hallo,

also mein problem ist das der rechner immer wieder sachen wie shopperz oder bobroser und solche sachen installiert und sich auch nicht formatieren lässt. auserdem funktionierten die explorer nicht richtig es geht die ganze zeit werbung auf und irgendwelche ja nein bestätigungen... ich weiss nicht was ich machen soll

defogger_disable by jpshortstuff (23.02.10.1)
Log created at 14:51 on 15/12/2014 (Tim)

Checking for autostart values...
HKCU\~\Run values retrieved.
HKLM\~\Run values retrieved.

Checking for services/drivers...


-=E.O.F=-
         

Additional scan result of Farbar Recovery Scan Tool (x86) Version: 14-12-2014 01
Ran by Tim at 2014-12-15 14:52:31
Running from C:\Users\Tim\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

CommonShare (HKLM\...\CommonShare) (Version: 2014.12.10.022350 - CommonShare) <==== ATTENTION!
ConvertAd (HKLM\...\ConvertAd) (Version: 1.0.0.0 - ConvertAd) <==== ATTENTION!
HQ-Video-Pro-2.1cV12.12 (HKLM\...\HQ-Video-Pro-2.1cV12.12) (Version: 1.35.11.26 - HQ-VideoV12.12) <==== ATTENTION
Microsoft .NET Framework 4 Client Profile (HKLM\...\Microsoft .NET Framework 4 Client Profile) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (HKLM\...\Microsoft .NET Framework 4 Client Profile DEU Language Pack) (Version: 4.0.30319 - Microsoft Corporation)
shopperz 2.0.0.450 (HKLM\...\{C74AB308-BA97-42f6-BB20-00E0868F52FB}_is1) (Version: 2.0.0.450 - shopperz)
Support TW 1.1 (HKLM\...\{12DA0E6F-5543-440C-BAA2-28BF01070AFA}{40030ae4}) (Version:  - TinyWallet) <==== ATTENTION
TheBestDeals (HKLM\...\20A0AB69-9BF7-5197-06B3-4BFA72493649) (Version:  - TheBestDeals-software) <==== ATTENTION
TinyWallet (HKLM\...\{F04D4328-4631-1CBE-1907-201B33FAF2E8}) (Version: 2.1.0.1195 - )
webssearches uninstall (HKLM\...\webssearches uninstall) (Version:  - webssearches) <==== ATTENTION
Wizard101(DE) (HKU\S-1-5-21-431573790-2162778945-66321951-1001\...\Wizard101(DE)_is1) (Version:  - Gameforge 4D GmbH)

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)


==================== Restore Points  =========================

15-12-2014 13:20:14 Windows Update

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 03:04 - 2009-06-10 22:39 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {1BDF6498-B15D-426E-93AC-956705829F12} - System32\Tasks\bd86da69-5d08-4b42-b7b5-eb484d2e3be0 => C:\Program Files\HQ-Video-Pro-2.1cV12.12\bd86da69-5d08-4b42-b7b5-eb484d2e3be0.exe [2014-12-13] (HQ-VideoV12.12) <==== ATTENTION
Task: {2E90D70C-8789-40ED-9036-D2929F1B3866} - System32\Tasks\705d3b14-1727-4573-ac8b-74917f2ddfab-11 => C:\Program Files\HQ-Video-Pro-2.1cV12.12\705d3b14-1727-4573-ac8b-74917f2ddfab-11.exe [2014-12-13] (HQ-VideoV12.12) <==== ATTENTION
Task: {2F85E9AA-D903-4FB5-BAB6-172C0829A0F4} - System32\Tasks\705d3b14-1727-4573-ac8b-74917f2ddfab-4 => C:\Program Files\HQ-Video-Pro-2.1cV12.12\705d3b14-1727-4573-ac8b-74917f2ddfab-4.exe [2014-12-13] (HQ-VideoV12.12) <==== ATTENTION
Task: {4B97E2E0-32CF-472A-A0DE-0B8D7A627787} - System32\Tasks\705d3b14-1727-4573-ac8b-74917f2ddfab-1 => C:\Program Files\HQ-Video-Pro-2.1cV12.12\HQ-Video-Pro-2.1cV12.12-codedownloader.exe [2014-12-13] (HQ-VideoV12.12) <==== ATTENTION
Task: {53A0CD65-918C-453A-882D-94E836F988AD} - System32\Tasks\705d3b14-1727-4573-ac8b-74917f2ddfab-5_user => C:\Program Files\HQ-Video-Pro-2.1cV12.12\705d3b14-1727-4573-ac8b-74917f2ddfab-5.exe [2014-12-13] (HQ-VideoV12.12) <==== ATTENTION
Task: {59DE1A67-EAAE-4C84-8D0D-4E72FF17C57B} - System32\Tasks\omrUpdater => C:\Program Files\shopperz\custer.bat [2014-12-02] ()
Task: {788A47D9-8791-424E-80C1-7707F3725E1E} - System32\Tasks\globalUpdateUpdateTaskMachineUA => C:\Program Files\globalUpdate\Update\GoogleUpdate.exe [2014-12-13] (globalUpdate) <==== ATTENTION
Task: {79F3080F-9CE2-47AA-931C-1C9957A46147} - System32\Tasks\LBSTNS => C:\Users\Tim\AppData\Roaming\LBSTNS.exe [2014-12-13] (HQ-VideoV12.12) <==== ATTENTION
Task: {81E2A003-7B06-44AA-ABA1-5A414BEB4A51} - System32\Tasks\705d3b14-1727-4573-ac8b-74917f2ddfab-3 => C:\Program Files\HQ-Video-Pro-2.1cV12.12\705d3b14-1727-4573-ac8b-74917f2ddfab-3.exe [2014-12-13] (HQ-VideoV12.12) <==== ATTENTION
Task: {93C7412E-C17B-4266-B841-EB8A539482B9} - System32\Tasks\Run_Bobby_Browser => C:\Users\Tim\AppData\Local\BoBrowser\Application\bobrowser.exe <==== ATTENTION
Task: {94197BD2-62A5-4745-BB97-8CB926AAB830} - System32\Tasks\TheBestDeals Update => C:\Program Files\ver7TheBestDeals\i3TheBestDealsm51.exe [2014-12-13] () <==== ATTENTION
Task: {B20DF6F2-9D5C-4619-8776-7EBA33243283} - System32\Tasks\{761C846F-D68A-48CC-9180-21F652F3C1F2} => pcalua.exe -a C:\Users\Tim\AppData\Roaming\webssearches\UninstallManager.exe -c  -ptid=brd
Task: {D490FAB8-AE68-4B23-92C7-719EFB0FE5EF} - System32\Tasks\2b5022f2-ae23-4546-870a-98084e9a2e88 => C:\Program Files\HQ-Video-Pro-2.1cV12.12\2b5022f2-ae23-4546-870a-98084e9a2e88.exe [2014-12-13] () <==== ATTENTION
Task: {D9959AE1-5942-4271-B77A-32B0FA65ACF7} - System32\Tasks\705d3b14-1727-4573-ac8b-74917f2ddfab-2 => C:\Program Files\HQ-Video-Pro-2.1cV12.12\705d3b14-1727-4573-ac8b-74917f2ddfab-2.exe [2014-12-13] (HQ-VideoV12.12) <==== ATTENTION
Task: {DF0D5A91-CD74-4884-9F8C-255F27BFAFE2} - System32\Tasks\globalUpdateUpdateTaskMachineCore => C:\Program Files\globalUpdate\Update\GoogleUpdate.exe [2014-12-13] (globalUpdate) <==== ATTENTION
Task: {E3D01417-32A0-4EF2-A4CD-10AE4E4C236F} - System32\Tasks\705d3b14-1727-4573-ac8b-74917f2ddfab-5 => C:\Program Files\HQ-Video-Pro-2.1cV12.12\705d3b14-1727-4573-ac8b-74917f2ddfab-5.exe [2014-12-13] (HQ-VideoV12.12) <==== ATTENTION
Task: {FA3C0CF7-CA0B-4EDF-8B4A-E04B7CFD009A} - System32\Tasks\CP => C:\Users\Tim\AppData\Roaming\CP.exe [2014-12-13] (HQ-VideoV12.12) <==== ATTENTION

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\Windows\Tasks\2b5022f2-ae23-4546-870a-98084e9a2e88.job => C:\Program Files\HQ-Video-Pro-2.1cV12.12\2b5022f2-ae23-4546-870a-98084e9a2e88.exe <==== ATTENTION
Task: C:\Windows\Tasks\705d3b14-1727-4573-ac8b-74917f2ddfab-1.job => C:\Program Files\HQ-Video-Pro-2.1cV12.12\HQ-Video-Pro-2.1cV12.12-codedownloader.exe <==== ATTENTION
Task: C:\Windows\Tasks\705d3b14-1727-4573-ac8b-74917f2ddfab-11.job => C:\Program Files\HQ-Video-Pro-2.1cV12.12\705d3b14-1727-4573-ac8b-74917f2ddfab-11.exe <==== ATTENTION
Task: C:\Windows\Tasks\705d3b14-1727-4573-ac8b-74917f2ddfab-2.job => C:\Program Files\HQ-Video-Pro-2.1cV12.12\705d3b14-1727-4573-ac8b-74917f2ddfab-2.exe <==== ATTENTION
Task: C:\Windows\Tasks\705d3b14-1727-4573-ac8b-74917f2ddfab-3.job => C:\Program Files\HQ-Video-Pro-2.1cV12.12\705d3b14-1727-4573-ac8b-74917f2ddfab-3.exe <==== ATTENTION
Task: C:\Windows\Tasks\705d3b14-1727-4573-ac8b-74917f2ddfab-4.job => C:\Program Files\HQ-Video-Pro-2.1cV12.12\705d3b14-1727-4573-ac8b-74917f2ddfab-4.exe <==== ATTENTION
Task: C:\Windows\Tasks\705d3b14-1727-4573-ac8b-74917f2ddfab-5.job => C:\Program Files\HQ-Video-Pro-2.1cV12.12\705d3b14-1727-4573-ac8b-74917f2ddfab-5.exe <==== ATTENTION
Task: C:\Windows\Tasks\705d3b14-1727-4573-ac8b-74917f2ddfab-5_user.job => C:\Program Files\HQ-Video-Pro-2.1cV12.12\705d3b14-1727-4573-ac8b-74917f2ddfab-5.exe <==== ATTENTION
Task: C:\Windows\Tasks\bd86da69-5d08-4b42-b7b5-eb484d2e3be0.job => C:\Program Files\HQ-Video-Pro-2.1cV12.12\bd86da69-5d08-4b42-b7b5-eb484d2e3be0.exe <==== ATTENTION
Task: C:\Windows\Tasks\CP.job => C:\Users\Tim\AppData\Roaming\CP.exe <==== ATTENTION
Task: C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job => C:\Program Files\globalUpdate\Update\GoogleUpdate.exe <==== ATTENTION
Task: C:\Windows\Tasks\globalUpdateUpdateTaskMachineUA.job => C:\Program Files\globalUpdate\Update\GoogleUpdate.exe <==== ATTENTION
Task: C:\Windows\Tasks\LBSTNS.job => C:\Users\Tim\AppData\Roaming\LBSTNS.exe <==== ATTENTION
Task: C:\Windows\Tasks\TheBestDeals Update.job => C:\Program Files\ver7TheBestDeals\i3TheBestDealsm51.exe

==================== Loaded Modules (whitelisted) =============

2014-12-13 13:18 - 2014-12-13 13:18 - 04157440 _____ () c:\Program Files\Supporter\Supporter.dll
2014-12-13 13:17 - 2014-12-02 18:03 - 00282504 _____ () C:\Program Files\shopperz\sgurd.exe
2014-12-13 13:17 - 2014-12-02 18:03 - 00306568 _____ () C:\Program Files\shopperz\csrcc.exe
2014-12-13 13:17 - 2014-12-02 18:03 - 00124808 _____ () C:\Program Files\shopperz\nfapi32.dll
2014-12-13 13:17 - 2014-12-02 18:03 - 00345480 _____ () C:\Program Files\shopperz\ProtocolFilters32.dll
2014-12-13 13:17 - 2014-12-02 18:03 - 00224648 _____ () C:\Program Files\shopperz\psonupd.exe
2014-12-10 03:30 - 2014-12-10 03:30 - 00526056 _____ () C:\Program Files\CommonShare\updateCommonShare.exe
2014-12-12 15:26 - 2014-12-12 15:26 - 00526056 _____ () C:\Program Files\CommonShare\bin\utilCommonShare.exe
2014-12-13 13:17 - 2014-12-02 18:03 - 00291720 _____ () C:\Program Files\shopperz\socek.dll
2014-12-13 13:17 - 2014-12-13 13:17 - 00723456 _____ () C:\Program Files\ver7TheBestDeals\i3TheBestDealsm51.exe
2014-12-13 13:17 - 2014-12-02 18:03 - 00430472 _____ () C:\Program Files\shopperz\unity.exe
2014-12-13 13:17 - 2014-12-02 18:03 - 00395144 _____ () C:\Program Files\shopperz\hleb.dll
2014-12-13 13:17 - 2014-12-02 18:03 - 00242056 _____ () C:\Program Files\shopperz\compot.dll
2014-12-13 13:17 - 2014-12-02 18:03 - 00309128 _____ () C:\Program Files\shopperz\creed32.dll
2014-12-13 11:50 - 2014-12-13 11:50 - 03239424 _____ () C:\Users\Tim\AppData\Local\ConvertAd\ConvertAd.exe
2014-12-12 15:28 - 2014-11-25 14:06 - 00296168 _____ () C:\Program Files\CommonShare\bin\CommonShare.PurBrowse.exe
2014-12-12 15:28 - 2014-11-25 23:05 - 00098536 _____ () C:\Program Files\CommonShare\bin\CommonShare.BrowserAdapter.exe
2014-12-12 15:28 - 2014-11-27 00:59 - 00101608 _____ () C:\Program Files\CommonShare\bin\CommonShare.expext.exe
2014-12-12 15:28 - 2014-11-27 00:59 - 00082152 _____ () C:\Program Files\CommonShare\bin\CommonShare.expextdll.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)


==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== EXE Association (whitelisted) =============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


==================== MSCONFIG/TASK MANAGER disabled items =========

(Currently there is no automatic fix for this section.)


========================= Accounts: ==========================

Administrator (S-1-5-21-431573790-2162778945-66321951-500 - Administrator - Disabled)
Gast (S-1-5-21-431573790-2162778945-66321951-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-431573790-2162778945-66321951-1002 - Limited - Enabled)
Tim (S-1-5-21-431573790-2162778945-66321951-1001 - Administrator - Enabled) => C:\Users\Tim

==================== Faulty Device Manager Devices =============

Name: Teredo Tunneling Pseudo-Interface
Description: Microsoft-Teredo-Tunneling-Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.

Name: wpnfd_1_10_0_1
Description: wpnfd_1_10_0_1
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer: 
Service: wpnfd_1_10_0_1
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.

Name: PS/2-kompatible Maus
Description: PS/2-kompatible Maus
Class Guid: {4d36e96f-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: i8042prt
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.

Name: PCI-Kommunikationscontroller (einfach)
Description: PCI-Kommunikationscontroller (einfach)
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.


==================== Event log errors: =========================

Application errors:
==================
Error: (12/15/2014 02:28:29 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: iexplore.exe, Version: 8.0.7601.17514, Zeitstempel: 0x4ce79912
Name des fehlerhaften Moduls: IEFRAME.dll, Version: 8.0.7601.17514, Zeitstempel: 0x4ce7b847
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000ca122
ID des fehlerhaften Prozesses: 0xe78
Startzeit der fehlerhaften Anwendung: 0xiexplore.exe0
Pfad der fehlerhaften Anwendung: iexplore.exe1
Pfad des fehlerhaften Moduls: iexplore.exe2
Berichtskennung: iexplore.exe3

Error: (12/14/2014 11:26:17 PM) (Source: VSS) (EventID: 12305) (User: )
Description: Volumeschattenkopie-Dienstfehler: Volume bzw. Datenträger ist nicht richtig angeschlossen oder wurde nicht gefunden.
Fehlerkontext: CreateFileW(\\?\GLOBALROOT\Device\HarddiskVolumeShadowCopy3,0xc0000000,0x00000003,...).


