|
Plagegeister aller Art und deren Bekämpfung: Java version veraltet.Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
18.11.2014, 21:44 | #1 |
| Java version veraltet. Seit ein paar Tagen sagt mir mein Notebook immer ihre JavaVersion ist veraltet. Dies war direkt mit einem Download verbunden. Das kam mir komisch vor und ich hab hier mal gelesen. Hab dann mal nen Scan mit FRST gemacht. FRST FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 17-11-2014 Ran by Donny1982 (administrator) on DONNY1982-PC on 18-11-2014 21:35:40 Running from C:\Users\Donny1982\Desktop Loaded Profiles: Donny1982 & UpdatusUser (Available profiles: Donny1982 & UpdatusUser) Platform: Windows 7 Ultimate Service Pack 1 (X64) OS Language: Deutsch (Deutschland) Internet Explorer Version 11 Boot Mode: Normal Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (Lenovo.) C:\Windows\System32\ibmpmsvc.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (Microsoft Corporation) C:\Windows\System32\wlanext.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe (Microsoft Corporation) C:\Windows\System32\rundll32.exe (Microsoft Corporation) C:\Windows\SysWOW64\rundll32.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe (Conexant Systems Inc.) C:\Windows\System32\CxAudMsg64.exe (Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe (Intel Corporation) C:\Program Files (x86)\Intel\Services\IPT\jhi_service.exe (Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe (Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe (Conexant Systems, Inc.) C:\Windows\SysWOW64\SASrv.exe (Secunia) C:\Program Files (x86)\Secunia\PSI\psia.exe (Secunia) C:\Program Files (x86)\Secunia\PSI\sua.exe (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe (Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (Authentec Inc.) C:\Program Files\ThinkVantage Fingerprint Software\upeksvr.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe (Lenovo Group Limited) C:\Program Files (x86)\Common Files\Lenovo\tvt_reg_monitor_svc.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer.exe (Intel Corporation) C:\Windows\System32\hkcmd.exe (Intel Corporation) C:\Windows\System32\igfxpers.exe () C:\Program Files\CONEXANT\ForteConfig\fmapp.exe (SEIKO EPSON CORPORATION) C:\Windows\System32\spool\drivers\x64\3\E_YATIJJE.EXE (Secunia) C:\Program Files (x86)\Secunia\PSI\psi_tray.exe (Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe (Ricoh co.,Ltd.) C:\Program Files (x86)\Integrated Camera Driver\X64\RCIMGDIR.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (SEIKO EPSON CORPORATION) C:\Program Files (x86)\Epson Software\FAX Utility\FUFAXRCV.exe (SEIKO EPSON CORPORATION) C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe (Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\tv_w32.exe (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\tv_x64.exe (Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe (Oracle Corporation) C:\Program Files (x86)\JDownloader\jre\bin\javaw.exe (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe (Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe ==================== Registry (Whitelisted) ================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [ForteConfig] => C:\Program Files\Conexant\ForteConfig\fmapp.exe [49056 2010-10-26] () HKLM\...\Run: [SmartAudio] => C:\Program Files\CONEXANT\SAII\SAIICpl.exe [316032 2010-12-14] (Conexant systems, Inc.) HKLM\...\Run: [PSQLLauncher] => C:\Program Files\ThinkVantage Fingerprint Software\launcher.exe [86312 2013-03-05] (Authentec Inc.) HKLM-x32\...\Run: [NUSB3MON] => C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [115048 2011-09-16] (Renesas Electronics Corporation) HKLM-x32\...\Run: [RotateImage] => C:\Program Files (x86)\Integrated Camera Driver\X64\RCIMGDIR.exe [55808 2008-10-30] (Ricoh co.,Ltd.) HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [703736 2014-10-14] (Avira Operations GmbH & Co. KG) HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [60712 2014-10-11] (Apple Inc.) HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959176 2014-08-21] (Adobe Systems Incorporated) HKLM-x32\...\Run: [FUFAXRCV] => C:\Program Files (x86)\Epson Software\FAX Utility\FUFAXRCV.exe [502952 2012-07-09] (SEIKO EPSON CORPORATION) HKLM-x32\...\Run: [FUFAXSTM] => C:\Program Files (x86)\Epson Software\FAX Utility\FUFAXSTM.exe [863400 2012-07-09] (SEIKO EPSON CORPORATION) HKLM-x32\...\Run: [EEventManager] => C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe [1058912 2012-04-02] (SEIKO EPSON CORPORATION) HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [157480 2014-10-15] (Apple Inc.) HKLM-x32\...\Run: [Avira Systray] => C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe [124208 2014-10-22] (Avira Operations GmbH & Co. KG) Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation) Winlogon\Notify\psfus: C:\Program Files\ThinkVantage Fingerprint Software\psqlpwd.dll (Authentec Inc.) HKU\S-1-5-21-1828066295-1020933206-982316413-1000\...\Run: [EPLTarget\P0000000000000000] => C:\Windows\system32\spool\DRIVERS\x64\3\E_YATIJJE.EXE [283232 2012-02-28] (SEIKO EPSON CORPORATION) HKU\S-1-5-21-1828066295-1020933206-982316413-1000\...\Run: [Optimizer Pro] => C:\Program Files (x86)\Optimizer Pro\OptProLauncher.exe [148048 2014-11-04] (PC Utilities Software Limited) HKU\S-1-5-21-1828066295-1020933206-982316413-1000\...\Run: [LiveSupport] => C:\Program Files (x86)\LiveSupport\LiveSupport.exe [1005056 2014-03-18] (PC Utilities Software Limited) AppInit_DLLs: c:\windows\system32\nvinitx.dll => c:\windows\system32\nvinitx.dll [245872 2013-01-11] (NVIDIA Corporation) Lsa: [Notification Packages] scecli C:\Program Files\ThinkVantage Fingerprint Software\psqlpwd.dll Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Secunia PSI Tray.lnk ShortcutTarget: Secunia PSI Tray.lnk -> C:\Program Files (x86)\Secunia\PSI\psi_tray.exe (Secunia) CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) ProxyEnable: [.DEFAULT] => Internet Explorer proxy is enabled. ProxyServer: [.DEFAULT] => http=127.0.0.1:54813;https=127.0.0.1:54813 HKU\S-1-5-21-1828066295-1020933206-982316413-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp HKU\S-1-5-21-1828066295-1020933206-982316413-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xB19246B31174CE01 HKU\S-1-5-21-1828066295-1020933206-982316413-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe SearchScopes: HKLM-x32 -> DefaultScope value is missing. SearchScopes: HKU\S-1-5-21-1828066295-1020933206-982316413-1000 -> {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = hxxp://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage} BHO: easytoshop -> {c2e2dfb1-f145-48c9-b58e-9384aa0850a9} -> C:\ProgramData\easytoshop\0qWprnfOdDKown.x64.dll () BHO-x32: Adobe PDF Reader -> {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated) BHO-x32: E-Web Print -> {201CF130-E29C-4E5C-A73F-CD197DEFA6AE} -> C:\Program Files (x86)\Epson Software\E-Web Print\ewps_tb.dll (SEIKO EPSON CORPORATION) BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) Toolbar: HKLM-x32 - E-Web Print - {201CF130-E29C-4E5C-A73F-CD197DEFA6AE} - C:\Program Files (x86)\Epson Software\E-Web Print\ewps_tb.dll (SEIKO EPSON CORPORATION) Tcpip\Parameters: [DhcpNameServer] 192.168.178.1 FireFox: ======== FF ProfilePath: C:\Users\Donny1982\AppData\Roaming\Mozilla\Firefox\Profiles\uv03bhng.default FF NewTab: hxxp://www.google.com/ FF DefaultSearchUrl: hxxp://www.google.com/search?btnG=Google+Search&q= FF SearchEngineOrder.1: Google FF SelectedSearchEngine: Google FF Homepage: hxxp://www.google.com FF Keyword.URL: hxxp://www.google.com/search?btnG=Google+Search&q= FF Plugin: @microsoft.com/GENUINE -> disabled No File FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation) FF Plugin: @videolan.org/vlc,version=2.0.7 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin: @videolan.org/vlc,version=2.1.2 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin: @videolan.org/vlc,version=2.1.4 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin: @videolan.org/vlc,version=2.1.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll () FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.66 -> C:\Program Files (x86)\Intel\Services\IPT\npIntelWebAPIIPT.dll (Intel Corporation) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Services\IPT\npIntelWebAPIUpdater.dll (Intel Corporation) FF Plugin-x32: @java.com/DTPlugin,version=10.71.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=10.71.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation) FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation) FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Extension: Avira Browser Safety - C:\Users\Donny1982\AppData\Roaming\Mozilla\Firefox\Profiles\uv03bhng.default\Extensions\abs@avira.com [2014-09-30] FF Extension: DiscountLocator - C:\Users\Donny1982\AppData\Roaming\Mozilla\Firefox\Profiles\uv03bhng.default\Extensions\B@uN1.org [2014-11-12] FF HKLM-x32\...\Firefox\Extensions: [e-webprint@epson.com] - C:\Program Files (x86)\Epson Software\E-Web Print\Firefox Add-on FF Extension: E-Web Print - C:\Program Files (x86)\Epson Software\E-Web Print\Firefox Add-on [2014-11-04] Chrome: ======= CHR dev: Chrome dev build detected! <======= ATTENTION ==================== Services (Whitelisted) ================= (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R2 70e6ca8c; c:\Program Files (x86)\Optimizer Pro\OptProCrash.dll [3113040 2014-11-12] () R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [431920 2014-10-14] (Avira Operations GmbH & Co. KG) R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [431920 2014-10-14] (Avira Operations GmbH & Co. KG) R2 Avira.OE.ServiceHost; C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe [164656 2014-10-22] (Avira Operations GmbH & Co. KG) S2 EpsonScanSvc; C:\Windows\system32\EscSvc64.exe [135824 2011-12-12] (Seiko Epson Corporation) R2 MBAMScheduler; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe [1809720 2014-04-03] (Malwarebytes Corporation) S2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [857912 2014-04-03] (Malwarebytes Corporation) R2 Secunia PSI Agent; C:\Program Files (x86)\Secunia\PSI\PSIA.exe [1229528 2013-12-06] (Secunia) R2 Secunia Update Agent; C:\Program Files (x86)\Secunia\PSI\sua.exe [662232 2013-12-06] (Secunia) R2 ThinkVantage Registry Monitor Service; C:\Program Files (x86)\Common Files\Lenovo\tvt_reg_monitor_svc.exe [1028096 2010-08-31] (Lenovo Group Limited) [File not signed] S3 TVT Backup Service; C:\Program Files (x86)\Lenovo\Rescue and Recovery\rrservice.exe [1517928 2013-03-11] (Lenovo Group Limited) R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [3342640 2012-08-23] (Intel® Corporation) ==================== Drivers (Whitelisted) ==================== (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [119272 2014-10-14] (Avira Operations GmbH & Co. KG) R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131608 2014-10-14] (Avira Operations GmbH & Co. KG) R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-12-16] (Avira Operations GmbH & Co. KG) R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-04-03] (Malwarebytes Corporation) R1 nvkflt; C:\Windows\System32\DRIVERS\nvkflt.sys [284448 2013-01-11] (NVIDIA Corporation) S3 PSI; C:\Windows\System32\DRIVERS\psi_mf_amd64.sys [18456 2013-12-06] (Secunia) R2 smihlp; C:\Program Files\ThinkVantage Fingerprint Software\smihlp.sys [13128 2011-05-30] (Authentec Inc.) R3 TVTI2C; C:\Windows\System32\DRIVERS\Tvti2c.sys [40248 2011-05-30] (Lenovo Information Product(ShenZhen China) Inc.) S3 USBAAPL64; C:\Windows\System32\Drivers\usbaapl64.sys [54784 2012-12-13] (Apple, Inc.) [File not signed] S3 athr; system32\DRIVERS\athrx.sys [X] S3 VGPU; System32\drivers\rdvgkmd.sys [X] ==================== NetSvcs (Whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.) ==================== One Month Created Files and Folders ======== (If an entry is included in the fixlist, the file\folder will be moved.) 2014-11-18 21:35 - 2014-11-18 21:36 - 00015933 _____ () C:\Users\Donny1982\Desktop\FRST.txt 2014-11-18 21:34 - 2014-11-18 21:35 - 00000000 ____D () C:\FRST 2014-11-18 21:33 - 2014-11-18 21:33 - 02117120 _____ (Farbar) C:\Users\Donny1982\Desktop\FRST64.exe 2014-11-15 17:49 - 2014-11-15 19:46 - 711697844 _____ () C:\Users\Donny1982\Downloads\UTGJEOWMIOH-16-18.rar.part 2014-11-15 17:32 - 2014-11-15 19:46 - 714591312 _____ () C:\Users\Donny1982\Downloads\UTGJEOWMIOH-157-159.rar.part 2014-11-15 17:32 - 2014-11-15 17:32 - 00512000 _____ () C:\Users\Donny1982\Downloads\UTGJEOWMIOH-154-156.rar.part 2014-11-15 17:31 - 2014-11-15 17:32 - 00512000 _____ () C:\Users\Donny1982\Downloads\UTGJEOWMIOH-151-153.rar.part 2014-11-15 17:31 - 2014-11-15 17:31 - 00512000 _____ () C:\Users\Donny1982\Downloads\UTGJEOWMIOH-148-150.rar.part 2014-11-15 17:31 - 2013-08-29 19:18 - 276342784 _____ () C:\Users\Donny1982\Downloads\tjgojsw-147.avi 2014-11-15 17:31 - 2013-08-29 19:12 - 271026176 _____ () C:\Users\Donny1982\Downloads\tjgojsw-146.avi 2014-11-15 17:31 - 2013-08-29 19:00 - 271040512 _____ () C:\Users\Donny1982\Downloads\tjgojsw-145.avi 2014-11-15 17:06 - 2014-11-15 17:31 - 818409766 _____ () C:\Users\Donny1982\Downloads\UTGJEOWMIOH-145-147.rar 2014-11-15 17:06 - 2013-08-29 19:19 - 270979072 _____ () C:\Users\Donny1982\Downloads\tjgojsw-142.avi 2014-11-15 17:06 - 2013-08-29 19:17 - 270995456 _____ () C:\Users\Donny1982\Downloads\tjgojsw-143.avi 2014-11-15 17:06 - 2013-08-29 19:15 - 271128576 _____ () C:\Users\Donny1982\Downloads\tjgojsw-144.avi 2014-11-15 16:42 - 2014-11-15 17:06 - 813103398 _____ () C:\Users\Donny1982\Downloads\UTGJEOWMIOH-142-144.rar 2014-11-15 16:42 - 2013-08-29 19:15 - 291852288 _____ () C:\Users\Donny1982\Downloads\tjgojsw-139.avi 2014-11-15 16:42 - 2013-08-29 19:14 - 271063040 _____ () C:\Users\Donny1982\Downloads\tjgojsw-141.avi 2014-11-15 16:42 - 2013-08-29 19:10 - 271091712 _____ () C:\Users\Donny1982\Downloads\tjgojsw-140.avi 2014-11-15 16:16 - 2014-11-15 16:41 - 834007334 _____ () C:\Users\Donny1982\Downloads\UTGJEOWMIOH-139-141.rar 2014-11-15 16:16 - 2013-08-29 19:18 - 271013888 _____ () C:\Users\Donny1982\Downloads\tjgojsw-138.avi 2014-11-15 16:16 - 2013-08-29 19:15 - 271183872 _____ () C:\Users\Donny1982\Downloads\tjgojsw-136.avi 2014-11-15 16:16 - 2013-08-29 19:11 - 271136768 _____ () C:\Users\Donny1982\Downloads\tjgojsw-137.avi 2014-11-15 15:51 - 2014-11-15 16:16 - 813334822 _____ () C:\Users\Donny1982\Downloads\UTGJEOWMIOH-136-138.rar 2014-11-15 15:51 - 2013-08-29 19:16 - 271106048 _____ () C:\Users\Donny1982\Downloads\tjgojsw-134.avi 2014-11-15 15:51 - 2013-08-29 19:15 - 271167488 _____ () C:\Users\Donny1982\Downloads\tjgojsw-133.avi 2014-11-15 15:51 - 2013-08-29 19:08 - 271175680 _____ () C:\Users\Donny1982\Downloads\tjgojsw-135.avi 2014-11-15 15:27 - 2014-11-15 15:51 - 813449510 _____ () C:\Users\Donny1982\Downloads\UTGJEOWMIOH-133-135.rar 2014-11-15 15:27 - 2013-08-29 19:15 - 271136768 _____ () C:\Users\Donny1982\Downloads\tjgojsw-131.avi 2014-11-15 15:27 - 2013-08-29 19:14 - 271362048 _____ () C:\Users\Donny1982\Downloads\tjgojsw-132.avi 2014-11-15 15:27 - 2013-08-29 19:12 - 271183872 _____ () C:\Users\Donny1982\Downloads\tjgojsw-130.avi 2014-11-15 15:02 - 2014-11-15 15:26 - 813682982 _____ () C:\Users\Donny1982\Downloads\UTGJEOWMIOH-130-132.rar 2014-11-15 15:02 - 2013-08-29 19:17 - 255541248 _____ () C:\Users\Donny1982\Downloads\tjgojsw-13.avi 2014-11-15 15:02 - 2013-08-29 19:16 - 256096256 _____ () C:\Users\Donny1982\Downloads\tjgojsw-14.avi 2014-11-15 15:02 - 2013-08-29 19:07 - 250836992 _____ () C:\Users\Donny1982\Downloads\tjgojsw-15.avi 2014-11-15 14:38 - 2014-11-15 15:02 - 762474787 _____ () C:\Users\Donny1982\Downloads\UTGJEOWMIOH-13-15.rar 2014-11-15 14:38 - 2013-08-29 19:18 - 271601664 _____ () C:\Users\Donny1982\Downloads\tjgojsw-128.avi 2014-11-15 14:38 - 2013-08-29 19:18 - 271159296 _____ () C:\Users\Donny1982\Downloads\tjgojsw-127.avi 2014-11-15 14:38 - 2013-08-29 19:17 - 271249408 _____ () C:\Users\Donny1982\Downloads\tjgojsw-129.avi 2014-11-15 14:12 - 2014-11-15 14:38 - 814010662 _____ () C:\Users\Donny1982\Downloads\UTGJEOWMIOH-127-129.rar 2014-11-15 14:12 - 2013-08-29 19:17 - 271239168 _____ () C:\Users\Donny1982\Downloads\tjgojsw-124.avi 2014-11-15 14:12 - 2013-08-29 19:10 - 271214592 _____ () C:\Users\Donny1982\Downloads\tjgojsw-126.avi 2014-11-15 14:12 - 2013-08-29 19:09 - 271134720 _____ () C:\Users\Donny1982\Downloads\tjgojsw-125.avi 2014-11-15 13:47 - 2014-11-15 14:12 - 813588774 _____ () C:\Users\Donny1982\Downloads\UTGJEOWMIOH-124-126.rar 2014-11-15 13:47 - 2013-08-29 19:18 - 271239168 _____ () C:\Users\Donny1982\Downloads\tjgojsw-123.avi 2014-11-15 13:47 - 2013-08-29 19:13 - 271210496 _____ () C:\Users\Donny1982\Downloads\tjgojsw-122.avi 2014-11-15 13:47 - 2013-08-29 18:57 - 271179776 _____ () C:\Users\Donny1982\Downloads\tjgojsw-121.avi 2014-11-15 13:22 - 2014-11-15 13:47 - 813629734 _____ () C:\Users\Donny1982\Downloads\UTGJEOWMIOH-121-123.rar 2014-11-15 13:22 - 2013-08-29 19:19 - 255672320 _____ () C:\Users\Donny1982\Downloads\tjgojsw-118.avi 2014-11-15 13:22 - 2013-08-29 19:17 - 271163392 _____ () C:\Users\Donny1982\Downloads\tjgojsw-120.avi 2014-11-15 13:22 - 2013-08-29 18:35 - 255561728 _____ () C:\Users\Donny1982\Downloads\tjgojsw-119.avi 2014-11-15 12:58 - 2014-11-15 13:21 - 782397734 _____ () C:\Users\Donny1982\Downloads\UTGJEOWMIOH-118-120.rar 2014-11-15 12:58 - 2013-08-29 19:18 - 271284224 _____ () C:\Users\Donny1982\Downloads\tjgojsw-116.avi 2014-11-15 12:58 - 2013-08-29 19:09 - 271179776 _____ () C:\Users\Donny1982\Downloads\tjgojsw-115.avi 2014-11-15 12:58 - 2013-08-29 19:07 - 271300608 _____ () C:\Users\Donny1982\Downloads\tjgojsw-117.avi 2014-11-15 12:33 - 2014-11-15 12:58 - 813764902 _____ () C:\Users\Donny1982\Downloads\UTGJEOWMIOH-115-117.rar 2014-11-15 12:33 - 2013-08-29 19:08 - 271392768 _____ () C:\Users\Donny1982\Downloads\tjgojsw-113.avi 2014-11-15 12:33 - 2013-08-29 19:06 - 271316992 _____ () C:\Users\Donny1982\Downloads\tjgojsw-114.avi 2014-11-15 12:33 - 2013-08-29 18:52 - 271290368 _____ () C:\Users\Donny1982\Downloads\tjgojsw-112.avi 2014-11-15 12:09 - 2013-08-29 19:03 - 271259648 _____ () C:\Users\Donny1982\Downloads\tjgojsw-111.avi 2014-11-15 12:08 - 2014-11-15 12:32 - 814000422 _____ () C:\Users\Donny1982\Downloads\UTGJEOWMIOH-112-114.rar 2014-11-15 12:08 - 2013-08-29 19:15 - 271181824 _____ () C:\Users\Donny1982\Downloads\tjgojsw-110.avi 2014-11-15 12:08 - 2013-08-29 19:10 - 271194112 _____ () C:\Users\Donny1982\Downloads\tjgojsw-109.avi 2014-11-15 11:44 - 2014-11-15 12:08 - 813635878 _____ () C:\Users\Donny1982\Downloads\UTGJEOWMIOH-109-111.rar 2014-11-15 11:44 - 2013-08-29 19:19 - 271241216 _____ () C:\Users\Donny1982\Downloads\tjgojsw-108.avi 2014-11-15 11:44 - 2013-08-29 19:18 - 271222784 _____ () C:\Users\Donny1982\Downloads\tjgojsw-106.avi 2014-11-15 11:44 - 2013-08-29 19:18 - 271144960 _____ () C:\Users\Donny1982\Downloads\tjgojsw-107.avi 2014-11-15 11:19 - 2014-11-15 11:43 - 813609254 _____ () C:\Users\Donny1982\Downloads\UTGJEOWMIOH-106-108.rar 2014-11-15 11:19 - 2013-08-29 19:16 - 270927872 _____ () C:\Users\Donny1982\Downloads\tjgojsw-103.avi 2014-11-15 11:19 - 2013-08-29 19:13 - 271085568 _____ () C:\Users\Donny1982\Downloads\tjgojsw-104.avi 2014-11-15 11:19 - 2013-08-29 19:04 - 271142912 _____ () C:\Users\Donny1982\Downloads\tjgojsw-105.avi 2014-11-15 10:54 - 2014-11-15 11:19 - 813156646 _____ () C:\Users\Donny1982\Downloads\UTGJEOWMIOH-103-105.rar 2014-11-15 10:54 - 2013-08-29 19:17 - 271243264 _____ () C:\Users\Donny1982\Downloads\tjgojsw-100.avi 2014-11-15 10:54 - 2013-08-29 19:13 - 255457280 _____ () C:\Users\Donny1982\Downloads\tjgojsw-102.avi 2014-11-15 10:54 - 