - 00000000 _SHDL () C:\Users\Jasmin\Lokale Einstellungen 2014-07-09 13:14 - 2014-07-09 13:14 - 00000000 _SHDL () C:\Users\Jasmin\Eigene Dateien 2014-07-09 13:14 - 2014-07-09 13:14 - 00000000 _SHDL () C:\Users\Jasmin\Druckumgebung 2014-07-09 13:14 - 2014-07-09 13:14 - 00000000 _SHDL () C:\Users\Jasmin\Documents\Eigene Musik 2014-07-09 13:14 - 2014-07-09 13:14 - 00000000 _SHDL () C:\Users\Jasmin\Documents\Eigene Bilder 2014-07-09 13:14 - 2014-07-09 13:14 - 00000000 _SHDL () C:\Users\Jasmin\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-07-09 13:14 - 2014-07-09 13:14 - 00000000 _SHDL () C:\Users\Jasmin\AppData\Local\Verlauf 2014-07-09 13:14 - 2014-07-09 13:14 - 00000000 _SHDL () C:\Users\Jasmin\AppData\Local\Anwendungsdaten 2014-07-09 13:14 - 2014-07-09 13:14 - 00000000 _SHDL () C:\Users\Jasmin\Anwendungsdaten 2014-07-09 13:14 - 2014-07-03 12:42 - 00000000 ___RD () C:\Users\Jasmin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools 2014-07-09 13:14 - 2014-05-26 14:00 - 00000000 ___RD () C:\Users\Jasmin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility 2014-07-09 13:14 - 2012-07-26 10:13 - 00000000 ___RD () C:\Users\Jasmin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories 2014-07-09 13:14 - 2012-07-26 10:13 - 00000000 ____D () C:\Users\Jasmin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance 2014-07-03 22:24 - 2014-07-10 23:33 - 00753134 _____ () C:\Windows\system32\perfh007.dat 2014-07-03 22:24 - 2014-07-10 23:33 - 00155826 _____ () C:\Windows\system32\perfc007.dat 2014-07-03 22:24 - 2014-07-03 22:24 - 00305546 _____ () C:\Windows\system32\perfi007.dat 2014-07-03 22:24 - 2014-07-03 22:24 - 00040390 _____ () C:\Windows\system32\perfd007.dat 2014-07-03 22:24 - 2014-07-03 22:24 - 00000000 ___HD () C:\sources 2014-07-03 22:24 - 2014-07-03 22:24 - 00000000 ____D () C:\Windows\SysWOW64\XPSViewer 2014-07-03 22:24 - 2014-07-03 22:24 - 00000000 ____D () C:\Windows\SysWOW64\de 2014-07-03 22:24 - 2014-07-03 22:24 - 00000000 ____D () C:\Windows\SysWOW64\0407 2014-07-03 22:24 - 2014-07-03 22:24 - 00000000 ____D () C:\Windows\system32\de 2014-07-03 22:24 - 2014-07-03 22:24 - 00000000 ____D () C:\Windows\system32\0407 2014-07-03 22:18 - 2014-07-03 22:18 - 00000000 ____D () C:\Windows\NAPP_Dism_Log 2014-07-03 13:49 - 2014-07-03 13:49 - 00000000 ____D () C:\ProgramData\OEM_YAHOO 2014-07-03 13:49 - 2014-07-03 13:49 - 00000000 ____D () C:\Program Files\Preload 2014-07-03 13:45 - 2014-07-03 13:45 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Musik 2014-07-03 13:45 - 2014-07-03 13:45 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Bilder 2014-07-03 13:45 - 2014-07-03 13:45 - 00000000 _SHDL () C:\Users\Default\Vorlagen 2014-07-03 13:45 - 2014-07-03 13:45 - 00000000 _SHDL () C:\Users\Default\Startmenü 2014-07-03 13:45 - 2014-07-03 13:45 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung 2014-07-03 13:45 - 2014-07-03 13:45 - 00000000 _SHDL () C:\Users\Default\Lokale Einstellungen 2014-07-03 13:45 - 2014-07-03 13:45 - 00000000 _SHDL () C:\Users\Default\Eigene Dateien 2014-07-03 13:45 - 2014-07-03 13:45 - 00000000 _SHDL () C:\Users\Default\Druckumgebung 2014-07-03 13:45 - 2014-07-03 13:45 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik 2014-07-03 13:45 - 2014-07-03 13:45 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder 2014-07-03 13:45 - 2014-07-03 13:45 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-07-03 13:45 - 2014-07-03 13:45 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf 2014-07-03 13:45 - 2014-07-03 13:45 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Anwendungsdaten 2014-07-03 13:45 - 2014-07-03 13:45 - 00000000 _SHDL () C:\Users\Default\Anwendungsdaten 2014-07-03 13:45 - 2014-07-03 13:45 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik 2014-07-03 13:45 - 2014-07-03 13:45 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder 2014-07-03 13:45 - 2014-07-03 13:45 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-07-03 13:45 - 2014-07-03 13:45 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf 2014-07-03 13:45 - 2014-07-03 13:45 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Anwendungsdaten 2014-07-03 13:45 - 2014-07-03 13:45 - 00000000 _SHDL () C:\Programme 2014-07-03 13:45 - 2014-07-03 13:45 - 00000000 _SHDL () C:\ProgramData\Vorlagen 2014-07-03 13:45 - 2014-07-03 13:45 - 00000000 _SHDL () C:\ProgramData\Startmenü 2014-07-03 13:45 - 2014-07-03 13:45 - 00000000 _SHDL () C:\ProgramData\Microsoft\Windows\Start Menu\Programme 2014-07-03 13:45 - 2014-07-03 13:45 - 00000000 _SHDL () C:\ProgramData\Dokumente 2014-07-03 13:45 - 2014-07-03 13:45 - 00000000 _SHDL () C:\ProgramData\Anwendungsdaten 2014-07-03 13:45 - 2014-07-03 13:45 - 00000000 _SHDL () C:\Program Files\Gemeinsame Dateien 2014-07-03 13:45 - 2014-07-03 13:45 - 00000000 _SHDL () C:\Dokumente und Einstellungen 2014-07-03 13:19 - 2014-07-03 13:19 - 00003596 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1733027970-2465188296-4133737029-500 2014-07-03 13:11 - 2014-07-03 13:11 - 00002946 _____ () C:\Windows\System32\Tasks\Power Management 2014-07-03 13:11 - 2014-07-03 13:11 - 00000000 ____D () C:\ProgramData\OEM 2014-07-03 13:10 - 2014-07-03 13:10 - 00000000 ____D () C:\ProgramData\Symantec 2014-07-03 13:09 - 2014-07-03 13:09 - 00000000 ____D () C:\Program Files (x86)\Microsoft Office 2014-07-03 13:09 - 2013-02-20 19:44 - 00002004 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office.lnk 2014-07-03 13:06 - 2014-07-09 13:24 - 00000000 ____D () C:\Users\Public\CyberLink 2014-07-03 13:06 - 2014-07-09 13:24 - 00000000 ____D () C:\ProgramData\CyberLink 2014-07-03 13:06 - 2014-07-03 13:06 - 00000000 ____D () C:\ProgramData\CLSK 2014-07-03 13:04 - 2014-07-03 13:05 - 00000000 ____D () C:\ProgramData\Temp 2014-07-03 13:04 - 2014-07-03 13:04 - 00000000 ____D () C:\ProgramData\install_clap 2014-07-03 13:02 - 2014-07-03 13:02 - 00000040 _____ () C:\Windows\spotify.preload 2014-07-03 12:58 - 2014-07-03 12:58 - 04398192 _____ (Broadcom Corporation) C:\Windows\system32\bcmihvsrv64.dll 2014-07-03 12:58 - 2014-07-03 12:58 - 03664736 _____ (Broadcom Corporation) C:\Windows\system32\bcmihvui64.dll 2014-07-03 12:56 - 2014-07-03 12:56 - 00000000 ____D () C:\Windows\SysWOW64\RTCOM 2014-07-03 12:55 - 2014-07-03 12:56 - 00000000 ___HD () C:\Program Files (x86)\Temp 2014-07-03 12:55 - 2014-07-03 12:55 - 00000000 ____D () C:\Program Files\Realtek 2014-07-03 12:55 - 2014-07-03 12:55 - 00000000 ____D () C:\Program Files (x86)\Realtek 2014-07-03 12:55 - 2012-06-28 03:31 - 00016494 _____ () C:\Windows\system32\Drivers\RtPCEE4.DAT 2014-07-03 12:55 - 2012-06-12 12:10 - 04060560 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RTKVHD64.sys 2014-07-03 12:55 - 2012-06-11 08:44 - 00290813 _____ () C:\Windows\system32\Drivers\RTAIODAT.DAT 2014-07-03 12:55 - 2012-06-08 10:18 - 03615888 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkAPO64.dll 2014-07-03 12:55 - 2012-06-06 05:14 - 00584320 _____ (Sony Corporation) C:\Windows\system32\SFSS_APO.dll 2014-07-03 12:55 - 2012-06-06 04:44 - 00869520 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkApi64.dll 2014-07-03 12:55 - 2012-06-05 05:38 - 05096448 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoRes64.dat 2014-07-03 12:55 - 2012-06-01 03:37 - 02674320 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtPgEx64.dll 2014-07-03 12:55 - 2012-05-31 12:08 - 00105616 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoInstII64.dll 2014-07-03 12:55 - 2012-05-25 12:06 - 01706640 _____ (Realtek Semiconductor Corp.) C:\Windows\RtlExUpd.dll 2014-07-03 12:55 - 2012-05-17 05:29 - 07163744 _____ (Dolby Laboratories) C:\Windows\system32\R4EEP64A.dll 2014-07-03 12:55 - 2012-05-17 05:29 - 00433504 _____ (Dolby Laboratories) C:\Windows\system32\R4EED64A.dll 2014-07-03 12:55 - 2012-05-17 05:29 - 00141152 _____ (Dolby Laboratories) C:\Windows\system32\R4EEL64A.dll 2014-07-03 12:55 - 2012-05-17 05:29 - 00123744 _____ (Dolby Laboratories) C:\Windows\system32\R4EEA64A.dll 2014-07-03 12:55 - 2012-05-17 05:29 - 00074592 _____ (Dolby Laboratories) C:\Windows\system32\R4EEG64A.dll 2014-07-03 12:55 - 2012-05-10 09:22 - 01262696 