Ständige Werbung trotz AdBlock, Inernet Explorer springt Werbungsseiten werden geöffnet, filepony kann nicht

Friedrich290 · 07.01.2015, 18:38

Hallo alle miteinander,
seit einigen Tagen öffnen sich bei meinem Laptop, mit Windows 8.1, nur noch kleine Werbefenster trotz Add-Block, außerdem versuchen sich Progamme wie Health Alert und PC Speed up PC Beschleuniger zu installieren. Ich hatte zuerst eine Test-Version von Mc-Afee auf dem Laptop, dieser zeigte mir keine Viren oder ähnliches an. Diesen habe ich deinstalliert.
Danach scannte der Windows 8.1 Virenscanner und fand Viren etc. Daher installierte ich die kostenlose Version von Aviara und fand folgendes : Exportierte Ereignisse:

07.01.2015 18:10 [Echtzeit-Scanner] Dienst gestartet
Der Dienst wurde gestartet.
Dienst Version: 14.0.7.462
Engine Version:
VDF Version:

07.01.2015 18:10 [Hilfsdienst] Dienst gestartet
Der Dienst wurde gestartet.
Dienst Version: 14.0.7.462
Engine Version: 8.3.28.4
VDF Version: 8.11.199.240

07.01.2015 18:10 [Planer] Dienst gestartet
Der Dienst wurde gestartet.
Dienst Version 14.0.7.462

07.01.2015 18:09 [Echtzeit-Scanner] Dienst gestoppt
Der Dienst wurde gestoppt.

07.01.2015 18:09 [Planer] Dienst gestoppt
Der Dienst wurde gestoppt.

07.01.2015 18:06 [System-Scanner] Suche
Suchlauf beendet [Der Suchlauf wurde vollständig durchgeführt.].
Anzahl Dateien: 1194
Anzahl Verzeichnisse: 0
Anzahl Malware: 1
Anzahl Warnungen: 0

07.01.2015 18:06 [System-Scanner] Malware gefunden
Die Datei
'C:\Users\Daniel\AppData\Local\Microsoft\Windows\INetCache\Low\IE\XY3RUFZI\adobe
_flash_setup[1].exe'
enthielt einen Virus oder unerwünschtes Programm 'Adware/InstallCore.A.338'
[adware].
Durchgeführte Aktion(en):
Beim Versuch eine Sicherungskopie der Datei anzulegen ist ein Fehler
aufgetreten und die Datei wurde nicht gelöscht. Fehlernummer: 26004.
Die Quelldatei konnte nicht gefunden werden.
Es wird versucht die Aktion mit Hilfe der ARK Library durchzuführen.
Die Datei konnte nicht ins Quarantäneverzeichnis verschoben werden!
Die Datei existiert nicht!

07.01.2015 18:04 [Echtzeit-Scanner] Malware gefunden
In der Datei
'C:\Users\Daniel\AppData\Local\Microsoft\Windows\INetCache\Low\IE\XY3RUFZI\adobe
_flash_setup[1].exe'
wurde ein Virus oder unerwünschtes Programm 'ADWARE/InstallCore.A.338' [adware]
gefunden.
Ausgeführte Aktion: Übergeben an Scanner

07.01.2015 14:19 [System-Scanner] Suche
Suchlauf beendet [Der Suchlauf wurde vollständig durchgeführt.].
Anzahl Dateien: 694064
Anzahl Verzeichnisse: 36549
Anzahl Malware: 0
Anzahl Warnungen: 1

07.01.2015 14:17 [Updater] Update erfolgreich durchgeführt
Update von Avira Free Antivirus auf Computer 1906DANIEL (192.168.1.3)
erfolgreich durchgeführt.
Folgende Dateien wurden von "hxxp://80.157.150.24/update" aktualisiert:
aevdf.dat 8.11.199.240
xbv00189.vdf 8.11.199.228
xbv00190.vdf 8.11.199.234
xbv00191.vdf 8.11.199.240
local000.vdf
repair.rdf 1.0.3.60

07.01.2015 14:16 [Planer] Auftrag gestartet
Auftrag "Automatisches Update"
wurde erfolgreich gestartet.

07.01.2015 13:15 [System-Scanner] Suche
Suchlauf beendet [Der Suchlauf wurde vollständig durchgeführt.].
Anzahl Dateien: 5965
Anzahl Verzeichnisse: 0
Anzahl Malware: 0
Anzahl Warnungen: 0

07.01.2015 12:41 [Echtzeit-Scanner] Dienst gestartet
Der Dienst wurde gestartet.
Dienst Version: 14.0.7.462
Engine Version:
VDF Version:

07.01.2015 12:41 [Hilfsdienst] Dienst gestartet
Der Dienst wurde gestartet.
Dienst Version: 14.0.7.462
Engine Version: 8.3.28.4
VDF Version: 8.11.199.222

07.01.2015 12:40 [Planer] Dienst gestartet
Der Dienst wurde gestartet.
Dienst Version 14.0.7.462

07.01.2015 12:39 [Echtzeit-Scanner] Dienst gestoppt
Der Dienst wurde gestoppt.

07.01.2015 12:39 [Planer] Dienst gestoppt
Der Dienst wurde gestoppt.

07.01.2015 11:50 [System-Scanner] Suche
Suchlauf beendet [Der Suchlauf wurde vollständig durchgeführt.].
Anzahl Dateien: 77741
Anzahl Verzeichnisse: 1707
Anzahl Malware: 0
Anzahl Warnungen: 0

07.01.2015 11:26 [Echtzeit-Scanner] Dienst gestartet
Der Dienst wurde gestartet.
Dienst Version: 14.0.7.462
Engine Version:
VDF Version:

07.01.2015 11:26 [Hilfsdienst] Dienst gestartet
Der Dienst wurde gestartet.
Dienst Version: 14.0.7.462
Engine Version: 8.3.28.4
VDF Version: 8.11.199.222

07.01.2015 11:26 [Planer] Dienst gestartet
Der Dienst wurde gestartet.
Dienst Version 14.0.7.462

07.01.2015 11:26 [Echtzeit-Scanner] Dienst gestoppt
Der Dienst wurde gestoppt.

07.01.2015 11:26 [Planer] Dienst gestoppt
Der Dienst wurde gestoppt.

07.01.2015 10:16 [System-Scanner] Suche
Suchlauf beendet [Der Suchlauf wurde vollständig durchgeführt.].
Anzahl Dateien: 665637
Anzahl Verzeichnisse: 36336
Anzahl Malware: 0
Anzahl Warnungen: 1

07.01.2015 09:59 [System-Scanner] Suche
Suchlauf beendet [Der Suchlauf wurde vollständig durchgeführt.].
Anzahl Dateien: 691151
Anzahl Verzeichnisse: 36530
Anzahl Malware: 0
Anzahl Warnungen: 1

07.01.2015 08:17 [Updater] Update erfolgreich durchgeführt
Update von Avira Free Antivirus auf Computer 1906DANIEL (192.168.1.3)
erfolgreich durchgeführt.
Folgende Dateien wurden von "hxxp://217.89.105.227/update" aktualisiert:
aevdf.dat 8.11.199.222
xbv00183.vdf 8.11.199.200
xbv00184.vdf 8.11.199.202
xbv00185.vdf 8.11.199.206
xbv00186.vdf 8.11.199.210
xbv00187.vdf 8.11.199.216
xbv00188.vdf 8.11.199.222
local001.vdf
repair.rdf 1.0.3.58

07.01.2015 08:16 [Planer] Auftrag gestartet
Auftrag "Automatisches Update"
wurde erfolgreich gestartet.

07.01.2015 08:16 [Planer] Auftrag gestartet
Auftrag "ReSystemScan"
wurde erfolgreich gestartet.

07.01.2015 08:12 [System-Scanner] Suche
Suchlauf beendet [Der Suchlauf wurde vollständig durchgeführt.].
Anzahl Dateien: 0
Anzahl Verzeichnisse: 0
Anzahl Malware: 0
Anzahl Warnungen: 0

07.01.2015 08:12 [Echtzeit-Scanner] Dienst gestartet
Der Dienst wurde gestartet.
Dienst Version: 14.0.7.462
Engine Version:
VDF Version:

07.01.2015 08:12 [Hilfsdienst] Dienst gestartet
Der Dienst wurde gestartet.
Dienst Version: 14.0.7.462
Engine Version: 8.3.28.4
VDF Version: 8.11.199.198

07.01.2015 08:11 [Planer] Auftrag gestartet
Auftrag "Repair-Scanjob"
wurde erfolgreich gestartet.

07.01.2015 08:11 [Planer] Dienst gestartet
Der Dienst wurde gestartet.
Dienst Version 14.0.7.462

07.01.2015 08:10 [Echtzeit-Scanner] Dienst gestoppt
Der Dienst wurde gestoppt.

07.01.2015 08:10 [Planer] Dienst gestoppt
Der Dienst wurde gestoppt.

07.01.2015 08:09 [System-Scanner] Suche
Suchlauf beendet [Der Suchlauf wurde vollständig durchgeführt.].
Anzahl Dateien: 691815
Anzahl Verzeichnisse: 36549
Anzahl Malware: 21
Anzahl Warnungen: 7

07.01.2015 08:09 [System-Scanner] Malware gefunden
Die Datei 'C:\Program Files (x86)\Acer\9cb62408-6337-4aaf-b847-df6a2f9c2d24.dll'
enthielt einen Virus oder unerwünschtes Programm 'ADWARE/CrossRider.Gen4'
[adware].
Durchgeführte Aktion(en):
Die Datei wurde ins Quarantäneverzeichnis unter dem Namen '15ea2b77.qua'
verschoben!

07.01.2015 08:09 [System-Scanner] Malware gefunden
Die Datei 'C:\Program Files
(x86)\6228cefd-9c9c-4d28-ba89-4fea4b5b07c7\3cf63721-349a-4f96-9b7b-da87ca28b1ba.
dll'
enthielt einen Virus oder unerwünschtes Programm 'ADWARE/CrossRider.Gen4'
[adware].
Durchgeführte Aktion(en):
Die Datei wurde ins Quarantäneverzeichnis unter dem Namen '3a1c6399.qua'
verschoben!

07.01.2015 08:09 [System-Scanner] Malware gefunden
Die Datei 'C:\Program Files (x86)\AGEIA
Technologies\50d95618-42c8-4c13-9aab-8e16f3d54f12.dll'
enthielt einen Virus oder unerwünschtes Programm 'ADWARE/CrossRider.Gen4'
[adware].
Durchgeführte Aktion(en):
Die Datei wurde ins Quarantäneverzeichnis unter dem Namen '18bc359b.qua'
verschoben!

07.01.2015 08:08 [System-Scanner] Malware gefunden
Die Datei 'C:\Program Files
(x86)\CinemaP-1.9cV02.01\CinemaP-1.9cV02.01-codedownloader.exe'
enthielt einen Virus oder unerwünschtes Programm 'ADWARE/CrossRider.Gen4'
[adware].
Durchgeführte Aktion(en):
Beim Versuch eine Sicherungskopie der Datei anzulegen ist ein Fehler
aufgetreten und die Datei wurde nicht gelöscht. Fehlernummer: 26004.
Die Quelldatei konnte nicht gefunden werden.
Es wird versucht die Aktion mit Hilfe der ARK Library durchzuführen.
Die Datei konnte nicht ins Quarantäneverzeichnis verschoben werden!
Die Datei existiert nicht!

07.01.2015 08:08 [System-Scanner] Malware gefunden
Die Datei 'C:\Program Files
(x86)\CinemaP-1.9cV02.01\d187d13c-eb9d-4d47-bf31-4a5c3088774b-3.exe'
enthielt einen Virus oder unerwünschtes Programm 'Adware/CrossRider.1953768.43'
[adware].
Durchgeführte Aktion(en):
Beim Versuch eine Sicherungskopie der Datei anzulegen ist ein Fehler
aufgetreten und die Datei wurde nicht gelöscht. Fehlernummer: 26004.
Die Quelldatei konnte nicht gefunden werden.
Es wird versucht die Aktion mit Hilfe der ARK Library durchzuführen.
Die Datei konnte nicht ins Quarantäneverzeichnis verschoben werden!
Die Datei existiert nicht!

07.01.2015 08:08 [System-Scanner] Malware gefunden
Die Datei 'C:\Program Files
(x86)\CinemaP-1.9cV02.01\d187d13c-eb9d-4d47-bf31-4a5c3088774b-4.exe'
enthielt einen Virus oder unerwünschtes Programm 'ADWARE/CrossRider.Gen4'
[adware].
Durchgeführte Aktion(en):
Beim Versuch eine Sicherungskopie der Datei anzulegen ist ein Fehler
aufgetreten und die Datei wurde nicht gelöscht. Fehlernummer: 26004.
Die Quelldatei konnte nicht gefunden werden.
Es wird versucht die Aktion mit Hilfe der ARK Library durchzuführen.
Die Datei konnte nicht ins Quarantäneverzeichnis verschoben werden!
Die Datei existiert nicht!

07.01.2015 08:08 [System-Scanner] Malware gefunden
Die Datei 'C:\Program Files
(x86)\CinemaP-1.9cV02.01\d187d13c-eb9d-4d47-bf31-4a5c3088774b-5.exe'
enthielt einen Virus oder unerwünschtes Programm 'ADWARE/CrossRider.Gen4'
[adware].
Durchgeführte Aktion(en):
Beim Versuch eine Sicherungskopie der Datei anzulegen ist ein Fehler
aufgetreten und die Datei wurde nicht gelöscht. Fehlernummer: 26004.
Die Quelldatei konnte nicht gefunden werden.
Es wird versucht die Aktion mit Hilfe der ARK Library durchzuführen.
Die Datei konnte nicht ins Quarantäneverzeichnis verschoben werden!
Die Datei existiert nicht!

07.01.2015 08:08 [System-Scanner] Malware gefunden
Die Datei 'C:\Program Files
(x86)\CinemaP-1.9cV02.01\d187d13c-eb9d-4d47-bf31-4a5c3088774b-7.exe'
enthielt einen Virus oder unerwünschtes Programm 'ADWARE/CrossRider.Gen4'
[adware].
Durchgeführte Aktion(en):
Beim Versuch eine Sicherungskopie der Datei anzulegen ist ein Fehler
aufgetreten und die Datei wurde nicht gelöscht. Fehlernummer: 26004.
Die Quelldatei konnte nicht gefunden werden.
Es wird versucht die Aktion mit Hilfe der ARK Library durchzuführen.
Die Datei konnte nicht ins Quarantäneverzeichnis verschoben werden!
Die Datei existiert nicht!

07.01.2015 08:08 [System-Scanner] Suche
Suchlauf beendet [Der Suchlauf wurde vollständig durchgeführt.].
Anzahl Dateien: 1175
Anzahl Verzeichnisse: 0
Anzahl Malware: 2
Anzahl Warnungen: 0

07.01.2015 08:08 [System-Scanner] Malware gefunden
Die Datei 'C:\Program Files
(x86)\CinemaP-1.9cV02.01\d187d13c-eb9d-4d47-bf31-4a5c3088774b-5.exe'
enthielt einen Virus oder unerwünschtes Programm 'ADWARE/CrossRider.Gen4'
[adware].
Durchgeführte Aktion(en):
Die Datei wurde ins Quarantäneverzeichnis unter dem Namen '4a0e66d7.qua'
verschoben!

07.01.2015 08:08 [System-Scanner] Malware gefunden
Die Datei 'C:\Program Files
(x86)\CinemaP-1.9cV02.01\CinemaP-1.9cV02.01-codedownloader.exe'
enthielt einen Virus oder unerwünschtes Programm 'ADWARE/CrossRider.Gen4'
[adware].
Durchgeführte Aktion(en):
Die Datei wurde ins Quarantäneverzeichnis unter dem Namen '53674929.qua'
verschoben!

07.01.2015 08:08 [System-Scanner] Malware gefunden
Die Datei 'C:\Program Files (x86)\CinemaP-1.9cV02.01\Uninstall.exe'
enthielt einen Virus oder unerwünschtes Programm 'Adware/CrossRider.103912'
[adware].
Durchgeführte Aktion(en):
Die Datei wurde ins Quarantäneverzeichnis unter dem Namen '2c221582.qua'
verschoben!

07.01.2015 08:08 [System-Scanner] Malware gefunden
Die Datei 'C:\ProgramData\RandomPrriCCe\DFVI77nzx5mHE8.exe'
enthielt einen Virus oder unerwünschtes Programm 'ADWARE/MultiPlug.Gen7'
[adware].
Durchgeführte Aktion(en):
Beim Versuch eine Sicherungskopie der Datei anzulegen ist ein Fehler
aufgetreten und die Datei wurde nicht gelöscht. Fehlernummer: 26003.
Die Datei konnte nicht gelöscht werden!
Es wird versucht die Aktion mit Hilfe der ARK Library durchzuführen.
Die Datei konnte nicht ins Quarantäneverzeichnis verschoben werden!
Fehler in der ARK Library.
Die Datei wurde zum Löschen nach einem Neustart markiert.
Für die abschliessende Reparatur wird ein Neustart des Computers eingeleitet.

07.01.2015 08:08 [System-Scanner] Malware gefunden
Die Datei 'C:\Program Files
(x86)\d8ab63e2-cb9c-41d9-9a96-69f41c5fb27c\886e073d-15cb-4118-b4b8-6946586949e1.
dll'
enthielt einen Virus oder unerwünschtes Programm 'ADWARE/CrossRider.Gen4'
[adware].
Durchgeführte Aktion(en):
Die Datei wurde ins Quarantäneverzeichnis unter dem Namen '6a651108.qua'
verschoben!

07.01.2015 08:08 [System-Scanner] Malware gefunden
Die Datei 'C:\ProgramData\RobouSiaver\KhxvIlVvzyR0pN.exe'
enthielt einen Virus oder unerwünschtes Programm 'ADWARE/MultiPlug.Gen7'
[adware].
Durchgeführte Aktion(en):
Beim Versuch eine Sicherungskopie der Datei anzulegen ist ein Fehler
aufgetreten und die Datei wurde nicht gelöscht. Fehlernummer: 26003.
Die Datei konnte nicht gelöscht werden!
Es wird versucht die Aktion mit Hilfe der ARK Library durchzuführen.
Die Datei konnte nicht ins Quarantäneverzeichnis verschoben werden!
Fehler in der ARK Library.
Die Datei wurde zum Löschen nach einem Neustart markiert.
Für die abschliessende Reparatur wird ein Neustart des Computers eingeleitet.

07.01.2015 08:07 [System-Scanner] Malware gefunden
Die Datei 'C:\ProgramData\SaverExtensiOn\8N25NUrrXZ52P2.exe'
enthielt einen Virus oder unerwünschtes Programm 'ADWARE/MultiPlug.Gen7'
[adware].
Durchgeführte Aktion(en):
Beim Versuch eine Sicherungskopie der Datei anzulegen ist ein Fehler
aufgetreten und die Datei wurde nicht gelöscht. Fehlernummer: 26003.
Die Datei konnte nicht gelöscht werden!
Es wird versucht die Aktion mit Hilfe der ARK Library durchzuführen.
Die Datei konnte nicht ins Quarantäneverzeichnis verschoben werden!
Fehler in der ARK Library.
Die Datei wurde zum Löschen nach einem Neustart markiert.
Für die abschliessende Reparatur wird ein Neustart des Computers eingeleitet.

07.01.2015 08:07 [System-Scanner] Malware gefunden
Die Datei 'C:\Users\All Users\RandomPrriCCe\DFVI77nzx5mHE8.exe'
enthielt einen Virus oder unerwünschtes Programm 'ADWARE/MultiPlug.Gen7'
[adware].
Durchgeführte Aktion(en):
Beim Versuch eine Sicherungskopie der Datei anzulegen ist ein Fehler
aufgetreten und die Datei wurde nicht gelöscht. Fehlernummer: 26003.
Die Datei konnte nicht gelöscht werden!
Es wird versucht die Aktion mit Hilfe der ARK Library durchzuführen.
Die Datei konnte nicht ins Quarantäneverzeichnis verschoben werden!
Fehler in der ARK Library.
Die Datei wurde zum Löschen nach einem Neustart markiert.
Für die abschliessende Reparatur wird ein Neustart des Computers eingeleitet.

07.01.2015 08:07 [System-Scanner] Malware gefunden
Die Datei 'C:\Program Files
(x86)\CinemaP-1.9cV02.01\d187d13c-eb9d-4d47-bf31-4a5c3088774b-7.exe'
enthielt einen Virus oder unerwünschtes Programm 'ADWARE/CrossRider.Gen4'
[adware].
Durchgeführte Aktion(en):
Die Datei wurde ins Quarantäneverzeichnis unter dem Namen '181a3a66.qua'
verschoben!

07.01.2015 08:07 [System-Scanner] Suche
Suchlauf beendet [Der Suchlauf wurde vollständig durchgeführt.].
Anzahl Dateien: 1175
Anzahl Verzeichnisse: 0
Anzahl Malware: 3
Anzahl Warnungen: 0

07.01.2015 08:07 [System-Scanner] Malware gefunden
Die Datei 'C:\Program Files
(x86)\CinemaP-1.9cV02.01\d187d13c-eb9d-4d47-bf31-4a5c3088774b-4.exe'
enthielt einen Virus oder unerwünschtes Programm 'ADWARE/CrossRider.Gen4'
[adware].
Durchgeführte Aktion(en):
Die Datei wurde ins Quarantäneverzeichnis unter dem Namen '4a45608d.qua'
verschoben!

07.01.2015 08:07 [System-Scanner] Malware gefunden
Die Datei 'C:\Program Files
(x86)\CinemaP-1.9cV02.01\d187d13c-eb9d-4d47-bf31-4a5c3088774b-3.exe'
enthielt einen Virus oder unerwünschtes Programm 'Adware/CrossRider.1953768.43'
[adware].
Durchgeführte Aktion(en):
Die Datei wurde ins Quarantäneverzeichnis unter dem Namen '52d24f2b.qua'
verschoben!

07.01.2015 08:07 [System-Scanner] Malware gefunden
Die Datei 'C:\Users\All Users\RobouSiaver\KhxvIlVvzyR0pN.exe'
enthielt einen Virus oder unerwünschtes Programm 'ADWARE/MultiPlug.Gen7'
[adware].
Durchgeführte Aktion(en):
Beim Versuch eine Sicherungskopie der Datei anzulegen ist ein Fehler
aufgetreten und die Datei wurde nicht gelöscht. Fehlernummer: 26003.
Die Datei konnte nicht gelöscht werden!
Es wird versucht die Aktion mit Hilfe der ARK Library durchzuführen.
Die Datei konnte nicht ins Quarantäneverzeichnis verschoben werden!
Fehler in der ARK Library.
Die Datei wurde zum Löschen nach einem Neustart markiert.
Für die abschliessende Reparatur wird ein Neustart des Computers eingeleitet.

07.01.2015 08:07 [System-Scanner] Malware gefunden
Die Datei 'C:\Users\All Users\SaverExtensiOn\8N25NUrrXZ52P2.exe'
enthielt einen Virus oder unerwünschtes Programm 'ADWARE/MultiPlug.Gen7'
[adware].
Durchgeführte Aktion(en):
Beim Versuch eine Sicherungskopie der Datei anzulegen ist ein Fehler
aufgetreten und die Datei wurde nicht gelöscht. Fehlernummer: 26003.
Die Datei konnte nicht gelöscht werden!
Es wird versucht die Aktion mit Hilfe der ARK Library durchzuführen.
Die Datei konnte nicht ins Quarantäneverzeichnis verschoben werden!
Fehler in der ARK Library.
Die Datei wurde zum Löschen nach einem Neustart markiert.
Für die abschliessende Reparatur wird ein Neustart des Computers eingeleitet.

07.01.2015 08:06 [System-Scanner] Malware gefunden
Die Datei 'C:\Users\Daniel\AppData\Roaming\FVXLLYPI.exe'
enthielt einen Virus oder unerwünschtes Programm 'Adware/CrossRider.1953768.43'
[adware].
Durchgeführte Aktion(en):
Die Datei wurde ins Quarantäneverzeichnis unter dem Namen '420b7390.qua'
verschoben!

07.01.2015 08:06 [System-Scanner] Malware gefunden
Die Datei 'C:\Users\Daniel\AppData\Roaming\YDYXQG.exe'
enthielt einen Virus oder unerwünschtes Programm 'ADWARE/CrossRider.Gen4'
[adware].
Durchgeführte Aktion(en):
Die Datei wurde ins Quarantäneverzeichnis unter dem Namen '499d25b8.qua'
verschoben!

07.01.2015 08:06 [System-Scanner] Malware gefunden
Die Datei 'C:\Users\Daniel\AppData\Roaming\XSHNPL.exe'
enthielt einen Virus oder unerwünschtes Programm 'ADWARE/CrossRider.Gen4'
[adware].
Durchgeführte Aktion(en):
Die Datei wurde ins Quarantäneverzeichnis unter dem Namen '388b0fb8.qua'
verschoben!

07.01.2015 08:06 [System-Scanner] Malware gefunden
Die Datei 'C:\Users\Daniel\Downloads\adobe_flash_setup.exe'
enthielt einen Virus oder unerwünschtes Programm 'Adware/InstallCore.A.338'
[adware].
Durchgeführte Aktion(en):
Die Datei wurde ins Quarantäneverzeichnis unter dem Namen '38d1799d.qua'
verschoben!

07.01.2015 08:06 [System-Scanner] Malware gefunden
Die Datei 'C:\Users\Daniel\Downloads\FLVPlayer-Chrome.exe'
enthielt einen Virus oder unerwünschtes Programm 'Adware/Yontoo.76224.34'
[adware].
Durchgeführte Aktion(en):
Die Datei wurde ins Quarantäneverzeichnis unter dem Namen '51cd7b40.qua'
verschoben!

07.01.2015 08:03 [Echtzeit-Scanner] Malware gefunden
In der Datei 'C:\Program Files
(x86)\CinemaP-1.9cV02.01\CinemaP-1.9cV02.01-codedownloader.exe'
wurde ein Virus oder unerwünschtes Programm 'ADWARE/CrossRider.Gen4' [adware]
gefunden.
Ausgeführte Aktion: Zugriff verweigern

07.01.2015 08:03 [Echtzeit-Scanner] Malware gefunden
In der Datei 'C:\Program Files
(x86)\CinemaP-1.9cV02.01\d187d13c-eb9d-4d47-bf31-4a5c3088774b-5.exe'
wurde ein Virus oder unerwünschtes Programm 'ADWARE/CrossRider.Gen4' [adware]
gefunden.
Ausgeführte Aktion: Zugriff verweigern

07.01.2015 08:02 [Echtzeit-Scanner] Malware gefunden
In der Datei 'C:\Program Files
(x86)\CinemaP-1.9cV02.01\d187d13c-eb9d-4d47-bf31-4a5c3088774b-7.exe'
wurde ein Virus oder unerwünschtes Programm 'ADWARE/CrossRider.Gen4' [adware]
gefunden.
Ausgeführte Aktion: Zugriff verweigern

07.01.2015 08:02 [Echtzeit-Scanner] Malware gefunden
In der Datei 'C:\Program Files
(x86)\CinemaP-1.9cV02.01\d187d13c-eb9d-4d47-bf31-4a5c3088774b-3.exe'
wurde ein Virus oder unerwünschtes Programm 'ADWARE/CrossRider.1953768.43'
[adware] gefunden.
Ausgeführte Aktion: Zugriff verweigern

07.01.2015 08:02 [Echtzeit-Scanner] Malware gefunden
In der Datei 'C:\Program Files
(x86)\CinemaP-1.9cV02.01\d187d13c-eb9d-4d47-bf31-4a5c3088774b-4.exe'
wurde ein Virus oder unerwünschtes Programm 'ADWARE/CrossRider.Gen4' [adware]
gefunden.
Ausgeführte Aktion: Zugriff verweigern

07.01.2015 07:27 [Echtzeit-Scanner] Malware gefunden
In der Datei 'C:\Program Files
(x86)\6228cefd-9c9c-4d28-ba89-4fea4b5b07c7\3cf63721-349a-4f96-9b7b-da87ca28b1ba.
dll'
wurde ein Virus oder unerwünschtes Programm 'ADWARE/CrossRider.Gen4' [adware]
gefunden.
Ausgeführte Aktion: Zugriff verweigern

07.01.2015 07:26 [Echtzeit-Scanner] Malware gefunden
In der Datei 'C:\Program Files
(x86)\6228cefd-9c9c-4d28-ba89-4fea4b5b07c7\3cf63721-349a-4f96-9b7b-da87ca28b1ba.
dll'
wurde ein Virus oder unerwünschtes Programm 'ADWARE/CrossRider.Gen4' [adware]
gefunden.
Ausgeführte Aktion: Zugriff verweigern

06.01.2015 23:15 [Updater] Update erfolgreich durchgeführt
Update auf Computer 1906DANIEL (192.168.1.6) von "hxxp://217.89.105.217/update"
wurde erfolgreich durchgeführt.
Es sind keine neuen Engine/VDF Dateien verfügbar.

06.01.2015 23:15 [Planer] Auftrag gestartet
Auftrag "AVImmediateUpdateJobEx"
wurde erfolgreich gestartet.

06.01.2015 23:14 [System-Scanner] Suche
Suchlauf beendet [Der Suchlauf wurde vollständig durchgeführt.].
Anzahl Dateien: 2496
Anzahl Verzeichnisse: 0
Anzahl Malware: 0
Anzahl Warnungen: 0

06.01.2015 23:12 [System-Scanner] Suche
Suchlauf beendet [Der Suchlauf wurde abgebrochen!].
Anzahl Dateien: 142586
Anzahl Verzeichnisse: 3356
Anzahl Malware: 0
Anzahl Warnungen: 1

06.01.2015 23:07 [System-Scanner] Suche
Suchlauf beendet [Der Suchlauf wurde vollständig durchgeführt.].
Anzahl Dateien: 1153
Anzahl Verzeichnisse: 0
Anzahl Malware: 1
Anzahl Warnungen: 0

06.01.2015 23:07 [System-Scanner] Malware gefunden
Die Datei 'C:\Program Files
(x86)\CinemaP-1.9cV02.01\e96055be-6a8b-4f6f-8d35-36c272e291db.dll'
enthielt einen Virus oder unerwünschtes Programm 'ADWARE/CrossRider.Gen4'
[adware].
Durchgeführte Aktion(en):
Die Datei wurde ins Quarantäneverzeichnis unter dem Namen '52a7c9e9.qua'
verschoben!

06.01.2015 23:07 [Echtzeit-Scanner] Malware gefunden
In der Datei 'C:\Program Files
(x86)\CinemaP-1.9cV02.01\e96055be-6a8b-4f6f-8d35-36c272e291db.dll'
wurde ein Virus oder unerwünschtes Programm 'ADWARE/CrossRider.Gen4' [adware]
gefunden.
Ausgeführte Aktion: Zugriff verweigern

06.01.2015 23:07 [Echtzeit-Scanner] Malware gefunden
In der Datei 'C:\Program Files
(x86)\CinemaP-1.9cV02.01\e96055be-6a8b-4f6f-8d35-36c272e291db.dll'
wurde ein Virus oder unerwünschtes Programm 'ADWARE/CrossRider.Gen4' [adware]
gefunden.
Ausgeführte Aktion: Zugriff verweigern

06.01.2015 23:07 [Echtzeit-Scanner] Malware gefunden
In der Datei 'C:\Program Files
(x86)\CinemaP-1.9cV02.01\e96055be-6a8b-4f6f-8d35-36c272e291db.dll'
wurde ein Virus oder unerwünschtes Programm 'ADWARE/CrossRider.Gen4' [adware]
gefunden.
Ausgeführte Aktion: Zugriff verweigern

06.01.2015 23:07 [Echtzeit-Scanner] Malware gefunden
In der Datei 'C:\Program Files
(x86)\CinemaP-1.9cV02.01\e96055be-6a8b-4f6f-8d35-36c272e291db.dll'
wurde ein Virus oder unerwünschtes Programm 'ADWARE/CrossRider.Gen4' [adware]
gefunden.
Ausgeführte Aktion: Zugriff verweigern

06.01.2015 23:07 [Echtzeit-Scanner] Malware gefunden
In der Datei 'C:\Program Files
(x86)\CinemaP-1.9cV02.01\e96055be-6a8b-4f6f-8d35-36c272e291db.dll'
wurde ein Virus oder unerwünschtes Programm 'ADWARE/CrossRider.Gen4' [adware]
gefunden.
Ausgeführte Aktion: Zugriff verweigern

06.01.2015 23:07 [Echtzeit-Scanner] Malware gefunden
In der Datei 'C:\Program Files
(x86)\CinemaP-1.9cV02.01\e96055be-6a8b-4f6f-8d35-36c272e291db.dll'
wurde ein Virus oder unerwünschtes Programm 'ADWARE/CrossRider.Gen4' [adware]
gefunden.
Ausgeführte Aktion: Zugriff verweigern

06.01.2015 23:07 [Echtzeit-Scanner] Malware gefunden
In der Datei 'C:\Program Files
(x86)\CinemaP-1.9cV02.01\e96055be-6a8b-4f6f-8d35-36c272e291db.dll'
wurde ein Virus oder unerwünschtes Programm 'ADWARE/CrossRider.Gen4' [adware]
gefunden.
Ausgeführte Aktion: Zugriff verweigern

06.01.2015 23:07 [Echtzeit-Scanner] Malware gefunden
In der Datei 'C:\Program Files
(x86)\CinemaP-1.9cV02.01\e96055be-6a8b-4f6f-8d35-36c272e291db.dll'
wurde ein Virus oder unerwünschtes Programm 'ADWARE/CrossRider.Gen4' [adware]
gefunden.
Ausgeführte Aktion: Zugriff verweigern

06.01.2015 23:07 [Echtzeit-Scanner] Malware gefunden
In der Datei 'C:\Program Files
(x86)\CinemaP-1.9cV02.01\e96055be-6a8b-4f6f-8d35-36c272e291db.dll'
wurde ein Virus oder unerwünschtes Programm 'ADWARE/CrossRider.Gen4' [adware]
gefunden.
Ausgeführte Aktion: Zugriff verweigern

06.01.2015 23:07 [Echtzeit-Scanner] Malware gefunden
In der Datei 'C:\Program Files
(x86)\CinemaP-1.9cV02.01\e96055be-6a8b-4f6f-8d35-36c272e291db.dll'
wurde ein Virus oder unerwünschtes Programm 'ADWARE/CrossRider.Gen4' [adware]
gefunden.
Ausgeführte Aktion: Zugriff verweigern

06.01.2015 23:07 [Echtzeit-Scanner] Malware gefunden
In der Datei 'C:\Program Files
(x86)\CinemaP-1.9cV02.01\e96055be-6a8b-4f6f-8d35-36c272e291db.dll'
wurde ein Virus oder unerwünschtes Programm 'ADWARE/CrossRider.Gen4' [adware]
gefunden.
Ausgeführte Aktion: Zugriff verweigern

06.01.2015 23:07 [System-Scanner] Suche
Suchlauf beendet [Der Suchlauf wurde vollständig durchgeführt.].
Anzahl Dateien: 1159
Anzahl Verzeichnisse: 0
Anzahl Malware: 1
Anzahl Warnungen: 0

06.01.2015 23:07 [System-Scanner] Malware gefunden
Die Datei 'C:\Program Files (x86)\CinemaP-1.9cV02.01\CinemaP-1.9cV02.01-bg.exe'
enthielt einen Virus oder unerwünschtes Programm 'ADWARE/CrossRider.Gen4'
[adware].
Durchgeführte Aktion(en):
Die Datei wurde ins Quarantäneverzeichnis unter dem Namen '50bec2a6.qua'
verschoben!

06.01.2015 23:07 [Echtzeit-Scanner] Malware gefunden
In der Datei 'C:\Program Files
(x86)\CinemaP-1.9cV02.01\e96055be-6a8b-4f6f-8d35-36c272e291db.dll'
wurde ein Virus oder unerwünschtes Programm 'ADWARE/CrossRider.Gen4' [adware]
gefunden.
Ausgeführte Aktion: Zugriff verweigern

06.01.2015 23:07 [Echtzeit-Scanner] Malware gefunden
In der Datei 'C:\Program Files
(x86)\CinemaP-1.9cV02.01\CinemaP-1.9cV02.01-bg.exe'
wurde ein Virus oder unerwünschtes Programm 'ADWARE/CrossRider.Gen4' [adware]
gefunden.
Ausgeführte Aktion: Zugriff verweigern

06.01.2015 23:07 [Echtzeit-Scanner] Malware gefunden
In der Datei 'C:\Program Files
(x86)\CinemaP-1.9cV02.01\CinemaP-1.9cV02.01-bg.exe'
wurde ein Virus oder unerwünschtes Programm 'ADWARE/CrossRider.Gen4' [adware]
gefunden.
Ausgeführte Aktion: Zugriff verweigern

06.01.2015 23:07 [Echtzeit-Scanner] Malware gefunden
In der Datei 'C:\Program Files
(x86)\CinemaP-1.9cV02.01\e96055be-6a8b-4f6f-8d35-36c272e291db.dll'
wurde ein Virus oder unerwünschtes Programm 'ADWARE/CrossRider.Gen4' [adware]
gefunden.
Ausgeführte Aktion: Zugriff verweigern

06.01.2015 23:07 [Echtzeit-Scanner] Malware gefunden
In der Datei 'C:\Program Files
(x86)\CinemaP-1.9cV02.01\CinemaP-1.9cV02.01-bg.exe'
wurde ein Virus oder unerwünschtes Programm 'ADWARE/CrossRider.Gen4' [adware]
gefunden.
Ausgeführte Aktion: Zugriff verweigern

06.01.2015 23:07 [Echtzeit-Scanner] Malware gefunden
In der Datei 'C:\Program Files
(x86)\CinemaP-1.9cV02.01\e96055be-6a8b-4f6f-8d35-36c272e291db.dll'
wurde ein Virus oder unerwünschtes Programm 'ADWARE/CrossRider.Gen4' [adware]
gefunden.
Ausgeführte Aktion: Zugriff verweigern

06.01.2015 23:07 [Echtzeit-Scanner] Malware gefunden
In der Datei 'C:\Program Files
(x86)\CinemaP-1.9cV02.01\CinemaP-1.9cV02.01-bg.exe'
wurde ein Virus oder unerwünschtes Programm 'ADWARE/CrossRider.Gen4' [adware]
gefunden.
Ausgeführte Aktion: Zugriff verweigern

06.01.2015 23:07 [Echtzeit-Scanner] Malware gefunden
In der Datei 'C:\Program Files
(x86)\CinemaP-1.9cV02.01\e96055be-6a8b-4f6f-8d35-36c272e291db.dll'
wurde ein Virus oder unerwünschtes Programm 'ADWARE/CrossRider.Gen4' [adware]
gefunden.
Ausgeführte Aktion: Zugriff verweigern

06.01.2015 23:07 [Echtzeit-Scanner] Malware gefunden
In der Datei 'C:\Program Files
(x86)\CinemaP-1.9cV02.01\CinemaP-1.9cV02.01-bg.exe'
wurde ein Virus oder unerwünschtes Programm 'ADWARE/CrossRider.Gen4' [adware]
gefunden.
Ausgeführte Aktion: Zugriff verweigern

06.01.2015 23:07 [Echtzeit-Scanner] Malware gefunden
In der Datei 'C:\Program Files
(x86)\CinemaP-1.9cV02.01\CinemaP-1.9cV02.01-bg.exe'
wurde ein Virus oder unerwünschtes Programm 'ADWARE/CrossRider.Gen4' [adware]
gefunden.
Ausgeführte Aktion: Zugriff verweigern

06.01.2015 23:07 [Echtzeit-Scanner] Malware gefunden
In der Datei 'C:\Program Files
(x86)\CinemaP-1.9cV02.01\CinemaP-1.9cV02.01-bg.exe'
wurde ein Virus oder unerwünschtes Programm 'ADWARE/CrossRider.Gen4' [adware]
gefunden.
Ausgeführte Aktion: Zugriff verweigern

06.01.2015 23:06 [Echtzeit-Scanner] Malware gefunden
In der Datei 'C:\Program Files
(x86)\CinemaP-1.9cV02.01\CinemaP-1.9cV02.01-bg.exe'
wurde ein Virus oder unerwünschtes Programm 'ADWARE/CrossRider.Gen4' [adware]
gefunden.
Ausgeführte Aktion: Zugriff verweigern

06.01.2015 23:05 [Planer] Auftrag gestartet
Auftrag "ReSystemScan"
wurde erfolgreich gestartet.

06.01.2015 23:03 [System-Scanner] Malware gefunden
Die Datei 'C:\Users\Daniel\AppData\Roaming\KYBEFZU.exe'
enthielt einen Virus oder unerwünschtes Programm 'ADWARE/CrossRider.Gen4'
[adware].
Durchgeführte Aktion(en):
Die Datei wurde ins Quarantäneverzeichnis unter dem Namen '1b51ba1b.qua'
verschoben!

06.01.2015 23:03 [System-Scanner] Suche
Suchlauf beendet [Der Suchlauf wurde vollständig durchgeführt.].
Anzahl Dateien: 2840
Anzahl Verzeichnisse: 0
Anzahl Malware: 2
Anzahl Warnungen: 0

06.01.2015 23:02 [Echtzeit-Scanner] Malware gefunden
In der Datei 'C:\Users\Daniel\AppData\Roaming\KYBEFZU.exe'
wurde ein Virus oder unerwünschtes Programm 'ADWARE/CrossRider.Gen4' [adware]
gefunden.
Ausgeführte Aktion: Zugriff verweigern

06.01.2015 23:01 [Echtzeit-Scanner] Dienst gestartet
Der Dienst wurde gestartet.
Dienst Version: 14.0.7.462
Engine Version:
VDF Version:

06.01.2015 23:01 [Hilfsdienst] Dienst gestartet
Der Dienst wurde gestartet.
Dienst Version: 14.0.7.462
Engine Version: 8.3.28.4
VDF Version: 8.11.199.198

06.01.2015 23:00 [Planer] Dienst gestartet
Der Dienst wurde gestartet.
Dienst Version 14.0.7.462

06.01.2015 22:59 [Planer] Dienst gestoppt
Der Dienst wurde gestoppt.

06.01.2015 22:59 [Echtzeit-Scanner] Dienst gestoppt
Der Dienst wurde gestoppt.

06.01.2015 22:59 [System-Scanner] Suche
Suchlauf beendet [Der Suchlauf wurde vollständig durchgeführt.].
Anzahl Dateien: 3217
Anzahl Verzeichnisse: 0
Anzahl Malware: 13
Anzahl Warnungen: 3

06.01.2015 22:59 [System-Scanner] Suche
Suchlauf beendet [Der Suchlauf wurde vollständig durchgeführt.].
Anzahl Dateien: 2733
Anzahl Verzeichnisse: 0
Anzahl Malware: 4
Anzahl Warnungen: 2

06.01.2015 22:58 [System-Scanner] Malware gefunden
Die Datei 'C:\Program Files (x86)\TheHDvid-Codec V10\TheHDvid-Codec V10-bho.dll'
enthielt einen Virus oder unerwünschtes Programm 'ADWARE/CrossRider.Gen'
[adware].
Durchgeführte Aktion(en):
Beim Versuch eine Sicherungskopie der Datei anzulegen ist ein Fehler
aufgetreten und die Datei wurde nicht gelöscht. Fehlernummer: 26004.
Die Quelldatei konnte nicht gefunden werden.
Es wird versucht die Aktion mit Hilfe der ARK Library durchzuführen.
Die Datei konnte nicht ins Quarantäneverzeichnis verschoben werden!
Fehler in der ARK Library.
Die Datei wurde zum Löschen nach einem Neustart markiert.
Für die abschliessende Reparatur wird ein Neustart des Computers eingeleitet.

06.01.2015 22:58 [System-Scanner] Malware gefunden
Die Datei 'C:\Program Files (x86)\CinemaP-1.9cV02.01\CinemaP-1.9cV02.01-bho.dll'
enthielt einen Virus oder unerwünschtes Programm 'ADWARE/CrossRider.Gen'
[adware].
Durchgeführte Aktion(en):
Beim Versuch eine Sicherungskopie der Datei anzulegen ist ein Fehler
aufgetreten und die Datei wurde nicht gelöscht. Fehlernummer: 26004.
Die Quelldatei konnte nicht gefunden werden.
Es wird versucht die Aktion mit Hilfe der ARK Library durchzuführen.
Die Datei konnte nicht ins Quarantäneverzeichnis verschoben werden!
Die Datei existiert nicht!

06.01.2015 22:58 [System-Scanner] Malware gefunden
Die Datei 'C:\Program Files (x86)\Unisales\JBGgrV4x87VoTw.dll'
enthielt einen Virus oder unerwünschtes Programm 'ADWARE/MultiPlug.Gen'
[adware].
Durchgeführte Aktion(en):
Die Datei wurde ins Quarantäneverzeichnis unter dem Namen '0c79b5f5.qua'
verschoben!
Der Registrierungseintrag
<HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser
Helper Objects\{320d5d8e-64be-4f8f-8ce6-d7e4ff769664}> wurde erfolgreich
repariert.

06.01.2015 22:58 [System-Scanner] Malware gefunden
Die Datei 'C:\Program Files (x86)\Unisales\JBGgrV4x87VoTw.dll'
enthielt einen Virus oder unerwünschtes Programm 'ADWARE/MultiPlug.Gen'
[adware].
Durchgeführte Aktion(en):
Beim Versuch eine Sicherungskopie der Datei anzulegen ist ein Fehler
aufgetreten und die Datei wurde nicht gelöscht. Fehlernummer: 26004.
Die Quelldatei konnte nicht gefunden werden.
Es wird versucht die Aktion mit Hilfe der ARK Library durchzuführen.
Die Datei konnte nicht ins Quarantäneverzeichnis verschoben werden!
Die Datei existiert nicht!

06.01.2015 22:58 [System-Scanner] Malware gefunden
Die Datei 'C:\Program Files (x86)\YouettubeAAdBillocke\aGCYgceSTwf8Tt.dll'
enthielt einen Virus oder unerwünschtes Programm 'ADWARE/MultiPlug.Gen'
[adware].
Durchgeführte Aktion(en):
Die Datei wurde ins Quarantäneverzeichnis unter dem Namen '1555f4d0.qua'
verschoben!

06.01.2015 22:58 [System-Scanner] Malware gefunden
Die Datei 'C:\Program Files (x86)\OptuOn\aqM4wnu6spS1bo.dll'
enthielt einen Virus oder unerwünschtes Programm 'ADWARE/MultiPlug.Gen'
[adware].
Durchgeführte Aktion(en):
Die Datei wurde ins Quarantäneverzeichnis unter dem Namen '506a8dc8.qua'
verschoben!

06.01.2015 22:58 [System-Scanner] Malware gefunden
Die Datei 'C:\ProgramData\RobouSiaver\KhxvIlVvzyR0pN.dll'
enthielt einen Virus oder unerwünschtes Programm 'TR/Agent.566272.136' [trojan].
Durchgeführte Aktion(en):
Die Datei wurde ins Quarantäneverzeichnis unter dem Namen '5fadbd34.qua'
verschoben!

06.01.2015 22:58 [System-Scanner] Malware gefunden
Die Datei 'C:\Program Files (x86)\unisAlEEs\Rw7MFLY6o6Pr0x.dll'
enthielt einen Virus oder unerwünschtes Programm 'ADWARE/MultiPlug.Gen'
[adware].
Durchgeführte Aktion(en):
Die Datei wurde ins Quarantäneverzeichnis unter dem Namen '1c52f02b.qua'
verschoben!

06.01.2015 22:58 [System-Scanner] Malware gefunden
Die Datei 'C:\ProgramData\SaverExtensiOn\8N25NUrrXZ52P2.dll'
enthielt einen Virus oder unerwünschtes Programm 'ADWARE/MultiPlug.Gen'
[adware].
Durchgeführte Aktion(en):
Die Datei wurde ins Quarantäneverzeichnis unter dem Namen '2fee84c7.qua'
verschoben!

06.01.2015 22:58 [System-Scanner] Malware gefunden
Die Datei 'C:\Program Files (x86)\TheHDvid-Codec V10\TheHDvid-Codec
V10-bho64.dll'
enthielt einen Virus oder unerwünschtes Programm 'ADWARE/CrossRider.Gen'
[adware].
Durchgeführte Aktion(en):
Beim Versuch eine Sicherungskopie der Datei anzulegen ist ein Fehler
aufgetreten und die Datei wurde nicht gelöscht. Fehlernummer: 26004.
Die Quelldatei konnte nicht gefunden werden.
Es wird versucht die Aktion mit Hilfe der ARK Library durchzuführen.
Die Datei konnte nicht ins Quarantäneverzeichnis verschoben werden!
Fehler in der ARK Library.
Die Datei wurde zum Löschen nach einem Neustart markiert.
Für die abschliessende Reparatur wird ein Neustart des Computers eingeleitet.

06.01.2015 22:58 [System-Scanner] Malware gefunden
Die Datei 'C:\Program Files (x86)\CinemaP-1.9cV02.01\CinemaP-1.9cV02.01-bho.dll'
enthielt einen Virus oder unerwünschtes Programm 'ADWARE/CrossRider.Gen'
[adware].
Durchgeführte Aktion(en):
Die Datei wurde ins Quarantäneverzeichnis unter dem Namen '43cbc6fe.qua'
verschoben!
Der Registrierungseintrag
<HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser
Helper Objects\{11111111-1111-1111-1111-110611901165}> wurde erfolgreich
repariert.

06.01.2015 22:58 [System-Scanner] Malware gefunden
Die Datei 'C:\Program Files
(x86)\CinemaP-1.9cV02.01\CinemaP-1.9cV02.01-bho64.dll'
enthielt einen Virus oder unerwünschtes Programm 'ADWARE/CrossRider.Gen'
[adware].
Durchgeführte Aktion(en):
Die Datei wurde ins Quarantäneverzeichnis unter dem Namen '0a5cfc1e.qua'
verschoben!

06.01.2015 22:57 [System-Scanner] Malware gefunden
Die Datei 'c:\Program Files (x86)\DeltaFix\DeltaFix.dll'
enthielt einen Virus oder unerwünschtes Programm 'ADWARE/MultiPlug.Gen4'
[adware].
Durchgeführte Aktion(en):
Beim Versuch eine Sicherungskopie der Datei anzulegen ist ein Fehler
aufgetreten und die Datei wurde nicht gelöscht. Fehlernummer: 26004.
Die Quelldatei konnte nicht gefunden werden.
Es wird versucht die Aktion mit Hilfe der ARK Library durchzuführen.
Die Datei konnte nicht ins Quarantäneverzeichnis verschoben werden!
Die Datei existiert nicht!

06.01.2015 22:57 [System-Scanner] Malware gefunden
Die Datei 'C:\Program Files (x86)\FLVPlayer\FLVPlayer.exe'
enthielt einen Virus oder unerwünschtes Programm 'Adware/Yontoo.389888'
[adware].
Durchgeführte Aktion(en):
Beim Versuch eine Sicherungskopie der Datei anzulegen ist ein Fehler
aufgetreten und die Datei wurde nicht gelöscht. Fehlernummer: 26004.
Die Quelldatei konnte nicht gefunden werden.
Es wird versucht die Aktion mit Hilfe der ARK Library durchzuführen.
Die Datei konnte nicht ins Quarantäneverzeichnis verschoben werden!
Fehler in der ARK Library.
Die Datei wurde zum Löschen nach einem Neustart markiert.
Für die abschliessende Reparatur wird ein Neustart des Computers eingeleitet.

06.01.2015 22:57 [System-Scanner] Malware gefunden
Die Datei 'C:\Program Files (x86)\TheHDvid-Codec V10\TheHDvid-Codec V10-bho.dll'
enthielt einen Virus oder unerwünschtes Programm 'ADWARE/CrossRider.Gen'
[adware].
Durchgeführte Aktion(en):
Beim Versuch eine Sicherungskopie der Datei anzulegen ist ein Fehler
aufgetreten und die Datei wurde nicht gelöscht. Fehlernummer: 26004.
Die Quelldatei konnte nicht gefunden werden.
Es wird versucht die Aktion mit Hilfe der ARK Library durchzuführen.
Die Datei konnte nicht ins Quarantäneverzeichnis verschoben werden!
Fehler in der ARK Library.
Der Registrierungseintrag
<HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser
Helper Objects\{11111111-1111-1111-1111-110611331115}> wurde erfolgreich
repariert.

06.01.2015 22:56 [Echtzeit-Scanner] Malware gefunden
In der Datei 'C:\Program Files (x86)\OptuOn\aqM4wnu6spS1bo.dll'
wurde ein Virus oder unerwünschtes Programm 'ADWARE/MultiPlug.Gen' [adware]
gefunden.
Ausgeführte Aktion: Zugriff verweigern

06.01.2015 22:56 [Echtzeit-Scanner] Malware gefunden
In der Datei 'C:\ProgramData\RobouSiaver\KhxvIlVvzyR0pN.dll'
wurde ein Virus oder unerwünschtes Programm 'TR/Agent.566272.136' [trojan]
gefunden.
Ausgeführte Aktion: Zugriff verweigern

06.01.2015 22:56 [Echtzeit-Scanner] Malware gefunden
In der Datei 'C:\ProgramData\SaverExtensiOn\8N25NUrrXZ52P2.dll'
wurde ein Virus oder unerwünschtes Programm 'ADWARE/MultiPlug.Gen' [adware]
gefunden.
Ausgeführte Aktion: Zugriff verweigern

06.01.2015 22:56 [Echtzeit-Scanner] Malware gefunden
In der Datei 'C:\Program Files
(x86)\CinemaP-1.9cV02.01\CinemaP-1.9cV02.01-bho.dll'
wurde ein Virus oder unerwünschtes Programm 'ADWARE/CrossRider.Gen' [adware]
gefunden.
Ausgeführte Aktion: Zugriff verweigern

06.01.2015 22:56 [Echtzeit-Scanner] Malware gefunden
In der Datei 'C:\Program Files (x86)\TheHDvid-Codec V10\TheHDvid-Codec
V10-bho.dll'
wurde ein Virus oder unerwünschtes Programm 'ADWARE/CrossRider.Gen' [adware]
gefunden.
Ausgeführte Aktion: Zugriff verweigern

06.01.2015 22:56 [Echtzeit-Scanner] Malware gefunden
In der Datei 'C:\Program Files (x86)\Unisales\JBGgrV4x87VoTw.dll'
wurde ein Virus oder unerwünschtes Programm 'ADWARE/MultiPlug.Gen' [adware]
gefunden.
Ausgeführte Aktion: Zugriff verweigern

06.01.2015 22:56 [Echtzeit-Scanner] Malware gefunden
In der Datei 'C:\Program Files (x86)\YouettubeAAdBillocke\aGCYgceSTwf8Tt.dll'
wurde ein Virus oder unerwünschtes Programm 'ADWARE/MultiPlug.Gen' [adware]
gefunden.
Ausgeführte Aktion: Zugriff verweigern

06.01.2015 22:56 [Echtzeit-Scanner] Malware gefunden
In der Datei 'C:\Program Files (x86)\unisAlEEs\Rw7MFLY6o6Pr0x.dll'
wurde ein Virus oder unerwünschtes Programm 'ADWARE/MultiPlug.Gen' [adware]
gefunden.
Ausgeführte Aktion: Zugriff verweigern

06.01.2015 22:55 [Planer] Auftrag gestartet
Auftrag "scan_after_installation"
wurde erfolgreich gestartet.

06.01.2015 22:55 [Updater] Update erfolgreich durchgeführt
Update von Avira Free Antivirus auf Computer 1906DANIEL (192.168.1.6)
erfolgreich durchgeführt.
Folgende Dateien wurden von "hxxp://62.154.232.9/update" aktualisiert:
aecore.dll 8.3.4.0
aegen.dll 8.1.7.40
aeheur.dll 8.1.4.1454
aeoffice.dll 8.3.1.8
aepack.dll 8.4.0.56
aescript.dll 8.2.2.40
aeexp.dll 8.4.2.48
aeset.dat 8.3.28.4
aedroid.dll 8.4.3.6
aemobile.dll 8.1.2.0
avnetflt.sys 14.0.7.248
avlode.rdf 14.0.4.54
aevdf.dat 8.11.199.198
xbv00012.vdf 8.11.190.32
xbv00042.vdf 8.11.190.56
xbv00043.vdf 8.11.192.58
xbv00044.vdf 8.11.192.86
xbv00045.vdf 8.11.192.110
xbv00046.vdf 8.11.192.134
xbv00047.vdf 8.11.192.138
xbv00048.vdf 8.11.192.140
xbv00049.vdf 8.11.192.144
xbv00050.vdf 8.11.192.146
xbv00051.vdf 8.11.192.148
xbv00052.vdf 8.11.192.152
xbv00053.vdf 8.11.192.154
xbv00054.vdf 8.11.192.158
xbv00055.vdf 8.11.192.160
xbv00056.vdf 8.11.192.162
xbv00057.vdf 8.11.192.166
xbv00058.vdf 8.11.192.168
xbv00059.vdf 8.11.192.172
xbv00060.vdf 8.11.192.236
xbv00061.vdf 8.11.192.238
xbv00062.vdf 8.11.193.22
xbv00063.vdf 8.11.193.42
xbv00064.vdf 8.11.193.66
xbv00065.vdf 8.11.193.68
xbv00066.vdf 8.11.193.70
xbv00067.vdf 8.11.193.76
xbv00068.vdf 8.11.193.78
xbv00069.vdf 8.11.193.98
xbv00070.vdf 8.11.193.118
xbv00071.vdf 8.11.193.138
xbv00072.vdf 8.11.193.158
xbv00073.vdf 8.11.193.160
xbv00074.vdf 8.11.193.162
xbv00075.vdf 8.11.193.168
xbv00076.vdf 8.11.193.170
xbv00077.vdf 8.11.193.172
xbv00078.vdf 8.11.193.174
xbv00079.vdf 8.11.193.176
xbv00080.vdf 8.11.193.180
xbv00081.vdf 8.11.193.184
xbv00082.vdf 8.11.193.188
xbv00083.vdf 8.11.193.190
xbv00084.vdf 8.11.193.192
xbv00085.vdf 8.11.193.194
xbv00086.vdf 8.11.193.196
xbv00087.vdf 8.11.193.198
xbv00088.vdf 8.11.193.202
xbv00089.vdf 8.11.193.208
xbv00090.vdf 8.11.197.100
xbv00091.vdf 8.11.197.116
xbv00092.vdf 8.11.197.134
xbv00093.vdf 8.11.197.152
xbv00094.vdf 8.11.197.154
xbv00095.vdf 8.11.197.156
xbv00096.vdf 8.11.197.158
xbv00097.vdf 8.11.197.160
xbv00098.vdf 8.11.197.162
xbv00099.vdf 8.11.197.164
xbv00100.vdf 8.11.197.166
xbv00101.vdf 8.11.197.170
xbv00102.vdf 8.11.197.172
xbv00103.vdf 8.11.197.174
xbv00104.vdf 8.11.197.190
xbv00105.vdf 8.11.197.204
xbv00106.vdf 8.11.197.218
xbv00107.vdf 8.11.197.232
xbv00108.vdf 8.11.197.248
xbv00109.vdf 8.11.198.6
xbv00110.vdf 8.11.198.20
xbv00111.vdf 8.11.198.36
xbv00112.vdf 8.11.198.38
xbv00113.vdf 8.11.198.40
xbv00114.vdf 8.11.198.54
xbv00115.vdf 8.11.198.56
xbv00116.vdf 8.11.198.70
xbv00117.vdf 8.11.198.88
xbv00118.vdf 8.11.198.100
xbv00119.vdf 8.11.198.112
xbv00120.vdf 8.11.198.114
xbv00121.vdf 8.11.198.126
xbv00122.vdf 8.11.198.138
xbv00123.vdf 8.11.198.150
xbv00124.vdf 8.11.198.162
xbv00125.vdf 8.11.198.176
xbv00126.vdf 8.11.198.178
xbv00127.vdf 8.11.198.180
xbv00128.vdf 8.11.198.182
xbv00129.vdf 8.11.198.184
xbv00130.vdf 8.11.198.186
xbv00131.vdf 8.11.198.188
xbv00132.vdf 8.11.198.192
xbv00133.vdf 8.11.198.194
xbv00134.vdf 8.11.198.198
xbv00135.vdf 8.11.198.210
xbv00136.vdf 8.11.198.220
xbv00137.vdf 8.11.198.230
xbv00138.vdf 8.11.198.240
xbv00139.vdf 8.11.198.242
xbv00140.vdf 8.11.198.252
xbv00141.vdf 8.11.199.6
xbv00142.vdf 8.11.199.16
xbv00143.vdf 8.11.199.28
xbv00144.vdf 8.11.199.38
xbv00145.vdf 8.11.199.40
xbv00146.vdf 8.11.199.42
xbv00147.vdf 8.11.199.44
xbv00148.vdf 8.11.199.46
xbv00149.vdf 8.11.199.48
xbv00150.vdf 8.11.199.58
xbv00151.vdf 8.11.199.66
xbv00152.vdf 8.11.199.74
xbv00153.vdf 8.11.199.82
xbv00154.vdf 8.11.199.90
xbv00155.vdf 8.11.199.92
xbv00156.vdf 8.11.199.94
xbv00157.vdf 8.11.199.102
xbv00158.vdf 8.11.199.110
xbv00159.vdf 8.11.199.118
xbv00160.vdf 8.11.199.126
xbv00161.vdf 8.11.199.128
xbv00162.vdf 8.11.199.130
xbv00163.vdf 8.11.199.132
xbv00164.vdf 8.11.199.134
xbv00165.vdf 8.11.199.136
xbv00166.vdf 8.11.199.138
xbv00167.vdf 8.11.199.142
xbv00168.vdf 8.11.199.144
xbv00169.vdf 8.11.199.146
xbv00170.vdf 8.11.199.148
xbv00171.vdf 8.11.199.158
xbv00172.vdf 8.11.199.164
xbv00173.vdf 8.11.199.172
xbv00174.vdf 8.11.199.178
xbv00175.vdf 8.11.199.180
xbv00176.vdf 8.11.199.182
xbv00177.vdf 8.11.199.184
xbv00178.vdf 8.11.199.186
xbv00179.vdf 8.11.199.188
xbv00180.vdf 8.11.199.192
xbv00181.vdf 8.11.199.196
xbv00182.vdf 8.11.199.198
xbv00183.vdf 8.11.197.100
xbv00184.vdf 8.11.197.100
xbv00185.vdf 8.11.197.100
xbv00186.vdf 8.11.197.100
xbv00187.vdf 8.11.197.100
xbv00188.vdf 8.11.197.100
xbv00189.vdf 8.11.197.100
xbv00190.vdf 8.11.197.100
xbv00191.vdf 8.11.197.100
xbv00192.vdf 8.11.197.100
xbv00193.vdf 8.11.197.100
xbv00194.vdf 8.11.197.100
xbv00195.vdf 8.11.197.100
xbv00196.vdf 8.11.197.100
xbv00197.vdf 8.11.197.100
xbv00198.vdf 8.11.197.100
xbv00199.vdf 8.11.197.100
xbv00200.vdf 8.11.197.100
xbv00201.vdf 8.11.197.100
xbv00202.vdf 8.11.197.100
xbv00203.vdf 8.11.197.100
xbv00204.vdf 8.11.197.100
xbv00205.vdf 8.11.197.100
xbv00206.vdf 8.11.197.100
xbv00207.vdf 8.11.197.100
xbv00208.vdf 8.11.197.100
xbv00209.vdf 8.11.197.100
xbv00210.vdf 8.11.197.100
xbv00211.vdf 8.11.197.100
xbv00212.vdf 8.11.197.100
xbv00213.vdf 8.11.197.100
xbv00214.vdf 8.11.197.100
xbv00215.vdf 8.11.197.100
xbv00216.vdf 8.11.197.100
xbv00217.vdf 8.11.197.100
xbv00218.vdf 8.11.197.100
xbv00219.vdf 8.11.197.100
xbv00220.vdf 8.11.197.100
xbv00221.vdf 8.11.197.100
xbv00222.vdf 8.11.197.100
xbv00223.vdf 8.11.197.100
xbv00224.vdf 8.11.197.100
xbv00225.vdf 8.11.197.100
xbv00226.vdf 8.11.197.100
xbv00227.vdf 8.11.197.100
xbv00228.vdf 8.11.197.100
xbv00229.vdf 8.11.197.100
xbv00230.vdf 8.11.197.100
xbv00231.vdf 8.11.197.100
xbv00232.vdf 8.11.197.100
xbv00233.vdf 8.11.197.100
xbv00234.vdf 8.11.197.100
xbv00235.vdf 8.11.197.100
xbv00236.vdf 8.11.197.100
xbv00237.vdf 8.11.197.100
xbv00238.vdf 8.11.197.100
xbv00239.vdf 8.11.197.100
xbv00240.vdf 8.11.197.100
xbv00241.vdf 8.11.197.100
xbv00242.vdf 8.11.197.100
xbv00243.vdf 8.11.197.100
xbv00244.vdf 8.11.197.100
xbv00245.vdf 8.11.197.100
xbv00246.vdf 8.11.197.100
xbv00247.vdf 8.11.197.100
xbv00248.vdf 8.11.197.100
xbv00249.vdf 8.11.197.100
xbv00250.vdf 8.11.197.100
xbv00251.vdf 8.11.197.100
xbv00252.vdf 8.11.197.100
xbv00253.vdf 8.11.197.100
xbv00254.vdf 8.11.197.100
xbv00255.vdf 8.11.197.100
local000.vdf
webcat0.dat
webcat1.dat
webcat2.dat
webcat3.dat
webcat4.dat
repair.rdf 1.0.3.56

06.01.2015 22:53 [Planer] Auftrag gestartet
Auftrag "update_after_installation"
wurde erfolgreich gestartet.

06.01.2015 22:53 [Planer] Dienst gestartet
Der Dienst wurde gestartet.
Dienst Version 14.0.7.462

06.01.2015 22:53 [Echtzeit-Scanner] Dienst gestartet
Der Dienst wurde gestartet.
Dienst Version: 14.0.7.462
Engine Version:
VDF Version:

06.01.2015 22:53 [Hilfsdienst] Dienst gestartet
Der Dienst wurde gestartet.
Dienst Version: 14.0.7.462
Engine Version: 8.3.26.16
VDF Version: 8.11.187.50

Wie in eurer Anleitung geschrieben wollte ich den defogger herunterladen aber jedesmal springt der Windows Explorer auf eine Werbeseite.

Ich hoffe ihr könnt mit meiner Beschreibung des Problems etwas anfangen und könnt mir bei der Behebung helfen, denn ich hab absolut keine Ahnung von sowas.

Vielen Dank !

schrauber · 07.01.2015, 18:43

Hi,

Firefox oder Chrome installiert?
Dann darüber die Tools laden. Ansonsten Tabs schliessen und versuchen zu laden.

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:

FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

Starte jetzt FRST.
Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

So funktioniert es:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR, 7Z-Archive zu packen erschwert mir massiv die Arbeit, es sei denn natürlich die Datei wäre ansonsten zu gross für das Forum. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:

Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.

Friedrich290 · 07.01.2015, 20:01

Ich habe den Windows Internetexplorer und den Mozilla Firefox bei beiden wechselt ständig die Seite und gibt ständig Werbung. Den
"ADDITION" muß noch gesendet werden, aber das Posten mit Code-Tags klappt nicht so richtig. Der Fehler sind zu viele Zeichen erschein.

