|
Log-Analyse und Auswertung: Win7 Prof. penetrante popups, browserabsturz, versuch automatisch dateien downzuloadenWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
23.10.2014, 16:03 | #16 |
| Win7 Prof. penetrante popups, browserabsturz, versuch automatisch dateien downzuloadenCode:
ATTFilter Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 22-10-2014 Ran by Philipp at 2014-10-23 16:45:49 Run:1 Running from C:\Users\Philipp\Downloads Loaded Profile: Philipp (Available profiles: Philipp) Boot Mode: Normal ============================================== Content of fixlist: ***************** C:\Users\Philipp\AppData\Local\nsyF9FA.tmp C:\Users\Philipp\AppData\Local\nszB6F3.tmp C:\Users\Philipp\AppData\Roaming\Mozilla\Firefox\Profiles\jh0rqjqg.default\prefs.js C:\Users\Philipp\Downloads\Freeware_Starter_Kit_fuer_Ihr_Notebook_2014.zip C:\Users\Philipp\Downloads\Freeware_Starter_Kit_fuer_Ihr_Notebook_2014\Freeware Starter Kit für Ihr Notebook\PDFCreator\PDFCreator-1_7_2_setup.exe C:\Users\Philipp\Downloads\Freeware_Starter_Kit_fuer_Ihr_Notebook_2014\Freeware Starter Kit für Ihr Notebook\SUMo\sumo3.10.1.226_nork.exe GroupPolicy: Group Policy on Chrome detected <======= ATTENTION CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION BHO: Cinema-Plus-1.8cV09.10 -> {11111111-1111-1111-1111-110611321185} -> C:\Program Files (x86)\Cinema-Plus-1.8cV09.10\Cinema-Plus-1.8cV09.10-bho64.dll No File ***************** C:\Users\Philipp\AppData\Local\nsyF9FA.tmp => Moved successfully. C:\Users\Philipp\AppData\Local\nszB6F3.tmp => Moved successfully. C:\Users\Philipp\AppData\Roaming\Mozilla\Firefox\Profiles\jh0rqjqg.default\prefs.js => Moved successfully. C:\Users\Philipp\Downloads\Freeware_Starter_Kit_fuer_Ihr_Notebook_2014.zip => Moved successfully. C:\Users\Philipp\Downloads\Freeware_Starter_Kit_fuer_Ihr_Notebook_2014\Freeware Starter Kit für Ihr Notebook\PDFCreator\PDFCreator-1_7_2_setup.exe => Moved successfully. C:\Users\Philipp\Downloads\Freeware_Starter_Kit_fuer_Ihr_Notebook_2014\Freeware Starter Kit für Ihr Notebook\SUMo\sumo3.10.1.226_nork.exe => Moved successfully. C:\Windows\system32\GroupPolicy\Machine => Moved successfully. C:\Windows\system32\GroupPolicy\GPT.ini => Moved successfully. "HKLM\SOFTWARE\Policies\Google" => Key deleted successfully. "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110611321185}" => Key deleted successfully. "HKCR\CLSID\{11111111-1111-1111-1111-110611321185}" => Key deleted successfully. The system needed a reboot. ==== End of Fixlog ==== Code:
ATTFilter Results of screen317's Security Check version 0.99.89 Windows 7 Service Pack 1 x64 (UAC is disabled!) Internet Explorer 11 ``````````````Antivirus/Firewall Check:`````````````` Windows Security Center service is not running! This report may not be accurate! Avira Desktop Norton Internet Security Antivirus up to date! `````````Anti-malware/Other Utilities Check:````````` Adobe Flash Player 15.0.0.152 Adobe Reader 10.1.7 Adobe Reader out of Date! Mozilla Firefox 32.0.3 Firefox out of Date! ````````Process Check: objlist.exe by Laurent```````` Avira Antivir avgnt.exe Avira Antivir avguard.exe `````````````````System Health check````````````````` Total Fragmentation on Drive C: ````````````````````End of Log`````````````````````` |
23.10.2014, 19:41 | #17 |
/// Malwareteam | Win7 Prof. penetrante popups, browserabsturz, versuch automatisch dateien downzuloaden Hi
__________________Code:
ATTFilter Windows 7 Service Pack 1 x64 (UAC is disabled!) Windows Security Center service is not running! This report may not be accurate! Update bitte die Tools: Code:
ATTFilter Adobe Reader 10.1.7 Adobe Reader out of Date! Mozilla Firefox 32.0.3 Firefox out of Date!
__________________ |
23.10.2014, 22:16 | #18 |
| Win7 Prof. penetrante popups, browserabsturz, versuch automatisch dateien downzuloaden hi, ich habe nichts deaktiviert, das securitycenter lässt sich auch nicht aktivieren, benutzerkontensteuerung ändere ich jetzt.
__________________die programme hab ich upgedatet. popus unter firefox tauchen übrigens immernoch auf... fällt dir noch was ein? danke und grüße |
24.10.2014, 13:19 | #19 |
/// Malwareteam | Win7 Prof. penetrante popups, browserabsturz, versuch automatisch dateien downzuloaden Hi, klar ein Paar Möglichkeiten haben wir noch. poste bitte einmal ein neues FRST Logfile. Setze hierbei den Haken bei adittion.txt und poste beide Logfiles. Wichtig: Führe das Tool auf deinem Desktop aus, nicht im Download Ordner! |
24.10.2014, 16:02 | #20 |
| Win7 Prof. penetrante popups, browserabsturz, versuch automatisch dateien downzuloadenCode:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 22-10-2014 Ran by Philipp (administrator) on PHILIPP-PC on 24-10-2014 16:56:34 Running from C:\Users\Philipp\Desktop Loaded Profile: Philipp (Available profiles: Philipp) Platform: Windows 7 Professional Service Pack 1 (X64) OS Language: Deutsch (Deutschland) Internet Explorer Version 11 Boot Mode: Normal Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (Lenovo.) C:\Windows\System32\ibmpmsvc.exe (DisplayLink Corp.) C:\Program Files\DisplayLink Core Software\DisplayLinkManager.exe (DisplayLink Corp.) C:\Program Files\DisplayLink Core Software\DisplayLinkUserAgent.exe (Microsoft Corporation) C:\Windows\System32\wlanext.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe (Conexant Systems Inc.) C:\Windows\System32\CxAudMsg64.exe (Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe (Lenovo) C:\Program Files (x86)\Lenovo\RapidBoot HDD Accelerator\FBService.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe (Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe (Lenovo Group Limited) C:\Program Files\Lenovo\Communications Utility\CamMute.exe (Lenovo Group Limited) C:\Program Files\Lenovo\Communications Utility\TPKNRSVC.exe (Lenovo Group Limited) C:\Program Files\Lenovo\Communications Utility\vcamsvc.exe (Lenovo Group Limited) C:\Program Files\Lenovo\VIRTSCRL\lvvsst.exe (Lenovo Group Limited) C:\Program Files\Lenovo\VIRTSCRL\virtscrl.exe (Nitro PDF Software) C:\Program Files\Nitro\Pro 9\NitroPDFDriverService9x64.exe () C:\Program Files\Nitro\Pro 9\Nitro_UpdateService.exe (Nalpeiron Ltd.) C:\Windows\SysWOW64\NLSSRV32.EXE (Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe (Conexant Systems, Inc.) C:\Windows\SysWOW64\SASrv.exe (Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\TPHKSVC.exe (Validity Sensors, Inc.) C:\Program Files\Lenovo Fingerprint Reader\ValBioService.exe (Lenovo Corporation) C:\Program Files\Lenovo\QuickDisplay\QuickDisplayAgent.exe (Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\tpnumlkd.exe (Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\tpnumlk.exe (Synaptics Incorporated) C:\Windows\System32\valWBFPolicyService.exe (Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe (Validity Sensors, Inc.) C:\Program Files\Lenovo Fingerprint Reader\SwipeMonitor.exe (Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\micmute.exe (Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\tphkload.exe (Microsoft Corporation) C:\Windows\System32\rundll32.exe (Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\TPONSCR.exe (Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\shtctky.exe (Intel Corporation) C:\Windows\System32\hkcmd.exe (Intel Corporation) C:\Windows\System32\igfxpers.exe (LITE-ON TECHNOLOGY CORP.) C:\Program Files\Lenovo\USB Enhanced Performance Keyboard\Skdaemon.exe (Intel Corporation) C:\Windows\System32\igfxsrvc.exe (Conexant Systems, Inc.) C:\Program Files\CONEXANT\cAudioFilterAgent\CAudioFilterAgent64.exe () C:\Program Files\CONEXANT\ForteConfig\fmapp.exe (Microsoft Corporation) C:\Windows\System32\rundll32.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (Lenovo.) C:\Windows\System32\TpShocks.exe (Lenovo Group Limited) C:\Program Files\Lenovo\Communications Utility\TpKnrres.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPLpr.exe (McAfee, Inc.) C:\Program Files (x86)\McAfee Security Scan\3.0.285\SSScheduler.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe (Vimicro) C:\Program Files (x86)\USB Camera\VM331STI.EXE (Microsoft Corporation) C:\Windows\SysWOW64\rundll32.exe (Microsoft Corporation) C:\Windows\System32\rundll32.exe (Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Lenovo Group Limited) C:\Program Files (x86)\ThinkPad\Utilities\SCHTASK.EXE (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Lenovo) C:\Program Files\Lenovo\Lenovo Solution Center\LSCNotify.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avcenter.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe (Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe (Lenovo Group Limited) C:\Program Files (x86)\Lenovo\QuickControl\QuickControlService.exe (Lenovo Group Limited) C:\Program Files (x86)\Lenovo\QuickControl\QuickControl.exe (Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe (Lenovo) C:\Program Files (x86)\Lenovo\Message Center Plus\MCPLaunch.exe (McAfee, Inc.) C:\Program Files (x86)\McAfee Security Scan\3.0.285\mcuicnt.exe (Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe (Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avscan.exe (Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_15_0_0_152.exe (Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_15_0_0_152.exe (Lenovo) C:\Program Files (x86)\ThinkPad\Utilities\PWMDBSVC.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Lenovo) C:\Program Files\Lenovo\Lenovo Peer Connect\LenovoDiscoverySvc.exe () C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe ==================== Registry (Whitelisted) ================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [Enhanced Performance Keyboard] => C:\Program Files\Lenovo\USB Enhanced Performance Keyboard\SKDaemon.exe [335360 2012-08-08] (LITE-ON TECHNOLOGY CORP.) HKLM\...\Run: [cAudioFilterAgent] => C:\Program Files\Conexant\cAudioFilterAgent\cAudioFilterAgent64.exe [901216 2013-04-29] (Conexant Systems, Inc.) HKLM\...\Run: [ForteConfig] => C:\Program Files\Conexant\ForteConfig\fmapp.exe [49056 2010-10-26] () HKLM\...\Run: [SmartAudio] => C:\Program Files\CONEXANT\SAII\SACpl.exe [1647616 2012-06-13] (Conexant Systems, Inc.) HKLM\...\Run: [BTMTrayAgent] => rundll32.exe "C:\Program Files (x86)\Intel\Bluetooth\btmshellex.dll",TrayApp HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2810608 2014-04-07] (Synaptics Incorporated) HKLM\...\Run: [TpShocks] => C:\Windows\system32\TpShocks.exe [384344 2014-02-18] (Lenovo.) HKLM\...\Run: [LENOVO.TPKNRRES] => C:\Program Files\Lenovo\Communications Utility\TPKNRRES.exe [295768 2014-05-30] (Lenovo Group Limited) HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [292848 2013-10-21] (Intel Corporation) HKLM-x32\...\Run: [331BigDog] => C:\Program Files (x86)\USB Camera\VM331STI.EXE [552960 2013-05-14] (Vimicro) HKLM-x32\...\Run: [PWMTRV] => rundll32 "C:\Program Files (x86)\ThinkPad\Utilities\PWMTR64V.DLL",PwrMgrBkGndMonitor HKLM-x32\...\Run: [Lenovo Registration] => C:\Program Files (x86)\Lenovo Registration\LenovoReg.exe [4315872 2011-06-01] (Lenovo, Inc.) HKLM-x32\...\Run: [Fastboot] => C:\Program Files (x86)\Lenovo\RapidBoot HDD Accelerator\FBConsole.exe [733936 2013-07-02] (Lenovo) HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59280 2012-08-27] (Apple Inc.) HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [421776 2012-09-09] (Apple Inc.) HKLM-x32\...\Run: [Avira Systray] => C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe [165168 2014-09-23] (Avira Operations GmbH & Co. KG) HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [703736 2014-09-24] (Avira Operations GmbH & Co. KG) HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959176 2014-09-12] (Adobe Systems Incorporated) Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation) HKLM\...\Policies\Explorer: [TaskbarNoNotification] 0 HKLM\...\Policies\Explorer: [HideSCAHealth] 0 HKU\S-1-5-21-1145738533-22672879-546596692-1001\...\Run: [ShowBatteryBar] => C:\Program Files\BatteryBar\ShowBatteryBar.exe [89600 2013-04-11] () HKU\S-1-5-21-1145738533-22672879-546596692-1001\...\Policies\Explorer: [TaskbarNoNotification] 0 HKU\S-1-5-21-1145738533-22672879-546596692-1001\...\Policies\Explorer: [HideSCAHealth] 0 HKU\S-1-5-21-1145738533-22672879-546596692-1001\...\MountPoints2: {1d1435dc-45ad-11e4-90ad-806e6f6e6963} - Q:\LenovoQDrive.exe HKU\S-1-5-18\...\Policies\Explorer: [TaskbarNoNotification] 0 HKU\S-1-5-18\...\Policies\Explorer: [HideSCAHealth] 0 Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files (x86)\McAfee Security Scan\3.0.285\SSScheduler.exe (McAfee, Inc.) Startup: C:\Users\Philipp\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk ShortcutTarget: Dropbox.lnk -> C:\Users\Philipp\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.) ShellIconOverlayIdentifiers: [ SkyDrive1] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => No File ShellIconOverlayIdentifiers: [ SkyDrive2] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => No File ShellIconOverlayIdentifiers: [ SkyDrive3] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => No File ShellIconOverlayIdentifiers: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Philipp\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll (Dropbox, Inc.) ShellIconOverlayIdentifiers: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Philipp\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll (Dropbox, Inc.) ShellIconOverlayIdentifiers: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Philipp\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll (Dropbox, Inc.) ShellIconOverlayIdentifiers: [DropboxExt4] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Philipp\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ SkyDrive1] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => No File ShellIconOverlayIdentifiers-x32: [ SkyDrive2] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => No File ShellIconOverlayIdentifiers-x32: [ SkyDrive3] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => No File ShellIconOverlayIdentifiers-x32: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => No File ShellIconOverlayIdentifiers-x32: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => No File ShellIconOverlayIdentifiers-x32: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => No File ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) HKCU\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://home.lenovo.com HKCU\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://home.lenovo.com StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe SearchScopes: HKLM - {398582D3-F98D-4564-9A62-DB66295FD89E} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE11TR&src=IE11TR&pc=LNJB SearchScopes: HKLM-x32 - {398582D3-F98D-4564-9A62-DB66295FD89E} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE11TR&src=IE11TR&pc=LNJB SearchScopes: HKCU - {398582D3-F98D-4564-9A62-DB66295FD89E} URL = Tcpip\Parameters: [DhcpNameServer] 192.168.0.1 FireFox: ======== FF ProfilePath: C:\Users\Philipp\AppData\Roaming\Mozilla\Firefox\Profiles\jh0rqjqg.default FF DefaultSearchEngine: Ecosia FF SelectedSearchEngine: Ecosia FF Homepage: about:home FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_15_0_0_152.dll () FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_152.dll () FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll () FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=3.5.29 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation) FF Plugin-x32: @nitropdf.com/NitroPDF -> C:\Program Files (x86)\Nitro\Pro 9\npnitromozilla.dll (Nitro PDF) FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin-x32: PDF Architect 2 -> C:\Program Files (x86)\PDF Architect 2\np-previewer.dll (pdfforge GmbH) FF SearchPlugin: C:\Users\Philipp\AppData\Roaming\Mozilla\Firefox\Profiles\jh0rqjqg.default\searchplugins\ecosia.xml FF SearchPlugin: C:\Users\Philipp\AppData\Roaming\Mozilla\Firefox\Profiles\jh0rqjqg.default\searchplugins\google-images.xml FF SearchPlugin: C:\Users\Philipp\AppData\Roaming\Mozilla\Firefox\Profiles\jh0rqjqg.default\searchplugins\google-maps.xml FF SearchPlugin: C:\Users\Philipp\AppData\Roaming\Mozilla\Firefox\Profiles\jh0rqjqg.default\searchplugins\ixquickde-https.xml FF SearchPlugin: C:\Users\Philipp\AppData\Roaming\Mozilla\Firefox\Profiles\jh0rqjqg.default\searchplugins\startpage-https---deutsch.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml FF Extension: Avira Browser Safety - C:\Users\Philipp\AppData\Roaming\Mozilla\Firefox\Profiles\jh0rqjqg.default\Extensions\abs@avira.com [2014-10-10] FF Extension: DoNotTrackMe: Online Privacy Protection - C:\Users\Philipp\AppData\Roaming\Mozilla\Firefox\Profiles\jh0rqjqg.default\Extensions\donottrackplus@abine.com [2014-10-11] FF Extension: organizesearchenginesmaltekrausde - C:\Users\Philipp\AppData\Roaming\Mozilla\Firefox\Profiles\jh0rqjqg.default\Extensions\organize-search-engines@maltekraus.de [2014-10-21] FF Extension: Microsoft .NET Framework Assistant - C:\Users\Philipp\AppData\Roaming\Mozilla\Firefox\Profiles\jh0rqjqg.default\Extensions\{20a82645-c095-46ed-80e3-08825760534b} [2014-10-11] FF Extension: Cliqz Beta - C:\Users\Philipp\AppData\Roaming\Mozilla\Firefox\Profiles\jh0rqjqg.default\Extensions\cliqz@cliqz.com.xpi [2014-10-12] FF Extension: Speed Dial - C:\Users\Philipp\AppData\Roaming\Mozilla\Firefox\Profiles\jh0rqjqg.default\Extensions\{64161300-e22b-11db-8314-0800200c9a66}.xpi [2014-10-11] FF Extension: Ecosia — The search engine that plants trees! - C:\Users\Philipp\AppData\Roaming\Mozilla\Firefox\Profiles\jh0rqjqg.default\Extensions\{d04b0b40-3dab-4f0b-97a6-04ec3eddbfb0}.xpi [2014-10-09] FF Extension: Adblock Plus - C:\Users\Philipp\AppData\Roaming\Mozilla\Firefox\Profiles\jh0rqjqg.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-10-09] FF Extension: Adblock Edge - C:\Users\Philipp\AppData\Roaming\Mozilla\Firefox\Profiles\jh0rqjqg.default\Extensions\{fe272bd1-5f76-4ea4-8501-a05d35d823fc}.xpi [2014-10-09] FF HKLM-x32\...\Firefox\Extensions: [{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.3.0.12\coFFPlgn FF Extension: Norton Toolbar - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.3.0.12\coFFPlgn [2014-10-23] FF HKCU\...\Firefox\Extensions: [cliqz@cliqz.com] - C:\Users\Philipp\AppData\Roaming\Mozilla\Firefox\Profiles\jh0rqjqg.default\extensions\cliqz@cliqz.com Chrome: ======= ==================== Services (Whitelisted) ================= (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [431920 2014-09-24] (Avira Operations GmbH & Co. KG) R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [431920 2014-09-24] (Avira Operations GmbH & Co. KG) R2 Avira.OE.ServiceHost; C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe [160560 2014-09-23] (Avira Operations GmbH & Co. KG) R2 DisplayLinkService; C:\Program Files\DisplayLink Core Software\DisplayLinkManager.exe [9954096 2014-04-01] (DisplayLink Corp.) R2 FastbootService; C:\Program Files (x86)\Lenovo\RapidBoot HDD Accelerator\FBService.exe [140016 2013-07-02] (Lenovo) R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [731648 2013-02-13] (Intel(R) Corporation) [File not signed] S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [820184 2013-02-13] (Intel(R) Corporation) R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [131544 2013-05-08] (Intel Corporation) S3 iumsvc; C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [174368 2014-02-28] () R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-05-08] (Intel Corporation) S3 Lenovo EasyPlus Hotspot; C:\Program Files (x86)\Common Files\lenovo\easyplussdk\bin\EPHotspot64.exe [533760 2014-06-03] (Lenovo) R2 LENOVO.TVTVCAM; C:\Program Files\Lenovo\Communications Utility\vcamsvc.exe [197464 2014-05-30] (Lenovo Group Limited) R2 Lenovo.VIRTSCRLSVC; C:\Program Files\LENOVO\VIRTSCRL\lvvsst.exe [136288 2012-08-11] (Lenovo Group Limited) R2 lnvDiscoveryWinSvc; C:\Program Files\Lenovo\Lenovo Peer Connect\LenovoDiscoverySvc.exe [21552 2014-02-22] (Lenovo) S3 LSCWinService; C:\Program Files\Lenovo\Lenovo Solution Center\App\LSCWinService.exe [272776 2014-09-03] () S3 McComponentHostService; C:\Program Files (x86)\McAfee Security Scan\3.0.285\McCHSvc.exe [234776 2012-09-05] (McAfee, Inc.) S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [284912 2014-01-18] () S2 NIS; C:\Program Files (x86)\Norton Internet Security\Engine\21.6.0.32\NIS.exe [276376 2014-09-21] (Symantec Corporation) R2 NitroDriverReadSpool9; C:\Program Files\Nitro\Pro 9\NitroPDFDriverService9x64.exe [230920 2014-05-16] (Nitro PDF Software) R2 NitroUpdateService; C:\Program Files\Nitro\Pro 9\Nitro_UpdateService.exe [417800 2014-05-16] () S3 PDF Architect 2; C:\Program Files (x86)\PDF Architect 2\ws.exe [1771560 2014-06-26] (pdfforge GmbH) S3 pdfforge CrashHandler; C:\Program Files (x86)\PDF Architect 2\crash-handler-ws.exe [861736 2014-06-26] (pdfforge GmbH) S2 QuickControlMasterSvc; C:\Program Files (x86)\Lenovo\QuickControl\QuickControlMasterSvc.exe [61936 2014-06-12] (Lenovo Group Limited) R3 QuickControlService; C:\Program Files (x86)\Lenovo\QuickControl\QuickControlService.exe [316400 2014-06-12] (Lenovo Group Limited) S3 SUService; C:\Program Files (x86)\Lenovo\System Update\SUService.exe [24560 2014-06-18] () R2 ValBioService; C:\Program Files\Lenovo Fingerprint Reader\ValBioService.exe [22872 2014-05-06] (Validity Sensors, Inc.) R2 valWBFPolicyService; C:\Windows\system32\valWBFPolicyService.exe [47504 2014-05-08] (Synaptics Incorporated) R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [3816176 2014-01-18] (Intel® Corporation) ==================== Drivers (Whitelisted) ==================== (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [119272 2014-09-24] (Avira Operations GmbH & Co. KG) R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131608 2014-09-24] (Avira Operations GmbH & Co. KG) R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2014-09-24] (Avira Operations GmbH & Co. KG) R1 BHDrvx64; C:\Program Files (x86)\Norton Internet Security\NortonData\21.3.0.12\Definitions\BASHDefs\20141016.001\BHDrvx64.sys [1587416 2014-10-03] (Symantec Corporation) R3 btmaux; C:\Windows\System32\DRIVERS\btmaux.sys [140600 2014-03-26] (Motorola Solutions, Inc.) R3 btmhsf; C:\Windows\System32\DRIVERS\btmhsf.sys [1423160 2014-04-19] (Motorola Solutions, Inc.) R1 ccSet_NIS; C:\Windows\system32\drivers\NISx64\1506000.020\ccSetx64.sys [162392 2014-02-21] (Symantec Corporation) S3 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [487216 2014-10-08] (Symantec Corporation) S3 EraserUtilDrv11410; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilDrv11410.sys [142640 2014-10-08] (Symantec Corporation) S3 Fastboot; C:\Windows\System32\DRIVERS\fastboot.sys [56048 2013-07-02] (Windows (R) Win 7 DDK provider) R0 iaStorF; C:\Windows\System32\DRIVERS\iaStorF.sys [28656 2013-04-30] (Intel Corporation) R3 ibtusb; C:\Windows\System32\DRIVERS\ibtusb.sys [192456 2014-05-10] (Intel Corporation) R1 IDSVia64; C:\Program Files (x86)\Norton Internet Security\NortonData\21.3.0.12\Definitions\IPSDefs\20141022.002\IDSvia64.sys [633560 2014-10-08] (Symantec Corporation) R3 MEIx64; C:\Windows\System32\DRIVERS\TeeDriverx64.sys [99800 2013-05-08] (Intel Corporation) R3 NAVENG; C:\Program Files (x86)\Norton Internet Security\NortonData\21.3.0.12\Definitions\VirusDefs\20141022.017\ENG64.SYS [129752 2014-10-08] (Symantec Corporation) R3 NAVEX15; C:\Program Files (x86)\Norton Internet Security\NortonData\21.3.0.12\Definitions\VirusDefs\20141022.017\EX64.SYS [2137304 2014-10-08] (Symantec Corporation) R3 NETwNs64; C:\Windows\System32\DRIVERS\Netwsw02.sys [3434976 2014-04-16] (Intel Corporation) R3 RTSPER; C:\Windows\System32\DRIVERS\RtsPer.sys [408136 2013-05-08] (Realsil Semiconductor Corporation) R3 SmbDrvI; C:\Windows\System32\DRIVERS\Smb_driver_Intel.sys [31472 2014-04-07] (Synaptics Incorporated) R1 SRTSP; C:\Windows\System32\Drivers\NISx64\1506000.020\SRTSP64.SYS [876248 2014-08-26] (Symantec Corporation) R1 SRTSPX; C:\Windows\system32\drivers\NISx64\1506000.020\SRTSPX64.SYS [37592 2014-08-26] (Symantec Corporation) R0 SymDS; C:\Windows\System32\drivers\NISx64\1506000.020\SYMDS64.SYS [493656 2013-10-30] (Symantec Corporation) R0 SymEFA; C:\Windows\System32\drivers\NISx64\1506000.020\SYMEFA64.SYS [1148120 2014-03-04] (Symantec Corporation) R3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [177752 2014-09-26] (Symantec Corporation) R1 SymIRON; C:\Windows\system32\drivers\NISx64\1506000.020\Ironx64.SYS [266968 2014-08-06] (Symantec Corporation) R1 SymNetS; C:\Windows\System32\Drivers\NISx64\1506000.020\SYMNETS.SYS [593112 2014-02-18] (Symantec Corporation) R3 usb3Hub; C:\Windows\System32\DRIVERS\usb3Hub.sys [206744 2013-06-21] (Windows (R) Win 7 DDK provider) R3 vm331avs; C:\Windows\System32\Drivers\vm331avs.sys [1070080 2013-12-31] (Vimicro Corporation) ==================== NetSvcs (Whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.) ==================== One Month Created Files and Folders ======== (If an entry is included in the fixlist, the file\folder will be moved.) 2014-10-24 16:56 - 2014-10-24 16:58 - 00024636 _____ () C:\Users\Philipp\Desktop\FRST.txt 2014-10-23 23:26 - 2014-10-23 23:26 - 00003722 _____ () C:\Windows\System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473 2014-10-23 23:26 - 2014-10-23 23:26 - 00003476 _____ () C:\Windows\System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473-Logon 2014-10-23 23:26 - 2014-10-23 23:26 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel 2014-10-23 23:25 - 2014-10-23 23:25 - 00347816 _____ (Microsoft Corporation) C:\Users\Philipp\Downloads\MicrosoftFixit.WindowsFirewall.RNP.19933753030992675.1.1.Run.exe 2014-10-23 23:10 - 2014-10-23 23:10 - 00002173 _____ () C:\Users\Public\Desktop\McAfee Security Scan Plus.lnk 2014-10-23 23:10 - 2014-10-23 23:10 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee Security Scan Plus 2014-10-23 23:10 - 2014-10-23 23:10 - 00000000 ____D () C:\ProgramData\McAfee Security Scan 2014-10-23 23:10 - 2014-10-23 23:10 - 00000000 ____D () C:\ProgramData\McAfee 2014-10-23 23:10 - 2014-10-23 23:10 - 00000000 ____D () C:\Program Files (x86)\McAfee Security Scan 2014-10-23 23:09 - 2014-10-23 23:09 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk 2014-10-23 23:09 - 2014-10-23 23:09 - 00002030 _____ () C:\Users\Public\Desktop\Adobe Reader XI.lnk 2014-10-23 22:51 - 2014-10-23 22:51 - 00244408 _____ () C:\Users\Philipp\Downloads\Firefox Setup Stub 33.0.exe 2014-10-23 16:54 - 2014-10-23 16:54 - 00854448 _____ () C:\Users\Philipp\Downloads\SecurityCheck.exe 2014-10-21 21:15 - 2014-10-21 21:15 - 02347384 _____ (ESET) C:\Users\Philipp\Downloads\esetsmartinstaller_deu.exe 2014-10-21 21:12 - 2014-10-21 21:12 - 00001929 _____ () C:\Users\Philipp\Desktop\mbam.txt 2014-10-21 21:04 - 2014-10-21 21:04 - 00001937 _____ () C:\Users\Philipp\Desktop\malwarebytes.txt 2014-10-21 20:46 - 2014-10-21 21:10 - 00129752 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2014-10-21 20:46 - 2014-10-21 20:46 - 00001109 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2014-10-21 20:46 - 2014-10-21 20:46 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 2014-10-21 20:46 - 2014-10-21 20:46 - 00000000 ____D () C:\ProgramData\Malwarebytes 2014-10-21 20:46 - 2014-10-21 20:46 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 2014-10-21 20:46 - 2014-10-01 11:11 - 00093400 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys 2014-10-21 20:46 - 2014-10-01 11:11 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys 2014-10-21 20:46 - 2014-10-01 11:11 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys 2014-10-21 20:43 - 2014-10-21 20:44 - 19828376 _____ (Malwarebytes Corporation ) C:\Users\Philipp\Downloads\mbam-setup-2.0.3.1025.exe 2014-10-21 20:36 - 2014-10-21 20:36 - 00448512 _____ (OldTimer Tools) C:\Users\Philipp\Downloads\TFC.exe 2014-10-21 20:23 - 2014-10-23 16:45 - 00000000 ____D () C:\Users\Philipp\Downloads\FRST-OlderVersion 2014-10-21 19:29 - 2014-10-21 19:29 - 00001912 _____ () C:\Users\Philipp\Desktop\JRT.txt 2014-10-21 19:27 - 2014-10-21 19:27 - 00000000 ____D () C:\Windows\ERUNT 2014-10-21 19:15 - 2014-10-21 19:15 - 01705698 _____ (Thisisu) C:\Users\Philipp\Downloads\JRT.exe 2014-10-21 19:10 - 2014-10-21 19:19 - 00000000 ____D () C:\AdwCleaner 2014-10-21 19:09 - 2014-10-21 19:09 - 01962496 _____ () C:\Users\Philipp\Downloads\AdwCleaner_4.001.exe 2014-10-21 19:09 - 2014-10-21 19:08 - 00043064 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys 2014-10-12 20:05 - 2014-10-12 20:05 - 00030128 _____ () C:\Users\Philipp\Downloads\logfiles.7z 2014-10-12 20:04 - 2014-10-12 20:05 - 00030128 _____ () C:\Users\Philipp\Downloads\Downloads.7z 2014-10-12 20:03 - 2014-10-12 20:03 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip 2014-10-12 20:03 - 2014-10-12 20:03 - 00000000 ____D () C:\Program Files (x86)\7-Zip 2014-10-12 19:23 - 2014-10-12 19:23 - 01098088 _____ () C:\Windows\Minidump\101214-25131-01.dmp 2014-10-12 19:23 - 2014-10-12 19:23 - 00000000 ____D () C:\Windows\Minidump 2014-10-12 19:22 - 2014-10-12 19:22 - 787588699 _____ () C:\Windows\MEMORY.DMP 2014-10-12 18:54 - 2014-10-12 18:54 - 00057539 _____ () C:\Users\Philipp\Downloads\gmer.log 2014-10-12 18:38 - 2014-10-12 18:38 - 00380416 _____ () C:\Users\Philipp\Downloads\Gmer-19357.exe 2014-10-12 18:34 - 2014-10-12 18:35 - 00037232 _____ () C:\Users\Philipp\Downloads\Addition.txt 2014-10-12 18:32 - 2014-10-24 16:56 - 00000000 ____D () C:\FRST 2014-10-12 18:32 - 2014-10-21 22:31 - 00126756 _____ () C:\Users\Philipp\Downloads\FRST.txt 2014-10-12 18:29 - 2014-10-23 16:45 - 02112000 _____ (Farbar) C:\Users\Philipp\Desktop\FRST64.exe 2014-10-12 18:29 - 2014-10-12 18:29 - 00000476 _____ () C:\Users\Philipp\Downloads\defogger_disable.log 2014-10-12 18:29 - 2014-10-12 18:29 - 00000000 _____ () C:\Users\Philipp\defogger_reenable 2014-10-12 18:28 - 2014-10-12 18:28 - 00050477 _____ () C:\Users\Philipp\Downloads\Defogger.exe 2014-10-11 18:12 - 2014-10-11 17:53 - 