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTCOM64.dll 2014-07-03 12:55 - 2012-04-10 08:40 - 02533952 _____ (Fortemedia Corporation) C:\Windows\system32\FMAPO64.dll 2014-07-03 12:55 - 2012-04-03 12:42 - 01345368 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRealtek264.dll 2014-07-03 12:55 - 2012-04-03 12:42 - 01015640 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPOShell64.dll 2014-07-03 12:55 - 2012-03-08 05:47 - 00202336 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAC64.dll 2014-07-03 12:55 - 2012-03-08 05:47 - 00108640 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAR64.dll 2014-07-03 12:55 - 2012-02-21 13:45 - 02605400 _____ (Waves Audio Ltd.) C:\Windows\system32\WavesGUILib.dll 2014-07-03 12:55 - 2012-02-17 09:54 - 00396632 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVolumeSDAPO.dll 2014-07-03 12:55 - 2012-02-13 18:05 - 08363864 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRealtek.dll 2014-07-03 12:55 - 2012-02-06 09:04 - 00000712 _____ () C:\Windows\system32\Drivers\RTEQEX0.dat 2014-07-03 12:55 - 2012-01-30 05:43 - 00836544 _____ (TOSHIBA Corporation) C:\Windows\system32\tadefxapo264.dll 2014-07-03 12:55 - 2012-01-23 16:30 - 00537456 _____ (DTS) C:\Windows\system32\DTSU2PLFX64.dll 2014-07-03 12:55 - 2012-01-23 16:30 - 00524656 _____ (DTS) C:\Windows\system32\DTSU2PGFX64.dll 2014-07-03 12:55 - 2012-01-23 16:30 - 00449392 _____ (DTS) C:\Windows\system32\DTSU2PREC64.dll 2014-07-03 12:55 - 2012-01-10 04:20 - 00065944 _____ (TOSHIBA CORPORATION.) C:\Windows\system32\tepeqapo64.dll 2014-07-03 12:55 - 2011-12-20 09:32 - 00331880 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtlCPAPI64.dll 2014-07-03 12:55 - 2011-12-18 11:58 - 02131288 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioEQ.dll 2014-07-03 12:55 - 2011-12-13 10:58 - 01560168 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTSnMg64.cpl 2014-07-03 12:55 - 2011-11-22 10:28 - 00014952 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCoLDR64.dll 2014-07-03 12:55 - 2011-09-26 16:41 - 00000024 _____ () C:\Windows\system32\Drivers\rtkhdaud.dat 2014-07-03 12:55 - 2011-09-02 08:21 - 00221024 _____ (Synopsys, Inc.) C:\Windows\system32\SFNHK64.dll 2014-07-03 12:55 - 2011-09-02 08:21 - 00081248 _____ (Synopsys, Inc.) C:\Windows\system32\SFCOM64.dll 2014-07-03 12:55 - 2011-09-02 08:21 - 00078688 _____ (Synopsys, Inc.) C:\Windows\system32\SFAPO64.dll 2014-07-03 12:55 - 2011-08-23 11:00 - 00603984 _____ (Knowles Acoustics ) C:\Windows\system32\KAAPORT64.dll 2014-07-03 12:55 - 2011-05-31 03:42 - 01756264 _____ (DTS) C:\Windows\system32\DTSS2SpeakerDLL64.dll 2014-07-03 12:55 - 2011-05-31 03:42 - 01568360 _____ (DTS) C:\Windows\system32\DTSS2HeadphoneDLL64.dll 2014-07-03 12:55 - 2011-05-31 03:42 - 01486952 _____ (DTS) C:\Windows\system32\DTSBoostDLL64.dll 2014-07-03 12:55 - 2011-05-31 03:42 - 00728680 _____ (DTS) C:\Windows\system32\DTSBassEnhancementDLL64.dll 2014-07-03 12:55 - 2011-05-31 03:42 - 00712296 _____ (DTS) C:\Windows\system32\DTSSymmetryDLL64.dll 2014-07-03 12:55 - 2011-05-31 03:42 - 00693352 _____ (DTS) C:\Windows\system32\DTSVoiceClarityDLL64.dll 2014-07-03 12:55 - 2011-05-31 03:42 - 00491112 _____ (DTS) C:\Windows\system32\DTSNeoPCDLL64.dll 2014-07-03 12:55 - 2011-05-31 03:42 - 00432744 _____ (DTS) C:\Windows\system32\DTSLimiterDLL64.dll 2014-07-03 12:55 - 2011-05-31 03:42 - 00428648 _____ (DTS) C:\Windows\system32\DTSGainCompensatorDLL64.dll 2014-07-03 12:55 - 2011-05-31 03:42 - 00242792 _____ (DTS) C:\Windows\system32\DTSLFXAPO64.dll 2014-07-03 12:55 - 2011-05-31 03:42 - 00242792 _____ (DTS) C:\Windows\system32\DTSGFXAPO64.dll 2014-07-03 12:55 - 2011-05-31 03:42 - 00241768 _____ (DTS) C:\Windows\system32\DTSGFXAPONS64.dll 2014-07-03 12:55 - 2011-03-17 06:17 - 01361336 _____ (TOSHIBA Corporation) C:\Windows\system32\tosade.dll 2014-07-03 12:55 - 2011-03-07 11:11 - 00148416 _____ (TOSHIBA Corporation) C:\Windows\system32\tadefxapo.dll 2014-07-03 12:55 - 2010-11-08 01:31 - 00375128 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEP64A.dll 2014-07-03 12:55 - 2010-11-08 01:31 - 00310104 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DHT64.dll 2014-07-03 12:55 - 2010-11-08 01:31 - 00310104 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DAA64.dll 2014-07-03 12:55 - 2010-11-08 01:31 - 00204120 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEED64A.dll 2014-07-03 12:55 - 2010-11-08 01:31 - 00101208 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEL64A.dll 2014-07-03 12:55 - 2010-11-08 01:31 - 00078680 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEG64A.dll 2014-07-03 12:55 - 2010-11-03 12:30 - 00149608 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCfg64.dll 2014-07-03 12:55 - 2010-10-03 07:46 - 00341336 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO30.dll 2014-07-03 12:55 - 2010-09-27 03:34 - 00318808 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO20.dll 2014-07-03 12:55 - 2010-09-23 11:21 - 00039672 _____ () C:\Windows\system32\Drivers\RtPCEE3.DAT 2014-07-03 12:55 - 2010-07-22 10:48 - 00074064 _____ (Virage Logic Corporation / Sonic Focus) C:\Windows\SysWOW64\SFCOM.dll 2014-07-03 12:55 - 2010-03-22 07:21 - 00247560 _____ () C:\Windows\system32\Drivers\RTConvEQ.dat 2014-07-03 12:55 - 2010-03-22 07:21 - 00001448 _____ () C:\Windows\system32\Drivers\RtHdatEx.dat 2014-07-03 12:55 - 2010-02-11 09:45 - 00000176 _____ () C:\Windows\system32\Drivers\RTHDAEQ1.dat 2014-07-03 12:55 - 2010-01-26 15:52 - 00000520 _____ () C:\Windows\system32\Drivers\RTEQEX3.dat 2014-07-03 12:55 - 2009-11-24 03:55 - 00518896 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSX64.dll 2014-07-03 12:55 - 2009-11-24 03:55 - 00211184 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSH64.dll 2014-07-03 12:55 - 2009-11-24 03:55 - 00198896 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSHP64.dll 2014-07-03 12:55 - 2009-11-24 03:55 - 00155888 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSWOW64.dll 2014-07-03 12:55 - 2008-08-21 07:43 - 00000520 _____ () C:\Windows\system32\Drivers\RTEQEX2.dat 2014-07-03 12:55 - 2005-06-26 23:29 - 00000520 _____ () C:\Windows\system32\Drivers\RTEQEX1.dat 2014-07-03 12:53 - 2014-07-03 12:53 - 00284240 _____ (Dritek System Inc.) C:\Windows\UnInstRfBtn.EXE 2014-07-03 12:53 - 2014-07-03 12:53 - 00096880 _____ (Dritek System INC.) C:\Windows\RfBtnSvc64.exe 2014-07-03 12:53 - 2014-07-03 12:53 - 00026736 _____ (Dritek System Inc.) C:\Windows\system32\Drivers\aPs2Kb2Hid.sys 2014-07-03 12:53 - 2014-07-03 12:53 - 00000186 _____ () C:\Windows\UnInstRfBtn.UNI 2014-07-03 12:53 - 2014-07-03 12:53 - 00000000 ____D () C:\Program Files (x86)\RadioController 2014-07-03 12:52 - 2014-07-03 12:52 - 00000000 ____D () C:\Program Files\Intel 2014-07-03 12:52 - 2012-06-22 02:13 - 00015168 _____ (Intel Corporation) C:\Windows\system32\Drivers\IntelMEFWVer.dll 2014-07-03 12:51 - 2014-07-03 12:51 - 00000184 _____ () C:\Windows\LMv7.UNI 2014-07-03 12:50 - 2014-07-03 12:51 - 00000000 ____D () C:\Program Files (x86)\Launch Manager 2014-07-03 12:49 - 2014-07-03 12:49 - 00000000 ____D () C:\Windows\Downloaded Installations 2014-07-03 12:47 - 2012-07-04 04:55 - 00053248 _____ (Windows XP Bundled build C-Centric Single User) C:\Windows\SysWOW64\CSVer.dll 2014-07-03 12:46 - 2014-07-03 13:04 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information 2014-07-03 12:46 - 2012-08-16 13:33 - 00645952 _____ (Intel Corporation) C:\Windows\system32\Drivers\iaStorA.sys 2014-07-03 12:44 - 2012-11-10 06:23 - 00148480 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe 2014-07-03 12:44 - 2012-11-10 06:23 - 00132608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\poqexec.exe 2014-07-03 12:44 - 2012-11-10 06:22 - 00126976 _____ (Microsoft Corporation) C:\Windows\system32\RDWebAI.dll 2014-07-03 12:44 - 2012-11-10 06:22 - 00122880 _____ (Microsoft Corporation) C:\Windows\system32\VmHostAI.dll 2014-07-03 12:44 - 2012-11-10 06:20 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\appserverai.dll 2014-07-03 12:41 - 2014-07-13 00:07 - 01806352 _____ () C:\Windows\WindowsUpdate.log 2014-07-03 12:37 - 2014-07-03 12:37 - 00015820 _____ () C:\Windows\system32\results.xml 2014-07-03 12:35 - 2014-07-03 12:52 - 00000000 ____D () C:\ProgramData\Intel 2014-07-03 12:35 - 2014-07-03 12:35 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel 2014-07-03 12:34 - 2014-07-03 12:52 - 00000000 ____D () C:\Program Files (x86)\Intel 2014-07-03 12:34 - 2014-07-03 12:34 - 00000000 ___HD () C:\Intel 2014-07-03 12:34 - 2012-10-23 20:37 - 00056832 _____ (Khronos Group) C:\Windows\system32\OpenCL.DLL 2014-07-03 12:34 - 2012-10-23 20:37 - 00056320 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.DLL 2014-06-23 11:42 - 2014-06-23 11:42 - 00046136 ____H (LogMeIn Inc.) C:\Windows\system32\Drivers\Hamdrv.sys ==================== One Month Modified Files and Folders ======= 2014-07-13 00:19 - 2014-07-11 23:37 - 00000000 ____D () C:\FRST 2014-07-13 00:19 - 2014-07-10 19:46 - 00000000 ____D () C:\Users\Jasmin\Desktop\Programme 2014-07-13 00:18 - 2014-07-09 14:07 - 00000000 ____D () C:\Users\Jasmin\AppData\Roaming\.minecraft 2014-07-13 00:16 - 2014-07-10 13:14 - 00000000 ____D () C:\Users\Jasmin\AppData\Local\LogMeIn Hamachi 2014-07-13 00:16 - 2014-07-09 23:39 - 00000000 ____D () C:\Users\Jasmin\AppData\Local\Overwolf 2014-07-13 00:16 - 2014-07-09 14:12 - 00001124 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2014-07-13 00:15 - 2014-07-12 23:56 - 00010222 _____ () C:\zoek-results.log 2014-07-13 00:15 - 2012-07-26 09:22 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2014-07-13 00:14 - 2014-07-12 22:22 - 00001442 _____ () C:\Windows\PFRO.log 2014-07-13 00:14 - 2012-07-26 07:26 - 00262144 ___SH () C:\Windows\system32\config\BBI 2014-07-13 00:09 - 2014-07-12 23:55 - 00000000 ____D () C:\zoek_backup 2014-07-13 00:09 - 2014-07-09 13:14 - 00000000 ____D () C:\Users\Jasmin 2014-07-13 00:07 - 2014-07-03 12:41 - 01806352 _____ () C:\Windows\WindowsUpdate.log 2014-07-13 00:00 - 2012-07-26 10:12 - 00000000 ____D () C:\Windows\system32\sru 2014-07-12 23:55 - 2014-07-13 00:13 - 00024064 _____ () C:\Windows\zoek-delete.exe 2014-07-12 23:55 - 2014-07-12 23:55 - 01285120 _____ () C:\Users\Jasmin\Downloads\zoek.exe 2014-07-12 23:47 - 2014-07-09 20:57 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job 2014-07-12 23:22 - 2014-07-09 14:12 - 00001128 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2014-07-12 22:22 - 2014-07-11 14:47 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service 2014-07-12 22:21 - 2014-07-12 22:19 - 00000000 ____D () C:\AdwCleaner 2014-07-12 22:18 - 2014-07-12 22:18 - 01348263 _____ () C:\Users\Jasmin\Downloads\adwcleaner_3.215.exe 2014-07-12 21:51 - 2014-07-09 15:09 - 00000000 ____D () C:\Users\Jasmin\AppData\Roaming\TS3Client 2014-07-12 21:49 - 2014-07-12 21:49 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox 2014-07-12 21:28 - 2012-07-26 10:12 - 00000000 ____D () C:\Windows\AUInstallAgent 2014-07-12 20:53 - 2014-07-09 16:16 - 00000000 ____D () C:\Users\Jasmin\AppData\Roaming\DVDVideoSoft 2014-07-12 20:24 - 2014-07-09 17:27 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft 2014-07-12 20:24 - 2014-07-09 17:24 - 00000000 ____D () C:\Program Files (x86)\DVDVideoSoft 2014-07-12 19:55 - 2012-07-26 09:59 - 00000000 ____D () C:\Windows\CbsTemp 2014-07-11 23:51 - 2014-07-11 23:50 - 00000000 ____D () C:\Users\Jasmin\Downloads\SetUps 2014-07-11 23:51 - 2014-07-09 18:38 - 00000000 ____D () C:\Users\Jasmin\Desktop\Jasi 2014-07-11 23:50 - 2014-07-09 16:13 - 00043520 ___SH () C:\Users\Jasmin\Downloads\Thumbs.db 2014-07-11 23:32 - 2014-07-10 20:23 - 00000000 ____D () C:\Users\Jasmin\Desktop\Rinmaru 2014-07-11 23:06 - 2014-07-09 13:21 - 00000000 ____D () C:\Users\Jasmin\AppData\Local\CrashDumps 2014-07-11 23:06 - 2014-05-26 14:23 - 00000000 ____D () C:\Windows\Panther 2014-07-11 23:04 - 2014-07-11 23:04 - 00002774 _____ () C:\Windows\System32\Tasks\CCleanerSkipUAC 2014-07-11 23:04 - 2014-07-11 23:04 - 00000794 _____ () C:\Users\Public\Desktop\CCleaner.lnk 2014-07-11 23:04 - 2014-07-11 23:04 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner 2014-07-11 23:04 - 2014-07-11 23:04 - 00000000 ____D () C:\Program Files\CCleaner 2014-07-11 22:59 - 2014-07-11 14:47 - 00001175 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk 2014-07-11 22:59 - 2014-07-11 14:47 - 00001163 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk 2014-07-11 22:44 - 2014-07-11 22:43 - 00307760 _____ () C:\Windows\system32\FNTCACHE.DAT 2014-07-11 22:30 - 2014-07-11 22:30 - 00000000 ____D () C:\Users\Jasmin\Downloads\backups 2014-07-11 22:08 - 2014-07-09 13:15 - 00000000 ____D () C:\Users\Jasmin\AppData\Local\VirtualStore 2014-07-11 15:29 - 2014-07-09 13:24 - 00003600 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1733027970-2465188296-4133737029-1001 2014-07-11 14:48 - 2014-07-11 14:47 - 00000000 ____D () C:\Users\Jasmin\AppData\Roaming\Mozilla 2014-07-10 23:33 - 2014-07-03 22:24 - 00753134 _____ () C:\Windows\system32\perfh007.dat 2014-07-10 23:33 - 2014-07-03 22:24 - 00155826 _____ () C:\Windows\system32\perfc007.dat 2014-07-10 23:33 - 2012-07-26 09:28 - 01745416 _____ () C:\Windows\system32\PerfStringBackup.INI 2014-07-10 23:06 - 2014-07-10 23:02 - 00000000 ___RD () C:\Windows\BrowserChoice 2014-07-10 23:06 - 2014-07-09 13:14 - 00000000 ____D () C:\Users\Jasmin\AppData\Local\Packages 2014-07-10 23:06 - 2014-05-26 13:31 - 00000000 ____D () C:\ProgramData\PRICache 2014-07-10 23:02 - 2014-07-10 23:02 - 00000000 ___SD () C:\Windows\system32\CompatTel 2014-07-10 23:02 - 2012-07-26 10:12 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools 2014-07-10 23:02 - 2012-07-26 10:12 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools 2014-07-10 23:02 - 2012-07-26 10:12 - 00000000 ____D () C:\Windows\WinStore 2014-07-10 23:02 - 2012-07-26 10:12 - 00000000 ____D () C:\Windows\PolicyDefinitions 2014-07-10 23:02 - 2012-07-26 10:12 - 00000000 ____D () C:\Program Files\Windows Defender 2014-07-10 23:02 - 2012-07-26 10:12 - 00000000 ____D () C:\Program Files\Common Files\microsoft shared 2014-07-10 23:02 - 2012-07-26 10:12 - 00000000 ____D () C:\Program Files (x86)\Windows Defender 2014-07-10 23:01 - 2012-07-26 07:38 - 00000000 ____D () C:\Windows\system32\oobe 2014-07-10 23:00 - 2012-07-26 10:12 - 00000000 ___RD () C:\Windows\ToastData 2014-07-10 22:53 - 2014-07-10 22:51 - 00000000 ____D () C:\Windows\system32\MRT 2014-07-10 22:51 - 2012-07-26 07:26 - 00262144 ___SH () C:\Windows\system32\config\ELAM 2014-07-10 22:27 - 2014-07-10 22:27 - 00000000 ___SD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenOffice 4.0.1 2014-07-10 22:26 - 2014-07-10 22:26 - 00000000 ____D () C:\Program Files (x86)\OpenOffice 4 2014-07-10 20:51 - 2012-07-26 10:12 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility 2014-07-10 20:51 - 2012-07-26 10:12 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility 2014-07-10 20:51 - 2012-07-26 10:12 - 00000000 ____D () C:\Windows\system32\SecureBootUpdates 2014-07-10 20:51 - 2012-07-26 09:52 - 00000000 ____D () C:\Program Files\Windows Journal 2014-07-10 19:49 - 2014-07-10 19:21 - 00000000 ____D () C:\Program Files\paint.net 2014-07-10 19:43 - 2014-07-10 19:20 - 00000000 ____D () C:\Users\Jasmin\AppData\Local\paint.net 2014-07-10 13:14 - 2014-07-10 13:14 - 00000000 ____D () C:\Users\Jasmin\AppData\Local\LogMeIn 2014-07-10 13:14 - 2014-07-10 13:14 - 00000000 ____D () C:\ProgramData\LogMeIn 2014-07-09 23:42 - 2014-07-09 23:42 - 00003728 _____ () C:\Windows\System32\Tasks\Overwolf Updater Task 2014-07-09 23:42 - 2014-07-09 23:42 - 00000000 ____D () C:\Users\Jasmin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Overwolf 2014-07-09 23:42 - 2014-07-09 23:42 - 00000000 ____D () C:\ProgramData\Overwolf 2014-07-09 23:42 - 2014-07-09 23:42 - 00000000 ____D () C:\Program Files (x86)\Overwolf 2014-07-09 21:18 - 2014-07-09 21:18 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi 2014-07-09 21:18 - 2014-07-09 21:18 - 00000000 ____D () C:\Program Files (x86)\LogMeIn Hamachi 2014-07-09 21:02 - 2014-07-09 20:57 - 00003772 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater 2014-07-09 21:00 - 2014-07-09 21:00 - 00000000 ____D () C:\Users\Jasmin\AppData\Local\Macromedia 2014-07-09 20:57 - 2014-07-09 