Teil 1

FRST Logfile:

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 07-01-2015
Ran by Daniel (administrator) on 1906DANIEL on 07-01-2015 19:41:46
Running from C:\Users\Daniel\AppData\Local\Microsoft\Windows\INetCache\IE\VOJP8WLO
Loaded Profiles: UpdatusUser & Daniel (Available profiles: UpdatusUser & Daniel)
Platform: Windows 8.1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11 (Default browser: IE)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(APN LLC.) C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe
(Windows (R) Win 7 DDK provider) C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\AdminService.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-UpdaterService.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\AOP Framework\CCDMonitorService.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Launch Manager\LMSvc.exe
(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
() C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-Service.exe
(Client Connect LTD) C:\Program Files (x86)\SearchProtect\Main\bin\CltMngSvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe
(BlueStack Systems) C:\Program Files (x86)\BlueStacks\HD-Network.exe
(BlueStack Systems) C:\Program Files (x86)\BlueStacks\HD-BlockDevice.exe
(BlueStack Systems) C:\Program Files (x86)\BlueStacks\HD-SharedFolder.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Quick Access\QASvc.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Acer Cloud Technology) C:\Program Files (x86)\Acer\AOP Framework\acer\ccd.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Quick Access\RMSvc.exe
(WildTangent) C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
(Microsoft Corporation) C:\Windows\System32\WWAHost.exe
(acer) C:\Program Files\Acer\User Experience Improvement Program\Framework\UBTService.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(TODO: <Company name>) C:\Program Files\Acer\User Experience Improvement Program\Plugin\AppMonitor\AppMonitorPlugIn.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13672304 2014-03-18] (Realtek Semiconductor)
HKLM-x32\...\Run: [BacKGround Agent] => C:\Program Files (x86)\Acer\AOP Framework\BackgroundAgent.exe [62208 2014-11-17] (Acer Incorporated)
HKLM-x32\...\Run: [abDocsDllLoader] => C:\Program Files (x86)\Acer\abDocs\abDocsDllLoader.exe [90368 2014-11-20] ()
HKLM-x32\...\Run: [BlueStacks Agent] => C:\Program Files (x86)\BlueStacks\HD-Agent.exe [843480 2014-10-08] (BlueStack Systems, Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [507776 2014-10-07] (Oracle Corporation)
HKLM-x32\...\Run: [ApnTBMon] => C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe [2039192 2014-11-24] (APN)
HKLM-x32\...\Run: [Avira Systray] => C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe [126200 2014-11-20] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [702768 2014-11-24] (Avira Operations GmbH & Co. KG)
HKLM\...\Policies\Explorer\Run: [BtvStack] => C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtvStack.exe [134784 2014-02-25] ( (Atheros Communications))
HKU\S-1-5-21-223822767-1807346583-171944255-1001\...\Run: [Pokki] => C:\Windows\system32\rundll32.exe "%LOCALAPPDATA%\Pokki\Engine\Launcher.dll",RunLaunchPlatform
HKU\S-1-5-21-223822767-1807346583-171944255-1001\...\RunOnce: [RegDXVA1] => C:\Windows\system32\cmd.exe /c reg import "C:\Program Files (x86)\Acer\abPhoto\SwitchUserVideoKey.reg"
HKU\S-1-5-21-223822767-1807346583-171944255-1001\...\RunOnce: [SetAsDefault] => C:\Program Files (x86)\Acer\Acer Video Player\SwitchUserVideoKey.bat
HKU\S-1-5-21-223822767-1807346583-171944255-1002\...\Run: [Pokki] => "%LOCALAPPDATA%\Pokki\Engine\HostAppServiceUpdater.exe" /LOGON
HKU\S-1-5-21-223822767-1807346583-171944255-1002\...\Run: [Steam] => C:\Program Files (x86)\Steam\Steam.exe [1940160 2014-11-18] (Valve Corporation)
HKU\S-1-5-21-223822767-1807346583-171944255-1002\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [7394584 2014-12-12] (Piriform Ltd)
HKU\S-1-5-21-223822767-1807346583-171944255-1002\...\Run: [se] => C:\Users\Daniel\AppData\Roaming\SkypEmoticons\SE.exe [5679008 2014-12-26] (SkypEmoticons)
HKU\S-1-5-21-223822767-1807346583-171944255-1002\...\RunOnce: [Application Restart #0] => C:\Users\Daniel\AppData\Local\Pokki\Engine\HostAppService.exe [7843656 2015-01-01] (Pokki)
AppInit_DLLs: C:\PROGRA~2\SEARCH~1\SEARCH~1\bin\VC64LO~1.DLL => C:\Program Files (x86)\SearchProtect\SearchProtect\bin\VC64Loader.dll [245056 2014-12-24] (Client Connect LTD)
AppInit_DLLs-x32: C:\PROGRA~2\SearchProtect\SearchProtect\bin\VC32Loader.dll => C:\Program Files (x86)\SearchProtect\SearchProtect\bin\VC32Loader.dll [215360 2014-12-24] (Client Connect LTD)
ShellIconOverlayIdentifiers: [ACloudSyncedRF] -> {5CCE71FA-9F61-4F24-9CD1-98D819B40D68} => C:\Program Files (x86)\Acer\Acer Portal\x64\shellext_win.dll (Acer Incorporated)
ShellIconOverlayIdentifiers: [ACloudSyncedSF] -> {5D5F18B7-D59B-4B18-A3E9-0A4BDCCCB699} => C:\Program Files (x86)\Acer\Acer Portal\x64\shellext_win.dll (Acer Incorporated)
ShellIconOverlayIdentifiers: [ACloudSyncing] -> {C1E1456F-C2D8-4C96-870D-35F1E13941EE} => C:\Program Files (x86)\Acer\Acer Portal\x64\shellext_win.dll (Acer Incorporated)
ShellIconOverlayIdentifiers: [ACloudToBeSynced] -> {307523FA-DDC0-4068-983F-2A6B34627744} => C:\Program Files (x86)\Acer\Acer Portal\x64\shellext_win.dll (Acer Incorporated)
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = about:blank
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-223822767-1807346583-171944255-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/?pc=MSE1
HKU\S-1-5-21-223822767-1807346583-171944255-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://acer13.msn.com/?pc=ACJB
HKU\S-1-5-21-223822767-1807346583-171944255-1001\Software\Microsoft\Internet Explorer\Main,First Home Page = hxxp://go.microsoft.com/fwlink/?LinkID=226786&Mkt=de-DE&Src=WD8&Tid=00032955&OHP=about%3Ablank&OSP=
HKU\S-1-5-21-223822767-1807346583-171944255-1002\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe hxxp://isearch.omiga-plus.com/?type=sc&ts=1420203667&from=ild&uid=WDCXWD10JPVX-22JC3T0_WD-WX41E44ASND6ASND6
SearchScopes: HKLM -> DefaultScope {80c554b9-c7f8-4a21-9471-06d606da78a2} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1
SearchScopes: HKLM -> {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = 
SearchScopes: HKLM -> {80c554b9-c7f8-4a21-9471-06d606da78a2} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1
SearchScopes: HKLM -> {AA9A4890-4262-4441-8977-E2FFCBFB706C} URL = hxxp://de.yhs4.search.yahoo.com/yhs/search?hspart=acer&hsimp=yhs-acer_001&p={searchTerms}
SearchScopes: HKLM-x32 -> DefaultScope {80c554b9-c7f8-4a21-9471-06d606da78a2} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1
SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM-x32 -> {80c554b9-c7f8-4a21-9471-06d606da78a2} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1
SearchScopes: HKLM-x32 -> {AA9A4890-4262-4441-8977-E2FFCBFB706C} URL = hxxp://de.yhs4.search.yahoo.com/yhs/search?hspart=acer&hsimp=yhs-acer_001&p={searchTerms}
SearchScopes: HKLM-x32 -> {BB74DE59-BC4C-4172-9AC4-73315F71CFFE} URL = hxxp://websearch.searchoholic.info/?l=1&q={searchTerms}&pid=3458&r=2014/12/26&hid=4055500976521261347&lg=EN&cc=DE&unqvl=72
SearchScopes: HKU\S-1-5-21-223822767-1807346583-171944255-1002 -> DefaultScope {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = hxxp://www.trovi.com/Results.aspx?gd=&ctid=CT3325580&octid=EB_ORIGINAL_CTID&ISID=M1203C8AE-B98E-4E51-BBEA-935C477E11C9&SearchSource=58&CUI=&UM=2&UP=SP6D09FA68-040B-4BB4-AD0E-11C7FBEF9CAE&q={searchTerms}&SSPV=
SearchScopes: HKU\S-1-5-21-223822767-1807346583-171944255-1002 -> {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = hxxp://www.trovi.com/Results.aspx?gd=&ctid=CT3325580&octid=EB_ORIGINAL_CTID&ISID=M1203C8AE-B98E-4E51-BBEA-935C477E11C9&SearchSource=58&CUI=&UM=2&UP=SP6D09FA68-040B-4BB4-AD0E-11C7FBEF9CAE&q={searchTerms}&SSPV=
SearchScopes: HKU\S-1-5-21-223822767-1807346583-171944255-1002 -> {0F4290CD-0C1F-43D0-AD78-654E5ADC2694} URL = 
SearchScopes: HKU\S-1-5-21-223822767-1807346583-171944255-1002 -> {80c554b9-c7f8-4a21-9471-06d606da78a2} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1
SearchScopes: HKU\S-1-5-21-223822767-1807346583-171944255-1002 -> {AA9A4890-4262-4441-8977-E2FFCBFB706C} URL = 
BHO: Unisales -> {320d5d8e-64be-4f8f-8ce6-d7e4ff769664} -> C:\Program Files (x86)\Unisales\JBGgrV4x87VoTw.x64.dll ()
BHO: unisAlEEs -> {4e07f42f-24d4-4ca3-b699-21d57d5d545d} -> C:\Program Files (x86)\unisAlEEs\Rw7MFLY6o6Pr0x.x64.dll ()
BHO: YouettubeAAdBillocke -> {795e9ca3-404a-4c02-a5f5-711739613c13} -> C:\Program Files (x86)\YouettubeAAdBillocke\aGCYgceSTwf8Tt.x64.dll ()
BHO: RandomPrriCCe -> {b3cda001-95f1-4b0a-8f60-aadbe91ddc99} -> C:\ProgramData\RandomPrriCCe\DFVI77nzx5mHE8.x64.dll ()
BHO: OptuOn -> {b7f8acb8-6040-49fb-bf3f-71061157540c} -> C:\Program Files (x86)\OptuOn\aqM4wnu6spS1bo.x64.dll ()
BHO: RobouSiaver -> {e3190def-fe89-48bd-8820-9809133be044} -> C:\ProgramData\RobouSiaver\KhxvIlVvzyR0pN.x64.dll ()
BHO: SaverExtensiOn -> {e64ca992-4ef4-400c-b3e2-35ffd808ed66} -> C:\ProgramData\SaverExtensiOn\8N25NUrrXZ52P2.x64.dll ()
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\ssv.dll (Oracle Corporation)
BHO-x32: RandomPrriCCe -> {b3cda001-95f1-4b0a-8f60-aadbe91ddc99} -> C:\ProgramData\RandomPrriCCe\DFVI77nzx5mHE8.dll ()
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\jp2ssv.dll (Oracle Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 192.168.1.1

FireFox:
========
FF ProfilePath: C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default
FF NewTab: chrome://unitedtb/content/newtab/newtab-page.xhtml
FF DefaultSearchEngine,S: WebSearch
FF DefaultSearchUrl: hxxp://websearch.searchoholic.info/?pid=3458&r=2014/12/26&hid=4055500976521261347&lg=EN&cc=DE&unqvl=72&l=1&q=
FF SearchEngineOrder.1: WebSearch
FF SearchEngineOrder.1,S: WebSearch
FF SelectedSearchEngine: Trovi search
FF SelectedSearchEngine,S: WebSearch
FF Homepage: about:home
FF Keyword.URL: hxxp://websearch.searchoholic.info/?pid=3458&r=2014/12/26&hid=4055500976521261347&lg=EN&cc=DE&unqvl=72&l=1&q=
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_16_0_0_235.dll ()
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_235.dll ()
FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/pdf -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll ()
FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.fdf -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.25.2 -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.25.2 -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @staging.google.com/globalUpdate Update;version=10 -> C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\npGoogleUpdate4.dll No File
FF Plugin-x32: @staging.google.com/globalUpdate Update;version=4 -> C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\npGoogleUpdate4.dll No File
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\1\NP_wtapp.dll ()
FF SearchPlugin: C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\searchplugins\avira-safesearch.xml
FF SearchPlugin: C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\searchplugins\trovi-search.xml
FF SearchPlugin: C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\searchplugins\WebSearch.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\omiga-plus.xml
FF Extension: Unisales - C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\Extensions\3@3AcA.com [2014-12-26]
FF Extension: TheHDvid-Codec V10 - C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\Extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com [2015-01-02]
FF Extension: OptuOn - C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\Extensions\4@ckIbAWyX.com [2014-12-26]
FF Extension: ExstraCoooupON - C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\Extensions\81X@T7ZC6I.edu [2015-01-02]
FF Extension: Avira Browser Safety - C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\Extensions\abs@avira.com [2015-01-06]
FF Extension: YouettubeAAdBillocke - C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\Extensions\APueTDX@U.com [2014-12-26]
FF Extension: MMInimumPRiCEa - C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\Extensions\FUAujg@j.net [2015-01-05]
FF Extension: uonaisaeles - C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\Extensions\LTA@q.net [2014-12-26]
FF Extension: CinemaP-1.9cV02.01 - C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\Extensions\OIBMBKA115048682@HYKFIU97176590.com [2015-01-06]
FF Extension: Avira SafeSearch - C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\Extensions\safesearch@avira.com [2015-01-06]
FF Extension: SparPilot - Gutscheine &amp; mehr... - C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\Extensions\sparpilot@sparpilot.com [2014-12-30]
FF Extension: WEB.DE MailCheck - C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\Extensions\toolbar@web.de [2015-01-02]
FF Extension: HD Notifier - C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\Extensions\{0e84d0b4-5388-4a04-a2bf-1043c386a4dc}.xpi [2015-01-04]
FF Extension: {2b5f4e51-080e-409c-8353-01cc79790137} - C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\Extensions\{2b5f4e51-080e-409c-8353-01cc79790137}.xpi [2015-01-01]
FF HKLM-x32\...\Firefox\Extensions: [faststartff@gmail.com] - C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\faststartff@gmail.com
FF HKU\S-1-5-21-223822767-1807346583-171944255-1002\...\Firefox\Extensions: [{91EE2399-1C05-90A0-1098-8D7EFA157C7A}] - C:\Program Files (x86)\ver7BetterMarkIt\184.xpi

Chrome: 
=======
CHR Profile: C:\Users\Daniel\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (No Name) - C:\Users\Daniel\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf [2015-01-02]
CHR Extension: (No Name) - C:\Users\Daniel\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdeaofcapijfmeopimkgcepdpbdepnb [2015-01-04]
CHR Extension: (No Name) - C:\Users\Daniel\AppData\Local\Google\Chrome\User Data\Default\Extensions\mbacbcfdfaapbcnlnbmciiaakomhkbkb [2015-01-06]
CHR HKLM\...\Chrome\Extension: [aaaaaiabcopkplhgaedhbloeejhhankf] - C:\ProgramData\AskPartnerNetwork\Toolbar\Shared\CRX\aaaaaiabcopkplhgaedhbloeejhhankf.crx [2014-11-24]
CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - No Path
CHR HKLM-x32\...\Chrome\Extension: [aaaaaiabcopkplhgaedhbloeejhhankf] - C:\ProgramData\AskPartnerNetwork\Toolbar\Shared\CRX\aaaaaiabcopkplhgaedhbloeejhhankf.crx [2014-11-24]
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - No Path

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [431920 2014-11-24] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [431920 2014-11-24] (Avira Operations GmbH & Co. KG)
R2 APNMCP; C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe [166296 2014-11-24] (APN LLC.)
R2 AtherosSvc; C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\adminservice.exe [319104 2014-02-25] (Windows (R) Win 7 DDK provider)
R2 Avira.OE.ServiceHost; C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe [166192 2014-11-20] (Avira Operations GmbH & Co. KG)
R2 BstHdAndroidSvc; C:\Program Files (x86)\BlueStacks\HD-Service.exe [409304 2014-10-08] (BlueStack Systems, Inc.)
R2 BstHdLogRotatorSvc; C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe [388824 2014-10-08] (BlueStack Systems, Inc.)
R2 BstHdUpdaterSvc; C:\Program Files (x86)\BlueStacks\HD-UpdaterService.exe [782040 2014-10-08] (BlueStack Systems, Inc.)
R2 CCDMonitorService; C:\Program Files (x86)\Acer\AOP Framework\CCDMonitorService.exe [2709760 2014-11-17] (Acer Incorporated)
R2 CltMngSvc; C:\Program Files (x86)\SearchProtect\Main\bin\CltMngSvc.exe [3323200 2014-12-24] (Client Connect LTD)
R3 ePowerSvc; C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe [2573032 2014-06-12] (Acer Incorporated)
R2 GamesAppIntegrationService; C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe [347200 2014-12-24] (WildTangent)
R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [282096 2014-03-18] (Intel Corporation)
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [747520 2013-08-27] (Intel(R) Corporation) [File not signed]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [828376 2013-08-27] (Intel(R) Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-12-10] (Intel Corporation)
R2 LMSvc; C:\Program Files\Acer\Acer Launch Manager\LMSvc.exe [466664 2014-06-10] (Acer Incorporate)
R2 Orbiter; C:/Program Files (x86)/ORBTR/orbiter.dll [492496 2014-12-26] (Client Connect LTD)
R3 QASvc; C:\Program Files\Acer\Acer Quick Access\QASvc.exe [458984 2014-06-26] (Acer Incorporate)
R2 RichVideo; C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [254512 2012-04-24] ()
R3 RMSvc; C:\Program Files\Acer\Acer Quick Access\RMSvc.exe [449768 2014-06-26] (Acer Incorporate)
R3 UEIPSvc; C:\Program Files\Acer\User Experience Improvement Program\Framework\UBTService.exe [234240 2014-07-15] (acer)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [368632 2014-09-22] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23792 2014-09-22] (Microsoft Corporation)
S2 5936b827; "C:\Windows\system32\rundll32.exe" "c:\Program Files (x86)\Optimizer Pro 3.20\OptProMon.dll",ENT

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R3 athr; C:\Windows\system32\DRIVERS\athwbx.sys [3888640 2014-02-14] (Qualcomm Atheros Communications, Inc.)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [119272 2014-11-24] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [131608 2014-11-24] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [28600 2014-11-24] (Avira Operations GmbH & Co. KG)
R2 BstHdDrv; C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [122072 2014-10-08] (BlueStack Systems)
S3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [77464 2014-02-25] (Qualcomm Atheros)
S3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [226304 2014-03-18] (Microsoft Corporation)
R3 iaLPSS_I2C; C:\Windows\System32\drivers\iaLPSS_I2C.sys [99320 2013-10-03] (Intel Corporation)
R3 LMDriver; C:\Windows\System32\drivers\LMDriver.sys [21360 2013-07-17] (Acer Incorporated)
R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [100312 2013-12-10] (Intel Corporation)
R3 RadioShim; C:\Windows\System32\drivers\RadioShim.sys [14680 2013-07-17] (Acer Incorporated)
R3 RTSPER; C:\Windows\system32\DRIVERS\RtsPer.sys [466136 2014-01-14] (Realsil Semiconductor Corporation)
R3 SynRMIHID; C:\Windows\system32\DRIVERS\SynRMIHID.sys [42224 2014-02-19] (Synaptics Incorporated)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114496 2014-09-22] (Microsoft Corporation)
R2 webinstrNewH; C:\Windows\system32\Drivers\webinstrNewH.sys [106456 2015-01-02] (Corsica)
R3 SPPD; \??\C:\Windows\system32\drivers\SPPD.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-01-07 19:41 - 2015-01-07 19:41 - 00000000 ____D () C:\FRST
2015-01-07 19:39 - 2015-01-07 19:39 - 01115648 _____ (Farbar) C:\Users\Daniel\Downloads\FRST.exe
2015-01-07 18:18 - 2015-01-07 18:18 - 00108352 _____ () C:\Users\Daniel\Desktop\avira-Fund.txt
2015-01-07 18:12 - 2015-01-07 18:12 - 00000000 _____ () C:\Windows\setuperr.log
2015-01-07 18:12 - 2015-01-07 18:12 - 00000000 _____ () C:\Windows\setupact.log
2015-01-07 18:10 - 2015-01-07 18:10 - 00001506 _____ () C:\Windows\PFRO.log
2015-01-07 11:23 - 2015-01-07 11:23 - 00244264 _____ () C:\Users\Daniel\Downloads\Firefox Setup Stub 34.0.5 (1).exe
2015-01-07 11:23 - 2015-01-07 11:23 - 00001175 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2015-01-07 11:23 - 2015-01-07 11:23 - 00001163 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2015-01-07 11:23 - 2015-01-07 11:23 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2015-01-06 22:56 - 2015-01-06 22:56 - 00000000 ____D () C:\Users\Daniel\AppData\Roaming\Avira
2015-01-06 22:54 - 2015-01-06 22:53 - 00043064 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2015-01-06 22:52 - 2014-11-24 10:23 - 00131608 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2015-01-06 22:52 - 2014-11-24 10:23 - 00119272 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2015-01-06 22:52 - 2014-11-24 10:23 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys
2015-01-06 22:48 - 2015-01-06 22:52 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2015-01-06 22:48 - 2015-01-06 22:52 - 00000000 ____D () C:\ProgramData\Avira
2015-01-06 22:48 - 2015-01-06 22:52 - 00000000 ____D () C:\Program Files (x86)\Avira
2015-01-06 22:48 - 2015-01-06 22:48 - 00001157 _____ () C:\Users\Public\Desktop\Avira.lnk
2015-01-06 22:47 - 2015-01-06 22:47 - 04549888 _____ (Avira Operations & Co. KG) C:\Users\Daniel\Downloads\avira_de_av_5765383327__ws.exe
2015-01-06 22:42 - 2014-10-30 12:25 - 00275080 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2015-01-06 21:49 - 2015-01-07 08:11 - 00000000 ____D () C:\ProgramData\RobouSiaver
2015-01-06 21:49 - 2015-01-07 08:11 - 00000000 ____D () C:\ProgramData\RandomPrriCCe
2015-01-06 20:21 - 2015-01-06 20:21 - 00244264 _____ () C:\Users\Daniel\Downloads\Firefox Setup Stub 34.0.5.exe
2015-01-06 14:57 - 2015-01-06 14:58 - 00002005 _____ () C:\Users\Public\Desktop\abPhoto.lnk
2015-01-06 10:23 - 2015-01-07 18:24 - 02096035 _____ () C:\Windows\WindowsUpdate.log
2015-01-02 20:27 - 2015-01-07 08:11 - 00000000 ____D () C:\ProgramData\SaverExtensiOn
2015-01-02 20:27 - 2015-01-06 21:50 - 00000000 ____D () C:\ProgramData\1f0001b3a6cbf8f5
2015-01-02 15:31 - 2014-10-14 19:13 - 00675988 _____ () C:\Users\Daniel\Desktop\Minecraft.exe
2015-01-02 15:05 - 2015-01-02 15:06 - 00000000 ____D () C:\Users\Daniel\AppData\Local\ftblauncher
2015-01-02 15:05 - 2015-01-02 15:05 - 00000000 ____D () C:\Users\Daniel\AppData\Roaming\ftblauncher
2015-01-02 14:39 - 2015-01-02 14:39 - 00000000 ____D () C:\Users\Daniel\Downloads\runtime
2015-01-02 14:38 - 2015-01-02 14:40 - 00000000 ____D () C:\Users\Daniel\Downloads\game
2015-01-02 14:38 - 2015-01-02 14:38 - 02314240 _____ () C:\Users\Daniel\Downloads\MinecraftInstaller.msi
2015-01-02 14:36 - 2015-01-02 14:36 - 01291528 _____ (Mojang) C:\Users\Daniel\Downloads\Minecraft.exe
2015-01-02 14:25 - 2015-01-06 20:52 - 00000000 ____D () C:\Users\Daniel\Desktop\minecraft Test
2015-01-02 14:03 - 2015-01-07 18:10 - 00003142 _____ () C:\Windows\Tasks\d187d13c-eb9d-4d47-bf31-4a5c3088774b-1.job
2015-01-02 14:03 - 2015-01-07 18:10 - 00002464 _____ () C:\Windows\Tasks\d187d13c-eb9d-4d47-bf31-4a5c3088774b-5_user.job
2015-01-02 14:03 - 2015-01-07 18:10 - 00002464 _____ () C:\Windows\Tasks\d187d13c-eb9d-4d47-bf31-4a5c3088774b-5.job
2015-01-02 14:03 - 2015-01-07 18:10 - 00001364 _____ () C:\Windows\Tasks\YDYXQG.job
2015-01-02 14:03 - 2015-01-02 14:03 - 00006146 _____ () C:\Windows\System32\Tasks\d187d13c-eb9d-4d47-bf31-4a5c3088774b-1
2015-01-02 14:03 - 2015-01-02 14:03 - 00005468 _____ () C:\Windows\System32\Tasks\d187d13c-eb9d-4d47-bf31-4a5c3088774b-5
2015-01-02 14:03 - 2015-01-02 14:03 - 00004376 _____ () C:\Windows\System32\Tasks\YDYXQG
2015-01-02 14:02 - 2015-01-07 18:10 - 00005536 _____ () C:\Windows\Tasks\d187d13c-eb9d-4d47-bf31-4a5c3088774b-6.job
2015-01-02 14:02 - 2015-01-07 18:10 - 00005200 _____ () C:\Windows\Tasks\d187d13c-eb9d-4d47-bf31-4a5c3088774b-7.job
2015-01-02 14:02 - 2015-01-07 18:10 - 00004176 _____ () C:\Windows\Tasks\d187d13c-eb9d-4d47-bf31-4a5c3088774b-4.job
2015-01-02 14:02 - 2015-01-07 18:10 - 00004176 _____ () C:\Windows\Tasks\d187d13c-eb9d-4d47-bf31-4a5c3088774b-3.job
2015-01-02 14:02 - 2015-01-07 08:08 - 00000000 ____D () C:\Program Files (x86)\d8ab63e2-cb9c-41d9-9a96-69f41c5fb27c
2015-01-02 14:02 - 2015-01-07 08:08 - 00000000 ____D () C:\Program Files (x86)\CinemaP-1.9cV02.01
2015-01-02 14:02 - 2015-01-04 11:42 - 00000000 ____D () C:\Users\Daniel\AppData\Local\CrossBrowser
2015-01-02 14:02 - 2015-01-02 14:02 - 00008540 _____ () C:\Windows\System32\Tasks\d187d13c-eb9d-4d47-bf31-4a5c3088774b-6
2015-01-02 14:02 - 2015-01-02 14:02 - 00008204 _____ () C:\Windows\System32\Tasks\d187d13c-eb9d-4d47-bf31-4a5c3088774b-7
2015-01-02 14:02 - 2015-01-02 14:02 - 00007180 _____ () C:\Windows\System32\Tasks\d187d13c-eb9d-4d47-bf31-4a5c3088774b-4
2015-01-02 14:02 - 2015-01-02 14:02 - 00007180 _____ () C:\Windows\System32\Tasks\d187d13c-eb9d-4d47-bf31-4a5c3088774b-3
2015-01-02 14:00 - 2015-01-06 20:19 - 00002016 _____ () C:\Windows\patsearch.bin
2015-01-02 14:00 - 2015-01-02 14:00 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_webinstrNewH_01009.Wdf
2015-01-02 14:00 - 2015-01-02 14:00 - 00000000 ____D () C:\Users\Daniel\AppData\Local\AskPartnerNetwork
2015-01-02 14:00 - 2015-01-02 14:00 - 00000000 ____D () C:\ProgramData\AskPartnerNetwork
2015-01-02 14:00 - 2015-01-02 14:00 - 00000000 ____D () C:\ProgramData\APN
2015-01-02 14:00 - 2015-01-02 14:00 - 00000000 ____D () C:\Program Files (x86)\AskPartnerNetwork
2015-01-02 14:00 - 2015-01-02 13:59 - 00106456 _____ (Corsica) C:\Windows\system32\Drivers\webinstrNewH.sys
2015-01-02 13:59 - 2015-01-07 18:10 - 00005536 _____ () C:\Windows\Tasks\b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-6.job
2015-01-02 13:59 - 2015-01-07 18:10 - 00005200 _____ () C:\Windows\Tasks\b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-7.job
2015-01-02 13:59 - 2015-01-07 18:10 - 00004512 _____ () C:\Windows\Tasks\b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-4.job
2015-01-02 13:59 - 2015-01-07 18:10 - 00003142 _____ () C:\Windows\Tasks\b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-1.job
2015-01-02 13:59 - 2015-01-07 18:10 - 00002464 _____ () C:\Windows\Tasks\b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-5_user.job
2015-01-02 13:59 - 2015-01-07 18:10 - 00002464 _____ () C:\Windows\Tasks\b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-5.job
2015-01-02 13:59 - 2015-01-07 18:10 - 00001366 _____ () C:\Windows\Tasks\KYBEFZU.job
2015-01-02 13:59 - 2015-01-07 18:10 - 00001364 _____ () C:\Windows\Tasks\XSHNPL.job
2015-01-02 13:59 - 2015-01-07 17:49 - 00000000 ____D () C:\Users\Daniel\AppData\Roaming\.minecraft
2015-01-02 13:59 - 2015-01-07 08:09 - 00000000 ____D () C:\Program Files (x86)\6228cefd-9c9c-4d28-ba89-4fea4b5b07c7
2015-01-02 13:59 - 2015-01-02 13:59 - 00008540 _____ () C:\Windows\System32\Tasks\b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-6
2015-01-02 13:59 - 2015-01-02 13:59 - 00008204 _____ () C:\Windows\System32\Tasks\b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-7
2015-01-02 13:59 - 2015-01-02 13:59 - 00007516 _____ () C:\Windows\System32\Tasks\b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-4
2015-01-02 13:59 - 2015-01-02 13:59 - 00006146 _____ () C:\Windows\System32\Tasks\b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-1
2015-01-02 13:59 - 2015-01-02 13:59 - 00005468 _____ () C:\Windows\System32\Tasks\b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-5
2015-01-02 13:59 - 2015-01-02 13:59 - 00004376 _____ () C:\Windows\System32\Tasks\XSHNPL
2015-01-02 13:59 - 2015-01-02 13:59 - 00004376 _____ () C:\Windows\System32\Tasks\KYBEFZU
2015-01-02 13:59 - 2015-01-02 13:59 - 00000000 ____D () C:\Users\Daniel\AppData\Roaming\java
2015-01-02 13:59 - 2015-01-02 13:59 - 00000000 ____D () C:\Users\Daniel\AppData\Local\globalUpdate
2015-01-02 13:58 - 2015-01-06 22:57 - 00000000 ____D () C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FLVPlayer
2015-01-02 13:58 - 2015-01-02 13:59 - 00607216 _____ () C:\Users\Daniel\Downloads\Setup.exe
2015-01-02 13:58 - 2015-01-02 13:58 - 00000000 ____D () C:\ProgramData\Sun
2015-01-02 13:58 - 2015-01-02 13:58 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2015-01-02 13:58 - 2015-01-02 13:57 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2015-01-02 13:57 - 2015-01-02 13:57 - 00000000 ____D () C:\ProgramData\Oracle
2015-01-02 13:57 - 2015-01-02 13:57 - 00000000 ____D () C:\Program Files (x86)\Java
2015-01-02 13:55 - 2015-01-02 13:55 - 00638888 _____ (Oracle Corporation) C:\Users\Daniel\Downloads\chromeinstall-8u25.exe
2015-01-02 13:54 - 2015-01-02 13:54 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf
2015-01-02 13:47 - 2014-10-29 15:11 - 06619054 _____ () C:\Users\Daniel\Desktop\FTB_Launcher.exe
2015-01-01 17:20 - 2015-01-01 17:20 - 00000000 ____D () C:\Users\Public\Documents\Android
2015-01-01 17:20 - 2015-01-01 17:20 - 00000000 ____D () C:\Users\Daniel\Documents\Android
2015-01-01 02:03 - 2015-01-01 02:03 - 00000931 _____ () C:\Users\Daniel\Downloads\The-Walking-Dead_-Survival-Instinct-lnstall - Verknüpfung.lnk
2015-01-01 02:03 - 2015-01-01 02:03 - 00000000 ____D () C:\Users\Daniel\AppData\Local\Tempde32eb70472f50f1682ef62857f90de0______
2015-01-01 01:56 - 2015-01-01 01:56 - 00000000 ____D () C:\Users\Daniel\AppData\Local\Tempde32eb70472f50f1682ef62857f90de0_____
2015-01-01 01:46 - 2015-01-01 01:46 - 00000000 ___SD () C:\Windows\system32\CompatTel
2015-01-01 01:46 - 2015-01-01 01:46 - 00000000 ____D () C:\Windows\system32\appraiser
2014-12-30 23:40 - 2014-12-30 23:40 - 00000000 ____D () C:\Program Files (x86)\WEB.DE MailCheck
2014-12-30 23:36 - 2014-12-30 23:36 - 00000000 ____D () C:\Users\Daniel\AppData\Local\Tempde32eb70472f50f1682ef62857f90de0____
2014-12-30 23:36 - 2014-12-30 23:36 - 00000000 ____D () C:\Users\Daniel\AppData\Local\Tempde32eb70472f50f1682ef62857f90de0___
2014-12-30 23:35 - 2014-12-30 23:35 - 00000000 ____D () C:\Users\Daniel\AppData\Local\Tempde32eb70472f50f1682ef62857f90de0__
2014-12-30 23:33 - 2014-12-30 23:33 - 00000000 ____D () C:\Users\Daniel\AppData\Local\Tempde32eb70472f50f1682ef62857f90de0_
2014-12-30 23:33 - 2014-12-30 23:33 - 00000000 ____D () C:\Users\Daniel\AppData\Local\Tempde32eb70472f50f1682ef62857f90de0
2014-12-30 23:33 - 2014-12-30 23:33 - 00000000 ____D () C:\Users\Daniel\AppData\Local\Tempb611a9446b16c0a3ab49ae1736d3f689
2014-12-30 23:24 - 2014-12-30 23:27 - 01045496 _____ () C:\Users\Daniel\Downloads\The-Walking-Dead_-Survival-Instinct-lnstall.exe
2014-12-29 00:08 - 2014-12-29 00:08 - 00000000 ____D () C:\Users\Daniel\AppData\Roaming\Foxit Software
2014-12-27 20:25 - 2015-01-07 16:44 - 00000000 ____D () C:\Users\Daniel\Documents\Euro Truck Simulator 2
2014-12-27 20:24 - 2014-12-27 20:24 - 00001356 _____ () C:\Users\Public\Desktop\Euro Truck Simulator 2.lnk
2014-12-27 20:24 - 2014-12-27 20:24 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Euro Truck Simulator 2
2014-12-27 20:22 - 2014-12-27 20:24 - 00000000 ____D () C:\Program Files (x86)\Euro Truck Simulator 2
2014-12-27 00:16 - 2014-04-14 04:29 - 01018880 _____ (Microsoft Corporation) C:\Windows\system32\termsrv.dll
2014-12-26 21:58 - 2014-07-24 10:44 - 16874496 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.dll
2014-12-26 21:58 - 2014-07-24 10:16 - 12730880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.dll
2014-12-26 21:58 - 2014-06-14 07:03 - 02389504 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2014-12-26 21:57 - 2014-07-24 16:28 - 00419648 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2014-12-26 21:57 - 2014-07-24 16:28 - 00412992 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\spaceport.sys
2014-12-26 21:57 - 2014-07-24 16:28 - 00280384 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pci.sys
2014-12-26 21:57 - 2014-07-24 16:28 - 00143680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2014-12-26 21:57 - 2014-07-24 16:23 - 00125472 _____ (Microsoft Corporation) C:\Windows\system32\dwmapi.dll
2014-12-26 21:57 - 2014-07-24 16:20 - 00645592 _____ (Microsoft Corporation) C:\Windows\system32\SHCore.dll
2014-12-26 21:57 - 2014-07-24 16:20 - 00263400 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettingsAdminFlows.exe
2014-12-26 21:57 - 2014-07-24 16:16 - 02574208 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
2014-12-26 21:57 - 2014-07-24 16:16 - 00211216 _____ (Microsoft Corporation) C:\Windows\system32\SndVol.exe
2014-12-26 21:57 - 2014-07-24 16:07 - 02009920 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2014-12-26 21:57 - 2014-07-24 16:05 - 01660048 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2014-12-26 21:57 - 2014-07-24 16:05 - 01519560 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
2014-12-26 21:57 - 2014-07-24 16:05 - 01488008 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2014-12-26 21:57 - 2014-07-24 16:05 - 01356840 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe
2014-12-26 21:57 - 2014-07-24 16:03 - 02141920 _____ (Microsoft Corporation) C:\Windows\system32\mfcore.dll
2014-12-26 21:57 - 2014-07-24 16:03 - 00882136 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll
2014-12-26 21:57 - 2014-07-24 16:03 - 00360480 _____ (Microsoft Corporation) C:\Windows\system32\mfreadwrite.dll
2014-12-26 21:57 - 2014-07-24 16:03 - 00233888 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll
2014-12-26 21:57 - 2014-07-24 16:03 - 00205512 _____ (Microsoft Corporation) C:\Windows\system32\mftranscode.dll
2014-12-26 21:57 - 2014-07-24 14:50 - 00098048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmapi.dll
2014-12-26 21:57 - 2014-07-24 14:48 - 02410976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL
2014-12-26 21:57 - 2014-07-24 14:48 - 00180208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SndVol.exe
2014-12-26 21:57 - 2014-07-24 14:46 - 00477200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SHCore.dll
2014-12-26 21:57 - 2014-07-24 14:36 - 02145472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfcore.dll
2014-12-26 21:57 - 2014-07-24 14:36 - 00707536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfplat.dll
2014-12-26 21:57 - 2014-07-24 14:36 - 00355800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfreadwrite.dll
2014-12-26 21:57 - 2014-07-24 14:36 - 00180720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mftranscode.dll
2014-12-26 21:57 - 2014-07-24 12:51 - 00008192 _____ (Microsoft Corporation) C:\Windows\system32\KBDRUM.DLL
2014-12-26 21:57 - 2014-07-24 12:51 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDYAK.DLL
2014-12-26 21:57 - 2014-07-24 12:51 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDTT102.DLL
2014-12-26 21:57 - 2014-07-24 12:51 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDTAT.DLL
2014-12-26 21:57 - 2014-07-24 12:51 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU1.DLL
2014-12-26 21:57 - 2014-07-24 12:51 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDBASH.DLL
2014-12-26 21:57 - 2014-07-24 12:51 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU.DLL
2014-12-26 21:57 - 2014-07-24 12:46 - 00079872 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\IPMIDrv.sys
2014-12-26 21:57 - 2014-07-24 12:45 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hdaudbus.sys
2014-12-26 21:57 - 2014-07-24 12:44 - 00674816 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys
2014-12-26 21:57 - 2014-07-24 12:43 - 00412160 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv.sys
2014-12-26 21:57 - 2014-07-24 12:42 - 00446976 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\nwifi.sys
2014-12-26 21:57 - 2014-07-24 12:42 - 00126464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\NdisImPlatform.sys
2014-12-26 21:57 - 2014-07-24 12:41 - 00118272 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bthpan.sys
2014-12-26 21:57 - 2014-07-24 12:06 - 00220160 _____ (Microsoft Corporation) C:\Windows\system32\iasnap.dll
2014-12-26 21:57 - 2014-07-24 12:05 - 00287232 _____ (Microsoft Corporation) C:\Windows\system32\usbmon.dll
2014-12-26 21:57 - 2014-07-24 12:05 - 00226816 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll
2014-12-26 21:57 - 2014-07-24 11:52 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDYAK.DLL
2014-12-26 21:57 - 2014-07-24 11:52 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDTT102.DLL
2014-12-26 21:57 - 2014-07-24 11:52 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDTAT.DLL
2014-12-26 21:57 - 2014-07-24 11:51 - 00008192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDRUM.DLL
2014-12-26 21:57 - 2014-07-24 11:51 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDRU1.DLL
2014-12-26 21:57 - 2014-07-24 11:51 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDBASH.DLL
2014-12-26 21:57 - 2014-07-24 11:51 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDRU.DLL
2014-12-26 21:57 - 2014-07-24 11:49 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\WorkFoldersGPExt.dll
2014-12-26 21:57 - 2014-07-24 11:32 - 00207360 _____ (Microsoft Corporation) C:\Windows\system32\powercfg.cpl
2014-12-26 21:57 - 2014-07-24 11:20 - 02050560 _____ (Microsoft Corporation) C:\Windows\system32\SRH.dll
2014-12-26 21:57 - 2014-07-24 11:18 - 01089024 _____ (Microsoft Corporation) C:\Windows\system32\gpedit.dll
2014-12-26 21:57 - 2014-07-24 11:12 - 00878592 _____ (Microsoft Corporation) C:\Windows\system32\ActionCenter.dll
2014-12-26 21:57 - 2014-07-24 11:10 - 01844224 _____ (Microsoft Corporation) C:\Windows\system32\Display.dll
2014-12-26 21:57 - 2014-07-24 11:10 - 00834560 _____ (Microsoft Corporation) C:\Windows\system32\osk.exe
2014-12-26 21:57 - 2014-07-24 11:10 - 00198656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WebClnt.dll
2014-12-26 21:57 - 2014-07-24 11:10 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iasnap.dll
2014-12-26 21:57 - 2014-07-24 11:05 - 00187392 _____ (Microsoft Corporation) C:\Windows\system32\WorkFoldersShell.dll
2014-12-26 21:57 - 2014-07-24 10:52 - 00621056 _____ (Microsoft Corporation) C:\Windows\system32\comdlg32.dll
2014-12-26 21:57 - 2014-07-24 10:42 - 00206336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\powercfg.cpl
2014-12-26 21:57 - 2014-07-24 10:40 - 00557056 _____ (Microsoft Corporation) C:\Windows\system32\PrintDialogs.dll
2014-12-26 21:57 - 2014-07-24 10:39 - 00770048 _____ (Microsoft Corporation) C:\Windows\system32\WorkfoldersControl.dll
2014-12-26 21:57 - 2014-07-24 10:33 - 01741824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SRH.dll
2014-12-26 21:57 - 2014-07-24 10:32 - 01048064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gpedit.dll
2014-12-26 21:57 - 2014-07-24 10:27 - 00779264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\osk.exe
2014-12-26 21:57 - 2014-07-24 10:25 - 00832512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ActionCenter.dll
2014-12-26 21:57 - 2014-07-24 10:24 - 01817088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Display.dll
2014-12-26 21:57 - 2014-07-24 10:21 - 00134144 _____ (Microsoft Corporation) C:\Windows\system32\browser.dll
2014-12-26 21:57 - 2014-07-24 10:18 - 00018432 _____ (Microsoft Corporation) C:\Windows\system32\wlansvcpal.dll
2014-12-26 21:57 - 2014-07-24 10:14 - 00443904 _____ (Microsoft Corporation) C:\Windows\system32\wlansec.dll
2014-12-26 21:57 - 2014-07-24 10:12 - 00127488 _____ (Microsoft Corporation) C:\Windows\system32\WiFiDisplay.dll
2014-12-26 21:57 - 2014-07-24 10:11 - 00356864 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2014-12-26 21:57 - 2014-07-24 10:11 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\wshbth.dll
2014-12-26 21:57 - 2014-07-24 10:10 - 00540672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comdlg32.dll
2014-12-26 21:57 - 2014-07-24 10:04 - 00492032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PrintDialogs.dll
2014-12-26 21:57 - 2014-07-24 10:04 - 00183808 _____ (Microsoft Corp.) C:\Windows\system32\Defrag.exe
2014-12-26 21:57 - 2014-07-24 10:03 - 00324096 _____ (Microsoft Corporation) C:\Windows\system32\srvsvc.dll
2014-12-26 21:57 - 2014-07-24 10:02 - 00220160 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll
2014-12-26 21:57 - 2014-07-24 09:58 - 00105472 _____ (Microsoft Corporation) C:\Windows\system32\BluetoothApis.dll
2014-12-26 21:57 - 2014-07-24 09:53 - 01261056 _____ (Microsoft Corporation) C:\Windows\system32\gpsvc.dll
2014-12-26 21:57 - 2014-07-24 09:53 - 00449536 _____ (Microsoft Corporation) C:\Windows\system32\defragsvc.dll
2014-12-26 21:57 - 2014-07-24 09:49 - 01287680 _____ (Microsoft Corporation) C:\Windows\system32\mispace.dll
2014-12-26 21:57 - 2014-07-24 09:49 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\wlanapi.dll
2014-12-26 21:57 - 2014-07-24 09:48 - 00659968 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Bluetooth.dll
2014-12-26 21:57 - 2014-07-24 09:47 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\wcmcsp.dll
2014-12-26 21:57 - 2014-07-24 09:43 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshbth.dll
2014-12-26 21:57 - 2014-07-24 09:39 - 02397184 _____ (Microsoft Corporation) C:\Windows\system32\storagewmi.dll
2014-12-26 21:57 - 2014-07-24 09:38 - 00371200 _____ (Microsoft Corporation) C:\Windows\system32\wlanmsm.dll
2014-12-26 21:57 - 2014-07-24 09:36 - 00079872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\BluetoothApis.dll
2014-12-26 21:57 - 2014-07-24 09:32 - 01532416 _____ (Microsoft Corporation) C:\Windows\system32\wlansvc.dll
2014-12-26 21:57 - 2014-07-24 09:30 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlanapi.dll
2014-12-26 21:57 - 2014-07-24 09:29 - 00439296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Bluetooth.dll
2014-12-26 21:57 - 2014-07-24 09:28 - 00595456 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.dll
2014-12-26 21:57 - 2014-07-24 09:23 - 01404416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\storagewmi.dll
2014-12-26 21:57 - 2014-07-24 09:22 - 00487936 _____ (Microsoft Corporation) C:\Windows\system32\winspool.drv
2014-12-26 21:57 - 2014-07-24 09:21 - 01231872 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.dll
2014-12-26 21:57 - 2014-07-24 09:21 - 00302080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlanmsm.dll
2014-12-26 21:57 - 2014-07-24 09:18 - 01144320 _____ (Microsoft Corporation) C:\Windows\system32\wwanmm.dll
2014-12-26 21:57 - 2014-07-24 09:18 - 00795136 _____ (Microsoft Corporation) C:\Windows\system32\spoolsv.exe
2014-12-26 21:57 - 2014-07-24 09:16 - 00505344 _____ (Microsoft Corporation) C:\Windows\system32\VAN.dll
2014-12-26 21:57 - 2014-07-24 09:16 - 00084480 _____ (Microsoft Corporation) C:\Windows\system32\wpdbusenum.dll
2014-12-26 21:57 - 2014-07-24 09:15 - 00721408 _____ (Microsoft Corporation) C:\Windows\system32\twinapi.dll
2014-12-26 21:57 - 2014-07-24 09:15 - 00432128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Networking.dll
2014-12-26 21:57 - 2014-07-24 09:13 - 00226304 _____ (Microsoft Corporation) C:\Windows\system32\SndVolSSO.dll
2014-12-26 21:57 - 2014-07-24 09:10 - 00889344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.dll
2014-12-26 21:57 - 2014-07-24 09:10 - 00371712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winspool.drv
2014-12-26 21:57 - 2014-07-24 09:08 - 00321536 _____ (Microsoft Corporation) C:\Windows\system32\stobject.dll
2014-12-26 21:57 - 2014-07-24 09:05 - 00448000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\VAN.dll
2014-12-26 21:57 - 2014-07-24 09:01 - 01992192 _____ (Microsoft Corporation) C:\Windows\system32\XpsPrint.dll
2014-12-26 21:57 - 2014-07-24 09:00 - 02100736 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettingsAdminFlowUI.dll
2014-12-26 21:57 - 2014-07-24 08:58 - 00432640 _____ (Microsoft Corporation) C:\Windows\system32\wwanconn.dll
2014-12-26 21:57 - 2014-07-24 08:58 - 00288768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\stobject.dll
2014-12-26 21:57 - 2014-07-24 08:54 - 01290752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsPrint.dll
2014-12-26 21:57 - 2014-07-24 08:50 - 01182208 _____ (Microsoft Corporation) C:\Windows\system32\printui.dll
2014-12-26 21:57 - 2014-07-24 08:47 - 00576512 _____ (Microsoft Corporation) C:\Windows\system32\SettingSync.dll
2014-12-26 21:57 - 2014-07-24 08:44 - 01057792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\printui.dll
2014-12-26 21:57 - 2014-07-24 08:41 - 00459264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SettingSync.dll
2014-12-26 21:57 - 2014-07-24 08:28 - 01600000 _____ (Microsoft Corporation) C:\Windows\system32\workfolderssvc.dll
2014-12-26 21:57 - 2014-07-24 05:11 - 00513544 _____ () C:\Windows\SysWOW64\locale.nls
2014-12-26 21:57 - 2014-07-24 05:11 - 00513544 _____ () C:\Windows\system32\locale.nls
2014-12-26 21:57 - 2014-07-12 06:55 - 00268288 _____ (Microsoft Corporation) C:\Windows\system32\wisp.dll
2014-12-26 21:57 - 2014-07-12 05:58 - 00210944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wisp.dll
2014-12-26 21:57 - 2014-07-04 13:59 - 00295424 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ks.sys
2014-12-26 21:57 - 2014-07-04 11:29 - 00117248 _____ (Microsoft Corporation) C:\Windows\system32\AppxSip.dll
2014-12-26 21:57 - 2014-07-04 11:20 - 01656832 _____ (Microsoft Corporation) C:\Windows\system32\GdiPlus.dll
2014-12-26 21:57 - 2014-07-04 11:06 - 00095232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppxSip.dll
2014-12-26 21:57 - 2014-07-04 11:00 - 01351168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\GdiPlus.dll
2014-12-26 21:57 - 2014-07-04 10:30 - 00544768 _____ (Microsoft Corporation) C:\Windows\system32\AppxPackaging.dll
2014-12-26 21:57 - 2014-07-04 10:27 - 00474112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppxPackaging.dll
2014-12-26 21:57 - 2014-06-27 07:22 - 00246272 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys
2014-12-26 21:57 - 2014-06-26 01:32 - 01029632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mispace.dll
2014-12-26 21:57 - 2014-06-26 01:29 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\dab.dll
2014-12-26 21:57 - 2014-06-20 00:37 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2014-12-26 21:57 - 2014-06-19 03:13 - 00310080 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\volsnap.sys
2014-12-26 21:57 - 2014-06-14 06:46 - 02071552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2014-12-26 21:57 - 2014-06-07 13:46 - 00216368 _____ (Microsoft Corporation) C:\Windows\system32\rsaenh.dll
2014-12-26 21:57 - 2014-06-07 11:20 - 00189016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rsaenh.dll
2014-12-26 21:57 - 2014-06-05 15:00 - 01118040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys
2014-12-26 21:57 - 2014-06-05 11:18 - 01018368 _____ (Microsoft Corporation) C:\Windows\system32\aclui.dll
2014-12-26 21:57 - 2014-06-05 10:42 - 00889856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aclui.dll
2014-12-26 21:57 - 2014-05-31 06:00 - 01463808 _____ (Microsoft Corporation) C:\Windows\system32\wsecedit.dll
2014-12-26 21:57 - 2014-05-31 05:18 - 01319936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wsecedit.dll
2014-12-26 21:57 - 2014-05-29 07:23 - 00427008 _____ (Microsoft Corporation) C:\Windows\system32\clusapi.dll
2014-12-26 21:57 - 2014-05-29 06:25 - 00313856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\clusapi.dll
2014-12-26 21:57 - 2014-05-26 08:26 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\AppxSysprep.dll
2014-12-26 21:57 - 2014-05-10 11:12 - 00387896 _____ (Microsoft Corporation) C:\Windows\system32\bcryptprimitives.dll
2014-12-26 21:57 - 2014-05-10 09:46 - 00335680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcryptprimitives.dll
2014-12-26 21:57 - 2014-05-06 05:41 - 00486744 _____ (Microsoft Corporation) C:\Windows\system32\netcfgx.dll
2014-12-26 21:57 - 2014-05-06 01:55 - 00391000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netcfgx.dll
2014-12-26 21:57 - 2014-03-25 03:27 - 00160600 _____ (Microsoft Corporation) C:\Windows\system32\winmmbase.dll
2014-12-26 21:57 - 2014-03-25 03:27 - 00123920 _____ (Microsoft Corporation) C:\Windows\system32\winmm.dll
2014-12-26 21:57 - 2014-03-25 02:20 - 00128568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winmm.dll
2014-12-26 21:57 - 2014-03-25 02:20 - 00127544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winmmbase.dll
2014-12-26 21:39 - 2014-12-04 00:37 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-12-26 21:39 - 2014-12-04 00:09 - 00830464 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2014-12-26 21:39 - 2014-12-03 00:09 - 01083392 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-12-26 21:39 - 2014-12-03 00:09 - 00740864 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2014-12-26 21:39 - 2014-12-03 00:09 - 00412672 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2014-12-26 21:39 - 2014-12-03 00:09 - 00396288 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2014-12-26 21:39 - 2014-12-03 00:09 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2014-12-26 21:39 - 2014-11-10 03:29 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\DeviceSetupStatusProvider.dll
2014-12-26 21:39 - 2014-11-10 02:51 - 00028672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DeviceSetupStatusProvider.dll
2014-12-26 21:39 - 2014-11-01 00:57 - 01091072 _____ (Microsoft Corporation) C:\Windows\system32\MrmCoreR.dll
2014-12-26 21:39 - 2014-11-01 00:47 - 00790528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MrmCoreR.dll
2014-12-26 21:39 - 2014-10-31 00:39 - 01970432 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2014-12-26 21:39 - 2014-10-31 00:38 - 01612992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2014-12-26 21:39 - 2014-10-13 03:33 - 00116032 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2014-12-26 21:39 - 2014-10-11 01:58 - 03320320 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2014-12-26 21:39 - 2014-10-11 01:53 - 03607040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2014-12-26 21:39 - 2014-10-08 08:30 - 00110080 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll
2014-12-26 21:39 - 2014-10-08 08:09 - 00428032 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll
2014-12-26 21:39 - 2014-10-08 07:27 - 00325120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msihnd.dll
2014-12-26 21:39 - 2014-10-08 06:32 - 02773504 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2014-12-26 21:39 - 2014-10-08 06:19 - 02459136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2014-12-26 19:09 - 2014-12-26 19:09 - 00000000 ____D () C:\Users\Daniel\AppData\Roaming\EZDownloader
2014-12-26 19:08 - 2014-12-26 19:08 - 00000000 ____D () C:\Windows\SysWOW64\X86
2014-12-26 19:08 - 2014-12-26 19:08 - 00000000 ____D () C:\Windows\SysWOW64\AMD64
2014-12-26 19:08 - 2014-12-26 19:08 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EZDownloader
2014-12-26 19:07 - 2015-01-06 22:58 - 00000000 ____D () C:\Program Files (x86)\OptuOn
2014-12-26 19:07 - 2014-12-26 19:07 - 00000000 ____D () C:\Users\Daniel\AppData\Local\SearchProtect
2014-12-26 19:07 - 2014-12-26 19:07 - 00000000 ____D () C:\ProgramData\gpkmjaddgmnebabefhalcdhlohdhiejg
2014-12-26 19:06 - 2015-01-03 21:55 - 00000000 ____D () C:\Program Files (x86)\ORBTR
2014-12-26 19:06 - 2014-12-30 15:41 - 00000000 ____D () C:\Program Files (x86)\SearchProtect
2014-12-26 19:03 - 2015-01-06 22:58 - 00000000 ____D () C:\Program Files (x86)\Unisales
2014-12-26 19:03 - 2014-12-26 19:03 - 00000000 ____D () C:\ProgramData\pobnbnmffkpndfpcgmkcmocainfomioa
2014-12-26 19:02 - 2014-12-26 19:08 - 00000000 ____D () C:\Program Files (x86)\EZDownloader
2014-12-26 19:02 - 2014-12-26 19:02 - 00000000 ____D () C:\Users\Daniel\AppData\Roaming\SkypEmoticons
2014-12-26 19:02 - 2014-12-26 19:02 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SkypEmoticons
2014-12-26 19:01 - 2015-01-06 22:57 - 00000000 ____D () C:\Program Files (x86)\DeltaFix
2014-12-26 19:01 - 2014-12-26 19:01 - 00000000 ____D () C:\Program Files (x86)\Share the Wealth
2014-12-26 19:00 - 2015-01-06 22:58 - 00000000 ____D () C:\Program Files (x86)\YouettubeAAdBillocke
2014-12-26 19:00 - 2015-01-06 22:58 - 00000000 ____D () C:\Program Files (x86)\unisAlEEs
2014-12-26 19:00 - 2014-12-26 19:00 - 00000000 ____D () C:\ProgramData\jooedlmpmpnhalnchcfgihpehccbioml
2014-12-26 19:00 - 2014-12-26 19:00 - 00000000 ____D () C:\ProgramData\2233787286284925173
2014-12-26 19:00 - 2014-12-26 19:00 - 00000000 ____D () C:\Program Files (x86)\uonaisaeles
2014-12-25 23:39 - 2014-12-25 23:39 - 00000000 ____D () C:\Users\Daniel\AppData\Local\Macromedia
2014-12-25 20:54 - 2015-01-07 18:07 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-12-25 20:54 - 2014-12-25 20:57 - 00003772 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-12-25 20:53 - 2014-12-25 20:57 - 00000000 ____D () C:\Users\Daniel\AppData\Local\Adobe
2014-12-25 13:32 - 2014-12-25 13:32 - 00001078 _____ () C:\Users\UpdatusUser\Desktop\Spielkiste.lnk
2014-12-25 13:32 - 2014-12-25 13:32 - 00000000 ____D () C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Der Planer 3
2014-12-25 13:32 - 2014-12-25 13:32 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Der Planer 3
2014-12-25 13:31 - 2014-12-25 13:31 - 00000000 ____D () C:\Program Files (x86)\phenomedia
2014-12-25 13:31 - 2014-12-25 13:31 - 00000000 ____D () C:\Program Files (x86)\bellaundben
2014-12-25 11:32 - 2015-01-07 11:23 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-12-25 11:32 - 2014-12-25 11:33 - 00000000 ____D () C:\Users\Daniel\AppData\Roaming\Mozilla
2014-12-25 11:32 - 2014-12-25 11:33 - 00000000 ____D () C:\Users\Daniel\AppData\Local\Mozilla
2014-12-25 11:32 - 2014-12-25 11:32 - 00000000 ____D () C:\ProgramData\Mozilla
2014-12-25 11:31 - 2014-12-25 11:32 - 39441776 _____ () C:\Users\Daniel\Downloads\Firefox_Setup_de34.0.5.exe
2014-12-25 11:28 - 2014-12-27 20:15 - 00000000 ____D () C:\Users\Daniel\AppData\Roaming\Skype
2014-12-25 11:28 - 2014-12-25 11:28 - 00000000 ____D () C:\Users\Daniel\AppData\Local\Skype
2014-12-25 11:02 - 2014-12-27 20:15 - 00000000 ____D () C:\ProgramData\Skype
2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Musik
2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Bilder
2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\Users\Default\Vorlagen
2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\Users\Default\Startmenü
2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung
2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\Users\Default\Lokale Einstellungen
2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\Users\Default\Eigene Dateien
2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\Users\Default\Druckumgebung
2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik
2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder
2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf
2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Anwendungsdaten
2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\Users\Default\Anwendungsdaten
2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik
2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder
2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf
2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Anwendungsdaten
2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\Programme
2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\ProgramData\Vorlagen
2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\ProgramData\Startmenü
2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\ProgramData\Microsoft\Windows\Start Menu\Programme
2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\ProgramData\Dokumente
2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\ProgramData\Anwendungsdaten
2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\Program Files\Gemeinsame Dateien
2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\Dokumente und Einstellungen
2014-12-25 00:48 - 2014-12-25 00:48 - 00002774 _____ () C:\Windows\System32\Tasks\CCleanerSkipUAC
2014-12-25 00:48 - 2014-12-25 00:48 - 00000838 _____ () C:\Users\Public\Desktop\CCleaner.lnk
2014-12-25 00:48 - 2014-12-25 00:48 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2014-12-25 00:48 - 2014-12-25 00:48 - 00000000 ____D () C:\Program Files\CCleaner
2014-12-25 00:47 - 2014-12-25 00:47 - 04188536 _____ (Piriform Ltd) C:\Users\Daniel\Downloads\ccsetup501_slim.exe
2014-12-25 00:47 - 2014-12-25 00:47 - 04188536 _____ (Piriform Ltd) C:\Users\Daniel\Downloads\ccsetup501_slim (1).exe
2014-12-25 00:44 - 2014-12-25 00:44 - 00000000 ____D () C:\Windows\3F5C371F8EA24F259D3DD0B4526E3AEA.TMP
2014-12-25 00:28 - 2014-12-25 00:28 - 00000221 _____ () C:\Users\Daniel\Desktop\Train Simulator 2015.url
2014-12-25 00:28 - 2014-12-25 00:28 - 00000000 ____D () C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2014-12-24 23:49 - 2015-01-07 18:11 - 00000000 ____D () C:\Program Files (x86)\Steam
2014-12-24 23:49 - 2014-12-24 23:49 - 00000933 _____ () C:\Users\Public\Desktop\Steam.lnk
2014-12-24 23:49 - 2014-12-24 23:49 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam
2014-12-24 23:08 - 2014-12-24 23:11 - 345295856 _____ (GIANTS Software ) C:\Users\Daniel\Downloads\FarmingSimulator2015Patch1.2DE.exe
2014-12-24 23:02 - 2014-12-25 00:45 - 00000000 ____D () C:\Users\Daniel\AppData\Roaming\NVIDIA
2014-12-24 23:01 - 2014-12-24 23:01 - 00000000 ____D () C:\Users\Daniel\Documents\My Games
2014-12-24 23:00 - 2014-12-24 23:00 - 00001295 _____ () C:\Users\Daniel\Desktop\Landwirtschafts Simulator 15 .lnk
2014-12-24 23:00 - 2014-12-24 23:00 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Landwirtschafts Simulator 2015
2014-12-24 22:55 - 2015-01-01 01:58 - 00000000 ____D () C:\Program Files (x86)\Landwirtschafts Simulator 2015
2014-12-24 22:41 - 2014-12-24 22:41 - 00000000 __SHD () C:\Users\Daniel\AppData\Local\EmieBrowserModeList
2014-12-24 21:40 - 2014-11-26 22:10 - 00714720 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-12-24 21:40 - 2014-11-26 22:10 - 00106976 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-12-24 21:14 - 2014-12-24 21:14 - 00000000 ____D () C:\Users\Daniel\AppData\Local\Acer Aspire R7 Tutorial
2014-12-24 21:07 - 2014-12-24 21:07 - 00000000 ____D () C:\Users\Public\Pokki
2014-12-24 21:04 - 2014-12-24 21:04 - 00001276 _____ () C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HD Audio-Manager.lnk
2014-12-24 21:04 - 2014-12-24 21:04 - 00000000 ____D () C:\Users\Daniel\AppData\Roaming\Atheros
2014-12-24 21:04 - 2014-12-24 21:04 - 00000000 ____D () C:\Users\Daniel\AppData\Local\iGware
2014-12-24 21:03 - 2015-01-03 16:55 - 00002335 _____ () C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PC App Store.lnk
2014-12-24 20:43 - 2014-12-24 20:47 - 00002177 _____ () C:\Users\Daniel\Desktop\BlueStacks App Player - CHIP Downloader.lnk
2014-12-24 20:29 - 2014-12-24 20:31 - 00000000 ____D () C:\Windows\system32\MRT
2014-12-24 20:29 - 2014-11-27 16:40 - 112710672 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-12-24 20:23 - 2014-12-24 20:23 - 00001823 _____ () C:\Users\Public\Desktop\Start BlueStacks.lnk
2014-12-24 20:22 - 2014-12-24 20:29 - 00000000 ____D () C:\Program Files (x86)\BlueStacks
2014-12-24 20:22 - 2014-12-24 20:22 - 00001880 _____ () C:\Users\Public\Desktop\Apps.lnk
2014-12-24 20:22 - 2014-12-24 20:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BlueStacks
2014-12-24 20:17 - 2014-12-25 00:49 - 00000000 ____D () C:\ProgramData\BlueStacksSetup
2014-12-24 20:17 - 2014-12-24 20:17 - 00000000 ____D () C:\Windows\System32\Tasks\Abelssoft
2014-12-24 20:17 - 2014-12-24 20:17 - 00000000 ____D () C:\Users\Daniel\AppData\Roaming\Abelssoft
2014-12-24 20:17 - 2014-12-24 20:17 - 00000000 ____D () C:\Users\Daniel\AppData\Local\Bluestacks
2014-12-24 20:17 - 2014-12-24 20:17 - 00000000 ____D () C:\Users\Daniel\AppData\Local\Abelssoft
2014-12-24 20:17 - 2014-12-24 20:17 - 00000000 ____D () C:\ProgramData\XDMessagingv4
2014-12-24 20:16 - 2014-12-24 20:16 - 00001066 _____ () C:\Users\Public\Desktop\CHIP Updater.lnk
2014-12-24 20:16 - 2014-12-24 20:16 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CHIP Updater
2014-12-24 20:16 - 2014-12-24 20:16 - 00000000 ____D () C:\Program Files (x86)\CHIP Updater
2014-12-24 20:15 - 2014-12-24 20:15 - 01174352 _____ () C:\Users\Daniel\Downloads\BlueStacks App Player - CHIP-Installer.exe
2014-12-24 20:14 - 2014-11-22 03:49 - 02885120 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-12-24 20:14 - 2014-11-22 03:34 - 06039552 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-12-24 20:14 - 2014-11-22 03:22 - 19749376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-12-24 20:14 - 2014-11-22 03:08 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-12-24 20:14 - 2014-11-22 03:05 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-12-24 20:14 - 2014-11-22 03:01 - 02277888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-12-24 20:14 - 2014-11-22 02:49 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-12-24 20:14 - 2014-11-22 02:49 - 00718848 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-12-24 20:14 - 2014-11-22 02:49 - 00373760 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-12-24 20:14 - 2014-11-22 02:46 - 02125312 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-12-24 20:14 - 2014-11-22 02:43 - 14412800 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-12-24 20:14 - 2014-11-22 02:35 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-12-24 20:14 - 2014-11-22 02:33 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-12-24 20:14 - 2014-11-22 02:29 - 04299264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-12-24 20:14 - 2014-11-22 02:23 - 00688640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-12-24 20:14 - 2014-11-22 02:23 - 00326656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-12-24 20:14 - 2014-11-22 02:22 - 02052096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-12-24 20:14 - 2014-11-22 02:15 - 01548288 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-12-24 20:14 - 2014-11-22 02:13 - 12836864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-12-24 20:14 - 2014-11-22 02:03 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-12-24 20:14 - 2014-11-22 02:00 - 01888256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-12-24 20:14 - 2014-11-22 01:56 - 01307136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-12-24 20:14 - 2014-11-22 01:54 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-12-24 20:14 - 2014-10-31 05:57 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-12-24 20:14 - 2014-10-31 05:50 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-12-24 20:14 - 2014-10-31 05:38 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-12-24 20:14 - 2014-10-31 05:30 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-12-24 20:14 - 2014-10-31 04:44 - 02865152 _____ (Microsoft Corporation) C:\Windows\system32\actxprxy.dll
2014-12-24 20:14 - 2014-10-31 04:11 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-12-24 20:14 - 2014-10-31 04:02 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-12-24 20:14 - 2014-10-31 03:26 - 01042944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\actxprxy.dll
2014-12-24 20:13 - 2014-12-24 20:14 - 51859586 _____ () C:\Users\Daniel\Downloads\com.supercell.clashofclans_6.322.3.apk
2014-12-24 20:13 - 2014-12-24 20:13 - 00000884 _____ () C:\Users\Public\Desktop\Acer Care Center.lnk
2014-12-24 20:13 - 2014-11-22 04:13 - 25059840 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-12-24 20:13 - 2014-11-22 03:50 - 00580096 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-12-24 20:13 - 2014-11-22 03:49 - 00417280 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2014-12-24 20:13 - 2014-11-22 03:48 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-12-24 20:13 - 2014-11-22 03:35 - 00812544 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2014-12-24 20:13 - 2014-11-22 03:07 - 00501248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-12-24 20:13 - 2014-11-22 03:06 - 00340992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2014-12-24 20:13 - 2014-11-22 03:06 - 00145408 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2014-12-24 20:13 - 2014-11-22 03:05 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2014-12-24 20:13 - 2014-11-22 02:59 - 01032704 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll
2014-12-24 20:13 - 2014-11-22 02:55 - 00661504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2014-12-24 20:13 - 2014-11-22 02:52 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2014-12-24 20:13 - 2014-11-22 02:34 - 00128000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2014-12-24 20:13 - 2014-11-22 02:29 - 00880128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll
2014-12-24 20:13 - 2014-11-22 02:28 - 02358272 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-12-24 20:13 - 2014-11-22 02:25 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2014-12-24 20:13 - 2014-10-31 06:12 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2014-12-24 20:13 - 2014-10-31 06:12 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2014-12-24 20:13 - 2014-10-31 06:10 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2014-12-24 20:13 - 2014-10-31 06:09 - 00064512 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2014-12-24 20:13 - 2014-10-31 06:08 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2014-12-24 20:13 - 2014-10-31 06:06 - 00237568 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2014-12-24 20:13 - 2014-10-31 06:06 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-12-24 20:13 - 2014-10-31 06:06 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-12-24 20:13 - 2014-10-31 05:56 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-12-24 20:13 - 2014-10-31 05:54 - 00132096 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2014-12-24 20:13 - 2014-10-31 05:53 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-12-24 20:13 - 2014-10-31 05:52 - 00108544 _____ (Microsoft Corporation) C:\Windows\system32\hlink.dll
2014-12-24 20:13 - 2014-10-31 05:51 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-12-24 20:13 - 2014-10-31 05:51 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-12-24 20:13 - 2014-10-31 05:40 - 00033280 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2014-12-24 20:13 - 2014-10-31 05:29 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2014-12-24 20:13 - 2014-10-31 05:29 - 00087552 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2014-12-24 20:13 - 2014-10-31 05:28 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2014-12-24 20:13 - 2014-10-31 05:25 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-12-24 20:13 - 2014-10-31 05:24 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2014-12-24 20:13 - 2014-10-31 05:19 - 00152064 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2014-12-24 20:13 - 2014-10-31 04:42 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2014-12-24 20:13 - 2014-10-31 04:28 - 00137728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2014-12-24 20:13 - 2014-10-31 04:28 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2014-12-24 20:13 - 2014-10-31 04:27 - 00152064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2014-12-24 20:13 - 2014-10-31 04:26 - 00057344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2014-12-24 20:13 - 2014-10-31 04:25 - 00011264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2014-12-24 20:13 - 2014-10-31 04:24 - 00235520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2014-12-24 20:13 - 2014-10-31 04:24 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-12-24 20:13 - 2014-10-31 04:23 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-12-24 20:13 - 2014-10-31 04:16 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-12-24 20:13 - 2014-10-31 04:15 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-12-24 20:13 - 2014-10-31 04:14 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2014-12-24 20:13 - 2014-10-31 04:13 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-12-24 20:13 - 2014-10-31 04:13 - 00099328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\hlink.dll
2014-12-24 20:13 - 2014-10-31 04:12 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-12-24 20:13 - 2014-10-31 04:03 - 00027136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2014-12-24 20:13 - 2014-10-31 03:57 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-12-24 20:13 - 2014-10-31 03:56 - 00091136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2014-12-24 20:13 - 2014-10-31 03:56 - 00090624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2014-12-24 20:13 - 2014-10-31 03:56 - 00073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2014-12-24 20:13 - 2014-10-31 03:53 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-12-24 20:13 - 2014-10-31 03:53 - 00052736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2014-12-24 20:13 - 2014-10-31 03:48 - 00130048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2014-12-24 20:13 - 2014-10-31 03:24 - 00040448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2014-12-24 20:13 - 2014-02-06 12:30 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-12-24 20:12 - 2014-11-07 05:16 - 01762840 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2014-12-24 20:12 - 2014-11-07 04:26 - 01489072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2014-12-24 20:12 - 2014-10-30 23:37 - 00129536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\poqexec.exe
2014-12-24 20:12 - 2014-10-30 23:34 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe
2014-12-24 20:12 - 2014-10-13 03:43 - 00238912 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\sdbus.sys
2014-12-24 20:12 - 2014-10-13 03:43 - 00153920 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dumpsd.sys
2014-12-24 20:12 - 2014-10-13 03:43 - 00086336 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pdc.sys
2014-12-24 20:12 - 2014-10-13 03:43 - 00039744 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\intelpep.sys
2014-12-24 20:10 - 2014-11-10 00:19 - 00991232 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2014-12-24 20:10 - 2014-11-10 00:19 - 00806400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2014-12-24 20:10 - 2014-11-10 00:18 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\pku2u.dll
2014-12-24 20:10 - 2014-11-10 00:18 - 00208896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pku2u.dll
2014-12-24 20:09 - 2014-10-23 06:48 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll
2014-12-24 20:09 - 2014-10-23 06:05 - 00072192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\packager.dll
2014-12-24 20:09 - 2014-10-17 08:01 - 00789184 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2014-12-24 20:09 - 2014-10-17 07:58 - 00602768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll
2014-12-24 20:09 - 2014-10-10 02:58 - 00177472 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2014-12-24 20:09 - 2014-10-10 02:58 - 00027456 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpvideominiport.sys
2014-12-24 20:09 - 2014-10-10 02:44 - 00563976 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2014-12-24 20:09 - 2014-10-08 08:37 - 00736768 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2014-12-24 20:09 - 2014-10-08 08:37 - 00154112 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2014-12-24 20:09 - 2014-10-08 08:34 - 00131584 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll
2014-12-24 20:09 - 2014-10-08 08:24 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\rfxvmt.dll
2014-12-24 20:09 - 2014-10-08 07:56 - 00445440 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
2014-12-24 20:09 - 2014-10-08 07:51 - 00736768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2014-12-24 20:09 - 2014-10-08 07:51 - 00154112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2014-12-24 20:09 - 2014-10-08 07:18 - 00324096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll
2014-12-24 20:09 - 2014-10-08 07:17 - 01441792 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-12-24 20:09 - 2014-10-08 06:23 - 03547648 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2014-12-24 20:09 - 2014-10-07 07:28 - 00500016 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll
2014-12-24 20:09 - 2014-10-07 07:27 - 00482872 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll
2014-12-24 20:09 - 2014-10-07 07:27 - 00394120 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll
2014-12-24 20:09 - 2014-10-07 07:27 - 00272248 _____ (Microsoft Corporation) C:\Windows\system32\audiodg.exe
2014-12-24 20:09 - 2014-10-07 07:27 - 00108432 _____ (Microsoft Corporation) C:\Windows\system32\EncDump.dll
2014-12-24 20:09 - 2014-10-07 04:34 - 00370424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll
2014-12-24 20:09 - 2014-10-07 04:34 - 00344536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AUDIOKSE.dll
2014-12-24 20:09 - 2014-10-07 04:33 - 00424544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioEng.dll
2014-12-24 20:09 - 2014-10-07 04:30 - 04182016 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-12-24 20:09 - 2014-10-07 02:54 - 00226304 _____ (Microsoft Corporation) C:\Windows\system32\AudioEndpointBuilder.dll
2014-12-24 20:09 - 2014-10-07 02:46 - 00911360 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2014-12-24 20:09 - 2014-09-27 08:13 - 00104336 _____ (Microsoft Corporation) C:\Windows\system32\ncryptsslp.dll
2014-12-24 20:09 - 2014-09-27 06:24 - 00088800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncryptsslp.dll
2014-12-24 20:09 - 2014-09-27 04:38 - 00426496 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2014-12-24 20:09 - 2014-09-27 04:30 - 00185856 _____ (Microsoft Corporation) C:\Windows\system32\dpapisrv.dll
2014-12-24 20:09 - 2014-09-27 04:17 - 00357376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2014-12-24 20:09 - 2014-08-23 06:18 - 02149376 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2014-12-24 20:09 - 2014-08-23 06:03 - 01346048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2014-12-24 20:08 - 2015-01-04 11:43 - 00000000 ____D () C:\Program Files (x86)\Google
2014-12-24 20:08 - 2014-12-24 20:08 - 00000000 ____D () C:\Users\Daniel\AppData\Local\Google
2014-12-24 20:08 - 2014-09-10 07:25 - 00474432 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2014-12-24 20:08 - 2014-09-08 04:07 - 02497344 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2014-12-24 20:08 - 2014-09-08 04:07 - 00428864 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
2014-12-24 20:08 - 2014-09-07 23:08 - 00389176 _____ () C:\Windows\system32\ApnDatabase.xml
2014-12-24 20:08 - 2014-09-04 23:30 - 00822272 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll
2014-12-24 20:08 - 2014-09-04 23:21 - 01053184 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll
2014-12-24 20:08 - 2014-09-04 04:05 - 00836176 _____ (Microsoft Corporation) C:\Windows\system32\mfmp4srcsnk.dll
2014-12-24 20:08 - 2014-09-04 03:22 - 00670384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfmp4srcsnk.dll
2014-12-24 20:08 - 2014-09-04 02:01 - 00448512 _____ (Microsoft Corporation) C:\Windows\system32\puiobj.dll
2014-12-24 20:08 - 2014-09-04 01:32 - 00334336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\puiobj.dll
2014-12-24 20:08 - 2014-09-04 01:10 - 00118272 _____ (Microsoft Corporation) C:\Windows\system32\winbici.dll
2014-12-24 20:08 - 2014-08-31 01:17 - 00148800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBSTOR.SYS
2014-12-24 20:08 - 2014-08-31 01:15 - 21197152 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2014-12-24 20:08 - 2014-08-30 23:59 - 18723112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2014-12-24 20:08 - 2014-08-30 23:05 - 00615424 _____ (Microsoft Corporation) C:\Windows\system32\FXSCOMEX.dll
2014-12-24 20:08 - 2014-08-30 22:58 - 00275968 _____ (Microsoft Corporation) C:\Windows\system32\FXSAPI.dll
2014-12-24 20:08 - 2014-08-30 22:04 - 00941568 _____ (Microsoft Corporation) C:\Windows\system32\MFMediaEngine.dll
2014-12-24 20:08 - 2014-08-30 21:53 - 00239104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FXSAPI.dll
2014-12-24 20:08 - 2014-08-30 21:17 - 00799744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFMediaEngine.dll
2014-12-24 20:08 - 2014-08-28 03:55 - 07484224 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2014-12-24 20:08 - 2014-08-28 01:21 - 02480128 _____ (Microsoft Corporation) C:\Windows\system32\WsmSvc.dll
2014-12-24 20:08 - 2014-08-28 01:06 - 02030592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmSvc.dll
2014-12-24 20:08 - 2014-08-23 06:14 - 13424128 _____ (Microsoft Corporation) C:\Windows\system32\twinui.dll
2014-12-24 20:08 - 2014-08-23 06:04 - 11820544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.dll
2014-12-24 20:08 - 2014-08-23 05:50 - 02714112 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers.dll
2014-12-24 20:08 - 2014-08-02 01:51 - 00545792 _____ (Microsoft Corporation) C:\Windows\system32\untfs.dll
2014-12-24 20:08 - 2014-08-02 01:35 - 00485376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\untfs.dll
2014-12-24 20:08 - 2014-07-24 12:22 - 00308736 _____ (Microsoft Corporation) C:\Windows\system32\compstui.dll
2014-12-24 20:08 - 2014-07-24 10:53 - 00215552 _____ (Microsoft Corporation) C:\Windows\system32\prnntfy.dll
2014-12-24 20:08 - 2014-07-24 10:13 - 00195584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\prnntfy.dll
2014-12-24 20:08 - 2014-07-24 09:20 - 00187392 _____ (Microsoft Corporation) C:\Windows\system32\puiapi.dll
2014-12-24 20:08 - 2014-07-24 09:08 - 00162816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\puiapi.dll
2014-12-24 20:08 - 2014-07-24 08:49 - 00263680 _____ (Microsoft Corporation) C:\Windows\system32\DafPrintProvider.dll
2014-12-24 20:08 - 2014-07-24 08:43 - 00200192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DafPrintProvider.dll
2014-12-24 20:07 - 2014-12-24 20:07 - 42184784 _____ (Google Inc.) C:\Users\Daniel\Downloads\ChromeStandaloneSetup.exe
2014-12-24 20:07 - 2014-10-18 10:55 - 00055776 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2014-12-24 20:07 - 2014-10-18 09:09 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2014-12-24 20:07 - 2014-10-18 09:09 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2014-12-24 20:07 - 2014-10-18 08:25 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2014-12-24 20:07 - 2014-10-18 07:50 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\wuaext.dll
2014-12-24 20:07 - 2014-10-18 07:38 - 03557376 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2014-12-24 20:07 - 2014-10-18 07:27 - 00035840 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2014-12-24 20:07 - 2014-10-18 07:26 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2014-12-24 20:07 - 2014-10-18 07:23 - 00407552 _____ (Microsoft Corporation) C:\Windows\system32\WUSettingsProvider.dll
2014-12-24 20:07 - 2014-10-18 07:23 - 00095744 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2014-12-24 20:07 - 2014-10-18 07:21 - 00894976 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2014-12-24 20:07 - 2014-10-18 07:20 - 01714176 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2014-12-24 20:07 - 2014-10-18 07:14 - 00124928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2014-12-24 20:07 - 2014-10-18 07:14 - 00029696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2014-12-24 20:07 - 2014-10-18 07:12 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2014-12-24 20:07 - 2014-10-18 07:11 - 00723968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2014-12-24 20:07 - 2014-09-22 05:38 - 01519488 _____ (Microsoft Corporation) C:\Windows\system32\user32.dll
2014-12-24 20:07 - 2014-09-22 04:06 - 00258368 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdFilter.sys
2014-12-24 20:07 - 2014-09-22 04:06 - 00114496 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdNisDrv.sys
2014-12-24 20:07 - 2014-09-22 03:49 - 00035320 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdBoot.sys
2014-12-24 20:07 - 2014-09-19 01:16 - 01346048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user32.dll
2014-12-24 20:07 - 2014-09-02 23:08 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\winshfhc.dll
2014-12-24 20:07 - 2014-09-02 23:08 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winshfhc.dll
2014-12-24 20:06 - 2014-08-16 05:08 - 01507648 _____ (Microsoft Corporation) C:\Windows\system32\propsys.dll
2014-12-24 20:06 - 2014-08-16 05:01 - 01710184 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2014-12-24 20:06 - 2014-08-16 04:58 - 01112512 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2014-12-24 20:06 - 2014-08-16 04:16 - 01205976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\propsys.dll
2014-12-24 20:06 - 2014-08-16 04:03 - 01467384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2014-12-24 20:06 - 2014-08-16 02:31 - 00838144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2014-12-24 20:06 - 2014-08-16 02:04 - 00359424 _____ (Microsoft Corporation) C:\Windows\system32\Wldap32.dll
2014-12-24 20:06 - 2014-08-16 01:58 - 00287744 _____ (Microsoft Corporation) C:\Windows\system32\SystemEventsBrokerServer.dll
2014-12-24 20:06 - 2014-08-16 01:53 - 00118272 _____ (Microsoft Corporation) C:\Windows\system32\httpprxm.dll
2014-12-24 20:06 - 2014-08-16 01:46 - 00290816 _____ (Microsoft Corporation) C:\Windows\system32\ProximityService.dll
2014-12-24 20:06 - 2014-08-16 01:45 - 00267776 _____ (Microsoft Corporation) C:\Windows\system32\bisrv.dll
2014-12-24 20:06 - 2014-08-16 01:43 - 00321024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Wldap32.dll
2014-12-24 20:06 - 2014-08-16 01:43 - 00075776 _____ (Microsoft Corporation) C:\Windows\system32\adhsvc.dll
2014-12-24 20:06 - 2014-08-16 01:31 - 00914432 _____ (Microsoft Corporation) C:\Windows\system32\iphlpsvc.dll
2014-12-24 20:06 - 2014-08-16 01:31 - 00286208 _____ (Microsoft Corporation) C:\Windows\system32\pcsvDevice.dll
2014-12-24 20:06 - 2014-08-16 01:29 - 00249344 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2014-12-24 20:06 - 2014-08-16 01:23 - 01106432 _____ (Microsoft Corporation) C:\Windows\system32\SearchFolder.dll
2014-12-24 20:06 - 2014-08-16 01:22 - 00717824 _____ (Microsoft Corporation) C:\Windows\system32\SkyDriveTelemetry.dll
2014-12-24 20:06 - 2014-08-16 01:22 - 00286208 _____ (Microsoft Corporation) C:\Windows\system32\SkyDriveShell.dll
2014-12-24 20:06 - 2014-08-16 01:19 - 00189952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2014-12-24 20:06 - 2014-08-16 01:18 - 04758528 _____ (Microsoft Corporation) C:\Windows\system32\SyncEngine.dll
2014-12-24 20:06 - 2014-08-16 01:17 - 08757760 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Search.dll
2014-12-24 20:06 - 2014-08-16 01:14 - 00265216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SkyDriveShell.dll
2014-12-24 20:06 - 2014-08-16 01:13 - 06649344 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2014-12-24 20:06 - 2014-08-16 01:13 - 05902848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Search.dll
2014-12-24 20:06 - 2014-08-16 01:13 - 00840192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchFolder.dll
2014-12-24 20:06 - 2014-08-16 01:11 - 00920064 _____ (Microsoft Corporation) C:\Windows\system32\WSShared.dll
2014-12-24 20:06 - 2014-08-16 01:10 - 01120768 _____ (Microsoft Corporation) C:\Windows\system32\SkyDrive.exe
2014-12-24 20:06 - 2014-08-16 01:08 - 05777408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2014-12-24 20:06 - 2014-08-16 01:07 - 00756224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSShared.dll
2014-12-24 20:06 - 2014-07-24 16:28 - 00468288 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBHUB3.SYS
2014-12-24 20:06 - 2014-07-24 12:42 - 01200640 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bthport.sys
2014-12-24 20:06 - 2014-07-24 12:41 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bridge.sys
2014-12-24 20:06 - 2014-07-24 11:09 - 01057280 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll
2014-12-24 20:06 - 2014-07-24 10:27 - 00855552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdvidcrl.dll
2014-12-24 20:05 - 2014-09-04 01:12 - 00590336 _____ (Microsoft Corporation) C:\Windows\system32\rastls.dll
2014-12-24 20:05 - 2014-09-04 01:01 - 00514048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rastls.dll
2014-12-24 20:05 - 2014-06-09 23:13 - 00035480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TsWpfWrp.exe
2014-12-24 20:05 - 2014-06-09 23:13 - 00035480 _____ (Microsoft Corporation) C:\Windows\system32\TsWpfWrp.exe
2014-12-24 20:04 - 2014-08-23 08:48 - 02374784 _____ (Microsoft Corporation) C:\Windows\explorer.exe
2014-12-24 20:04 - 2014-08-23 08:13 - 02084520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\explorer.exe
2014-12-24 20:04 - 2014-08-23 07:10 - 00068096 _____ (Microsoft Corporation) C:\Windows\system32\UXInit.dll
2014-12-24 20:04 - 2014-08-23 06:32 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UXInit.dll
2014-12-24 20:04 - 2014-08-23 05:33 - 00796672 _____ (Microsoft Corporation) C:\Windows\system32\uDWM.dll
2014-12-24 20:04 - 2014-08-15 01:36 - 00146752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msgpioclx.sys
2014-12-24 20:04 - 2014-08-02 01:18 - 01212928 _____ (Microsoft Corporation) C:\Windows\system32\schedsvc.dll
2014-12-24 20:04 - 2014-07-30 02:56 - 00299520 _____ (Microsoft Corporation) C:\Windows\system32\WSDMon.dll
2014-12-24 20:04 - 2014-07-29 06:22 - 00205824 _____ (Microsoft Corporation) C:\Windows\system32\tcpmon.dll
2014-12-24 20:03 - 2014-07-24 04:20 - 00875688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcr120_clr0400.dll
2014-12-24 20:03 - 2014-07-24 04:20 - 00869544 _____ (Microsoft Corporation) C:\Windows\system32\msvcr120_clr0400.dll
2014-12-24 20:02 - 2014-08-07 03:12 - 01336624 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2014-12-24 20:02 - 2014-08-02 04:56 - 01064448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2014-12-24 20:02 - 2014-07-15 19:16 - 03048880 _____ (Microsoft Corporation) C:\Windows\system32\WpcMon.exe
2014-12-24 20:02 - 2014-07-15 09:29 - 03118080 _____ (Microsoft Corporation) C:\Windows\system32\Wpc.dll
2014-12-24 20:02 - 2014-07-15 09:22 - 02861056 _____ (Microsoft Corporation) C:\Windows\system32\WpcWebSync.dll
2014-12-24 20:02 - 2014-07-15 09:03 - 02344448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Wpc.dll
2014-12-24 20:02 - 2014-07-12 05:17 - 00623616 _____ (Microsoft Corporation) C:\Windows\system32\MDMAgent.exe
2014-12-24 20:02 - 2014-05-01 14:31 - 00055328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wpcfltr.sys
2014-12-24 20:01 - 2014-06-20 02:48 - 01273184 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2014-12-24 20:01 - 2014-06-20 00:52 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2014-12-24 20:01 - 2014-06-13 02:15 - 00517528 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll
2014-12-24 20:01 - 2014-06-13 02:14 - 01557848 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2014-12-24 20:01 - 2014-06-13 01:10 - 00406400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll
2014-12-24 20:01 - 2014-06-06 12:34 - 02133504 _____ (Microsoft Corporation) C:\Windows\system32\dwmcore.dll
2014-12-24 20:01 - 2014-06-02 03:10 - 00423768 _____ (Microsoft Corporation) C:\Windows\system32\hal.dll
2014-12-24 20:01 - 2014-05-31 11:07 - 00440664 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2014-12-24 20:01 - 2014-05-31 11:07 - 00089944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2014-12-24 20:01 - 2014-05-31 11:07 - 00027480 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2014-12-24 20:01 - 2014-05-31 07:30 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2014-12-24 20:01 - 2014-05-31 07:27 - 00110592 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFPf.sys
2014-12-24 20:01 - 2014-05-31 07:26 - 00227840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFRd.sys
2014-12-24 20:01 - 2014-05-31 05:01 - 00284672 _____ (Microsoft Corporation) C:\Windows\system32\WUDFHost.exe
2014-12-24 20:01 - 2014-05-31 05:01 - 00209408 _____ (Microsoft Corporation) C:\Windows\system32\WUDFPlatform.dll
2014-12-24 20:01 - 2014-05-31 05:01 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\WUDFSvc.dll
2014-12-24 20:01 - 2014-05-27 10:56 - 00323584 _____ (Microsoft Corporation) C:\Windows\system32\DaOtpCredentialProvider.dll
2014-12-24 20:01 - 2014-05-27 10:53 - 00270848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DaOtpCredentialProvider.dll
2014-12-24 19:57 - 2014-06-06 14:04 - 00586240 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2014-12-24 19:57 - 2014-06-06 13:18 - 00488960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2014-12-24 19:57 - 2014-05-31 11:06 - 00555736 _____ (Microsoft Corporation) C:\Windows\system32\twinapi.appcore.dll
2014-12-24 19:57 - 2014-05-31 03:37 - 01054208 _____ (Microsoft Corporation) C:\Windows\system32\twinui.appcore.dll
2014-12-24 19:57 - 2014-05-31 03:35 - 00828928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.appcore.dll
2014-12-24 19:57 - 2014-05-30 04:03 - 00563200 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2014-12-24 19:47 - 2014-05-19 07:31 - 00057856 _____ (Microsoft Corporation) C:\Windows\system32\drvcfg.exe
2014-12-24 19:47 - 2014-05-19 07:21 - 00110592 _____ (Microsoft Corporation) C:\Windows\system32\drvinst.exe
2014-12-24 19:47 - 2014-05-19 06:23 - 00098816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drvinst.exe
2014-12-24 19:47 - 2014-05-01 06:24 - 02834944 _____ (Microsoft Corporation) C:\Windows\system32\wpccpl.dll
2014-12-24 19:47 - 2014-04-30 05:43 - 01975296 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2014-12-24 19:47 - 2014-04-30 05:26 - 01345536 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2014-12-24 19:47 - 2014-04-30 04:47 - 01509888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2014-12-24 19:39 - 2014-12-24 19:39 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_LocationProvider_01_11_00.Wdf
2014-12-24 19:38 - 2015-01-07 14:08 - 00003942 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{61AB47E5-AB5A-4D8B-89BB-14B1822A6C56}
2014-12-24 19:38 - 2014-12-24 19:38 - 00000000 __SHD () C:\Users\Daniel\AppData\Local\EmieUserList
2014-12-24 19:38 - 2014-12-24 19:38 - 00000000 __SHD () C:\Users\Daniel\AppData\Local\EmieSiteList
2014-12-24 19:33 - 2015-01-07 18:36 - 00003596 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-223822767-1807346583-171944255-1002
2014-12-24 19:31 - 2014-12-24 19:31 - 00002001 _____ () C:\Users\Public\Desktop\abMedia.lnk
2014-12-24 19:29 - 2014-12-24 19:29 - 00000000 ____D () C:\Users\Public\OEM
2014-12-24 19:28 - 2015-01-07 18:17 - 00000000 ____D () C:\Users\Daniel\AppData\Local\CrashDumps
2014-12-24 19:28 - 2014-12-24 20:22 - 00000000 ____D () C:\ProgramData\BlueStacks
2014-12-24 19:28 - 2014-12-24 19:28 - 00003334 _____ () C:\Windows\System32\Tasks\AcerCloud
2014-12-24 19:28 - 2014-12-24 19:28 - 00001969 _____ () C:\Users\Public\Desktop\abDocs.lnk
2014-12-24 19:28 - 2014-12-24 19:28 - 00000000 ____D () C:\Users\Daniel\AppData\Roaming\WildTangent
2014-12-24 19:27 - 2015-01-07 18:11 - 00000000 ____D () C:\Users\Daniel\OneDrive
2014-12-24 19:27 - 2014-12-24 19:28 - 00002102 _____ () C:\Users\Public\Desktop\Acer Portal.lnk
2014-12-24 19:26 - 2015-01-06 14:56 - 00000000 ____D () C:\Users\Daniel\AppData\Local\clear.fi
2014-12-24 19:26 - 2014-12-24 19:26 - 00000000 ____D () C:\Users\Daniel\PicStream
2014-12-24 19:13 - 2014-12-24 19:13 - 00000000 ____D () C:\Users\Daniel\AppData\Local\AOP SDK
2014-12-24 19:12 - 2014-12-24 19:12 - 00002625 _____ () C:\Users\Public\Desktop\eBay.lnk
2014-12-24 19:12 - 2014-12-24 19:12 - 00000000 ____D () C:\Users\Daniel\AppData\Roaming\Macromedia
2014-12-24 19:12 - 2014-12-24 19:12 - 00000000 ____D () C:\Program Files (x86)\OEM
2014-12-24 19:11 - 2015-01-02 14:01 - 00001682 _____ () C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-12-24 19:11 - 2014-12-31 16:20 - 00000000 ____D () C:\Users\Daniel\AppData\Local\Packages
2014-12-24 19:11 - 2014-12-24 21:17 - 00000000 ____D () C:\Users\Daniel\AppData\Local\VirtualStore
2014-12-24 19:11 - 2014-12-24 19:11 - 00001786 _____ () C:\Users\Public\Desktop\Online kaufen.lnk
2014-12-24 19:11 - 2014-12-24 19:11 - 00000180 _____ () C:\Windows\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2014-12-24 19:11 - 2014-12-24 19:11 - 00000000 ____D () C:\Windows\System32\Tasks\WPD
2014-12-24 19:11 - 2014-12-24 19:11 - 00000000 ____D () C:\Windows\oem
2014-12-24 19:11 - 2014-12-24 19:11 - 00000000 ____D () C:\Users\Daniel\AppData\Roaming\Adobe
2014-12-24 19:11 - 2014-12-24 19:11 - 00000000 ____D () C:\Users\Daniel\AppData\Local\OEM
2014-12-24 19:11 - 2014-12-24 19:11 - 00000000 ____D () C:\ProgramData\OEM_YAHOO
2014-12-24 19:11 - 2014-12-24 19:11 - 00000000 ____D () C:\Program Files\Accessory Store
2014-12-24 19:10 - 2015-01-07 08:13 - 00000000 ____D () C:\Users\Daniel\AppData\Local\Pokki
2014-12-24 19:10 - 2014-12-26 15:58 - 00000000 ____D () C:\Users\Daniel
2014-12-24 19:10 - 2014-12-24 19:10 - 00000020 ___SH () C:\Users\Daniel\ntuser.ini
2014-12-24 19:10 - 2014-12-24 19:10 - 00000000 _SHDL () C:\Users\Daniel\Vorlagen
2014-12-24 19:10 - 2014-12-24 19:10 - 00000000 _SHDL () C:\Users\Daniel\Startmenü
2014-12-24 19:10 - 2014-12-24 19:10 - 00000000 _SHDL () C:\Users\Daniel\Netzwerkumgebung
2014-12-24 19:10 - 2014-12-24 19:10 - 00000000 _SHDL () C:\Users\Daniel\Lokale Einstellungen
2014-12-24 19:10 - 2014-12-24 19:10 - 00000000 _SHDL () C:\Users\Daniel\Eigene Dateien
2014-12-24 19:10 - 2014-12-24 19:10 - 00000000 _SHDL () C:\Users\Daniel\Druckumgebung
2014-12-24 19:10 - 2014-12-24 19:10 - 00000000 _SHDL () C:\Users\Daniel\Documents\Eigene Musik
2014-12-24 19:10 - 2014-12-24 19:10 - 00000000 _SHDL () C:\Users\Daniel\Documents\Eigene Bilder
2014-12-24 19:10 - 2014-12-24 19:10 - 00000000 _SHDL () C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-12-24 19:10 - 2014-12-24 19:10 - 00000000 _SHDL () C:\Users\Daniel\AppData\Local\Verlauf
2014-12-24 19:10 - 2014-12-24 19:10 - 00000000 _SHDL () C:\Users\Daniel\AppData\Local\Anwendungsdaten
2014-12-24 19:10 - 2014-12-24 19:10 - 00000000 _SHDL () C:\Users\Daniel\Anwendungsdaten
2014-12-24 19:10 - 2014-07-25 22:18 - 00000000 ___RD () C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-12-24 19:10 - 2014-03-18 11:33 - 00000000 ___RD () C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2014-12-24 19:10 - 2014-03-18 11:13 - 00000369 _____ () C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pictures.lnk
2014-12-24 19:10 - 2014-03-18 11:13 - 00000369 _____ () C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Documents.lnk
2014-12-24 19:10 - 2013-08-22 16:36 - 00000000 ___RD () C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-12-24 19:10 - 2013-08-22 16:36 - 00000000 ____D () C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-01-07 19:32 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\sru
2015-01-07 18:24 - 2014-08-31 00:14 - 00765582 _____ () C:\Windows\system32\perfh007.dat
2015-01-07 18:24 - 2014-08-31 00:14 - 00159366 _____ () C:\Windows\system32\perfc007.dat
2015-01-07 18:24 - 2014-03-18 11:03 - 01776918 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-01-07 18:10 - 2013-08-22 15:45 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-01-07 11:54 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\AppReadiness
2015-01-07 08:09 - 2014-08-30 14:59 - 00000000 ____D () C:\Program Files (x86)\AGEIA Technologies
2015-01-07 08:09 - 2014-07-25 22:20 - 00000000 ____D () C:\Program Files (x86)\Acer
2015-01-06 23:00 - 2014-07-25 22:28 - 00000000 ____D () C:\ProgramData\McAfee
2015-01-06 23:00 - 2014-07-25 22:28 - 00000000 ____D () C:\Program Files\Common Files\mcafee
2015-01-06 22:48 - 2014-07-25 22:21 - 00000000 ____D () C:\ProgramData\Package Cache
2015-01-06 22:40 - 2013-08-22 16:36 - 00000000 ___HD () C:\Windows\ELAMBKUP
2015-01-06 22:40 - 2013-08-22 14:25 - 00262144 ___SH () C:\Windows\system32\config\ELAM
2015-01-06 22:38 - 2014-07-25 22:00 - 00000000 ____D () C:\Users\Administrator
2015-01-06 15:09 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\LiveKernelReports
2015-01-06 14:58 - 2014-07-25 22:21 - 00000000 ___SD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acer
2015-01-04 11:47 - 2013-08-22 14:25 - 00262144 ___SH () C:\Windows\system32\config\BBI
2015-01-03 21:54 - 2013-08-22 15:44 - 00347808 _____ () C:\Windows\system32\FNTCACHE.DAT
2015-01-03 21:15 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\NDF
2015-01-02 02:21 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\rescache
2015-01-01 01:46 - 2014-03-18 10:45 - 00000000 ____D () C:\Program Files\Windows Journal
2015-01-01 01:46 - 2013-08-22 16:36 - 00000000 ___RD () C:\Windows\ToastData
2015-01-01 01:46 - 2013-08-22 16:36 - 00000000 ___RD () C:\Windows\ImmersiveControlPanel
2015-01-01 01:46 - 2013-08-22 16:36 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2015-01-01 01:46 - 2013-08-22 16:36 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2015-01-01 01:46 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\SysWOW64\setup
2015-01-01 01:46 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\SysWOW64\InputMethod
2015-01-01 01:46 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\setup
2015-01-01 01:46 - 2013-08-22 14:36 - 00000000 ____D () C:\Windows\system32\oobe
2014-12-31 00:11 - 2013-08-22 16:20 - 00000000 ____D () C:\Windows\CbsTemp
2014-12-27 00:15 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files\Common Files\microsoft shared
2014-12-25 01:02 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files\Windows NT
2014-12-25 01:02 - 2013-08-22 14:36 - 00000000 __RHD () C:\Users\Default
2014-12-25 00:48 - 2014-07-25 22:58 - 00000000 ____D () C:\Windows\Panther
2014-12-24 21:36 - 2013-08-22 16:36 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-12-24 21:36 - 2013-08-22 16:36 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-12-24 21:36 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\WinStore
2014-12-24 21:36 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\sr-Latn-RS
2014-12-24 21:36 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\sr-Latn-CS
2014-12-24 21:36 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\PolicyDefinitions
2014-12-24 21:36 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\MediaViewer
2014-12-24 21:36 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\FileManager
2014-12-24 21:36 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\Camera
2014-12-24 21:36 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files\Windows Defender
2014-12-24 21:36 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files (x86)\Windows Defender
2014-12-24 20:22 - 2013-08-22 16:36 - 00000000 __RHD () C:\Users\Public\Libraries
2014-12-24 20:13 - 2014-07-25 22:20 - 00000000 ____D () C:\ProgramData\acer
2014-12-24 19:45 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\restore
2014-12-24 19:28 - 2014-07-25 22:24 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2014-12-24 19:28 - 2014-07-25 22:23 - 00000000 ____D () C:\ProgramData\WildTangent
2014-12-24 19:28 - 2014-07-25 22:23 - 00000000 ____D () C:\Program Files (x86)\WildTangent Games
2014-12-24 19:26 - 2014-07-25 22:57 - 00000000 ___HD () C:\OEM
2014-12-24 19:26 - 2014-07-25 22:21 - 00000000 ____D () C:\ProgramData\OEM