Vorgang:
   PostFinalCommitSnapshots wird verarbeitet

Kontext:
   Ausführungskontext: System Provider

Error: (12/14/2014 09:06:41 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm WizardLauncher.exe, Version 0.0.0.0 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: df8

Startzeit: 01d01774b198bae4

Endzeit: 29

Anwendungspfad: C:\ProgramData\Wizard101(DE)\PatchClient\BankB\WizardLauncher.exe

Berichts-ID: 20726e55-8368-11e4-ba82-000ffe600482

Error: (12/14/2014 09:05:22 AM) (Source: SideBySide) (EventID: 33) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.VC80.MFC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50727.762"1".
Die abhängige Assemblierung "Microsoft.VC80.MFC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50727.762"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".

Error: (12/13/2014 01:26:29 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: WizardGraphicalClient.exe, Version: 0.0.0.0, Zeitstempel: 0x547f4797
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0012f38c
ID des fehlerhaften Prozesses: 0xf0
Startzeit der fehlerhaften Anwendung: 0xWizardGraphicalClient.exe0
Pfad der fehlerhaften Anwendung: WizardGraphicalClient.exe1
Pfad des fehlerhaften Moduls: WizardGraphicalClient.exe2
Berichtskennung: WizardGraphicalClient.exe3

Error: (12/13/2014 01:25:50 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.VC80.MFC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50727.762"1".
Die abhängige Assemblierung "Microsoft.VC80.MFC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50727.762"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".

Error: (12/13/2014 01:24:17 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm nsgF09.tmp, Version 0.0.0.0 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 1104

Startzeit: 01d016cf9cf77561

Endzeit: 16

Anwendungspfad: C:\Users\Tim\AppData\Local\Temp\nsgF09.tmp

Berichts-ID:

Error: (12/13/2014 01:24:16 PM) (Source: VSS) (EventID: 8194) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Abfragen nach der Schnittstelle "IVssWriterCallback" ist ein unerwarteter Fehler aufgetreten. hr = 0x80070005, Zugriff verweigert
.
Die Ursache hierfür ist oft eine falsche Sicherheitseinstellung im Schreib- oder Anfrageprozess.


Vorgang:
   Generatordaten werden gesammelt

Kontext:
   Generatorklassen-ID: {e8132975-6f93-4464-a53e-1050253ae220}
   Generatorname: System Writer
   Generatorinstanz-ID: {e474f28a-4dac-4f7f-8d38-14334f061d3a}

Error: (12/13/2014 01:18:49 PM) (Source: MsiInstaller) (EventID: 11309) (User: Tim-PC)
Description: Product: Google Update Helper -- Error 1309. Error reading from file: C:\Program Files\globalUpdate\Update\1.3.25.0\Google\Update\RequiredFile.txt.  System error 3.  Verify that the file exists and that you can access it.

Error: (12/13/2014 11:24:50 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: WizardGraphicalClient.exe, Version: 0.0.0.0, Zeitstempel: 0x547f4797
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0012f38c
ID des fehlerhaften Prozesses: 0x51c
Startzeit der fehlerhaften Anwendung: 0xWizardGraphicalClient.exe0
Pfad der fehlerhaften Anwendung: WizardGraphicalClient.exe1
Pfad des fehlerhaften Moduls: WizardGraphicalClient.exe2
Berichtskennung: WizardGraphicalClient.exe3


System errors:
=============
Error: (12/15/2014 02:42:35 PM) (Source: Disk) (EventID: 11) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk1\DR3 gefunden.

Error: (12/15/2014 02:42:35 PM) (Source: Disk) (EventID: 11) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk1\DR3 gefunden.

Error: (12/15/2014 02:42:34 PM) (Source: Disk) (EventID: 11) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk1\DR3 gefunden.

Error: (12/15/2014 02:37:14 PM) (Source: Disk) (EventID: 11) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk1\DR2 gefunden.

Error: (12/15/2014 02:37:13 PM) (Source: Disk) (EventID: 11) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk1\DR2 gefunden.

Error: (12/15/2014 02:37:12 PM) (Source: Disk) (EventID: 11) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk1\DR2 gefunden.

Error: (12/15/2014 02:24:41 PM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: 
wpnfd_1_10_0_1

Error: (12/15/2014 02:16:12 PM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: 
wpnfd_1_10_0_1

Error: (12/15/2014 02:12:35 PM) (Source: WMPNetworkSvc) (EventID: 14324) (User: )
Description: WMPNetworkSvc0x80070020

Error: (12/15/2014 02:10:14 PM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: 
wpnfd_1_10_0_1


Microsoft Office Sessions:
=========================
Error: (12/15/2014 02:28:29 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: iexplore.exe8.0.7601.175144ce79912IEFRAME.dll8.0.7601.175144ce7b847c0000005000ca122e7801d0186ab1956620C:\Program Files\Internet Explorer\iexplore.exeC:\Windows\system32\IEFRAME.dll412f6d8e-845e-11e4-99e6-000ffe600482

Error: (12/14/2014 11:26:17 PM) (Source: VSS) (EventID: 12305) (User: )
Description: CreateFileW(\\?\GLOBALROOT\Device\HarddiskVolumeShadowCopy3,0xc0000000,0x00000003,...)

Vorgang:
   PostFinalCommitSnapshots wird verarbeitet

Kontext:
   Ausführungskontext: System Provider

Error: (12/14/2014 09:06:41 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: WizardLauncher.exe0.0.0.0df801d01774b198bae429C:\ProgramData\Wizard101(DE)\PatchClient\BankB\WizardLauncher.exe20726e55-8368-11e4-ba82-000ffe600482

Error: (12/14/2014 09:05:22 AM) (Source: SideBySide) (EventID: 33) (User: )
Description: Microsoft.VC80.MFC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50727.762"C:\ProgramData\Wizard101(DE)\PatchClient\BankB\SkinCrafterDll.dll

Error: (12/13/2014 01:26:29 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: WizardGraphicalClient.exe0.0.0.0547f4797unknown0.0.0.000000000c00000050012f38cf001d016cff6acd392C:\ProgramData\Wizard101(DE)\Bin\WizardGraphicalClient.exeunknown43297f31-82c3-11e4-aa4c-000ffe600482

Error: (12/13/2014 01:25:50 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Microsoft.VC80.MFC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50727.762"C:\ProgramData\Wizard101(DE)\PatchClient\BankB\SkinCrafterDll.dll

Error: (12/13/2014 01:24:17 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: nsgF09.tmp0.0.0.0110401d016cf9cf7756116C:\Users\Tim\AppData\Local\Temp\nsgF09.tmp

Error: (12/13/2014 01:24:16 PM) (Source: VSS) (EventID: 8194) (User: )
Description: 0x80070005, Zugriff verweigert


Vorgang:
   Generatordaten werden gesammelt

Kontext:
   Generatorklassen-ID: {e8132975-6f93-4464-a53e-1050253ae220}
   Generatorname: System Writer
   Generatorinstanz-ID: {e474f28a-4dac-4f7f-8d38-14334f061d3a}

Error: (12/13/2014 01:18:49 PM) (Source: MsiInstaller) (EventID: 11309) (User: Tim-PC)
Description: Product: Google Update Helper -- Error 1309. Error reading from file: C:\Program Files\globalUpdate\Update\1.3.25.0\Google\Update\RequiredFile.txt.  System error 3.  Verify that the file exists and that you can access it.(NULL)(NULL)(NULL)(NULL)(NULL)

Error: (12/13/2014 11:24:50 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: WizardGraphicalClient.exe0.0.0.0547f4797unknown0.0.0.000000000c00000050012f38c51c01d016befbc7e10aC:\ProgramData\Wizard101(DE)\Bin\WizardGraphicalClient.exeunknown4469d1a7-82b2-11e4-84ff-000ffe600482


==================== Memory info =========================== 

Processor: Intel(R) Pentium(R) D CPU 3.00GHz
Percentage of memory in use: 41%
Total physical RAM: 3583.31 MB
Available physical RAM: 2112.45 MB
Total Pagefile: 7164.9 MB
Available Pagefile: 5697.64 MB
Total Virtual: 2047.88 MB
Available Virtual: 1910.47 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:186.31 GB) (Free:4.28 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
Drive e: (U3 System) (CDROM) (Total:0.01 GB) (Free:0 GB) CDFS
Drive f: () (Removable) (Total:7.47 GB) (Free:7.46 GB) FAT32

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 186.3 GB) (Disk ID: 02C66D25)
Partition 1: (Active) - (Size=186.3 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (Size: 7.5 GB) (Disk ID: 6E652072)
No partition Table on disk 1.

==================== End Of Log ============================
         

FRST Logfile:

FRST Logfile:

FRST Logfile:

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 14-12-2014 01
Ran by Tim (administrator) on TIM-PC on 15-12-2014 14:51:53
Running from C:\Users\Tim\Desktop
Loaded Profile: Tim (Available profiles: Tim)
Platform: Microsoft Windows 7 Ultimate  Service Pack 1 (X86) OS Language: Deutsch (Deutschland)
Internet Explorer Version 8
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Fuyu LIMITED) C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
() C:\Program Files\shopperz\sgurd.exe
() C:\Program Files\shopperz\csrcc.exe
() C:\Program Files\shopperz\psonupd.exe
() C:\Program Files\CommonShare\updateCommonShare.exe
() C:\Program Files\CommonShare\bin\utilCommonShare.exe
(HQ-VideoV12.12) C:\Program Files\HQ-Video-Pro-2.1cV12.12\bd86da69-5d08-4b42-b7b5-eb484d2e3be0.exe
() C:\Program Files\ver7TheBestDeals\i3TheBestDealsm51.exe
() C:\Program Files\shopperz\unity.exe
() C:\Users\Tim\AppData\Local\ConvertAd\ConvertAd.exe
() C:\Program Files\CommonShare\bin\CommonShare.PurBrowse.exe
() C:\Program Files\CommonShare\bin\CommonShare.BrowserAdapter.exe
() C:\Program Files\CommonShare\bin\CommonShare.expext.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
(Microsoft Corporation) C:\Windows\System32\wuauclt.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [mbot_de_340] => [X]
HKLM\...\Run: [shopperz] => C:\Program Files\shopperz\unity.exe [430472 2014-12-02] ()
HKLM\...\Run: [ConvertAd] => C:\Users\Tim\AppData\Local\ConvertAd\ConvertAd.exe [3239424 2014-12-13] ()
HKU\S-1-5-21-431573790-2162778945-66321951-1001\...\MountPoints2: {1330ed79-8075-11e4-8e7e-806e6f6e6963} - E:\LaunchU3.exe -a
HKU\S-1-5-18\...\RunOnce: [SPReview] => C:\Windows\System32\SPReview\SPReview.exe [280576 2014-12-14] (Microsoft Corporation)
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://istart.webssearches.com/?type=hp&ts=1418394066&from=brd&uid=ST3200827AS_5ND4L524XXXX5ND4L524
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://istart.webssearches.com/web/?type=ds&ts=1418394066&from=brd&uid=ST3200827AS_5ND4L524XXXX5ND4L524&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://istart.webssearches.com/?type=hp&ts=1418394066&from=brd&uid=ST3200827AS_5ND4L524XXXX5ND4L524
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://istart.webssearches.com/web/?type=ds&ts=1418394066&from=brd&uid=ST3200827AS_5ND4L524XXXX5ND4L524&q={searchTerms}
HKU\S-1-5-21-431573790-2162778945-66321951-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://istart.webssearches.com/?type=hp&ts=1418394066&from=brd&uid=ST3200827AS_5ND4L524XXXX5ND4L524
HKU\S-1-5-21-431573790-2162778945-66321951-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://istart.webssearches.com/?type=hp&ts=1418394066&from=brd&uid=ST3200827AS_5ND4L524XXXX5ND4L524
StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe hxxp://istart.webssearches.com/?type=sc&ts=1418394066&from=brd&uid=ST3200827AS_5ND4L524XXXX5ND4L524
SearchScopes: HKLM -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://istart.webssearches.com/web/?type=ds&ts=1418394066&from=brd&uid=ST3200827AS_5ND4L524XXXX5ND4L524&q={searchTerms}
SearchScopes: HKLM -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://istart.webssearches.com/web/?type=ds&ts=1418394066&from=brd&uid=ST3200827AS_5ND4L524XXXX5ND4L524&q={searchTerms}
SearchScopes: HKU\S-1-5-21-431573790-2162778945-66321951-1001 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://istart.webssearches.com/web/?type=ds&ts=1418394066&from=brd&uid=ST3200827AS_5ND4L524XXXX5ND4L524&q={searchTerms}
BHO: HQ-Video-Pro-2.1cV12.12 -> {11111111-1111-1111-1111-110611571181} -> C:\Program Files\HQ-Video-Pro-2.1cV12.12\HQ-Video-Pro-2.1cV12.12-bho.dll (HQ-VideoV12.12)
BHO: TheBestDeals -> {1B2B2086-9F6B-2077-18A6-1BAD580372DB} -> C:\Program Files\ver7TheBestDeals\185.dll ()
BHO: TinyWallet -> {1c868143-fb32-47ec-b9ae-1209f9290ba8} -> C:\Program Files\TinyWallet\Jc9h20IC1DyMrZ.dll ()
BHO: CommonShare -> {b0022d3c-ca81-4a57-ba00-31650a761234} -> C:\Program Files\CommonShare\CommonSharebho.dll (CommonShare)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

FireFox:
========
FF Plugin: @staging.google.com/globalUpdate Update;version=10 -> C:\Program Files\globalUpdate\Update\1.3.25.0\npGoogleUpdate4.dll (globalUpdate)
FF Plugin: @staging.google.com/globalUpdate Update;version=4 -> C:\Program Files\globalUpdate\Update\1.3.25.0\npGoogleUpdate4.dll (globalUpdate)
FF HKU\S-1-5-21-431573790-2162778945-66321951-1001\...\Firefox\Extensions: [{CC0CDFB8-D0BA-DBCE-058A-EAD0E54F03F4}] - C:\Program Files\ver7TheBestDeals\185.xpi
FF Extension: TheBestDeals - C:\Program Files\ver7TheBestDeals\185.xpi [2014-12-13]

Chrome: 
=======
CHR dev: Chrome dev build detected! <======= ATTENTION
CHR Profile: C:\Users\Tim\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (No Name) - C:\Users\Tim\AppData\Local\Google\Chrome\User Data\Default\Extensions\eagomcfjiefffhpaejnlpjccikpipdoe [2014-12-13]
CHR Extension: (TinyWallet) - C:\Users\Tim\AppData\Local\Google\Chrome\User Data\Default\Extensions\pgpjggggmchbbodcmnhpkpmgdojeclii [2014-12-13]

========================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 40030ae4; c:\Program Files\Supporter\Supporter.dll [4157440 2014-12-13] () [File not signed]
R2 45EEEAC2-B27B-492b-AD58-66A949F55EB4; C:\Program Files\shopperz\sgurd.exe [282504 2014-12-02] ()
R2 csrcc; C:\Program Files\shopperz\csrcc.exe [306568 2014-12-02] ()
S2 globalUpdate; C:\Program Files\globalUpdate\Update\GoogleUpdate.exe [68608 2014-12-13] (globalUpdate) [File not signed]
S3 globalUpdatem; C:\Program Files\globalUpdate\Update\GoogleUpdate.exe [68608 2014-12-13] (globalUpdate) [File not signed]
R2 shopperz Updater; C:\Program Files\shopperz\psonupd.exe [224648 2014-12-02] ()
R2 Update CommonShare; C:\Program Files\CommonShare\updateCommonShare.exe [526056 2014-12-10] ()
R2 Util CommonShare; C:\Program Files\CommonShare\bin\utilCommonShare.exe [526056 2014-12-12] ()
R2 WindowsMangerProtect; C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe [485888 2014-12-12] (Fuyu LIMITED) [File not signed]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R1 cherimoya; C:\Windows\System32\drivers\cherimoya.sys [51160 2014-11-23] (Cherimoya Ltd)
R2 webinstrNewH; C:\Windows\system32\Drivers\webinstrNewH.sys [56992 2014-12-13] (Corsica)
R1 {dc19896d-a3e2-417d-be46-d18ebc99e240}Gw; C:\Windows\System32\drivers\{dc19896d-a3e2-417d-be46-d18ebc99e240}Gw.sys [43144 2014-11-26] (StdLib)
R1 {e4a6645a-3f85-4e1f-aa41-8367978844db}w; C:\Windows\System32\drivers\{e4a6645a-3f85-4e1f-aa41-8367978844db}w.sys [43144 2014-11-25] (StdLib)
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X]
S3 tsusbhub; system32\drivers\tsusbhub.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]
S1 wpnfd_1_10_0_1; system32\drivers\wpnfd_1_10_0_1.sys [X]
U3 uwldipow; \??\C:\Users\Tim\AppData\Local\Temp\uwldipow.sys [X]

