Zurück   Trojaner-Board > Malware entfernen > Plagegeister aller Art und deren Bekämpfung
Windows 7: Rechner lahmt durch Systweak und Co.

Windows 7: Rechner lahmt durch Systweak und Co.


Plagegeister aller Art und deren Bekämpfung: Windows 7: Rechner lahmt durch Systweak und Co.

Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen.

 
Vorheriger Beitrag Vorheriger Beitrag   Nächster Beitrag Nächster Beitrag
Alt 21.08.2014, 12:44   #1
sisley24m
 
Windows 7: Rechner lahmt durch Systweak und Co. - Standard

Windows 7: Rechner lahmt durch Systweak und Co.


Hallo ihr lieben Leute von trojaner-board.de...

Ich bin gerade bei meinen Eltern zu Besuch und habe bemerkt das der Rechner von ihnen ziemlich langsam arbeitet so wie das booten sehr lange dauert...Unter anderem bekomme ich Meldungen das Fehler erkannt wurden die nur mit einem kostenpflichtigen Update zu bereinigen wären...Ich hab mich dann ein wenig im Netz informiert sowie in der Systemsteuerung nachgeschaut und Programme von Systweak entdeckt...Da ich selbst keine Erfahrung besitze wäre ich froh wenn ihr mir bitte helfen könnten den Rechner wieder fit zu bekommen...


Hier die Logs:

Systemscan mit FRST

Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version:17-08-2014 01
Ran by Wünsche (administrator) on WÜNSCHE-PC on 21-08-2014 12:22:01
Running from C:\Users\Wünsche\Downloads
Platform: Microsoft Windows 7 Home Premium  Service Pack 1 (X86) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ 
Download link for 64-Bit Version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ 
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
(Hewlett-Packard) C:\Program Files\HP\HP Software Update\hpwuschd2.exe
(Microsoft Corporation) C:\Windows\WindowsMobile\wmdc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Nero AG) C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Microsoft Corporation) C:\Program Files\Microsoft\BingBar\SeaPort.EXE
(Nero AG) C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Prolific Technology Inc.) C:\Windows\System32\IoctlSvc.exe
(Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Nero AG) C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKU\S-1-5-21-813962834-3573142917-1844992356-1000\...\Run: [IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] => C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe [1828136 2008-02-28] (Nero AG)
HKU\S-1-5-21-813962834-3573142917-1844992356-1000\...\Run: [GoogleChromeAutoLaunch_DC2B767C3595397FBCC81637413C5DF1] => C:\Program Files\Google\Chrome\Application\chrome.exe [860488 2014-08-07] (Google Inc.)
AppInit_DLLs: C:\PROGRA~1\SearchProtect\SearchProtect\bin\SPVC32Loader.dll => C:\Program Files\SearchProtect\SearchProtect\bin\SPVC32Loader.dll [187328 2014-07-22] (Client Connect LTD)
ShellIconOverlayIdentifiers: 00avast -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll (AVAST Software)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.bing.com/search?q={searchTerms}&FORM=AVASDF&PC=AV01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/?pc=AV01
HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://www.msn.com/?pc=AV01
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/?pc=AV01
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.bing.com/search?q={searchTerms}&FORM=AVASDF&PC=AV01
HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://www.msn.com/?pc=AV01
SearchScopes: HKLM - DefaultScope {632F07F3-19A1-4d16-A23F-E6CE9486BAB5} URL = hxxp://www.bing.com/search?q={searchTerms}&FORM=AVASDF&PC=AV01
SearchScopes: HKLM - {632F07F3-19A1-4d16-A23F-E6CE9486BAB5} URL = hxxp://www.bing.com/search?q={searchTerms}&FORM=AVASDF&PC=AV01
SearchScopes: HKCU - DefaultScope {632F07F3-19A1-4d16-A23F-E6CE9486BAB5} URL = hxxp://www.bing.com/search?q={searchTerms}&FORM=AVASDF&PC=AV01
SearchScopes: HKCU - {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = hxxp://www.trovi.com/Results.aspx?gd=&ctid=CT3322288&octid=EB_ORIGINAL_CTID&ISID=M1187A095-50E7-4231-B22E-6829E5889835&SearchSource=58&CUI=&UM=6&UP=SP6EEA71DB-0B89-476A-8857-A2837ABA3E73&q={searchTerms}&SSPV=
SearchScopes: HKCU - {632F07F3-19A1-4d16-A23F-E6CE9486BAB5} URL = hxxp://www.bing.com/search?q={searchTerms}&FORM=AVASDF&PC=AV01
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO: Bing Bar Helper -> {d2ce3e00-f94a-4740-988e-03dc2f38c34f} -> C:\Program Files\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
Toolbar: HKLM - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKCU - Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\Wünsche\AppData\Roaming\Mozilla\Firefox\Profiles\a74gx0g1.default
FF SearchEngineOrder.1: Google
FF SelectedSearchEngine: Google
FF Homepage: about:home
FF Keyword.URL: https://www.google.com/search
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_14_0_0_145.dll ()
FF Plugin: @nvidia.com/3DVision -> C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin: @nvidia.com/3DVisionStreaming -> C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Users\Wünsche\AppData\Roaming\Mozilla\Firefox\Profiles\a74gx0g1.default\searchplugins\search_engine.xml
FF SearchPlugin: C:\Users\Wünsche\AppData\Roaming\Mozilla\Firefox\Profiles\a74gx0g1.default\searchplugins\trovi-search.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: DownloadHelper - C:\Users\Wünsche\AppData\Roaming\Mozilla\Firefox\Profiles\a74gx0g1.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} [2014-08-09]
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2014-05-18]

Chrome: 
=======
CHR HomePage: hxxp://de.msn.com/?ocid=OIE8MSE
CHR StartupUrls: "hxxp://www.google.de/", "www.google.com"
CHR DefaultSuggestURL: 
CHR Extension: (Google Docs) - C:\Users\Wünsche\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-07-04]
CHR Extension: (Google Drive) - C:\Users\Wünsche\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-07-04]
CHR Extension: (YouTube) - C:\Users\Wünsche\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-07-04]
CHR Extension: (Adblock Plus) - C:\Users\Wünsche\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2014-08-05]
CHR Extension: (Google-Suche) - C:\Users\Wünsche\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-07-04]
CHR Extension: (avast! Online Security) - C:\Users\Wünsche\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2014-07-04]
CHR Extension: (Window State Sample) - C:\Users\Wünsche\AppData\Local\Google\Chrome\User Data\Default\Extensions\hcbhfbnaaancmblfhdknlnojpafjohbi [2014-08-09]
CHR Extension: (Google Wallet) - C:\Users\Wünsche\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-07-04]
CHR Extension: (YouTube Unblocker) - C:\Users\Wünsche\AppData\Local\Google\Chrome\User Data\Default\Extensions\npnkeeiehehhefofiekoflfedgehcdhl [2014-08-01]
CHR Extension: (Mein Chrome-Design) - C:\Users\Wünsche\AppData\Local\Google\Chrome\User Data\Default\Extensions\oehpjpccmlcalbenfhnacjeocbjdonic [2014-08-09]
CHR Extension: (Google Mail) - C:\Users\Wünsche\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-07-04]
CHR Extension: (Extutil) - C:\Users\WNSCHE~1\AppData\Local\Temp\D7ADFCCA-EE7E-442C-9999-C4D14FEF360B [2014-08-01]
CHR Extension: (Managera) - C:\Users\WNSCHE~1\AppData\Local\Temp\38fdaae5-8e0e-493c-88ec-e05c3be06e42 [2014-08-01]
CHR HKLM\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2014-07-04]
CHR HKCU\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