2013-08-29 19:12 - 271247360 _____ () C:\Users\Donny1982\Downloads\tjgojsw-101.avi 2014-11-15 10:42 - 2013-08-29 19:18 - 255520768 _____ () C:\Users\Donny1982\Downloads\tjgojsw-11.avi 2014-11-15 10:42 - 2013-08-29 19:08 - 255479808 _____ () C:\Users\Donny1982\Downloads\tjgojsw-12.avi 2014-11-15 10:42 - 2013-08-29 19:00 - 250220544 _____ () C:\Users\Donny1982\Downloads\tjgojsw-10.avi 2014-11-15 10:28 - 2014-11-15 10:28 - 00000000 __SHD () C:\Users\Donny1982\AppData\Local\EmieBrowserModeList 2014-11-15 03:26 - 2014-11-15 03:26 - 00000056 _____ () C:\Windows\setupact.log 2014-11-15 03:26 - 2014-11-15 03:26 - 00000000 _____ () C:\Windows\setuperr.log 2014-11-15 03:25 - 2014-11-15 03:25 - 00008398 _____ () C:\Windows\PFRO.log 2014-11-14 22:06 - 2014-11-14 22:07 - 00000000 ____D () C:\Users\Donny1982\Downloads\Once.Upon.a.Time.Es.war.einmal.S03E16.Gruen.vor.Neid.GERMAN.DUBBED.BDRip.x264-TVP 2014-11-14 21:55 - 2014-11-14 22:06 - 376429772 _____ () C:\Users\Donny1982\Downloads\onceupon-s03e16.rar 2014-11-14 21:55 - 2014-11-14 21:55 - 00000000 ____D () C:\Users\Donny1982\Downloads\Once.Upon.a.Time.Es.war.einmal.S03E15.Wo.Lumiere.ist.ist.auch.Schatten.GERMAN.DUBBED.BDRip.x264-TVP 2014-11-14 21:44 - 2014-11-14 21:55 - 351901076 _____ () C:\Users\Donny1982\Downloads\onceupon-s03e15.rar 2014-11-14 21:44 - 2014-11-14 21:44 - 00000000 ____D () C:\Users\Donny1982\Downloads\Once.Upon.a.Time.Es.war.einmal.S03E14.The.Tower.GERMAN.DUBBED.BDRip.x264-TVP 2014-11-14 21:33 - 2014-11-14 21:44 - 342450828 _____ () C:\Users\Donny1982\Downloads\onceupon-s03e14.rar 2014-11-14 21:33 - 2014-11-14 21:33 - 00000000 ____D () C:\Users\Donny1982\Downloads\Once.Upon.a.Time.Es.war.einmal.S03E13.Witch.Hunt.GERMAN.DUBBED.BDRip.x264-TVP 2014-11-14 21:22 - 2014-11-14 21:33 - 364052068 _____ () C:\Users\Donny1982\Downloads\onceupon-s03e13.rar 2014-11-14 21:22 - 2014-11-14 21:22 - 00000000 ____D () C:\Users\Donny1982\Downloads\Once.Upon.a.Time.Es.war.einmal.S03E12.New.York.City.Serenade.GERMAN.DUBBED.BDRip.x264-TVP 2014-11-14 21:09 - 2014-11-14 21:22 - 407126420 _____ () C:\Users\Donny1982\Downloads\onceupon-s03e12.rar 2014-11-14 21:09 - 2014-11-14 21:09 - 00000000 ____D () C:\Users\Donny1982\Downloads\Once.Upon.a.Time.Es.war.einmal.S03E11.Going.Home.GERMAN.DUBBED.BDRip.x264-TVP 2014-11-14 20:57 - 2014-11-14 21:08 - 361499508 _____ () C:\Users\Donny1982\Downloads\onceupon-s03e11.rar 2014-11-14 20:57 - 2014-11-14 20:57 - 00000000 ____D () C:\Users\Donny1982\Downloads\Once.Upon.a.Time.Es.war.einmal.S03E10.The.New.Neverland.GERMAN.DUBBED.BDRip.x264-TVP 2014-11-14 20:45 - 2014-11-14 20:57 - 389624900 _____ () C:\Users\Donny1982\Downloads\onceupon-s03e10.rar 2014-11-14 20:45 - 2014-11-14 20:45 - 00000000 ____D () C:\Users\Donny1982\Downloads\Once.Upon.a.Time.Es.war.einmal.S03E09.Save.Henry.GERMAN.DUBBED.BDRip.x264-TVP 2014-11-14 20:36 - 2014-11-14 20:45 - 302106652 _____ () C:\Users\Donny1982\Downloads\onceupon-s03e09.rar 2014-11-14 20:36 - 2014-11-14 20:36 - 00000000 ____D () C:\Users\Donny1982\Downloads\Once.Upon.a.Time.Es.war.einmal.S03E08.Think.Lovely.Thoughts.GERMAN.DUBBED.BDRip.x264-TVP 2014-11-14 20:23 - 2014-11-14 20:35 - 394218660 _____ () C:\Users\Donny1982\Downloads\onceupon-s03e08.rar 2014-11-14 20:23 - 2014-11-14 20:24 - 00000000 ____D () C:\Users\Donny1982\Downloads\Once.Upon.a.Time.Es.war.einmal.S03E07.Reich.der.Schatten.GERMAN.DUBBED.BDRip.x264-TVP 2014-11-14 20:12 - 2014-11-14 20:23 - 374333372 _____ () C:\Users\Donny1982\Downloads\onceupon-s03e07.rar 2014-11-14 20:12 - 2014-11-14 20:12 - 00000000 ____D () C:\Users\Donny1982\Downloads\Once.Upon.a.Time.Es.war.einmal.S03E06.Unter.dem.Meer.GERMAN.DUBBED.BDRip.x264-TVP 2014-11-14 19:59 - 2014-11-15 20:22 - 00000000 ____D () C:\Users\Donny1982\Downloads\Once.Upon.a.Time.Es.war.einmal.S03E05.Und.sie.wurden.Piraten.GERMAN.DUBBED.BDRip.x264-TVP 2014-11-14 19:59 - 2014-11-14 20:12 - 407363124 _____ () C:\Users\Donny1982\Downloads\onceupon-s03e06.rar 2014-11-14 19:47 - 2014-11-15 20:22 - 00000000 ____D () C:\Users\Donny1982\Downloads\Once.Upon.a.Time.Es.war.einmal.S03E04.Hoert.ihr.die.Melodie.des.Rattenfaengers.GERMAN.DUBBED.BDRip.x264-TVP 2014-11-14 19:47 - 2014-11-14 19:59 - 407810356 _____ () C:\Users\Donny1982\Downloads\onceupon-s03e05.rar 2014-11-14 19:35 - 2014-11-14 20:03 - 00000000 ____D () C:\Users\Donny1982\Downloads\Once.Upon.a.Time.Es.war.einmal.S03E03.Eine.recht.gewoehnliche.Fee.GERMAN.DUBBED.BDRip.x264-TVP 2014-11-14 19:35 - 2014-11-14 19:46 - 370310812 _____ () C:\Users\Donny1982\Downloads\onceupon-s03e04.rar 2014-11-14 19:24 - 2014-11-14 20:02 - 00000000 ____D () C:\Users\Donny1982\Downloads\Once.Upon.a.Time.Es.war.einmal.S03E02.Erkenne.dich.selbst.GERMAN.DUBBED.BDRip.x264-TVP 2014-11-14 19:11 - 2013-08-30 03:21 - 00000035 _____ () C:\Users\Donny1982\Downloads\nbdsofi89WRZI3fg50GB9f83R4Hrhop90u4.txt 2014-11-14 19:11 - 2013-08-29 19:19 - 256077824 _____ () C:\Users\Donny1982\Downloads\tjgojsw-03.avi 2014-11-14 19:11 - 2013-08-29 19:13 - 250384384 _____ () C:\Users\Donny1982\Downloads\tjgojsw-02.avi 2014-11-14 19:11 - 2013-08-29 19:01 - 250460160 _____ () C:\Users\Donny1982\Downloads\tjgojsw-01.avi 2014-11-14 19:05 - 2014-11-14 19:07 - 00000000 ____D () C:\Users\Donny1982\Downloads\Once.Upon.a.Time.Es.war.einmal.S03E01.Wenn.boese.Traeume.fliegen.lernen 2014-11-14 18:51 - 2014-11-14 19:35 - 367238772 _____ () C:\Users\Donny1982\Downloads\onceupon-s03e03.rar 2014-11-14 18:51 - 2014-11-14 19:24 - 418069404 _____ () C:\Users\Donny1982\Downloads\onceupon-s03e02.rar 2014-11-14 18:51 - 2014-11-14 19:05 - 408963796 _____ () C:\Users\Donny1982\Downloads\onceupon-s03e01bd.rar 2014-11-14 18:50 - 2014-11-14 18:50 - 00005656 _____ () C:\Users\Donny1982\Downloads\UL_Once_Upon_a_Time_S03-2t2lh9n95opq8.dlc 2014-11-14 18:07 - 2014-11-15 10:54 - 797948198 _____ () C:\Users\Donny1982\Downloads\UTGJEOWMIOH-100-102.rar 2014-11-14 18:07 - 2014-11-14 18:07 - 00000000 ____D () C:\Users\Donny1982\Downloads\The.Walking.Dead.S01E06.TS-19.German.WS.BDRip.XviD-GTVG 2014-11-14 18:05 - 2014-11-15 10:42 - 761221411 _____ () C:\Users\Donny1982\Downloads\UTGJEOWMIOH-10-12.rar 2014-11-14 18:05 - 2014-11-14 18:05 - 00000000 ____D () C:\Users\Donny1982\Downloads\The.Walking.Dead.S01E04.Vatos.German.WS.BDRip.XviD-GTVG 2014-11-14 18:03 - 2014-11-14 19:10 - 756922659 _____ () C:\Users\Donny1982\Downloads\UTGJEOWMIOH-1-3.rar 2014-11-14 18:03 - 2014-11-14 18:03 - 00000000 ____D () C:\Users\Donny1982\Downloads\The.Walking.Dead.S01E05.Tag.194.German.WS.BDRip.XviD-GTVG 2014-11-14 17:33 - 2014-11-14 18:07 - 379222600 _____ () C:\Users\Donny1982\Downloads\twd-s01e06.rar 2014-11-14 17:33 - 2014-11-14 17:33 - 00000000 ____D () C:\Users\Donny1982\Downloads\The.Walking.Dead.S01E03.Tag.der.Froesche.German.WS.BDRip.XviD-GTVG 2014-11-14 17:30 - 2014-11-14 17:33 - 00000000 ____D () C:\Users\Donny1982\Downloads\The.Walking.Dead.S01E01.Gute.alte.Zeiten.German.WS.BDRip.XviD-GTVG 2014-11-14 17:29 - 2014-11-14 18:05 - 384877784 _____ () C:\Users\Donny1982\Downloads\twd-s01e04.rar 2014-11-14 17:29 - 2014-11-14 18:03 - 378644824 _____ () C:\Users\Donny1982\Downloads\twd-s01e05.rar 2014-11-14 17:29 - 2014-11-14 17:32 - 00000000 ____D () C:\Users\Donny1982\Downloads\The.Walking.Dead.S01E02.Gefangene.der.Toten.German.WS.BDRip.XviD-GTVG 2014-11-14 17:27 - 2014-11-14 17:27 - 00050714 _____ () C:\Users\Donny1982\Documents\cc_20141114_172732.reg 2014-11-14 17:07 - 2014-11-14 17:32 - 373061336 _____ () C:\Users\Donny1982\Downloads\twd-s01e03.rar 2014-11-14 16:42 - 2014-11-14 17:29 - 524287004 _____ () C:\Users\Donny1982\Downloads\twd-s01e01.part1.rar 2014-11-14 16:42 - 2014-11-14 17:29 - 373835480 _____ () C:\Users\Donny1982\Downloads\twd-s01e02.rar 2014-11-14 16:42 - 2014-11-14 17:07 - 217962996 _____ () C:\Users\Donny1982\Downloads\twd-s01e01.part2.rar 2014-11-14 16:41 - 2014-11-14 16:41 - 00002116 _____ () C:\Users\Donny1982\Downloads\3t8451w2a98aqna.dlc 2014-11-12 18:20 - 2014-11-18 06:58 - 00000000 ____D () C:\ProgramData\easytoshop 2014-11-12 18:20 - 2014-11-12 18:20 - 00000000 ____D () C:\ProgramData\RandomDealApp 2014-11-12 18:20 - 2014-11-12 18:20 - 00000000 ____D () C:\ProgramData\868a96c248df03da 2014-11-12 17:45 - 2014-11-15 10:49 - 00003268 _____ () C:\Windows\System32\Tasks\Optimizer Pro Schedule 2014-11-12 17:45 - 2014-11-12 17:45 - 00000000 ____D () C:\Users\Donny1982\Documents\Optimizer Pro 2014-11-12 17:45 - 2014-11-12 17:45 - 00000000 ____D () C:\Users\Donny1982\AppData\Roaming\Optimizer Pro 2014-11-12 17:40 - 2014-11-12 17:40 - 00001179 _____ () C:\Users\Donny1982\Desktop\LiveSupport.lnk 2014-11-12 17:40 - 2014-11-12 17:40 - 00001102 _____ () C:\Users\Donny1982\Desktop\Optimizer Pro.lnk 2014-11-12 17:40 - 2014-11-12 17:40 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Optimizer Pro v3.2 2014-11-12 17:40 - 2014-11-12 17:40 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LiveSupport 2014-11-12 17:40 - 2014-11-12 17:40 - 00000000 ____D () C:\Program Files (x86)\Optimizer Pro 2014-11-12 17:40 - 2014-11-12 17:40 - 00000000 ____D () C:\Program Files (x86)\LiveSupport 2014-11-12 17:37 - 2014-11-12 17:38 - 00000000 ____D () C:\Users\Donny1982\AppData\Roaming\DAEMON Tools Lite 2014-11-12 17:37 - 2014-11-12 17:37 - 00000000 ____D () C:\ProgramData\DAEMON Tools Lite 2014-11-12 17:36 - 2014-11-12 17:36 - 13429504 _____ (Disc Soft Ltd) C:\Users\Donny1982\Downloads\DTLite4491-0356.exe 2014-11-12 17:18 - 2014-11-12 17:18 - 00000000 ____D () C:\ProgramData\Rosetta Stone 2014-11-12 17:16 - 2014-11-12 17:44 - 00000000 ____D () C:\Program Files (x86)\Rosetta Stone 2014-11-12 17:16 - 2014-11-12 17:20 - 00000000 ____D () C:\ProgramData\FLEXnet 2014-11-12 17:16 - 2014-11-12 17:16 - 00000000 ____D () C:\Users\Default\AppData\Roaming\Macromedia 2014-11-12 17:16 - 2014-11-12 17:16 - 00000000 ____D () C:\Users\Default User\AppData\Roaming\Macromedia 2014-11-12 12:38 - 2014-11-07 20:49 - 00388272 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2014-11-12 12:38 - 2014-11-07 20:23 - 00341168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2014-11-12 12:38 - 2014-11-06 05:04 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-11-12 12:38 - 2014-11-06 05:03 - 25110016 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-11-12 12:38 - 2014-11-06 05:03 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2014-11-12 12:38 - 2014-11-06 04:47 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2014-11-12 12:38 - 2014-11-06 04:46 - 00580096 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2014-11-12 12:38 - 2014-11-06 04:46 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2014-11-12 12:38 - 2014-11-06 04:44 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2014-11-12 12:38 - 2014-11-06 04:43 - 02884096 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2014-11-12 12:38 - 2014-11-06 04:36 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2014-11-12 12:38 - 2014-11-06 04:35 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2014-11-12 12:38 - 2014-11-06 04:31 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2014-11-12 12:38 - 2014-11-06 04:30 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2014-11-12 12:38 - 2014-11-06 04:30 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2014-11-12 12:38 - 2014-11-06 04:29 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2014-11-12 12:38 - 2014-11-06 04:28 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2014-11-12 12:38 - 2014-11-06 04:23 - 06040064 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2014-11-12 12:38 - 2014-11-06 04:20 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2014-11-12 12:38 - 2014-11-06 04:16 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2014-11-12 12:38 - 2014-11-06 04:13 - 00501248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2014-11-12 12:38 - 2014-11-06 04:13 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2014-11-12 12:38 - 2014-11-06 04:12 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2014-11-12 12:38 - 2014-11-06 04:10 - 19781632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2014-11-12 12:38 - 2014-11-06 04:10 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll 2014-11-12 12:38 - 2014-11-06 04:07 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2014-11-12 12:38 - 2014-11-06 04:05 - 02277376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2014-11-12 12:38 - 2014-11-06 04:04 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2014-11-12 12:38 - 2014-11-06 04:03 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2014-11-12 12:38 - 2014-11-06 04:02 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2014-11-12 12:38 - 2014-11-06 04:00 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2014-11-12 12:38 - 2014-11-06 04:00 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2014-11-12 12:38 - 2014-11-06 03:59 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2014-11-12 12:38 - 2014-11-06 03:58 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2014-11-12 12:38 - 2014-11-06 03:57 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2014-11-12 12:38 - 2014-11-06 03:48 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2014-11-12 12:38 - 2014-11-06 03:42 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2014-11-12 12:38 - 2014-11-06 03:41 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2014-11-12 12:38 - 2014-11-06 03:41 - 00716800 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2014-11-12 12:38 - 2014-11-06 03:39 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2014-11-12 12:38 - 2014-11-06 03:38 - 02124288 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2014-11-12 12:38 - 2014-11-06 03:37 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2014-11-12 12:38 - 2014-11-06 03:36 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2014-11-12 12:38 - 2014-11-06 03:34 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2014-11-12 12:38 - 2014-11-06 03:30 - 14390272 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2014-11-12 12:38 - 2014-11-06 03:22 - 00688640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2014-11-12 12:38 - 2014-11-06 03:21 - 04298240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2014-11-12 12:38 - 2014-11-06 03:21 - 02051072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2014-11-12 12:38 - 2014-11-06 03:20 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2014-11-12 12:38 - 2014-11-06 03:17 - 02365440 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2014-11-12 12:38 - 2014-11-06 03:04 - 01550336 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2014-11-12 12:38 - 2014-11-06 03:03 - 12819456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2014-11-12 12:38 - 2014-11-06 02:53 - 00799232 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2014-11-12 12:38 - 2014-11-06 02:52 - 01892864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2014-11-12 12:38 - 2014-11-06 02:48 - 01310208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2014-11-12 12:38 - 2014-11-06 02:47 - 00708096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2014-11-12 12:38 - 2014-11-05 18:56 - 00304640 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll 2014-11-12 12:38 - 2014-11-05 18:56 - 00228864 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll 2014-11-12 12:38 - 2014-11-05 18:52 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll 2014-11-12 12:38 - 2014-10-14 03:16 - 00155064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys 2014-11-12 12:38 - 2014-10-14 03:13 - 00683520 _____ (Microsoft Corporation) C:\Windows\system32\termsrv.dll 2014-11-12 12:38 - 2014-10-14 03:12 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll 2014-11-12 12:38 - 2014-10-14 03:09 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll 2014-11-12 12:38 - 2014-10-14 03:07 - 00681984 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll 2014-11-12 12:38 - 2014-10-14 02:50 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll 2014-11-12 12:38 - 2014-10-14 02:49 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll 2014-11-12 12:38 - 2014-10-14 02:47 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll 2014-11-12 12:38 - 2014-10-14 02:46 - 00681984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll 2014-11-12 12:36 - 2014-10-25 02:57 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll 2014-11-12 12:36 - 2014-10-25 02:32 - 00067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\packager.dll 2014-11-12 12:36 - 2014-10-18 03:05 - 00861696 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll 2014-11-12 12:36 - 2014-10-18 02:33 - 00571904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll 2014-11-12 12:36 - 2014-10-14 03:13 - 03241984 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll 2014-11-12 12:36 - 2014-10-14 02:50 - 02363904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll 2014-11-12 12:36 - 2014-10-10 01:57 - 03198976 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2014-11-12 12:36 - 2014-10-03 03:12 - 00500224 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll 2014-11-12 12:36 - 2014-10-03 03:11 - 00680960 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll 2014-11-12 12:36 - 2014-10-03 03:11 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll 2014-11-12 12:36 - 2014-10-03 03:11 - 00296448 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll 2014-11-12 12:36 - 2014-10-03 03:11 - 00284672 _____ (Microsoft Corporation) C:\Windows\system32\EncDump.dll 2014-11-12 12:36 - 2014-10-03 02:44 - 00442880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AUDIOKSE.dll 2014-11-12 12:36 - 2014-10-03 02:44 - 00374784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioEng.dll 2014-11-12 12:36 - 2014-10-03 02:44 - 00195584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll 2014-11-12 12:36 - 2014-09-19 10:42 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll 2014-11-12 12:36 - 2014-09-19 10:42 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll 2014-11-12 12:36 - 2014-09-19 10:42 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll 2014-11-12 12:36 - 2014-09-19 10:42 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll 2014-11-12 12:36 - 2014-09-19 10:42 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll 2014-11-12 12:36 - 2014-09-19 10:42 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll 2014-11-12 12:36 - 2014-09-19 10:42 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll 2014-11-12 12:36 - 2014-09-19 10:23 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll 2014-11-12 12:36 - 2014-09-19 10:23 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll 2014-11-12 12:36 - 2014-09-19 10:23 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll 2014-11-12 12:36 - 2014-09-19 10:23 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll 2014-11-12 12:36 - 2014-09-19 10:23 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll 2014-11-12 12:36 - 2014-09-19 10:23 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll 2014-11-12 12:36 - 2014-09-19 10:23 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll 2014-11-12 12:36 - 2014-08-21 07:43 - 01882624 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll 2014-11-12 12:36 - 2014-08-21 07:40 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll 2014-11-12 12:36 - 2014-08-21 07:26 - 01237504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll 2014-11-12 12:36 - 2014-08-21 07:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll 2014-11-12 12:36 - 2014-08-12 03:02 - 00878080 _____ (Microsoft Corporation) C:\Windows\system32\IMJP10K.DLL 2014-11-12 12:36 - 2014-08-12 02:36 - 00701440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IMJP10K.DLL 2014-11-12 02:37 - 2013-05-23 01:57 - 00000000 ____D () C:\Users\Donny1982\Downloads\Das