00000825 _____ () C:\Users\Philipp\Documents\indexfile.txt 2014-10-11 18:07 - 2014-10-11 18:07 - 00001034 _____ () C:\Users\Public\Desktop\MozBackup.lnk 2014-10-11 18:07 - 2014-10-11 18:07 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MozBackup 2014-10-11 18:07 - 2014-10-11 18:07 - 00000000 ____D () C:\Program Files (x86)\MozBackup 2014-10-11 18:05 - 2014-10-11 18:05 - 01125200 _____ () C:\Users\Philipp\Downloads\MozBackup - CHIP-Installer.exe 2014-10-11 17:57 - 2014-10-11 17:57 - 01055936 _____ (Adobe) C:\Users\Philipp\Downloads\install_flashplayer15x32_mssa_aaa_aih.exe 2014-10-11 17:40 - 2014-10-21 19:06 - 00000000 ____D () C:\Users\Philipp\AppData\Roaming\Avaxv 2014-10-11 17:40 - 2014-10-13 17:04 - 00000000 ____D () C:\Users\Philipp\AppData\Roaming\Malaon 2014-10-11 17:38 - 2014-10-12 20:08 - 00000000 ____D () C:\Users\Philipp\AppData\Local\Deployment 2014-10-11 17:38 - 2014-10-11 17:38 - 00000000 ____D () C:\Users\Philipp\AppData\Local\Apps\2.0 2014-10-10 10:42 - 2014-10-10 10:42 - 00000000 ___SD () C:\Windows\system32\CompatTel 2014-10-10 10:08 - 2014-08-19 20:05 - 00374968 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2014-10-10 10:08 - 2014-08-19 19:39 - 00327872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2014-10-10 10:08 - 2014-08-19 01:01 - 23591424 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-10-10 10:08 - 2014-08-19 00:29 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-10-10 10:08 - 2014-08-19 00:29 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2014-10-10 10:08 - 2014-08-19 00:26 - 17455104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2014-10-10 10:08 - 2014-08-19 00:20 - 02793984 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2014-10-10 10:08 - 2014-08-19 00:19 - 05833728 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2014-10-10 10:08 - 2014-08-19 00:15 - 00547328 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2014-10-10 10:08 - 2014-08-19 00:15 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2014-10-10 10:08 - 2014-08-19 00:14 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2014-10-10 10:08 - 2014-08-19 00:14 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2014-10-10 10:08 - 2014-08-19 00:08 - 04232704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2014-10-10 10:08 - 2014-08-19 00:08 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2014-10-10 10:08 - 2014-08-19 00:08 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2014-10-10 10:08 - 2014-08-19 00:05 - 00596480 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2014-10-10 10:08 - 2014-08-19 00:03 - 00758272 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2014-10-10 10:08 - 2014-08-19 00:03 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2014-10-10 10:08 - 2014-08-19 00:03 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2014-10-10 10:08 - 2014-08-18 23:57 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2014-10-10 10:08 - 2014-08-18 23:56 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2014-10-10 10:08 - 2014-08-18 23:51 - 00446464 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2014-10-10 10:08 - 2014-08-18 23:46 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2014-10-10 10:08 - 2014-08-18 23:45 - 00072704 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2014-10-10 10:08 - 2014-08-18 23:45 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2014-10-10 10:08 - 2014-08-18 23:44 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll 2014-10-10 10:08 - 2014-08-18 23:44 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2014-10-10 10:08 - 2014-08-18 23:42 - 02185728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2014-10-10 10:08 - 2014-08-18 23:40 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2014-10-10 10:08 - 2014-08-18 23:39 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2014-10-10 10:08 - 2014-08-18 23:39 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2014-10-10 10:08 - 2014-08-18 23:39 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2014-10-10 10:08 - 2014-08-18 23:38 - 00289280 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2014-10-10 10:08 - 2014-08-18 23:37 - 00440320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2014-10-10 10:08 - 2014-08-18 23:36 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2014-10-10 10:08 - 2014-08-18 23:35 - 00597504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2014-10-10 10:08 - 2014-08-18 23:27 - 00365056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2014-10-10 10:08 - 2014-08-18 23:25 - 00727040 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2014-10-10 10:08 - 2014-08-18 23:25 - 00707072 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2014-10-10 10:08 - 2014-08-18 23:23 - 02104832 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2014-10-10 10:08 - 2014-08-18 23:23 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2014-10-10 10:08 - 2014-08-18 23:22 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2014-10-10 10:08 - 2014-08-18 23:19 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2014-10-10 10:08 - 2014-08-18 23:17 - 00243200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2014-10-10 10:08 - 2014-08-18 23:17 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2014-10-10 10:08 - 2014-08-18 23:16 - 13588480 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2014-10-10 10:08 - 2014-08-18 23:15 - 11769856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2014-10-10 10:08 - 2014-08-18 23:15 - 02310656 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2014-10-10 10:08 - 2014-08-18 23:09 - 00603136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2014-10-10 10:08 - 2014-08-18 23:08 - 02014208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2014-10-10 10:08 - 2014-08-18 23:07 - 01068032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2014-10-10 10:08 - 2014-08-18 22:55 - 01447424 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2014-10-10 10:08 - 2014-08-18 22:46 - 01812992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2014-10-10 10:08 - 2014-08-18 22:38 - 01190400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2014-10-10 10:08 - 2014-08-18 22:38 - 00775168 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2014-10-10 10:08 - 2014-08-18 22:36 - 00678400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2014-10-10 10:02 - 2010-02-23 10:16 - 00294912 _____ (Microsoft Corporation) C:\Windows\system32\browserchoice.exe 2014-10-10 09:46 - 2014-10-10 09:46 - 00000000 ____D () C:\Users\Philipp\AppData\Roaming\Avira 2014-10-10 09:41 - 2014-10-23 22:54 - 00000000 ____D () C:\Users\Philipp\AppData\Local\CrashDumps 2014-10-10 09:40 - 2014-06-27 04:08 - 02777088 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll 2014-10-10 09:40 - 2014-06-27 03:45 - 02285056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll 2014-10-10 09:38 - 2014-09-24 12:44 - 00131608 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys 2014-10-10 09:38 - 2014-09-24 12:44 - 00119272 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys 2014-10-10 09:38 - 2014-09-24 12:44 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys 2014-10-10 09:34 - 2014-10-10 09:40 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira 2014-10-10 09:34 - 2014-10-10 09:38 - 00000000 ____D () C:\ProgramData\Avira 2014-10-10 09:34 - 2014-10-10 09:38 - 00000000 ____D () C:\Program Files (x86)\Avira 2014-10-10 09:34 - 2014-10-10 09:34 - 00001148 _____ () C:\Users\Public\Desktop\Avira.lnk 2014-10-10 09:33 - 2014-10-10 09:33 - 04714656 _____ (Avira Operations GmbH & Co. KG) C:\Users\Philipp\Downloads\avira_de_av_4464542853__ws.exe 2014-10-10 09:28 - 2014-10-23 16:48 - 00000008 __RSH () C:\ProgramData\ntuser.pol 2014-10-10 09:28 - 2014-10-10 09:28 - 00056504 _____ (Corsica) C:\Windows\system32\Drivers\webinstrNew.sys 2014-10-10 09:28 - 2014-10-10 09:28 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_webinstrNew_01009.Wdf 2014-10-10 09:28 - 2014-10-10 09:28 - 00000000 ____D () C:\Windows\System32\Tasks\Norton Internet Security 2014-10-10 09:27 - 2014-07-01 00:24 - 00008856 _____ (Microsoft Corporation) C:\Windows\system32\icardres.dll 2014-10-10 09:27 - 2014-07-01 00:14 - 00008856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardres.dll 2014-10-10 09:27 - 2014-06-06 08:16 - 00035480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TsWpfWrp.exe 2014-10-10 09:27 - 2014-06-06 08:12 - 00035480 _____ (Microsoft Corporation) C:\Windows\system32\TsWpfWrp.exe 2014-10-10 09:27 - 2014-03-09 23:48 - 01389208 _____ (Microsoft Corporation) C:\Windows\system32\icardagt.exe 2014-10-10 09:27 - 2014-03-09 23:48 - 00171160 _____ (Microsoft Corporation) C:\Windows\system32\infocardapi.dll 2014-10-10 09:27 - 2014-03-09 23:47 - 00619672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardagt.exe 2014-10-10 09:27 - 2014-03-09 23:47 - 00099480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\infocardapi.dll 2014-10-09 20:55 - 2014-10-09 20:55 - 00000000 ____D () C:\Windows\SysWOW64\Flash 2014-10-09 20:54 - 2014-10-09 20:54 - 00000000 ____D () C:\Users\Philipp\AppData\Roaming\ap_movie 2014-10-09 20:47 - 2014-10-09 20:47 - 00000000 ____D () C:\ProgramData\Xunlei 2014-10-09 20:47 - 2014-10-09 20:47 - 00000000 ____D () C:\ProgramData\Thunder Network 2014-10-09 20:45 - 2014-10-09 20:45 - 00000000 ____D () C:\Users\Philipp\Documents\PDF Architect 2 2014-10-09 20:45 - 2014-10-09 20:45 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDF Architect 2 2014-10-09 20:45 - 2014-10-09 20:45 - 00000000 ____D () C:\Program Files (x86)\PDF Architect 2 2014-10-09 20:44 - 2014-10-09 20:46 - 00000000 ____D () C:\Program Files (x86)\PDFCreator 2014-10-09 20:44 - 2014-10-09 20:44 - 00000000 ____D () C:\ProgramData\PDF Architect 2 2014-10-09 20:44 - 2014-10-09 20:44 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDFCreator 2014-10-09 20:44 - 2014-09-23 09:43 - 01070152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSCOMCTL.OCX 2014-10-09 20:44 - 2014-09-23 09:43 - 00662288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSCOMCT2.OCX 2014-10-09 20:44 - 2014-09-23 09:43 - 00137000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSMAPI32.OCX 2014-10-09 20:44 - 2014-09-23 09:43 - 00110264 _____ (pdfforge GmbH) C:\Windows\system32\pdfcmon.dll 2014-10-09 20:44 - 2014-09-23 09:43 - 00023552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSMPIDE.DLL 2014-10-09 20:44 - 1998-07-06 18:56 - 00125712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\VB6DE.DLL 2014-10-09 20:44 - 1998-07-06 18:55 - 00158208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSCMCDE.DLL 2014-10-09 20:44 - 1998-07-06 18:55 - 00064512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSCC2DE.DLL 2014-10-09 20:39 - 2014-10-24 16:51 - 00000000 ____D () C:\Users\Philipp\AppData\Roaming\Dropbox 2014-10-09 20:39 - 2014-10-09 20:39 - 00000000 ____D () C:\Users\Philipp\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox 2014-10-09 20:38 - 2014-10-10 09:25 - 00000000 ____D () C:\Users\Philipp\AppData\Roaming\BatteryBar 2014-10-09 20:38 - 2014-10-09 20:38 - 00000000 ____D () C:\Program Files\BatteryBar 2014-10-09 20:37 - 2014-10-09 20:37 - 00000000 ____D () C:\Users\Philipp\Downloads\Freeware_Starter_Kit_fuer_Ihr_Notebook_2014 2014-10-09 20:37 - 2014-10-09 20:37 - 00000000 ____D () C:\Users\Philipp\AppData\Local\Macromedia 2014-10-09 20:36 - 2014-10-23 22:45 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job 2014-10-09 20:36 - 2014-10-11 18:03 - 00701104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2014-10-09 20:36 - 2014-10-11 18:03 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2014-10-09 20:36 - 2014-10-11 18:03 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater 2014-10-09 20:36 - 2014-10-10 09:45 - 00000000 ____D () C:\Program Files (x86)\Google 2014-10-09 20:36 - 2014-10-10 09:38 - 00000000 ____D () C:\Users\Philipp\AppData\Local\Google 2014-10-09 20:36 - 2014-10-09 20:36 - 00000000 ____D () C:\Windows\SysWOW64\Macromed 2014-10-09 20:35 - 2014-10-23 23:12 - 00000000 ____D () C:\Users\Philipp\AppData\Local\Adobe 2014-10-09 20:35 - 2014-10-09 20:35 - 00000000 ____D () C:\Windows\system32\Macromed 2014-10-09 20:32 - 2014-10-09 20:32 - 00000000 _____ () C:\Users\Philipp\Downloads\FileOpenerSetup.exe 2014-10-09 20:27 - 2014-10-09 20:28 - 00000000 ____D () C:\Users\Philipp\AppData\Roaming\Apple Computer 2014-10-09 20:27 - 2014-10-09 20:27 - 00001794 _____ () C:\Users\Public\Desktop\iTunes.lnk 2014-10-09 20:27 - 2014-10-09 20:27 - 00000000 ____D () C:\Users\Philipp\AppData\Local\Apple Computer 2014-10-09 20:27 - 2014-10-09 20:27 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes 2014-10-09 20:27 - 2012-08-21 13:01 - 00033240 _____ (GEAR Software Inc.) C:\Windows\system32\Drivers\GEARAspiWDM.sys 2014-10-09 20:26 - 2014-10-09 20:27 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69 2014-10-09 20:26 - 2014-10-09 20:27 - 00000000 ____D () C:\Program Files\iTunes 2014-10-09 20:26 - 2014-10-09 20:27 - 00000000 ____D () C:\Program Files (x86)\iTunes 2014-10-09 20:26 - 2014-10-09 20:26 - 00000000 ____D () C:\ProgramData\Apple Computer 2014-10-09 20:26 - 2014-10-09 20:26 - 00000000 ____D () C:\Program Files\iPod 2014-10-09 20:24 - 2014-10-09 20:24 - 00002519 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk 2014-10-09 20:24 - 2014-10-09 20:24 - 00000000 ____D () C:\Windows\System32\Tasks\Apple 2014-10-09 20:24 - 2014-10-09 20:24 - 00000000 ____D () C:\Users\Philipp\AppData\Local\Apple 2014-10-09 20:24 - 2014-10-09 20:24 - 00000000 ____D () C:\ProgramData\Apple 2014-10-09 20:24 - 2014-10-09 20:24 - 00000000 ____D () C:\Program Files\Common Files\Apple 2014-10-09 20:24 - 2014-10-09 20:24 - 00000000 ____D () C:\Program Files\Bonjour 2014-10-09 20:24 - 2014-10-09 20:24 - 00000000 ____D () C:\Program Files (x86)\Bonjour 2014-10-09 20:24 - 2014-10-09 20:24 - 00000000 ____D () C:\Program Files (x86)\Apple Software Update 2014-10-09 20:23 - 2014-10-09 20:24 - 00000000 ____D () C:\Users\Philipp\AppData\Local\Abelssoft 2014-10-09 20:23 - 2014-10-09 20:23 - 00000000 ____D () C:\Windows\System32\Tasks\Abelssoft 2014-10-09 20:23 - 2014-10-09 20:23 - 00000000 ____D () C:\Users\Philipp\AppData\Roaming\Abelssoft 2014-10-09 20:23 - 2014-10-09 20:23 - 00000000 ____D () C:\ProgramData\XDMessagingv4 2014-10-09 20:23 - 2014-10-09 20:23 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CHIP Updater 2014-10-09 20:23 - 2014-10-09 20:23 - 00000000 ____D () C:\Program Files (x86)\CHIP Updater 2014-10-09 20:23 - 2011-05-13 12:16 - 00493056 _____ ( datenhaus GmbH) C:\Windows\SysWOW64\dhRichClient3.dll 2014-10-09 20:23 - 2011-03-25 20:42 - 00338432 _____ () C:\Windows\SysWOW64\sqlite36_engine.dll 2014-10-09 20:21 - 2014-10-09 20:22 - 80521624 _____ (Apple Inc.) C:\Users\Philipp\Downloads\iTunes64Setup.exe 2014-10-09 20:18 - 2011-04-09 08:58 - 00142336 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe 2014-10-09 20:18 - 2011-04-09 07:56 - 00123904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\poqexec.exe 2014-10-09 20:14 - 2014-10-09 20:14 - 111992144 _____ (Apple Inc.) C:\Users\Philipp\Desktop\iTunesSetup.exe 2014-10-09 20:13 - 2014-10-09 20:13 - 01125200 _____ () C:\Users\Philipp\Downloads\CHIP Online Notebook Starter Kit 2014 - CHIP-Installer.exe 2014-10-09 20:11 - 2014-08-01 13:53 - 01031168 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll 2014-10-09 20:11 - 2014-08-01 13:35 - 00793600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSWorkspace.dll 2014-10-09 20:11 - 2014-04-25 04:34 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll 2014-10-09 20:11 - 2014-04-25 04:06 - 00626688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usp10.dll 2014-10-09 20:11 - 2014-04-05 04:47 - 01903552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys 2014-10-09 20:11 - 2014-04-05 04:47 - 00288192 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS 2014-10-09 20:11 - 2011-11-17 08:35 - 00395776 _____ (Microsoft Corporation) C:\Windows\system32\webio.dll 2014-10-09 20:11 - 2011-11-17 07:35 - 00314880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webio.dll 2014-10-09 20:10 - 2014-06-24 05:29 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll 2014-10-09 20:10 - 2014-06-24 04:59 - 01987584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll 2014-10-09 20:10 - 2014-06-18 04:18 - 00692736 _____ (Microsoft Corporation) C:\Windows\system32\osk.exe 2014-10-09 20:10 - 2014-06-18 03:51 - 00646144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\osk.exe 2014-10-09 20:10 - 2014-06-06 12:10 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll 2014-10-09 20:10 - 2014-06-06 11:44 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll 2014-10-09 20:10 - 2014-06-03 12:02 - 03241984 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll 2014-10-09 20:10 - 2014-06-03 12:02 - 01941504 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll 2014-10-09 20:10 - 2014-06-03 12:02 - 00504320 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll 2014-10-09 20:10 - 2014-06-03 12:02 - 00112064 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe 2014-10-09 20:10 - 2014-06-03 11:29 - 02363392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll 2014-10-09 20:10 - 2014-06-03 11:29 - 01805824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll 2014-10-09 20:10 - 2014-06-03 11:29 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msihnd.dll 2014-10-09 20:10 - 2014-05-30 08:45 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys 2014-10-09 20:10 - 2014-03-26 16:44 - 02002432 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll 2014-10-09 20:10 - 2014-03-26 16:44 - 01882112 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll 2014-10-09 20:10 - 2014-03-26 16:41 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml6r.dll 2014-10-09 20:10 - 2014-03-26 16:41 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll 2014-10-09 20:10 - 2014-03-26 16:27 - 01389056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll 2014-10-09 20:10 - 2014-03-26 16:27 - 01237504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll 2014-10-09 20:10 - 2014-03-26 16:25 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6r.dll 2014-10-09 20:10 - 2014-03-26 16:25 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll 2014-10-09 20:09 - 2014-09-25 04:08 - 00371712 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll 2014-10-09 20:09 - 2014-09-25 03:40 - 00519680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qdvd.dll 2014-10-09 20:09 - 2014-06-16 04:10 - 00985536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys 2014-10-09 20:09 - 2014-05-30 10:08 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll 2014-10-09 20:09 - 2014-05-30 10:08 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll 2014-10-09 20:09 - 2014-05-30 10:08 - 00307200 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll 2014-10-09 20:09 - 2014-05-30 10:08 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll 2014-10-09 20:09 - 2014-05-30 10:08 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll 2014-10-09 20:09 - 2014-05-30 10:08 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll 2014-10-09 20:09 - 2014-05-30 09:52 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll 2014-10-09 20:09 - 2014-05-30 09:52 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll 2014-10-09 20:09 - 2014-05-30 09:52 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll 2014-10-09 20:09 - 2014-05-30 09:52 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll 2014-10-09 20:09 - 2014-05-30 09:52 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll 2014-10-09 20:09 - 2014-05-30 09:52 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll 2014-10-09 20:08 - 2014-09-10 00:11 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll 2014-10-09 20:08 - 2014-09-09 23:47 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll 2014-10-09 20:07 - 2014-06-25 04:05 - 14175744 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll 2014-10-09 20:07 - 2014-06-25 03:41 - 12874240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll 2014-10-09 20:07 - 2013-07-20 12:33 - 00124112 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll 2014-10-09 20:07 - 2013-07-20 12:33 - 00102608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll 2014-10-09 20:06 - 2014-07-07 04:06 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll 2014-10-09 20:06 - 2014-07-07 04:06 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll 2014-10-09 20:06 - 2014-07-07 03:40 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll 2014-10-09 20:06 - 2014-07-07 03:40 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll 2014-10-09 20:06 - 2014-07-07 03:39 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll 2014-10-09 20:03 - 2014-09-05 04:10 - 00578048 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll 2014-10-09 20:03 - 2014-09-05 04:05 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll 2014-10-09 20:03 - 2014-08-23 04:07 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll 2014-10-09 20:03 - 2014-08-23 03:45 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll 2014-10-09 20:03 - 2014-08-23 02:59 - 03163648 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2014-10-09 20:03 - 2011-02-23 06:55 - 00090624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bowser.sys 2014-10-09 20:02 - 2014-07-14 04:02 - 01216000 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll 2014-10-09 20:02 - 2014-07-14 03:40 - 00664064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll 2014-10-09 19:58 - 2014-10-23 22:57 - 00001166 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk 2014-10-09 19:58 - 2014-10-23 22:57 - 00001154 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk 2014-10-09 19:58 - 2014-10-23 22:57 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox 2014-10-09 19:58 - 2014-10-09 19:59 - 00000000 ____D () C:\Users\Philipp\AppData\Roaming\Mozilla 2014-10-09 19:58 - 2014-10-09 19:59 - 00000000 ____D () C:\Users\Philipp\AppData\Local\Mozilla 2014-10-09 19:58 - 2014-10-09 19:58 - 00000000 ____D () C:\ProgramData\Mozilla 2014-10-09 19:58 - 2014-10-09 19:58 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service 2014-10-09 19:57 - 2014-10-09 19:57 - 35095808 _____ () C:\Users\Philipp\Downloads\Firefox_Setup_de32.0.3.exe 2014-10-09 19:57 - 2014-10-09 19:57 - 35095808 _____ () C:\Users\Philipp\Downloads\Firefox_Setup_de32.0.3 (1).exe 2014-10-09 19:55 - 2014-10-10 09:37 - 00000000 ____D () C:\Users\Philipp\AppData\Roaming\Opera Software 2014-10-09 19:55 - 2014-10-10 09:37 - 00000000 ____D () C:\Users\Philipp\AppData\Local\Opera Software 2014-10-09 19:55 - 2014-10-10 09:37 - 00000000 ____D () C:\Program Files (x86)\Opera 2014-10-09 19:54 - 2014-10-09 19:55 - 30503712 _____ (Opera Software ASA) C:\Users\Philipp\Downloads\Opera_24.0.1558.64_Setup.exe 2014-10-09 19:52 - 2014-10-09 19:52 - 00000000 ____D () C:\Users\Philipp\AppData\Local\IsolatedStorage 2014-10-09 19:51 - 2014-10-09 19:51 - 00000000 ____D () C:\Users\Philipp\AppData\Local\GestureControl 2014-10-09 18:23 - 2014-10-09 18:23 - 00000000 ____D () C:\Users\Philipp\AppData\Roaming\LSC 2014-10-09 09:30 - 2014-10-23 23:27 - 00193182 _____ () C:\Users\Public\CAFADEBUG.log 2014-10-08 18:17 - 2014-10-08 18:17 - 00000000 ____D () C:\Users\Philipp\AppData\Roaming\PwrMgr 2014-10-08 18:07 - 2012-02-17 08:38 - 01031680 _____ (Microsoft Corporation) C:\Windows\system32\rdpcore.dll 2014-10-08 18:07 - 2012-02-17 07:34 - 00826880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpcore.dll 2014-10-08 18:07 - 2012-02-17 06:57 - 00023552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdtcp.sys 2014-10-08 17:50 - 2014-10-08 17:50 - 00002002 _____ () C:\Users\Public\Desktop\Lenovo Solution Center.lnk 2014-10-08 17:50 - 2014-10-08 17:50 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_ldiagio_uefi_01009.Wdf 2014-10-08 17:02 - 2014-10-09 20:27 - 00060056 _____ () C:\Users\Philipp\AppData\Local\GDIPFONTCACHEV1.DAT 2014-10-08 17:02 - 2014-10-08 17:50 - 00000000 ____D () C:\Users\Philipp\AppData\Local\Lenovo 2014-10-08 17:01 - 2014-10-21 19:19 - 00001010 _____ () C:\Users\Philipp\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2014-10-08 17:01 - 2014-10-08 17:01 - 00000000 ____D () C:\Users\Philipp\Documents\Meine empfangenen Dateien 2014-10-08 17:01 - 2014-10-08 17:01 - 00000000 ____D () C:\Users\Philipp\AppData\Roaming\Leadertech 2014-10-08 17:01 - 2014-10-08 17:01 - 00000000 ____D () C:\Users\Philipp\AppData\Roaming\Adobe 2014-10-08 17:01 - 2014-10-08 17:01 - 00000000 ____D () C:\Users\Philipp\AppData\Local\VirtualStore 2014-10-08 17:01 - 2014-10-08 17:01 - 00000000 ____D () C:\Users\Philipp\AppData\Local\Downloaded Installations 2014-10-08 17:00 - 2014-10-12 18:29 - 00000000 ____D () C:\Users\Philipp 2014-10-08 17:00 - 2014-10-08 17:00 - 00000895 _____ () C:\Users\Public\Desktop\Installieren Sie Ihre zusõtzlichen Anwendungen.lnk 2014-10-08 17:00 - 2014-10-08 17:00 - 00000020 ___SH () C:\Users\Philipp\ntuser.ini 2014-10-08 17:00 - 2014-10-08 17:00 - 00000010 _____ () C:\Windows\getvol.scp 2014-10-08 17:00 - 2014-10-08 17:00 - 00000000 _SHDL () C:\Users\Philipp\Vorlagen 2014-10-08 17:00 - 2014-10-08 17:00 - 00000000 _SHDL () C:\Users\Philipp\Startmenü 2014-10-08 17:00 - 2014-10-08 17:00 - 00000000 _SHDL () C:\Users\Philipp\Netzwerkumgebung 2014-10-08 17:00 - 2014-10-08 17:00 - 00000000 _SHDL () C:\Users\Philipp\Lokale Einstellungen 2014-10-08 17:00 - 2014-10-08 17:00 - 00000000 _SHDL () C:\Users\Philipp\Eigene Dateien 2014-10-08 17:00 - 2014-10-08 17:00 - 00000000 _SHDL () C:\Users\Philipp\Druckumgebung 2014-10-08 17:00 - 2014-10-08 17:00 - 00000000 _SHDL () C:\Users\Philipp\Documents\Eigene Musik 2014-10-08 17:00 - 2014-10-08 17:00 - 00000000 _SHDL () C:\Users\Philipp\Documents\Eigene Bilder 2014-10-08 17:00 - 2014-10-08 17:00 - 00000000 _SHDL () C:\Users\Philipp\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-10-08 17:00 - 2014-10-08 17:00 - 00000000 _SHDL () C:\Users\Philipp\AppData\Local\Verlauf 2014-10-08 17:00 - 2014-10-08 17:00 - 00000000 _SHDL () C:\Users\Philipp\AppData\Local\Anwendungsdaten 2014-10-08 17:00 - 2014-10-08 17:00 - 00000000 _SHDL () C:\Users\Philipp\Anwendungsdaten 2014-10-08 17:00 - 2014-10-08 17:00 - 00000000 ____D () C:\Users\Philipp\AppData\Roaming\Intel 2014-10-08 17:00 - 2014-10-08 17:00 - 00000000 _____ () C:\Windows\firstboot.dat 2014-10-08 17:00 - 2014-09-26 21:16 - 00002107 _____ () C:\Users\Philipp\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft OneDrive.lnk 2014-10-08 17:00 - 2014-09-26 21:12 - 00000000 ____D () C:\Users\Philipp\AppData\Roaming\Macromedia 2014-10-08 17:00 - 2009-08-25 05:18 - 01067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc71.dll 2014-10-08 17:00 - 2009-07-14 06:54 - 00000000 ___RD () C:\Users\Philipp\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories 2014-10-08 17:00 - 2009-07-14 06:49 - 00000000 ___RD () C:\Users\Philipp\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance 2014-10-08 16:07 - 2014-10-08 16:07 - 00000000 __SHD () C:\Users\Philipp\AppData\Local\EmieUserList 2014-10-08 16:07 - 2014-10-08 16:07 - 00000000 __SHD () C:\Users\Philipp\AppData\Local\EmieSiteList 2014-10-08 16:04 - 2014-05-14 18:23 - 02477536 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll 2014-10-08 16:04 - 2014-05-14 18:23 - 00700384 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll 2014-10-08 16:04 - 2014-05-14 18:23 - 00581600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll 2014-10-08 16:04 - 2014-05-14 18:23 - 00058336 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe 2014-10-08 16:04 - 2014-05-14 18:23 - 00044512 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll 2014-10-08 16:04 - 2014-05-14 18:23 - 00038880 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll 2014-10-08 16:04 - 2014-05-14 18:23 - 00036320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll 2014-10-08 16:04 - 2014-05-14 18:21 - 02620928 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll 2014-10-08 16:04 - 2014-05-14 18:20 - 00097792 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll 2014-10-08 16:04 - 2014-05-14 18:17 - 00092672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll 2014-10-08 16:04 - 2014-05-14 09:23 - 00198600 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll 2014-10-08 16:04 - 2014-05-14 09:23 - 00179656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll 2014-10-08 16:04 - 2014-05-14 09:20 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe 2014-10-08 16:04 - 2014-05-14 09:17 - 00033792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe 2014-09-26 21:22 - 2014-09-26 21:22 - 00000000 ____D () C:\ProgramData\Intel(R) Update Manager 2014-09-26 21:21 - 2014-09-26 21:21 - 00002033 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel(R) WiDi.lnk 2014-09-26 21:21 - 2014-09-26 21:21 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_usb3Hub_01009.Wdf 2014-09-26 21:21 - 2014-09-26 21:21 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_iwdbus_01009.Wdf 2014-09-26 21:21 - 2014-09-26 21:21 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel Corporation 2014-09-26 21:21 - 2014-09-26 21:21 - 00000000 ____D () C:\Program Files\Intel Corporation 2014-09-26 21:19 - 2014-09-26 21:19 - 00001991 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office.lnk 2014-09-26 21:19 - 2014-09-26 21:19 - 00000000 ____D () C:\Users\Public\Symantec 2014-09-26 21:19 - 2014-09-26 21:19 - 00000000 ____D () C:\Program Files (x86)\SymSilent 2014-09-26 21:19 - 2014-09-26 21:19 - 00000000 ____D () C:\Program Files (x86)\Microsoft Office 2014-09-26 21:19 - 2013-07-19 00:47 - 00002040 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lenovo PC Experience.lnk 2014-09-26 21:18 - 2014-10-10 09:22 - 00003234 _____ () C:\Windows\System32\Tasks\Norton WSC Integration 2014-09-26 21:18 - 2014-09-26 21:18 - 