========================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-07-04] (AVAST Software)
S2 BackupStack; C:\Program Files\MyPC Backup\BackupStack.exe [36392 2014-03-14] (Just Develop It)
R2 NvNetworkService; C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe [1720608 2014-07-25] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [17536800 2014-07-25] (NVIDIA Corporation)
R2 PLFlash DeviceIoControl Service; C:\Windows\system32\IoctlSvc.exe [81920 2006-12-19] (Prolific Technology Inc.) [File not signed]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [24184 2014-07-04] ()
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [67824 2014-07-04] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [81768 2014-07-04] (AVAST Software)
R0 aswRvrt; C:\Windows\system32\Drivers\aswRvrt.sys [49944 2014-07-04] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [779536 2014-07-04] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [414520 2014-07-04] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [71944 2014-07-04] (AVAST Software)
R0 aswVmm; C:\Windows\system32\Drivers\aswVmm.sys [192352 2014-07-04] ()
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19232 2014-07-25] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad32v.sys [34080 2014-03-31] (NVIDIA Corporation)

==================== NetSvcs (Whitelisted) ===================


(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-08-21 12:22 - 2014-08-21 12:22 - 00012878 _____ () C:\Users\Wünsche\Downloads\FRST.txt
2014-08-21 12:21 - 2014-08-21 12:22 - 00000000 ____D () C:\FRST
2014-08-21 12:19 - 2014-08-21 12:19 - 00000476 _____ () C:\Users\Wünsche\Downloads\defogger_disable.log
2014-08-21 12:19 - 2014-08-21 12:19 - 00000000 _____ () C:\Users\Wünsche\defogger_reenable
2014-08-18 23:21 - 2014-08-18 23:21 - 01093632 _____ (Farbar) C:\Users\Wünsche\Downloads\FRST.exe
2014-08-18 23:21 - 2014-08-18 23:21 - 00380416 _____ () C:\Users\Wünsche\Downloads\Gmer-19357.exe
2014-08-18 23:20 - 2014-08-18 23:21 - 00050477 _____ () C:\Users\Wünsche\Downloads\Defogger.exe
2014-08-16 13:25 - 2014-08-16 13:26 - 00362664 _____ () C:\Users\Wünsche\Downloads\7zip_RocketFuelInstaller.exe
2014-08-15 23:58 - 2014-08-15 23:58 - 00016604 _____ () C:\Users\Wünsche\Downloads\umbronite.ump
2014-08-15 18:39 - 2014-08-15 18:39 - 00001480 _____ () C:\Users\Wünsche\AppData\Local\recently-used.xbel
2014-08-15 18:30 - 2014-08-15 18:39 - 00262188 _____ () C:\Users\Wünsche\Documents\Logo.tga
2014-08-15 18:26 - 2014-08-15 18:39 - 00000000 ____D () C:\Users\Wünsche\AppData\Local\gtk-2.0
2014-08-15 18:26 - 2014-08-15 18:26 - 00000000 ____D () C:\Users\Wünsche\.thumbnails
2014-08-15 18:05 - 2014-08-15 18:05 - 00000000 ____D () C:\Users\Wünsche\AppData\Local\fontconfig
2014-08-15 18:03 - 2014-08-15 18:37 - 00000000 ____D () C:\Users\Wünsche\.gimp-2.8
2014-08-15 18:03 - 2014-08-15 18:03 - 00000000 ____D () C:\Users\Wünsche\AppData\Local\gegl-0.2
2014-08-15 17:50 - 2014-08-15 17:50 - 00001007 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GIMP 2.lnk
2014-08-15 17:50 - 2014-08-15 17:50 - 00000995 _____ () C:\Users\Public\Desktop\GIMP 2.lnk
2014-08-15 17:47 - 2014-08-15 17:50 - 00000000 ____D () C:\Program Files\GIMP 2
2014-08-15 17:36 - 2014-08-15 17:40 - 90396104 _____ (The GIMP Team ) C:\Users\Wünsche\Downloads\gimp-2.8.10-setup.exe
2014-08-15 11:38 - 2014-08-21 12:09 - 00000501 _____ () C:\Users\Wünsche\Documents\aionmemo_fc6c7565.dat
2014-08-13 20:12 - 2014-07-01 00:14 - 00008856 _____ (Microsoft Corporation) C:\Windows\system32\icardres.dll
2014-08-13 20:12 - 2014-03-09 23:47 - 00619672 _____ (Microsoft Corporation) C:\Windows\system32\icardagt.exe
2014-08-13 20:12 - 2014-03-09 23:47 - 00099480 _____ (Microsoft Corporation) C:\Windows\system32\infocardapi.dll
2014-08-13 20:11 - 2014-06-06 08:16 - 00035480 _____ (Microsoft Corporation) C:\Windows\system32\TsWpfWrp.exe
2014-08-13 20:07 - 2014-08-13 20:07 - 00000000 ____D () C:\NVIDIA Corporation
2014-08-13 13:51 - 2014-08-01 01:16 - 00307384 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-08-13 13:51 - 2014-07-25 15:51 - 17524224 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-08-13 13:51 - 2014-07-25 15:04 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-08-13 13:51 - 2014-07-25 15:03 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-08-13 13:51 - 2014-07-25 14:34 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-08-13 13:51 - 2014-07-25 14:34 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-08-13 13:51 - 2014-07-25 14:33 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-08-13 13:51 - 2014-07-25 14:30 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-08-13 13:51 - 2014-07-25 14:21 - 02184704 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-08-13 13:51 - 2014-07-25 14:18 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-08-13 13:51 - 2014-07-25 14:17 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-08-13 13:51 - 2014-07-25 14:12 - 00438784 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-08-13 13:51 - 2014-07-25 14:10 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-08-13 13:51 - 2014-07-25 14:10 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-08-13 13:51 - 2014-07-25 14:08 - 00597504 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-08-13 13:51 - 2014-07-25 14:06 - 04204032 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-08-13 13:51 - 2014-07-25 13:59 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-08-13 13:51 - 2014-07-25 13:52 - 00367104 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-08-13 13:51 - 2014-07-25 13:43 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-08-13 13:51 - 2014-07-25 13:36 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-08-13 13:51 - 2014-07-25 13:34 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-08-13 13:51 - 2014-07-25 13:29 - 00239616 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-08-13 13:51 - 2014-07-25 13:13 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-08-13 13:51 - 2014-07-25 13:09 - 00663040 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-08-13 13:51 - 2014-07-25 13:07 - 02001920 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-08-13 13:51 - 2014-07-25 13:07 - 01068032 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-08-13 13:51 - 2014-07-25 13:03 - 11772928 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-08-13 13:51 - 2014-07-25 12:09 - 00704512 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-08-13 13:51 - 2014-07-25 12:05 - 01792512 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-08-13 13:51 - 2014-07-25 12:00 - 01169920 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-08-13 13:51 - 2014-07-14 03:42 - 00654336 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2014-08-13 13:51 - 2014-06-16 03:44 - 00730048 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2014-08-13 13:51 - 2014-06-16 03:44 - 00219072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys
2014-08-13 13:51 - 2014-06-16 03:40 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll
2014-08-13 13:50 - 2014-07-16 04:47 - 00305152 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2014-08-13 13:50 - 2014-07-16 04:46 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2014-08-13 13:50 - 2014-07-16 03:47 - 02352640 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-08-13 13:49 - 2014-08-07 03:43 - 00412160 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-08-13 13:49 - 2014-08-07 03:39 - 00302592 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-08-13 13:49 - 2014-07-09 03:29 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDYAK.DLL
2014-08-13 13:49 - 2014-07-09 03:29 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDTAT.DLL
2014-08-13 13:49 - 2014-07-09 03:29 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU1.DLL
2014-08-13 13:49 - 2014-07-09 03:29 - 00006144 _____ (Microsoft Corporation) C:\Windows\system32\KBDBASH.DLL
2014-08-13 13:49 - 2014-07-09 03:29 - 00005632 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU.DLL
2014-08-13 13:49 - 2014-07-09 00:30 - 00419992 _____ () C:\Windows\system32\locale.nls
2014-08-13 13:49 - 2014-06-25 03:41 - 12874240 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2014-08-13 13:49 - 2014-06-03 11:30 - 00101824 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2014-08-13 13:49 - 2014-06-03 11:29 - 02363392 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2014-08-13 13:49 - 2014-06-03 11:29 - 01805824 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2014-08-13 13:49 - 2014-06-03 11:29 - 00337408 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll
2014-08-13 10:56 - 2014-08-13 23:25 - 00000000 ____D () C:\Users\Wünsche\AppData\Local\NVIDIA Corporation