Lied von Eis und Feuer - Teil 20 2014-11-12 02:10 - 2013-05-23 01:57 - 00000000 ____D () C:\Users\Donny1982\Downloads\Das Lied von Eis und Feuer - Teil 18 2014-11-12 02:06 - 2013-05-23 01:56 - 00000000 ____D () C:\Users\Donny1982\Downloads\Das Lied von Eis und Feuer - Teil 19 2014-11-12 01:35 - 2013-05-23 01:57 - 00000000 ____D () C:\Users\Donny1982\Downloads\Das Lied von Eis und Feuer - Teil 17 2014-11-12 00:53 - 2013-05-23 01:57 - 00000000 ____D () C:\Users\Donny1982\Downloads\Das Lied von Eis und Feuer - Teil 16 2014-11-12 00:52 - 2013-05-23 01:59 - 00000000 ____D () C:\Users\Donny1982\Downloads\Das Lied von Eis und Feuer - Teil 15 2014-11-12 00:35 - 2013-05-23 01:59 - 00000000 ____D () C:\Users\Donny1982\Downloads\Das Lied von Eis und Feuer - Teil 14 2014-11-12 00:19 - 2013-05-23 01:59 - 00000000 ____D () C:\Users\Donny1982\Downloads\Das Lied von Eis und Feuer - Teil 13 2014-11-12 00:08 - 2013-05-23 01:59 - 00000000 ____D () C:\Users\Donny1982\Downloads\Das Lied von Eis und Feuer - Teil 12 2014-11-11 23:55 - 2013-05-23 01:59 - 00000000 ____D () C:\Users\Donny1982\Downloads\Das Lied von Eis und Feuer - Teil 11 2014-11-11 23:36 - 2013-05-23 01:59 - 00000000 ____D () C:\Users\Donny1982\Downloads\Das Lied von Eis und Feuer - Teil 10 2014-11-11 23:16 - 2013-05-23 01:58 - 00000000 ____D () C:\Users\Donny1982\Downloads\Das Lied von Eis und Feuer - Teil 9 2014-11-11 22:58 - 2013-05-23 01:58 - 00000000 ____D () C:\Users\Donny1982\Downloads\Das Lied von Eis und Feuer - Teil 5 2014-11-11 22:33 - 2013-05-23 01:58 - 00000000 ____D () C:\Users\Donny1982\Downloads\Das Lied von Eis und Feuer - Teil 4 2014-11-11 22:20 - 2013-05-23 01:58 - 00000000 ____D () C:\Users\Donny1982\Downloads\Das Lied von Eis und Feuer - Teil 6 2014-11-11 22:09 - 2013-05-23 01:58 - 00000000 ____D () C:\Users\Donny1982\Downloads\Das Lied von Eis und Feuer - Teil 8 2014-11-11 22:02 - 2013-05-23 01:57 - 00000000 ____D () C:\Users\Donny1982\Downloads\Das Lied von Eis und Feuer - Teil 1 2014-11-11 22:00 - 2013-05-23 01:58 - 00000000 ____D () C:\Users\Donny1982\Downloads\Das Lied von Eis und Feuer - Teil 7 2014-11-11 21:13 - 2013-05-23 02:00 - 00000000 ____D () C:\Users\Donny1982\Downloads\Das Lied von Eis und Feuer - Teil 3 2014-11-11 21:12 - 2013-05-23 01:57 - 00000000 ____D () C:\Users\Donny1982\Downloads\Das Lied von Eis und Feuer - Teil 2 2014-11-11 20:35 - 2014-07-13 14:50 - 00834630 _____ () C:\Users\Donny1982\Downloads\Martin, Geroge R. R. - Der Heckenritter von Westeros.epub 2014-11-11 20:35 - 2014-07-13 14:50 - 00834621 _____ () C:\Users\Donny1982\Downloads\Martin, Geroge R. R. - Der Heckenritter von Westeros (iPhone).epub 2014-11-11 20:35 - 2014-07-13 13:36 - 02024861 _____ () C:\Users\Donny1982\Downloads\Martin, Geroge R. R. - Der Heckenritter von Westeros.lit 2014-11-11 20:35 - 2014-07-13 13:36 - 01571136 _____ () C:\Users\Donny1982\Downloads\Martin, Geroge R. R. - Der Heckenritter von Westeros.azw3 2014-11-11 20:35 - 2014-07-13 13:36 - 01505973 _____ () C:\Users\Donny1982\Downloads\Martin, Geroge R. R. - Der Heckenritter von Westeros.fb2 2014-11-11 20:35 - 2014-07-13 13:36 - 01144693 _____ () C:\Users\Donny1982\Downloads\Martin, Geroge R. R. - Der Heckenritter von Westeros.mobi 2014-11-11 20:35 - 2013-07-25 20:52 - 00000000 ____D () C:\Users\Donny1982\Downloads\Martin, Geroge R.R. - LvEuF 9 - Der Sohn Des Greifen 2014-11-11 20:35 - 2013-07-25 20:52 - 00000000 ____D () C:\Users\Donny1982\Downloads\Martin, Geroge R.R. - LvEuF 7 - Zeit Der Krähen 2014-11-11 20:35 - 2013-07-25 20:52 - 00000000 ____D () C:\Users\Donny1982\Downloads\Martin, Geroge R.R. - LvEuF 6 - Die Königin Der Drachen 2014-11-11 20:35 - 2013-07-25 20:52 - 00000000 ____D () C:\Users\Donny1982\Downloads\Martin, Geroge R.R. - LvEuF 5 - Sturm Der Schwerter 2014-11-11 20:35 - 2013-07-25 20:51 - 00000000 ____D () C:\Users\Donny1982\Downloads\Martin, Geroge R.R. - LvEuF 2 - Das Erbe Von Winterfell 2014-11-11 20:35 - 2013-07-25 20:51 - 00000000 ____D () C:\Users\Donny1982\Downloads\Martin, Geroge R.R. - LvEuF 1 - Die Herren Von Winterfell 2014-11-11 19:25 - 2014-11-04 04:36 - 00000000 ____D () C:\Users\Donny1982\Downloads\Hercules.EXTENDED.CUT.2014.BDRip.AC3.Dubbed.German.x264-ADV 2014-11-11 18:29 - 2014-11-09 01:48 - 00000644 _____ () C:\Users\Donny1982\Downloads\wld-sharknado2-x264.nfo 2014-11-11 18:29 - 2014-11-09 01:45 - 16542010 _____ () C:\Users\Donny1982\Downloads\wld-sharknado2-x264-sample.mkv 2014-11-11 18:29 - 2014-11-09 01:12 - 994564659 _____ () C:\Users\Donny1982\Downloads\wld-sharknado2-x264.mkv 2014-11-11 18:29 - 2014-11-08 19:13 - 00000167 _____ () C:\Users\Donny1982\Downloads\Share-Online Premium.url 2014-11-11 18:29 - 2014-11-08 19:13 - 00000114 _____ () C:\Users\Donny1982\Downloads\Uploaded Premium.url 2014-11-11 17:48 - 2012-08-04 11:27 - 00002235 _____ () C:\Users\Donny1982\Downloads\Readme - Lies.mich.html 2014-11-11 17:47 - 2012-08-04 11:27 - 00001625 _____ () C:\Users\Donny1982\Downloads\WICHTIGE Info - BITTE Lesen - Stand.01.08.2012.txt 2014-11-11 17:47 - 2012-08-04 11:27 - 00001625 _____ () C:\Users\Donny1982\Downloads\MeB-Crew.nfo 2014-11-10 19:56 - 2014-11-10 19:56 - 00001177 _____ () C:\Users\Public\Desktop\Avira.lnk 2014-11-07 09:56 - 2014-11-15 03:25 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox 2014-11-04 21:34 - 2011-03-14 03:03 - 00083968 _____ (SEIKO EPSON CORPORATION) C:\Windows\system32\E_YD4BJJE.DLL 2014-11-04 21:34 - 2007-04-10 01:06 - 00010752 _____ (SEIKO EPSON CORP.) C:\Windows\system32\E_GCINST.DLL 2014-10-29 22:12 - 2014-10-29 22:12 - 00001823 _____ () C:\Users\Public\Desktop\iTunes.lnk 2014-10-29 22:12 - 2014-10-29 22:12 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes 2014-10-29 22:11 - 2014-10-29 22:12 - 00000000 ____D () C:\ProgramData\E1864A66-75E3-486a-BD95-D1B7D99A84A7 2014-10-29 22:11 - 2014-10-29 22:12 - 00000000 ____D () C:\Program Files\iTunes 2014-10-29 22:11 - 2014-10-29 22:12 - 00000000 ____D () C:\Program Files (x86)\iTunes 2014-10-29 22:11 - 2014-10-29 22:11 - 00000000 ____D () C:\Program Files\iPod 2014-10-29 22:05 - 2014-10-29 22:05 - 00000000 ____D () C:\Program Files\Common Files\EPSON 2014-10-29 21:52 - 2014-10-29 21:52 - 00002398 _____ () C:\Users\Public\Desktop\Epson Netzwerkhandbuch WF-3520 Series.lnk 2014-10-29 21:52 - 2014-10-29 21:52 - 00000279 _____ () C:\Users\Public\Desktop\Epson Benutzerhandbuch WF-3520 Series.url 2014-10-29 21:52 - 2014-10-29 21:52 - 00000256 _____ () C:\Users\Public\Desktop\Anleitung für Epson Connect.url 2014-10-29 21:51 - 2014-11-08 12:51 - 00000000 ____D () C:\Users\Donny1982\AppData\Roaming\Epson 2014-10-29 21:50 - 2014-11-04 21:37 - 00000000 ____D () C:\Program Files (x86)\Epson Software 2014-10-29 21:50 - 2014-11-04 21:07 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Epson Software 2014-10-29 21:49 - 2014-11-04 21:36 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EPSON 2014-10-29 21:49 - 2014-10-29 21:52 - 00000000 ____D () C:\Program Files (x86)\epson 2014-10-29 21:49 - 2014-10-29 21:49 - 00000970 _____ () C:\Users\Public\Desktop\EPSON Scan.lnk 2014-10-29 21:49 - 2014-10-29 21:49 - 00000000 ____D () C:\Program Files\EpsonNet 2014-10-29 21:49 - 2012-11-12 20:41 - 00535552 _____ (SEIKO EPSON CORPORATION) C:\Windows\system32\ensppui.dll 2014-10-29 21:49 - 2012-11-12 20:41 - 00535552 _____ (SEIKO EPSON CORPORATION) C:\Windows\system32\enppui.dll 2014-10-29 21:49 - 2012-11-12 15:15 - 00558592 _____ (SEIKO EPSON CORPORATION) C:\Windows\system32\ensppmon.dll 2014-10-29 21:49 - 2012-11-12 15:15 - 00558592 _____ (SEIKO EPSON CORPORATION) C:\Windows\system32\enppmon.dll 2014-10-29 21:49 - 2012-10-22 17:19 - 00219648 _____ (SEIKO EPSON CORPORATION) C:\Windows\system32\enspres.dll 2014-10-29 21:49 - 2012-10-22 17:19 - 00219648 _____ (SEIKO EPSON CORPORATION) C:\Windows\system32\enpres.dll 2014-10-29 21:49 - 2012-07-24 00:00 - 00466432 _____ (Seiko Epson Corporation) C:\Windows\system32\esxw2ud.dll 2014-10-29 21:49 - 2011-12-12 00:00 - 00135824 _____ (Seiko Epson Corporation) C:\Windows\system32\escsvc64.exe 2014-10-29 21:48 - 2014-11-03 21:14 - 00000000 ____D () C:\ProgramData\EPSON 2014-10-29 21:48 - 2011-04-18 19:03 - 00120320 _____ (SEIKO EPSON CORPORATION) C:\Windows\system32\E_YLMJJE.DLL 2014-10-29 18:50 - 2014-11-04 21:40 - 00000000 ____D () C:\Users\Donny1982\Downloads\Bewerbung Iwi 2014-10-19 08:57 - 2014-10-19 08:57 - 00001841 _____ () C:\Users\Donny1982\Desktop\iTunes.lnk ==================== One Month Modified Files and Folders ======= (If an entry is included in the fixlist, the file\folder will be moved.) 2014-11-18 21:18 - 2013-06-25 16:58 - 01733604 _____ () C:\Windows\WindowsUpdate.log 2014-11-18 07:34 - 2009-07-14 05:45 - 00026768 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-11-18 07:34 - 2009-07-14 05:45 - 00026768 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-11-18 06:50 - 2009-07-14 06:32 - 00000000 ____D () C:\Windows\system32\FxsTmp 2014-11-16 02:37 - 2014-07-08 17:37 - 04918960 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe 2014-11-15 20:24 - 2011-04-12 08:43 - 00699682 _____ () C:\Windows\system32\perfh007.dat 2014-11-15 20:24 - 2011-04-12 08:43 - 00149790 _____ () C:\Windows\system32\perfc007.dat 2014-11-15 20:24 - 2009-07-14 06:13 - 01620684 _____ () C:\Windows\system32\PerfStringBackup.INI 2014-11-15 20:22 - 2013-06-28 19:27 - 00000000 ____D () C:\Users\Donny1982\AppData\Roaming\vlc 2014-11-15 10:27 - 2009-07-14 06:09 - 00000000 ____D () C:\Windows\System32\Tasks\WPD 2014-11-15 04:04 - 2014-06-17 18:29 - 00000000 ____D () C:\Windows\rescache 2014-11-15 03:26 - 2013-06-28 16:06 - 00000000 ____D () C:\ProgramData\NVIDIA 2014-11-15 03:26 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2014-11-15 03:26 - 2009-07-14 05:45 - 00288984 _____ () C:\Windows\system32\FNTCACHE.DAT 2014-11-15 03:25 - 2013-07-04 20:33 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service 2014-11-15 03:23 - 2014-05-07 02:00 - 00000000 ___SD () C:\Windows\system32\CompatTel 2014-11-15 03:06 - 2013-07-02 18:11 - 00000000 ____D () C:\ProgramData\Microsoft Help 2014-11-12 17:16 - 2014-04-02 16:57 - 00000000 ____D () C:\ProgramData\Adobe 2014-11-12 17:16 - 2014-04-02 16:55 - 00000000 ____D () C:\Users\Donny1982\AppData\Local\Adobe 2014-11-12 17:16 - 2013-09-15 18:17 - 00000000 ____D () C:\Program Files (x86)\Adobe 2014-11-12 17:16 - 2013-06-28 19:35 - 00000000 ____D () C:\Users\Donny1982\AppData\Roaming\Adobe 2014-11-10 19:58 - 2013-06-28 20:18 - 00000000 ____D () C:\Program Files (x86)\JDownloader 2014-11-10 19:56 - 2014-08-18 19:52 - 00000000 ____D () C:\ProgramData\Package Cache 2014-11-10 19:56 - 2013-06-28 19:12 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira 2014-11-10 19:56 - 2013-06-28 19:06 - 00000000 ____D () C:\Program Files (x86)\Avira 2014-11-04 21:15 - 2013-03-26 19:29 - 00000000 ____D () C:\Users\Donny1982\Downloads\Scans 2014-11-01 12:29 - 2013-07-02 18:11 - 00000000 ____D () C:\Users\Donny1982\AppData\Local\Microsoft Help 2014-10-29 22:11 - 2014-05-05 19:34 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69 2014-10-29 22:11 - 2013-06-30 11:03 - 00000000 ____D () C:\Program Files\Common Files\Apple 2014-10-29 21:52 - 2013-06-28 18:03 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information 2014-10-28 18:29 - 2013-06-30 13:57 - 00000000 ____D () C:\Windows\System32\Tasks\Games Some content of TEMP: ==================== C:\Users\Donny1982\AppData\Local\Temp\avgnt.exe ==================== Bamital & volsnap Check ================= (There is no automatic fix for files that do not pass verification.) C:\Windows\System32\winlogon.exe => File is digitally signed C:\Windows\System32\wininit.exe => File is digitally signed C:\Windows\SysWOW64\wininit.exe => File is digitally signed C:\Windows\explorer.exe => File is digitally signed C:\Windows\SysWOW64\explorer.exe => File is digitally signed C:\Windows\System32\svchost.exe => File is digitally signed C:\Windows\SysWOW64\svchost.exe => File is digitally signed C:\Windows\System32\services.exe => File is digitally signed C:\Windows\System32\User32.dll => File is digitally signed C:\Windows\SysWOW64\User32.dll => File is digitally signed C:\Windows\System32\userinit.exe => File is digitally signed C:\Windows\SysWOW64\userinit.exe => File is digitally signed C:\Windows\System32\rpcss.dll => File is digitally signed C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2014-11-15 03:56 ==================== End Of Log ============================ --- --- --- [Spoiler/] Addition [Spoiler]Additional scan result of Farbar Recovery Scan Tool (x64) Version: 17-11-2014 Ran by Donny1982 at 2014-11-18 21:36:54 Running from C:\Users\Donny1982\Desktop Boot Mode: Normal ========================================================== ==================== Security Center ======================== (If an entry is included in the fixlist, it will be removed.) AV: Avira Desktop (Disabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859} AS: Avira Desktop (Disabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} ==================== Installed Programs ====================== (Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.) Adobe Acrobat 5.0 (HKLM-x32\...\Adobe Acrobat 5.0) (Version: 5.0 - Adobe Systems, Inc.) Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 2.5.1.17730 - Adobe Systems Inc.) Adobe Reader XI (11.0.09) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.09 - Adobe Systems Incorporated) Apple Application Support (HKLM-x32\...\{83CAF0DE-8D3B-4C37-A631-2B8F16EC3031}) (Version: 3.1 - Apple Inc.) Apple Mobile Device Support (HKLM\...\{BDD99690-3541-4619-9D2A-3CDDB3E15F9E}) (Version: 8.0.5.6 - Apple Inc.) Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.) Avira (HKLM-x32\...\{9480d4af-12b9-4e56-8034-4031ef6ab39d}) (Version: 1.1.25.25607 - Avira Operations GmbH & Co. KG) Avira (x32 Version: 1.1.25.25607 - Avira Operations GmbH & Co. KG) Hidden Avira Free Antivirus (HKLM-x32\...\Avira AntiVir Desktop) (Version: 14.0.7.306 - Avira) Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.) calibre 64bit (HKLM\...\{8A1C4F73-1FEE-4E43-A82F-BDB24E004096}) (Version: 0.9.37 - Kovid Goyal) CCleaner (HKLM\...\CCleaner) (Version: 4.03 - Piriform) Conexant 20672 SmartAudio HD (HKLM\...\CNXT_AUDIO_HDA) (Version: 8.32.23.5 - Conexant) Druckerdeinstallation für EPSON WF-3520 Series (HKLM\...\EPSON WF-3520 Series) (Version: - SEIKO EPSON Corporation) easytoshop (HKLM-x32\...\{532970A2-464B-73CB-BBC4-F209EAD3EEBE}) (Version: - "") <==== ATTENTION eLicenser Control (HKLM-x32\...\eLicenser Control) (Version: - Steinberg Media Technologies GmbH) Epson Benutzerhandbuch WF-3520 Series (HKLM-x32\...\WF-3520 Series Useg) (Version: - ) Epson Connect Guide (HKLM-x32\...\Epson Connect Guide) (Version: - ) Epson Connect Printer Setup (HKLM-x32\...\{D9B1D51B-EB56-410D-AEB5-1CCFAC4B6C8C}) (Version: 1.3.0 - SEIKO EPSON CORPORATION) Epson Event Manager (HKLM-x32\...\{8F01524C-0676-4CC1-B4AE-64753C723391}) (Version: 3.01.0005 - Seiko Epson Corporation) Epson E-Web Print (HKLM-x32\...\{896667C8-53F8-47B8-B6B0-B113B10F05BC}) (Version: 1.20.0000 - SEIKO EPSON CORPORATION) Epson FAX Utility (HKLM-x32\...\{0CBE6C93-CB2E-4378-91EE-12BE6D4E2E4A}) (Version: 1.31.00 - SEIKO EPSON CORPORATION) Epson Netzwerkhandbuch WF-3520 Series (HKLM-x32\...\WF-3520 Series Netg) (Version: - ) EPSON Printer Finder (HKLM-x32\...\{B8ECD0D3-AE08-4891-B6C7-32F96B75EB6C}) (Version: 1.0.0 - SEIKO EPSON CORPORATION) EPSON Scan (HKLM-x32\...\EPSON Scanner) (Version: - Seiko Epson Corporation) EpsonNet Print (HKLM-x32\...\{3E31400D-274E-4647-916C-2CACC3741799}) (Version: 2.6.0 - SEIKO EPSON CORPORATION) Free iPad Video Converter 3.7.2.1 (HKLM-x32\...\Free iPad Video Converter_is1) (Version: - FreeAudioVideoSoftTech, Inc.) Free WMA to MP3 Converter 1.16 (HKLM-x32\...\Free WMA to MP3 Converter_is1) (Version: - Jodix Technologies Ltd.) Integrated Camera Driver Installer Package Ver.1.1.0.1147 (HKLM-x32\...\{B2CA6F37-1602-4823-81B5-0384B6888AA6}) (Version: 1.1.0.1147 - RICOH) Integrated Camera TWAIN (HKLM-x32\...\{9CA0DEE4-E84B-466F-9B96-FC255F3A929F}) (Version: 1.0.11.1223 - Chicony Electronics Co.,Ltd.) Intel(R) Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1010 - Intel Corporation) Intel(R) Identity Protection Technology 1.2.28.0 (HKLM-x32\...\{A87263E8-26CB-1016-8F2F-C04708B17CE2}) (Version: 1.2.28.0 - Intel Corporation) Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 7.1.70.1205 - Intel Corporation) Intel(R) Network Connections Drivers (HKLM\...\PROSet) (Version: 16.8 - Intel) Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 8.15.10.2538 - Intel Corporation) Intel® PROSet/Wireless WiFi-Software (HKLM\...\{ECE5B218-A086-4E18-A362-D11181681457}) (Version: 15.03.1000.1637 - Intel Corporation) iTunes (HKLM\...\{2ABBBD91-91E5-4AD7-929A-FE15D1DC0576}) (Version: 12.0.1.26 - Apple Inc.) Java 7 Update 71 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F03217071FF}) (Version: 7.0.710 - Oracle) JDownloader 0.9 (HKLM-x32\...\5513-1208-7298-9440) (Version: 0.9 - AppWork GmbH) Lenovo Power Management Driver (HKLM\...\Power Management Driver) (Version: 1.67.00.02 - ) LiveSupport (HKLM-x32\...\LiveSupport_is1) (Version: 1.2.8.0 - PC Utilities Software Limited) <==== ATTENTION MAGIX Slideshow Maker 2 (HKLM-x32\...\MAGIX_MSI_Slideshow_Maker_2) (Version: 2.0.0.8 - MAGIX AG) MAGIX Slideshow Maker 2 (x32 Version: 2.0.0.8 - MAGIX AG) Hidden Malwarebytes Anti-Malware Version 2.0.1.1004 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.1.1004 - Malwarebytes Corporation) Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation) Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation) Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version: - Microsoft) Microsoft Office Enterprise 2007 (HKLM-x32\...\ENTERPRISE) (Version: 12.0.6612.1000 - Microsoft Corporation) Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{402ED4A1-8F5B-387A-8688-997ABF58B8F2}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Mozilla Firefox 33.1 (x86 de) (HKLM-x32\...\Mozilla Firefox 33.1 (x86 de)) (Version: 33.1 - Mozilla) Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 29.0.1 - Mozilla) Mp3tag v2.58 (HKLM-x32\...\Mp3tag) (Version: v2.58 - Florian Heidenreich) MP4 To MP3 Converter V3.0.5 (HKLM-x32\...\MP4 To MP3 Converter_is1) (Version: - hxxp://www.MP4ToMP3Converter.net) MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation) MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation) MSXML 4.0 SP3 Parser (HKLM-x32\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation) MSXML 4.0 SP3 Parser (KB2758694) (HKLM-x32\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation) MyHarmony (HKU\S-1-5-21-1828066295-1020933206-982316413-1000\...\036a0e4fc6a247ec) (Version: 1.0.1.257 - Logitech) NVIDIA 3D Vision Treiber 311.00 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 311.00 - NVIDIA Corporation) NVIDIA Grafiktreiber 311.00 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 311.00 - NVIDIA Corporation) NVIDIA HD-Audiotreiber 1.3.18.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.18.0 - NVIDIA Corporation) Optimizer Pro v3.2 (HKLM-x32\...\Optimizer Pro_is1) (Version: 3.2.0.2 - PC Utilities Software Limited) <==== ATTENTION RandomDealApp (HKLM-x32\...\{37476589-E48E-439E-A706-56189E2ED4C4}_is1) (Version: - RandomDealApp) <==== ATTENTION Renesas Electronics USB 3.0 Host Controller Driver (HKLM-x32\...\InstallShield_{5442DAB8-7177-49E1-8B22-09A049EA5996}) (Version: 2.1.36.0 - Renesas Electronics Corporation) Renesas Electronics USB 3.0 Host Controller Driver (x32 Version: 2.1.36.0 - Renesas Electronics Corporation) Hidden Rescue and Recovery (HKLM-x32\...