00177752 _____ (Symantec Corporation) C:\Windows\system32\Drivers\SYMEVENT64x86.SYS 2014-09-26 21:18 - 2014-09-26 21:18 - 00008222 _____ () C:\Windows\system32\Drivers\SYMEVENT64x86.CAT 2014-09-26 21:18 - 2014-09-26 21:18 - 00000000 ____D () C:\Program Files\Common Files\Symantec Shared 2014-09-26 21:17 - 2014-10-10 09:22 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Norton Internet Security 2014-09-26 21:17 - 2014-10-10 09:22 - 00000000 ____D () C:\Windows\system32\Drivers\NISx64 2014-09-26 21:17 - 2014-10-08 17:02 - 00000000 ____D () C:\ProgramData\Norton 2014-09-26 21:17 - 2014-09-26 21:17 - 00000000 ____D () C:\Program Files (x86)\Norton Internet Security 2014-09-26 21:16 - 2014-09-26 21:16 - 00002107 _____ () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft OneDrive.lnk 2014-09-26 21:16 - 2014-09-26 21:16 - 00002107 _____ () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft OneDrive.lnk 2014-09-26 21:16 - 2014-09-26 21:16 - 00001943 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nitro Pro 9.lnk 2014-09-26 21:16 - 2014-09-26 21:16 - 00000000 ____D () C:\ProgramData\Nitro 2014-09-26 21:16 - 2014-09-26 21:16 - 00000000 ____D () C:\ProgramData\Microsoft OneDrive 2014-09-26 21:16 - 2014-09-26 21:16 - 00000000 ____D () C:\Program Files\Nitro 2014-09-26 21:16 - 2014-09-26 21:16 - 00000000 ____D () C:\Program Files\Common Files\Nitro 2014-09-26 21:16 - 2014-09-26 21:16 - 00000000 ____D () C:\Program Files (x86)\Nitro 2014-09-26 21:16 - 2014-09-26 21:16 - 00000000 ____D () C:\Program Files (x86)\Microsoft OneDrive 2014-09-26 21:16 - 2014-05-16 03:38 - 00029704 _____ (Nitro PDF Software) C:\Windows\system32\nitrolocalmon9.dll 2014-09-26 21:16 - 2014-05-16 03:38 - 00017928 _____ (Nitro PDF Software) C:\Windows\system32\nitrolocalui9.dll 2014-09-26 21:15 - 2014-09-26 21:15 - 00000143 _____ () C:\Windows\eyesight1.cmd 2014-09-26 21:15 - 2014-09-26 21:15 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gesture Control 2014-09-26 21:15 - 2014-09-26 21:15 - 00000000 ____D () C:\ProgramData\eyeSight 2014-09-26 21:15 - 2014-09-26 21:15 - 00000000 ____D () C:\Program Files (x86)\eyeSight 2014-09-26 21:15 - 2013-07-17 09:41 - 00001345 _____ () C:\Windows\eyesight1.lnk 2014-09-26 21:15 - 2010-03-03 18:54 - 00001423 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Free Skype voice and video calls.lnk 2014-09-26 21:13 - 2014-10-24 16:50 - 00000000 ____D () C:\ProgramData\Validity 2014-09-26 21:13 - 2014-10-08 18:17 - 629145600 ___SH () C:\Windows\lenovo_fastboot.img 2014-09-26 21:13 - 2014-10-08 17:50 - 00000000 ____D () C:\Windows\System32\Tasks\TVT 2014-09-26 21:13 - 2014-09-26 21:15 - 00196608 _____ () C:\Windows\ocsetup_install_OEMHelpCustomization.etl 2014-09-26 21:13 - 2014-09-26 21:14 - 00028728 _____ () C:\Windows\ocsetup_cbs_install_OEMHelpCustomization.txt 2014-09-26 21:13 - 2014-09-26 21:13 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_wbf_vfs_lvcmn_01_09_00.Wdf 2014-09-26 21:13 - 2014-09-26 21:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Fingerprint Reader 2014-09-26 21:13 - 2014-09-26 21:13 - 00000000 ____D () C:\Program Files\Synaptics Incorporated 2014-09-26 21:13 - 2014-09-26 21:13 - 00000000 ____D () C:\Program Files (x86)\Lenovo Registration 2014-09-26 21:13 - 2013-07-02 08:33 - 00056048 ____N (Windows (R) Win 7 DDK provider) C:\Windows\system32\Drivers\Fastboot.sys 2014-09-26 21:13 - 2013-06-26 11:54 - 00002254 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Evernote Installer.lnk 2014-09-26 21:12 - 2014-10-23 23:21 - 00000000 ____D () C:\ProgramData\Adobe 2014-09-26 21:12 - 2014-10-23 23:08 - 00000000 ____D () C:\Program Files (x86)\Adobe 2014-09-26 21:12 - 2014-10-09 09:31 - 00000000 ____D () C:\Windows\System32\Tasks\Lenovo 2014-09-26 21:12 - 2014-10-08 17:50 - 00000000 ____D () C:\Program Files\Lenovo Fingerprint Reader 2014-09-26 21:12 - 2014-09-26 21:12 - 00000000 ____H () C:\ProgramData\DP45977C.lfl 2014-09-26 21:12 - 2014-09-26 21:12 - 00000000 ____D () C:\Users\Public\Lenovo 2014-09-26 21:12 - 2014-09-26 21:12 - 00000000 ____D () C:\Users\Default\AppData\Roaming\Macromedia 2014-09-26 21:12 - 2014-09-26 21:12 - 00000000 ____D () C:\Users\Default User\AppData\Roaming\Macromedia 2014-09-26 21:11 - 2014-10-08 17:50 - 00000000 ____D () C:\Windows\Downloaded Installations 2014-09-26 21:11 - 2014-09-26 21:18 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lenovo 2014-09-26 21:11 - 2014-09-26 21:11 - 00003020 _____ () C:\Windows\System32\Tasks\PMTask 2014-09-26 21:11 - 2014-09-26 21:11 - 00000000 ____D () C:\Program Files\Common Files\Lenovo 2014-09-26 21:10 - 2014-09-26 21:19 - 00000000 ___HD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lenovo ThinkVantage Tools 2014-09-26 21:10 - 2014-09-26 21:10 - 00015396 _____ () C:\Windows\system32\results.xml 2014-09-26 21:10 - 2014-09-26 21:10 - 00000000 ____D () C:\Program Files\ThinkPad 2014-09-26 21:10 - 2014-09-26 21:10 - 00000000 ____D () C:\Program Files (x86)\ThinkPad 2014-09-26 21:10 - 2014-06-24 00:05 - 02853664 _____ (Lenovo Group Limited) C:\Windows\system32\PWMCP64V.cpl 2014-09-26 21:10 - 2014-06-24 00:05 - 02692896 ____N (Lenovo Group Limited) C:\Windows\PWMBTHLV.EXE 2014-09-26 21:10 - 2014-06-24 00:05 - 00020736 _____ (Lenovo Group Limited) C:\Windows\system32\Drivers\TPPWR64V.SYS 2014-09-26 21:08 - 2014-09-26 21:08 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_btmhsf_01011.Wdf 2014-09-26 21:08 - 2014-09-26 21:08 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_btmaux_01009.Wdf 2014-09-26 21:07 - 2014-09-26 21:07 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dolby 2014-09-26 21:07 - 2014-09-26 21:07 - 00000000 ____D () C:\Program Files (x86)\Dolby Home Theater v4 2014-09-26 21:06 - 2013-05-16 05:18 - 00004656 _____ () C:\Windows\system32\Drivers\SamSfPa.dat 2014-09-26 21:06 - 2012-12-03 19:27 - 00202400 _____ (Conexant Systems Inc.) C:\Windows\system32\CxAudMsg64.exe 2014-09-26 21:06 - 2011-09-01 09:23 - 00447104 _____ (Conexant Systems, Inc.) C:\Windows\SysWOW64\SASrv.exe 2014-09-26 21:05 - 2014-09-26 21:07 - 00000000 ____D () C:\Program Files\CONEXANT 2014-09-26 21:05 - 2014-09-26 21:05 - 00000000 ____D () C:\ProgramData\Conexant 2014-09-26 21:05 - 2013-05-15 09:27 - 00406208 _____ (Conexant Systems, Inc.) C:\Windows\system32\CSpkExt64.dll 2014-09-26 21:05 - 2013-05-14 09:43 - 01684184 _____ (Conexant Systems Inc.) C:\Windows\system32\Drivers\CHDRT64.sys 2014-09-26 21:05 - 2013-04-18 10:02 - 01788000 _____ (Conexant Systems Inc.) C:\Windows\system32\CX64AP83.dll 2014-09-26 21:05 - 2013-02-08 23:02 - 02817632 _____ (Conexant Systems, Inc.) C:\Windows\system32\UCI64A35.DLL 2014-09-26 21:05 - 2013-01-25 07:57 - 02730016 _____ (Fortemedia Corporation) C:\Windows\system32\FMAPO64.dll 2014-09-26 21:05 - 2012-08-31 13:18 - 07164176 _____ (Dolby Laboratories) C:\Windows\system32\EEP64A.dll 2014-09-26 21:05 - 2012-08-31 13:17 - 00434960 _____ (Dolby Laboratories) C:\Windows\system32\EED64A.dll 2014-09-26 21:05 - 2012-08-31 13:17 - 00141584 _____ (Dolby Laboratories) C:\Windows\system32\EEL64A.dll 2014-09-26 21:05 - 2012-08-31 13:17 - 00124176 _____ (Dolby Laboratories) C:\Windows\system32\EEA64A.dll 2014-09-26 21:05 - 2012-08-31 13:17 - 00075024 _____ (Dolby Laboratories) C:\Windows\system32\EEG64A.dll 2014-09-26 21:05 - 2012-06-29 07:04 - 00050848 _____ (Conexant Systems Inc.) C:\Windows\system32\CxPageMaster64.dll 2014-09-26 21:05 - 2012-01-16 04:42 - 00666240 _____ (Conexant Systems, Inc.) C:\Windows\system32\C3DHPExt64.dll 2014-09-26 21:05 - 2011-01-18 02:35 - 00030893 _____ () C:\Windows\system32\Drivers\Mixer.ini 2014-09-26 21:04 - 2014-09-26 21:04 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel PROSet Wireless 2014-09-26 21:04 - 2014-09-26 21:04 - 00000000 ____D () C:\ProgramData\Intel.sav 2014-09-26 21:04 - 2014-09-26 21:04 - 00000000 ____D () C:\Program Files\Common Files\Intel 2014-09-26 21:04 - 2014-09-26 21:04 - 00000000 ____D () C:\Program Files (x86)\Cisco 2014-09-26 21:03 - 2014-10-10 09:34 - 00000000 ____D () C:\ProgramData\Package Cache 2014-09-26 21:02 - 2014-09-26 21:02 - 00000000 ____D () C:\Windows\SysWOW64\sda 2014-09-26 21:02 - 2014-09-26 21:02 - 00000000 ____D () C:\Program Files (x86)\Vimicro 2014-09-26 21:02 - 2014-09-26 21:02 - 00000000 ____D () C:\Program Files (x86)\USB Camera 2014-09-26 21:02 - 2014-02-26 05:26 - 00002065 _____ () C:\Windows\vm331Rmv.ini 2014-09-26 21:02 - 2014-02-26 05:26 - 00002065 _____ () C:\Windows\SysWOW64\vm331Rmv.ini 2014-09-26 21:02 - 2013-12-31 04:20 - 01070080 _____ (Vimicro Corporation) C:\Windows\system32\Drivers\vm331avs.sys 2014-09-26 21:02 - 2013-12-27 10:12 - 00358912 _____ (Vimicro Corporation) C:\Windows\system32\VmCoinst.dll 2014-09-26 21:02 - 2013-05-08 09:35 - 00408136 _____ (Realsil Semiconductor Corporation) C:\Windows\system32\Drivers\RtsPer.sys 2014-09-26 21:02 - 2013-04-25 12:12 - 09889352 _____ (Realtek Semiconductor Corp.) C:\Windows\SysWOW64\RtsPerIcon.dll 2014-09-26 21:02 - 2013-01-17 08:33 - 01078272 _____ () C:\Windows\system32\331prx64.ax 2014-09-26 21:02 - 2013-01-17 08:33 - 00667648 _____ () C:\Windows\SysWOW64\vmprp331.ax 2014-09-26 21:02 - 2010-06-30 11:38 - 00000356 _____ () C:\Windows\system\vm331avs.rsf 2014-09-26 21:01 - 2014-10-08 17:50 - 00000000 ____D () C:\Program Files\Synaptics 2014-09-26 21:01 - 2014-09-26 21:02 - 00000000 ____D () C:\Program Files (x86)\Realtek 2014-09-26 21:01 - 2014-09-26 21:01 - 00001346 _____ () C:\Windows\Synaptics.log 2014-09-26 21:01 - 2014-09-26 21:01 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_SynTP_01011.Wdf 2014-09-26 21:01 - 2014-09-26 21:01 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_Smb_driver_Intel_01011.Wdf 2014-09-26 21:01 - 2014-04-07 06:01 - 00745712 _____ (Synaptics Incorporated) C:\Windows\system32\SynCOM.dll 2014-09-26 21:01 - 2014-04-07 06:01 - 00554224 _____ (Synaptics Incorporated) C:\Windows\system32\Drivers\SynTP.sys 2014-09-26 21:01 - 2014-04-07 06:01 - 00405232 _____ (Synaptics Incorporated) C:\Windows\SysWOW64\SynCom.dll 2014-09-26 21:01 - 2014-04-07 06:01 - 00254704 _____ (Synaptics Incorporated) C:\Windows\system32\SynTPAPI.dll 2014-09-26 21:01 - 2014-04-07 06:01 - 00208112 _____ (Synaptics Incorporated) C:\Windows\system32\SynTPCo20.dll 2014-09-26 21:01 - 2014-04-07 06:01 - 00031472 _____ (Synaptics Incorporated) C:\Windows\system32\Drivers\Smb_driver_Intel.sys 2014-09-26 21:01 - 2014-01-07 07:20 - 00001741 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lenovo Ultranav (Touchpad Clickpad Trackpad TrackPoint Mouse).lnk 2014-09-26 21:01 - 2013-03-27 09:51 - 00842312 _____ (Realtek ) C:\Windows\system32\Drivers\Rt64win7.sys 2014-09-26 21:01 - 2013-03-27 09:51 - 00108104 _____ (Realtek Semiconductor Corporation) C:\Windows\system32\RTNUninst64.dll 2014-09-26 21:01 - 2013-03-27 09:51 - 00073800 _____ (Realtek Semiconductor Corporation) C:\Windows\system32\RtNicProp64.dll 2014-09-26 21:00 - 2014-10-08 17:50 - 00000000 ____D () C:\Program Files\Lenovo 2014-09-26 21:00 - 2014-09-26 21:00 - 00000000 ____D () C:\Program Files\Lenovo USB Graphics 2014-09-26 21:00 - 2014-09-26 21:00 - 00000000 ____D () C:\Program Files\DisplayLink Core Software 2014-09-26 20:59 - 2014-10-08 17:01 - 00000000 ____D () C:\Program Files (x86)\Lenovo 2014-09-26 20:59 - 2014-09-26 21:10 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information 2014-09-26 20:59 - 2014-01-08 00:53 - 00064000 _____ (Khronos Group) C:\Windows\system32\OpenCL.DLL 2014-09-26 20:59 - 2014-01-08 00:53 - 00060416 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.DLL 2014-09-26 20:58 - 2014-10-08 17:01 - 00000042 _____ () C:\Windows\SysWOW64\Drivers\17AA_Lenovo_ThinkPad_S3-S440_20AYCTO1WW.MRK 2014-09-26 20:58 - 2014-09-26 20:58 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_iusb3hcs_01009.Wdf 2014-09-26 20:58 - 2014-01-08 00:53 - 25971712 _____ (Intel Corporation) C:\Windows\system32\igdfcl64.dll 2014-09-26 20:58 - 2014-01-08 00:53 - 21658624 _____ (Intel Corporation) C:\Windows\system32\igd10iumd64.dll 2014-09-26 20:58 - 2014-01-08 00:53 - 21007360 _____ (Intel Corporation) C:\Windows\SysWOW64\igd10iumd32.dll 2014-09-26 20:58 - 2014-01-08 00:53 - 20954112 _____ (Intel Corporation) C:\Windows\SysWOW64\igdfcl32.dll 2014-09-26 20:58 - 2014-01-08 00:53 - 19950592 _____ (Intel Corporation) C:\Windows\system32\igdumdim64.dll 2014-09-26 20:58 - 2014-01-08 00:53 - 19202560 _____ (Intel Corporation) C:\Windows\SysWOW64\igdumdim32.dll 2014-09-26 20:58 - 2014-01-08 00:53 - 09081856 _____ (Intel Corporation) C:\Windows\system32\igfxress.dll 2014-09-26 20:58 - 2014-01-08 00:53 - 07944704 _____ (Intel Corporation) C:\Windows\system32\ig75icd64.dll 2014-09-26 20:58 - 2014-01-08 00:53 - 07596504 _____ (Intel Corporation) C:\Windows\system32\GfxUIEx.exe 2014-09-26 20:58 - 2014-01-08 00:53 - 06280704 _____ (Intel Corporation) C:\Windows\SysWOW64\ig75icd32.dll 2014-09-26 20:58 - 2014-01-08 00:53 - 04472320 _____ (Intel Corporation) C:\Windows\system32\igdusc64.dll 2014-09-26 20:58 - 2014-01-08 00:53 - 04220416 _____ (Intel Corporation) C:\Windows\system32\Drivers\igdkmd64.sys 2014-09-26 20:58 - 2014-01-08 00:53 - 03556864 _____ (Intel Corporation) C:\Windows\SysWOW64\igdusc32.dll 2014-09-26 20:58 - 2014-01-08 00:53 - 03207680 _____ (Intel Corporation) C:\Windows\system32\igdrcl64.dll 2014-09-26 20:58 - 2014-01-08 00:53 - 02881536 _____ (Intel Corporation) C:\Windows\SysWOW64\igdrcl32.dll 2014-09-26 20:58 - 2014-01-08 00:53 - 02813952 _____ () C:\Windows\system32\iglhxa64.cpa 2014-09-26 20:58 - 2014-01-08 00:53 - 02384896 _____ () C:\Windows\system32\GfxRes.dll 2014-09-26 20:58 - 2014-01-08 00:53 - 02065920 _____ (Intel Corporation) C:\Windows\system32\igfxcmjit64.dll 2014-09-26 20:58 - 2014-01-08 00:53 - 01815040 _____ (Intel Corporation) C:\Windows\SysWOW64\igfxcmjit32.dll 2014-09-26 20:58 - 2014-01-08 00:53 - 01127424 _____ (Intel Corporation) C:\Windows\system32\iglhsip64.dll 2014-09-26 20:58 - 2014-01-08 00:53 - 01123328 _____ (Intel Corporation) C:\Windows\SysWOW64\iglhsip32.dll 2014-09-26 20:58 - 2014-01-08 00:53 - 00906200 _____ (Intel Corporation) C:\Windows\system32\igfxstarter.exe 2014-09-26 20:58 - 2014-01-08 00:53 - 00845272 _____ (Intel Corporation) C:\Windows\system32\igfxsrvc.exe 2014-09-26 20:58 - 2014-01-08 00:53 - 00771544 _____ (Intel Corporation) C:\Windows\system32\hkcmd.exe 2014-09-26 20:58 - 2014-01-08 00:53 - 00770520 _____ (Intel Corporation) C:\Windows\system32\igfxpers.exe 2014-09-26 20:58 - 2014-01-08 00:53 - 00755160 _____ (Intel Corporation) C:\Windows\system32\GfxUIHotKeyMenu.exe 2014-09-26 20:58 - 2014-01-08 00:53 - 00729088 _____ (Intel Corporation) C:\Windows\system32\MetroIntelGenericUIFramework.dll 2014-09-26 20:58 - 2014-01-08 00:53 - 00624640 _____ (Intel Corporation) C:\Windows\system32\igfxdev.dll 2014-09-26 20:58 - 2014-01-08 00:53 - 00548864 _____ (Intel Corporation) C:\Windows\system32\igfxpph.dll 2014-09-26 20:58 - 2014-01-08 00:53 - 00530904 _____ (Intel Corporation) C:\Windows\system32\DPTopologyApp.exe 2014-09-26 20:58 - 2014-01-08 00:53 - 00527872 _____ (Intel Corporation) C:\Windows\system32\igfxrell.lrc 2014-09-26 20:58 - 2014-01-08 00:53 - 00527360 _____ (Intel Corporation) C:\Windows\system32\igfxrplk.lrc 2014-09-26 20:58 - 2014-01-08 00:53 - 00527360 _____ (Intel Corporation) C:\Windows\system32\igfxrfra.lrc 2014-09-26 20:58 - 2014-01-08 00:53 - 00527360 _____ (Intel Corporation) C:\Windows\system32\igfxresn.lrc 2014-09-26 20:58 - 2014-01-08 00:53 - 00526848 _____ (Intel Corporation) C:\Windows\system32\igfxrrus.lrc 2014-09-26 20:58 - 2014-01-08 00:53 - 00526848 _____ (Intel Corporation) C:\Windows\system32\igfxrdeu.lrc 2014-09-26 20:58 - 2014-01-08 00:53 - 00526336 _____ (Intel Corporation) C:\Windows\system32\igfxrrom.lrc 2014-09-26 20:58 - 2014-01-08 00:53 - 00526336 _____ (Intel Corporation) C:\Windows\system32\igfxrnld.lrc 2014-09-26 20:58 - 2014-01-08 00:53 - 00526336 _____ (Intel Corporation) C:\Windows\system32\igfxrita.lrc 2014-09-26 20:58 - 2014-01-08 00:53 - 00525824 _____ (Intel Corporation) C:\Windows\system32\igfxrsky.lrc 2014-09-26 20:58 - 2014-01-08 00:53 - 00525824 _____ (Intel Corporation) C:\Windows\system32\igfxrptg.lrc 2014-09-26 20:58 - 2014-01-08 00:53 - 00525824 _____ (Intel Corporation) C:\Windows\system32\igfxrhun.lrc 2014-09-26 20:58 - 2014-01-08 00:53 - 00525824 _____ (Intel Corporation) C:\Windows\system32\igfxrhrv.lrc 2014-09-26 20:58 - 2014-01-08 00:53 - 00525824 _____ (Intel Corporation) C:\Windows\system32\igfxrcsy.lrc 2014-09-26 20:58 - 2014-01-08 00:53 - 00525312 _____ (Intel Corporation) C:\Windows\system32\igfxrsve.lrc 2014-09-26 20:58 - 2014-01-08 00:53 - 00525312 _____ (Intel Corporation) C:\Windows\system32\igfxrslv.lrc 2014-09-26 20:58 - 2014-01-08 00:53 - 00525312 _____ (Intel Corporation) C:\Windows\system32\igfxrfin.lrc 2014-09-26 20:58 - 2014-01-08 00:53 - 00524800 _____ (Intel Corporation) C:\Windows\system32\igfxrtrk.lrc 2014-09-26 20:58 - 2014-01-08 00:53 - 00524800 _____ (Intel Corporation) C:\Windows\system32\igfxrptb.lrc 2014-09-26 20:58 - 2014-01-08 00:53 - 00524288 _____ (Intel Corporation) C:\Windows\system32\igfxrnor.lrc 2014-09-26 20:58 - 2014-01-08 00:53 - 00524288 _____ (Intel Corporation) C:\Windows\system32\igfxrdan.lrc 2014-09-26 20:58 - 2014-01-08 00:53 - 00523776 _____ (Intel Corporation) C:\Windows\system32\igfxrtha.lrc 2014-09-26 20:58 - 2014-01-08 00:53 - 00522240 _____ (Intel Corporation) C:\Windows\system32\igfxrheb.lrc 2014-09-26 20:58 - 2014-01-08 00:53 - 00521728 _____ (Intel Corporation) C:\Windows\system32\igfxrara.lrc 2014-09-26 20:58 - 2014-01-08 00:53 - 00517632 _____ (Intel Corporation) C:\Windows\system32\igfxrjpn.lrc 2014-09-26 20:58 - 2014-01-08 00:53 - 00516096 _____ (Intel Corporation) C:\Windows\system32\igfxrkor.lrc 2014-09-26 20:58 - 2014-01-08 00:53 - 00514048 _____ (Intel Corporation) C:\Windows\system32\igfxrcht.lrc 2014-09-26 20:58 - 2014-01-08 00:53 - 00513536 _____ (Intel Corporation) C:\Windows\system32\igfxrchs.lrc 2014-09-26 20:58 - 2014-01-08 00:53 - 00493056 _____ (Intel Corporation) C:\Windows\SysWOW64\igfxdv32.dll 2014-09-26 20:58 - 2014-01-08 00:53 - 00397784 _____ (Intel Corporation) C:\Windows\system32\igfxext.exe 2014-09-26 20:58 - 2014-01-08 00:53 - 00396760 _____ (Intel Corporation) C:\Windows\system32\CustomModeApp.exe 2014-09-26 20:58 - 2014-01-08 00:53 - 00391128 _____ (Intel Corporation) C:\Windows\system32\igfxtray.exe 2014-09-26 20:58 - 2014-01-08 00:53 - 00371200 _____ (Intel Corporation) C:\Windows\system32\igfxrenu.lrc 2014-09-26 20:58 - 2014-01-08 00:53 - 00347648 _____ () C:\Windows\system32\igdmd64.dll 2014-09-26 20:58 - 2014-01-08 00:53 - 00346624 _____ (Intel Corporation) C:\Windows\system32\igfxTMM.dll 2014-09-26 20:58 - 2014-01-08 00:53 - 00329216 _____ (Intel Corporation) C:\Windows\system32\igdbcl64.dll 2014-09-26 20:58 - 2014-01-08 00:53 - 00320512 _____ (Intel Corporation) C:\Windows\system32\IntelOpenCL64.dll 2014-09-26 20:58 - 2014-01-08 00:53 - 00290816 _____ (Intel Corporation) C:\Windows\SysWOW64\igdbcl32.dll 2014-09-26 20:58 - 2014-01-08 00:53 - 00280064 _____ () C:\Windows\SysWOW64\igdmd32.dll 2014-09-26 20:58 - 2014-01-08 00:53 - 00279040 _____ (Intel Corporation) C:\Windows\system32\igfxcpl.cpl 2014-09-26 20:58 - 2014-01-08 00:53 - 00279000 _____ (Intel Corporation) C:\Windows\SysWOW64\IntelCpHeciSvc.exe 2014-09-26 20:58 - 2014-01-08 00:53 - 00267407 _____ () C:\Windows\system32\Gfxres.th-TH.resources 2014-09-26 20:58 - 2014-01-08 00:53 - 00265216 _____ (Intel Corporation) C:\Windows\SysWOW64\IntelOpenCL32.dll 2014-09-26 20:58 - 2014-01-08 00:53 - 00253466 _____ () C:\Windows\system32\Gfxres.el-GR.resources 2014-09-26 20:58 - 2014-01-08 00:53 - 00243712 _____ (Intel Corporation) C:\Windows\system32\igfxdo.dll 2014-09-26 20:58 - 2014-01-08 00:53 - 00235401 _____ () C:\Windows\system32\Gfxres.ru-RU.resources 2014-09-26 20:58 - 2014-01-08 00:53 - 00224256 _____ (Intel Corporation) C:\Windows\system32\hccutils.dll 2014-09-26 20:58 - 2014-01-08 00:53 - 00222208 _____ () C:\Windows\system32\igdde64.dll 2014-09-26 20:58 - 2014-01-08 00:53 - 00214528 _____ (Intel Corporation) C:\Windows\system32\iglhcp64.dll 2014-09-26 20:58 - 2014-01-08 00:53 - 00201128 _____ () C:\Windows\system32\Gfxres.ar-SA.resources 2014-09-26 20:58 - 2014-01-08 00:53 - 00198725 _____ () C:\Windows\system32\Gfxres.ja-JP.resources 2014-09-26 20:58 - 2014-01-08 00:53 - 00194560 _____ (Intel Corporation) C:\Windows\system32\gfxSrvc.dll 2014-09-26 20:58 - 2014-01-08 00:53 - 00192758 _____ () C:\Windows\system32\Gfxres.he-IL.resources 2014-09-26 20:58 - 2014-01-08 00:53 - 00182784 _____ (Intel Corporation) C:\Windows\system32\igfxCoIn_v3383.dll 2014-09-26 20:58 - 2014-01-08 00:53 - 00182272 _____ () C:\Windows\SysWOW64\igdde32.dll 2014-09-26 20:58 - 2014-01-08 00:53 - 00180936 _____ () C:\Windows\system32\Gfxres.ko-KR.resources 2014-09-26 20:58 - 2014-01-08 00:53 - 00180850 _____ () C:\Windows\system32\Gfxres.it-IT.resources 2014-09-26 20:58 - 2014-01-08 00:53 - 00179712 _____ (Intel Corporation) C:\Windows\SysWOW64\iglhcp32.dll 2014-09-26 20:58 - 2014-01-08 00:53 - 00178473 _____ () C:\Windows\system32\Gfxres.es-ES.resources 2014-09-26 20:58 - 2014-01-08 00:53 - 00178290 _____ () C:\Windows\system32\Gfxres.fr-FR.resources 2014-09-26 20:58 - 2014-01-08 00:53 - 00178123 _____ () C:\Windows\system32\Gfxres.de-DE.resources 2014-09-26 20:58 - 2014-01-08 00:53 - 00176838 _____ () C:\Windows\system32\Gfxres.ro-RO.resources 2014-09-26 20:58 - 2014-01-08 00:53 - 00175862 _____ () C:\Windows\system32\Gfxres.hu-HU.resources 2014-09-26 20:58 - 2014-01-08 00:53 - 00175571 _____ () C:\Windows\system32\Gfxres.tr-TR.resources 2014-09-26 20:58 - 2014-01-08 00:53 - 00175067 _____ () C:\Windows\system32\Gfxres.nl-NL.resources 2014-09-26 20:58 - 2014-01-08 00:53 - 00174802 _____ () C:\Windows\system32\Gfxres.pl-PL.resources 2014-09-26 20:58 - 2014-01-08 00:53 - 00174269 _____ () C:\Windows\system32\Gfxres.pt-BR.resources 2014-09-26 20:58 - 2014-01-08 00:53 - 00173792 _____ () C:\Windows\system32\Gfxres.fi-FI.resources 2014-09-26 20:58 - 2014-01-08 00:53 - 00173276 _____ () C:\Windows\system32\Gfxres.sk-SK.resources 2014-09-26 20:58 - 2014-01-08 00:53 - 00173059 _____ () C:\Windows\system32\Gfxres.sv-SE.resources 2014-09-26 20:58 - 2014-01-08 00:53 - 00172833 _____ () C:\Windows\system32\Gfxres.pt-PT.resources 2014-09-26 20:58 - 2014-01-08 00:53 - 00172554 _____ () C:\Windows\system32\Gfxres.cs-CZ.resources 2014-09-26 20:58 - 2014-01-08 00:53 - 00171691 _____ () C:\Windows\system32\Gfxres.hr-HR.resources 2014-09-26 20:58 - 2014-01-08 00:53 - 00168215 _____ () C:\Windows\system32\Gfxres.sl-SI.resources 2014-09-26 20:58 - 2014-01-08 00:53 - 00166833 _____ () C:\Windows\system32\Gfxres.nb-NO.resources 2014-09-26 20:58 - 2014-01-08 00:53 - 00166220 _____ () C:\Windows\system32\Gfxres.da-DK.resources 2014-09-26 20:58 - 2014-01-08 00:53 - 00163328 _____ (Intel Corporation) C:\Windows\system32\igfxcmrt64.dll 2014-09-26 20:58 - 2014-01-08 00:53 - 00161534 _____ () C:\Windows\system32\Gfxres.en-US.resources 2014-09-26 20:58 - 2014-01-08 00:53 - 00160256 _____ () C:\Windows\system32\igdail64.dll 2014-09-26 20:58 - 2014-01-08 00:53 - 00155136 _____ (Intel Corporation) C:\Windows\system32\igfx11cmrt64.dll 2014-09-26 20:58 - 2014-01-08 00:53 - 00154805 _____ () C:\Windows\system32\Gfxres.zh-TW.resources 2014-09-26 20:58 - 2014-01-08 00:53 - 00153048 _____ (Intel Corporation) C:\Windows\system32\difx64.exe 2014-09-26 20:58 - 2014-01-08 00:53 - 00152993 _____ () C:\Windows\system32\Gfxres.zh-CN.resources 2014-09-26 20:58 - 2014-01-08 00:53 - 00142848 _____ () C:\Windows\SysWOW64\igdail32.dll 2014-09-26 20:58 - 2014-01-08 00:53 - 00137728 _____ (Intel Corporation) C:\Windows\SysWOW64\igfxcmrt32.dll 2014-09-26 20:58 - 2014-01-08 00:53 - 00133120 _____ (Intel Corporation) C:\Windows\SysWOW64\igfx11cmrt32.dll 2014-09-26 20:58 - 2014-01-08 00:53 - 00094208 _____ () C:\Windows\system32\IccLibDll_x64.dll 2014-09-26 20:58 - 2014-01-08 00:53 - 00066560 _____ (Intel Corporation) C:\Windows\system32\igfxsrvc.dll 2014-09-26 20:58 - 2014-01-08 00:53 - 00064000 _____ (Khronos Group) C:\Windows\system32\Intel_OpenCL_ICD64.dll 2014-09-26 20:58 - 2014-01-08 00:53 - 00060416 _____ (Khronos Group) C:\Windows\SysWOW64\Intel_OpenCL_ICD32.dll 2014-09-26 20:58 - 2014-01-08 00:53 - 00044025 _____ () C:\Windows\system32\iglhxo64.vp 2014-09-26 20:58 - 2014-01-08 00:53 - 00043816 _____ () C:\Windows\system32\iglhxc64_dev.vp 2014-09-26 20:58 - 2014-01-08 00:53 - 00043494 _____ () C:\Windows\system32\iglhxc64.vp 2014-09-26 20:58 - 2014-01-08 00:53 - 00043298 _____ () C:\Windows\system32\iglhxg64_dev.vp 2014-09-26 20:58 - 2014-01-08 00:53 - 00043256 _____ () C:\Windows\system32\iglhxg64.vp 2014-09-26 20:58 - 2014-01-08 00:53 - 00042079 _____ () C:\Windows\system32\iglhxo64_dev.vp 2014-09-26 20:58 - 2014-01-08 00:53 - 00029696 _____ (Intel Corporation) C:\Windows\system32\igfxexps.dll 2014-09-26 20:58 - 2014-01-08 00:53 - 00025600 _____ (Intel Corporation) C:\Windows\SysWOW64\igfxexps32.dll 2014-09-26 20:58 - 2014-01-08 00:53 - 00012288 _____ ( ) C:\Windows\system32\IGFXDEVLib.dll 2014-09-26 20:58 - 2014-01-08 00:53 - 00002940 _____ () C:\Windows\system32\iglhxs64.vp 2014-09-26 20:58 - 2014-01-08 00:53 - 00001125 _____ () C:\Windows\system32\iglhxa64.vp 2014-09-26 20:58 - 2013-12-30 23:06 - 00450520 _____ (Intel(R) Corporation) C:\Windows\system32\Drivers\IntcDAud.sys 2014-09-26 20:58 - 2013-10-21 04:25 - 00790000 _____ (Intel Corporation) C:\Windows\system32\Drivers\iusb3xhc.sys 2014-09-26 20:58 - 2013-10-21 04:25 - 00368624 _____ (Intel Corporation) C:\Windows\system32\Drivers\iusb3hub.sys 2014-09-26 20:58 - 2013-10-21 04:25 - 00041984 _____ (Intel Corporation) C:\Windows\system32\Drivers\USB3Ver.dll 2014-09-26 20:58 - 2013-10-21 04:25 - 00020464 _____ (Intel Corporation) C:\Windows\system32\Drivers\iusb3hcs.sys 2014-09-26 20:58 - 2013-02-27 09:37 - 00053248 _____ (Windows XP Bundled build C-Centric Single User) C:\Windows\SysWOW64\CSVer.dll 2014-09-26 20:55 - 2014-10-08 17:51 - 00000000 ____D () C:\ProgramData\Intel 2014-09-26 20:55 - 2014-09-26 21:04 - 00000000 ____D () C:\Program Files\Intel 2014-09-26 20:55 - 2014-09-26 20:57 - 00075099 _____ () C:\Windows\winredism.log 2014-09-26 20:55 - 2013-05-21 19:45 - 00008192 _____ (Intel Corporation) C:\Windows\system32\Drivers\IntelMEFWVer.dll 2014-09-26 20:54 - 2014-09-26 21:22 - 00000000 ____D () C:\Program Files (x86)\Intel 2014-09-26 20:54 - 2014-09-26 20:58 - 00000000 ____D () C:\Intel 2014-09-26 20:54 - 2014-09-26 20:54 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_TeeDriverx64_01011.Wdf 2014-09-26 20:54 - 2013-05-08 22:23 - 01795952 _____ (Microsoft Corporation) C:\Windows\system32\WdfCoInstaller01011.dll 2014-09-26 20:54 - 2013-05-08 22:23 - 00099800 _____ (Intel Corporation) C:\Windows\system32\Drivers\TeeDriverx64.sys 2014-09-26 20:53 - 2014-09-26 20:53 - 00000000 ____D () C:\Program Files\MLPS 2014-09-26 20:53 - 2014-09-26 20:53 - 00000000 ____D () C:\Program Files\DIFX 2014-09-26 20:52 - 2014-09-26 21:04 - 00032216 _____ () C:\Windows\DPINST.LOG 2014-09-26 20:51 - 2014-09-26 20:51 - 00001345 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk 2014-09-26 20:50 - 2014-09-26 20:50 - 00001326 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk 2014-09-26 20:48 - 2014-10-23 23:02 - 02097758 _____ () C:\Windows\WindowsUpdate.log 2014-09-26 20:45 - 2014-09-26 20:45 - 00000000 ____D () C:\Windows\CSC 2014-09-26 20:42 - 2014-09-26 20:42 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll 2014-09-26 20:42 - 2014-09-26 20:42 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll 2014-09-26 20:42 - 2014-09-26 20:42 - 00420008 _____ () C:\Windows\SysWOW64\locale.nls 2014-09-26 20:42 - 2014-09-26 20:42 - 00420008 _____ () C:\Windows\system32\locale.nls 2014-09-26 20:41 - 2014-09-26 20:41 - 03928064 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll 2014-09-26 20:41 - 2014-09-26 20:41 - 03419136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll 2014-09-26 20:41 - 2014-09-26 20:41 - 00376768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys 2014-09-26 20:40 - 2014-09-26 20:40 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys 2014-09-26 20:40 - 2014-09-26 20:40 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys 2014-09-26 20:40 - 2014-09-26 20:40 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys 2014-09-26 20:40 - 2014-09-26 20:40 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys 2014-09-26 20:40 - 2014-09-26 20:40 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys 2014-09-26 20:40 - 2014-09-26 20:40 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys 2014-09-26 20:40 - 2014-09-26 20:40 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys 2014-09-26 20:38 - 2014-09-26 20:38 - 00246784 _____ (Microsoft Corporation) C:\Windows\system32\input.dll 2014-09-26 20:38 - 2014-09-26 20:38 - 00202240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\input.dll 2014-09-26 20:38 - 2014-09-26 20:38 - 00007680 _____ (Microsoft Corporation) C:\Windows\system32\KBDINTAM.DLL 2014-09-26 20:38 - 2014-09-26 20:38 - 00007680 _____ (Microsoft Corporation) C:\Windows\system32\KBDINMAL.DLL 2014-09-26 20:38 - 2014-09-26 20:38 - 00007680 _____ (Microsoft Corporation) C:\Windows\system32\KBDINDEV.DLL 2014-09-26 20:38 - 2014-09-26 20:38 - 00007680 _____ (Microsoft Corporation) C:\Windows\system32\KBDINBEN.DLL 2014-09-26 20:38 - 2014-09-26 20:38 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDINTAM.DLL 2014-09-26 20:38 - 2014-09-26 20:38 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDINORI.DLL 2014-09-26 20:38 - 2014-09-26 20:38 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDINMAR.DLL 2014-09-26 20:38 - 2014-09-26 20:38 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDINMAL.DLL |
24.10.2014, 16:06 | #21 |
| Win7 Prof. penetrante popups, browserabsturz, versuch automatisch dateien downzuloaden Teil 2 FRST Code:
ATTFilter 2014-09-26 20:38 - 2014-09-26 20:38 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDINKAN.DLL 2014-09-26 20:38 - 2014-09-26 20:38 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDINHIN.DLL 2014-09-26 20:38 - 2014-09-26 20:38 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDINDEV.DLL 2014-09-26 20:38 - 2014-09-26 20:38 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDINBEN.DLL 2014-09-26 20:38 - 2014-09-26 20:38 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDINTEL.DLL 2014-09-26 20:38 - 2014-09-26 20:38 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDINPUN.DLL 2014-09-26 20:38 - 2014-09-26 20:38 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDINORI.DLL 2014-09-26 20:38 - 2014-09-26 20:38 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDINMAR.DLL 2014-09-26 20:38 - 2014-09-26 20:38 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDINKAN.DLL 2014-09-26 20:38 - 2014-09-26 20:38 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDINHIN.DLL 2014-09-26 20:38 - 2014-09-26 20:38 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDINGUJ.DLL 2014-09-26 20:38 - 2014-09-26 20:38 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDINEN.DLL 2014-09-26 20:38 - 2014-09-26 20:38 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDINBE2.DLL 2014-09-26 20:38 - 2014-09-26 20:38 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDINBE1.DLL 2014-09-26 20:38 - 2014-09-26 20:38 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDINASA.DLL 2014-09-26 20:38 - 2014-09-26 20:38 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDINTEL.DLL 2014-09-26 20:38 - 2014-09-26 20:38 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDINPUN.DLL 2014-09-26 20:38 - 2014-09-26 20:38 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDINGUJ.DLL 2014-09-26 20:38 - 2014-09-26 20:38 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDINBE2.DLL 2014-09-26 20:38 - 2014-09-26 20:38 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDINBE1.DLL 2014-09-26 20:38 - 2014-09-26 20:38 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDINASA.DLL 2014-09-26 20:37 - 2014-09-26 20:37 - 00744448 _____ (Microsoft Corporation) C:\Windows\system32\WUDFx.dll 2014-09-26 20:37 - 2014-09-26 20:37 - 00229888 _____ (Microsoft Corporation) C:\Windows\system32\WUDFHost.exe 2014-09-26 20:37 - 2014-09-26 20:37 - 00198656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFRd.sys 2014-09-26 20:37 - 2014-09-26 20:37 - 00194048 _____ (Microsoft Corporation) C:\Windows\system32\WUDFPlatform.dll 2014-09-26 20:37 - 2014-09-26 20:37 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\umpo.dll 2014-09-26 20:37 - 2014-09-26 20:37 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFPf.sys 2014-09-26 20:37 - 2014-09-26 20:37 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\WUDFSvc.dll 2014-09-26 20:37 - 2014-09-26 20:37 - 00045056 _____ (Microsoft Corporation) C:\Windows\system32\WUDFCoinstaller.dll 2014-09-26 20:37 - 2014-09-26 20:37 - 00000003 _____ () C:\Windows\system32\Drivers\MsftWdf_User_01_11_00_Inbox_Critical.Wdf 2014-09-26 20:36 - 2014-09-26 20:37 - 00404551 _____ () C:\Windows\KB2685813.log 2014-09-26 20:36 - 2014-09-26 20:36 - 00393930 _____ () C:\Windows\KB2685811.log 2014-09-26 20:30 - 2014-09-26 20:30 - 00484864 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll 2014-09-26 20:30 - 2014-09-26 20:30 - 00381440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wer.dll 2014-09-26 20:29 - 2014-09-26 20:29 - 01684928 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys 2014-09-26 20:29 - 2014-09-26 20:29 - 00228864 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll 2014-09-26 20:28 - 2014-09-26 20:28 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll 2014-09-26 20:28 - 2014-09-26 20:28 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll 2014-09-26 20:28 - 2014-09-26 20:28 - 00274880 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msiscsi.sys 2014-09-26 20:28 - 2014-09-26 20:28 - 00190912 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys 2014-09-26 20:28 - 2014-09-26 20:28 - 00027584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Diskdump.sys 2014-09-26 20:28 - 2014-09-26 20:28 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iologmsg.dll 2014-09-26 20:28 - 2014-09-26 20:28 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\iologmsg.dll 2014-09-26 20:27 - 2014-09-26 20:27 - 05550016 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe 2014-09-26 20:27 - 2014-09-26 20:27 - 03969984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe 2014-09-26 20:27 - 2014-09-26 20:27 - 03914176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe 2014-09-26 20:27 - 2014-09-26 20:27 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll 2014-09-26 20:27 - 2014-09-26 20:27 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll 2014-09-26 20:27 - 2014-09-26 20:27 - 00722944 _____ (Microsoft Corporation) C:\Windows\system32\objsel.dll 2014-09-26 20:27 - 2014-09-26 20:27 - 00538112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\objsel.dll 2014-09-26 20:27 - 2014-09-26 20:27 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe 2014-09-26 20:27 - 2014-09-26 20:27 - 00424960 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll 2014-09-26 20:27 - 2014-09-26 20:27 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll 2014-09-26 20:27 - 2014-09-26 20:27 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll 2014-09-26 20:27 - 2014-09-26 20:27 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll 2014-09-26 20:27 - 2014-09-26 20:27 - 00155072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys 2014-09-26 20:27 - 2014-09-26 20:27 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll 2014-09-26 20:27 - 2014-09-26 20:27 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys 2014-09-26 20:27 - 2014-09-26 20:27 - 00057344 _____ (Microsoft Corporation) C:\Windows\system32\cngprovider.dll 2014-09-26 20:27 - 2014-09-26 20:27 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\adprovider.dll 2014-09-26 20:27 - 2014-09-26 20:27 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\capiprovider.dll 2014-09-26 20:27 - 2014-09-26 20:27 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\dpapiprovider.dll 2014-09-26 20:27 - 2014-09-26 20:27 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cngprovider.dll 2014-09-26 20:27 - 2014-09-26 20:27 - 00049664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adprovider.dll 2014-09-26 20:27 - 2014-09-26 20:27 - 00048128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\capiprovider.dll 2014-09-26 20:27 - 2014-09-26 20:27 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpapiprovider.dll 2014-09-26 20:27 - 2014-09-26 20:27 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\dimsroam.dll 2014-09-26 20:27 - 2014-09-26 20:27 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\wincredprovider.dll 2014-09-26 20:27 - 2014-09-26 20:27 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dimsroam.dll 2014-09-26 20:27 - 2014-09-26 20:27 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wincredprovider.dll 2014-09-26 20:27 - 2014-09-26 20:27 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe 2014-09-26 20:27 - 2014-09-26 20:27 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll 2014-09-26 20:27 - 2014-09-26 20:27 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll 2014-09-26 20:27 - 2014-09-26 20:27 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe 2014-09-26 20:27 - 2014-09-26 20:27 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll 2014-09-26 20:27 - 2014-09-26 20:27 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll 2014-09-26 20:27 - 2014-09-26 20:27 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll 2014-09-26 20:27 - 2014-09-26 20:27 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe 2014-09-26 20:27 - 2014-09-26 20:27 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll 2014-09-26 20:27 - 2014-09-26 20:27 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe 2014-09-26 20:26 - 2014-09-26 20:26 - 00658432 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_isv.exe 2014-09-26 20:26 - 2014-09-26 20:26 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate.exe 2014-09-26 20:26 - 2014-09-26 20:26 - 00594944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_isv.exe 2014-09-26 20:26 - 2014-09-26 20:26 - 00572416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate.exe 2014-09-26 20:26 - 2014-09-26 20:26 - 00553984 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp.exe 2014-09-26 20:26 - 2014-09-26 20:26 - 00552960 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp_isv.exe 2014-09-26 20:26 - 2014-09-26 20:26 - 00528384 _____ (Microsoft Corporation) C:\Windows\system32\msdrm.dll 2014-09-26 20:26 - 2014-09-26 20:26 - 00510976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp.exe 2014-09-26 20:26 - 2014-09-26 20:26 - 00508928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp_isv.exe 2014-09-26 20:26 - 2014-09-26 20:26 - 00488448 _____ (Microsoft Corporation) C:\Windows\system32\secproc.dll 2014-09-26 20:26 - 2014-09-26 20:26 - 00485888 _____ (Microsoft Corporation) C:\Windows\system32\secproc_isv.dll 2014-09-26 20:26 - 2014-09-26 20:26 - 00428032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc.dll 2014-09-26 20:26 - 2014-09-26 20:26 - 00423936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_isv.dll 2014-09-26 20:26 - 2014-09-26 20:26 - 00390144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdrm.dll 2014-09-26 20:26 - 2014-09-26 20:26 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp_isv.dll 2014-09-26 20:26 - 2014-09-26 20:26 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp.dll 2014-09-26 20:26 - 2014-09-26 20:26 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp_isv.dll 2014-09-26 20:26 - 2014-09-26 20:26 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp.dll 2014-09-26 20:24 - 2014-09-26 20:25 - 00341673 _____ () C:\Windows\NL-NL_IE11.log 2014-09-26 20:22 - 2014-09-26 20:23 - 00341951 _____ () C:\Windows\IT-IT_IE11.log 2014-09-26 20:21 - 2014-09-26 20:22 - 00341456 _____ () C:\Windows\fr-FR_IE11.log 2014-09-26 20:20 - 2014-09-26 20:21 - 00341693 _____ () C:\Windows\DE-DE_IE11.log 2014-09-26 20:19 - 2014-09-26 20:19 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll 2014-09-26 20:19 - 2014-09-26 20:19 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2014-09-26 20:19 - 2014-09-26 20:19 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll 2014-09-26 20:19 - 2014-09-26 20:19 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat 2014-09-26 20:19 - 2014-09-26 20:19 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat 2014-09-26 20:19 - 2014-09-26 20:19 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2014-09-26 20:19 - 2014-09-26 20:19 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2014-09-26 20:19 - 2014-09-26 20:19 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec 2014-09-26 20:19 - 2014-09-26 20:19 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll 2014-09-26 20:19 - 2014-09-26 20:19 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll 2014-09-26 20:19 - 2014-09-26 20:19 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll 2014-09-26 20:19 - 2014-09-26 20:19 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll 2014-09-26 20:19 - 2014-09-26 20:19 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll 2014-09-26 20:19 - 2014-09-26 20:19 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll 2014-09-26 20:19 - 2014-09-26 20:19 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll 2014-09-26 20:19 - 2014-09-26 20:19 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll 2014-09-26 20:19 - 2014-09-26 20:19 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe 2014-09-26 20:19 - 2014-09-26 20:19 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe 2014-09-26 20:19 - 2014-09-26 20:19 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll 2014-09-26 20:19 - 2014-09-26 20:19 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe 2014-09-26 20:19 - 2014-09-26 20:19 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe 2014-09-26 20:19 - 2014-09-26 20:19 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll 2014-09-26 20:19 - 2014-09-26 20:19 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll 2014-09-26 20:19 - 2014-09-26 20:19 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll 2014-09-26 20:19 - 2014-09-26 20:19 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll 2014-09-26 20:19 - 2014-09-26 20:19 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll 2014-09-26 20:19 - 2014-09-26 20:19 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2014-09-26 20:19 - 2014-09-26 20:19 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll 2014-09-26 20:19 - 2014-09-26 20:19 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe 2014-09-26 20:19 - 2014-09-26 20:19 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2014-09-26 20:19 - 2014-09-26 20:19 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe 2014-09-26 20:19 - 2014-09-26 20:19 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll 2014-09-26 20:19 - 2014-09-26 20:19 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll 2014-09-26 20:19 - 2014-09-26 20:19 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx 2014-09-26 20:19 - 2014-09-26 20:19 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe 2014-09-26 20:19 - 2014-09-26 20:19 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe 2014-09-26 20:19 - 2014-09-26 20:19 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll 2014-09-26 20:19 - 2014-09-26 20:19 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx 2014-09-26 20:19 - 2014-09-26 20:19 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll 2014-09-26 20:19 - 2014-09-26 20:19 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll 2014-09-26 20:19 - 2014-09-26 20:19 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll 2014-09-26 20:19 - 2014-09-26 20:19 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll 2014-09-26 20:19 - 2014-09-26 20:19 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll 2014-09-26 20:19 - 2014-09-26 20:19 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll 2014-09-26 20:19 - 2014-09-26 20:19 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll 2014-09-26 20:19 - 2014-09-26 20:19 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll 2014-09-26 20:19 - 2014-09-26 20:19 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll 2014-09-26 20:19 - 2014-09-26 20:19 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll 2014-09-26 20:19 - 2014-09-26 20:19 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe 2014-09-26 20:19 - 2014-09-26 20:19 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe 2014-09-26 20:19 - 2014-09-26 20:19 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe 2014-09-26 20:19 - 2014-09-26 20:19 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe 2014-09-26 20:18 - 2014-09-26 20:20 - 02003137 _____ () C:\Windows\EN_IE11.log 2014-09-26 20:18 - 2014-09-26 20:18 - 00411553 _____ () C:\Windows\KB2888049.log 2014-09-26 20:18 - 2014-09-26 20:18 - 00327168 _____ (Microsoft Corporation) C:\Windows\system32\mswsock.dll 2014-09-26 20:18 - 2014-09-26 20:18 - 00248921 _____ () C:\Windows\KB2882822.log 2014-09-26 20:18 - 2014-09-26 20:18 - 00231424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mswsock.dll 2014-09-26 20:17 - 2014-09-26 20:18 - 00078862 _____ () C:\Windows\KB2834140-V2.log 2014-09-26 20:17 - 2014-09-26 20:17 - 00059787 _____ () C:\Windows\KB2786081.log 2014-09-26 20:16 - 2014-09-26 20:17 - 02229591 _____ () C:\Windows\KB2731771.log 2014-09-26 20:16 - 2014-09-26 20:16 - 01682432 _____ (Microsoft Corporation) C:\Windows\system32\XpsPrint.dll 2014-09-26 20:16 - 2014-09-26 20:16 - 01643520 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll 2014-09-26 20:16 - 2014-09-26 20:16 - 01247744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll 2014-09-26 20:16 - 2014-09-26 20:16 - 01238528 _____ (Microsoft Corporation) C:\Windows\system32\d3d10.dll 2014-09-26 20:16 - 2014-09-26 20:16 - 01175552 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll 2014-09-26 20:16 - 2014-09-26 20:16 - 01158144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsPrint.dll 2014-09-26 20:16 - 2014-09-26 20:16 - 01080832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10.dll 2014-09-26 20:16 - 2014-09-26 20:16 - 00648192 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll 2014-09-26 20:16 - 2014-09-26 20:16 - 00604160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll 2014-09-26 20:16 - 2014-09-26 20:16 - 00522752 _____ (Microsoft Corporation) C:\Windows\system32\XpsGdiConverter.dll 2014-09-26 20:16 - 2014-09-26 20:16 - 00364544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsGdiConverter.dll 2014-09-26 20:16 - 2014-09-26 20:16 - 00363008 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll 2014-09-26 20:16 - 2014-09-26 20:16 - 00333312 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1core.dll 2014-09-26 20:16 - 2014-09-26 20:16 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\d3d10core.dll 2014-09-26 20:16 - 2014-09-26 20:16 - 00293376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll 2014-09-26 20:16 - 2014-09-26 20:16 - 00249856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1core.dll 2014-09-26 20:16 - 2014-09-26 20:16 - 00245248 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecsExt.dll 2014-09-26 20:16 - 2014-09-26 20:16 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\UIAnimation.dll 2014-09-26 20:16 - 2014-09-26 20:16 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10core.dll 2014-09-26 20:16 - 2014-09-26 20:16 - 00207872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecsExt.dll 2014-09-26 20:16 - 2014-09-26 20:16 - 00194560 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1.dll 2014-09-26 20:16 - 2014-09-26 20:16 - 00187392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIAnimation.dll 2014-09-26 20:16 - 2014-09-26 20:16 - 00161792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1.dll 2014-09-26 20:16 - 2014-09-26 20:16 - 00122102 _____ () C:\Windows\KB2729094-V2.log 2014-09-26 20:16 - 2014-09-26 20:16 - 00010752 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll 2014-09-26 20:16 - 2014-09-26 20:16 - 00010752 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll 2014-09-26 20:16 - 2014-09-26 20:16 - 00009728 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll 2014-09-26 20:16 - 2014-09-26 20:16 - 00009728 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll 2014-09-26 20:16 - 2014-09-26 20:16 - 00005632 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll 2014-09-26 20:16 - 2014-09-26 20:16 - 00005632 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll 2014-09-26 20:16 - 2014-09-26 20:16 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll 2014-09-26 20:16 - 2014-09-26 20:16 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll 2014-09-26 20:16 - 2014-09-26 20:16 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-user32-l1-1-0.dll 2014-09-26 20:16 - 2014-09-26 20:16 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll 2014-09-26 20:16 - 2014-09-26 20:16 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll 2014-09-26 20:16 - 2014-09-26 20:16 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll 2014-09-26 20:16 - 2014-09-26 20:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-version-l1-1-0.dll 2014-09-26 20:16 - 2014-09-26 20:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll 2014-09-26 20:16 - 2014-09-26 20:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-version-l1-1-0.dll 2014-09-26 20:16 - 2014-09-26 20:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll 2014-09-26 20:16 - 2014-09-26 20:16 - 00002560 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll 2014-09-26 20:16 - 2014-09-26 20:16 - 00002560 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll 2014-09-26 20:15 - 2014-09-26 20:16 - 02342669 _____ () C:\Windows\KB2670838.log 2014-09-26 20:15 - 2014-09-26 20:15 - 01073616 _____ () C:\Windows\KB2533623.log 2014-09-26 20:14 - 2014-10-23 16:45 - 00735300 _____ () C:\Windows\system32\perfh013.dat 2014-09-26 20:14 - 2014-10-23 16:45 - 00152968 _____ () C:\Windows\system32\perfc013.dat 2014-09-26 20:14 - 2014-09-26 20:14 - 00341322 _____ () C:\Windows\system32\perfi013.dat 2014-09-26 20:14 - 2014-09-26 20:14 - 00043068 _____ () C:\Windows\system32\perfd013.dat 2014-09-26 20:14 - 2014-09-26 20:14 - 00000000 ____D () C:\Windows\SysWOW64\nl 2014-09-26 20:14 - 2014-09-26 20:14 - 00000000 ____D () C:\Windows\SysWOW64\0413 2014-09-26 20:14 - 2014-09-26 20:14 - 00000000 ____D () C:\Windows\system32\nl 2014-09-26 20:14 - 2014-09-26 20:14 - 00000000 ____D () C:\Windows\system32\0413 2014-09-26 20:09 - 2014-10-23 16:45 - 00731848 _____ () C:\Windows\system32\perfh010.dat 2014-09-26 20:09 - 2014-10-23 16:45 - 00146712 _____ () C:\Windows\system32\perfc010.dat 2014-09-26 20:09 - 2014-09-26 20:15 - 37148880 _____ () C:\Windows\nl-NL.log 2014-09-26 20:09 - 2014-09-26 20:08 - 00335478 _____ () C:\Windows\system32\perfi010.dat 2014-09-26 20:09 - 2014-09-26 20:08 - 00037534 _____ () C:\Windows\system32\perfd010.dat 2014-09-26 20:08 - 2014-09-26 20:08 - 00000000 ____D () C:\Windows\SysWOW64\it 2014-09-26 20:08 - 2014-09-26 20:08 - 00000000 ____D () C:\Windows\SysWOW64\0410 2014-09-26 20:08 - 2014-09-26 20:08 - 00000000 ____D () C:\Windows\system32\it 2014-09-26 20:08 - 2014-09-26 20:08 - 00000000 ____D () C:\Windows\system32\0410 2014-09-26 20:03 - 2014-10-23 16:45 - 00737518 _____ () C:\Windows\system32\perfh00C.dat 2014-09-26 20:03 - 2014-10-23 16:45 - 00149446 _____ () C:\Windows\system32\perfc00C.dat 2014-09-26 20:03 - 2014-09-26 20:09 - 37132632 _____ () C:\Windows\it-it.log 2014-09-26 20:03 - 2014-09-26 20:03 - 00344522 _____ () C:\Windows\system32\perfi00C.dat 2014-09-26 20:03 - 2014-09-26 20:03 - 00038160 _____ () C:\Windows\system32\perfd00C.dat 2014-09-26 20:03 - 2014-09-26 20:03 - 00000000 ____D () C:\Windows\SysWOW64\fr 2014-09-26 20:03 - 2014-09-26 20:03 - 00000000 ____D () C:\Windows\SysWOW64\040C 2014-09-26 20:03 - 2014-09-26 20:03 - 00000000 ____D () C:\Windows\system32\fr 2014-09-26 20:03 - 2014-09-26 20:03 - 00000000 ____D () C:\Windows\system32\040C 2014-09-26 19:58 - 2014-10-23 16:45 - 00699340 _____ () C:\Windows\system32\perfh007.dat 2014-09-26 19:58 - 2014-10-23 16:45 - 00149448 _____ () C:\Windows\system32\perfc007.dat 2014-09-26 19:58 - 2014-09-26 20:03 - 37132092 _____ () C:\Windows\fr-fr.log 2014-09-26 19:58 - 2014-09-26 19:57 - 00295922 _____ () C:\Windows\system32\perfi007.dat 2014-09-26 19:58 - 2014-09-26 19:57 - 00038104 _____ () C:\Windows\system32\perfd007.dat 2014-09-26 19:57 - 2014-09-26 20:14 - 00000000 ____D () C:\Windows\SysWOW64\XPSViewer 2014-09-26 19:57 - 2014-09-26 19:57 - 00000000 ____D () C:\Windows\SysWOW64\de 2014-09-26 19:57 - 2014-09-26 19:57 - 00000000 ____D () C:\Windows\SysWOW64\0407 2014-09-26 19:57 - 2014-09-26 19:57 - 00000000 ____D () C:\Windows\system32\de 2014-09-26 19:57 - 2014-09-26 19:57 - 00000000 ____D () C:\Windows\system32\0407 2014-09-26 19:52 - 2014-09-26 19:58 - 37121864 _____ () C:\Windows\de-de.log 2014-09-26 19:51 - 2013-11-07 12:46 - 00066856 _____ (Lenovo.) C:\Windows\system32\ibmpmsvc.exe 2014-09-26 19:51 - 2013-11-07 12:46 - 00060712 _____ (Lenovo.) C:\Windows\system32\ibmpmctl.exe 2014-09-26 19:51 - 2013-11-07 12:46 - 00054528 _____ (Lenovo.) C:\Windows\system32\Drivers\ibmpmdrv.sys 2014-09-26 19:51 - 2013-11-07 12:46 - 00040232 _____ (Lenovo.) C:\Windows\system32\tpinspm.dll 2014-09-26 19:51 - 2013-04-30 02:03 - 00679920 _____ (Intel Corporation) C:\Windows\system32\Drivers\iaStorA.sys 2014-09-26 19:51 - 2013-04-30 02:03 - 00028656 _____ (Intel Corporation) C:\Windows\system32\Drivers\iaStorF.sys 2014-09-26 19:51 - 2011-03-25 02:58 - 00001271 _____ () C:\Windows\MFGCLEAN.CMD 2014-09-26 19:51 - 2007-09-19 12:41 - 00004096 _____ () C:\Windows\system32\Thumbs.db 2014-09-26 03:40 - 2014-09-26 03:40 - 00000000 ____D () C:\mfg 2014-09-26 03:17 - 2014-10-08 16:07 - 00000000 ____D () C:\ProgramData\Lenovo 2014-09-26 03:15 - 2012-12-10 02:46 - 00000012 _____ () C:\Windows\CSUP.TXT ==================== One Month Modified Files and Folders ======= (If an entry is included in the fixlist, the file\folder will be moved.) 2014-10-24 16:50 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2014-10-24 16:50 - 2009-07-14 06:51 - 00048203 _____ () C:\Windows\setupact.log 2014-10-23 23:27 - 2009-07-14 06:45 - 00031904 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-10-23 23:27 - 2009-07-14 06:45 - 00031904 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-10-23 23:20 - 2010-11-21 05:47 - 00146258 _____ () C:\Windows\PFRO.log 2014-10-23 22:50 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\NDF 2014-10-23 16:45 - 2009-07-14 07:13 - 04271558 _____ () C:\Windows\system32\PerfStringBackup.INI 2014-10-23 16:45 - 2009-07-14 05:20 - 00000000 ___HD () C:\Windows\system32\GroupPolicy 2014-10-10 10:47 - 2009-07-14 06:45 - 00271440 _____ () C:\Windows\system32\FNTCACHE.DAT 2014-10-10 10:43 - 2014-02-03 16:34 - 00000000 ____D () C:\Program Files\Windows Journal 2014-10-10 10:43 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\Dism 2014-10-10 10:43 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\Dism 2014-10-10 10:43 - 2009-07-14 05:20 - 00000000 ____D () C:\Program Files\Common Files\System 2014-10-10 10:42 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\PolicyDefinitions 2014-10-10 10:34 - 2014-01-30 23:46 - 04183916 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI 2014-10-10 09:29 - 2009-07-14 04:34 - 00000505 _____ () C:\Windows\win.ini 2014-10-10 09:28 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\GroupPolicy 2014-10-09 06:56 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache 2014-10-08 17:50 - 2009-07-14 07:32 - 00000000 ____D () C:\Windows\system32\WinBioPlugIns 2014-10-08 17:03 - 2009-07-14 07:32 - 00000000 ____D () C:\Windows\system32\restore 2014-10-08 17:01 - 2014-01-30 21:47 - 00000000 ____D () C:\Windows\Panther 2014-10-08 17:01 - 2014-01-30 21:47 - 00000000 ____D () C:\SWTOOLS 2014-10-08 16:58 - 2009-07-14 05:20 - 00000000 __RHD () C:\Users\Public\Libraries 2014-09-26 21:22 - 2009-07-14 06:46 - 00004059 _____ () C:\Windows\DtcInstall.log 2014-09-26 21:22 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\sysprep 2014-09-26 21:15 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\Help 2014-09-26 21:13 - 2009-07-14 07:32 - 00000000 ____D () C:\Windows\system32\WinBioDatabase 2014-09-26 21:10 - 2009-07-14 05:20 - 00000000 __RSD () C:\Windows\Media 2014-09-26 21:09 - 2009-07-14 05:20 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories 2014-09-26 21:04 - 2009-07-14 05:20 - 00000000 __RHD () C:\Users\Default 2014-09-26 21:02 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system 2014-09-26 20:58 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\Recovery 2014-09-26 20:55 - 2009-07-14 05:20 - 00000000 ____D () C:\Program Files\Common Files\Microsoft Shared 2014-09-26 20:50 - 2014-01-30 21:50 - 00003652 _____ () C:\Windows\TSSysprep.log 2014-09-26 20:16 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\zh-HK 2014-09-26 20:16 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\tr-TR 2014-09-26 20:16 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\zh-HK 2014-09-26 20:16 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\tr-TR 2014-09-26 20:14 - 2010-11-21 09:06 - 00000000 ____D () C:\Windows\SysWOW64\winrm 2014-09-26 20:14 - 2010-11-21 09:06 - 00000000 ____D () C:\Windows\SysWOW64\WCN 2014-09-26 20:14 - 2010-11-21 09:06 - 00000000 ____D () C:\Windows\SysWOW64\sysprep 2014-09-26 20:14 - 2010-11-21 09:06 - 00000000 ____D () C:\Windows\SysWOW64\slmgr 2014-09-26 20:14 - 2010-11-21 09:06 - 00000000 ____D () C:\Windows\SysWOW64\Printing_Admin_Scripts 2014-09-26 20:14 - 2010-11-21 09:06 - 00000000 ____D () C:\Windows\system32\winrm 2014-09-26 20:14 - 2010-11-21 09:06 - 00000000 ____D () C:\Windows\system32\WCN 2014-09-26 20:14 - 2010-11-21 09:06 - 00000000 ____D () C:\Windows\system32\slmgr 2014-09-26 20:14 - 2010-11-21 09:06 - 00000000 ____D () C:\Windows\system32\Printing_Admin_Scripts 2014-09-26 20:14 - 2009-07-14 07:37 - 00000000 ____D () C:\Windows\DigitalLocker 2014-09-26 20:14 - 2009-07-14 07:32 - 00000000 ____D () C:\Program Files\Windows Sidebar 2014-09-26 20:14 - 2009-07-14 07:32 - 00000000 ____D () C:\Program Files\Windows Photo Viewer 2014-09-26 20:14 - 2009-07-14 07:32 - 00000000 ____D () C:\Program Files\Windows Defender 2014-09-26 20:14 - 2009-07-14 07:32 - 00000000 ____D () C:\Program Files\DVD Maker 2014-09-26 20:14 - 2009-07-14 07:32 - 00000000 ____D () C:\Program Files (x86)\Windows Sidebar 2014-09-26 20:14 - 2009-07-14 07:32 - 00000000 ____D () C:\Program Files (x86)\Windows Photo Viewer 2014-09-26 20:14 - 2009-07-14 07:32 - 00000000 ____D () C:\Program Files (x86)\Windows Defender 2014-09-26 20:14 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\Setup 2014-09-26 20:14 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\oobe 2014-09-26 20:14 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\MUI 2014-09-26 20:14 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\migwiz 2014-09-26 20:14 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\com 2014-09-26 20:14 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\Setup 2014-09-26 20:14 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\oobe 2014-09-26 20:14 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\MUI 2014-09-26 20:14 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\migwiz 2014-09-26 20:14 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\com 2014-09-26 20:14 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\servicing 2014-09-26 20:14 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\IME 2014-09-26 19:51 - 2009-07-14 06:45 - 00000000 ____D () C:\Windows\Setup 2014-09-26 03:15 - 2009-07-14 07:32 - 00032768 _____ () C:\Windows\system32\config\BCD-Template Some content of TEMP: ==================== C:\Users\Philipp\AppData\Local\Temp\avgnt.exe ==================== Bamital & volsnap Check ================= (There is no automatic fix for files that do not pass verification.) C:\Windows\System32\winlogon.exe => File is digitally signed C:\Windows\System32\wininit.exe => File is digitally signed C:\Windows\SysWOW64\wininit.exe => File is digitally signed C:\Windows\explorer.exe => File is digitally signed C:\Windows\SysWOW64\explorer.exe => File is digitally signed C:\Windows\System32\svchost.exe => File is digitally signed C:\Windows\SysWOW64\svchost.exe => File is digitally signed C:\Windows\System32\services.exe => File is digitally signed C:\Windows\System32\User32.dll => File is digitally signed C:\Windows\SysWOW64\User32.dll => File is digitally signed C:\Windows\System32\userinit.exe => File is digitally signed C:\Windows\SysWOW64\userinit.exe => File is digitally signed C:\Windows\System32\rpcss.dll => File is digitally signed C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2014-01-30 21:48 ==================== End Of Log ============================ Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 22-10-2014 Ran by Philipp at 2014-10-24 16:59:36 Running from C:\Users\Philipp\Desktop Boot Mode: Normal ========================================================== ==================== Security Center ======================== (If an entry is included in the fixlist, it will be removed.) AV: Avira Desktop (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859} AV: Norton Internet Security (Disabled - Up to date) {D87FA2C0-F526-77B1-D6EC-0EDF3936CEDB} AS: Norton Internet Security (Disabled - Up to date) {631E4324-D31C-783F-EC5C-35AD42B18466} AS: Avira Desktop (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} FW: Norton Internet Security (Disabled) {E04423E5-BF49-76E9-FDB3-A7EAC7E589A0} ==================== Installed Programs ====================== (Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.) 