Guten Tag zusammen,

nachdem ich eine Viren Meldung aufgrund eines Rootkits bekommen habe, habe ich meinen Pc neu aufgesetzt. Jetzt habe ich aber gestern auf meiner externen Festplatte einen weiteren Virus gefunden: "H:\All_Music\Nickelback-Never Again.mp3 Bedrohung WMA:Wimad [Susp]" den ich mithilfe von Avast! erfolgreich gelöscht habe.
Nun meine Frage: Ist mein Pc immer noch bzw. wieder befallen? Wie kann ich ein Logfile der externen Platte erstellen und kann ich die Daten darauf noch retten?
Schonmal vielen dank für evtl. Hilfe und Ratschläge!

Mfg Moritz


Frst-Log:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 21-07-2014
Ran by mo (administrator) on ***** on 22-07-2014 14:19:56
Running from C:\Users\mo\Downloads
Platform: Windows 7 Professional Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 8
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ 
Download link for 64-Bit Version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ 
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(AVAST Software) C:\Install\AVAST Software\Avast\AvastSvc.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Andrea Electronics Corporation) C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe
(Intel Corporation) C:\Install\Intel\Bluetooth\devmonsrv.exe
(Intel(R) Corporation) C:\Install\Intel\WiFi\bin\EvtEng.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(Intel® Corporation) C:\Install\Intel\WiFi\bin\ZeroConfigService.exe
(Intel Corporation) C:\Install\Intel\Bluetooth\obexsrv.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Intel Corporation) C:\Install\Intel\BluetoothHS\BTHSAmpPalService.exe
(Intel(R) Corporation) C:\Install\Intel\BluetoothHS\BTHSSecurityMgr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe
(Intel Corporation) C:\Install\Intel\Bluetooth\mediasrv.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Akamai Technologies, Inc.) C:\Users\mo\AppData\Local\Akamai\netsession_win.exe
(Akamai Technologies, Inc.) C:\Users\mo\AppData\Local\Akamai\netsession_win.exe
(AVAST Software) C:\Install\AVAST Software\Avast\AvastUI.exe
(Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
(Dropbox, Inc.) C:\Users\mo\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
() C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Intel Corporation) C:\Install\Intel\Bluetooth\btplayerctrl.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
(pdfforge GmbH) C:\Program Files (x86)\PDF Architect 2\ws.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [BTMTrayAgent] => rundll32.exe "C:\Install\Intel\Bluetooth\btmshell.dll",TrayApp 
HKLM\...\Run: [IntelPROSet] => C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe [4802864 2012-06-25] (Intel(R) Corporation)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2352072 2014-05-30] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart 
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7284328 2011-08-30] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2277480 2011-08-16] (Realtek Semiconductor)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Install\AVAST Software\Avast\AvastUI.exe [4086432 2014-07-17] (AVAST Software)
HKLM-x32\...\Run: [NUSB3MON] => C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [115048 2011-09-16] (Renesas Electronics Corporation)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [256896 2014-07-11] (Oracle Corporation)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2014-05-08] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [DivXMediaServer] => C:\Install\DivX\DivX Media Server\DivXMediaServer.exe [455512 2014-05-28] (DivX, LLC)
HKLM-x32\...\Run: [DivXUpdate] => C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [1861968 2014-01-10] ()
HKLM-x32\...\Run: [BCSSync] => C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [91520 2010-03-13] (Microsoft Corporation)
HKU\S-1-5-19\...\RunOnce: [mctadmin] => C:\Windows\System32\mctadmin.exe [97280 2009-07-14] (Microsoft Corporation)
HKU\S-1-5-20\...\RunOnce: [mctadmin] => C:\Windows\System32\mctadmin.exe [97280 2009-07-14] (Microsoft Corporation)
HKU\S-1-5-21-934139158-1595679319-1959080060-1000\...\Run: [Akamai NetSession Interface] => C:\Users\mo\AppData\Local\Akamai\netsession_win.exe [4672920 2014-04-17] (Akamai Technologies, Inc.)
Startup: C:\Users\mo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\mo\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
ShellIconOverlayIdentifiers: "DropboxExt1" -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} =>  No File
ShellIconOverlayIdentifiers: "DropboxExt2" -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} =>  No File
ShellIconOverlayIdentifiers: "DropboxExt3" -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} =>  No File
ShellIconOverlayIdentifiers: "DropboxExt4" -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} =>  No File
ShellIconOverlayIdentifiers: "DropboxExt5" -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} =>  No File
ShellIconOverlayIdentifiers: "DropboxExt6" -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} =>  No File
ShellIconOverlayIdentifiers: "DropboxExt7" -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} =>  No File
ShellIconOverlayIdentifiers: "DropboxExt8" -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} =>  No File
ShellIconOverlayIdentifiers: 00avast -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Install\AVAST Software\Avast\ashShA64.dll (AVAST Software)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x4D015B97E5A1CF01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Install\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Install\Java\bin\ssv.dll (Oracle Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Install\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Install\Java\bin\jp2ssv.dll (Oracle Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1

FireFox:
========
FF ProfilePath: C:\Users\mo\AppData\Roaming\Mozilla\Firefox\Profiles\y2gokdl0.default
FF Homepage: about:blank
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_14_0_0_145.dll ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_145.dll ()
FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Install\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin-x32: @divx.com/DivX Web Player Plug-In,version=1.0.0 - C:\Install\DivX\DivX Web Player\npdivx32.dll (DivX, LLC)
FF Plugin-x32: @java.com/DTPlugin,version=10.65.2 - C:\Install\Java\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.65.2 - C:\Install\Java\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin-x32: PDF Architect 2 - C:\Program Files (x86)\PDF Architect 2\np-previewer.dll (pdfforge GmbH)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Install\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Install\AVAST Software\Avast\WebRep\FF [2014-07-17]

Chrome: 
=======
CHR Extension: (Google Docs) - C:\Users\mo\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-07-17]
CHR Extension: (Google Drive) - C:\Users\mo\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-07-17]
CHR Extension: (YouTube) - C:\Users\mo\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-07-17]
CHR Extension: (Google-Suche) - C:\Users\mo\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-07-17]
CHR Extension: (avast! Online Security) - C:\Users\mo\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2014-07-17]
CHR Extension: (Google Wallet) - C:\Users\mo\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-07-17]
CHR Extension: (Google Mail) - C:\Users\mo\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-07-17]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Install\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2014-07-17]

==================== Services (Whitelisted) =================

R2 AMPPALR3; C:\Install\Intel\BluetoothHS\BTHSAmpPalService.exe [659976 2012-03-15] (Intel Corporation)
R2 avast! Antivirus; C:\Install\AVAST Software\Avast\AvastSvc.exe [50344 2014-07-17] (AVAST Software)
R2 Bluetooth Device Monitor; C:\Install\Intel\Bluetooth\devmonsrv.exe [897088 2010-11-03] (Intel Corporation) [File not signed]
R3 Bluetooth Media Service; C:\Install\Intel\Bluetooth\mediasrv.exe [1298496 2010-11-03] (Intel Corporation) [File not signed]
R2 Bluetooth OBEX Service; C:\Install\Intel\Bluetooth\obexsrv.exe [983104 2010-11-03] (Intel Corporation) [File not signed]
R2 BTHSSecurityMgr; C:\Install\Intel\BluetoothHS\BTHSSecurityMgr.exe [135952 2012-04-23] (Intel(R) Corporation)
R2 EvtEng; C:\Install\Intel\WiFi\bin\EvtEng.exe [628016 2012-06-25] (Intel(R) Corporation)
S3 MyWiFiDHCPDNS; C:\Install\Intel\WiFi\bin\PanDhcpDns.exe [272688 2012-06-25] ()
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1631008 2014-05-30] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [21055432 2014-05-30] (NVIDIA Corporation)
R3 PDF Architect 2; C:\Program Files (x86)\PDF Architect 2\ws.exe [1771560 2014-06-26] (pdfforge GmbH)
S3 pdfforge CrashHandler; C:\Program Files (x86)\PDF Architect 2\crash-handler-ws.exe [861736 2014-06-26] (pdfforge GmbH)
R2 ZeroConfigService; C:\Install\Intel\WiFi\bin\ZeroConfigService.exe [3325232 2012-06-25] (Intel® Corporation)