2014-08-13 10:56 - 2014-08-13 11:18 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2014-08-13 10:56 - 2014-08-13 10:56 - 00000000 ____D () C:\Program Files\AGEIA Technologies
2014-08-13 10:56 - 2014-07-25 16:01 - 01291280 _____ (NVIDIA Corporation) C:\Windows\system32\nvspbridge.dll
2014-08-13 10:56 - 2014-07-25 16:01 - 01126480 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap.dll
2014-08-13 10:55 - 2014-08-21 11:40 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-08-13 10:55 - 2014-07-02 22:54 - 00061728 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll
2014-08-13 10:55 - 2014-07-02 21:42 - 04389848 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll
2014-08-13 10:55 - 2014-07-02 21:42 - 03063256 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc.dll
2014-08-13 10:55 - 2014-07-02 21:42 - 02556360 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll
2014-08-13 10:55 - 2014-07-02 21:42 - 00670552 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
2014-08-13 10:55 - 2014-07-02 21:42 - 00377288 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll
2014-08-13 10:55 - 2014-07-02 21:42 - 00062936 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll
2014-08-13 10:55 - 2014-07-02 19:39 - 00609240 _____ (NVIDIA Corporation) C:\Windows\system32\nvStreaming.exe
2014-08-13 10:55 - 2014-07-02 07:14 - 03826628 _____ () C:\Windows\system32\nvcoproc.bin
2014-08-13 10:49 - 2014-07-02 23:28 - 00895264 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdagenco3220103.dll
2014-08-13 10:49 - 2014-07-02 23:28 - 00162592 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvhda32v.sys
2014-08-13 10:49 - 2014-07-02 23:28 - 00028448 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdap32.dll
2014-08-13 10:49 - 2014-07-02 22:54 - 24198088 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv32.dll
2014-08-13 10:49 - 2014-07-02 22:54 - 16122344 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2um.dll
2014-08-13 10:49 - 2014-07-02 22:54 - 15296456 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2014-08-13 10:49 - 2014-07-02 22:54 - 14498552 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dum.dll
2014-08-13 10:49 - 2014-07-02 22:54 - 11283344 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2014-08-13 10:49 - 2014-07-02 22:54 - 11222048 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2014-08-13 10:49 - 2014-07-02 22:54 - 10681176 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2014-08-13 10:49 - 2014-07-02 22:54 - 03988952 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2014-08-13 10:49 - 2014-07-02 22:54 - 02814656 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi.dll
2014-08-13 10:49 - 2014-07-02 22:54 - 01054552 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco3234052.dll
2014-08-13 10:49 - 2014-07-02 22:54 - 00907552 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco3234052.dll
2014-08-13 10:49 - 2014-07-02 22:54 - 00907096 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR.dll
2014-08-13 10:49 - 2014-07-02 22:54 - 00869152 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC.dll
2014-08-13 10:49 - 2014-07-02 22:54 - 00021215 _____ () C:\Windows\system32\nvinfo.pb
2014-08-13 10:49 - 2014-03-31 18:42 - 00034760 _____ (NVIDIA Corporation) C:\Windows\system32\nvaudcap32v.dll
2014-08-13 10:49 - 2014-03-31 18:42 - 00034080 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad32v.sys
2014-08-13 10:44 - 2014-08-13 20:07 - 00000000 ____D () C:\NVIDIA
2014-08-13 10:30 - 2014-08-13 10:30 - 00615304 _____ (Adobe Systems Incorporated) C:\Users\Wünsche\Downloads\CreativeCloudSet-Up.exe
2014-08-10 11:30 - 2014-08-10 11:30 - 00122880 _____ () C:\Users\Wünsche\Downloads\d3d8thk (1).dll
2014-08-10 11:22 - 2014-08-10 22:02 - 00001801 _____ () C:\Users\Wünsche\Desktop\Aion.lnk
2014-08-10 11:19 - 2014-08-10 11:20 - 00344576 _____ (Just-Aion) C:\Users\Wünsche\Downloads\d3dx9_38.dll
2014-08-10 10:02 - 2014-08-10 10:02 - 00000133 _____ () C:\Users\Wünsche\Downloads\Just Aion - Ariel DEU.bat
2014-08-10 10:01 - 2014-08-10 11:19 - 00195584 _____ () C:\Users\Wünsche\Downloads\d3d8thk.dll
2014-08-09 21:26 - 2014-08-09 21:26 - 00000000 ____D () C:\Users\Wünsche\Downloads\ChaosCrystal2.0.001
2014-08-09 21:17 - 2014-08-09 21:56 - 00000000 ____D () C:\Program Files\aeroFox
2014-08-09 21:17 - 2014-08-09 21:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\aeroFox
2014-08-09 21:14 - 2014-08-09 21:14 - 00000000 ____D () C:\Users\Wünsche\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome
2014-08-08 21:03 - 2014-08-08 21:31 - 00000000 ____D () C:\Users\Wünsche\AppData\Local\Microsoft Games
2014-08-04 21:34 - 2010-06-02 04:55 - 00527192 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_7.dll
2014-08-04 21:34 - 2010-06-02 04:55 - 00239960 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_7.dll
2014-08-04 21:34 - 2010-06-02 04:55 - 00074072 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_5.dll
2014-08-04 21:33 - 2010-02-04 10:01 - 00528216 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_6.dll
2014-08-04 21:33 - 2010-02-04 10:01 - 00238936 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_6.dll
2014-08-04 21:33 - 2010-02-04 10:01 - 00074072 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_4.dll
2014-08-04 21:33 - 2010-02-04 10:01 - 00022360 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_7.dll
2014-08-04 21:33 - 2009-09-04 17:44 - 00515416 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_5.dll
2014-08-04 21:33 - 2009-09-04 17:44 - 00238936 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_5.dll
2014-08-04 21:33 - 2009-09-04 17:44 - 00069464 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_3.dll
2014-08-04 21:33 - 2009-09-04 17:29 - 05501792 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_42.dll
2014-08-04 21:33 - 2009-09-04 17:29 - 01974616 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_42.dll
2014-08-04 21:33 - 2009-09-04 17:29 - 01892184 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_42.dll
2014-08-04 21:33 - 2009-09-04 17:29 - 00453456 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_42.dll
2014-08-04 21:33 - 2009-09-04 17:29 - 00235344 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_42.dll
2014-08-04 21:33 - 2009-03-16 14:18 - 00517448 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_4.dll
2014-08-04 21:33 - 2009-03-16 14:18 - 00235352 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_4.dll
2014-08-04 21:33 - 2009-03-16 14:18 - 00022360 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_6.dll
2014-08-04 21:33 - 2009-03-09 15:27 - 04178264 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_41.dll
2014-08-04 21:33 - 2009-03-09 15:27 - 01846632 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_41.dll
2014-08-04 21:33 - 2009-03-09 15:27 - 00453456 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_41.dll
2014-08-04 21:33 - 2008-10-27 10:04 - 00514384 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_3.dll
2014-08-04 21:33 - 2008-10-27 10:04 - 00235856 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_3.dll
2014-08-04 21:33 - 2008-10-27 10:04 - 00070992 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_2.dll
2014-08-04 21:33 - 2008-10-27 10:04 - 00023376 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_5.dll
2014-08-04 21:33 - 2008-10-15 06:22 - 04379984 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_40.dll
2014-08-04 21:33 - 2008-10-15 06:22 - 02036576 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_40.dll
2014-08-04 21:33 - 2008-10-15 06:22 - 00452440 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_40.dll
2014-08-04 21:33 - 2008-07-31 10:41 - 00238088 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_2.dll
2014-08-04 21:33 - 2008-07-31 10:41 - 00068616 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_1.dll
2014-08-04 21:33 - 2008-07-31 10:40 - 00509448 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_2.dll
2014-08-04 21:33 - 2008-07-10 11:01 - 00467984 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_39.dll
2014-08-04 21:33 - 2008-07-10 11:00 - 03851784 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_39.dll
2014-08-04 21:33 - 2008-07-10 11:00 - 01493528 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_39.dll
2014-08-04 21:33 - 2008-05-30 14:19 - 00507400 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_1.dll
2014-08-04 21:33 - 2008-05-30 14:18 - 00238088 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_1.dll
2014-08-04 21:33 - 2008-05-30 14:17 - 00065032 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_0.dll
2014-08-04 21:33 - 2008-05-30 14:17 - 00025608 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_4.dll