==================== NetSvcs (Whitelisted) ===================


(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-12-15 14:51 - 2014-12-15 14:52 - 00008555 _____ () C:\Users\Tim\Desktop\FRST.txt
2014-12-15 14:51 - 2014-12-15 14:51 - 00000468 _____ () C:\Users\Tim\Desktop\defogger_disable.log
2014-12-15 14:50 - 2014-12-15 14:42 - 01111040 _____ (Farbar) C:\Users\Tim\Desktop\FRST.exe
2014-12-15 14:50 - 2014-12-15 14:36 - 00380416 _____ () C:\Users\Tim\Desktop\Gmer-19357.exe
2014-12-15 14:50 - 2014-12-15 14:34 - 00050477 _____ () C:\Users\Tim\Desktop\Defogger.exe
2014-12-15 14:43 - 2014-12-15 14:51 - 00000000 ____D () C:\FRST
2014-12-15 14:38 - 2014-12-15 14:38 - 00000000 _____ () C:\Users\Tim\defogger_reenable
2014-12-15 14:21 - 2014-05-14 17:23 - 01973728 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2014-12-15 14:21 - 2014-05-14 17:23 - 00581600 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2014-12-15 14:21 - 2014-05-14 17:23 - 00054240 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2014-12-15 14:21 - 2014-05-14 17:23 - 00045536 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2014-12-15 14:21 - 2014-05-14 17:23 - 00036320 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2014-12-15 14:21 - 2014-05-14 17:17 - 02425856 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2014-12-15 14:21 - 2014-05-14 17:17 - 00092672 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2014-12-15 14:20 - 2014-05-14 09:23 - 00179656 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2014-12-15 14:20 - 2014-05-14 09:17 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2014-12-14 23:26 - 2014-12-14 23:26 - 00000000 ____D () C:\Windows\system32\SPReview
2014-12-14 23:25 - 2014-12-14 23:25 - 00000000 ____D () C:\Windows\system32\EventProviders
2014-12-14 17:24 - 2010-11-20 13:30 - 00233344 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msiscsi.sys
2014-12-14 17:24 - 2010-11-20 13:29 - 00520064 _____ (Microsoft Corporation) C:\Windows\system32\mcupdate_GenuineIntel.dll
2014-12-14 17:24 - 2010-11-20 13:29 - 00014208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hwpolicy.sys
2014-12-14 17:24 - 2010-11-20 13:21 - 12872192 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2014-12-14 17:24 - 2010-11-20 13:21 - 11410432 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2014-12-14 17:24 - 2010-11-20 13:21 - 01548288 _____ (Microsoft Corporation) C:\Windows\system32\tquery.dll
2014-12-14 17:24 - 2010-11-20 13:21 - 01159168 _____ (Microsoft Corporation) C:\Windows\system32\sysmain.dll
2014-12-14 17:24 - 2010-11-20 13:21 - 00915456 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2014-12-14 17:24 - 2010-11-20 13:21 - 00870912 _____ (Microsoft Corporation) C:\Windows\system32\XpsPrint.dll
2014-12-14 17:24 - 2010-11-20 13:21 - 00750592 _____ (Microsoft Corporation) C:\Windows\system32\schedsvc.dll
2014-12-14 17:24 - 2010-11-20 13:21 - 00423936 _____ (Microsoft Corporation) C:\Windows\system32\secproc_isv.dll
2014-12-14 17:24 - 2010-11-20 13:21 - 00253952 _____ (Microsoft Corporation) C:\Windows\system32\spwizui.dll
2014-12-14 17:24 - 2010-11-20 13:21 - 00120320 _____ (Microsoft Corporation) C:\Windows\system32\tssrvlic.dll
2014-12-14 17:24 - 2010-11-20 13:21 - 00011776 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2014-12-14 17:24 - 2010-11-20 13:20 - 00428032 _____ (Microsoft Corporation) C:\Windows\system32\secproc.dll
2014-12-14 17:24 - 2010-11-20 13:19 - 10990080 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-12-14 17:24 - 2010-11-20 13:19 - 05977600 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-12-14 17:24 - 2010-11-20 13:19 - 03215872 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2014-12-14 17:24 - 2010-11-20 13:19 - 03207680 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll
2014-12-14 17:24 - 2010-11-20 13:19 - 02064384 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-12-14 17:24 - 2010-11-20 13:19 - 01698816 _____ (Microsoft Corporation) C:\Windows\system32\esent.dll
2014-12-14 17:24 - 2010-11-20 13:19 - 01401344 _____ (Microsoft Corporation) C:\Windows\system32\mssrch.dll
2014-12-14 17:24 - 2010-11-20 13:19 - 00954752 _____ (Microsoft Corporation) C:\Windows\system32\mfc40.dll
2014-12-14 17:24 - 2010-11-20 13:19 - 00954288 _____ (Microsoft Corporation) C:\Windows\system32\mfc40u.dll
2014-12-14 17:24 - 2010-11-20 13:19 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\LSCSHostPolicy.dll
2014-12-14 17:24 - 2010-11-20 13:18 - 01334272 _____ (Microsoft Corporation) C:\Windows\system32\CertEnroll.dll
2014-12-14 17:24 - 2010-11-20 13:18 - 01171456 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2014-12-14 17:24 - 2010-11-20 13:18 - 00739840 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll
2014-12-14 17:24 - 2010-11-20 13:17 - 00327168 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_isv.exe
2014-12-14 17:24 - 2010-11-20 13:17 - 00322048 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate.exe
2014-12-14 17:24 - 2010-11-20 13:17 - 00080896 _____ () C:\Windows\system32\RDVGHelper.exe
2014-12-14 17:24 - 2010-11-20 11:24 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbFlt.sys
2014-12-14 17:24 - 2010-11-05 02:58 - 01130824 _____ (Microsoft Corporation) C:\Windows\system32\dfshim.dll
2014-12-14 17:24 - 2010-11-05 02:58 - 00297808 _____ (Microsoft Corporation) C:\Windows\system32\mscoree.dll
2014-12-14 17:24 - 2010-11-05 02:53 - 00295264 _____ (Microsoft Corporation) C:\Windows\system32\PresentationHost.exe
2014-12-14 17:24 - 2010-11-05 02:53 - 00099176 _____ (Microsoft Corporation) C:\Windows\system32\PresentationHostProxy.dll
2014-12-14 17:23 - 2010-11-20 13:36 - 01077248 _____ (Microsoft Corporation) C:\Windows\system32\Narrator.exe
2014-12-14 17:23 - 2010-11-20 13:32 - 05066752 _____ (Microsoft Corporation) C:\Windows\system32\AuthFWSnapin.dll
2014-12-14 17:23 - 2010-11-20 13:30 - 01290112 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2014-12-14 17:23 - 2010-11-20 13:30 - 01211264 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2014-12-14 17:23 - 2010-11-20 13:30 - 00712576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys
2014-12-14 17:23 - 2010-11-20 13:30 - 00245632 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\volsnap.sys
2014-12-14 17:23 - 2010-11-20 13:30 - 00240000 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2014-12-14 17:23 - 2010-11-20 13:30 - 00175360 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\vmbus.sys
2014-12-14 17:23 - 2010-11-20 13:30 - 00160128 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\vhdmp.sys
2014-12-14 17:23 - 2010-11-20 13:30 - 00153984 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pci.sys
2014-12-14 17:23 - 2010-11-20 13:30 - 00148864 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys
2014-12-14 17:23 - 2010-11-20 13:30 - 00143744 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvstor.sys
2014-12-14 17:23 - 2010-11-20 13:30 - 00117120 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvraid.sys
2014-12-14 17:23 - 2010-11-20 13:30 - 00116096 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msdsm.sys
2014-12-14 17:23 - 2010-11-20 13:30 - 00085376 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\sbp2port.sys
2014-12-14 17:23 - 2010-11-20 13:30 - 00053120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\termdd.sys
2014-12-14 17:23 - 2010-11-20 13:30 - 00028032 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msahci.sys
2014-12-14 17:23 - 2010-11-20 13:29 - 02217856 _____ (Microsoft Corporation) C:\Windows\system32\bootres.dll
2014-12-14 17:23 - 2010-11-20 13:29 - 00728448 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2014-12-14 17:23 - 2010-11-20 13:29 - 00274304 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\acpi.sys
2014-12-14 17:23 - 2010-11-20 13:29 - 00194432 _____ (Microsoft Corporation) C:\Windows\system32\halmacpi.dll
2014-12-14 17:23 - 2010-11-20 13:29 - 00194432 _____ (Microsoft Corporation) C:\Windows\system32\hal.dll
2014-12-14 17:23 - 2010-11-20 13:29 - 00101760 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2014-12-14 17:23 - 2010-11-20 13:29 - 00080256 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\amdsata.sys
2014-12-14 17:23 - 2010-11-20 13:29 - 00027008 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Diskdump.sys
2014-12-14 17:23 - 2010-11-20 13:29 - 00022400 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\amdxata.sys
2014-12-14 17:23 - 2010-11-20 13:24 - 01288488 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2014-12-14 17:23 - 2010-11-20 13:24 - 00690680 _____ (Microsoft Corporation) C:\Windows\system32\ci.dll
2014-12-14 17:23 - 2010-11-20 13:24 - 00508904 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
2014-12-14 17:23 - 2010-11-20 13:24 - 00442720 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe
2014-12-14 17:23 - 2010-11-20 13:24 - 00271664 _____ (Microsoft Corporation) C:\Windows\system32\fveapi.dll
2014-12-14 17:23 - 2010-11-20 13:24 - 00194800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fvevol.sys
2014-12-14 17:23 - 2010-11-20 13:23 - 00144768 _____ (Microsoft Corporation) C:\Windows\system32\basecsp.dll
2014-12-14 17:23 - 2010-11-20 13:21 - 02983424 _____ (Microsoft Corporation) C:\Windows\system32\UIRibbon.dll
2014-12-14 17:23 - 2010-11-20 13:21 - 02755072 _____ (Microsoft Corporation) C:\Windows\system32\themeui.dll
2014-12-14 17:23 - 2010-11-20 13:21 - 02311168 _____ (Microsoft Corporation) C:\Windows\system32\wpdshext.dll
2014-12-14 17:23 - 2010-11-20 13:21 - 02146304 _____ (Microsoft Corporation) C:\Windows\system32\SyncCenter.dll
2014-12-14 17:23 - 2010-11-20 13:21 - 01712640 _____ (Microsoft Corporation) C:\Windows\system32\xpsservices.dll
2014-12-14 17:23 - 2010-11-20 13:21 - 01667584 _____ (Microsoft Corporation) C:\Windows\system32\setupapi.dll
2014-12-14 17:23 - 2010-11-20 13:21 - 01624064 _____ (Microsoft Corporation) C:\Windows\system32\WMPEncEn.dll
2014-12-14 17:23 - 2010-11-20 13:21 - 01619456 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
2014-12-14 17:23 - 2010-11-20 13:21 - 01363456 _____ (Microsoft Corporation) C:\Windows\system32\Query.dll
2014-12-14 17:23 - 2010-11-20 13:21 - 01229824 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-12-14 17:23 - 2010-11-20 13:21 - 01175040 _____ (Microsoft Corporation) C:\Windows\system32\WsmSvc.dll
2014-12-14 17:23 - 2010-11-20 13:21 - 01128448 _____ (Microsoft Corporation) C:\Windows\system32\vssapi.dll
2014-12-14 17:23 - 2010-11-20 13:21 - 01115136 _____ (Microsoft Corporation) C:\Windows\system32\RacEngn.dll
2014-12-14 17:23 - 2010-11-20 13:21 - 01086976 _____ (Microsoft Corporation) C:\Windows\system32\wevtsvc.dll
2014-12-14 17:23 - 2010-11-20 13:21 - 01063936 _____ (Microsoft Corporation) C:\Windows\system32\werconcpl.dll
2014-12-14 17:23 - 2010-11-20 13:21 - 01010688 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2014-12-14 17:23 - 2010-11-20 13:21 - 00980992 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-12-14 17:23 - 2010-11-20 13:21 - 00974336 _____ (Microsoft Corporation) C:\Windows\system32\sppobjs.dll
2014-12-14 17:23 - 2010-11-20 13:21 - 00907776 _____ (Microsoft Corporation) C:\Windows\system32\sdengin2.dll
2014-12-14 17:23 - 2010-11-20 13:21 - 00850432 _____ (Microsoft Corporation) C:\Windows\system32\sbe.dll
2014-12-14 17:23 - 2010-11-20 13:21 - 00826368 _____ (Microsoft Corporation) C:\Windows\system32\rdpcore.dll
2014-12-14 17:23 - 2010-11-20 13:21 - 00811520 _____ (Microsoft Corporation) C:\Windows\system32\user32.dll
2014-12-14 17:23 - 2010-11-20 13:21 - 00782336 _____ (Microsoft Corporation) C:\Windows\system32\webservices.dll
2014-12-14 17:23 - 2010-11-20 13:21 - 00778240 _____ (Microsoft Corporation) C:\Windows\system32\sqlsrv32.dll
2014-12-14 17:23 - 2010-11-20 13:21 - 00653312 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2014-12-14 17:23 - 2010-11-20 13:21 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\SearchFolder.dll
2014-12-14 17:23 - 2010-11-20 13:21 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll
2014-12-14 17:23 - 2010-11-20 13:21 - 00597504 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll
2014-12-14 17:23 - 2010-11-20 13:21 - 00551424 _____ (Microsoft Corporation) C:\Windows\system32\samsrv.dll
2014-12-14 17:23 - 2010-11-20 13:21 - 00521216 _____ (Microsoft Corporation) C:\Windows\system32\termsrv.dll
2014-12-14 17:23 - 2010-11-20 13:21 - 00505856 _____ (Microsoft Corporation) C:\Windows\system32\taskschd.dll
2014-12-14 17:23 - 2010-11-20 13:21 - 00492032 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll
2014-12-14 17:23 - 2010-11-20 13:21 - 00464896 _____ (Microsoft Corporation) C:\Windows\system32\scrptadm.dll
2014-12-14 17:23 - 2010-11-20 13:21 - 00463360 _____ (Microsoft Corporation) C:\Windows\system32\wiaservc.dll
2014-12-14 17:23 - 2010-11-20 13:21 - 00458752 _____ (Microsoft Corporation) C:\Windows\system32\WSDApi.dll
2014-12-14 17:23 - 2010-11-20 13:21 - 00412160 _____ (Microsoft Corporation) C:\Windows\system32\sppwinob.dll
2014-12-14 17:23 - 2010-11-20 13:21 - 00411648 _____ (Microsoft Corporation) C:\Windows\system32\wlangpui.dll
2014-12-14 17:23 - 2010-11-20 13:21 - 00381440 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll
2014-12-14 17:23 - 2010-11-20 13:21 - 00380416 _____ (Microsoft Corporation) C:\Windows\system32\sxs.dll
2014-12-14 17:23 - 2010-11-20 13:21 - 00376832 _____ (Microsoft Corporation) C:\Windows\system32\rpcss.dll
2014-12-14 17:23 - 2010-11-20 13:21 - 00352256 _____ (Microsoft Corporation) C:\Windows\system32\wmpeffects.dll
2014-12-14 17:23 - 2010-11-20 13:21 - 00351232 _____ (Microsoft Corporation) C:\Windows\system32\wmicmiplugin.dll
2014-12-14 17:23 - 2010-11-20 13:21 - 00351232 _____ (Microsoft Corporation) C:\Windows\system32\winhttp.dll
2014-12-14 17:23 - 2010-11-20 13:21 - 00350208 _____ (Microsoft Corporation) C:\Windows\system32\shlwapi.dll
2014-12-14 17:23 - 2010-11-20 13:21 - 00335872 _____ (Microsoft Corporation) C:\Windows\system32\WinSATAPI.dll