7-Zip 9.20 (HKLM-x32\...\7-Zip) (Version: - ) Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 3.4.0.2710 - Adobe Systems Incorporated) Adobe AIR (x32 Version: 3.4.0.2710 - Adobe Systems Incorporated) Hidden Adobe Flash Player 15 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 15.0.0.152 - Adobe Systems Incorporated) Adobe Reader XI (11.0.09) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.09 - Adobe Systems Incorporated) Apple Application Support (HKLM-x32\...\{63EC2120-1742-4625-AA47-C6A8AEC9C64C}) (Version: 2.2.2 - Apple Inc.) Apple Mobile Device Support (HKLM\...\{7446FE8D-C1F9-4D42-AAAE-5DBCE58605A6}) (Version: 6.0.0.59 - Apple Inc.) Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.) Avira (HKLM-x32\...\{9bd9b85e-7792-483b-a318-cc51ff0877ed}) (Version: 1.1.22.50000 - Avira Operations GmbH & Co. KG) Avira (x32 Version: 1.1.22.50000 - Avira Operations GmbH & Co. KG) Hidden Avira Free Antivirus (HKLM-x32\...\Avira AntiVir Desktop) (Version: 14.0.7.306 - Avira) BatteryBar (remove only) (HKLM\...\BatteryBar) (Version: - ) Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.) CHIP Updater (HKLM-x32\...\CHIP Updater_is1) (Version: 2.33 - Abelssoft) Cliqz (HKLM-x32\...\{5A0C0737-6AFE-4DC6-A8B4-6DFE509ACD75}_is1) (Version: 0.5.22 - Cliqz.com) Conexant HD Audio (HKLM\...\CNXT_AUDIO_HDA) (Version: 8.64.58.0 - Conexant) Create Recovery Media (HKLM-x32\...\{50DC5136-21E8-48BC-97E5-1AD055F6B0B6}) (Version: 1.20.0.00 - Lenovo Group Limited) DisplayLink Core Software (HKLM\...\{58F4C39B-D946-4A45-A314-DEFC2AFDF397}) (Version: 7.5.54609.0 - DisplayLink Corp.) Dolby Home Theater v4 (HKLM-x32\...\{B26438B4-BF51-49C3-9567-7F14A5E40CB9}) (Version: 7.2.8000.17 - Dolby Laboratories Inc) Dropbox (HKCU\...\Dropbox) (Version: 2.4.10 - Dropbox, Inc.) Gesture Control (HKLM-x32\...\{FF07C482-C9F5-47AE-80B2-05066F31A5ED}) (Version: 6.1.160.13 - Lenovo) Integrated Camera (HKLM-x32\...\{ADE16A9D-FBDC-4ecc-B6BD-9C31E51D0332}) (Version: 5.14.225.3 - Vimicro) Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.5.3.1520 - Intel Corporation) Intel(R) PRO/Wireless Driver (Version: 17.00.2000.1517 - Intel Corporation) Hidden Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.3383 - Intel Corporation) Intel(R) PROSet/Wireless Software for Bluetooth(R) Technology(patch version 17.0.1419.2) (HKLM\...\{302600C1-6BDF-4FD1-1405-148929CC1385}) (Version: 17.0.1405.0462 - Intel Corporation) Intel(R) Update Manager (HKLM-x32\...\{12914061-EB9B-4AE7-AC7E-0B8A607C7DF4}) (Version: 2.3.1338 - Intel Corporation) Intel(R) USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 2.5.2.32 - Intel Corporation) Intel(R) WiDi (HKLM\...\{F949AE30-83D1-41B2-92D2-F44478DD058A}) (Version: 4.2.24.0 - Intel Corporation) Intel® PROSet/Wireless Software (HKLM-x32\...\{75895d95-3e4b-42b6-8440-97a0e234aeb3}) (Version: 17.0.2 - Intel Corporation) Intel® PROSet/Wireless WiFi Software (Version: 17.0.0.0332 - Intel Corporation) Hidden Intel® Trusted Connect Service Client (Version: 1.27.798.1 - Intel Corporation) Hidden iTunes (HKLM\...\{1493B2AE-0261-47D2-B1AA-F4DAD0F6C48B}) (Version: 10.7.0.21 - Apple Inc.) Lenovo Auto Scroll Utility (HKLM\...\LenovoAutoScrollUtility) (Version: 2.11 - ) Lenovo Communications Utility (HKLM\...\{88C6A6D9-324C-46E8-BA87-563D14021442}_is1) (Version: 3.1.12.0 - Lenovo) Lenovo Fingerprint Manager (HKLM\...\{9BD443AA-F7D9-4688-8A8B-C33006C4CC59}) (Version: 4.5.258.0 - Synaptics) Lenovo Fingerprint Manager (HKLM\...\{F7AB2C19-6A27-4C75-A92A-8CC7C59E5FA2}) (Version: 4.5.258.0 - ) Lenovo Patch Utility (x32 Version: 1.3.2.6 - Lenovo Group Limited) Hidden Lenovo Patch Utility 64 bit (Version: 1.3.2.6 - Lenovo Group Limited) Hidden Lenovo Peer Connect SDK (HKLM\...\{75C87855-9CBB-4892-B1A9-74C73A19CACA}_is1) (Version: 1.0.0.7 - Lenovo) Lenovo Power Management Driver (HKLM\...\Power Management Driver) (Version: 1.67.04.04 - ) Lenovo QuickControl (HKLM-x32\...\{4855C42F-5197-4AAD-A50D-5066D2CC4647}) (Version: 2.20 - Lenovo Group Limited) Lenovo QuickDisplay (HKLM\...\{ADEEC90C-A033-4596-ACA1-97327055F9CB}) (Version: 1.2.7.0 - Lenovo Group Limited) Lenovo Registration (HKLM-x32\...\{6707C034-ED6B-4B6A-B21F-969B3606FBDE}) (Version: 1.0.3 - Lenovo Inc.) Lenovo SHAREit (HKLM-x32\...\Lenovo SHAREit_is1) (Version: 2.0.4.0 - Lenovo Group Limited) Lenovo Solution Center (HKLM\...\{13BD494D-9ACD-420B-A291-E145DED92EF6}) (Version: 2.6.001.00 - Lenovo Group Limited) Lenovo System Update (HKLM-x32\...\{25C64847-B900-48AD-A164-1B4F9B774650}) (Version: 5.06.0016 - Lenovo) Lenovo USB Graphics (HKLM\...\{E6B1FE9A-CB1E-4096-A0AF-163419CB971C}) (Version: 7.5.54614.0 - Lenovo) Lenovo USB3.0 to DVI VGA Monitor Adapter (HKLM-x32\...\{454D32AD-C149-49BE-9F2E-8C089C3D6620}) (Version: 1.07.17 - Lenovo) Lenovo User Guide (HKLM-x32\...\{13F59938-C595-479C-B479-F171AB9AF64F}) (Version: 1.0.0009.00 - Lenovo Group Limited) Lenovo Warranty Information (HKLM-x32\...\{FD4EC278-C1B1-4496-99ED-C0BE1B0AA521}) (Version: 1.0.0011.00 - Lenovo) Malwarebytes Anti-Malware Version 2.0.3.1025 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.3.1025 - Malwarebytes Corporation) McAfee Security Scan Plus (HKLM-x32\...\McAfee Security Scan) (Version: 3.0.285.6 - McAfee, Inc.) Message Center Plus (HKLM\...\{3849486C-FF09-4F5D-B491-3E179D58EE15}) (Version: 3.1.0004.00 - Lenovo Group Limited) Metric Collection SDK (x32 Version: 1.1.0005.00 - Lenovo Group Limited) Hidden Metric Collection SDK 35 (x32 Version: 1.2.0001.00 - Lenovo Group Limited) Hidden Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation) Microsoft Office (HKLM-x32\...\{90150000-0138-0409-0000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (HKLM-x32\...\{95716cce-fc71-413f-8ad5-56c2892d4b3a}) (Version: 11.0.60610.1 - Microsoft Corporation) MozBackup 1.5.1 (HKLM-x32\...\MozBackup) (Version: - Pavel Cvrcek) Mozilla Firefox 33.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 33.0 (x86 de)) (Version: 33.0 - Mozilla) Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 32.0.3 - Mozilla) Nitro Pro 9 (HKLM\...\{199748CD-E046-4D0F-A9D1-0712EE050EFC}) (Version: 9.5.1.5 - Nitro) Norton Internet Security (HKLM-x32\...\NIS) (Version: 21.6.0.32 - Symantec Corporation) On Screen Display (HKLM\...\OnScreenDisplay) (Version: 8.33.00 - ) PDF Architect 2 (HKLM-x32\...\PDF Architect 2) (Version: 2.0.24.16092 - pdfforge GmbH) PDF Architect 2 View Module (HKLM-x32\...\{C960FF38-431D-429D-AD1F-FBD12A45B7C5}) (Version: 2.0.17.17583 - pdfforge GmbH) PDFCreator (HKLM-x32\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 1.7.3 - pdfforge) Power Manager (HKLM-x32\...\{DAC01CEE-5BAE-42D5-81FC-B687E84E8405}) (Version: 6.65.2 - Lenovo Group Limited) RapidBoot HDD Accelerator (HKLM-x32\...\Fastboot) (Version: 1.1.1.1 - Lenovo) Realtek Card Reader (HKLM-x32\...\{F0A8BF4A-972F-41E0-9800-1EFE3BF28266}) (Version: 6.2.9200.21229 - Realtek Semiconductor Corp.) Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.71.327.2013 - Realtek) ThinkPad UltraNav Driver (HKLM\...\SynTPDeinstKey) (Version: 18.0.7.40 - Synaptics Incorporated) Thinkpad USB 3.0 Ethernet Adapter Driver (HKLM-x32\...\{D8102684-7BA1-4948-88B9-535F84E6E588}) (Version: 7.4.911.2013 - Lenovo) ThinkVantage Active Protection System (HKLM\...\{46A84694-59EC-48F0-964C-7E76E9F8A2ED}) (Version: 1.79.00.03 - Lenovo) USB Enhanced Performance Keyboard (HKLM\...\{989DC5D9-A776-430D-9E16-D36E5B81CD86}) (Version: 2.0.1.9 - Lenovo) Windows Driver Package - Intel Corporation (iaStorA) HDC (04/29/2013 12.5.4.1001) (HKLM\...\64C5B2577D321E8D30DF813803EF008F338A0B1E) (Version: 04/29/2013 12.5.4.1001 - Intel Corporation) Windows Driver Package - Lenovo 1.67.04.04 (11/07/2013 1.67.04.04) (HKLM\...\70FB73D983446AEE2932B0ED51A770D1BD1348DA) (Version: 11/07/2013 1.67.04.04 - Lenovo) ==================== Custom CLSID (selected items): ========================== (If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.) CustomCLSID: HKU\S-1-5-21-1145738533-22672879-546596692-1001_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\Philipp\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-1145738533-22672879-546596692-1001_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Philipp\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-1145738533-22672879-546596692-1001_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Philipp\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-1145738533-22672879-546596692-1001_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Philipp\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-1145738533-22672879-546596692-1001_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Philipp\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll (Dropbox, Inc.) ==================== Restore Points ========================= 08-10-2014 15:03:44 Windows Update 08-10-2014 16:07:50 Windows Update 09-10-2014 18:25:02 Installed iTunes 09-10-2014 18:44:46 Installed PDF Architect 2 View Module 10-10-2014 07:26:23 Windows Update ==================== Hosts content: ========================== (If needed Hosts: directive could be included in the fixlist to reset Hosts.) 2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____N C:\Windows\system32\Drivers\etc\hosts ==================== Scheduled Tasks (whitelisted) ============= (If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.) Task: {072B39CE-0E22-4CEA-8418-4947827D9ED9} - System32\Tasks\TVT\TVSUUpdateTask => C:\Program Files (x86)\Lenovo\System Update\tvsuShim.exe [2014-06-18] () Task: {0C6F968D-1471-4E8A-B132-E8F994FE201D} - System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473-Logon => C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [2014-02-28] () Task: {108B1C42-09D1-438E-88DD-4096596E3334} - System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473 => C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [2014-02-28] () Task: {17ECCBED-FAB5-4C6F-9D5A-5C6B56CB2F40} - System32\Tasks\Lenovo\Gesture Control => C:\Program Files (x86)\eyeSight\Gesture Control\GestureControl.exe [2014-07-02] (Lenovo) Task: {1DE5BC17-02B6-4556-B013-9BA66053C0A5} - System32\Tasks\Norton Internet Security\Norton Error Processor => C:\Program Files (x86)\Norton Internet Security\Engine\21.6.0.32\SymErr.exe [2014-01-30] (Symantec Corporation) Task: {22AB6C85-EE27-48E6-9752-4EF3E9E08816} - System32\Tasks\Norton WSC Integration => C:\Program Files (x86)\Norton Internet Security\Engine\21.6.0.32\WSCStub.exe [2014-09-21] (Symantec Corporation) Task: {234C2571-9540-4303-80DB-CFA783388C6D} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.) Task: {4F8EDD63-E3B1-4497-B243-DA6A9DF2B11D} - System32\Tasks\PMTask => C:\Program Files (x86)\ThinkPad\Utilities\PwmIdTsv.exe [2014-06-24] (Lenovo Group Limited) Task: {625B664E-F190-4A97-8708-C7DAA98AB39C} - System32\Tasks\Norton Internet Security\Norton Error Analyzer => C:\Program Files (x86)\Norton Internet Security\Engine\21.6.0.32\SymErr.exe [2014-01-30] (Symantec Corporation) Task: {737B442F-EC5B-4162-A21B-0847F8C1E7A8} - System32\Tasks\Lenovo\Lenovo Customer Feedback Program 64 35 => C:\Program Files (x86)\Lenovo\Customer Feedback Program 35\Lenovo.TVT.CustomerFeedback.Agent35.exe [2014-05-30] (Lenovo) Task: {9BEFEFB7-5EB9-4764-9432-F6218DC1D963} - System32\Tasks\Lenovo\LSC\LSCHardwareScan => C:\Program Files\Lenovo\Lenovo Solution Center\LSC.exe [2014-09-03] () Task: {A7AC898A-080D-4F28-98D8-310A3E69169F} - System32\Tasks\TVT\Lenovo QuickDisplay Agent => C:\Program Files\Lenovo\QuickDisplay\QuickDisplayAgent.exe [2014-04-10] (Lenovo Corporation) Task: {AC353643-4660-4AA5-A99F-6139212F5D57} - System32\Tasks\Lenovo\LSC\Lenovo Solution Center Notifications => C:\Program Files\Lenovo\Lenovo Solution Center\LSCNotify.exe [2014-09-03] (Lenovo) Task: {AC9238EF-C85C-4AA7-8A65-63DD6353E7DD} - System32\Tasks\TVT\LenovoWERMonitor => C:\Program Files (x86)\Common Files\lenovo\SUP\sup_wermonitor_shim.exe [2014-09-01] () Task: {AF9DB56B-7AF1-4327-8C31-04F4D25AE41A} - System32\Tasks\Lenovo\Lenovo Customer Feedback Program => C:\Program Files\Lenovo\Customer Feedback Program\Lenovo.TVT.CustomerFeedback.Agent.exe [2013-04-27] (Lenovo) Task: {C7102366-CFB3-420B-8E99-331D140C9B56} - System32\Tasks\Lenovo\Message Center Plus Launcher => C:\Program Files (x86)\Lenovo\message center plus\mcplaunch.exe [2012-05-16] (Lenovo) Task: {D13D5664-4F8A-413F-8A82-2EB578EE4BFD} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-10-11] (Adobe Systems Incorporated) Task: {D54A631D-1E77-4AB2-AA2A-962532F936FD} - System32\Tasks\Lenovo\Lenovo Solution Center Launcher => C:\Program Files\lenovo\lenovo solution center\App\LSCService.exe [2014-09-03] (Lenovo) Task: {D7791A94-2CEF-4C8D-8F9E-5839A555862F} - System32\Tasks\Microsoft\Windows\PLA\LSC Memory => Rundll32.exe C:\Windows\system32\pla.dll,PlaHost "LSC Memory" "$(Arg0)" Task: {DAD9E64A-08F5-4EB7-AE6A-4EA2057FF503} - System32\Tasks\Abelssoft\Updater scan => C:\Program Files (x86)\CHIP Updater\CHIPUpdater.exe [2014-09-19] (CHIP) Task: {F5CADA76-D8FE-4F6C-9D1E-02F17D57FAAD} - System32\Tasks\Lenovo\Lenovo Customer Feedback Program 64 => C:\Program Files (x86)\Lenovo\Customer Feedback Program\Lenovo.TVT.CustomerFeedback.Agent.exe [2014-02-13] (Lenovo) Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe ==================== Loaded Modules (whitelisted) ============= 2014-09-26 21:10 - 2014-06-24 00:05 - 00117760 ____N () C:\Program Files (x86)\ThinkPad\Utilities\GR\PWMRT64V.DLL 2014-05-16 03:39 - 2014-05-16 03:39 - 00417800 _____ () C:\Program Files\Nitro\Pro 9\Nitro_UpdateService.exe 2014-09-26 21:06 - 2010-10-26 06:40 - 00049056 _____ () C:\Program Files\CONEXANT\ForteConfig\fmapp.exe 2014-02-28 11:32 - 2014-02-28 11:32 - 00174368 _____ () C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe 2012-08-27 21:33 - 2012-08-27 21:33 - 00087912 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll 2012-08-27 21:33 - 2012-08-27 21:33 - 01242512 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll 2014-09-26 21:13 - 2013-07-02 08:33 - 00033520 ____N () C:\Program Files (x86)\Lenovo\RapidBoot HDD Accelerator\FBServiceps.dll 2014-09-26 21:12 - 2011-08-03 05:58 - 02201088 _____ () C:\Program Files\Lenovo\Communications Utility\cxcore210.dll 2014-09-26 21:12 - 2011-08-03 05:58 - 02085888 _____ () C:\Program Files\Lenovo\Communications Utility\cv210.dll 2014-10-23 22:56 - 2014-10-11 14:53 - 03649648 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll 2014-10-09 20:36 - 2014-10-11 18:03 - 16825520 _____ () C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_152.dll 2014-09-26 20:54 - 2013-05-08 22:23 - 01199576 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll 2014-02-28 11:33 - 2014-02-28 11:33 - 00041248 _____ () C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\win32api.pyd 2014-02-28 11:32 - 2014-02-28 11:32 - 00059680 _____ () C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\pywintypes27.dll 2014-02-28 11:32 - 2014-02-28 11:32 - 00119072 _____ () C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\pythoncom27.dll 2014-02-28 11:33 - 2014-02-28 11:33 - 00020256 _____ () C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\_multiprocessing.pyd 2014-02-28 11:33 - 2014-02-28 11:33 - 00025376 _____ () C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\win32service.pyd 2014-02-28 11:33 - 2014-02-28 11:33 - 00022816 _____ () C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\servicemanager.pyd 2014-02-28 11:33 - 2014-02-28 11:33 - 00018208 _____ () C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\win32event.pyd 2014-02-28 11:33 - 2014-02-28 11:33 - 00027424 _____ () C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\_socket.pyd 2014-02-28 11:33 - 2014-02-28 11:33 - 00277280 _____ () C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\_ssl.pyd 2014-02-28 11:33 - 2014-02-28 11:33 - 00113952 _____ () C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\_hashlib.pyd 2014-02-28 11:33 - 2014-02-28 11:33 - 00016672 _____ () C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\select.pyd 2014-02-28 11:33 - 2014-02-28 11:33 - 00040736 _____ () C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\_ctypes.pyd ==================== Alternate Data Streams (whitelisted) ========= (If an entry is included in the fixlist, only the Alternate Data Streams will be removed.) ==================== Safe Mode (whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.) ==================== EXE Association (whitelisted) ============= (If an entry is included in the fixlist, the default will be restored. None default entries will be removed.) ==================== MSCONFIG/TASK MANAGER disabled items ========= (Currently there is no automatic fix for this section.) ========================= Accounts: ========================== Administrator (S-1-5-21-1145738533-22672879-546596692-500 - Administrator - Disabled) Gast (S-1-5-21-1145738533-22672879-546596692-501 - Limited - Disabled) HomeGroupUser$ (S-1-5-21-1145738533-22672879-546596692-1002 - Limited - Enabled) Philipp (S-1-5-21-1145738533-22672879-546596692-1001 - Administrator - Enabled) => C:\Users\Philipp ==================== Faulty Device Manager Devices ============= Name: Teredo Tunneling Pseudo-Interface Description: Microsoft-Teredo-Tunneling-Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. ==================== Event log errors: ========================= Application errors: ================== Error: (10/24/2014 04:51:08 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (10/23/2014 11:21:20 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (10/23/2014 10:54:24 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: plugin-container.exe, Version: 32.0.3.5379, Zeitstempel: 0x54224e6b Name des fehlerhaften Moduls: mozalloc.dll, Version: 32.0.3.5379, Zeitstempel: 0x54221b67 Ausnahmecode: 0x80000003 Fehleroffset: 0x0000141b ID des fehlerhaften Prozesses: 0x1e18 Startzeit der fehlerhaften Anwendung: 0xplugin-container.exe0 Pfad der fehlerhaften Anwendung: plugin-container.exe1 Pfad des fehlerhaften Moduls: plugin-container.exe2 Berichtskennung: plugin-container.exe3 Error: (10/23/2014 04:48:43 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (10/23/2014 04:45:50 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: plugin-container.exe, Version: 32.0.3.5379, Zeitstempel: 0x54224e6b Name des fehlerhaften Moduls: mozalloc.dll, Version: 32.0.3.5379, Zeitstempel: 0x54221b67 Ausnahmecode: 0x80000003 Fehleroffset: 0x0000141b ID des fehlerhaften Prozesses: 0x784 Startzeit der fehlerhaften Anwendung: 0xplugin-container.exe0 Pfad der fehlerhaften Anwendung: plugin-container.exe1 Pfad des fehlerhaften Moduls: plugin-container.exe2 Berichtskennung: plugin-container.exe3 Error: (10/23/2014 04:38:57 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (10/21/2014 10:27:29 PM) (Source: SideBySide) (EventID: 80) (User: ) Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3. Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion. In Konflikt stehende Komponenten:. Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest. Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest. Error: (10/21/2014 09:16:17 PM) (Source: SideBySide) (EventID: 80) (User: ) Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3. Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion. In Konflikt stehende Komponenten:. Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest. Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest. Error: (10/21/2014 09:16:17 PM) (Source: SideBySide) (EventID: 80) (User: ) Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3. Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion. In Konflikt stehende Komponenten:. Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest. Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest. Error: (10/21/2014 09:16:11 PM) (Source: SideBySide) (EventID: 80) (User: ) Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3. Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion. In Konflikt stehende Komponenten:. Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest. Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest. System errors: ============= Error: (10/24/2014 04:52:35 PM) (Source: Service Control Manager) (EventID: 7024) (User: ) Description: Der Dienst "Heimnetzgruppen-Listener" wurde mit folgendem dienstspezifischem Fehler beendet: %%-2147023143. Error: (10/23/2014 11:22:39 PM) (Source: Service Control Manager) (EventID: 7024) (User: ) Description: Der Dienst "Heimnetzgruppen-Listener" wurde mit folgendem dienstspezifischem Fehler beendet: %%-2147023143. Error: (10/23/2014 04:49:07 PM) (Source: Service Control Manager) (EventID: 7024) (User: ) Description: Der Dienst "Heimnetzgruppen-Listener" wurde mit folgendem dienstspezifischem Fehler beendet: %%-2147023143. Error: (10/23/2014 04:39:48 PM) (Source: Service Control Manager) (EventID: 7024) (User: ) Description: Der Dienst "Heimnetzgruppen-Listener" wurde mit folgendem dienstspezifischem Fehler beendet: %%-2147023143. Error: (10/23/2014 04:38:55 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Der Dienst "ValBioService" wurde aufgrund folgenden Fehlers nicht gestartet: %%1053 Error: (10/23/2014 04:38:55 PM) (Source: Service Control Manager) (EventID: 7009) (User: ) Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst ValBioService erreicht. Error: (10/21/2014 09:08:10 PM) (Source: Service Control Manager) (EventID: 7024) (User: ) Description: Der Dienst "Heimnetzgruppen-Listener" wurde mit folgendem dienstspezifischem Fehler beendet: %%-2147023143. Microsoft Office Sessions: ========================= Error: (10/24/2014 04:51:08 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (10/23/2014 11:21:20 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (10/23/2014 10:54:24 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: plugin-container.exe32.0.3.537954224e6bmozalloc.dll32.0.3.537954221b67800000030000141b1e1801cfef027ba7de6cC:\Program Files (x86)\Mozilla Firefox\plugin-container.exeC:\Program Files (x86)\Mozilla Firefox\mozalloc.dllc47d7216-5af6-11e4-bfac-f81654dfef02 Error: (10/23/2014 04:48:43 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (10/23/2014 04:45:50 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: plugin-container.exe32.0.3.537954224e6bmozalloc.dll32.0.3.537954221b67800000030000141b78401cfeecf52c3f110C:\Program Files (x86)\Mozilla Firefox\plugin-container.exeC:\Program Files (x86)\Mozilla Firefox\mozalloc.dll47dd8451-5ac3-11e4-904e-f81654dfef02 Error: (10/23/2014 04:38:57 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (10/21/2014 10:27:29 PM) (Source: SideBySide) (EventID: 80) (User: ) Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Program Files (x86)\ESET\ESET Online Scanner\ESETSmartInstaller.exe Error: (10/21/2014 09:16:17 PM) (Source: SideBySide) (EventID: 80) (User: ) Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\Philipp\Downloads\esetsmartinstaller_deu.exe Error: (10/21/2014 09:16:17 PM) (Source: SideBySide) (EventID: 80) (User: ) Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\Philipp\Downloads\esetsmartinstaller_deu.exe Error: (10/21/2014 09:16:11 PM) (Source: SideBySide) (EventID: 80) (User: ) Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\Philipp\Downloads\esetsmartinstaller_deu.exe ==================== Memory info =========================== Processor: Intel(R) Core(TM) i5-4210U CPU @ 1.70GHz Percentage of memory in use: 60% Total physical RAM: 4012.08 MB Available physical RAM: 1591.13 MB Total Pagefile: 8022.34 MB Available Pagefile: 4971.42 MB Total Virtual: 8192 MB Available Virtual: 8191.86 MB ==================== Drives ================================ Drive c: (Windows7_OS) (Fixed) (Total:443.26 GB) (Free:394.29 GB) NTFS ==>[System with boot components (obtained from reading drive)] Drive q: (Lenovo_Recovery) (Fixed) (Total:21.03 GB) (Free:9 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (Size: 465.8 GB) (Disk ID: A7179EBD) Partition 1: (Active) - (Size=1.5 GB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=443.3 GB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=21 GB) - (Type=07 NTFS) ==================== End Of Log ============================ |
25.10.2014, 11:16 | #22 |
/// Malwareteam | Win7 Prof. penetrante popups, browserabsturz, versuch automatisch dateien downzuloaden Deinstalliere deinen Firefox komplett und installiere die aktuelle Version. Tritt das Problem immernoch auf? |
27.10.2014, 16:51 | #23 |
| Win7 Prof. penetrante popups, browserabsturz, versuch automatisch dateien downzuloaden hi, ja das problem tritt immernoch auf, bei klicks auf oder eingabe in geöffneten websites öffnen sich neue tabs, z.b. die mcaffe homepage, freesoftwaren.com und andere (hxxp://enh.guzzlepraxiscommune.com/sd/dw32.html?u=http%3A%2F%2Fwkj.datropy.com%2FWhiteLabelBidRequestHandlerServlet%3Foid%3D1%26width%3D1%26height%3D100%26pubid%3D9700%26tagid%3D1043%26noa op%3D1%26revmod%3DCRD%26cb%3Dcybabw%26encoded%3D1%26cirf%3Dhttp%3A%2F%2Fwww.trojaner-board.de%2Fprofile.php%3Fdo%3Ddst%26pstn%3D97001043&p=Info&a=&c=9700-1043&b=firefox&bv=33&t1=1414424258932&tt=1414424258932&r=www.trojaner-board.de&ua=0&n=convertmedia&sn=&mpa=0&mp=0 oder hxxp://icf.unbentdilativecutpurse.com/sd/dw32.html?u=http%3A%2F%2Fjkc.thespatialists.com%2FWhiteLabelBidRequestHandlerServlet%3Foid%3D1%26width%3D1%26height%3D100%26pubid%3D9700%26tagid%3D104 3%26noaop%3D1%26revmod%3DCRD%26cb%3Dcybabw%26encoded%3D1%26cirf%3Dhttp%3A%2F%2Fwww.trojaner-board.de%2F69886-alle-hilfesuchenden-eroeffnung-themas-beachten.html%26pstn%3D97001043&p=Info&a=&c=9700-1043&b=firefox&bv=33&t1=1414167853942&tt=1414167853942&r=www.trojaner-board.de&ua=1&n=convertmedia&sn=&mpa=0&mp=0), dazu häufig eine dialogbox die behauptet firefox oder mediaplayer oder flashplayer wären nicht mehr aktuell und bräuchten ein update. bei internetexplorer scheint es übrigens gerade nicht mehr aufzutreten. das windows sicherheitscenter lässt sich leider auch immernochnicht aktivieren. ich würde ja auch das system neu aufsetzen (bringt das was?) aber ich habe win7 von lenovo vorinstalliert als downgrade von win8 bekommen und eine recoverydisc war natürlich nur für win 8 dabei. vielen dank trotzdem schonmal für deine hilfe. |
27.10.2014, 19:45 | #24 |
/// Malwareteam | Win7 Prof. penetrante popups, browserabsturz, versuch automatisch dateien downzuloaden hi, bitte mach ab und zu mal einen Absatz beim schreiben. Es strengt sehr an deine Texte zu lesen. Downloade dir bitte Farbar Service Scanner
Poste bitte den Inhalt hier. |
28.10.2014, 17:34 | #25 |
| Win7 Prof. penetrante popups, browserabsturz, versuch automatisch dateien downzuloaden hi, sorry wegen meines schreibstils, ich gelobe besserung. hier also der fss scan: Code:
ATTFilter Farbar Service Scanner Version: 21-07-2014 Ran by Philipp (administrator) on 28-10-2014 at 17:32:05 Running from "C:\Users\Philipp\Downloads" Microsoft Windows 7 Professional Service Pack 1 (X64) Boot Mode: Normal **************************************************************** Internet Services: ============ Connection Status: ============== Localhost is accessible. LAN connected. Google IP is accessible. Google.com is accessible. Yahoo.com is accessible. Windows Firewall: ============= mpsdrv Service is not running. Checking service configuration: The start type of mpsdrv service is OK. The ImagePath of mpsdrv service is OK. MpsSvc Service is not running. Checking service configuration: The start type of MpsSvc service is set to Disabled. The default start type is Auto. The ImagePath of MpsSvc service is OK. The ServiceDll of MpsSvc service is OK. Firewall Disabled Policy: ================== System Restore: ============ System Restore Disabled Policy: ======================== Action Center: ============ wscsvc Service is not running. Checking service configuration: The start type of wscsvc service is set to Disabled. The default start type is Auto. The ImagePath of wscsvc service is OK. The ServiceDll of wscsvc service is OK. Windows Update: ============ wuauserv Service is not running. Checking service configuration: The start type of wuauserv service is set to Disabled. The default start type is Auto. The ImagePath of wuauserv service is OK. The ServiceDll of wuauserv service is OK. Windows Autoupdate Disabled Policy: ============================ Windows Defender: ============== WinDefend Service is not running. Checking service configuration: The start type of WinDefend service is set to Disabled. The default start type is Auto. The ImagePath of WinDefend service is OK. The ServiceDll of WinDefend service is OK. Windows Defender Disabled Policy: ========================== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender] "DisableAntiSpyware"=DWORD:1 Other Services: ============== File Check: ======== C:\Windows\System32\nsisvc.dll => File is digitally signed C:\Windows\System32\drivers\nsiproxy.sys => File is digitally signed C:\Windows\System32\dhcpcore.dll => File is digitally signed C:\Windows\System32\drivers\afd.sys => File is digitally signed C:\Windows\System32\drivers\tdx.sys => File is digitally signed C:\Windows\System32\Drivers\tcpip.sys => File is digitally signed C:\Windows\System32\dnsrslvr.dll => File is digitally signed C:\Windows\System32\mpssvc.dll => File is digitally signed C:\Windows\System32\bfe.dll => File is digitally signed C:\Windows\System32\drivers\mpsdrv.sys => File is digitally signed C:\Windows\System32\SDRSVC.dll => File is digitally signed C:\Windows\System32\vssvc.exe => File is digitally signed C:\Windows\System32\wscsvc.dll => File is digitally signed C:\Windows\System32\wbem\WMIsvc.dll => File is digitally signed C:\Windows\System32\wuaueng.dll => File is digitally signed C:\Windows\System32\qmgr.dll => File is digitally signed C:\Windows\System32\es.dll => File is digitally signed C:\Windows\System32\cryptsvc.dll => File is digitally signed C:\Program Files\Windows Defender\MpSvc.dll => File is digitally signed C:\Windows\System32\ipnathlp.dll => File is digitally signed C:\Windows\System32\iphlpsvc.dll => File is digitally signed C:\Windows\System32\svchost.exe => File is digitally signed C:\Windows\System32\rpcss.dll => File is digitally signed **** End of log **** |
29.10.2014, 21:44 | #26 |
/// Malwareteam | Win7 Prof. penetrante popups, browserabsturz, versuch automatisch dateien downzuloaden Hi lade dir bitte folgende Datei herunter und speichere sie auf deinem Desktop Doppelklicke auf die Datei und führe Sie aus. Sie setzt die Standardeinstellungen für deinen deaktivierten WindowsUpdate Server wieder neu. http://download.bleepingcomputer.com...7/wuauserv.reg |
30.10.2014, 10:16 | #27 |
| Win7 Prof. penetrante popups, browserabsturz, versuch automatisch dateien downzuloaden hi, also windows-update funktioniert wieder, aber das sicherheitszenter geht nicht und auch die werbung und popups beim browsen verschwinden nicht. beste grüße p |
30.10.2014, 11:43 | #28 | |
/// Malwareteam | Win7 Prof. penetrante popups, browserabsturz, versuch automatisch dateien downzuloadenZitat:
dann bitte ein frisches FRST logfile + adittions.txt |
30.10.2014, 17:22 | #29 |
| Win7 Prof. penetrante popups, browserabsturz, versuch automatisch dateien downzuloaden hi, ja so sah es erst aus, aber es ist immernoch da. hier also nochmal FRST: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 30-10-2014 Ran by Philipp (administrator) on PHILIPP-PC on 30-10-2014 17:13:06 Running from C:\Users\Philipp\Desktop Loaded Profile: Philipp (Available profiles: Philipp) Platform: Windows 7 Professional Service Pack 1 (X64) OS Language: Deutsch (Deutschland) Internet Explorer Version 11 Boot Mode: Normal Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (Lenovo.) C:\Windows\System32\ibmpmsvc.exe (DisplayLink Corp.) C:\Program Files\DisplayLink Core Software\DisplayLinkManager.exe (DisplayLink Corp.) C:\Program Files\DisplayLink Core Software\DisplayLinkUserAgent.exe (Microsoft Corporation) C:\Windows\System32\wlanext.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe (Conexant Systems Inc.) C:\Windows\System32\CxAudMsg64.exe (Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe (Lenovo) C:\Program Files (x86)\Lenovo\RapidBoot HDD Accelerator\FBService.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe (Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe (Lenovo Group Limited) C:\Program Files\Lenovo\Communications Utility\CamMute.exe (Lenovo Group Limited) C:\Program Files\Lenovo\Communications Utility\TPKNRSVC.exe (Lenovo Group Limited) C:\Program Files\Lenovo\Communications Utility\vcamsvc.exe (Lenovo Group Limited) C:\Program Files\Lenovo\VIRTSCRL\lvvsst.exe (Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\21.6.0.32\nis.exe (Lenovo Group Limited) C:\Program Files\Lenovo\VIRTSCRL\virtscrl.exe (Nitro PDF Software) C:\Program Files\Nitro\Pro 9\NitroPDFDriverService9x64.exe () C:\Program Files\Nitro\Pro 9\Nitro_UpdateService.exe (Nalpeiron Ltd.) C:\Windows\SysWOW64\NLSSRV32.EXE (Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe (Conexant Systems, Inc.) C:\Windows\SysWOW64\SASrv.exe (Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\TPHKSVC.exe (Validity Sensors, Inc.) C:\Program Files\Lenovo Fingerprint Reader\ValBioService.exe (Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\tpnumlkd.exe (Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\tpnumlk.exe (Synaptics Incorporated) C:\Windows\System32\valWBFPolicyService.exe (Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe (Lenovo Corporation) C:\Program Files\Lenovo\QuickDisplay\QuickDisplayAgent.exe (Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\micmute.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe (Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\tphkload.exe (Microsoft Corporation) C:\Windows\System32\rundll32.exe (Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\TPONSCR.exe (Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\shtctky.exe (Lenovo Group Limited) C:\Program Files (x86)\Lenovo\QuickControl\QuickControlService.exe (Intel Corporation) C:\Windows\System32\hkcmd.exe (Intel Corporation) C:\Windows\System32\igfxpers.exe (LITE-ON TECHNOLOGY CORP.) C:\Program Files\Lenovo\USB Enhanced Performance Keyboard\Skdaemon.exe (Conexant Systems, Inc.) C:\Program Files\CONEXANT\cAudioFilterAgent\CAudioFilterAgent64.exe (Intel Corporation) C:\Windows\System32\igfxsrvc.exe (Lenovo Group Limited) C:\Program Files (x86)\Lenovo\QuickControl\QuickControl.exe () C:\Program Files\CONEXANT\ForteConfig\fmapp.exe (Microsoft Corporation) C:\Windows\System32\rundll32.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (Lenovo.) C:\Windows\System32\TpShocks.exe (Lenovo Group Limited) C:\Program Files\Lenovo\Communications Utility\TpKnrres.exe (McAfee, Inc.) C:\Program Files (x86)\McAfee Security Scan\3.0.285\SSScheduler.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPLpr.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe (Vimicro) C:\Program Files (x86)\USB Camera\VM331STI.EXE (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe (Microsoft Corporation) C:\Windows\SysWOW64\rundll32.exe (Microsoft Corporation) C:\Windows\System32\rundll32.exe (Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe (Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Lenovo Group Limited) C:\Program Files (x86)\ThinkPad\Utilities\SCHTASK.EXE (Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe (Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\21.6.0.32\nis.exe (Lenovo) C:\Program Files\Lenovo\Lenovo Solution Center\LSCNotify.exe (Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe (Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe (Lenovo) C:\Program Files (x86)\Lenovo\Message Center Plus\MCPLaunch.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Lenovo) C:\Program Files\Lenovo\Lenovo Peer Connect\LenovoDiscoverySvc.exe (Lenovo) C:\Program Files (x86)\ThinkPad\Utilities\PWMDBSVC.exe (Microsoft Corporation) C:\Windows\System32\wbem\WMIADAP.exe () C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe ==================== Registry (Whitelisted) ================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [Enhanced Performance Keyboard] => C:\Program Files\Lenovo\USB Enhanced Performance Keyboard\SKDaemon.exe [335360 2012-08-08] (LITE-ON TECHNOLOGY CORP.) HKLM\...\Run: [cAudioFilterAgent] => C:\Program Files\Conexant\cAudioFilterAgent\cAudioFilterAgent64.exe [901216 2013-04-29] (Conexant Systems, Inc.) HKLM\...\Run: [ForteConfig] => C:\Program Files\Conexant\ForteConfig\fmapp.exe [49056 2010-10-26] () HKLM\...\Run: [SmartAudio] => C:\Program Files\CONEXANT\SAII\SACpl.exe [1647616 2012-06-13] (Conexant Systems, Inc.) HKLM\...\Run: [BTMTrayAgent] => rundll32.exe "C:\Program Files (x86)\Intel\Bluetooth\btmshellex.dll",TrayApp HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2810608 2014-04-07] (Synaptics Incorporated) HKLM\...\Run: [TpShocks] => C:\Windows\system32\TpShocks.exe [384344 2014-02-18] (Lenovo.) HKLM\...\Run: [LENOVO.TPKNRRES] => C:\Program Files\Lenovo\Communications Utility\TPKNRRES.exe [295768 2014-05-29] (Lenovo Group Limited) HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [292848 2013-10-21] (Intel Corporation) HKLM-x32\...\Run: [331BigDog] => C:\Program Files (x86)\USB Camera\VM331STI.EXE [552960 2013-05-14] (Vimicro) HKLM-x32\...\Run: [PWMTRV] => rundll32 "C:\Program Files (x86)\ThinkPad\Utilities\PWMTR64V.DLL",PwrMgrBkGndMonitor HKLM-x32\...\Run: [Lenovo Registration] => C:\Program Files (x86)\Lenovo Registration\LenovoReg.exe [4315872 2011-06-01] (Lenovo, Inc.) HKLM-x32\...\Run: [Fastboot] => C:\Program Files (x86)\Lenovo\RapidBoot HDD Accelerator\FBConsole.exe [733936 2013-07-02] (Lenovo) HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59280 2012-08-27] (Apple Inc.) HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [421776 2012-09-09] (Apple Inc.) HKLM-x32\...\Run: [Avira Systray] => C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe [165168 2014-09-23] (Avira Operations GmbH & Co. KG) HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [703736 2014-09-24] (Avira Operations GmbH & Co. KG) HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959176 2014-09-12] (Adobe Systems Incorporated) Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation) HKLM\...\Policies\Explorer: [TaskbarNoNotification] 0 HKLM\...\Policies\Explorer: [HideSCAHealth] 0 HKU\S-1-5-21-1145738533-22672879-546596692-1001\...\Run: [ShowBatteryBar] => C:\Program Files\BatteryBar\ShowBatteryBar.exe [89600 2013-04-11] () HKU\S-1-5-21-1145738533-22672879-546596692-1001\...\Policies\Explorer: [TaskbarNoNotification] 0 HKU\S-1-5-21-1145738533-22672879-546596692-1001\...\Policies\Explorer: [HideSCAHealth] 0 HKU\S-1-5-21-1145738533-22672879-546596692-1001\...\MountPoints2: {1d1435dc-45ad-11e4-90ad-806e6f6e6963} - Q:\LenovoQDrive.exe HKU\S-1-5-18\...\Policies\Explorer: [TaskbarNoNotification] 0 HKU\S-1-5-18\...\Policies\Explorer: [HideSCAHealth] 0 Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files (x86)\McAfee Security Scan\3.0.285\SSScheduler.exe (McAfee, Inc.) Startup: C:\Users\Philipp\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk ShortcutTarget: Dropbox.lnk -> C:\Users\Philipp\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.) ShellIconOverlayIdentifiers: [ SkyDrive1] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => No File ShellIconOverlayIdentifiers: [ SkyDrive2] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => No File ShellIconOverlayIdentifiers: [ SkyDrive3] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => No File ShellIconOverlayIdentifiers: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Philipp\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll (Dropbox, Inc.) ShellIconOverlayIdentifiers: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Philipp\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll (Dropbox, Inc.) ShellIconOverlayIdentifiers: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Philipp\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll (Dropbox, Inc.) ShellIconOverlayIdentifiers: [DropboxExt4] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Philipp\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ SkyDrive1] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => No File ShellIconOverlayIdentifiers-x32: [ SkyDrive2] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => No File ShellIconOverlayIdentifiers-x32: [ SkyDrive3] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => No File ShellIconOverlayIdentifiers-x32: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => No File ShellIconOverlayIdentifiers-x32: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => No File ShellIconOverlayIdentifiers-x32: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => No File ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) HKCU\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://home.lenovo.com HKCU\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://home.lenovo.com StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe SearchScopes: HKLM - {398582D3-F98D-4564-9A62-DB66295FD89E} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE11TR&src=IE11TR&pc=LNJB SearchScopes: HKLM-x32 - {398582D3-F98D-4564-9A62-DB66295FD89E} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE11TR&src=IE11TR&pc=LNJB SearchScopes: HKCU - {398582D3-F98D-4564-9A62-DB66295FD89E} URL = Tcpip\Parameters: [DhcpNameServer] 192.168.0.1 FireFox: ======== FF ProfilePath: C:\Users\Philipp\AppData\Roaming\Mozilla\Firefox\Profiles\jh0rqjqg.default FF DefaultSearchEngine: Ecosia FF SelectedSearchEngine: Ecosia FF Homepage: about:home FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_15_0_0_152.dll () FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_152.dll () FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll () FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=3.5.29 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation) FF Plugin-x32: @nitropdf.com/NitroPDF -> C:\Program Files (x86)\Nitro\Pro 9\npnitromozilla.dll (Nitro PDF) FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin-x32: PDF Architect 2 -> C:\Program Files (x86)\PDF Architect 2\np-previewer.dll (pdfforge GmbH) FF SearchPlugin: C:\Users\Philipp\AppData\Roaming\Mozilla\Firefox\Profiles\jh0rqjqg.default\searchplugins\google-images.xml FF SearchPlugin: C:\Users\Philipp\AppData\Roaming\Mozilla\Firefox\Profiles\jh0rqjqg.default\searchplugins\google-maps.xml FF SearchPlugin: C:\Users\Philipp\AppData\Roaming\Mozilla\Firefox\Profiles\jh0rqjqg.default\searchplugins\ixquickde-https.xml FF SearchPlugin: C:\Users\Philipp\AppData\Roaming\Mozilla\Firefox\Profiles\jh0rqjqg.default\searchplugins\startpage-https---deutsch.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml FF Extension: Avira Browser Safety - C:\Users\Philipp\AppData\Roaming\Mozilla\Firefox\Profiles\jh0rqjqg.default\Extensions\abs@avira.com [2014-10-10] FF Extension: DoNotTrackMe: Online Privacy Protection - C:\Users\Philipp\AppData\Roaming\Mozilla\Firefox\Profiles\jh0rqjqg.default\Extensions\donottrackplus@abine.com [2014-10-11] FF Extension: organizesearchenginesmaltekrausde - C:\Users\Philipp\AppData\Roaming\Mozilla\Firefox\Profiles\jh0rqjqg.default\Extensions\organize-search-engines@maltekraus.de [2014-10-21] FF Extension: Microsoft .NET Framework Assistant - C:\Users\Philipp\AppData\Roaming\Mozilla\Firefox\Profiles\jh0rqjqg.default\Extensions\{20a82645-c095-46ed-80e3-08825760534b} [2014-10-11] FF Extension: Cliqz Beta - C:\Users\Philipp\AppData\Roaming\Mozilla\Firefox\Profiles\jh0rqjqg.default\Extensions\cliqz@cliqz.com.xpi [2014-10-12] FF Extension: Speed Dial - C:\Users\Philipp\AppData\Roaming\Mozilla\Firefox\Profiles\jh0rqjqg.default\Extensions\{64161300-e22b-11db-8314-0800200c9a66}.xpi [2014-10-11] FF Extension: Ecosia — The search engine that plants trees! - C:\Users\Philipp\AppData\Roaming\Mozilla\Firefox\Profiles\jh0rqjqg.default\Extensions\{d04b0b40-3dab-4f0b-97a6-04ec3eddbfb0}.xpi [2014-10-09] FF Extension: Adblock Plus - C:\Users\Philipp\AppData\Roaming\Mozilla\Firefox\Profiles\jh0rqjqg.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-10-09] FF Extension: Adblock Edge - C:\Users\Philipp\AppData\Roaming\Mozilla\Firefox\Profiles\jh0rqjqg.default\Extensions\{fe272bd1-5f76-4ea4-8501-a05d35d823fc}.xpi [2014-10-09] FF HKLM-x32\...\Firefox\Extensions: [{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.3.0.12\coFFPlgn FF Extension: Norton Toolbar - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.3.0.12\coFFPlgn [2014-10-30] FF HKCU\...\Firefox\Extensions: [cliqz@cliqz.com] - C:\Users\Philipp\AppData\Roaming\Mozilla\Firefox\Profiles\jh0rqjqg.default\extensions\cliqz@cliqz.com FF Extension: No Name - {2D3F3651-74B9-4795-BDEC-6DA2F431CB62} [Not Found] Chrome: ======= ==================== Services (Whitelisted) ================= (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [431920 2014-09-24] (Avira Operations GmbH & Co. KG) R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [431920 2014-09-24] (Avira Operations GmbH & Co. KG) R2 Avira.OE.ServiceHost; C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe [160560 2014-09-23] (Avira Operations GmbH & Co. KG) R2 DisplayLinkService; C:\Program Files\DisplayLink Core Software\DisplayLinkManager.exe [9954096 2014-04-01] (DisplayLink Corp.) R2 FastbootService; C:\Program Files (x86)\Lenovo\RapidBoot HDD Accelerator\FBService.exe [140016 2013-07-02] (Lenovo) R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [731648 2013-02-13] (Intel(R) Corporation) [File not signed] S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [820184 2013-02-13] (Intel(R) Corporation) R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [131544 2013-05-08] (Intel Corporation) S3 iumsvc; C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [174368 2014-02-28] () R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-05-08] (Intel Corporation) S3 Lenovo EasyPlus Hotspot; C:\Program Files (x86)\Common Files\lenovo\easyplussdk\bin\EPHotspot64.exe [533760 2014-06-03] (Lenovo) R2 LENOVO.TVTVCAM; C:\Program Files\Lenovo\Communications Utility\vcamsvc.exe [197464 2014-05-29] (Lenovo Group Limited) R2 Lenovo.VIRTSCRLSVC; C:\Program Files\LENOVO\VIRTSCRL\lvvsst.exe [136288 2012-08-11] (Lenovo Group Limited) R2 lnvDiscoveryWinSvc; C:\Program Files\Lenovo\Lenovo Peer Connect\LenovoDiscoverySvc.exe [21552 2014-02-21] (Lenovo) S3 LSCWinService; C:\Program Files\Lenovo\Lenovo Solution Center\App\LSCWinService.exe [272776 2014-09-03] () S3 McComponentHostService; C:\Program Files (x86)\McAfee Security Scan\3.0.285\McCHSvc.exe [234776 2012-09-05] (McAfee, Inc.) S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [284912 2014-01-18] () R2 NIS; C:\Program Files (x86)\Norton Internet Security\Engine\21.6.0.32\NIS.exe [276376 2014-09-21] (Symantec Corporation) R2 NitroDriverReadSpool9; C:\Program Files\Nitro\Pro 9\NitroPDFDriverService9x64.exe [230920 2014-05-16] (Nitro PDF Software) R2 NitroUpdateService; C:\Program Files\Nitro\Pro 9\Nitro_UpdateService.exe [417800 2014-05-16] () S3 PDF Architect 2; C:\Program Files (x86)\PDF Architect 2\ws.exe [1771560 2014-06-26] (pdfforge GmbH) S3 pdfforge CrashHandler; C:\Program Files (x86)\PDF Architect 2\crash-handler-ws.exe [861736 2014-06-26] (pdfforge GmbH) S2 QuickControlMasterSvc; C:\Program Files (x86)\Lenovo\QuickControl\QuickControlMasterSvc.exe [61936 2014-06-12] (Lenovo Group Limited) R3 QuickControlService; C:\Program Files (x86)\Lenovo\QuickControl\QuickControlService.exe [316400 2014-06-12] (Lenovo Group Limited) S3 SUService; C:\Program Files (x86)\Lenovo\System Update\SUService.exe [24560 2014-06-18] () R2 ValBioService; C:\Program Files\Lenovo Fingerprint Reader\ValBioService.exe [22872 2014-05-06] (Validity Sensors, Inc.) R2 valWBFPolicyService; C:\Windows\system32\valWBFPolicyService.exe [47504 2014-05-08] (Synaptics Incorporated) R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [3816176 2014-01-18] (Intel® Corporation) ==================== Drivers (Whitelisted) ==================== (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [119272 2014-09-24] (Avira Operations GmbH & Co. KG) R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131608 2014-09-24] (Avira Operations GmbH & Co. KG) R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2014-09-24] (Avira Operations GmbH & Co. KG) R1 BHDrvx64; C:\Program Files (x86)\Norton Internet Security\NortonData\21.3.0.12\Definitions\BASHDefs\20141016.001\BHDrvx64.sys [1587416 2014-10-03] (Symantec Corporation) R3 btmaux; C:\Windows\System32\DRIVERS\btmaux.sys [140600 2014-03-26] (Motorola Solutions, Inc.) R3 btmhsf; C:\Windows\System32\DRIVERS\btmhsf.sys [1423160 2014-04-19] (Motorola Solutions, Inc.) R1 ccSet_NIS; C:\Windows\system32\drivers\NISx64\1506000.020\ccSetx64.sys [162392 2014-02-21] (Symantec Corporation) S3 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [487216 2014-10-08] (Symantec Corporation) S3 EraserUtilDrv11410; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilDrv11410.sys [142640 2014-10-08] (Symantec Corporation) S3 Fastboot; C:\Windows\System32\DRIVERS\fastboot.sys [56048 2013-07-02] (Windows (R) Win 7 DDK provider) R0 iaStorF; C:\Windows\System32\DRIVERS\iaStorF.sys [28656 2013-04-30] (Intel Corporation) R3 ibtusb; C:\Windows\System32\DRIVERS\ibtusb.sys [192456 2014-05-09] (Intel Corporation) R1 IDSVia64; C:\Program Files (x86)\Norton Internet Security\NortonData\21.3.0.12\Definitions\IPSDefs\20141024.001\IDSvia64.sys [633560 2014-10-08] (Symantec Corporation) R3 MEIx64; C:\Windows\System32\DRIVERS\TeeDriverx64.sys [99800 2013-05-08] (Intel Corporation) R3 NAVENG; C:\Program Files (x86)\Norton Internet Security\NortonData\21.3.0.12\Definitions\VirusDefs\20141026.020\ENG64.SYS [129752 2014-10-08] (Symantec Corporation) R3 NAVEX15; C:\Program Files (x86)\Norton Internet Security\NortonData\21.3.0.12\Definitions\VirusDefs\20141026.020\EX64.SYS [2137304 2014-10-08] (Symantec Corporation) R3 NETwNs64; C:\Windows\System32\DRIVERS\Netwsw02.sys [3434976 2014-04-16] (Intel Corporation) R3 RTSPER; C:\Windows\System32\DRIVERS\RtsPer.sys [408136 2013-05-08] (Realsil Semiconductor Corporation) R3 SmbDrvI; C:\Windows\System32\DRIVERS\Smb_driver_Intel.sys [31472 2014-04-07] (Synaptics Incorporated) R1 SRTSP; C:\Windows\System32\Drivers\NISx64\1506000.020\SRTSP64.SYS [876248 2014-08-26] (Symantec Corporation) R1 SRTSPX; C:\Windows\system32\drivers\NISx64\1506000.020\SRTSPX64.SYS [37592 2014-08-26] (Symantec Corporation) R0 SymDS; C:\Windows\System32\drivers\NISx64\1506000.020\SYMDS64.SYS [493656 2013-10-30] (Symantec Corporation) R0 SymEFA; C:\Windows\System32\drivers\NISx64\1506000.020\SYMEFA64.SYS [1148120 2014-03-04] (Symantec Corporation) R3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [177752 2014-09-26] (Symantec Corporation) R1 SymIRON; C:\Windows\system32\drivers\NISx64\1506000.020\Ironx64.SYS [266968 2014-08-06] (Symantec Corporation) R1 SymNetS; C:\Windows\System32\Drivers\NISx64\1506000.020\SYMNETS.SYS [593112 2014-02-18] (Symantec Corporation) R3 usb3Hub; C:\Windows\System32\DRIVERS\usb3Hub.sys [206744 2013-06-21] (Windows (R) Win 7 DDK provider) R3 vm331avs; C:\Windows\System32\Drivers\vm331avs.sys [1070080 2013-12-31] (Vimicro Corporation) ==================== NetSvcs (Whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.) ==================== One Month Created Files and Folders ======== (If an entry is included in the fixlist, the file\folder will be moved.) 2014-10-30 17:12 - 2014-10-30 17:12 - 00000000 ____D () C:\Users\Philipp\Desktop\FRST-OlderVersion 2014-10-30 09:46 - 2014-09-18 03:00 - 03241472 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll 2014-10-30 09:46 - 2014-09-18 02:32 - 02363904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll 2014-10-30 09:46 - 2014-09-04 06:23 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\rastls.dll 2014-10-30 09:46 - 2014-09-04 06:04 - 00372736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rastls.dll 2014-10-30 09:45 - 2014-10-07 03:54 - 00378552 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2014-10-30 09:45 - 2014-10-07 03:04 - 00331448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2014-10-30 09:45 - 2014-09-29 01:58 - 03198976 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2014-10-30 09:45 - 2014-09-25 23:50 - 13619200 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2014-10-30 09:45 - 2014-09-25 23:46 - 00365056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2014-10-30 09:45 - 2014-09-25 23:46 - 00243200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2014-10-30 09:45 - 2014-09-25 23:46 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2014-10-30 09:45 - 2014-09-25 23:43 - 11807232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2014-10-30 09:45 - 2014-09-25 23:32 - 02017280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2014-10-30 09:45 - 2014-09-25 23:31 - 02108416 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2014-10-30 09:45 - 2014-09-19 03:25 - 23631360 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-10-30 09:45 - 2014-09-19 02:56 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-10-30 09:45 - 2014-09-19 02:55 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2014-10-30 09:45 - 2014-09-19 02:44 - 17484800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2014-10-30 09:45 - 2014-09-19 02:41 - 02796032 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2014-10-30 09:45 - 2014-09-19 02:40 - 00547328 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2014-10-30 09:45 - 2014-09-19 02:40 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2014-10-30 09:45 - 2014-09-19 02:39 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2014-10-30 09:45 - 2014-09-19 02:38 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2014-10-30 09:45 - 2014-09-19 02:36 - 05829632 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2014-10-30 09:45 - 2014-09-19 02:31 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2014-10-30 09:45 - 2014-09-19 02:30 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2014-10-30 09:45 - 2014-09-19 02:27 - 00595968 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2014-10-30 09:45 - 2014-09-19 02:26 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2014-10-30 09:45 - 2014-09-19 02:25 - 04201472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2014-10-30 09:45 - 2014-09-19 02:25 - 00758272 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2014-10-30 09:45 - 2014-09-19 02:25 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2014-10-30 09:45 - 2014-09-19 02:18 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2014-10-30 09:45 - 2014-09-19 02:14 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2014-10-30 09:45 - 2014-09-19 02:14 - 00446464 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2014-10-30 09:45 - 2014-09-19 02:06 - 00072704 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2014-10-30 09:45 - 2014-09-19 02:02 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2014-10-30 09:45 - 2014-09-19 02:01 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2014-10-30 09:45 - 2014-09-19 02:01 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2014-10-30 09:45 - 2014-09-19 02:01 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2014-10-30 09:45 - 2014-09-19 02:00 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2014-10-30 09:45 - 2014-09-19 01:59 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll 2014-10-30 09:45 - 2014-09-19 01:58 - 00289280 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2014-10-30 09:45 - 2014-09-19 01:55 - 02187264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2014-10-30 09:45 - 2014-09-19 01:54 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2014-10-30 09:45 - 2014-09-19 01:53 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2014-10-30 09:45 - 2014-09-19 01:51 - 00440320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2014-10-30 09:45 - 2014-09-19 01:50 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2014-10-30 09:45 - 2014-09-19 01:49 - 00597504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2014-10-30 09:45 - 2014-09-19 01:42 - 00731136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2014-10-30 09:45 - 2014-09-19 01:42 - 00710656 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2014-10-30 09:45 - 2014-09-19 01:40 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2014-10-30 09:45 - 2014-09-19 01:36 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2014-10-30 09:45 - 2014-09-19 01:33 - 02309632 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2014-10-30 09:45 - 2014-09-19 01:32 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2014-10-30 09:45 - 2014-09-19 01:20 - 00607744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2014-10-30 09:45 - 2014-09-19 01:18 - 01068032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2014-10-30 09:45 - 2014-09-19 01:14 - 01447936 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2014-10-30 09:45 - 2014-09-19 00:59 - 01810944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2014-10-30 09:45 - 2014-09-19 00:59 - 00775168 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2014-10-30 09:45 - 2014-09-19 00:53 - 01190400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2014-10-30 09:45 - 2014-09-19 00:52 - 00678400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2014-10-30 09:45 - 2014-07-17 03:07 - 03722240 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll 2014-10-30 09:45 - 2014-07-17 03:07 - 01118720 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe 2014-10-30 09:45 - 2014-07-17 03:07 - 00681984 _____ (Microsoft Corporation) C:\Windows\system32\termsrv.dll 2014-10-30 09:45 - 2014-07-17 