2014-08-04 21:33 - 2008-05-30 14:11 - 03850760 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_38.dll
2014-08-04 21:33 - 2008-05-30 14:11 - 01491992 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_38.dll
2014-08-04 21:33 - 2008-05-30 14:11 - 00467984 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_38.dll
2014-08-04 21:33 - 2008-03-05 16:03 - 00479752 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_0.dll
2014-08-04 21:33 - 2008-03-05 16:03 - 00238088 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_0.dll
2014-08-04 21:33 - 2008-03-05 16:00 - 00025608 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_3.dll
2014-08-04 21:33 - 2008-03-05 15:56 - 03786760 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_37.dll
2014-08-04 21:33 - 2008-03-05 15:56 - 01420824 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_37.dll
2014-08-04 21:33 - 2008-02-05 23:07 - 00462864 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_37.dll
2014-08-04 21:33 - 2007-10-22 03:39 - 00267272 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_10.dll
2014-08-04 21:33 - 2007-10-22 03:37 - 00017928 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_2.dll
2014-08-04 21:33 - 2007-10-12 15:14 - 03734536 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_36.dll
2014-08-04 21:33 - 2007-10-12 15:14 - 01374232 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_36.dll
2014-08-04 21:33 - 2007-10-02 09:56 - 00444776 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_36.dll
2014-08-04 21:33 - 2007-07-20 00:57 - 00267112 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_9.dll
2014-08-04 21:33 - 2007-07-19 18:14 - 03727720 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_35.dll
2014-08-04 21:33 - 2007-07-19 18:14 - 01358192 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_35.dll
2014-08-04 21:33 - 2007-07-19 18:14 - 00444776 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_35.dll
2014-08-04 21:33 - 2007-06-20 20:46 - 00266088 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_8.dll
2014-08-04 21:33 - 2007-05-16 16:45 - 03497832 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_34.dll
2014-08-04 21:33 - 2007-05-16 16:45 - 01124720 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_34.dll
2014-08-04 21:33 - 2007-05-16 16:45 - 00443752 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_34.dll
2014-08-04 21:33 - 2007-04-04 18:55 - 00261480 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_7.dll
2014-08-04 21:33 - 2007-04-04 18:53 - 00081768 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_3.dll
2014-08-04 21:33 - 2007-03-15 16:57 - 00443752 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_33.dll
2014-08-04 21:33 - 2007-03-12 16:42 - 03495784 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_33.dll
2014-08-04 21:33 - 2007-03-12 16:42 - 01123696 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_33.dll
2014-08-04 21:33 - 2007-03-05 12:42 - 00015128 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_1.dll
2014-08-04 21:33 - 2007-01-24 15:27 - 00255848 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_6.dll
2014-08-04 21:33 - 2006-12-08 12:02 - 00251672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_5.dll
2014-08-04 21:33 - 2006-11-29 13:06 - 03426072 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_32.dll
2014-08-04 21:33 - 2006-11-29 13:06 - 00440080 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10.dll
2014-08-04 21:33 - 2006-09-28 16:05 - 02414360 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_31.dll
2014-08-04 21:33 - 2006-09-28 16:05 - 00237848 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_4.dll
2014-08-04 21:33 - 2006-07-28 09:30 - 00236824 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_3.dll
2014-08-04 21:33 - 2006-07-28 09:30 - 00062744 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_2.dll
2014-08-04 21:33 - 2006-05-31 07:24 - 00230168 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_2.dll
2014-08-04 21:33 - 2006-03-31 12:39 - 00229584 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_1.dll
2014-08-04 21:33 - 2006-03-31 12:39 - 00062672 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_1.dll
2014-08-04 21:33 - 2006-02-03 08:43 - 02332368 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_29.dll
2014-08-04 21:33 - 2006-02-03 08:42 - 00230096 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_0.dll
2014-08-04 21:33 - 2006-02-03 08:41 - 00014032 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_0.dll
2014-08-04 21:33 - 2005-07-22 19:59 - 02319568 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_27.dll
2014-08-04 21:33 - 2005-05-26 15:34 - 02297552 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_26.dll
2014-08-04 21:33 - 2005-03-18 17:19 - 02337488 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_25.dll
2014-08-04 21:33 - 2005-02-05 19:45 - 02222800 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_24.dll
2014-08-04 21:29 - 2014-08-15 19:42 - 00000000 ____D () C:\Users\W�nsche\Downloads\Gameforge Live
2014-08-04 21:29 - 2014-08-05 21:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gameforge Live
2014-08-04 21:29 - 2014-08-04 21:29 - 00000000 ____D () C:\Users\Wünsche\AppData\Local\Gameforge4d
2014-08-04 21:29 - 2014-08-04 21:29 - 00000000 ____D () C:\Users\W�nsche
2014-08-02 11:48 - 2014-08-10 09:43 - 00001093 _____ () C:\Users\Wünsche\Desktop\Mozilla Firefox.lnk
2014-08-02 11:39 - 2014-05-14 18:23 - 01973728 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2014-08-02 11:39 - 2014-05-14 18:23 - 00581600 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2014-08-02 11:39 - 2014-05-14 18:23 - 00054240 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2014-08-02 11:39 - 2014-05-14 18:23 - 00045536 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2014-08-02 11:39 - 2014-05-14 18:23 - 00036320 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2014-08-02 11:39 - 2014-05-14 18:17 - 02425856 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2014-08-02 11:39 - 2014-05-14 18:17 - 00092672 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2014-08-02 11:39 - 2014-05-14 09:23 - 00179656 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2014-08-02 11:39 - 2014-05-14 09:17 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2014-08-01 16:38 - 2014-08-01 16:38 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdRapi2_01_00_00.Wdf
2014-08-01 16:37 - 2014-08-01 16:39 - 00002419 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Mobile Device Center.lnk
2014-08-01 16:37 - 2014-08-01 16:39 - 00000000 ____D () C:\Windows\WindowsMobile
2014-08-01 13:03 - 2014-08-01 13:03 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2014-08-01 11:53 - 2014-08-01 11:53 - 00000000 ____D () C:\Users\Wünsche\AppData\Local\Macromedia
2014-08-01 10:58 - 2014-06-24 14:45 - 00146183 _____ () C:\Users\Wünsche\Documents\YouTube-Unblocker-056 (1).crx
2014-08-01 10:35 - 2014-08-01 10:41 - 55880192 _____ () C:\Users\Wünsche\Downloads\wz185gev-32_CB-DL-Manager [1].exe
2014-08-01 10:35 - 2014-08-01 10:35 - 00000000 __RSH () C:\MSDOS.SYS
2014-08-01 10:35 - 2014-08-01 10:35 - 00000000 __RSH () C:\IO.SYS
2014-08-01 10:33 - 2014-08-01 10:33 - 00787392 _____ ( ) C:\Users\Wünsche\Downloads\wz185gev-32_CB-DL-Manager.exe
2014-08-01 10:26 - 2014-08-01 10:26 - 00000000 ____D () C:\Users\Wünsche\AppData\Roaming\WinRAR
2014-08-01 10:26 - 2014-08-01 10:26 - 00000000 ____D () C:\Users\Wünsche\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2014-08-01 10:26 - 2014-08-01 10:26 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2014-08-01 10:25 - 2014-08-01 10:25 - 00000000 ____D () C:\Program Files\WinRAR
2014-08-01 09:44 - 2014-08-09 15:14 - 00000000 ____D () C:\Program Files\SearchProtect
2014-08-01 09:44 - 2014-08-01 09:44 - 00002232 _____ () C:\Users\Public\Desktop\Free YouTube to MP3 Converter.lnk
2014-08-01 09:44 - 2014-08-01 09:44 - 00001157 _____ () C:\Users\Public\Desktop\DVDVideoSoft Free Studio.lnk
2014-08-01 09:44 - 2014-08-01 09:44 - 00000000 ____D () C:\Users\Wünsche\AppData\Local\SearchProtect
2014-08-01 09:44 - 2014-08-01 09:44 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft
2014-08-01 09:43 - 2014-08-01 09:44 - 00000000 ____D () C:\Program Files\DVDVideoSoft
2014-08-01 09:43 - 2014-08-01 09:43 - 00000000 ____D () C:\Users\Wünsche\AppData\Roaming\OpenCandy
2014-08-01 09:43 - 2014-08-01 09:43 - 00000000 ____D () C:\Program Files\Common Files\DVDVideoSoft
2014-08-01 09:40 - 2014-08-01 09:44 - 00000000 ____D () C:\Users\Wünsche\AppData\Roaming\DVDVideoSoft
2014-08-01 09:38 - 2014-08-01 09:39 - 29527272 _____ (DVDVideoSoft Ltd. ) C:\Users\Wünsche\Downloads\FreeYouTubeToMP3Converter-3.12.42.716.exe