2014-12-14 17:23 - 2010-11-20 13:21 - 00328192 _____ (Microsoft Corporation) C:\Windows\system32\shsvcs.dll
2014-12-14 17:23 - 2010-11-20 13:21 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\webio.dll
2014-12-14 17:23 - 2010-11-20 13:21 - 00305152 _____ (Microsoft Corporation) C:\Windows\system32\taskcomp.dll
2014-12-14 17:23 - 2010-11-20 13:21 - 00293376 _____ (Microsoft Corporation) C:\Windows\system32\umpnpmgr.dll
2014-12-14 17:23 - 2010-11-20 13:21 - 00286208 _____ (Microsoft Corporation) C:\Windows\system32\rasmans.dll
2014-12-14 17:23 - 2010-11-20 13:21 - 00283648 _____ (Microsoft Corporation) C:\Windows\system32\XpsGdiConverter.dll
2014-12-14 17:23 - 2010-11-20 13:21 - 00270848 _____ (Microsoft Corporation) C:\Windows\system32\tsmf.dll
2014-12-14 17:23 - 2010-11-20 13:21 - 00269824 _____ (Microsoft Corporation) C:\Windows\system32\Wldap32.dll
2014-12-14 17:23 - 2010-11-20 13:21 - 00246272 _____ (Microsoft Corporation) C:\Windows\system32\scansetting.dll
2014-12-14 17:23 - 2010-11-20 13:21 - 00242176 _____ (Microsoft Corporation) C:\Windows\system32\vpnike.dll
2014-12-14 17:23 - 2010-11-20 13:21 - 00228352 _____ (Microsoft Corporation) C:\Windows\system32\stobject.dll
2014-12-14 17:23 - 2010-11-20 13:21 - 00224256 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2014-12-14 17:23 - 2010-11-20 13:21 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\ws2_32.dll
2014-12-14 17:23 - 2010-11-20 13:21 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\upnp.dll
2014-12-14 17:23 - 2010-11-20 13:21 - 00204800 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll
2014-12-14 17:23 - 2010-11-20 13:21 - 00196096 _____ (Microsoft Corporation) C:\Windows\system32\vaultsvc.dll
2014-12-14 17:23 - 2010-11-20 13:21 - 00194048 _____ (Microsoft Corporation) C:\Windows\system32\winmm.dll
2014-12-14 17:23 - 2010-11-20 13:21 - 00172544 _____ (Microsoft Corporation) C:\Windows\system32\spp.dll
2014-12-14 17:23 - 2010-11-20 13:21 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2014-12-14 17:23 - 2010-11-20 13:21 - 00171008 _____ (Microsoft Corporation) C:\Windows\system32\umrdp.dll
2014-12-14 17:23 - 2010-11-20 13:21 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\srvsvc.dll
2014-12-14 17:23 - 2010-11-20 13:21 - 00156672 _____ (Microsoft Corporation) C:\Windows\system32\winsta.dll
2014-12-14 17:23 - 2010-11-20 13:21 - 00154624 _____ (Microsoft Corporation) C:\Windows\system32\tscfgwmi.dll
2014-12-14 17:23 - 2010-11-20 13:21 - 00140800 _____ (Microsoft Corporation) C:\Windows\system32\rdpendp.dll
2014-12-14 17:23 - 2010-11-20 13:21 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll
2014-12-14 17:23 - 2010-11-20 13:21 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\scavengeui.dll
2014-12-14 17:23 - 2010-11-20 13:21 - 00134656 _____ (Microsoft Corporation) C:\Windows\system32\WinSCard.dll
2014-12-14 17:23 - 2010-11-20 13:21 - 00133632 _____ (Microsoft Corporation) C:\Windows\system32\tspubwmi.dll
2014-12-14 17:23 - 2010-11-20 13:21 - 00113664 _____ (Microsoft Corporation) C:\Windows\system32\SessEnv.dll
2014-12-14 17:23 - 2010-11-20 13:21 - 00109056 _____ (Microsoft Corporation) C:\Windows\system32\t2embed.dll
2014-12-14 17:23 - 2010-11-20 13:21 - 00082944 _____ (Microsoft Corporation) C:\Windows\system32\thumbcache.dll
2014-12-14 17:23 - 2010-11-20 13:21 - 00081920 _____ (Microsoft Corporation) C:\Windows\system32\userenv.dll
2014-12-14 17:23 - 2010-11-20 13:21 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\TabSvc.dll
2014-12-14 17:23 - 2010-11-20 13:21 - 00072192 _____ (Microsoft Corporation) C:\Windows\system32\regapi.dll
2014-12-14 17:23 - 2010-11-20 13:21 - 00067584 _____ (Microsoft Corporation) C:\Windows\system32\WUDFSvc.dll
2014-12-14 17:23 - 2010-11-20 13:21 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\wscapi.dll
2014-12-14 17:23 - 2010-11-20 13:21 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\samcli.dll
2014-12-14 17:23 - 2010-11-20 13:21 - 00033280 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbGDCoInstaller.dll
2014-12-14 17:23 - 2010-11-20 13:20 - 02504192 _____ (Microsoft Corporation) C:\Windows\system32\WMVCORE.DLL
2014-12-14 17:23 - 2010-11-20 13:20 - 02494464 _____ (Microsoft Corporation) C:\Windows\system32\netshell.dll
2014-12-14 17:23 - 2010-11-20 13:20 - 01750528 _____ (Microsoft Corporation) C:\Windows\system32\pnidui.dll
2014-12-14 17:23 - 2010-11-20 13:20 - 01508864 _____ (Microsoft Corporation) C:\Windows\system32\pla.dll
2014-12-14 17:23 - 2010-11-20 13:20 - 01414144 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll
2014-12-14 17:23 - 2010-11-20 13:20 - 01328128 _____ (Microsoft Corporation) C:\Windows\system32\quartz.dll
2014-12-14 17:23 - 2010-11-20 13:20 - 00988160 _____ (Microsoft Corporation) C:\Windows\system32\propsys.dll
2014-12-14 17:23 - 2010-11-20 13:20 - 00932352 _____ (Microsoft Corporation) C:\Windows\system32\printui.dll
2014-12-14 17:23 - 2010-11-20 13:20 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\NaturalLanguage6.dll
2014-12-14 17:23 - 2010-11-20 13:20 - 00641536 _____ (Microsoft Corporation) C:\Windows\system32\CPFilters.dll
2014-12-14 17:23 - 2010-11-20 13:20 - 00585728 _____ (Microsoft Corporation) C:\Windows\system32\qmgr.dll
2014-12-14 17:23 - 2010-11-20 13:20 - 00573440 _____ (Microsoft Corporation) C:\Windows\system32\odbc32.dll
2014-12-14 17:23 - 2010-11-20 13:20 - 00563712 _____ (Microsoft Corporation) C:\Windows\system32\netlogon.dll
2014-12-14 17:23 - 2010-11-20 13:20 - 00547840 _____ (Microsoft Corporation) C:\Windows\system32\PortableDeviceApi.dll
2014-12-14 17:23 - 2010-11-20 13:20 - 00534528 _____ (Microsoft Corporation) C:\Windows\system32\EncDec.dll
2014-12-14 17:23 - 2010-11-20 13:20 - 00442880 _____ (Microsoft Corporation) C:\Windows\system32\ntshrui.dll
2014-12-14 17:23 - 2010-11-20 13:20 - 00406528 _____ (Microsoft Corporation) C:\Windows\system32\netcfgx.dll
2014-12-14 17:23 - 2010-11-20 13:20 - 00330240 _____ (Microsoft Corporation) C:\Windows\system32\QAGENTRT.DLL
2014-12-14 17:23 - 2010-11-20 13:20 - 00242688 _____ (Microsoft Corporation) C:\Windows\system32\nlasvc.dll
2014-12-14 17:23 - 2010-11-20 13:20 - 00225792 _____ (Microsoft Corporation) C:\Windows\system32\netdiagfx.dll
2014-12-14 17:23 - 2010-11-20 13:20 - 00199168 _____ (Microsoft Corporation) C:\Windows\system32\onex.dll
2014-12-14 17:23 - 2010-11-20 13:20 - 00167936 _____ (Microsoft Corporation) C:\Windows\system32\QSHVHOST.DLL
2014-12-14 17:23 - 2010-11-20 13:20 - 00166400 _____ (Microsoft Corporation) C:\Windows\system32\netiohlp.dll
2014-12-14 17:23 - 2010-11-20 13:20 - 00164352 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll
2014-12-14 17:23 - 2010-11-20 13:20 - 00152064 _____ (Microsoft Corporation) C:\Windows\system32\ncsi.dll
2014-12-14 17:23 - 2010-11-20 13:20 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\prncache.dll
2014-12-14 17:23 - 2010-11-20 13:19 - 02576384 _____ (Microsoft Corporation) C:\Windows\system32\gameux.dll
2014-12-14 17:23 - 2010-11-20 13:19 - 02341376 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2014-12-14 17:23 - 2010-11-20 13:19 - 02291712 _____ (Microsoft Corporation) C:\Windows\system32\MSVidCtl.dll
2014-12-14 17:23 - 2010-11-20 13:19 - 02151936 _____ (Microsoft Corporation) C:\Windows\system32\mmcndmgr.dll
2014-12-14 17:23 - 2010-11-20 13:19 - 01493504 _____ (Microsoft Corporation) C:\Windows\system32\ExplorerFrame.dll
2014-12-14 17:23 - 2010-11-20 13:19 - 01390080 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
2014-12-14 17:23 - 2010-11-20 13:19 - 01236992 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2014-12-14 17:23 - 2010-11-20 13:19 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\mfc42u.dll
2014-12-14 17:23 - 2010-11-20 13:19 - 01038848 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-12-14 17:23 - 2010-11-20 13:19 - 00857600 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2014-12-14 17:23 - 2010-11-20 13:19 - 00830464 _____ (Microsoft Corporation) C:\Windows\system32\MSMPEG2ENC.DLL
2014-12-14 17:23 - 2010-11-20 13:19 - 00804864 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2014-12-14 17:23 - 2010-11-20 13:19 - 00768512 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll
2014-12-14 17:23 - 2010-11-20 13:19 - 00741376 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll
2014-12-14 17:23 - 2010-11-20 13:19 - 00732160 _____ (Microsoft Corporation) C:\Windows\system32\imapi2fs.dll
2014-12-14 17:23 - 2010-11-20 13:19 - 00727040 _____ (Microsoft Corporation) C:\Windows\system32\mcmde.dll
2014-12-14 17:23 - 2010-11-20 13:19 - 00716800 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2014-12-14 17:23 - 2010-11-20 13:19 - 00674304 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL
2014-12-14 17:23 - 2010-11-20 13:19 - 00666624 _____ (Microsoft Corporation) C:\Windows\system32\mssvp.dll
2014-12-14 17:23 - 2010-11-20 13:19 - 00606208 _____ (Microsoft Corporation) C:\Windows\system32\mstime.dll
2014-12-14 17:23 - 2010-11-20 13:19 - 00599552 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-12-14 17:23 - 2010-11-20 13:19 - 00593408 _____ (Microsoft Corporation) C:\Windows\system32\gpsvc.dll
2014-12-14 17:23 - 2010-11-20 13:19 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\gpprefcl.dll
2014-12-14 17:23 - 2010-11-20 13:19 - 00566272 _____ (Microsoft Corporation) C:\Windows\system32\MPSSVC.dll
2014-12-14 17:23 - 2010-11-20 13:19 - 00499712 _____ (Microsoft Corporation) C:\Windows\system32\iphlpsvc.dll
2014-12-14 17:23 - 2010-11-20 13:19 - 00488448 _____ (Microsoft Corporation) C:\Windows\system32\evr.dll
2014-12-14 17:23 - 2010-11-20 13:19 - 00400896 _____ (Microsoft Corporation) C:\Windows\system32\ipsmsnap.dll
2014-12-14 17:23 - 2010-11-20 13:19 - 00392192 _____ (Microsoft Corporation) C:\Windows\system32\imapi2.dll
2014-12-14 17:23 - 2010-11-20 13:19 - 00389120 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-12-14 17:23 - 2010-11-20 13:19 - 00350208 _____ (Microsoft Corporation) C:\Windows\system32\IPSECSVC.DLL
2014-12-14 17:23 - 2010-11-20 13:19 - 00341504 _____ (Microsoft Corporation) C:\Windows\system32\msdrm.dll
2014-12-14 17:23 - 2010-11-20 13:19 - 00304640 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2014-12-14 17:23 - 2010-11-20 13:19 - 00296448 _____ (Microsoft Corporation) C:\Windows\system32\mfds.dll
2014-12-14 17:23 - 2010-11-20 13:19 - 00288256 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2014-12-14 17:23 - 2010-11-20 13:19 - 00257024 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2014-12-14 17:23 - 2010-11-20 13:19 - 00232448 _____ (Microsoft Corporation) C:\Windows\system32\mswsock.dll
2014-12-14 17:23 - 2010-11-20 13:19 - 00213504 _____ (Microsoft Corporation) C:\Windows\system32\MMDevAPI.dll
2014-12-14 17:23 - 2010-11-20 13:19 - 00206336 _____ (Microsoft Corporation) C:\Windows\system32\framedynos.dll
2014-12-14 17:23 - 2010-11-20 13:19 - 00196608 _____ (Microsoft Corporation) C:\Windows\system32\mfreadwrite.dll
2014-12-14 17:23 - 2010-11-20 13:19 - 00186368 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2014-12-14 17:23 - 2010-11-20 13:19 - 00167936 _____ (Microsoft Corporation) C:\Windows\system32\msutb.dll
2014-12-14 17:23 - 2010-11-20 13:19 - 00155136 _____ (Microsoft Corporation) C:\Windows\system32\hgprint.dll
2014-12-14 17:23 - 2010-11-20 13:19 - 00126464 _____ (Microsoft Corporation) C:\Windows\system32\inetpp.dll
2014-12-14 17:23 - 2010-11-20 13:19 - 00124416 _____ (Microsoft Corporation) C:\Windows\system32\fde.dll
2014-12-14 17:23 - 2010-11-20 13:19 - 00103936 _____ (Microsoft Corporation) C:\Windows\system32\IPHLPAPI.DLL
2014-12-14 17:23 - 2010-11-20 13:19 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\hbaapi.dll
2014-12-14 17:23 - 2010-11-20 13:19 - 00042496 _____ (Microsoft Corporation) C:\Windows\system32\mimefilt.dll
2014-12-14 17:23 - 2010-11-20 13:19 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\msasn1.dll
2014-12-14 17:23 - 2010-11-20 13:18 - 02522624 _____ (Microsoft Corporation) C:\Windows\system32\dbgeng.dll
2014-12-14 17:23 - 2010-11-20 13:18 - 01828352 _____ (Microsoft Corporation) C:\Windows\system32\d3d9.dll
2014-12-14 17:23 - 2010-11-20 13:18 - 01792000 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2014-12-14 17:23 - 2010-11-20 13:18 - 01555456 _____ (Microsoft Corporation) C:\Windows\system32\certmgr.dll
2014-12-14 17:23 - 2010-11-20 13:18 - 01371136 _____ (Microsoft Corporation) C:\Windows\system32\dwmcore.dll
2014-12-14 17:23 - 2010-11-20 13:18 - 01154048 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2014-12-14 17:23 - 2010-11-20 13:18 - 01076736 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2014-12-14 17:23 - 2010-11-20 13:18 - 00863744 _____ (Microsoft Corporation) C:\Windows\system32\diagperf.dll
2014-12-14 17:23 - 2010-11-20 13:18 - 00854016 _____ (Microsoft Corporation) C:\Windows\system32\dbghelp.dll
2014-12-14 17:23 - 2010-11-20 13:18 - 00762880 _____ (Microsoft Corporation) C:\Windows\system32\azroles.dll
2014-12-14 17:23 - 2010-11-20 13:18 - 00640512 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2014-12-14 17:23 - 2010-11-20 13:18 - 00630784 _____ (Microsoft Corporation) C:\Windows\system32\DXPTaskRingtone.dll
2014-12-14 17:23 - 2010-11-20 13:18 - 00546304 _____ (Microsoft Corporation) C:\Windows\system32\cscsvc.dll
2014-12-14 17:23 - 2010-11-20 13:18 - 00530432 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll
2014-12-14 17:23 - 2010-11-20 13:18 - 00522752 _____ (Microsoft Corporation) C:\Windows\system32\d3d11.dll
2014-12-14 17:23 - 2010-11-20 13:18 - 00508416 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll
2014-12-14 17:23 - 2010-11-20 13:18 - 00494592 _____ (Microsoft Corporation) C:\Windows\system32\BFE.DLL
2014-12-14 17:23 - 2010-11-20 13:18 - 00485888 _____ (Microsoft Corporation) C:\Windows\system32\comdlg32.dll
2014-12-14 17:23 - 2010-11-20 13:18 - 00473600 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2014-12-14 17:23 - 2010-11-20 13:18 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
2014-12-14 17:23 - 2010-11-20 13:18 - 00339968 _____ (Microsoft Corporation) C:\Windows\system32\appmgr.dll