==================== Drivers (Whitelisted) ====================

R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29208 2014-07-17] ()
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [79184 2014-07-17] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93568 2014-07-17] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2014-07-17] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1041168 2014-07-17] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [427360 2014-07-17] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [92008 2014-07-17] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [224896 2014-07-17] ()
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283064 2014-07-17] (Disc Soft Ltd)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [20256 2014-05-30] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [40392 2014-03-31] (NVIDIA Corporation)
R1 vmm; C:\Windows\system32\Treiber\vmm.sys [296816 2007-02-18] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-07-22 14:19 - 2014-07-22 14:20 - 00016009 _____ () C:\Users\mo\Downloads\FRST.txt
2014-07-22 14:19 - 2014-07-22 14:19 - 00000000 ____D () C:\FRST
2014-07-22 14:18 - 2014-07-22 14:18 - 00000544 _____ () C:\Users\mo\Downloads\defogger_disable.log
2014-07-22 14:18 - 2014-07-22 14:18 - 00000144 _____ () C:\Users\mo\defogger_reenable
2014-07-22 14:17 - 2014-07-22 14:17 - 02090496 _____ (Farbar) C:\Users\mo\Downloads\FRST64.exe
2014-07-22 14:17 - 2014-07-22 14:17 - 00050477 _____ () C:\Users\mo\Downloads\Defogger.exe
2014-07-22 14:14 - 2014-07-22 14:14 - 00380416 _____ () C:\Users\mo\Downloads\dflq5h5m.exe
2014-07-22 00:28 - 2014-07-22 00:28 - 00000000 ____D () C:\Users\mo\AppData\Roaming\PDF Architect 2
2014-07-21 23:29 - 2014-07-21 23:29 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SharePoint
2014-07-21 23:29 - 2014-07-21 23:29 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
2014-07-21 23:28 - 2014-07-21 23:28 - 00000000 ____D () C:\Windows\PCHEALTH
2014-07-21 23:28 - 2014-07-21 23:28 - 00000000 ____D () C:\Program Files (x86)\Microsoft Synchronization Services
2014-07-21 23:28 - 2014-07-21 23:28 - 00000000 ____D () C:\Program Files (x86)\Microsoft Sync Framework
2014-07-21 23:28 - 2014-07-21 23:28 - 00000000 ____D () C:\Program Files (x86)\Microsoft SQL Server Compact Edition
2014-07-21 23:27 - 2014-07-21 23:27 - 00000000 ____D () C:\Windows\System32\Tasks\OfficeSoftwareProtectionPlatform
2014-07-21 23:26 - 2014-07-21 23:30 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-07-21 23:26 - 2014-07-21 23:28 - 00000000 ____D () C:\Program Files (x86)\Microsoft Office
2014-07-21 23:26 - 2014-07-21 23:26 - 00000000 __RHD () C:\MSOCache
2014-07-21 23:26 - 2014-07-21 23:26 - 00000000 ____D () C:\Users\mo\AppData\Local\Microsoft Help
2014-07-21 23:26 - 2014-07-21 23:26 - 00000000 ____D () C:\Program Files\Microsoft Office
2014-07-21 23:26 - 2014-07-21 23:26 - 00000000 ____D () C:\Program Files (x86)\Microsoft Visual Studio 8
2014-07-21 23:26 - 2014-07-21 23:26 - 00000000 ____D () C:\Program Files (x86)\Microsoft Analysis Services
2014-07-21 22:19 - 2014-07-21 22:20 - 00000222 _____ () C:\Users\mo\Desktop\keys.txt
2014-07-21 16:40 - 2014-07-21 16:40 - 00000175 _____ () C:\Users\mo\Desktop\Neues Textdokument (2).txt
2014-07-19 18:29 - 2014-07-19 18:29 - 00000173 _____ () C:\Users\mo\AppData\Local\msmathematics.qat.mo
2014-07-19 18:23 - 2009-03-09 15:27 - 05425496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_41.dll
2014-07-19 18:23 - 2009-03-09 15:27 - 04178264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_41.dll
2014-07-19 18:22 - 2014-07-19 18:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Mathematics (64-bit)
2014-07-19 18:21 - 2014-07-19 18:22 - 19809368 _____ (Microsoft Corporation) C:\Users\mo\Downloads\MSetup_x64.exe
2014-07-19 18:14 - 2014-07-19 18:14 - 00000000 ____D () C:\Users\mo\Documents\Eigene virtuelle Computer
2014-07-19 18:12 - 2014-07-19 18:12 - 00001576 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Virtual PC.lnk
2014-07-19 18:12 - 2014-07-19 18:12 - 00000000 ____D () C:\Windows\system32\Treiber
2014-07-19 18:08 - 2014-07-19 18:55 - 00011379 _____ () C:\Users\mo\Downloads\SecureDownloadManager.log
2014-07-19 18:08 - 2014-07-19 18:08 - 00003175 _____ () C:\Users\mo\Desktop\Secure Download Manager.lnk
2014-07-19 18:08 - 2014-07-19 18:08 - 00000000 ____D () C:\Users\mo\AppData\Roaming\e-academy Inc
2014-07-19 17:26 - 2014-07-19 17:26 - 00000207 _____ () C:\Users\mo\Desktop\Call of Duty Modern Warfare 2 - Multiplayer.url
2014-07-19 17:26 - 2014-07-19 17:26 - 00000000 ____D () C:\Users\mo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2014-07-19 17:20 - 2014-07-19 18:10 - 00000613 _____ () C:\Users\Public\Desktop\Steam.lnk
2014-07-19 17:20 - 2014-07-19 17:20 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam
2014-07-19 17:19 - 2014-07-19 17:19 - 01141680 _____ () C:\Users\mo\Downloads\SteamSetup.exe
2014-07-18 21:16 - 2013-10-14 18:00 - 00028368 _____ (Microsoft Corporation) C:\Windows\system32\IEUDINIT.EXE
2014-07-18 21:01 - 2014-07-21 18:40 - 00050058 _____ () C:\Windows\IE11_main.log
2014-07-18 17:52 - 2014-07-18 17:52 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2014-07-18 17:52 - 2014-07-18 17:52 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-07-18 17:52 - 2014-07-18 17:52 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
2014-07-18 17:51 - 2011-04-09 08:58 - 00142336 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe
2014-07-18 17:51 - 2011-04-09 07:56 - 00123904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\poqexec.exe
2014-07-18 17:39 - 2011-11-19 16:58 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll
2014-07-18 17:39 - 2011-11-19 16:01 - 00067072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\packager.dll
2014-07-18 16:59 - 2012-06-03 00:19 - 02428952 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2014-07-18 16:59 - 2012-06-03 00:19 - 00057880 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2014-07-18 16:59 - 2012-06-03 00:19 - 00044056 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2014-07-18 16:59 - 2012-06-03 00:15 - 02622464 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2014-07-18 16:59 - 2012-06-02 15:19 - 00186752 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2014-07-18 16:59 - 2012-06-02 15:15 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2014-07-18 00:07 - 2014-07-18 00:07 - 00002393 _____ () C:\Users\mo\Desktop\Sagas - Chrome.lnk
2014-07-18 00:07 - 2014-07-18 00:07 - 00002393 _____ () C:\Users\mo\Desktop\Filme - Chrome.lnk
2014-07-18 00:06 - 2014-07-18 00:06 - 00002393 _____ () C:\Users\mo\Desktop\Mo - Chrome.lnk
2014-07-17 23:59 - 2014-07-17 23:59 - 00000000 ____D () C:\Program Files\Autodesk
2014-07-17 23:58 - 2014-07-17 23:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Autodesk
2014-07-17 23:58 - 2014-07-17 23:59 - 00000000 ____D () C:\ProgramData\Autodesk
2014-07-17 23:58 - 2014-07-17 23:58 - 00001054 _____ () C:\Users\Public\Desktop\LMTOOLS Utility.lnk
2014-07-17 23:58 - 2014-07-17 23:58 - 00000000 ____D () C:\Users\mo\AppData\Roaming\Autodesk
2014-07-17 23:57 - 2014-07-17 23:57 - 00000000 ____D () C:\Users\mo\AppData\Local\Akamai
2014-07-17 23:56 - 2014-07-17 23:56 - 00000000 ____D () C:\Autodesk
2014-07-17 23:43 - 2014-07-21 19:50 - 00000000 ___RD () C:\Users\mo\Dropbox
2014-07-17 23:43 - 2014-07-17 23:43 - 00001037 _____ () C:\Users\mo\Desktop\Dropbox.lnk
2014-07-17 23:43 - 2014-06-30 13:57 - 00000198 _____ () C:\Users\mo\Desktop\psso.txt
2014-07-17 23:41 - 2014-07-21 19:50 - 00000000 ____D () C:\Users\mo\AppData\Roaming\Dropbox
2014-07-17 23:41 - 2014-07-17 23:41 - 00000000 ____D () C:\Users\mo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2014-07-17 23:12 - 2014-07-17 23:12 - 00000000 ____D () C:\Users\mo\AppData\Roaming\DivX
2014-07-17 23:12 - 2014-07-17 23:12 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DivX
2014-07-17 23:12 - 2014-07-17 23:12 - 00000000 ____D () C:\Program Files\DivX
2014-07-17 23:12 - 2014-07-17 23:12 - 00000000 ____D () C:\Program Files (x86)\DivX
2014-07-17 23:10 - 2014-07-17 23:12 - 00000000 ____D () C:\ProgramData\DivX
2014-07-17 23:06 - 2014-07-17 23:06 - 00000045 _____ () C:\Windows\SysWOW64\initdebug.nfo
2014-07-17 22:57 - 2014-07-17 22:57 - 00000822 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GIMP 2.lnk
2014-07-17 22:53 - 2014-07-17 22:53 - 00001253 _____ () C:\Users\Public\Desktop\Free YouTube to MP3 Converter.lnk
2014-07-17 22:53 - 2014-07-17 22:53 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft
2014-07-17 22:52 - 2014-07-17 22:53 - 00000000 ____D () C:\Users\mo\AppData\Roaming\DVDVideoSoft
2014-07-17 22:47 - 2014-07-17 22:47 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Total Commander
2014-07-17 22:46 - 2014-07-17 22:46 - 00000000 ____D () C:\Users\mo\AppData\Roaming\GHISLER
2014-07-17 22:36 - 2014-07-22 14:04 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-07-17 22:36 - 2014-07-21 22:41 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-07-17 22:36 - 2014-07-17 22:36 - 00004106 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-07-17 22:36 - 2014-07-17 22:36 - 00003854 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-07-17 22:36 - 2014-07-17 22:36 - 00000000 ____D () C:\Users\mo\AppData\Local\Google
2014-07-17 22:36 - 2014-07-17 22:36 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2014-07-17 22:36 - 2014-07-17 22:36 - 00000000 ____D () C:\Program Files (x86)\Google
2014-07-17 22:33 - 2014-07-17 22:33 - 00000000 ____D () C:\Users\mo\AppData\Roaming\FastStone
2014-07-17 22:25 - 2014-07-17 22:25 - 00000000 ____D () C:\Users\mo\AppData\Roaming\Macromedia
2014-07-17 22:25 - 2014-07-17 22:25 - 00000000 ____D () C:\Users\mo\AppData\Roaming\Adobe
2014-07-17 22:25 - 2014-07-17 22:25 - 00000000 ____D () C:\Users\mo\AppData\Local\Macromedia
2014-07-17 22:24 - 2014-07-17 22:24 - 00699056 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-07-17 22:24 - 2014-07-17 22:24 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-07-17 22:24 - 2014-07-17 22:24 - 00000000 ____D () C:\Windows\SysWOW64\Macromed
2014-07-17 22:24 - 2014-07-17 22:24 - 00000000 ____D () C:\Windows\system32\Macromed
2014-07-17 22:21 - 2014-07-17 22:21 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
2014-07-17 22:21 - 2014-07-17 22:21 - 00000000 ____D () C:\Program Files (x86)\Adobe
2014-07-17 22:20 - 2014-07-17 22:21 - 00000000 ____D () C:\ProgramData\Adobe
2014-07-17 22:05 - 2014-07-17 22:05 - 00272808 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-07-17 22:05 - 2014-07-17 22:05 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-07-17 22:05 - 2014-07-17 22:05 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-07-17 22:05 - 2014-07-17 22:05 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-07-17 22:05 - 2014-07-17 22:05 - 00000000 ____D () C:\ProgramData\Sun
2014-07-17 22:05 - 2014-07-17 22:05 - 00000000 ____D () C:\ProgramData\Oracle
2014-07-17 22:05 - 2014-07-17 22:05 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-07-17 22:02 - 2014-07-17 22:02 - 00001606 _____ () C:\Users\mo\AppData\Roaming\Microsoft\Windows\Start Menu\FreeMind.lnk
2014-07-17 22:02 - 2014-07-17 22:02 - 00001582 _____ () C:\Users\mo\Desktop\FreeMind.lnk
2014-07-17 22:02 - 2014-07-17 22:02 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FreeMind
2014-07-17 21:29 - 2014-07-17 21:29 - 00000000 ____D () C:\Windows\system32\2C0A
2014-07-17 21:29 - 2014-07-17 21:29 - 00000000 ____D () C:\Windows\system32\0C0A
2014-07-17 21:29 - 2014-07-17 21:29 - 00000000 ____D () C:\Windows\system32\0C04
2014-07-17 21:29 - 2014-07-17 21:29 - 00000000 ____D () C:\Windows\system32\0816
2014-07-17 21:29 - 2014-07-17 21:29 - 00000000 ____D () C:\Windows\system32\0804
2014-07-17 21:29 - 2014-07-17 21:29 - 00000000 ____D () C:\Windows\system32\0424
2014-07-17 21:29 - 2014-07-17 21:29 - 00000000 ____D () C:\Windows\system32\041F
2014-07-17 21:29 - 2014-07-17 21:29 - 00000000 ____D () C:\Windows\system32\041E
2014-07-17 21:29 - 2014-07-17 21:29 - 00000000 ____D () C:\Windows\system32\041D
2014-07-17 21:29 - 2014-07-17 21:29 - 00000000 ____D () C:\Windows\system32\041B
2014-07-17 21:29 - 2014-07-17 21:29 - 00000000 ____D () C:\Windows\system32\0419
2014-07-17 21:29 - 2014-07-17 21:29 - 00000000 ____D () C:\Windows\system32\0416
2014-07-17 21:29 - 2014-07-17 21:29 - 00000000 ____D () C:\Windows\system32\0415
2014-07-17 21:29 - 2014-07-17 21:29 - 00000000 ____D () C:\Windows\system32\0414
2014-07-17 21:29 - 2014-07-17 21:29 - 00000000 ____D () C:\Windows\system32\0413
2014-07-17 21:29 - 2014-07-17 21:29 - 00000000 ____D () C:\Windows\system32\0412
2014-07-17 21:29 - 2014-07-17 21:29 - 00000000 ____D () C:\Windows\system32\0411
2014-07-17 21:29 - 2014-07-17 21:29 - 00000000 ____D () C:\Windows\system32\0410
2014-07-17 21:29 - 2014-07-17 21:29 - 00000000 ____D () C:\Windows\system32\040E
2014-07-17 21:29 - 2014-07-17 21:29 - 00000000 ____D () C:\Windows\system32\040D
2014-07-17 21:29 - 2014-07-17 21:29 - 00000000 ____D () C:\Windows\system32\040C