Some content of TEMP:
====================
C:\Users\Daniel\AppData\Local\Temp\avgnt.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-01-07 07:25

==================== End Of Log ============================

--- --- ---

--- --- ---

schrauber · 08.01.2015, 07:18

Einfach das Log aufteilen und mehrere Posts benutzen

Friedrich290 · 08.01.2015, 10:32

Hallo,

anbei das "Addition".

Code:

ATTFilter

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 07-01-2015
Ran by Daniel at 2015-01-07 19:42:38
Running from C:\Users\Daniel\AppData\Local\Microsoft\Windows\INetCache\IE\VOJP8WLO
Boot Mode: Normal
==========================================================


==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Avira Desktop (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Avira Desktop (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

abDocs (HKLM-x32\...\{CA4FE8B0-298C-4E5D-A486-F33B126D6A0A}) (Version: 1.05.2003 - Acer Incorporated)
abDocs Office AddIn (HKLM-x32\...\{DCBF3379-246B-47E1-8173-639B63940838}) (Version: 3.01.2006 - Acer Incorporated)
abFiles (HKLM-x32\...\{13885028-098C-4799-9B71-27DAC96502D5}) (Version: 2.00.3002 - Acer Incorporated)
abMedia (HKLM-x32\...\{E9AF1707-3F3A-49E2-8345-4F2D629D0876}) (Version: 2.06.2001.3 - Acer Incorporated)
abPhoto (HKLM-x32\...\{B5AD89F2-03D3-4206-8487-018298007DD0}) (Version: 3.01.2005.1 - Acer Incorporated)
Acer Care Center (HKLM\...\{A424844F-CDB3-45E2-BB77-1DDE4A091E76}) (Version: 1.00.3012 - Acer Incorporated)
Acer Explorer Agent (HKLM\...\{4D0F42CF-1693-43D9-BDC8-19141D023EE0}) (Version: 2.00.3000 - Acer Incorporated)
Acer Launch Manager (HKLM\...\{C18D55BD-1EC6-466D-B763-8EEDDDA9100E}) (Version: 8.00.8107 - Acer Incorporated)
Acer Portal (HKLM-x32\...\{A5AD0B17-F34D-49BE-A157-C8B3D52ACD13}) (Version: 3.03.2002 - Acer Incorporated)
Acer Power Management (HKLM\...\{91F52DE4-B789-42B0-9311-A349F10E5479}) (Version: 7.00.8105 - Acer Incorporated)
Acer Quick Access (HKLM\...\{C1FA525F-D701-4B31-9D32-504FC0CF0B98}) (Version: 1.01.3016.0 - Acer Incorporated)
Acer Recovery Management (HKLM\...\{07F2005A-8CAC-4A4B-83A2-DA98A722CA61}) (Version: 6.00.8108 - Acer Incorporated)
Acer User Experience Improvement Program App Monitor Plugin (HKLM\...\{978724F6-1863-4DD5-9E66-FB77F5AB5613}) (Version: 1.02.3005 - Acer Incorporated)
Acer User Experience Improvement Program Framework (HKLM\...\{12A718F2-2357-4D41-9E1F-18583A4745F7}) (Version: 1.02.3005 - Acer Incorporated)
Acer Video Player (HKLM-x32\...\{B6846F20-4821-11E3-8F96-0800200C9A66}) (Version: 1.00.2005.0 - Acer Incorporated)
Adobe Flash Player 16 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 16.0.0.235 - Adobe Systems Incorporated)
Aloha TriPeaks (x32 Version: 2.2.0.98 - WildTangent) Hidden
AOP Framework (HKLM-x32\...\{4A37A114-702F-4055-A4B6-16571D4A5353}) (Version: 3.03.2001.0 - Acer Incorporated)
Avira (HKLM-x32\...\{e7c7c227-b742-4878-9425-f09bbf9951db}) (Version: 1.1.27.25527 - Avira Operations & Co. KG)
Avira (x32 Version: 1.1.27.25527 - Avira Operations & Co. KG) Hidden
Avira Free Antivirus (HKLM-x32\...\Avira AntiVir Desktop) (Version: 14.0.7.468 - Avira)
Bejeweled 2 Deluxe (x32 Version: 2.2.0.95 - WildTangent) Hidden
BlueStacks App Player (HKLM-x32\...\BlueStacks App Player) (Version: 0.9.4.4079 - BlueStack Systems, Inc.)
BlueStacks Notification Center (HKLM-x32\...\{8DCCC556-265B-478A-8B32-C12DA988BA74}) (Version: 0.9.4.4079 - BlueStack Systems, Inc.)
CCleaner (HKLM\...\CCleaner) (Version: 5.01 - Piriform)
CHIP Updater (HKLM-x32\...\CHIP Updater_is1) (Version: 2.39 - Abelssoft)
CyberLink PhotoDirector 3 (HKLM-x32\...\InstallShield_{39337565-330E-4ab6-A9AE-AC81E0720B10}) (Version: 3.0.1.4917 - CyberLink Corp.)
CyberLink Power Media Player 12 (HKLM-x32\...\InstallShield_{B46BEA36-0B71-4A4E-AE41-87241643FA0A}) (Version: 12.0.3.4218 - CyberLink Corp.)
CyberLink PowerDirector 10 (HKLM-x32\...\InstallShield_{B0B4F6D2-F2AE-451A-9496-6F2F6A897B32}) (Version: 10.0.0.4220 - CyberLink Corp.)
eBay Worldwide (HKLM-x32\...\{91589413-6675-4C27-8AFC-EFB9103B90A5}) (Version: 2.4.0105 - OEM)
Euro Truck Simulator 2 (HKLM-x32\...\{1B705E8F-9893-4486-B5D7-4F7FEB9C871E}_is1) (Version: 1.5.2 - SCS Software)
EZDownloader (HKLM-x32\...\{0F44DC3A-6E62-4961-A14B-95323C512F9B}_is1) (Version: 1.0 - EZDownloader) <==== ATTENTION
Farm to Fork Collector's Edition (x32 Version: 3.0.2.59 - WildTangent) Hidden
Foxit PhantomPDF (HKLM-x32\...\{D4DF5498-C95C-4A02-9951-725FB2D7BC0D}) (Version: 6.0.121.624 - Foxit Corporation)
Game Explorer Categories - genres (HKLM-x32\...\WildTangentGameProvider-acer-genres) (Version: 11.0.0.7 - WildTangent, Inc.)
Game Explorer Categories - main (HKLM-x32\...\WildTangentGameProvider-acer-main) (Version: 11.0.0.7 - WildTangent, Inc.)
Governor of Poker 2 Premium Edition (x32 Version: 3.0.2.59 - WildTangent) Hidden
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.5.23.1766 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.3496 - Intel Corporation)
Intel(R) Serial IO (HKLM\...\{9FD91C5C-44AE-4D9D-85BE-AE52816B0294}) (Version: 1.1.165.1 - Intel Corporation)
Java 8 Update 25 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218025F0}) (Version: 8.0.250 - Oracle Corporation)
Jewel Match 3 (x32 Version: 3.0.2.59 - WildTangent) Hidden
King Oddball (x32 Version: 3.0.2.48 - WildTangent) Hidden
Landwirtschafts Simulator 15 (HKLM-x32\...\FarmingSimulator2015DE_is1) (Version: 1.2.0.0 - GIANTS Software)
LUXOR Evolved (x32 Version: 2.2.0.98 - WildTangent) Hidden
Magic Academy (x32 Version: 2.2.0.98 - WildTangent) Hidden
Microsoft Office (HKLM-x32\...\{90150000-0138-0409-0000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{d491dd9d-2eda-4d75-b504-1a201436e7fd}) (Version: 11.0.61030.0 - Microsoft Corporation)
Mozilla Firefox 34.0.5 (x86 de) (HKLM-x32\...\Mozilla Firefox 34.0.5 (x86 de)) (Version: 34.0.5 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 34.0.5 - Mozilla)
NVIDIA Grafiktreiber 332.35 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 332.35 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.13.0927 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.13.0927 - NVIDIA Corporation)
NVIDIA Update 1.15.2 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 1.15.2 - NVIDIA Corporation)
Peggle Nights (x32 Version: 2.2.0.98 - WildTangent) Hidden
Plants vs. Zombies - Game of the Year (x32 Version: 3.0.2.59 - WildTangent) Hidden
Pokki (HKU\S-1-5-21-223822767-1807346583-171944255-1002\...\Pokki) (Version: 0.269.5.367 - Pokki) <==== ATTENTION!
Pokki Start Menu (HKU\S-1-5-21-223822767-1807346583-171944255-1001\...\Pokki) (Version: 0.269.2.471 - Pokki)
Polar Bowler 1st Frame (x32 Version: 3.0.2.59 - WildTangent) Hidden
Qualcomm Atheros Bluetooth Suite (64) (HKLM\...\{A84A4FB1-D703-48DB-89E0-68B6499D2801}) (Version: 8.0.1.318 - Qualcomm Atheros Communications)
Qualcomm Atheros WLAN and Bluetooth Client Installation Program (HKLM-x32\...\{28006915-2739-4EBE-B5E8-49B25D32EB33}) (Version: 12.29 - Qualcomm Atheros)
Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 6.3.9600.21247 - Realtek Semiconductor Corp.)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.25.108.2014 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7203 - Realtek Semiconductor Corp.)
Search App by Ask (HKLM-x32\...\{4F524A2D-5350-4500-76A7-A758B70C1500}) (Version: 12.21.0.114 - APN, LLC) <==== ATTENTION
Search Protect (HKLM-x32\...\SearchProtect) (Version: 2.19.11.45 - Client Connect LTD) <==== ATTENTION
SkypEmoticons (HKLM-x32\...\SkypEmoticons_is1) (Version:  - ) <==== ATTENTION
Spotify (HKLM-x32\...\Spotify) (Version: 0.9.6.81.gd359a796 - Spotify AB)
Steam (HKLM-x32\...\{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve Corporation)
The Chronicles of Emerland Solitaire (x32 Version: 3.0.2.51 - WildTangent) Hidden
Train Simulator 2015 (HKLM-x32\...\Steam App 24010) (Version:  - RailSimulator.com)
Trinklit Supreme (x32 Version: 2.2.0.98 - WildTangent) Hidden
UberRevel (HKLM-x32\...\{12DA0E6F-5543-440C-BAA2-28BF01070AFA}{fc67e7a0}) (Version:  - PortTartan) <==== ATTENTION
Update Installer for WildTangent Games App (x32 Version:  - WildTangent) Hidden
WEB.DE MailCheck für Mozilla Firefox (HKLM-x32\...\1&1 Mail & Media GmbH Toolbar FF) (Version: 3.0.2.1739 - 1&1 Mail & Media GmbH)
WildTangent Games (HKLM-x32\...\WildTangent wildgames Master Uninstall) (Version: 1.0.4.0 - WildTangent)
WildTangent Games App (x32 Version: 4.0.11.13 - WildTangent) Hidden
Zuma's Revenge (x32 Version: 2.2.0.97 - WildTangent) Hidden

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

CustomCLSID: HKU\S-1-5-21-223822767-1807346583-171944255-1002_Classes\CLSID\{820D63D5-8CFF-46DE-86AF-4997DEDD6DB5}\localserver32 -> C:\Windows\system32\igfxEM.exe (Intel Corporation)

==================== Restore Points  =========================


==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2013-08-22 14:25 - 2013-08-22 14:25 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {005282E6-5CC6-4BF7-98C5-90CBAB18AF32} - System32\Tasks\b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-1 => C:\Program Files (x86)\TheHDvid-Codec V10\TheHDvid-Codec V10-codedownloader.exe <==== ATTENTION
Task: {04FDA3B4-190A-49C6-9F22-60ECBB7D186E} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-12-12] (Piriform Ltd)
Task: {060D00F5-1B11-4D47-A241-1B2AB75C46DB} - System32\Tasks\Quick Access => C:\Program Files\Acer\Acer Quick Access\QALauncher.exe [2014-06-26] (Acer Incorporate)
Task: {09A13E77-54E7-45B9-A0E3-246DFCA6DFCE} - System32\Tasks\d187d13c-eb9d-4d47-bf31-4a5c3088774b-6 => C:\Program Files (x86)\CinemaP-1.9cV02.01\d187d13c-eb9d-4d47-bf31-4a5c3088774b-6.exe <==== ATTENTION
Task: {23D62AD5-820A-4D13-89EB-DEC1CFFB8180} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\Windows\system32\MRT.exe [2014-11-27] (Microsoft Corporation)
Task: {25310ADF-62CC-4A98-85E2-575BEB37296A} - System32\Tasks\AcerCloud => C:\Program Files (x86)\Acer\Acer Portal\AcerPortal.exe [2014-11-19] (Acer)
Task: {2778DC1C-DF9B-44AA-AD01-974499DAB3EC} - System32\Tasks\Power Management => C:\Program Files\Acer\Acer Power Management\ePowerTrayLauncher.exe [2014-06-12] (Acer Incorporated)
Task: {2923779E-6EEB-48BE-A74D-8C074541E151} - System32\Tasks\ACCAgent => C:\Program Files (x86)\Acer\Care Center\LiveUpdateAgent.exe [2014-08-29] ()
Task: {2CDB4F58-A85B-44BA-8169-B17F48E4A352} - System32\Tasks\d187d13c-eb9d-4d47-bf31-4a5c3088774b-4 => C:\Program Files (x86)\CinemaP-1.9cV02.01\d187d13c-eb9d-4d47-bf31-4a5c3088774b-4.exe <==== ATTENTION
Task: {3D579731-9F71-434C-A882-4C8FFDB72088} - System32\Tasks\YDYXQG => C:\Users\Daniel\AppData\Roaming\YDYXQG.exe <==== ATTENTION
Task: {454BA2C3-F94E-44A5-8F7E-8A563168E5A2} - System32\Tasks\d187d13c-eb9d-4d47-bf31-4a5c3088774b-1 => C:\Program Files (x86)\CinemaP-1.9cV02.01\CinemaP-1.9cV02.01-codedownloader.exe <==== ATTENTION
Task: {4621F24C-2B09-4415-A9B5-59E80B23B1ED} - System32\Tasks\ACC => C:\Program Files (x86)\Acer\Care Center\LiveUpdateChecker.exe [2014-08-29] ()
Task: {46BFCD9C-18CA-4CF4-A3C6-3F7334F6CE39} - System32\Tasks\XSHNPL => C:\Users\Daniel\AppData\Roaming\XSHNPL.exe <==== ATTENTION
Task: {46D85616-C991-4614-8EAE-F85312D2598B} - System32\Tasks\Launch Manager => C:\Program Files\Acer\Acer Launch Manager\LMLauncher.exe [2014-06-10] (Acer Incorporate)
Task: {64B46CB1-7ED1-4E5E-A643-CDC49CF7DEDC} - System32\Tasks\Quick Access Quick Launcher => C:\Program Files\Acer\Acer Quick Access\QALauncher.exe [2014-06-26] (Acer Incorporate)
Task: {7322D2DA-6C4A-4CDE-9632-076A5631BA28} - System32\Tasks\d187d13c-eb9d-4d47-bf31-4a5c3088774b-5_user => C:\Program Files (x86)\CinemaP-1.9cV02.01\d187d13c-eb9d-4d47-bf31-4a5c3088774b-5.exe <==== ATTENTION
Task: {73D1D1E0-573E-4AFB-9EF2-26758087333A} - System32\Tasks\d187d13c-eb9d-4d47-bf31-4a5c3088774b-3 => C:\Program Files (x86)\CinemaP-1.9cV02.01\d187d13c-eb9d-4d47-bf31-4a5c3088774b-3.exe <==== ATTENTION
Task: {77E4DE76-2464-4DE3-BD2C-C27DF78E4D75} - System32\Tasks\d187d13c-eb9d-4d47-bf31-4a5c3088774b-7 => C:\Program Files (x86)\CinemaP-1.9cV02.01\d187d13c-eb9d-4d47-bf31-4a5c3088774b-7.exe <==== ATTENTION
Task: {7A635968-AEB1-476F-9CE0-C3010E47BAC9} - System32\Tasks\b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-5_user => C:\Program Files (x86)\TheHDvid-Codec V10\b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-5.exe <==== ATTENTION
Task: {7CC3A020-2B4B-420B-B12D-B45BF4A1101B} - System32\Tasks\Recovery Management\Notification => C:\Program Files\Acer\Acer Recovery Management\Notification\Notification.exe [2014-06-17] (Acer Incorporated)
Task: {9B38F77E-6D57-4AF2-8A8A-6F7BFDE11C0B} - System32\Tasks\KYBEFZU => C:\Users\Daniel\AppData\Roaming\KYBEFZU.exe <==== ATTENTION
Task: {AA9F1F0F-147D-4013-A93A-B1C5D81C0680} - System32\Tasks\Software Update Application => C:\ProgramData\OEM\UpgradeTool\ListCheck.exe [2014-06-08] (Acer Incorporated)
Task: {C7645734-8799-4C04-95FA-0FAF3E89B85F} - System32\Tasks\Abelssoft\Updater scan => C:\Program Files (x86)\CHIP Updater\CHIPUpdater.exe [2014-12-04] (CHIP)
Task: {CE01B344-EB87-4532-A1F4-E725F78EB745} - System32\Tasks\b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-7 => C:\Program Files (x86)\TheHDvid-Codec V10\b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-7.exe <==== ATTENTION
Task: {CF01AD8B-4104-4DBC-8D89-7E8DD5453BD9} - System32\Tasks\d187d13c-eb9d-4d47-bf31-4a5c3088774b-5 => C:\Program Files (x86)\CinemaP-1.9cV02.01\d187d13c-eb9d-4d47-bf31-4a5c3088774b-5.exe <==== ATTENTION
Task: {D1A4EBBE-45B0-44B0-81FD-BF817F4EEDDF} - System32\Tasks\b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-4 => C:\Program Files (x86)\TheHDvid-Codec V10\b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-4.exe <==== ATTENTION
Task: {D2C85179-59A4-4810-8DC7-58FE0ECD23AA} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-12-25] (Adobe Systems Incorporated)
Task: {D8B8C766-27EB-45EC-8EE9-48E488196B62} - System32\Tasks\b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-6 => C:\Program Files (x86)\TheHDvid-Codec V10\b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-6.exe <==== ATTENTION
Task: {E744ED2B-A072-4D77-99F5-E32DBFB79ACF} - System32\Tasks\b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-5 => C:\Program Files (x86)\TheHDvid-Codec V10\b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-5.exe <==== ATTENTION
Task: {F69239AC-BF10-463C-8CAE-7FD508923AE7} - System32\Tasks\UbtFrameworkService => C:\Program Files\Acer\User Experience Improvement Program\Framework\TriggerFramework.exe [2014-03-13] (TODO: <Company name>)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-1.job => C:\Program Files (x86)\TheHDvid-Codec V10\TheHDvid-Codec V10-codedownloader.exe <==== ATTENTION
Task: C:\Windows\Tasks\b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-4.job => C:\Program Files (x86)\TheHDvid-Codec V10\b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-4.exe <==== ATTENTION
Task: C:\Windows\Tasks\b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-5.job => C:\Program Files (x86)\TheHDvid-Codec V10\b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-5.exe <==== ATTENTION
Task: C:\Windows\Tasks\b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-5_user.job => C:\Program Files (x86)\TheHDvid-Codec V10\b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-5.exe <==== ATTENTION
Task: C:\Windows\Tasks\b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-6.job => C:\Program Files (x86)\TheHDvid-Codec V10\b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-6.exe <==== ATTENTION
Task: C:\Windows\Tasks\b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-7.job => C:\Program Files (x86)\TheHDvid-Codec V10\b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-7.exe <==== ATTENTION
Task: C:\Windows\Tasks\d187d13c-eb9d-4d47-bf31-4a5c3088774b-1.job => C:\Program Files (x86)\CinemaP-1.9cV02.01\CinemaP-1.9cV02.01-codedownloader.exe <==== ATTENTION
Task: C:\Windows\Tasks\d187d13c-eb9d-4d47-bf31-4a5c3088774b-3.job => C:\Program Files (x86)\CinemaP-1.9cV02.01\d187d13c-eb9d-4d47-bf31-4a5c3088774b-3.exe <==== ATTENTION
Task: C:\Windows\Tasks\d187d13c-eb9d-4d47-bf31-4a5c3088774b-4.job => C:\Program Files (x86)\CinemaP-1.9cV02.01\d187d13c-eb9d-4d47-bf31-4a5c3088774b-4.exe <==== ATTENTION
Task: C:\Windows\Tasks\d187d13c-eb9d-4d47-bf31-4a5c3088774b-5.job => C:\Program Files (x86)\CinemaP-1.9cV02.01\d187d13c-eb9d-4d47-bf31-4a5c3088774b-5.exe <==== ATTENTION
Task: C:\Windows\Tasks\d187d13c-eb9d-4d47-bf31-4a5c3088774b-5_user.job => C:\Program Files (x86)\CinemaP-1.9cV02.01\d187d13c-eb9d-4d47-bf31-4a5c3088774b-5.exe <==== ATTENTION
Task: C:\Windows\Tasks\d187d13c-eb9d-4d47-bf31-4a5c3088774b-6.job => C:\Program Files (x86)\CinemaP-1.9cV02.01\d187d13c-eb9d-4d47-bf31-4a5c3088774b-6.exe <==== ATTENTION
Task: C:\Windows\Tasks\d187d13c-eb9d-4d47-bf31-4a5c3088774b-7.job => C:\Program Files (x86)\CinemaP-1.9cV02.01\d187d13c-eb9d-4d47-bf31-4a5c3088774b-7.exe <==== ATTENTION
Task: C:\Windows\Tasks\KYBEFZU.job => C:\Users\Daniel\AppData\Roaming\KYBEFZU.exe <==== ATTENTION
Task: C:\Windows\Tasks\XSHNPL.job => C:\Users\Daniel\AppData\Roaming\XSHNPL.exe <==== ATTENTION
Task: C:\Windows\Tasks\YDYXQG.job => C:\Users\Daniel\AppData\Roaming\YDYXQG.exe <==== ATTENTION

==================== Loaded Modules (whitelisted) =============

2014-07-25 22:23 - 2012-04-24 11:43 - 00254512 ____N () C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe
2014-08-30 14:58 - 2014-01-08 01:48 - 00117536 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2014-08-30 15:01 - 2013-12-10 00:27 - 01242584 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll
2015-01-06 21:49 - 2015-01-06 21:49 - 00566272 _____ () C:\ProgramData\RandomPrriCCe\DFVI77nzx5mHE8.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)

AlternateDataStreams: C:\Users\Daniel\OneDrive:ms-properties

==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcpltsvc => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mcpltsvc => ""=""

==================== EXE Association (whitelisted) =============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


==================== MSCONFIG/TASK MANAGER disabled items =========

(Currently there is no automatic fix for this section.)


========================= Accounts: ==========================

Administrator (S-1-5-21-223822767-1807346583-171944255-500 - Administrator - Disabled)
Daniel (S-1-5-21-223822767-1807346583-171944255-1002 - Administrator - Enabled) => C:\Users\Daniel
Gast (S-1-5-21-223822767-1807346583-171944255-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-223822767-1807346583-171944255-1004 - Limited - Enabled)
UpdatusUser (S-1-5-21-223822767-1807346583-171944255-1001 - Limited - Enabled) => C:\Users\UpdatusUser

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (01/07/2015 06:17:48 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: plugin-container.exe, Version: 34.0.5.5443, Zeitstempel: 0x5475dd5d
Name des fehlerhaften Moduls: mozalloc.dll, Version: 34.0.5.5443, Zeitstempel: 0x5475d664
Ausnahmecode: 0x80000003
Fehleroffset: 0x00001425
ID des fehlerhaften Prozesses: 0xd28
Startzeit der fehlerhaften Anwendung: 0xplugin-container.exe0
Pfad der fehlerhaften Anwendung: plugin-container.exe1
Pfad des fehlerhaften Moduls: plugin-container.exe2
Berichtskennung: plugin-container.exe3
Vollständiger Name des fehlerhaften Pakets: plugin-container.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: plugin-container.exe5

Error: (01/07/2015 06:12:35 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: AcerPortal.exe, Version: 3.0.3.2000, Zeitstempel: 0x546c82a9
Name des fehlerhaften Moduls: SHELL32.dll, Version: 6.3.9600.17331, Zeitstempel: 0x54023318
Ausnahmecode: 0xc0000005
Fehleroffset: 0x001bf5f0
ID des fehlerhaften Prozesses: 0x80c
Startzeit der fehlerhaften Anwendung: 0xAcerPortal.exe0
Pfad der fehlerhaften Anwendung: AcerPortal.exe1
Pfad des fehlerhaften Moduls: AcerPortal.exe2
Berichtskennung: AcerPortal.exe3
Vollständiger Name des fehlerhaften Pakets: AcerPortal.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: AcerPortal.exe5

Error: (01/07/2015 05:45:37 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: InfamousHeroesEntry.exe, Version: 0.0.0.0, Zeitstempel: 0x5416e479
Name des fehlerhaften Moduls: InfamousHeroesEntry.exe, Version: 0.0.0.0, Zeitstempel: 0x5416e479
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00161ed0
ID des fehlerhaften Prozesses: 0xac0
Startzeit der fehlerhaften Anwendung: 0xInfamousHeroesEntry.exe0
Pfad der fehlerhaften Anwendung: InfamousHeroesEntry.exe1
Pfad des fehlerhaften Moduls: InfamousHeroesEntry.exe2
Berichtskennung: InfamousHeroesEntry.exe3
Vollständiger Name des fehlerhaften Pakets: InfamousHeroesEntry.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: InfamousHeroesEntry.exe5

Error: (01/07/2015 05:45:37 PM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Anwendung: InfamousHeroesEntry.exe
Frameworkversion: v4.0.30319
Beschreibung: Der Prozess wurde aufgrund einer unbehandelten Ausnahme beendet.
Ausnahmeinformationen: Ausnahmecode c0000005, Ausnahmeadresse 00BA1ED0
Stapel:

Error: (01/07/2015 05:42:27 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: InfamousHeroesEntry.exe, Version: 0.0.0.0, Zeitstempel: 0x5416e479
Name des fehlerhaften Moduls: combase.dll, Version: 6.3.9600.17031, Zeitstempel: 0x53086d7c
Ausnahmecode: 0xc000027b
Fehleroffset: 0x000fb1d7
ID des fehlerhaften Prozesses: 0x1e14
Startzeit der fehlerhaften Anwendung: 0xInfamousHeroesEntry.exe0
Pfad der fehlerhaften Anwendung: InfamousHeroesEntry.exe1
Pfad des fehlerhaften Moduls: InfamousHeroesEntry.exe2
Berichtskennung: InfamousHeroesEntry.exe3
Vollständiger Name des fehlerhaften Pakets: InfamousHeroesEntry.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: InfamousHeroesEntry.exe5

Error: (01/07/2015 05:06:36 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: BackgroundAgent.exe, Version: 1.0.1.6, Zeitstempel: 0x546963f7
Name des fehlerhaften Moduls: MSVCR90.dll, Version: 9.0.30729.8387, Zeitstempel: 0x51ea24a5
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00056b1d
ID des fehlerhaften Prozesses: 0x568
Startzeit der fehlerhaften Anwendung: 0xBackgroundAgent.exe0
Pfad der fehlerhaften Anwendung: BackgroundAgent.exe1
Pfad des fehlerhaften Moduls: BackgroundAgent.exe2
Berichtskennung: BackgroundAgent.exe3
Vollständiger Name des fehlerhaften Pakets: BackgroundAgent.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: BackgroundAgent.exe5

Error: (01/07/2015 04:56:39 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: AcerPortal.exe, Version: 3.0.3.2000, Zeitstempel: 0x546c82a9
Name des fehlerhaften Moduls: SHELL32.dll, Version: 6.3.9600.17331, Zeitstempel: 0x54023318
Ausnahmecode: 0xc0000005
Fehleroffset: 0x001bf5f0
ID des fehlerhaften Prozesses: 0x1440
Startzeit der fehlerhaften Anwendung: 0xAcerPortal.exe0
Pfad der fehlerhaften Anwendung: AcerPortal.exe1
Pfad des fehlerhaften Moduls: AcerPortal.exe2
Berichtskennung: AcerPortal.exe3
Vollständiger Name des fehlerhaften Pakets: AcerPortal.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: AcerPortal.exe5

Error: (01/07/2015 00:42:25 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: AcerPortal.exe, Version: 3.0.3.2000, Zeitstempel: 0x546c82a9
Name des fehlerhaften Moduls: SHELL32.dll, Version: 6.3.9600.17331, Zeitstempel: 0x54023318
Ausnahmecode: 0xc0000005
Fehleroffset: 0x001bf5f0
ID des fehlerhaften Prozesses: 0x16b0
Startzeit der fehlerhaften Anwendung: 0xAcerPortal.exe0
Pfad der fehlerhaften Anwendung: AcerPortal.exe1
Pfad des fehlerhaften Moduls: AcerPortal.exe2
Berichtskennung: AcerPortal.exe3
Vollständiger Name des fehlerhaften Pakets: AcerPortal.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: AcerPortal.exe5

Error: (01/07/2015 11:21:19 AM) (Source: ESENT) (EventID: 490) (User: )
Description: svchost (4196) Instance: Versuch, Datei "C:\ProgramData\Microsoft\Windows\AppRepository\PackageRepository.edb" für den Lese-/Schreibzugriff zu öffnen, ist mit Systemfehler 32 (0x00000020): "Der Prozess kann nicht auf die Datei zugreifen, da sie von einem anderen Prozess verwendet wird. " fehlgeschlagen. Fehler -1032 (0xfffffbf8) beim Öffnen von Dateien.

Error: (01/07/2015 11:21:09 AM) (Source: ESENT) (EventID: 490) (User: )
Description: svchost (4196) Instance: Versuch, Datei "C:\ProgramData\Microsoft\Windows\AppRepository\PackageRepository.edb" für den Lese-/Schreibzugriff zu öffnen, ist mit Systemfehler 32 (0x00000020): "Der Prozess kann nicht auf die Datei zugreifen, da sie von einem anderen Prozess verwendet wird. " fehlgeschlagen. Fehler -1032 (0xfffffbf8) beim Öffnen von Dateien.


System errors:
=============
Error: (01/07/2015 06:11:01 PM) (Source: DCOM) (EventID: 10016) (User: 1906DANIEL)
Description: AnwendungsspezifischLokalStart{7022A3B3-D004-4F52-AF11-E9E987FEE25F}{ADA41B3C-C6FD-4A08-8CC1-D6EFDE67BE7D}1906DanielDanielS-1-5-21-223822767-1807346583-171944255-1002LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar

Error: (01/07/2015 06:11:01 PM) (Source: DCOM) (EventID: 10016) (User: 1906DANIEL)
Description: AnwendungsspezifischLokalStart{7022A3B3-D004-4F52-AF11-E9E987FEE25F}{ADA41B3C-C6FD-4A08-8CC1-D6EFDE67BE7D}1906DanielDanielS-1-5-21-223822767-1807346583-171944255-1002LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar

Error: (01/07/2015 06:11:01 PM) (Source: DCOM) (EventID: 10016) (User: 1906DANIEL)
Description: AnwendungsspezifischLokalStart{7022A3B3-D004-4F52-AF11-E9E987FEE25F}{ADA41B3C-C6FD-4A08-8CC1-D6EFDE67BE7D}1906DanielDanielS-1-5-21-223822767-1807346583-171944255-1002LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar

Error: (01/07/2015 06:11:00 PM) (Source: DCOM) (EventID: 10016) (User: 1906DANIEL)
Description: AnwendungsspezifischLokalStart{7022A3B3-D004-4F52-AF11-E9E987FEE25F}{ADA41B3C-C6FD-4A08-8CC1-D6EFDE67BE7D}1906DanielDanielS-1-5-21-223822767-1807346583-171944255-1002LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar

Error: (01/07/2015 06:11:00 PM) (Source: DCOM) (EventID: 10016) (User: 1906DANIEL)
Description: AnwendungsspezifischLokalStart{7022A3B3-D004-4F52-AF11-E9E987FEE25F}{ADA41B3C-C6FD-4A08-8CC1-D6EFDE67BE7D}1906DanielDanielS-1-5-21-223822767-1807346583-171944255-1002LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar

Error: (01/07/2015 06:11:00 PM) (Source: DCOM) (EventID: 10016) (User: 1906DANIEL)
Description: AnwendungsspezifischLokalStart{7022A3B3-D004-4F52-AF11-E9E987FEE25F}{ADA41B3C-C6FD-4A08-8CC1-D6EFDE67BE7D}1906DanielDanielS-1-5-21-223822767-1807346583-171944255-1002LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar

Error: (01/07/2015 06:10:44 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Optimizer Pro Crash Monitor erreicht.

Error: (01/07/2015 05:41:28 PM) (Source: NetBT) (EventID: 4321) (User: )
Description: Der Name "WORKGROUP      :1d" konnte nicht auf der Schnittstelle mit IP-Adresse 192.168.1.3
registriert werden. Der Computer mit IP-Adresse 192.168.1.2 hat nicht
zugelassen, dass dieser Computer diesen Namen verwendet.

Error: (01/07/2015 04:51:25 PM) (Source: DCOM) (EventID: 10010) (User: 1906DANIEL)
Description: {4545DEA0-2DFC-4906-A728-6D986BA399A9}

Error: (01/07/2015 04:51:25 PM) (Source: DCOM) (EventID: 10010) (User: 1906DANIEL)
Description: {4545DEA0-2DFC-4906-A728-6D986BA399A9}


Microsoft Office Sessions:
=========================
Error: (01/07/2015 06:17:48 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: plugin-container.exe34.0.5.54435475dd5dmozalloc.dll34.0.5.54435475d6648000000300001425d2801d02a9dcc9ee6eeC:\Program Files (x86)\Mozilla Firefox\plugin-container.exeC:\Program Files (x86)\Mozilla Firefox\mozalloc.dll19e0c0a6-9691-11e4-826b-f8a963e7625c

Error: (01/07/2015 06:12:35 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: AcerPortal.exe3.0.3.2000546c82a9SHELL32.dll6.3.9600.1733154023318c0000005001bf5f080c01d02a9d1feb579dC:\Program Files (x86)\Acer\Acer Portal\AcerPortal.exeC:\Windows\SYSTEM32\SHELL32.dll5ef1c451-9690-11e4-826b-f8a963e7625c

Error: (01/07/2015 05:45:37 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: InfamousHeroesEntry.exe0.0.0.05416e479InfamousHeroesEntry.exe0.0.0.05416e479c000000500161ed0ac001d02a99472f600dC:\Program Files\WindowsApps\GAMELOFTSA.BlitzBrigade_1.3.1.13_x86__0pp20fcewvvtj\InfamousHeroesEntry.exeC:\Program Files\WindowsApps\GAMELOFTSA.BlitzBrigade_1.3.1.13_x86__0pp20fcewvvtj\InfamousHeroesEntry.exe9ac2bbb9-968c-11e4-826a-f8a963e7625cGAMELOFTSA.BlitzBrigade_1.3.1.13_x86__0pp20fcewvvtjApp

Error: (01/07/2015 05:45:37 PM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Anwendung: InfamousHeroesEntry.exe
Frameworkversion: v4.0.30319
Beschreibung: Der Prozess wurde aufgrund einer unbehandelten Ausnahme beendet.
Ausnahmeinformationen: Ausnahmecode c0000005, Ausnahmeadresse 00BA1ED0
Stapel:

Error: (01/07/2015 05:42:27 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: InfamousHeroesEntry.exe0.0.0.05416e479combase.dll6.3.9600.1703153086d7cc000027b000fb1d71e1401d02a989d0ff00aC:\Program Files\WindowsApps\GAMELOFTSA.BlitzBrigade_1.3.1.13_x86__0pp20fcewvvtj\InfamousHeroesEntry.exeC:\Windows\SYSTEM32\combase.dll29934c95-968c-11e4-826a-f8a963e7625cGAMELOFTSA.BlitzBrigade_1.3.1.13_x86__0pp20fcewvvtjApp

Error: (01/07/2015 05:06:36 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: BackgroundAgent.exe1.0.1.6546963f7MSVCR90.dll9.0.30729.838751ea24a5c000000500056b1d56801d02a924be2e1c0C:\Program Files (x86)\Acer\AOP Framework\BackgroundAgent.exeC:\Windows\WinSxS\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.8387_none_5094ca96bcb6b2bb\MSVCR90.dll275df671-9687-11e4-826a-f8a963e7625c

Error: (01/07/2015 04:56:39 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: AcerPortal.exe3.0.3.2000546c82a9SHELL32.dll6.3.9600.1733154023318c0000005001bf5f0144001d02a92843ddc02C:\Program Files (x86)\Acer\Acer Portal\AcerPortal.exeC:\Windows\SYSTEM32\SHELL32.dllc35a02e7-9685-11e4-826a-f8a963e7625c

Error: (01/07/2015 00:42:25 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: AcerPortal.exe3.0.3.2000546c82a9SHELL32.dll6.3.9600.1733154023318c0000005001bf5f016b001d02a6f0096f104C:\Program Files (x86)\Acer\Acer Portal\AcerPortal.exeC:\Windows\SYSTEM32\SHELL32.dll3f8a209f-9662-11e4-826a-f8a963e7625c

Error: (01/07/2015 11:21:19 AM) (Source: ESENT) (EventID: 490) (User: )
Description: svchost4196Instance: C:\ProgramData\Microsoft\Windows\AppRepository\PackageRepository.edb-1032 (0xfffffbf8)32 (0x00000020)Der Prozess kann nicht auf die Datei zugreifen, da sie von einem anderen Prozess verwendet wird.

Error: (01/07/2015 11:21:09 AM) (Source: ESENT) (EventID: 490) (User: )
Description: svchost4196Instance: C:\ProgramData\Microsoft\Windows\AppRepository\PackageRepository.edb-1032 (0xfffffbf8)32 (0x00000020)Der Prozess kann nicht auf die Datei zugreifen, da sie von einem anderen Prozess verwendet wird.