20:57 - 00000000 ____D () C:\ProgramData\McAfee 2014-07-09 17:28 - 2014-07-09 17:28 - 00000000 ____D () C:\Users\Jasmin\AppData\Roaming\Macromedia 2014-07-09 15:17 - 2014-07-09 14:12 - 00004100 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA 2014-07-09 15:17 - 2014-07-09 14:12 - 00003864 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore 2014-07-09 14:47 - 2014-07-09 14:47 - 00001613 _____ () C:\Users\Public\Desktop\Play League of Legends.lnk 2014-07-09 14:47 - 2014-07-09 14:47 - 00000000 ____D () C:\Riot Games 2014-07-09 14:47 - 2014-07-09 14:47 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\League of Legends 2014-07-09 14:46 - 2014-07-09 14:46 - 00000000 ____D () C:\Program Files (x86)\Pando Networks 2014-07-09 14:45 - 2014-07-09 14:45 - 00000000 ____D () C:\Users\Jasmin\AppData\Roaming\Riot Games 2014-07-09 14:42 - 2014-07-09 14:42 - 00001178 _____ () C:\Users\Public\Desktop\TeamSpeak 3 Client.lnk 2014-07-09 14:42 - 2014-07-09 14:42 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamSpeak 3 Client 2014-07-09 14:42 - 2014-07-09 14:42 - 00000000 ____D () C:\Program Files (x86)\TeamSpeak 3 Client 2014-07-09 14:32 - 2014-07-09 14:32 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr 2014-07-09 14:32 - 2014-07-09 14:23 - 00003924 _____ () C:\Windows\System32\Tasks\avast! Emergency Update 2014-07-09 14:32 - 2014-07-09 14:12 - 01041168 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsnx.sys 2014-07-09 14:32 - 2014-07-09 14:12 - 00427360 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsp.sys 2014-07-09 14:32 - 2014-07-09 14:12 - 00307344 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe 2014-07-09 14:32 - 2014-07-09 14:12 - 00224896 _____ () C:\Windows\system32\Drivers\aswVmm.sys 2014-07-09 14:32 - 2014-07-09 14:12 - 00093568 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys 2014-07-09 14:32 - 2014-07-09 14:12 - 00092008 _____ (AVAST Software) C:\Windows\system32\Drivers\aswstm.sys 2014-07-09 14:32 - 2014-07-09 14:12 - 00079184 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys 2014-07-09 14:32 - 2014-07-09 14:12 - 00065776 _____ () C:\Windows\system32\Drivers\aswRvrt.sys 2014-07-09 14:32 - 2014-07-09 14:12 - 00029208 _____ () C:\Windows\system32\Drivers\aswHwid.sys 2014-07-09 14:25 - 2014-07-09 14:25 - 00000000 ____D () C:\Users\Jasmin\AppData\Roaming\AVAST Software 2014-07-09 14:25 - 2014-07-09 14:12 - 00000000 ____D () C:\Users\Jasmin\AppData\Local\Google 2014-07-09 14:23 - 2014-07-09 14:23 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome 2014-07-09 14:23 - 2014-07-09 14:23 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast 2014-07-09 14:22 - 2014-07-09 14:12 - 00000000 ____D () C:\Program Files (x86)\Google 2014-07-09 14:12 - 2014-07-09 14:12 - 01039096 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsnx.sys.1404908618500 2014-07-09 14:12 - 2014-07-09 14:12 - 00423240 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsp.sys.1404908618500 2014-07-09 14:12 - 2014-07-09 14:12 - 00085328 _____ (AVAST Software) C:\Windows\system32\Drivers\aswstm.sys.1404908618500 2014-07-09 14:11 - 2014-07-09 14:11 - 00000000 ____D () C:\ProgramData\AVAST Software 2014-07-09 14:11 - 2014-07-09 14:11 - 00000000 ____D () C:\Program Files\AVAST Software 2014-07-09 14:07 - 2014-07-09 14:07 - 00000000 ____D () C:\ProgramData\Oracle 2014-07-09 14:06 - 2014-07-09 14:06 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe 2014-07-09 14:06 - 2014-07-09 14:06 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe 2014-07-09 14:06 - 2014-07-09 14:06 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe 2014-07-09 14:06 - 2014-07-09 14:06 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll 2014-07-09 14:06 - 2014-07-09 14:06 - 00000000 ____D () C:\ProgramData\Sun 2014-07-09 14:06 - 2014-07-09 14:06 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java 2014-07-09 14:06 - 2014-07-09 14:06 - 00000000 ____D () C:\Program Files (x86)\Java 2014-07-09 13:51 - 2014-07-09 13:51 - 00675988 _____ () C:\Users\Jasmin\Desktop\Minecraft.exe 2014-07-09 13:40 - 2014-05-26 14:07 - 00000000 ____D () C:\ProgramData\Norton 2014-07-09 13:39 - 2012-07-26 10:12 - 00000000 ___HD () C:\Windows\ELAMBKUP 2014-07-09 13:37 - 2014-07-09 13:36 - 00000000 ____D () C:\Users\Jasmin\AppData\Local\Mozilla 2014-07-09 13:37 - 2014-05-26 14:05 - 00000000 ____D () C:\ProgramData\Nero 2014-07-09 13:36 - 2014-07-09 13:36 - 00000000 ____D () C:\ProgramData\Mozilla 2014-07-09 13:24 - 2014-07-03 13:06 - 00000000 ____D () C:\Users\Public\CyberLink 2014-07-09 13:24 - 2014-07-03 13:06 - 00000000 ____D () C:\ProgramData\CyberLink 2014-07-09 13:21 - 2012-07-26 10:12 - 00000000 ____D () C:\Windows\system32\restore 2014-07-09 13:17 - 2014-07-09 13:17 - 00001454 _____ () C:\Users\Jasmin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2014-07-09 13:17 - 2014-07-09 13:17 - 00000000 ____D () C:\Windows\System32\Tasks\WPD 2014-07-09 13:17 - 2014-07-09 13:17 - 00000000 ____D () C:\Users\Jasmin\AppData\Roaming\Adobe 2014-07-09 13:16 - 2014-07-09 13:16 - 00000000 ____D () C:\Users\Jasmin\AppData\Roaming\lm 2014-07-09 13:14 - 2014-07-09 13:14 - 00000020 ___SH () C:\Users\Jasmin\ntuser.ini 2014-07-09 13:14 - 2014-07-09 13:14 - 00000000 _SHDL () C:\Users\Jasmin\Vorlagen 2014-07-09 13:14 - 2014-07-09 13:14 - 00000000 _SHDL () C:\Users\Jasmin\Startmenü 2014-07-09 13:14 - 2014-07-09 13:14 - 00000000 _SHDL () C:\Users\Jasmin\Netzwerkumgebung 2014-07-09 13:14 - 2014-07-09 13:14 - 00000000 _SHDL () C:\Users\Jasmin\Lokale Einstellungen 2014-07-09 13:14 - 2014-07-09 13:14 - 00000000 _SHDL () C:\Users\Jasmin\Eigene Dateien 2014-07-09 13:14 - 2014-07-09 13:14 - 00000000 _SHDL () C:\Users\Jasmin\Druckumgebung 2014-07-09 13:14 - 2014-07-09 13:14 - 00000000 _SHDL () C:\Users\Jasmin\Documents\Eigene Musik 2014-07-09 13:14 - 2014-07-09 13:14 - 00000000 _SHDL () C:\Users\Jasmin\Documents\Eigene Bilder 2014-07-09 13:14 - 2014-07-09 13:14 - 00000000 _SHDL () C:\Users\Jasmin\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-07-09 13:14 - 2014-07-09 13:14 - 00000000 _SHDL () C:\Users\Jasmin\AppData\Local\Verlauf 2014-07-09 13:14 - 2014-07-09 13:14 - 00000000 _SHDL () C:\Users\Jasmin\AppData\Local\Anwendungsdaten 2014-07-09 13:14 - 2014-07-09 13:14 - 00000000 _SHDL () C:\Users\Jasmin\Anwendungsdaten 2014-07-09 13:14 - 2012-07-26 10:12 - 00000000 ___RD () C:\Windows\ImmersiveControlPanel 2014-07-07 15:32 - 2012-07-26 10:12 - 00000000 ____D () C:\Windows\rescache 2014-07-07 12:20 - 2012-07-26 07:38 - 00000000 ____D () C:\Windows\system32\Sysprep 2014-07-03 23:43 - 2012-07-26 10:13 - 00262144 _____ () C:\Windows\system32\config\BCD-Template 2014-07-03 22:28 - 2012-07-26 10:12 - 00000000 ____D () C:\Windows\SysWOW64\MUI 2014-07-03 22:28 - 2012-07-26 10:12 - 00000000 ____D () C:\Windows\system32\MUI 2014-07-03 22:28 - 2012-07-26 09:49 - 00000000 ____D () C:\Windows\SysWOW64\winrm 2014-07-03 22:28 - 2012-07-26 09:49 - 00000000 ____D () C:\Windows\SysWOW64\WCN 2014-07-03 22:28 - 2012-07-26 09:49 - 00000000 ____D () C:\Windows\SysWOW64\sysprep 2014-07-03 22:28 - 2012-07-26 09:49 - 00000000 ____D () C:\Windows\SysWOW64\slmgr 2014-07-03 22:28 - 2012-07-26 09:49 - 00000000 ____D () C:\Windows\system32\winrm 2014-07-03 22:28 - 2012-07-26 09:49 - 00000000 ____D () C:\Windows\system32\WCN 2014-07-03 22:28 - 2012-07-26 09:49 - 00000000 ____D () C:\Windows\system32\slmgr 2014-07-03 22:28 - 2012-07-26 07:38 - 00000000 ____D () C:\Windows\SysWOW64\oobe 2014-07-03 22:28 - 2012-07-26 07:38 - 00000000 ____D () C:\Windows\system32\Dism 2014-07-03 22:24 - 2014-07-03 22:24 - 00305546 _____ () C:\Windows\system32\perfi007.dat 2014-07-03 22:24 - 2014-07-03 22:24 - 00040390 _____ () C:\Windows\system32\perfd007.dat 2014-07-03 22:24 - 2014-07-03 22:24 - 00000000 ___HD () C:\sources 2014-07-03 22:24 - 2014-07-03 22:24 - 00000000 ____D () C:\Windows\SysWOW64\XPSViewer 2014-07-03 22:24 - 2014-07-03 22:24 - 00000000 ____D () C:\Windows\SysWOW64\de 2014-07-03 22:24 - 2014-07-03 22:24 - 00000000 ____D () C:\Windows\SysWOW64\0407 2014-07-03 22:24 - 2014-07-03 22:24 - 00000000 ____D () C:\Windows\system32\de 2014-07-03 22:24 - 2014-07-03 22:24 - 00000000 ____D () C:\Windows\system32\0407 2014-07-03 22:24 - 2012-07-26 10:18 - 00000000 ____D () C:\Windows\DigitalLocker 2014-07-03 22:24 - 2012-07-26 10:12 - 00000000 ____D () C:\Windows\SysWOW64\setup 2014-07-03 22:24 - 2012-07-26 10:12 - 00000000 ____D () C:\Windows\SysWOW64\migwiz 2014-07-03 22:24 - 2012-07-26 10:12 - 00000000 ____D () C:\Windows\SysWOW64\Com 2014-07-03 22:24 - 2012-07-26 10:12 - 00000000 ____D () C:\Windows\system32\WinBioPlugIns 2014-07-03 22:24 - 2012-07-26 10:12 - 00000000 ____D () C:\Windows\system32\SystemResetPlatform 2014-07-03 22:24 - 2012-07-26 10:12 - 00000000 ____D () C:\Windows\system32\setup 2014-07-03 22:24 - 2012-07-26 10:12 - 00000000 ____D () C:\Windows\system32\migwiz 2014-07-03 22:24 - 2012-07-26 10:12 - 00000000 ____D () C:\Windows\system32\Com 2014-07-03 22:24 - 2012-07-26 10:12 - 00000000 ____D () C:\Windows\IME 2014-07-03 22:24 - 2012-07-26 10:12 - 00000000 ____D () C:\Program Files\Windows Photo Viewer 2014-07-03 22:24 - 2012-07-26 10:12 - 00000000 ____D () C:\Program Files\Common Files\System 2014-07-03 22:24 - 2012-07-26 10:12 - 00000000 ____D () C:\Program Files (x86)\Windows Photo Viewer 2014-07-03 22:24 - 2012-07-26 09:49 - 00000000 ____D () C:\Windows\SysWOW64\Printing_Admin_Scripts 2014-07-03 22:24 - 2012-07-26 09:49 - 00000000 ____D () C:\Windows\system32\Printing_Admin_Scripts 2014-07-03 22:24 - 2012-07-26 07:38 - 00000000 ____D () C:\Windows\SysWOW64\Dism 2014-07-03 22:18 - 2014-07-03 22:18 - 00000000 ____D () C:\Windows\NAPP_Dism_Log 2014-07-03 13:49 - 2014-07-03 13:49 - 00000000 ____D () C:\ProgramData\OEM_YAHOO 2014-07-03 13:49 - 2014-07-03 13:49 - 00000000 ____D () C:\Program Files\Preload 2014-07-03 13:49 - 2014-05-26 14:20 - 00000000 ___HD () C:\OEM 2014-07-03 13:45 - 2014-07-03 13:45 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Musik 2014-07-03 13:45 - 2014-07-03 13:45 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Bilder 2014-07-03 13:45 - 2014-07-03 13:45 - 00000000 _SHDL () C:\Users\Default\Vorlagen 2014-07-03 13:45 - 2014-07-03 13:45 - 00000000 _SHDL () C:\Users\Default\Startmenü 2014-07-03 13:45 - 2014-07-03 13:45 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung 2014-07-03 13:45 - 2014-07-03 13:45 - 00000000 _SHDL () C:\Users\Default\Lokale Einstellungen 2014-07-03 13:45 - 2014-07-03 13:45 - 00000000 _SHDL () C:\Users\Default\Eigene Dateien 2014-07-03 13:45 - 2014-07-03 13:45 - 00000000 _SHDL () C:\Users\Default\Druckumgebung 2014-07-03 13:45 - 2014-07-03 13:45 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik 2014-07-03 13:45 - 2014-07-03 13:45 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder 2014-07-03 13:45 - 2014-07-03 13:45 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-07-03 13:45 - 2014-07-03 13:45 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf 2014-07-03 13:45 - 2014-07-03 13:45 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Anwendungsdaten 2014-07-03 13:45 - 2014-07-03 13:45 - 00000000 _SHDL () C:\Users\Default\Anwendungsdaten 2014-07-03 13:45 - 2014-07-03 13:45 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik 2014-07-03 13:45 - 2014-07-03 13:45 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder 2014-07-03 13:45 - 2014-07-03 13:45 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-07-03 13:45 - 2014-07-03 13:45 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf 2014-07-03 13:45 - 2014-07-03 13:45 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Anwendungsdaten 2014-07-03 13:45 - 2014-07-03 13:45 - 00000000 _SHDL () C:\Programme 2014-07-03 13:45 - 2014-07-03 13:45 - 00000000 _SHDL () C:\ProgramData\Vorlagen 2014-07-03 13:45 - 2014-07-03 13:45 - 00000000 _SHDL () C:\ProgramData\Startmenü 2014-07-03 13:45 - 2014-07-03 13:45 - 00000000 _SHDL () C:\ProgramData\Microsoft\Windows\Start Menu\Programme 2014-07-03 13:45 - 2014-07-03 13:45 - 00000000 _SHDL () C:\ProgramData\Dokumente 2014-07-03 13:45 - 2014-07-03 13:45 - 00000000 _SHDL () C:\ProgramData\Anwendungsdaten 2014-07-03 13:45 - 2014-07-03 13:45 - 00000000 _SHDL () C:\Program Files\Gemeinsame Dateien 2014-07-03 13:45 - 2014-07-03 13:45 - 00000000 _SHDL () C:\Dokumente und Einstellungen 2014-07-03 13:45 - 2012-07-26 07:37 - 00000000 __RHD () C:\Users\Default 2014-07-03 13:23 - 2012-07-26 10:12 - 00000000 ____D () C:\Windows\system32\Recovery 2014-07-03 13:19 - 2014-07-03 13:19 - 00003596 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1733027970-2465188296-4133737029-500 2014-07-03 13:12 - 2014-05-26 14:04 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Packard Bell 2014-07-03 13:11 - 2014-07-03 13:11 - 00002946 _____ () C:\Windows\System32\Tasks\Power Management 2014-07-03 13:11 - 2014-07-03 13:11 - 00000000 ____D () C:\ProgramData\OEM 2014-07-03 13:11 - 2014-05-26 14:04 - 00000000 ____D () C:\Program Files\Packard Bell 2014-07-03 13:10 - 2014-07-03 13:10 - 00000000 ____D () C:\ProgramData\Symantec 2014-07-03 13:09 - 2014-07-03 13:09 - 00000000 ____D () C:\Program Files (x86)\Microsoft Office 2014-07-03 13:06 - 2014-07-03 13:06 - 00000000 ____D () C:\ProgramData\CLSK 2014-07-03 13:05 - 2014-07-03 13:04 - 00000000 ____D () C:\ProgramData\Temp 2014-07-03 13:04 - 2014-07-03 13:04 - 00000000 ____D () C:\ProgramData\install_clap 2014-07-03 13:04 - 2014-07-03 12:46 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information 2014-07-03 13:02 - 2014-07-03 13:02 - 00000040 _____ () C:\Windows\spotify.preload 2014-07-03 12:58 - 2014-07-03 12:58 - 04398192 _____ (Broadcom Corporation) C:\Windows\system32\bcmihvsrv64.dll 2014-07-03 12:58 - 2014-07-03 12:58 - 03664736 _____ (Broadcom Corporation) C:\Windows\system32\bcmihvui64.dll 2014-07-03 12:56 - 2014-07-03 12:56 - 00000000 ____D () C:\Windows\SysWOW64\RTCOM 2014-07-03 12:56 - 2014-07-03 12:55 - 00000000 ___HD () C:\Program Files (x86)\Temp 2014-07-03 12:55 - 2014-07-03 12:55 - 00000000 ____D () C:\Program Files\Realtek 2014-07-03 12:55 - 2014-07-03 12:55 - 00000000 ____D () C:\Program Files (x86)\Realtek 2014-07-03 12:53 - 2014-07-03 12:53 - 00284240 _____ (Dritek System Inc.) C:\Windows\UnInstRfBtn.EXE 2014-07-03 12:53 - 2014-07-03 12:53 - 00096880 _____ (Dritek System INC.) C:\Windows\RfBtnSvc64.exe 2014-07-03 12:53 - 2014-07-03 12:53 - 00026736 _____ (Dritek System Inc.) C:\Windows\system32\Drivers\aPs2Kb2Hid.sys 2014-07-03 12:53 - 2014-07-03 12:53 - 00000186 _____ () C:\Windows\UnInstRfBtn.UNI 2014-07-03 12:53 - 2014-07-03 12:53 - 00000000 ____D () C:\Program Files (x86)\RadioController 2014-07-03 12:52 - 2014-07-03 12:52 - 00000000 ____D () C:\Program Files\Intel 2014-07-03 12:52 - 2014-07-03 12:35 - 00000000 ____D () C:\ProgramData\Intel 2014-07-03 12:52 - 2014-07-03 12:34 - 00000000 ____D () C:\Program Files (x86)\Intel 2014-07-03 12:51 - 2014-07-03 12:51 - 00000184 _____ () C:\Windows\LMv7.UNI 2014-07-03 12:51 - 2014-07-03 12:50 - 00000000 ____D () C:\Program Files (x86)\Launch Manager 2014-07-03 12:49 - 2014-07-03 12:49 - 00000000 ____D () C:\Windows\Downloaded Installations 2014-07-03 12:44 - 2012-07-26 07:37 - 00000000 ____D () C:\Windows\servicing 2014-07-03 12:42 - 2014-07-09 13:14 - 00000000 ___RD () C:\Users\Jasmin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools 2014-07-03 12:37 - 2014-07-03 12:37 - 00015820 _____ () C:\Windows\system32\results.xml 2014-07-03 12:35 - 2014-07-03 12:35 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel 2014-07-03 12:34 - 2014-07-03 12:34 - 00000000 ___HD () C:\Intel 2014-07-01 00:42 - 2014-07-09 14:37 - 00702464 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll 2014-07-01 00:42 - 2014-07-09 14:37 - 00394240 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll 2014-07-01 00:42 - 2014-07-09 14:37 - 00087552 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll 2014-06-28 05:35 - 2014-07-09 14:37 - 00556544 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll 2014-06-26 22:53 - 2014-07-10 21:47 - 00703968 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2014-06-26 22:53 - 2014-07-10 21:47 - 00105440 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2014-06-26 17:40 - 2014-07-10 22:51 - 96441528 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2014-06-23 