2014-07-17 21:29 - 2014-07-17 21:29 - 00000000 ____D () C:\Windows\system32\040B
2014-07-17 21:29 - 2014-07-17 21:29 - 00000000 ____D () C:\Windows\system32\040A
2014-07-17 21:29 - 2014-07-17 21:29 - 00000000 ____D () C:\Windows\system32\0409
2014-07-17 21:29 - 2014-07-17 21:29 - 00000000 ____D () C:\Windows\system32\0408
2014-07-17 21:29 - 2014-07-17 21:29 - 00000000 ____D () C:\Windows\system32\0406
2014-07-17 21:29 - 2014-07-17 21:29 - 00000000 ____D () C:\Windows\system32\0405
2014-07-17 21:29 - 2014-07-17 21:29 - 00000000 ____D () C:\Windows\system32\0404
2014-07-17 21:29 - 2014-07-17 21:29 - 00000000 ____D () C:\Windows\system32\0401
2014-07-17 21:29 - 2014-07-17 21:29 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Renesas Electronics
2014-07-17 21:29 - 2014-07-17 21:29 - 00000000 ____D () C:\Program Files (x86)\Renesas Electronics
2014-07-17 21:28 - 2014-07-17 21:28 - 00000000 ____D () C:\Windows\SysWOW64\SDA
2014-07-17 21:28 - 2014-07-17 21:28 - 00000000 ____D () C:\Program Files (x86)\JMicron
2014-07-17 21:26 - 2014-07-17 21:29 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-07-17 21:26 - 2014-07-17 21:26 - 00074452 _____ () C:\Windows\system32\Drivers\RTWAVES30.dat
2014-07-17 21:26 - 2014-07-17 21:26 - 00000000 ___HD () C:\Program Files (x86)\Temp
2014-07-17 21:26 - 2014-07-17 21:26 - 00000000 ____D () C:\Windows\SysWOW64\RTCOM
2014-07-17 21:26 - 2014-07-17 21:26 - 00000000 ____D () C:\Windows\system32\SRSLabs
2014-07-17 21:26 - 2014-07-17 21:26 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dell Audio
2014-07-17 21:26 - 2014-07-17 21:26 - 00000000 ____D () C:\Program Files\Realtek
2014-07-17 21:26 - 2014-07-17 21:26 - 00000000 ____D () C:\Program Files (x86)\Realtek
2014-07-17 21:26 - 2011-08-31 19:12 - 01698408 _____ (Realtek Semiconductor Corp.) C:\Windows\RtlExUpd.dll
2014-07-17 21:26 - 2011-08-30 17:28 - 03069032 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RTKVHD64.sys
2014-07-17 21:26 - 2011-08-30 16:41 - 01501696 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCORES64.dat
2014-07-17 21:26 - 2011-08-30 13:37 - 02518632 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtPgEx64.dll
2014-07-17 21:26 - 2011-08-24 13:30 - 03201128 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkAPO64.dll
2014-07-17 21:26 - 2011-08-23 12:06 - 00097896 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoInst64.dll
2014-07-17 21:26 - 2011-08-19 21:10 - 00886360 _____ (Creative Technology Ltd.) C:\Windows\system32\MBAPO64.dll
2014-07-17 21:26 - 2011-08-19 21:10 - 00746072 _____ (Creative Technology Ltd.) C:\Windows\SysWOW64\MBAPO32.dll
2014-07-17 21:26 - 2011-08-19 21:10 - 00064600 _____ (Creative Technology Ltd.) C:\Windows\system32\MBppld64.dll
2014-07-17 21:26 - 2011-08-19 21:09 - 00626264 _____ (Creative Technology Ltd.) C:\Windows\system32\MBTHX64.dll
2014-07-17 21:26 - 2011-08-19 21:09 - 00561240 _____ (Creative Technology Ltd.) C:\Windows\SysWOW64\MBTHX32.dll
2014-07-17 21:26 - 2011-08-19 14:54 - 01881704 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkApi64.dll
2014-07-17 21:26 - 2011-07-28 00:55 - 02604376 _____ (Waves Audio Ltd.) C:\Windows\system32\WavesGUILib.dll
2014-07-17 21:26 - 2011-07-28 00:55 - 02132824 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioEQ.dll
2014-07-17 21:26 - 2011-07-22 19:35 - 01247848 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTCOM64.dll
2014-07-17 21:26 - 2011-06-30 16:14 - 01560168 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTSnMg64.cpl
2014-07-17 21:26 - 2011-06-27 14:45 - 03768152 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRealtek.dll
2014-07-17 21:26 - 2011-05-31 09:42 - 01756264 _____ (DTS) C:\Windows\system32\DTSS2SpeakerDLL64.dll
2014-07-17 21:26 - 2011-05-31 09:42 - 01568360 _____ (DTS) C:\Windows\system32\DTSS2HeadphoneDLL64.dll
2014-07-17 21:26 - 2011-05-31 09:42 - 01486952 _____ (DTS) C:\Windows\system32\DTSBoostDLL64.dll
2014-07-17 21:26 - 2011-05-31 09:42 - 00728680 _____ (DTS) C:\Windows\system32\DTSBassEnhancementDLL64.dll
2014-07-17 21:26 - 2011-05-31 09:42 - 00712296 _____ (DTS) C:\Windows\system32\DTSSymmetryDLL64.dll
2014-07-17 21:26 - 2011-05-31 09:42 - 00693352 _____ (DTS) C:\Windows\system32\DTSVoiceClarityDLL64.dll
2014-07-17 21:26 - 2011-05-31 09:42 - 00491112 _____ (DTS) C:\Windows\system32\DTSNeoPCDLL64.dll
2014-07-17 21:26 - 2011-05-31 09:42 - 00432744 _____ (DTS) C:\Windows\system32\DTSLimiterDLL64.dll
2014-07-17 21:26 - 2011-05-31 09:42 - 00428648 _____ (DTS) C:\Windows\system32\DTSGainCompensatorDLL64.dll
2014-07-17 21:26 - 2011-05-31 09:42 - 00242792 _____ (DTS) C:\Windows\system32\DTSLFXAPO64.dll
2014-07-17 21:26 - 2011-05-31 09:42 - 00242792 _____ (DTS) C:\Windows\system32\DTSGFXAPO64.dll
2014-07-17 21:26 - 2011-05-31 09:42 - 00241768 _____ (DTS) C:\Windows\system32\DTSGFXAPONS64.dll
2014-07-17 21:26 - 2011-05-05 15:24 - 02085440 _____ (Fortemedia Corporation) C:\Windows\system32\FMAPO64.dll
2014-07-17 21:26 - 2010-11-29 14:36 - 00702808 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRealtek2.dll
2014-07-17 21:26 - 2010-11-08 07:31 - 00375128 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEP64A.dll
2014-07-17 21:26 - 2010-11-08 07:31 - 00310104 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DHT64.dll
2014-07-17 21:26 - 2010-11-08 07:31 - 00310104 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DAA64.dll
2014-07-17 21:26 - 2010-11-08 07:31 - 00204120 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEED64A.dll
2014-07-17 21:26 - 2010-11-08 07:31 - 00101208 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEL64A.dll
2014-07-17 21:26 - 2010-11-08 07:31 - 00078680 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEG64A.dll
2014-07-17 21:26 - 2010-11-03 18:31 - 00332392 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtlCPAPI64.dll
2014-07-17 21:26 - 2010-11-03 18:30 - 00376936 _____ (Realtek Semiconductor) C:\Windows\system32\RtkGuiCompLib.dll
2014-07-17 21:26 - 2010-11-03 18:30 - 00149608 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCfg64.dll
2014-07-17 21:26 - 2010-10-03 13:46 - 00341336 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO30.dll
2014-07-17 21:26 - 2010-09-27 09:34 - 00318808 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO20.dll
2014-07-17 21:26 - 2010-07-22 16:37 - 00200800 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAC64.dll
2014-07-17 21:26 - 2010-07-02 19:40 - 00080984 _____ (Creative Technology Ltd.) C:\Windows\system32\MBWrp64.dll
2014-07-17 21:26 - 2010-05-06 17:34 - 00334680 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVolumeSDAPO.dll
2014-07-17 21:26 - 2009-11-24 09:55 - 00518896 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSX64.dll
2014-07-17 21:26 - 2009-11-24 09:55 - 00211184 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSH64.dll
2014-07-17 21:26 - 2009-11-24 09:55 - 00198896 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSHP64.dll
2014-07-17 21:26 - 2009-11-24 09:55 - 00155888 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSWOW64.dll
2014-07-17 21:26 - 2009-11-18 07:13 - 00060504 _____ (Creative Technology Ltd.) C:\Windows\system32\MBPPCn64.dll
2014-07-17 21:26 - 2009-11-17 18:12 - 00108960 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAR64.dll
2014-07-17 20:31 - 2014-07-17 20:32 - 00000000 ____D () C:\Users\mo\AppData\Roaming\Skype
2014-07-17 20:31 - 2014-07-17 20:31 - 00002517 _____ () C:\Users\Public\Desktop\Skype.lnk
2014-07-17 20:31 - 2014-07-17 20:31 - 00000000 ___RD () C:\Program Files (x86)\Skype
2014-07-17 20:31 - 2014-07-17 20:31 - 00000000 ____D () C:\Users\mo\AppData\Local\Skype
2014-07-17 20:31 - 2014-07-17 20:31 - 00000000 ____D () C:\ProgramData\Skype
2014-07-17 20:31 - 2014-07-17 20:31 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2014-07-17 20:26 - 2014-07-17 20:26 - 00000000 ____D () C:\Windows\system32\appmgmt
2014-07-17 20:19 - 2014-05-30 01:07 - 01715176 _____ (NVIDIA Corporation) C:\Windows\system32\nvspbridge64.dll
2014-07-17 20:19 - 2014-05-30 01:07 - 01291232 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspbridge.dll
2014-07-17 20:11 - 2014-07-17 20:19 - 00000000 ____D () C:\Users\mo\AppData\Local\NVIDIA Corporation
2014-07-17 20:11 - 2014-07-17 20:17 - 00000000 ____D () C:\Users\mo\AppData\Local\NVIDIA
2014-07-17 20:11 - 2014-05-30 01:07 - 01279480 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll
2014-07-17 20:11 - 2014-05-30 01:07 - 01122312 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll
2014-07-17 20:11 - 2010-05-26 11:41 - 02401112 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_43.dll
2014-07-17 20:11 - 2010-05-26 11:41 - 01998168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_43.dll
2014-07-17 20:11 - 2010-05-26 11:41 - 00511328 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_43.dll
2014-07-17 20:11 - 2010-05-26 11:41 - 00470880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_43.dll
2014-07-17 20:11 - 2010-05-26 11:41 - 00276832 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_43.dll
2014-07-17 20:11 - 2010-05-26 11:41 - 00248672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_43.dll
2014-07-17 20:10 - 2014-07-21 19:43 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-07-17 20:10 - 2014-07-17 20:16 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2014-07-17 20:10 - 2014-07-17 20:11 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation
2014-07-17 20:10 - 2014-07-17 20:10 - 00000000 ____D () C:\Program Files (x86)\AGEIA Technologies
2014-07-17 20:10 - 2014-05-20 03:25 - 06769096 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll
2014-07-17 20:10 - 2014-05-20 03:25 - 03514144 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll
2014-07-17 20:10 - 2014-05-20 03:25 - 02560968 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll
2014-07-17 20:10 - 2014-05-20 03:25 - 00927520 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
2014-07-17 20:10 - 2014-05-20 03:25 - 00387528 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll
2014-07-17 20:10 - 2014-05-20 03:25 - 00062808 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll
2014-07-17 20:10 - 2014-05-20 01:10 - 00601432 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe
2014-07-17 20:10 - 2014-05-15 01:49 - 03774821 _____ () C:\Windows\system32\nvcoproc.bin
2014-07-17 20:09 - 2014-07-17 20:16 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation
2014-07-17 20:09 - 2014-05-20 04:44 - 00061216 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll
2014-07-17 20:09 - 2014-05-20 04:44 - 00052056 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll
2014-07-17 20:08 - 2014-07-18 21:31 - 01589650 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2014-07-17 20:05 - 2014-05-21 19:02 - 01541576 _____ (NVIDIA Corporation) C:\Windows\system32\nvir3dgenco64.dll
2014-07-17 20:05 - 2014-05-21 19:02 - 00451872 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvstusb.sys
2014-07-17 20:05 - 2014-05-20 04:44 - 31387936 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2014-07-17 20:05 - 2014-05-20 04:44 - 25256224 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2014-07-17 20:05 - 2014-05-20 04:44 - 24025376 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2014-07-17 20:05 - 2014-05-20 04:44 - 18531568 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll
2014-07-17 20:05 - 2014-05-20 04:44 - 17561544 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2014-07-17 20:05 - 2014-05-20 04:44 - 17480432 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2014-07-17 20:05 - 2014-05-20 04:44 - 16003912 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2014-07-17 20:05 - 2014-05-20 04:44 - 14434704 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll
2014-07-17 20:05 - 2014-05-20 04:44 - 12688328 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2014-07-17 20:05 - 2014-05-20 04:44 - 11644928 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2014-07-17 20:05 - 2014-05-20 04:44 - 11599072 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2014-07-17 20:05 - 2014-05-20 04:44 - 09735256 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2014-07-17 20:05 - 2014-05-20 04:44 - 09697640 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2014-07-17 20:05 - 2014-05-20 04:44 - 03141976 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2014-07-17 20:05 - 2014-05-20 04:44 - 03109248 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
2014-07-17 20:05 - 2014-05-20 04:44 - 02953672 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2014-07-17 20:05 - 2014-05-20 04:44 - 02785568 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll
2014-07-17 20:05 - 2014-05-20 04:44 - 02730208 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
2014-07-17 20:05 - 2014-05-20 04:44 - 02412376 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll
2014-07-17 20:05 - 2014-05-20 04:44 - 01889112 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6433788.dll
2014-07-17 20:05 - 2014-05-20 04:44 - 01541576 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6433788.dll