==================== Memory info =========================== 

Processor: Intel(R) Core(TM) i5-4210U CPU @ 1.70GHz
Percentage of memory in use: 32%
Total physical RAM: 8115.27 MB
Available physical RAM: 5450.68 MB
Total Pagefile: 9395.27 MB
Available Pagefile: 6431.85 MB
Total Virtual: 131072 MB
Available Virtual: 131071.79 MB

==================== Drives ================================

Drive c: (Acer) (Fixed) (Total:914.95 GB) (Free:861.22 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 931.5 GB) (Disk ID: 42A7C44F)

Partition: GPT Partition Type.

==================== End Of Log ============================

Ich habe den Beitrag von Merle mit meinen verwechselt und den Revo Unistaller heruntergeladen. Aber den Scan mit Combofix funktionierte nicht. Brauchst du den Scan von Farbar's Recovery Scan Tool von heute ?

schrauber · 08.01.2015, 11:30

Lade Dir bitte von hier

Revo Uninstaller (alternativ portable Revo Uninstaller) herunter.

Installiere und starte das Programm. (Bebilderte Anleitung zu Revo Uninstaller)
Klicke auf Optionen und wähle als Sprache Deutsch.
Suche im Uninstallerfeld nach den Programmen:

EZDownloader

Pokki

Search App by Ask

Search Protect

SkypEmoticons

UberRevel
Wähle die Programme nacheinander aus und klicke jedes Mal auf Uninstall.
Wähle anschließend den Modus "Moderat" aus.
Reste löschen:
Klicke auf dann auf und dann auf .

Downloade Dir bitte

Malwarebytes Anti-Malware

Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
Starte Malwarebytes' Anti-Malware (MBAM).
Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.

Downloade Dir bitte

AdwCleaner auf deinen Desktop.

Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
Starte die AdwCleaner.exe mit einem Doppelklick.
Stimme den Nutzungsbedingungen zu.
Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
- "Tracing" Schlüssel löschen
- Winsock Einstellungen zurücksetzen
- Proxy Einstellungen zurücksetzen
- Internet Explorer Richtlinien zurücksetzen
- Chrome Richtlinien zurücksetzen
- Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
Drücke eine beliebige Taste, um das Tool zu starten.
Je nach System kann der Scan eine Weile dauern.
Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.

und ein frisches FRST log bitte.

Friedrich290 · 08.01.2015, 15:13

Hallo,
der Laptop scheint jetzt sauber zu sein. anbei die erste Datei:

Code:

ATTFilter

 Malwarebytes Anti-Malware 
www.malwarebytes.org

Suchlauf Datum: 08.01.2015
Suchlauf-Zeit: 13:06:00
Logdatei: MBAm.txt
Administrator: Ja

Version: 2.00.4.1028
Malware Datenbank: v2015.01.08.09
Rootkit Datenbank: v2015.01.07.01
Lizenz: Testversion
Malware Schutz: Aktiviert
Bösartiger Webseiten Schutz: Aktiviert
Selbstschutz: Deaktiviert

Betriebssystem: Windows 8.1
CPU: x64
Dateisystem: NTFS
Benutzer: Daniel

Suchlauf-Art: Bedrohungs-Suchlauf
Ergebnis: Abgeschlossen
Durchsuchte Objekte: 378903
Verstrichene Zeit: 18 Min, 34 Sek

Speicher: Aktiviert
Autostart: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Deaktiviert
Heuristik: Aktiviert
PUP: Aktiviert
PUM: Aktiviert

Prozesse: 1
PUP.Optional.Multiplug, C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe, 5200, Löschen bei Neustart, [fdfc5b99afda2610ef4be2fb748e4cb4]

Module: 0
(Keine schädliche Elemente erkannt)

Registrierungsschlüssel: 50
PUP.Optional.Multiplug, HKLM\SOFTWARE\CLASSES\CLSID\{320d5d8e-64be-4f8f-8ce6-d7e4ff769664}, In Quarantäne, [fdfc5b99afda2610ef4be2fb748e4cb4], 
PUP.Optional.Multiplug, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\GamesAppIntegrationService, In Quarantäne, [fdfc5b99afda2610ef4be2fb748e4cb4], 
PUP.Optional.Multiplug, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{320D5D8E-64BE-4F8F-8CE6-D7E4FF769664}, In Quarantäne, [fdfc5b99afda2610ef4be2fb748e4cb4], 
PUP.Optional.Multiplug, HKLM\SOFTWARE\CLASSES\., In Quarantäne, [fdfc5b99afda2610ef4be2fb748e4cb4], 
PUP.Optional.Multiplug, HKLM\SOFTWARE\CLASSES\..9, In Quarantäne, [fdfc5b99afda2610ef4be2fb748e4cb4], 
PUP.Optional.Multiplug, HKLM\SOFTWARE\WOW6432NODE\CLASSES\., In Quarantäne, [fdfc5b99afda2610ef4be2fb748e4cb4], 
PUP.Optional.Multiplug, HKLM\SOFTWARE\WOW6432NODE\CLASSES\..9, In Quarantäne, [fdfc5b99afda2610ef4be2fb748e4cb4], 
PUP.Optional.Multiplug, HKU\S-1-5-21-223822767-1807346583-171944255-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{320D5D8E-64BE-4F8F-8CE6-D7E4FF769664}, Löschen bei Neustart, [fdfc5b99afda2610ef4be2fb748e4cb4], 
PUP.Optional.Multiplug, HKU\S-1-5-21-223822767-1807346583-171944255-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{320D5D8E-64BE-4F8F-8CE6-D7E4FF769664}, Löschen bei Neustart, [fdfc5b99afda2610ef4be2fb748e4cb4], 
PUP.Optional.Multiplug, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\PREAPPROVED\{320D5D8E-64BE-4F8F-8CE6-D7E4FF769664}, In Quarantäne, [fdfc5b99afda2610ef4be2fb748e4cb4], 
PUP.Optional.Multiplug, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\PREAPPROVED\{320D5D8E-64BE-4F8F-8CE6-D7E4FF769664}, In Quarantäne, [fdfc5b99afda2610ef4be2fb748e4cb4], 
PUP.Optional.Multiplug, HKLM\SOFTWARE\CLASSES\CLSID\{320D5D8E-64BE-4F8F-8CE6-D7E4FF769664}\INPROCSERVER32, In Quarantäne, [fdfc5b99afda2610ef4be2fb748e4cb4], 
PUP.Optional.Multiplug, HKLM\SOFTWARE\CLASSES\CLSID\{795e9ca3-404a-4c02-a5f5-711739613c13}, In Quarantäne, [ea0fb4403c4d75c10436dc0137cb47b9], 
PUP.Optional.Multiplug, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{795E9CA3-404A-4C02-A5F5-711739613C13}, In Quarantäne, [ea0fb4403c4d75c10436dc0137cb47b9], 
PUP.Optional.Multiplug, HKU\S-1-5-21-223822767-1807346583-171944255-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{795E9CA3-404A-4C02-A5F5-711739613C13}, Löschen bei Neustart, [ea0fb4403c4d75c10436dc0137cb47b9], 
PUP.Optional.Multiplug, HKU\S-1-5-21-223822767-1807346583-171944255-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{795E9CA3-404A-4C02-A5F5-711739613C13}, Löschen bei Neustart, [ea0fb4403c4d75c10436dc0137cb47b9], 
PUP.Optional.Multiplug, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\PREAPPROVED\{795E9CA3-404A-4C02-A5F5-711739613C13}, In Quarantäne, [ea0fb4403c4d75c10436dc0137cb47b9], 
PUP.Optional.Multiplug, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\PREAPPROVED\{795E9CA3-404A-4C02-A5F5-711739613C13}, In Quarantäne, [ea0fb4403c4d75c10436dc0137cb47b9], 
PUP.Optional.Multiplug, HKLM\SOFTWARE\CLASSES\CLSID\{795E9CA3-404A-4C02-A5F5-711739613C13}\INPROCSERVER32, In Quarantäne, [ea0fb4403c4d75c10436dc0137cb47b9], 
PUP.Optional.Multiplug, HKLM\SOFTWARE\CLASSES\CLSID\{4e07f42f-24d4-4ca3-b699-21d57d5d545d}, In Quarantäne, [10e91ed6cbbee55179c1c815df2322de], 
PUP.Optional.Multiplug, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{4E07F42F-24D4-4CA3-B699-21D57D5D545D}, In Quarantäne, [10e91ed6cbbee55179c1c815df2322de], 
PUP.Optional.Multiplug, HKU\S-1-5-21-223822767-1807346583-171944255-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{4E07F42F-24D4-4CA3-B699-21D57D5D545D}, Löschen bei Neustart, [10e91ed6cbbee55179c1c815df2322de], 
PUP.Optional.Multiplug, HKU\S-1-5-21-223822767-1807346583-171944255-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{4E07F42F-24D4-4CA3-B699-21D57D5D545D}, Löschen bei Neustart, [10e91ed6cbbee55179c1c815df2322de], 
PUP.Optional.Multiplug, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\PREAPPROVED\{4E07F42F-24D4-4CA3-B699-21D57D5D545D}, In Quarantäne, [10e91ed6cbbee55179c1c815df2322de], 
PUP.Optional.Multiplug, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\PREAPPROVED\{4E07F42F-24D4-4CA3-B699-21D57D5D545D}, In Quarantäne, [10e91ed6cbbee55179c1c815df2322de], 
PUP.Optional.Multiplug, HKLM\SOFTWARE\CLASSES\CLSID\{4E07F42F-24D4-4CA3-B699-21D57D5D545D}\INPROCSERVER32, In Quarantäne, [10e91ed6cbbee55179c1c815df2322de], 
PUP.Optional.Multiplug, HKLM\SOFTWARE\CLASSES\CLSID\{b7f8acb8-6040-49fb-bf3f-71061157540c}, In Quarantäne, [f207db19f594a6901525d50852b0be42], 
PUP.Optional.Multiplug, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{B7F8ACB8-6040-49FB-BF3F-71061157540C}, In Quarantäne, [f207db19f594a6901525d50852b0be42], 
PUP.Optional.Multiplug, HKLM\SOFTWARE\CLASSES\OptOn.OptOn, In Quarantäne, [f207db19f594a6901525d50852b0be42], 
PUP.Optional.Multiplug, HKLM\SOFTWARE\CLASSES\OptOn.OptOn.9, In Quarantäne, [f207db19f594a6901525d50852b0be42], 
PUP.Optional.Multiplug, HKLM\SOFTWARE\WOW6432NODE\CLASSES\OptOn.OptOn, In Quarantäne, [f207db19f594a6901525d50852b0be42], 
PUP.Optional.Multiplug, HKLM\SOFTWARE\WOW6432NODE\CLASSES\OptOn.OptOn.9, In Quarantäne, [f207db19f594a6901525d50852b0be42], 
PUP.Optional.Multiplug, HKU\S-1-5-21-223822767-1807346583-171944255-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{B7F8ACB8-6040-49FB-BF3F-71061157540C}, Löschen bei Neustart, [f207db19f594a6901525d50852b0be42], 
PUP.Optional.Multiplug, HKU\S-1-5-21-223822767-1807346583-171944255-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{B7F8ACB8-6040-49FB-BF3F-71061157540C}, Löschen bei Neustart, [f207db19f594a6901525d50852b0be42], 
PUP.Optional.Multiplug, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\PREAPPROVED\{B7F8ACB8-6040-49FB-BF3F-71061157540C}, In Quarantäne, [f207db19f594a6901525d50852b0be42], 
PUP.Optional.Multiplug, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\PREAPPROVED\{B7F8ACB8-6040-49FB-BF3F-71061157540C}, In Quarantäne, [f207db19f594a6901525d50852b0be42], 
PUP.Optional.Multiplug, HKLM\SOFTWARE\CLASSES\CLSID\{B7F8ACB8-6040-49FB-BF3F-71061157540C}\INPROCSERVER32, In Quarantäne, [f207db19f594a6901525d50852b0be42], 
PUP.Optional.SearchProtect, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\APPCOMPATFLAGS\INSTALLEDSDB\{8a4d5a43-c64a-45ab-bdf4-804fe18ceafd}, In Quarantäne, [6d8ccf253a4ffb3bb35fa83e0ef69f61], 
PUP.Optional.SearchProtect, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\APPCOMPATFLAGS\INSTALLEDSDB\{cf2797aa-b7ec-e311-8ed9-005056c00008}, In Quarantäne, [d128797bd2b72d098a87bf27ff05946c], 
PUP.Optional.Cinema.A, HKLM\SOFTWARE\WOW6432NODE\CinemaP-1.9cV02.01, In Quarantäne, [699003f12b5e38fe7358f18a08fb19e7], 
PUP.Optional.Cinema.A, HKLM\SOFTWARE\WOW6432NODE\CinemaP-1.9cV02.01-nv, In Quarantäne, [42b78173fc8dc2743f8cf982e023e41c], 
PUP.Optional.HDVid.A, HKLM\SOFTWARE\WOW6432NODE\TheHDvid-Codec V10, In Quarantäne, [00f9a351b3d646f09f63ff852cd7936d], 
PUP.Optional.HDVid.A, HKLM\SOFTWARE\WOW6432NODE\TheHDvid-Codec V10-nv, In Quarantäne, [5e9b7b79a0e9ef471be72d578f74b749], 
PUP.Optional.Cinema.A, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\CinemaP-1.9cV02.01-nv, Löschen bei Neustart, [23d6c62ef099dc5ae2ea3e3de3207f81], 
PUP.Optional.Cinema.A, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\CinemaP-1.9cV02.01, Löschen bei Neustart, [49b01ed6bacf979f9934afcc09fa34cc], 
PUP.Optional.HDVid.A, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\TheHDvid-Codec V10, Löschen bei Neustart, [53a68e66cfbac96dcc388202cf34dd23], 
PUP.Optional.CrossRider.A, HKU\S-1-5-21-223822767-1807346583-171944255-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\30935, Löschen bei Neustart, [eb0e61930d7c1521915268104eb50ff1], 
PUP.Optional.Cinema.A, HKU\S-1-5-21-223822767-1807346583-171944255-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\CinemaP-1.9cV02.01-nv, Löschen bei Neustart, [99609e564643eb4b7359542747bc758b], 
PUP.Optional.Cinema.A, HKU\S-1-5-21-223822767-1807346583-171944255-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\CinemaP-1.9cV02.01, Löschen bei Neustart, [956406eea4e5ee482ca12457996a57a9], 
PUP.Optional.HDVid.A, HKU\S-1-5-21-223822767-1807346583-171944255-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\TheHDvid-Codec V10, Löschen bei Neustart, [e1187183acddd85ed62e4f358182ff01], 

Registrierungswerte: 0
(Keine schädliche Elemente erkannt)

Registrierungsdaten: 0
(Keine schädliche Elemente erkannt)

Ordner: 28
PUP.Optional.HDVid.A, C:\Users\Daniel\AppData\LocalLow\TheHDvid-Codec V10, In Quarantäne, [40b94ba952371d199a3681caa063de22], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\chrome, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\chrome\content, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\chrome\content\api, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\chrome\content\core, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\defaults, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\defaults\preferences, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\extensionData, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\extensionData\plugins, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\extensionData\userCode, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\locale, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\locale\en-US, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\skin, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\chrome, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\chrome\content, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\chrome\content\api, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\chrome\content\core, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\defaults, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\defaults\preferences, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\extensionData, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\extensionData\plugins, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\extensionData\userCode, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\locale, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\locale\en-US, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\skin, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 
PUP.Optional.Cinema.A, C:\Program Files (x86)\CinemaP-1.9cV02.01, In Quarantäne, [7c7d2ec63752ee483f6b391bb44fc739], 

Dateien: 249
PUP.Optional.Multiplug, C:\Program Files (x86)\Unisales\JBGgrV4x87VoTw.x64.dll, In Quarantäne, [fdfc5b99afda2610ef4be2fb748e4cb4], 
PUP.Optional.Multiplug, C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe, Löschen bei Neustart, [fdfc5b99afda2610ef4be2fb748e4cb4], 
PUP.Optional.Multiplug, C:\Program Files (x86)\YouettubeAAdBillocke\aGCYgceSTwf8Tt.x64.dll, In Quarantäne, [ea0fb4403c4d75c10436dc0137cb47b9], 
PUP.Optional.Multiplug, C:\Program Files (x86)\unisAlEEs\Rw7MFLY6o6Pr0x.x64.dll, In Quarantäne, [10e91ed6cbbee55179c1c815df2322de], 
PUP.Optional.Multiplug, C:\Program Files (x86)\OptuOn\aqM4wnu6spS1bo.x64.dll, In Quarantäne, [f207db19f594a6901525d50852b0be42], 
PUP.Optional.CrossRider.A, C:\Program Files (x86)\CinemaP-1.9cV02.01\d187d13c-eb9d-4d47-bf31-4a5c3088774b-64.exe, In Quarantäne, [17e2c430127789adb0eabe0124e14bb5], 
PUP.Optional.CrossRider.A, C:\Program Files (x86)\CinemaP-1.9cV02.01\utils.exe, In Quarantäne, [6891ae46ea9f5fd795ced47815eb9d63], 
PUP.Optional.SearchProtect.A, C:\$Recycle.Bin\S-1-5-21-223822767-1807346583-171944255-1002\$RM0K7HI.dll, In Quarantäne, [77820fe50b7e1125a8268726df22926e], 
PUP.Optional.SearchProtect.A, C:\$Recycle.Bin\S-1-5-21-223822767-1807346583-171944255-1002\$RPU4APW.exe, In Quarantäne, [fdfce212bdccb086a12d46675ea36a96], 
PUP.Optional.SearchProtect.A, C:\$Recycle.Bin\S-1-5-21-223822767-1807346583-171944255-1002\$RSC6TE4.exe, In Quarantäne, [5c9df5ffb8d19e98f5d95a53c9380bf5], 
PUP.Optional.SearchProtect.A, C:\$Recycle.Bin\S-1-5-21-223822767-1807346583-171944255-1002\$RX9YZ1P.dll_1419950450736, In Quarantäne, [14e5dc188efb0c2a5e705855c63baa56], 
PUP.Optional.SearchProtect.A, C:\Users\Daniel\AppData\Local\Temp\nsl2F31.tmp\SPTool.dll, In Quarantäne, [e81131c39dec8ea8b31b7d307e83639d], 
PUP.Optional.SoftPulse, C:\Users\Daniel\Downloads\Setup.exe, In Quarantäne, [a356975d4e3b94a2a7c337cd7c86cb35], 
PUP.Optional.Giga, C:\Users\Daniel\Downloads\The-Walking-Dead_-Survival-Instinct-lnstall.exe, In Quarantäne, [5f9a6e86f990c571a5ff5b1e3cc9bd43], 
PUP.Optional.SearchProtect.A, C:\Windows\apppatch\apppatch64\VCLdr64.dll, Löschen bei Neustart, [6c8dd2227a0f43f38e400ba291707a86], 
PUP.Optional.SearchProtect.A, C:\Windows\apppatch\nbin\VC32Loader.dll, In Quarantäne, [05f46b89f7923501e0ee37768180639d], 
PUP.Optional.WebInstrNew.A, C:\Windows\System32\drivers\Msft_Kernel_webinstrNewH_01009.Wdf, In Quarantäne, [54a5837187029b9b0d040068a2617c84], 
PUP.Optional.SearchProtect, C:\Windows\apppatch\Custom\Custom64\{cf2797aa-b7ec-e311-8ed9-005056c00008}.sdb, In Quarantäne, [28d1856f2b5eaa8c01141fc7ee1620e0], 
PUP.Optional.HDVid.A, C:\Users\Daniel\AppData\LocalLow\TheHDvid-Codec V10\DTFProxyToServerSect_bf34e9160052c013241470f6cdde3bdb00063315_p6676.dat, In Quarantäne, [40b94ba952371d199a3681caa063de22], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\chrome.manifest, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\install.rdf, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\chrome\content\45f27d3a42f9f216b37f9da873a3f185.js, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\chrome\content\6a0279488b82574dda7dcacabe41afc9.js, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\chrome\content\720e981deeaaa2f6f4bd7f4148a2aab6.js, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\chrome\content\7eecbd99bfcf117b69c4d05c4e3d845a.js, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\chrome\content\8a349ec2666c5ca69d6930fe9cfa4f03.js, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\chrome\content\background.html, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\chrome\content\bfc4f43035ef3163142ba94108c2a84a.js, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\chrome\content\browser.xul, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\chrome\content\dialog.js, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\chrome\content\ffCoreFilesIndex.txt, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\chrome\content\options.js, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\chrome\content\options.xul, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\chrome\content\search_dialog.xul, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\chrome\content\api\11f5e980396e51b75ddb277fc345029d.js, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\chrome\content\api\1ececf1363fb476c12c8551488ec8d00.js, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\chrome\content\api\33d3b528a8112b532399604d419f84a8.js, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\chrome\content\api\3a51d51c00b75232b8c278e2397d6303.js, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\chrome\content\api\50ba9c8532a5de54e08a0e9e6c51bab3.js, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\chrome\content\api\51c3775e40fdad33db912dbb139c3b69.js, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\chrome\content\api\5fea9bb084ac00ca455cfa24e0fa200e.js, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\chrome\content\api\693710036dc8a3b30fc50041fb31216a.js, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\chrome\content\api\72e7f684a0a0c048eba89dd4528c5933.js, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\chrome\content\api\9d4c3bb73d35037d756e7b4556142057.js, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\chrome\content\api\a746d3d597d041d449cf657b15bb96ce.js, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\chrome\content\api\d6b145166fda53b450afaa46e78fb066.js, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\chrome\content\api\e46ef22ca915a1158ea709b18db8f969.js, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\chrome\content\api\efb59c4236d5d483544c2dce4c0537df.js, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\chrome\content\api\f60ca31408128e9ef2e0f172c15da0e8.js, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\chrome\content\api\fe108b41f66bdd515adfbe96ddcbb3b5.js, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\chrome\content\core\5ae6159028b3f5a9925e0f22a4b27d78.js, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\chrome\content\core\048318c7efe3ffa1ad57061bc9d719f8.js, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\chrome\content\core\18406edbecfd9e0a224e194fc2cb32b6.js, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\chrome\content\core\185fcaf33682e5b639e0b82532030dc1.js, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\chrome\content\core\1fcb67101ffab596113e6fe407dfe8bf.js, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\chrome\content\core\200a3ffa41bf2f8aa9678c393ef66929.js, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\chrome\content\core\26ee0311c546ea50605cb50dd5e88e25.js, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\chrome\content\core\2958a1e82b43c5797cc21d9bfd459ec8.js, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\chrome\content\core\2db207930176c1ad6ab98c747bfc82be.js, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\chrome\content\core\3d818361e0c1c4de1b85cc4900cc01a6.js, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\chrome\content\core\4dc70b438d7319819c592f35a522a5f9.js, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\chrome\content\core\608aae36a8ba40618eb09068d0ddbff2.js, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\chrome\content\core\71a4e23833c20c1122a6446be6d0d371.js, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\chrome\content\core\7cb87d7e76a553b25c08b55536556dfc.js, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\chrome\content\core\92692b4c655b0d003a7142003796beff.js, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\chrome\content\core\b241f2e30d65a7809c9b0f3af586397b.js, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\chrome\content\core\b79582d07a5fa1081e6ac10d586d6336.js, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\chrome\content\core\c4b6c14ae956520cd61dbfa2f0620401.js, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\chrome\content\core\dae5449b33ec25ebf25d453a9ac70370.js, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\chrome\content\core\f5e0062bbde8251a18d0520452caa7d9.js, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\chrome\content\core\installer.js, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\defaults\preferences\prefs.js, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\extensionData\manifest.xml, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\extensionData\plugins.json, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\extensionData\plugins\102.js, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\extensionData\plugins\13.js, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\extensionData\plugins\14.js, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\extensionData\plugins\16.js, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\extensionData\plugins\17.js, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\extensionData\plugins\180.js, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\extensionData\plugins\184.js, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\extensionData\plugins\195.js, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\extensionData\plugins\220.js, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\extensionData\plugins\221.js, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\extensionData\plugins\223.js, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\extensionData\plugins\230.js, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\extensionData\plugins\233.js, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\extensionData\plugins\234.js, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\extensionData\plugins\242.js, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\extensionData\plugins\246.js, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\extensionData\plugins\253.js, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\extensionData\plugins\262.js, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\extensionData\plugins\263.js, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\extensionData\plugins\273.js, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\extensionData\plugins\281.js, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\extensionData\plugins\301.js, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\extensionData\plugins\337.js, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\extensionData\plugins\339.js, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\extensionData\plugins\345.js, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\extensionData\plugins\354.js, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\extensionData\plugins\4.js, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\extensionData\plugins\47.js, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\extensionData\plugins\64.js, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\extensionData\plugins\7.js, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\extensionData\plugins\78.js, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\extensionData\plugins\9.js, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\extensionData\plugins\91.js, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\extensionData\plugins\93.js, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\extensionData\userCode\background.js, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\extensionData\userCode\extension.js, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\locale\en-US\translations.dtd, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\skin\button1.png, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\skin\button2.png, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\skin\button3.png, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\skin\button4.png, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\skin\button5.png, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\skin\crossrider_statusbar.png, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\skin\icon128.png, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\skin\icon16.png, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\skin\icon24.png, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\skin\icon48.png, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\skin\panelarrow-up.png, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\skin\popup.html, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\skin\skin.css, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com\skin\update.css, In Quarantäne, [ab4edf1540490f279c9151fb50b3916f], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\chrome.manifest, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\install.rdf, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\chrome\content\085db06501d9955ffd48c6681a3c1df9.js, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\chrome\content\4628f4593b2fb3a09bd0abc38c208ade.js, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\chrome\content\71b6cc40e6b589c8792a0158dbf12835.js, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\chrome\content\8fbedf8b678dec148eb5c0cd93213dd3.js, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\chrome\content\background.html, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\chrome\content\browser.xul, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\chrome\content\c732941ec3d0c9a4f1991fa139a893e5.js, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\chrome\content\d571ad79618298a1043a86245a60a538.js, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\chrome\content\dialog.js, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\chrome\content\ffCoreFilesIndex.txt, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\chrome\content\options.js, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\chrome\content\options.xul, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\chrome\content\search_dialog.xul, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\chrome\content\api\6a1568a4f35c82de1b7762ead2783e0c.js, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\chrome\content\api\2054e57c1279da8f6fb6e599ef15fbdb.js, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\chrome\content\api\395a40f79af4913d457407d35420614c.js, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\chrome\content\api\51921759e0d465ff677317304c1e898c.js, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\chrome\content\api\51dfd897395622fc7136a41d5aa1efe2.js, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\chrome\content\api\59533cfe112767782deb2a36c6227120.js, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\chrome\content\api\60b00eae643d6289c368000d287130d5.js, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\chrome\content\api\63a49e82b1c418a9c3f708cba260d781.js, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\chrome\content\api\640905db9046044d2f9e24fbd10bcaa8.js, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\chrome\content\api\6b0207b0d4d13ba9a37aef821b7c232e.js, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\chrome\content\api\8318b1d0d578a66b1c041231af36d2d8.js, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\chrome\content\api\9837430570881749a7590be8b96fe13c.js, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\chrome\content\api\a6a8f20ac8c44e0bc6231243cf1909ec.js, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\chrome\content\api\b076afb243f85b0eec5e0a3a0ad8601d.js, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\chrome\content\api\d48950a2b286accd3abe0595d584aad0.js, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\chrome\content\api\f2094ebc747a74b37b1488bb3161e4e7.js, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\chrome\content\core\31a24e5a848ae6a4cfd113df1871eb26.js, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\chrome\content\core\448a1dadc3e71fe162622081fe8e6a84.js, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\chrome\content\core\4f8628abd5bb2b3ba752a7001b8e0e8d.js, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\chrome\content\core\5709d88e3be4c4114936b9b51a3a109e.js, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\chrome\content\core\6107c53f358d8c13b6c5cace1e11279a.js, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\chrome\content\core\618676157e21dab4747a10c2f55375e1.js, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\chrome\content\core\637a7368697214c1c2d8858ba49c8b78.js, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\chrome\content\core\67e93a1ea854f1164a03ecd12d2ffcb2.js, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\chrome\content\core\6bb8ffa10b2b2a484d914ad1f2adff69.js, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\chrome\content\core\74895f179956e690c5a38380f459d58c.js, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\chrome\content\core\7e123787f00bec121ef4edfd354070ba.js, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\chrome\content\core\b23084a85a9be1ca57aa22445ec5e43e.js, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\chrome\content\core\b5b5030280b91b0f4842d2a52e4c8cbd.js, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\chrome\content\core\b62039dc9f4782e49f6ccce36b748366.js, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\chrome\content\core\ba97d07e90b35166f7b059028db7f941.js, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\chrome\content\core\c7de9556040782f36a6499fae81bb815.js, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\chrome\content\core\e3bb3bcfb9de6bd3d85df96d65f9e40b.js, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\chrome\content\core\e740475822d71581a0af6c941cbabb35.js, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\chrome\content\core\e86e3f99a8d6467956772d69b83280bb.js, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\chrome\content\core\eb9537b993ba48edb51e7fcdab487a49.js, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\chrome\content\core\installer.js, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\defaults\preferences\prefs.js, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\extensionData\manifest.xml, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\extensionData\plugins.json, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\extensionData\plugins\223.js, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\extensionData\plugins\1.js, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\extensionData\plugins\1000020.js, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\extensionData\plugins\1000025.js, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\extensionData\plugins\1000030.js, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\extensionData\plugins\102.js, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\extensionData\plugins\104.js, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\extensionData\plugins\123.js, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\extensionData\plugins\13.js, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\extensionData\plugins\14.js, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\extensionData\plugins\16.js, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\extensionData\plugins\17.js, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\extensionData\plugins\177.js, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\extensionData\plugins\178.js, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\extensionData\plugins\179.js, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\extensionData\plugins\180.js, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\extensionData\plugins\182.js, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\extensionData\plugins\183.js, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\extensionData\plugins\195.js, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\extensionData\plugins\207.js, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\extensionData\plugins\21.js, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\extensionData\plugins\22.js, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\extensionData\plugins\220.js, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\extensionData\plugins\221.js, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\extensionData\plugins\226.js, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\extensionData\plugins\234.js, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\extensionData\plugins\246.js, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\extensionData\plugins\253.js, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\extensionData\plugins\262.js, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\extensionData\plugins\263.js, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\extensionData\plugins\273.js, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\extensionData\plugins\28.js, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\extensionData\plugins\281.js, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\extensionData\plugins\301.js, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\extensionData\plugins\345.js, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\extensionData\plugins\354.js, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\extensionData\plugins\4.js, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\extensionData\plugins\47.js, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\extensionData\plugins\64.js, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\extensionData\plugins\7.js, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\extensionData\plugins\72.js, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\extensionData\plugins\78.js, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\extensionData\plugins\9.js, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\extensionData\plugins\91.js, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\extensionData\plugins\93.js, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\extensionData\plugins\98.js, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\extensionData\userCode\background.js, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\extensionData\userCode\extension.js, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\locale\en-US\translations.dtd, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\skin\button1.png, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\skin\button2.png, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\skin\button3.png, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\skin\button4.png, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\skin\button5.png, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\skin\crossrider_statusbar.png, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\skin\icon128.png, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\skin\icon16.png, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\skin\icon24.png, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\skin\icon48.png, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\skin\panelarrow-up.png, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\skin\popup.html, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\skin\skin.css, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 
PUP.Optional.CrossRider.A, C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com\skin\update.css, In Quarantäne, [1adfea0a94f5c670684075dade25946c], 
PUP.Optional.Cinema.A, C:\Program Files (x86)\CinemaP-1.9cV02.01\background.html, In Quarantäne, [7c7d2ec63752ee483f6b391bb44fc739], 
PUP.Optional.Cinema.A, C:\Program Files (x86)\CinemaP-1.9cV02.01\bgNova.html, In Quarantäne, [7c7d2ec63752ee483f6b391bb44fc739], 
PUP.Optional.Cinema.A, C:\Program Files (x86)\CinemaP-1.9cV02.01\ce1a2eb2-1515-4c1f-964c-23c6106227dd.dll, In Quarantäne, [7c7d2ec63752ee483f6b391bb44fc739], 
PUP.Optional.Cinema.A, C:\Program Files (x86)\CinemaP-1.9cV02.01\CinemaP-1.9cV02.01.ico, In Quarantäne, [7c7d2ec63752ee483f6b391bb44fc739], 
PUP.Optional.Cinema.A, C:\Program Files (x86)\CinemaP-1.9cV02.01\d187d13c-eb9d-4d47-bf31-4a5c3088774b.xpi, In Quarantäne, [7c7d2ec63752ee483f6b391bb44fc739], 
PUP.Optional.Cinema.A, C:\Program Files (x86)\CinemaP-1.9cV02.01\e96055be-6a8b-4f6f-8d35-36c272e291db.crx, In Quarantäne, [7c7d2ec63752ee483f6b391bb44fc739], 

Physische Sektoren: 0
(Keine schädliche Elemente erkannt)


(end)

die zweite Datei:

Code:

ATTFilter

# AdwCleaner v4.107 - Bericht erstellt am 08/01/2015 um 12:57:27
# Aktualisiert 07/01/2015 von Xplode
# Database : 2015-01-03.1 [Live]
# Betriebssystem : Windows 8.1  (64 bits)
# Benutzername : Daniel - 1906DANIEL
# Gestartet von : C:\Users\Daniel\Desktop\AdwCleaner_4.107.exe
# Option : Löschen

***** [ Dienste ] *****

[#] Dienst Gelöscht : CltMngSvc
Dienst Gelöscht : SPPD
Dienst Gelöscht : webinstrNewH

***** [ Dateien / Ordner ] *****

Ordner Gelöscht : C:\ProgramData\apn
Ordner Gelöscht : C:\ProgramData\RandomPrriCCe
Ordner Gelöscht : C:\ProgramData\RobouSiaver
Ordner Gelöscht : C:\ProgramData\SaverExtensiOn
Ordner Gelöscht : C:\ProgramData\1f0001b3a6cbf8f5
Ordner Gelöscht : C:\ProgramData\2233787286284925173
Ordner Gelöscht : C:\Program Files (x86)\SearchProtect
Ordner Gelöscht : C:\Program Files (x86)\DeltaFix
Ordner Gelöscht : C:\Users\Daniel\AppData\Local\Temp\apn
Ordner Gelöscht : C:\Users\Daniel\AppData\Local\globalUpdate
Ordner Gelöscht : C:\Users\Daniel\AppData\Local\SearchProtect
Ordner Gelöscht : C:\Users\Daniel\AppData\Local\CrossBrowser
Ordner Gelöscht : C:\Users\Daniel\AppData\Roaming\EZDownloader
Ordner Gelöscht : C:\Users\Daniel\AppData\Roaming\SkypEmoticons
Ordner Gelöscht : C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FlvPlayer
Ordner Gelöscht : C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\Extensions\sparpilot@sparpilot.com
Ordner Gelöscht : C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\Extensions\3@3AcA.com
Ordner Gelöscht : C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\Extensions\81X@T7ZC6I.edu
Ordner Gelöscht : C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\Extensions\APueTDX@U.com
Ordner Gelöscht : C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\Extensions\FUAujg@j.net
Ordner Gelöscht : C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\Extensions\LTA@q.net
Ordner Gelöscht : C:\Users\Daniel\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaiabcopkplhgaedhbloeejhhankf
Datei Gelöscht : C:\Users\Public\Desktop\eBay.lnk
Datei Gelöscht : C:\Windows\System32\drivers\webinstrNewH.sys
Datei Gelöscht : C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\searchplugins\trovi-search.xml
Datei Gelöscht : C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\searchplugins\WebSearch.xml
Datei Gelöscht : C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\omiga-plus.xml

***** [ Tasks ] *****

Task Gelöscht : b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-1
Task Gelöscht : b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-4
Task Gelöscht : b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-5
Task Gelöscht : b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-5_user
Task Gelöscht : b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-6
Task Gelöscht : b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-7
Task Gelöscht : d187d13c-eb9d-4d47-bf31-4a5c3088774b-1
Task Gelöscht : d187d13c-eb9d-4d47-bf31-4a5c3088774b-3
Task Gelöscht : d187d13c-eb9d-4d47-bf31-4a5c3088774b-4
Task Gelöscht : d187d13c-eb9d-4d47-bf31-4a5c3088774b-5
Task Gelöscht : d187d13c-eb9d-4d47-bf31-4a5c3088774b-5_user
Task Gelöscht : d187d13c-eb9d-4d47-bf31-4a5c3088774b-6
Task Gelöscht : d187d13c-eb9d-4d47-bf31-4a5c3088774b-7

***** [ Verknüpfungen ] *****

Verknüpfung Desinfiziert : C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
Verknüpfung Desinfiziert : C:\Users\Daniel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
Verknüpfung Desinfiziert : C:\Users\Daniel\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Internet Explorer.lnk

***** [ Registrierungsdatenbank ] *****

Wert Gelöscht : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [faststartff@gmail.com]
Wert Gelöscht : HKCU\Software\Mozilla\Firefox\Extensions [{91EE2399-1C05-90A0-1098-8D7EFA157C7A}]
Schlüssel Gelöscht : HKCU\Software\Classes\pokki
Schlüssel Gelöscht : HKLM\SOFTWARE\MozillaPlugins\@staging.google.com/globalUpdate Update;version=10
Schlüssel Gelöscht : HKLM\SOFTWARE\MozillaPlugins\@staging.google.com/globalUpdate Update;version=4
Schlüssel Gelöscht : HKCU\Software\Mozilla\Extends
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Pb3cda001_95f1_4b0a_8f60_aadbe91ddc99_.Pb3cda001_95f1_4b0a_8f60_aadbe91ddc99_
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Pb3cda001_95f1_4b0a_8f60_aadbe91ddc99_.Pb3cda001_95f1_4b0a_8f60_aadbe91ddc99_.9
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{3278F5CF-48F3-4253-A6BB-004CE84AF492}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{577975B8-C40E-43E6-B0DE-4C6B44088B52}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{C007DADD-132A-624C-088E-59EE6CF0711F}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{02A96331-0CA6-40E2-A87D-C224601985EB}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{3278F5CF-48F3-4253-A6BB-004CE84AF492}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{3B5702BA-7F4C-4D1A-B026-1E9A01D43978}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{577975B8-C40E-43E6-B0DE-4C6B44088B52}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{7E49F793-B3CD-4BF7-8419-B34B8BD30E61}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{b3cda001-95f1-4b0a-8f60-aadbe91ddc99}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{EAF749DC-CD87-4B04-B22A-D4AC3FBCB2BC}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550655335515}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550655905565}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660666336615}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660666906665}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{E2343056-CC08-46AC-B898-BFC7ACF4E755}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{b3cda001-95f1-4b0a-8f60-aadbe91ddc99}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{b3cda001-95f1-4b0a-8f60-aadbe91ddc99}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{b3cda001-95f1-4b0a-8f60-aadbe91ddc99}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{5645E0E7-FC12-43BF-A6E4-F9751942B298}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{b3cda001-95f1-4b0a-8f60-aadbe91ddc99}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5645E0E7-FC12-43BF-A6E4-F9751942B298}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5E89ACE9-E16B-499A-87B4-0DBF742404C1}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{b3cda001-95f1-4b0a-8f60-aadbe91ddc99}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{EAF749DC-CD87-4B04-B22A-D4AC3FBCB2BC}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550655335515}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550655905565}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660666336615}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660666906665}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{b3cda001-95f1-4b0a-8f60-aadbe91ddc99}
Schlüssel Gelöscht : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{014DB5FA-EAFB-4592-A95B-F44D3EE87FA9}
Schlüssel Gelöscht : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AA9A4890-4262-4441-8977-E2FFCBFB706C}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{014DB5FA-EAFB-4592-A95B-F44D3EE87FA9}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{AA9A4890-4262-4441-8977-E2FFCBFB706C}
Daten Wiederhergestellt : HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{AA9A4890-4262-4441-8977-E2FFCBFB706C}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{BB74DE59-BC4C-4172-9AC4-73315F71CFFE}
Schlüssel Gelöscht : HKCU\Software\1ClickDownload
Schlüssel Gelöscht : HKCU\Software\InstalledBrowserExtensions
Schlüssel Gelöscht : HKCU\Software\OCS
Schlüssel Gelöscht : HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}
Schlüssel Gelöscht : HKCU\Software\AppDataLow\{4A0F38A9-FE55-4B89-B73F-E60FDC0F72E9}
Schlüssel Gelöscht : HKCU\Software\AppDataLow\{12DA0E6F-5543-440C-BAA2-28BF01070AFA}
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\BetterMarkIt
Schlüssel Gelöscht : HKLM\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}
Schlüssel Gelöscht : HKLM\SOFTWARE\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0}
Schlüssel Gelöscht : HKLM\SOFTWARE\{4A0F38A9-FE55-4B89-B73F-E60FDC0F72E9}
Schlüssel Gelöscht : HKLM\SOFTWARE\{6791A2F3-FC80-475C-A002-C014AF797E9C}
Schlüssel Gelöscht : HKLM\SOFTWARE\GlobalUpdate
Schlüssel Gelöscht : HKLM\SOFTWARE\InstalledBrowserExtensions
Schlüssel Gelöscht : HKLM\SOFTWARE\omiga-plusSoftware
Schlüssel Gelöscht : HKLM\SOFTWARE\SearchProtect
Schlüssel Gelöscht : HKLM\SOFTWARE\{12DA0E6F-5543-440C-BAA2-28BF01070AFA}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SearchProtect
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\InstalledBrowserExtensions
Daten Gelöscht : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows [AppInit_DLLs] - C:\PROGRA~2\SearchProtect\SearchProtect\bin\VC32Loader.dll
Daten Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows [AppInit_DLLs] - C:\PROGRA~2\SearchProtect\SearchProtect\bin\VC64Loader.dll

***** [ Browser ] *****

-\\ Internet Explorer v11.0.9600.17416


-\\ Mozilla Firefox v34.0.5 (x86 de)

[8f6jup2q.default\prefs.js] - Zeile gelöscht : user_pref("avira.safe_search.prev_default_engine_name", "\"Trovi search\"");
[8f6jup2q.default\prefs.js] - Zeile gelöscht : user_pref("browser.newtab.url", "chrome://unitedtb/content/newtab/newtab-page.xhtml");
[8f6jup2q.default\prefs.js] - Zeile gelöscht : user_pref("browser.search.defaultenginename,S", "WebSearch");
[8f6jup2q.default\prefs.js] - Zeile gelöscht : user_pref("browser.search.defaulturl", "hxxp://websearch.searchoholic.info/?pid=3458&r=2014/12/26&hid=4055500976521261347&lg=EN&cc=DE&unqvl=72&l=1&q=");
[8f6jup2q.default\prefs.js] - Zeile gelöscht : user_pref("browser.search.order.1", "WebSearch");
[8f6jup2q.default\prefs.js] - Zeile gelöscht : user_pref("browser.search.order.1,S", "WebSearch");
[8f6jup2q.default\prefs.js] - Zeile gelöscht : user_pref("browser.search.selectedEngine", "Trovi search");
[8f6jup2q.default\prefs.js] - Zeile gelöscht : user_pref("browser.search.selectedEngine,S", "WebSearch");
[8f6jup2q.default\prefs.js] - Zeile gelöscht : user_pref("extensions.9J2tbEbqq4ON4BsB.scode", "try{(function(){try{var url=(window.self.location.href + document.cookie);if(url.indexOf(\"acebook\")>-1url.indexOf(\"warnalert11.com\")>-1url.index[...]
[8f6jup2q.default\prefs.js] - Zeile gelöscht : user_pref("extensions.a43f13f31cec74ac7ad4a18dfdaeae120gmailcom63315.63315.internaldb.monetization_plugin_bundledUrls.value", "%7B%22dealply_s%22%3A%7B%22urls%22%3A%5B%22ssfiles.com%22%5D%7D%2C%22deal[...]
[8f6jup2q.default\prefs.js] - Zeile gelöscht : user_pref("extensions.aOIBMBKA115048682HYKFIU97176590com69065.69065.internaldb.__ICM_LITE__blacklist_domain.value", "%7B%22SLIDERS%22%3A%5B%226pm.com%22%2C%22amazon.co.uk%22%2C%22amazon.com%22%2C%22an[...]
[8f6jup2q.default\prefs.js] - Zeile gelöscht : user_pref("extensions.aOIBMBKA115048682HYKFIU97176590com69065.69065.internaldb.__ICM_LITE__fifty_test_rules.value", "%7B%22DE%22%3A%7B%22ALL%22%3A%5B%22anastasiadate.com%22%2C%22optionweb.com%22%2C%22[...]
[8f6jup2q.default\prefs.js] - Zeile gelöscht : user_pref("extensions.aOIBMBKA115048682HYKFIU97176590com69065.69065.internaldb.monetization_plugin_bundledUrls.value", "%7B%22dealply_s%22%3A%7B%22urls%22%3A%5B%22ssfiles.com%22%5D%7D%2C%22dealply_p%2[...]
[8f6jup2q.default\prefs.js] - Zeile gelöscht : user_pref("extensions.crossrider.bic", "14aaaca1c695ecbecd62fdad9a25ff8e");
[8f6jup2q.default\prefs.js] - Zeile gelöscht : user_pref("extensions.safesearch.MP_DISTINCT_ID", "\"14ac13d8d811f-023dafa48b49fe8-47554336-0-14ac13d8d82414\"");
[8f6jup2q.default\prefs.js] - Zeile gelöscht : user_pref("extensions.safesearch.SAUTH_expires_at", "1421186042");
[8f6jup2q.default\prefs.js] - Zeile gelöscht : user_pref("extensions.safesearch.SAUTH_rndsnr", "\"a10a5eac7d33e76e24ae4e845f8ac6123aae4c79\"");
[8f6jup2q.default\prefs.js] - Zeile gelöscht : user_pref("extensions.safesearch.SAUTH_userid", "5765441970");
[8f6jup2q.default\prefs.js] - Zeile gelöscht : user_pref("extensions.safesearch.SAUTH_utoken", "\"20f0445cfd208ca85cf4682df4e521daba92c2a7\"");
[8f6jup2q.default\prefs.js] - Zeile gelöscht : user_pref("extensions.safesearch.install", "1420581244294");
[8f6jup2q.default\prefs.js] - Zeile gelöscht : user_pref("keyword.URL", "hxxp://websearch.searchoholic.info/?pid=3458&r=2014/12/26&hid=4055500976521261347&lg=EN&cc=DE&unqvl=72&l=1&q=");

-\\ Google Chrome v


*************************

AdwCleaner[R0].txt - [14014 octets] - [08/01/2015 12:56:14]
AdwCleaner[S0].txt - [13728 octets] - [08/01/2015 12:57:27]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [13789 octets] ##########

die dritte Datei:

Code:

ATTFilter

# AdwCleaner v4.107 - Bericht erstellt am 08/01/2015 um 14:42:44
# Aktualisiert 07/01/2015 von Xplode
# Database : 2015-01-03.1 [Live]
# Betriebssystem : Windows 8.1  (64 bits)
# Benutzername : Daniel - 1906DANIEL
# Gestartet von : C:\Users\Daniel\Desktop\Bereinigung\AdwCleaner_4.107.exe
# Option : Löschen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****


***** [ Tasks ] *****


***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****


***** [ Browser ] *****

-\\ Internet Explorer v11.0.9600.17416


-\\ Mozilla Firefox v34.0.5 (x86 de)


-\\ Google Chrome v


*************************

AdwCleaner[R0].txt - [14014 octets] - [08/01/2015 12:56:14]
AdwCleaner[R1].txt - [917 octets] - [08/01/2015 14:41:06]
AdwCleaner[S0].txt - [13922 octets] - [08/01/2015 12:57:27]
AdwCleaner[S1].txt - [839 octets] - [08/01/2015 14:42:44]

########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [898 octets] ##########

die vierte Datei:

Code:

ATTFilter

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.4.1 (12.28.2014:1)
OS: Windows 8.1 x64
Ran by Daniel on 08.01.2015 at 14:46:59,77
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\TypeLib\{44444444-4444-4444-4444-440644334415}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\TypeLib\{44444444-4444-4444-4444-440644904465}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\TypeLib\{44444444-4444-4444-4444-440644334415}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\TypeLib\{44444444-4444-4444-4444-440644904465}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\TypeLib\{44444444-4444-4444-4444-440644334415}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\TypeLib\{44444444-4444-4444-4444-440644904465}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Wow6432Node\TypeLib\{44444444-4444-4444-4444-440644334415}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Wow6432Node\TypeLib\{44444444-4444-4444-4444-440644904465}



~~~ Files



~~~ Folders



~~~ FireFox

Successfully deleted: [File] C:\Users\Daniel\AppData\Roaming\mozilla\firefox\profiles\8f6jup2q.default\searchplugins\avira-safesearch.xml
Successfully deleted: [Folder] C:\Users\Daniel\AppData\Roaming\mozilla\firefox\profiles\8f6jup2q.default\extensions\safesearch@avira.com
Successfully deleted: [Folder] C:\Users\Daniel\AppData\Roaming\mozilla\firefox\profiles\8f6jup2q.default\extensions\toolbar@web.de
Successfully deleted the following from C:\Users\Daniel\AppData\Roaming\mozilla\firefox\profiles\8f6jup2q.default\prefs.js

user_pref("avira.safe_search.search_was_active", "false");
user_pref("extensions.GtEu6yLUfnPvrAtb.scode", "(function(){try{var url=(window.self.location.href + document.cookie);if(url.indexOf(\"acebook\")>-1||url.indexOf(\"warnalert11
user_pref("extensions.HIdrEJEgJQlQpjl3.scode", "try{(function(){try{var url=(window.self.location.href + document.cookie);if(url.indexOf(\"acebook\")>-1||url.indexOf(\"warnale
user_pref("extensions.WiQaIlApThhWIctY.scode", "try{(function(){try{var url=(window.self.location.href + document.cookie);if(url.indexOf(\"acebook\")>-1||url.indexOf(\"warnale
user_pref("extensions.bootstrappedAddons", "{\"LTA@q.net\":{\"version\":\"2.0\",\"type\":\"extension\",\"descriptor\":\"C:\\\\Users\\\\Daniel\\\\AppData\\\\Roaming\\\\Mozilla\
user_pref("extensions.sygxXr0twTsI248m.scode", "try{(function(){try{var url=(window.self.location.href + document.cookie);if(url.indexOf(\"acebook\")>-1||url.indexOf(\"warnale
user_pref("extensions.sygxXr0twTsI248m.url", "hxxp://bloggertimein.info/sync2/?q=hfZ9ofV9CShEAen0rHn8pchTB6lKDzt4okmxtNtVh7n0rjnFrTs7rjYErdkFtMFHhd9FqdwGrTgFpdaGrHkMDMlGojUMAe
user_pref("extensions.yD07LTTEhG4nkByH.scode", "try{(function(){try{var url=(window.self.location.href + document.cookie);if(url.indexOf(\"acebook\")>-1||url.indexOf(\"warnale



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 08.01.2015 at 14:49:16,14
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

die fünfte Datei:

Code:

ATTFilter

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.4.1 (12.28.2014:1)
OS: Windows 8.1 x64
Ran by Daniel on 08.01.2015 at 15:07:25,76
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys



~~~ Files



~~~ Folders



~~~ FireFox

Successfully deleted the following from C:\Users\Daniel\AppData\Roaming\mozilla\firefox\profiles\8f6jup2q.default\prefs.js

user_pref("extensions.GtEu6yLUfnPvrAtb.scode", "(function(){try{var url=(window.self.location.href + document.cookie);if(url.indexOf(\"acebook\")>-1||url.indexOf(\"warnalert11
user_pref("extensions.HIdrEJEgJQlQpjl3.scode", "try{(function(){try{var url=(window.self.location.href + document.cookie);if(url.indexOf(\"acebook\")>-1||url.indexOf(\"warnale
user_pref("extensions.WiQaIlApThhWIctY.scode", "try{(function(){try{var url=(window.self.location.href + document.cookie);if(url.indexOf(\"acebook\")>-1||url.indexOf(\"warnale
user_pref("extensions.bootstrappedAddons", "{\"LTA@q.net\":{\"version\":\"2.0\",\"type\":\"extension\",\"descriptor\":\"C:\\\\Users\\\\Daniel\\\\AppData\\\\Roaming\\\\Mozilla\
user_pref("extensions.sygxXr0twTsI248m.scode", "try{(function(){try{var url=(window.self.location.href + document.cookie);if(url.indexOf(\"acebook\")>-1||url.indexOf(\"warnale
user_pref("extensions.yD07LTTEhG4nkByH.scode", "try{(function(){try{var url=(window.self.location.href + document.cookie);if(url.indexOf(\"acebook\")>-1||url.indexOf(\"warnale



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 08.01.2015 at 15:09:06,33
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.4.1 (12.28.2014:1)
OS: Windows 8.1 x64
Ran by Daniel on 08.01.2015 at 15:07:25,76
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys



~~~ Files