11:42 - 2014-06-23 11:42 - 00046136 ____H (LogMeIn Inc.) C:\Windows\system32\Drivers\Hamdrv.sys 2014-06-19 04:12 - 2014-07-09 15:20 - 02239488 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2014-06-19 04:12 - 2014-07-09 15:20 - 01366528 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2014-06-19 04:12 - 2014-07-09 15:20 - 00915968 _____ (Microsoft Corporation) C:\Windows\system32\uxtheme.dll 2014-06-19 04:12 - 2014-07-09 15:20 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\UXInit.dll 2014-06-19 04:12 - 2014-07-09 15:20 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2014-06-19 04:11 - 2014-07-09 15:20 - 19277312 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-06-19 04:11 - 2014-07-09 15:20 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2014-06-19 04:11 - 2014-07-09 15:20 - 00097792 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2014-06-19 04:10 - 2014-07-09 15:20 - 15369728 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2014-06-19 04:10 - 2014-07-09 15:20 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2014-06-19 04:10 - 2014-07-09 15:20 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2014-06-19 04:10 - 2014-07-09 15:20 - 00452096 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2014-06-19 04:10 - 2014-07-09 15:20 - 00281600 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2014-06-19 04:10 - 2014-07-09 15:20 - 00255488 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2014-06-19 04:10 - 2014-07-09 15:20 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2014-06-19 04:10 - 2014-07-09 15:20 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2014-06-19 04:10 - 2014-07-09 15:20 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2014-06-19 04:10 - 2014-07-09 15:20 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2014-06-19 04:10 - 2014-07-09 15:19 - 03959296 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2014-06-19 04:10 - 2014-07-09 15:19 - 02650624 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2014-06-19 04:09 - 2014-07-09 15:20 - 01508864 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2014-06-19 02:53 - 2014-07-09 15:20 - 01766400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2014-06-19 02:53 - 2014-07-09 15:20 - 01141760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2014-06-19 02:53 - 2014-07-09 15:20 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2014-06-19 02:53 - 2014-07-09 15:20 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2014-06-19 02:53 - 2014-07-09 15:20 - 00044032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UXInit.dll 2014-06-19 02:53 - 2014-07-09 15:19 - 14368768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2014-06-19 02:53 - 2014-07-09 15:19 - 00080896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2014-06-19 02:52 - 2014-07-09 15:20 - 13732352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2014-06-19 02:52 - 2014-07-09 15:20 - 01440768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2014-06-19 02:52 - 2014-07-09 15:20 - 00357888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2014-06-19 02:52 - 2014-07-09 15:20 - 00226816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2014-06-19 02:52 - 2014-07-09 15:20 - 00226816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2014-06-19 02:52 - 2014-07-09 15:20 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2014-06-19 02:52 - 2014-07-09 15:20 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2014-06-19 02:52 - 2014-07-09 15:20 - 00039936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2014-06-19 02:52 - 2014-07-09 15:20 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2014-06-19 02:52 - 2014-07-09 15:19 - 02863616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2014-06-19 02:52 - 2014-07-09 15:19 - 02051072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2014-06-19 02:52 - 2014-07-09 15:19 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2014-06-19 02:33 - 2014-07-09 15:20 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-06-19 02:30 - 2014-07-09 15:20 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2014-06-19 00:05 - 2014-07-09 15:20 - 00534528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\uxtheme.dll 2014-06-18 01:27 - 2014-07-09 14:34 - 01440256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\osk.exe 2014-06-18 01:24 - 2014-07-09 14:34 - 01557504 _____ (Microsoft Corporation) C:\Windows\system32\osk.exe ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => File is digitally signed C:\Windows\System32\wininit.exe => File is digitally signed C:\Windows\explorer.exe => File is digitally signed C:\Windows\SysWOW64\explorer.exe => File is digitally signed C:\Windows\System32\svchost.exe => File is digitally signed C:\Windows\SysWOW64\svchost.exe => File is digitally signed C:\Windows\System32\services.exe => File is digitally signed C:\Windows\System32\User32.dll => File is digitally signed C:\Windows\SysWOW64\User32.dll => File is digitally signed C:\Windows\System32\userinit.exe => File is digitally signed C:\Windows\SysWOW64\userinit.exe => File is digitally signed C:\Windows\System32\rpcss.dll => File is digitally signed C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2014-05-26 13:24 ==================== End Of Log ============================ --- --- --- |
12.07.2014, 23:30 | #14 |
| HijackThis Log Und die Addition Daten...FRST Additions Logfile: Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 11-07-2014 Ran by Jasmin at 2014-07-13 00:21:08 Running from C:\Users\Jasmin\Desktop\Programme Boot Mode: Normal ========================================================== ==================== Security Center ======================== AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736} ==================== Installed Programs ====================== Adobe Flash Player 14 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 14.0.0.145 - Adobe Systems Incorporated) avast! Free Antivirus (HKLM-x32\...\Avast) (Version: 9.0.2021 - AVAST Software) Bejeweled 3 (x32 Version: 2.2.0.98 - WildTangent) Hidden CCleaner (HKLM\...\CCleaner) (Version: 4.15 - Piriform) Delicious: Emily's Childhood Memories Premium Edition (x32 Version: 3.0.2.32 - WildTangent) Hidden Dritek Radio Controller (HKLM-x32\...\RadioController) (Version: 2.02.2001.0803 - Dritek System Inc.) Google Chrome (HKLM-x32\...\Google Chrome) (Version: 35.0.1916.153 - Google Inc.) Google Update Helper (x32 Version: 1.3.24.15 - Google Inc.) Hidden Governor of Poker 2 Premium Edition (x32 Version: 2.2.0.110 - WildTangent) Hidden Identity Card (HKLM-x32\...\{3D9CB654-99AD-4301-89C6-0D12A790767C}) (Version: 2.00.3005 - Packard Bell) Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.1.0.1252 - Intel Corporation) Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 9.17.10.2867 - Intel Corporation) Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 11.5.4.1001 - Intel Corporation) Intel(R) SDK for OpenCL - CPU Only Runtime Package (HKLM-x32\...\{FCB3772C-B7D0-4933-B1A9-3707EBACC573}) (Version: 2.0.0.37149 - Intel Corporation) Intel® Trusted Connect Service Client (Version: 1.24.388.1 - Intel Corporation) Hidden Java 7 Update 60 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F03217060FF}) (Version: 7.0.600 - Oracle) Jewel Match 3 (x32 Version: 2.2.0.98 - WildTangent) Hidden John Deere Drive Green (x32 Version: 2.2.0.95 - WildTangent) Hidden Launch Manager (HKLM-x32\...\LManager) (Version: 7.0.10 - Packard Bell) League of Legends (HKLM-x32\...\League of Legends 3.0.1) (Version: 3.0.1 - Riot Games ) League of Legends (x32 Version: 3.0.1 - Riot Games ) Hidden LogMeIn Hamachi (HKLM-x32\...\LogMeIn Hamachi) (Version: 2.2.0.214 - LogMeIn, Inc.) LogMeIn Hamachi (x32 Version: 2.2.0.214 - LogMeIn, Inc.) Hidden Magic Academy (x32 Version: 2.2.0.98 - WildTangent) Hidden Microsoft Office (HKLM-x32\...\{90150000-0138-0409-0000-0000000FF1CE}) (Version: 15.0.4454.1510 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Mozilla Firefox 30.0 (x86 en-US) (HKLM-x32\...\Mozilla Firefox 30.0 (x86 en-US)) (Version: 30.0 - Mozilla) Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 19.0 - Mozilla) OpenOffice 4.0.1 (HKLM-x32\...