2014-07-17 20:05 - 2014-05-20 04:44 - 01515296 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdagenco6420103.dll
2014-07-17 20:05 - 2014-05-20 04:44 - 00895776 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2014-07-17 20:05 - 2014-05-20 04:44 - 00892704 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2014-07-17 20:05 - 2014-05-20 04:44 - 00867784 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2014-07-17 20:05 - 2014-05-20 04:44 - 00861128 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2014-07-17 20:05 - 2014-05-20 04:44 - 00197408 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvhda64v.sys
2014-07-17 20:05 - 2014-05-20 04:44 - 00031520 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdap64.dll
2014-07-17 20:05 - 2014-05-20 04:44 - 00026069 _____ () C:\Windows\system32\nvinfo.pb
2014-07-17 20:02 - 2014-07-17 20:18 - 00000000 ____D () C:\Program Files\NVIDIA Corporation
2014-07-17 20:02 - 2014-07-17 20:02 - 00000000 ____D () C:\NVIDIA
2014-07-17 20:02 - 2014-03-31 18:42 - 00040392 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys
2014-07-17 20:02 - 2014-03-31 18:42 - 00037320 _____ (NVIDIA Corporation) C:\Windows\system32\nvaudcap64v.dll
2014-07-17 20:02 - 2014-03-31 18:42 - 00034760 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll
2014-07-17 20:01 - 2014-07-17 20:01 - 00002762 _____ () C:\Windows\System32\Tasks\CCleanerSkipUAC
2014-07-17 20:01 - 2014-07-17 20:01 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2014-07-17 19:59 - 2014-07-17 19:59 - 00001647 _____ () C:\Users\Public\Desktop\DAEMON Tools Lite.lnk
2014-07-17 19:59 - 2014-07-17 19:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DAEMON Tools Lite
2014-07-17 19:58 - 2014-07-17 19:59 - 00000000 ____D () C:\Users\mo\AppData\Roaming\DAEMON Tools Lite
2014-07-17 19:58 - 2014-07-17 19:58 - 00283064 _____ (Disc Soft Ltd) C:\Windows\system32\Drivers\dtsoftbus01.sys
2014-07-17 19:57 - 2014-07-17 19:58 - 00000000 ____D () C:\ProgramData\DAEMON Tools Lite
2014-07-17 19:54 - 2014-07-17 19:54 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IrfanView
2014-07-17 19:51 - 2014-07-17 19:51 - 00001013 _____ () C:\Users\Public\Desktop\PDF Architect 2.lnk
2014-07-17 19:51 - 2014-07-17 19:51 - 00000752 _____ () C:\Users\Public\Desktop\PDFCreator.lnk
2014-07-17 19:51 - 2014-07-17 19:51 - 00000000 ____D () C:\Users\mo\Documents\PDF Architect 2
2014-07-17 19:51 - 2014-07-17 19:51 - 00000000 ____D () C:\Users\mo\AppData\Roaming\pdfforge
2014-07-17 19:51 - 2014-07-17 19:51 - 00000000 ____D () C:\ProgramData\PDF Architect 2
2014-07-17 19:51 - 2014-07-17 19:51 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDFCreator
2014-07-17 19:51 - 2014-07-17 19:51 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDF Architect 2
2014-07-17 19:51 - 2014-07-17 19:51 - 00000000 ____D () C:\Program Files (x86)\PDF Architect 2
2014-07-17 19:51 - 2014-04-25 17:44 - 01070152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSCOMCTL.OCX
2014-07-17 19:51 - 2014-04-25 17:44 - 00662288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSCOMCT2.OCX
2014-07-17 19:51 - 2014-04-25 17:44 - 00137000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSMAPI32.OCX
2014-07-17 19:51 - 2014-04-25 17:44 - 00110264 _____ (pdfforge GmbH) C:\Windows\system32\pdfcmon.dll
2014-07-17 19:51 - 2014-04-25 17:44 - 00023552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSMPIDE.DLL
2014-07-17 19:51 - 1998-07-06 18:56 - 00125712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\VB6DE.DLL
2014-07-17 19:51 - 1998-07-06 18:55 - 00158208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSCMCDE.DLL
2014-07-17 19:51 - 1998-07-06 18:55 - 00064512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSCC2DE.DLL
2014-07-17 19:49 - 2014-07-17 19:49 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FastStone Capture
2014-07-17 19:47 - 2014-07-17 19:47 - 00000000 ____D () C:\Users\mo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2014-07-17 19:47 - 2014-07-17 19:47 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2014-07-17 19:43 - 2014-07-17 19:43 - 00001870 _____ () C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2014-07-17 19:43 - 2014-07-17 19:43 - 00000000 ____D () C:\Users\mo\AppData\Roaming\AVAST Software
2014-07-17 19:43 - 2014-07-17 19:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast
2014-07-17 19:42 - 2014-07-22 14:04 - 00004170 _____ () C:\Windows\System32\Tasks\avast! Emergency Update
2014-07-17 19:42 - 2014-07-17 19:42 - 01041168 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2014-07-17 19:42 - 2014-07-17 19:42 - 00427360 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsp.sys
2014-07-17 19:42 - 2014-07-17 19:42 - 00307344 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2014-07-17 19:42 - 2014-07-17 19:42 - 00224896 _____ () C:\Windows\system32\Drivers\aswVmm.sys
2014-07-17 19:42 - 2014-07-17 19:42 - 00093568 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2014-07-17 19:42 - 2014-07-17 19:42 - 00092008 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys
2014-07-17 19:42 - 2014-07-17 19:42 - 00079184 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2014-07-17 19:42 - 2014-07-17 19:42 - 00065776 _____ () C:\Windows\system32\Drivers\aswRvrt.sys
2014-07-17 19:42 - 2014-07-17 19:42 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr
2014-07-17 19:42 - 2014-07-17 19:42 - 00029208 _____ () C:\Windows\system32\Drivers\aswHwid.sys
2014-07-17 19:41 - 2014-07-17 19:42 - 00000000 ____D () C:\ProgramData\AVAST Software
2014-07-17 19:41 - 2014-07-17 19:41 - 00057560 _____ () C:\Users\mo\AppData\Local\GDIPFONTCACHEV1.DAT
2014-07-17 19:38 - 2014-07-17 23:12 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-07-17 19:38 - 2014-07-17 19:38 - 00001159 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-07-17 19:38 - 2014-07-17 19:38 - 00001147 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-07-17 19:38 - 2014-07-17 19:38 - 00000000 ____D () C:\Users\mo\AppData\Roaming\Mozilla
2014-07-17 19:38 - 2014-07-17 19:38 - 00000000 ____D () C:\Users\mo\AppData\Local\Mozilla
2014-07-17 19:38 - 2014-07-17 19:38 - 00000000 ____D () C:\ProgramData\Mozilla
2014-07-17 19:38 - 2014-07-17 19:38 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-07-17 19:31 - 2014-07-17 19:31 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_AMPPAL_01009.Wdf
2014-07-17 19:30 - 2014-07-17 19:30 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel PROSet Wireless
2014-07-17 19:30 - 2014-07-17 19:30 - 00000000 ____D () C:\Users\mo\AppData\Roaming\Intel
2014-07-17 19:30 - 2014-07-17 19:30 - 00000000 ____D () C:\ProgramData\Intel
2014-07-17 19:30 - 2014-07-17 19:30 - 00000000 ____D () C:\Program Files\Common Files\Intel
2014-07-17 19:30 - 2014-07-17 19:30 - 00000000 ____D () C:\Program Files (x86)\Intel
2014-07-17 19:30 - 2014-07-17 19:30 - 00000000 ____D () C:\Program Files (x86)\Cisco
2014-07-17 19:28 - 2014-07-17 19:28 - 00003090 _____ () C:\Windows\System32\Tasks\{B0234288-DAC0-4B34-A7E4-7634E520661F}
2014-07-17 19:03 - 2014-07-17 18:08 - 00000000 ____D () C:\Windows\Panther
2014-07-17 18:48 - 2014-07-17 18:48 - 00003056 _____ () C:\Windows\System32\Tasks\{5967923B-4BAC-4021-9DBA-87D41D3F6A59}
2014-07-17 18:26 - 2014-07-17 18:26 - 00000000 ____D () C:\ProgramData\Dell
2014-07-17 18:20 - 2014-07-17 23:58 - 00000000 ____D () C:\Install
2014-07-17 18:20 - 2014-07-17 19:30 - 00012968 _____ () C:\Windows\DPINST.LOG
2014-07-17 18:20 - 2014-07-17 18:20 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_iBtFltCoex_01009.Wdf
2014-07-17 18:20 - 2014-07-17 18:20 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_btmaux_01009.Wdf
2014-07-17 18:20 - 2014-07-17 18:20 - 00000000 ____D () C:\Program Files\Intel
2014-07-17 18:17 - 2014-07-17 18:17 - 00000000 ____D () C:\Users\mo\AppData\Roaming\WirelessManager
2014-07-17 18:15 - 2014-07-17 18:15 - 00000000 ____D () C:\Users\mo\AppData\Local\Downloaded Installations
2014-07-17 18:15 - 2014-07-17 18:15 - 00000000 ____D () C:\ProgramData\Novatel Wireless
2014-07-17 18:15 - 2009-12-29 16:36 - 00041280 _____ (Printing Communications Assoc., Inc. (PCAUSA)) C:\Windows\system32\Drivers\PCASp50a64.sys
2014-07-17 18:14 - 2014-07-17 20:26 - 00000000 ____D () C:\dell
2014-07-17 18:09 - 2014-07-22 14:15 - 01186900 _____ () C:\Windows\WindowsUpdate.log
2014-07-17 18:08 - 2014-07-22 14:18 - 00000000 ____D () C:\Users\mo
2014-07-17 18:08 - 2014-07-17 18:08 - 00001439 _____ () C:\Users\mo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-07-17 18:08 - 2014-07-17 18:08 - 00001405 _____ () C:\Users\mo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk
2014-07-17 18:08 - 2014-07-17 18:08 - 00000020 ___SH () C:\Users\mo\ntuser.ini
2014-07-17 18:08 - 2014-07-17 18:08 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Musik
2014-07-17 18:08 - 2014-07-17 18:08 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Bilder
2014-07-17 18:08 - 2014-07-17 18:08 - 00000000 _SHDL () C:\Users\mo\Vorlagen
2014-07-17 18:08 - 2014-07-17 18:08 - 00000000 _SHDL () C:\Users\mo\Startmenü
2014-07-17 18:08 - 2014-07-17 18:08 - 00000000 _SHDL () C:\Users\mo\Netzwerkumgebung
2014-07-17 18:08 - 2014-07-17 18:08 - 00000000 _SHDL () C:\Users\mo\Lokale Einstellungen
2014-07-17 18:08 - 2014-07-17 18:08 - 00000000 _SHDL () C:\Users\mo\Eigene Dateien
2014-07-17 18:08 - 2014-07-17 18:08 - 00000000 _SHDL () C:\Users\mo\Druckumgebung
2014-07-17 18:08 - 2014-07-17 18:08 - 00000000 _SHDL () C:\Users\mo\Documents\Eigene Musik
2014-07-17 18:08 - 2014-07-17 18:08 - 00000000 _SHDL () C:\Users\mo\Documents\Eigene Bilder
2014-07-17 18:08 - 2014-07-17 18:08 - 00000000 _SHDL () C:\Users\mo\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-07-17 18:08 - 2014-07-17 18:08 - 00000000 _SHDL () C:\Users\mo\AppData\Local\Verlauf
2014-07-17 18:08 - 2014-07-17 18:08 - 00000000 _SHDL () C:\Users\mo\AppData\Local\Anwendungsdaten
2014-07-17 18:08 - 2014-07-17 18:08 - 00000000 _SHDL () C:\Users\mo\Anwendungsdaten
2014-07-17 18:08 - 2014-07-17 18:08 - 00000000 _SHDL () C:\Users\Default\Vorlagen
2014-07-17 18:08 - 2014-07-17 18:08 - 00000000 _SHDL () C:\Users\Default\Startmenü
2014-07-17 18:08 - 2014-07-17 18:08 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung
2014-07-17 18:08 - 2014-07-17 18:08 - 00000000 _SHDL () C:\Users\Default\Lokale Einstellungen
2014-07-17 18:08 - 2014-07-17 18:08 - 00000000 _SHDL () C:\Users\Default\Eigene Dateien
2014-07-17 18:08 - 2014-07-17 18:08 - 00000000 _SHDL () C:\Users\Default\Druckumgebung
2014-07-17 18:08 - 2014-07-17 18:08 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik
2014-07-17 18:08 - 2014-07-17 18:08 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder
2014-07-17 18:08 - 2014-07-17 18:08 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-07-17 18:08 - 2014-07-17 18:08 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf
2014-07-17 18:08 - 2014-07-17 18:08 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Anwendungsdaten
2014-07-17 18:08 - 2014-07-17 18:08 - 00000000 _SHDL () C:\Users\Default\Anwendungsdaten
2014-07-17 18:08 - 2014-07-17 18:08 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik
2014-07-17 18:08 - 2014-07-17 18:08 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder
2014-07-17 18:08 - 2014-07-17 18:08 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-07-17 18:08 - 2014-07-17 18:08 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf
2014-07-17 18:08 - 2014-07-17 18:08 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Anwendungsdaten
2014-07-17 18:08 - 2014-07-17 18:08 - 00000000 _SHDL () C:\Programme
2014-07-17 18:08 - 2014-07-17 18:08 - 00000000 _SHDL () C:\ProgramData\Vorlagen
2014-07-17 18:08 - 2014-07-17 18:08 - 00000000 _SHDL () C:\ProgramData\Startmenü
2014-07-17 18:08 - 2014-07-17 18:08 - 00000000 _SHDL () C:\ProgramData\Microsoft\Windows\Start Menu\Programme
2014-07-17 18:08 - 2014-07-17 18:08 - 00000000 _SHDL () C:\ProgramData\Favoriten
2014-07-17 18:08 - 2014-07-17 18:08 - 00000000 _SHDL () C:\ProgramData\Dokumente
2014-07-17 18:08 - 2014-07-17 18:08 - 00000000 _SHDL () C:\ProgramData\Anwendungsdaten
2014-07-17 18:08 - 2014-07-17 18:08 - 00000000 _SHDL () C:\Program Files\Gemeinsame Dateien
2014-07-17 18:08 - 2014-07-17 18:08 - 00000000 _SHDL () C:\Dokumente und Einstellungen
2014-07-17 18:08 - 2014-07-17 18:08 - 00000000 __SHD () C:\Recovery
2014-07-17 18:08 - 2014-07-17 18:08 - 00000000 ____D () C:\Users\mo\AppData\Local\VirtualStore
2014-07-17 18:08 - 2009-07-14 06:54 - 00000000 ___RD () C:\Users\mo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-07-17 18:08 - 2009-07-14 06:49 - 00000000 ___RD () C:\Users\mo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2014-07-17 18:04 - 2014-07-17 18:04 - 00001355 _____ () C:\Windows\TSSysprep.log
2014-07-17 18:04 - 2014-07-17 18:04 - 00001345 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk
2014-07-17 18:04 - 2014-07-17 18:04 - 00001326 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk
2014-07-17 18:03 - 2014-07-17 18:03 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdFs_01_09_00.Wdf