~~~ Folders



~~~ FireFox

Successfully deleted the following from C:\Users\Daniel\AppData\Roaming\mozilla\firefox\profiles\8f6jup2q.default\prefs.js

user_pref("extensions.GtEu6yLUfnPvrAtb.scode", "(function(){try{var url=(window.self.location.href + document.cookie);if(url.indexOf(\"acebook\")>-1||url.indexOf(\"warnalert11
user_pref("extensions.HIdrEJEgJQlQpjl3.scode", "try{(function(){try{var url=(window.self.location.href + document.cookie);if(url.indexOf(\"acebook\")>-1||url.indexOf(\"warnale
user_pref("extensions.WiQaIlApThhWIctY.scode", "try{(function(){try{var url=(window.self.location.href + document.cookie);if(url.indexOf(\"acebook\")>-1||url.indexOf(\"warnale
user_pref("extensions.bootstrappedAddons", "{\"LTA@q.net\":{\"version\":\"2.0\",\"type\":\"extension\",\"descriptor\":\"C:\\\\Users\\\\Daniel\\\\AppData\\\\Roaming\\\\Mozilla\
user_pref("extensions.sygxXr0twTsI248m.scode", "try{(function(){try{var url=(window.self.location.href + document.cookie);if(url.indexOf(\"acebook\")>-1||url.indexOf(\"warnale
user_pref("extensions.yD07LTTEhG4nkByH.scode", "try{(function(){try{var url=(window.self.location.href + document.cookie);if(url.indexOf(\"acebook\")>-1||url.indexOf(\"warnale



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 08.01.2015 at 15:09:06,33
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Friedrich290 · 08.01.2015, 15:16

und die FRST-Datei:

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 07-01-2015
Ran by Daniel (administrator) on 1906DANIEL on 08-01-2015 15:14:20
Running from C:\Users\Daniel\Desktop\Bereinigung
Loaded Profiles: UpdatusUser & Daniel (Available profiles: UpdatusUser & Daniel)
Platform: Windows 8.1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11 (Default browser: IE)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Windows (R) Win 7 DDK provider) C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\AdminService.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-UpdaterService.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\AOP Framework\CCDMonitorService.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Launch Manager\LMSvc.exe
(Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Launch Manager\LMEvent.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Launch Manager\LMLockHandler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe
() C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe
(Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbam.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
(Intel Corporation) C:\Windows\System32\igfxTray.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Quick Access\QASvc.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerTray.exe
(Atheros Communications) C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtvStack.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Quick Access\QAEvent.exe
(Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe
(Intel Corporation) C:\Windows\System32\igfxext.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Launch Manager\LMTray.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\AOP Framework\BackgroundAgent.exe
() C:\Program Files (x86)\Acer\abDocs\abDocsDllLoader.exe
() C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\ActivateDesktop.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Quick Access\QAMsg.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerEvent.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-Agent.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerWinMonitor.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Acer Cloud Technology) C:\Program Files (x86)\Acer\AOP Framework\acer\ccd.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Quick Access\RMSvc.exe
() C:\Program Files (x86)\Acer\abDocs\abDocsDllLoaderMonitor.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Valve Corporation) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
(Microsoft Corporation) C:\Windows\System32\WWAHost.exe
(acer) C:\Program Files\Acer\User Experience Improvement Program\Framework\UBTService.exe
(TODO: <Company name>) C:\Program Files\Acer\User Experience Improvement Program\Plugin\AppMonitor\AppMonitorPlugIn.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13672304 2014-03-18] (Realtek Semiconductor)
HKLM-x32\...\Run: [BacKGround Agent] => C:\Program Files (x86)\Acer\AOP Framework\BackgroundAgent.exe [62208 2014-11-17] (Acer Incorporated)
HKLM-x32\...\Run: [abDocsDllLoader] => C:\Program Files (x86)\Acer\abDocs\abDocsDllLoader.exe [90368 2014-11-20] ()
HKLM-x32\...\Run: [BlueStacks Agent] => C:\Program Files (x86)\BlueStacks\HD-Agent.exe [843480 2014-10-08] (BlueStack Systems, Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [507776 2014-10-07] (Oracle Corporation)
HKLM-x32\...\Run: [Avira Systray] => C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe [126200 2014-11-20] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [702768 2014-11-24] (Avira Operations GmbH & Co. KG)
HKLM\...\Policies\Explorer\Run: [BtvStack] => C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtvStack.exe [134784 2014-02-25] ( (Atheros Communications))
HKU\S-1-5-21-223822767-1807346583-171944255-1001\...\Run: [Pokki] => C:\Windows\system32\rundll32.exe "%LOCALAPPDATA%\Pokki\Engine\Launcher.dll",RunLaunchPlatform
HKU\S-1-5-21-223822767-1807346583-171944255-1001\...\RunOnce: [RegDXVA1] => C:\Windows\system32\cmd.exe /c reg import "C:\Program Files (x86)\Acer\abPhoto\SwitchUserVideoKey.reg"
HKU\S-1-5-21-223822767-1807346583-171944255-1001\...\RunOnce: [SetAsDefault] => C:\Program Files (x86)\Acer\Acer Video Player\SwitchUserVideoKey.bat
HKU\S-1-5-21-223822767-1807346583-171944255-1002\...\Run: [Steam] => C:\Program Files (x86)\Steam\Steam.exe [1940160 2014-11-18] (Valve Corporation)
HKU\S-1-5-21-223822767-1807346583-171944255-1002\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [7394584 2014-12-12] (Piriform Ltd)
HKU\S-1-5-21-223822767-1807346583-171944255-1002\...\RunOnce: [Application Restart #0] => C:\Users\Daniel\AppData\Local\Pokki\Engine\HostAppService.exe  --disable-internal-flash --noerrdialogs --no-message-box --disable-extensions --disable-web-security --disable-web-resources --disable-cl (the data entry has 551 more characters).
ShellIconOverlayIdentifiers: [ACloudSyncedRF] -> {5CCE71FA-9F61-4F24-9CD1-98D819B40D68} => C:\Program Files (x86)\Acer\Acer Portal\x64\shellext_win.dll (Acer Incorporated)
ShellIconOverlayIdentifiers: [ACloudSyncedSF] -> {5D5F18B7-D59B-4B18-A3E9-0A4BDCCCB699} => C:\Program Files (x86)\Acer\Acer Portal\x64\shellext_win.dll (Acer Incorporated)
ShellIconOverlayIdentifiers: [ACloudSyncing] -> {C1E1456F-C2D8-4C96-870D-35F1E13941EE} => C:\Program Files (x86)\Acer\Acer Portal\x64\shellext_win.dll (Acer Incorporated)
ShellIconOverlayIdentifiers: [ACloudToBeSynced] -> {307523FA-DDC0-4068-983F-2A6B34627744} => C:\Program Files (x86)\Acer\Acer Portal\x64\shellext_win.dll (Acer Incorporated)
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = about:blank
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-223822767-1807346583-171944255-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/?pc=MSE1
HKU\S-1-5-21-223822767-1807346583-171944255-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://acer13.msn.com/?pc=ACJB
HKU\S-1-5-21-223822767-1807346583-171944255-1001\Software\Microsoft\Internet Explorer\Main,First Home Page = hxxp://go.microsoft.com/fwlink/?LinkID=226786&Mkt=de-DE&Src=WD8&Tid=00032955&OHP=about%3Ablank&OSP=
HKU\S-1-5-21-223822767-1807346583-171944255-1002\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM -> {80c554b9-c7f8-4a21-9471-06d606da78a2} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1
SearchScopes: HKLM-x32 -> {80c554b9-c7f8-4a21-9471-06d606da78a2} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-223822767-1807346583-171944255-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-223822767-1807346583-171944255-1002 -> {0F4290CD-0C1F-43D0-AD78-654E5ADC2694} URL = 
SearchScopes: HKU\S-1-5-21-223822767-1807346583-171944255-1002 -> {80c554b9-c7f8-4a21-9471-06d606da78a2} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1
BHO: RobouSiaver -> {e3190def-fe89-48bd-8820-9809133be044} -> C:\ProgramData\RobouSiaver\KhxvIlVvzyR0pN.x64.dll No File
BHO: SaverExtensiOn -> {e64ca992-4ef4-400c-b3e2-35ffd808ed66} -> C:\ProgramData\SaverExtensiOn\8N25NUrrXZ52P2.x64.dll No File
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\ssv.dll (Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\jp2ssv.dll (Oracle Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 192.168.1.1

FireFox:
========
FF ProfilePath: C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default
FF Homepage: about:home
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_16_0_0_235.dll ()
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_235.dll ()
FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/pdf -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll ()
FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.fdf -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.25.2 -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.25.2 -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\1\NP_wtapp.dll ()
FF Extension: OptuOn - C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\Extensions\4@ckIbAWyX.com [2014-12-26]
FF Extension: Avira Browser Safety - C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\Extensions\abs@avira.com [2015-01-06]
FF Extension: HD Notifier - C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\Extensions\{0e84d0b4-5388-4a04-a2bf-1043c386a4dc}.xpi [2015-01-04]
FF Extension: {2b5f4e51-080e-409c-8353-01cc79790137} - C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\Extensions\{2b5f4e51-080e-409c-8353-01cc79790137}.xpi [2015-01-01]
FF Extension: No Name - C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\toolbar@web.de [Not Found]
FF Extension: No Name - C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\43f13f31-cec7-4ac7-ad4a-18dfdaeae120@gmail.com [Not Found]
FF Extension: No Name - C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\OIBMBKA115048682@HYKFIU97176590.com [Not Found]

Chrome: 
=======
CHR Profile: C:\Users\Daniel\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (No Name) - C:\Users\Daniel\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdeaofcapijfmeopimkgcepdpbdepnb [2015-01-04]
CHR Extension: (No Name) - C:\Users\Daniel\AppData\Local\Google\Chrome\User Data\Default\Extensions\mbacbcfdfaapbcnlnbmciiaakomhkbkb [2015-01-06]
CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - No Path
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - No Path

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [431920 2014-11-24] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [431920 2014-11-24] (Avira Operations GmbH & Co. KG)
R2 AtherosSvc; C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\adminservice.exe [319104 2014-02-25] (Windows (R) Win 7 DDK provider)
R2 Avira.OE.ServiceHost; C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe [166192 2014-11-20] (Avira Operations GmbH & Co. KG)
S2 BstHdAndroidSvc; C:\Program Files (x86)\BlueStacks\HD-Service.exe [409304 2014-10-08] (BlueStack Systems, Inc.)
R2 BstHdLogRotatorSvc; C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe [388824 2014-10-08] (BlueStack Systems, Inc.)
R2 BstHdUpdaterSvc; C:\Program Files (x86)\BlueStacks\HD-UpdaterService.exe [782040 2014-10-08] (BlueStack Systems, Inc.)
R2 CCDMonitorService; C:\Program Files (x86)\Acer\AOP Framework\CCDMonitorService.exe [2709760 2014-11-17] (Acer Incorporated)
R3 ePowerSvc; C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe [2573032 2014-06-12] (Acer Incorporated)
R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [282096 2014-03-18] (Intel Corporation)
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [747520 2013-08-27] (Intel(R) Corporation) [File not signed]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [828376 2013-08-27] (Intel(R) Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-12-10] (Intel Corporation)
R2 LMSvc; C:\Program Files\Acer\Acer Launch Manager\LMSvc.exe [466664 2014-06-10] (Acer Incorporate)
R2 MBAMScheduler; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe [1871160 2014-11-21] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [969016 2014-11-21] (Malwarebytes Corporation)
R3 QASvc; C:\Program Files\Acer\Acer Quick Access\QASvc.exe [458984 2014-06-26] (Acer Incorporate)
R2 RichVideo; C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [254512 2012-04-24] ()
R3 RMSvc; C:\Program Files\Acer\Acer Quick Access\RMSvc.exe [449768 2014-06-26] (Acer Incorporate)
R3 UEIPSvc; C:\Program Files\Acer\User Experience Improvement Program\Framework\UBTService.exe [234240 2014-07-15] (acer)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [368632 2014-09-22] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23792 2014-09-22] (Microsoft Corporation)
S2 5936b827; "C:\Windows\system32\rundll32.exe" "c:\Program Files (x86)\Optimizer Pro 3.20\OptProMon.dll",ENT

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R3 athr; C:\Windows\system32\DRIVERS\athwbx.sys [3888640 2014-02-14] (Qualcomm Atheros Communications, Inc.)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [119272 2014-11-24] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [131608 2014-11-24] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [28600 2014-11-24] (Avira Operations GmbH & Co. KG)
R2 BstHdDrv; C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [122072 2014-10-08] (BlueStack Systems)
S3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [77464 2014-02-25] (Qualcomm Atheros)
S3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [226304 2014-03-18] (Microsoft Corporation)
R3 iaLPSS_I2C; C:\Windows\System32\drivers\iaLPSS_I2C.sys [99320 2013-10-03] (Intel Corporation)
R3 LMDriver; C:\Windows\System32\drivers\LMDriver.sys [21360 2013-07-17] (Acer Incorporated)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-11-21] (Malwarebytes Corporation)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [129752 2015-01-08] (Malwarebytes Corporation)
R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [64216 2014-11-21] (Malwarebytes Corporation)
R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [100312 2013-12-10] (Intel Corporation)
R3 RadioShim; C:\Windows\System32\drivers\RadioShim.sys [14680 2013-07-17] (Acer Incorporated)
R3 RTSPER; C:\Windows\system32\DRIVERS\RtsPer.sys [466136 2014-01-14] (Realsil Semiconductor Corporation)
R3 SynRMIHID; C:\Windows\system32\DRIVERS\SynRMIHID.sys [42224 2014-02-19] (Synaptics Incorporated)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114496 2014-09-22] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-01-08 14:46 - 2015-01-08 14:46 - 00000000 ____D () C:\Windows\ERUNT
2015-01-08 13:05 - 2015-01-08 14:44 - 00129752 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-01-08 13:05 - 2015-01-08 13:05 - 00001118 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2015-01-08 13:05 - 2015-01-08 13:05 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2015-01-08 13:05 - 2015-01-08 13:05 - 00000000 ____D () C:\ProgramData\Malwarebytes
2015-01-08 13:05 - 2015-01-08 13:05 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2015-01-08 13:05 - 2014-11-21 06:14 - 00093400 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2015-01-08 13:05 - 2014-11-21 06:14 - 00064216 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2015-01-08 13:05 - 2014-11-21 06:14 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2015-01-08 13:01 - 2015-01-08 15:14 - 00000000 ____D () C:\Users\Daniel\Desktop\Bereinigung
2015-01-08 12:56 - 2015-01-08 14:42 - 00000000 ____D () C:\AdwCleaner
2015-01-07 20:38 - 2015-01-07 20:38 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group
2015-01-07 19:41 - 2015-01-08 15:14 - 00000000 ____D () C:\FRST
2015-01-07 19:39 - 2015-01-07 19:39 - 01115648 _____ (Farbar) C:\Users\Daniel\Downloads\FRST.exe
2015-01-07 18:12 - 2015-01-07 18:12 - 00000000 _____ () C:\Windows\setuperr.log
2015-01-07 18:12 - 2015-01-07 18:12 - 00000000 _____ () C:\Windows\setupact.log
2015-01-07 18:10 - 2015-01-08 14:43 - 00115210 _____ () C:\Windows\PFRO.log
2015-01-07 11:23 - 2015-01-07 11:23 - 00244264 _____ () C:\Users\Daniel\Downloads\Firefox Setup Stub 34.0.5 (1).exe
2015-01-07 11:23 - 2015-01-07 11:23 - 00001175 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2015-01-07 11:23 - 2015-01-07 11:23 - 00001163 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2015-01-07 11:23 - 2015-01-07 11:23 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2015-01-06 22:56 - 2015-01-06 22:56 - 00000000 ____D () C:\Users\Daniel\AppData\Roaming\Avira
2015-01-06 22:54 - 2015-01-06 22:53 - 00043064 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2015-01-06 22:52 - 2014-11-24 10:23 - 00131608 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2015-01-06 22:52 - 2014-11-24 10:23 - 00119272 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2015-01-06 22:52 - 2014-11-24 10:23 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys
2015-01-06 22:48 - 2015-01-06 22:52 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2015-01-06 22:48 - 2015-01-06 22:52 - 00000000 ____D () C:\ProgramData\Avira
2015-01-06 22:48 - 2015-01-06 22:52 - 00000000 ____D () C:\Program Files (x86)\Avira
2015-01-06 22:48 - 2015-01-06 22:48 - 00001157 _____ () C:\Users\Public\Desktop\Avira.lnk
2015-01-06 22:47 - 2015-01-06 22:47 - 04549888 _____ (Avira Operations & Co. KG) C:\Users\Daniel\Downloads\avira_de_av_5765383327__ws.exe
2015-01-06 22:42 - 2014-10-30 12:25 - 00275080 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2015-01-06 20:21 - 2015-01-06 20:21 - 00244264 _____ () C:\Users\Daniel\Downloads\Firefox Setup Stub 34.0.5.exe
2015-01-06 14:57 - 2015-01-06 14:58 - 00002005 _____ () C:\Users\Public\Desktop\abPhoto.lnk
2015-01-06 10:23 - 2015-01-08 14:56 - 01387402 _____ () C:\Windows\WindowsUpdate.log
2015-01-02 15:31 - 2014-10-14 19:13 - 00675988 _____ () C:\Users\Daniel\Desktop\Minecraft.exe
2015-01-02 15:05 - 2015-01-02 15:06 - 00000000 ____D () C:\Users\Daniel\AppData\Local\ftblauncher
2015-01-02 15:05 - 2015-01-02 15:05 - 00000000 ____D () C:\Users\Daniel\AppData\Roaming\ftblauncher
2015-01-02 14:39 - 2015-01-02 14:39 - 00000000 ____D () C:\Users\Daniel\Downloads\runtime
2015-01-02 14:38 - 2015-01-02 14:40 - 00000000 ____D () C:\Users\Daniel\Downloads\game
2015-01-02 14:38 - 2015-01-02 14:38 - 02314240 _____ () C:\Users\Daniel\Downloads\MinecraftInstaller.msi
2015-01-02 14:36 - 2015-01-02 14:36 - 01291528 _____ (Mojang) C:\Users\Daniel\Downloads\Minecraft.exe
2015-01-02 14:25 - 2015-01-06 20:52 - 00000000 ____D () C:\Users\Daniel\Desktop\minecraft Test
2015-01-02 14:03 - 2015-01-08 14:43 - 00001364 _____ () C:\Windows\Tasks\YDYXQG.job
2015-01-02 14:03 - 2015-01-02 14:03 - 00004376 _____ () C:\Windows\System32\Tasks\YDYXQG
2015-01-02 14:02 - 2015-01-07 08:08 - 00000000 ____D () C:\Program Files (x86)\d8ab63e2-cb9c-41d9-9a96-69f41c5fb27c
2015-01-02 14:00 - 2015-01-06 20:19 - 00002016 _____ () C:\Windows\patsearch.bin
2015-01-02 13:59 - 2015-01-08 14:43 - 00001366 _____ () C:\Windows\Tasks\KYBEFZU.job
2015-01-02 13:59 - 2015-01-08 14:43 - 00001364 _____ () C:\Windows\Tasks\XSHNPL.job
2015-01-02 13:59 - 2015-01-07 17:49 - 00000000 ____D () C:\Users\Daniel\AppData\Roaming\.minecraft
2015-01-02 13:59 - 2015-01-07 08:09 - 00000000 ____D () C:\Program Files (x86)\6228cefd-9c9c-4d28-ba89-4fea4b5b07c7
2015-01-02 13:59 - 2015-01-02 13:59 - 00004376 _____ () C:\Windows\System32\Tasks\XSHNPL
2015-01-02 13:59 - 2015-01-02 13:59 - 00004376 _____ () C:\Windows\System32\Tasks\KYBEFZU
2015-01-02 13:59 - 2015-01-02 13:59 - 00000000 ____D () C:\Users\Daniel\AppData\Roaming\java
2015-01-02 13:58 - 2015-01-02 13:58 - 00000000 ____D () C:\ProgramData\Sun
2015-01-02 13:58 - 2015-01-02 13:58 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2015-01-02 13:58 - 2015-01-02 13:57 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2015-01-02 13:57 - 2015-01-02 13:57 - 00000000 ____D () C:\ProgramData\Oracle
2015-01-02 13:57 - 2015-01-02 13:57 - 00000000 ____D () C:\Program Files (x86)\Java
2015-01-02 13:55 - 2015-01-02 13:55 - 00638888 _____ (Oracle Corporation) C:\Users\Daniel\Downloads\chromeinstall-8u25.exe
2015-01-02 13:54 - 2015-01-02 13:54 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf
2015-01-02 13:47 - 2014-10-29 15:11 - 06619054 _____ () C:\Users\Daniel\Desktop\FTB_Launcher.exe
2015-01-01 17:20 - 2015-01-01 17:20 - 00000000 ____D () C:\Users\Public\Documents\Android
2015-01-01 17:20 - 2015-01-01 17:20 - 00000000 ____D () C:\Users\Daniel\Documents\Android
2015-01-01 02:03 - 2015-01-01 02:03 - 00000931 _____ () C:\Users\Daniel\Downloads\The-Walking-Dead_-Survival-Instinct-lnstall - Verknüpfung.lnk
2015-01-01 02:03 - 2015-01-01 02:03 - 00000000 ____D () C:\Users\Daniel\AppData\Local\Tempde32eb70472f50f1682ef62857f90de0______
2015-01-01 01:56 - 2015-01-01 01:56 - 00000000 ____D () C:\Users\Daniel\AppData\Local\Tempde32eb70472f50f1682ef62857f90de0_____
2015-01-01 01:46 - 2015-01-01 01:46 - 00000000 ___SD () C:\Windows\system32\CompatTel
2015-01-01 01:46 - 2015-01-01 01:46 - 00000000 ____D () C:\Windows\system32\appraiser
2014-12-30 23:40 - 2014-12-30 23:40 - 00000000 ____D () C:\Program Files (x86)\WEB.DE MailCheck
2014-12-30 23:36 - 2014-12-30 23:36 - 00000000 ____D () C:\Users\Daniel\AppData\Local\Tempde32eb70472f50f1682ef62857f90de0____
2014-12-30 23:36 - 2014-12-30 23:36 - 00000000 ____D () C:\Users\Daniel\AppData\Local\Tempde32eb70472f50f1682ef62857f90de0___
2014-12-30 23:35 - 2014-12-30 23:35 - 00000000 ____D () C:\Users\Daniel\AppData\Local\Tempde32eb70472f50f1682ef62857f90de0__
2014-12-30 23:33 - 2014-12-30 23:33 - 00000000 ____D () C:\Users\Daniel\AppData\Local\Tempde32eb70472f50f1682ef62857f90de0_
2014-12-30 23:33 - 2014-12-30 23:33 - 00000000 ____D () C:\Users\Daniel\AppData\Local\Tempde32eb70472f50f1682ef62857f90de0
2014-12-30 23:33 - 2014-12-30 23:33 - 00000000 ____D () C:\Users\Daniel\AppData\Local\Tempb611a9446b16c0a3ab49ae1736d3f689
2014-12-29 00:08 - 2014-12-29 00:08 - 00000000 ____D () C:\Users\Daniel\AppData\Roaming\Foxit Software
2014-12-27 20:25 - 2015-01-07 22:31 - 00000000 ____D () C:\Users\Daniel\Documents\Euro Truck Simulator 2
2014-12-27 20:24 - 2014-12-27 20:24 - 00001356 _____ () C:\Users\Public\Desktop\Euro Truck Simulator 2.lnk
2014-12-27 20:24 - 2014-12-27 20:24 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Euro Truck Simulator 2
2014-12-27 20:22 - 2014-12-27 20:24 - 00000000 ____D () C:\Program Files (x86)\Euro Truck Simulator 2
2014-12-27 00:16 - 2014-04-14 04:29 - 01018880 _____ (Microsoft Corporation) C:\Windows\system32\termsrv.dll
2014-12-26 21:58 - 2014-07-24 10:44 - 16874496 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.dll
2014-12-26 21:58 - 2014-07-24 10:16 - 12730880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.dll
2014-12-26 21:58 - 2014-06-14 07:03 - 02389504 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2014-12-26 21:57 - 2014-07-24 16:28 - 00419648 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2014-12-26 21:57 - 2014-07-24 16:28 - 00412992 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\spaceport.sys
2014-12-26 21:57 - 2014-07-24 16:28 - 00280384 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pci.sys
2014-12-26 21:57 - 2014-07-24 16:28 - 00143680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2014-12-26 21:57 - 2014-07-24 16:23 - 00125472 _____ (Microsoft Corporation) C:\Windows\system32\dwmapi.dll
2014-12-26 21:57 - 2014-07-24 16:20 - 00645592 _____ (Microsoft Corporation) C:\Windows\system32\SHCore.dll
2014-12-26 21:57 - 2014-07-24 16:20 - 00263400 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettingsAdminFlows.exe
2014-12-26 21:57 - 2014-07-24 16:16 - 02574208 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
2014-12-26 21:57 - 2014-07-24 16:16 - 00211216 _____ (Microsoft Corporation) C:\Windows\system32\SndVol.exe
2014-12-26 21:57 - 2014-07-24 16:07 - 02009920 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2014-12-26 21:57 - 2014-07-24 16:05 - 01660048 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2014-12-26 21:57 - 2014-07-24 16:05 - 01519560 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
2014-12-26 21:57 - 2014-07-24 16:05 - 01488008 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2014-12-26 21:57 - 2014-07-24 16:05 - 01356840 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe
2014-12-26 21:57 - 2014-07-24 16:03 - 02141920 _____ (Microsoft Corporation) C:\Windows\system32\mfcore.dll
2014-12-26 21:57 - 2014-07-24 16:03 - 00882136 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll
2014-12-26 21:57 - 2014-07-24 16:03 - 00360480 _____ (Microsoft Corporation) C:\Windows\system32\mfreadwrite.dll
2014-12-26 21:57 - 2014-07-24 16:03 - 00233888 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll
2014-12-26 21:57 - 2014-07-24 16:03 - 00205512 _____ (Microsoft Corporation) C:\Windows\system32\mftranscode.dll
2014-12-26 21:57 - 2014-07-24 14:50 - 00098048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmapi.dll
2014-12-26 21:57 - 2014-07-24 14:48 - 02410976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL
2014-12-26 21:57 - 2014-07-24 14:48 - 00180208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SndVol.exe
2014-12-26 21:57 - 2014-07-24 14:46 - 00477200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SHCore.dll
2014-12-26 21:57 - 2014-07-24 14:36 - 02145472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfcore.dll
2014-12-26 21:57 - 2014-07-24 14:36 - 00707536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfplat.dll
2014-12-26 21:57 - 2014-07-24 14:36 - 00355800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfreadwrite.dll
2014-12-26 21:57 - 2014-07-24 14:36 - 00180720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mftranscode.dll
2014-12-26 21:57 - 2014-07-24 12:51 - 00008192 _____ (Microsoft Corporation) C:\Windows\system32\KBDRUM.DLL
2014-12-26 21:57 - 2014-07-24 12:51 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDYAK.DLL
2014-12-26 21:57 - 2014-07-24 12:51 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDTT102.DLL
2014-12-26 21:57 - 2014-07-24 12:51 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDTAT.DLL
2014-12-26 21:57 - 2014-07-24 12:51 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU1.DLL
2014-12-26 21:57 - 2014-07-24 12:51 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDBASH.DLL
2014-12-26 21:57 - 2014-07-24 12:51 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU.DLL
2014-12-26 21:57 - 2014-07-24 12:46 - 00079872 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\IPMIDrv.sys
2014-12-26 21:57 - 2014-07-24 12:45 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hdaudbus.sys
2014-12-26 21:57 - 2014-07-24 12:44 - 00674816 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys
2014-12-26 21:57 - 2014-07-24 12:43 - 00412160 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv.sys
2014-12-26 21:57 - 2014-07-24 12:42 - 00446976 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\nwifi.sys
2014-12-26 21:57 - 2014-07-24 12:42 - 00126464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\NdisImPlatform.sys
2014-12-26 21:57 - 2014-07-24 12:41 - 00118272 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bthpan.sys
2014-12-26 21:57 - 2014-07-24 12:06 - 00220160 _____ (Microsoft Corporation) C:\Windows\system32\iasnap.dll
2014-12-26 21:57 - 2014-07-24 12:05 - 00287232 _____ (Microsoft Corporation) C:\Windows\system32\usbmon.dll
2014-12-26 21:57 - 2014-07-24 12:05 - 00226816 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll
2014-12-26 21:57 - 2014-07-24 11:52 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDYAK.DLL
2014-12-26 21:57 - 2014-07-24 11:52 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDTT102.DLL
2014-12-26 21:57 - 2014-07-24 11:52 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDTAT.DLL
2014-12-26 21:57 - 2014-07-24 11:51 - 00008192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDRUM.DLL
2014-12-26 21:57 - 2014-07-24 11:51 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDRU1.DLL
2014-12-26 21:57 - 2014-07-24 11:51 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDBASH.DLL
2014-12-26 21:57 - 2014-07-24 11:51 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDRU.DLL
2014-12-26 21:57 - 2014-07-24 11:49 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\WorkFoldersGPExt.dll
2014-12-26 21:57 - 2014-07-24 11:32 - 00207360 _____ (Microsoft Corporation) C:\Windows\system32\powercfg.cpl
2014-12-26 21:57 - 2014-07-24 11:20 - 02050560 _____ (Microsoft Corporation) C:\Windows\system32\SRH.dll
2014-12-26 21:57 - 2014-07-24 11:18 - 01089024 _____ (Microsoft Corporation) C:\Windows\system32\gpedit.dll
2014-12-26 21:57 - 2014-07-24 11:12 - 00878592 _____ (Microsoft Corporation) C:\Windows\system32\ActionCenter.dll
2014-12-26 21:57 - 2014-07-24 11:10 - 01844224 _____ (Microsoft Corporation) C:\Windows\system32\Display.dll
2014-12-26 21:57 - 2014-07-24 11:10 - 00834560 _____ (Microsoft Corporation) C:\Windows\system32\osk.exe
2014-12-26 21:57 - 2014-07-24 11:10 - 00198656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WebClnt.dll
2014-12-26 21:57 - 2014-07-24 11:10 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iasnap.dll
2014-12-26 21:57 - 2014-07-24 11:05 - 00187392 _____ (Microsoft Corporation) C:\Windows\system32\WorkFoldersShell.dll
2014-12-26 21:57 - 2014-07-24 10:52 - 00621056 _____ (Microsoft Corporation) C:\Windows\system32\comdlg32.dll
2014-12-26 21:57 - 2014-07-24 10:42 - 00206336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\powercfg.cpl
2014-12-26 21:57 - 2014-07-24 10:40 - 00557056 _____ (Microsoft Corporation) C:\Windows\system32\PrintDialogs.dll
2014-12-26 21:57 - 2014-07-24 10:39 - 00770048 _____ (Microsoft Corporation) C:\Windows\system32\WorkfoldersControl.dll
2014-12-26 21:57 - 2014-07-24 10:33 - 01741824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SRH.dll
2014-12-26 21:57 - 2014-07-24 10:32 - 01048064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gpedit.dll
2014-12-26 21:57 - 2014-07-24 10:27 - 00779264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\osk.exe
2014-12-26 21:57 - 2014-07-24 10:25 - 00832512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ActionCenter.dll
2014-12-26 21:57 - 2014-07-24 10:24 - 01817088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Display.dll
2014-12-26 21:57 - 2014-07-24 10:21 - 00134144 _____ (Microsoft Corporation) C:\Windows\system32\browser.dll
2014-12-26 21:57 - 2014-07-24 10:18 - 00018432 _____ (Microsoft Corporation) C:\Windows\system32\wlansvcpal.dll
2014-12-26 21:57 - 2014-07-24 10:14 - 00443904 _____ (Microsoft Corporation) C:\Windows\system32\wlansec.dll
2014-12-26 21:57 - 2014-07-24 10:12 - 00127488 _____ (Microsoft Corporation) C:\Windows\system32\WiFiDisplay.dll
2014-12-26 21:57 - 2014-07-24 10:11 - 00356864 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2014-12-26 21:57 - 2014-07-24 10:11 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\wshbth.dll
2014-12-26 21:57 - 2014-07-24 10:10 - 00540672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comdlg32.dll
2014-12-26 21:57 - 2014-07-24 10:04 - 00492032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PrintDialogs.dll
2014-12-26 21:57 - 2014-07-24 10:04 - 00183808 _____ (Microsoft Corp.) C:\Windows\system32\Defrag.exe
2014-12-26 21:57 - 2014-07-24 10:03 - 00324096 _____ (Microsoft Corporation) C:\Windows\system32\srvsvc.dll
2014-12-26 21:57 - 2014-07-24 10:02 - 00220160 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll
2014-12-26 21:57 - 2014-07-24 09:58 - 00105472 _____ (Microsoft Corporation) C:\Windows\system32\BluetoothApis.dll
2014-12-26 21:57 - 2014-07-24 09:53 - 01261056 _____ (Microsoft Corporation) C:\Windows\system32\gpsvc.dll
2014-12-26 21:57 - 2014-07-24 09:53 - 00449536 _____ (Microsoft Corporation) C:\Windows\system32\defragsvc.dll
2014-12-26 21:57 - 2014-07-24 09:49 - 01287680 _____ (Microsoft Corporation) C:\Windows\system32\mispace.dll
2014-12-26 21:57 - 2014-07-24 09:49 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\wlanapi.dll
2014-12-26 21:57 - 2014-07-24 09:48 - 00659968 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Bluetooth.dll
2014-12-26 21:57 - 2014-07-24 09:47 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\wcmcsp.dll
2014-12-26 21:57 - 2014-07-24 09:43 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshbth.dll
2014-12-26 21:57 - 2014-07-24 09:39 - 02397184 _____ (Microsoft Corporation) C:\Windows\system32\storagewmi.dll
2014-12-26 21:57 - 2014-07-24 09:38 - 00371200 _____ (Microsoft Corporation) C:\Windows\system32\wlanmsm.dll
2014-12-26 21:57 - 2014-07-24 09:36 - 00079872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\BluetoothApis.dll
2014-12-26 21:57 - 2014-07-24 09:32 - 01532416 _____ (Microsoft Corporation) C:\Windows\system32\wlansvc.dll
2014-12-26 21:57 - 2014-07-24 09:30 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlanapi.dll
2014-12-26 21:57 - 2014-07-24 09:29 - 00439296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Bluetooth.dll
2014-12-26 21:57 - 2014-07-24 09:28 - 00595456 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.dll
2014-12-26 21:57 - 2014-07-24 09:23 - 01404416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\storagewmi.dll
2014-12-26 21:57 - 2014-07-24 09:22 - 00487936 _____ (Microsoft Corporation) C:\Windows\system32\winspool.drv
2014-12-26 21:57 - 2014-07-24 09:21 - 01231872 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.dll
2014-12-26 21:57 - 2014-07-24 09:21 - 00302080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlanmsm.dll
2014-12-26 21:57 - 2014-07-24 09:18 - 01144320 _____ (Microsoft Corporation) C:\Windows\system32\wwanmm.dll
2014-12-26 21:57 - 2014-07-24 09:18 - 00795136 _____ (Microsoft Corporation) C:\Windows\system32\spoolsv.exe
2014-12-26 21:57 - 2014-07-24 09:16 - 00505344 _____ (Microsoft Corporation) C:\Windows\system32\VAN.dll
2014-12-26 21:57 - 2014-07-24 09:16 - 00084480 _____ (Microsoft Corporation) C:\Windows\system32\wpdbusenum.dll
2014-12-26 21:57 - 2014-07-24 09:15 - 00721408 _____ (Microsoft Corporation) C:\Windows\system32\twinapi.dll
2014-12-26 21:57 - 2014-07-24 09:15 - 00432128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Networking.dll
2014-12-26 21:57 - 2014-07-24 09:13 - 00226304 _____ (Microsoft Corporation) C:\Windows\system32\SndVolSSO.dll
2014-12-26 21:57 - 2014-07-24 09:10 - 00889344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.dll
2014-12-26 21:57 - 2014-07-24 09:10 - 00371712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winspool.drv
2014-12-26 21:57 - 2014-07-24 09:08 - 00321536 _____ (Microsoft Corporation) C:\Windows\system32\stobject.dll
2014-12-26 21:57 - 2014-07-24 09:05 - 00448000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\VAN.dll
2014-12-26 21:57 - 2014-07-24 09:01 - 01992192 _____ (Microsoft Corporation) C:\Windows\system32\XpsPrint.dll
2014-12-26 21:57 - 2014-07-24 09:00 - 02100736 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettingsAdminFlowUI.dll
2014-12-26 21:57 - 2014-07-24 08:58 - 00432640 _____ (Microsoft Corporation) C:\Windows\system32\wwanconn.dll
2014-12-26 21:57 - 2014-07-24 08:58 - 00288768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\stobject.dll
2014-12-26 21:57 - 2014-07-24 08:54 - 01290752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsPrint.dll
2014-12-26 21:57 - 2014-07-24 08:50 - 01182208 _____ (Microsoft Corporation) C:\Windows\system32\printui.dll
2014-12-26 21:57 - 2014-07-24 08:47 - 00576512 _____ (Microsoft Corporation) C:\Windows\system32\SettingSync.dll
2014-12-26 21:57 - 2014-07-24 08:44 - 01057792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\printui.dll
2014-12-26 21:57 - 2014-07-24 08:41 - 00459264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SettingSync.dll
2014-12-26 21:57 - 2014-07-24 08:28 - 01600000 _____ (Microsoft Corporation) C:\Windows\system32\workfolderssvc.dll
2014-12-26 21:57 - 2014-07-24 05:11 - 00513544 _____ () C:\Windows\SysWOW64\locale.nls
2014-12-26 21:57 - 2014-07-24 05:11 - 00513544 _____ () C:\Windows\system32\locale.nls
2014-12-26 21:57 - 2014-07-12 06:55 - 00268288 _____ (Microsoft Corporation) C:\Windows\system32\wisp.dll
2014-12-26 21:57 - 2014-07-12 05:58 - 00210944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wisp.dll
2014-12-26 21:57 - 2014-07-04 13:59 - 00295424 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ks.sys
2014-12-26 21:57 - 2014-07-04 11:29 - 00117248 _____ (Microsoft Corporation) C:\Windows\system32\AppxSip.dll
2014-12-26 21:57 - 2014-07-04 11:20 - 01656832 _____ (Microsoft Corporation) C:\Windows\system32\GdiPlus.dll
2014-12-26 21:57 - 2014-07-04 11:06 - 00095232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppxSip.dll
2014-12-26 21:57 - 2014-07-04 11:00 - 01351168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\GdiPlus.dll
2014-12-26 21:57 - 2014-07-04 10:30 - 00544768 _____ (Microsoft Corporation) C:\Windows\system32\AppxPackaging.dll
2014-12-26 21:57 - 2014-07-04 10:27 - 00474112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppxPackaging.dll
2014-12-26 21:57 - 2014-06-27 07:22 - 00246272 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys
2014-12-26 21:57 - 2014-06-26 01:32 - 01029632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mispace.dll
2014-12-26 21:57 - 2014-06-26 01:29 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\dab.dll
2014-12-26 21:57 - 2014-06-20 00:37 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2014-12-26 21:57 - 2014-06-19 03:13 - 00310080 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\volsnap.sys
2014-12-26 21:57 - 2014-06-14 06:46 - 02071552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2014-12-26 21:57 - 2014-06-07 13:46 - 00216368 _____ (Microsoft Corporation) C:\Windows\system32\rsaenh.dll
2014-12-26 21:57 - 2014-06-07 11:20 - 00189016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rsaenh.dll
2014-12-26 21:57 - 2014-06-05 15:00 - 01118040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys
2014-12-26 21:57 - 2014-06-05 11:18 - 01018368 _____ (Microsoft Corporation) C:\Windows\system32\aclui.dll
2014-12-26 21:57 - 2014-06-05 10:42 - 00889856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aclui.dll
2014-12-26 21:57 - 2014-05-31 06:00 - 01463808 _____ (Microsoft Corporation) C:\Windows\system32\wsecedit.dll
2014-12-26 21:57 - 2014-05-31 05:18 - 01319936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wsecedit.dll
2014-12-26 21:57 - 2014-05-29 07:23 - 00427008 _____ (Microsoft Corporation) C:\Windows\system32\clusapi.dll
2014-12-26 21:57 - 2014-05-29 06:25 - 00313856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\clusapi.dll
2014-12-26 21:57 - 2014-05-26 08:26 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\AppxSysprep.dll
2014-12-26 21:57 - 2014-05-10 11:12 - 00387896 _____ (Microsoft Corporation) C:\Windows\system32\bcryptprimitives.dll
2014-12-26 21:57 - 2014-05-10 09:46 - 00335680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcryptprimitives.dll
2014-12-26 21:57 - 2014-05-06 05:41 - 00486744 _____ (Microsoft Corporation) C:\Windows\system32\netcfgx.dll
2014-12-26 21:57 - 2014-05-06 01:55 - 00391000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netcfgx.dll
2014-12-26 21:57 - 2014-03-25 03:27 - 00160600 _____ (Microsoft Corporation) C:\Windows\system32\winmmbase.dll
2014-12-26 21:57 - 2014-03-25 03:27 - 00123920 _____ (Microsoft Corporation) C:\Windows\system32\winmm.dll
2014-12-26 21:57 - 2014-03-25 02:20 - 00128568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winmm.dll
2014-12-26 21:57 - 2014-03-25 02:20 - 00127544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winmmbase.dll
2014-12-26 21:39 - 2014-12-04 00:37 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-12-26 21:39 - 2014-12-04 00:09 - 00830464 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2014-12-26 21:39 - 2014-12-03 00:09 - 01083392 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-12-26 21:39 - 2014-12-03 00:09 - 00740864 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2014-12-26 21:39 - 2014-12-03 00:09 - 00412672 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2014-12-26 21:39 - 2014-12-03 00:09 - 00396288 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2014-12-26 21:39 - 2014-12-03 00:09 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2014-12-26 21:39 - 2014-11-10 03:29 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\DeviceSetupStatusProvider.dll
2014-12-26 21:39 - 2014-11-10 02:51 - 00028672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DeviceSetupStatusProvider.dll
2014-12-26 21:39 - 2014-11-01 00:57 - 01091072 _____ (Microsoft Corporation) C:\Windows\system32\MrmCoreR.dll
2014-12-26 21:39 - 2014-11-01 00:47 - 00790528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MrmCoreR.dll
2014-12-26 21:39 - 2014-10-31 00:39 - 01970432 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2014-12-26 21:39 - 2014-10-31 00:38 - 01612992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2014-12-26 21:39 - 2014-10-13 03:33 - 00116032 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2014-12-26 21:39 - 2014-10-11 01:58 - 03320320 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2014-12-26 21:39 - 2014-10-11 01:53 - 03607040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2014-12-26 21:39 - 2014-10-08 08:30 - 00110080 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll
2014-12-26 21:39 - 2014-10-08 08:09 - 00428032 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll
2014-12-26 21:39 - 2014-10-08 07:27 - 00325120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msihnd.dll
2014-12-26 21:39 - 2014-10-08 06:32 - 02773504 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2014-12-26 21:39 - 2014-10-08 06:19 - 02459136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2014-12-26 19:07 - 2015-01-08 14:34 - 00000000 ____D () C:\Program Files (x86)\OptuOn
2014-12-26 19:07 - 2014-12-26 19:07 - 00000000 ____D () C:\ProgramData\gpkmjaddgmnebabefhalcdhlohdhiejg
2014-12-26 19:03 - 2015-01-08 14:34 - 00000000 ____D () C:\Program Files (x86)\Unisales
2014-12-26 19:03 - 2014-12-26 19:03 - 00000000 ____D () C:\ProgramData\pobnbnmffkpndfpcgmkcmocainfomioa
2014-12-26 19:01 - 2014-12-26 19:01 - 00000000 ____D () C:\Program Files (x86)\Share the Wealth
2014-12-26 19:00 - 2015-01-08 14:34 - 00000000 ____D () C:\Program Files (x86)\YouettubeAAdBillocke
2014-12-26 19:00 - 2015-01-08 14:34 - 00000000 ____D () C:\Program Files (x86)\unisAlEEs
2014-12-26 19:00 - 2014-12-26 19:00 - 00000000 ____D () C:\ProgramData\jooedlmpmpnhalnchcfgihpehccbioml
2014-12-26 19:00 - 2014-12-26 19:00 - 00000000 ____D () C:\Program Files (x86)\uonaisaeles
2014-12-25 23:39 - 2014-12-25 23:39 - 00000000 ____D () C:\Users\Daniel\AppData\Local\Macromedia
2014-12-25 20:54 - 2015-01-08 15:07 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-12-25 20:54 - 2014-12-25 20:57 - 00003772 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-12-25 20:53 - 2014-12-25 20:57 - 00000000 ____D () C:\Users\Daniel\AppData\Local\Adobe
2014-12-25 13:32 - 2014-12-25 13:32 - 00001078 _____ () C:\Users\UpdatusUser\Desktop\Spielkiste.lnk
2014-12-25 13:32 - 2014-12-25 13:32 - 00000000 ____D () C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Der Planer 3
2014-12-25 13:32 - 2014-12-25 13:32 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Der Planer 3
2014-12-25 13:31 - 2014-12-25 13:31 - 00000000 ____D () C:\Program Files (x86)\phenomedia
2014-12-25 13:31 - 2014-12-25 13:31 - 00000000 ____D () C:\Program Files (x86)\bellaundben
2014-12-25 11:32 - 2015-01-07 11:23 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-12-25 11:32 - 2014-12-25 11:33 - 00000000 ____D () C:\Users\Daniel\AppData\Roaming\Mozilla
2014-12-25 11:32 - 2014-12-25 11:33 - 00000000 ____D () C:\Users\Daniel\AppData\Local\Mozilla
2014-12-25 11:32 - 2014-12-25 11:32 - 00000000 ____D () C:\ProgramData\Mozilla
2014-12-25 11:31 - 2014-12-25 11:32 - 39441776 _____ () C:\Users\Daniel\Downloads\Firefox_Setup_de34.0.5.exe
2014-12-25 11:28 - 2014-12-27 20:15 - 00000000 ____D () C:\Users\Daniel\AppData\Roaming\Skype
2014-12-25 11:28 - 2014-12-25 11:28 - 00000000 ____D () C:\Users\Daniel\AppData\Local\Skype
2014-12-25 11:02 - 2014-12-27 20:15 - 00000000 ____D () C:\ProgramData\Skype
2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Musik
2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Bilder
2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\Users\Default\Vorlagen
2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\Users\Default\Startmenü
2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung
2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\Users\Default\Lokale Einstellungen
2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\Users\Default\Eigene Dateien
2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\Users\Default\Druckumgebung
2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik
2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder
2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf
2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Anwendungsdaten
2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\Users\Default\Anwendungsdaten
2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik
2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder
2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf
2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Anwendungsdaten
2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\Programme
2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\ProgramData\Vorlagen
2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\ProgramData\Startmenü
2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\ProgramData\Microsoft\Windows\Start Menu\Programme
2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\ProgramData\Dokumente
2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\ProgramData\Anwendungsdaten
2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\Program Files\Gemeinsame Dateien
2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\Dokumente und Einstellungen
2014-12-25 00:48 - 2014-12-25 00:48 - 00002774 _____ () C:\Windows\System32\Tasks\CCleanerSkipUAC
2014-12-25 00:48 - 2014-12-25 00:48 - 00000838 _____ () C:\Users\Public\Desktop\CCleaner.lnk
2014-12-25 00:48 - 2014-12-25 00:48 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2014-12-25 00:48 - 2014-12-25 00:48 - 00000000 ____D () C:\Program Files\CCleaner
2014-12-25 00:47 - 2014-12-25 00:47 - 04188536 _____ (Piriform Ltd) C:\Users\Daniel\Downloads\ccsetup501_slim.exe
2014-12-25 00:47 - 2014-12-25 00:47 - 04188536 _____ (Piriform Ltd) C:\Users\Daniel\Downloads\ccsetup501_slim (1).exe
2014-12-25 00:44 - 2014-12-25 00:44 - 00000000 ____D () C:\Windows\3F5C371F8EA24F259D3DD0B4526E3AEA.TMP
2014-12-25 00:28 - 2014-12-25 00:28 - 00000221 _____ () C:\Users\Daniel\Desktop\Train Simulator 2015.url
2014-12-25 00:28 - 2014-12-25 00:28 - 00000000 ____D () C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2014-12-24 23:49 - 2015-01-08 14:44 - 00000000 ____D () C:\Program Files (x86)\Steam
2014-12-24 23:49 - 2014-12-24 23:49 - 00000933 _____ () C:\Users\Public\Desktop\Steam.lnk
2014-12-24 23:49 - 2014-12-24 23:49 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam
2014-12-24 23:08 - 2014-12-24 23:11 - 345295856 _____ (GIANTS Software ) C:\Users\Daniel\Downloads\FarmingSimulator2015Patch1.2DE.exe
2014-12-24 23:02 - 2014-12-25 00:45 - 00000000 ____D () C:\Users\Daniel\AppData\Roaming\NVIDIA
2014-12-24 23:01 - 2014-12-24 23:01 - 00000000 ____D () C:\Users\Daniel\Documents\My Games
2014-12-24 23:00 - 2014-12-24 23:00 - 00001295 _____ () C:\Users\Daniel\Desktop\Landwirtschafts Simulator 15 .lnk
2014-12-24 23:00 - 2014-12-24 23:00 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Landwirtschafts Simulator 2015
2014-12-24 22:55 - 2015-01-01 01:58 - 00000000 ____D () C:\Program Files (x86)\Landwirtschafts Simulator 2015
2014-12-24 22:41 - 2014-12-24 22:41 - 00000000 __SHD () C:\Users\Daniel\AppData\Local\EmieBrowserModeList
2014-12-24 21:40 - 2014-11-26 22:10 - 00714720 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-12-24 21:40 - 2014-11-26 22:10 - 00106976 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-12-24 21:14 - 2014-12-24 21:14 - 00000000 ____D () C:\Users\Daniel\AppData\Local\Acer Aspire R7 Tutorial
2014-12-24 21:07 - 2014-12-24 21:07 - 00000000 ____D () C:\Users\Public\Pokki
2014-12-24 21:04 - 2014-12-24 21:04 - 00001276 _____ () C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HD Audio-Manager.lnk
2014-12-24 21:04 - 2014-12-24 21:04 - 00000000 ____D () C:\Users\Daniel\AppData\Roaming\Atheros
2014-12-24 21:04 - 2014-12-24 21:04 - 00000000 ____D () C:\Users\Daniel\AppData\Local\iGware
2014-12-24 20:43 - 2014-12-24 20:47 - 00002177 _____ () C:\Users\Daniel\Desktop\BlueStacks App Player - CHIP Downloader.lnk
2014-12-24 20:29 - 2014-12-24 20:31 - 00000000 ____D () C:\Windows\system32\MRT
2014-12-24 20:29 - 2014-11-27 16:40 - 112710672 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-12-24 20:23 - 2014-12-24 20:23 - 00001823 _____ () C:\Users\Public\Desktop\Start BlueStacks.lnk
2014-12-24 20:22 - 2014-12-24 20:29 - 00000000 ____D () C:\Program Files (x86)\BlueStacks
2014-12-24 20:22 - 2014-12-24 20:22 - 00001880 _____ () C:\Users\Public\Desktop\Apps.lnk
2014-12-24 20:22 - 2014-12-24 20:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BlueStacks
2014-12-24 20:17 - 2014-12-25 00:49 - 00000000 ____D () C:\ProgramData\BlueStacksSetup
2014-12-24 20:17 - 2014-12-24 20:17 - 00000000 ____D () C:\Windows\System32\Tasks\Abelssoft
2014-12-24 20:17 - 2014-12-24 20:17 - 00000000 ____D () C:\Users\Daniel\AppData\Roaming\Abelssoft
2014-12-24 20:17 - 2014-12-24 20:17 - 00000000 ____D () C:\Users\Daniel\AppData\Local\Bluestacks
2014-12-24 20:17 - 2014-12-24 20:17 - 00000000 ____D () C:\Users\Daniel\AppData\Local\Abelssoft
2014-12-24 20:17 - 2014-12-24 20:17 - 00000000 ____D () C:\ProgramData\XDMessagingv4
2014-12-24 20:16 - 2014-12-24 20:16 - 00001066 _____ () C:\Users\Public\Desktop\CHIP Updater.lnk
2014-12-24 20:16 - 2014-12-24 20:16 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CHIP Updater
2014-12-24 20:16 - 2014-12-24 20:16 - 00000000 ____D () C:\Program Files (x86)\CHIP Updater
2014-12-24 20:15 - 2014-12-24 20:15 - 01174352 _____ () C:\Users\Daniel\Downloads\BlueStacks App Player - CHIP-Installer.exe
2014-12-24 20:14 - 2014-11-22 03:49 - 02885120 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-12-24 20:14 - 2014-11-22 03:34 - 06039552 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-12-24 20:14 - 2014-11-22 03:22 - 19749376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-12-24 20:14 - 2014-11-22 03:08 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-12-24 20:14 - 2014-11-22 03:05 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-12-24 20:14 - 2014-11-22 03:01 - 02277888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-12-24 20:14 - 2014-11-22 02:49 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-12-24 20:14 - 2014-11-22 02:49 - 00718848 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-12-24 20:14 - 2014-11-22 02:49 - 00373760 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-12-24 20:14 - 2014-11-22 02:46 - 02125312 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-12-24 20:14 - 2014-11-22 02:43 - 14412800 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-12-24 20:14 - 2014-11-22 02:35 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-12-24 20:14 - 2014-11-22 02:33 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-12-24 20:14 - 2014-11-22 02:29 - 04299264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-12-24 20:14 - 2014-11-22 02:23 - 00688640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-12-24 20:14 - 2014-11-22 02:23 - 00326656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-12-24 20:14 - 2014-11-22 02:22 - 02052096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-12-24 20:14 - 2014-11-22 02:15 - 01548288 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-12-24 20:14 - 2014-11-22 02:13 - 12836864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-12-24 20:14 - 2014-11-22 02:03 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-12-24 20:14 - 2014-11-22 02:00 - 01888256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-12-24 20:14 - 2014-11-22 01:56 - 01307136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-12-24 20:14 - 2014-11-22 01:54 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-12-24 20:14 - 2014-10-31 05:57 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-12-24 20:14 - 2014-10-31 05:50 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-12-24 20:14 - 2014-10-31 05:38 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-12-24 20:14 - 2014-10-31 05:30 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-12-24 20:14 - 2014-10-31 04:44 - 02865152 _____ (Microsoft Corporation) C:\Windows\system32\actxprxy.dll
2014-12-24 20:14 - 2014-10-31 04:11 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-12-24 20:14 - 2014-10-31 04:02 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-12-24 20:14 - 2014-10-31 03:26 - 01042944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\actxprxy.dll
2014-12-24 20:13 - 2014-12-24 20:14 - 51859586 _____ () C:\Users\Daniel\Downloads\com.supercell.clashofclans_6.322.3.apk
2014-12-24 20:13 - 2014-12-24 20:13 - 00000884 _____ () C:\Users\Public\Desktop\Acer Care Center.lnk
2014-12-24 20:13 - 2014-11-22 04:13 - 25059840 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-12-24 20:13 - 2014-11-22 03:50 - 00580096 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-12-24 20:13 - 2014-11-22 03:49 - 00417280 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2014-12-24 20:13 - 2014-11-22 03:48 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-12-24 20:13 - 2014-11-22 03:35 - 00812544 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2014-12-24 20:13 - 2014-11-22 03:07 - 00501248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-12-24 20:13 - 2014-11-22 03:06 - 00340992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2014-12-24 20:13 - 2014-11-22 03:06 - 00145408 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2014-12-24 20:13 - 2014-11-22 03:05 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2014-12-24 20:13 - 2014-11-22 02:59 - 01032704 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll
2014-12-24 20:13 - 2014-11-22 02:55 - 00661504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2014-12-24 20:13 - 2014-11-22 02:52 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2014-12-24 20:13 - 2014-11-22 02:34 - 00128000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2014-12-24 20:13 - 2014-11-22 02:29 - 00880128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll
2014-12-24 20:13 - 2014-11-22 02:28 - 02358272 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-12-24 20:13 - 2014-11-22 02:25 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2014-12-24 20:13 - 2014-10-31 06:12 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2014-12-24 20:13 - 2014-10-31 06:12 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2014-12-24 20:13 - 2014-10-31 06:10 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2014-12-24 20:13 - 2014-10-31 06:09 - 00064512 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2014-12-24 20:13 - 2014-10-31 06:08 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2014-12-24 20:13 - 2014-10-31 06:06 - 00237568 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2014-12-24 20:13 - 2014-10-31 06:06 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-12-24 20:13 - 2014-10-31 06:06 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-12-24 20:13 - 2014-10-31 05:56 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-12-24 20:13 - 2014-10-31 05:54 - 00132096 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2014-12-24 20:13 - 2014-10-31 05:53 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-12-24 20:13 - 2014-10-31 05:52 - 00108544 _____ (Microsoft Corporation) C:\Windows\system32\hlink.dll
2014-12-24 20:13 - 2014-10-31 05:51 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-12-24 20:13 - 2014-10-31 05:51 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-12-24 20:13 - 2014-10-31 05:40 - 00033280 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2014-12-24 20:13 - 2014-10-31 05:29 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2014-12-24 20:13 - 2014-10-31 05:29 - 00087552 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2014-12-24 20:13 - 2014-10-31 05:28 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2014-12-24 20:13 - 2014-10-31 05:25 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-12-24 20:13 - 2014-10-31 05:24 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2014-12-24 20:13 - 2014-10-31 05:19 - 00152064 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2014-12-24 20:13 - 2014-10-31 04:42 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2014-12-24 20:13 - 2014-10-31 04:28 - 00137728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2014-12-24 20:13 - 2014-10-31 04:28 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2014-12-24 20:13 - 2014-10-31 04:27 - 00152064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2014-12-24 20:13 - 2014-10-31 04:26 - 00057344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2014-12-24 20:13 - 2014-10-31 04:25 - 00011264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2014-12-24 20:13 - 2014-10-31 04:24 - 00235520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2014-12-24 20:13 - 2014-10-31 04:24 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-12-24 20:13 - 2014-10-31 04:23 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-12-24 20:13 - 2014-10-31 04:16 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-12-24 20:13 - 2014-10-31 04:15 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-12-24 20:13 - 2014-10-31 04:14 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2014-12-24 20:13 - 2014-10-31 04:13 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-12-24 20:13 - 2014-10-31 04:13 - 00099328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\hlink.dll
2014-12-24 20:13 - 2014-10-31 04:12 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-12-24 20:13 - 2014-10-31 04:03 - 00027136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2014-12-24 20:13 - 2014-10-31 03:57 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-12-24 20:13 - 2014-10-31 03:56 - 00091136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2014-12-24 20:13 - 2014-10-31 03:56 - 00090624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2014-12-24 20:13 - 2014-10-31 03:56 - 00073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2014-12-24 20:13 - 2014-10-31 03:53 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-12-24 20:13 - 2014-10-31 03:53 - 00052736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2014-12-24 20:13 - 2014-10-31 03:48 - 00130048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2014-12-24 20:13 - 2014-10-31 03:24 - 00040448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2014-12-24 20:13 - 2014-02-06 12:30 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-12-24 20:12 - 2014-11-07 05:16 - 01762840 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2014-12-24 20:12 - 2014-11-07 04:26 - 01489072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2014-12-24 20:12 - 2014-10-30 23:37 - 00129536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\poqexec.exe
2014-12-24 20:12 - 2014-10-30 23:34 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe
2014-12-24 20:12 - 2014-10-13 03:43 - 00238912 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\sdbus.sys
2014-12-24 20:12 - 2014-10-13 03:43 - 00153920 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dumpsd.sys
2014-12-24 20:12 - 2014-10-13 03:43 - 00086336 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pdc.sys
2014-12-24 20:12 - 2014-10-13 03:43 - 00039744 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\intelpep.sys
2014-12-24 20:10 - 2014-11-10 00:19 - 00991232 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2014-12-24 20:10 - 2014-11-10 00:19 - 00806400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2014-12-24 20:10 - 2014-11-10 00:18 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\pku2u.dll
2014-12-24 20:10 - 2014-11-10 00:18 - 00208896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pku2u.dll
2014-12-24 20:09 - 2014-10-23 06:48 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll
2014-12-24 20:09 - 2014-10-23 06:05 - 00072192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\packager.dll
2014-12-24 20:09 - 2014-10-17 08:01 - 00789184 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2014-12-24 20:09 - 2014-10-17 07:58 - 00602768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll
2014-12-24 20:09 - 2014-10-10 02:58 - 00177472 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2014-12-24 20:09 - 2014-10-10 02:58 - 00027456 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpvideominiport.sys
2014-12-24 20:09 - 2014-10-10 02:44 - 00563976 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2014-12-24 20:09 - 2014-10-08 08:37 - 00736768 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2014-12-24 20:09 - 2014-10-08 08:37 - 00154112 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2014-12-24 20:09 - 2014-10-08 08:34 - 00131584 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll
2014-12-24 20:09 - 2014-10-08 08:24 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\rfxvmt.dll
2014-12-24 20:09 - 2014-10-08 07:56 - 00445440 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
2014-12-24 20:09 - 2014-10-08 07:51 - 00736768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2014-12-24 20:09 - 2014-10-08 07:51 - 00154112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2014-12-24 20:09 - 2014-10-08 07:18 - 00324096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll
2014-12-24 20:09 - 2014-10-08 07:17 - 01441792 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-12-24 20:09 - 2014-10-08 06:23 - 03547648 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2014-12-24 20:09 - 2014-10-07 07:28 - 00500016 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll
2014-12-24 20:09 - 2014-10-07 07:27 - 00482872 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll
2014-12-24 20:09 - 2014-10-07 07:27 - 00394120 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll
2014-12-24 20:09 - 2014-10-07 07:27 - 00272248 _____ (Microsoft Corporation) C:\Windows\system32\audiodg.exe
2014-12-24 20:09 - 2014-10-07 07:27 - 00108432 _____ (Microsoft Corporation) C:\Windows\system32\EncDump.dll
2014-12-24 20:09 - 2014-10-07 04:34 - 00370424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll
2014-12-24 20:09 - 2014-10-07 04:34 - 00344536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AUDIOKSE.dll
2014-12-24 20:09 - 2014-10-07 04:33 - 00424544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioEng.dll
2014-12-24 20:09 - 2014-10-07 04:30 - 04182016 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-12-24 20:09 - 2014-10-07 02:54 - 00226304 _____ (Microsoft Corporation) C:\Windows\system32\AudioEndpointBuilder.dll
2014-12-24 20:09 - 2014-10-07 02:46 - 00911360 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2014-12-24 20:09 - 2014-09-27 08:13 - 00104336 _____ (Microsoft Corporation) C:\Windows\system32\ncryptsslp.dll
2014-12-24 20:09 - 2014-09-27 06:24 - 00088800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncryptsslp.dll
2014-12-24 20:09 - 2014-09-27 04:38 - 00426496 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2014-12-24 20:09 - 2014-09-27 04:30 - 00185856 _____ (Microsoft Corporation) C:\Windows\system32\dpapisrv.dll
2014-12-24 20:09 - 2014-09-27 04:17 - 00357376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2014-12-24 20:09 - 2014-08-23 06:18 - 02149376 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2014-12-24 20:09 - 2014-08-23 06:03 - 01346048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2014-12-24 20:08 - 2015-01-04 11:43 - 00000000 ____D () C:\Program Files (x86)\Google
2014-12-24 20:08 - 2014-12-24 20:08 - 00000000 ____D () C:\Users\Daniel\AppData\Local\Google
2014-12-24 20:08 - 2014-09-10 07:25 - 00474432 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2014-12-24 20:08 - 2014-09-08 04:07 - 02497344 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2014-12-24 20:08 - 2014-09-08 04:07 - 00428864 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
2014-12-24 20:08 - 2014-09-07 23:08 - 00389176 _____ () C:\Windows\system32\ApnDatabase.xml
2014-12-24 20:08 - 2014-09-04 23:30 - 00822272 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll
2014-12-24 20:08 - 2014-09-04 23:21 - 01053184 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll
2014-12-24 20:08 - 2014-09-04 04:05 - 00836176 _____ (Microsoft Corporation) C:\Windows\system32\mfmp4srcsnk.dll
2014-12-24 20:08 - 2014-09-04 03:22 - 00670384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfmp4srcsnk.dll
2014-12-24 20:08 - 2014-09-04 02:01 - 00448512 _____ (Microsoft Corporation) C:\Windows\system32\puiobj.dll
2014-12-24 20:08 - 2014-09-04 01:32 - 00334336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\puiobj.dll
2014-12-24 20:08 - 2014-09-04 01:10 - 00118272 _____ (Microsoft Corporation) C:\Windows\system32\winbici.dll
2014-12-24 20:08 - 2014-08-31 01:17 - 00148800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBSTOR.SYS
2014-12-24 20:08 - 2014-08-31 01:15 - 21197152 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2014-12-24 20:08 - 2014-08-30 23:59 - 18723112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2014-12-24 20:08 - 2014-08-30 23:05 - 00615424 _____ (Microsoft Corporation) C:\Windows\system32\FXSCOMEX.dll
2014-12-24 20:08 - 2014-08-30 22:58 - 00275968 _____ (Microsoft Corporation) C:\Windows\system32\FXSAPI.dll
2014-12-24 20:08 - 2014-08-30 22:04 - 00941568 _____ (Microsoft Corporation) C:\Windows\system32\MFMediaEngine.dll
2014-12-24 20:08 - 2014-08-30 21:53 - 00239104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FXSAPI.dll
2014-12-24 20:08 - 2014-08-30 21:17 - 00799744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFMediaEngine.dll
2014-12-24 20:08 - 2014-08-28 03:55 - 07484224 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2014-12-24 20:08 - 2014-08-28 01:21 - 02480128 _____ (Microsoft Corporation) C:\Windows\system32\WsmSvc.dll
2014-12-24 20:08 - 2014-08-28 01:06 - 02030592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmSvc.dll
2014-12-24 20:08 - 2014-08-23 06:14 - 13424128 _____ (Microsoft Corporation) C:\Windows\system32\twinui.dll
2014-12-24 20:08 - 2014-08-23 06:04 - 11820544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.dll
2014-12-24 20:08 - 2014-08-23 05:50 - 02714112 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers.dll
2014-12-24 20:08 - 2014-08-02 01:51 - 00545792 _____ (Microsoft Corporation) C:\Windows\system32\untfs.dll
2014-12-24 20:08 - 2014-08-02 01:35 - 00485376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\untfs.dll
2014-12-24 20:08 - 2014-07-24 12:22 - 00308736 _____ (Microsoft Corporation) C:\Windows\system32\compstui.dll
2014-12-24 20:08 - 2014-07-24 10:53 - 00215552 _____ (Microsoft Corporation) C:\Windows\system32\prnntfy.dll
2014-12-24 20:08 - 2014-07-24 10:13 - 00195584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\prnntfy.dll
2014-12-24 20:08 - 2014-07-24 09:20 - 00187392 _____ (Microsoft Corporation) C:\Windows\system32\puiapi.dll
2014-12-24 20:08 - 2014-07-24 09:08 - 00162816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\puiapi.dll
2014-12-24 20:08 - 2014-07-24 08:49 - 00263680 _____ (Microsoft Corporation) C:\Windows\system32\DafPrintProvider.dll
2014-12-24 20:08 - 2014-07-24 08:43 - 00200192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DafPrintProvider.dll
2014-12-24 20:07 - 2014-12-24 20:07 - 42184784 _____ (Google Inc.) C:\Users\Daniel\Downloads\ChromeStandaloneSetup.exe
2014-12-24 20:07 - 2014-10-18 10:55 - 00055776 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2014-12-24 20:07 - 2014-10-18 09:09 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2014-12-24 20:07 - 2014-10-18 09:09 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2014-12-24 20:07 - 2014-10-18 08:25 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2014-12-24 20:07 - 2014-10-18 07:50 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\wuaext.dll
2014-12-24 20:07 - 2014-10-18 07:38 - 03557376 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2014-12-24 20:07 - 2014-10-18 07:27 - 00035840 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2014-12-24 20:07 - 2014-10-18 07:26 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2014-12-24 20:07 - 2014-10-18 07:23 - 00407552 _____ (Microsoft Corporation) C:\Windows\system32\WUSettingsProvider.dll
2014-12-24 20:07 - 2014-10-18 07:23 - 00095744 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2014-12-24 20:07 - 2014-10-18 07:21 - 00894976 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2014-12-24 20:07 - 2014-10-18 07:20 - 01714176 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2014-12-24 20:07 - 2014-10-18 07:14 - 00124928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2014-12-24 20:07 - 2014-10-18 07:14 - 00029696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2014-12-24 20:07 - 2014-10-18 07:12 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2014-12-24 20:07 - 2014-10-18 07:11 - 00723968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2014-12-24 20:07 - 2014-09-22 05:38 - 01519488 _____ (Microsoft Corporation) C:\Windows\system32\user32.dll
2014-12-24 20:07 - 2014-09-22 04:06 - 00258368 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdFilter.sys
2014-12-24 20:07 - 2014-09-22 04:06 - 00114496 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdNisDrv.sys
2014-12-24 20:07 - 2014-09-22 03:49 - 00035320 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdBoot.sys
2014-12-24 20:07 - 2014-09-19 01:16 - 01346048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user32.dll
2014-12-24 20:07 - 2014-09-02 23:08 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\winshfhc.dll
2014-12-24 20:07 - 2014-09-02 23:08 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winshfhc.dll
2014-12-24 20:06 - 2014-08-16 05:08 - 01507648 _____ (Microsoft Corporation) C:\Windows\system32\propsys.dll
2014-12-24 20:06 - 2014-08-16 05:01 - 01710184 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2014-12-24 20:06 - 2014-08-16 04:58 - 01112512 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2014-12-24 20:06 - 2014-08-16 04:16 - 01205976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\propsys.dll
2014-12-24 20:06 - 2014-08-16 04:03 - 01467384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2014-12-24 20:06 - 2014-08-16 02:31 - 00838144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2014-12-24 20:06 - 2014-08-16 02:04 - 00359424 _____ (Microsoft Corporation) C:\Windows\system32\Wldap32.dll
2014-12-24 20:06 - 2014-08-16 01:58 - 00287744 _____ (Microsoft Corporation) C:\Windows\system32\SystemEventsBrokerServer.dll
2014-12-24 20:06 - 2014-08-16 01:53 - 00118272 _____ (Microsoft Corporation) C:\Windows\system32\httpprxm.dll
2014-12-24 20:06 - 2014-08-16 01:46 - 00290816 _____ (Microsoft Corporation) C:\Windows\system32\ProximityService.dll
2014-12-24 20:06 - 2014-08-16 01:45 - 00267776 _____ (Microsoft Corporation) C:\Windows\system32\bisrv.dll
2014-12-24 20:06 - 2014-08-16 01:43 - 00321024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Wldap32.dll
2014-12-24 20:06 - 2014-08-16 01:43 - 00075776 _____ (Microsoft Corporation) C:\Windows\system32\adhsvc.dll
2014-12-24 20:06 - 2014-08-16 01:31 - 00914432 _____ (Microsoft Corporation) C:\Windows\system32\iphlpsvc.dll
2014-12-24 20:06 - 2014-08-16 01:31 - 00286208 _____ (Microsoft Corporation) C:\Windows\system32\pcsvDevice.dll
2014-12-24 20:06 - 2014-08-16 01:29 - 00249344 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2014-12-24 20:06 - 2014-08-16 01:23 - 01106432 _____ (Microsoft Corporation) C:\Windows\system32\SearchFolder.dll
2014-12-24 20:06 - 2014-08-16 01:22 - 00717824 _____ (Microsoft Corporation) C:\Windows\system32\SkyDriveTelemetry.dll
2014-12-24 20:06 - 2014-08-16 01:22 - 00286208 _____ (Microsoft Corporation) C:\Windows\system32\SkyDriveShell.dll
2014-12-24 20:06 - 2014-08-16 01:19 - 00189952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2014-12-24 20:06 - 2014-08-16 01:18 - 04758528 _____ (Microsoft Corporation) C:\Windows\system32\SyncEngine.dll
2014-12-24 20:06 - 2014-08-16 01:17 - 08757760 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Search.dll
2014-12-24 20:06 - 2014-08-16 01:14 - 00265216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SkyDriveShell.dll
2014-12-24 20:06 - 2014-08-16 01:13 - 06649344 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2014-12-24 20:06 - 2014-08-16 01:13 - 05902848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Search.dll
2014-12-24 20:06 - 2014-08-16 01:13 - 00840192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchFolder.dll
2014-12-24 20:06 - 2014-08-16 01:11 - 00920064 _____ (Microsoft Corporation) C:\Windows\system32\WSShared.dll
2014-12-24 20:06 - 2014-08-16 01:10 - 01120768 _____ (Microsoft Corporation) C:\Windows\system32\SkyDrive.exe
2014-12-24 20:06 - 2014-08-16 01:08 - 05777408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2014-12-24 20:06 - 2014-08-16 01:07 - 00756224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSShared.dll
2014-12-24 20:06 - 2014-07-24 16:28 - 00468288 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBHUB3.SYS
2014-12-24 20:06 - 2014-07-24 12:42 - 01200640 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bthport.sys
2014-12-24 20:06 - 2014-07-24 12:41 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bridge.sys
2014-12-24 20:06 - 2014-07-24 11:09 - 01057280 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll
2014-12-24 20:06 - 2014-07-24 10:27 - 00855552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdvidcrl.dll
2014-12-24 20:05 - 2014-09-04 01:12 - 00590336 _____ (Microsoft Corporation) C:\Windows\system32\rastls.dll
2014-12-24 20:05 - 2014-09-04 01:01 - 00514048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rastls.dll
2014-12-24 20:05 - 2014-06-09 23:13 - 00035480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TsWpfWrp.exe
2014-12-24 20:05 - 2014-06-09 23:13 - 00035480 _____ (Microsoft Corporation) C:\Windows\system32\TsWpfWrp.exe
2014-12-24 20:04 - 2014-08-23 08:48 - 02374784 _____ (Microsoft Corporation) C:\Windows\explorer.exe
2014-12-24 20:04 - 2014-08-23 08:13 - 02084520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\explorer.exe
2014-12-24 20:04 - 2014-08-23 07:10 - 00068096 _____ (Microsoft Corporation) C:\Windows\system32\UXInit.dll
2014-12-24 20:04 - 2014-08-23 06:32 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UXInit.dll
2014-12-24 20:04 - 2014-08-23 05:33 - 00796672 _____ (Microsoft Corporation) C:\Windows\system32\uDWM.dll
2014-12-24 20:04 - 2014-08-15 01:36 - 00146752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msgpioclx.sys
2014-12-24 20:04 - 2014-08-02 01:18 - 01212928 _____ (Microsoft Corporation) C:\Windows\system32\schedsvc.dll
2014-12-24 20:04 - 2014-07-30 02:56 - 00299520 _____ (Microsoft Corporation) C:\Windows\system32\WSDMon.dll
2014-12-24 20:04 - 2014-07-29 06:22 - 00205824 _____ (Microsoft Corporation) C:\Windows\system32\tcpmon.dll
2014-12-24 20:03 - 2014-07-24 04:20 - 00875688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcr120_clr0400.dll
2014-12-24 20:03 - 2014-07-24 04:20 - 00869544 _____ (Microsoft Corporation) C:\Windows\system32\msvcr120_clr0400.dll
2014-12-24 20:02 - 2014-08-07 03:12 - 01336624 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2014-12-24 20:02 - 2014-08-02 04:56 - 01064448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2014-12-24 20:02 - 2014-07-15 19:16 - 03048880 _____ (Microsoft Corporation) C:\Windows\system32\WpcMon.exe
2014-12-24 20:02 - 2014-07-15 09:29 - 03118080 _____ (Microsoft Corporation) C:\Windows\system32\Wpc.dll
2014-12-24 20:02 - 2014-07-15 09:22 - 02861056 _____ (Microsoft Corporation) C:\Windows\system32\WpcWebSync.dll