\{47F460DA-D1BE-4D85-8DF2-AA1F31D3445F}) (Version: 4.01.9714 - Apache Software Foundation) Overwolf (HKLM-x32\...\Overwolf) (Version: 0.76.1.0 - Overwolf Ltd.) Packard Bell Device Fast-lane (HKLM\...\{3F62D2FD-13C1-49A2-8B5D-47623D9460D7}) (Version: 1.00.3011 - Packard Bell) Packard Bell Power Management (HKLM\...\{91F52DE4-B789-42B0-9311-A349F10E5479}) (Version: 7.00.3013 - Packard Bell) Packard Bell Recovery Management (HKLM\...\{07F2005A-8CAC-4A4B-83A2-DA98A722CA61}) (Version: 6.00.3016 - Packard Bell) Plants vs. Zombies - Game of the Year (x32 Version: 2.2.0.98 - WildTangent) Hidden Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6657 - Realtek Semiconductor Corp.) Tales of Lagoona (x32 Version: 2.2.0.110 - WildTangent) Hidden TeamSpeak 3 Client (HKLM-x32\...\TeamSpeak 3 Client) (Version: 3.0.15 - TeamSpeak Systems GmbH) Update Installer for WildTangent Games App (x32 Version: - WildTangent) Hidden WildTangent Games (HKLM-x32\...\WildTangent wildgames Master Uninstall) (Version: 1.0.4.0 - WildTangent) WildTangent Games App (x32 Version: 4.0.10.5 - WildTangent) Hidden ==================== Restore Points ========================= 09-07-2014 11:21:50 Removed Broadcom Card Reader Driver Installer. 10-07-2014 17:20:29 paint.net v4.0 12-07-2014 21:56:31 zoek.exe restore point ==================== Hosts content: ========================== 2012-07-26 07:26 - 2012-07-26 07:26 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts ==================== Scheduled Tasks (whitelisted) ============= Task: {04ADB57C-A3E0-4871-A896-B7E93C1A9542} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-07-09] (Adobe Systems Incorporated) Task: {177504E2-EC18-4692-889E-A66C10F7FE35} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2014-07-09] (AVAST Software) Task: {1AAFF332-5C62-4558-9991-DAA649C4C9C5} - System32\Tasks\Microsoft\Windows\Sysmain\WsSwapAssessmentTask => Rundll32.exe sysmain.dll,PfSvWsSwapAssessmentTask Task: {23A5D8BE-9196-40EB-BD89-794398B2B073} - System32\Tasks\Microsoft\Windows\WS\WSRefreshBannedAppsListTask => Rundll32.exe WSClient.dll,RefreshBannedAppsList Task: {3CAF37E8-EB39-46EF-AA5C-AA014A138F05} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-07-09] (Google Inc.) Task: {432152DC-D82C-44E1-9679-2764DE868EBE} - System32\Tasks\Microsoft\Windows\Setup\Pre-staged GDR Notification => C:\Windows\system32\NotificationUI.exe [2014-04-19] (Microsoft Corporation) Task: {454D9883-3C96-4010-AD21-B0600C10AC6C} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-06-24] (Piriform Ltd) Task: {46F484F6-42B2-473D-A870-653CD479565A} - System32\Tasks\Overwolf Updater Task => C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe [2014-06-10] (Overwolf LTD) Task: {5FB2B40B-10BB-4048-AF85-331F231449F9} - System32\Tasks\ALU => C:\Program Files (x86)\Packard Bell\Live Updater\updater.exe [2013-02-22] () Task: {680BAAD9-2749-495D-8137-D27A20A457EA} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-07-09] (Google Inc.) Task: {6B157698-2113-4DE7-B291-E6574C95961F} - System32\Tasks\Power Management => C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerTray.exe [2013-03-15] (Acer Incorporated) Task: {7DC986C1-F05B-4D1D-BCC6-7CF85B520D0B} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\Windows\system32\MRT.exe [2014-06-26] (Microsoft Corporation) Task: {8D6BDB9F-9F66-44AC-98CC-61A87BE71534} - System32\Tasks\ALUAgent => C:\Program Files (x86)\Packard Bell\Live Updater\liveupdater_agent.exe [2013-01-22] () Task: {A72208BF-7A49-4FB8-B684-252375F3443A} - System32\Tasks\Microsoft\Windows\WS\License Validation => Rundll32.exe WSClient.dll,WSpTLR licensing Task: {C6A88F2D-53D2-4805-9D69-443738A1847C} - System32\Tasks\Microsoft\Windows\ApplicationData\CleanupTemporaryState => Rundll32.exe Windows.Storage.ApplicationData.dll,CleanupTemporaryState Task: {EBF06DEC-4228-4813-AC0C-62821AE4E330} - System32\Tasks\Microsoft\Windows\Application Experience\StartupAppTask => Rundll32.exe Startupscan.dll,SusRunTask Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe ==================== Loaded Modules (whitelisted) ============= 2014-05-26 14:21 - 2012-10-23 20:37 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll 2014-07-09 14:32 - 2014-07-09 14:32 - 00301152 _____ () C:\Program Files\AVAST Software\Avast\aswProperty.dll 2014-07-12 22:23 - 2014-07-12 22:23 - 02792960 _____ () C:\Program Files\AVAST Software\Avast\defs\14071200\algo.dll 2014-06-10 11:53 - 2014-06-10 11:53 - 00025600 _____ () C:\Program Files (x86)\Overwolf\0.76.1.0\CoreAudioApi.dll 2014-07-09 14:32 - 2014-07-09 14:32 - 19329904 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll 2014-07-09 14:06 - 2014-07-09 14:06 - 00044968 _____ () C:\Program Files (x86)\Java\jre7\bin\prism-d3d.dll 2014-07-09 14:06 - 2014-07-09 14:06 - 00159656 _____ () C:\Program Files (x86)\Java\jre7\bin\glass.dll 2014-07-09 14:06 - 2014-07-09 14:06 - 00504232 _____ () C:\Program Files (x86)\Java\jre7\bin\libxml2.dll 2014-07-09 14:06 - 2014-07-09 14:06 - 00164776 _____ () C:\Program Files (x86)\Java\jre7\bin\libxslt.dll 2014-07-09 14:06 - 2014-07-09 14:06 - 11893160 _____ () C:\Program Files (x86)\Java\jre7\bin\jfxwebkit.dll 2014-07-09 14:06 - 2014-07-09 14:06 - 00243112 _____ () C:\Program Files (x86)\Java\jre7\bin\javafx-font.dll 2014-07-03 12:52 - 2012-06-25 19:41 - 01198912 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll 2014-07-12 21:49 - 2014-07-12 21:49 - 03852912 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll 2014-07-13 00:17 - 2014-07-13 00:17 - 00298496 _____ () C:\Users\Jasmin\AppData\Roaming\.minecraft\versions\1.7.10\1.7.10-natives-189265813734\lwjgl.dll 2014-07-13 00:17 - 2014-07-13 00:17 - 00246332 _____ () C:\Users\Jasmin\AppData\Roaming\.minecraft\versions\1.7.10\1.7.10-natives-189265813734\avutil-ttv-51.dll 2014-07-13 00:17 - 2014-07-13 00:17 - 00113171 _____ () C:\Users\Jasmin\AppData\Roaming\.minecraft\versions\1.7.10\1.7.10-natives-189265813734\swresample-ttv-0.dll 2014-07-13 00:17 - 2014-07-13 00:17 - 00394810 _____ () C:\Users\Jasmin\AppData\Roaming\.minecraft\versions\1.7.10\1.7.10-natives-189265813734\libmp3lame-ttv.dll 2014-07-13 00:17 - 2014-07-13 00:17 - 00967168 _____ () C:\Users\Jasmin\AppData\Roaming\.minecraft\versions\1.7.10\1.7.10-natives-189265813734\twitchsdk.dll 2014-07-13 00:17 - 2014-07-13 00:17 - 00390144 _____ () C:\Users\Jasmin\AppData\Roaming\.minecraft\versions\1.7.10\1.7.10-natives-189265813734\OpenAL32.dll ==================== Alternate Data Streams (whitelisted) ========= ==================== Safe Mode (whitelisted) =================== HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Hamachi2Svc => ""="Service" ==================== EXE Association (whitelisted) ============= ==================== MSCONFIG/TASK MANAGER disabled items ========= ==================== Faulty Device Manager Devices ============= Name: Description: Class Guid: Manufacturer: Service: Problem: : The drivers for this device are not installed. (Code 28) Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard. Name: Description: Class Guid: Manufacturer: Service: Problem: : The drivers for this device are not installed. (Code 28) Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard. ==================== Event log errors: ========================= Application errors: ================== Error: (07/12/2014 10:23:59 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: OTAKU-PC) Description: Bei der Aktivierung der App „Microsoft.SkypeApp_kzf8qxf38zg5c!App“ ist folgender Fehler aufgetreten: -2144927142. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“. Error: (07/12/2014 10:23:58 PM) (Source: Application Hang) (EventID: 1002) (User: ) Description: Programm wwahost.exe, Version 6.2.9200.16420 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen. Prozess-ID: edc Startzeit: 01cf9e0f27a86bc4 Endzeit: 4294967295 Anwendungspfad: C:\Windows\syswow64\wwahost.exe Berichts-ID: 71b75daf-0a02-11e4-be85-b888e3c9396f Vollständiger Name des fehlerhaften Pakets: Microsoft.SkypeApp_1.9.0.2016_x86__kzf8qxf38zg5c Anwendungs-ID, die relativ zum fehlerhaften Paket ist: App Error: (07/12/2014 10:23:49 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 2486) (User: OTAKU-PC) Description: Die App „Microsoft.SkypeApp_kzf8qxf38zg5c!App“ wurde nicht innerhalb der vorgesehenen Zeit gestartet. Error: (07/12/2014 08:02:18 PM) (Source: OverwolfUpdater) (EventID: 0) (User: ) Description: Der Dienst kann nicht gestartet werden. Das Handle ist ungültig Error: (07/11/2014 10:35:56 PM) (Source: Application Hang) (EventID: 1002) (User: ) Description: Programm wwahost.exe, Version 6.2.9200.16420 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen. Prozess-ID: 14b8 Startzeit: 01cf9d43b40e507b Endzeit: 4294967295 Anwendungspfad: C:\Windows\syswow64\wwahost.exe Berichts-ID: f36bfc61-093a-11e4-be83-b888e3c9396f Vollständiger Name des fehlerhaften Pakets: Microsoft.SkypeApp_1.9.0.2016_x86__kzf8qxf38zg5c Anwendungs-ID, die relativ zum fehlerhaften Paket ist: App Error: (07/11/2014 10:35:53 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 2484) (User: OTAKU-PC) Description: Das Paket „Microsoft.SkypeApp_1.9.0.2016_x86__kzf8qxf38zg5c“ wurde beendet, da das Anhalten zu lange dauerte. Error: (07/11/2014 10:07:12 PM) (Source: Application Hang) (EventID: 1002) (User: ) Description: Programm wwahost.exe, Version 6.2.9200.16420 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen. Prozess-ID: 17b8 Startzeit: 01cf9d05d7473efc Endzeit: 4294967295 Anwendungspfad: C:\Windows\syswow64\wwahost.exe Berichts-ID: ed93755a-0936-11e4-be83-b888e3c9396f Vollständiger Name des fehlerhaften Pakets: Microsoft.SkypeApp_1.9.0.2016_x86__kzf8qxf38zg5c Anwendungs-ID, die relativ zum fehlerhaften Paket ist: App Error: (07/11/2014 10:07:05 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 2484) (User: OTAKU-PC) Description: Das Paket „Microsoft.SkypeApp_1.9.0.2016_x86__kzf8qxf38zg5c“ wurde beendet, da das Anhalten zu lange dauerte. Error: (07/11/2014 03:29:56 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 2486) (User: OTAKU-PC) Description: Die App „microsoft.windowsphotos_8wekyb3d8bbwe!Microsoft.WindowsLive.ModernPhotos“ wurde nicht innerhalb der vorgesehenen Zeit gestartet. Error: (07/11/2014 02:44:08 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 2484) (User: OTAKU-PC) Description: Das Paket „Microsoft.SkypeApp_1.9.0.2016_x86__kzf8qxf38zg5c“ wurde beendet, da das Anhalten zu lange dauerte. System errors: ============= Error: (07/13/2014 00:14:48 AM) (Source: Microsoft-Windows-Kernel-General) (EventID: 6) (User: NT-AUTORITÄT) Description: 0xc000014d0 Error: (07/13/2014 00:09:09 AM) (Source: Service Control Manager) (EventID: 7030) (User: ) Description: Der Dienst "PEVSystemStart" ist als interaktiver Dienst gekennzeichnet. Das System wurde jedoch so konfiguriert, dass interaktive Dienste nicht möglich sind. Der Dienst wird möglicherweise nicht richtig funktionieren. Error: (07/13/2014 00:09:08 AM) (Source: Service Control Manager) (EventID: 7030) (User: ) Description: Der Dienst "PEVSystemStart" ist als interaktiver Dienst gekennzeichnet. Das System wurde jedoch so konfiguriert, dass interaktive Dienste nicht möglich sind. Der Dienst wird möglicherweise nicht richtig funktionieren. Error: (07/13/2014 00:09:08 AM) (Source: Service Control Manager) (EventID: 7030) (User: ) Description: Der Dienst "PEVSystemStart" ist als interaktiver Dienst gekennzeichnet. Das System wurde jedoch so konfiguriert, dass interaktive Dienste nicht möglich sind. Der Dienst wird möglicherweise nicht richtig funktionieren. Error: (07/13/2014 00:09:07 AM) (Source: Service Control Manager) (EventID: 7030) (User: ) Description: Der Dienst "PEVSystemStart" ist als interaktiver Dienst gekennzeichnet. Das System wurde jedoch so konfiguriert, dass interaktive Dienste nicht möglich sind. Der Dienst wird möglicherweise nicht richtig funktionieren. Error: (07/13/2014 00:09:07 AM) (Source: Service Control Manager) (EventID: 7030) (User: ) Description: Der Dienst "PEVSystemStart" ist als interaktiver Dienst gekennzeichnet. Das System wurde jedoch so konfiguriert, dass interaktive Dienste nicht möglich sind. Der Dienst wird möglicherweise nicht richtig funktionieren. Error: (07/12/2014 10:22:22 PM) (Source: Microsoft-Windows-Kernel-General) (EventID: 6) (User: NT-AUTORITÄT) Description: 0xc000014d0 Error: (07/12/2014 10:21:51 PM) (Source: DCOM) (EventID: 10010) (User: OTAKU-PC) Description: {9BA05972-F6A8-11CF-A442-00A0C90A8F39} Error: (07/12/2014 10:21:49 PM) (Source: DCOM) (EventID: 10010) (User: OTAKU-PC) Description: {3EB3C877-1F16-487C-9050-104DBCD66683} Error: (07/11/2014 10:43:34 PM) (Source: Microsoft-Windows-Kernel-General) (EventID: 6) (User: NT-AUTORITÄT) Description: 0xc000014d0 Microsoft Office Sessions: ========================= Error: (07/12/2014 10:23:59 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: OTAKU-PC) Description: Microsoft.SkypeApp_kzf8qxf38zg5c!App-2144927142 Error: (07/12/2014 10:23:58 PM) (Source: Application Hang) (EventID: 1002) (User: ) Description: wwahost.exe6.2.9200.16420edc01cf9e0f27a86bc44294967295C:\Windows\syswow64\wwahost.exe71b75daf-0a02-11e4-be85-b888e3c9396fMicrosoft.SkypeApp_1.9.0.2016_x86__kzf8qxf38zg5cApp Error: (07/12/2014 10:23:49 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 2486) (User: OTAKU-PC) Description: Microsoft.SkypeApp_kzf8qxf38zg5c!App Error: (07/12/2014 08:02:18 PM) (Source: OverwolfUpdater) (EventID: 0) (User: ) Description: Der Dienst kann nicht gestartet werden. Das Handle ist ungültig Error: (07/11/2014 10:35:56 PM) (Source: Application Hang) (EventID: 1002) (User: ) Description: wwahost.exe6.2.9200.1642014b801cf9d43b40e507b4294967295C:\Windows\syswow64\wwahost.exef36bfc61-093a-11e4-be83-b888e3c9396fMicrosoft.SkypeApp_1.9.0.2016_x86__kzf8qxf38zg5cApp Error: (07/11/2014 10:35:53 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 2484) (User: OTAKU-PC) Description: Microsoft.SkypeApp_1.9.0.2016_x86__kzf8qxf38zg5c Error: (07/11/2014 10:07:12 PM) (Source: Application Hang) (EventID: 1002) (User: ) Description: wwahost.exe6.2.9200.1642017b801cf9d05d7473efc4294967295C:\Windows\syswow64\wwahost.exeed93755a-0936-11e4-be83-b888e3c9396fMicrosoft.SkypeApp_1.9.0.2016_x86__kzf8qxf38zg5cApp Error: (07/11/2014 10:07:05 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 2484) (User: OTAKU-PC) Description: Microsoft.SkypeApp_1.9.0.2016_x86__kzf8qxf38zg5c Error: (07/11/2014 03:29:56 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 2486) (User: OTAKU-PC) Description: microsoft.windowsphotos_8wekyb3d8bbwe!Microsoft.WindowsLive.ModernPhotos Error: (07/11/2014 02:44:08 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 2484) (User: OTAKU-PC) Description: Microsoft.SkypeApp_1.9.0.2016_x86__kzf8qxf38zg5c ==================== Memory info =========================== Percentage of memory in use: 47% Total physical RAM: 3985.27 MB Available physical RAM: 2077.48 MB Total Pagefile: 7569.27 MB Available Pagefile: 5449.86 MB Total Virtual: 8192 MB Available Virtual: 8191.83 MB ==================== Drives ================================ Drive c: (Packard Bell) (Fixed) (Total:222.33 GB) (Free:183.43 GB) NTFS Drive d: (DATA) (Fixed) (Total:222.33 GB) (Free:222.21 GB) NTFS Drive e: (130820_1008) (CDROM) (Total:1.34 GB) (Free:0 GB) UDF ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (Size: 466 GB) (Disk ID: 6528EC57) Partition: GPT Partition Type. ==================== End Of Log ============================ |
12.07.2014, 23:33 | #15 |
/// TB-Ausbilder /// Anleitungs-Guru | HijackThis Log Ok, dann noch die letzten Schritte: Schritt 1 Malwarebytes Antimalware
Schritt 2 ESET Online Scanner
Gibt es jetzt noch Probleme mit dem PC? Wenn ja, welche?
__________________ Gruß deeprybka Lob, Kritik, Wünsche? Spende fürs trojaner-board? _______________________________________________ „Neminem laede, immo omnes, quantum potes, iuva.“ Arthur Schopenhauer |
Themen zu HijackThis Log |
adobe, adobe flash player, antivirus, avast, bho, converter, defender, explorer, flash player, google, helper, helper.exe, hijack, hijackthis, internet, internet explorer, launch, log, lsass.exe, microsoft, mozilla, mp3, packard bell, security, software, windows, wmi, wmp |