\{BDB3E73F-5ECA-441D-96E1-F1CFCF3D427D}) (Version: 4.51.0045.00 - Lenovo Group Limited) RICOH_Media_Driver_v2.14.18.01 (HKLM-x32\...\{FE041B02-234C-4AAA-9511-80DF6482A458}) (Version: 2.14.18.01 - RICOH) Secunia PSI (3.0.0.9016) (HKLM-x32\...\Secunia PSI) (Version: 3.0.0.9016 - Secunia) Software Updater (HKLM-x32\...\{B307472F-7BD9-4040-9255-CE6D6A1196A3}) (Version: 4.3.1 - SEIKO EPSON CORPORATION) SpeedCommander 13 (x64) (HKLM\...\SpeedCommander 13 (x64)) (Version: 13 - SpeedProject) Steinberg Upload Manager (HKLM-x32\...\{88BBBD8F-4C19-4809-B84B-7A8F8238B48D}) (Version: 1.0.1 - Steinberg Media Technologies GmbH) TeamViewer 9 (HKLM-x32\...\TeamViewer 9) (Version: 9.0.32494 - TeamViewer) ThinkVantage Fingerprint Software (HKLM\...\{F58DA859-016E-492D-A588-317D9BB28002}) (Version: 5.9.9.7282 - Authentec Inc.) Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version: - Microsoft) Update für Microsoft Office Excel 2007 Help (KB963678) (HKLM-x32\...\{90120000-0016-0407-0000-0000000FF1CE}_ENTERPRISE_{BEC163EC-7A83-48A1-BFB6-3BF47CC2F8CF}) (Version: - Microsoft) Update für Microsoft Office Outlook 2007 Help (KB963677) (HKLM-x32\...\{90120000-001A-0407-0000-0000000FF1CE}_ENTERPRISE_{F6828576-6F79-470D-AB50-69D1BBADBD30}) (Version: - Microsoft) Update für Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM-x32\...\{90120000-0018-0407-0000-0000000FF1CE}_ENTERPRISE_{EA160DA3-E9B5-4D03-A518-21D306665B96}) (Version: - Microsoft) Update für Microsoft Office Word 2007 Help (KB963665) (HKLM-x32\...\{90120000-001B-0407-0000-0000000FF1CE}_ENTERPRISE_{38472199-D7B6-4833-A949-10E4EE6365A1}) (Version: - Microsoft) VLC media player (HKLM\...\VLC media player) (Version: 2.1.5 - VideoLAN) WaveLab LE 8 (64 bit) (HKLM\...\WaveLabLE8_64) (Version: 8.0.3.698 - Steinberg) WinRAR 5.01 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.01.0 - win.rar GmbH) ==================== Custom CLSID (selected items): ========================== (If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.) ==================== Restore Points ========================= 15-11-2014 02:00:26 Windows Update ==================== Hosts content: ========================== (If needed Hosts: directive could be included in the fixlist to reset Hosts.) 2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts ==================== Scheduled Tasks (whitelisted) ============= (If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.) Task: {0A049156-8D20-4C21-BDE3-DAF417C945C2} - System32\Tasks\Optimizer Pro Schedule => C:\Program Files (x86)\Optimizer Pro\OptProLauncher.exe [2014-11-04] (PC Utilities Software Limited) <==== ATTENTION Task: {12A94F2C-FEA7-4D7A-BB2C-BEEB94AEB348} - System32\Tasks\TVT\ChangePWD => %RR%\rrcmd.exe Task: {1323497A-B8B7-442C-8034-4F5106EB7B50} - System32\Tasks\{E2B80576-5163-40C2-97E2-9276CF9954F7} => C:\Users\Donny1982\Downloads\zoek.exe Task: {33397B68-E794-4506-B910-68772F38888B} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.) Task: {4B470FED-8DCD-4E22-8884-F171533F04DE} - System32\Tasks\TVT\UpdateRnR => %TVTCOMMON%\Scheduler\tvtsetsched.exe Task: {731DADC7-C632-4EB3-AF10-B7C42185A69D} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-06-19] (Piriform Ltd) Task: {77C94A17-F43B-49AC-B94D-77046E856AB1} - System32\Tasks\{F4828AB9-4C25-42DD-8968-200A39482542} => C:\Users\Donny1982\Downloads\zoek.exe Task: {7C42157D-0A82-444E-89EE-7FA95748E57B} - System32\Tasks\{2F0FC155-729B-40C3-A046-0656A0925C84} => C:\Users\Donny1982\Downloads\zoek.exe Task: {D83AB191-990C-4529-BFE6-63EA1BF89607} - System32\Tasks\{C85BA825-7305-46D8-ABF1-C0C4A853E5E5} => C:\Users\Donny1982\Downloads\zoek.exe Task: {E2ED0F0A-24ED-4F9D-A687-2D7C47A32E91} - System32\Tasks\TVT\LaunchRnR => %RR%\rrcmd.exe Task: {E82FC27C-A169-42B4-82D4-775FEA7EDCC2} - System32\Tasks\Games\UpdateCheck_S-1-5-21-1828066295-1020933206-982316413-1000 ==================== Loaded Modules (whitelisted) ============= 2013-06-28 16:06 - 2013-01-10 22:36 - 00087328 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll 2013-06-28 16:04 - 2011-09-25 23:36 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll 2013-06-28 17:14 - 2010-10-26 09:40 - 00049056 ____N () C:\Program Files\CONEXANT\ForteConfig\fmapp.exe 2014-11-12 17:40 - 2014-11-12 17:40 - 03113040 _____ () c:\Program Files (x86)\Optimizer Pro\OptProCrash.dll 2014-01-20 12:17 - 2014-01-20 12:17 - 00073544 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll 2014-10-11 13:05 - 2014-10-11 13:05 - 01044776 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll ==================== Alternate Data Streams (whitelisted) ========= (If an entry is included in the fixlist, only the Alternate Data Streams will be removed.) ==================== Safe Mode (whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.) ==================== EXE Association (whitelisted) ============= (If an entry is included in the fixlist, the default will be restored. None default entries will be removed.) ==================== MSCONFIG/TASK MANAGER disabled items ========= (Currently there is no automatic fix for this section.) ========================= Accounts: ========================== Administrator (S-1-5-21-1828066295-1020933206-982316413-500 - Administrator - Disabled) Donny1982 (S-1-5-21-1828066295-1020933206-982316413-1000 - Administrator - Enabled) => C:\Users\Donny1982 Gast (S-1-5-21-1828066295-1020933206-982316413-501 - Limited - Disabled) HomeGroupUser$ (S-1-5-21-1828066295-1020933206-982316413-1003 - Limited - Enabled) UpdatusUser (S-1-5-21-1828066295-1020933206-982316413-1001 - Limited - Enabled) => C:\Users\UpdatusUser ==================== Faulty Device Manager Devices ============= Name: SM-Bus-Controller Description: SM-Bus-Controller Class Guid: Manufacturer: Service: Problem: : The drivers for this device are not installed. (Code 28) Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard. ==================== Event log errors: ========================= Application errors: ================== Error: (11/16/2014 02:37:06 AM) (Source: Bonjour Service) (EventID: 100) (User: ) Description: Task Scheduling Error: m->NextScheduledSPRetry 21609820 Error: (11/16/2014 02:37:06 AM) (Source: Bonjour Service) (EventID: 100) (User: ) Description: Task Scheduling Error: m->NextScheduledEvent 21609820 Error: (11/16/2014 02:37:06 AM) (Source: Bonjour Service) (EventID: 100) (User: ) Description: Task Scheduling Error: Continuously busy for more than a second Error: (11/15/2014 08:22:18 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: vlc.exe, Version: 2.1.5.0, Zeitstempel: 0x00000000 Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.18247, Zeitstempel: 0x521eaf24 Ausnahmecode: 0xc0000005 Fehleroffset: 0x0000000000018e5d ID des fehlerhaften Prozesses: 0x13a8 Startzeit der fehlerhaften Anwendung: 0xvlc.exe0 Pfad der fehlerhaften Anwendung: vlc.exe1 Pfad des fehlerhaften Moduls: vlc.exe2 Berichtskennung: vlc.exe3 Error: (11/15/2014 05:49:36 PM) (Source: Bonjour Service) (EventID: 100) (User: ) Description: Task Scheduling Error: m->NextScheduledSPRetry 266839 Error: (11/15/2014 05:49:36 PM) (Source: Bonjour Service) (EventID: 100) (User: ) Description: Task Scheduling Error: m->NextScheduledEvent 266839 Error: (11/15/2014 05:49:36 PM) (Source: Bonjour Service) (EventID: 100) (User: ) Description: Task Scheduling Error: Continuously busy for more than a second Error: (11/15/2014 05:35:52 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: vlc.exe, Version: 2.1.5.0, Zeitstempel: 0x00000000 Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.18247, Zeitstempel: 0x521eaf24 Ausnahmecode: 0xc0000005 Fehleroffset: 0x0000000000018e5d ID des fehlerhaften Prozesses: 0x1524 Startzeit der fehlerhaften Anwendung: 0xvlc.exe0 Pfad der fehlerhaften Anwendung: vlc.exe1 Pfad des fehlerhaften Moduls: vlc.exe2 Berichtskennung: vlc.exe3 Error: (11/15/2014 03:27:47 AM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (11/14/2014 04:46:52 PM) (Source: Application Hang) (EventID: 1002) (User: ) Description: Programm javaw.exe, Version 7.0.70.10 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen. Prozess-ID: c4 Startzeit: 01cffddf5192f8f9 Endzeit: 0 Anwendungspfad: C:\Program Files (x86)\JDownloader\jre\bin\javaw.exe Berichts-ID: System errors: ============= Error: (11/15/2014 07:47:27 PM) (Source: Schannel) (EventID: 4120) (User: NT-AUTORITÄT) Description: Es wurde eine schwerwiegende Warnung generiert: 40. Der interne Fehlerstatus lautet: 252. Error: (11/15/2014 07:47:27 PM) (Source: Schannel) (EventID: 4120) (User: NT-AUTORITÄT) Description: Es wurde eine schwerwiegende Warnung generiert: 40. Der interne Fehlerstatus lautet: 252. Error: (11/15/2014 03:28:34 AM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT) Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC) Error: (11/14/2014 07:35:30 PM) (Source: volsnap) (EventID: 36) (User: ) Description: Die Schattenkopien von Volume "C:" wurden abgebrochen, weil der Schattenkopiespeicher nicht auf ein benutzerdefiniertes Limit vergrößert werden konnte. Error: (11/14/2014 04:54:57 PM) (Source: Schannel) (EventID: 4120) (User: NT-AUTORITÄT) Description: Es wurde eine schwerwiegende Warnung generiert: 40. Der interne Fehlerstatus lautet: 252. Error: (11/14/2014 06:45:57 AM) (Source: Service Control Manager) (EventID: 7011) (User: ) Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst MpsSvc erreicht. Error: (11/14/2014 03:40:33 AM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Der Dienst "Windows-Biometriedienst" wurde aufgrund folgenden Fehlers nicht gestartet: %%1083 Error: (11/12/2014 05:29:22 PM) (Source: Service Control Manager) (EventID: 7030) (User: ) Description: Der Dienst "RosettaStoneDaemon" ist als interaktiver Dienst gekennzeichnet. Das System wurde jedoch so konfiguriert, dass interaktive Dienste nicht möglich sind. Der Dienst wird möglicherweise nicht richtig funktionieren. Error: (11/12/2014 05:17:46 PM) (Source: Service Control Manager) (EventID: 7030) (User: ) Description: Der Dienst "RosettaStoneDaemon" ist als interaktiver Dienst gekennzeichnet. Das System wurde jedoch so konfiguriert, dass interaktive Dienste nicht möglich sind. Der Dienst wird möglicherweise nicht richtig funktionieren. Error: (11/09/2014 02:08:09 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Der Dienst "Windows-Biometriedienst" wurde aufgrund folgenden Fehlers nicht gestartet: %%1083 Microsoft Office Sessions: ========================= ==================== Memory info =========================== Processor: Intel(R) Core(TM) i7-2670QM CPU @ 2.20GHz Percentage of memory in use: 46% Total physical RAM: 3979.23 MB Available physical RAM: 2110.19 MB Total Pagefile: 7956.65 MB Available Pagefile: 5359.73 MB Total Virtual: 8192 MB Available Virtual: 8191.82 MB ==================== Drives ================================ Drive c: () (Fixed) (Total:465.66 GB) (Free:2.01 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (Size: 465.8 GB) (Disk ID: B972BEC2) Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=465.7 GB) - (Type=07 NTFS) ==================== End Of Log ============================ [Spoiler/] |
19.11.2014, 07:30 | #2 |
/// the machine /// TB-Ausbilder | Java version veraltet. hi,
__________________Lade Dir bitte von hier Revo Uninstaller (alternativ portable Revo Uninstaller) herunter.
Scan mit Combofix
__________________ |
19.11.2014, 18:10 | #3 |
| Java version veraltet. Combofix Logfile:
__________________Code:
ATTFilter ComboFix 14-11-17.01 - Donny1982 19.11.2014 17:46:02.1.8 - x64 Microsoft Windows 7 Ultimate 6.1.7601.1.1252.49.1031.18.3979.2181 [GMT 1:00] ausgeführt von:: c:\users\Donny1982\Desktop\ComboFix.exe AV: Avira Desktop *Disabled/Updated* {4D041356-F94D-285F-8768-AAE50FA36859} SP: Avira Desktop *Disabled/Updated* {F665F2B2-DF77-27D1-BDD8-9197742422E4} SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} . . (((((((((((((((((((((((((((((((((((( Weitere Löschungen )))))))))))))))))))))))))))))))))))))))))))))))) . . c:\programdata\374311380 c:\programdata\374311380\BITED82.tmp c:\programdata\Roaming c:\users\DONNY1~1\AppData\Local\Temp\avgnt.exe\Avira.OE.ExtApi.dll c:\users\Donny1982\AppData\Local\Temp\avgnt.exe\Avira.OE.ExtApi.dll c:\users\Donny1982\AppData\Roaming\LiveSupport.exe_log.txt c:\users\Donny1982\AppData\Roaming\Mozilla\Firefox\Profiles\uv03bhng.default\Extensions\B@uN1.org c:\users\Donny1982\AppData\Roaming\Mozilla\Firefox\Profiles\uv03bhng.default\Extensions\B@uN1.org\bootstrap.js c:\users\Donny1982\AppData\Roaming\Mozilla\Firefox\Profiles\uv03bhng.default\Extensions\B@uN1.org\chrome.manifest c:\users\Donny1982\AppData\Roaming\Mozilla\Firefox\Profiles\uv03bhng.default\Extensions\B@uN1.org\content\bg.js c:\users\Donny1982\AppData\Roaming\Mozilla\Firefox\Profiles\uv03bhng.default\Extensions\B@uN1.org\install.rdf c:\users\Donny1982\AppData\Roaming\regsvr32.exe_log.txt c:\windows\IsUn0407.exe c:\windows\TEMP\{7F6B28D8-6812-497F-9E36-375801AD2FCA}\fpb.tmp . . ((((((((((((((((((((((( Dateien erstellt von 2014-10-19 bis 2014-11-19 )))))))))))))))))))))))))))))) . . 2014-11-19 16:33 . 2014-11-19 16:33 -------- d-----w- c:\program files (x86)\VS Revo Group 2014-11-18 20:34 . 2014-11-18 20:37 -------- d-----w- C:\FRST 2014-11-15 09:28 . 2014-11-15 09:28 -------- d-sh--w- c:\users\Donny1982\AppData\Local\EmieBrowserModeList 2014-11-12 17:20 . 2014-11-19 16:36 -------- d-----w- c:\programdata\easytoshop 2014-11-12 17:20 . 2014-11-12 17:20 -------- d-----w- c:\programdata\868a96c248df03da 2014-11-12 16:37 . 2014-11-12 16:38 -------- d-----w- c:\users\Donny1982\AppData\Roaming\DAEMON Tools Lite 2014-11-12 16:37 . 2014-11-12 16:37 -------- d-----w- c:\programdata\DAEMON Tools Lite 2014-11-12 16:20 . 2014-11-12 16:20 -------- d-----w- c:\program files (x86)\Common Files\Macrovision Shared 2014-11-12 16:18 . 2014-11-12 16:18 -------- d-----w- c:\programdata\Rosetta Stone 2014-11-12 16:16 . 2014-11-12 16:16 -------- d-----w- c:\program files (x86)\Common Files\Adobe AIR 2014-11-12 16:16 . 2014-11-12 16:44 -------- d-----w- c:\program files (x86)\Rosetta Stone 2014-11-12 16:16 . 2014-11-12 16:20 -------- d-----w- c:\programdata\FLEXnet 2014-11-12 11:36 . 2014-08-21 06:43 1882624 ----a-w- c:\windows\system32\msxml3.dll 2014-11-04 20:34 . 2007-04-10 00:06 10752 ----a-w- c:\windows\system32\E_GCINST.DLL 2014-11-04 20:34 . 2011-03-14 02:03 83968 ----a-w- c:\windows\system32\E_YD4BJJE.DLL 2014-10-29 21:11 . 2014-10-29 21:11 -------- d-----w- c:\program files\iPod 2014-10-29 21:11 . 2014-10-29 21:12 -------- d-----w- c:\programdata\E1864A66-75E3-486a-BD95-D1B7D99A84A7 2014-10-29 21:11 . 2014-10-29 21:12 -------- d-----w- c:\program files\iTunes 2014-10-29 21:11 . 2014-10-29 21:12 -------- d-----w- c:\program files (x86)\iTunes 2014-10-29 21:05 . 2014-10-29 21:05 -------- d-----w- c:\program files\Common Files\EPSON 2014-10-29 20:51 . 2014-11-08 11:51 -------- d-----w- c:\users\Donny1982\AppData\Roaming\Epson 2014-10-29 20:50 . 2014-11-04 20:37 -------- d-----w- c:\program files (x86)\Epson Software 2014-10-29 20:49 . 2012-11-12 19:41 535552 ----a-w- c:\windows\system32\ensppui.dll 2014-10-29 20:49 . 2012-11-12 19:41 535552 ----a-w- c:\windows\system32\enppui.dll 2014-10-29 20:49 . 2012-11-12 14:15 558592 ----a-w- c:\windows\system32\ensppmon.dll 2014-10-29 20:49 . 2012-11-12 14:15 558592 ----a-w- c:\windows\system32\enppmon.dll 2014-10-29 20:49 . 2012-10-22 16:19 219648 ----a-w- c:\windows\system32\enspres.dll 2014-10-29 20:49 . 2012-10-22 16:19 219648 ----a-w- c:\windows\system32\enpres.dll 2014-10-29 20:49 . 2014-10-29 20:49 -------- d-----w- c:\program files\EpsonNet 2014-10-29 20:49 . 2012-07-23 23:00 466432 ----a-w- c:\windows\system32\esxw2ud.dll 2014-10-29 20:49 . 2011-12-11 23:00 135824 ----a-w- c:\windows\system32\escsvc64.exe 2014-10-29 20:49 . 2014-10-29 20:52 -------- d-----w- c:\program files (x86)\epson 2014-10-29 20:48 . 2011-04-18 18:03 120320 ----a-w- c:\windows\system32\E_YLMJJE.DLL 2014-10-29 20:48 . 2014-11-03 20:14 -------- d-----w- c:\programdata\EPSON . . . (((((((((((((((((((((((((((((((((((( Find3M Bericht )))))))))))))))))))))))))))))))))))))))))))))))))))))) . 2014-11-16 01:37 . 2014-07-08 16:37 4918960 ----a-w- c:\windows\SysWow64\FlashPlayerInstaller.exe 2014-10-17 12:44 . 2014-10-17 12:44 98216 ----a-w- c:\windows\SysWow64\WindowsAccessBridge-32.dll 2014-10-14 20:41 . 2013-06-30 09:51 43064 ----a-w- c:\windows\system32\drivers\avnetflt.sys 2014-10-14 20:41 . 2013-06-28 18:06 131608 ----a-w- c:\windows\system32\drivers\avipbb.sys 2014-10-14 20:41 . 2013-06-28 18:06 119272 ----a-w- c:\windows\system32\drivers\avgntflt.sys 2014-09-25 02:08 . 2014-10-01 17:40 371712 ----a-w- c:\windows\system32\qdvd.dll 2014-09-25 01:40 . 2014-10-01 17:40 519680 ----a-w- c:\windows\SysWow64\qdvd.dll 2014-09-09 22:11 . 2014-09-23 18:16 2048 ----a-w- c:\windows\system32\tzres.dll 2014-09-09 21:47 . 2014-09-23 18:16 2048 ----a-w- c:\windows\SysWow64\tzres.dll 2014-09-04 05:23 . 2014-10-15 14:00 424448 ----a-w- c:\windows\system32\rastls.dll 2014-09-04 05:04 . 2014-10-15 14:00 372736 ----a-w- c:\windows\SysWow64\rastls.dll 2014-08-23 02:07 . 2014-08-28 18:02 404480 ----a-w- c:\windows\system32\gdi32.dll 2014-08-23 01:45 . 2014-08-28 18:02 311808 ----a-w- c:\windows\SysWow64\gdi32.dll . . (((((((((((((((((((((((((((( Autostartpunkte der Registrierung )))))))))))))))))))))))))))))))))))))))) . . *Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. REGEDIT4 . [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "EPLTarget\P0000000000000000"="c:\windows\system32\spool\DRIVERS\x64\3\E_YATIJJE.EXE" [2012-02-28 283232] . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run] "NUSB3MON"="c:\program files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe" [2011-09-16 115048] "RotateImage"="c:\program files (x86)\Integrated Camera Driver\X64\RCIMGDIR.exe" [2008-10-30 55808] "avgnt"="c:\program files (x86)\Avira\AntiVir Desktop\avgnt.exe" [2014-11-18 703736] "APSDaemon"="c:\program files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2014-10-11 60712] "Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2014-08-21 959176] "FUFAXRCV"="c:\program files (x86)\Epson Software\FAX Utility\FUFAXRCV.exe" [2012-07-09 502952] "FUFAXSTM"="c:\program files (x86)\Epson Software\FAX Utility\FUFAXSTM.exe" [2012-07-09 863400] "EEventManager"="c:\program files (x86)\Epson Software\Event Manager\EEventManager.exe" [2012-04-02 1058912] "iTunesHelper"="c:\program files (x86)\iTunes\iTunesHelper.exe" [2014-10-15 157480] "Avira Systray"="c:\program files (x86)\Avira\My Avira\Avira.OE.Systray.exe" [2014-10-22 124208] . c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\ Secunia PSI Tray.lnk - c:\program files (x86)\Secunia\PSI\psi_tray.exe [2013-12-6 565464] . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "ConsentPromptBehaviorAdmin"= 5 (0x5) "ConsentPromptBehaviorUser"= 3 (0x3) "EnableUIADesktopToggle"= 0 (0x0) "EnableSecureUIAPath"= 1 (0x1) "DisableCAD"= 1 (0x1) . [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon] "Userinit"="userinit.exe" . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows] "LoadAppInit_DLLs"=1 (0x1) . [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa] Notification Packages REG_MULTI_SZ scecli c:\program files\ThinkVantage Fingerprint Software\psqlpwd.dll . [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\hitmanpro37] @="" . [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\hitmanpro37.sys] @="" . [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\HitmanPro37Crusader] @="" . [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\HitmanPro37CrusaderBoot] @="" . R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x] R3 dmvsc;dmvsc;c:\windows\system32\drivers\dmvsc.sys;c:\windows\SYSNATIVE\drivers\dmvsc.sys [x] R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCollector.exe [x] R3 PSI;PSI;c:\windows\system32\DRIVERS\psi_mf_amd64.sys;c:\windows\SYSNATIVE\DRIVERS\psi_mf_amd64.sys [x] R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x] R3 Synth3dVsc;Microsoft Virtual 3D Video Transport Driver;c:\windows\system32\drivers\Synth3dVsc.sys;c:\windows\SYSNATIVE\drivers\Synth3dVsc.sys [x] R3 terminpt;Microsoft Remote Desktop Input Driver;c:\windows\system32\drivers\terminpt.sys;c:\windows\SYSNATIVE\drivers\terminpt.sys [x] R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x] R3 TsUsbGD;%TsUsbGD.DeviceDesc.Generic%;c:\windows\system32\drivers\TsUsbGD.sys;c:\windows\SYSNATIVE\drivers\TsUsbGD.sys [x] R3 tsusbhub;Remote Deskotop USB Hub;c:\windows\system32\drivers\tsusbhub.sys;c:\windows\SYSNATIVE\drivers\tsusbhub.sys [x] R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys;c:\windows\SYSNATIVE\Drivers\usbaapl64.sys [x] R3 VGPU;VGPU;c:\windows\system32\drivers\rdvgkmd.sys;c:\windows\SYSNATIVE\drivers\rdvgkmd.sys [x] R3 WatAdminSvc;Windows-Aktivierungstechnologieservice;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x] R3 WSDScan;WSD-Scanunterstützung durch UMB;c:\windows\system32\DRIVERS\WSDScan.sys;c:\windows\SYSNATIVE\DRIVERS\WSDScan.sys [x] S0 nvpciflt;nvpciflt;c:\windows\system32\DRIVERS\nvpciflt.sys;c:\windows\SYSNATIVE\DRIVERS\nvpciflt.sys [x] S1 avkmgr;avkmgr;c:\windows\system32\DRIVERS\avkmgr.sys;c:\windows\SYSNATIVE\DRIVERS\avkmgr.sys [x] S1 nvkflt;nvkflt;c:\windows\system32\DRIVERS\nvkflt.sys;c:\windows\SYSNATIVE\DRIVERS\nvkflt.sys [x] S2 AntiVirSchedulerService;Avira Planer;c:\program files (x86)\Avira\AntiVir Desktop\sched.exe;c:\program files (x86)\Avira\AntiVir Desktop\sched.exe [x] S2 Avira.OE.ServiceHost;Avira Service Host;c:\program files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe;c:\program files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe [x] S2 CxAudMsg;Conexant Audio Message Service;c:\windows\system32\CxAudMsg64.exe;c:\windows\SYSNATIVE\CxAudMsg64.exe [x] S2 EpsonScanSvc;Epson Scanner Service;c:\windows\system32\EscSvc64.exe;c:\windows\SYSNATIVE\EscSvc64.exe [x] S2 jhi_service;Intel(R) Identity Protection Technology Host Interface Service;c:\program files (x86)\Intel\Services\IPT\jhi_service.exe;c:\program files (x86)\Intel\Services\IPT\jhi_service.exe [x] S2 risdxc;risdxc;c:\windows\system32\DRIVERS\risdxc64.sys;c:\windows\SYSNATIVE\DRIVERS\risdxc64.sys [x] S2 SAService;Conexant SmartAudio service;c:\windows\system32\SAsrv.exe;c:\windows\SYSNATIVE\SAsrv.exe [x] S2 Secunia PSI Agent;Secunia PSI Agent;c:\program files (x86)\Secunia\PSI\PSIA.exe;c:\program files (x86)\Secunia\PSI\PSIA.exe [x] S2 Secunia Update Agent;Secunia Update Agent;c:\program files (x86)\Secunia\PSI\sua.exe;c:\program files (x86)\Secunia\PSI\sua.exe [x] S2 smihlp;SMI Helper Driver (smihlp);c:\program files\ThinkVantage Fingerprint Software\smihlp.sys;c:\program files\ThinkVantage Fingerprint Software\smihlp.sys [x] S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [x] S2 TeamViewer9;TeamViewer 9;c:\program files (x86)\TeamViewer\Version9\TeamViewer_Service.exe;c:\program files (x86)\TeamViewer\Version9\TeamViewer_Service.exe [x] S2 UNS;Intel(R) Management and Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [x] S2 ZeroConfigService;Intel(R) PROSet/Wireless Zero Configuration Service;c:\program files\Intel\WiFi\bin\ZeroConfigService.exe;c:\program files\Intel\WiFi\bin\ZeroConfigService.exe [x] S3 5U877;USB Video Device;c:\windows\system32\DRIVERS\5U877.sys;c:\windows\SYSNATIVE\DRIVERS\5U877.sys [x] S3 nusb3hub;Renesas Electronics USB 3.0 Hub Driver;c:\windows\system32\DRIVERS\nusb3hub.sys;c:\windows\SYSNATIVE\DRIVERS\nusb3hub.sys [x] S3 nusb3xhc;Renesas Electronics USB 3.0 Host Controller Driver;c:\windows\system32\DRIVERS\nusb3xhc.sys;c:\windows\SYSNATIVE\DRIVERS\nusb3xhc.sys [x] S3 TVTI2C;Lenovo SM bus driver;c:\windows\system32\DRIVERS\Tvti2c.sys;c:\windows\SYSNATIVE\DRIVERS\Tvti2c.sys [x] . . --- Andere Dienste/Treiber im Speicher --- . *NewlyCreated* - WS2IFSL . . --------- X64 Entries ----------- . . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "IgfxTray"="c:\windows\system32\igfxtray.exe" [2011-10-13 167704] "HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2011-10-13 392472] "Persistence"="c:\windows\system32\igfxpers.exe" [2011-10-13 416024] "ForteConfig"="c:\program files\Conexant\ForteConfig\fmapp.exe" [2010-10-26 49056] "SmartAudio"="c:\program files\CONEXANT\SAII\SAIICpl.exe" [2010-12-14 316032] "PSQLLauncher"="c:\program files\ThinkVantage Fingerprint Software\launcher.exe" [2013-03-05 86312] . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] "AppInit_DLLs"=c:\windows\System32\nvinitx.dll . ------- Zusätzlicher Suchlauf ------- . uLocal Page = c:\windows\system32\blank.htm uStart Page = hxxp://www.google.com mLocal Page = c:\windows\SysWOW64\blank.htm IE: Nach Microsoft E&xel exportieren - c:\progra~2\MICROS~2\Office12\EXCEL.EXE/3000 TCP: DhcpNameServer = 192.168.178.1 FF - ProfilePath - c:\users\Donny1982\AppData\Roaming\Mozilla\Firefox\Profiles\uv03bhng.default\ FF - prefs.js: browser.search.defaulturl - hxxp://www.google.com/search?btnG=Google+Search&q= FF - prefs.js: browser.search.selectedEngine - Google FF - prefs.js: browser.startup.homepage - hxxp://www.google.com FF - prefs.js: keyword.URL - hxxp://www.google.com/search?btnG=Google+Search&q= . - - - - Entfernte verwaiste Registrierungseinträge - - - - . HKLM_Wow6432Node-ActiveSetup-{2D46B6DC-2207-486B-B523-A557E6D54B47} - start BHO-{c2e2dfb1-f145-48c9-b58e-9384aa0850a9} - c:\programdata\easytoshop\0qWprnfOdDKown.x64.dll AddRemove-Adobe Acrobat 5.0 - c:\windows\ISUN0407.EXE . . . --------------------- Gesperrte Registrierungsschluessel --------------------- . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security] @Denied: (Full) (Everyone) . ------------------------ Weitere laufende Prozesse ------------------------ . c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe c:\program files (x86)\Avira\AntiVir Desktop\avguard.exe c:\program files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe c:\windows\SysWOW64\SAsrv.exe c:\program files (x86)\TeamViewer\Version9\TeamViewer.exe c:\program files (x86)\TeamViewer\Version9\tv_w32.exe c:\program files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe c:\program files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe c:\program files (x86)\Common Files\Lenovo\tvt_reg_monitor_svc.exe . ************************************************************************** . Zeit der Fertigstellung: 2014-11-19 17:59:18 - PC wurde neu gestartet ComboFix-quarantined-files.txt 2014-11-19 16:59 . Vor Suchlauf: 4.636.061.696 Bytes frei Nach Suchlauf: 4.505.964.544 Bytes frei . - - End Of File - - 19C66B8C99CB74B987B15B91E38502F2 010006B85BF58DD9D7EA7E19E3500ED9 [spoiler/] |
20.11.2014, 16:26 | #4 |
/// the machine /// TB-Ausbilder | Java version veraltet. Downloade Dir bitte Malwarebytes Anti-Malware
Downloade Dir bitte AdwCleaner auf deinen Desktop.
Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
und ein frisches FRST log bitte.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
20.11.2014, 21:06 | #5 |
| Java version veraltet.Code:
ATTFilter Malwarebytes Anti-Malware www.malwarebytes.org Update, 20.11.2014 19:55:40, SYSTEM, DONNY1982-PC, Manual, Rootkit Database, 2014.9.18.1, 2014.11.18.1, Update, 20.11.2014 19:56:00, SYSTEM, DONNY1982-PC, Manual, Malware Database, 2014.9.19.5, 2014.11.20.6, Scan, 20.11.2014 20:14:10, SYSTEM, DONNY1982-PC, Manual, Start: % 1 "% 2", Dauer: % 1 min 17 Sekunden, Bedrohungs-Suchlauf, Abgeschlossen, 0 Malwareerkennung, 0-Malwareerkennung, Scan, 20.11.2014 20:39:40, SYSTEM, DONNY1982-PC, Manual, Start: % 1 "% 2", Dauer: % 1 min 16 Sekunden, Bedrohungs-Suchlauf, Abgeschlossen, 0 Malwareerkennung, 0-Malwareerkennung, (end) Code:
ATTFilter # AdwCleaner v4.101 - Bericht erstellt am 20/11/2014 um 20:46:22 # Aktualisiert 09/11/2014 von Xplode # Database : 2014-11-16.1 [Live] # Betriebssystem : Windows 7 Ultimate Service Pack 1 (64 bits) # Benutzername : Donny1982 - DONNY1982-PC # Gestartet von : C:\Users\Donny1982\Desktop\AdwCleaner_4.101.exe # Option : Löschen ***** [ Dienste ] ***** ***** [ Dateien / Ordner ] ***** Ordner Gelöscht : C:\ProgramData\easytoshop Ordner Gelöscht : C:\ProgramData\868a96c248df03da Ordner Gelöscht : C:\Users\Donny1982\Documents\Optimizer Pro ***** [ Tasks ] ***** ***** [ Verknüpfungen ] ***** ***** [ Registrierungsdatenbank ] ***** Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{EAF749DC-CD87-4B04-B22A-D4AC3FBCB2BC} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{E2343056-CC08-46AC-B898-BFC7ACF4E755} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{EAF749DC-CD87-4B04-B22A-D4AC3FBCB2BC} Schlüssel Gelöscht : HKCU\Software\Optimizer Pro Schlüssel Gelöscht : HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F} Schlüssel Gelöscht : HKLM\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F} Schlüssel Gelöscht : HKLM\SOFTWARE\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0} Schlüssel Gelöscht : HKLM\SOFTWARE\{6791A2F3-FC80-475C-A002-C014AF797E9C} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0FF2AEFF45EEA0A48A4B33C1973B6094 ***** [ Browser ] ***** -\\ Internet Explorer v11.0.9600.17420 -\\ Mozilla Firefox v33.1 (x86 de) [uv03bhng.default\prefs.js] - Zeile gelöscht : user_pref("extensions.CQ3ZL6fyuazXQ8xw.scode", "(function(){try{var url=(window.self.location.href + document.cookie);if(url.indexOf(\"acebook\")>-1url.indexOf(\"warnalert11.com\")>-1url.indexOf(\[...] ************************* AdwCleaner[R0].txt - [840 octets] - [02/04/2014 19:55:03] AdwCleaner[R1].txt - [2141 octets] - [20/11/2014 20:44:31] AdwCleaner[S0].txt - [1958 octets] - [20/11/2014 20:46:22] ########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [2018 octets] ########## Code:
ATTFilter ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Junkware Removal Tool (JRT) by Thisisu Version: 6.3.9 (11.15.2014:2) OS: Windows 7 Ultimate x64 Ran by Donny1982 on 20.11.2014 at 20:53:12,34 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~ Services ~~~ Registry Values ~~~ Registry Keys ~~~ Files ~~~ Folders ~~~ FireFox Emptied folder: C:\Users\Donny1982\AppData\Roaming\mozilla\firefox\profiles\uv03bhng.default\minidumps [13 files] ~~~ Event Viewer Logs were cleared ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Scan was completed on 20.11.2014 at 20:56:25,80 End of JRT log ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 20-11-2014 Ran by Donny1982 (administrator) on DONNY1982-PC on 20-11-2014 20:58:15 Running from C:\Users\Donny1982\Desktop Loaded Profiles: Donny1982 & UpdatusUser (Available profiles: Donny1982 & UpdatusUser) Platform: Windows 7 Ultimate Service Pack 1 (X64) OS Language: Deutsch (Deutschland) Internet Explorer Version 11 Boot Mode: Normal Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (Lenovo.) C:\Windows\System32\ibmpmsvc.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (Microsoft Corporation) C:\Windows\System32\wlanext.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe (Authentec Inc.) C:\Program Files\ThinkVantage Fingerprint Software\upeksvr.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe (Conexant Systems Inc.) C:\Windows\System32\CxAudMsg64.exe (Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe (Intel Corporation) C:\Program Files (x86)\Intel\Services\IPT\jhi_service.exe (Conexant Systems, Inc.) C:\Windows\SysWOW64\SASrv.exe (Secunia) C:\Program Files (x86)\Secunia\PSI\psia.exe (Secunia) C:\Program Files (x86)\Secunia\PSI\sua.exe (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe (Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe (Seiko Epson Corporation) C:\Windows\System32\escsvc64.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer.exe (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\tv_w32.exe (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\tv_x64.exe (Intel Corporation) C:\Windows\System32\hkcmd.exe (Intel Corporation) C:\Windows\System32\igfxpers.exe () C:\Program Files\CONEXANT\ForteConfig\fmapp.exe (SEIKO EPSON CORPORATION) C:\Windows\System32\spool\drivers\x64\3\E_YATIJJE.EXE (Secunia) C:\Program Files (x86)\Secunia\PSI\psi_tray.exe (Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe (Ricoh co.,Ltd.) C:\Program Files (x86)\Integrated Camera Driver\X64\RCIMGDIR.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (SEIKO EPSON CORPORATION) C:\Program Files (x86)\Epson Software\FAX Utility\FUFAXRCV.exe (SEIKO EPSON CORPORATION) C:\Program Files (x86)\Epson Software\FAX Utility\FUFAXSTM.exe (SEIKO EPSON CORPORATION) C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe (Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe (Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe (Lenovo Group Limited) C:\Program Files (x86)\Common Files\Lenovo\tvt_reg_monitor_svc.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe ==================== Registry (Whitelisted) ================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [ForteConfig] => C:\Program Files\Conexant\ForteConfig\fmapp.exe [49056 2010-10-26] () HKLM\...\Run: [SmartAudio] => C:\Program Files\CONEXANT\SAII\SAIICpl.exe [316032 2010-12-14] (Conexant systems, Inc.) HKLM\...\Run: [PSQLLauncher] => C:\Program Files\ThinkVantage Fingerprint Software\launcher.exe [86312 2013-03-05] (Authentec Inc.) HKLM-x32\...\Run: [NUSB3MON] => C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [115048 2011-09-16] (Renesas Electronics Corporation) HKLM-x32\...\Run: [RotateImage] => C:\Program Files (x86)\Integrated Camera Driver\X64\RCIMGDIR.exe [55808 2008-10-30] (Ricoh co.,Ltd.) HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [703736 2014-11-19] (Avira Operations GmbH & Co. KG) HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [60712 2014-10-11] (Apple Inc.) HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959176 2014-08-21] (Adobe Systems Incorporated) HKLM-x32\...\Run: [FUFAXRCV] => C:\Program Files (x86)\Epson Software\FAX Utility\FUFAXRCV.exe [502952 2012-07-09] (SEIKO EPSON CORPORATION) HKLM-x32\...\Run: [FUFAXSTM] => C:\Program Files (x86)\Epson Software\FAX Utility\FUFAXSTM.exe [863400 2012-07-09] (SEIKO EPSON CORPORATION) HKLM-x32\...\Run: [EEventManager] => C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe [1058912 2012-04-02] (SEIKO EPSON CORPORATION) HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [157480 2014-10-15] (Apple Inc.) HKLM-x32\...\Run: [Avira Systray] => C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe [124208 2014-10-22] (Avira Operations GmbH & Co. KG) Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation) Winlogon\Notify\psfus: C:\Program Files\ThinkVantage Fingerprint Software\psqlpwd.dll (Authentec Inc.) HKU\S-1-5-21-1828066295-1020933206-982316413-1000\...\Run: [EPLTarget\P0000000000000000] => C:\Windows\system32\spool\DRIVERS\x64\3\E_YATIJJE.EXE [283232 2012-02-28] (SEIKO EPSON CORPORATION) AppInit_DLLs: c:\Windows\System32\nvinitx.dll => c:\Windows\System32\nvinitx.dll [245872 2013-01-11] (NVIDIA Corporation) Lsa: [Notification Packages] scecli C:\Program Files\ThinkVantage Fingerprint Software\psqlpwd.dll Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Secunia PSI Tray.lnk ShortcutTarget: Secunia PSI Tray.lnk -> C:\Program Files (x86)\Secunia\PSI\psi_tray.exe (Secunia) CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) ProxyEnable: [.DEFAULT] => Internet Explorer proxy is enabled. ProxyServer: [.DEFAULT] => http=127.0.0.1:54813;https=127.0.0.1:54813 HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome HKU\S-1-5-21-1828066295-1020933206-982316413-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKU\S-1-5-21-1828066295-1020933206-982316413-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xB19246B31174CE01 HKU\S-1-5-21-1828066295-1020933206-982316413-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe SearchScopes: HKLM-x32 -> DefaultScope value is missing. SearchScopes: HKU\S-1-5-21-1828066295-1020933206-982316413-1000 -> {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = hxxp://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage} BHO: easytoshop -> {c2e2dfb1-f145-48c9-b58e-9384aa0850a9} -> C:\ProgramData\easytoshop\0qWprnfOdDKown.x64.dll No File BHO-x32: Adobe PDF Reader -> {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated) BHO-x32: E-Web Print -> {201CF130-E29C-4E5C-A73F-CD197DEFA6AE} -> C:\Program Files (x86)\Epson Software\E-Web Print\ewps_tb.dll (SEIKO EPSON CORPORATION) BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) Toolbar: HKLM-x32 - E-Web Print - {201CF130-E29C-4E5C-A73F-CD197DEFA6AE} - C:\Program Files (x86)\Epson Software\E-Web Print\ewps_tb.dll (SEIKO EPSON CORPORATION) Tcpip\Parameters: [DhcpNameServer] 192.168.178.1 FireFox: ======== FF ProfilePath: C:\Users\Donny1982\AppData\Roaming\Mozilla\Firefox\Profiles\uv03bhng.default FF NewTab: hxxp://www.google.com/ FF DefaultSearchUrl: hxxp://www.google.com/search?btnG=Google+Search&q= FF SearchEngineOrder.1: Google FF SelectedSearchEngine: Google FF Homepage: hxxp://www.google.com FF Keyword.URL: hxxp://www.google.com/search?btnG=Google+Search&q= FF Plugin: @microsoft.com/GENUINE -> disabled No File FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation) FF Plugin: @videolan.org/vlc,version=2.0.7 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin: @videolan.org/vlc,version=2.1.2 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin: @videolan.org/vlc,version=2.1.4 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin: @videolan.org/vlc,version=2.1.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll () FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.66 -> C:\Program Files (x86)\Intel\Services\IPT\npIntelWebAPIIPT.dll (Intel Corporation) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Services\IPT\npIntelWebAPIUpdater.dll (Intel Corporation) FF Plugin-x32: @java.com/DTPlugin,version=10.71.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=10.71.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation) FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation) FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Extension: Avira Browser Safety - C:\Users\Donny1982\AppData\Roaming\Mozilla\Firefox\Profiles\uv03bhng.default\Extensions\abs@avira.com [2014-11-19] FF HKLM-x32\...\Firefox\Extensions: [e-webprint@epson.com] - C:\Program Files (x86)\Epson Software\E-Web Print\Firefox Add-on FF Extension: E-Web Print - C:\Program Files (x86)\Epson Software\E-Web Print\Firefox Add-on [2014-11-04] Chrome: ======= CHR dev: Chrome dev build detected! <======= ATTENTION ==================== Services (Whitelisted) ================= (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [432888 2014-11-19] (Avira Operations GmbH & Co. KG) R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [432888 2014-11-19] (Avira Operations GmbH & Co. KG) R2 Avira.OE.ServiceHost; C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe [164656 2014-10-22] (Avira Operations GmbH & Co. KG) R2 EpsonScanSvc; C:\Windows\system32\EscSvc64.exe [135824 2011-12-12] (Seiko Epson Corporation) R2 Secunia PSI Agent; C:\Program Files (x86)\Secunia\PSI\PSIA.exe [1229528 2013-12-06] (Secunia) R2 Secunia Update Agent; C:\Program Files (x86)\Secunia\PSI\sua.exe [662232 2013-12-06] (Secunia) R2 ThinkVantage Registry Monitor Service; C:\Program Files (x86)\Common Files\Lenovo\tvt_reg_monitor_svc.exe [1028096 2010-08-31] (Lenovo Group Limited) [File not signed] S3 TVT Backup Service; C:\Program Files (x86)\Lenovo\Rescue and Recovery\rrservice.exe [1517928 2013-03-11] (Lenovo Group Limited) R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [3342640 2012-08-23] (Intel® Corporation) ==================== Drivers (Whitelisted) ==================== (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [119272 2014-10-14] (Avira Operations GmbH & Co. KG) R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131608 2014-10-14] (Avira Operations GmbH & Co. KG) R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-12-16] (Avira Operations GmbH & Co. KG) S3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [129752 2014-11-20] (Malwarebytes Corporation) R1 nvkflt; C:\Windows\System32\DRIVERS\nvkflt.sys [284448 2013-01-11] (NVIDIA Corporation) S3 PSI; C:\Windows\System32\DRIVERS\psi_mf_amd64.sys [18456 2013-12-06] (Secunia) R2 smihlp; C:\Program Files\ThinkVantage Fingerprint Software\smihlp.sys [13128 2011-05-30] (Authentec Inc.) R3 TVTI2C; C:\Windows\System32\DRIVERS\Tvti2c.sys [40248 2011-05-30] (Lenovo Information Product(ShenZhen China) Inc.) S3 USBAAPL64; C:\Windows\System32\Drivers\usbaapl64.sys [54784 2012-12-13] (Apple, Inc.) [File not signed] S3 athr; system32\DRIVERS\athrx.sys [X] S3 catchme; \??