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-08-21 12:22 - 2014-08-21 12:22 - 00012878 _____ () C:\Users\Wünsche\Downloads\FRST.txt
2014-08-21 12:22 - 2014-08-21 12:21 - 00000000 ____D () C:\FRST
2014-08-21 12:19 - 2014-08-21 12:19 - 00000476 _____ () C:\Users\Wünsche\Downloads\defogger_disable.log
2014-08-21 12:19 - 2014-08-21 12:19 - 00000000 _____ () C:\Users\Wünsche\defogger_reenable
2014-08-21 12:19 - 2014-05-18 15:23 - 00000000 ____D () C:\Users\Wünsche
2014-08-21 12:09 - 2014-08-15 11:38 - 00000501 _____ () C:\Users\Wünsche\Documents\aionmemo_fc6c7565.dat
2014-08-21 12:08 - 2014-05-18 21:12 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-08-21 11:49 - 2009-07-14 06:34 - 00032112 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-08-21 11:49 - 2009-07-14 06:34 - 00032112 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-08-21 11:45 - 2014-05-18 15:05 - 02076560 _____ () C:\Windows\WindowsUpdate.log
2014-08-21 11:41 - 2014-07-04 18:14 - 00001096 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-08-21 11:41 - 2014-05-18 19:33 - 00014914 _____ () C:\Windows\setupact.log
2014-08-21 11:41 - 2009-07-14 06:33 - 00268272 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-08-21 11:40 - 2014-08-13 10:55 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-08-21 11:40 - 2009-07-14 06:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-08-21 10:24 - 2014-07-04 18:14 - 00001100 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-08-20 15:02 - 2014-05-18 19:00 - 00000268 _____ () C:\Windows\Tasks\RegClean Pro_DEFAULT.job
2014-08-20 15:01 - 2014-06-29 15:01 - 00001414 _____ () C:\Users\Wünsche\Desktop\Registry kostenlos entrümpeln!.lnk
2014-08-18 23:21 - 2014-08-18 23:21 - 01093632 _____ (Farbar) C:\Users\Wünsche\Downloads\FRST.exe
2014-08-18 23:21 - 2014-08-18 23:21 - 00380416 _____ () C:\Users\Wünsche\Downloads\Gmer-19357.exe
2014-08-18 23:21 - 2014-08-18 23:20 - 00050477 _____ () C:\Users\Wünsche\Downloads\Defogger.exe
2014-08-18 23:21 - 2010-11-20 23:01 - 01618320 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-08-16 13:26 - 2014-08-16 13:25 - 00362664 _____ () C:\Users\Wünsche\Downloads\7zip_RocketFuelInstaller.exe
2014-08-15 23:58 - 2014-08-15 23:58 - 00016604 _____ () C:\Users\Wünsche\Downloads\umbronite.ump
2014-08-15 23:33 - 2014-07-04 18:15 - 00002081 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-08-15 19:42 - 2014-08-04 21:29 - 00000000 ____D () C:\Users\W�nsche\Downloads\Gameforge Live
2014-08-15 18:39 - 2014-08-15 18:39 - 00001480 _____ () C:\Users\Wünsche\AppData\Local\recently-used.xbel
2014-08-15 18:39 - 2014-08-15 18:30 - 00262188 _____ () C:\Users\Wünsche\Documents\Logo.tga
2014-08-15 18:39 - 2014-08-15 18:26 - 00000000 ____D () C:\Users\Wünsche\AppData\Local\gtk-2.0
2014-08-15 18:37 - 2014-08-15 18:03 - 00000000 ____D () C:\Users\Wünsche\.gimp-2.8
2014-08-15 18:26 - 2014-08-15 18:26 - 00000000 ____D () C:\Users\Wünsche\.thumbnails
2014-08-15 18:03 - 2014-08-15 18:03 - 00000000 ____D () C:\Users\Wünsche\AppData\Local\gegl-0.2
2014-08-15 17:50 - 2014-08-15 17:50 - 00001007 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GIMP 2.lnk
2014-08-15 17:50 - 2014-08-15 17:50 - 00000995 _____ () C:\Users\Public\Desktop\GIMP 2.lnk
2014-08-15 17:50 - 2014-08-15 17:47 - 00000000 ____D () C:\Program Files\GIMP 2
2014-08-15 17:40 - 2014-08-15 17:36 - 90396104 _____ (The GIMP Team ) C:\Users\Wünsche\Downloads\gimp-2.8.10-setup.exe
2014-08-14 15:25 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\rescache
2014-08-13 23:26 - 2014-05-18 18:33 - 00000000 ____D () C:\Users\Wünsche\AppData\Local\NVIDIA
2014-08-13 23:26 - 2014-05-18 18:01 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation
2014-08-13 23:25 - 2014-08-13 10:56 - 00000000 ____D () C:\Users\Wünsche\AppData\Local\NVIDIA Corporation
2014-08-13 22:51 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\Microsoft.NET
2014-08-13 20:30 - 2014-05-18 18:11 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-08-13 20:30 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\de-DE
2014-08-13 20:18 - 2014-05-18 17:20 - 00000000 ____D () C:\Windows\system32\MRT
2014-08-13 20:14 - 2014-05-18 17:20 - 96303304 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-08-13 20:07 - 2014-08-13 20:07 - 00000000 ____D () C:\NVIDIA Corporation
2014-08-13 20:07 - 2014-08-13 10:44 - 00000000 ____D () C:\NVIDIA
2014-08-13 19:00 - 2014-05-18 19:00 - 00000276 _____ () C:\Windows\Tasks\RegClean Pro_UPDATES.job
2014-08-13 11:18 - 2014-08-13 10:56 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2014-08-13 10:56 - 2014-08-13 10:56 - 00000000 ____D () C:\Program Files\AGEIA Technologies
2014-08-13 10:56 - 2014-05-18 18:01 - 00000000 ____D () C:\Program Files\NVIDIA Corporation
2014-08-13 10:55 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\Help
2014-08-13 10:31 - 2014-05-18 21:11 - 00000000 ____D () C:\Users\Wünsche\AppData\Local\Adobe
2014-08-13 10:30 - 2014-08-13 10:30 - 00615304 _____ (Adobe Systems Incorporated) C:\Users\Wünsche\Downloads\CreativeCloudSet-Up.exe
2014-08-10 22:02 - 2014-08-10 11:22 - 00001801 _____ () C:\Users\Wünsche\Desktop\Aion.lnk
2014-08-10 11:30 - 2014-08-10 11:30 - 00122880 _____ () C:\Users\Wünsche\Downloads\d3d8thk (1).dll
2014-08-10 11:20 - 2014-08-10 11:19 - 00344576 _____ (Just-Aion) C:\Users\Wünsche\Downloads\d3dx9_38.dll
2014-08-10 11:19 - 2014-08-10 10:01 - 00195584 _____ () C:\Users\Wünsche\Downloads\d3d8thk.dll
2014-08-10 10:02 - 2014-08-10 10:02 - 00000133 _____ () C:\Users\Wünsche\Downloads\Just Aion - Ariel DEU.bat
2014-08-10 09:43 - 2014-08-02 11:48 - 00001093 _____ () C:\Users\Wünsche\Desktop\Mozilla Firefox.lnk
2014-08-10 09:43 - 2014-05-18 16:20 - 00001093 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-08-10 09:25 - 2014-05-18 19:32 - 00003342 _____ () C:\Windows\PFRO.log
2014-08-09 21:56 - 2014-08-09 21:17 - 00000000 ____D () C:\Program Files\aeroFox
2014-08-09 21:26 - 2014-08-09 21:26 - 00000000 ____D () C:\Users\Wünsche\Downloads\ChaosCrystal2.0.001
2014-08-09 21:17 - 2014-08-09 21:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\aeroFox
2014-08-09 21:14 - 2014-08-09 21:14 - 00000000 ____D () C:\Users\Wünsche\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome
2014-08-09 15:43 - 2014-05-28 16:24 - 00000000 ____D () C:\You tube
2014-08-09 15:14 - 2014-08-01 09:44 - 00000000 ____D () C:\Program Files\SearchProtect