2014-12-24 20:02 - 2014-07-15 09:03 - 02344448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Wpc.dll
2014-12-24 20:02 - 2014-07-12 05:17 - 00623616 _____ (Microsoft Corporation) C:\Windows\system32\MDMAgent.exe
2014-12-24 20:02 - 2014-05-01 14:31 - 00055328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wpcfltr.sys
2014-12-24 20:01 - 2014-06-20 02:48 - 01273184 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2014-12-24 20:01 - 2014-06-20 00:52 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2014-12-24 20:01 - 2014-06-13 02:15 - 00517528 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll
2014-12-24 20:01 - 2014-06-13 02:14 - 01557848 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2014-12-24 20:01 - 2014-06-13 01:10 - 00406400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll
2014-12-24 20:01 - 2014-06-06 12:34 - 02133504 _____ (Microsoft Corporation) C:\Windows\system32\dwmcore.dll
2014-12-24 20:01 - 2014-06-02 03:10 - 00423768 _____ (Microsoft Corporation) C:\Windows\system32\hal.dll
2014-12-24 20:01 - 2014-05-31 11:07 - 00440664 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2014-12-24 20:01 - 2014-05-31 11:07 - 00089944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2014-12-24 20:01 - 2014-05-31 11:07 - 00027480 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2014-12-24 20:01 - 2014-05-31 07:30 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2014-12-24 20:01 - 2014-05-31 07:27 - 00110592 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFPf.sys
2014-12-24 20:01 - 2014-05-31 07:26 - 00227840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFRd.sys
2014-12-24 20:01 - 2014-05-31 05:01 - 00284672 _____ (Microsoft Corporation) C:\Windows\system32\WUDFHost.exe
2014-12-24 20:01 - 2014-05-31 05:01 - 00209408 _____ (Microsoft Corporation) C:\Windows\system32\WUDFPlatform.dll
2014-12-24 20:01 - 2014-05-31 05:01 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\WUDFSvc.dll
2014-12-24 20:01 - 2014-05-27 10:56 - 00323584 _____ (Microsoft Corporation) C:\Windows\system32\DaOtpCredentialProvider.dll
2014-12-24 20:01 - 2014-05-27 10:53 - 00270848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DaOtpCredentialProvider.dll
2014-12-24 19:57 - 2014-06-06 14:04 - 00586240 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2014-12-24 19:57 - 2014-06-06 13:18 - 00488960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2014-12-24 19:57 - 2014-05-31 11:06 - 00555736 _____ (Microsoft Corporation) C:\Windows\system32\twinapi.appcore.dll
2014-12-24 19:57 - 2014-05-31 03:37 - 01054208 _____ (Microsoft Corporation) C:\Windows\system32\twinui.appcore.dll
2014-12-24 19:57 - 2014-05-31 03:35 - 00828928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.appcore.dll
2014-12-24 19:57 - 2014-05-30 04:03 - 00563200 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2014-12-24 19:47 - 2014-05-19 07:31 - 00057856 _____ (Microsoft Corporation) C:\Windows\system32\drvcfg.exe
2014-12-24 19:47 - 2014-05-19 07:21 - 00110592 _____ (Microsoft Corporation) C:\Windows\system32\drvinst.exe
2014-12-24 19:47 - 2014-05-19 06:23 - 00098816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drvinst.exe
2014-12-24 19:47 - 2014-05-01 06:24 - 02834944 _____ (Microsoft Corporation) C:\Windows\system32\wpccpl.dll
2014-12-24 19:47 - 2014-04-30 05:43 - 01975296 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2014-12-24 19:47 - 2014-04-30 05:26 - 01345536 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2014-12-24 19:47 - 2014-04-30 04:47 - 01509888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2014-12-24 19:39 - 2014-12-24 19:39 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_LocationProvider_01_11_00.Wdf
2014-12-24 19:38 - 2015-01-08 09:58 - 00003942 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{61AB47E5-AB5A-4D8B-89BB-14B1822A6C56}
2014-12-24 19:38 - 2014-12-24 19:38 - 00000000 __SHD () C:\Users\Daniel\AppData\Local\EmieUserList
2014-12-24 19:38 - 2014-12-24 19:38 - 00000000 __SHD () C:\Users\Daniel\AppData\Local\EmieSiteList
2014-12-24 19:33 - 2015-01-08 15:13 - 00003594 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-223822767-1807346583-171944255-1002
2014-12-24 19:31 - 2014-12-24 19:31 - 00002001 _____ () C:\Users\Public\Desktop\abMedia.lnk
2014-12-24 19:29 - 2014-12-24 19:29 - 00000000 ____D () C:\Users\Public\OEM
2014-12-24 19:28 - 2015-01-08 15:10 - 00000000 ____D () C:\Users\Daniel\AppData\Local\CrashDumps
2014-12-24 19:28 - 2014-12-24 20:22 - 00000000 ____D () C:\ProgramData\BlueStacks
2014-12-24 19:28 - 2014-12-24 19:28 - 00003334 _____ () C:\Windows\System32\Tasks\AcerCloud
2014-12-24 19:28 - 2014-12-24 19:28 - 00001969 _____ () C:\Users\Public\Desktop\abDocs.lnk
2014-12-24 19:28 - 2014-12-24 19:28 - 00000000 ____D () C:\Users\Daniel\AppData\Roaming\WildTangent
2014-12-24 19:27 - 2015-01-08 14:44 - 00000000 ____D () C:\Users\Daniel\OneDrive
2014-12-24 19:27 - 2014-12-24 19:28 - 00002102 _____ () C:\Users\Public\Desktop\Acer Portal.lnk
2014-12-24 19:26 - 2015-01-06 14:56 - 00000000 ____D () C:\Users\Daniel\AppData\Local\clear.fi
2014-12-24 19:26 - 2014-12-24 19:26 - 00000000 ____D () C:\Users\Daniel\PicStream
2014-12-24 19:13 - 2014-12-24 19:13 - 00000000 ____D () C:\Users\Daniel\AppData\Local\AOP SDK
2014-12-24 19:12 - 2014-12-24 19:12 - 00000000 ____D () C:\Users\Daniel\AppData\Roaming\Macromedia
2014-12-24 19:12 - 2014-12-24 19:12 - 00000000 ____D () C:\Program Files (x86)\OEM
2014-12-24 19:11 - 2015-01-08 12:57 - 00001013 _____ () C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-12-24 19:11 - 2014-12-31 16:20 - 00000000 ____D () C:\Users\Daniel\AppData\Local\Packages
2014-12-24 19:11 - 2014-12-24 21:17 - 00000000 ____D () C:\Users\Daniel\AppData\Local\VirtualStore
2014-12-24 19:11 - 2014-12-24 19:11 - 00001786 _____ () C:\Users\Public\Desktop\Online kaufen.lnk
2014-12-24 19:11 - 2014-12-24 19:11 - 00000180 _____ () C:\Windows\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2014-12-24 19:11 - 2014-12-24 19:11 - 00000000 ____D () C:\Windows\System32\Tasks\WPD
2014-12-24 19:11 - 2014-12-24 19:11 - 00000000 ____D () C:\Windows\oem
2014-12-24 19:11 - 2014-12-24 19:11 - 00000000 ____D () C:\Users\Daniel\AppData\Roaming\Adobe
2014-12-24 19:11 - 2014-12-24 19:11 - 00000000 ____D () C:\Users\Daniel\AppData\Local\OEM
2014-12-24 19:11 - 2014-12-24 19:11 - 00000000 ____D () C:\ProgramData\OEM_YAHOO
2014-12-24 19:11 - 2014-12-24 19:11 - 00000000 ____D () C:\Program Files\Accessory Store
2014-12-24 19:10 - 2014-12-26 15:58 - 00000000 ____D () C:\Users\Daniel
2014-12-24 19:10 - 2014-12-24 19:10 - 00000020 ___SH () C:\Users\Daniel\ntuser.ini
2014-12-24 19:10 - 2014-12-24 19:10 - 00000000 _SHDL () C:\Users\Daniel\Vorlagen
2014-12-24 19:10 - 2014-12-24 19:10 - 00000000 _SHDL () C:\Users\Daniel\Startmenü
2014-12-24 19:10 - 2014-12-24 19:10 - 00000000 _SHDL () C:\Users\Daniel\Netzwerkumgebung
2014-12-24 19:10 - 2014-12-24 19:10 - 00000000 _SHDL () C:\Users\Daniel\Lokale Einstellungen
2014-12-24 19:10 - 2014-12-24 19:10 - 00000000 _SHDL () C:\Users\Daniel\Eigene Dateien
2014-12-24 19:10 - 2014-12-24 19:10 - 00000000 _SHDL () C:\Users\Daniel\Druckumgebung
2014-12-24 19:10 - 2014-12-24 19:10 - 00000000 _SHDL () C:\Users\Daniel\Documents\Eigene Musik
2014-12-24 19:10 - 2014-12-24 19:10 - 00000000 _SHDL () C:\Users\Daniel\Documents\Eigene Bilder
2014-12-24 19:10 - 2014-12-24 19:10 - 00000000 _SHDL () C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-12-24 19:10 - 2014-12-24 19:10 - 00000000 _SHDL () C:\Users\Daniel\AppData\Local\Verlauf
2014-12-24 19:10 - 2014-12-24 19:10 - 00000000 _SHDL () C:\Users\Daniel\AppData\Local\Anwendungsdaten
2014-12-24 19:10 - 2014-12-24 19:10 - 00000000 _SHDL () C:\Users\Daniel\Anwendungsdaten
2014-12-24 19:10 - 2014-07-25 22:18 - 00000000 ___RD () C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-12-24 19:10 - 2014-03-18 11:33 - 00000000 ___RD () C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2014-12-24 19:10 - 2014-03-18 11:13 - 00000369 _____ () C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pictures.lnk
2014-12-24 19:10 - 2014-03-18 11:13 - 00000369 _____ () C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Documents.lnk
2014-12-24 19:10 - 2013-08-22 16:36 - 00000000 ___RD () C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-12-24 19:10 - 2013-08-22 16:36 - 00000000 ____D () C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-01-08 15:00 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\sru
2015-01-08 14:43 - 2013-08-22 15:45 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-01-08 14:42 - 2013-08-22 14:25 - 00262144 ___SH () C:\Windows\system32\config\BBI
2015-01-08 14:34 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\Vss
2015-01-08 13:26 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\AppReadiness
2015-01-07 18:24 - 2014-08-31 00:14 - 00765582 _____ () C:\Windows\system32\perfh007.dat
2015-01-07 18:24 - 2014-08-31 00:14 - 00159366 _____ () C:\Windows\system32\perfc007.dat
2015-01-07 18:24 - 2014-03-18 11:03 - 01776918 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-01-07 08:09 - 2014-08-30 14:59 - 00000000 ____D () C:\Program Files (x86)\AGEIA Technologies
2015-01-07 08:09 - 2014-07-25 22:20 - 00000000 ____D () C:\Program Files (x86)\Acer
2015-01-06 23:00 - 2014-07-25 22:28 - 00000000 ____D () C:\ProgramData\McAfee
2015-01-06 23:00 - 2014-07-25 22:28 - 00000000 ____D () C:\Program Files\Common Files\mcafee
2015-01-06 22:48 - 2014-07-25 22:21 - 00000000 ____D () C:\ProgramData\Package Cache
2015-01-06 22:40 - 2013-08-22 16:36 - 00000000 ___HD () C:\Windows\ELAMBKUP
2015-01-06 22:40 - 2013-08-22 14:25 - 00262144 ___SH () C:\Windows\system32\config\ELAM
2015-01-06 22:38 - 2014-07-25 22:00 - 00000000 ____D () C:\Users\Administrator
2015-01-06 15:09 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\LiveKernelReports
2015-01-06 14:58 - 2014-07-25 22:21 - 00000000 ___SD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acer
2015-01-03 21:54 - 2013-08-22 15:44 - 00347808 _____ () C:\Windows\system32\FNTCACHE.DAT
2015-01-03 21:15 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\NDF
2015-01-02 02:21 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\rescache
2015-01-01 01:46 - 2014-03-18 10:45 - 00000000 ____D () C:\Program Files\Windows Journal
2015-01-01 01:46 - 2013-08-22 16:36 - 00000000 ___RD () C:\Windows\ToastData
2015-01-01 01:46 - 2013-08-22 16:36 - 00000000 ___RD () C:\Windows\ImmersiveControlPanel
2015-01-01 01:46 - 2013-08-22 16:36 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2015-01-01 01:46 - 2013-08-22 16:36 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2015-01-01 01:46 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\SysWOW64\setup
2015-01-01 01:46 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\SysWOW64\InputMethod
2015-01-01 01:46 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\setup
2015-01-01 01:46 - 2013-08-22 14:36 - 00000000 ____D () C:\Windows\system32\oobe
2014-12-31 00:11 - 2013-08-22 16:20 - 00000000 ____D () C:\Windows\CbsTemp
2014-12-27 00:15 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files\Common Files\microsoft shared
2014-12-25 01:02 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files\Windows NT
2014-12-25 01:02 - 2013-08-22 14:36 - 00000000 __RHD () C:\Users\Default
2014-12-25 00:48 - 2014-07-25 22:58 - 00000000 ____D () C:\Windows\Panther
2014-12-24 21:36 - 2013-08-22 16:36 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-12-24 21:36 - 2013-08-22 16:36 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-12-24 21:36 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\WinStore
2014-12-24 21:36 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\sr-Latn-RS
2014-12-24 21:36 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\sr-Latn-CS
2014-12-24 21:36 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\PolicyDefinitions
2014-12-24 21:36 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\MediaViewer
2014-12-24 21:36 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\FileManager
2014-12-24 21:36 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\Camera
2014-12-24 21:36 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files\Windows Defender
2014-12-24 21:36 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files (x86)\Windows Defender
2014-12-24 20:22 - 2013-08-22 16:36 - 00000000 __RHD () C:\Users\Public\Libraries
2014-12-24 20:13 - 2014-07-25 22:20 - 00000000 ____D () C:\ProgramData\acer
2014-12-24 19:45 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\restore
2014-12-24 19:28 - 2014-07-25 22:24 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2014-12-24 19:28 - 2014-07-25 22:23 - 00000000 ____D () C:\ProgramData\WildTangent
2014-12-24 19:28 - 2014-07-25 22:23 - 00000000 ____D () C:\Program Files (x86)\WildTangent Games
2014-12-24 19:26 - 2014-07-25 22:57 - 00000000 ___HD () C:\OEM
2014-12-24 19:26 - 2014-07-25 22:21 - 00000000 ____D () C:\ProgramData\OEM

Some content of TEMP:
====================
C:\Users\Daniel\AppData\Local\Temp\avgnt.exe
C:\Users\Daniel\AppData\Local\Temp\Quarantine.exe
C:\Users\Daniel\AppData\Local\Temp\sqlite3.dll


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-01-07 07:25

==================== End Of Log ============================

--- --- ---

Friedrich290 · 08.01.2015, 15:44

Hallo,
das Notebook scheint jetzt sauber ? Welches Antivierenprogramm und Firewall ist nach deiner Meinung gut (kostenlos) ? Ich sende Dir meine FRST von meinem PC, er ist ziemlich langsam. Folgende Fehlermeldung hatte ich schon: Es wurde ein IP-Adresskonflikt ermittelt. Ein anderer Computer im Netzwerk hat dieselbe IP-Adresse wie dieser Computer. Zu diesem Zeitpunkt hatte ich in meine LTE-Router nur den PC und 3 Smardphones laufen. Den Fehler hatte ich in den letzten 3 Monaten 2 mal. Der PC braucht auch ziemlich beim herunterfahren, ca 90 bis 120 Sekunden.

FRST

FRST Logfile:

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 07-01-2015
Ran by Jörn-Friedrich (administrator) on JF29 on 08-01-2015 15:37:25
Running from C:\Users\Jörn-Friedrich\Downloads
Loaded Profile: Jörn-Friedrich (Available profiles: Jörn-Friedrich)
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11 (Default browser: Browser7)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(COMPANYVERS_NAME) C:\Program Files (x86)\Allin1Convert_8h\bar\1.bin\8hbarsvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
(Memeo) C:\Program Files (x86)\Memeo\AutoBackup\MemeoBackgroundService.exe
(PC Tools) C:\Program Files (x86)\ThreatFire\TFService.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(PC Tools) C:\Program Files (x86)\ThreatFire\TFTray.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AviraSpeedup\avira_system_speedup.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Mozilla Corporation) C:\Users\Jörn-Friedrich\AppData\Local\Mozilla Firefox\firefox.exe
(Farbar) C:\Users\Jörn-Friedrich\Downloads\FRST64(1).exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [MedionReminder] => C:\Program Files (x86)\CyberLink\PowerRecover\Reminder.exe [443688 2011-05-26] (CyberLink)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [ThreatFire] => C:\Program Files (x86)\ThreatFire\TFTray.exe [378128 2010-01-14] (PC Tools)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [702768 2014-12-17] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [271744 2014-09-26] (Oracle Corporation)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1021128 2014-11-20] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Avira Systray] => C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe [126200 2014-11-20] (Avira Operations GmbH & Co. KG)
HKU\S-1-5-21-3173901494-1134987012-1569752986-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [7394584 2014-12-12] (Piriform Ltd)
HKU\S-1-5-21-3173901494-1134987012-1569752986-1001\...\RunOnce: [Adobe Speed Launcher] => 1420702101
HKU\S-1-5-21-3173901494-1134987012-1569752986-1001\...\MountPoints2: {d2adaa84-1e8f-11e3-9abf-8c89a59bac48} - G:\laucher.exe
HKU\S-1-5-18\...\Run: [AviraSpeedup] => C:\Program Files (x86)\Avira\AviraSpeedup\avira_system_speedup.exe [7611640 2014-12-11] (Avira Operations GmbH & Co. KG)
Startup: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\DSL-Manager.lnk
ShortcutTarget: DSL-Manager.lnk -> C:\Program Files (x86)\DSL-Manager\DslMgr.exe (T-Systems Enterprise Services GmbH)
Startup: C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\DSL-Manager.lnk
ShortcutTarget: DSL-Manager.lnk -> C:\Program Files (x86)\DSL-Manager\DslMgr.exe (T-Systems Enterprise Services GmbH)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} =>  No File
BootExecute: autocheck autochk * ᔃ］߾뿰ι
CHR HKU\S-1-5-21-3173901494-1134987012-1569752986-1001\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = 
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = 
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Local Page = 
HKU\S-1-5-21-3173901494-1134987012-1569752986-1001\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
URLSearchHook: HKLM-x32 - (No Name) - {5786d022-540e-4699-b350-b4be0ae94b79} - No File
SearchScopes: HKLM -> {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = 
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM-x32 -> DefaultScope {28D88AB1-AA93-19B9-8FCD-48FA7FA69FE5} URL = 
SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM-x32 -> {75b4241f-171e-44a3-bf44-23613b6e3e03} URL = hxxp://search.tb.ask.com/search/GGmain.jhtml?p2=^AYY^xdm070^YYA^de&si=flvrunner&ptb=B8DABC5E-C785-46F2-A4FF-C59FF2A0BC47&ind=2014010216&n=780b5b68&psa=&st=sb&searchfor={searchTerms}
SearchScopes: HKU\.DEFAULT -> {0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9} URL = 
SearchScopes: HKU\S-1-5-21-3173901494-1134987012-1569752986-1001 -> DefaultScope {07B92A3A-15B7-49DA-B1DC-EABAEFBEE5F9} URL = https://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-3173901494-1134987012-1569752986-1001 -> {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = 
SearchScopes: HKU\S-1-5-21-3173901494-1134987012-1569752986-1001 -> {07B92A3A-15B7-49DA-B1DC-EABAEFBEE5F9} URL = https://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-3173901494-1134987012-1569752986-1001 -> {49A9EC78-0083-4AA6-9FE3-0B76A933572A} URL = hxxp://rover.ebay.com/rover/1/707-1403-27640-2/4?mpre=hxxp://search.ebay.de/search/search.dll?shortcut=4&query={searchTerms}
SearchScopes: HKU\S-1-5-21-3173901494-1134987012-1569752986-1001 -> {75b4241f-171e-44a3-bf44-23613b6e3e03} URL = hxxp://search.tb.ask.com/search/GGmain.jhtml?p2=^AYY^xdm070^YYA^de&si=flvrunner&ptb=B8DABC5E-C785-46F2-A4FF-C59FF2A0BC47&ind=2014010216&n=780b5b68&psa=&st=sb&searchfor={searchTerms}
SearchScopes: HKU\S-1-5-21-3173901494-1134987012-1569752986-1001 -> {83D23A4C-ADA1-4D5E-B1F2-49E8841CAEEE} URL = hxxp://suche.t-online.de/fast-cgi/tsc?mandant=toi&device=html&portallanguage=de&userlanguage=de&dia=suche&context=wiki-tab&tpc=internet&ptl=std&classification=wiki-tab_internet_std&q={searchTerms}&br=ie10-toi
SearchScopes: HKU\S-1-5-21-3173901494-1134987012-1569752986-1001 -> {906BF378-A14E-4DC3-9A7D-DFEC2F12607D} URL = hxxp://www.amazon.de/gp/search?ie=UTF8&keywords={searchTerms}&tag=interactivemesuche-21&index=blended&linkCode=ur2&camp=1638&creative=6742
SearchScopes: HKU\S-1-5-21-3173901494-1134987012-1569752986-1001 -> {A1503A9B-A574-4D9A-BEF4-613485148BF2} URL = https://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-3173901494-1134987012-1569752986-1001 -> {B8DA2ED1-CA3D-48F5-A46E-10CE29D43091} URL = hxxp://suche.t-online.de/fast-cgi/tsc?mandant=toi&device=html&portallanguage=de&userlanguage=de&dia=suche&context=internet-tab&tpc=internet&ptl=std&classification=internet-tab_internet_std&q={searchTerms}&br=ie10-toi
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
BHO-x32: HP Print Enhancer -> {0347C33E-8762-4905-BF09-768834316C61} -> C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll (Hewlett-Packard Co.)
BHO-x32: Plus-HD-2.2 -> {11111111-1111-1111-1111-110311301136} ->  No File
BHO-x32: Boostyb.Core.BHO -> {42ad2408-abba-2408-1972-4706560e817b} -> C:\Windows\SysWOW64\mscoree.dll (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: HP Smart BHO Class -> {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} -> C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll (Hewlett-Packard Co.)
Toolbar: HKLM - No Name - {ae07101b-46d4-4a98-af68-0333ea26e113} -  No File
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
Toolbar: HKLM-x32 - No Name - {42ad2408-baaa-408d-b13e-4706560e817b} -  No File
Toolbar: HKLM-x32 - No Name - {9E131A93-EED7-4BEB-B015-A0ADB30B5646} -  No File
Toolbar: HKLM-x32 - No Name - {ae07101b-46d4-4a98-af68-0333ea26e113} -  No File
Toolbar: HKU\S-1-5-21-3173901494-1134987012-1569752986-1001 -> No Name - {5786D022-540E-4699-B350-B4BE0AE94B79} -  No File
DPF: HKLM-x32 {17492023-C23A-453E-A040-C7C580BBF700} hxxp://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 192.168.1.1

FireFox:
========
FF ProfilePath: C:\Users\Jörn-Friedrich\AppData\Roaming\Mozilla\Firefox\Profiles\gc244vpd.default
FF Homepage: about:blank
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_16_0_0_235.dll ()
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin: @videolan.org/vlc,version=2.1.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_235.dll ()
FF Plugin-x32: @Allin1Convert_8h.com/Plugin -> C:\Program Files (x86)\Allin1Convert_8h\bar\1.bin\NP8hStub.dll (Mindspark)
FF Plugin-x32: @java.com/DTPlugin,version=10.71.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.71.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Users\Jörn-Friedrich\AppData\Roaming\Mozilla\Firefox\Profiles\gc244vpd.default\searchplugins\avira-safesearch.xml
FF SearchPlugin: C:\Users\Jörn-Friedrich\AppData\Roaming\Mozilla\Firefox\Profiles\gc244vpd.default\searchplugins\conduit-search.xml
FF Extension: Avira Browser Safety - C:\Users\Jörn-Friedrich\AppData\Roaming\Mozilla\Firefox\Profiles\gc244vpd.default\Extensions\abs@avira.com [2014-12-11]
FF Extension: Avira SafeSearch - C:\Users\Jörn-Friedrich\AppData\Roaming\Mozilla\Firefox\Profiles\gc244vpd.default\Extensions\safesearch@avira.com [2014-12-04]
FF Extension: Cliqz Beta - C:\Users\Jörn-Friedrich\AppData\Roaming\Mozilla\Firefox\Profiles\gc244vpd.default\Extensions\cliqz@cliqz.com.xpi [2014-09-15]
FF Extension: No Name - C:\Program Files (x86)\Mozilla Firefox\extensions\ffxtlbr@babylon.com [2014-04-05]
FF Extension: Anti-Banner - C:\Program Files (x86)\Mozilla Firefox\extensions\KavAntiBanner@kaspersky.ru_bak2 [2014-04-05]
FF Extension: Modul zur Link-Untersuchung - C:\Program Files (x86)\Mozilla Firefox\extensions\linkfilter@kaspersky.ru_bak2 [2014-04-05]
FF HKLM-x32\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF Extension: HP Smart Web Printing - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2012-04-21]
FF HKU\S-1-5-21-3173901494-1134987012-1569752986-1001\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF StartMenuInternet: FIREFOX.EXE - C:\Users\Jörn-Friedrich\AppData\Local\Mozilla Firefox\firefox.exe

Chrome: 
=======
CHR HomePage: Default -> www.google.com
CHR StartupUrls: Default -> "www.google.com"
CHR DefaultSearchKeyword: Default -> search.snapdo.com
CHR DefaultSearchURL: Default -> hxxp://feed.snapdo.com/?publisher=AdKnowledgeYB&dpid=AdKnowledgeYB&co=DE&userid=0c975f8c-e63d-a644-8ea0-7138087bdbf4&searchtype=ds&q={searchTerms}&installDate=17/11/2013
CHR DefaultSuggestURL: Default -> {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&hl={language}&q={searchTerms}
CHR Profile: C:\Users\Jörn-Friedrich\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Funmoods Chat) - C:\Users\Jörn-Friedrich\AppData\Local\Google\Chrome\User Data\Default\Extensions\bbjciahceamgodcoidkjpchnokgfpphh [2013-11-21]
CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\Jörn-Friedrich\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-09-07]
CHR Extension: (Avira Browserschutz) - C:\Users\Jörn-Friedrich\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk [2014-09-07]
CHR Extension: (FreeHDSport TV) - C:\Users\Jörn-Friedrich\AppData\Local\Google\Chrome\User Data\Default\Extensions\kkfggacklibaabdomphfdpcodjgihgon [2013-05-26]
CHR Extension: (Norton Security Toolbar) - C:\Users\Jörn-Friedrich\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk [2013-05-26]
CHR Extension: (Google Wallet) - C:\Users\Jörn-Friedrich\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-02-14]
CHR HKLM\...\Chrome\Extension: [bbjciahceamgodcoidkjpchnokgfpphh] - C:\Users\JRN-FR~1\AppData\Local\funmoods.crx [2012-11-17]
CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - No Path
CHR HKU\S-1-5-21-3173901494-1134987012-1569752986-1001\...\Chrome\Extension: [bbjciahceamgodcoidkjpchnokgfpphh] - C:\Users\JRN-FR~1\AppData\Local\funmoods.crx [2012-11-17]
CHR HKLM-x32\...\Chrome\Extension: [bbjciahceamgodcoidkjpchnokgfpphh] - C:\Users\JRN-FR~1\AppData\Local\funmoods.crx [2012-11-17]
CHR HKLM-x32\...\Chrome\Extension: [fjoijdanhaiflhibkljeklcghcmmfffh] - C:\Program Files (x86)\WebCake\WebCakeLayers.crx [2013-05-25]
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - No Path
CHR HKLM-x32\...\Chrome\Extension: [kkfggacklibaabdomphfdpcodjgihgon] - C:\Program Files (x86)\VipBoxSportsApp.com\stv10.crx [2013-05-25]
CHR HKLM-x32\...\Chrome\Extension: [mkfokfffehpeedafpekjeddnmnjhmcmk] - No Path

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 Allin1Convert_8hService; C:\Program Files (x86)\Allin1Convert_8h\bar\1.bin\8hbarsvc.exe [88648 2014-01-02] (COMPANYVERS_NAME)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [431920 2014-12-17] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [431920 2014-12-17] (Avira Operations GmbH & Co. KG)
R2 Avira.OE.ServiceHost; C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe [166192 2014-11-20] (Avira Operations GmbH & Co. KG)
S3 Browser7Maintenance; C:\Program Files (x86)\Browser 7 Maintenance Service\maintenanceservice.exe [107008 2014-11-16] (Deutsche Telekom AG) [File not signed]
R3 hpqcxs08; C:\Program Files (x86)\HP\Digital Imaging\bin\hpqcxs08.dll [249344 2009-09-23] (Hewlett-Packard Co.) [File not signed]
R2 hpqddsvc; C:\Program Files (x86)\HP\Digital Imaging\bin\hpqddsvc.dll [133120 2009-09-23] (Hewlett-Packard Co.) [File not signed]
R2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [71680 2010-08-06] (Hewlett-Packard) [File not signed]
R2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [89600 2010-08-06] (Hewlett-Packard) [File not signed]
S3 TDslMgrService; C:\Program Files (x86)\DSL-Manager\DslMgrSvc.exe [307200 2008-10-23] (T-Systems Enterprise Services GmbH) [File not signed]
R2 ThreatFire; C:\Program Files (x86)\ThreatFire\TFService.exe [70928 2010-01-14] (PC Tools)
S2 JetDrive WindowsClosingService; C:\Windows\System32\WindowsClosingService [X]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [119272 2014-10-14] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131608 2014-10-14] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2014-08-15] (Avira Operations GmbH & Co. KG)
R1 DslMNLwf; C:\Windows\System32\DRIVERS\dslmnlwf.sys [19008 2007-08-01] (T-Systems Enterprise Services GmbH)
U5 hw_usbdev; C:\Windows\System32\Drivers\hw_usbdev.sys [116864 2011-10-24] (Huawei Technologies Co., Ltd.)
S3 jetdrive; C:\Windows\System32\DRIVERS\jddrv.sys [37248 2012-05-22] (Abelssoft GmbH)
S3 PciDumpr; C:\Program Files (x86)\Common Files\T-Com\DSLCheck\PciDumpr.sys [2144 2001-01-26] () [File not signed]
R1 PSSDKLBF; C:\Windows\system32\Drivers\pssdklbf.sys [65600 2012-04-16] (microOLAP Technologies LTD)
R0 TfFsMon; C:\Windows\System32\drivers\TfFsMon.sys [65072 2010-01-14] (PC Tools)
R3 TfNetMon; C:\Windows\system32\drivers\TfNetMon.sys [41888 2010-01-14] (PC Tools)
R0 TfSysMon; C:\Windows\System32\drivers\TfSysMon.sys [59880 2010-01-14] (PC Tools)
U3 DfSdkS; No ImagePath

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-01-08 15:37 - 2015-01-08 15:37 - 00019761 _____ () C:\Users\Jörn-Friedrich\Downloads\FRST.txt
2015-01-08 15:37 - 2015-01-08 15:37 - 00000000 ____D () C:\FRST
2015-01-08 15:36 - 2015-01-08 15:36 - 02124288 _____ (Farbar) C:\Users\Jörn-Friedrich\Downloads\FRST64.exe
2015-01-08 15:36 - 2015-01-08 15:36 - 02124288 _____ (Farbar) C:\Users\Jörn-Friedrich\Downloads\FRST64(1).exe
2015-01-08 15:36 - 2015-01-08 15:36 - 00000000 ____D () C:\Users\Jörn-Friedrich\Desktop\Reinigung
2015-01-08 10:55 - 2015-01-08 11:00 - 00009221 _____ () C:\Users\Jörn-Friedrich\Desktop\Finanzierung.xlsx
2015-01-08 08:28 - 2015-01-08 08:28 - 00000056 _____ () C:\Windows\setupact.log
2015-01-08 08:28 - 2015-01-08 08:28 - 00000000 _____ () C:\Windows\setuperr.log
2015-01-07 18:14 - 2015-01-07 18:14 - 00000490 _____ () C:\Users\Jörn-Friedrich\Downloads\defogger_disable.log
2015-01-07 18:14 - 2015-01-07 18:14 - 00000000 _____ () C:\Users\Jörn-Friedrich\defogger_reenable
2015-01-07 18:11 - 2015-01-07 18:11 - 00050477 _____ () C:\Users\Jörn-Friedrich\Downloads\Defogger.exe
2015-01-05 00:12 - 2015-01-05 00:13 - 00001154 _____ () C:\Users\Jörn-Friedrich\Documents\cc_20150105_001252.reg
2014-12-28 20:40 - 2014-12-28 20:41 - 00000000 ____D () C:\Users\Jörn-Friedrich\AppData\Local\AviraSpeedup
2014-12-28 20:39 - 2014-12-28 20:39 - 00003320 _____ () C:\Windows\System32\Tasks\AviraSpeedup
2014-12-27 22:57 - 2014-12-27 22:57 - 00000980 _____ () C:\Users\Jörn-Friedrich\Documents\cc_20141227_225657.reg
2014-12-27 00:09 - 2014-12-27 00:09 - 00005700 _____ () C:\Users\Jörn-Friedrich\Documents\cc_20141227_000935.reg
2014-12-25 11:34 - 2014-12-25 11:34 - 00045586 _____ () C:\Users\Jörn-Friedrich\Documents\cc_20141225_113359.reg
2014-12-25 11:06 - 2014-12-25 11:06 - 00013064 _____ () C:\Users\Jörn-Friedrich\Documents\cc_20141225_110632.reg
2014-12-23 21:53 - 2014-12-23 21:53 - 00000000 ____D () C:\TempDump
2014-12-23 14:36 - 2014-12-23 14:36 - 00000061 _____ () C:\Users\Jörn-Friedrich\Downloads\server.properties
2014-12-21 23:09 - 2014-12-21 23:09 - 00000460 _____ () C:\Users\Jörn-Friedrich\Documents\cc_20141221_230858.reg
2014-12-21 23:05 - 2014-12-21 23:05 - 05317104 _____ (Piriform Ltd) C:\Users\Jörn-Friedrich\Downloads\ccsetup501.exe
2014-12-19 21:22 - 2014-12-19 21:23 - 12833197 _____ () C:\Users\Jörn-Friedrich\Downloads\John Smith Legacy 1.8.1 v1.3.8(1).zip
2014-12-19 21:21 - 2014-12-19 21:21 - 12833197 _____ () C:\Users\Jörn-Friedrich\Downloads\John Smith Legacy 1.8.1 v1.3.8.zip
2014-12-18 08:12 - 2014-12-13 06:09 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-12-18 08:12 - 2014-12-13 04:33 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-12-13 22:47 - 2014-12-13 22:47 - 00000890 _____ () C:\Users\Jörn-Friedrich\Documents\cc_20141213_224740.reg
2014-12-13 20:52 - 2014-12-19 21:37 - 00010240 ___SH () C:\Users\Jörn-Friedrich\Downloads\Thumbs.db
2014-12-11 19:07 - 2014-12-11 19:07 - 00001141 _____ () C:\Users\Public\Desktop\Avira.lnk
2014-12-10 08:42 - 2014-12-10 08:42 - 00000000 ____D () C:\Windows\system32\appraiser
2014-12-10 08:04 - 2014-10-18 02:33 - 03209728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mf.dll
2014-12-10 08:03 - 2014-10-18 03:05 - 04121600 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll
2014-12-10 07:53 - 2014-12-04 03:50 - 00830976 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2014-12-10 07:53 - 2014-12-04 03:50 - 00741376 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2014-12-10 07:53 - 2014-12-04 03:50 - 00413184 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2014-12-10 07:53 - 2014-12-04 03:50 - 00396800 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2014-12-10 07:53 - 2014-12-04 03:50 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-12-10 07:53 - 2014-12-04 03:50 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2014-12-10 07:53 - 2014-12-04 03:44 - 01083392 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-12-10 07:53 - 2014-12-02 00:28 - 01232040 _____ (Microsoft Corporation) C:\Windows\system32\aitstatic.exe
2014-12-10 07:53 - 2014-11-27 02:43 - 00389296 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-12-10 07:53 - 2014-11-27 02:10 - 00342200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-12-10 07:53 - 2014-11-22 04:13 - 25059840 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-12-10 07:53 - 2014-11-22 04:06 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-12-10 07:53 - 2014-11-22 04:06 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-12-10 07:53 - 2014-11-22 03:50 - 00580096 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-12-10 07:53 - 2014-11-22 03:50 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-12-10 07:53 - 2014-11-22 03:49 - 02885120 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-12-10 07:53 - 2014-11-22 03:49 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-12-10 07:53 - 2014-11-22 03:48 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-12-10 07:53 - 2014-11-22 03:41 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-12-10 07:53 - 2014-11-22 03:40 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-12-10 07:53 - 2014-11-22 03:37 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-12-10 07:53 - 2014-11-22 03:35 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-12-10 07:53 - 2014-11-22 03:34 - 06039552 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-12-10 07:53 - 2014-11-22 03:34 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-12-10 07:53 - 2014-11-22 03:26 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-12-10 07:53 - 2014-11-22 03:22 - 19749376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-12-10 07:53 - 2014-11-22 03:22 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-12-10 07:53 - 2014-11-22 03:20 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-12-10 07:53 - 2014-11-22 03:14 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-12-10 07:53 - 2014-11-22 03:09 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-12-10 07:53 - 2014-11-22 03:08 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-12-10 07:53 - 2014-11-22 03:07 - 00501248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-12-10 07:53 - 2014-11-22 03:07 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-12-10 07:53 - 2014-11-22 03:06 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-12-10 07:53 - 2014-11-22 03:05 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-12-10 07:53 - 2014-11-22 03:05 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2014-12-10 07:53 - 2014-11-22 03:01 - 02277888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-12-10 07:53 - 2014-11-22 02:59 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-12-10 07:53 - 2014-11-22 02:58 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-12-10 07:53 - 2014-11-22 02:56 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-12-10 07:53 - 2014-11-22 02:54 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-12-10 07:53 - 2014-11-22 02:49 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-12-10 07:53 - 2014-11-22 02:49 - 00718848 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-12-10 07:53 - 2014-11-22 02:47 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-12-10 07:53 - 2014-11-22 02:46 - 02125312 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-12-10 07:53 - 2014-11-22 02:45 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-12-10 07:53 - 2014-11-22 02:43 - 14412800 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-12-10 07:53 - 2014-11-22 02:40 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-12-10 07:53 - 2014-11-22 02:36 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-12-10 07:53 - 2014-11-22 02:35 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-12-10 07:53 - 2014-11-22 02:33 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-12-10 07:53 - 2014-11-22 02:29 - 04299264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-12-10 07:53 - 2014-11-22 02:28 - 02358272 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-12-10 07:53 - 2014-11-22 02:23 - 00688640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-12-10 07:53 - 2014-11-22 02:22 - 02052096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-12-10 07:53 - 2014-11-22 02:21 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-12-10 07:53 - 2014-11-22 02:15 - 01548288 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-12-10 07:53 - 2014-11-22 02:13 - 12836864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-12-10 07:53 - 2014-11-22 02:03 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-12-10 07:53 - 2014-11-22 02:00 - 01888256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-12-10 07:53 - 2014-11-22 01:56 - 01307136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-12-10 07:53 - 2014-11-22 01:54 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-12-10 07:53 - 2014-11-11 04:09 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2014-12-10 07:53 - 2014-11-11 03:44 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2014-12-10 07:53 - 2014-11-11 02:46 - 00119296 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdx.sys
2014-12-10 07:52 - 2014-11-08 04:16 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2014-12-10 07:52 - 2014-11-08 03:45 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2014-12-10 07:52 - 2014-10-30 03:03 - 00165888 _____ (Microsoft Corporation) C:\Windows\system32\charmap.exe
2014-12-10 07:52 - 2014-10-30 02:45 - 00155136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\charmap.exe
2014-12-10 07:52 - 2014-10-03 03:12 - 02020352 _____ (Microsoft Corporation) C:\Windows\system32\WsmSvc.dll
2014-12-10 07:52 - 2014-10-03 03:12 - 00346624 _____ (Microsoft Corporation) C:\Windows\system32\WSManMigrationPlugin.dll
2014-12-10 07:52 - 2014-10-03 03:12 - 00310272 _____ (Microsoft Corporation) C:\Windows\system32\WsmWmiPl.dll
2014-12-10 07:52 - 2014-10-03 03:12 - 00181248 _____ (Microsoft Corporation) C:\Windows\system32\WsmAuto.dll
2014-12-10 07:52 - 2014-10-03 03:11 - 00266240 _____ (Microsoft Corporation) C:\Windows\system32\WSManHTTPConfig.exe
2014-12-10 07:52 - 2014-10-03 02:45 - 01177088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmSvc.dll
2014-12-10 07:52 - 2014-10-03 02:45 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSManMigrationPlugin.dll
2014-12-10 07:52 - 2014-10-03 02:45 - 00214016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmWmiPl.dll
2014-12-10 07:52 - 2014-10-03 02:45 - 00145920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmAuto.dll
2014-12-10 07:52 - 2014-10-03 02:44 - 00198656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSManHTTPConfig.exe
2014-12-09 11:48 - 2014-12-09 11:48 - 00000000 ____D () C:\Users\Jörn-Friedrich\AppData\Local\Mozilla Firefox

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-01-08 15:18 - 2012-04-07 18:46 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-01-08 14:55 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\tracing
2015-01-08 13:07 - 2014-04-19 10:16 - 01745661 _____ () C:\Windows\WindowsUpdate.log
2015-01-08 08:35 - 2009-07-14 05:45 - 00024400 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-01-08 08:35 - 2009-07-14 05:45 - 00024400 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-01-08 08:28 - 2012-06-11 21:25 - 00065536 _____ () C:\Windows\system32\Ikeext.etl
2015-01-08 08:28 - 2012-04-07 18:46 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-01-08 08:28 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-01-07 20:43 - 2011-03-11 10:20 - 00699432 _____ () C:\Windows\system32\perfh007.dat
2015-01-07 20:43 - 2011-03-11 10:20 - 00149572 _____ () C:\Windows\system32\perfc007.dat
2015-01-07 20:43 - 2009-07-14 06:13 - 01620684 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-01-07 18:14 - 2012-04-07 18:50 - 00000000 ____D () C:\Users\Jörn-Friedrich
2015-01-05 11:36 - 2014-12-08 12:05 - 00035328 ___SH () C:\Users\Jörn-Friedrich\Desktop\Thumbs.db
2015-01-04 20:54 - 2014-10-29 15:18 - 00000000 ____D () C:\FTBLite2
2015-01-04 20:54 - 2014-10-27 23:12 - 00000000 ____D () C:\Users\Jörn-Friedrich\Downloads\Neuer Ordner
2015-01-04 20:54 - 2012-04-07 19:32 - 00000000 ____D () C:\Users\Jörn-Friedrich\Desktop\Daniel
2015-01-04 20:53 - 2014-11-10 16:36 - 00000000 ____D () C:\FTBLite
2015-01-04 20:53 - 2014-10-29 15:25 - 00000000 ____D () C:\Ultimate
2015-01-04 20:51 - 2013-12-23 13:38 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Minecraft
2015-01-02 16:06 - 2014-04-13 17:32 - 00000440 _____ () C:\Windows\Tasks\One-Click Optimizer.job
2014-12-28 21:40 - 2009-07-14 05:45 - 00304160 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-12-28 20:40 - 2014-09-07 19:45 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AviraSpeedup
2014-12-28 20:40 - 2012-04-07 18:48 - 00072296 _____ () C:\Users\Jörn-Friedrich\AppData\Local\GDIPFONTCACHEV1.DAT
2014-12-27 00:08 - 2014-04-21 19:26 - 00000000 ____D () C:\ProgramData\GlarySoft
2014-12-27 00:08 - 2014-04-21 19:06 - 00000000 ____D () C:\Users\Jörn-Friedrich\AppData\Roaming\GlarySoft
2014-12-25 11:32 - 2011-08-22 17:03 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-12-25 11:31 - 2013-11-11 20:22 - 00000000 ____D () C:\Users\Jörn-Friedrich\Documents\My Games
2014-12-25 11:31 - 2009-07-14 06:32 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2014-12-25 11:29 - 2014-09-08 12:09 - 00000000 ____D () C:\Program Files (x86)\Landwirtschafts Simulator 2013
2014-12-25 07:51 - 2014-04-21 19:06 - 00000000 ____D () C:\Users\Jörn-Friedrich\AppData\Roaming\DiskDefrag
2014-12-24 15:48 - 2013-09-16 18:50 - 00000000 ____D () C:\Users\Jörn-Friedrich\AppData\Roaming\.minecraft
2014-12-23 23:04 - 2013-05-21 17:45 - 00000000 ____D () C:\Users\Jörn-Friedrich\AppData\Local\CrashDumps
2014-12-22 09:52 - 2014-10-27 10:01 - 00021504 ___SH () C:\Users\Jörn-Friedrich\Documents\Thumbs.db
2014-12-21 23:06 - 2012-04-08 09:27 - 00000786 _____ () C:\Users\Public\Desktop\CCleaner.lnk
2014-12-21 23:06 - 2012-04-08 09:27 - 00000000 ____D () C:\Program Files\CCleaner
2014-12-12 18:23 - 2012-04-07 18:46 - 00002179 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-12-12 17:39 - 2014-09-11 10:00 - 00000000 ____D () C:\Users\Jörn-Friedrich\Desktop\Ebay-Bilder
2014-12-11 19:07 - 2014-09-07 19:22 - 00000000 ____D () C:\ProgramData\Package Cache
2014-12-11 19:07 - 2014-09-07 19:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2014-12-11 19:07 - 2014-09-07 19:22 - 00000000 ____D () C:\Program Files (x86)\Avira
2014-12-11 17:52 - 2014-08-29 22:01 - 00000000 ____D () C:\Users\Jörn-Friedrich\AppData\Local\Adobe
2014-12-11 17:52 - 2012-04-30 23:14 - 00701616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-12-11 17:52 - 2011-08-22 18:09 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-12-10 16:00 - 2009-07-14 06:08 - 00032632 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-12-10 15:37 - 2013-02-21 20:35 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
2014-12-10 14:55 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\rescache
2014-12-10 08:42 - 2014-05-08 17:00 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-12-10 08:42 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
2014-12-10 08:42 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\AppCompat
2014-12-10 08:10 - 2012-04-15 16:51 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-12-10 08:09 - 2013-07-24 16:38 - 00000000 ____D () C:\Windows\system32\MRT
2014-12-10 08:05 - 2011-03-14 15:08 - 112710672 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-12-09 16:13 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\NDF

Some content of TEMP:
====================
C:\Users\Jörn-Friedrich\AppData\Local\Temp\avgnt.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-01-04 12:33

==================== End Of Log ============================

--- --- ---

--- --- ---

und der ADDITION:

Code:

ATTFilter

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 07-01-2015
Ran by Jörn-Friedrich at 2015-01-08 15:38:09
Running from C:\Users\Jörn-Friedrich\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Avira Desktop (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AV: ThreatFire (Enabled - Out of date) {EDD97D31-048C-2774-0FBE-26EE50D6465E}
AS: Avira Desktop (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: ThreatFire (Enabled - Out of date) {56B89CD5-22B6-28FA-350E-1D9C2B510CE3}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

5700_Help (x32 Version: 1.00.0000 - Hewlett-Packard) Hidden
64 Bit HP CIO Components Installer (Version: 7.2.8 - Hewlett-Packard) Hidden
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 3.1.0.4880 - Adobe Systems Incorporated)
Adobe Flash Player 13 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 13.0.0.206 - Adobe Systems Incorporated)
Adobe Flash Player 16 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 16.0.0.235 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.10) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.10 - Adobe Systems Incorporated)
AMD Catalyst Install Manager (HKLM\...\{2F949F9F-EBD4-8597-5CF0-6370C0161CC9}) (Version: 3.0.851.0 - Advanced Micro Devices, Inc.)
Ashampoo WinOptimizer 2014 v.1.0.0 (HKLM-x32\...\{4209F371-99CD-68CB-1C29-9910F8F9BD96}_is1) (Version: 1.0.0 - Ashampoo GmbH & Co. KG)
Asmedia ASM104x USB 3.0 Host Controller Driver (HKLM-x32\...\{E4FB0B39-C991-4EE7-95DD-1A1A7857D33D}) (Version: 1.12.9.0 - Asmedia Technology)
Avira (HKLM-x32\...\{e7c7c227-b742-4878-9425-f09bbf9951db}) (Version: 1.1.27.25527 - Avira Operations & Co. KG)
Avira (x32 Version: 1.1.27.25527 - Avira Operations & Co. KG) Hidden
Avira Free Antivirus (HKLM-x32\...\Avira AntiVir Desktop) (Version: 14.0.7.468 - Avira)
Avira System Speedup 1.5 (HKLM-x32\...\Avira System Speedup_is1) (Version: 1.5 - 2000 - 2014 Avira Operations GmbH & Co. KG)
Boost Your Browser (HKLM-x32\...\{28AAEC25-198C-44D6-8D70-77494DFA8DB4}) (Version: 0.7 - Nikozen)
bpd_scan (x32 Version: 3.00.0000 - Hewlett-Packard) Hidden
BPDSoftware (x32 Version: 130.0.000.000 - Hewlett-Packard) Hidden
BPDSoftware_Ini (x32 Version: 1.00.0000 - Hewlett-Packard) Hidden
Browser 7 der Telekom 33.0.11 (x86 de) (HKLM-x32\...\Browser 7 der Telekom 33.0.11 (x86 de)) (Version: 33.0.11 - Deutsche Telekom AG)
Browser 7 Maintenance Service (HKLM-x32\...\Browser7MaintenanceService) (Version: 31.0.20 - Deutsche Telekom AG)
BufferChm (x32 Version: 130.0.331.000 - Hewlett-Packard) Hidden
CCleaner (HKLM\...\CCleaner) (Version: 5.01 - Piriform)
CyberLink PowerRecover (HKLM-x32\...\InstallShield_{44B2A0AB-412E-4F8C-B058-D1E8AECCDFF5}) (Version: 5.5.4125 - CyberLink Corp.)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Destinations (x32 Version: 130.0.0.0 - Hewlett-Packard) Hidden
DeviceDiscovery (x32 Version: 130.0.465.000 - Hewlett-Packard) Hidden
DocProc (x32 Version: 13.0.0.0 - Hewlett-Packard) Hidden
DSL-Manager (HKLM-x32\...\{90A455A7-0FC8-4508-B7FA-8F135B8F041A}) (Version:  - )
Fax (x32 Version: 130.0.418.000 - Hewlett-Packard) Hidden
Formant ActiveX programu Windows Live Mesh odpowiedzialny za obsługę połączeń zdalnych (HKLM-x32\...\{B04A0E2F-1E4C-4E61-B18E-3B2BD6779CA7}) (Version: 15.4.5722.2 - Microsoft Corporation)
Fotogalerija Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galeria de Fotografias do Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galería fotográfica de Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galeria fotografii usługi Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galerie de photos Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 39.0.2171.95 - Google Inc.)
Google Toolbar for Internet Explorer (x32 Version: 1.0.0 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
GPBaseService2 (x32 Version: 130.0.371.000 - Hewlett-Packard) Hidden
Hewlett-Packard ACLM.NET v1.1.0.0 (x32 Version: 1.00.0000 - Hewlett-Packard) Hidden
HP Customer Participation Program 13.0 (HKLM\...\HPExtendedCapabilities) (Version: 13.0 - HP)
HP FWUpdateEDO2 (HKLM-x32\...\{415FA9AD-DA10-4ABE-97B6-5051D4795C90}) (Version: 1.2.0.0 - Hewlett-Packard)
HP Imaging Device Functions 13.0 (HKLM\...\HP Imaging Device Functions) (Version: 13.0 - HP)
HP OfficeJet J5700 (HKLM\...\{D3A65B0A-403B-4C20-A488-BFED2BC5D2EF}) (Version: 13.0 - HP)
HP Photo Creations (HKLM-x32\...\HP Photo Creations) (Version: 1.0.0.7702 - HP)
HP Photosmart 5520 series - Grundlegende Software für das Gerät (HKLM\...\{4F396B08-301D-4E53-A372-95A7E93ABD04}) (Version: 28.0.1315.0 - Hewlett-Packard Co.)
HP Photosmart 5520 series Hilfe (HKLM-x32\...\{640A03B3-4E6B-4440-A350-E6A8D6348F12}) (Version: 27.0.0 - Hewlett Packard)
HP Product Detection (HKLM-x32\...\{A436F67F-687E-4736-BD2B-537121A804CF}) (Version: 11.14.0001 - HP)
HP Smart Web Printing 4.51 (HKLM\...\HP Smart Web Printing) (Version: 4.51 - HP)
HP Solution Center 13.0 (HKLM\...\HP Solution Center & Imaging Support Tools) (Version: 13.0 - HP)
HP Update (HKLM-x32\...\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard)
HPProductAssistant (x32 Version: 130.0.371.000 - Hewlett-Packard) Hidden
HPSSupply (x32 Version: 130.0.371.000 - Hewlett-Packard) Hidden
Intel(R) Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1007 - Intel Corporation)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 7.0.0.1144 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 10.6.0.1002 - Intel Corporation)
J5700 (x32 Version: 130.0.000.000 - Hewlett-Packard) Hidden
J5700_Basic (x32 Version: 130.0.000.000 - Hewlett-Packard) Hidden
Java 7 Update 55 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86417055FF}) (Version: 7.0.550 - Oracle)
Java 7 Update 71 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F03217071FF}) (Version: 7.0.710 - Oracle)
JetDrive (HKLM-x32\...\JetDrive_is1) (Version: 7.0 - Abelssoft)
Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Klett Lehrersoftware Green Line (Band 2) (HKLM-x32\...\Klett Lehrersoftware Green Line (Band 2)) (Version:  - )
Klett Lehrersoftware Green Line (Band 3) (HKLM-x32\...\Klett Lehrersoftware Green Line (Band 3)) (Version:  - )
Klett Lehrersoftware Green Line (HKLM-x32\...\Klett Lehrersoftware Green Line) (Version:  - )
Klett Lehrersoftware Green Line NI (Band 2) (HKLM-x32\...\Klett Lehrersoftware Green Line NI (Band 2)) (Version:  - )
Kontrolnik Windows Live Mesh ActiveX za oddaljene povezave (HKLM-x32\...\{CA227A9D-09BE-4BFB-9764-48FED2DA5454}) (Version: 15.4.5722.2 - Microsoft Corporation)
MarketResearch (x32 Version: 130.0.374.000 - Hewlett-Packard) Hidden
Memeo Instant Backup (HKLM-x32\...\{8E666407-AC41-46a2-9692-6C7BFCBFDD37}) (Version: 4.60.0.7943 - Memeo Inc.)
Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version:  - Microsoft)
Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Home and Student 2007 (HKLM-x32\...\HOMESTUDENTR) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office Live Add-in 1.5 (HKLM-x32\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x64 8.0.50727.4053 (HKLM\...\{B6E3757B-5E77-3915-866A-CCFC4B8D194C}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.30319 (HKLM\...\{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Mozilla Firefox 33.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 33.0 (x86 de)) (Version: 33.0 - Mozilla)
Mozilla Firefox 34.0.5 (x86 de) (HKU\S-1-5-21-3173901494-1134987012-1569752986-1001\...\Mozilla Firefox 34.0.5 (x86 de)) (Version: 34.0.5 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 33.0 - Mozilla)
Mozilla Thunderbird 12.0.1 (x86 de) (HKLM-x32\...\Mozilla Thunderbird 12.0.1 (x86 de)) (Version: 12.0.1 - Mozilla)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
Naturwissenschaften Arbeitsblätter 1 (HKLM-x32\...\{54DA4E8E-61F3-481F-8805-1CA64C07FC87}) (Version: 1.00 - )
NVIDIA PhysX (HKLM-x32\...\{3F5C371F-8EA2-4F25-9D3D-D0B4526E3AEA}) (Version: 9.10.0513 - NVIDIA Corporation)
OCR Software by I.R.I.S. 13.0 (HKLM\...\HPOCR) (Version: 13.0 - HP)
Ökologie (HKLM-x32\...\{0746C6D7-3FD1-42FB-99D1-6B0B73DE2B55}) (Version: 1.00.0001 - Bildungshaus Schulbuchverlage Westermann Schroedel Diesterweg Schöningh Winklers GmbH)
PlayReady PC Runtime amd64 (HKLM\...\{BCA9334F-B6C9-4F65-9A73-AC5A329A4D04}) (Version: 1.3.0 - Microsoft Corporation)
Poczta usługi Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Podstawowe programy Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Pošta Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
ProductContext (x32 Version: 130.0.000.000 - Hewlett-Packard) Hidden
Raccolta foto di Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.46.610.2011 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6438 - Realtek Semiconductor Corp.)
Scan (x32 Version: 13.0.0.0 - Hewlett-Packard) Hidden
Shop for HP Supplies (HKLM\...\Shop for HP Supplies) (Version: 13.0 - HP)
SmartWebPrinting (x32 Version: 130.0.457.000 - Hewlett-Packard) Hidden
SolutionCenter (x32 Version: 130.0.373.000 - Hewlett-Packard) Hidden
Status (x32 Version: 130.0.469.000 - Hewlett-Packard) Hidden
Studie zur Verbesserung von HP Photosmart 5520 series Produkten (HKLM\...\{B99F865A-3ECB-4E65-B6CF-9C60EE0273A3}) (Version: 28.0.1315.0 - Hewlett-Packard Co.)
ThreatFire (HKLM-x32\...\3554AA4B-9B0B-451a-A269-2B5F53982209_is1) (Version:  - PC Tools)
Toolbox (x32 Version: 130.0.648.000 - Hewlett-Packard) Hidden
TrayApp (x32 Version: 130.0.422.000 - Hewlett-Packard) Hidden
Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version:  - Microsoft)
Update für Microsoft Office Excel 2007 Help (KB963678) (HKLM-x32\...\{90120000-0016-0407-0000-0000000FF1CE}_HOMESTUDENTR_{BEC163EC-7A83-48A1-BFB6-3BF47CC2F8CF}) (Version:  - Microsoft)
Update für Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM-x32\...\{90120000-0018-0407-0000-0000000FF1CE}_HOMESTUDENTR_{EA160DA3-E9B5-4D03-A518-21D306665B96}) (Version:  - Microsoft)
Update für Microsoft Office Word 2007 Help (KB963665) (HKLM-x32\...\{90120000-001B-0407-0000-0000000FF1CE}_HOMESTUDENTR_{38472199-D7B6-4833-A949-10E4EE6365A1}) (Version:  - Microsoft)
VipBoxSportsApp (HKLM-x32\...\1ClickDownload) (Version: 2.1 Build 26473 - VipBoxSportsApp.com) <==== ATTENTION
VLC media player (HKLM\...\VLC media player) (Version: 2.1.5 - VideoLAN)
WebReg (x32 Version: 130.0.132.017 - Hewlett-Packard) Hidden
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3538.0513 - Microsoft Corporation)
Windows Live Mesh - ActiveX-besturingselement voor externe verbindingen (HKLM-x32\...\{C32CE55C-12BA-4951-8797-0967FDEF556F}) (Version: 15.4.5722.2 - Microsoft Corporation)
Windows Live Mesh ActiveX Control for Remote Connections (HKLM-x32\...\{2902F983-B4C1-44BA-B85D-5C6D52E2C441}) (Version: 15.4.5722.2 - Microsoft Corporation)
Windows Live Mesh ActiveX Control for Remote Connections (HKLM-x32\...\{C63A1E60-B6A4-440B-89A5-1FC6E4AC1C94}) (Version: 15.4.5722.2 - Microsoft Corporation)
Yahoo! Toolbar (HKLM-x32\...\Yahoo! Companion) (Version:  - )
Συλλογή φωτογραφιών του Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)


==================== Restore Points  =========================

28-12-2014 20:39:55 Avira System Speedup 1.5
28-12-2014 20:41:32 Erstelle Systemwiederherstellungspunkt bevor Junk-Dateien gelöscht werden
04-01-2015 19:00:20 Windows-Sicherung

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 03:34 - 2013-11-09 23:59 - 00000000 ____N C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {14167E82-08E3-43D1-8996-92B8704A17CC} - System32\Tasks\Norton WSC Integration => C:\Program Files (x86)\Norton Internet Security CBE\Engine\21.4.0.13\WSCStub.exe
Task: {2F3BDC2E-3B25-4EA8-B601-08D71FE8BEA8} - System32\Tasks\HP AR Program Upload - 103e5ea9e68e48ef898ffab3d0a7a7445b5c4caf35164e4098a8b06afc6fbe03 => C:\Program Files\HP\HP Photosmart 5520 series\bin\HPRewards.exe [2012-10-17] (TODO: <Company name>)
Task: {31FF28B0-07B4-4C30-996A-9C7455CF2915} - System32\Tasks\Norton Internet Security CBE\Norton Error Processor => C:\Program Files (x86)\Norton Internet Security CBE\Engine\21.4.0.13\SymErr.exe
Task: {4049C539-2E99-4D05-A142-F744CB0B4789} - System32\Tasks\{04325A7F-AC69-40B9-ACCA-1E26234D2AD8} => pcalua.exe -a E:\setup.exe -d E:\
Task: {421AFE08-3326-42DC-A055-9DD157BD9DA3} - System32\Tasks\AviraSpeedup => C:\Program Files (x86)\Avira\AviraSpeedup\avira_system_speedup.exe [2014-12-11] (Avira Operations GmbH & Co. KG)
Task: {58A2DFA0-EF80-4FB7-A453-F9A32BC3F399} - System32\Tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask => Sc.exe start osppsvc
Task: {69C17C76-6BAC-407C-97A7-E09ED59BE675} - System32\Tasks\{E87B0CB2-0127-49B7-AA1D-86BA5E8798C2} => pcalua.exe -a "G:\HP\Digital Imaging\extcapuninstall\hpzmsi01.exe" -d "G:\HP\Digital Imaging\extcapuninstall"
Task: {6F2D98EB-AE99-46DE-BB8C-D07E8344609D} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-10-26] (Google Inc.)
Task: {70C0E124-F204-4585-A613-A3B382A7D26E} - System32\Tasks\HPCustParticipation HP Photosmart 5520 series => C:\Program Files\HP\HP Photosmart 5520 series\Bin\HPCustPartic.exe [2012-10-17] (Hewlett-Packard Co.)
Task: {77338522-067F-4C6D-8CB3-859A2C873B0A} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-10-26] (Google Inc.)
Task: {77B585CA-9A54-47F6-ABB0-B9388DA62A26} - System32\Tasks\{D7AB6A25-7202-43CF-BA83-2842E956B1D7} => pcalua.exe -a E:\Setup.exe -d E:\
Task: {8A3E707F-78D2-4D21-95D1-C869FA38DBB6} - System32\Tasks\{00A86ABF-1645-4E19-893D-25ACB9B82BC9} => C:\Klett\Lehrersoftware\Green Line\Lehrersoftware.exe [2005-12-20] (Macromedia, Inc.)
Task: {92757F55-94DF-492E-8795-F2351D92EE84} - System32\Tasks\{7AE043A9-E5AA-4A32-89D4-16A49C5E3C9C} => pcalua.exe -a "C:\Users\Jörn-Friedrich\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\P267NJTQ\wmp11-windowsxp-x86-DE-DE.exe" -d C:\Users\Jörn-Friedrich\Desktop
Task: {979A520B-4783-4851-8050-9747AFB96B3E} - System32\Tasks\{C881014E-0543-4815-9A23-3100B712CD5E} => pcalua.exe -a E:\Sicherheits-Center\GData\GER_R_ESD_CBE_IS.exe -d E:\Sicherheits-Center\GData
Task: {C3CD27DE-50EA-4576-9933-85D6915AE966} - System32\Tasks\Norton Internet Security CBE\Norton Error Analyzer => C:\Program Files (x86)\Norton Internet Security CBE\Engine\21.4.0.13\SymErr.exe
Task: {C95C76E9-A64F-4E79-911E-72033E53867C} - System32\Tasks\{756982EA-90AB-47AD-84D0-D3DBD20BC3A3} => pcalua.exe -a C:\Users\Jörn-Friedrich\Desktop\Daniel\FarmingSimulator2009DemoDE.exe -d C:\Users\Jörn-Friedrich\Desktop\Daniel
Task: {CD66F585-14E8-4687-878D-F9765BE0D3E9} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-12-12] (Piriform Ltd)
Task: {D3662D69-499E-4581-B396-DFDB9B8DF91D} - System32\Tasks\0 => Iexplore.exe  <==== ATTENTION
Task: {DB70218F-C5A9-4B44-BD19-2239915FCA25} - System32\Tasks\{B460C4DC-CF64-4DE4-A8F8-594015661CB0} => pcalua.exe -a E:\Setup.exe -d E:\
Task: {EFBD5344-A11D-4E94-9D61-41B99D08A0A2} - System32\Tasks\One-Click Optimizer => C:\Program Files (x86)\Ashampoo\Ashampoo WinOptimizer 2014\WO2014.exe [2013-12-18] (Ashampoo Development GmbH & Co. KG)
Task: {F95910D3-D842-47A8-A0CF-CA21AE2CC349} - System32\Tasks\4787 => Wscript.exe C:\Users\JRN-FR~1\AppData\Local\Temp\launchie.vbs //B <==== ATTENTION
Task: {FCABCB2F-FABD-4C40-A596-785A11AC11CE} - System32\Tasks\{01F6BFF5-BB14-46FD-B1A6-96DCABFF52B9} => pcalua.exe -a C:\PROGRA~2\Klett\LEHRER~1\UNWISE.EXE -c C:\PROGRA~2\Klett\LEHRER~1\INSTALL.LOG
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\One-Click Optimizer.job => C:\Program Files (x86)\Ashampoo\Ashampoo WinOptimizer 2014\WO2014.exe

==================== Loaded Modules (whitelisted) =============

2014-12-12 23:24 - 2014-12-12 23:24 - 00047104 _____ () C:\Program Files\CCleaner\lang\lang-1031.dll
2014-10-15 15:22 - 2014-10-15 15:22 - 00172544 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_32\IsdiInterop\b2363cf94faf59386ab4778a39c16e2b\IsdiInterop.ni.dll
2011-08-22 17:03 - 2011-05-20 18:05 - 00059904 _____ () C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll
2014-12-09 11:48 - 2014-12-09 11:48 - 03758192 _____ () C:\Users\Jörn-Friedrich\AppData\Local\Mozilla Firefox\mozjs.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)

AlternateDataStreams: C:\ProgramData\Temp:AD022376

==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== EXE Association (whitelisted) =============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


==================== MSCONFIG/TASK MANAGER disabled items =========

(Currently there is no automatic fix for this section.)

MSCONFIG\startupreg: (default) => 
MSCONFIG\startupreg: Adobe ARM => "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
MSCONFIG\startupreg: Allin1Convert_8h Browser Plugin Loader 64 => C:\Program Files (x86)\Allin1Convert_8h\bar\1.bin\8hbrmon64.exe
MSCONFIG\startupreg: HP Software Update => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe
MSCONFIG\startupreg: RTHDVCPL => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe -s
MSCONFIG\startupreg: StartCCC => "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun

========================= Accounts: ==========================

Administrator (S-1-5-21-3173901494-1134987012-1569752986-500 - Administrator - Disabled)
Gast (S-1-5-21-3173901494-1134987012-1569752986-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-3173901494-1134987012-1569752986-1004 - Limited - Enabled)
Jörn-Friedrich (S-1-5-21-3173901494-1134987012-1569752986-1001 - Administrator - Enabled) => C:\Users\Jörn-Friedrich

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (01/08/2015 08:28:54 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (01/08/2015 08:28:11 AM) (Source: MemeoBackgroundService) (EventID: 0) (User: )
Description: Problem starting Memeo Background Service :Ausnahmefehler "System.Reflection.TargetInvocationException: Ein Aufrufziel hat einen Ausnahmefehler verursacht. ---> System.Security.Principal.IdentityNotMappedException: Manche oder alle Identitätsverweise konnten nicht übersetzt werden.
   bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel.StartListening(Object data)
   bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel..ctor(IDictionary properties, IServerChannelSinkProvider sinkProvider, CommonSecurityDescriptor securityDescriptor)
   bei System.Runtime.Remoting.Channels.Ipc.IpcChannel..ctor(IDictionary properties, IClientChannelSinkProvider clientSinkProvider, IServerChannelSinkProvider serverSinkProvider)
   --- Ende der internen Ausnahmestapelüberwachung ---
   bei System.RuntimeMethodHandle._InvokeConstructor(Object[] args, SignatureStruct& signature, IntPtr declaringType)
   bei System.Reflection.RuntimeConstructorInfo.Invoke(BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture)
   bei System.RuntimeType.CreateInstanceImpl(BindingFlags bindingAttr, Binder binder, Object[] args, CultureInfo culture, Object[] activationAttributes)
   bei System.Runtime.Remoting.RemotingConfigHandler.CreateChannelFromConfigEntry(ChannelEntry entry)
   bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureChannels(RemotingXmlConfigFileData configData, Boolean ensureSecurity)
   bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity)" bei der Remotekonfiguration.   bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity)
   bei System.Runtime.Remoting.RemotingConfiguration.Configure(String filename, Boolean ensureSecurity)
   bei RemoteServerService.MemeoBackgroundService.OnStart(String[] args)

Error: (01/08/2015 08:28:09 AM) (Source: Service1) (EventID: 0) (User: )
Description: Der Dienst kann nicht gestartet werden. Das Handle ist ungültig

Error: (01/07/2015 07:39:23 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (01/07/2015 07:39:19 AM) (Source: Windows Search Service) (EventID: 7010) (User: )
Description: Der Index kann nicht initialisiert werden.


Details:
	Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)

Error: (01/07/2015 07:39:19 AM) (Source: Windows Search Service) (EventID: 3058) (User: )
Description: Die Anwendung kann nicht initialisiert werden.

Kontext: Windows Anwendung


Details:
	Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)

Error: (01/07/2015 07:39:19 AM) (Source: Windows Search Service) (EventID: 3028) (User: )
Description: Das Gatherer-Objekt kann nicht initialisiert werden.

Kontext: Windows Anwendung, SystemIndex Katalog


Details:
	Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)

Error: (01/07/2015 07:39:19 AM) (Source: Windows Search Service) (EventID: 3029) (User: )
Description: Plug-In in <Search.TripoliIndexer> kann nicht initialisiert werden.

Kontext: Windows Anwendung, SystemIndex Katalog


Details:
	Element nicht gefunden.  (HRESULT : 0x80070490) (0x80070490)

Error: (01/07/2015 07:39:15 AM) (Source: Windows Search Service) (EventID: 3029) (User: )
Description: Plug-In in <Search.JetPropStore> kann nicht initialisiert werden.

Kontext: Windows Anwendung, SystemIndex Katalog


Details:
	Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)

Error: (01/07/2015 07:39:15 AM) (Source: Windows Search Service) (EventID: 9002) (User: )
Description: Die Eigenschaftenspeicherdaten können von Windows Search nicht geladen werden.

Kontext: Windows Anwendung, SystemIndex Katalog


Details:
	Die Inhaltsindexdatenbank ist fehlerhaft.  (HRESULT : 0xc0041800) (0xc0041800)


System errors:
=============
Error: (01/07/2015 10:41:49 PM) (Source: DCOM) (EventID: 10010) (User: )
Description: {F9717507-6651-4EDB-BFF7-AE615179BCCF}

Error: (01/07/2015 07:39:19 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Windows Search" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 30000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (01/07/2015 07:39:19 AM) (Source: Service Control Manager) (EventID: 7024) (User: )
Description: Der Dienst "Windows Search" wurde mit folgendem dienstspezifischem Fehler beendet: %%-1073473535.

Error: (01/05/2015 09:59:06 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Windows Search" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 30000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (01/05/2015 09:59:06 AM) (Source: Service Control Manager) (EventID: 7024) (User: )
Description: Der Dienst "Windows Search" wurde mit folgendem dienstspezifischem Fehler beendet: %%-1073473535.

Error: (01/04/2015 09:29:20 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Windows Search" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 30000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (01/04/2015 09:29:20 AM) (Source: Service Control Manager) (EventID: 7024) (User: )
Description: Der Dienst "Windows Search" wurde mit folgendem dienstspezifischem Fehler beendet: %%-1073473535.

Error: (01/04/2015 00:23:56 AM) (Source: DCOM) (EventID: 10010) (User: )
Description: {F9717507-6651-4EDB-BFF7-AE615179BCCF}

Error: (01/03/2015 08:42:49 PM) (Source: Tcpip) (EventID: 4199) (User: )
Description: Das System hat einen Adressenkonflikt der IP-Adresse 192.168.1.2 mit dem Computer mit der
Netzwerkhardwareadresse 10-3B-59-F3-97-A3 ermittelt. Netzwerkvorgänge könnten daher auf diesem
System unterbrochen werden.

Error: (01/03/2015 10:09:00 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Windows Search" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 30000 Millisekunden durchgeführt: Neustart des Diensts.


Microsoft Office Sessions:
=========================
Error: (09/20/2014 08:48:06 AM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6700.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 18 seconds with 0 seconds of active time.  This session ended with a crash.


CodeIntegrity Errors:
===================================
  Date: 2014-07-13 01:22:54.845
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Common Files\T-Com\DSLCheck\PCIDumpr.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-07-13 01:22:54.755
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Common Files\T-Com\DSLCheck\PCIDumpr.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

Brauchte nochmals Hilfe

schrauber · 08.01.2015, 17:17

Jetzt machen wir erstmal einen Rechner fertig.

Ich empfehle immer Emsisoft

ESET Online Scanner

Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
Lade und starte Eset Online Scanner
Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
Klicke auf Starten.
Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
Klicke am Ende des Suchlaufs auf Fertig stellen.
Schließe das Fenster von ESET.
Explorer öffnen.
C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
Logfile hier posten.
Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

Downloade Dir bitte

SecurityCheck und:

Speichere es auf dem Desktop.
Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.

Poste den Inhalt bitte hier.

und ein frisches FRST log bitte. Noch Probleme?

Friedrich290 · 08.01.2015, 22:07

Hallo,

anbei die Esetdatei:

Code:

ATTFilter

ESETSmartInstaller@High as downloader log:
all ok
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.7623
# api_version=3.0.2
# EOSSerial=c5967b9e0768014091216379bc16fe40
# engine=21872
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2015-01-08 08:36:28
# local_time=2015-01-08 09:36:28 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# lang=1031
# osver=6.2.9200 NT 
# compatibility_mode_1='Avira Desktop'
# compatibility_mode=1810 16777213 100 99 19229 3931988 0 0
# compatibility_mode_1=''
# compatibility_mode=5893 16776574 100 94 168940 11053707 0 0
# scanned=212685
# found=34
# cleaned=0
# scan_time=3734
sh=1C1691D53A24A5184AE315A00AC461767ADEDC20 ft=1 fh=5b79596457e5e7ad vn="Variante von Win32/ClientConnect.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\SearchProtect\SearchProtect\bin\cltmng.exe.vir"
sh=8743F255E80C6A0A95A94CC668553686FF170120 ft=1 fh=0e8260637ee8e1d9 vn="Variante von Win32/ClientConnect.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\SearchProtect\SearchProtect\bin\RN32.dll.vir"
sh=A704B6A7928A66851D5D0C251F975B52F6755053 ft=1 fh=3a141fdd6276f642 vn="Variante von Win32/ClientConnect.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\SearchProtect\SearchProtect\bin\SPtool64.exe.vir"
sh=AAB44C79899999D77D4BC45AC1FC31746EE01C39 ft=1 fh=f19b2f7682fe88c5 vn="Variante von Win32/ClientConnect.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\SearchProtect\SearchProtect\bin\VC32.dll.vir"
sh=3010A616F191A1AB67BAA394F95094E43E1B0F05 ft=1 fh=1d4eab4a3a54531e vn="Variante von Win32/ClientConnect.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\SearchProtect\SearchProtect\bin\VC32Loader.dll.vir"
sh=CFD6E953ACB4E21B22DD6D2BBD7360C353AA5049 ft=1 fh=65b60511f931799f vn="Variante von Win32/ClientConnect.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\SearchProtect\SearchProtect\bin\VC64.dll.vir"
sh=275F649C7C4613C61B59BD33393AA245AD3D3816 ft=1 fh=ecf7e3ee1d6b314e vn="Variante von Win32/ClientConnect.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\SearchProtect\SearchProtect\bin\VC64Loader.dll.vir"
sh=B46AC89336EE49AE7D475F54C6A0847EAA8A174F ft=1 fh=d456ecb0103eab2f vn="Variante von Win32/ClientConnect.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\SearchProtect\UI\bin\cltmngui.exe.vir"
sh=E232E27D89D586694D6294850587B0725D1ED5C0 ft=1 fh=c71c0011c4e77235 vn="Win32/Adware.MultiPlug.EG Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\RandomPrriCCe\DFVI77nzx5mHE8.dll.vir"
sh=49D67CB7CB84CB03EB59EF5E9B63C529819E2CCA ft=1 fh=02e66a7f20ffb4b5 vn="Variante von Win64/Adware.MultiPlug.D Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\RandomPrriCCe\DFVI77nzx5mHE8.x64.dll.vir"
sh=BA7CB3E582E0F51A59417940BA6AA72BCEE4BD93 ft=1 fh=02e66a7fc58de247 vn="Variante von Win64/Adware.MultiPlug.D Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\RobouSiaver\KhxvIlVvzyR0pN.x64.dll.vir"
sh=E6C7C9C6CF09BC0EC20178BBF9493D1C1986627A ft=1 fh=87f90cf5989f5ff8 vn="Variante von Win64/Adware.MultiPlug.E Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\SaverExtensiOn\8N25NUrrXZ52P2.x64.dll.vir"
sh=9BB7E9F76D42ABD1CF5ED4E1FFA5860DA3E7D762 ft=0 fh=0000000000000000 vn="JS/Kryptik.ATB Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\Extensions\3@3AcA.com\content\bg.js.vir"
sh=529847C8472E4B972BD11C1C9BF8979AD01FA319 ft=0 fh=0000000000000000 vn="JS/Kryptik.ATB Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\Extensions\81X@T7ZC6I.edu\content\bg.js.vir"
sh=427E52A966E261626C58C8F3F6C1558D453820F1 ft=0 fh=0000000000000000 vn="JS/Kryptik.ATB Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\Extensions\APueTDX@U.com\content\bg.js.vir"
sh=C5926491831A1EA4FF038E13EA91A2E23D3B7A8C ft=0 fh=0000000000000000 vn="JS/Kryptik.ATB Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\Extensions\FUAujg@j.net\content\bg.js.vir"
sh=DD8292E97FA03DE095377C098E50A3AAED73A211 ft=0 fh=0000000000000000 vn="JS/Kryptik.ATB Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\Extensions\LTA@q.net\content\bg.js.vir"
sh=B7C722576E340B33362B753B2A82246D80C62D97 ft=1 fh=aecc075c8b73a942 vn="Win64/Adware.AddLyrics.E Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Windows\System32\drivers\webinstrNewH.sys.vir"
sh=250257253810329A238AED92CE43B30EB91534DD ft=1 fh=325d23bd620750a3 vn="Variante von Win32/Toolbar.CrossRider.BM evtl. unerwünschte Anwendung" ac=I fn="C:\Program Files (x86)\6228cefd-9c9c-4d28-ba89-4fea4b5b07c7\e5636612-7284-48bb-9fee-81e1feaac113.dll"
sh=2F47FC1FA1CED95DB8AFF54CA7CAD2D8AD784665 ft=1 fh=5a8faa0e442e2fb1 vn="Variante von Win32/Toolbar.CrossRider.BM evtl. unerwünschte Anwendung" ac=I fn="C:\Program Files (x86)\Acer\d8ab63e2-cb9c-41d9-9a96-69f41c5fb27c.dll"
sh=250257253810329A238AED92CE43B30EB91534DD ft=1 fh=325d23bd620750a3 vn="Variante von Win32/Toolbar.CrossRider.BM evtl. unerwünschte Anwendung" ac=I fn="C:\Program Files (x86)\AGEIA Technologies\6228cefd-9c9c-4d28-ba89-4fea4b5b07c7.dll"
sh=2F47FC1FA1CED95DB8AFF54CA7CAD2D8AD784665 ft=1 fh=5a8faa0e442e2fb1 vn="Variante von Win32/Toolbar.CrossRider.BM evtl. unerwünschte Anwendung" ac=I fn="C:\Program Files (x86)\d8ab63e2-cb9c-41d9-9a96-69f41c5fb27c\077865c7-e029-46fc-97b7-f0d0c9f4bf99.dll"
sh=3ADFD1204778466DCF09A25EB0AF08FE58387800 ft=0 fh=0000000000000000 vn="JS/Kryptik.ATB Trojaner" ac=I fn="C:\ProgramData\gpkmjaddgmnebabefhalcdhlohdhiejg\TKDicbqjS.js"
sh=8F2ED3BB0E8C7CB103FBB1678280895D697EB88D ft=0 fh=0000000000000000 vn="JS/Kryptik.ATB Trojaner" ac=I fn="C:\ProgramData\jooedlmpmpnhalnchcfgihpehccbioml\puQcJwDtvP.js"
sh=3798F8DF1C088F3F9246A10FD8834B25CE2AEFCD ft=0 fh=0000000000000000 vn="JS/Kryptik.ATB Trojaner" ac=I fn="C:\ProgramData\pobnbnmffkpndfpcgmkcmocainfomioa\v.js"
sh=3ADFD1204778466DCF09A25EB0AF08FE58387800 ft=0 fh=0000000000000000 vn="JS/Kryptik.ATB Trojaner" ac=I fn="C:\Users\All Users\gpkmjaddgmnebabefhalcdhlohdhiejg\TKDicbqjS.js"
sh=8F2ED3BB0E8C7CB103FBB1678280895D697EB88D ft=0 fh=0000000000000000 vn="JS/Kryptik.ATB Trojaner" ac=I fn="C:\Users\All Users\jooedlmpmpnhalnchcfgihpehccbioml\puQcJwDtvP.js"
sh=3798F8DF1C088F3F9246A10FD8834B25CE2AEFCD ft=0 fh=0000000000000000 vn="JS/Kryptik.ATB Trojaner" ac=I fn="C:\Users\All Users\pobnbnmffkpndfpcgmkcmocainfomioa\v.js"
sh=9413821E4285C46DAF48156B472065FC2D763FE8 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.C evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Daniel\AppData\Roaming\KYBEFZU"
sh=DDD7E789E67132CF6C5D8169B2F46E3498FCA60F ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.C evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Daniel\AppData\Roaming\XSHNPL"
sh=9413821E4285C46DAF48156B472065FC2D763FE8 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.C evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Daniel\AppData\Roaming\YDYXQG"
sh=F6E53933B39D27963E052FF559E7F9B7C7FBE234 ft=0 fh=0000000000000000 vn="Win32/Adware.MultiPlug.DU Anwendung" ac=I fn="C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\prefs.js"
sh=C222E0B2AD770DD5777C83575328B492FB5F11CE ft=0 fh=0000000000000000 vn="JS/Kryptik.ATB Trojaner" ac=I fn="C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\4@ckIbAWyX.com\content\bg.js"
sh=E82E97E10F75E13517BC1AE0E8326B843DA6C0A9 ft=1 fh=f401725bddbf58fb vn="Variante von Win32/DownloadSponsor.C evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Daniel\Downloads\BlueStacks App Player - CHIP-Installer.exe"

anbei die zweite Datei:

Code:

ATTFilter

 Results of screen317's Security Check version 0.99.93  
   x64 (UAC is enabled)  
 Internet Explorer 11  
``````````````Antivirus/Firewall Check:`````````````` 
Avira Desktop      
Windows Defender   
 Antivirus up to date!   
`````````Anti-malware/Other Utilities Check:````````` 
 Java 8 Update 25  
 Java version 32-bit out of Date! 
 Adobe Flash Player 	16.0.0.235  
 Mozilla Firefox (34.0.5) 
````````Process Check: objlist.exe by Laurent````````  
 Malwarebytes Anti-Malware mbamservice.exe  
 Malwarebytes Anti-Malware mbam.exe  
 Avira Antivir avgnt.exe 
 Avira Antivir avguard.exe 
 Malwarebytes Anti-Malware mbamscheduler.exe   
`````````````````System Health check````````````````` 
 Total Fragmentation on Drive C:  % 
````````````````````End of Log``````````````````````