\C:\ComboFix\catchme.sys [X] S3 VGPU; System32\drivers\rdvgkmd.sys [X] ==================== NetSvcs (Whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.) ==================== One Month Created Files and Folders ======== (If an entry is included in the fixlist, the file\folder will be moved.) 2014-11-20 20:58 - 2014-11-20 20:58 - 00015105 _____ () C:\Users\Donny1982\Desktop\FRST.txt 2014-11-20 20:58 - 2014-11-20 20:58 - 00000000 ____D () C:\Users\Donny1982\Desktop\FRST-OlderVersion 2014-11-20 20:56 - 2014-11-20 20:56 - 00000761 _____ () C:\Users\Donny1982\Desktop\JRT.txt 2014-11-20 20:51 - 2014-11-20 20:51 - 01707532 _____ (Thisisu) C:\Users\Donny1982\Desktop\JRT.exe 2014-11-20 20:49 - 2014-11-20 20:49 - 00002106 _____ () C:\Users\Donny1982\Desktop\AdwCleaner[S0].txt 2014-11-20 20:43 - 2014-11-20 20:43 - 02140160 _____ () C:\Users\Donny1982\Desktop\AdwCleaner_4.101.exe 2014-11-20 20:42 - 2014-11-20 20:42 - 00000634 _____ () C:\Users\Donny1982\Desktop\mbam.txt 2014-11-20 19:55 - 2014-11-20 19:55 - 00001142 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2014-11-20 19:55 - 2014-11-20 19:55 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 2014-11-20 19:55 - 2014-11-20 19:55 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 2014-11-20 19:55 - 2014-10-01 11:11 - 00093400 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys 2014-11-20 19:55 - 2014-10-01 11:11 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys 2014-11-20 19:55 - 2014-10-01 11:11 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys 2014-11-20 19:53 - 2014-11-20 19:53 - 19828376 _____ (Malwarebytes Corporation ) C:\Users\Donny1982\Downloads\mbam-setup-2.0.3.1025.exe 2014-11-19 17:59 - 2014-11-19 17:59 - 00016468 _____ () C:\ComboFix.txt 2014-11-19 17:43 - 2014-11-19 17:59 - 00000000 ____D () C:\Qoobox 2014-11-19 17:43 - 2011-06-26 07:45 - 00256000 _____ () C:\Windows\PEV.exe 2014-11-19 17:43 - 2010-11-07 18:20 - 00208896 _____ () C:\Windows\MBR.exe 2014-11-19 17:43 - 2009-04-20 05:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe 2014-11-19 17:43 - 2000-08-31 01:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe 2014-11-19 17:43 - 2000-08-31 01:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe 2014-11-19 17:43 - 2000-08-31 01:00 - 00098816 _____ () C:\Windows\sed.exe 2014-11-19 17:43 - 2000-08-31 01:00 - 00080412 _____ () C:\Windows\grep.exe 2014-11-19 17:43 - 2000-08-31 01:00 - 00068096 _____ () C:\Windows\zip.exe 2014-11-19 17:42 - 2014-11-19 17:58 - 00000000 ____D () C:\Windows\erdnt 2014-11-19 17:42 - 2014-11-19 17:42 - 05598319 ____R (Swearware) C:\Users\Donny1982\Desktop\ComboFix.exe 2014-11-19 17:41 - 2014-11-19 17:41 - 05598319 _____ (Swearware) C:\Users\Donny1982\Downloads\ComboFix.exe 2014-11-19 17:33 - 2014-11-19 17:33 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group 2014-11-19 17:32 - 2014-11-19 17:32 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Donny1982\Downloads\revosetup95.exe 2014-11-19 17:32 - 2014-11-19 17:32 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Donny1982\Desktop\revosetup95.exe 2014-11-19 03:39 - 2014-11-11 04:08 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll 2014-11-19 03:39 - 2014-11-11 04:08 - 00241152 _____ (Microsoft Corporation) C:\Windows\system32\pku2u.dll 2014-11-19 03:39 - 2014-11-11 03:44 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll 2014-11-19 03:39 - 2014-11-11 03:44 - 00186880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pku2u.dll 2014-11-18 21:34 - 2014-11-20 20:58 - 00000000 ____D () C:\FRST 2014-11-18 21:33 - 2014-11-20 20:58 - 02117632 _____ (Farbar) C:\Users\Donny1982\Desktop\FRST64.exe 2014-11-15 17:49 - 2014-11-15 19:46 - 711697844 _____ () C:\Users\Donny1982\Downloads\UTGJEOWMIOH-16-18.rar.part 2014-11-15 17:32 - 2014-11-15 19:46 - 714591312 _____ () C:\Users\Donny1982\Downloads\UTGJEOWMIOH-157-159.rar.part 2014-11-15 17:32 - 2014-11-15 17:32 - 00512000 _____ () C:\Users\Donny1982\Downloads\UTGJEOWMIOH-154-156.rar.part 2014-11-15 17:31 - 2014-11-15 17:32 - 00512000 _____ () C:\Users\Donny1982\Downloads\UTGJEOWMIOH-151-153.rar.part 2014-11-15 17:31 - 2014-11-15 17:31 - 00512000 _____ () C:\Users\Donny1982\Downloads\UTGJEOWMIOH-148-150.rar.part 2014-11-15 17:31 - 2013-08-29 19:18 - 276342784 _____ () C:\Users\Donny1982\Downloads\tjgojsw-147.avi 2014-11-15 17:31 - 2013-08-29 19:12 - 271026176 _____ () C:\Users\Donny1982\Downloads\tjgojsw-146.avi 2014-11-15 17:31 - 2013-08-29 19:00 - 271040512 _____ () C:\Users\Donny1982\Downloads\tjgojsw-145.avi 2014-11-15 17:06 - 2014-11-15 17:31 - 818409766 _____ () C:\Users\Donny1982\Downloads\UTGJEOWMIOH-145-147.rar 2014-11-15 17:06 - 2013-08-29 19:19 - 270979072 _____ () C:\Users\Donny1982\Downloads\tjgojsw-142.avi 2014-11-15 17:06 - 2013-08-29 19:17 - 270995456 _____ () C:\Users\Donny1982\Downloads\tjgojsw-143.avi 2014-11-15 17:06 - 2013-08-29 19:15 - 271128576 _____ () C:\Users\Donny1982\Downloads\tjgojsw-144.avi 2014-11-15 16:42 - 2014-11-15 17:06 - 813103398 _____ () C:\Users\Donny1982\Downloads\UTGJEOWMIOH-142-144.rar 2014-11-15 16:42 - 2013-08-29 19:15 - 291852288 _____ () C:\Users\Donny1982\Downloads\tjgojsw-139.avi 2014-11-15 16:42 - 2013-08-29 19:14 - 271063040 _____ () C:\Users\Donny1982\Downloads\tjgojsw-141.avi 2014-11-15 16:42 - 2013-08-29 19:10 - 271091712 _____ () C:\Users\Donny1982\Downloads\tjgojsw-140.avi 2014-11-15 16:16 - 2014-11-15 16:41 - 834007334 _____ () C:\Users\Donny1982\Downloads\UTGJEOWMIOH-139-141.rar 2014-11-15 16:16 - 2013-08-29 19:18 - 271013888 _____ () C:\Users\Donny1982\Downloads\tjgojsw-138.avi 2014-11-15 16:16 - 2013-08-29 19:15 - 271183872 _____ () C:\Users\Donny1982\Downloads\tjgojsw-136.avi 2014-11-15 16:16 - 2013-08-29 19:11 - 271136768 _____ () C:\Users\Donny1982\Downloads\tjgojsw-137.avi 2014-11-15 15:51 - 2014-11-15 16:16 - 813334822 _____ () C:\Users\Donny1982\Downloads\UTGJEOWMIOH-136-138.rar 2014-11-15 15:51 - 2013-08-29 19:16 - 271106048 _____ () C:\Users\Donny1982\Downloads\tjgojsw-134.avi 2014-11-15 15:51 - 2013-08-29 19:15 - 271167488 _____ () C:\Users\Donny1982\Downloads\tjgojsw-133.avi 2014-11-15 15:51 - 2013-08-29 19:08 - 271175680 _____ () C:\Users\Donny1982\Downloads\tjgojsw-135.avi 2014-11-15 15:27 - 2014-11-15 15:51 - 813449510 _____ () C:\Users\Donny1982\Downloads\UTGJEOWMIOH-133-135.rar 2014-11-15 15:27 - 2013-08-29 19:15 - 271136768 _____ () C:\Users\Donny1982\Downloads\tjgojsw-131.avi 2014-11-15 15:27 - 2013-08-29 19:14 - 271362048 _____ () C:\Users\Donny1982\Downloads\tjgojsw-132.avi 2014-11-15 15:27 - 2013-08-29 19:12 - 271183872 _____ () C:\Users\Donny1982\Downloads\tjgojsw-130.avi 2014-11-15 15:02 - 2014-11-15 15:26 - 813682982 _____ () C:\Users\Donny1982\Downloads\UTGJEOWMIOH-130-132.rar 2014-11-15 15:02 - 2013-08-29 19:17 - 255541248 _____ () C:\Users\Donny1982\Downloads\tjgojsw-13.avi 2014-11-15 15:02 - 2013-08-29 19:16 - 256096256 _____ () C:\Users\Donny1982\Downloads\tjgojsw-14.avi 2014-11-15 15:02 - 2013-08-29 19:07 - 250836992 _____ () C:\Users\Donny1982\Downloads\tjgojsw-15.avi 2014-11-15 14:38 - 2014-11-15 15:02 - 762474787 _____ () C:\Users\Donny1982\Downloads\UTGJEOWMIOH-13-15.rar 2014-11-15 14:38 - 2013-08-29 19:18 - 271601664 _____ () C:\Users\Donny1982\Downloads\tjgojsw-128.avi 2014-11-15 14:38 - 2013-08-29 19:18 - 271159296 _____ () C:\Users\Donny1982\Downloads\tjgojsw-127.avi 2014-11-15 14:38 - 2013-08-29 19:17 - 271249408 _____ () C:\Users\Donny1982\Downloads\tjgojsw-129.avi 2014-11-15 14:12 - 2014-11-15 14:38 - 814010662 _____ () C:\Users\Donny1982\Downloads\UTGJEOWMIOH-127-129.rar 2014-11-15 14:12 - 2013-08-29 19:17 - 271239168 _____ () C:\Users\Donny1982\Downloads\tjgojsw-124.avi 2014-11-15 14:12 - 2013-08-29 19:10 - 271214592 _____ () C:\Users\Donny1982\Downloads\tjgojsw-126.avi 2014-11-15 14:12 - 2013-08-29 19:09 - 271134720 _____ () C:\Users\Donny1982\Downloads\tjgojsw-125.avi 2014-11-15 13:47 - 2014-11-15 14:12 - 813588774 _____ () C:\Users\Donny1982\Downloads\UTGJEOWMIOH-124-126.rar 2014-11-15 13:47 - 2013-08-29 19:18 - 271239168 _____ () C:\Users\Donny1982\Downloads\tjgojsw-123.avi 2014-11-15 13:47 - 2013-08-29 19:13 - 271210496 _____ () C:\Users\Donny1982\Downloads\tjgojsw-122.avi 2014-11-15 13:47 - 2013-08-29 18:57 - 271179776 _____ () C:\Users\Donny1982\Downloads\tjgojsw-121.avi 2014-11-15 13:22 - 2014-11-15 13:47 - 813629734 _____ () C:\Users\Donny1982\Downloads\UTGJEOWMIOH-121-123.rar 2014-11-15 13:22 - 2013-08-29 19:19 - 255672320 _____ () C:\Users\Donny1982\Downloads\tjgojsw-118.avi 2014-11-15 13:22 - 2013-08-29 19:17 - 271163392 _____ () C:\Users\Donny1982\Downloads\tjgojsw-120.avi 2014-11-15 13:22 - 2013-08-29 18:35 - 255561728 _____ () C:\Users\Donny1982\Downloads\tjgojsw-119.avi 2014-11-15 12:58 - 2014-11-15 13:21 - 782397734 _____ () C:\Users\Donny1982\Downloads\UTGJEOWMIOH-118-120.rar 2014-11-15 12:58 - 2013-08-29 19:18 - 271284224 _____ () C:\Users\Donny1982\Downloads\tjgojsw-116.avi 2014-11-15 12:58 - 2013-08-29 19:09 - 271179776 _____ () C:\Users\Donny1982\Downloads\tjgojsw-115.avi 2014-11-15 12:58 - 2013-08-29 19:07 - 271300608 _____ () C:\Users\Donny1982\Downloads\tjgojsw-117.avi 2014-11-15 12:33 - 2014-11-15 12:58 - 813764902 _____ () C:\Users\Donny1982\Downloads\UTGJEOWMIOH-115-117.rar 2014-11-15 12:33 - 2013-08-29 19:08 - 271392768 _____ () C:\Users\Donny1982\Downloads\tjgojsw-113.avi 2014-11-15 12:33 - 2013-08-29 19:06 - 271316992 _____ () C:\Users\Donny1982\Downloads\tjgojsw-114.avi 2014-11-15 12:33 - 2013-08-29 18:52 - 271290368 _____ () C:\Users\Donny1982\Downloads\tjgojsw-112.avi 2014-11-15 12:09 - 2013-08-29 19:03 - 271259648 _____ () C:\Users\Donny1982\Downloads\tjgojsw-111.avi 2014-11-15 12:08 - 2014-11-15 12:32 - 814000422 _____ () C:\Users\Donny1982\Downloads\UTGJEOWMIOH-112-114.rar 2014-11-15 12:08 - 2013-08-29 19:15 - 271181824 _____ () C:\Users\Donny1982\Downloads\tjgojsw-110.avi 2014-11-15 12:08 - 2013-08-29 19:10 - 271194112 _____ () C:\Users\Donny1982\Downloads\tjgojsw-109.avi 2014-11-15 11:44 - 2014-11-15 12:08 - 813635878 _____ () C:\Users\Donny1982\Downloads\UTGJEOWMIOH-109-111.rar 2014-11-15 11:44 - 2013-08-29 19:19 - 271241216 _____ () C:\Users\Donny1982\Downloads\tjgojsw-108.avi 2014-11-15 11:44 - 2013-08-29 19:18 - 271222784 _____ () C:\Users\Donny1982\Downloads\tjgojsw-106.avi 2014-11-15 11:44 - 2013-08-29 19:18 - 271144960 _____ () C:\Users\Donny1982\Downloads\tjgojsw-107.avi 2014-11-15 11:19 - 2014-11-15 11:43 - 813609254 _____ () C:\Users\Donny1982\Downloads\UTGJEOWMIOH-106-108.rar 2014-11-15 11:19 - 2013-08-29 19:16 - 270927872 _____ () C:\Users\Donny1982\Downloads\tjgojsw-103.avi 2014-11-15 11:19 - 2013-08-29 19:13 - 271085568 _____ () C:\Users\Donny1982\Downloads\tjgojsw-104.avi 2014-11-15 11:19 - 2013-08-29 19:04 - 271142912 _____ () C:\Users\Donny1982\Downloads\tjgojsw-105.avi 2014-11-15 10:54 - 2014-11-15 11:19 - 813156646 _____ () C:\Users\Donny1982\Downloads\UTGJEOWMIOH-103-105.rar 2014-11-15 10:54 - 2013-08-29 19:17 - 271243264 _____ () C:\Users\Donny1982\Downloads\tjgojsw-100.avi 2014-11-15 10:54 - 2013-08-29 19:13 - 255457280 _____ () C:\Users\Donny1982\Downloads\tjgojsw-102.avi 2014-11-15 10:54 - 2013-08-29 19:12 - 271247360 _____ () C:\Users\Donny1982\Downloads\tjgojsw-101.avi 2014-11-15 10:42 - 2013-08-29 19:18 - 255520768 _____ () C:\Users\Donny1982\Downloads\tjgojsw-11.avi 2014-11-15 10:42 - 2013-08-29 19:08 - 255479808 _____ () C:\Users\Donny1982\Downloads\tjgojsw-12.avi 2014-11-15 10:42 - 2013-08-29 19:00 - 250220544 _____ () C:\Users\Donny1982\Downloads\tjgojsw-10.avi 2014-11-15 10:28 - 2014-11-15 10:28 - 00000000 __SHD () C:\Users\Donny1982\AppData\Local\EmieBrowserModeList 2014-11-15 03:26 - 2014-11-20 20:47 - 00000224 _____ () C:\Windows\setupact.log 2014-11-15 03:26 - 2014-11-15 03:26 - 00000000 _____ () C:\Windows\setuperr.log 2014-11-15 03:25 - 2014-11-20 20:47 - 00013468 _____ () C:\Windows\PFRO.log 2014-11-14 22:06 - 2014-11-14 22:07 - 00000000 ____D () C:\Users\Donny1982\Downloads\Once.Upon.a.Time.Es.war.einmal.S03E16.Gruen.vor.Neid.GERMAN.DUBBED.BDRip.x264-TVP 2014-11-14 21:55 - 2014-11-14 22:06 - 376429772 _____ () C:\Users\Donny1982\Downloads\onceupon-s03e16.rar 2014-11-14 21:55 - 2014-11-14 21:55 - 00000000 ____D () C:\Users\Donny1982\Downloads\Once.Upon.a.Time.Es.war.einmal.S03E15.Wo.Lumiere.ist.ist.auch.Schatten.GERMAN.DUBBED.BDRip.x264-TVP 2014-11-14 21:44 - 2014-11-14 21:55 - 351901076 _____ () C:\Users\Donny1982\Downloads\onceupon-s03e15.rar 2014-11-14 21:44 - 2014-11-14 21:44 - 00000000 ____D () C:\Users\Donny1982\Downloads\Once.Upon.a.Time.Es.war.einmal.S03E14.The.Tower.GERMAN.DUBBED.BDRip.x264-TVP 2014-11-14 21:33 - 2014-11-14 21:44 - 342450828 _____ () C:\Users\Donny1982\Downloads\onceupon-s03e14.rar 2014-11-14 21:33 - 2014-11-14 21:33 - 00000000 ____D () C:\Users\Donny1982\Downloads\Once.Upon.a.Time.Es.war.einmal.S03E13.Witch.Hunt.GERMAN.DUBBED.BDRip.x264-TVP 2014-11-14 21:22 - 2014-11-14 21:33 - 364052068 _____ () C:\Users\Donny1982\Downloads\onceupon-s03e13.rar 2014-11-14 21:22 - 2014-11-14 21:22 - 00000000 ____D () C:\Users\Donny1982\Downloads\Once.Upon.a.Time.Es.war.einmal.S03E12.New.York.City.Serenade.GERMAN.DUBBED.BDRip.x264-TVP 2014-11-14 21:09 - 2014-11-14 21:22 - 407126420 _____ () C:\Users\Donny1982\Downloads\onceupon-s03e12.rar 2014-11-14 21:09 - 2014-11-14 21:09 - 00000000 ____D () C:\Users\Donny1982\Downloads\Once.Upon.a.Time.Es.war.einmal.S03E11.Going.Home.GERMAN.DUBBED.BDRip.x264-TVP 2014-11-14 20:57 - 2014-11-14 21:08 - 361499508 _____ () C:\Users\Donny1982\Downloads\onceupon-s03e11.rar 2014-11-14 20:57 - 2014-11-14 20:57 - 00000000 ____D () C:\Users\Donny1982\Downloads\Once.Upon.a.Time.Es.war.einmal.S03E10.The.New.Neverland.GERMAN.DUBBED.BDRip.x264-TVP 2014-11-14 20:45 - 2014-11-19 20:23 - 00000000 ____D () C:\Users\Donny1982\Downloads\Once.Upon.a.Time.Es.war.einmal.S03E09.Save.Henry.GERMAN.DUBBED.BDRip.x264-TVP 2014-11-14 20:45 - 2014-11-14 20:57 - 389624900 _____ () C:\Users\Donny1982\Downloads\onceupon-s03e10.rar 2014-11-14 20:36 - 2014-11-19 20:22 - 00000000 ____D () C:\Users\Donny1982\Downloads\Once.Upon.a.Time.Es.war.einmal.S03E08.Think.Lovely.Thoughts.GERMAN.DUBBED.BDRip.x264-TVP 2014-11-14 20:36 - 2014-11-14 20:45 - 302106652 _____ () C:\Users\Donny1982\Downloads\onceupon-s03e09.rar 2014-11-14 20:23 - 2014-11-19 20:22 - 00000000 ____D () C:\Users\Donny1982\Downloads\Once.Upon.a.Time.Es.war.einmal.S03E07.Reich.der.Schatten.GERMAN.DUBBED.BDRip.x264-TVP 2014-11-14 20:23 - 2014-11-14 20:35 - 394218660 _____ () C:\Users\Donny1982\Downloads\onceupon-s03e08.rar 2014-11-14 20:12 - 2014-11-19 20:22 - 00000000 ____D () C:\Users\Donny1982\Downloads\Once.Upon.a.Time.Es.war.einmal.S03E06.Unter.dem.Meer.GERMAN.DUBBED.BDRip.x264-TVP 2014-11-14 20:12 - 2014-11-14 20:23 - 374333372 _____ () C:\Users\Donny1982\Downloads\onceupon-s03e07.rar 2014-11-14 19:59 - 2014-11-15 20:22 - 00000000 ____D () C:\Users\Donny1982\Downloads\Once.Upon.a.Time.Es.war.einmal.S03E05.Und.sie.wurden.Piraten.GERMAN.DUBBED.BDRip.x264-TVP 2014-11-14 19:59 - 2014-11-14 20:12 - 407363124 _____ () C:\Users\Donny1982\Downloads\onceupon-s03e06.rar 2014-11-14 19:47 - 2014-11-15 20:22 - 00000000 ____D () C:\Users\Donny1982\Downloads\Once.Upon.a.Time.Es.war.einmal.S03E04.Hoert.ihr.die.Melodie.des.Rattenfaengers.GERMAN.DUBBED.BDRip.x264-TVP 2014-11-14 19:47 - 2014-11-14 19:59 - 407810356 _____ () C:\Users\Donny1982\Downloads\onceupon-s03e05.rar 2014-11-14 19:35 - 2014-11-14 20:03 - 00000000 ____D () C:\Users\Donny1982\Downloads\Once.Upon.a.Time.Es.war.einmal.S03E03.Eine.recht.gewoehnliche.Fee.GERMAN.DUBBED.BDRip.x264-TVP 2014-11-14 19:35 - 2014-11-14 19:46 - 370310812 _____ () C:\Users\Donny1982\Downloads\onceupon-s03e04.rar 2014-11-14 19:24 - 2014-11-14 20:02 - 00000000 ____D () C:\Users\Donny1982\Downloads\Once.Upon.a.Time.Es.war.einmal.S03E02.Erkenne.dich.selbst.GERMAN.DUBBED.BDRip.x264-TVP 2014-11-14 19:11 - 2013-08-30 03:21 - 00000035 _____ () C:\Users\Donny1982\Downloads\nbdsofi89WRZI3fg50GB9f83R4Hrhop90u4.txt 2014-11-14 19:11 - 2013-08-29 19:19 - 256077824 _____ () C:\Users\Donny1982\Downloads\tjgojsw-03.avi 2014-11-14 19:11 - 2013-08-29 19:13 - 250384384 _____ () C:\Users\Donny1982\Downloads\tjgojsw-02.avi 2014-11-14 19:11 - 2013-08-29 19:01 - 250460160 _____ () C:\Users\Donny1982\Downloads\tjgojsw-01.avi 2014-11-14 19:05 - 2014-11-14 19:07 - 00000000 ____D () C:\Users\Donny1982\Downloads\Once.Upon.a.Time.Es.war.einmal.S03E01.Wenn.boese.Traeume.fliegen.lernen 2014-11-14 18:51 - 2014-11-14 19:35 - 367238772 _____ () C:\Users\Donny1982\Downloads\onceupon-s03e03.rar 2014-11-14 18:51 - 2014-11-14 19:24 - 418069404 _____ () C:\Users\Donny1982\Downloads\onceupon-s03e02.rar 2014-11-14 18:51 - 2014-11-14 19:05 - 408963796 _____ () C:\Users\Donny1982\Downloads\onceupon-s03e01bd.rar 2014-11-14 18:50 - 2014-11-14 18:50 - 00005656 _____ () C:\Users\Donny1982\Downloads\UL_Once_Upon_a_Time_S03-2t2lh9n95opq8.dlc 2014-11-14 18:07 - 2014-11-15 10:54 - 797948198 _____ () C:\Users\Donny1982\Downloads\UTGJEOWMIOH-100-102.rar 2014-11-14 18:07 - 2014-11-14 18:07 - 00000000 ____D () C:\Users\Donny1982\Downloads\The.Walking.Dead.S01E06.TS-19.German.WS.BDRip.XviD-GTVG 2014-11-14 18:05 - 2014-11-15 10:42 - 761221411 _____ () C:\Users\Donny1982\Downloads\UTGJEOWMIOH-10-12.rar 2014-11-14 18:05 - 2014-11-14 18:05 - 00000000 ____D () C:\Users\Donny1982\Downloads\The.Walking.Dead.S01E04.Vatos.German.WS.BDRip.XviD-GTVG 2014-11-14 18:03 - 2014-11-14 19:10 - 756922659 _____ () C:\Users\Donny1982\Downloads\UTGJEOWMIOH-1-3.rar 2014-11-14 18:03 - 2014-11-14 18:03 - 00000000 ____D () C:\Users\Donny1982\Downloads\The.Walking.Dead.S01E05.Tag.194.German.WS.BDRip.XviD-GTVG 2014-11-14 17:33 - 2014-11-14 18:07 - 379222600 _____ () C:\Users\Donny1982\Downloads\twd-s01e06.rar 2014-11-14 17:33 - 2014-11-14 17:33 - 00000000 ____D () C:\Users\Donny1982\Downloads\The.Walking.Dead.S01E03.Tag.der.Froesche.German.WS.BDRip.XviD-GTVG 2014-11-14 17:30 - 2014-11-14 17:33 - 00000000 ____D () C:\Users\Donny1982\Downloads\The.Walking.Dead.S01E01.Gute.alte.Zeiten.German.WS.BDRip.XviD-GTVG 2014-11-14 17:29 - 2014-11-14 18:05 - 384877784 _____ () C:\Users\Donny1982\Downloads\twd-s01e04.rar 2014-11-14 17:29 - 2014-11-14 18:03 - 378644824 _____ () C:\Users\Donny1982\Downloads\twd-s01e05.rar 2014-11-14 17:29 - 2014-11-14 17:32 - 00000000 ____D () C:\Users\Donny1982\Downloads\The.Walking.Dead.S01E02.Gefangene.der.Toten.German.WS.BDRip.XviD-GTVG 2014-11-14 17:27 - 2014-11-14 17:27 - 00050714 _____ () C:\Users\Donny1982\Documents\cc_20141114_172732.reg 2014-11-14 17:07 - 2014-11-14 17:32 - 373061336 _____ () C:\Users\Donny1982\Downloads\twd-s01e03.rar 2014-11-14 16:42 - 