2014-08-08 21:31 - 2014-08-08 21:03 - 00000000 ____D () C:\Users\Wünsche\AppData\Local\Microsoft Games
2014-08-07 03:43 - 2014-08-13 13:49 - 00412160 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-08-07 03:39 - 2014-08-13 13:49 - 00302592 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-08-05 21:34 - 2014-08-04 21:29 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gameforge Live
2014-08-05 09:20 - 2014-05-18 15:49 - 00231584 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2014-08-04 21:29 - 2014-08-04 21:29 - 00000000 ____D () C:\Users\Wünsche\AppData\Local\Gameforge4d
2014-08-04 21:29 - 2014-08-04 21:29 - 00000000 ____D () C:\Users\W�nsche
2014-08-02 08:36 - 2014-05-18 16:20 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service
2014-08-01 19:12 - 2010-11-21 02:46 - 00000000 ___RD () C:\Users\Public\Recorded TV
2014-08-01 16:39 - 2014-08-01 16:37 - 00002419 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Mobile Device Center.lnk
2014-08-01 16:39 - 2014-08-01 16:37 - 00000000 ____D () C:\Windows\WindowsMobile
2014-08-01 16:39 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\LogFiles
2014-08-01 16:38 - 2014-08-01 16:38 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdRapi2_01_00_00.Wdf
2014-08-01 13:03 - 2014-08-01 13:03 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2014-08-01 11:53 - 2014-08-01 11:53 - 00000000 ____D () C:\Users\Wünsche\AppData\Local\Macromedia
2014-08-01 11:52 - 2014-05-18 21:12 - 00699056 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2014-08-01 11:52 - 2014-05-18 21:12 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2014-08-01 10:41 - 2014-08-01 10:35 - 55880192 _____ () C:\Users\Wünsche\Downloads\wz185gev-32_CB-DL-Manager [1].exe
2014-08-01 10:35 - 2014-08-01 10:35 - 00000000 __RSH () C:\MSDOS.SYS
2014-08-01 10:35 - 2014-08-01 10:35 - 00000000 __RSH () C:\IO.SYS
2014-08-01 10:33 - 2014-08-01 10:33 - 00787392 _____ ( ) C:\Users\Wünsche\Downloads\wz185gev-32_CB-DL-Manager.exe
2014-08-01 10:26 - 2014-08-01 10:26 - 00000000 ____D () C:\Users\Wünsche\AppData\Roaming\WinRAR
2014-08-01 10:26 - 2014-08-01 10:26 - 00000000 ____D () C:\Users\Wünsche\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2014-08-01 10:26 - 2014-08-01 10:26 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2014-08-01 10:25 - 2014-08-01 10:25 - 00000000 ____D () C:\Program Files\WinRAR
2014-08-01 09:44 - 2014-08-01 09:44 - 00002232 _____ () C:\Users\Public\Desktop\Free YouTube to MP3 Converter.lnk
2014-08-01 09:44 - 2014-08-01 09:44 - 00001157 _____ () C:\Users\Public\Desktop\DVDVideoSoft Free Studio.lnk
2014-08-01 09:44 - 2014-08-01 09:44 - 00000000 ____D () C:\Users\Wünsche\AppData\Local\SearchProtect
2014-08-01 09:44 - 2014-08-01 09:44 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft
2014-08-01 09:44 - 2014-08-01 09:43 - 00000000 ____D () C:\Program Files\DVDVideoSoft
2014-08-01 09:44 - 2014-08-01 09:40 - 00000000 ____D () C:\Users\Wünsche\AppData\Roaming\DVDVideoSoft
2014-08-01 09:43 - 2014-08-01 09:43 - 00000000 ____D () C:\Users\Wünsche\AppData\Roaming\OpenCandy
2014-08-01 09:43 - 2014-08-01 09:43 - 00000000 ____D () C:\Program Files\Common Files\DVDVideoSoft
2014-08-01 09:39 - 2014-08-01 09:38 - 29527272 _____ (DVDVideoSoft Ltd. ) C:\Users\Wünsche\Downloads\FreeYouTubeToMP3Converter-3.12.42.716.exe
2014-08-01 01:16 - 2014-08-13 13:51 - 00307384 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-07-28 19:34 - 2014-05-18 18:36 - 00000000 ____D () C:\Users\Wünsche\AppData\Roaming\HpUpdate
2014-07-25 16:01 - 2014-08-13 10:56 - 01291280 _____ (NVIDIA Corporation) C:\Windows\system32\nvspbridge.dll
2014-07-25 16:01 - 2014-08-13 10:56 - 01126480 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap.dll
2014-07-25 15:51 - 2014-08-13 13:51 - 17524224 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-07-25 15:04 - 2014-08-13 13:51 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-07-25 15:03 - 2014-08-13 13:51 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-07-25 14:34 - 2014-08-13 13:51 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-07-25 14:34 - 2014-08-13 13:51 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-07-25 14:33 - 2014-08-13 13:51 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-07-25 14:30 - 2014-08-13 13:51 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-07-25 14:21 - 2014-08-13 13:51 - 02184704 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-07-25 14:18 - 2014-08-13 13:51 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-07-25 14:17 - 2014-08-13 13:51 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-07-25 14:12 - 2014-08-13 13:51 - 00438784 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-07-25 14:10 - 2014-08-13 13:51 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-07-25 14:10 - 2014-08-13 13:51 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-07-25 14:08 - 2014-08-13 13:51 - 00597504 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-07-25 14:06 - 2014-08-13 13:51 - 04204032 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-07-25 13:59 - 2014-08-13 13:51 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-07-25 13:52 - 2014-08-13 13:51 - 00367104 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-07-25 13:43 - 2014-08-13 13:51 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-07-25 13:36 - 2014-08-13 13:51 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-07-25 13:34 - 2014-08-13 13:51 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-07-25 13:29 - 2014-08-13 13:51 - 00239616 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-07-25 13:13 - 2014-08-13 13:51 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-07-25 13:09 - 2014-08-13 13:51 - 00663040 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-07-25 13:07 - 2014-08-13 13:51 - 02001920 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-07-25 13:07 - 2014-08-13 13:51 - 01068032 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-07-25 13:03 - 2014-08-13 13:51 - 11772928 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-07-25 12:09 - 2014-08-13 13:51 - 00704512 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-07-25 12:05 - 2014-08-13 13:51 - 01792512 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-07-25 12:00 - 2014-08-13 13:51 - 01169920 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-07-23 11:58 - 2009-07-14 06:53 - 00032634 _____ () C:\Windows\Tasks\SCHEDLGU.TXT