2014-12-14 17:23 - 2010-11-20 13:18 - 00323072 _____ (Microsoft Corporation) C:\Windows\system32\drvstore.dll
2014-12-14 17:23 - 2010-11-20 13:18 - 00321536 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-12-14 17:23 - 2010-11-20 13:18 - 00295936 _____ (Microsoft Corporation) C:\Windows\system32\apphelp.dll
2014-12-14 17:23 - 2010-11-20 13:18 - 00270336 _____ (Microsoft Corporation) C:\Windows\system32\dnsapi.dll
2014-12-14 17:23 - 2010-11-20 13:18 - 00254464 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcore.dll
2014-12-14 17:23 - 2010-11-20 13:18 - 00252928 _____ (Microsoft) C:\Windows\system32\DShowRdpFilter.dll
2014-12-14 17:23 - 2010-11-20 13:18 - 00219136 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1core.dll
2014-12-14 17:23 - 2010-11-20 13:18 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll
2014-12-14 17:23 - 2010-11-20 13:18 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\credui.dll
2014-12-14 17:23 - 2010-11-20 13:18 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\dps.dll
2014-12-14 17:23 - 2010-11-20 13:18 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\cscobj.dll
2014-12-14 17:23 - 2010-11-20 13:18 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2014-12-14 17:23 - 2010-11-20 13:18 - 00132608 _____ (Microsoft Corporation) C:\Windows\system32\dnsrslvr.dll
2014-12-14 17:23 - 2010-11-20 13:18 - 00131584 _____ (Microsoft Corporation) C:\Windows\system32\aaclient.dll
2014-12-14 17:23 - 2010-11-20 13:18 - 00097280 _____ (Microsoft Corporation) C:\Windows\system32\dwmredir.dll
2014-12-14 17:23 - 2010-11-20 13:18 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\dot3api.dll
2014-12-14 17:23 - 2010-11-20 13:18 - 00080384 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll
2014-12-14 17:23 - 2010-11-20 13:17 - 03367424 _____ (Microsoft Corporation) C:\Windows\system32\WinSAT.exe
2014-12-14 17:23 - 2010-11-20 13:17 - 02616320 _____ (Microsoft Corporation) C:\Windows\explorer.exe
2014-12-14 17:23 - 2010-11-20 13:17 - 01203200 _____ (Microsoft Corporation) C:\Windows\system32\wbengine.exe
2014-12-14 17:23 - 2010-11-20 13:17 - 01049600 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe
2014-12-14 17:23 - 2010-11-20 13:17 - 01025536 _____ (Microsoft Corporation) C:\Windows\system32\VSSVC.exe
2014-12-14 17:23 - 2010-11-20 13:17 - 00802304 _____ (Microsoft Corporation) C:\Windows\system32\WFS.exe
2014-12-14 17:23 - 2010-11-20 13:17 - 00523264 _____ (Microsoft Corporation) C:\Windows\system32\FXSSVC.exe
2014-12-14 17:23 - 2010-11-20 13:17 - 00477696 _____ (Microsoft Corporation) C:\Windows\system32\lpksetup.exe
2014-12-14 17:23 - 2010-11-20 13:17 - 00456192 _____ (Microsoft Corporation) C:\Windows\system32\spinstall.exe
2014-12-14 17:23 - 2010-11-20 13:17 - 00453632 _____ (Microsoft Corporation) C:\Windows\system32\vds.exe
2014-12-14 17:23 - 2010-11-20 13:17 - 00334336 _____ (Microsoft Corporation) C:\Windows\system32\wisptis.exe
2014-12-14 17:23 - 2010-11-20 13:17 - 00317440 _____ (Microsoft Corporation) C:\Windows\system32\spoolsv.exe
2014-12-14 17:23 - 2010-11-20 13:17 - 00303104 _____ (Microsoft Corporation) C:\Windows\system32\msinfo32.exe
2014-12-14 17:23 - 2010-11-20 13:17 - 00302592 _____ (Microsoft Corporation) C:\Windows\system32\cmd.exe
2014-12-14 17:23 - 2010-11-20 13:17 - 00286720 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe
2014-12-14 17:23 - 2010-11-20 13:17 - 00280576 _____ (Microsoft Corporation) C:\Windows\system32\spreview.exe
2014-12-14 17:23 - 2010-11-20 13:17 - 00271360 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2014-12-14 17:23 - 2010-11-20 13:17 - 00267776 _____ (Microsoft Corporation) C:\Windows\system32\lsm.exe
2014-12-14 17:23 - 2010-11-20 13:17 - 00260608 _____ (Microsoft Corporation) C:\Windows\system32\rdpshell.exe
2014-12-14 17:23 - 2010-11-20 13:17 - 00220672 _____ (Microsoft Corporation) C:\Windows\system32\mcbuilder.exe
2014-12-14 17:23 - 2010-11-20 13:17 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\taskeng.exe
2014-12-14 17:23 - 2010-11-20 13:17 - 00176128 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-12-14 17:23 - 2010-11-20 13:17 - 00173568 _____ (Microsoft Corporation) C:\Windows\system32\rdpclip.exe
2014-12-14 17:23 - 2010-11-20 13:17 - 00161280 _____ (Microsoft Corporation) C:\Windows\system32\rdpinit.exe
2014-12-14 17:23 - 2010-11-20 13:17 - 00142336 _____ (Microsoft Corporation) C:\Windows\system32\net1.exe
2014-12-14 17:23 - 2010-11-20 13:17 - 00103936 _____ (Microsoft Corporation) C:\Windows\system32\setupcl.exe
2014-12-14 17:23 - 2010-11-20 13:17 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\PushPrinterConnections.exe
2014-12-14 17:23 - 2010-11-20 13:17 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\proquota.exe
2014-12-14 17:23 - 2010-11-20 13:16 - 00776192 _____ (Microsoft Corporation) C:\Windows\system32\calc.exe
2014-12-14 17:23 - 2010-11-20 13:16 - 00679424 _____ (Microsoft Corporation) C:\Windows\system32\autoconv.exe
2014-12-14 17:23 - 2010-11-20 13:16 - 00668160 _____ (Microsoft Corporation) C:\Windows\system32\autochk.exe
2014-12-14 17:23 - 2010-11-20 13:16 - 00658944 _____ (Microsoft Corporation) C:\Windows\system32\autofmt.exe
2014-12-14 17:23 - 2010-11-20 13:16 - 00320000 _____ (Microsoft Corporation) C:\Windows\system32\winspool.drv
2014-12-14 17:23 - 2010-11-20 13:16 - 00119808 _____ (Microsoft Corporation) C:\Windows\system32\aitagent.exe
2014-12-14 17:23 - 2010-11-20 13:16 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\audiodg.exe
2014-12-14 17:23 - 2010-11-20 12:56 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll
2014-12-14 17:23 - 2010-11-20 12:54 - 00302592 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-12-14 17:23 - 2010-11-20 11:24 - 00134656 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll
2014-12-14 17:23 - 2010-11-20 11:24 - 00133632 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpdr.sys
2014-12-14 17:23 - 2010-11-20 11:22 - 00213504 _____ (Microsoft Corporation) C:\Windows\system32\rdpdd.dll
2014-12-14 17:23 - 2010-11-20 11:22 - 00183808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpwd.sys
2014-12-14 17:23 - 2010-11-20 11:21 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpvideominiport.sys
2014-12-14 17:23 - 2010-11-20 11:01 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\1394ohci.sys
2014-12-14 17:23 - 2010-11-20 11:00 - 00284672 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2014-12-14 17:23 - 2010-11-20 10:14 - 00215552 _____ (Microsoft Corporation) C:\Windows\system32\vmicsvc.exe
2014-12-14 17:23 - 2010-11-20 10:09 - 02329088 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-12-14 17:23 - 2010-11-20 09:45 - 00311296 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv.sys
2014-12-14 17:23 - 2010-11-20 09:44 - 00388096 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\csc.sys
2014-12-14 17:23 - 2010-11-20 09:44 - 00309248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys
2014-12-14 17:23 - 2010-11-20 09:44 - 00242688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdbss.sys
2014-12-14 17:23 - 2010-11-20 09:44 - 00223232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2014-12-14 17:23 - 2010-11-20 09:44 - 00096768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2014-12-14 17:23 - 2010-11-20 09:42 - 00246784 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\udfs.sys
2014-12-14 17:23 - 2010-11-20 09:42 - 00123904 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2014-12-14 17:23 - 2010-11-20 09:42 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys
2014-12-14 17:23 - 2010-11-20 09:40 - 00513536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\http.sys
2014-12-14 17:23 - 2010-11-20 04:52 - 00419880 _____ () C:\Windows\system32\locale.nls
2014-12-14 17:23 - 2010-11-05 03:20 - 00146852 _____ () C:\Windows\system32\systemsf.ebd
2014-12-14 17:23 - 2010-11-05 02:58 - 00049488 _____ (Microsoft Corporation) C:\Windows\system32\netfxperf.dll
2014-12-14 17:22 - 2010-11-20 13:36 - 00107008 _____ (Microsoft Corporation) C:\Windows\system32\NAPHLPR.DLL
2014-12-14 17:22 - 2010-11-20 13:36 - 00046080 _____ (Microsoft Corporation) C:\Windows\system32\NAPCRYPT.DLL
2014-12-14 17:22 - 2010-11-20 13:30 - 00173440 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdyboost.sys
2014-12-14 17:22 - 2010-11-20 13:30 - 00140160 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\scsiport.sys
2014-12-14 17:22 - 2010-11-20 13:30 - 00130432 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mpio.sys
2014-12-14 17:22 - 2010-11-20 13:30 - 00078208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mountmgr.sys
2014-12-14 17:22 - 2010-11-20 13:30 - 00067456 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2014-12-14 17:22 - 2010-11-20 13:30 - 00056192 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\partmgr.sys
2014-12-14 17:22 - 2010-11-20 13:30 - 00053120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\volmgr.sys
2014-12-14 17:22 - 2010-11-20 13:30 - 00040704 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\vmstorfl.sys
2014-12-14 17:22 - 2010-11-20 13:30 - 00028032 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storvsc.sys
2014-12-14 17:22 - 2010-11-20 13:29 - 00332160 _____ (Intel Corporation) C:\Windows\system32\Drivers\iaStorV.sys
2014-12-14 17:22 - 2010-11-20 13:29 - 00187776 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
2014-12-14 17:22 - 2010-11-20 13:29 - 00137088 _____ (Microsoft Corporation) C:\Windows\system32\halacpi.dll
2014-12-14 17:22 - 2010-11-20 13:29 - 00132992 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ataport.sys
2014-12-14 17:22 - 2010-11-20 13:29 - 00043392 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\winhv.sys
2014-12-14 17:22 - 2010-11-20 13:21 - 02202624 _____ (Microsoft Corporation) C:\Windows\system32\SensorsCpl.dll
2014-12-14 17:22 - 2010-11-20 13:21 - 02157568 _____ (Microsoft Corporation) C:\Windows\system32\themecpl.dll
2014-12-14 17:22 - 2010-11-20 13:21 - 01326592 _____ (Microsoft Corporation) C:\Windows\system32\wlanpref.dll
2014-12-14 17:22 - 2010-11-20 13:21 - 01227776 _____ (Microsoft Corporation) C:\Windows\system32\wdc.dll
2014-12-14 17:22 - 2010-11-20 13:21 - 01003008 _____ (Microsoft Corporation) C:\Windows\system32\WMNetMgr.dll
2014-12-14 17:22 - 2010-11-20 13:21 - 00933376 _____ (Microsoft Corporation) C:\Windows\system32\Vault.dll
2014-12-14 17:22 - 2010-11-20 13:21 - 00902656 _____ (Microsoft Corporation) C:\Windows\system32\WMADMOD.DLL
2014-12-14 17:22 - 2010-11-20 13:21 - 00766464 _____ (Microsoft Corporation) C:\Windows\system32\wpccpl.dll
2014-12-14 17:22 - 2010-11-20 13:21 - 00755200 _____ (Microsoft Corporation) C:\Windows\system32\sud.dll
2014-12-14 17:22 - 2010-11-20 13:21 - 00750080 _____ (Microsoft Corporation) C:\Windows\system32\sdcpl.dll
2014-12-14 17:22 - 2010-11-20 13:21 - 00739328 _____ (Microsoft Corporation) C:\Windows\system32\WMSPDMOD.DLL
2014-12-14 17:22 - 2010-11-20 13:21 - 00738816 _____ (Microsoft Corporation) C:\Windows\system32\wmpmde.dll
2014-12-14 17:22 - 2010-11-20 13:21 - 00697344 _____ (Microsoft Corporation) C:\Windows\system32\SmiEngine.dll
2014-12-14 17:22 - 2010-11-20 13:21 - 00638976 _____ (Microsoft Corporation) C:\Windows\system32\VAN.dll
2014-12-14 17:22 - 2010-11-20 13:21 - 00616960 _____ (Microsoft Corporation) C:\Windows\system32\wmdrmsdk.dll
2014-12-14 17:22 - 2010-11-20 13:21 - 00600064 _____ (Microsoft Corporation) C:\Windows\system32\usercpl.dll
2014-12-14 17:22 - 2010-11-20 13:21 - 00577024 _____ (Microsoft Corporation) C:\Windows\system32\wpd_ci.dll
2014-12-14 17:22 - 2010-11-20 13:21 - 00567808 _____ (Microsoft Corporation) C:\Windows\system32\WUDFx.dll
2014-12-14 17:22 - 2010-11-20 13:21 - 00541184 _____ (Microsoft Corporation) C:\Windows\system32\WMVSDECD.DLL
2014-12-14 17:22 - 2010-11-20 13:21 - 00507392 _____ (Microsoft Corporation) C:\Windows\system32\wmdrmdev.dll
2014-12-14 17:22 - 2010-11-20 13:21 - 00473600 _____ (Microsoft Corporation) C:\Windows\system32\riched20.dll
2014-12-14 17:22 - 2010-11-20 13:21 - 00444928 _____ (Microsoft Corporation) C:\Windows\system32\wvc.dll
2014-12-14 17:22 - 2010-11-20 13:21 - 00436736 _____ (Microsoft Corporation) C:\Windows\system32\wmdrmnet.dll
2014-12-14 17:22 - 2010-11-20 13:21 - 00428544 _____ (Microsoft Corporation) C:\Windows\system32\shwebsvc.dll
2014-12-14 17:22 - 2010-11-20 13:21 - 00428032 _____ (Microsoft Corporation) C:\Windows\system32\wlanmsm.dll
2014-12-14 17:22 - 2010-11-20 13:21 - 00427520 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-12-14 17:22 - 2010-11-20 13:21 - 00416768 _____ (Microsoft Corporation) C:\Windows\system32\wiadefui.dll
2014-12-14 17:22 - 2010-11-20 13:21 - 00410624 _____ (Microsoft Corporation) C:\Windows\system32\systemcpl.dll
2014-12-14 17:22 - 2010-11-20 13:21 - 00410112 _____ (Microsoft Corporation) C:\Windows\system32\wlanui.dll
2014-12-14 17:22 - 2010-11-20 13:21 - 00406528 _____ (Microsoft Corporation) C:\Windows\system32\wimgapi.dll
2014-12-14 17:22 - 2010-11-20 13:21 - 00400896 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2014-12-14 17:22 - 2010-11-20 13:21 - 00372224 _____ (Microsoft Corporation) C:\Windows\system32\rastls.dll
2014-12-14 17:22 - 2010-11-20 13:21 - 00363520 _____ (Microsoft Corporation) C:\Windows\system32\StructuredQuery.dll
2014-12-14 17:22 - 2010-11-20 13:21 - 00352768 _____ (Microsoft Corporation) C:\Windows\system32\termmgr.dll
2014-12-14 17:22 - 2010-11-20 13:21 - 00352768 _____ (Microsoft Corporation) C:\Windows\system32\spwizeng.dll
2014-12-14 17:22 - 2010-11-20 13:21 - 00350720 _____ (Microsoft Corporation) C:\Windows\system32\WPDSp.dll
2014-12-14 17:22 - 2010-11-20 13:21 - 00346624 _____ (Microsoft Corporation) C:\Windows\system32\untfs.dll
2014-12-14 17:22 - 2010-11-20 13:21 - 00327680 _____ (Microsoft Corporation) C:\Windows\system32\zipfldr.dll
2014-12-14 17:22 - 2010-11-20 13:21 - 00318976 _____ (Microsoft Corporation) C:\Windows\system32\raschap.dll