2014-11-14 17:29 - 524287004 _____ () C:\Users\Donny1982\Downloads\twd-s01e01.part1.rar 2014-11-14 16:42 - 2014-11-14 17:29 - 373835480 _____ () C:\Users\Donny1982\Downloads\twd-s01e02.rar 2014-11-14 16:42 - 2014-11-14 17:07 - 217962996 _____ () C:\Users\Donny1982\Downloads\twd-s01e01.part2.rar 2014-11-14 16:41 - 2014-11-14 16:41 - 00002116 _____ () C:\Users\Donny1982\Downloads\3t8451w2a98aqna.dlc 2014-11-12 17:37 - 2014-11-12 17:38 - 00000000 ____D () C:\Users\Donny1982\AppData\Roaming\DAEMON Tools Lite 2014-11-12 17:37 - 2014-11-12 17:37 - 00000000 ____D () C:\ProgramData\DAEMON Tools Lite 2014-11-12 17:36 - 2014-11-12 17:36 - 13429504 _____ (Disc Soft Ltd) C:\Users\Donny1982\Downloads\DTLite4491-0356.exe 2014-11-12 17:18 - 2014-11-12 17:18 - 00000000 ____D () C:\ProgramData\Rosetta Stone 2014-11-12 17:16 - 2014-11-12 17:44 - 00000000 ____D () C:\Program Files (x86)\Rosetta Stone 2014-11-12 17:16 - 2014-11-12 17:20 - 00000000 ____D () C:\ProgramData\FLEXnet 2014-11-12 17:16 - 2014-11-12 17:16 - 00000000 ____D () C:\Users\Default\AppData\Roaming\Macromedia 2014-11-12 17:16 - 2014-11-12 17:16 - 00000000 ____D () C:\Users\Default User\AppData\Roaming\Macromedia 2014-11-12 12:38 - 2014-11-07 20:49 - 00388272 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2014-11-12 12:38 - 2014-11-07 20:23 - 00341168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2014-11-12 12:38 - 2014-11-06 05:04 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-11-12 12:38 - 2014-11-06 05:03 - 25110016 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-11-12 12:38 - 2014-11-06 05:03 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2014-11-12 12:38 - 2014-11-06 04:47 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2014-11-12 12:38 - 2014-11-06 04:46 - 00580096 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2014-11-12 12:38 - 2014-11-06 04:46 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2014-11-12 12:38 - 2014-11-06 04:44 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2014-11-12 12:38 - 2014-11-06 04:43 - 02884096 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2014-11-12 12:38 - 2014-11-06 04:36 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2014-11-12 12:38 - 2014-11-06 04:35 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2014-11-12 12:38 - 2014-11-06 04:31 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2014-11-12 12:38 - 2014-11-06 04:30 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2014-11-12 12:38 - 2014-11-06 04:30 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2014-11-12 12:38 - 2014-11-06 04:29 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2014-11-12 12:38 - 2014-11-06 04:28 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2014-11-12 12:38 - 2014-11-06 04:23 - 06040064 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2014-11-12 12:38 - 2014-11-06 04:20 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2014-11-12 12:38 - 2014-11-06 04:16 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2014-11-12 12:38 - 2014-11-06 04:13 - 00501248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2014-11-12 12:38 - 2014-11-06 04:13 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2014-11-12 12:38 - 2014-11-06 04:12 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2014-11-12 12:38 - 2014-11-06 04:10 - 19781632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2014-11-12 12:38 - 2014-11-06 04:10 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll 2014-11-12 12:38 - 2014-11-06 04:07 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2014-11-12 12:38 - 2014-11-06 04:05 - 02277376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2014-11-12 12:38 - 2014-11-06 04:04 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2014-11-12 12:38 - 2014-11-06 04:03 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2014-11-12 12:38 - 2014-11-06 04:02 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2014-11-12 12:38 - 2014-11-06 04:00 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2014-11-12 12:38 - 2014-11-06 04:00 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2014-11-12 12:38 - 2014-11-06 03:59 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2014-11-12 12:38 - 2014-11-06 03:58 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2014-11-12 12:38 - 2014-11-06 03:57 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2014-11-12 12:38 - 2014-11-06 03:48 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2014-11-12 12:38 - 2014-11-06 03:42 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2014-11-12 12:38 - 2014-11-06 03:41 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2014-11-12 12:38 - 2014-11-06 03:41 - 00716800 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2014-11-12 12:38 - 2014-11-06 03:39 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2014-11-12 12:38 - 2014-11-06 03:38 - 02124288 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2014-11-12 12:38 - 2014-11-06 03:37 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2014-11-12 12:38 - 2014-11-06 03:36 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2014-11-12 12:38 - 2014-11-06 03:34 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2014-11-12 12:38 - 2014-11-06 03:30 - 14390272 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2014-11-12 12:38 - 2014-11-06 03:22 - 00688640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2014-11-12 12:38 - 2014-11-06 03:21 - 04298240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2014-11-12 12:38 - 2014-11-06 03:21 - 02051072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2014-11-12 12:38 - 2014-11-06 03:20 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2014-11-12 12:38 - 2014-11-06 03:17 - 02365440 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2014-11-12 12:38 - 2014-11-06 03:04 - 01550336 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2014-11-12 12:38 - 2014-11-06 03:03 - 12819456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2014-11-12 12:38 - 2014-11-06 02:53 - 00799232 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2014-11-12 12:38 - 2014-11-06 02:52 - 01892864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2014-11-12 12:38 - 2014-11-06 02:48 - 01310208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2014-11-12 12:38 - 2014-11-06 02:47 - 00708096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2014-11-12 12:38 - 2014-11-05 18:56 - 00304640 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll 2014-11-12 12:38 - 2014-11-05 18:56 - 00228864 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll 2014-11-12 12:38 - 2014-11-05 18:52 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll 2014-11-12 12:38 - 2014-10-14 03:16 - 00155064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys 2014-11-12 12:38 - 2014-10-14 03:13 - 00683520 _____ (Microsoft Corporation) C:\Windows\system32\termsrv.dll 2014-11-12 12:38 - 2014-10-14 03:12 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll 2014-11-12 12:38 - 2014-10-14 03:09 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll 2014-11-12 12:38 - 2014-10-14 03:07 - 00681984 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll 2014-11-12 12:38 - 2014-10-14 02:50 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll 2014-11-12 12:38 - 2014-10-14 02:49 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll 2014-11-12 12:38 - 2014-10-14 02:47 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll 2014-11-12 12:38 - 2014-10-14 02:46 - 00681984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll 2014-11-12 12:36 - 2014-10-25 02:57 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll 2014-11-12 12:36 - 2014-10-25 02:32 - 00067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\packager.dll 2014-11-12 12:36 - 2014-10-18 03:05 - 00861696 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll 2014-11-12 12:36 - 2014-10-18 02:33 - 00571904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll 2014-11-12 12:36 - 2014-10-14 03:13 - 03241984 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll 2014-11-12 12:36 - 2014-10-14 02:50 - 02363904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll 2014-11-12 12:36 - 2014-10-10 01:57 - 03198976 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2014-11-12 12:36 - 2014-10-03 03:12 - 00500224 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll 2014-11-12 12:36 - 2014-10-03 03:11 - 00680960 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll 2014-11-12 12:36 - 2014-10-03 03:11 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll 2014-11-12 12:36 - 2014-10-03 03:11 - 00296448 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll 2014-11-12 12:36 - 2014-10-03 03:11 - 00284672 _____ (Microsoft Corporation) C:\Windows\system32\EncDump.dll 2014-11-12 12:36 - 2014-10-03 02:44 - 00442880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AUDIOKSE.dll 2014-11-12 12:36 - 2014-10-03 02:44 - 00374784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioEng.dll 2014-11-12 12:36 - 2014-10-03 02:44 - 00195584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll 2014-11-12 12:36 - 2014-09-19 10:42 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll 2014-11-12 12:36 - 2014-09-19 10:42 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll 2014-11-12 12:36 - 2014-09-19 10:42 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll 2014-11-12 12:36 - 2014-09-19 10:42 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll 2014-11-12 12:36 - 2014-09-19 10:42 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll 2014-11-12 12:36 - 2014-09-19 10:42 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll 2014-11-12 12:36 - 2014-09-19 10:23 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll 2014-11-12 12:36 - 2014-09-19 10:23 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll 2014-11-12 12:36 - 2014-09-19 10:23 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll 2014-11-12 12:36 - 2014-09-19 10:23 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll 2014-11-12 12:36 - 2014-09-19 10:23 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll 2014-11-12 12:36 - 2014-09-19 10:23 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll 2014-11-12 12:36 - 2014-08-21 07:43 - 01882624 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll 2014-11-12 12:36 - 2014-08-21 07:40 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll 2014-11-12 12:36 - 2014-08-21 07:26 - 01237504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll 2014-11-12 12:36 - 2014-08-21 07:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll 2014-11-12 12:36 - 2014-08-12 03:02 - 00878080 _____ (Microsoft Corporation) C:\Windows\system32\IMJP10K.DLL 2014-11-12 12:36 - 2014-08-12 02:36 - 00701440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IMJP10K.DLL 2014-11-12 02:37 - 2013-05-23 01:57 - 00000000 ____D () C:\Users\Donny1982\Downloads\Das Lied von Eis und Feuer - Teil 20 2014-11-12 02:10 - 2013-05-23 01:57 - 00000000 ____D () C:\Users\Donny1982\Downloads\Das Lied von Eis und Feuer - Teil 18 2014-11-12 02:06 - 2013-05-23 01:56 - 00000000 ____D () C:\Users\Donny1982\Downloads\Das Lied von Eis und Feuer - Teil 19 2014-11-12 01:35 - 2013-05-23 01:57 - 00000000 ____D () C:\Users\Donny1982\Downloads\Das Lied von Eis und Feuer - Teil 17 2014-11-12 00:53 - 2013-05-23 01:57 - 00000000 ____D () C:\Users\Donny1982\Downloads\Das Lied von Eis und Feuer - Teil 16 2014-11-12 00:52 - 2013-05-23 01:59 - 00000000 ____D () C:\Users\Donny1982\Downloads\Das Lied von Eis und Feuer - Teil 15 2014-11-12 00:35 - 2013-05-23 01:59 - 00000000 ____D () C:\Users\Donny1982\Downloads\Das Lied von Eis und Feuer - Teil 14 2014-11-12 00:19 - 2013-05-23 01:59 - 00000000 ____D () C:\Users\Donny1982\Downloads\Das Lied von Eis und Feuer - Teil 13 2014-11-12 00:08 - 2013-05-23 01:59 - 00000000 ____D () C:\Users\Donny1982\Downloads\Das Lied von Eis und Feuer - Teil 12 2014-11-11 23:55 - 2013-05-23 01:59 - 00000000 ____D () C:\Users\Donny1982\Downloads\Das Lied von Eis und Feuer - Teil 11 2014-11-11 23:36 - 2013-05-23 01:59 - 00000000 ____D () C:\Users\Donny1982\Downloads\Das Lied von Eis und Feuer - Teil 10 2014-11-11 23:16 - 2013-05-23 01:58 - 00000000 ____D () C:\Users\Donny1982\Downloads\Das Lied von Eis und Feuer - Teil 9 2014-11-11 22:58 - 2013-05-23 01:58 - 00000000 ____D () C:\Users\Donny1982\Downloads\Das Lied von Eis und Feuer - Teil 5 2014-11-11 22:33 - 2013-05-23 01:58 - 00000000 ____D () C:\Users\Donny1982\Downloads\Das Lied von Eis und Feuer - Teil 4 2014-11-11 22:20 - 2013-05-23 01:58 - 00000000 ____D () C:\Users\Donny1982\Downloads\Das Lied von Eis und Feuer - Teil 6 2014-11-11 22:09 - 2013-05-23 01:58 - 00000000 ____D () C:\Users\Donny1982\Downloads\Das Lied von Eis und Feuer - Teil 8 2014-11-11 22:02 - 2013-05-23 01:57 - 00000000 ____D () C:\Users\Donny1982\Downloads\Das Lied von Eis und Feuer - Teil 1 2014-11-11 22:00 - 2013-05-23 01:58 - 00000000 ____D () C:\Users\Donny1982\Downloads\Das Lied von Eis und Feuer - Teil 7 2014-11-11 21:13 - 2013-05-23 02:00 - 00000000 ____D () C:\Users\Donny1982\Downloads\Das Lied von Eis und Feuer - Teil 3 2014-11-11 21:12 - 2013-05-23 01:57 - 00000000 ____D () C:\Users\Donny1982\Downloads\Das Lied von Eis und Feuer - Teil 2 2014-11-11 20:35 - 2014-07-13 14:50 - 00834630 _____ () C:\Users\Donny1982\Downloads\Martin, Geroge R. R. - Der Heckenritter von Westeros.epub 2014-11-11 20:35 - 2014-07-13 14:50 - 00834621 _____ () C:\Users\Donny1982\Downloads\Martin, Geroge R. R. - Der Heckenritter von Westeros (iPhone).epub 2014-11-11 20:35 - 2014-07-13 13:36 - 02024861 _____ () C:\Users\Donny1982\Downloads\Martin, Geroge R. R. - Der Heckenritter von Westeros.lit 2014-11-11 20:35 - 2014-07-13 13:36 - 01571136 _____ () C:\Users\Donny1982\Downloads\Martin, Geroge R. R. - Der Heckenritter von Westeros.azw3 2014-11-11 20:35 - 2014-07-13 13:36 - 01505973 _____ () C:\Users\Donny1982\Downloads\Martin, Geroge R. R. - Der Heckenritter von Westeros.fb2 2014-11-11 20:35 - 2014-07-13 13:36 - 01144693 _____ () C:\Users\Donny1982\Downloads\Martin, Geroge R. R. - Der Heckenritter von Westeros.mobi 2014-11-11 20:35 - 2013-07-25 20:52 - 00000000 ____D () C:\Users\Donny1982\Downloads\Martin, Geroge R.R. - LvEuF 9 - Der Sohn Des Greifen 2014-11-11 20:35 - 2013-07-25 20:52 - 00000000 ____D () C:\Users\Donny1982\Downloads\Martin, Geroge R.R. - LvEuF 7 - Zeit Der Krähen 2014-11-11 20:35 - 2013-07-25 20:52 - 00000000 ____D () C:\Users\Donny1982\Downloads\Martin, Geroge R.R. - LvEuF 6 - Die Königin Der Drachen 2014-11-11 20:35 - 2013-07-25 20:52 - 00000000 ____D () C:\Users\Donny1982\Downloads\Martin, Geroge R.R. - LvEuF 5 - Sturm Der Schwerter 2014-11-11 20:35 - 2013-07-25 20:51 - 00000000 ____D () C:\Users\Donny1982\Downloads\Martin, Geroge R.R. - LvEuF 2 - Das Erbe Von Winterfell 2014-11-11 20:35 - 2013-07-25 20:51 - 00000000 ____D () C:\Users\Donny1982\Downloads\Martin, Geroge R.R. - LvEuF 1 - Die Herren Von Winterfell 2014-11-11 19:25 - 2014-11-04 04:36 - 00000000 ____D () C:\Users\Donny1982\Downloads\Hercules.EXTENDED.CUT.2014.BDRip.AC3.Dubbed.German.x264-ADV 2014-11-11 18:29 - 2014-11-09 01:48 - 00000644 _____ () C:\Users\Donny1982\Downloads\wld-sharknado2-x264.nfo 2014-11-11 18:29 - 2014-11-09 01:45 - 16542010 _____ () C:\Users\Donny1982\Downloads\wld-sharknado2-x264-sample.mkv 2014-11-11 18:29 - 2014-11-09 01:12 - 994564659 _____ () C:\Users\Donny1982\Downloads\wld-sharknado2-x264.mkv 2014-11-11 18:29 - 2014-11-08 19:13 - 00000167 _____ () C:\Users\Donny1982\Downloads\Share-Online Premium.url 2014-11-11 18:29 - 2014-11-08 19:13 - 00000114 _____ () C:\Users\Donny1982\Downloads\Uploaded Premium.url 2014-11-11 17:48 - 2012-08-04 11:27 - 00002235 _____ () C:\Users\Donny1982\Downloads\Readme - Lies.mich.html 2014-11-11 17:47 - 2012-08-04 11:27 - 00001625 _____ () C:\Users\Donny1982\Downloads\WICHTIGE Info - BITTE Lesen - Stand.01.08.2012.txt 2014-11-11 17:47 - 2012-08-04 11:27 - 00001625 _____ () C:\Users\Donny1982\Downloads\MeB-Crew.nfo 2014-11-10 19:56 - 2014-11-10 19:56 - 00001177 _____ () C:\Users\Public\Desktop\Avira.lnk 2014-11-07 09:56 - 2014-11-15 03:25 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox 2014-11-04 21:34 - 2011-03-14 03:03 - 00083968 _____ (SEIKO EPSON CORPORATION) C:\Windows\system32\E_YD4BJJE.DLL 2014-11-04 21:34 - 2007-04-10 01:06 - 00010752 _____ (SEIKO EPSON CORP.) C:\Windows\system32\E_GCINST.DLL 2014-10-29 22:12 - 2014-10-29 22:12 - 00001823 _____ () C:\Users\Public\Desktop\iTunes.lnk 2014-10-29 22:12 - 2014-10-29 22:12 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes 2014-10-29 22:11 - 2014-10-29 22:12 - 00000000 ____D () C:\ProgramData\E1864A66-75E3-486a-BD95-D1B7D99A84A7 2014-10-29 22:11 - 2014-10-29 22:12 - 00000000 ____D () C:\Program Files\iTunes 2014-10-29 22:11 - 2014-10-29 22:12 - 00000000 ____D () C:\Program Files (x86)\iTunes 2014-10-29 22:11 - 2014-10-29 22:11 - 00000000 ____D () C:\Program Files\iPod 2014-10-29 22:05 - 2014-10-29 22:05 - 00000000 ____D () C:\Program Files\Common Files\EPSON 2014-10-29 21:52 - 2014-10-29 21:52 - 00002398 _____ () C:\Users\Public\Desktop\Epson Netzwerkhandbuch WF-3520 Series.lnk 2014-10-29 21:52 - 2014-10-29 21:52 - 00000279 _____ () C:\Users\Public\Desktop\Epson Benutzerhandbuch WF-3520 Series.url 2014-10-29 21:52 - 2014-10-29 21:52 - 00000256 _____ () C:\Users\Public\Desktop\Anleitung für Epson Connect.url 2014-10-29 21:51 - 2014-11-08 12:51 - 00000000 ____D () C:\Users\Donny1982\AppData\Roaming\Epson 2014-10-29 21:50 - 2014-11-04 21:37 - 00000000 ____D () C:\Program Files (x86)\Epson Software 2014-10-29 21:50 - 2014-11-04 21:07 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Epson Software 2014-10-29 21:49 - 2014-11-04 21:36 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EPSON 2014-10-29 21:49 - 2014-10-29 21:52 - 00000000 ____D () C:\Program Files (x86)\epson 2014-10-29 21:49 - 2014-10-29 21:49 - 00000970 _____ () C:\Users\Public\Desktop\EPSON Scan.lnk 2014-10-29 21:49 - 2014-10-29 21:49 - 00000000 ____D () C:\Program Files\EpsonNet 2014-10-29 21:49 - 2012-11-12 20:41 - 00535552 _____ (SEIKO EPSON CORPORATION) C:\Windows\system32\ensppui.dll 2014-10-29 21:49 - 2012-11-12 20:41 - 00535552 _____ (SEIKO EPSON CORPORATION) C:\Windows\system32\enppui.dll 2014-10-29 21:49 - 2012-11-12 15:15 - 00558592 _____ (SEIKO EPSON CORPORATION) C:\Windows\system32\ensppmon.dll 2014-10-29 21:49 - 2012-11-12 15:15 - 00558592 _____ (SEIKO EPSON CORPORATION) C:\Windows\system32\enppmon.dll 2014-10-29 21:49 - 2012-10-22 17:19 - 00219648 _____ (SEIKO EPSON CORPORATION) C:\Windows\system32\enspres.dll 2014-10-29 21:49 - 2012-10-22 17:19 - 00219648 _____ (SEIKO EPSON CORPORATION) C:\Windows\system32\enpres.dll 2014-10-29 21:49 - 2012-07-24 00:00 - 00466432 _____ (Seiko Epson Corporation) C:\Windows\system32\esxw2ud.dll 2014-10-29 21:49 - 2011-12-12 00:00 - 00135824 _____ (Seiko Epson Corporation) C:\Windows\system32\escsvc64.exe 2014-10-29 21:48 - 2014-11-03 21:14 - 00000000 ____D () C:\ProgramData\EPSON 2014-10-29 21:48 - 2011-04-18 19:03 - 00120320 _____ (SEIKO EPSON CORPORATION) C:\Windows\system32\E_YLMJJE.DLL 2014-10-29 18:50 - 2014-11-04 21:40 - 00000000 ____D () C:\Users\Donny1982\Downloads\Bewerbung Iwi ==================== One Month Modified Files and Folders ======= (If an entry is included in the fixlist, the file\folder will be moved.) 