==================== One Month Modified Files and Folders =======

2014-07-22 14:20 - 2014-07-22 14:19 - 00016009 _____ () C:\Users\mo\Downloads\FRST.txt
2014-07-22 14:19 - 2014-07-22 14:19 - 00000000 ____D () C:\FRST
2014-07-22 14:18 - 2014-07-22 14:18 - 00000544 _____ () C:\Users\mo\Downloads\defogger_disable.log
2014-07-22 14:18 - 2014-07-22 14:18 - 00000144 _____ () C:\Users\mo\defogger_reenable
2014-07-22 14:18 - 2014-07-17 18:08 - 00000000 ____D () C:\Users\mo
2014-07-22 14:17 - 2014-07-22 14:17 - 02090496 _____ (Farbar) C:\Users\mo\Downloads\FRST64.exe
2014-07-22 14:17 - 2014-07-22 14:17 - 00050477 _____ () C:\Users\mo\Downloads\Defogger.exe
2014-07-22 14:15 - 2014-07-17 18:09 - 01186900 _____ () C:\Windows\WindowsUpdate.log
2014-07-22 14:14 - 2014-07-22 14:14 - 00380416 _____ () C:\Users\mo\Downloads\dflq5h5m.exe
2014-07-22 14:05 - 2009-07-14 06:51 - 00029109 _____ () C:\Windows\setupact.log
2014-07-22 14:04 - 2014-07-17 22:36 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-07-22 14:04 - 2014-07-17 19:42 - 00004170 _____ () C:\Windows\System32\Tasks\avast! Emergency Update
2014-07-22 00:28 - 2014-07-22 00:28 - 00000000 ____D () C:\Users\mo\AppData\Roaming\PDF Architect 2
2014-07-21 23:30 - 2014-07-21 23:26 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-07-21 23:29 - 2014-07-21 23:29 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SharePoint
2014-07-21 23:29 - 2014-07-21 23:29 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
2014-07-21 23:28 - 2014-07-21 23:28 - 00000000 ____D () C:\Windows\PCHEALTH
2014-07-21 23:28 - 2014-07-21 23:28 - 00000000 ____D () C:\Program Files (x86)\Microsoft Synchronization Services
2014-07-21 23:28 - 2014-07-21 23:28 - 00000000 ____D () C:\Program Files (x86)\Microsoft Sync Framework
2014-07-21 23:28 - 2014-07-21 23:28 - 00000000 ____D () C:\Program Files (x86)\Microsoft SQL Server Compact Edition
2014-07-21 23:28 - 2014-07-21 23:26 - 00000000 ____D () C:\Program Files (x86)\Microsoft Office
2014-07-21 23:28 - 2011-04-12 09:55 - 00000000 ____D () C:\Windows\ShellNew
2014-07-21 23:28 - 2009-07-14 07:32 - 00000000 ____D () C:\Program Files (x86)\MSBuild
2014-07-21 23:27 - 2014-07-21 23:27 - 00000000 ____D () C:\Windows\System32\Tasks\OfficeSoftwareProtectionPlatform
2014-07-21 23:27 - 2009-07-14 05:20 - 00000000 ____D () C:\Program Files\Common Files\Microsoft Shared
2014-07-21 23:26 - 2014-07-21 23:26 - 00000000 __RHD () C:\MSOCache
2014-07-21 23:26 - 2014-07-21 23:26 - 00000000 ____D () C:\Users\mo\AppData\Local\Microsoft Help
2014-07-21 23:26 - 2014-07-21 23:26 - 00000000 ____D () C:\Program Files\Microsoft Office
2014-07-21 23:26 - 2014-07-21 23:26 - 00000000 ____D () C:\Program Files (x86)\Microsoft Visual Studio 8
2014-07-21 23:26 - 2014-07-21 23:26 - 00000000 ____D () C:\Program Files (x86)\Microsoft Analysis Services
2014-07-21 23:26 - 2009-07-14 04:34 - 00000478 _____ () C:\Windows\win.ini
2014-07-21 22:41 - 2014-07-17 22:36 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-07-21 22:20 - 2014-07-21 22:19 - 00000222 _____ () C:\Users\mo\Desktop\keys.txt
2014-07-21 22:20 - 2011-04-12 09:43 - 00698572 _____ () C:\Windows\system32\perfh007.dat
2014-07-21 22:20 - 2011-04-12 09:43 - 00148876 _____ () C:\Windows\system32\perfc007.dat
2014-07-21 22:20 - 2009-07-14 07:13 - 01612484 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-07-21 19:50 - 2014-07-17 23:43 - 00000000 ___RD () C:\Users\mo\Dropbox
2014-07-21 19:50 - 2014-07-17 23:41 - 00000000 ____D () C:\Users\mo\AppData\Roaming\Dropbox
2014-07-21 19:50 - 2009-07-14 06:45 - 00021808 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-07-21 19:50 - 2009-07-14 06:45 - 00021808 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-07-21 19:43 - 2014-07-17 20:10 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-07-21 19:43 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-07-21 18:40 - 2014-07-18 21:01 - 00050058 _____ () C:\Windows\IE11_main.log
2014-07-21 16:40 - 2014-07-21 16:40 - 00000175 _____ () C:\Users\mo\Desktop\Neues Textdokument (2).txt
2014-07-19 18:55 - 2014-07-19 18:08 - 00011379 _____ () C:\Users\mo\Downloads\SecureDownloadManager.log
2014-07-19 18:29 - 2014-07-19 18:29 - 00000173 _____ () C:\Users\mo\AppData\Local\msmathematics.qat.mo
2014-07-19 18:22 - 2014-07-19 18:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Mathematics (64-bit)
2014-07-19 18:22 - 2014-07-19 18:21 - 19809368 _____ (Microsoft Corporation) C:\Users\mo\Downloads\MSetup_x64.exe
2014-07-19 18:14 - 2014-07-19 18:14 - 00000000 ____D () C:\Users\mo\Documents\Eigene virtuelle Computer
2014-07-19 18:12 - 2014-07-19 18:12 - 00001576 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Virtual PC.lnk
2014-07-19 18:12 - 2014-07-19 18:12 - 00000000 ____D () C:\Windows\system32\Treiber
2014-07-19 18:10 - 2014-07-19 17:20 - 00000613 _____ () C:\Users\Public\Desktop\Steam.lnk
2014-07-19 18:08 - 2014-07-19 18:08 - 00003175 _____ () C:\Users\mo\Desktop\Secure Download Manager.lnk
2014-07-19 18:08 - 2014-07-19 18:08 - 00000000 ____D () C:\Users\mo\AppData\Roaming\e-academy Inc
2014-07-19 17:26 - 2014-07-19 17:26 - 00000207 _____ () C:\Users\mo\Desktop\Call of Duty Modern Warfare 2 - Multiplayer.url
2014-07-19 17:26 - 2014-07-19 17:26 - 00000000 ____D () C:\Users\mo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2014-07-19 17:20 - 2014-07-19 17:20 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam
2014-07-19 17:19 - 2014-07-19 17:19 - 01141680 _____ () C:\Users\mo\Downloads\SteamSetup.exe
2014-07-19 17:07 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache
2014-07-18 21:31 - 2014-07-17 20:08 - 01589650 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2014-07-18 17:52 - 2014-07-18 17:52 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2014-07-18 17:52 - 2014-07-18 17:52 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-07-18 17:52 - 2014-07-18 17:52 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
2014-07-18 16:55 - 2010-11-21 05:47 - 00007242 _____ () C:\Windows\PFRO.log
2014-07-18 00:07 - 2014-07-18 00:07 - 00002393 _____ () C:\Users\mo\Desktop\Sagas - Chrome.lnk
2014-07-18 00:07 - 2014-07-18 00:07 - 00002393 _____ () C:\Users\mo\Desktop\Filme - Chrome.lnk
2014-07-18 00:06 - 2014-07-18 00:06 - 00002393 _____ () C:\Users\mo\Desktop\Mo - Chrome.lnk
2014-07-17 23:59 - 2014-07-17 23:59 - 00000000 ____D () C:\Program Files\Autodesk
2014-07-17 23:59 - 2014-07-17 23:58 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Autodesk
2014-07-17 23:59 - 2014-07-17 23:58 - 00000000 ____D () C:\ProgramData\Autodesk
2014-07-17 23:58 - 2014-07-17 23:58 - 00001054 _____ () C:\Users\Public\Desktop\LMTOOLS Utility.lnk
2014-07-17 23:58 - 2014-07-17 23:58 - 00000000 ____D () C:\Users\mo\AppData\Roaming\Autodesk
2014-07-17 23:58 - 2014-07-17 18:20 - 00000000 ____D () C:\Install
2014-07-17 23:57 - 2014-07-17 23:57 - 00000000 ____D () C:\Users\mo\AppData\Local\Akamai
2014-07-17 23:56 - 2014-07-17 23:56 - 00000000 ____D () C:\Autodesk
2014-07-17 23:43 - 2014-07-17 23:43 - 00001037 _____ () C:\Users\mo\Desktop\Dropbox.lnk
2014-07-17 23:41 - 2014-07-17 23:41 - 00000000 ____D () C:\Users\mo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2014-07-17 23:12 - 2014-07-17 23:12 - 00000000 ____D () C:\Users\mo\AppData\Roaming\DivX
2014-07-17 23:12 - 2014-07-17 23:12 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DivX
2014-07-17 23:12 - 2014-07-17 23:12 - 00000000 ____D () C:\Program Files\DivX
2014-07-17 23:12 - 2014-07-17 23:12 - 00000000 ____D () C:\Program Files (x86)\DivX
2014-07-17 23:12 - 2014-07-17 23:10 - 00000000 ____D () C:\ProgramData\DivX
2014-07-17 23:12 - 2014-07-17 19:38 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-07-17 23:06 - 2014-07-17 23:06 - 00000045 _____ () C:\Windows\SysWOW64\initdebug.nfo
2014-07-17 22:57 - 2014-07-17 22:57 - 00000822 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GIMP 2.lnk
2014-07-17 22:53 - 2014-07-17 22:53 - 00001253 _____ () C:\Users\Public\Desktop\Free YouTube to MP3 Converter.lnk
2014-07-17 22:53 - 2014-07-17 22:53 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft
2014-07-17 22:53 - 2014-07-17 22:52 - 00000000 ____D () C:\Users\mo\AppData\Roaming\DVDVideoSoft
2014-07-17 22:47 - 2014-07-17 22:47 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Total Commander
2014-07-17 22:46 - 2014-07-17 22:46 - 00000000 ____D () C:\Users\mo\AppData\Roaming\GHISLER
2014-07-17 22:36 - 2014-07-17 22:36 - 00004106 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-07-17 22:36 - 2014-07-17 22:36 - 00003854 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-07-17 22:36 - 2014-07-17 22:36 - 00000000 ____D () C:\Users\mo\AppData\Local\Google
2014-07-17 22:36 - 2014-07-17 22:36 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2014-07-17 22:36 - 2014-07-17 22:36 - 00000000 ____D () C:\Program Files (x86)\Google
2014-07-17 22:33 - 2014-07-17 22:33 - 00000000 ____D () C:\Users\mo\AppData\Roaming\FastStone
2014-07-17 22:25 - 2014-07-17 22:25 - 00000000 ____D () C:\Users\mo\AppData\Roaming\Macromedia
2014-07-17 22:25 - 2014-07-17 22:25 - 00000000 ____D () C:\Users\mo\AppData\Roaming\Adobe
2014-07-17 22:25 - 2014-07-17 22:25 - 00000000 ____D () C:\Users\mo\AppData\Local\Macromedia
2014-07-17 22:24 - 2014-07-17 22:24 - 00699056 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-07-17 22:24 - 2014-07-17 22:24 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-07-17 22:24 - 2014-07-17 22:24 - 00000000 ____D () C:\Windows\SysWOW64\Macromed
2014-07-17 22:24 - 2014-07-17 22:24 - 00000000 ____D () C:\Windows\system32\Macromed
2014-07-17 22:21 - 2014-07-17 22:21 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
2014-07-17 22:21 - 2014-07-17 22:21 - 00000000 ____D () C:\Program Files (x86)\Adobe
2014-07-17 22:21 - 2014-07-17 22:20 - 00000000 ____D () C:\ProgramData\Adobe
2014-07-17 22:05 - 2014-07-17 22:05 - 00272808 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-07-17 22:05 - 2014-07-17 22:05 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-07-17 22:05 - 2014-07-17 22:05 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-07-17 22:05 - 2014-07-17 22:05 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-07-17 22:05 - 2014-07-17 22:05 - 00000000 ____D () C:\ProgramData\Sun
2014-07-17 22:05 - 2014-07-17 22:05 - 00000000 ____D () C:\ProgramData\Oracle
2014-07-17 22:05 - 2014-07-17 22:05 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-07-17 22:02 - 2014-07-17 22:02 - 00001606 _____ () C:\Users\mo\AppData\Roaming\Microsoft\Windows\Start Menu\FreeMind.lnk
2014-07-17 22:02 - 2014-07-17 22:02 - 00001582 _____ () C:\Users\mo\Desktop\FreeMind.lnk
2014-07-17 22:02 - 2014-07-17 22:02 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FreeMind
2014-07-17 21:29 - 2014-07-17 21:29 - 00000000 ____D () C:\Windows\system32\2C0A
2014-07-17 21:29 - 2014-07-17 21:29 - 00000000 ____D () C:\Windows\system32\0C0A
2014-07-17 21:29 - 2014-07-17 21:29 - 00000000 ____D () C:\Windows\system32\0C04
2014-07-17 21:29 - 2014-07-17 21:29 - 00000000 ____D () C:\Windows\system32\0816
2014-07-17 21:29 - 2014-07-17 21:29 - 00000000 ____D () C:\Windows\system32\0804
2014-07-17 21:29 - 2014-07-17 21:29 - 00000000 ____D () C:\Windows\system32\0424
2014-07-17 21:29 - 2014-07-17 21:29 - 00000000 ____D () C:\Windows\system32\041F
2014-07-17 21:29 - 2014-07-17 21:29 - 00000000 ____D () C:\Windows\system32\041E
2014-07-17 21:29 - 2014-07-17 21:29 - 00000000 ____D () C:\Windows\system32\041D
2014-07-17 21:29 - 2014-07-17 21:29 - 00000000 ____D () C:\Windows\system32\041B
2014-07-17 21:29 - 2014-07-17 21:29 - 00000000 ____D () C:\Windows\system32\0419
2014-07-17 21:29 - 2014-07-17 21:29 - 00000000 ____D () C:\Windows\system32\0416
2014-07-17 21:29 - 2014-07-17 21:29 - 00000000 ____D () C:\Windows\system32\0415
2014-07-17 21:29 - 2014-07-17 21:29 - 00000000 ____D () C:\Windows\system32\0414
2014-07-17 21:29 - 2014-07-17 21:29 - 00000000 ____D () C:\Windows\system32\0413
2014-07-17 21:29 - 2014-07-17 21:29 - 00000000 ____D () C:\Windows\system32\0412
2014-07-17 21:29 - 2014-07-17 21:29 - 00000000 ____D () C:\Windows\system32\0411
2014-07-17 21:29 - 2014-07-17 21:29 - 00000000 ____D () C:\Windows\system32\0410
2014-07-17 21:29 - 2014-07-17 21:29 - 00000000 ____D () C:\Windows\system32\040E
2014-07-17 21:29 - 2014-07-17 21:29 - 00000000 ____D () C:\Windows\system32\040D
2014-07-17 21:29 - 2014-07-17 21:29 - 00000000 ____D () C:\Windows\system32\040C
2014-07-17 21:29 - 2014-07-17 21:29 - 00000000 ____D () C:\Windows\system32\040B
2014-07-17 21:29 - 2014-07-17 21:29 - 00000000 ____D () C:\Windows\system32\040A
2014-07-17 21:29 - 2014-07-17 21:29 - 00000000 ____D () C:\Windows\system32\0409
2014-07-17 21:29 - 2014-07-17 21:29 - 00000000 ____D () C:\Windows\system32\0408
2014-07-17 21:29 - 2014-07-17 21:29 - 00000000 ____D () C:\Windows\system32\0406
2014-07-17 21:29 - 2014-07-17 21:29 - 00000000 ____D () C:\Windows\system32\0405
2014-07-17 21:29 - 2014-07-17 21:29 - 00000000 ____D () C:\Windows\system32\0404
2014-07-17 21:29 - 2014-07-17 21:29 - 00000000 ____D () C:\Windows\system32\0401
2014-07-17 21:29 - 2014-07-17 21:29 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Renesas Electronics
2014-07-17 21:29 - 2014-07-17 21:29 - 00000000 ____D () C:\Program Files (x86)\Renesas Electronics
2014-07-17 21:29 - 2014-07-17 21:26 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-07-17 21:29 - 2011-04-12 09:43 - 00000000 ____D () C:\Windows\system32\0407