Some content of TEMP:
====================
C:\Users\Wünsche\AppData\Local\Temp\install_reader11_de_gtbd_chrd_dn_aaa_aih.exe
C:\Users\Wünsche\AppData\Local\Temp\nsd82D9.exe
C:\Users\Wünsche\AppData\Local\Temp\nsd8940.exe
C:\Users\Wünsche\AppData\Local\Temp\nsoFC18.exe
C:\Users\Wünsche\AppData\Local\Temp\nstECF9.exe
C:\Users\Wünsche\AppData\Local\Temp\nstF4E6.exe
C:\Users\Wünsche\AppData\Local\Temp\nsy9072.exe
C:\Users\Wünsche\AppData\Local\Temp\nvSCPAPISvr.exe
C:\Users\Wünsche\AppData\Local\Temp\nvStInst.exe
C:\Users\Wünsche\AppData\Local\Temp\PrefJsonCpp.exe
C:\Users\Wünsche\AppData\Local\Temp\sqlite3.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-08-18 15:59

==================== End Of Log ============================

Scan mit GMER

Code:
ATTFilter
GMER 2.1.19357 - hxxp://www.gmer.net
Rootkit scan 2014-08-21 13:01:28
Windows 6.1.7601 Service Pack 1 \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-0 SAMSUNG_HD502IJ rev.1AA01118 465,76GB
Running: Gmer-19357.exe; Driver: C:\Users\WNSCHE~1\AppData\Local\Temp\pwdiyfoc.sys


---- System - GMER 2.1 ----

SSDT   \SystemRoot\system32\drivers\aswSnx.sys                                                            ZwAddBootEntry [0x8CE49BA6]
SSDT   \SystemRoot\system32\drivers\aswSnx.sys                                                            ZwAssignProcessToJobObject [0x8CE4A684]
SSDT   \SystemRoot\system32\drivers\aswSnx.sys                                                            ZwCreateEvent [0x8CE566F8]
SSDT   \SystemRoot\system32\drivers\aswSnx.sys                                                            ZwCreateEventPair [0x8CE56744]
SSDT   \SystemRoot\system32\drivers\aswSnx.sys                                                            ZwCreateIoCompletion [0x8CE568DE]
SSDT   \SystemRoot\system32\drivers\aswSnx.sys                                                            ZwCreateMutant [0x8CE56666]
SSDT   \SystemRoot\system32\drivers\aswSP.sys                                                             ZwCreateSection [0x8CF00DF0]
SSDT   \SystemRoot\system32\drivers\aswSnx.sys                                                            ZwCreateSemaphore [0x8CE566AE]
SSDT   \SystemRoot\system32\drivers\aswSP.sys                                                             ZwCreateThread [0x8CF01080]
SSDT   \SystemRoot\system32\drivers\aswSP.sys                                                             ZwCreateThreadEx [0x8CF0116A]
SSDT   \SystemRoot\system32\drivers\aswSnx.sys                                                            ZwCreateTimer [0x8CE56898]
SSDT   \SystemRoot\system32\drivers\aswSnx.sys                                                            ZwDebugActiveProcess [0x8CE4B472]
SSDT   \SystemRoot\system32\drivers\aswSnx.sys                                                            ZwDeleteBootEntry [0x8CE49C0C]
SSDT   \SystemRoot\system32\drivers\aswSnx.sys                                                            ZwDuplicateObject [0x8CE4EC68]
SSDT   \SystemRoot\system32\drivers\aswSnx.sys                                                            ZwLoadDriver [0x8CE497F8]
SSDT   \SystemRoot\system32\drivers\aswSP.sys                                                             ZwMapViewOfSection [0x8CF00ED0]
SSDT   \SystemRoot\system32\drivers\aswSnx.sys                                                            ZwModifyBootEntry [0x8CE49C72]
SSDT   \SystemRoot\system32\drivers\aswSnx.sys                                                            ZwNotifyChangeKey [0x8CE4F05E]
SSDT   \SystemRoot\system32\drivers\aswSnx.sys                                                            ZwNotifyChangeMultipleKeys [0x8CE4BF5A]
SSDT   \SystemRoot\system32\drivers\aswSnx.sys                                                            ZwOpenEvent [0x8CE56722]
SSDT   \SystemRoot\system32\drivers\aswSnx.sys                                                            ZwOpenEventPair [0x8CE56766]
SSDT   \SystemRoot\system32\drivers\aswSnx.sys                                                            ZwOpenIoCompletion [0x8CE56902]
SSDT   \SystemRoot\system32\drivers\aswSnx.sys                                                            ZwOpenMutant [0x8CE5668C]
SSDT   \SystemRoot\system32\drivers\aswSnx.sys                                                            ZwOpenProcess [0x8CE4E560]
SSDT   \SystemRoot\system32\drivers\aswSnx.sys                                                            ZwOpenSection [0x8CE56816]
SSDT   \SystemRoot\system32\drivers\aswSnx.sys                                                            ZwOpenSemaphore [0x8CE566D6]
SSDT   \SystemRoot\system32\drivers\aswSnx.sys                                                            ZwOpenThread [0x8CE4E94C]
SSDT   \SystemRoot\system32\drivers\aswSnx.sys                                                            ZwOpenTimer [0x8CE568BC]
SSDT   \SystemRoot\system32\drivers\aswSP.sys                                                             ZwProtectVirtualMemory [0x8CF00C6E]
SSDT   \SystemRoot\system32\drivers\aswSnx.sys                                                            ZwQueryObject [0x8CE4BDCE]
SSDT   \SystemRoot\system32\drivers\aswSnx.sys                                                            ZwQueueApcThreadEx [0x8CE4BADC]
SSDT   \SystemRoot\system32\drivers\aswSnx.sys                                                            ZwSetBootEntryOrder [0x8CE49CD8]
SSDT   \SystemRoot\system32\drivers\aswSnx.sys                                                            ZwSetBootOptions [0x8CE49D3E]
SSDT   \SystemRoot\system32\drivers\aswSP.sys                                                             ZwSetContextThread [0x8CF00FCC]
SSDT   \SystemRoot\system32\drivers\aswSnx.sys                                                            ZwSetSystemInformation [0x8CE49892]
SSDT   \SystemRoot\system32\drivers\aswSnx.sys                                                            ZwSetSystemPowerState [0x8CE49A64]
SSDT   \SystemRoot\system32\drivers\aswSnx.sys                                                            ZwShutdownSystem [0x8CE499F2]
SSDT   \SystemRoot\system32\drivers\aswSnx.sys                                                            ZwSuspendProcess [0x8CE4B63C]
SSDT   \SystemRoot\system32\drivers\aswSnx.sys                                                            ZwSuspendThread [0x8CE4B79E]
SSDT   \SystemRoot\system32\drivers\aswSnx.sys                                                            ZwSystemDebugControl [0x8CE49AEC]
SSDT   \SystemRoot\system32\drivers\aswSP.sys                                                             ZwTerminateProcess [0x8CF00D3C]
SSDT   \SystemRoot\system32\drivers\aswSnx.sys                                                            ZwTerminateThread [0x8CE4B2CC]
SSDT   \SystemRoot\system32\drivers\aswSnx.sys                                                            ZwVdmControl [0x8CE49DA4]
SSDT   \SystemRoot\system32\drivers\aswSP.sys                                                             ZwWriteVirtualMemory [0x8CF00BA0]