2014-12-14 17:22 - 2010-11-20 13:21 - 00318464 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2014-12-14 17:22 - 2010-11-20 13:21 - 00316416 _____ (Microsoft Corporation) C:\Windows\system32\sharemediacpl.dll
2014-12-14 17:22 - 2010-11-20 13:21 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\sqlcese30.dll
2014-12-14 17:22 - 2010-11-20 13:21 - 00307712 _____ (Microsoft Corporation) C:\Windows\system32\scesrv.dll
2014-12-14 17:22 - 2010-11-20 13:21 - 00301568 _____ (Microsoft Corporation) C:\Windows\system32\srchadmin.dll
2014-12-14 17:22 - 2010-11-20 13:21 - 00299520 _____ (Microsoft Corporation) C:\Windows\system32\wmpdxm.dll
2014-12-14 17:22 - 2010-11-20 13:21 - 00276992 _____ (Microsoft Corporation) C:\Windows\system32\wcncsvc.dll
2014-12-14 17:22 - 2010-11-20 13:21 - 00257024 _____ (Microsoft Corporation) C:\Windows\system32\srrstr.dll
2014-12-14 17:22 - 2010-11-20 13:21 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\ReAgent.dll
2014-12-14 17:22 - 2010-11-20 13:21 - 00242176 _____ (Microsoft Corporation) C:\Windows\system32\tapisrv.dll
2014-12-14 17:22 - 2010-11-20 13:21 - 00233472 _____ (Microsoft Corporation) C:\Windows\system32\taskbarcpl.dll
2014-12-14 17:22 - 2010-11-20 13:21 - 00229376 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2014-12-14 17:22 - 2010-11-20 13:21 - 00222208 _____ (Microsoft Corporation) C:\Windows\system32\wavemsp.dll
2014-12-14 17:22 - 2010-11-20 13:21 - 00220160 _____ (Microsoft Corporation) C:\Windows\system32\SndVolSSO.dll
2014-12-14 17:22 - 2010-11-20 13:21 - 00202240 _____ (Microsoft Corporation) C:\Windows\system32\unattend.dll
2014-12-14 17:22 - 2010-11-20 13:21 - 00198144 _____ (Microsoft Corporation) C:\Windows\system32\wpdwcn.dll
2014-12-14 17:22 - 2010-11-20 13:21 - 00198144 _____ (Microsoft Corporation) C:\Windows\system32\sysclass.dll
2014-12-14 17:22 - 2010-11-20 13:21 - 00196608 _____ (Microsoft Corporation) C:\Windows\system32\wwanconn.dll
2014-12-14 17:22 - 2010-11-20 13:21 - 00193536 _____ (Microsoft Corporation) C:\Windows\system32\sppcomapi.dll
2014-12-14 17:22 - 2010-11-20 13:21 - 00189952 _____ (Microsoft Corporation) C:\Windows\system32\sqmapi.dll
2014-12-14 17:22 - 2010-11-20 13:21 - 00186368 _____ (Microsoft Corporation) C:\Windows\system32\rdpencom.dll
2014-12-14 17:22 - 2010-11-20 13:21 - 00182272 _____ (Microsoft Corporation) C:\Windows\system32\wmpsrcwp.dll
2014-12-14 17:22 - 2010-11-20 13:21 - 00181760 _____ (Microsoft Corporation) C:\Windows\system32\tcpipcfg.dll
2014-12-14 17:22 - 2010-11-20 13:21 - 00179712 _____ (Microsoft Corporation) C:\Windows\system32\shdocvw.dll
2014-12-14 17:22 - 2010-11-20 13:21 - 00176640 _____ (Microsoft Corporation) C:\Windows\system32\rasppp.dll
2014-12-14 17:22 - 2010-11-20 13:21 - 00175616 _____ (Microsoft Corporation) C:\Windows\system32\scecli.dll
2014-12-14 17:22 - 2010-11-20 13:21 - 00169472 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2014-12-14 17:22 - 2010-11-20 13:21 - 00162304 _____ (Microsoft Corporation) C:\Windows\system32\WUDFPlatform.dll
2014-12-14 17:22 - 2010-11-20 13:21 - 00160256 _____ (Microsoft Corporation) C:\Windows\system32\vdsbas.dll
2014-12-14 17:22 - 2010-11-20 13:21 - 00159232 _____ (Microsoft Corporation) C:\Windows\system32\syncui.dll
2014-12-14 17:22 - 2010-11-20 13:21 - 00152064 _____ (Microsoft Corporation) C:\Windows\system32\SmartcardCredentialProvider.dll
2014-12-14 17:22 - 2010-11-20 13:21 - 00151040 _____ (Microsoft Corporation) C:\Windows\system32\vdsutil.dll
2014-12-14 17:22 - 2010-11-20 13:21 - 00146944 _____ (Microsoft Corporation) C:\Windows\system32\remotepg.dll
2014-12-14 17:22 - 2010-11-20 13:21 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\twext.dll
2014-12-14 17:22 - 2010-11-20 13:21 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\wmpps.dll
2014-12-14 17:22 - 2010-11-20 13:21 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\recovery.dll
2014-12-14 17:22 - 2010-11-20 13:21 - 00135168 _____ (Microsoft Corporation) C:\Windows\system32\XpsRasterService.dll
2014-12-14 17:22 - 2010-11-20 13:21 - 00129536 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorekmts.dll
2014-12-14 17:22 - 2010-11-20 13:21 - 00125952 _____ (Microsoft Corporation) C:\Windows\system32\sdrsvc.dll
2014-12-14 17:22 - 2010-11-20 13:21 - 00119808 _____ (Microsoft Corporation) C:\Windows\system32\umpo.dll
2014-12-14 17:22 - 2010-11-20 13:21 - 00118784 _____ (Microsoft Corporation) C:\Windows\system32\uxlib.dll
2014-12-14 17:22 - 2010-11-20 13:21 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\sppnp.dll
2014-12-14 17:22 - 2010-11-20 13:21 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\setupcln.dll
2014-12-14 17:22 - 2010-11-20 13:21 - 00111104 _____ (Microsoft Corporation) C:\Windows\system32\shsetup.dll
2014-12-14 17:22 - 2010-11-20 13:21 - 00109568 _____ (Microsoft Corporation) C:\Windows\system32\wiavideo.dll
2014-12-14 17:22 - 2010-11-20 13:21 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\shacct.dll
2014-12-14 17:22 - 2010-11-20 13:21 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\WPDShServiceObj.dll
2014-12-14 17:22 - 2010-11-20 13:21 - 00105472 _____ (Microsoft Corporation) C:\Windows\system32\wmpshell.dll
2014-12-14 17:22 - 2010-11-20 13:21 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\sppinst.dll
2014-12-14 17:22 - 2010-11-20 13:21 - 00100352 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2014-12-14 17:22 - 2010-11-20 13:21 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\srvcli.dll
2014-12-14 17:22 - 2010-11-20 13:21 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\wpdbusenum.dll
2014-12-14 17:22 - 2010-11-20 13:21 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp_isv.dll
2014-12-14 17:22 - 2010-11-20 13:21 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp.dll
2014-12-14 17:22 - 2010-11-20 13:21 - 00084480 _____ (Microsoft Corporation) C:\Windows\system32\wkssvc.dll
2014-12-14 17:22 - 2010-11-20 13:21 - 00080896 _____ (Microsoft Corporation) C:\Windows\system32\QUTIL.DLL
2014-12-14 17:22 - 2010-11-20 13:21 - 00078848 _____ (Microsoft Corporation) C:\Windows\system32\UserAccountControlSettings.dll
2014-12-14 17:22 - 2010-11-20 13:21 - 00071168 _____ (Microsoft Corporation) C:\Windows\system32\resutils.dll
2014-12-14 17:22 - 2010-11-20 13:21 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\tlscsp.dll
2014-12-14 17:22 - 2010-11-20 13:21 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\rastapi.dll
2014-12-14 17:22 - 2010-11-20 13:21 - 00065024 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2014-12-14 17:22 - 2010-11-20 13:21 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\spbcd.dll
2014-12-14 17:22 - 2010-11-20 13:21 - 00059392 _____ (Microsoft Corporation) C:\Windows\system32\unimdmat.dll
2014-12-14 17:22 - 2010-11-20 13:21 - 00058880 _____ (Microsoft Corporation) C:\Windows\system32\rdpwsx.dll
2014-12-14 17:22 - 2010-11-20 13:21 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\vfwwdm32.dll
2014-12-14 17:22 - 2010-11-20 13:21 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\sppuinotify.dll
2014-12-14 17:22 - 2010-11-20 13:21 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\rdpd3d.dll
2014-12-14 17:22 - 2010-11-20 13:21 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\wsnmp32.dll
2014-12-14 17:22 - 2010-11-20 13:21 - 00051200 _____ (Twain Working Group) C:\Windows\twain_32.dll
2014-12-14 17:22 - 2010-11-20 13:21 - 00050688 _____ (Microsoft Corporation) C:\Windows\system32\umb.dll
2014-12-14 17:22 - 2010-11-20 13:21 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll
2014-12-14 17:22 - 2010-11-20 13:21 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\wkscli.dll
2014-12-14 17:22 - 2010-11-20 13:21 - 00046592 _____ (Microsoft Corporation) C:\Windows\system32\WavDest.dll
2014-12-14 17:22 - 2010-11-20 13:21 - 00046080 _____ (Microsoft Corporation) C:\Windows\system32\RpcRtRemote.dll
2014-12-14 17:22 - 2010-11-20 13:21 - 00040960 _____ (Microsoft Corporation) C:\Windows\system32\wwanprotdim.dll
2014-12-14 17:22 - 2010-11-20 13:21 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\wtsapi32.dll
2014-12-14 17:22 - 2010-11-20 13:21 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\WUDFCoinstaller.dll
2014-12-14 17:22 - 2010-11-20 13:21 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\rtutils.dll
2014-12-14 17:22 - 2010-11-20 13:21 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll
2014-12-14 17:22 - 2010-11-20 13:21 - 00035840 _____ (Microsoft Corporation) C:\Windows\system32\shimgvw.dll
2014-12-14 17:22 - 2010-11-20 13:21 - 00033280 _____ (Microsoft Corporation) C:\Windows\system32\wiarpc.dll
2014-12-14 17:22 - 2010-11-20 13:21 - 00031744 _____ (Microsoft Corporation) C:\Windows\system32\wdiasqmmodule.dll
2014-12-14 17:22 - 2010-11-20 13:21 - 00031744 _____ (Microsoft Corporation) C:\Windows\system32\utildll.dll
2014-12-14 17:22 - 2010-11-20 13:21 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\vpnikeapi.dll
2014-12-14 17:22 - 2010-11-20 13:21 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2014-12-14 17:22 - 2010-11-20 13:21 - 00021504 _____ (Microsoft Corporation) C:\Windows\system32\rdprefdrvapi.dll
2014-12-14 17:22 - 2010-11-20 13:21 - 00019968 _____ (Microsoft Corporation) C:\Windows\system32\spopk.dll
2014-12-14 17:22 - 2010-11-20 13:21 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\sisbkup.dll
2014-12-14 17:22 - 2010-11-20 13:21 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2014-12-14 17:22 - 2010-11-20 13:21 - 00014848 _____ (Microsoft Corporation) C:\Windows\system32\syssetup.dll
2014-12-14 17:22 - 2010-11-20 13:21 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\slwga.dll
2014-12-14 17:22 - 2010-11-20 13:21 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\tsbyuv.dll
2014-12-14 17:22 - 2010-11-20 13:20 - 02130944 _____ (Microsoft Corporation) C:\Windows\system32\networkmap.dll
2014-12-14 17:22 - 2010-11-20 13:20 - 01661440 _____ (Microsoft Corporation) C:\Windows\system32\networkexplorer.dll
2014-12-14 17:22 - 2010-11-20 13:20 - 01644032 _____ (Microsoft Corporation) C:\Windows\system32\netcenter.dll
2014-12-14 17:22 - 2010-11-20 13:20 - 01160192 _____ (Microsoft Corporation) C:\Windows\system32\OpcServices.dll
2014-12-14 17:22 - 2010-11-20 13:20 - 01111552 _____ (Microsoft Corporation) C:\Windows\system32\onexui.dll
2014-12-14 17:22 - 2010-11-20 13:20 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\OobeFldr.dll
2014-12-14 17:22 - 2010-11-20 13:20 - 00656384 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll
2014-12-14 17:22 - 2010-11-20 13:20 - 00600576 _____ (Microsoft Corporation) C:\Windows\system32\PerfCenterCPL.dll
2014-12-14 17:22 - 2010-11-20 13:20 - 00571904 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2014-12-14 17:22 - 2010-11-20 13:20 - 00514560 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll
2014-12-14 17:22 - 2010-11-20 13:20 - 00509440 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2014-12-14 17:22 - 2010-11-20 13:20 - 00441856 _____ (Microsoft Corporation) C:\Windows\system32\powercpl.dll
2014-12-14 17:22 - 2010-11-20 13:20 - 00427520 _____ (Microsoft Corporation) C:\Windows\system32\PortableDeviceStatus.dll
2014-12-14 17:22 - 2010-11-20 13:20 - 00395264 _____ (Microsoft Corporation) C:\Windows\system32\prnfldr.dll
2014-12-14 17:22 - 2010-11-20 13:20 - 00346112 _____ (Microsoft Corporation) C:\Windows\system32\nshipsec.dll
2014-12-14 17:22 - 2010-11-20 13:20 - 00324608 _____ (Microsoft Corporation) C:\Windows\system32\puiobj.dll
2014-12-14 17:22 - 2010-11-20 13:20 - 00319488 _____ (Microsoft Corporation) C:\Windows\system32\odbcjt32.dll
2014-12-14 17:22 - 2010-11-20 13:20 - 00297472 _____ (Microsoft Corporation) C:\Windows\system32\ntprint.dll
2014-12-14 17:22 - 2010-11-20 13:20 - 00295424 _____ (Microsoft Corporation) C:\Windows\system32\photowiz.dll
2014-12-14 17:22 - 2010-11-20 13:20 - 00283136 _____ (Microsoft Corporation) C:\Windows\system32\qdv.dll
2014-12-14 17:22 - 2010-11-20 13:20 - 00236544 _____ (Microsoft Corporation) C:\Windows\system32\pdh.dll
2014-12-14 17:22 - 2010-11-20 13:20 - 00218112 _____ (Microsoft Corporation) C:\Windows\system32\OnLineIDCpl.dll
2014-12-14 17:22 - 2010-11-20 13:20 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\qasf.dll
2014-12-14 17:22 - 2010-11-20 13:20 - 00190976 _____ (Microsoft Corporation) C:\Windows\system32\qcap.dll
2014-12-14 17:22 - 2010-11-20 13:20 - 00183296 _____ (Microsoft Corporation) C:\Windows\system32\PortableDeviceSyncProvider.dll
2014-12-14 17:22 - 2010-11-20 13:20 - 00175616 _____ (Microsoft Corporation) C:\Windows\system32\netplwiz.dll
2014-12-14 17:22 - 2010-11-20 13:20 - 00174592 _____ (Microsoft Corporation) C:\Windows\system32\ocsetapi.dll
2014-12-14 17:22 - 2010-11-20 13:20 - 00171520 _____ (Microsoft Corporation) C:\Windows\system32\QAGENT.DLL
2014-12-14 17:22 - 2010-11-20 13:20 - 00165376 _____ (Microsoft Corporation) C:\Windows\system32\provsvc.dll
2014-12-14 17:22 - 2010-11-20 13:20 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\odbctrac.dll
2014-12-14 17:22 - 2010-11-20 13:20 - 00161792 _____ (Microsoft Corporation) C:\Windows\system32\netjoin.dll
2014-12-14 17:22 - 2010-11-20 13:20 - 00153088 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2014-12-14 17:22 - 2010-11-20 13:20 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\mydocs.dll
2014-12-14 17:22 - 2010-11-20 13:20 - 00122880 _____ (Microsoft Corporation) C:\Windows\system32\odbccp32.dll
2014-12-14 17:22 - 2010-11-20 13:20 - 00121344 _____ (Microsoft Corporation) C:\Windows\system32\sppc.dll
2014-12-14 17:22 - 2010-11-20 13:20 - 00120320 _____ (Microsoft Corporation) C:\Windows\system32\prntvpt.dll
2014-12-14 17:22 - 2010-11-20 13:20 - 00117248 _____ (Microsoft Corporation) C:\Windows\system32\netid.dll
2014-12-14 17:22 - 2010-11-20 13:20 - 00099328 _____ (Microsoft Corporation) C:\Windows\system32\QSVRMGMT.DLL
2014-12-14 17:22 - 2010-11-20 13:20 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\olepro32.dll
2014-12-14 17:22 - 2010-11-20 13:20 - 00078848 _____ (Microsoft Corporation)
         