2014-07-17 21:28 - 2014-07-17 21:28 - 00000000 ____D () C:\Windows\SysWOW64\SDA
2014-07-17 21:28 - 2014-07-17 21:28 - 00000000 ____D () C:\Program Files (x86)\JMicron
2014-07-17 21:26 - 2014-07-17 21:26 - 00074452 _____ () C:\Windows\system32\Drivers\RTWAVES30.dat
2014-07-17 21:26 - 2014-07-17 21:26 - 00000000 ___HD () C:\Program Files (x86)\Temp
2014-07-17 21:26 - 2014-07-17 21:26 - 00000000 ____D () C:\Windows\SysWOW64\RTCOM
2014-07-17 21:26 - 2014-07-17 21:26 - 00000000 ____D () C:\Windows\system32\SRSLabs
2014-07-17 21:26 - 2014-07-17 21:26 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dell Audio
2014-07-17 21:26 - 2014-07-17 21:26 - 00000000 ____D () C:\Program Files\Realtek
2014-07-17 21:26 - 2014-07-17 21:26 - 00000000 ____D () C:\Program Files (x86)\Realtek
2014-07-17 20:32 - 2014-07-17 20:31 - 00000000 ____D () C:\Users\mo\AppData\Roaming\Skype
2014-07-17 20:31 - 2014-07-17 20:31 - 00002517 _____ () C:\Users\Public\Desktop\Skype.lnk
2014-07-17 20:31 - 2014-07-17 20:31 - 00000000 ___RD () C:\Program Files (x86)\Skype
2014-07-17 20:31 - 2014-07-17 20:31 - 00000000 ____D () C:\Users\mo\AppData\Local\Skype
2014-07-17 20:31 - 2014-07-17 20:31 - 00000000 ____D () C:\ProgramData\Skype
2014-07-17 20:31 - 2014-07-17 20:31 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2014-07-17 20:26 - 2014-07-17 20:26 - 00000000 ____D () C:\Windows\system32\appmgmt
2014-07-17 20:26 - 2014-07-17 18:14 - 00000000 ____D () C:\dell
2014-07-17 20:19 - 2014-07-17 20:11 - 00000000 ____D () C:\Users\mo\AppData\Local\NVIDIA Corporation
2014-07-17 20:18 - 2014-07-17 20:02 - 00000000 ____D () C:\Program Files\NVIDIA Corporation
2014-07-17 20:17 - 2014-07-17 20:11 - 00000000 ____D () C:\Users\mo\AppData\Local\NVIDIA
2014-07-17 20:16 - 2014-07-17 20:10 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2014-07-17 20:16 - 2014-07-17 20:09 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation
2014-07-17 20:11 - 2014-07-17 20:10 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation
2014-07-17 20:10 - 2014-07-17 20:10 - 00000000 ____D () C:\Program Files (x86)\AGEIA Technologies
2014-07-17 20:10 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\Help
2014-07-17 20:02 - 2014-07-17 20:02 - 00000000 ____D () C:\NVIDIA
2014-07-17 20:01 - 2014-07-17 20:01 - 00002762 _____ () C:\Windows\System32\Tasks\CCleanerSkipUAC
2014-07-17 20:01 - 2014-07-17 20:01 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2014-07-17 19:59 - 2014-07-17 19:59 - 00001647 _____ () C:\Users\Public\Desktop\DAEMON Tools Lite.lnk
2014-07-17 19:59 - 2014-07-17 19:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DAEMON Tools Lite
2014-07-17 19:59 - 2014-07-17 19:58 - 00000000 ____D () C:\Users\mo\AppData\Roaming\DAEMON Tools Lite
2014-07-17 19:58 - 2014-07-17 19:58 - 00283064 _____ (Disc Soft Ltd) C:\Windows\system32\Drivers\dtsoftbus01.sys
2014-07-17 19:58 - 2014-07-17 19:57 - 00000000 ____D () C:\ProgramData\DAEMON Tools Lite
2014-07-17 19:56 - 2009-07-14 05:20 - 00000000 __RHD () C:\Users\Public\Libraries
2014-07-17 19:54 - 2014-07-17 19:54 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IrfanView
2014-07-17 19:51 - 2014-07-17 19:51 - 00001013 _____ () C:\Users\Public\Desktop\PDF Architect 2.lnk
2014-07-17 19:51 - 2014-07-17 19:51 - 00000752 _____ () C:\Users\Public\Desktop\PDFCreator.lnk
2014-07-17 19:51 - 2014-07-17 19:51 - 00000000 ____D () C:\Users\mo\Documents\PDF Architect 2
2014-07-17 19:51 - 2014-07-17 19:51 - 00000000 ____D () C:\Users\mo\AppData\Roaming\pdfforge
2014-07-17 19:51 - 2014-07-17 19:51 - 00000000 ____D () C:\ProgramData\PDF Architect 2
2014-07-17 19:51 - 2014-07-17 19:51 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDFCreator
2014-07-17 19:51 - 2014-07-17 19:51 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDF Architect 2
2014-07-17 19:51 - 2014-07-17 19:51 - 00000000 ____D () C:\Program Files (x86)\PDF Architect 2
2014-07-17 19:49 - 2014-07-17 19:49 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FastStone Capture
2014-07-17 19:47 - 2014-07-17 19:47 - 00000000 ____D () C:\Users\mo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2014-07-17 19:47 - 2014-07-17 19:47 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2014-07-17 19:43 - 2014-07-17 19:43 - 00001870 _____ () C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2014-07-17 19:43 - 2014-07-17 19:43 - 00000000 ____D () C:\Users\mo\AppData\Roaming\AVAST Software
2014-07-17 19:43 - 2014-07-17 19:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast
2014-07-17 19:42 - 2014-07-17 19:42 - 01041168 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2014-07-17 19:42 - 2014-07-17 19:42 - 00427360 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsp.sys
2014-07-17 19:42 - 2014-07-17 19:42 - 00307344 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2014-07-17 19:42 - 2014-07-17 19:42 - 00224896 _____ () C:\Windows\system32\Drivers\aswVmm.sys
2014-07-17 19:42 - 2014-07-17 19:42 - 00093568 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2014-07-17 19:42 - 2014-07-17 19:42 - 00092008 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys
2014-07-17 19:42 - 2014-07-17 19:42 - 00079184 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2014-07-17 19:42 - 2014-07-17 19:42 - 00065776 _____ () C:\Windows\system32\Drivers\aswRvrt.sys
2014-07-17 19:42 - 2014-07-17 19:42 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr
2014-07-17 19:42 - 2014-07-17 19:42 - 00029208 _____ () C:\Windows\system32\Drivers\aswHwid.sys
2014-07-17 19:42 - 2014-07-17 19:41 - 00000000 ____D () C:\ProgramData\AVAST Software
2014-07-17 19:41 - 2014-07-17 19:41 - 00057560 _____ () C:\Users\mo\AppData\Local\GDIPFONTCACHEV1.DAT
2014-07-17 19:38 - 2014-07-17 19:38 - 00001159 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-07-17 19:38 - 2014-07-17 19:38 - 00001147 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-07-17 19:38 - 2014-07-17 19:38 - 00000000 ____D () C:\Users\mo\AppData\Roaming\Mozilla
2014-07-17 19:38 - 2014-07-17 19:38 - 00000000 ____D () C:\Users\mo\AppData\Local\Mozilla
2014-07-17 19:38 - 2014-07-17 19:38 - 00000000 ____D () C:\ProgramData\Mozilla
2014-07-17 19:38 - 2014-07-17 19:38 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-07-17 19:31 - 2014-07-17 19:31 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_AMPPAL_01009.Wdf
2014-07-17 19:30 - 2014-07-17 19:30 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel PROSet Wireless
2014-07-17 19:30 - 2014-07-17 19:30 - 00000000 ____D () C:\Users\mo\AppData\Roaming\Intel
2014-07-17 19:30 - 2014-07-17 19:30 - 00000000 ____D () C:\ProgramData\Intel
2014-07-17 19:30 - 2014-07-17 19:30 - 00000000 ____D () C:\Program Files\Common Files\Intel
2014-07-17 19:30 - 2014-07-17 19:30 - 00000000 ____D () C:\Program Files (x86)\Intel
2014-07-17 19:30 - 2014-07-17 19:30 - 00000000 ____D () C:\Program Files (x86)\Cisco
2014-07-17 19:30 - 2014-07-17 18:20 - 00012968 _____ () C:\Windows\DPINST.LOG
2014-07-17 19:30 - 2009-07-14 05:20 - 00000000 __RHD () C:\Users\Default
2014-07-17 19:28 - 2014-07-17 19:28 - 00003090 _____ () C:\Windows\System32\Tasks\{B0234288-DAC0-4B34-A7E4-7634E520661F}
2014-07-17 19:03 - 2009-07-14 07:38 - 00025600 ___SH () C:\Windows\system32\config\BCD-Template.LOG
2014-07-17 19:03 - 2009-07-14 07:32 - 00028672 _____ () C:\Windows\system32\config\BCD-Template
2014-07-17 18:48 - 2014-07-17 18:48 - 00003056 _____ () C:\Windows\System32\Tasks\{5967923B-4BAC-4021-9DBA-87D41D3F6A59}
2014-07-17 18:26 - 2014-07-17 18:26 - 00000000 ____D () C:\ProgramData\Dell
2014-07-17 18:20 - 2014-07-17 18:20 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_iBtFltCoex_01009.Wdf
2014-07-17 18:20 - 2014-07-17 18:20 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_btmaux_01009.Wdf
2014-07-17 18:20 - 2014-07-17 18:20 - 00000000 ____D () C:\Program Files\Intel
2014-07-17 18:20 - 2009-07-14 05:20 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
2014-07-17 18:17 - 2014-07-17 18:17 - 00000000 ____D () C:\Users\mo\AppData\Roaming\WirelessManager
2014-07-17 18:15 - 2014-07-17 18:15 - 00000000 ____D () C:\Users\mo\AppData\Local\Downloaded Installations
2014-07-17 18:15 - 2014-07-17 18:15 - 00000000 ____D () C:\ProgramData\Novatel Wireless
2014-07-17 18:15 - 2009-07-14 07:32 - 00000000 ____D () C:\Windows\system32\restore
2014-07-17 18:08 - 2014-07-17 19:03 - 00000000 ____D () C:\Windows\Panther
2014-07-17 18:08 - 2014-07-17 18:08 - 00001439 _____ () C:\Users\mo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-07-17 18:08 - 2014-07-17 18:08 - 00001405 _____ () C:\Users\mo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk
2014-07-17 18:08 - 2014-07-17 18:08 - 00000020 ___SH () C:\Users\mo\ntuser.ini
2014-07-17 18:08 - 2014-07-17 18:08 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Musik
2014-07-17 18:08 - 2014-07-17 18:08 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Bilder
2014-07-17 18:08 - 2014-07-17 18:08 - 00000000 _SHDL () C:\Users\mo\Vorlagen
2014-07-17 18:08 - 2014-07-17 18:08 - 00000000 _SHDL () C:\Users\mo\Startmenü
2014-07-17 18:08 - 2014-07-17 18:08 - 00000000 _SHDL () C:\Users\mo\Netzwerkumgebung
2014-07-17 18:08 - 2014-07-17 18:08 - 00000000 _SHDL () C:\Users\mo\Lokale Einstellungen
2014-07-17 18:08 - 2014-07-17 18:08 - 00000000 _SHDL () C:\Users\mo\Eigene Dateien
2014-07-17 18:08 - 2014-07-17 18:08 - 00000000 _SHDL () C:\Users\mo\Druckumgebung
2014-07-17 18:08 - 2014-07-17 18:08 - 00000000 _SHDL () C:\Users\mo\Documents\Eigene Musik
2014-07-17 18:08 - 2014-07-17 18:08 - 00000000 _SHDL () C:\Users\mo\Documents\Eigene Bilder
2014-07-17 18:08 - 2014-07-17 18:08 - 00000000 _SHDL () C:\Users\mo\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-07-17 18:08 - 2014-07-17 18:08 - 00000000 _SHDL () C:\Users\mo\AppData\Local\Verlauf
2014-07-17 18:08 - 2014-07-17 18:08 - 00000000 _SHDL () C:\Users\mo\AppData\Local\Anwendungsdaten
2014-07-17 18:08 - 2014-07-17 18:08 - 00000000 _SHDL () C:\Users\mo\Anwendungsdaten
2014-07-17 18:08 - 2014-07-17 18:08 - 00000000 _SHDL () C:\Users\Default\Vorlagen
2014-07-17 18:08 - 2014-07-17 18:08 - 00000000 _SHDL () C:\Users\Default\Startmenü
2014-07-17 18:08 - 2014-07-17 18:08 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung
2014-07-17 18:08 - 2014-07-17 18:08 - 00000000 _SHDL () C:\Users\Default\Lokale Einstellungen
2014-07-17 18:08 - 2014-07-17 18:08 - 00000000 _SHDL () C:\Users\Default\Eigene Dateien
2014-07-17 18:08 - 2014-07-17 18:08 - 00000000 _SHDL () C:\Users\Default\Druckumgebung
2014-07-17 18:08 - 2014-07-17 18:08 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik
2014-07-17 18:08 - 2014-07-17 18:08 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder
2014-07-17 18:08 - 2014-07-17 18:08 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-07-17 18:08 - 2014-07-17 18:08 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf
2014-07-17 18:08 - 2014-07-17 18:08 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Anwendungsdaten
2014-07-17 18:08 - 2014-07-17 18:08 - 00000000 _SHDL () C:\Users\Default\Anwendungsdaten
2014-07-17 18:08 - 2014-07-17 18:08 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik
2014-07-17 18:08 - 2014-07-17 18:08 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder
2014-07-17 18:08 - 2014-07-17 18:08 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-07-17 18:08 - 2014-07-17 18:08 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf
2014-07-17 18:08 - 2014-07-17 18:08 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Anwendungsdaten
2014-07-17 18:08 - 2014-07-17 18:08 - 00000000 _SHDL () C:\Programme
2014-07-17 18:08 - 2014-07-17 18:08 - 00000000 _SHDL () C:\ProgramData\Vorlagen
2014-07-17 18:08 - 2014-07-17 18:08 - 00000000 _SHDL () C:\ProgramData\Startmenü
2014-07-17 18:08 - 2014-07-17 18:08 - 00000000 _SHDL () C:\ProgramData\Microsoft\Windows\Start Menu\Programme
2014-07-17 18:08 - 2014-07-17 18:08 - 00000000 _SHDL () C:\ProgramData\Favoriten
2014-07-17 18:08 - 2014-07-17 18:08 - 00000000 _SHDL () C:\ProgramData\Dokumente
2014-07-17 18:08 - 2014-07-17 18:08 - 00000000 _SHDL () C:\ProgramData\Anwendungsdaten
2014-07-17 18:08 - 2014-07-17 18:08 - 00000000 _SHDL () C:\Program Files\Gemeinsame Dateien
2014-07-17 18:08 - 2014-07-17 18:08 - 00000000 _SHDL () C:\Dokumente und Einstellungen
2014-07-17 18:08 - 2014-07-17 18:08 - 00000000 __SHD () C:\Recovery
2014-07-17 18:08 - 2014-07-17 18:08 - 00000000 ____D () C:\Users\mo\AppData\Local\VirtualStore
2014-07-17 18:08 - 2009-07-14 05:20 - 00000000 ____D () C:\Program Files\Windows NT
2014-07-17 18:05 - 2009-07-14 06:45 - 00274464 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-07-17 18:04 - 2014-07-17 18:04 - 00001355 _____ () C:\Windows\TSSysprep.log
2014-07-17 18:04 - 2014-07-17 18:04 - 00001345 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk
2014-07-17 18:04 - 2014-07-17 18:04 - 00001326 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk
2014-07-17 18:04 - 2009-07-14 06:46 - 00002790 _____ () C:\Windows\DtcInstall.log
2014-07-17 18:04 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\sysprep
2014-07-17 18:03 - 2014-07-17 18:03 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdFs_01_09_00.Wdf
2014-07-17 18:03 - 2011-04-12 09:55 - 00000000 ____D () C:\Windows\CSC
2014-06-30 13:57 - 2014-07-17 23:43 - 00000198 _____ () C:\Users\mo\Desktop\psso.txt