---- Kernel code sections - GMER 2.1 ----

.text  ntkrnlpa.exe!ZwRollbackEnlistment + 142D                                                           82C50A15 1 Byte  [06]
.text  ntkrnlpa.exe!KiDispatchInterrupt + 5A2                                                             82C8A212 19 Bytes  [E0, 0F, BA, F0, 07, 73, 09, ...] {LOOPNZ 0x11; MOV EDX, 0x97307f0; MOV CR4, EAX; OR AL, 0x80; MOV CR4, EAX; RET ; MOV ECX, CR3}
.text  ntkrnlpa.exe!KeRemoveQueueEx + 10CB                                                                82C91460 4 Bytes  [A6, 9B, E4, 8C] {CMPSB ; WAIT ; IN AL, 0x8c}
.text  ntkrnlpa.exe!KeRemoveQueueEx + 1153                                                                82C914E8 4 Bytes  [84, A6, E4, 8C]
.text  ntkrnlpa.exe!KeRemoveQueueEx + 11A7                                                                82C9153C 2 Bytes  [F8, 66]
.text  ntkrnlpa.exe!KeRemoveQueueEx + 11AA                                                                82C9153F 5 Bytes  [8C, 44, 67, E5, 8C]
.text  ntkrnlpa.exe!KeRemoveQueueEx + 11B3                                                                82C91548 4 Bytes  [DE, 68, E5, 8C]
.text  ...                                                                                                

---- User code sections - GMER 2.1 ----

.text  C:\Windows\system32\svchost.exe[340] kernel32.dll!GetBinaryTypeW + 70                              75506AAC 1 Byte  [62]
.text  C:\Windows\WindowsMobile\wmdc.exe[364] kernel32.dll!GetBinaryTypeW + 70                            75506AAC 1 Byte  [62]
.text  C:\Windows\system32\csrss.exe[412] kernel32.dll!GetBinaryTypeW + 70                                75506AAC 1 Byte  [62]
.text  C:\Windows\system32\wininit.exe[476] kernel32.dll!GetBinaryTypeW + 70                              75506AAC 1 Byte  [62]
.text  C:\Windows\system32\csrss.exe[492] kernel32.dll!GetBinaryTypeW + 70                                75506AAC 1 Byte  [62]
.text  ...                                                                                                
.text  C:\Program Files\AVAST Software\Avast\AvastSvc.exe[1400] kernel32.dll!SetUnhandledExceptionFilter  754EF5AB 8 Bytes  [31, C0, C2, 04, 00, 90, 90, ...] {XOR EAX, EAX; RET 0x4; NOP ; NOP ; NOP }
.text  C:\Program Files\AVAST Software\Avast\AvastSvc.exe[1400] kernel32.dll!GetBinaryTypeW + 70          75506AAC 1 Byte  [62]
.text  C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe[1444] kernel32.dll!GetBinaryTypeW + 70      75506AAC 1 Byte  [62]
.text  C:\Program Files\AVAST Software\Avast\avastui.exe[1476] kernel32.dll!SetUnhandledExceptionFilter   754EF5AB 8 Bytes  [31, C0, C2, 04, 00, 90, 90, ...] {XOR EAX, EAX; RET 0x4; NOP ; NOP ; NOP }
.text  C:\Program Files\AVAST Software\Avast\avastui.exe[1476] kernel32.dll!GetBinaryTypeW + 70           75506AAC 1 Byte  [62]
.text  C:\Windows\System32\spoolsv.exe[1580] kernel32.dll!GetBinaryTypeW + 70                             75506AAC 1 Byte  [62]
.text  C:\Windows\system32\taskhost.exe[1636] kernel32.dll!GetBinaryTypeW + 70                            75506AAC 1 Byte  [62]
.text  C:\Windows\system32\Dwm.exe[1688] kernel32.dll!GetBinaryTypeW + 70                                 75506AAC 1 Byte  [62]
.text  C:\Windows\Explorer.EXE[1864] kernel32.dll!GetBinaryTypeW + 70                                     75506AAC 1 Byte  [62]
.text  ...                                                                                                

---- EOF - GMER 2.1 ----

Ich würde euch auch gern die Logs von avast Free Antivirus posten doch weiß ich nicht welche von den vielen in diesem Ordner...

Liebe Grüße...Rico

 

Themen zu Windows 7: Rechner lahmt durch Systweak und Co.
administrator, bingbar, conduit.search, conduit.search entfernen, dvdvideosoft ltd., flash player, langsam, msil/advancedsystemprotector.d, pup.optional.amazontb.a, pup.optional.conduit.a, pup.optional.extutil.a, pup.optional.managera.a, pup.optional.regcleanpro, pup.optional.searchprotect.a, pup.optional.spigot, pup.optional.verti, services.exe, svchost.exe, win32/adware.speedingupmypc.n, win32/clientconnect.a, win32/conduit.searchprotect.h, win32/conduit.searchprotect.i, win32/conduit.searchprotect.n, win32/installcore.oz, win32/mypcbackup.a, win32/systweak.g, winlogon.exe


« YahooSearch and Trovi Search | AntiVir durch Gruppenrichtlinie blockiert + Downloads werden gestartet »


Ähnliche Themen: Windows 7: Rechner lahmt durch Systweak und Co.


  1. Rechner lahmt kann wer was finden?
    Log-Analyse und Auswertung - 20.04.2015 (3)
  2. xp rechner lahmt zu sehr für einen P4 mit 3.2 ghz
    Log-Analyse und Auswertung - 13.01.2015 (7)
  3. systweak.com öffnet sich in Firefox und langsamer Rechner
    Plagegeister aller Art und deren Bekämpfung - 17.02.2014 (7)
  4. Systweak Pop Up, langsamer Rechner
    Plagegeister aller Art und deren Bekämpfung - 30.11.2013 (11)
  5. virus eingefangen durch Advanced System Projector von Systweak
    Plagegeister aller Art und deren Bekämpfung - 27.07.2013 (22)
  6. Win7/64 bit Rechner lahmt
    Alles rund um Windows - 02.02.2013 (10)
  7. Weiterleitung zu Gomeo u.a., Rechner lahmt, I-Net Verbindung lahmt -> Panik
    Plagegeister aller Art und deren Bekämpfung - 09.02.2011 (1)
  8. Rechner lahmt
    Mülltonne - 03.01.2009 (0)
  9. Rechner lahmt aber wieso?
    Log-Analyse und Auswertung - 14.11.2008 (1)
  10. Rechner lahmt - Bitte um Logfile-Prüfung
    Log-Analyse und Auswertung - 13.03.2008 (2)
  11. Rechner lahmt - Bitte um Logfile-Prüfung
    Mülltonne - 13.02.2008 (0)
  12. Computer lahmt - XP Balken läuft 35 mal durch...
    Log-Analyse und Auswertung - 07.02.2007 (4)
  13. Bearshare Lite und der Rechner lahmt
    Plagegeister aller Art und deren Bekämpfung - 02.08.2006 (6)
  14. Rechner lahmt
    Plagegeister aller Art und deren Bekämpfung - 31.05.2006 (1)
  15. Rechner von Schwester lahmt!
    Mülltonne - 27.05.2006 (2)
  16. Rechner lahmt
    Plagegeister aller Art und deren Bekämpfung - 26.07.2005 (2)
  17. rechner lahmt
    Log-Analyse und Auswertung - 26.01.2005 (8)
Anleitungen und Tipps

- Für alle Hilfesuchenden! Was beachten?

- Anleitung: MyStartSearch.com entfernen

- Anleitung: WebSearches löschen

- Hilfe: iStartSurf entfernen – so gehts!

- Anleitung: Omiga Plus richtig entfernen

- Browser Viren entfernen


Zum Thema Windows 7: Rechner lahmt durch Systweak und Co. - Hallo ihr lieben Leute von trojaner-board.de... Ich bin gerade bei meinen Eltern zu Besuch und habe bemerkt das der Rechner von ihnen ziemlich langsam arbeitet so wie das booten sehr - Windows 7: Rechner lahmt durch Systweak und Co....
Archiv
Du betrachtest: Windows 7: Rechner lahmt durch Systweak und Co. auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131