[QUOTE=-NiNa-;1397194]hallo,

also mein problem ist das der rechner immer wieder sachen wie shopperz oder bobroser und solche sachen installiert und sich auch nicht formatieren lässt. auserdem funktionierten die explorer nicht richtig es geht die ganze zeit werbung auf und irgendwelche ja nein bestätigungen... ich weiss nicht was ich machen soll

defogger_disable by jpshortstuff (23.02.10.1)
Log created at 14:51 on 15/12/2014 (Tim)

Checking for autostart values...
HKCU\~\Run values retrieved.
HKLM\~\Run values retrieved.

Checking for services/drivers...


-=E.O.F=-
         

Additional scan result of Farbar Recovery Scan Tool (x86) Version: 14-12-2014 01
Ran by Tim at 2014-12-15 14:52:31
Running from C:\Users\Tim\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

CommonShare (HKLM\...\CommonShare) (Version: 2014.12.10.022350 - CommonShare) <==== ATTENTION!
ConvertAd (HKLM\...\ConvertAd) (Version: 1.0.0.0 - ConvertAd) <==== ATTENTION!
HQ-Video-Pro-2.1cV12.12 (HKLM\...\HQ-Video-Pro-2.1cV12.12) (Version: 1.35.11.26 - HQ-VideoV12.12) <==== ATTENTION
Microsoft .NET Framework 4 Client Profile (HKLM\...\Microsoft .NET Framework 4 Client Profile) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (HKLM\...\Microsoft .NET Framework 4 Client Profile DEU Language Pack) (Version: 4.0.30319 - Microsoft Corporation)
shopperz 2.0.0.450 (HKLM\...\{C74AB308-BA97-42f6-BB20-00E0868F52FB}_is1) (Version: 2.0.0.450 - shopperz)
Support TW 1.1 (HKLM\...\{12DA0E6F-5543-440C-BAA2-28BF01070AFA}{40030ae4}) (Version:  - TinyWallet) <==== ATTENTION
TheBestDeals (HKLM\...\20A0AB69-9BF7-5197-06B3-4BFA72493649) (Version:  - TheBestDeals-software) <==== ATTENTION
TinyWallet (HKLM\...\{F04D4328-4631-1CBE-1907-201B33FAF2E8}) (Version: 2.1.0.1195 - )
webssearches uninstall (HKLM\...\webssearches uninstall) (Version:  - webssearches) <==== ATTENTION
Wizard101(DE) (HKU\S-1-5-21-431573790-2162778945-66321951-1001\...\Wizard101(DE)_is1) (Version:  - Gameforge 4D GmbH)

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)


==================== Restore Points  =========================

15-12-2014 13:20:14 Windows Update

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 03:04 - 2009-06-10 22:39 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {1BDF6498-B15D-426E-93AC-956705829F12} - System32\Tasks\bd86da69-5d08-4b42-b7b5-eb484d2e3be0 => C:\Program Files\HQ-Video-Pro-2.1cV12.12\bd86da69-5d08-4b42-b7b5-eb484d2e3be0.exe [2014-12-13] (HQ-VideoV12.12) <==== ATTENTION
Task: {2E90D70C-8789-40ED-9036-D2929F1B3866} - System32\Tasks\705d3b14-1727-4573-ac8b-74917f2ddfab-11 => C:\Program Files\HQ-Video-Pro-2.1cV12.12\705d3b14-1727-4573-ac8b-74917f2ddfab-11.exe [2014-12-13] (HQ-VideoV12.12) <==== ATTENTION
Task: {2F85E9AA-D903-4FB5-BAB6-172C0829A0F4} - System32\Tasks\705d3b14-1727-4573-ac8b-74917f2ddfab-4 => C:\Program Files\HQ-Video-Pro-2.1cV12.12\705d3b14-1727-4573-ac8b-74917f2ddfab-4.exe [2014-12-13] (HQ-VideoV12.12) <==== ATTENTION
Task: {4B97E2E0-32CF-472A-A0DE-0B8D7A627787} - System32\Tasks\705d3b14-1727-4573-ac8b-74917f2ddfab-1 => C:\Program Files\HQ-Video-Pro-2.1cV12.12\HQ-Video-Pro-2.1cV12.12-codedownloader.exe [2014-12-13] (HQ-VideoV12.12) <==== ATTENTION
Task: {53A0CD65-918C-453A-882D-94E836F988AD} - System32\Tasks\705d3b14-1727-4573-ac8b-74917f2ddfab-5_user => C:\Program Files\HQ-Video-Pro-2.1cV12.12\705d3b14-1727-4573-ac8b-74917f2ddfab-5.exe [2014-12-13] (HQ-VideoV12.12) <==== ATTENTION
Task: {59DE1A67-EAAE-4C84-8D0D-4E72FF17C57B} - System32\Tasks\omrUpdater => C:\Program Files\shopperz\custer.bat [2014-12-02] ()
Task: {788A47D9-8791-424E-80C1-7707F3725E1E} - System32\Tasks\globalUpdateUpdateTaskMachineUA => C:\Program Files\globalUpdate\Update\GoogleUpdate.exe [2014-12-13] (globalUpdate) <==== ATTENTION
Task: {79F3080F-9CE2-47AA-931C-1C9957A46147} - System32\Tasks\LBSTNS => C:\Users\Tim\AppData\Roaming\LBSTNS.exe [2014-12-13] (HQ-VideoV12.12) <==== ATTENTION
Task: {81E2A003-7B06-44AA-ABA1-5A414BEB4A51} - System32\Tasks\705d3b14-1727-4573-ac8b-74917f2ddfab-3 => C:\Program Files\HQ-Video-Pro-2.1cV12.12\705d3b14-1727-4573-ac8b-74917f2ddfab-3.exe [2014-12-13] (HQ-VideoV12.12) <==== ATTENTION
Task: {93C7412E-C17B-4266-B841-EB8A539482B9} - System32\Tasks\Run_Bobby_Browser => C:\Users\Tim\AppData\Local\BoBrowser\Application\bobrowser.exe <==== ATTENTION
Task: {94197BD2-62A5-4745-BB97-8CB926AAB830} - System32\Tasks\TheBestDeals Update => C:\Program Files\ver7TheBestDeals\i3TheBestDealsm51.exe [2014-12-13] () <==== ATTENTION
Task: {B20DF6F2-9D5C-4619-8776-7EBA33243283} - System32\Tasks\{761C846F-D68A-48CC-9180-21F652F3C1F2} => pcalua.exe -a C:\Users\Tim\AppData\Roaming\webssearches\UninstallManager.exe -c  -ptid=brd
Task: {D490FAB8-AE68-4B23-92C7-719EFB0FE5EF} - System32\Tasks\2b5022f2-ae23-4546-870a-98084e9a2e88 => C:\Program Files\HQ-Video-Pro-2.1cV12.12\2b5022f2-ae23-4546-870a-98084e9a2e88.exe [2014-12-13] () <==== ATTENTION
Task: {D9959AE1-5942-4271-B77A-32B0FA65ACF7} - System32\Tasks\705d3b14-1727-4573-ac8b-74917f2ddfab-2 => C:\Program Files\HQ-Video-Pro-2.1cV12.12\705d3b14-1727-4573-ac8b-74917f2ddfab-2.exe [2014-12-13] (HQ-VideoV12.12) <==== ATTENTION
Task: {DF0D5A91-CD74-4884-9F8C-255F27BFAFE2} - System32\Tasks\globalUpdateUpdateTaskMachineCore => C:\Program Files\globalUpdate\Update\GoogleUpdate.exe [2014-12-13] (globalUpdate) <==== ATTENTION
Task: {E3D01417-32A0-4EF2-A4CD-10AE4E4C236F} - System32\Tasks\705d3b14-1727-4573-ac8b-74917f2ddfab-5 => C:\Program Files\HQ-Video-Pro-2.1cV12.12\705d3b14-1727-4573-ac8b-74917f2ddfab-5.exe [2014-12-13] (HQ-VideoV12.12) <==== ATTENTION
Task: {FA3C0CF7-CA0B-4EDF-8B4A-E04B7CFD009A} - System32\Tasks\CP => C:\Users\Tim\AppData\Roaming\CP.exe [2014-12-13] (HQ-VideoV12.12) <==== ATTENTION

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\Windows\Tasks\2b5022f2-ae23-4546-870a-98084e9a2e88.job => C:\Program Files\HQ-Video-Pro-2.1cV12.12\2b5022f2-ae23-4546-870a-98084e9a2e88.exe <==== ATTENTION
Task: C:\Windows\Tasks\705d3b14-1727-4573-ac8b-74917f2ddfab-1.job => C:\Program Files\HQ-Video-Pro-2.1cV12.12\HQ-Video-Pro-2.1cV12.12-codedownloader.exe <==== ATTENTION
Task: C:\Windows\Tasks\705d3b14-1727-4573-ac8b-74917f2ddfab-11.job => C:\Program Files\HQ-Video-Pro-2.1cV12.12\705d3b14-1727-4573-ac8b-74917f2ddfab-11.exe <==== ATTENTION
Task: C:\Windows\Tasks\705d3b14-1727-4573-ac8b-74917f2ddfab-2.job => C:\Program Files\HQ-Video-Pro-2.1cV12.12\705d3b14-1727-4573-ac8b-74917f2ddfab-2.exe <==== ATTENTION
Task: C:\Windows\Tasks\705d3b14-1727-4573-ac8b-74917f2ddfab-3.job => C:\Program Files\HQ-Video-Pro-2.1cV12.12\705d3b14-1727-4573-ac8b-74917f2ddfab-3.exe <==== ATTENTION
Task: C:\Windows\Tasks\705d3b14-1727-4573-ac8b-74917f2ddfab-4.job => C:\Program Files\HQ-Video-Pro-2.1cV12.12\705d3b14-1727-4573-ac8b-74917f2ddfab-4.exe <==== ATTENTION
Task: C:\Windows\Tasks\705d3b14-1727-4573-ac8b-74917f2ddfab-5.job => C:\Program Files\HQ-Video-Pro-2.1cV12.12\705d3b14-1727-4573-ac8b-74917f2ddfab-5.exe <==== ATTENTION
Task: C:\Windows\Tasks\705d3b14-1727-4573-ac8b-74917f2ddfab-5_user.job => C:\Program Files\HQ-Video-Pro-2.1cV12.12\705d3b14-1727-4573-ac8b-74917f2ddfab-5.exe <==== ATTENTION
Task: C:\Windows\Tasks\bd86da69-5d08-4b42-b7b5-eb484d2e3be0.job => C:\Program Files\HQ-Video-Pro-2.1cV12.12\bd86da69-5d08-4b42-b7b5-eb484d2e3be0.exe <==== ATTENTION
Task: C:\Windows\Tasks\CP.job => C:\Users\Tim\AppData\Roaming\CP.exe <==== ATTENTION
Task: C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job => C:\Program Files\globalUpdate\Update\GoogleUpdate.exe <==== ATTENTION
Task: C:\Windows\Tasks\globalUpdateUpdateTaskMachineUA.job => C:\Program Files\globalUpdate\Update\GoogleUpdate.exe <==== ATTENTION
Task: C:\Windows\Tasks\LBSTNS.job => C:\Users\Tim\AppData\Roaming\LBSTNS.exe <==== ATTENTION
Task: C:\Windows\Tasks\TheBestDeals Update.job => C:\Program Files\ver7TheBestDeals\i3TheBestDealsm51.exe

==================== Loaded Modules (whitelisted) =============

2014-12-13 13:18 - 2014-12-13 13:18 - 04157440 _____ () c:\Program Files\Supporter\Supporter.dll
2014-12-13 13:17 - 2014-12-02 18:03 - 00282504 _____ () C:\Program Files\shopperz\sgurd.exe
2014-12-13 13:17 - 2014-12-02 18:03 - 00306568 _____ () C:\Program Files\shopperz\csrcc.exe
2014-12-13 13:17 - 2014-12-02 18:03 - 00124808 _____ () C:\Program Files\shopperz\nfapi32.dll
2014-12-13 13:17 - 2014-12-02 18:03 - 00345480 _____ () C:\Program Files\shopperz\ProtocolFilters32.dll
2014-12-13 13:17 - 2014-12-02 18:03 - 00224648 _____ () C:\Program Files\shopperz\psonupd.exe
2014-12-10 03:30 - 2014-12-10 03:30 - 00526056 _____ () C:\Program Files\CommonShare\updateCommonShare.exe
2014-12-12 15:26 - 2014-12-12 15:26 - 00526056 _____ () C:\Program Files\CommonShare\bin\utilCommonShare.exe
2014-12-13 13:17 - 2014-12-02 18:03 - 00291720 _____ () C:\Program Files\shopperz\socek.dll
2014-12-13 13:17 - 2014-12-13 13:17 - 00723456 _____ () C:\Program Files\ver7TheBestDeals\i3TheBestDealsm51.exe
2014-12-13 13:17 - 2014-12-02 18:03 - 00430472 _____ () C:\Program Files\shopperz\unity.exe
2014-12-13 13:17 - 2014-12-02 18:03 - 00395144 _____ () C:\Program Files\shopperz\hleb.dll
2014-12-13 13:17 - 2014-12-02 18:03 - 00242056 _____ () C:\Program Files\shopperz\compot.dll
2014-12-13 13:17 - 2014-12-02 18:03 - 00309128 _____ () C:\Program Files\shopperz\creed32.dll
2014-12-13 11:50 - 2014-12-13 11:50 - 03239424 _____ () C:\Users\Tim\AppData\Local\ConvertAd\ConvertAd.exe
2014-12-12 15:28 - 2014-11-25 14:06 - 00296168 _____ () C:\Program Files\CommonShare\bin\CommonShare.PurBrowse.exe
2014-12-12 15:28 - 2014-11-25 23:05 - 00098536 _____ () C:\Program Files\CommonShare\bin\CommonShare.BrowserAdapter.exe
2014-12-12 15:28 - 2014-11-27 00:59 - 00101608 _____ () C:\Program Files\CommonShare\bin\CommonShare.expext.exe
2014-12-12 15:28 - 2014-11-27 00:59 - 00082152 _____ () C:\Program Files\CommonShare\bin\CommonShare.expextdll.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)


==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== EXE Association (whitelisted) =============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


==================== MSCONFIG/TASK MANAGER disabled items =========

(Currently there is no automatic fix for this section.)