2014-11-20 20:55 - 2009-07-14 05:45 - 00026768 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-11-20 20:55 - 2009-07-14 05:45 - 00026768 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-11-20 20:53 - 2011-04-12 08:43 - 00699682 _____ () C:\Windows\system32\perfh007.dat 2014-11-20 20:53 - 2011-04-12 08:43 - 00149790 _____ () C:\Windows\system32\perfc007.dat 2014-11-20 20:53 - 2009-07-14 06:13 - 01620684 _____ () C:\Windows\system32\PerfStringBackup.INI 2014-11-20 20:51 - 2013-06-25 16:58 - 01881408 _____ () C:\Windows\WindowsUpdate.log 2014-11-20 20:47 - 2013-06-28 16:06 - 00000000 ____D () C:\ProgramData\NVIDIA 2014-11-20 20:47 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2014-11-20 20:46 - 2014-04-02 19:55 - 00000000 ____D () C:\AdwCleaner 2014-11-20 19:56 - 2014-03-27 21:26 - 00129752 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2014-11-20 06:53 - 2009-07-14 06:32 - 00000000 ____D () C:\Windows\system32\FxsTmp 2014-11-19 17:59 - 2014-09-30 18:18 - 00000000 ____D () C:\Users\Donny1982\AppData\Local\Apps\2.0 2014-11-19 17:59 - 2009-07-14 04:20 - 00000000 __RHD () C:\Users\Default 2014-11-19 17:55 - 2009-07-14 03:34 - 00000215 _____ () C:\Windows\system.ini 2014-11-19 17:32 - 2013-06-28 19:27 - 00000000 ____D () C:\Users\Donny1982\AppData\Roaming\vlc 2014-11-16 02:37 - 2014-07-08 17:37 - 04918960 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe 2014-11-15 10:27 - 2009-07-14 06:09 - 00000000 ____D () C:\Windows\System32\Tasks\WPD 2014-11-15 04:04 - 2014-06-17 18:29 - 00000000 ____D () C:\Windows\rescache 2014-11-15 03:26 - 2009-07-14 05:45 - 00288984 _____ () C:\Windows\system32\FNTCACHE.DAT 2014-11-15 03:25 - 2013-07-04 20:33 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service 2014-11-15 03:23 - 2014-05-07 02:00 - 00000000 ___SD () C:\Windows\system32\CompatTel 2014-11-15 03:06 - 2013-07-02 18:11 - 00000000 ____D () C:\ProgramData\Microsoft Help 2014-11-12 17:16 - 2014-04-02 16:57 - 00000000 ____D () C:\ProgramData\Adobe 2014-11-12 17:16 - 2014-04-02 16:55 - 00000000 ____D () C:\Users\Donny1982\AppData\Local\Adobe 2014-11-12 17:16 - 2013-09-15 18:17 - 00000000 ____D () C:\Program Files (x86)\Adobe 2014-11-12 17:16 - 2013-06-28 19:35 - 00000000 ____D () C:\Users\Donny1982\AppData\Roaming\Adobe 2014-11-10 19:58 - 2013-06-28 20:18 - 00000000 ____D () C:\Program Files (x86)\JDownloader 2014-11-10 19:56 - 2014-08-18 19:52 - 00000000 ____D () C:\ProgramData\Package Cache 2014-11-10 19:56 - 2013-06-28 19:12 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira 2014-11-10 19:56 - 2013-06-28 19:06 - 00000000 ____D () C:\Program Files (x86)\Avira 2014-11-04 21:15 - 2013-03-26 19:29 - 00000000 ____D () C:\Users\Donny1982\Downloads\Scans 2014-11-01 12:29 - 2013-07-02 18:11 - 00000000 ____D () C:\Users\Donny1982\AppData\Local\Microsoft Help 2014-10-29 22:11 - 2014-05-05 19:34 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69 2014-10-29 22:11 - 2013-06-30 11:03 - 00000000 ____D () C:\Program Files\Common Files\Apple 2014-10-29 21:52 - 2013-06-28 18:03 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information 2014-10-28 18:29 - 2013-06-30 13:57 - 00000000 ____D () C:\Windows\System32\Tasks\Games Some content of TEMP: ==================== C:\Users\Donny1982\AppData\Local\Temp\avgnt.exe C:\Users\Donny1982\AppData\Local\Temp\Quarantine.exe C:\Users\Donny1982\AppData\Local\Temp\sqlite3.dll ==================== Bamital & volsnap Check ================= (There is no automatic fix for files that do not pass verification.) C:\Windows\System32\winlogon.exe => File is digitally signed C:\Windows\System32\wininit.exe => File is digitally signed C:\Windows\SysWOW64\wininit.exe => File is digitally signed C:\Windows\explorer.exe => File is digitally signed C:\Windows\SysWOW64\explorer.exe => File is digitally signed C:\Windows\System32\svchost.exe => File is digitally signed C:\Windows\SysWOW64\svchost.exe => File is digitally signed C:\Windows\System32\services.exe => File is digitally signed C:\Windows\System32\User32.dll => File is digitally signed C:\Windows\SysWOW64\User32.dll => File is digitally signed C:\Windows\System32\userinit.exe => File is digitally signed C:\Windows\SysWOW64\userinit.exe => File is digitally signed C:\Windows\System32\rpcss.dll => File is digitally signed C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2014-11-15 03:56 ==================== End Of Log ============================ Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 20-11-2014 Ran by Donny1982 at 2014-11-20 20:59:09 Running from C:\Users\Donny1982\Desktop Boot Mode: Normal ========================================================== ==================== Security Center ======================== (If an entry is included in the fixlist, it will be removed.) AV: Avira Desktop (Disabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859} AS: Avira Desktop (Disabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} ==================== Installed Programs ====================== (Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.) Adobe Acrobat 5.0 (HKLM-x32\...\Adobe Acrobat 5.0) (Version: 5.0 - Adobe Systems, Inc.) Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 2.5.1.17730 - Adobe Systems Inc.) Adobe Reader XI (11.0.09) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.09 - Adobe Systems Incorporated) Apple Application Support (HKLM-x32\...\{83CAF0DE-8D3B-4C37-A631-2B8F16EC3031}) (Version: 3.1 - Apple Inc.) Apple Mobile Device Support (HKLM\...\{BDD99690-3541-4619-9D2A-3CDDB3E15F9E}) (Version: 8.0.5.6 - Apple Inc.) Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.) Avira (HKLM-x32\...\{9480d4af-12b9-4e56-8034-4031ef6ab39d}) (Version: 1.1.25.25607 - Avira Operations GmbH & Co. KG) Avira (x32 Version: 1.1.25.25607 - Avira Operations GmbH & Co. KG) Hidden Avira Free Antivirus (HKLM-x32\...\Avira AntiVir Desktop) (Version: 14.0.7.342 - Avira) Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.) calibre 64bit (HKLM\...\{8A1C4F73-1FEE-4E43-A82F-BDB24E004096}) (Version: 0.9.37 - Kovid Goyal) CCleaner (HKLM\...\CCleaner) (Version: 4.03 - Piriform) Conexant 20672 SmartAudio HD (HKLM\...\CNXT_AUDIO_HDA) (Version: 8.32.23.5 - Conexant) Druckerdeinstallation für EPSON WF-3520 Series (HKLM\...\EPSON WF-3520 Series) (Version: - SEIKO EPSON Corporation) eLicenser Control (HKLM-x32\...\eLicenser Control) (Version: - Steinberg Media Technologies GmbH) Epson Benutzerhandbuch WF-3520 Series (HKLM-x32\...\WF-3520 Series Useg) (Version: - ) Epson Connect Guide (HKLM-x32\...\Epson Connect Guide) (Version: - ) Epson Connect Printer Setup (HKLM-x32\...\{D9B1D51B-EB56-410D-AEB5-1CCFAC4B6C8C}) (Version: 1.3.0 - SEIKO EPSON CORPORATION) Epson Event Manager (HKLM-x32\...\{8F01524C-0676-4CC1-B4AE-64753C723391}) (Version: 3.01.0005 - Seiko Epson Corporation) Epson E-Web Print (HKLM-x32\...\{896667C8-53F8-47B8-B6B0-B113B10F05BC}) (Version: 1.20.0000 - SEIKO EPSON CORPORATION) Epson FAX Utility (HKLM-x32\...\{0CBE6C93-CB2E-4378-91EE-12BE6D4E2E4A}) (Version: 1.31.00 - SEIKO EPSON CORPORATION) Epson Netzwerkhandbuch WF-3520 Series (HKLM-x32\...\WF-3520 Series Netg) (Version: - ) EPSON Printer Finder (HKLM-x32\...\{B8ECD0D3-AE08-4891-B6C7-32F96B75EB6C}) (Version: 1.0.0 - SEIKO EPSON CORPORATION) EPSON Scan (HKLM-x32\...\EPSON Scanner) (Version: - Seiko Epson Corporation) EpsonNet Print (HKLM-x32\...\{3E31400D-274E-4647-916C-2CACC3741799}) (Version: 2.6.0 - SEIKO EPSON CORPORATION) Free iPad Video Converter 3.7.2.1 (HKLM-x32\...\Free iPad Video Converter_is1) (Version: - FreeAudioVideoSoftTech, Inc.) Free WMA to MP3 Converter 1.16 (HKLM-x32\...\Free WMA to MP3 Converter_is1) (Version: - Jodix Technologies Ltd.) Integrated Camera Driver Installer Package Ver.1.1.0.1147 (HKLM-x32\...\{B2CA6F37-1602-4823-81B5-0384B6888AA6}) (Version: 1.1.0.1147 - RICOH) Integrated Camera TWAIN (HKLM-x32\...\{9CA0DEE4-E84B-466F-9B96-FC255F3A929F}) (Version: 1.0.11.1223 - Chicony Electronics Co.,Ltd.) Intel(R) Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1010 - Intel Corporation) Intel(R) Identity Protection Technology 1.2.28.0 (HKLM-x32\...\{A87263E8-26CB-1016-8F2F-C04708B17CE2}) (Version: 1.2.28.0 - Intel Corporation) Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 7.1.70.1205 - Intel Corporation) Intel(R) Network Connections Drivers (HKLM\...\PROSet) (Version: 16.8 - Intel) Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 8.15.10.2538 - Intel Corporation) Intel® PROSet/Wireless WiFi-Software (HKLM\...\{ECE5B218-A086-4E18-A362-D11181681457}) (Version: 15.03.1000.1637 - Intel Corporation) iTunes (HKLM\...\{2ABBBD91-91E5-4AD7-929A-FE15D1DC0576}) (Version: 12.0.1.26 - Apple Inc.) Java 7 Update 71 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F03217071FF}) (Version: 7.0.710 - Oracle) JDownloader 0.9 (HKLM-x32\...\5513-1208-7298-9440) (Version: 0.9 - AppWork GmbH) Lenovo Power Management Driver (HKLM\...\Power Management Driver) (Version: 1.67.00.02 - ) MAGIX Slideshow Maker 2 (HKLM-x32\...\MAGIX_MSI_Slideshow_Maker_2) (Version: 2.0.0.8 - MAGIX AG) MAGIX Slideshow Maker 2 (x32 Version: 2.0.0.8 - MAGIX AG) Hidden Malwarebytes Anti-Malware Version 2.0.3.1025 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.3.1025 - Malwarebytes Corporation) Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation) Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation) Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version: - Microsoft) Microsoft Office Enterprise 2007 (HKLM-x32\...\ENTERPRISE) (Version: 12.0.6612.1000 - Microsoft Corporation) Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{402ED4A1-8F5B-387A-8688-997ABF58B8F2}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Mozilla Firefox 33.1 (x86 de) (HKLM-x32\...\Mozilla Firefox 33.1 (x86 de)) (Version: 33.1 - Mozilla) Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 29.0.1 - Mozilla) Mp3tag v2.58 (HKLM-x32\...\Mp3tag) (Version: v2.58 - Florian Heidenreich) MP4 To MP3 Converter V3.0.5 (HKLM-x32\...\MP4 To MP3 Converter_is1) (Version: - hxxp://www.MP4ToMP3Converter.net) MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation) MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation) MSXML 4.0 SP3 Parser (HKLM-x32\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation) MSXML 4.0 SP3 Parser (KB2758694) (HKLM-x32\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation) MyHarmony (HKU\S-1-5-21-1828066295-1020933206-982316413-1000\...\036a0e4fc6a247ec) (Version: 1.0.1.257 - Logitech) NVIDIA 3D Vision Treiber 311.00 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 311.00 - NVIDIA Corporation) NVIDIA Grafiktreiber 311.00 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 311.00 - NVIDIA Corporation) NVIDIA HD-Audiotreiber 1.3.18.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.18.0 - NVIDIA Corporation) Renesas Electronics USB 3.0 Host Controller Driver (HKLM-x32\...\InstallShield_{5442DAB8-7177-49E1-8B22-09A049EA5996}) (Version: 2.1.36.0 - Renesas Electronics Corporation) Renesas Electronics USB 3.0 Host Controller Driver (x32 Version: 2.1.36.0 - Renesas Electronics Corporation) Hidden Rescue and Recovery (HKLM-x32\...\{BDB3E73F-5ECA-441D-96E1-F1CFCF3D427D}) (Version: 4.51.0045.00 - Lenovo Group Limited) Revo Uninstaller 1.95 (HKLM-x32\...\Revo Uninstaller) (Version: 1.95 - VS Revo Group) RICOH_Media_Driver_v2.14.18.01 (HKLM-x32\...\{FE041B02-234C-4AAA-9511-80DF6482A458}) (Version: 2.14.18.01 - RICOH) Secunia PSI (3.0.0.9016) (HKLM-x32\...\Secunia PSI) (Version: 3.0.0.9016 - Secunia) Software Updater (HKLM-x32\...\{B307472F-7BD9-4040-9255-CE6D6A1196A3}) (Version: 4.3.1 - SEIKO EPSON CORPORATION) SpeedCommander 13 (x64) (HKLM\...\SpeedCommander 13 (x64)) (Version: 13 - SpeedProject) Steinberg Upload Manager (HKLM-x32\...\{88BBBD8F-4C19-4809-B84B-7A8F8238B48D}) (Version: 1.0.1 - Steinberg Media Technologies GmbH) TeamViewer 9 (HKLM-x32\...\TeamViewer 9) (Version: 9.0.32494 - TeamViewer) ThinkVantage Fingerprint Software (HKLM\...\{F58DA859-016E-492D-A588-317D9BB28002}) (Version: 5.9.9.7282 - Authentec Inc.) Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version: - Microsoft) Update für Microsoft Office Excel 2007 Help (KB963678) (HKLM-x32\...\{90120000-0016-0407-0000-0000000FF1CE}_ENTERPRISE_{BEC163EC-7A83-48A1-BFB6-3BF47CC2F8CF}) (Version: - Microsoft) Update für Microsoft Office Outlook 2007 Help (KB963677) (HKLM-x32\...\{90120000-001A-0407-0000-0000000FF1CE}_ENTERPRISE_{F6828576-6F79-470D-AB50-69D1BBADBD30}) (Version: - Microsoft) Update für Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM-x32\...\{90120000-0018-0407-0000-0000000FF1CE}_ENTERPRISE_{EA160DA3-E9B5-4D03-A518-21D306665B96}) (Version: - Microsoft) Update für Microsoft Office Word 2007 Help (KB963665) (HKLM-x32\...\{90120000-001B-0407-0000-0000000FF1CE}_ENTERPRISE_{38472199-D7B6-4833-A949-10E4EE6365A1}) (Version: - Microsoft) VLC media player (HKLM\...\VLC media player) (Version: 2.1.5 - VideoLAN) WaveLab LE 8 (64 bit) (HKLM\...\WaveLabLE8_64) (Version: 8.0.3.698 - Steinberg) WinRAR 5.01 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.01.0 - win.rar GmbH) ==================== Custom CLSID (selected items): ========================== (If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.) ==================== Restore Points ========================= 20-11-2014 02:53:59 Geplanter Prüfpunkt ==================== Hosts content: ========================== (If needed Hosts: directive could be included in the fixlist to reset Hosts.) 2009-07-14 03:34 - 2014-11-19 17:51 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts 127.0.0.1 localhost ==================== Scheduled Tasks (whitelisted) ============= (If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.) Task: {12A94F2C-FEA7-4D7A-BB2C-BEEB94AEB348} - System32\Tasks\TVT\ChangePWD => %RR%\rrcmd.exe Task: {1323497A-B8B7-442C-8034-4F5106EB7B50} - System32\Tasks\{E2B80576-5163-40C2-97E2-9276CF9954F7} => C:\Users\Donny1982\Downloads\zoek.exe Task: {33397B68-E794-4506-B910-68772F38888B} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.) Task: {4B470FED-8DCD-4E22-8884-F171533F04DE} - System32\Tasks\TVT\UpdateRnR => %TVTCOMMON%\Scheduler\tvtsetsched.exe Task: {731DADC7-C632-4EB3-AF10-B7C42185A69D} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-06-19] (Piriform Ltd) Task: {77C94A17-F43B-49AC-B94D-77046E856AB1} - System32\Tasks\{F4828AB9-4C25-42DD-8968-200A39482542} => C:\Users\Donny1982\Downloads\zoek.exe Task: {7C42157D-0A82-444E-89EE-7FA95748E57B} - System32\Tasks\{2F0FC155-729B-40C3-A046-0656A0925C84} => C:\Users\Donny1982\Downloads\zoek.exe Task: {D83AB191-990C-4529-BFE6-63EA1BF89607} - System32\Tasks\{C85BA825-7305-46D8-ABF1-C0C4A853E5E5} => C:\Users\Donny1982\Downloads\zoek.exe Task: {E2ED0F0A-24ED-4F9D-A687-2D7C47A32E91} - System32\Tasks\TVT\LaunchRnR => %RR%\rrcmd.exe Task: {E82FC27C-A169-42B4-82D4-775FEA7EDCC2} - System32\Tasks\Games\UpdateCheck_S-1-5-21-1828066295-1020933206-982316413-1000 ==================== Loaded Modules (whitelisted) ============= 2013-06-28 16:06 - 2013-01-10 22:36 - 00087328 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll 2013-06-28 16:04 - 2011-09-25 23:36 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll 2013-06-28 17:14 - 2010-10-26 09:40 - 00049056 ____N () C:\Program Files\CONEXANT\ForteConfig\fmapp.exe 2014-01-20 12:17 - 2014-01-20 12:17 - 00073544 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll 2014-10-11 13:05 - 2014-10-11 13:05 - 01044776 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll 2009-07-13 22:03 - 2009-07-14 02:15 - 00364544 _____ () C:\Windows\SysWOW64\msjetoledb40.dll 2014-11-07 09:56 - 2014-11-12 17:43 - 03649648 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll ==================== Alternate Data Streams (whitelisted) ========= (If an entry is included in the fixlist, only the Alternate Data Streams will be removed.) ==================== Safe Mode (whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.) ==================== EXE Association (whitelisted) ============= (If an entry is included in the fixlist, the default will be restored. None default entries will be removed.) ==================== MSCONFIG/TASK MANAGER disabled items ========= (Currently there is no automatic fix for this section.) ========================= Accounts: ========================== Administrator (S-1-5-21-1828066295-1020933206-982316413-500 - Administrator - Disabled) Donny1982 (S-1-5-21-1828066295-1020933206-982316413-1000 - Administrator - Enabled) => C:\Users\Donny1982 Gast (S-1-5-21-1828066295-1020933206-982316413-501 - Limited - Disabled) HomeGroupUser$ (S-1-5-21-1828066295-1020933206-982316413-1003 - Limited - Enabled) UpdatusUser (S-1-5-21-1828066295-1020933206-982316413-1001 - Limited - Enabled) => C:\Users\UpdatusUser ==================== Faulty Device Manager Devices ============= Name: SM-Bus-Controller Description: SM-Bus-Controller Class Guid: Manufacturer: Service: Problem: : The drivers for this device are not installed. (Code 28) Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard. ==================== Event log errors: ========================= Application errors: ================== System errors: ============= Microsoft Office Sessions: ========================= CodeIntegrity Errors: =================================== Date: 2014-11-19 17:50:48.718 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2014-11-19 17:50:48.687 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. ==================== Memory info =========================== Processor: Intel(R) Core(TM) i7-2670QM CPU @ 2.20GHz Percentage of memory in use: 43% Total physical RAM: 3979.23 MB Available physical RAM: 2247.11 MB Total Pagefile: 7956.65 MB Available Pagefile: 5794.71 MB Total Virtual: 8192 MB Available Virtual: 8191.84 MB ==================== Drives ================================ Drive c: () (Fixed) (Total:465.66 GB) (Free:5.51 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (Size: 465.8 GB) (Disk ID: B972BEC2) Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=465.7 GB) - (Type=07 NTFS) ==================== End Of Log ============================ |
21.11.2014, 17:23 | #6 |
/// the machine /// TB-Ausbilder | Java version veraltet.ESET Online Scanner
Downloade Dir bitte SecurityCheck und:
und ein frisches FRST log bitte. Noch Probleme?
__________________ --> Java version veraltet. |
22.11.2014, 18:08 | #7 |
| Java version veraltet. Bei securityCheck UNSUPPORTED OPERATING SYSTEM! ABORTED! |
23.11.2014, 14:44 | #8 |
/// the machine /// TB-Ausbilder | Java version veraltet. Dann lass das weg.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
26.11.2014, 19:52 | #9 |
| Java version veraltet.Code:
ATTFilter ESETSmartInstaller@High as downloader log: all ok # product=EOS # version=8 # OnlineScannerApp.exe=1.0.0.1 # OnlineScanner.ocx=1.0.0.7623 # api_version=3.0.2 # EOSSerial=632da7a11125cf48819cb4df8eba1101 # engine=21206 # end=finished # remove_checked=false # archives_checked=true # unwanted_checked=true # unsafe_checked=false # antistealth_checked=true # utc_time=2014-11-22 09:11:01 # local_time=2014-11-22 10:11:01 (+0100, Mitteleuropäische Zeit) # country="Germany" # lang=1031 # osver=6.1.7601 NT Service Pack 1 # compatibility_mode_1='Avira Desktop' # compatibility_mode=1810 16777213 100 100 67829 44204932 0 0 # compatibility_mode_1='' # compatibility_mode=5893 16776574 100 94 43093179 168277311 0 0 # scanned=188264 # found=1 # cleaned=0 # scan_time=53392 sh=E750C443A83F9B135B499E7917C5A93120384BB3 ft=1 fh=4eedbac881d1fc72 vn="Win32/DownWare.L evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Donny1982\Downloads\DTLite4491-0356.exe" |
27.11.2014, 10:46 | #10 |
/// the machine /// TB-Ausbilder | Java version veraltet. und FRST und meine Frage?
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
Themen zu Java version veraltet. |
antivir, avira, bonjour, converter, excel, fehlercode 0x5, fehlercode 0xc0000005, fehlercode 28, firefox 33.1, homepage, installation, mp3, newtab, optimizer pro v3.2 entfernen, programm, rundll, security, svchost.exe, system, windows |