03:07 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe 2014-10-30 09:45 - 2014-07-17 03:07 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\winsta.dll 2014-10-30 09:45 - 2014-07-17 03:07 - 00150528 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorekmts.dll 2014-10-30 09:45 - 2014-07-17 03:07 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll 2014-10-30 09:45 - 2014-07-17 03:07 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll 2014-10-30 09:45 - 2014-07-17 02:40 - 00157696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winsta.dll 2014-10-30 09:45 - 2014-07-17 02:39 - 03221504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll 2014-10-30 09:45 - 2014-07-17 02:39 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstsc.exe 2014-10-30 09:45 - 2014-07-17 02:39 - 00131584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aaclient.dll 2014-10-30 09:45 - 2014-07-17 02:39 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll 2014-10-30 09:45 - 2014-07-17 02:39 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll 2014-10-30 09:45 - 2014-07-17 02:21 - 00212480 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpwd.sys 2014-10-30 09:45 - 2014-07-17 02:21 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys 2014-10-30 09:45 - 2014-07-09 03:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDYAK.DLL 2014-10-30 09:45 - 2014-07-09 03:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDTAT.DLL 2014-10-30 09:45 - 2014-07-09 03:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU1.DLL 2014-10-30 09:45 - 2014-07-09 03:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDBASH.DLL 2014-10-30 09:45 - 2014-07-09 03:03 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU.DLL 2014-10-30 09:45 - 2014-07-09 02:31 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDYAK.DLL 2014-10-30 09:45 - 2014-07-09 02:31 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDTAT.DLL 2014-10-30 09:45 - 2014-07-09 02:31 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDRU1.DLL 2014-10-30 09:45 - 2014-07-09 02:31 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDRU.DLL 2014-10-30 09:45 - 2014-07-09 02:31 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDBASH.DLL 2014-10-30 09:45 - 2014-07-08 23:38 - 00419992 _____ () C:\Windows\system32\locale.nls 2014-10-30 09:45 - 2014-07-08 23:30 - 00419992 _____ () C:\Windows\SysWOW64\locale.nls 2014-10-30 09:45 - 2014-06-18 23:23 - 01943696 _____ (Microsoft Corporation) C:\Windows\system32\dfshim.dll 2014-10-30 09:45 - 2014-06-18 23:23 - 01131664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dfshim.dll 2014-10-30 09:45 - 2014-06-18 23:23 - 00156824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mscorier.dll 2014-10-30 09:45 - 2014-06-18 23:23 - 00156312 _____ (Microsoft Corporation) C:\Windows\system32\mscorier.dll 2014-10-30 09:45 - 2014-06-18 23:23 - 00081560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mscories.dll 2014-10-30 09:45 - 2014-06-18 23:23 - 00073880 _____ (Microsoft Corporation) C:\Windows\system32\mscories.dll 2014-10-30 09:44 - 2014-10-10 03:05 - 00507392 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll 2014-10-30 09:44 - 2014-10-10 03:05 - 00276480 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll 2014-10-30 09:44 - 2014-10-10 03:00 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll 2014-10-30 09:41 - 2014-09-13 02:58 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll 2014-10-30 09:41 - 2014-09-13 02:40 - 00067072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\packager.dll 2014-10-30 09:25 - 2014-10-30 09:50 - 00000000 ____D () C:\Windows\system32\MRT 2014-10-30 09:25 - 2014-10-30 09:46 - 103265616 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2014-10-30 09:18 - 2014-10-30 09:18 - 00006176 _____ () C:\Users\Philipp\Downloads\wuauserv.reg 2014-10-30 09:18 - 2014-10-30 09:18 - 00006176 _____ () C:\Users\Philipp\Desktop\wuauserv.reg 2014-10-28 17:32 - 2014-10-28 17:32 - 00003619 _____ () C:\Users\Philipp\Downloads\FSS.txt 2014-10-28 17:31 - 2014-10-28 17:31 - 00415232 _____ (Farbar) C:\Users\Philipp\Downloads\FSS.exe 2014-10-27 16:34 - 2014-10-27 16:34 - 00001166 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk 2014-10-27 16:34 - 2014-10-27 16:34 - 00001154 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk 2014-10-27 16:34 - 2014-10-27 16:34 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service 2014-10-27 16:33 - 2014-10-27 16:34 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox 2014-10-24 15:59 - 2014-10-24 16:01 - 00033133 _____ () C:\Users\Philipp\Desktop\Addition.txt 2014-10-24 15:56 - 2014-10-30 17:14 - 00024416 _____ () C:\Users\Philipp\Desktop\FRST.txt 2014-10-23 22:26 - 2014-10-24 16:06 - 00003718 _____ () C:\Windows\System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473 2014-10-23 22:26 - 2014-10-23 22:26 - 00003476 _____ () C:\Windows\System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473-Logon 2014-10-23 22:26 - 2014-10-23 22:26 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel 2014-10-23 22:25 - 2014-10-23 22:25 - 00347816 _____ (Microsoft Corporation) C:\Users\Philipp\Downloads\MicrosoftFixit.WindowsFirewall.RNP.19933753030992675.1.1.Run.exe 2014-10-23 22:10 - 2014-10-23 22:10 - 00002173 _____ () C:\Users\Public\Desktop\McAfee Security Scan Plus.lnk 2014-10-23 22:10 - 2014-10-23 22:10 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee Security Scan Plus 2014-10-23 22:10 - 2014-10-23 22:10 - 00000000 ____D () C:\ProgramData\McAfee Security Scan 2014-10-23 22:10 - 2014-10-23 22:10 - 00000000 ____D () C:\ProgramData\McAfee 2014-10-23 22:10 - 2014-10-23 22:10 - 00000000 ____D () C:\Program Files (x86)\McAfee Security Scan 2014-10-23 22:09 - 2014-10-23 22:09 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk 2014-10-23 22:09 - 2014-10-23 22:09 - 00002030 _____ () C:\Users\Public\Desktop\Adobe Reader XI.lnk 2014-10-23 21:51 - 2014-10-23 21:51 - 00244408 _____ () C:\Users\Philipp\Downloads\Firefox Setup Stub 33.0.exe 2014-10-23 15:54 - 2014-10-23 15:54 - 00854448 _____ () C:\Users\Philipp\Downloads\SecurityCheck.exe 2014-10-21 20:15 - 2014-10-21 20:15 - 02347384 _____ (ESET) C:\Users\Philipp\Downloads\esetsmartinstaller_deu.exe 2014-10-21 20:12 - 2014-10-21 20:12 - 00001929 _____ () C:\Users\Philipp\Desktop\mbam.txt 2014-10-21 20:04 - 2014-10-21 20:04 - 00001937 _____ () C:\Users\Philipp\Desktop\malwarebytes.txt 2014-10-21 19:46 - 2014-10-21 20:10 - 00129752 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2014-10-21 19:46 - 2014-10-21 19:46 - 00001109 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2014-10-21 19:46 - 2014-10-21 19:46 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 2014-10-21 19:46 - 2014-10-21 19:46 - 00000000 ____D () C:\ProgramData\Malwarebytes 2014-10-21 19:46 - 2014-10-21 19:46 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 2014-10-21 19:46 - 2014-10-01 10:11 - 00093400 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys 2014-10-21 19:46 - 2014-10-01 10:11 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys 2014-10-21 19:46 - 2014-10-01 10:11 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys 2014-10-21 19:43 - 2014-10-21 19:44 - 19828376 _____ (Malwarebytes Corporation ) C:\Users\Philipp\Downloads\mbam-setup-2.0.3.1025.exe 2014-10-21 19:36 - 2014-10-21 19:36 - 00448512 _____ (OldTimer Tools) C:\Users\Philipp\Downloads\TFC.exe 2014-10-21 19:23 - 2014-10-23 15:45 - 00000000 ____D () C:\Users\Philipp\Downloads\FRST-OlderVersion 2014-10-21 18:29 - 2014-10-21 18:29 - 00001912 _____ () C:\Users\Philipp\Desktop\JRT.txt 2014-10-21 18:27 - 2014-10-21 18:27 - 00000000 ____D () C:\Windows\ERUNT 2014-10-21 18:15 - 2014-10-21 18:15 - 01705698 _____ (Thisisu) C:\Users\Philipp\Downloads\JRT.exe 2014-10-21 18:10 - 2014-10-21 18:19 - 00000000 ____D () C:\AdwCleaner 2014-10-21 18:09 - 2014-10-21 18:09 - 01962496 _____ () C:\Users\Philipp\Downloads\AdwCleaner_4.001.exe 2014-10-21 18:09 - 2014-10-21 18:08 - 00043064 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys 2014-10-12 19:05 - 2014-10-12 19:05 - 00030128 _____ () C:\Users\Philipp\Downloads\logfiles.7z 2014-10-12 19:04 - 2014-10-12 19:05 - 00030128 _____ () C:\Users\Philipp\Downloads\Downloads.7z 2014-10-12 19:03 - 2014-10-12 19:03 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip 2014-10-12 19:03 - 2014-10-12 19:03 - 00000000 ____D () C:\Program Files (x86)\7-Zip 2014-10-12 18:23 - 2014-10-12 18:23 - 01098088 _____ () C:\Windows\Minidump\101214-25131-01.dmp 2014-10-12 18:23 - 2014-10-12 18:23 - 00000000 ____D () C:\Windows\Minidump 2014-10-12 18:22 - 2014-10-12 18:22 - 787588699 _____ () C:\Windows\MEMORY.DMP 2014-10-12 17:54 - 2014-10-12 17:54 - 00057539 _____ () C:\Users\Philipp\Downloads\gmer.log 2014-10-12 17:38 - 2014-10-12 17:38 - 00380416 _____ () C:\Users\Philipp\Downloads\Gmer-19357.exe 2014-10-12 17:34 - 2014-10-12 17:35 - 00037232 _____ () C:\Users\Philipp\Downloads\Addition.txt 2014-10-12 17:32 - 2014-10-30 17:13 - 00000000 ____D () C:\FRST 2014-10-12 17:32 - 2014-10-21 21:31 - 00126756 _____ () C:\Users\Philipp\Downloads\FRST.txt 2014-10-12 17:29 - 2014-10-30 17:12 - 02113536 _____ (Farbar) C:\Users\Philipp\Desktop\FRST64.exe 2014-10-12 17:29 - 2014-10-12 17:29 - 00000476 _____ () C:\Users\Philipp\Downloads\defogger_disable.log 2014-10-12 17:29 - 2014-10-12 17:29 - 00000000 _____ () C:\Users\Philipp\defogger_reenable 2014-10-12 17:28 - 2014-10-12 17:28 - 00050477 _____ () C:\Users\Philipp\Downloads\Defogger.exe 2014-10-11 17:12 - 2014-10-11 16:53 - 00000825 _____ () C:\Users\Philipp\Documents\indexfile.txt 2014-10-11 17:07 - 2014-10-11 17:07 - 00001034 _____ () C:\Users\Public\Desktop\MozBackup.lnk 2014-10-11 17:07 - 2014-10-11 17:07 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MozBackup 2014-10-11 17:07 - 2014-10-11 17:07 - 00000000 ____D () C:\Program Files (x86)\MozBackup 2014-10-11 17:05 - 2014-10-11 17:05 - 01125200 _____ () C:\Users\Philipp\Downloads\MozBackup - CHIP-Installer.exe 2014-10-11 16:57 - 2014-10-11 16:57 - 01055936 _____ (Adobe) C:\Users\Philipp\Downloads\install_flashplayer15x32_mssa_aaa_aih.exe 2014-10-11 16:40 - 2014-10-21 18:06 - 00000000 ____D () C:\Users\Philipp\AppData\Roaming\Avaxv 2014-10-11 16:40 - 2014-10-13 16:04 - 00000000 ____D () C:\Users\Philipp\AppData\Roaming\Malaon 2014-10-11 16:38 - 2014-10-12 19:08 - 00000000 ____D () C:\Users\Philipp\AppData\Local\Deployment 2014-10-11 16:38 - 2014-10-11 16:38 - 00000000 ____D () C:\Users\Philipp\AppData\Local\Apps\2.0 2014-10-10 09:42 - 2014-10-30 09:55 - 00000000 ___SD () C:\Windows\system32\CompatTel 2014-10-10 09:02 - 2010-02-23 09:16 - 00294912 _____ (Microsoft Corporation) C:\Windows\system32\browserchoice.exe 2014-10-10 08:46 - 2014-10-10 08:46 - 00000000 ____D () C:\Users\Philipp\AppData\Roaming\Avira 2014-10-10 08:41 - 2014-10-28 18:52 - 00000000 ____D () C:\Users\Philipp\AppData\Local\CrashDumps 2014-10-10 08:40 - 2014-06-27 03:08 - 02777088 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll 2014-10-10 08:40 - 2014-06-27 02:45 - 02285056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll 2014-10-10 08:38 - 2014-09-24 11:44 - 00131608 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys 2014-10-10 08:38 - 2014-09-24 11:44 - 00119272 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys 2014-10-10 08:38 - 2014-09-24 11:44 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys 2014-10-10 08:34 - 2014-10-10 08:40 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira 2014-10-10 08:34 - 2014-10-10 08:38 - 00000000 ____D () C:\ProgramData\Avira 2014-10-10 08:34 - 2014-10-10 08:38 - 00000000 ____D () C:\Program Files (x86)\Avira 2014-10-10 08:34 - 2014-10-10 08:34 - 00001148 _____ () C:\Users\Public\Desktop\Avira.lnk 2014-10-10 08:33 - 2014-10-10 08:33 - 04714656 _____ (Avira Operations GmbH & Co. KG) C:\Users\Philipp\Downloads\avira_de_av_4464542853__ws.exe 2014-10-10 08:28 - 2014-10-23 15:48 - 00000008 __RSH () C:\ProgramData\ntuser.pol 2014-10-10 08:28 - 2014-10-10 08:28 - 00056504 _____ (Corsica) C:\Windows\system32\Drivers\webinstrNew.sys 2014-10-10 08:28 - 2014-10-10 08:28 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_webinstrNew_01009.Wdf 2014-10-10 08:28 - 2014-10-10 08:28 - 00000000 ____D () C:\Windows\System32\Tasks\Norton Internet Security 2014-10-10 08:27 - 2014-06-30 23:24 - 00008856 _____ (Microsoft Corporation) C:\Windows\system32\icardres.dll 2014-10-10 08:27 - 2014-06-30 23:14 - 00008856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardres.dll 2014-10-10 08:27 - 2014-06-06 07:16 - 00035480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TsWpfWrp.exe 2014-10-10 08:27 - 2014-06-06 07:12 - 00035480 _____ (Microsoft Corporation) C:\Windows\system32\TsWpfWrp.exe 2014-10-10 08:27 - 2014-03-09 22:48 - 01389208 _____ (Microsoft Corporation) C:\Windows\system32\icardagt.exe 2014-10-10 08:27 - 2014-03-09 22:48 - 00171160 _____ (Microsoft Corporation) C:\Windows\system32\infocardapi.dll 2014-10-10 08:27 - 2014-03-09 22:47 - 00619672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardagt.exe 2014-10-10 08:27 - 2014-03-09 22:47 - 00099480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\infocardapi.dll 2014-10-09 19:55 - 2014-10-09 19:55 - 00000000 ____D () C:\Windows\SysWOW64\Flash 2014-10-09 19:54 - 2014-10-09 19:54 - 00000000 ____D () C:\Users\Philipp\AppData\Roaming\ap_movie 2014-10-09 19:47 - 2014-10-09 19:47 - 00000000 ____D () C:\ProgramData\Xunlei 2014-10-09 19:47 - 2014-10-09 19:47 - 00000000 ____D () C:\ProgramData\Thunder Network 2014-10-09 19:45 - 2014-10-09 19:45 - 00000000 ____D () C:\Users\Philipp\Documents\PDF Architect 2 2014-10-09 19:45 - 2014-10-09 19:45 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDF Architect 2 2014-10-09 19:45 - 2014-10-09 19:45 - 00000000 ____D () C:\Program Files (x86)\PDF Architect 2 2014-10-09 19:44 - 2014-10-09 19:46 - 00000000 ____D () C:\Program Files (x86)\PDFCreator 2014-10-09 19:44 - 2014-10-09 19:44 - 00000000 ____D () C:\ProgramData\PDF Architect 2 2014-10-09 19:44 - 2014-10-09 19:44 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDFCreator 2014-10-09 19:44 - 2014-09-23 08:43 - 01070152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSCOMCTL.OCX 2014-10-09 19:44 - 2014-09-23 08:43 - 00662288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSCOMCT2.OCX 2014-10-09 19:44 - 2014-09-23 08:43 - 00137000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSMAPI32.OCX 2014-10-09 19:44 - 2014-09-23 08:43 - 00110264 _____ (pdfforge GmbH) C:\Windows\system32\pdfcmon.dll 2014-10-09 19:44 - 2014-09-23 08:43 - 00023552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSMPIDE.DLL 2014-10-09 19:44 - 1998-07-06 17:56 - 00125712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\VB6DE.DLL 2014-10-09 19:44 - 1998-07-06 17:55 - 00158208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSCMCDE.DLL 2014-10-09 19:44 - 1998-07-06 17:55 - 00064512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSCC2DE.DLL 2014-10-09 19:39 - 2014-10-30 17:08 - 00000000 ____D () C:\Users\Philipp\AppData\Roaming\Dropbox 2014-10-09 19:39 - 2014-10-09 19:39 - 00000000 ____D () C:\Users\Philipp\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox 2014-10-09 19:38 - 2014-10-10 08:25 - 00000000 ____D () C:\Users\Philipp\AppData\Roaming\BatteryBar 2014-10-09 19:38 - 2014-10-09 19:38 - 00000000 ____D () C:\Program Files\BatteryBar 2014-10-09 19:37 - 2014-10-09 19:37 - 00000000 ____D () C:\Users\Philipp\Downloads\Freeware_Starter_Kit_fuer_Ihr_Notebook_2014 2014-10-09 19:37 - 2014-10-09 19:37 - 00000000 ____D () C:\Users\Philipp\AppData\Local\Macromedia 2014-10-09 19:36 - 2014-10-30 09:42 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job 2014-10-09 19:36 - 2014-10-11 17:03 - 00701104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2014-10-09 19:36 - 2014-10-11 17:03 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2014-10-09 19:36 - 2014-10-11 17:03 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater 2014-10-09 19:36 - 2014-10-10 08:45 - 00000000 ____D () C:\Program Files (x86)\Google 2014-10-09 19:36 - 2014-10-10 08:38 - 00000000 ____D () C:\Users\Philipp\AppData\Local\Google 2014-10-09 19:36 - 2014-10-09 19:36 - 00000000 ____D () C:\Windows\SysWOW64\Macromed 2014-10-09 19:35 - 2014-10-23 22:12 - 00000000 ____D () C:\Users\Philipp\AppData\Local\Adobe 2014-10-09 19:35 - 2014-10-09 19:35 - 00000000 ____D () C:\Windows\system32\Macromed 2014-10-09 19:32 - 2014-10-09 19:32 - 00000000 _____ () C:\Users\Philipp\Downloads\FileOpenerSetup.exe 2014-10-09 19:27 - 2014-10-09 19:28 - 00000000 ____D () C:\Users\Philipp\AppData\Roaming\Apple Computer 2014-10-09 19:27 - 2014-10-09 19:27 - 00001794 _____ () C:\Users\Public\Desktop\iTunes.lnk 2014-10-09 19:27 - 2014-10-09 19:27 - 00000000 ____D () C:\Users\Philipp\AppData\Local\Apple Computer 2014-10-09 19:27 - 2014-10-09 19:27 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes 2014-10-09 19:27 - 2012-08-21 12:01 - 00033240 _____ (GEAR Software Inc.) C:\Windows\system32\Drivers\GEARAspiWDM.sys 2014-10-09 19:26 - 2014-10-09 19:27 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69 2014-10-09 19:26 - 2014-10-09 19:27 - 00000000 ____D () C:\Program Files\iTunes 2014-10-09 19:26 - 2014-10-09 19:27 - 00000000 ____D () C:\Program Files (x86)\iTunes 2014-10-09 19:26 - 2014-10-09 19:26 - 00000000 ____D () C:\ProgramData\Apple Computer 2014-10-09 19:26 - 2014-10-09 19:26 - 00000000 ____D () C:\Program Files\iPod 2014-10-09 19:24 - 2014-10-09 19:24 - 00002519 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk 2014-10-09 19:24 - 2014-10-09 19:24 - 00000000 ____D () C:\Windows\System32\Tasks\Apple 2014-10-09 19:24 - 2014-10-09 19:24 - 00000000 ____D () C:\Users\Philipp\AppData\Local\Apple 2014-10-09 19:24 - 2014-10-09 19:24 - 00000000 ____D () C:\ProgramData\Apple 2014-10-09 19:24 - 2014-10-09 19:24 - 00000000 ____D () C:\Program Files\Common Files\Apple 2014-10-09 19:24 - 2014-10-09 19:24 - 00000000 ____D () C:\Program Files\Bonjour 2014-10-09 19:24 - 2014-10-09 19:24 - 00000000 ____D () C:\Program Files (x86)\Bonjour 2014-10-09 19:24 - 2014-10-09 19:24 - 00000000 ____D () C:\Program Files (x86)\Apple Software Update 2014-10-09 19:23 - 2014-10-09 19:24 - 00000000 ____D () C:\Users\Philipp\AppData\Local\Abelssoft 2014-10-09 19:23 - 2014-10-09 19:23 - 00000000 ____D () C:\Windows\System32\Tasks\Abelssoft 2014-10-09 19:23 - 2014-10-09 19:23 - 00000000 ____D () C:\Users\Philipp\AppData\Roaming\Abelssoft 2014-10-09 19:23 - 2014-10-09 19:23 - 00000000 ____D () C:\ProgramData\XDMessagingv4 2014-10-09 19:23 - 2014-10-09 19:23 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CHIP Updater 2014-10-09 19:23 - 2014-10-09 19:23 - 00000000 ____D () C:\Program Files (x86)\CHIP Updater 2014-10-09 19:23 - 2011-05-13 11:16 - 00493056 _____ ( datenhaus GmbH) C:\Windows\SysWOW64\dhRichClient3.dll 2014-10-09 19:23 - 2011-03-25 19:42 - 00338432 _____ () C:\Windows\SysWOW64\sqlite36_engine.dll 2014-10-09 19:21 - 2014-10-09 19:22 - 80521624 _____ (Apple Inc.) C:\Users\Philipp\Downloads\iTunes64Setup.exe 2014-10-09 19:18 - 2011-04-09 07:58 - 00142336 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe 2014-10-09 19:18 - 2011-04-09 06:56 - 00123904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\poqexec.exe 2014-10-09 19:14 - 2014-10-09 19:14 - 111992144 _____ (Apple Inc.) C:\Users\Philipp\Desktop\iTunesSetup.exe 2014-10-09 19:13 - 2014-10-09 19:13 - 01125200 _____ () C:\Users\Philipp\Downloads\CHIP Online Notebook Starter Kit 2014 - CHIP-Installer.exe 2014-10-09 19:11 - 2014-08-01 12:53 - 01031168 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll 2014-10-09 19:11 - 2014-08-01 12:35 - 00793600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSWorkspace.dll 2014-10-09 19:11 - 2014-04-25 03:34 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll 2014-10-09 19:11 - 2014-04-25 03:06 - 00626688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usp10.dll 2014-10-09 19:11 - 2014-04-05 03:47 - 01903552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys 2014-10-09 19:11 - 2014-04-05 03:47 - 00288192 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS 2014-10-09 19:11 - 2011-11-17 07:35 - 00395776 _____ (Microsoft Corporation) C:\Windows\system32\webio.dll 2014-10-09 19:11 - 2011-11-17 06:35 - 00314880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webio.dll 2014-10-09 19:10 - 2014-06-24 04:29 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll 2014-10-09 19:10 - 2014-06-24 03:59 - 01987584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll 2014-10-09 19:10 - 2014-06-18 03:18 - 00692736 _____ (Microsoft Corporation) C:\Windows\system32\osk.exe 2014-10-09 19:10 - 2014-06-18 02:51 - 00646144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\osk.exe 2014-10-09 19:10 - 2014-06-06 11:10 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll 2014-10-09 19:10 - 2014-06-06 10:44 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll 2014-10-09 19:10 - 2014-06-03 11:02 - 01941504 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll 2014-10-09 19:10 - 2014-06-03 11:02 - 00504320 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll 2014-10-09 19:10 - 2014-06-03 11:02 - 00112064 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe 2014-10-09 19:10 - 2014-06-03 10:29 - 01805824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll 2014-10-09 19:10 - 2014-06-03 10:29 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msihnd.dll 2014-10-09 19:10 - 2014-05-30 07:45 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys 2014-10-09 19:10 - 2014-03-26 15:44 - 02002432 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll 2014-10-09 19:10 - 2014-03-26 15:44 - 01882112 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll 2014-10-09 19:10 - 2014-03-26 15:41 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml6r.dll 2014-10-09 19:10 - 2014-03-26 15:41 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll 2014-10-09 19:10 - 2014-03-26 15:27 - 01389056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll 2014-10-09 19:10 - 2014-03-26 15:27 - 01237504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll 2014-10-09 19:10 - 2014-03-26 15:25 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6r.dll 2014-10-09 19:10 - 2014-03-26 15:25 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll 2014-10-09 19:09 - 2014-09-25 03:08 - 00371712 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll 2014-10-09 19:09 - 2014-09-25 02:40 - 00519680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qdvd.dll 2014-10-09 19:09 - 2014-06-16 03:10 - 00985536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys 2014-10-09 19:09 - 2014-05-30 09:08 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll 2014-10-09 19:09 - 2014-05-30 09:08 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll 2014-10-09 19:09 - 2014-05-30 09:08 - 00307200 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll 2014-10-09 19:09 - 2014-05-30 09:08 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll 2014-10-09 19:09 - 2014-05-30 08:52 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll 2014-10-09 19:09 - 2014-05-30 08:52 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll 2014-10-09 19:09 - 2014-05-30 08:52 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll 2014-10-09 19:09 - 2014-05-30 08:52 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll 2014-10-09 19:08 - 2014-09-09 23:11 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll 2014-10-09 19:08 - 2014-09-09 22:47 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll 2014-10-09 19:07 - 2014-06-25 03:05 - 14175744 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll 2014-10-09 19:07 - 2014-06-25 02:41 - 12874240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll 2014-10-09 19:07 - 2013-07-20 11:33 - 00124112 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll 2014-10-09 19:07 - 2013-07-20 11:33 - 00102608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll 2014-10-09 19:06 - 2014-07-07 03:06 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll 2014-10-09 19:06 - 2014-07-07 03:06 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll 2014-10-09 19:06 - 2014-07-07 02:40 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll 2014-10-09 19:06 - 2014-07-07 02:40 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll 2014-10-09 19:06 - 2014-07-07 02:39 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll 2014-10-09 19:03 - 2014-08-23 03:07 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll 2014-10-09 19:03 - 2014-08-23 02:45 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll 2014-10-09 19:03 - 2011-02-23 05:55 - 00090624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bowser.sys 2014-10-09 19:02 - 2014-07-14 03:02 - 01216000 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll 2014-10-09 19:02 - 2014-07-14 02:40 - 00664064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll 2014-10-09 18:58 - 2014-10-09 18:59 - 00000000 ____D () C:\Users\Philipp\AppData\Roaming\Mozilla 2014-10-09 18:58 - 2014-10-09 18:59 - 00000000 ____D () C:\Users\Philipp\AppData\Local\Mozilla 2014-10-09 18:58 - 2014-10-09 18:58 - 00000000 ____D () C:\ProgramData\Mozilla 2014-10-09 18:57 - 2014-10-09 18:57 - 35095808 _____ () C:\Users\Philipp\Downloads\Firefox_Setup_de32.0.3.exe 2014-10-09 18:57 - 2014-10-09 18:57 - 35095808 _____ () C:\Users\Philipp\Downloads\Firefox_Setup_de32.0.3 (1).exe 2014-10-09 18:55 - 2014-10-10 08:37 - 00000000 ____D () C:\Users\Philipp\AppData\Roaming\Opera Software 2014-10-09 18:55 - 2014-10-10 08:37 - 00000000 ____D () C:\Users\Philipp\AppData\Local\Opera Software 2014-10-09 18:55 - 2014-10-10 08:37 - 00000000 ____D () C:\Program Files (x86)\Opera 2014-10-09 18:54 - 2014-10-09 18:55 - 30503712 _____ (Opera Software ASA) C:\Users\Philipp\Downloads\Opera_24.0.1558.64_Setup.exe 2014-10-09 18:52 - 2014-10-09 18:52 - 00000000 ____D () C:\Users\Philipp\AppData\Local\IsolatedStorage 2014-10-09 18:51 - 2014-10-09 18:51 - 00000000 ____D () C:\Users\Philipp\AppData\Local\GestureControl 2014-10-09 17:23 - 2014-10-09 17:23 - 00000000 ____D () C:\Users\Philipp\AppData\Roaming\LSC 2014-10-09 08:30 - 2014-10-30 10:17 - 00291210 _____ () C:\Users\Public\CAFADEBUG.log 2014-10-08 17:17 - 2014-10-08 17:17 - 00000000 ____D () C:\Users\Philipp\AppData\Roaming\PwrMgr 2014-10-08 17:07 - 2012-02-17 07:38 - 01031680 _____ (Microsoft Corporation) C:\Windows\system32\rdpcore.dll 2014-10-08 17:07 - 2012-02-17 06:34 - 00826880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpcore.dll 2014-10-08 17:07 - 2012-02-17 05:57 - 00023552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdtcp.sys 2014-10-08 16:50 - 2014-10-08 16:50 - 00002002 _____ () C:\Users\Public\Desktop\Lenovo Solution Center.lnk 2014-10-08 16:50 - 2014-10-08 16:50 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_ldiagio_uefi_01009.Wdf 2014-10-08 16:02 - 2014-10-09 19:27 - 00060056 _____ () C:\Users\Philipp\AppData\Local\GDIPFONTCACHEV1.DAT 2014-10-08 16:02 - 2014-10-08 16:50 - 00000000 ____D () C:\Users\Philipp\AppData\Local\Lenovo 2014-10-08 16:01 - 2014-10-21 18:19 - 00001010 _____ () C:\Users\Philipp\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2014-10-08 16:01 - 2014-10-08 16:01 - 00000000 ____D () C:\Users\Philipp\Documents\Meine empfangenen Dateien 2014-10-08 16:01 - 2014-10-08 16:01 - 00000000 ____D () C:\Users\Philipp\AppData\Roaming\Leadertech 2014-10-08 16:01 - 2014-10-08 16:01 - 00000000 ____D () C:\Users\Philipp\AppData\Roaming\Adobe 2014-10-08 16:01 - 2014-10-08 16:01 - 00000000 ____D () C:\Users\Philipp\AppData\Local\VirtualStore 2014-10-08 16:01 - 2014-10-08 16:01 - 00000000 ____D () C:\Users\Philipp\AppData\Local\Downloaded Installations 2014-10-08 16:00 - 2014-10-12 17:29 - 00000000 ____D () C:\Users\Philipp 2014-10-08 16:00 - 2014-10-08 16:00 - 00000895 _____ () C:\Users\Public\Desktop\Installieren Sie Ihre zusõtzlichen Anwendungen.lnk 2014-10-08 16:00 - 2014-10-08 16:00 - 00000020 ___SH () C:\Users\Philipp\ntuser.ini 2014-10-08 16:00 - 2014-10-08 16:00 - 00000010 _____ () C:\Windows\getvol.scp 2014-10-08 16:00 - 2014-10-08 16:00 - 00000000 _SHDL () C:\Users\Philipp\Vorlagen 2014-10-08 16:00 - 2014-10-08 16:00 - 00000000 _SHDL () C:\Users\Philipp\Startmenü 2014-10-08 16:00 - 2014-10-08 16:00 - 00000000 _SHDL () C:\Users\Philipp\Netzwerkumgebung 2014-10-08 16:00 - 2014-10-08 16:00 - 00000000 _SHDL () C:\Users\Philipp\Lokale Einstellungen 2014-10-08 16:00 - 2014-10-08 16:00 - 00000000 _SHDL () C:\Users\Philipp\Eigene Dateien 2014-10-08 16:00 - 2014-10-08 16:00 - 00000000 _SHDL () C:\Users\Philipp\Druckumgebung 2014-10-08 16:00 - 2014-10-08 16:00 - 00000000 _SHDL () C:\Users\Philipp\Documents\Eigene Musik 2014-10-08 16:00 - 2014-10-08 16:00 - 00000000 _SHDL () C:\Users\Philipp\Documents\Eigene Bilder 2014-10-08 16:00 - 2014-10-08 16:00 - 00000000 _SHDL () C:\Users\Philipp\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2014-10-08 16:00 - 2014-10-08 16:00 - 00000000 _SHDL () C:\Users\Philipp\AppData\Local\Verlauf 2014-10-08 16:00 - 2014-10-08 16:00 - 00000000 _SHDL () C:\Users\Philipp\AppData\Local\Anwendungsdaten 2014-10-08 16:00 - 2014-10-08 16:00 - 00000000 _SHDL () C:\Users\Philipp\Anwendungsdaten 2014-10-08 16:00 - 2014-10-08 16:00 - 00000000 ____D () C:\Users\Philipp\AppData\Roaming\Intel 2014-10-08 16:00 - 2014-10-08 16:00 - 00000000 _____ () C:\Windows\firstboot.dat 2014-10-08 16:00 - 2014-09-26 20:16 - 00002107 _____ () C:\Users\Philipp\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft OneDrive.lnk 2014-10-08 16:00 - 2014-09-26 20:12 - 00000000 ____D () C:\Users\Philipp\AppData\Roaming\Macromedia 2014-10-08 16:00 - 2009-08-25 04:18 - 01067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc71.dll 2014-10-08 16:00 - 2009-07-14 05:54 - 00000000 ___RD () C:\Users\Philipp\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories 2014-10-08 16:00 - 2009-07-14 05:49 - 00000000 ___RD () C:\Users\Philipp\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance 2014-10-08 15:07 - 2014-10-08 15:07 - 00000000 __SHD () C:\Users\Philipp\AppData\Local\EmieUserList 2014-10-08 15:07 - 2014-10-08 15:07 - 00000000 __SHD () C:\Users\Philipp\AppData\Local\EmieSiteList 2014-10-08 15:04 - 2014-05-14 17:23 - 02477536 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll 2014-10-08 15:04 - 2014-05-14 17:23 - 00700384 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll 2014-10-08 15:04 - 2014-05-14 17:23 - 00581600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll 2014-10-08 15:04 - 2014-05-14 17:23 - 00058336 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe 2014-10-08 15:04 - 2014-05-14 17:23 - 00044512 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll 2014-10-08 15:04 - 2014-05-14 17:23 - 00038880 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll 2014-10-08 15:04 - 2014-05-14 17:23 - 00036320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll 2014-10-08 15:04 - 2014-05-14 17:21 - 02620928 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll 2014-10-08 15:04 - 2014-05-14 17:20 - 00097792 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll 2014-10-08 15:04 - 2014-05-14 17:17 - 00092672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll 2014-10-08 15:04 - 2014-05-14 08:23 - 00198600 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll 2014-10-08 15:04 - 2014-05-14 08:23 - 00179656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll 2014-10-08 15:04 - 2014-05-14 08:20 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe 2014-10-08 15:04 - 2014-05-14 08:17 - 00033792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe Code:
ATTFilter ==================== One Month Modified Files and Folders ======= (If an entry is included in the fixlist, the file\folder will be moved.) 2014-10-30 17:13 - 2014-09-26 19:14 - 00735300 _____ () C:\Windows\system32\perfh013.dat 2014-10-30 17:13 - 2014-09-26 19:14 - 00152968 _____ () C:\Windows\system32\perfc013.dat 2014-10-30 17:13 - 2014-09-26 19:09 - 00731848 _____ () C:\Windows\system32\perfh010.dat 2014-10-30 17:13 - 2014-09-26 19:09 - 00146712 _____ () C:\Windows\system32\perfc010.dat 2014-10-30 17:13 - 2014-09-26 19:03 - 00737518 _____ () C:\Windows\system32\perfh00C.dat 2014-10-30 17:13 - 2014-09-26 19:03 - 00149446 _____ () C:\Windows\system32\perfc00C.dat 2014-10-30 17:13 - 2014-09-26 18:58 - 00699340 _____ () C:\Windows\system32\perfh007.dat 2014-10-30 17:13 - 2014-09-26 18:58 - 00149448 _____ () C:\Windows\system32\perfc007.dat 2014-10-30 17:13 - 2009-07-14 06:13 - 04271558 _____ () C:\Windows\system32\PerfStringBackup.INI 2014-10-30 17:11 - 2014-09-26 19:48 - 01441578 _____ () C:\Windows\WindowsUpdate.log 2014-10-30 17:06 - 2014-09-26 20:13 - 00000000 ____D () C:\ProgramData\Validity 2014-10-30 17:06 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2014-10-30 17:06 - 2009-07-14 05:51 - 00049601 _____ () C:\Windows\setupact.log 2014-10-30 10:15 - 2009-07-14 05:45 - 00031904 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-10-30 10:15 - 2009-07-14 05:45 - 00031904 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-10-30 09:57 - 2009-07-14 05:45 - 00271440 _____ () C:\Windows\system32\FNTCACHE.DAT 2014-10-27 16:30 - 2010-11-21 04:47 - 00147800 _____ () C:\Windows\PFRO.log 2014-10-26 21:34 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\NDF 2014-10-23 22:21 - 2014-09-26 20:12 - 00000000 ____D () C:\ProgramData\Adobe 2014-10-23 22:08 - 2014-09-26 20:12 - 00000000 ____D () C:\Program Files (x86)\Adobe 2014-10-23 15:45 - 2009-07-14 04:20 - 00000000 ___HD () C:\Windows\system32\GroupPolicy 2014-10-10 09:43 - 2014-02-03 15:34 - 00000000 ____D () C:\Program Files\Windows Journal 2014-10-10 09:43 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\SysWOW64\Dism 2014-10-10 09:43 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\Dism 2014-10-10 09:43 - 2009-07-14 04:20 - 00000000 ____D () C:\Program Files\Common Files\System 2014-10-10 09:42 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\PolicyDefinitions 2014-10-10 09:34 - 2014-01-30 22:46 - 04183916 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI 2014-10-10 08:34 - 2014-09-26 20:03 - 00000000 ____D () C:\ProgramData\Package Cache 2014-10-10 08:29 - 2009-07-14 03:34 - 00000505 _____ () C:\Windows\win.ini 2014-10-10 08:28 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\SysWOW64\GroupPolicy 2014-10-10 08:22 - 2014-09-26 20:18 - 00003234 _____ () C:\Windows\System32\Tasks\Norton WSC Integration 2014-10-10 08:22 - 2014-09-26 20:17 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Norton Internet Security 2014-10-10 08:22 - 2014-09-26 20:17 - 00000000 ____D () C:\Windows\system32\Drivers\NISx64 2014-10-09 08:31 - 2014-09-26 20:12 - 00000000 ____D () C:\Windows\System32\Tasks\Lenovo 2014-10-09 05:56 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\rescache 2014-10-08 17:17 - 2014-09-26 20:13 - 629145600 ___SH () C:\Windows\lenovo_fastboot.img 2014-10-08 16:51 - 2014-09-26 19:55 - 00000000 ____D () C:\ProgramData\Intel 2014-10-08 16:50 - 2014-09-26 20:13 - 00000000 ____D () C:\Windows\System32\Tasks\TVT 2014-10-08 16:50 - 2014-09-26 20:12 - 00000000 ____D () C:\Program Files\Lenovo Fingerprint Reader 2014-10-08 16:50 - 2014-09-26 20:11 - 00000000 ____D () C:\Windows\Downloaded Installations 2014-10-08 16:50 - 2014-09-26 20:01 - 00000000 ____D () C:\Program Files\Synaptics 2014-10-08 16:50 - 2014-09-26 20:00 - 00000000 ____D () C:\Program Files\Lenovo 2014-10-08 16:50 - 2009-07-14 06:32 - 00000000 ____D () C:\Windows\system32\WinBioPlugIns 2014-10-08 16:03 - 2009-07-14 06:32 - 00000000 ____D () C:\Windows\system32\restore 2014-10-08 16:02 - 2014-09-26 20:17 - 00000000 ____D () C:\ProgramData\Norton 2014-10-08 16:01 - 2014-09-26 19:59 - 00000000 ____D () C:\Program Files (x86)\Lenovo 2014-10-08 16:01 - 2014-09-26 19:58 - 00000042 _____ () C:\Windows\SysWOW64\Drivers\17AA_Lenovo_ThinkPad_S3-S440_20AYCTO1WW.MRK 2014-10-08 16:01 - 2014-01-30 20:47 - 00000000 ____D () C:\Windows\Panther 2014-10-08 16:01 - 2014-01-30 20:47 - 00000000 ____D () C:\SWTOOLS 2014-10-08 15:58 - 2009-07-14 04:20 - 00000000 __RHD () C:\Users\Public\Libraries 2014-10-08 15:07 - 2014-09-26 02:17 - 00000000 ____D () C:\ProgramData\Lenovo Some content of TEMP: ==================== C:\Users\Philipp\AppData\Local\Temp\avgnt.exe ==================== Bamital & volsnap Check ================= (There is no automatic fix for files that do not pass verification.) C:\Windows\System32\winlogon.exe => File is digitally signed C:\Windows\System32\wininit.exe => File is digitally signed C:\Windows\SysWOW64\wininit.exe => File is digitally signed C:\Windows\explorer.exe => File is digitally signed C:\Windows\SysWOW64\explorer.exe => File is digitally signed C:\Windows\System32\svchost.exe => File is digitally signed C:\Windows\SysWOW64\svchost.exe => File is digitally signed C:\Windows\System32\services.exe => File is digitally signed C:\Windows\System32\User32.dll => File is digitally signed C:\Windows\SysWOW64\User32.dll => File is digitally signed C:\Windows\System32\userinit.exe => File is digitally signed C:\Windows\SysWOW64\userinit.exe => File is digitally signed C:\Windows\System32\rpcss.dll => File is digitally signed C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2014-01-30 20:48 ==================== End Of Log ============================ und Addition: Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 30-10-2014 Ran by Philipp at 2014-10-30 17:15:06 Running from C:\Users\Philipp\Desktop Boot Mode: Normal ========================================================== ==================== Security Center ======================== (If an entry is included in the fixlist, it will be removed.) AV: Avira Desktop (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859} AV: Norton Internet Security (Disabled - Up to date) {D87FA2C0-F526-77B1-D6EC-0EDF3936CEDB} AS: Norton Internet Security (Disabled - Up to date) {631E4324-D31C-783F-EC5C-35AD42B18466} AS: Avira Desktop (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} FW: Norton Internet Security (Disabled) {E04423E5-BF49-76E9-FDB3-A7EAC7E589A0} ==================== Installed Programs ====================== (Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.) 7-Zip 9.20 (HKLM-x32\...\7-Zip) (Version: - ) Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 3.4.0.2710 - Adobe Systems Incorporated) Adobe Flash Player 15 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 15.0.0.152 - Adobe Systems Incorporated) Adobe Reader XI (11.0.09) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.09 - Adobe Systems Incorporated) Apple Application Support (HKLM-x32\...\{63EC2120-1742-4625-AA47-C6A8AEC9C64C}) (Version: 2.2.2 - Apple Inc.) Apple Mobile Device Support (HKLM\...\{7446FE8D-C1F9-4D42-AAAE-5DBCE58605A6}) (Version: 6.0.0.59 - Apple Inc.) Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.) Avira (HKLM-x32\...\{9bd9b85e-7792-483b-a318-cc51ff0877ed}) (Version: 1.1.22.50000 - Avira Operations GmbH & Co. KG) Avira (x32 Version: 1.1.22.50000 - Avira Operations GmbH & Co. KG) Hidden Avira Free Antivirus (HKLM-x32\...\Avira AntiVir Desktop) (Version: 14.0.7.306 - Avira) BatteryBar (remove only) (HKLM\...\BatteryBar) (Version: - ) Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.) CHIP Updater (HKLM-x32\...\CHIP Updater_is1) (Version: 2.33 - Abelssoft) Cliqz (HKLM-x32\...\{5A0C0737-6AFE-4DC6-A8B4-6DFE509ACD75}_is1) (Version: 0.5.22 - Cliqz.com) Conexant HD Audio (HKLM\...\CNXT_AUDIO_HDA) (Version: 8.64.58.0 - Conexant) Create Recovery Media (HKLM-x32\...\{50DC5136-21E8-48BC-97E5-1AD055F6B0B6}) (Version: 1.20.0.00 - Lenovo Group Limited) DisplayLink Core Software (HKLM\...\{58F4C39B-D946-4A45-A314-DEFC2AFDF397}) (Version: 7.5.54609.0 - DisplayLink Corp.) Dolby Home Theater v4 (HKLM-x32\...\{B26438B4-BF51-49C3-9567-7F14A5E40CB9}) (Version: 7.2.8000.17 - Dolby Laboratories Inc) Dropbox (HKCU\...\Dropbox) (Version: 2.4.10 - Dropbox, Inc.) Gesture Control (HKLM-x32\...\{FF07C482-C9F5-47AE-80B2-05066F31A5ED}) (Version: 6.1.160.13 - Lenovo) Integrated Camera (HKLM-x32\...\{ADE16A9D-FBDC-4ecc-B6BD-9C31E51D0332}) (Version: 5.14.225.3 - Vimicro) Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.5.3.1520 - Intel Corporation) Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.3383 - Intel Corporation) Intel(R) PROSet/Wireless Software for Bluetooth(R) Technology(patch version 17.0.1419.2) (HKLM\...\{302600C1-6BDF-4FD1-1405-148929CC1385}) (Version: 17.0.1405.0462 - Intel Corporation) Intel(R) Update Manager (HKLM-x32\...\{12914061-EB9B-4AE7-AC7E-0B8A607C7DF4}) (Version: 2.3.1338 - Intel Corporation) Intel(R) USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 2.5.2.32 - Intel Corporation) Intel(R) WiDi (HKLM\...\{F949AE30-83D1-41B2-92D2-F44478DD058A}) (Version: 4.2.24.0 - Intel Corporation) Intel® PROSet/Wireless Software (HKLM-x32\...\{75895d95-3e4b-42b6-8440-97a0e234aeb3}) (Version: 17.0.2 - Intel Corporation) iTunes (HKLM\...\{1493B2AE-0261-47D2-B1AA-F4DAD0F6C48B}) (Version: 10.7.0.21 - Apple Inc.) Lenovo Auto Scroll Utility (HKLM\...\LenovoAutoScrollUtility) (Version: 2.11 - ) Lenovo Communications Utility (HKLM\...\{88C6A6D9-324C-46E8-BA87-563D14021442}_is1) (Version: 3.1.12.0 - Lenovo) Lenovo Fingerprint Manager (HKLM\...\{9BD443AA-F7D9-4688-8A8B-C33006C4CC59}) (Version: 4.5.258.0 - Synaptics) Lenovo Fingerprint Manager (HKLM\...\{F7AB2C19-6A27-4C75-A92A-8CC7C59E5FA2}) (Version: 4.5.258.0 - ) Lenovo Patch Utility (x32 Version: 1.3.2.6 - Lenovo Group Limited) Hidden Lenovo Patch Utility 64 bit (Version: 1.3.2.6 - Lenovo Group Limited) Hidden Lenovo Peer Connect SDK (HKLM\...\{75C87855-9CBB-4892-B1A9-74C73A19CACA}_is1) (Version: 1.0.0.7 - Lenovo) Lenovo Power Management Driver (HKLM\...\Power Management Driver) (Version: 1.67.04.04 - ) Lenovo QuickControl (HKLM-x32\...\{4855C42F-5197-4AAD-A50D-5066D2CC4647}) (Version: 2.20 - Lenovo Group Limited) Lenovo QuickDisplay (HKLM\...\{ADEEC90C-A033-4596-ACA1-97327055F9CB}) (Version: 1.2.7.0 - Lenovo Group Limited) Lenovo Registration (HKLM-x32\...\{6707C034-ED6B-4B6A-B21F-969B3606FBDE}) (Version: 1.0.3 - Lenovo Inc.) Lenovo SHAREit (HKLM-x32\...\Lenovo SHAREit_is1) (Version: 2.0.4.0 - Lenovo Group Limited) Lenovo Solution Center (HKLM\...\{13BD494D-9ACD-420B-A291-E145DED92EF6}) (Version: 2.6.001.00 - Lenovo Group Limited) Lenovo System Update (HKLM-x32\...\{25C64847-B900-48AD-A164-1B4F9B774650}) (Version: 5.06.0016 - Lenovo) Lenovo USB Graphics (HKLM\...\{E6B1FE9A-CB1E-4096-A0AF-163419CB971C}) (Version: 7.5.54614.0 - Lenovo) Lenovo USB3.0 to DVI VGA Monitor Adapter (HKLM-x32\...\{454D32AD-C149-49BE-9F2E-8C089C3D6620}) (Version: 1.07.17 - Lenovo) Lenovo User Guide (HKLM-x32\...\{13F59938-C595-479C-B479-F171AB9AF64F}) (Version: 1.0.0009.00 - Lenovo Group Limited) Lenovo Warranty Information (HKLM-x32\...\{FD4EC278-C1B1-4496-99ED-C0BE1B0AA521}) (Version: 1.0.0011.00 - Lenovo) Malwarebytes Anti-Malware Version 2.0.3.1025 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.3.1025 - Malwarebytes Corporation) McAfee Security Scan Plus (HKLM-x32\...\McAfee Security Scan) (Version: 3.0.285.6 - McAfee, Inc.) Message Center Plus (HKLM\...\{3849486C-FF09-4F5D-B491-3E179D58EE15}) (Version: 3.1.0004.00 - Lenovo Group Limited) Metric Collection SDK (x32 Version: 1.1.0005.00 - Lenovo Group Limited) Hidden Metric Collection SDK 35 (x32 Version: 1.2.0001.00 - Lenovo Group Limited) Hidden Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation) Microsoft Office (HKLM-x32\...\{90150000-0138-0409-0000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (HKLM-x32\...\{95716cce-fc71-413f-8ad5-56c2892d4b3a}) (Version: 11.0.60610.1 - Microsoft Corporation) MozBackup 1.5.1 (HKLM-x32\...\MozBackup) (Version: - Pavel Cvrcek) Mozilla Firefox 33.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 33.0 (x86 de)) (Version: 33.0 - Mozilla) Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 33.0 - Mozilla) Nitro Pro 9 (HKLM\...\{199748CD-E046-4D0F-A9D1-0712EE050EFC}) (Version: 9.5.1.5 - Nitro) Norton Internet Security (HKLM-x32\...\NIS) (Version: 21.6.0.32 - Symantec Corporation) On Screen Display (HKLM\...\OnScreenDisplay) (Version: 8.33.00 - ) PDF Architect 2 (HKLM-x32\...\PDF Architect 2) (Version: 2.0.24.16092 - pdfforge GmbH) PDF Architect 2 View Module (HKLM-x32\...\{C960FF38-431D-429D-AD1F-FBD12A45B7C5}) (Version: 2.0.17.17583 - pdfforge GmbH) PDFCreator (HKLM-x32\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 1.7.3 - pdfforge) Power Manager (HKLM-x32\...\{DAC01CEE-5BAE-42D5-81FC-B687E84E8405}) (Version: 6.65.2 - Lenovo Group Limited) RapidBoot HDD Accelerator (HKLM-x32\...\Fastboot) (Version: 1.1.1.1 - Lenovo) Realtek Card Reader (HKLM-x32\...\{F0A8BF4A-972F-41E0-9800-1EFE3BF28266}) (Version: 6.2.9200.21229 - Realtek Semiconductor Corp.) Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.71.327.2013 - Realtek) ThinkPad UltraNav Driver (HKLM\...\SynTPDeinstKey) (Version: 18.0.7.40 - Synaptics Incorporated) Thinkpad USB 3.0 Ethernet Adapter Driver (HKLM-x32\...\{D8102684-7BA1-4948-88B9-535F84E6E588}) (Version: 7.4.911.2013 - Lenovo) ThinkVantage Active Protection System (HKLM\...\{46A84694-59EC-48F0-964C-7E76E9F8A2ED}) (Version: 1.79.00.03 - Lenovo) USB Enhanced Performance Keyboard (HKLM\...\{989DC5D9-A776-430D-9E16-D36E5B81CD86}) (Version: 2.0.1.9 - Lenovo) Windows Driver Package - Intel Corporation (iaStorA) HDC (04/29/2013 12.5.4.1001) (HKLM\...\64C5B2577D321E8D30DF813803EF008F338A0B1E) (Version: 04/29/2013 12.5.4.1001 - Intel Corporation) Windows Driver Package - Lenovo 1.67.04.04 (11/07/2013 1.67.04.04) (HKLM\...\70FB73D983446AEE2932B0ED51A770D1BD1348DA) (Version: 11/07/2013 1.67.04.04 - Lenovo) ==================== Custom CLSID (selected items): ========================== (If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.) CustomCLSID: HKU\S-1-5-21-1145738533-22672879-546596692-1001_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\Philipp\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-1145738533-22672879-546596692-1001_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Philipp\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-1145738533-22672879-546596692-1001_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Philipp\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-1145738533-22672879-546596692-1001_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Philipp\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-1145738533-22672879-546596692-1001_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Philipp\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll (Dropbox, Inc.) ==================== Restore Points ========================= 08-10-2014 15:03:44 Windows Update 08-10-2014 16:07:50 Windows Update 09-10-2014 18:25:02 Installed iTunes 09-10-2014 18:44:46 Installed PDF Architect 2 View Module 10-10-2014 07:26:23 Windows Update 30-10-2014 08:24:26 Windows Update 30-10-2014 08:45:54 Windows Update 30-10-2014 09:02:19 Windows Update ==================== Hosts content: ========================== (If needed Hosts: directive could be included in the fixlist to reset Hosts.) 2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____N C:\Windows\system32\Drivers\etc\hosts ==================== Scheduled Tasks (whitelisted) ============= (If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.) Task: {072B39CE-0E22-4CEA-8418-4947827D9ED9} - System32\Tasks\TVT\TVSUUpdateTask => C:\Program Files (x86)\Lenovo\System Update\tvsuShim.exe [2014-06-18] () Task: {0C6F968D-1471-4E8A-B132-E8F994FE201D} - System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473-Logon => C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [2014-02-28] () Task: {17ECCBED-FAB5-4C6F-9D5A-5C6B56CB2F40} - System32\Tasks\Lenovo\Gesture Control => C:\Program Files (x86)\eyeSight\Gesture Control\GestureControl.exe [2014-07-02] (Lenovo) Task: {1DE5BC17-02B6-4556-B013-9BA66053C0A5} - System32\Tasks\Norton Internet Security\Norton Error Processor => C:\Program Files (x86)\Norton Internet Security\Engine\21.6.0.32\SymErr.exe [2014-01-30] (Symantec Corporation) Task: {22AB6C85-EE27-48E6-9752-4EF3E9E08816} - System32\Tasks\Norton WSC Integration => C:\Program Files (x86)\Norton Internet Security\Engine\21.6.0.32\WSCStub.exe [2014-09-21] (Symantec Corporation) Task: {234C2571-9540-4303-80DB-CFA783388C6D} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.) Task: {4F8EDD63-E3B1-4497-B243-DA6A9DF2B11D} - System32\Tasks\PMTask => C:\Program Files (x86)\ThinkPad\Utilities\PwmIdTsv.exe [2014-06-23] (Lenovo Group Limited) Task: {625B664E-F190-4A97-8708-C7DAA98AB39C} - System32\Tasks\Norton Internet Security\Norton Error Analyzer => C:\Program Files (x86)\Norton Internet Security\Engine\21.6.0.32\SymErr.exe [2014-01-30] (Symantec Corporation) Task: {737B442F-EC5B-4162-A21B-0847F8C1E7A8} - System32\Tasks\Lenovo\Lenovo Customer Feedback Program 64 35 => C:\Program Files (x86)\Lenovo\Customer Feedback Program 35\Lenovo.TVT.CustomerFeedback.Agent35.exe [2014-05-30] (Lenovo) Task: {9BEFEFB7-5EB9-4764-9432-F6218DC1D963} - System32\Tasks\Lenovo\LSC\LSCHardwareScan => C:\Program Files\Lenovo\Lenovo Solution Center\LSC.exe [2014-09-03] () Task: {A7AC898A-080D-4F28-98D8-310A3E69169F} - System32\Tasks\TVT\Lenovo QuickDisplay Agent => C:\Program Files\Lenovo\QuickDisplay\QuickDisplayAgent.exe [2014-04-09] (Lenovo Corporation) Task: {AC353643-4660-4AA5-A99F-6139212F5D57} - System32\Tasks\Lenovo\LSC\Lenovo Solution Center Notifications => C:\Program Files\Lenovo\Lenovo Solution Center\LSCNotify.exe [2014-09-03] (Lenovo) Task: {AC9238EF-C85C-4AA7-8A65-63DD6353E7DD} - System32\Tasks\TVT\LenovoWERMonitor => C:\Program Files (x86)\Common Files\lenovo\SUP\sup_wermonitor_shim.exe [2014-09-01] () Task: {AF9DB56B-7AF1-4327-8C31-04F4D25AE41A} - System32\Tasks\Lenovo\Lenovo Customer Feedback Program => C:\Program Files\Lenovo\Customer Feedback Program\Lenovo.TVT.CustomerFeedback.Agent.exe [2013-04-26] (Lenovo) Task: {C7102366-CFB3-420B-8E99-331D140C9B56} - System32\Tasks\Lenovo\Message Center Plus Launcher => C:\Program Files (x86)\Lenovo\message center plus\mcplaunch.exe [2012-05-16] (Lenovo) Task: {CF8FACBB-83B4-475F-80BB-A82F997C2F06} - System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473 => C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [2014-02-28] () Task: {D13D5664-4F8A-413F-8A82-2EB578EE4BFD} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-10-11] (Adobe Systems Incorporated) Task: {D54A631D-1E77-4AB2-AA2A-962532F936FD} - System32\Tasks\Lenovo\Lenovo Solution Center Launcher => C:\Program Files\lenovo\lenovo solution center\App\LSCService.exe [2014-09-03] (Lenovo) Task: {D7791A94-2CEF-4C8D-8F9E-5839A555862F} - System32\Tasks\Microsoft\Windows\PLA\LSC Memory => Rundll32.exe C:\Windows\system32\pla.dll,PlaHost "LSC Memory" "$(Arg0)" Task: {DAD9E64A-08F5-4EB7-AE6A-4EA2057FF503} - System32\Tasks\Abelssoft\Updater scan => C:\Program Files (x86)\CHIP Updater\CHIPUpdater.exe [2014-09-19] (CHIP) Task: {F5CADA76-D8FE-4F6C-9D1E-02F17D57FAAD} - System32\Tasks\Lenovo\Lenovo Customer Feedback Program 64 => C:\Program Files (x86)\Lenovo\Customer Feedback Program\Lenovo.TVT.CustomerFeedback.Agent.exe [2014-02-13] (Lenovo) Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe ==================== Loaded Modules (whitelisted) ============= 2014-09-26 20:10 - 2014-06-23 23:05 - 00117760 ____N () C:\Program Files (x86)\ThinkPad\Utilities\GR\PWMRT64V.DLL 2014-05-16 02:39 - 2014-05-16 02:39 - 00417800 _____ () C:\Program Files\Nitro\Pro 9\Nitro_UpdateService.exe 2014-09-26 20:06 - 2010-10-26 05:40 - 00049056 _____ () C:\Program Files\CONEXANT\ForteConfig\fmapp.exe 2014-02-28 10:32 - 2014-02-28 10:32 - 00174368 _____ () C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe 2012-08-27 20:33 - 2012-08-27 20:33 - 00087912 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll 2012-08-27 20:33 - 2012-08-27 20:33 - 01242512 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll 2014-09-26 20:13 - 2013-07-02 07:33 - 00033520 ____N () C:\Program Files (x86)\Lenovo\RapidBoot HDD Accelerator\FBServiceps.dll 2014-09-26 20:12 - 2011-08-03 04:58 - 02201088 _____ () C:\Program Files\Lenovo\Communications Utility\cxcore210.dll 2014-09-26 20:12 - 2011-08-03 04:58 - 02085888 _____ () C:\Program Files\Lenovo\Communications Utility\cv210.dll 2014-09-26 19:54 - 2013-05-08 21:23 - 01199576 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll ==================== Alternate Data Streams (whitelisted) ========= (If an entry is included in the fixlist, only the Alternate Data Streams will be removed.) ==================== Safe Mode (whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.) ==================== EXE Association (whitelisted) ============= (If an entry is included in the fixlist, the default will be restored. None default entries will be removed.) ==================== MSCONFIG/TASK MANAGER disabled items ========= (Currently there is no automatic fix for this section.) ========================= Accounts: ========================== Administrator (S-1-5-21-1145738533-22672879-546596692-500 - Administrator - Disabled) Gast (S-1-5-21-1145738533-22672879-546596692-501 - Limited - Disabled) HomeGroupUser$ (S-1-5-21-1145738533-22672879-546596692-1002 - Limited - Enabled) Philipp (S-1-5-21-1145738533-22672879-546596692-1001 - Administrator - Enabled) => C:\Users\Philipp ==================== Faulty Device Manager Devices ============= Name: Teredo Tunneling Pseudo-Interface Description: Microsoft-Teredo-Tunneling-Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. ==================== Event log errors: ========================= Application errors: ================== Error: (10/30/2014 05:07:25 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (10/30/2014 10:08:00 AM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (10/30/2014 09:58:37 AM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (10/30/2014 09:35:15 AM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (10/30/2014 09:22:44 AM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (10/30/2014 09:13:56 AM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (10/28/2014 06:52:13 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: plugin-container.exe, Version: 33.0.0.5397, Zeitstempel: 0x543924b1 Name des fehlerhaften Moduls: mozalloc.dll, Version: 33.0.0.5397, Zeitstempel: 0x5438ffbb Ausnahmecode: 0x80000003 Fehleroffset: 0x00001425 ID des fehlerhaften Prozesses: 0x1a80 Startzeit der fehlerhaften Anwendung: 0xplugin-container.exe0 Pfad der fehlerhaften Anwendung: plugin-container.exe1 Pfad des fehlerhaften Moduls: plugin-container.exe2 Berichtskennung: plugin-container.exe3 Error: (10/28/2014 05:26:44 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (10/27/2014 04:31:09 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (10/26/2014 09:33:00 PM) (Source: iumsvc) (EventID: 255) (User: ) Description: Exception : ('Device Profile Push Failure', ConnectionError(MaxRetryError("HTTPSConnectionPool(host='servicegateway.intel.com', port=443): Max retries exceeded with url: /DeviceProfile/Service.svc/Rest/DeviceProfileManager?deviceId=62b723a8-ada9-4897-846d-fae4b4037ad9&DomainId=50964a88-ab5f-4c91-b70e-66a2eadb5423 (Caused by <class 'socket.error'>: [Errno 10013] Der Zugriff auf einen Socket war aufgrund der Zugriffsrechte des Sockets unzul\xe4ssig)",),)) System errors: ============= Error: (10/30/2014 05:08:20 PM) (Source: Service Control Manager) (EventID: 7024) (User: ) Description: Der Dienst "Heimnetzgruppen-Listener" wurde mit folgendem dienstspezifischem Fehler beendet: %%-2147023143. Error: (10/30/2014 05:08:20 PM) (Source: WMPNetworkSvc) (EventID: 14332) (User: ) Description: WMPNetworkSvc0x80004005 Error: (10/30/2014 05:06:48 PM) (Source: Service Control Manager) (EventID: 7023) (User: ) Description: Der Dienst "Funktionssuche-Ressourcenveröffentlichung" wurde mit folgendem Fehler beendet: %%-2147014847 Error: (10/30/2014 10:09:34 AM) (Source: Service Control Manager) (EventID: 7024) (User: ) Description: Der Dienst "Heimnetzgruppen-Listener" wurde mit folgendem dienstspezifischem Fehler beendet: %%-2147023143. Error: (10/30/2014 10:00:13 AM) (Source: Service Control Manager) (EventID: 7024) (User: ) Description: Der Dienst "Heimnetzgruppen-Listener" wurde mit folgendem dienstspezifischem Fehler beendet: %%-2147023143. Error: (10/30/2014 09:35:51 AM) (Source: Service Control Manager) (EventID: 7024) (User: ) Description: Der Dienst "Heimnetzgruppen-Listener" wurde mit folgendem dienstspezifischem Fehler beendet: %%-2147023143. Error: (10/30/2014 09:23:38 AM) (Source: WMPNetworkSvc) (EventID: 14332) (User: ) Description: WMPNetworkSvc0x80004005 Error: (10/30/2014 09:23:28 AM) (Source: Service Control Manager) (EventID: 7024) (User: ) Description: Der Dienst "Heimnetzgruppen-Listener" wurde mit folgendem dienstspezifischem Fehler beendet: %%-2147023143. Error: (10/30/2014 09:14:33 AM) (Source: Service Control Manager) (EventID: 7024) (User: ) Description: Der Dienst "Heimnetzgruppen-Listener" wurde mit folgendem dienstspezifischem Fehler beendet: %%-2147023143. Error: (10/28/2014 05:27:30 PM) (Source: Service Control Manager) (EventID: 7024) (User: ) Description: Der Dienst "Heimnetzgruppen-Listener" wurde mit folgendem dienstspezifischem Fehler beendet: %%-2147023143. Microsoft Office Sessions: ========================= Error: (10/30/2014 05:07:25 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (10/30/2014 10:08:00 AM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (10/30/2014 09:58:37 AM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (10/30/2014 09:35:15 AM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (10/30/2014 09:22:44 AM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (10/30/2014 09:13:56 AM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (10/28/2014 06:52:13 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: plugin-container.exe33.0.0.5397543924b1mozalloc.dll33.0.0.53975438ffbb80000003000014251a8001cff2cc6b235742C:\Program Files (x86)\Mozilla Firefox\plugin-container.exeC:\Program Files (x86)\Mozilla Firefox\mozalloc.dll257df74e-5ecb-11e4-a4a4-f81654dfef02 Error: (10/28/2014 05:26:44 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (10/27/2014 04:31:09 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (10/26/2014 09:33:00 PM) (Source: iumsvc) (EventID: 255) (User: ) Description: Exception : ('Device Profile Push Failure', ConnectionError(MaxRetryError("HTTPSConnectionPool(host='servicegateway.intel.com', port=443): Max retries exceeded with url: /DeviceProfile/Service.svc/Rest/DeviceProfileManager?deviceId=62b723a8-ada9-4897-846d-fae4b4037ad9&DomainId=50964a88-ab5f-4c91-b70e-66a2eadb5423 (Caused by <class 'socket.error'>: [Errno 10013] Der Zugriff auf einen Socket war aufgrund der Zugriffsrechte des Sockets unzul\xe4ssig)",),)) ==================== Memory info =========================== Processor: Intel(R) Core(TM) i5-4210U CPU @ 1.70GHz Percentage of memory in use: 43% Total physical RAM: 4012.08 MB Available physical RAM: 2259.28 MB Total Pagefile: 8022.34 MB Available Pagefile: 5755.75 MB Total Virtual: 8192 MB Available Virtual: 8191.86 MB ==================== Drives ================================ Drive c: (Windows7_OS) (Fixed) (Total:443.26 GB) (Free:393.17 GB) NTFS ==>[System with boot components (obtained from reading drive)] Drive q: (Lenovo_Recovery) (Fixed) (Total:21.03 GB) (Free:9 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (Size: 465.8 GB) (Disk ID: A7179EBD) Partition 1: (Active) - (Size=1.5 GB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=443.3 GB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=21 GB) - (Type=07 NTFS) ==================== End Of Log ============================ |
01.11.2014, 17:14 | #30 |
/// Malwareteam | Win7 Prof. penetrante popups, browserabsturz, versuch automatisch dateien downzuloaden Hi, Scan mit Combofix
|