========================= Accounts: ==========================

Administrator (S-1-5-21-431573790-2162778945-66321951-500 - Administrator - Disabled)
Gast (S-1-5-21-431573790-2162778945-66321951-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-431573790-2162778945-66321951-1002 - Limited - Enabled)
Tim (S-1-5-21-431573790-2162778945-66321951-1001 - Administrator - Enabled) => C:\Users\Tim

==================== Faulty Device Manager Devices =============

Name: Teredo Tunneling Pseudo-Interface
Description: Microsoft-Teredo-Tunneling-Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.

Name: wpnfd_1_10_0_1
Description: wpnfd_1_10_0_1
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer: 
Service: wpnfd_1_10_0_1
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.

Name: PS/2-kompatible Maus
Description: PS/2-kompatible Maus
Class Guid: {4d36e96f-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: i8042prt
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.

Name: PCI-Kommunikationscontroller (einfach)
Description: PCI-Kommunikationscontroller (einfach)
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.


==================== Event log errors: =========================

Application errors:
==================
Error: (12/15/2014 02:28:29 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: iexplore.exe, Version: 8.0.7601.17514, Zeitstempel: 0x4ce79912
Name des fehlerhaften Moduls: IEFRAME.dll, Version: 8.0.7601.17514, Zeitstempel: 0x4ce7b847
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000ca122
ID des fehlerhaften Prozesses: 0xe78
Startzeit der fehlerhaften Anwendung: 0xiexplore.exe0
Pfad der fehlerhaften Anwendung: iexplore.exe1
Pfad des fehlerhaften Moduls: iexplore.exe2
Berichtskennung: iexplore.exe3

Error: (12/14/2014 11:26:17 PM) (Source: VSS) (EventID: 12305) (User: )
Description: Volumeschattenkopie-Dienstfehler: Volume bzw. Datenträger ist nicht richtig angeschlossen oder wurde nicht gefunden.
Fehlerkontext: CreateFileW(\\?\GLOBALROOT\Device\HarddiskVolumeShadowCopy3,0xc0000000,0x00000003,...).


Vorgang:
   PostFinalCommitSnapshots wird verarbeitet

Kontext:
   Ausführungskontext: System Provider

Error: (12/14/2014 09:06:41 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm WizardLauncher.exe, Version 0.0.0.0 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: df8

Startzeit: 01d01774b198bae4

Endzeit: 29

Anwendungspfad: C:\ProgramData\Wizard101(DE)\PatchClient\BankB\WizardLauncher.exe

Berichts-ID: 20726e55-8368-11e4-ba82-000ffe600482

Error: (12/14/2014 09:05:22 AM) (Source: SideBySide) (EventID: 33) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.VC80.MFC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50727.762"1".
Die abhängige Assemblierung "Microsoft.VC80.MFC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50727.762"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".

Error: (12/13/2014 01:26:29 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: WizardGraphicalClient.exe, Version: 0.0.0.0, Zeitstempel: 0x547f4797
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0012f38c
ID des fehlerhaften Prozesses: 0xf0
Startzeit der fehlerhaften Anwendung: 0xWizardGraphicalClient.exe0
Pfad der fehlerhaften Anwendung: WizardGraphicalClient.exe1
Pfad des fehlerhaften Moduls: WizardGraphicalClient.exe2
Berichtskennung: WizardGraphicalClient.exe3

Error: (12/13/2014 01:25:50 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.VC80.MFC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50727.762"1".
Die abhängige Assemblierung "Microsoft.VC80.MFC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50727.762"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".

Error: (12/13/2014 01:24:17 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm nsgF09.tmp, Version 0.0.0.0 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 1104

Startzeit: 01d016cf9cf77561

Endzeit: 16

Anwendungspfad: C:\Users\Tim\AppData\Local\Temp\nsgF09.tmp

Berichts-ID:

Error: (12/13/2014 01:24:16 PM) (Source: VSS) (EventID: 8194) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Abfragen nach der Schnittstelle "IVssWriterCallback" ist ein unerwarteter Fehler aufgetreten. hr = 0x80070005, Zugriff verweigert
.
Die Ursache hierfür ist oft eine falsche Sicherheitseinstellung im Schreib- oder Anfrageprozess.


Vorgang:
   Generatordaten werden gesammelt

Kontext:
   Generatorklassen-ID: {e8132975-6f93-4464-a53e-1050253ae220}
   Generatorname: System Writer
   Generatorinstanz-ID: {e474f28a-4dac-4f7f-8d38-14334f061d3a}

Error: (12/13/2014 01:18:49 PM) (Source: MsiInstaller) (EventID: 11309) (User: Tim-PC)
Description: Product: Google Update Helper -- Error 1309. Error reading from file: C:\Program Files\globalUpdate\Update\1.3.25.0\Google\Update\RequiredFile.txt.  System error 3.  Verify that the file exists and that you can access it.

Error: (12/13/2014 11:24:50 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: WizardGraphicalClient.exe, Version: 0.0.0.0, Zeitstempel: 0x547f4797
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0012f38c
ID des fehlerhaften Prozesses: 0x51c
Startzeit der fehlerhaften Anwendung: 0xWizardGraphicalClient.exe0
Pfad der fehlerhaften Anwendung: WizardGraphicalClient.exe1
Pfad des fehlerhaften Moduls: WizardGraphicalClient.exe2
Berichtskennung: WizardGraphicalClient.exe3


System errors:
=============
Error: (12/15/2014 02:42:35 PM) (Source: Disk) (EventID: 11) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk1\DR3 gefunden.

Error: (12/15/2014 02:42:35 PM) (Source: Disk) (EventID: 11) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk1\DR3 gefunden.

Error: (12/15/2014 02:42:34 PM) (Source: Disk) (EventID: 11) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk1\DR3 gefunden.

Error: (12/15/2014 02:37:14 PM) (Source: Disk) (EventID: 11) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk1\DR2 gefunden.

Error: (12/15/2014 02:37:13 PM) (Source: Disk) (EventID: 11) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk1\DR2 gefunden.

Error: (12/15/2014 02:37:12 PM) (Source: Disk) (EventID: 11) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk1\DR2 gefunden.

Error: (12/15/2014 02:24:41 PM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: 
wpnfd_1_10_0_1

Error: (12/15/2014 02:16:12 PM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: 
wpnfd_1_10_0_1

Error: (12/15/2014 02:12:35 PM) (Source: WMPNetworkSvc) (EventID: 14324) (User: )
Description: WMPNetworkSvc0x80070020

Error: (12/15/2014 02:10:14 PM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: 
wpnfd_1_10_0_1


Microsoft Office Sessions:
=========================
Error: (12/15/2014 02:28:29 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: iexplore.exe8.0.7601.175144ce79912IEFRAME.dll8.0.7601.175144ce7b847c0000005000ca122e7801d0186ab1956620C:\Program Files\Internet Explorer\iexplore.exeC:\Windows\system32\IEFRAME.dll412f6d8e-845e-11e4-99e6-000ffe600482

Error: (12/14/2014 11:26:17 PM) (Source: VSS) (EventID: 12305) (User: )
Description: CreateFileW(\\?\GLOBALROOT\Device\HarddiskVolumeShadowCopy3,0xc0000000,0x00000003,...)

Vorgang:
   PostFinalCommitSnapshots wird verarbeitet

Kontext:
   Ausführungskontext: System Provider

Error: (12/14/2014 09:06:41 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: WizardLauncher.exe0.0.0.0df801d01774b198bae429C:\ProgramData\Wizard101(DE)\PatchClient\BankB\WizardLauncher.exe20726e55-8368-11e4-ba82-000ffe600482

Error: (12/14/2014 09:05:22 AM) (Source: SideBySide) (EventID: 33) (User: )
Description: Microsoft.VC80.MFC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50727.762"C:\ProgramData\Wizard101(DE)\PatchClient\BankB\SkinCrafterDll.dll

Error: (12/13/2014 01:26:29 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: WizardGraphicalClient.exe0.0.0.0547f4797unknown0.0.0.000000000c00000050012f38cf001d016cff6acd392C:\ProgramData\Wizard101(DE)\Bin\WizardGraphicalClient.exeunknown43297f31-82c3-11e4-aa4c-000ffe600482

Error: (12/13/2014 01:25:50 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Microsoft.VC80.MFC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50727.762"C:\ProgramData\Wizard101(DE)\PatchClient\BankB\SkinCrafterDll.dll

Error: (12/13/2014 01:24:17 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: nsgF09.tmp0.0.0.0110401d016cf9cf7756116C:\Users\Tim\AppData\Local\Temp\nsgF09.tmp

Error: (12/13/2014 01:24:16 PM) (Source: VSS) (EventID: 8194) (User: )
Description: 0x80070005, Zugriff verweigert


Vorgang:
   Generatordaten werden gesammelt

Kontext:
   Generatorklassen-ID: {e8132975-6f93-4464-a53e-1050253ae220}
   Generatorname: System Writer
   Generatorinstanz-ID: {e474f28a-4dac-4f7f-8d38-14334f061d3a}

Error: (12/13/2014 01:18:49 PM) (Source: MsiInstaller) (EventID: 11309) (User: Tim-PC)
Description: Product: Google Update Helper -- Error 1309. Error reading from file: C:\Program Files\globalUpdate\Update\1.3.25.0\Google\Update\RequiredFile.txt.  System error 3.  Verify that the file exists and that you can access it.(NULL)(NULL)(NULL)(NULL)(NULL)

Error: (12/13/2014 11:24:50 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: WizardGraphicalClient.exe0.0.0.0547f4797unknown0.0.0.000000000c00000050012f38c51c01d016befbc7e10aC:\ProgramData\Wizard101(DE)\Bin\WizardGraphicalClient.exeunknown4469d1a7-82b2-11e4-84ff-000ffe600482


==================== Memory info =========================== 

Processor: Intel(R) Pentium(R) D CPU 3.00GHz
Percentage of memory in use: 41%
Total physical RAM: 3583.31 MB
Available physical RAM: 2112.45 MB
Total Pagefile: 7164.9 MB
Available Pagefile: 5697.64 MB
Total Virtual: 2047.88 MB
Available Virtual: 1910.47 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:186.31 GB) (Free:4.28 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
Drive e: (U3 System) (CDROM) (Total:0.01 GB) (Free:0 GB) CDFS
Drive f: () (Removable) (Total:7.47 GB) (Free:7.46 GB) FAT32

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 186.3 GB) (Disk ID: 02C66D25)
Partition 1: (Active) - (Size=186.3 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (Size: 7.5 GB) (Disk ID: 6E652072)
No partition Table on disk 1.

==================== End Of Log ============================
         

--- --- ---

--- --- ---

--- --- ---

GMER 2.1.19357 - hxxp://www.gmer.net
Rootkit scan 2014-12-15 15:08:18
Windows 6.1.7601 Service Pack 1 \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-0 ST3200827AS rev.3.AAE 186,31GB
Running: Gmer-19357.exe; Driver: C:\Users\Tim\AppData\Local\Temp\uwldipow.sys


---- Kernel code sections - GMER 2.1 ----

.text           ntkrnlpa.exe!ZwSaveKey + 13C1           82A8E339 1 Byte  [06]
.text           ntkrnlpa.exe!KiDispatchInterrupt + 5A2  82AC7D52 19 Bytes  [E0, 0F, BA, F0, 07, 73, 09, ...] {LOOPNZ 0x11; MOV EDX, 0x97307f0; MOV CR4, EAX; OR AL, 0x80; MOV CR4, EAX; RET ; MOV ECX, CR3}

---- Devices - GMER 2.1 ----

AttachedDevice  \Driver\tdx \Device\Tcp                 cherimoya.sys
AttachedDevice  \Driver\tdx \Device\Udp                 cherimoya.sys
AttachedDevice  \FileSystem\fastfat \Fat                fltmgr.sys

---- EOF - GMER 2.1 ----
         

ich komme hier noch nicht so ganz zurecht sorry

Hallo -NiNa-



Mein Name ist Timo und ich werde Dir bei deinem Problem behilflich sein.

• Bitte arbeite alle Schritte der Reihe nach ab.
• Hier findest du die Anleitung für Hilfesuchende
• Lese die Anleitungen sorgfältig. Sollte es Probleme geben, bitte stoppen und hier so gut es geht beschreiben.
• Nur Scans durchführen zu denen Du von einem Helfer aufgefordert wirst.
• Bitte kein Crossposting ( posten in mehreren Foren).
• Installiere oder Deinstalliere während der Bereinigung keine Software ausser Du wurdest dazu aufgefordert.
• Lese Dir die Anleitung zuerst vollständig durch. Sollte etwas unklar sein, frage bevor Du beginnst.
• Poste die Logfiles direkt in deinen Thread. Nicht anhängen ausser ich fordere Dich dazu auf.

Hinweis:
Ich kann Dir niemals eine Garantie geben, dass ich auch alles finde. Eine Formatierung ist immer der sicherste Weg.

Wir "arbeiten" hier alle freiwillig und in unserer Freizeit *hust*. Daher kann es bei Antworten zu Verzögerungen kommen.
Solltest du innerhalb 48 Std keine Antwort von mir erhalten, dann schreib mit eine PM
Solltest Du Dich für eine Bereinigung entscheiden, arbeite solange mit, bis ich oder jemand vom Team sagt, dass Du clean bist.

Lade Dir bitte von hier Revo Uninstaller (alternativ portable Revo Uninstaller) herunter.

• Installiere und starte das Programm. (Bebilderte Anleitung zu Revo Uninstaller)
• Klicke auf Optionen und wähle als Sprache Deutsch.
• Suche im Uninstallerfeld nach den Programmen:
  CommonShare
  
  ConvertAd
  
  HQ-Video-Pro-2.1cV12.12
  
  Support TW 1.1
  
  TheBestDeals
  
  webssearches uninstall
  
• Wähle die Programme nacheinander aus und klicke jedes Mal auf Uninstall.
• Wähle anschließend den Modus "Moderat" aus.
  
• Reste löschen:
  Klicke auf dann auf und dann auf .

 

Downloade Dir bitte AdwCleaner auf deinen Desktop.

• Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
• Starte die AdwCleaner.exe mit einem Doppelklick.
• Stimme den Nutzungsbedingungen zu.
• Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
  • "Tracing" Schlüssel löschen
  • Winsock Einstellungen zurücksetzen
  • Proxy Einstellungen zurücksetzen
  • Internet Explorer Richtlinien zurücksetzen
  • Chrome Richtlinien zurücksetzen
  • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
• Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
• Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
• Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
• Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

• Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
• Drücke eine beliebige Taste, um das Tool zu starten.
• Je nach System kann der Scan eine Weile dauern.
• Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
• Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.

Downloade Dir bitte Malwarebytes Anti-Malware

• Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
• Starte Malwarebytes' Anti-Malware (MBAM).
• Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
• Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
• Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
• Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
• Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
• Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.

Starte noch einmal FRST.

• Ändere keine der Voreinstellungen und drücke auf Scan.
• Wenn der Scan abgeschlossen ist, werden ein neues Logfile FRST.txt erstellt und auf dem Desktop gespeichert.
• Poste den Inhalt dieses Logfiles bitte hier in deinen Thread.