und die FRST:

FRST Logfile:

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 07-01-2015
Ran by Daniel (administrator) on 1906DANIEL on 08-01-2015 22:05:33
Running from C:\Users\Daniel\Desktop\Bereinigung
Loaded Profiles: UpdatusUser & Daniel (Available profiles: UpdatusUser & Daniel)
Platform: Windows 8.1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11 (Default browser: IE)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Windows (R) Win 7 DDK provider) C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\AdminService.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-UpdaterService.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\AOP Framework\CCDMonitorService.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Launch Manager\LMSvc.exe
(Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe
() C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Quick Access\QASvc.exe
(Acer Cloud Technology) C:\Program Files (x86)\Acer\AOP Framework\acer\ccd.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Quick Access\RMSvc.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
(acer) C:\Program Files\Acer\User Experience Improvement Program\Framework\UBTService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
(Intel Corporation) C:\Windows\System32\igfxTray.exe
(Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbam.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Atheros Communications) C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtvStack.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
() C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\ActivateDesktop.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Quick Access\QAEvent.exe
(Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Launch Manager\LMEvent.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Launch Manager\LMLockHandler.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Launch Manager\LMTray.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Quick Access\QAMsg.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\AOP Framework\BackgroundAgent.exe
() C:\Program Files (x86)\Acer\abDocs\abDocsDllLoader.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-Agent.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
() C:\Program Files (x86)\Acer\abDocs\abDocsDllLoaderMonitor.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerTray.exe
(Intel Corporation) C:\Windows\System32\igfxext.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerEvent.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerWinMonitor.exe
(Valve Corporation) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Microsoft Corporation) C:\Windows\System32\WWAHost.exe
(Microsoft Corporation) C:\Windows\WinStore\WSHost.exe
(TODO: <Company name>) C:\Program Files\Acer\User Experience Improvement Program\Plugin\AppMonitor\AppMonitorPlugIn.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-Service.exe
(BlueStack Systems) C:\Program Files (x86)\BlueStacks\HD-Network.exe
(BlueStack Systems) C:\Program Files (x86)\BlueStacks\HD-BlockDevice.exe
(BlueStack Systems) C:\Program Files (x86)\BlueStacks\HD-SharedFolder.exe
() C:\Program Files\WindowsApps\GAMELOFTSA.BlitzBrigade_1.3.1.13_x86__0pp20fcewvvtj\InfamousHeroesEntry.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
() C:\Program Files\Realtek\Audio\HDA\FMAPP.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13672304 2014-03-18] (Realtek Semiconductor)
HKLM-x32\...\Run: [BacKGround Agent] => C:\Program Files (x86)\Acer\AOP Framework\BackgroundAgent.exe [62208 2014-11-17] (Acer Incorporated)
HKLM-x32\...\Run: [abDocsDllLoader] => C:\Program Files (x86)\Acer\abDocs\abDocsDllLoader.exe [90368 2014-11-20] ()
HKLM-x32\...\Run: [BlueStacks Agent] => C:\Program Files (x86)\BlueStacks\HD-Agent.exe [843480 2014-10-08] (BlueStack Systems, Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [507776 2014-10-07] (Oracle Corporation)
HKLM-x32\...\Run: [Avira Systray] => C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe [126200 2014-11-20] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [702768 2014-11-24] (Avira Operations GmbH & Co. KG)
HKLM\...\Policies\Explorer\Run: [BtvStack] => C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtvStack.exe [134784 2014-02-25] ( (Atheros Communications))
HKU\S-1-5-21-223822767-1807346583-171944255-1001\...\Run: [Pokki] => C:\Windows\system32\rundll32.exe "%LOCALAPPDATA%\Pokki\Engine\Launcher.dll",RunLaunchPlatform
HKU\S-1-5-21-223822767-1807346583-171944255-1001\...\RunOnce: [RegDXVA1] => C:\Windows\system32\cmd.exe /c reg import "C:\Program Files (x86)\Acer\abPhoto\SwitchUserVideoKey.reg"
HKU\S-1-5-21-223822767-1807346583-171944255-1001\...\RunOnce: [SetAsDefault] => C:\Program Files (x86)\Acer\Acer Video Player\SwitchUserVideoKey.bat
HKU\S-1-5-21-223822767-1807346583-171944255-1002\...\Run: [Steam] => C:\Program Files (x86)\Steam\Steam.exe [1940160 2014-11-18] (Valve Corporation)
HKU\S-1-5-21-223822767-1807346583-171944255-1002\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [7394584 2014-12-12] (Piriform Ltd)
HKU\S-1-5-21-223822767-1807346583-171944255-1002\...\RunOnce: [Application Restart #0] => C:\Users\Daniel\AppData\Local\Pokki\Engine\HostAppService.exe  --disable-internal-flash --noerrdialogs --no-message-box --disable-extensions --disable-web-security --disable-web-resources --disable-cl (the data entry has 551 more characters).
ShellIconOverlayIdentifiers: [ACloudSyncedRF] -> {5CCE71FA-9F61-4F24-9CD1-98D819B40D68} => C:\Program Files (x86)\Acer\Acer Portal\x64\shellext_win.dll (Acer Incorporated)
ShellIconOverlayIdentifiers: [ACloudSyncedSF] -> {5D5F18B7-D59B-4B18-A3E9-0A4BDCCCB699} => C:\Program Files (x86)\Acer\Acer Portal\x64\shellext_win.dll (Acer Incorporated)
ShellIconOverlayIdentifiers: [ACloudSyncing] -> {C1E1456F-C2D8-4C96-870D-35F1E13941EE} => C:\Program Files (x86)\Acer\Acer Portal\x64\shellext_win.dll (Acer Incorporated)
ShellIconOverlayIdentifiers: [ACloudToBeSynced] -> {307523FA-DDC0-4068-983F-2A6B34627744} => C:\Program Files (x86)\Acer\Acer Portal\x64\shellext_win.dll (Acer Incorporated)
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = about:blank
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-223822767-1807346583-171944255-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/?pc=MSE1
HKU\S-1-5-21-223822767-1807346583-171944255-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://acer13.msn.com/?pc=ACJB
HKU\S-1-5-21-223822767-1807346583-171944255-1001\Software\Microsoft\Internet Explorer\Main,First Home Page = hxxp://go.microsoft.com/fwlink/?LinkID=226786&Mkt=de-DE&Src=WD8&Tid=00032955&OHP=about%3Ablank&OSP=
HKU\S-1-5-21-223822767-1807346583-171944255-1002\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM -> {80c554b9-c7f8-4a21-9471-06d606da78a2} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1
SearchScopes: HKLM-x32 -> {80c554b9-c7f8-4a21-9471-06d606da78a2} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-223822767-1807346583-171944255-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-223822767-1807346583-171944255-1002 -> {0F4290CD-0C1F-43D0-AD78-654E5ADC2694} URL = 
SearchScopes: HKU\S-1-5-21-223822767-1807346583-171944255-1002 -> {80c554b9-c7f8-4a21-9471-06d606da78a2} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1
BHO: RobouSiaver -> {e3190def-fe89-48bd-8820-9809133be044} -> C:\ProgramData\RobouSiaver\KhxvIlVvzyR0pN.x64.dll No File
BHO: SaverExtensiOn -> {e64ca992-4ef4-400c-b3e2-35ffd808ed66} -> C:\ProgramData\SaverExtensiOn\8N25NUrrXZ52P2.x64.dll No File
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\ssv.dll (Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\jp2ssv.dll (Oracle Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 192.168.1.1

FireFox:
========
FF ProfilePath: C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default
FF Homepage: about:home
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_16_0_0_235.dll ()
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_235.dll ()
FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/pdf -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll ()
FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.fdf -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.25.2 -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.25.2 -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\1\NP_wtapp.dll ()
FF Extension: OptuOn - C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\Extensions\4@ckIbAWyX.com [2014-12-26]
FF Extension: Avira Browser Safety - C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\Extensions\abs@avira.com [2015-01-06]
FF Extension: HD Notifier - C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\Extensions\{0e84d0b4-5388-4a04-a2bf-1043c386a4dc}.xpi [2015-01-04]
FF Extension: {2b5f4e51-080e-409c-8353-01cc79790137} - C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\Extensions\{2b5f4e51-080e-409c-8353-01cc79790137}.xpi [2015-01-01]

Chrome: 
=======
CHR Profile: C:\Users\Daniel\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (No Name) - C:\Users\Daniel\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdeaofcapijfmeopimkgcepdpbdepnb [2015-01-04]
CHR Extension: (No Name) - C:\Users\Daniel\AppData\Local\Google\Chrome\User Data\Default\Extensions\mbacbcfdfaapbcnlnbmciiaakomhkbkb [2015-01-06]
CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - No Path
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - No Path

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [431920 2014-11-24] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [431920 2014-11-24] (Avira Operations GmbH & Co. KG)
R2 AtherosSvc; C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\adminservice.exe [319104 2014-02-25] (Windows (R) Win 7 DDK provider)
R2 Avira.OE.ServiceHost; C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe [166192 2014-11-20] (Avira Operations GmbH & Co. KG)
R2 BstHdAndroidSvc; C:\Program Files (x86)\BlueStacks\HD-Service.exe [409304 2014-10-08] (BlueStack Systems, Inc.)
R2 BstHdLogRotatorSvc; C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe [388824 2014-10-08] (BlueStack Systems, Inc.)
R2 BstHdUpdaterSvc; C:\Program Files (x86)\BlueStacks\HD-UpdaterService.exe [782040 2014-10-08] (BlueStack Systems, Inc.)
R2 CCDMonitorService; C:\Program Files (x86)\Acer\AOP Framework\CCDMonitorService.exe [2709760 2014-11-17] (Acer Incorporated)
R3 ePowerSvc; C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe [2573032 2014-06-12] (Acer Incorporated)
R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [282096 2014-03-18] (Intel Corporation)
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [747520 2013-08-27] (Intel(R) Corporation) [File not signed]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [828376 2013-08-27] (Intel(R) Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-12-10] (Intel Corporation)
R2 LMSvc; C:\Program Files\Acer\Acer Launch Manager\LMSvc.exe [466664 2014-06-10] (Acer Incorporate)
R2 MBAMScheduler; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe [1871160 2014-11-21] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [969016 2014-11-21] (Malwarebytes Corporation)
R3 QASvc; C:\Program Files\Acer\Acer Quick Access\QASvc.exe [458984 2014-06-26] (Acer Incorporate)
R2 RichVideo; C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [254512 2012-04-24] ()
R3 RMSvc; C:\Program Files\Acer\Acer Quick Access\RMSvc.exe [449768 2014-06-26] (Acer Incorporate)
R3 UEIPSvc; C:\Program Files\Acer\User Experience Improvement Program\Framework\UBTService.exe [234240 2014-07-15] (acer)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [368632 2014-09-22] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23792 2014-09-22] (Microsoft Corporation)
S2 5936b827; "C:\Windows\system32\rundll32.exe" "c:\Program Files (x86)\Optimizer Pro 3.20\OptProMon.dll",ENT

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R3 athr; C:\Windows\system32\DRIVERS\athwbx.sys [3888640 2014-02-14] (Qualcomm Atheros Communications, Inc.)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [119272 2014-11-24] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [131608 2014-11-24] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [28600 2014-11-24] (Avira Operations GmbH & Co. KG)
R2 BstHdDrv; C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [122072 2014-10-08] (BlueStack Systems)
S3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [77464 2014-02-25] (Qualcomm Atheros)
S3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [226304 2014-03-18] (Microsoft Corporation)
R3 iaLPSS_I2C; C:\Windows\System32\drivers\iaLPSS_I2C.sys [99320 2013-10-03] (Intel Corporation)
R3 LMDriver; C:\Windows\System32\drivers\LMDriver.sys [21360 2013-07-17] (Acer Incorporated)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-11-21] (Malwarebytes Corporation)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [129752 2015-01-08] (Malwarebytes Corporation)
R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [64216 2014-11-21] (Malwarebytes Corporation)
R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [100312 2013-12-10] (Intel Corporation)
R3 RadioShim; C:\Windows\System32\drivers\RadioShim.sys [14680 2013-07-17] (Acer Incorporated)
R3 RTSPER; C:\Windows\system32\DRIVERS\RtsPer.sys [466136 2014-01-14] (Realsil Semiconductor Corporation)
R3 SynRMIHID; C:\Windows\system32\DRIVERS\SynRMIHID.sys [42224 2014-02-19] (Synaptics Incorporated)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114496 2014-09-22] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-01-08 14:46 - 2015-01-08 14:46 - 00000000 ____D () C:\Windows\ERUNT
2015-01-08 13:05 - 2015-01-08 20:44 - 00129752 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-01-08 13:05 - 2015-01-08 13:05 - 00001118 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2015-01-08 13:05 - 2015-01-08 13:05 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2015-01-08 13:05 - 2015-01-08 13:05 - 00000000 ____D () C:\ProgramData\Malwarebytes
2015-01-08 13:05 - 2015-01-08 13:05 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2015-01-08 13:05 - 2014-11-21 06:14 - 00093400 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2015-01-08 13:05 - 2014-11-21 06:14 - 00064216 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2015-01-08 13:05 - 2014-11-21 06:14 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2015-01-08 13:01 - 2015-01-08 22:05 - 00000000 ____D () C:\Users\Daniel\Desktop\Bereinigung
2015-01-08 12:56 - 2015-01-08 14:42 - 00000000 ____D () C:\AdwCleaner
2015-01-07 20:38 - 2015-01-07 20:38 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group
2015-01-07 19:41 - 2015-01-08 22:05 - 00000000 ____D () C:\FRST
2015-01-07 19:39 - 2015-01-07 19:39 - 01115648 _____ (Farbar) C:\Users\Daniel\Downloads\FRST.exe
2015-01-07 18:12 - 2015-01-07 18:12 - 00000000 _____ () C:\Windows\setuperr.log
2015-01-07 18:12 - 2015-01-07 18:12 - 00000000 _____ () C:\Windows\setupact.log
2015-01-07 18:10 - 2015-01-08 14:43 - 00115210 _____ () C:\Windows\PFRO.log
2015-01-07 11:23 - 2015-01-07 11:23 - 00244264 _____ () C:\Users\Daniel\Downloads\Firefox Setup Stub 34.0.5 (1).exe
2015-01-07 11:23 - 2015-01-07 11:23 - 00001175 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2015-01-07 11:23 - 2015-01-07 11:23 - 00001163 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2015-01-07 11:23 - 2015-01-07 11:23 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2015-01-06 22:56 - 2015-01-06 22:56 - 00000000 ____D () C:\Users\Daniel\AppData\Roaming\Avira
2015-01-06 22:54 - 2015-01-06 22:53 - 00043064 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2015-01-06 22:52 - 2014-11-24 10:23 - 00131608 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2015-01-06 22:52 - 2014-11-24 10:23 - 00119272 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2015-01-06 22:52 - 2014-11-24 10:23 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys
2015-01-06 22:48 - 2015-01-06 22:52 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2015-01-06 22:48 - 2015-01-06 22:52 - 00000000 ____D () C:\ProgramData\Avira
2015-01-06 22:48 - 2015-01-06 22:52 - 00000000 ____D () C:\Program Files (x86)\Avira
2015-01-06 22:48 - 2015-01-06 22:48 - 00001157 _____ () C:\Users\Public\Desktop\Avira.lnk
2015-01-06 22:47 - 2015-01-06 22:47 - 04549888 _____ (Avira Operations & Co. KG) C:\Users\Daniel\Downloads\avira_de_av_5765383327__ws.exe
2015-01-06 22:42 - 2014-10-30 12:25 - 00275080 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2015-01-06 20:21 - 2015-01-06 20:21 - 00244264 _____ () C:\Users\Daniel\Downloads\Firefox Setup Stub 34.0.5.exe
2015-01-06 14:57 - 2015-01-06 14:58 - 00002005 _____ () C:\Users\Public\Desktop\abPhoto.lnk
2015-01-06 10:23 - 2015-01-08 20:40 - 01429528 _____ () C:\Windows\WindowsUpdate.log
2015-01-02 15:31 - 2014-10-14 19:13 - 00675988 _____ () C:\Users\Daniel\Desktop\Minecraft.exe
2015-01-02 15:05 - 2015-01-08 19:31 - 00000000 ____D () C:\Users\Daniel\AppData\Local\ftblauncher
2015-01-02 15:05 - 2015-01-02 15:05 - 00000000 ____D () C:\Users\Daniel\AppData\Roaming\ftblauncher
2015-01-02 14:39 - 2015-01-02 14:39 - 00000000 ____D () C:\Users\Daniel\Downloads\runtime
2015-01-02 14:38 - 2015-01-02 14:40 - 00000000 ____D () C:\Users\Daniel\Downloads\game
2015-01-02 14:38 - 2015-01-02 14:38 - 02314240 _____ () C:\Users\Daniel\Downloads\MinecraftInstaller.msi
2015-01-02 14:36 - 2015-01-02 14:36 - 01291528 _____ (Mojang) C:\Users\Daniel\Downloads\Minecraft.exe
2015-01-02 14:25 - 2015-01-08 19:30 - 00000000 ____D () C:\Users\Daniel\Desktop\minecraft Test
2015-01-02 14:03 - 2015-01-08 15:51 - 00001364 _____ () C:\Windows\Tasks\YDYXQG.job
2015-01-02 14:03 - 2015-01-02 14:03 - 00004376 _____ () C:\Windows\System32\Tasks\YDYXQG
2015-01-02 14:02 - 2015-01-07 08:08 - 00000000 ____D () C:\Program Files (x86)\d8ab63e2-cb9c-41d9-9a96-69f41c5fb27c
2015-01-02 14:00 - 2015-01-06 20:19 - 00002016 _____ () C:\Windows\patsearch.bin
2015-01-02 13:59 - 2015-01-08 19:32 - 00000000 ____D () C:\Users\Daniel\AppData\Roaming\.minecraft
2015-01-02 13:59 - 2015-01-08 15:51 - 00001366 _____ () C:\Windows\Tasks\KYBEFZU.job
2015-01-02 13:59 - 2015-01-08 15:51 - 00001364 _____ () C:\Windows\Tasks\XSHNPL.job
2015-01-02 13:59 - 2015-01-07 08:09 - 00000000 ____D () C:\Program Files (x86)\6228cefd-9c9c-4d28-ba89-4fea4b5b07c7
2015-01-02 13:59 - 2015-01-02 13:59 - 00004376 _____ () C:\Windows\System32\Tasks\XSHNPL
2015-01-02 13:59 - 2015-01-02 13:59 - 00004376 _____ () C:\Windows\System32\Tasks\KYBEFZU
2015-01-02 13:59 - 2015-01-02 13:59 - 00000000 ____D () C:\Users\Daniel\AppData\Roaming\java
2015-01-02 13:58 - 2015-01-02 13:58 - 00000000 ____D () C:\ProgramData\Sun
2015-01-02 13:58 - 2015-01-02 13:58 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2015-01-02 13:58 - 2015-01-02 13:57 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2015-01-02 13:57 - 2015-01-02 13:57 - 00000000 ____D () C:\ProgramData\Oracle
2015-01-02 13:57 - 2015-01-02 13:57 - 00000000 ____D () C:\Program Files (x86)\Java
2015-01-02 13:55 - 2015-01-02 13:55 - 00638888 _____ (Oracle Corporation) C:\Users\Daniel\Downloads\chromeinstall-8u25.exe
2015-01-02 13:54 - 2015-01-02 13:54 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf
2015-01-02 13:47 - 2014-10-29 15:11 - 06619054 _____ () C:\Users\Daniel\Desktop\FTB_Launcher.exe
2015-01-01 17:20 - 2015-01-01 17:20 - 00000000 ____D () C:\Users\Public\Documents\Android
2015-01-01 17:20 - 2015-01-01 17:20 - 00000000 ____D () C:\Users\Daniel\Documents\Android
2015-01-01 02:03 - 2015-01-01 02:03 - 00000931 _____ () C:\Users\Daniel\Downloads\The-Walking-Dead_-Survival-Instinct-lnstall - Verknüpfung.lnk
2015-01-01 02:03 - 2015-01-01 02:03 - 00000000 ____D () C:\Users\Daniel\AppData\Local\Tempde32eb70472f50f1682ef62857f90de0______
2015-01-01 01:56 - 2015-01-01 01:56 - 00000000 ____D () C:\Users\Daniel\AppData\Local\Tempde32eb70472f50f1682ef62857f90de0_____
2015-01-01 01:46 - 2015-01-01 01:46 - 00000000 ___SD () C:\Windows\system32\CompatTel
2015-01-01 01:46 - 2015-01-01 01:46 - 00000000 ____D () C:\Windows\system32\appraiser
2014-12-30 23:40 - 2014-12-30 23:40 - 00000000 ____D () C:\Program Files (x86)\WEB.DE MailCheck
2014-12-30 23:36 - 2014-12-30 23:36 - 00000000 ____D () C:\Users\Daniel\AppData\Local\Tempde32eb70472f50f1682ef62857f90de0____
2014-12-30 23:36 - 2014-12-30 23:36 - 00000000 ____D () C:\Users\Daniel\AppData\Local\Tempde32eb70472f50f1682ef62857f90de0___
2014-12-30 23:35 - 2014-12-30 23:35 - 00000000 ____D () C:\Users\Daniel\AppData\Local\Tempde32eb70472f50f1682ef62857f90de0__
2014-12-30 23:33 - 2014-12-30 23:33 - 00000000 ____D () C:\Users\Daniel\AppData\Local\Tempde32eb70472f50f1682ef62857f90de0_
2014-12-30 23:33 - 2014-12-30 23:33 - 00000000 ____D () C:\Users\Daniel\AppData\Local\Tempde32eb70472f50f1682ef62857f90de0
2014-12-30 23:33 - 2014-12-30 23:33 - 00000000 ____D () C:\Users\Daniel\AppData\Local\Tempb611a9446b16c0a3ab49ae1736d3f689
2014-12-29 00:08 - 2014-12-29 00:08 - 00000000 ____D () C:\Users\Daniel\AppData\Roaming\Foxit Software
2014-12-27 20:25 - 2015-01-07 22:31 - 00000000 ____D () C:\Users\Daniel\Documents\Euro Truck Simulator 2
2014-12-27 20:24 - 2014-12-27 20:24 - 00001356 _____ () C:\Users\Public\Desktop\Euro Truck Simulator 2.lnk
2014-12-27 20:24 - 2014-12-27 20:24 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Euro Truck Simulator 2
2014-12-27 20:22 - 2014-12-27 20:24 - 00000000 ____D () C:\Program Files (x86)\Euro Truck Simulator 2
2014-12-27 00:16 - 2014-04-14 04:29 - 01018880 _____ (Microsoft Corporation) C:\Windows\system32\termsrv.dll
2014-12-26 21:58 - 2014-07-24 10:44 - 16874496 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.dll
2014-12-26 21:58 - 2014-07-24 10:16 - 12730880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.dll
2014-12-26 21:58 - 2014-06-14 07:03 - 02389504 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2014-12-26 21:57 - 2014-07-24 16:28 - 00419648 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2014-12-26 21:57 - 2014-07-24 16:28 - 00412992 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\spaceport.sys
2014-12-26 21:57 - 2014-07-24 16:28 - 00280384 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pci.sys
2014-12-26 21:57 - 2014-07-24 16:28 - 00143680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2014-12-26 21:57 - 2014-07-24 16:23 - 00125472 _____ (Microsoft Corporation) C:\Windows\system32\dwmapi.dll
2014-12-26 21:57 - 2014-07-24 16:20 - 00645592 _____ (Microsoft Corporation) C:\Windows\system32\SHCore.dll
2014-12-26 21:57 - 2014-07-24 16:20 - 00263400 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettingsAdminFlows.exe
2014-12-26 21:57 - 2014-07-24 16:16 - 02574208 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
2014-12-26 21:57 - 2014-07-24 16:16 - 00211216 _____ (Microsoft Corporation) C:\Windows\system32\SndVol.exe
2014-12-26 21:57 - 2014-07-24 16:07 - 02009920 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2014-12-26 21:57 - 2014-07-24 16:05 - 01660048 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2014-12-26 21:57 - 2014-07-24 16:05 - 01519560 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
2014-12-26 21:57 - 2014-07-24 16:05 - 01488008 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2014-12-26 21:57 - 2014-07-24 16:05 - 01356840 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe
2014-12-26 21:57 - 2014-07-24 16:03 - 02141920 _____ (Microsoft Corporation) C:\Windows\system32\mfcore.dll
2014-12-26 21:57 - 2014-07-24 16:03 - 00882136 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll
2014-12-26 21:57 - 2014-07-24 16:03 - 00360480 _____ (Microsoft Corporation) C:\Windows\system32\mfreadwrite.dll
2014-12-26 21:57 - 2014-07-24 16:03 - 00233888 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll
2014-12-26 21:57 - 2014-07-24 16:03 - 00205512 _____ (Microsoft Corporation) C:\Windows\system32\mftranscode.dll
2014-12-26 21:57 - 2014-07-24 14:50 - 00098048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmapi.dll
2014-12-26 21:57 - 2014-07-24 14:48 - 02410976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL
2014-12-26 21:57 - 2014-07-24 14:48 - 00180208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SndVol.exe
2014-12-26 21:57 - 2014-07-24 14:46 - 00477200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SHCore.dll
2014-12-26 21:57 - 2014-07-24 14:36 - 02145472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfcore.dll
2014-12-26 21:57 - 2014-07-24 14:36 - 00707536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfplat.dll
2014-12-26 21:57 - 2014-07-24 14:36 - 00355800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfreadwrite.dll
2014-12-26 21:57 - 2014-07-24 14:36 - 00180720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mftranscode.dll
2014-12-26 21:57 - 2014-07-24 12:51 - 00008192 _____ (Microsoft Corporation) C:\Windows\system32\KBDRUM.DLL
2014-12-26 21:57 - 2014-07-24 12:51 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDYAK.DLL
2014-12-26 21:57 - 2014-07-24 12:51 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDTT102.DLL
2014-12-26 21:57 - 2014-07-24 12:51 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDTAT.DLL
2014-12-26 21:57 - 2014-07-24 12:51 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU1.DLL
2014-12-26 21:57 - 2014-07-24 12:51 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDBASH.DLL
2014-12-26 21:57 - 2014-07-24 12:51 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU.DLL
2014-12-26 21:57 - 2014-07-24 12:46 - 00079872 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\IPMIDrv.sys
2014-12-26 21:57 - 2014-07-24 12:45 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hdaudbus.sys
2014-12-26 21:57 - 2014-07-24 12:44 - 00674816 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys
2014-12-26 21:57 - 2014-07-24 12:43 - 00412160 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv.sys
2014-12-26 21:57 - 2014-07-24 12:42 - 00446976 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\nwifi.sys
2014-12-26 21:57 - 2014-07-24 12:42 - 00126464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\NdisImPlatform.sys
2014-12-26 21:57 - 2014-07-24 12:41 - 00118272 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bthpan.sys
2014-12-26 21:57 - 2014-07-24 12:06 - 00220160 _____ (Microsoft Corporation) C:\Windows\system32\iasnap.dll
2014-12-26 21:57 - 2014-07-24 12:05 - 00287232 _____ (Microsoft Corporation) C:\Windows\system32\usbmon.dll
2014-12-26 21:57 - 2014-07-24 12:05 - 00226816 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll
2014-12-26 21:57 - 2014-07-24 11:52 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDYAK.DLL
2014-12-26 21:57 - 2014-07-24 11:52 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDTT102.DLL
2014-12-26 21:57 - 2014-07-24 11:52 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDTAT.DLL
2014-12-26 21:57 - 2014-07-24 11:51 - 00008192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDRUM.DLL
2014-12-26 21:57 - 2014-07-24 11:51 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDRU1.DLL
2014-12-26 21:57 - 2014-07-24 11:51 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDBASH.DLL
2014-12-26 21:57 - 2014-07-24 11:51 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDRU.DLL
2014-12-26 21:57 - 2014-07-24 11:49 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\WorkFoldersGPExt.dll
2014-12-26 21:57 - 2014-07-24 11:32 - 00207360 _____ (Microsoft Corporation) C:\Windows\system32\powercfg.cpl
2014-12-26 21:57 - 2014-07-24 11:20 - 02050560 _____ (Microsoft Corporation) C:\Windows\system32\SRH.dll
2014-12-26 21:57 - 2014-07-24 11:18 - 01089024 _____ (Microsoft Corporation) C:\Windows\system32\gpedit.dll
2014-12-26 21:57 - 2014-07-24 11:12 - 00878592 _____ (Microsoft Corporation) C:\Windows\system32\ActionCenter.dll
2014-12-26 21:57 - 2014-07-24 11:10 - 01844224 _____ (Microsoft Corporation) C:\Windows\system32\Display.dll
2014-12-26 21:57 - 2014-07-24 11:10 - 00834560 _____ (Microsoft Corporation) C:\Windows\system32\osk.exe
2014-12-26 21:57 - 2014-07-24 11:10 - 00198656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WebClnt.dll
2014-12-26 21:57 - 2014-07-24 11:10 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iasnap.dll
2014-12-26 21:57 - 2014-07-24 11:05 - 00187392 _____ (Microsoft Corporation) C:\Windows\system32\WorkFoldersShell.dll
2014-12-26 21:57 - 2014-07-24 10:52 - 00621056 _____ (Microsoft Corporation) C:\Windows\system32\comdlg32.dll
2014-12-26 21:57 - 2014-07-24 10:42 - 00206336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\powercfg.cpl
2014-12-26 21:57 - 2014-07-24 10:40 - 00557056 _____ (Microsoft Corporation) C:\Windows\system32\PrintDialogs.dll
2014-12-26 21:57 - 2014-07-24 10:39 - 00770048 _____ (Microsoft Corporation) C:\Windows\system32\WorkfoldersControl.dll
2014-12-26 21:57 - 2014-07-24 10:33 - 01741824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SRH.dll
2014-12-26 21:57 - 2014-07-24 10:32 - 01048064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gpedit.dll
2014-12-26 21:57 - 2014-07-24 10:27 - 00779264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\osk.exe
2014-12-26 21:57 - 2014-07-24 10:25 - 00832512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ActionCenter.dll
2014-12-26 21:57 - 2014-07-24 10:24 - 01817088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Display.dll
2014-12-26 21:57 - 2014-07-24 10:21 - 00134144 _____ (Microsoft Corporation) C:\Windows\system32\browser.dll
2014-12-26 21:57 - 2014-07-24 10:18 - 00018432 _____ (Microsoft Corporation) C:\Windows\system32\wlansvcpal.dll
2014-12-26 21:57 - 2014-07-24 10:14 - 00443904 _____ (Microsoft Corporation) C:\Windows\system32\wlansec.dll
2014-12-26 21:57 - 2014-07-24 10:12 - 00127488 _____ (Microsoft Corporation) C:\Windows\system32\WiFiDisplay.dll
2014-12-26 21:57 - 2014-07-24 10:11 - 00356864 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2014-12-26 21:57 - 2014-07-24 10:11 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\wshbth.dll
2014-12-26 21:57 - 2014-07-24 10:10 - 00540672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comdlg32.dll
2014-12-26 21:57 - 2014-07-24 10:04 - 00492032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PrintDialogs.dll
2014-12-26 21:57 - 2014-07-24 10:04 - 00183808 _____ (Microsoft Corp.) C:\Windows\system32\Defrag.exe
2014-12-26 21:57 - 2014-07-24 10:03 - 00324096 _____ (Microsoft Corporation) C:\Windows\system32\srvsvc.dll
2014-12-26 21:57 - 2014-07-24 10:02 - 00220160 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll
2014-12-26 21:57 - 2014-07-24 09:58 - 00105472 _____ (Microsoft Corporation) C:\Windows\system32\BluetoothApis.dll
2014-12-26 21:57 - 2014-07-24 09:53 - 01261056 _____ (Microsoft Corporation) C:\Windows\system32\gpsvc.dll
2014-12-26 21:57 - 2014-07-24 09:53 - 00449536 _____ (Microsoft Corporation) C:\Windows\system32\defragsvc.dll
2014-12-26 21:57 - 2014-07-24 09:49 - 01287680 _____ (Microsoft Corporation) C:\Windows\system32\mispace.dll
2014-12-26 21:57 - 2014-07-24 09:49 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\wlanapi.dll
2014-12-26 21:57 - 2014-07-24 09:48 - 00659968 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Bluetooth.dll
2014-12-26 21:57 - 2014-07-24 09:47 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\wcmcsp.dll
2014-12-26 21:57 - 2014-07-24 09:43 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshbth.dll
2014-12-26 21:57 - 2014-07-24 09:39 - 02397184 _____ (Microsoft Corporation) C:\Windows\system32\storagewmi.dll
2014-12-26 21:57 - 2014-07-24 09:38 - 00371200 _____ (Microsoft Corporation) C:\Windows\system32\wlanmsm.dll
2014-12-26 21:57 - 2014-07-24 09:36 - 00079872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\BluetoothApis.dll
2014-12-26 21:57 - 2014-07-24 09:32 - 01532416 _____ (Microsoft Corporation) C:\Windows\system32\wlansvc.dll
2014-12-26 21:57 - 2014-07-24 09:30 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlanapi.dll
2014-12-26 21:57 - 2014-07-24 09:29 - 00439296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Bluetooth.dll
2014-12-26 21:57 - 2014-07-24 09:28 - 00595456 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.dll
2014-12-26 21:57 - 2014-07-24 09:23 - 01404416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\storagewmi.dll
2014-12-26 21:57 - 2014-07-24 09:22 - 00487936 _____ (Microsoft Corporation) C:\Windows\system32\winspool.drv
2014-12-26 21:57 - 2014-07-24 09:21 - 01231872 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.dll
2014-12-26 21:57 - 2014-07-24 09:21 - 00302080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlanmsm.dll
2014-12-26 21:57 - 2014-07-24 09:18 - 01144320 _____ (Microsoft Corporation) C:\Windows\system32\wwanmm.dll
2014-12-26 21:57 - 2014-07-24 09:18 - 00795136 _____ (Microsoft Corporation) C:\Windows\system32\spoolsv.exe
2014-12-26 21:57 - 2014-07-24 09:16 - 00505344 _____ (Microsoft Corporation) C:\Windows\system32\VAN.dll
2014-12-26 21:57 - 2014-07-24 09:16 - 00084480 _____ (Microsoft Corporation) C:\Windows\system32\wpdbusenum.dll
2014-12-26 21:57 - 2014-07-24 09:15 - 00721408 _____ (Microsoft Corporation) C:\Windows\system32\twinapi.dll
2014-12-26 21:57 - 2014-07-24 09:15 - 00432128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Networking.dll
2014-12-26 21:57 - 2014-07-24 09:13 - 00226304 _____ (Microsoft Corporation) C:\Windows\system32\SndVolSSO.dll
2014-12-26 21:57 - 2014-07-24 09:10 - 00889344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.dll
2014-12-26 21:57 - 2014-07-24 09:10 - 00371712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winspool.drv
2014-12-26 21:57 - 2014-07-24 09:08 - 00321536 _____ (Microsoft Corporation) C:\Windows\system32\stobject.dll
2014-12-26 21:57 - 2014-07-24 09:05 - 00448000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\VAN.dll
2014-12-26 21:57 - 2014-07-24 09:01 - 01992192 _____ (Microsoft Corporation) C:\Windows\system32\XpsPrint.dll
2014-12-26 21:57 - 2014-07-24 09:00 - 02100736 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettingsAdminFlowUI.dll
2014-12-26 21:57 - 2014-07-24 08:58 - 00432640 _____ (Microsoft Corporation) C:\Windows\system32\wwanconn.dll
2014-12-26 21:57 - 2014-07-24 08:58 - 00288768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\stobject.dll
2014-12-26 21:57 - 2014-07-24 08:54 - 01290752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsPrint.dll
2014-12-26 21:57 - 2014-07-24 08:50 - 01182208 _____ (Microsoft Corporation) C:\Windows\system32\printui.dll
2014-12-26 21:57 - 2014-07-24 08:47 - 00576512 _____ (Microsoft Corporation) C:\Windows\system32\SettingSync.dll
2014-12-26 21:57 - 2014-07-24 08:44 - 01057792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\printui.dll
2014-12-26 21:57 - 2014-07-24 08:41 - 00459264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SettingSync.dll
2014-12-26 21:57 - 2014-07-24 08:28 - 01600000 _____ (Microsoft Corporation) C:\Windows\system32\workfolderssvc.dll
2014-12-26 21:57 - 2014-07-24 05:11 - 00513544 _____ () C:\Windows\SysWOW64\locale.nls
2014-12-26 21:57 - 2014-07-24 05:11 - 00513544 _____ () C:\Windows\system32\locale.nls
2014-12-26 21:57 - 2014-07-12 06:55 - 00268288 _____ (Microsoft Corporation) C:\Windows\system32\wisp.dll
2014-12-26 21:57 - 2014-07-12 05:58 - 00210944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wisp.dll
2014-12-26 21:57 - 2014-07-04 13:59 - 00295424 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ks.sys
2014-12-26 21:57 - 2014-07-04 11:29 - 00117248 _____ (Microsoft Corporation) C:\Windows\system32\AppxSip.dll
2014-12-26 21:57 - 2014-07-04 11:20 - 01656832 _____ (Microsoft Corporation) C:\Windows\system32\GdiPlus.dll
2014-12-26 21:57 - 2014-07-04 11:06 - 00095232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppxSip.dll
2014-12-26 21:57 - 2014-07-04 11:00 - 01351168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\GdiPlus.dll
2014-12-26 21:57 - 2014-07-04 10:30 - 00544768 _____ (Microsoft Corporation) C:\Windows\system32\AppxPackaging.dll
2014-12-26 21:57 - 2014-07-04 10:27 - 00474112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppxPackaging.dll
2014-12-26 21:57 - 2014-06-27 07:22 - 00246272 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys
2014-12-26 21:57 - 2014-06-26 01:32 - 01029632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mispace.dll
2014-12-26 21:57 - 2014-06-26 01:29 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\dab.dll
2014-12-26 21:57 - 2014-06-20 00:37 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2014-12-26 21:57 - 2014-06-19 03:13 - 00310080 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\volsnap.sys
2014-12-26 21:57 - 2014-06-14 06:46 - 02071552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2014-12-26 21:57 - 2014-06-07 13:46 - 00216368 _____ (Microsoft Corporation) C:\Windows\system32\rsaenh.dll
2014-12-26 21:57 - 2014-06-07 11:20 - 00189016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rsaenh.dll
2014-12-26 21:57 - 2014-06-05 15:00 - 01118040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys
2014-12-26 21:57 - 2014-06-05 11:18 - 01018368 _____ (Microsoft Corporation) C:\Windows\system32\aclui.dll
2014-12-26 21:57 - 2014-06-05 10:42 - 00889856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aclui.dll
2014-12-26 21:57 - 2014-05-31 06:00 - 01463808 _____ (Microsoft Corporation) C:\Windows\system32\wsecedit.dll
2014-12-26 21:57 - 2014-05-31 05:18 - 01319936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wsecedit.dll
2014-12-26 21:57 - 2014-05-29 07:23 - 00427008 _____ (Microsoft Corporation) C:\Windows\system32\clusapi.dll
2014-12-26 21:57 - 2014-05-29 06:25 - 00313856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\clusapi.dll
2014-12-26 21:57 - 2014-05-26 08:26 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\AppxSysprep.dll
2014-12-26 21:57 - 2014-05-10 11:12 - 00387896 _____ (Microsoft Corporation) C:\Windows\system32\bcryptprimitives.dll
2014-12-26 21:57 - 2014-05-10 09:46 - 00335680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcryptprimitives.dll
2014-12-26 21:57 - 2014-05-06 05:41 - 00486744 _____ (Microsoft Corporation) C:\Windows\system32\netcfgx.dll
2014-12-26 21:57 - 2014-05-06 01:55 - 00391000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netcfgx.dll
2014-12-26 21:57 - 2014-03-25 03:27 - 00160600 _____ (Microsoft Corporation) C:\Windows\system32\winmmbase.dll
2014-12-26 21:57 - 2014-03-25 03:27 - 00123920 _____ (Microsoft Corporation) C:\Windows\system32\winmm.dll
2014-12-26 21:57 - 2014-03-25 02:20 - 00128568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winmm.dll
2014-12-26 21:57 - 2014-03-25 02:20 - 00127544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winmmbase.dll
2014-12-26 21:39 - 2014-12-04 00:37 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-12-26 21:39 - 2014-12-04 00:09 - 00830464 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2014-12-26 21:39 - 2014-12-03 00:09 - 01083392 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-12-26 21:39 - 2014-12-03 00:09 - 00740864 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2014-12-26 21:39 - 2014-12-03 00:09 - 00412672 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2014-12-26 21:39 - 2014-12-03 00:09 - 00396288 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2014-12-26 21:39 - 2014-12-03 00:09 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2014-12-26 21:39 - 2014-11-10 03:29 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\DeviceSetupStatusProvider.dll
2014-12-26 21:39 - 2014-11-10 02:51 - 00028672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DeviceSetupStatusProvider.dll
2014-12-26 21:39 - 2014-11-01 00:57 - 01091072 _____ (Microsoft Corporation) C:\Windows\system32\MrmCoreR.dll
2014-12-26 21:39 - 2014-11-01 00:47 - 00790528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MrmCoreR.dll
2014-12-26 21:39 - 2014-10-31 00:39 - 01970432 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2014-12-26 21:39 - 2014-10-31 00:38 - 01612992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2014-12-26 21:39 - 2014-10-13 03:33 - 00116032 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2014-12-26 21:39 - 2014-10-11 01:58 - 03320320 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2014-12-26 21:39 - 2014-10-11 01:53 - 03607040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2014-12-26 21:39 - 2014-10-08 08:30 - 00110080 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll
2014-12-26 21:39 - 2014-10-08 08:09 - 00428032 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll
2014-12-26 21:39 - 2014-10-08 07:27 - 00325120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msihnd.dll
2014-12-26 21:39 - 2014-10-08 06:32 - 02773504 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2014-12-26 21:39 - 2014-10-08 06:19 - 02459136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2014-12-26 19:07 - 2015-01-08 14:34 - 00000000 ____D () C:\Program Files (x86)\OptuOn
2014-12-26 19:07 - 2014-12-26 19:07 - 00000000 ____D () C:\ProgramData\gpkmjaddgmnebabefhalcdhlohdhiejg
2014-12-26 19:03 - 2015-01-08 14:34 - 00000000 ____D () C:\Program Files (x86)\Unisales
2014-12-26 19:03 - 2014-12-26 19:03 - 00000000 ____D () C:\ProgramData\pobnbnmffkpndfpcgmkcmocainfomioa
2014-12-26 19:01 - 2014-12-26 19:01 - 00000000 ____D () C:\Program Files (x86)\Share the Wealth
2014-12-26 19:00 - 2015-01-08 14:34 - 00000000 ____D () C:\Program Files (x86)\YouettubeAAdBillocke
2014-12-26 19:00 - 2015-01-08 14:34 - 00000000 ____D () C:\Program Files (x86)\unisAlEEs
2014-12-26 19:00 - 2014-12-26 19:00 - 00000000 ____D () C:\ProgramData\jooedlmpmpnhalnchcfgihpehccbioml
2014-12-26 19:00 - 2014-12-26 19:00 - 00000000 ____D () C:\Program Files (x86)\uonaisaeles
2014-12-25 23:39 - 2014-12-25 23:39 - 00000000 ____D () C:\Users\Daniel\AppData\Local\Macromedia
2014-12-25 20:54 - 2015-01-08 21:07 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-12-25 20:54 - 2014-12-25 20:57 - 00003772 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-12-25 20:53 - 2014-12-25 20:57 - 00000000 ____D () C:\Users\Daniel\AppData\Local\Adobe
2014-12-25 13:32 - 2014-12-25 13:32 - 00001078 _____ () C:\Users\UpdatusUser\Desktop\Spielkiste.lnk
2014-12-25 13:32 - 2014-12-25 13:32 - 00000000 ____D () C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Der Planer 3
2014-12-25 13:32 - 2014-12-25 13:32 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Der Planer 3
2014-12-25 13:31 - 2014-12-25 13:31 - 00000000 ____D () C:\Program Files (x86)\phenomedia
2014-12-25 13:31 - 2014-12-25 13:31 - 00000000 ____D () C:\Program Files (x86)\bellaundben
2014-12-25 11:32 - 2015-01-07 11:23 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-12-25 11:32 - 2014-12-25 11:33 - 00000000 ____D () C:\Users\Daniel\AppData\Roaming\Mozilla
2014-12-25 11:32 - 2014-12-25 11:33 - 00000000 ____D () C:\Users\Daniel\AppData\Local\Mozilla
2014-12-25 11:32 - 2014-12-25 11:32 - 00000000 ____D () C:\ProgramData\Mozilla
2014-12-25 11:31 - 2014-12-25 11:32 - 39441776 _____ () C:\Users\Daniel\Downloads\Firefox_Setup_de34.0.5.exe
2014-12-25 11:28 - 2014-12-27 20:15 - 00000000 ____D () C:\Users\Daniel\AppData\Roaming\Skype
2014-12-25 11:28 - 2014-12-25 11:28 - 00000000 ____D () C:\Users\Daniel\AppData\Local\Skype
2014-12-25 11:02 - 2014-12-27 20:15 - 00000000 ____D () C:\ProgramData\Skype
2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Musik
2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Bilder
2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\Users\Default\Vorlagen
2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\Users\Default\Startmenü
2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung
2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\Users\Default\Lokale Einstellungen
2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\Users\Default\Eigene Dateien
2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\Users\Default\Druckumgebung
2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik
2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder
2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf
2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Anwendungsdaten
2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\Users\Default\Anwendungsdaten
2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik
2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder
2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf
2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Anwendungsdaten
2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\Programme
2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\ProgramData\Vorlagen
2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\ProgramData\Startmenü
2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\ProgramData\Microsoft\Windows\Start Menu\Programme
2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\ProgramData\Dokumente
2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\ProgramData\Anwendungsdaten
2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\Program Files\Gemeinsame Dateien
2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\Dokumente und Einstellungen
2014-12-25 00:48 - 2014-12-25 00:48 - 00002774 _____ () C:\Windows\System32\Tasks\CCleanerSkipUAC
2014-12-25 00:48 - 2014-12-25 00:48 - 00000838 _____ () C:\Users\Public\Desktop\CCleaner.lnk
2014-12-25 00:48 - 2014-12-25 00:48 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2014-12-25 00:48 - 2014-12-25 00:48 - 00000000 ____D () C:\Program Files\CCleaner
2014-12-25 00:47 - 2014-12-25 00:47 - 04188536 _____ (Piriform Ltd) C:\Users\Daniel\Downloads\ccsetup501_slim.exe
2014-12-25 00:47 - 2014-12-25 00:47 - 04188536 _____ (Piriform Ltd) C:\Users\Daniel\Downloads\ccsetup501_slim (1).exe
2014-12-25 00:44 - 2014-12-25 00:44 - 00000000 ____D () C:\Windows\3F5C371F8EA24F259D3DD0B4526E3AEA.TMP
2014-12-25 00:28 - 2014-12-25 00:28 - 00000221 _____ () C:\Users\Daniel\Desktop\Train Simulator 2015.url
2014-12-25 00:28 - 2014-12-25 00:28 - 00000000 ____D () C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2014-12-24 23:49 - 2015-01-08 15:51 - 00000000 ____D () C:\Program Files (x86)\Steam
2014-12-24 23:49 - 2014-12-24 23:49 - 00000933 _____ () C:\Users\Public\Desktop\Steam.lnk
2014-12-24 23:49 - 2014-12-24 23:49 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam
2014-12-24 23:08 - 2014-12-24 23:11 - 345295856 _____ (GIANTS Software ) C:\Users\Daniel\Downloads\FarmingSimulator2015Patch1.2DE.exe
2014-12-24 23:02 - 2014-12-25 00:45 - 00000000 ____D () C:\Users\Daniel\AppData\Roaming\NVIDIA
2014-12-24 23:01 - 2014-12-24 23:01 - 00000000 ____D () C:\Users\Daniel\Documents\My Games
2014-12-24 23:00 - 2014-12-24 23:00 - 00001295 _____ () C:\Users\Daniel\Desktop\Landwirtschafts Simulator 15 .lnk
2014-12-24 23:00 - 2014-12-24 23:00 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Landwirtschafts Simulator 2015
2014-12-24 22:55 - 2015-01-01 01:58 - 00000000 ____D () C:\Program Files (x86)\Landwirtschafts Simulator 2015
2014-12-24 22:41 - 2014-12-24 22:41 - 00000000 __SHD () C:\Users\Daniel\AppData\Local\EmieBrowserModeList
2014-12-24 21:40 - 2014-11-26 22:10 - 00714720 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-12-24 21:40 - 2014-11-26 22:10 - 00106976 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-12-24 21:14 - 2014-12-24 21:14 - 00000000 ____D () C:\Users\Daniel\AppData\Local\Acer Aspire R7 Tutorial
2014-12-24 21:07 - 2014-12-24 21:07 - 00000000 ____D () C:\Users\Public\Pokki
2014-12-24 21:04 - 2014-12-24 21:04 - 00001276 _____ () C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HD Audio-Manager.lnk
2014-12-24 21:04 - 2014-12-24 21:04 - 00000000 ____D () C:\Users\Daniel\AppData\Roaming\Atheros
2014-12-24 21:04 - 2014-12-24 21:04 - 00000000 ____D () C:\Users\Daniel\AppData\Local\iGware
2014-12-24 20:43 - 2014-12-24 20:47 - 00002177 _____ () C:\Users\Daniel\Desktop\BlueStacks App Player - CHIP Downloader.lnk
2014-12-24 20:29 - 2014-12-24 20:31 - 00000000 ____D () C:\Windows\system32\MRT
2014-12-24 20:29 - 2014-11-27 16:40 - 112710672 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-12-24 20:23 - 2014-12-24 20:23 - 00001823 _____ () C:\Users\Public\Desktop\Start BlueStacks.lnk
2014-12-24 20:22 - 2014-12-24 20:29 - 00000000 ____D () C:\Program Files (x86)\BlueStacks
2014-12-24 20:22 - 2014-12-24 20:22 - 00001880 _____ () C:\Users\Public\Desktop\Apps.lnk
2014-12-24 20:22 - 2014-12-24 20:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BlueStacks
2014-12-24 20:17 - 2014-12-25 00:49 - 00000000 ____D () C:\ProgramData\BlueStacksSetup
2014-12-24 20:17 - 2014-12-24 20:17 - 00000000 ____D () C:\Windows\System32\Tasks\Abelssoft
2014-12-24 20:17 - 2014-12-24 20:17 - 00000000 ____D () C:\Users\Daniel\AppData\Roaming\Abelssoft
2014-12-24 20:17 - 2014-12-24 20:17 - 00000000 ____D () C:\Users\Daniel\AppData\Local\Bluestacks
2014-12-24 20:17 - 2014-12-24 20:17 - 00000000 ____D () C:\Users\Daniel\AppData\Local\Abelssoft
2014-12-24 20:17 - 2014-12-24 20:17 - 00000000 ____D () C:\ProgramData\XDMessagingv4
2014-12-24 20:16 - 2014-12-24 20:16 - 00001066 _____ () C:\Users\Public\Desktop\CHIP Updater.lnk
2014-12-24 20:16 - 2014-12-24 20:16 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CHIP Updater
2014-12-24 20:16 - 2014-12-24 20:16 - 00000000 ____D () C:\Program Files (x86)\CHIP Updater
2014-12-24 20:15 - 2014-12-24 20:15 - 01174352 _____ () C:\Users\Daniel\Downloads\BlueStacks App Player - CHIP-Installer.exe
2014-12-24 20:14 - 2014-11-22 03:49 - 02885120 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-12-24 20:14 - 2014-11-22 03:34 - 06039552 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-12-24 20:14 - 2014-11-22 03:22 - 19749376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-12-24 20:14 - 2014-11-22 03:08 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-12-24 20:14 - 2014-11-22 03:05 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-12-24 20:14 - 2014-11-22 03:01 - 02277888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-12-24 20:14 - 2014-11-22 02:49 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-12-24 20:14 - 2014-11-22 02:49 - 00718848 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-12-24 20:14 - 2014-11-22 02:49 - 00373760 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-12-24 20:14 - 2014-11-22 02:46 - 02125312 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-12-24 20:14 - 2014-11-22 02:43 - 14412800 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-12-24 20:14 - 2014-11-22 02:35 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-12-24 20:14 - 2014-11-22 02:33 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-12-24 20:14 - 2014-11-22 02:29 - 04299264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-12-24 20:14 - 2014-11-22 02:23 - 00688640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-12-24 20:14 - 2014-11-22 02:23 - 00326656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-12-24 20:14 - 2014-11-22 02:22 - 02052096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-12-24 20:14 - 2014-11-22 02:15 - 01548288 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-12-24 20:14 - 2014-11-22 02:13 - 12836864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-12-24 20:14 - 2014-11-22 02:03 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-12-24 20:14 - 2014-11-22 02:00 - 01888256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-12-24 20:14 - 2014-11-22 01:56 - 01307136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-12-24 20:14 - 2014-11-22 01:54 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-12-24 20:14 - 2014-10-31 05:57 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-12-24 20:14 - 2014-10-31 05:50 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-12-24 20:14 - 2014-10-31 05:38 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-12-24 20:14 - 2014-10-31 05:30 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-12-24 20:14 - 2014-10-31 04:44 - 02865152 _____ (Microsoft Corporation) C:\Windows\system32\actxprxy.dll
2014-12-24 20:14 - 2014-10-31 04:11 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-12-24 20:14 - 2014-10-31 04:02 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-12-24 20:14 - 2014-10-31 03:26 - 01042944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\actxprxy.dll
2014-12-24 20:13 - 2014-12-24 20:14 - 51859586 _____ () C:\Users\Daniel\Downloads\com.supercell.clashofclans_6.322.3.apk
2014-12-24 20:13 - 2014-12-24 20:13 - 00000884 _____ () C:\Users\Public\Desktop\Acer Care Center.lnk
2014-12-24 20:13 - 2014-11-22 04:13 - 25059840 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-12-24 20:13 - 2014-11-22 03:50 - 00580096 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-12-24 20:13 - 2014-11-22 03:49 - 00417280 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2014-12-24 20:13 - 2014-11-22 03:48 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-12-24 20:13 - 2014-11-22 03:35 - 00812544 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2014-12-24 20:13 - 2014-11-22 03:07 - 00501248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-12-24 20:13 - 2014-11-22 03:06 - 00340992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2014-12-24 20:13 - 2014-11-22 03:06 - 00145408 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2014-12-24 20:13 - 2014-11-22 03:05 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2014-12-24 20:13 - 2014-11-22 02:59 - 01032704 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll
2014-12-24 20:13 - 2014-11-22 02:55 - 00661504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2014-12-24 20:13 - 2014-11-22 02:52 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2014-12-24 20:13 - 2014-11-22 02:34 - 00128000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2014-12-24 20:13 - 2014-11-22 02:29 - 00880128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll
2014-12-24 20:13 - 2014-11-22 02:28 - 02358272 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-12-24 20:13 - 2014-11-22 02:25 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2014-12-24 20:13 - 2014-10-31 06:12 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2014-12-24 20:13 - 2014-10-31 06:12 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2014-12-24 20:13 - 2014-10-31 06:10 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2014-12-24 20:13 - 2014-10-31 06:09 - 00064512 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2014-12-24 20:13 - 2014-10-31 06:08 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2014-12-24 20:13 - 2014-10-31 06:06 - 00237568 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2014-12-24 20:13 - 2014-10-31 06:06 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-12-24 20:13 - 2014-10-31 06:06 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-12-24 20:13 - 2014-10-31 05:56 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-12-24 20:13 - 2014-10-31 05:54 - 00132096 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2014-12-24 20:13 - 2014-10-31 05:53 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-12-24 20:13 - 2014-10-31 05:52 - 00108544 _____ (Microsoft Corporation) C:\Windows\system32\hlink.dll
2014-12-24 20:13 - 2014-10-31 05:51 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-12-24 20:13 - 2014-10-31 05:51 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-12-24 20:13 - 2014-10-31 05:40 - 00033280 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2014-12-24 20:13 - 2014-10-31 05:29 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2014-12-24 20:13 - 2014-10-31 05:29 - 00087552 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2014-12-24 20:13 - 2014-10-31 05:28 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2014-12-24 20:13 - 2014-10-31 05:25 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-12-24 20:13 - 2014-10-31 05:24 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2014-12-24 20:13 - 2014-10-31 05:19 - 00152064 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2014-12-24 20:13 - 2014-10-31 04:42 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2014-12-24 20:13 - 2014-10-31 04:28 - 00137728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2014-12-24 20:13 - 2014-10-31 04:28 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2014-12-24 20:13 - 2014-10-31 04:27 - 00152064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2014-12-24 20:13 - 2014-10-31 04:26 - 00057344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2014-12-24 20:13 - 2014-10-31 04:25 - 00011264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2014-12-24 20:13 - 2014-10-31 04:24 - 00235520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2014-12-24 20:13 - 2014-10-31 04:24 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-12-24 20:13 - 2014-10-31 04:23 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-12-24 20:13 - 2014-10-31 04:16 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-12-24 20:13 - 2014-10-31 04:15 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-12-24 20:13 - 2014-10-31 04:14 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2014-12-24 20:13 - 2014-10-31 04:13 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-12-24 20:13 - 2014-10-31 04:13 - 00099328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\hlink.dll
2014-12-24 20:13 - 2014-10-31 04:12 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-12-24 20:13 - 2014-10-31 04:03 - 00027136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2014-12-24 20:13 - 2014-10-31 03:57 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-12-24 20:13 - 2014-10-31 03:56 - 00091136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2014-12-24 20:13 - 2014-10-31 03:56 - 00090624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2014-12-24 20:13 - 2014-10-31 03:56 - 00073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2014-12-24 20:13 - 2014-10-31 03:53 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-12-24 20:13 - 2014-10-31 03:53 - 00052736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2014-12-24 20:13 - 2014-10-31 03:48 - 00130048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2014-12-24 20:13 - 2014-10-31 03:24 - 00040448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2014-12-24 20:13 - 2014-02-06 12:30 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-12-24 20:12 - 2014-11-07 05:16 - 01762840 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2014-12-24 20:12 - 2014-11-07 04:26 - 01489072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2014-12-24 20:12 - 2014-10-30 23:37 - 00129536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\poqexec.exe
2014-12-24 20:12 - 2014-10-30 23:34 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe
2014-12-24 20:12 - 2014-10-13 03:43 - 00238912 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\sdbus.sys
2014-12-24 20:12 - 2014-10-13 03:43 - 00153920 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dumpsd.sys
2014-12-24 20:12 - 2014-10-13 03:43 - 00086336 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pdc.sys
2014-12-24 20:12 - 2014-10-13 03:43 - 00039744 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\intelpep.sys
2014-12-24 20:10 - 2014-11-10 00:19 - 00991232 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2014-12-24 20:10 - 2014-11-10 00:19 - 00806400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2014-12-24 20:10 - 2014-11-10 00:18 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\pku2u.dll
2014-12-24 20:10 - 2014-11-10 00:18 - 00208896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pku2u.dll
2014-12-24 20:09 - 2014-10-23 06:48 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll
2014-12-24 20:09 - 2014-10-23 06:05 - 00072192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\packager.dll
2014-12-24 20:09 - 2014-10-17 08:01 - 00789184 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2014-12-24 20:09 - 2014-10-17 07:58 - 00602768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll
2014-12-24 20:09 - 2014-10-10 02:58 - 00177472 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2014-12-24 20:09 - 2014-10-10 02:58 - 00027456 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpvideominiport.sys
2014-12-24 20:09 - 2014-10-10 02:44 - 00563976 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2014-12-24 20:09 - 2014-10-08 08:37 - 00736768 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2014-12-24 20:09 - 2014-10-08 08:37 - 00154112 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2014-12-24 20:09 - 2014-10-08 08:34 - 00131584 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll
2014-12-24 20:09 - 2014-10-08 08:24 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\rfxvmt.dll
2014-12-24 20:09 - 2014-10-08 07:56 - 00445440 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
2014-12-24 20:09 - 2014-10-08 07:51 - 00736768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2014-12-24 20:09 - 2014-10-08 07:51 - 00154112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2014-12-24 20:09 - 2014-10-08 07:18 - 00324096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll
2014-12-24 20:09 - 2014-10-08 07:17 - 01441792 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-12-24 20:09 - 2014-10-08 06:23 - 03547648 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2014-12-24 20:09 - 2014-10-07 07:28 - 00500016 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll
2014-12-24 20:09 - 2014-10-07 07:27 - 00482872 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll
2014-12-24 20:09 - 2014-10-07 07:27 - 00394120 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll
2014-12-24 20:09 - 2014-10-07 07:27 - 00272248 _____ (Microsoft Corporation) C:\Windows\system32\audiodg.exe
2014-12-24 20:09 - 2014-10-07 07:27 - 00108432 _____ (Microsoft Corporation) C:\Windows\system32\EncDump.dll
2014-12-24 20:09 - 2014-10-07 04:34 - 00370424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll
2014-12-24 20:09 - 2014-10-07 04:34 - 00344536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AUDIOKSE.dll
2014-12-24 20:09 - 2014-10-07 04:33 - 00424544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioEng.dll
2014-12-24 20:09 - 2014-10-07 04:30 - 04182016 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-12-24 20:09 - 2014-10-07 02:54 - 00226304 _____ (Microsoft Corporation) C:\Windows\system32\AudioEndpointBuilder.dll
2014-12-24 20:09 - 2014-10-07 02:46 - 00911360 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2014-12-24 20:09 - 2014-09-27 08:13 - 00104336 _____ (Microsoft Corporation) C:\Windows\system32\ncryptsslp.dll
2014-12-24 20:09 - 2014-09-27 06:24 - 00088800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncryptsslp.dll
2014-12-24 20:09 - 2014-09-27 04:38 - 00426496 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2014-12-24 20:09 - 2014-09-27 04:30 - 00185856 _____ (Microsoft Corporation) C:\Windows\system32\dpapisrv.dll
2014-12-24 20:09 - 2014-09-27 04:17 - 00357376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2014-12-24 20:09 - 2014-08-23 06:18 - 02149376 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2014-12-24 20:09 - 2014-08-23 06:03 - 01346048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2014-12-24 20:08 - 2015-01-04 11:43 - 00000000 ____D () C:\Program Files (x86)\Google
2014-12-24 20:08 - 2014-12-24 20:08 - 00000000 ____D () C:\Users\Daniel\AppData\Local\Google
2014-12-24 20:08 - 2014-09-10 07:25 - 00474432 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2014-12-24 20:08 - 2014-09-08 04:07 - 02497344 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2014-12-24 20:08 - 2014-09-08 04:07 - 00428864 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
2014-12-24 20:08 - 2014-09-07 23:08 - 00389176 _____ () C:\Windows\system32\ApnDatabase.xml
2014-12-24 20:08 - 2014-09-04 23:30 - 00822272 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll
2014-12-24 20:08 - 2014-09-04 23:21 - 01053184 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll
2014-12-24 20:08 - 2014-09-04 04:05 - 00836176 _____ (Microsoft Corporation) C:\Windows\system32\mfmp4srcsnk.dll
2014-12-24 20:08 - 2014-09-04 03:22 - 00670384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfmp4srcsnk.dll
2014-12-24 20:08 - 2014-09-04 02:01 - 00448512 _____ (Microsoft Corporation) C:\Windows\system32\puiobj.dll
2014-12-24 20:08 - 2014-09-04 01:32 - 00334336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\puiobj.dll
2014-12-24 20:08 - 2014-09-04 01:10 - 00118272 _____ (Microsoft Corporation) C:\Windows\system32\winbici.dll
2014-12-24 20:08 - 2014-08-31 01:17 - 00148800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBSTOR.SYS
2014-12-24 20:08 - 2014-08-31 01:15 - 21197152 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2014-12-24 20:08 - 2014-08-30 23:59 - 18723112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2014-12-24 20:08 - 2014-08-30 23:05 - 00615424 _____ (Microsoft Corporation) C:\Windows\system32\FXSCOMEX.dll
2014-12-24 20:08 - 2014-08-30 22:58 - 00275968 _____ (Microsoft Corporation) C:\Windows\system32\FXSAPI.dll
2014-12-24 20:08 - 2014-08-30 22:04 - 00941568 _____ (Microsoft Corporation) C:\Windows\system32\MFMediaEngine.dll
2014-12-24 20:08 - 2014-08-30 21:53 - 00239104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FXSAPI.dll
2014-12-24 20:08 - 2014-08-30 21:17 - 00799744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFMediaEngine.dll
2014-12-24 20:08 - 2014-08-28 03:55 - 07484224 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2014-12-24 20:08 - 2014-08-28 01:21 - 02480128 _____ (Microsoft Corporation) C:\Windows\system32\WsmSvc.dll
2014-12-24 20:08 - 2014-08-28 01:06 - 02030592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmSvc.dll
2014-12-24 20:08 - 2014-08-23 06:14 - 13424128 _____ (Microsoft Corporation) C:\Windows\system32\twinui.dll
2014-12-24 20:08 - 2014-08-23 06:04 - 11820544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.dll
2014-12-24 20:08 - 2014-08-23 05:50 - 02714112 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers.dll
2014-12-24 20:08 - 2014-08-02 01:51 - 00545792 _____ (Microsoft Corporation) C:\Windows\system32\untfs.dll
2014-12-24 20:08 - 2014-08-02 01:35 - 00485376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\untfs.dll
2014-12-24 20:08 - 2014-07-24 12:22 - 00308736 _____ (Microsoft Corporation) C:\Windows\system32\compstui.dll
2014-12-24 20:08 - 2014-07-24 10:53 - 00215552 _____ (Microsoft Corporation) C:\Windows\system32\prnntfy.dll
2014-12-24 20:08 - 2014-07-24 10:13 - 00195584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\prnntfy.dll
2014-12-24 20:08 - 2014-07-24 09:20 - 00187392 _____ (Microsoft Corporation) C:\Windows\system32\puiapi.dll
2014-12-24 20:08 - 2014-07-24 09:08 - 00162816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\puiapi.dll
2014-12-24 20:08 - 2014-07-24 08:49 - 00263680 _____ (Microsoft Corporation) C:\Windows\system32\DafPrintProvider.dll
2014-12-24 20:08 - 2014-07-24 08:43 - 00200192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DafPrintProvider.dll
2014-12-24 20:07 - 2014-12-24 20:07 - 42184784 _____ (Google Inc.) C:\Users\Daniel\Downloads\ChromeStandaloneSetup.exe
2014-12-24 20:07 - 2014-10-18 10:55 - 00055776 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2014-12-24 20:07 - 2014-10-18 09:09 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2014-12-24 20:07 - 2014-10-18 09:09 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2014-12-24 20:07 - 2014-10-18 08:25 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2014-12-24 20:07 - 2014-10-18 07:50 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\wuaext.dll
2014-12-24 20:07 - 2014-10-18 07:38 - 03557376 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2014-12-24 20:07 - 2014-10-18 07:27 - 00035840 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2014-12-24 20:07 - 2014-10-18 07:26 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2014-12-24 20:07 - 2014-10-18 07:23 - 00407552 _____ (Microsoft Corporation) C:\Windows\system32\WUSettingsProvider.dll
2014-12-24 20:07 - 2014-10-18 07:23 - 00095744 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2014-12-24 20:07 - 2014-10-18 07:21 - 00894976 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2014-12-24 20:07 - 2014-10-18 07:20 - 01714176 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2014-12-24 20:07 - 2014-10-18 07:14 - 00124928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2014-12-24 20:07 - 2014-10-18 07:14 - 00029696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2014-12-24 20:07 - 2014-10-18 07:12 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2014-12-24 20:07 - 2014-10-18 07:11 - 00723968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2014-12-24 20:07 - 2014-09-22 05:38 - 01519488 _____ (Microsoft Corporation) C:\Windows\system32\user32.dll
2014-12-24 20:07 - 2014-09-22 04:06 - 00258368 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdFilter.sys
2014-12-24 20:07 - 2014-09-22 04:06 - 00114496 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdNisDrv.sys
2014-12-24 20:07 - 2014-09-22 03:49 - 00035320 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdBoot.sys
2014-12-24 20:07 - 2014-09-19 01:16 - 01346048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user32.dll
2014-12-24 20:07 - 2014-09-02 23:08 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\winshfhc.dll
2014-12-24 20:07 - 2014-09-02 23:08 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winshfhc.dll
2014-12-24 20:06 - 2014-08-16 05:08 - 01507648 _____ (Microsoft Corporation) C:\Windows\system32\propsys.dll
2014-12-24 20:06 - 2014-08-16 05:01 - 01710184 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2014-12-24 20:06 - 2014-08-16 04:58 - 01112512 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2014-12-24 20:06 - 2014-08-16 04:16 - 01205976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\propsys.dll
2014-12-24 20:06 - 2014-08-16 04:03 - 01467384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2014-12-24 20:06 - 2014-08-16 02:31 - 00838144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2014-12-24 20:06 - 2014-08-16 02:04 - 00359424 _____ (Microsoft Corporation) C:\Windows\system32\Wldap32.dll
2014-12-24 20:06 - 2014-08-16 01:58 - 00287744 _____ (Microsoft Corporation) C:\Windows\system32\SystemEventsBrokerServer.dll
2014-12-24 20:06 - 2014-08-16 01:53 - 00118272 _____ (Microsoft Corporation) C:\Windows\system32\httpprxm.dll
2014-12-24 20:06 - 2014-08-16 01:46 - 00290816 _____ (Microsoft Corporation) C:\Windows\system32\ProximityService.dll
2014-12-24 20:06 - 2014-08-16 01:45 - 00267776 _____ (Microsoft Corporation) C:\Windows\system32\bisrv.dll
2014-12-24 20:06 - 2014-08-16 01:43 - 00321024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Wldap32.dll
2014-12-24 20:06 - 2014-08-16 01:43 - 00075776 _____ (Microsoft Corporation) C:\Windows\system32\adhsvc.dll
2014-12-24 20:06 - 2014-08-16 01:31 - 00914432 _____ (Microsoft Corporation) C:\Windows\system32\iphlpsvc.dll
2014-12-24 20:06 - 2014-08-16 01:31 - 00286208 _____ (Microsoft Corporation) C:\Windows\system32\pcsvDevice.dll
2014-12-24 20:06 - 2014-08-16 01:29 - 00249344 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2014-12-24 20:06 - 2014-08-16 01:23 - 01106432 _____ (Microsoft Corporation) C:\Windows\system32\SearchFolder.dll
2014-12-24 20:06 - 2014-08-16 01:22 - 00717824 _____ (Microsoft Corporation) C:\Windows\system32\SkyDriveTelemetry.dll
2014-12-24 20:06 - 2014-08-16 01:22 - 00286208 _____ (Microsoft Corporation) C:\Windows\system32\SkyDriveShell.dll
2014-12-24 20:06 - 2014-08-16 01:19 - 00189952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2014-12-24 20:06 - 2014-08-16 01:18 - 04758528 _____ (Microsoft Corporation) C:\Windows\system32\SyncEngine.dll
2014-12-24 20:06 - 2014-08-16 01:17 - 08757760 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Search.dll
2014-12-24 20:06 - 2014-08-16 01:14 - 00265216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SkyDriveShell.dll
2014-12-24 20:06 - 2014-08-16 01:13 - 06649344 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2014-12-24 20:06 - 2014-08-16 01:13 - 05902848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Search.dll
2014-12-24 20:06 - 2014-08-16 01:13 - 00840192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchFolder.dll
2014-12-24 20:06 - 2014-08-16 01:11 - 00920064 _____ (Microsoft Corporation) C:\Windows\system32\WSShared.dll
2014-12-24 20:06 - 2014-08-16 01:10 - 01120768 _____ (Microsoft Corporation) C:\Windows\system32\SkyDrive.exe
2014-12-24 20:06 - 2014-08-16 01:08 - 05777408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2014-12-24 20:06 - 2014-08-16 01:07 - 00756224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSShared.dll
2014-12-24 20:06 - 2014-07-24 16:28 - 00468288 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBHUB3.SYS
2014-12-24 20:06 - 2014-07-24 12:42 - 01200640 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bthport.sys
2014-12-24 20:06 - 2014-07-24 12:41 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bridge.sys
2014-12-24 20:06 - 2014-07-24 11:09 - 01057280 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll
2014-12-24 20:06 - 2014-07-24 10:27 - 00855552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdvidcrl.dll
2014-12-24 20:05 - 2014-09-04 01:12 - 00590336 _____ (Microsoft Corporation) C:\Windows\system32\rastls.dll
2014-12-24 20:05 - 2014-09-04 01:01 - 00514048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rastls.dll
2014-12-24 20:05 - 2014-06-09 23:13 - 00035480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TsWpfWrp.exe
2014-12-24 20:05 - 2014-06-09 23:13 - 00035480 _____ (Microsoft Corporation) C:\Windows\system32\TsWpfWrp.exe
2014-12-24 20:04 - 2014-08-23 08:48 - 02374784 _____ (Microsoft Corporation) C:\Windows\explorer.exe
2014-12-24 20:04 - 2014-08-23 08:13 - 02084520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\explorer.exe
2014-12-24 20:04 - 2014-08-23 07:10 - 00068096 _____ (Microsoft Corporation) C:\Windows\system32\UXInit.dll
2014-12-24 20:04 - 2014-08-23 06:32 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UXInit.dll
2014-12-24 20:04 - 2014-08-23 05:33 - 00796672 _____ (Microsoft Corporation) C:\Windows\system32\uDWM.dll
2014-12-24 20:04 - 2014-08-15 01:36 - 00146752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msgpioclx.sys
2014-12-24 20:04 - 2014-08-02 01:18 - 01212928 _____ (Microsoft Corporation) C:\Windows\system32\schedsvc.dll
2014-12-24 20:04 - 2014-07-30 02:56 - 00299520 _____ (Microsoft Corporation) C:\Windows\system32\WSDMon.dll
2014-12-24 20:04 - 2014-07-29 06:22 - 00205824 _____ (Microsoft Corporation) C:\Windows\system32\tcpmon.dll
2014-12-24 20:03 - 2014-07-24 04:20 - 00875688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcr120_clr0400.dll
2014-12-24 20:03 - 2014-07-24 04:20 - 00869544 _____ (Microsoft Corporation) C:\Windows\system32\msvcr120_clr0400.dll
2014-12-24 20:02 - 2014-08-07 03:12 - 01336624 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2014-12-24 20:02 - 2014-08-02 04:56 - 01064448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2014-12-24 20:02 - 2014-07-15 19:16 - 03048880 _____ (Microsoft Corporation) C:\Windows\system32\WpcMon.exe
2014-12-24 20:02 - 2014-07-15 09:29 - 03118080 _____ (Microsoft Corporation) C:\Windows\system32\Wpc.dll
2014-12-24 20:02 - 2014-07-15 09:22 - 02861056 _____ (Microsoft Corporation) C:\Windows\system32\WpcWebSync.dll
2014-12-24 20:02 - 2014-07-15 09:03 - 02344448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Wpc.dll
2014-12-24 20:02 - 2014-07-12 05:17 - 00623616 _____ (Microsoft Corporation) C:\Windows\system32\MDMAgent.exe
2014-12-24 20:02 - 2014-05-01 14:31 - 00055328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wpcfltr.sys
2014-12-24 20:01 - 2014-06-20 02:48 - 01273184 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2014-12-24 20:01 - 2014-06-20 00:52 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2014-12-24 20:01 - 2014-06-13 02:15 - 00517528 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll
2014-12-24 20:01 - 2014-06-13 02:14 - 01557848 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2014-12-24 20:01 - 2014-06-13 01:10 - 00406400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll
2014-12-24 20:01 - 2014-06-06 12:34 - 02133504 _____ (Microsoft Corporation) C:\Windows\system32\dwmcore.dll
2014-12-24 20:01 - 2014-06-02 03:10 - 00423768 _____ (Microsoft Corporation) C:\Windows\system32\hal.dll
2014-12-24 20:01 - 2014-05-31 11:07 - 00440664 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2014-12-24 20:01 - 2014-05-31 11:07 - 00089944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2014-12-24 20:01 - 2014-05-31 11:07 - 00027480 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2014-12-24 20:01 - 2014-05-31 07:30 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2014-12-24 20:01 - 2014-05-31 07:27 - 00110592 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFPf.sys
2014-12-24 20:01 - 2014-05-31 07:26 - 00227840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFRd.sys
2014-12-24 20:01 - 2014-05-31 05:01 - 00284672 _____ (Microsoft Corporation) C:\Windows\system32\WUDFHost.exe
2014-12-24 20:01 - 2014-05-31 05:01 - 00209408 _____ (Microsoft Corporation) C:\Windows\system32\WUDFPlatform.dll
2014-12-24 20:01 - 2014-05-31 05:01 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\WUDFSvc.dll
2014-12-24 20:01 - 2014-05-27 10:56 - 00323584 _____ (Microsoft Corporation) C:\Windows\system32\DaOtpCredentialProvider.dll
2014-12-24 20:01 - 2014-05-27 10:53 - 00270848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DaOtpCredentialProvider.dll
2014-12-24 19:57 - 2014-06-06 14:04 - 00586240 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2014-12-24 19:57 - 2014-06-06 13:18 - 00488960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2014-12-24 19:57 - 2014-05-31 11:06 - 00555736 _____ (Microsoft Corporation) C:\Windows\system32\twinapi.appcore.dll
2014-12-24 19:57 - 2014-05-31 03:37 - 01054208 _____ (Microsoft Corporation) C:\Windows\system32\twinui.appcore.dll
2014-12-24 19:57 - 2014-05-31 03:35 - 00828928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.appcore.dll
2014-12-24 19:57 - 2014-05-30 04:03 - 00563200 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2014-12-24 19:47 - 2014-05-19 07:31 - 00057856 _____ (Microsoft Corporation) C:\Windows\system32\drvcfg.exe
2014-12-24 19:47 - 2014-05-19 07:21 - 00110592 _____ (Microsoft Corporation) C:\Windows\system32\drvinst.exe
2014-12-24 19:47 - 2014-05-19 06:23 - 00098816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drvinst.exe
2014-12-24 19:47 - 2014-05-01 06:24 - 02834944 _____ (Microsoft Corporation) C:\Windows\system32\wpccpl.dll
2014-12-24 19:47 - 2014-04-30 05:43 - 01975296 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2014-12-24 19:47 - 2014-04-30 05:26 - 01345536 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2014-12-24 19:47 - 2014-04-30 04:47 - 01509888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2014-12-24 19:39 - 2014-12-24 19:39 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_LocationProvider_01_11_00.Wdf
2014-12-24 19:38 - 2015-01-08 16:16 - 00003942 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{61AB47E5-AB5A-4D8B-89BB-14B1822A6C56}
2014-12-24 19:38 - 2014-12-24 19:38 - 00000000 __SHD () C:\Users\Daniel\AppData\Local\EmieUserList
2014-12-24 19:38 - 2014-12-24 19:38 - 00000000 __SHD () C:\Users\Daniel\AppData\Local\EmieSiteList
2014-12-24 19:33 - 2015-01-08 21:38 - 00003596 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-223822767-1807346583-171944255-1002
2014-12-24 19:31 - 2014-12-24 19:31 - 00002001 _____ () C:\Users\Public\Desktop\abMedia.lnk
2014-12-24 19:29 - 2014-12-24 19:29 - 00000000 ____D () C:\Users\Public\OEM
2014-12-24 19:28 - 2015-01-08 15:55 - 00000000 ____D () C:\Users\Daniel\AppData\Local\CrashDumps
2014-12-24 19:28 - 2014-12-24 20:22 - 00000000 ____D () C:\ProgramData\BlueStacks
2014-12-24 19:28 - 2014-12-24 19:28 - 00003334 _____ () C:\Windows\System32\Tasks\AcerCloud
2014-12-24 19:28 - 2014-12-24 19:28 - 00001969 _____ () C:\Users\Public\Desktop\abDocs.lnk
2014-12-24 19:28 - 2014-12-24 19:28 - 00000000 ____D () C:\Users\Daniel\AppData\Roaming\WildTangent
2014-12-24 19:27 - 2015-01-08 15:52 - 00000000 ___RD () C:\Users\Daniel\OneDrive
2014-12-24 19:27 - 2014-12-24 19:28 - 00002102 _____ () C:\Users\Public\Desktop\Acer Portal.lnk
2014-12-24 19:26 - 2015-01-06 14:56 - 00000000 ____D () C:\Users\Daniel\AppData\Local\clear.fi
2014-12-24 19:26 - 2014-12-24 19:26 - 00000000 ____D () C:\Users\Daniel\PicStream
2014-12-24 19:13 - 2014-12-24 19:13 - 00000000 ____D () C:\Users\Daniel\AppData\Local\AOP SDK
2014-12-24 19:12 - 2014-12-24 19:12 - 00000000 ____D () C:\Users\Daniel\AppData\Roaming\Macromedia
2014-12-24 19:12 - 2014-12-24 19:12 - 00000000 ____D () C:\Program Files (x86)\OEM
2014-12-24 19:11 - 2015-01-08 12:57 - 00001013 _____ () C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-12-24 19:11 - 2014-12-31 16:20 - 00000000 ____D () C:\Users\Daniel\AppData\Local\Packages
2014-12-24 19:11 - 2014-12-24 21:17 - 00000000 ____D () C:\Users\Daniel\AppData\Local\VirtualStore
2014-12-24 19:11 - 2014-12-24 19:11 - 00001786 _____ () C:\Users\Public\Desktop\Online kaufen.lnk
2014-12-24 19:11 - 2014-12-24 19:11 - 00000180 _____ () C:\Windows\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2014-12-24 19:11 - 2014-12-24 19:11 - 00000000 ____D () C:\Windows\System32\Tasks\WPD
2014-12-24 19:11 - 2014-12-24 19:11 - 00000000 ____D () C:\Windows\oem
2014-12-24 19:11 - 2014-12-24 19:11 - 00000000 ____D () C:\Users\Daniel\AppData\Roaming\Adobe
2014-12-24 19:11 - 2014-12-24 19:11 - 00000000 ____D () C:\Users\Daniel\AppData\Local\OEM
2014-12-24 19:11 - 2014-12-24 19:11 - 00000000 ____D () C:\ProgramData\OEM_YAHOO
2014-12-24 19:11 - 2014-12-24 19:11 - 00000000 ____D () C:\Program Files\Accessory Store
2014-12-24 19:10 - 2014-12-26 15:58 - 00000000 ____D () C:\Users\Daniel
2014-12-24 19:10 - 2014-12-24 19:10 - 00000020 ___SH () C:\Users\Daniel\ntuser.ini
2014-12-24 19:10 - 2014-12-24 19:10 - 00000000 _SHDL () C:\Users\Daniel\Vorlagen
2014-12-24 19:10 - 2014-12-24 19:10 - 00000000 _SHDL () C:\Users\Daniel\Startmenü
2014-12-24 19:10 - 2014-12-24 19:10 - 00000000 _SHDL () C:\Users\Daniel\Netzwerkumgebung
2014-12-24 19:10 - 2014-12-24 19:10 - 00000000 _SHDL () C:\Users\Daniel\Lokale Einstellungen
2014-12-24 19:10 - 2014-12-24 19:10 - 00000000 _SHDL () C:\Users\Daniel\Eigene Dateien
2014-12-24 19:10 - 2014-12-24 19:10 - 00000000 _SHDL () C:\Users\Daniel\Druckumgebung
2014-12-24 19:10 - 2014-12-24 19:10 - 00000000 _SHDL () C:\Users\Daniel\Documents\Eigene Musik
2014-12-24 19:10 - 2014-12-24 19:10 - 00000000 _SHDL () C:\Users\Daniel\Documents\Eigene Bilder
2014-12-24 19:10 - 2014-12-24 19:10 - 00000000 _SHDL () C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-12-24 19:10 - 2014-12-24 19:10 - 00000000 _SHDL () C:\Users\Daniel\AppData\Local\Verlauf
2014-12-24 19:10 - 2014-12-24 19:10 - 00000000 _SHDL () C:\Users\Daniel\AppData\Local\Anwendungsdaten
2014-12-24 19:10 - 2014-12-24 19:10 - 00000000 _SHDL () C:\Users\Daniel\Anwendungsdaten
2014-12-24 19:10 - 2014-07-25 22:18 - 00000000 ___RD () C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-12-24 19:10 - 2014-03-18 11:33 - 00000000 ___RD () C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2014-12-24 19:10 - 2014-03-18 11:13 - 00000369 _____ () C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pictures.lnk
2014-12-24 19:10 - 2014-03-18 11:13 - 00000369 _____ () C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Documents.lnk
2014-12-24 19:10 - 2013-08-22 16:36 - 00000000 ___RD () C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-12-24 19:10 - 2013-08-22 16:36 - 00000000 ____D () C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-01-08 22:00 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\sru
2015-01-08 20:24 - 2014-08-31 00:14 - 00765582 _____ () C:\Windows\system32\perfh007.dat
2015-01-08 20:24 - 2014-08-31 00:14 - 00159366 _____ () C:\Windows\system32\perfc007.dat
2015-01-08 20:24 - 2014-03-18 11:03 - 01776918 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-01-08 14:43 - 2013-08-22 15:45 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-01-08 14:42 - 2013-08-22 14:25 - 00262144 ___SH () C:\Windows\system32\config\BBI
2015-01-08 14:35 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\Vss
2015-01-08 13:26 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\AppReadiness
2015-01-07 08:09 - 2014-08-30 14:59 - 00000000 ____D () C:\Program Files (x86)\AGEIA Technologies
2015-01-07 08:09 - 2014-07-25 22:20 - 00000000 ____D () C:\Program Files (x86)\Acer
2015-01-06 23:00 - 2014-07-25 22:28 - 00000000 ____D () C:\ProgramData\McAfee
2015-01-06 23:00 - 2014-07-25 22:28 - 00000000 ____D () C:\Program Files\Common Files\mcafee
2015-01-06 22:48 - 2014-07-25 22:21 - 00000000 ____D () C:\ProgramData\Package Cache
2015-01-06 22:40 - 2013-08-22 16:36 - 00000000 ___HD () C:\Windows\ELAMBKUP
2015-01-06 22:40 - 2013-08-22 14:25 - 00262144 ___SH () C:\Windows\system32\config\ELAM
2015-01-06 22:38 - 2014-07-25 22:00 - 00000000 ____D () C:\Users\Administrator
2015-01-06 15:09 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\LiveKernelReports
2015-01-06 14:58 - 2014-07-25 22:21 - 00000000 ___SD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acer
2015-01-03 21:54 - 2013-08-22 15:44 - 00347808 _____ () C:\Windows\system32\FNTCACHE.DAT
2015-01-03 21:15 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\NDF
2015-01-02 02:21 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\rescache
2015-01-01 01:46 - 2014-03-18 10:45 - 00000000 ____D () C:\Program Files\Windows Journal
2015-01-01 01:46 - 2013-08-22 16:36 - 00000000 ___RD () C:\Windows\ToastData
2015-01-01 01:46 - 2013-08-22 16:36 - 00000000 ___RD () C:\Windows\ImmersiveControlPanel
2015-01-01 01:46 - 2013-08-22 16:36 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2015-01-01 01:46 - 2013-08-22 16:36 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2015-01-01 01:46 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\SysWOW64\setup
2015-01-01 01:46 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\SysWOW64\InputMethod
2015-01-01 01:46 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\setup
2015-01-01 01:46 - 2013-08-22 14:36 - 00000000 ____D () C:\Windows\system32\oobe
2014-12-31 00:11 - 2013-08-22 16:20 - 00000000 ____D () C:\Windows\CbsTemp
2014-12-27 00:15 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files\Common Files\microsoft shared
2014-12-25 01:02 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files\Windows NT
2014-12-25 01:02 - 2013-08-22 14:36 - 00000000 __RHD () C:\Users\Default
2014-12-25 00:48 - 2014-07-25 22:58 - 00000000 ____D () C:\Windows\Panther
2014-12-24 21:36 - 2013-08-22 16:36 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-12-24 21:36 - 2013-08-22 16:36 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-12-24 21:36 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\WinStore
2014-12-24 21:36 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\sr-Latn-RS
2014-12-24 21:36 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\sr-Latn-CS
2014-12-24 21:36 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\PolicyDefinitions
2014-12-24 21:36 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\MediaViewer
2014-12-24 21:36 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\FileManager
2014-12-24 21:36 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\Camera
2014-12-24 21:36 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files\Windows Defender
2014-12-24 21:36 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files (x86)\Windows Defender
2014-12-24 20:22 - 2013-08-22 16:36 - 00000000 __RHD () C:\Users\Public\Libraries
2014-12-24 20:13 - 2014-07-25 22:20 - 00000000 ____D () C:\ProgramData\acer
2014-12-24 19:45 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\restore
2014-12-24 19:28 - 2014-07-25 22:24 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2014-12-24 19:28 - 2014-07-25 22:23 - 00000000 ____D () C:\ProgramData\WildTangent
2014-12-24 19:28 - 2014-07-25 22:23 - 00000000 ____D () C:\Program Files (x86)\WildTangent Games
2014-12-24 19:26 - 2014-07-25 22:57 - 00000000 ___HD () C:\OEM
2014-12-24 19:26 - 2014-07-25 22:21 - 00000000 ____D () C:\ProgramData\OEM