Some content of TEMP:
====================
C:\Users\mo\AppData\Local\Temp\AcDeltree.exe
C:\Users\mo\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmp3ex5yo.dll
C:\Users\mo\AppData\Local\Temp\fp_pl_pfs_installer.exe
C:\Users\mo\AppData\Local\Temp\msxml6-KB927977-enu-amd64.exe
C:\Users\mo\AppData\Local\Temp\ose00000.exe
C:\Users\mo\AppData\Local\Temp\sfextra.dll


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-07-19 16:59

==================== End Of Log ============================
         

Addition-Log:

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 21-07-2014
Ran by mo at 2014-07-22 14:20:24
Running from C:\Users\mo\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}

==================== Installed Programs ======================

Adobe Flash Player 14 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 14.0.0.145 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.07) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.07 - Adobe Systems Incorporated)
Akamai NetSession Interface (HKCU\...\Akamai) (Version:  - Akamai Technologies, Inc)
Autodesk CAD Manager Tools (HKLM\...\{5783F2D7-0111-0409-0110-0060B0CE6BBA}) (Version: 16.0.0.65 - Autodesk)
Autodesk Network License Manager (HKLM\...\{4BE91685-1632-47FC-B563-A8A542C6664C}) (Version: 11.11.0 - Autodesk)
avast! Free Antivirus (HKLM-x32\...\Avast) (Version: 9.0.2021 - AVAST Software)
Call of Duty: Modern Warfare 2 - Multiplayer (HKLM-x32\...\Steam App 10190) (Version:  - Infinity Ward)
CCleaner (HKLM\...\CCleaner) (Version: 4.15 - Piriform)
DAEMON Tools Lite (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.49.1.0356 - Disc Soft Ltd)
DivX-Setup (HKLM-x32\...\DivX Setup) (Version: 2.6.3.52 - DivX, LLC)
Dropbox (HKCU\...\Dropbox) (Version: 2.10.2 - Dropbox, Inc.)
FastStone Capture 5.3 (HKLM-x32\...\FastStone Capture) (Version: 5.3 - FastStone Soft)
Free YouTube to MP3 Converter version 3.12.41.623 (HKLM-x32\...\Free YouTube to MP3 Converter_is1) (Version: 3.12.41.623 - DVDVideoSoft Ltd.)
FreeMind (HKLM-x32\...\B991B020-2968-11D8-AF23-444553540000_is1) (Version: 1.0.1 - )
GIMP 2.8.10 (HKLM\...\GIMP-2_is1) (Version: 2.8.10 - The GIMP Team)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 36.0.1985.125 - Google Inc.)
Google Update Helper (x32 Version: 1.3.24.15 - Google Inc.) Hidden
InstallVC90Support (x32 Version: 1.01.0000 - Novatel Wireless) Hidden
Intel PROSet Wireless (Version:  - ) Hidden
Intel(R) PROSet/Wireless for Bluetooth(R) + High Speed (HKLM\...\{BEE86606-EFB5-4353-9F34-29E0C59CDCFA}) (Version: 15.2.0.0284 - Intel Corporation)
Intel(R) PROSet/Wireless Software for Bluetooth(R) Technology (HKLM\...\{7CE8BE79-ABC3-4B2C-9543-28ED2B0A9EA8}) (Version: 1.0.0.0454 - Intel Corporation)
Intel® PROSet/Wireless WiFi-Software (HKLM\...\{181BBF43-CA17-4E1A-A78D-81E67A57B8A4}) (Version: 15.02.0000.1258 - Intel Corporation)
IrfanView (remove only) (HKLM-x32\...\IrfanView) (Version: 4.38 - Irfan Skiljan)
Java 7 Update 65 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F03217065FF}) (Version: 7.0.650 - Oracle)
Java Auto Updater (x32 Version: 2.1.65.20 - Oracle, Inc.) Hidden
JMicron Flash Media Controller Driver (HKLM-x32\...\{26604C7E-A313-4D12-867F-7C6E7820BE4C}) (Version: 1.0.64.1 - JMicron Technology Corp.)
Microsoft .NET Framework 4 Client Profile (HKLM\...\Microsoft .NET Framework 4 Client Profile) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4 Extended (HKLM\...\Microsoft .NET Framework 4 Extended) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Extended (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft Mathematics (64-bit) (HKLM\...\{E57B7E0A-8BE5-42E2-BE60-C07ED680A063}) (Version: 4.0 - Microsoft Corporation)
Microsoft Office Access MUI (German) 2010 (x32 Version: 14.0.4734.1000 - Microsoft Corporation) Hidden
Microsoft Office Excel MUI (German) 2010 (x32 Version: 14.0.4734.1000 - Microsoft Corporation) Hidden
Microsoft Office Groove MUI (German) 2010 (x32 Version: 14.0.4734.1000 - Microsoft Corporation) Hidden
Microsoft Office InfoPath MUI (German) 2010 (x32 Version: 14.0.4734.1000 - Microsoft Corporation) Hidden
Microsoft Office Office 64-bit Components 2010 (Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office OneNote MUI (German) 2010 (x32 Version: 14.0.4734.1000 - Microsoft Corporation) Hidden
Microsoft Office Outlook MUI (German) 2010 (x32 Version: 14.0.4734.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (German) 2010 (x32 Version: 14.0.4734.1000 - Microsoft Corporation) Hidden
Microsoft Office Professional Plus 2010 (HKLM-x32\...\Office14.PROPLUS) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office Professional Plus 2010 (x32 Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (English) 2010 (x32 Version: 14.0.4734.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (French) 2010 (x32 Version: 14.0.4734.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (German) 2010 (x32 Version: 14.0.4734.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Italian) 2010 (x32 Version: 14.0.4734.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing (German) 2010 (x32 Version: 14.0.4734.1000 - Microsoft Corporation) Hidden
Microsoft Office Publisher MUI (German) 2010 (x32 Version: 14.0.4734.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared 64-bit MUI (German) 2010 (Version: 14.0.4734.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (German) 2010 (x32 Version: 14.0.4734.1000 - Microsoft Corporation) Hidden
Microsoft Office Word MUI (German) 2010 (x32 Version: 14.0.4734.1000 - Microsoft Corporation) Hidden
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30214.0 - Microsoft Corporation)
Microsoft Virtual PC 2007 (HKLM\...\{8A7CAA24-7B23-410B-A7C3-F994B0944160}) (Version: 6.0.156.0 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Mozilla Firefox 30.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 30.0 (x86 de)) (Version: 30.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 30.0 - Mozilla)
NVIDIA 3D Vision Controller-Treiber 337.88 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 337.88 - NVIDIA Corporation)
NVIDIA 3D Vision Treiber 337.88 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 337.88 - NVIDIA Corporation)
NVIDIA GeForce Experience 2.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.1 - NVIDIA Corporation)
NVIDIA Grafiktreiber 337.88 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 337.88 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.30.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.30.1 - NVIDIA Corporation)
NVIDIA Install Application (Version: 2.1002.157.1165 - NVIDIA Corporation) Hidden
NVIDIA LED Visualizer 1.0 (Version: 1.0 - NVIDIA Corporation) Hidden
NVIDIA Network Service (Version: 1.0 - NVIDIA Corporation) Hidden
NVIDIA PhysX (x32 Version: 9.13.1220 - NVIDIA Corporation) Hidden
NVIDIA PhysX-Systemsoftware 9.13.1220 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.13.1220 - NVIDIA Corporation)
NVIDIA ShadowPlay 14.6.22 (Version: 14.6.22 - NVIDIA Corporation) Hidden
NVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.12.6514 - NVIDIA Corporation) Hidden
NVIDIA Systemsteuerung 337.88 (Version: 337.88 - NVIDIA Corporation) Hidden
NVIDIA Update 14.6.22 (Version: 14.6.22 - NVIDIA Corporation) Hidden
NVIDIA Update Core (Version: 14.6.22 - NVIDIA Corporation) Hidden
NVIDIA Virtual Audio 1.2.23 (Version: 1.2.23 - NVIDIA Corporation) Hidden
PDF Architect 2 (HKLM-x32\...\PDF Architect 2) (Version: 2.0.24.16092 - pdfforge GmbH)
PDF Architect 2 View Module (HKLM-x32\...\{C960FF38-431D-429D-AD1F-FBD12A45B7C5}) (Version: 2.0.17.17583 - pdfforge GmbH)
PDFCreator (HKLM-x32\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 1.7.3 - pdfforge)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6449 - Realtek Semiconductor Corp.)
Renesas Electronics USB 3.0 Host Controller Driver (HKLM-x32\...\InstallShield_{5442DAB8-7177-49E1-8B22-09A049EA5996}) (Version: 2.1.27.0 - Renesas Electronics Corporation)
Renesas Electronics USB 3.0 Host Controller Driver (x32 Version: 2.1.27.0 - Renesas Electronics Corporation) Hidden
Secure Download Manager (HKLM-x32\...\{C58626D6-7EBD-460D-8B6C-75B3C3464879}) (Version: 3.1.60 - Kivuto Solutions Inc.)
SHIELD Streaming (Version: 2.1.214 - NVIDIA Corporation) Hidden
Skype™ 6.18 (HKLM-x32\...\{7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7}) (Version: 6.18.105 - Skype Technologies S.A.)
SpeedFan (remove only) (HKLM-x32\...\SpeedFan) (Version:  - )
Steam (HKLM-x32\...\Steam) (Version:  - Valve Corporation)
Total Commander 64-bit (Remove or Repair) (HKLM\...\Totalcmd64) (Version: 8.51a - Ghisler Software GmbH)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939v3) (HKLM-x32\...\{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2836939v3) (Version: 3 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Extended (KB2836939v3) (HKLM-x32\...\{8E34682C-8118-31F1-BC4C-98CD9675E1C2}.KB2836939v3) (Version: 3 - Microsoft Corporation)
VC80CRTRedist - 8.0.50727.6195 (x32 Version: 1.2.0 - DivX, Inc) Hidden
WinRAR 5.10 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.10.0 - win.rar GmbH)

==================== Restore Points  =========================

17-07-2014 20:04:58 Installed Java 7 Update 65
18-07-2014 14:59:13 Windows Update
18-07-2014 18:16:45 Windows Update
19-07-2014 16:07:56 Secure Download Manager wird installiert
19-07-2014 16:12:29 Microsoft Virtual PC 2007 wird installiert
19-07-2014 16:22:38 Installed Microsoft Mathematics (64-bit)
19-07-2014 16:23:03 DirectX wurde installiert
19-07-2014 18:51:48 Windows Update
21-07-2014 16:06:25 Windows Update
21-07-2014 21:26:04 Installed Microsoft Office Professional Plus 2010

==================== Hosts content: ==========================

2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {29B2ACBB-6F39-4BA1-9D3B-14B37E12A5EC} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-07-17] (Google Inc.)
Task: {4797099D-CD9E-497B-8B15-6632C50C5818} - System32\Tasks\avast! Emergency Update => C:\Install\AVAST Software\Avast\AvastEmUpdate.exe [2014-07-17] (AVAST Software)
Task: {4E2B7AE0-B247-4C44-9633-115BC8E0CA5E} - System32\Tasks\CCleanerSkipUAC => C:\Install\CCleaner\CCleaner.exe [2014-06-24] (Piriform Ltd)
Task: {6B4D33EB-786D-47F0-B3FB-3915990F0BA8} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-07-17] (Google Inc.)
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2014-07-17 20:10 - 2014-05-20 03:25 - 00116568 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2010-01-30 02:40 - 2010-01-30 02:40 - 04254560 _____ () C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Cultures\OFFICE.ODF
2014-01-10 07:26 - 2014-01-10 07:26 - 01861968 _____ () C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe
2014-07-17 19:42 - 2014-07-17 19:42 - 00301152 _____ () C:\Install\AVAST Software\Avast\aswProperty.dll
2014-07-21 16:13 - 2014-07-21 16:13 - 02793472 _____ () C:\Install\AVAST Software\Avast\defs\14072100\algo.dll
2014-07-21 22:38 - 2014-07-21 22:38 - 02793472 _____ () C:\Install\AVAST Software\Avast\defs\14072101\algo.dll
2014-07-17 19:42 - 2014-07-17 19:42 - 19329904 _____ () C:\Install\AVAST Software\Avast\libcef.dll
2014-07-21 19:50 - 2014-07-21 19:50 - 00043008 _____ () c:\users\mo\appdata\local\temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmp3ex5yo.dll
2014-07-17 23:41 - 2013-08-23 21:01 - 25100288 _____ () C:\Users\mo\AppData\Roaming\Dropbox\bin\libcef.dll
2014-01-10 07:28 - 2014-01-10 07:28 - 00100688 _____ () C:\Program Files (x86)\DivX\DivX Update\DivXUpdateCheck.dll
2010-01-30 02:41 - 2010-01-30 02:41 - 04254560 _____ () C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF
2014-07-17 22:36 - 2014-07-15 11:24 - 00718664 _____ () C:\Program Files (x86)\Google\Chrome\Application\36.0.1985.125\libglesv2.dll
2014-07-17 22:36 - 2014-07-15 11:24 - 00126280 _____ () C:\Program Files (x86)\Google\Chrome\Application\36.0.1985.125\libegl.dll
2014-07-17 22:36 - 2014-07-15 11:24 - 08537928 _____ () C:\Program Files (x86)\Google\Chrome\Application\36.0.1985.125\pdf.dll
2014-07-17 22:36 - 2014-07-15 11:24 - 00353096 _____ () C:\Program Files (x86)\Google\Chrome\Application\36.0.1985.125\ppGoogleNaClPluginChrome.dll
2014-07-17 22:36 - 2014-07-15 11:24 - 01732936 _____ () C:\Program Files (x86)\Google\Chrome\Application\36.0.1985.125\ffmpegsumo.dll
2014-07-17 22:36 - 2014-07-15 11:24 - 14664008 _____ () C:\Program Files (x86)\Google\Chrome\Application\36.0.1985.125\PepperFlash\pepflashplayer.dll

==================== Alternate Data Streams (whitelisted) =========


==================== Safe Mode (whitelisted) ===================


==================== EXE Association (whitelisted) =============


==================== MSCONFIG/TASK MANAGER disabled items =========


==================== Faulty Device Manager Devices =============

Name: SM-Bus-Controller
Description: SM-Bus-Controller
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: 
Description: 
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: Ethernet-Controller
Description: Ethernet-Controller
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.


==================== Event log errors: =========================

Application errors:
==================
Error: (07/21/2014 11:27:43 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (07/21/2014 07:43:49 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (07/21/2014 04:13:10 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (07/19/2014 03:51:34 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (07/18/2014 04:55:58 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (07/17/2014 11:12:17 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.VC80.CRT,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50727.6195"1".
Die abhängige Assemblierung "Microsoft.VC80.CRT,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50727.6195"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".

Error: (07/17/2014 09:32:02 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (07/17/2014 09:27:22 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (07/17/2014 08:16:11 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (07/17/2014 08:15:33 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 4107) (User: )
Description: Fehler beim Extrahieren der Drittanbieterstammliste aus der automatischen Aktualisierungs-CAB-Datei bei <hxxp://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab>. Fehler: Ein erforderliches Zertifikat befindet sich nicht im Gültigkeitszeitraum gemessen an der aktuellen Systemzeit oder dem Zeitstempel in der signierten Datei.
.


System errors:
=============
Error: (07/21/2014 09:54:48 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x800705b4 fehlgeschlagen: Sicherheitsupdate für Windows 7 für x64-basierte Systeme (KB2862152)

Error: (07/21/2014 07:50:46 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x800705b4 fehlgeschlagen: Sicherheitsupdate für Microsoft .NET Framework 3.5.1 unter Windows 7 und Windows Server 2008 R2 SP1 für x64-basierte Systeme (KB2736422)

Error: (07/21/2014 07:50:46 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x800705b4 fehlgeschlagen: Sicherheitsupdate für Windows 7 für x64-Systeme (KB2698365)

Error: (07/21/2014 07:49:50 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x800705b4 fehlgeschlagen: Sicherheitsupdate für Microsoft .NET Framework 3.5.1 unter Windows 7 und Windows Server 2008 R2 für x64-basierte Systeme (KB2832414)

Error: (07/21/2014 07:49:50 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x800705b4 fehlgeschlagen: Update für Microsoft .NET Framework 3.5.1 unter Windows 7 und Windows Server 2008 R2 SP1 für x64-basierte Systeme (KB2836943)

Error: (07/21/2014 07:49:50 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x800705b4 fehlgeschlagen: Sicherheitsupdate für Windows 7 für x64-basierte Systeme (KB2876284)

Error: (07/21/2014 07:49:50 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x800705b4 fehlgeschlagen: Sicherheitsupdate für Windows 7 für x64-basierte Systeme (KB2619339)

Error: (07/21/2014 07:49:50 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x800705b4 fehlgeschlagen: Sicherheitsupdate für Windows 7 für x64-basierte Systeme (KB2564958)

Error: (07/21/2014 07:49:50 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x800705b4 fehlgeschlagen: Sicherheitsupdate für Windows 7 für x64-basierte Systeme (KB2511455)

Error: (07/21/2014 07:49:50 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x800705b4 fehlgeschlagen: Sicherheitsupdate für Windows 7 für x64-basierte Systeme (KB2712808)


Microsoft Office Sessions:
=========================
Error: (07/21/2014 11:27:43 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (07/21/2014 07:43:49 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (07/21/2014 04:13:10 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (07/19/2014 03:51:34 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (07/18/2014 04:55:58 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (07/17/2014 11:12:17 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Microsoft.VC80.CRT,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50727.6195"C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll

Error: (07/17/2014 09:32:02 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (07/17/2014 09:27:22 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (07/17/2014 08:16:11 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (07/17/2014 08:15:33 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 4107) (User: )
Description: hxxp://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cabEin erforderliches Zertifikat befindet sich nicht im Gültigkeitszeitraum gemessen an der aktuellen Systemzeit oder dem Zeitstempel in der signierten Datei.


==================== Memory info =========================== 

Percentage of memory in use: 34%
Total physical RAM: 6104.17 MB
Available physical RAM: 3975.55 MB
Total Pagefile: 12206.54 MB
Available Pagefile: 9755.05 MB
Total Virtual: 8192 MB
Available Virtual: 8191.82 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:119.14 GB) (Free:71.98 GB) NTFS
Drive d: () (Fixed) (Total:0.1 GB) (Free:0.08 GB) NTFS
Drive e: () (Fixed) (Total:679 GB) (Free:660.11 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 119 GB) (Disk ID: 38F04523)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=119 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 699 GB) (Disk ID: 07F2837E)
Partition 1: (Not Active) - (Size=102 MB) - (Type=DE)
Partition 2: (Active) - (Size=20 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=679 GB) - (Type=07 NTFS)

==================== End Of Log ============================
         

Gmer-Log: leider kam eine Fehlermeldung, dass zu viele Zeichen verbraucht wurden, deswegen hänge ich das Logfile in den Anhang, werde es aber gerne auch nochmal Posten

Hallo mo12345



Mein Name ist Timo und ich werde Dir bei deinem Problem behilflich sein.

• Bitte arbeite alle Schritte der Reihe nach ab.
• Lese die Anleitungen sorgfältig. Sollte es Probleme geben, bitte stoppen und hier so gut es geht beschreiben.
• Nur Scans durchführen zu denen Du von einem Helfer aufgefordert wirst.
• Bitte kein Crossposting ( posten in mehreren Foren).
• Installiere oder Deinstalliere während der Bereinigung keine Software ausser Du wurdest dazu aufgefordert.
• Lese Dir die Anleitung zuerst vollständig durch. Sollte etwas unklar sein, frage bevor Du beginnst.
• Poste die Logfiles direkt in deinen Thread. Nicht anhängen ausser ich fordere Dich dazu auf.

Hinweis:
Ich kann Dir niemals eine Garantie geben, dass ich auch alles finde. Eine Formatierung ist immer der sicherste Weg.

Wir "arbeiten" hier alle freiwillig und in unserer Freizeit *hust*. Daher kann es bei Antworten zu Verzögerungen kommen.
Solltest du innerhalb 48 Std keine Antwort von mir erhalten, dann schreib mit eine PM
Solltest Du Dich für eine Bereinigung entscheiden, arbeite solange mit, bis ich oder jemand vom Team sagt, dass Du clean bist.

Wichtig:
Ich habe dein Thema in Arbeit und melde mich so schnell als möglich mit weiteren Anweisungen. Bitte beachte, dass alle meine Antworten zuerst von einem Ausbilder freigegeben werden müssen, bevor ich diese hier posten darf. Dies garantiert, dass Du Hilfe von einem ausgebildeten Helfer bekommst. Ich bedanke mich für deine Geduld

Bitte poste mir das Avast! Log mit dem gemeldeten Fund.

Die Logs sind komplett unauffällig, WiMad auf einer .mp3 ist keine wirkliche Infektion.
WiMad sind Mediendateien wie z.b. mp3, die über Windows Media Player dann zu einer Downloadseite führen können.

Keine Ahnung ob das überhaupt noch mit aktuellen Windows Media Playern funktioniert.

Was du machen solltest:

Update: Internet Explorer
Downloade Dir bitte den Internet Explorer 11 von hier und installiere diesen.
Auch wenn dieser nicht dein Standard-Browser ist, sollte sich die aktuelle Version am Rechner befinden. Es gibt noch genug Software die diesen zum Updaten verwendet.


Wenn du auf Nummer Sicher gehen willst, kannst du noch einen Online Scanner laufen lassen:


ESET Online Scanner

• Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
• Lade und starte Eset Online Scanner
• Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
• Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
• Klicke auf Starten.
• Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
• Klicke am Ende des Suchlaufs auf Fertig stellen.
• Schließe das Fenster von ESET.
• Explorer öffnen.
• C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
• Logfile hier posten.
• Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
• Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

Hallo Timo,

ich bin mir nicht sicher, ob dass die Richtige Datei ist:

[Common]
BuildId=
Cookie=
Edition=1
GUID=cbc8a9a9-f5b1-4249-9a83-9e358c4a82d7
GuidCreated=1405618891
ProductId=ais
[product.groups]
ais_cmp_ara=0
ais_cmp_bpc=1
ais_cmp_cmd=0
ais_cmp_fw=0
ais_cmp_fw_x64=0
ais_cmp_fw_x86=0
ais_cmp_gadget=1
ais_cmp_grimefighter=1
ais_cmp_rescuedisk=1
ais_cmp_secureline=1
ais_cmp_secureline_x64=1
ais_cmp_secureline_x86=0
ais_cmp_sfzone=0
ais_cmp_sfzone2=0
ais_cmp_sfzone3=0
ais_cmp_sfzone_x64=0
ais_cmp_sfzone_x86=0
ais_cmp_smc=0
ais_cmp_snx=0
ais_cmp_swhealth=1
ais_cmp_webrep=1
ais_cmp_webrep_chrome=1
ais_cmp_webrep_ff=1
ais_cmp_webrep_ie=1
ais_cmp_webrep_x64=1
ais_dll_ara=0
ais_dll_bel=0
ais_dll_ben=0
ais_dll_blg=0
ais_dll_cat=0
ais_dll_chs=0
ais_dll_cht=0
ais_dll_cro=0
ais_dll_cze=0
ais_dll_dan=0
ais_dll_dut=0
ais_dll_egb=0
ais_dll_eng=0
ais_dll_esp=0
ais_dll_est=0
ais_dll_fin=0
ais_dll_fre=0
ais_dll_ger=1
ais_dll_gre=0
ais_dll_heb=0
ais_dll_hin=0
ais_dll_hun=0
ais_dll_ind=0
ais_dll_ita=0
ais_dll_jap=0
ais_dll_kor=0
ais_dll_lat=0
ais_dll_lit=0
ais_dll_mal=0
ais_dll_nor=0
ais_dll_per=0
ais_dll_pir=0
ais_dll_pol=0
ais_dll_por=0
ais_dll_ptg=0
ais_dll_rom=0
ais_dll_rus=0
ais_dll_slo=0
ais_dll_srb=0
ais_dll_svk=0
ais_dll_swe=0
ais_dll_tha=0
ais_dll_tur=0
ais_dll_ukr=0
ais_dll_urd=0
ais_dll_vie=0
ais_gen_core=1
ais_gen_crt=1
ais_gen_crt_x64=1
ais_gen_crt_x86=1
ais_gen_openssl=1
ais_gen_rdr=1
ais_gen_rdr_x64=1
ais_gen_rdr_x86=0
ais_gen_res=1
ais_gen_res_x64=1
ais_gen_streamfilter=1
ais_gen_streamfilter_x64=1
ais_gen_streamfilter_x86=0
ais_gen_tdi=0
ais_gen_tdi_x64=0
ais_gen_tdi_x86=0
ais_gen_tools=1
ais_gen_tools_x64=1
ais_gen_tools_x86=0
ais_shl_bhv=0
ais_shl_exch=0
ais_shl_exch_x86=0
ais_shl_fil=1
ais_shl_im=0
ais_shl_mai=1
ais_shl_net=0
ais_shl_p2p=0
ais_shl_shp=0
ais_shl_shp_x64=0
ais_shl_shp_x86=0
ais_shl_spm=0
ais_shl_web=1
avast_clear=0
[product.parts.current]
iex=iex,1,1405964655
jrog2=jrog2,2796,1405964655
program=prg_ais,2021,1403801786
setup=setup_ais,2021,1403801786
vps=vps_win32,336011521,1405964657
[product.parts.latest]
iex=iex,1,1405964655
jrog2=jrog2,2796,1405964655
program=prg_ais,2021,1403801786
setup=setup_ais,2021,1403801786
vps=vps_win32,336011521,1405964657
         

ein andere habe ich nicht gefunden. In Avast selber bekomme ich nur ein Fenster mit dem einen Virenfund angezeigt.

Nein, das ist nicht die richtige.
ESET ist aber durchgelaufen ?

ESET Logs

Hat etwas gedauert, aber ist jetzt fertig.

ESETSmartInstaller@High as downloader log:
all ok
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.7623
# api_version=3.0.2
# EOSSerial=2fa2451ecc24234a8467180f26e568a2
# engine=19292
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2014-07-22 06:59:14
# local_time=2014-07-22 08:59:14 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1031
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode_1='avast! Antivirus'
# compatibility_mode=783 16777213 100 91 434591 436663 0 0
# compatibility_mode_1=''
# compatibility_mode=5893 16776573 100 94 344087 157685404 0 0
# scanned=316747
# found=2
# cleaned=0
# scan_time=16117
sh=FCB8CA6C49F1967A0CF8603E9BE120C382D5DBC4 ft=1 fh=80ebe1c3e875b3de vn="Variante von Win32/DownloadSponsor.A evtl. unerwünschte Anwendung" ac=I fn="C:\Users\mo\AppData\Local\Temp\OCS\ocs_v71b.exe"
sh=A8575F13280E627AA189ECC096AC6BA78BA86E4A ft=1 fh=99444e121305aa13 vn="Win32/Packed.Autoit.E.Gen evtl. unerwünschte Anwendung" ac=I fn="H:\$RECYCLE.BIN\S-1-5-21-2145348054-4159750456-1341389456-1001\$RN6OK0U\4569\Norton.Internet.Security.2011.18\Norton 2011v3.1.0\Norton 2011 v3.1.0.exe"
         

Eset hat auch nur 2 Dateien gefunden, eine ist nen DownloadSponsor, das andere ist wohl nen Trial-Resetter für Norton IS 2011...zumind. wirds so lt. SHA256 Checksum erkannt.

Wenn dem so ist und sich jemand wegen sowas ne Infektion einfängt, dann sag ich persönlich dazu:
Pech gehabt !

Ich geh aber immer vom Guten aus, daher kannst du das OCS Verzeichnis mit FRST oder von Hand löschen.

Fix für FRST:
Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

C:\Users\mo\AppData\Local\Temp\OCS\
         

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).

• Starte nun FRST erneut und klicke den Entfernen Button.
• Das Tool erstellt eine Fixlog.txt.
• Poste mir deren Inhalt.

Der Trial Resetter liegt ja eh im Papierkorb.

Der Trial Resetter hat sich irgendwann mal mit auf die Festplatte geschmuggelt.
Dachte eigentlich dass alle Altlasten mittlerweile gelöscht wären..

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 23-07-2014 01
Ran by mo at 2014-07-23 15:29:20 Run:2
Running from C:\Users\mo\Downloads
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
C:\Users\mo\AppData\Local\Temp\OCS\
*****************

C:\Users\mo\AppData\Local\Temp\OCS => Moved successfully.

==== End of Fixlog ====
         

Alles klar.

Die Reihenfolge ist hier entscheidend.

1. Falls Defogger benutzt wurde: Defogger nochmal starten und auf re-enable klicken.
2. Falls Combofix benutzt wurde: (Alternativ in uninstall.exe umbenennen und starten)
   • Windowstaste + R > Combofix /Uninstall (eingeben) > OK
   • Alternative: Combofix.exe in uninstall.exe umbenennen und starten
   • Combofix wird jetzt starten, sich evtl updaten und dann alle Reste von sich selbst entfernen.
3. Downloade Dir bitte auf jeden Fall DelFix auf deinen Desktop:
   • Schließe alle offenen Programme.
   • Starte die delfix.exe mit einem Doppelklick.
   • Setze vor jede Funktion ein Häkchen.
   • Klicke auf Start.
   • Hinweis: DelFix entfernt u. a. alle verwendeten Programme, die Quarantäne unserer Scanner, den Java-Cache und löscht sich abschließend selbst.
   • Starte deinen Rechner abschließend neu.
4. Sollten jetzt noch Programme aus unserer Bereinigung übrig sein kannst du sie bedenkenlos löschen.

Abschließend habe ich noch ein paar Tipps zur Absicherung deines Systems.


Ich kann gar nicht zu oft erwähnen, wie wichtig es ist, dass dein System Up to Date ist.

• Bitte überprüfe ob dein System Windows Updates automatisch herunter lädt
• Windows Updates
  • Windows XP: Start --> Systemsteuerung --> Doppelklick auf Automatische Updates
  • Windows Vista / 7 / 8 : Start --> Systemsteuerung --> System und Sicherheit --> Automatische Updates aktivieren oder deaktivieren
• Gehe sicher das die automatischen Updates aktiviert sind.
• Software Updates
  Installierte Software kann ebenfalls Sicherheitslücken haben, welche Malware nutzen kann, um dein System zu infizieren.
  Um deine Installierte Software up to date zu halten, empfehle ich dir Secunia Online Software.

Anti-Viren-Programm und zusätzlicher Schutz

• Gehe sicher, dass du immer nur eine Anti-Viren Software installiert hast und dass diese auch up to date ist!
• MalwareBytes Anti Malware
  Dies ist eines der besten Anti-Malware Tools auf dem Markt. Es ist ein On- Demond Scan Tool welches viele aktuelle Malware erkennt und auch entfernt.
  Update das Tool und lass es einmal in der Woche laufen. Die Kaufversion bietet zudem noch einen Hintergrundwächter.
  Ein Tutorial zur Verwendung findest Du hier.
• AdwCleaner
  Dieses Tool erkennt eine Vielzahl von Werbeprogrammen (Adware) und unerwümschten Programmen (PUPs).
  Starte das Tool einmal die Woche und lass es laufen. Sollte eine neue Version verfügbar sein, so wird dies angezeigt und du kannst dir die neueste Version direkt auf den Desktop downloaden.
• SpywareBlaster
  Eine kurze Einführung findest du Hier
• WOT (Web of trust)
  Dieses AddOn warnt dich, bevor Du eine als schädlich gemeldete Seite besuchst.

Alternative Browser
Andere Browser tendieren zu etwas mehr Sicherheit als der IE, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden.
Mozilla Firefox

• Hinweis: Für diesen Browser habe ich hier ein paar nützliche Add Ons
• NoScript
  Dieses AddOn blockt JavaScript, Java and Flash und andere Plugins. Sie werden nur dann ausgeführt, wenn Du es bestätigst.
• AdblockPlus
  Dieses AddOn blockt die meisten Werbung von selbst. Ein Rechtsklick auf den Banner um diesen zu AdBlockPlus hinzu zu fügen reicht und dieser wird nicht mehr geladen.
  Es spart außerdem Downloadkapazität.

Performance

• Bereinige regelmäßig deine Temp Files. Ich empfehle hierzu TFC
• Halte dich fern von Registry Cleanern.
  Diese Schaden deinem System mehr als dass sie helfen. Hier ein englischer Link:
  Miekemoes Blogspot ( MVP )

Was du vermeiden solltest:

• Klicke nicht auf alles, nur weil es dich dazu auffordert und schön bunt ist.
• Verwende keine P2P oder Filesharing Software (Emule, uTorrent,..)
• Lass die Finger von Cracks, Keygens, Serials oder anderer illegaler Software.
• Öffne keine Anhänge von dir nicht bekannten Emails. Achte vor allem auf die Dateiendung wie z.B. deinFoto.jpg.exe.
• Lade keine Software von Softonic oder Chip herunter, da diese Installer oft mit Adware oder unerünschter Software versehen sind!

Nun bleibt mir nur noch dir viel Spaß beim sicheren Surfen zu wünschen... ... und vielleicht möchtest du ja das Trojaner-Board unterstützen?

Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so dass ich dieses Thema aus meinen Abos löschen kann.