Some content of TEMP:
====================
C:\Users\Daniel\AppData\Local\Temp\avgnt.exe
C:\Users\Daniel\AppData\Local\Temp\Quarantine.exe
C:\Users\Daniel\AppData\Local\Temp\sqlite3.dll


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-01-07 07:25

==================== End Of Log ============================

--- --- ---

--- --- ---

schrauber · 08.01.2015, 23:03

Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:

ATTFilter

C:\Program Files (x86)\6228cefd-9c9c-4d28-ba89-4fea4b5b07c7\e5636612-7284-48bb-9fee-81e1feaac113.dll

C:\Program Files (x86)\Acer\d8ab63e2-cb9c-41d9-9a96-69f41c5fb27c.dll

C:\Program Files (x86)\AGEIA Technologies\6228cefd-9c9c-4d28-ba89-4fea4b5b07c7.dll

C:\Program Files (x86)\d8ab63e2-cb9c-41d9-9a96-69f41c5fb27c\077865c7-e029-46fc-97b7-f0d0c9f4bf99.dll

C:\ProgramData\gpkmjaddgmnebabefhalcdhlohdhiejg

C:\ProgramData\jooedlmpmpnhalnchcfgihpehccbioml

C:\ProgramData\pobnbnmffkpndfpcgmkcmocainfomioa

C:\Users\Daniel\AppData\Roaming\KYBEFZU

C:\Users\Daniel\AppData\Roaming\XSHNPL

C:\Users\Daniel\AppData\Roaming\YDYXQG

C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\prefs.js

C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\4@ckIbAWyX.com\content\bg.js

C:\Users\Daniel\Downloads\BlueStacks App Player - CHIP-Installer.exe
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
S2 5936b827; "C:\Windows\system32\rundll32.exe" "c:\Program Files (x86)\Optimizer Pro 3.20\OptProMon.dll",ENT
c:\Program Files (x86)\Optimizer Pro 3.20

Task: {005282E6-5CC6-4BF7-98C5-90CBAB18AF32} - System32\Tasks\b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-1 => C:\Program Files (x86)\TheHDvid-Codec V10\TheHDvid-Codec V10-codedownloader.exe <==== ATTENTION

Task: {09A13E77-54E7-45B9-A0E3-246DFCA6DFCE} - System32\Tasks\d187d13c-eb9d-4d47-bf31-4a5c3088774b-6 => C:\Program Files (x86)\CinemaP-1.9cV02.01\d187d13c-eb9d-4d47-bf31-4a5c3088774b-6.exe <==== ATTENTION

Task: {2CDB4F58-A85B-44BA-8169-B17F48E4A352} - System32\Tasks\d187d13c-eb9d-4d47-bf31-4a5c3088774b-4 => C:\Program Files (x86)\CinemaP-1.9cV02.01\d187d13c-eb9d-4d47-bf31-4a5c3088774b-4.exe <==== ATTENTION

Task: {3D579731-9F71-434C-A882-4C8FFDB72088} - System32\Tasks\YDYXQG => C:\Users\Daniel\AppData\Roaming\YDYXQG.exe <==== ATTENTION

Task: {454BA2C3-F94E-44A5-8F7E-8A563168E5A2} - System32\Tasks\d187d13c-eb9d-4d47-bf31-4a5c3088774b-1 => C:\Program Files (x86)\CinemaP-1.9cV02.01\CinemaP-1.9cV02.01-codedownloader.exe <==== ATTENTION

Task: {46BFCD9C-18CA-4CF4-A3C6-3F7334F6CE39} - System32\Tasks\XSHNPL => C:\Users\Daniel\AppData\Roaming\XSHNPL.exe <==== ATTENTION

Task: {7322D2DA-6C4A-4CDE-9632-076A5631BA28} - System32\Tasks\d187d13c-eb9d-4d47-bf31-4a5c3088774b-5_user => C:\Program Files (x86)\CinemaP-1.9cV02.01\d187d13c-eb9d-4d47-bf31-4a5c3088774b-5.exe <==== ATTENTION

Task: {73D1D1E0-573E-4AFB-9EF2-26758087333A} - System32\Tasks\d187d13c-eb9d-4d47-bf31-4a5c3088774b-3 => C:\Program Files (x86)\CinemaP-1.9cV02.01\d187d13c-eb9d-4d47-bf31-4a5c3088774b-3.exe <==== ATTENTION

Task: {77E4DE76-2464-4DE3-BD2C-C27DF78E4D75} - System32\Tasks\d187d13c-eb9d-4d47-bf31-4a5c3088774b-7 => C:\Program Files (x86)\CinemaP-1.9cV02.01\d187d13c-eb9d-4d47-bf31-4a5c3088774b-7.exe <==== ATTENTION

Task: {7A635968-AEB1-476F-9CE0-C3010E47BAC9} - System32\Tasks\b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-5_user => C:\Program Files (x86)\TheHDvid-Codec V10\b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-5.exe <==== ATTENTION

Task: {9B38F77E-6D57-4AF2-8A8A-6F7BFDE11C0B} - System32\Tasks\KYBEFZU => C:\Users\Daniel\AppData\Roaming\KYBEFZU.exe <==== ATTENTION

Task: {CE01B344-EB87-4532-A1F4-E725F78EB745} - System32\Tasks\b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-7 => C:\Program Files (x86)\TheHDvid-Codec V10\b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-7.exe <==== ATTENTION

Task: {CF01AD8B-4104-4DBC-8D89-7E8DD5453BD9} - System32\Tasks\d187d13c-eb9d-4d47-bf31-4a5c3088774b-5 => C:\Program Files (x86)\CinemaP-1.9cV02.01\d187d13c-eb9d-4d47-bf31-4a5c3088774b-5.exe <==== ATTENTION

Task: {D1A4EBBE-45B0-44B0-81FD-BF817F4EEDDF} - System32\Tasks\b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-4 => C:\Program Files (x86)\TheHDvid-Codec V10\b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-4.exe <==== ATTENTION

Task: {D8B8C766-27EB-45EC-8EE9-48E488196B62} - System32\Tasks\b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-6 => C:\Program Files (x86)\TheHDvid-Codec V10\b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-6.exe <==== ATTENTION

Task: {E744ED2B-A072-4D77-99F5-E32DBFB79ACF} - System32\Tasks\b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-5 => C:\Program Files (x86)\TheHDvid-Codec V10\b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-5.exe <==== ATTENTION

Task: C:\Windows\Tasks\b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-1.job => C:\Program Files (x86)\TheHDvid-Codec V10\TheHDvid-Codec V10-codedownloader.exe <==== ATTENTION

Task: C:\Windows\Tasks\b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-4.job => C:\Program Files (x86)\TheHDvid-Codec V10\b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-4.exe <==== ATTENTION

Task: C:\Windows\Tasks\b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-5.job => C:\Program Files (x86)\TheHDvid-Codec V10\b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-5.exe <==== ATTENTION

Task: C:\Windows\Tasks\b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-5_user.job => C:\Program Files (x86)\TheHDvid-Codec V10\b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-5.exe <==== ATTENTION

Task: C:\Windows\Tasks\b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-6.job => C:\Program Files (x86)\TheHDvid-Codec V10\b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-6.exe <==== ATTENTION

Task: C:\Windows\Tasks\b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-7.job => C:\Program Files (x86)\TheHDvid-Codec V10\b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-7.exe <==== ATTENTION

Task: C:\Windows\Tasks\d187d13c-eb9d-4d47-bf31-4a5c3088774b-1.job => C:\Program Files (x86)\CinemaP-1.9cV02.01\CinemaP-1.9cV02.01-codedownloader.exe <==== ATTENTION

Task: C:\Windows\Tasks\d187d13c-eb9d-4d47-bf31-4a5c3088774b-3.job => C:\Program Files (x86)\CinemaP-1.9cV02.01\d187d13c-eb9d-4d47-bf31-4a5c3088774b-3.exe <==== ATTENTION

Task: C:\Windows\Tasks\d187d13c-eb9d-4d47-bf31-4a5c3088774b-4.job => C:\Program Files (x86)\CinemaP-1.9cV02.01\d187d13c-eb9d-4d47-bf31-4a5c3088774b-4.exe <==== ATTENTION

Task: C:\Windows\Tasks\d187d13c-eb9d-4d47-bf31-4a5c3088774b-5.job => C:\Program Files (x86)\CinemaP-1.9cV02.01\d187d13c-eb9d-4d47-bf31-4a5c3088774b-5.exe <==== ATTENTION

Task: C:\Windows\Tasks\d187d13c-eb9d-4d47-bf31-4a5c3088774b-5_user.job => C:\Program Files (x86)\CinemaP-1.9cV02.01\d187d13c-eb9d-4d47-bf31-4a5c3088774b-5.exe <==== ATTENTION

Task: C:\Windows\Tasks\d187d13c-eb9d-4d47-bf31-4a5c3088774b-6.job => C:\Program Files (x86)\CinemaP-1.9cV02.01\d187d13c-eb9d-4d47-bf31-4a5c3088774b-6.exe <==== ATTENTION

Task: C:\Windows\Tasks\d187d13c-eb9d-4d47-bf31-4a5c3088774b-7.job => C:\Program Files (x86)\CinemaP-1.9cV02.01\d187d13c-eb9d-4d47-bf31-4a5c3088774b-7.exe <==== ATTENTION

Task: C:\Windows\Tasks\KYBEFZU.job => C:\Users\Daniel\AppData\Roaming\KYBEFZU.exe <==== ATTENTION

Task: C:\Windows\Tasks\XSHNPL.job => C:\Users\Daniel\AppData\Roaming\XSHNPL.exe <==== ATTENTION

Task: C:\Windows\Tasks\YDYXQG.job => C:\Users\Daniel\AppData\Roaming\YDYXQG.exe <==== ATTENTION
Emptytemp:

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).

Starte nun FRST erneut und klicke den Entfernen Button.
Das Tool erstellt eine Fixlog.txt.
Poste mir deren Inhalt.

Frisches FRST log bitte. Noch Probleme?

Friedrich290 · 08.01.2015, 23:31

hallo,

anbei die Datei:

Code:

ATTFilter

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 07-01-2015
Ran by Daniel at 2015-01-08 23:24:01 Run:1
Running from C:\Users\Daniel\Desktop\Bereinigung
Loaded Profiles: UpdatusUser & Daniel (Available profiles: UpdatusUser & Daniel)
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
:\Program Files (x86)\6228cefd-9c9c-4d28-ba89-4fea4b5b07c7\e5636612-7284-48bb-9fee-81e1feaac113.dll

C:\Program Files (x86)\Acer\d8ab63e2-cb9c-41d9-9a96-69f41c5fb27c.dll

C:\Program Files (x86)\AGEIA Technologies\6228cefd-9c9c-4d28-ba89-4fea4b5b07c7.dll

C:\Program Files (x86)\d8ab63e2-cb9c-41d9-9a96-69f41c5fb27c\077865c7-e029-46fc-97b7-f0d0c9f4bf99.dll

C:\ProgramData\gpkmjaddgmnebabefhalcdhlohdhiejg

C:\ProgramData\jooedlmpmpnhalnchcfgihpehccbioml

C:\ProgramData\pobnbnmffkpndfpcgmkcmocainfomioa

C:\Users\Daniel\AppData\Roaming\KYBEFZU

C:\Users\Daniel\AppData\Roaming\XSHNPL

C:\Users\Daniel\AppData\Roaming\YDYXQG

C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\prefs.js

C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\4@ckIbAWyX.com\content\bg.js

C:\Users\Daniel\Downloads\BlueStacks App Player - CHIP-Installer.exe
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
S2 5936b827; "C:\Windows\system32\rundll32.exe" "c:\Program Files (x86)\Optimizer Pro 3.20\OptProMon.dll",ENT
c:\Program Files (x86)\Optimizer Pro 3.20

Task: {005282E6-5CC6-4BF7-98C5-90CBAB18AF32} - System32\Tasks\b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-1 => C:\Program Files (x86)\TheHDvid-Codec V10\TheHDvid-Codec V10-codedownloader.exe <==== ATTENTION

Task: {09A13E77-54E7-45B9-A0E3-246DFCA6DFCE} - System32\Tasks\d187d13c-eb9d-4d47-bf31-4a5c3088774b-6 => C:\Program Files (x86)\CinemaP-1.9cV02.01\d187d13c-eb9d-4d47-bf31-4a5c3088774b-6.exe <==== ATTENTION

Task: {2CDB4F58-A85B-44BA-8169-B17F48E4A352} - System32\Tasks\d187d13c-eb9d-4d47-bf31-4a5c3088774b-4 => C:\Program Files (x86)\CinemaP-1.9cV02.01\d187d13c-eb9d-4d47-bf31-4a5c3088774b-4.exe <==== ATTENTION

Task: {3D579731-9F71-434C-A882-4C8FFDB72088} - System32\Tasks\YDYXQG => C:\Users\Daniel\AppData\Roaming\YDYXQG.exe <==== ATTENTION

Task: {454BA2C3-F94E-44A5-8F7E-8A563168E5A2} - System32\Tasks\d187d13c-eb9d-4d47-bf31-4a5c3088774b-1 => C:\Program Files (x86)\CinemaP-1.9cV02.01\CinemaP-1.9cV02.01-codedownloader.exe <==== ATTENTION

Task: {46BFCD9C-18CA-4CF4-A3C6-3F7334F6CE39} - System32\Tasks\XSHNPL => C:\Users\Daniel\AppData\Roaming\XSHNPL.exe <==== ATTENTION

Task: {7322D2DA-6C4A-4CDE-9632-076A5631BA28} - System32\Tasks\d187d13c-eb9d-4d47-bf31-4a5c3088774b-5_user => C:\Program Files (x86)\CinemaP-1.9cV02.01\d187d13c-eb9d-4d47-bf31-4a5c3088774b-5.exe <==== ATTENTION

Task: {73D1D1E0-573E-4AFB-9EF2-26758087333A} - System32\Tasks\d187d13c-eb9d-4d47-bf31-4a5c3088774b-3 => C:\Program Files (x86)\CinemaP-1.9cV02.01\d187d13c-eb9d-4d47-bf31-4a5c3088774b-3.exe <==== ATTENTION

Task: {77E4DE76-2464-4DE3-BD2C-C27DF78E4D75} - System32\Tasks\d187d13c-eb9d-4d47-bf31-4a5c3088774b-7 => C:\Program Files (x86)\CinemaP-1.9cV02.01\d187d13c-eb9d-4d47-bf31-4a5c3088774b-7.exe <==== ATTENTION

Task: {7A635968-AEB1-476F-9CE0-C3010E47BAC9} - System32\Tasks\b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-5_user => C:\Program Files (x86)\TheHDvid-Codec V10\b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-5.exe <==== ATTENTION

Task: {9B38F77E-6D57-4AF2-8A8A-6F7BFDE11C0B} - System32\Tasks\KYBEFZU => C:\Users\Daniel\AppData\Roaming\KYBEFZU.exe <==== ATTENTION

Task: {CE01B344-EB87-4532-A1F4-E725F78EB745} - System32\Tasks\b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-7 => C:\Program Files (x86)\TheHDvid-Codec V10\b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-7.exe <==== ATTENTION

Task: {CF01AD8B-4104-4DBC-8D89-7E8DD5453BD9} - System32\Tasks\d187d13c-eb9d-4d47-bf31-4a5c3088774b-5 => C:\Program Files (x86)\CinemaP-1.9cV02.01\d187d13c-eb9d-4d47-bf31-4a5c3088774b-5.exe <==== ATTENTION

Task: {D1A4EBBE-45B0-44B0-81FD-BF817F4EEDDF} - System32\Tasks\b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-4 => C:\Program Files (x86)\TheHDvid-Codec V10\b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-4.exe <==== ATTENTION

Task: {D8B8C766-27EB-45EC-8EE9-48E488196B62} - System32\Tasks\b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-6 => C:\Program Files (x86)\TheHDvid-Codec V10\b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-6.exe <==== ATTENTION

Task: {E744ED2B-A072-4D77-99F5-E32DBFB79ACF} - System32\Tasks\b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-5 => C:\Program Files (x86)\TheHDvid-Codec V10\b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-5.exe <==== ATTENTION

Task: C:\Windows\Tasks\b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-1.job => C:\Program Files (x86)\TheHDvid-Codec V10\TheHDvid-Codec V10-codedownloader.exe <==== ATTENTION

Task: C:\Windows\Tasks\b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-4.job => C:\Program Files (x86)\TheHDvid-Codec V10\b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-4.exe <==== ATTENTION

Task: C:\Windows\Tasks\b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-5.job => C:\Program Files (x86)\TheHDvid-Codec V10\b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-5.exe <==== ATTENTION

Task: C:\Windows\Tasks\b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-5_user.job => C:\Program Files (x86)\TheHDvid-Codec V10\b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-5.exe <==== ATTENTION

Task: C:\Windows\Tasks\b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-6.job => C:\Program Files (x86)\TheHDvid-Codec V10\b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-6.exe <==== ATTENTION

Task: C:\Windows\Tasks\b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-7.job => C:\Program Files (x86)\TheHDvid-Codec V10\b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-7.exe <==== ATTENTION

Task: C:\Windows\Tasks\d187d13c-eb9d-4d47-bf31-4a5c3088774b-1.job => C:\Program Files (x86)\CinemaP-1.9cV02.01\CinemaP-1.9cV02.01-codedownloader.exe <==== ATTENTION

Task: C:\Windows\Tasks\d187d13c-eb9d-4d47-bf31-4a5c3088774b-3.job => C:\Program Files (x86)\CinemaP-1.9cV02.01\d187d13c-eb9d-4d47-bf31-4a5c3088774b-3.exe <==== ATTENTION

Task: C:\Windows\Tasks\d187d13c-eb9d-4d47-bf31-4a5c3088774b-4.job => C:\Program Files (x86)\CinemaP-1.9cV02.01\d187d13c-eb9d-4d47-bf31-4a5c3088774b-4.exe <==== ATTENTION

Task: C:\Windows\Tasks\d187d13c-eb9d-4d47-bf31-4a5c3088774b-5.job => C:\Program Files (x86)\CinemaP-1.9cV02.01\d187d13c-eb9d-4d47-bf31-4a5c3088774b-5.exe <==== ATTENTION

Task: C:\Windows\Tasks\d187d13c-eb9d-4d47-bf31-4a5c3088774b-5_user.job => C:\Program Files (x86)\CinemaP-1.9cV02.01\d187d13c-eb9d-4d47-bf31-4a5c3088774b-5.exe <==== ATTENTION

Task: C:\Windows\Tasks\d187d13c-eb9d-4d47-bf31-4a5c3088774b-6.job => C:\Program Files (x86)\CinemaP-1.9cV02.01\d187d13c-eb9d-4d47-bf31-4a5c3088774b-6.exe <==== ATTENTION

Task: C:\Windows\Tasks\d187d13c-eb9d-4d47-bf31-4a5c3088774b-7.job => C:\Program Files (x86)\CinemaP-1.9cV02.01\d187d13c-eb9d-4d47-bf31-4a5c3088774b-7.exe <==== ATTENTION

Task: C:\Windows\Tasks\KYBEFZU.job => C:\Users\Daniel\AppData\Roaming\KYBEFZU.exe <==== ATTENTION

Task: C:\Windows\Tasks\XSHNPL.job => C:\Users\Daniel\AppData\Roaming\XSHNPL.exe <==== ATTENTION

Task: C:\Windows\Tasks\YDYXQG.job => C:\Users\Daniel\AppData\Roaming\YDYXQG.exe <==== ATTENTION
Emptytemp:
         

*****************

:\Program Files (x86)\6228cefd-9c9c-4d28-ba89-4fea4b5b07c7\e5636612-7284-48bb-9fee-81e1feaac113.dll => Error: No automatic fix found for this entry.
C:\Program Files (x86)\Acer\d8ab63e2-cb9c-41d9-9a96-69f41c5fb27c.dll => Moved successfully.
C:\Program Files (x86)\AGEIA Technologies\6228cefd-9c9c-4d28-ba89-4fea4b5b07c7.dll => Moved successfully.
C:\Program Files (x86)\d8ab63e2-cb9c-41d9-9a96-69f41c5fb27c\077865c7-e029-46fc-97b7-f0d0c9f4bf99.dll => Moved successfully.
C:\ProgramData\gpkmjaddgmnebabefhalcdhlohdhiejg => Moved successfully.
C:\ProgramData\jooedlmpmpnhalnchcfgihpehccbioml => Moved successfully.
C:\ProgramData\pobnbnmffkpndfpcgmkcmocainfomioa => Moved successfully.
C:\Users\Daniel\AppData\Roaming\KYBEFZU => Moved successfully.
C:\Users\Daniel\AppData\Roaming\XSHNPL => Moved successfully.
C:\Users\Daniel\AppData\Roaming\YDYXQG => Moved successfully.
C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\prefs.js => Moved successfully.
C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\extensions\4@ckIbAWyX.com\content\bg.js => Moved successfully.
C:\Users\Daniel\Downloads\BlueStacks App Player - CHIP-Installer.exe => Moved successfully.
"HKLM\SOFTWARE\Policies\Google" => Key deleted successfully.
5936b827 => Service deleted successfully.
"c:\Program Files (x86)\Optimizer Pro 3.20" => File/Directory not found.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{005282E6-5CC6-4BF7-98C5-90CBAB18AF32} => Key not found. 
C:\Windows\System32\Tasks\b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-1 not found.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-1 => Key not found. 
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{09A13E77-54E7-45B9-A0E3-246DFCA6DFCE} => Key not found. 
C:\Windows\System32\Tasks\d187d13c-eb9d-4d47-bf31-4a5c3088774b-6 not found.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\d187d13c-eb9d-4d47-bf31-4a5c3088774b-6 => Key not found. 
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{2CDB4F58-A85B-44BA-8169-B17F48E4A352} => Key not found. 
C:\Windows\System32\Tasks\d187d13c-eb9d-4d47-bf31-4a5c3088774b-4 not found.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\d187d13c-eb9d-4d47-bf31-4a5c3088774b-4 => Key not found. 
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{3D579731-9F71-434C-A882-4C8FFDB72088}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{3D579731-9F71-434C-A882-4C8FFDB72088}" => Key deleted successfully.
C:\Windows\System32\Tasks\YDYXQG => Moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\YDYXQG" => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{454BA2C3-F94E-44A5-8F7E-8A563168E5A2} => Key not found. 
C:\Windows\System32\Tasks\d187d13c-eb9d-4d47-bf31-4a5c3088774b-1 not found.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\d187d13c-eb9d-4d47-bf31-4a5c3088774b-1 => Key not found. 
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{46BFCD9C-18CA-4CF4-A3C6-3F7334F6CE39}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{46BFCD9C-18CA-4CF4-A3C6-3F7334F6CE39}" => Key deleted successfully.
C:\Windows\System32\Tasks\XSHNPL => Moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\XSHNPL" => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{7322D2DA-6C4A-4CDE-9632-076A5631BA28} => Key not found. 
C:\Windows\System32\Tasks\d187d13c-eb9d-4d47-bf31-4a5c3088774b-5_user not found.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\d187d13c-eb9d-4d47-bf31-4a5c3088774b-5_user => Key not found. 
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{73D1D1E0-573E-4AFB-9EF2-26758087333A} => Key not found. 
C:\Windows\System32\Tasks\d187d13c-eb9d-4d47-bf31-4a5c3088774b-3 not found.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\d187d13c-eb9d-4d47-bf31-4a5c3088774b-3 => Key not found. 
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{77E4DE76-2464-4DE3-BD2C-C27DF78E4D75} => Key not found. 
C:\Windows\System32\Tasks\d187d13c-eb9d-4d47-bf31-4a5c3088774b-7 not found.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\d187d13c-eb9d-4d47-bf31-4a5c3088774b-7 => Key not found. 
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{7A635968-AEB1-476F-9CE0-C3010E47BAC9} => Key not found. 
C:\Windows\System32\Tasks\b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-5_user not found.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-5_user => Key not found. 
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{9B38F77E-6D57-4AF2-8A8A-6F7BFDE11C0B}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{9B38F77E-6D57-4AF2-8A8A-6F7BFDE11C0B}" => Key deleted successfully.
C:\Windows\System32\Tasks\KYBEFZU => Moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\KYBEFZU" => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{CE01B344-EB87-4532-A1F4-E725F78EB745} => Key not found. 
C:\Windows\System32\Tasks\b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-7 not found.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-7 => Key not found. 
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{CF01AD8B-4104-4DBC-8D89-7E8DD5453BD9} => Key not found. 
C:\Windows\System32\Tasks\d187d13c-eb9d-4d47-bf31-4a5c3088774b-5 not found.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\d187d13c-eb9d-4d47-bf31-4a5c3088774b-5 => Key not found. 
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{D1A4EBBE-45B0-44B0-81FD-BF817F4EEDDF} => Key not found. 
C:\Windows\System32\Tasks\b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-4 not found.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-4 => Key not found. 
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{D8B8C766-27EB-45EC-8EE9-48E488196B62} => Key not found. 
C:\Windows\System32\Tasks\b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-6 not found.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-6 => Key not found. 
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{E744ED2B-A072-4D77-99F5-E32DBFB79ACF} => Key not found. 
C:\Windows\System32\Tasks\b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-5 not found.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-5 => Key not found. 
C:\Windows\Tasks\b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-1.job not found.
C:\Windows\Tasks\b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-4.job not found.
C:\Windows\Tasks\b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-5.job not found.
C:\Windows\Tasks\b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-5_user.job not found.
C:\Windows\Tasks\b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-6.job not found.
C:\Windows\Tasks\b40dd6cd-32c8-47b3-8b1a-f50c2f0f4068-7.job not found.
C:\Windows\Tasks\d187d13c-eb9d-4d47-bf31-4a5c3088774b-1.job not found.
C:\Windows\Tasks\d187d13c-eb9d-4d47-bf31-4a5c3088774b-3.job not found.
C:\Windows\Tasks\d187d13c-eb9d-4d47-bf31-4a5c3088774b-4.job not found.
C:\Windows\Tasks\d187d13c-eb9d-4d47-bf31-4a5c3088774b-5.job not found.
C:\Windows\Tasks\d187d13c-eb9d-4d47-bf31-4a5c3088774b-5_user.job not found.
C:\Windows\Tasks\d187d13c-eb9d-4d47-bf31-4a5c3088774b-6.job not found.
C:\Windows\Tasks\d187d13c-eb9d-4d47-bf31-4a5c3088774b-7.job not found.
C:\Windows\Tasks\KYBEFZU.job => Moved successfully.
C:\Windows\Tasks\XSHNPL.job => Moved successfully.
C:\Windows\Tasks\YDYXQG.job => Moved successfully.
EmptyTemp: => Removed 60.9 MB temporary data.


The system needed a reboot. 

==== End of Fixlog 23:24:12 ====

schrauber · 09.01.2015, 09:16

Zitat:

Frisches FRST log bitte. Noch Probleme?

.

Friedrich290 · 09.01.2015, 13:15

Hallo,

anbei die FRST von heute:

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 07-01-2015
Ran by Daniel (administrator) on 1906DANIEL on 09-01-2015 12:50:02
Running from C:\Users\Daniel\Desktop\Bereinigung
Loaded Profiles: UpdatusUser & Daniel (Available profiles: UpdatusUser & Daniel)
Platform: Windows 8.1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11 (Default browser: IE)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Windows (R) Win 7 DDK provider) C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\AdminService.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-UpdaterService.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Launch Manager\LMSvc.exe
(Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe
() C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-Service.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe
(BlueStack Systems) C:\Program Files (x86)\BlueStacks\HD-Network.exe
(BlueStack Systems) C:\Program Files (x86)\BlueStacks\HD-BlockDevice.exe
(BlueStack Systems) C:\Program Files (x86)\BlueStacks\HD-SharedFolder.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Quick Access\QASvc.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Quick Access\RMSvc.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
(acer) C:\Program Files\Acer\User Experience Improvement Program\Framework\UBTService.exe
(Microsoft Corporation) C:\Windows\System32\LogonUI.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
(Intel Corporation) C:\Windows\System32\igfxTray.exe
(Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbam.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Quick Access\QAEvent.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Launch Manager\LMEvent.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Launch Manager\LMLockHandler.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Launch Manager\LMTray.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Quick Access\QAMsg.exe
(Atheros Communications) C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtvStack.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe
() C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\ActivateDesktop.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-Agent.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Microsoft Corporation) C:\Windows\System32\LocationNotifications.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerTray.exe
(Intel Corporation) C:\Windows\System32\igfxext.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerEvent.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerWinMonitor.exe
(Valve Corporation) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
(Microsoft Corporation) C:\Windows\System32\msiexec.exe
(Microsoft Corporation) C:\Windows\System32\calc.exe
(Microsoft Corporation) C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_6.3.9600.17477_none_fa2b7d3b9b36c7b4\TiWorker.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\AOP Framework\CCDMonitorService.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\AOP Framework\BackgroundAgent.exe
(Acer Cloud Technology) C:\Program Files (x86)\Acer\AOP Framework\acer\ccd.exe
() C:\Program Files (x86)\Acer\abDocs\abDocsDllLoader.exe
() C:\Program Files (x86)\Acer\abDocs\abDocsDllLoaderMonitor.exe
() C:\Program Files\Realtek\Audio\HDA\FMAPP.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13672304 2014-03-18] (Realtek Semiconductor)
HKLM-x32\...\Run: [BacKGround Agent] => C:\Program Files (x86)\Acer\AOP Framework\BackgroundAgent.exe [62208 2014-12-19] (Acer Incorporated)
HKLM-x32\...\Run: [BlueStacks Agent] => C:\Program Files (x86)\BlueStacks\HD-Agent.exe [843480 2014-10-08] (BlueStack Systems, Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [507776 2014-10-07] (Oracle Corporation)
HKLM-x32\...\Run: [Avira Systray] => C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe [126200 2014-11-20] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [702768 2014-11-24] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [abDocsDllLoader] => C:\Program Files (x86)\Acer\abDocs\abDocsDllLoader.exe [90880 2014-12-19] ()
HKLM\...\Policies\Explorer\Run: [BtvStack] => C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtvStack.exe [134784 2014-02-25] ( (Atheros Communications))
HKU\S-1-5-21-223822767-1807346583-171944255-1001\...\Run: [Pokki] => C:\Windows\system32\rundll32.exe "%LOCALAPPDATA%\Pokki\Engine\Launcher.dll",RunLaunchPlatform
HKU\S-1-5-21-223822767-1807346583-171944255-1001\...\RunOnce: [RegDXVA1] => C:\Windows\system32\cmd.exe /c reg import "C:\Program Files (x86)\Acer\abPhoto\SwitchUserVideoKey.reg"
HKU\S-1-5-21-223822767-1807346583-171944255-1001\...\RunOnce: [SetAsDefault] => C:\Program Files (x86)\Acer\Acer Video Player\SwitchUserVideoKey.bat
HKU\S-1-5-21-223822767-1807346583-171944255-1002\...\Run: [Steam] => C:\Program Files (x86)\Steam\Steam.exe [1940160 2014-11-18] (Valve Corporation)
HKU\S-1-5-21-223822767-1807346583-171944255-1002\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [7394584 2014-12-12] (Piriform Ltd)
HKU\S-1-5-21-223822767-1807346583-171944255-1002\...\RunOnce: [Application Restart #0] => C:\Users\Daniel\AppData\Local\Pokki\Engine\HostAppService.exe  --disable-internal-flash --noerrdialogs --no-message-box --disable-extensions --disable-web-security --disable-web-resources --disable-cl (the data entry has 551 more characters).
ShellIconOverlayIdentifiers: [ACloudSyncedRF] -> {5CCE71FA-9F61-4F24-9CD1-98D819B40D68} => C:\Program Files (x86)\Acer\Acer Portal\x64\shellext_win.dll (Acer Incorporated)
ShellIconOverlayIdentifiers: [ACloudSyncedSF] -> {5D5F18B7-D59B-4B18-A3E9-0A4BDCCCB699} => C:\Program Files (x86)\Acer\Acer Portal\x64\shellext_win.dll (Acer Incorporated)
ShellIconOverlayIdentifiers: [ACloudSyncing] -> {C1E1456F-C2D8-4C96-870D-35F1E13941EE} => C:\Program Files (x86)\Acer\Acer Portal\x64\shellext_win.dll (Acer Incorporated)
ShellIconOverlayIdentifiers: [ACloudToBeSynced] -> {307523FA-DDC0-4068-983F-2A6B34627744} => C:\Program Files (x86)\Acer\Acer Portal\x64\shellext_win.dll (Acer Incorporated)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = about:blank
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-223822767-1807346583-171944255-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/?pc=MSE1
HKU\S-1-5-21-223822767-1807346583-171944255-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://acer13.msn.com/?pc=ACJB
HKU\S-1-5-21-223822767-1807346583-171944255-1001\Software\Microsoft\Internet Explorer\Main,First Home Page = hxxp://go.microsoft.com/fwlink/?LinkID=226786&Mkt=de-DE&Src=WD8&Tid=00032955&OHP=about%3Ablank&OSP=
HKU\S-1-5-21-223822767-1807346583-171944255-1002\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM -> {80c554b9-c7f8-4a21-9471-06d606da78a2} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1
SearchScopes: HKLM-x32 -> {80c554b9-c7f8-4a21-9471-06d606da78a2} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-223822767-1807346583-171944255-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-223822767-1807346583-171944255-1002 -> {0F4290CD-0C1F-43D0-AD78-654E5ADC2694} URL = 
SearchScopes: HKU\S-1-5-21-223822767-1807346583-171944255-1002 -> {80c554b9-c7f8-4a21-9471-06d606da78a2} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1
BHO: RobouSiaver -> {e3190def-fe89-48bd-8820-9809133be044} -> C:\ProgramData\RobouSiaver\KhxvIlVvzyR0pN.x64.dll No File
BHO: SaverExtensiOn -> {e64ca992-4ef4-400c-b3e2-35ffd808ed66} -> C:\ProgramData\SaverExtensiOn\8N25NUrrXZ52P2.x64.dll No File
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\ssv.dll (Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\jp2ssv.dll (Oracle Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 192.168.1.1

FireFox:
========
FF ProfilePath: C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_16_0_0_235.dll ()
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_235.dll ()
FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/pdf -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll ()
FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.fdf -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.25.2 -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.25.2 -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\1\NP_wtapp.dll ()
FF Extension: OptuOn - C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\Extensions\4@ckIbAWyX.com [2014-12-26]
FF Extension: Avira Browser Safety - C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\Extensions\abs@avira.com [2015-01-06]
FF Extension: HD Notifier - C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\Extensions\{0e84d0b4-5388-4a04-a2bf-1043c386a4dc}.xpi [2015-01-04]
FF Extension: {2b5f4e51-080e-409c-8353-01cc79790137} - C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\8f6jup2q.default\Extensions\{2b5f4e51-080e-409c-8353-01cc79790137}.xpi [2015-01-01]

Chrome: 
=======
CHR Profile: C:\Users\Daniel\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (No Name) - C:\Users\Daniel\AppData\Local\Google\Chrome\User Data\Default\Extensions\kcdeaofcapijfmeopimkgcepdpbdepnb [2015-01-04]
CHR Extension: (No Name) - C:\Users\Daniel\AppData\Local\Google\Chrome\User Data\Default\Extensions\mbacbcfdfaapbcnlnbmciiaakomhkbkb [2015-01-06]
CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - No Path
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - No Path

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [431920 2014-11-24] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [431920 2014-11-24] (Avira Operations GmbH & Co. KG)
R2 AtherosSvc; C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\adminservice.exe [319104 2014-02-25] (Windows (R) Win 7 DDK provider)
R2 Avira.OE.ServiceHost; C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe [166192 2014-11-20] (Avira Operations GmbH & Co. KG)
R2 BstHdAndroidSvc; C:\Program Files (x86)\BlueStacks\HD-Service.exe [409304 2014-10-08] (BlueStack Systems, Inc.)
R2 BstHdLogRotatorSvc; C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe [388824 2014-10-08] (BlueStack Systems, Inc.)
R2 BstHdUpdaterSvc; C:\Program Files (x86)\BlueStacks\HD-UpdaterService.exe [782040 2014-10-08] (BlueStack Systems, Inc.)
R2 CCDMonitorService; C:\Program Files (x86)\Acer\AOP Framework\CCDMonitorService.exe [2713856 2014-12-19] (Acer Incorporated)
R3 ePowerSvc; C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe [2573032 2014-06-12] (Acer Incorporated)
R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [282096 2014-03-18] (Intel Corporation)
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [747520 2013-08-27] (Intel(R) Corporation) [File not signed]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [828376 2013-08-27] (Intel(R) Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-12-10] (Intel Corporation)
R2 LMSvc; C:\Program Files\Acer\Acer Launch Manager\LMSvc.exe [466664 2014-06-10] (Acer Incorporate)
R2 MBAMScheduler; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe [1871160 2014-11-21] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [969016 2014-11-21] (Malwarebytes Corporation)
R3 QASvc; C:\Program Files\Acer\Acer Quick Access\QASvc.exe [458984 2014-06-26] (Acer Incorporate)
R2 RichVideo; C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [254512 2012-04-24] ()
R3 RMSvc; C:\Program Files\Acer\Acer Quick Access\RMSvc.exe [449768 2014-06-26] (Acer Incorporate)
R3 UEIPSvc; C:\Program Files\Acer\User Experience Improvement Program\Framework\UBTService.exe [234240 2014-07-15] (acer)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [368632 2014-09-22] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23792 2014-09-22] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R3 athr; C:\Windows\system32\DRIVERS\athwbx.sys [3888640 2014-02-14] (Qualcomm Atheros Communications, Inc.)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [119272 2014-11-24] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [131608 2014-11-24] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [28600 2014-11-24] (Avira Operations GmbH & Co. KG)
R2 BstHdDrv; C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [122072 2014-10-08] (BlueStack Systems)
S3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [77464 2014-02-25] (Qualcomm Atheros)
S3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [226304 2014-03-18] (Microsoft Corporation)
R3 iaLPSS_I2C; C:\Windows\System32\drivers\iaLPSS_I2C.sys [99320 2013-10-03] (Intel Corporation)
R3 LMDriver; C:\Windows\System32\drivers\LMDriver.sys [21360 2013-07-17] (Acer Incorporated)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-11-21] (Malwarebytes Corporation)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [129752 2015-01-09] (Malwarebytes Corporation)
R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [64216 2014-11-21] (Malwarebytes Corporation)
R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [100312 2013-12-10] (Intel Corporation)
R3 RadioShim; C:\Windows\System32\drivers\RadioShim.sys [14680 2013-07-17] (Acer Incorporated)
R3 RTSPER; C:\Windows\system32\DRIVERS\RtsPer.sys [466136 2014-01-14] (Realsil Semiconductor Corporation)
R3 SynRMIHID; C:\Windows\system32\DRIVERS\SynRMIHID.sys [42224 2014-02-19] (Synaptics Incorporated)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114496 2014-09-22] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-01-09 12:49 - 2015-01-09 12:49 - 00001969 _____ () C:\Users\Public\Desktop\abDocs.lnk
2015-01-08 14:46 - 2015-01-08 14:46 - 00000000 ____D () C:\Windows\ERUNT
2015-01-08 13:05 - 2015-01-09 12:46 - 00129752 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-01-08 13:05 - 2015-01-08 13:05 - 00001118 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2015-01-08 13:05 - 2015-01-08 13:05 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2015-01-08 13:05 - 2015-01-08 13:05 - 00000000 ____D () C:\ProgramData\Malwarebytes
2015-01-08 13:05 - 2015-01-08 13:05 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2015-01-08 13:05 - 2014-11-21 06:14 - 00093400 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2015-01-08 13:05 - 2014-11-21 06:14 - 00064216 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2015-01-08 13:05 - 2014-11-21 06:14 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2015-01-08 13:01 - 2015-01-09 12:50 - 00000000 ____D () C:\Users\Daniel\Desktop\Bereinigung
2015-01-08 12:56 - 2015-01-08 14:42 - 00000000 ____D () C:\AdwCleaner
2015-01-07 20:38 - 2015-01-07 20:38 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group
2015-01-07 19:41 - 2015-01-09 12:50 - 00000000 ____D () C:\FRST
2015-01-07 19:39 - 2015-01-07 19:39 - 01115648 _____ (Farbar) C:\Users\Daniel\Downloads\FRST.exe
2015-01-07 18:12 - 2015-01-07 18:12 - 00000000 _____ () C:\Windows\setuperr.log
2015-01-07 18:12 - 2015-01-07 18:12 - 00000000 _____ () C:\Windows\setupact.log
2015-01-07 18:10 - 2015-01-08 23:25 - 00116036 _____ () C:\Windows\PFRO.log
2015-01-07 11:23 - 2015-01-07 11:23 - 00244264 _____ () C:\Users\Daniel\Downloads\Firefox Setup Stub 34.0.5 (1).exe
2015-01-07 11:23 - 2015-01-07 11:23 - 00001175 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2015-01-07 11:23 - 2015-01-07 11:23 - 00001163 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2015-01-07 11:23 - 2015-01-07 11:23 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2015-01-06 22:56 - 2015-01-06 22:56 - 00000000 ____D () C:\Users\Daniel\AppData\Roaming\Avira
2015-01-06 22:54 - 2015-01-06 22:53 - 00043064 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2015-01-06 22:52 - 2014-11-24 10:23 - 00131608 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2015-01-06 22:52 - 2014-11-24 10:23 - 00119272 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2015-01-06 22:52 - 2014-11-24 10:23 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys
2015-01-06 22:48 - 2015-01-06 22:52 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2015-01-06 22:48 - 2015-01-06 22:52 - 00000000 ____D () C:\ProgramData\Avira
2015-01-06 22:48 - 2015-01-06 22:52 - 00000000 ____D () C:\Program Files (x86)\Avira
2015-01-06 22:48 - 2015-01-06 22:48 - 00001157 _____ () C:\Users\Public\Desktop\Avira.lnk
2015-01-06 22:47 - 2015-01-06 22:47 - 04549888 _____ (Avira Operations & Co. KG) C:\Users\Daniel\Downloads\avira_de_av_5765383327__ws.exe
2015-01-06 22:42 - 2014-10-30 12:25 - 00275080 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2015-01-06 20:21 - 2015-01-06 20:21 - 00244264 _____ () C:\Users\Daniel\Downloads\Firefox Setup Stub 34.0.5.exe
2015-01-06 14:57 - 2015-01-06 14:58 - 00002005 _____ () C:\Users\Public\Desktop\abPhoto.lnk
2015-01-06 10:23 - 2015-01-09 07:37 - 01554603 _____ () C:\Windows\WindowsUpdate.log
2015-01-02 15:31 - 2014-10-14 19:13 - 00675988 _____ () C:\Users\Daniel\Desktop\Minecraft.exe
2015-01-02 15:05 - 2015-01-08 19:31 - 00000000 ____D () C:\Users\Daniel\AppData\Local\ftblauncher
2015-01-02 15:05 - 2015-01-02 15:05 - 00000000 ____D () C:\Users\Daniel\AppData\Roaming\ftblauncher
2015-01-02 14:39 - 2015-01-02 14:39 - 00000000 ____D () C:\Users\Daniel\Downloads\runtime
2015-01-02 14:38 - 2015-01-02 14:40 - 00000000 ____D () C:\Users\Daniel\Downloads\game
2015-01-02 14:38 - 2015-01-02 14:38 - 02314240 _____ () C:\Users\Daniel\Downloads\MinecraftInstaller.msi
2015-01-02 14:36 - 2015-01-02 14:36 - 01291528 _____ (Mojang) C:\Users\Daniel\Downloads\Minecraft.exe
2015-01-02 14:25 - 2015-01-08 19:30 - 00000000 ____D () C:\Users\Daniel\Desktop\minecraft Test
2015-01-02 14:02 - 2015-01-08 23:24 - 00000000 ____D () C:\Program Files (x86)\d8ab63e2-cb9c-41d9-9a96-69f41c5fb27c
2015-01-02 14:00 - 2015-01-06 20:19 - 00002016 _____ () C:\Windows\patsearch.bin
2015-01-02 13:59 - 2015-01-08 19:32 - 00000000 ____D () C:\Users\Daniel\AppData\Roaming\.minecraft
2015-01-02 13:59 - 2015-01-07 08:09 - 00000000 ____D () C:\Program Files (x86)\6228cefd-9c9c-4d28-ba89-4fea4b5b07c7
2015-01-02 13:59 - 2015-01-02 13:59 - 00000000 ____D () C:\Users\Daniel\AppData\Roaming\java
2015-01-02 13:58 - 2015-01-02 13:58 - 00000000 ____D () C:\ProgramData\Sun
2015-01-02 13:58 - 2015-01-02 13:58 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2015-01-02 13:58 - 2015-01-02 13:57 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2015-01-02 13:57 - 2015-01-02 13:57 - 00000000 ____D () C:\ProgramData\Oracle
2015-01-02 13:57 - 2015-01-02 13:57 - 00000000 ____D () C:\Program Files (x86)\Java
2015-01-02 13:55 - 2015-01-02 13:55 - 00638888 _____ (Oracle Corporation) C:\Users\Daniel\Downloads\chromeinstall-8u25.exe
2015-01-02 13:54 - 2015-01-02 13:54 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf
2015-01-02 13:47 - 2014-10-29 15:11 - 06619054 _____ () C:\Users\Daniel\Desktop\FTB_Launcher.exe
2015-01-01 17:20 - 2015-01-01 17:20 - 00000000 ____D () C:\Users\Public\Documents\Android
2015-01-01 17:20 - 2015-01-01 17:20 - 00000000 ____D () C:\Users\Daniel\Documents\Android
2015-01-01 02:03 - 2015-01-01 02:03 - 00000931 _____ () C:\Users\Daniel\Downloads\The-Walking-Dead_-Survival-Instinct-lnstall - Verknüpfung.lnk
2015-01-01 02:03 - 2015-01-01 02:03 - 00000000 ____D () C:\Users\Daniel\AppData\Local\Tempde32eb70472f50f1682ef62857f90de0______
2015-01-01 01:56 - 2015-01-01 01:56 - 00000000 ____D () C:\Users\Daniel\AppData\Local\Tempde32eb70472f50f1682ef62857f90de0_____
2015-01-01 01:46 - 2015-01-01 01:46 - 00000000 ___SD () C:\Windows\system32\CompatTel
2015-01-01 01:46 - 2015-01-01 01:46 - 00000000 ____D () C:\Windows\system32\appraiser
2014-12-30 23:40 - 2014-12-30 23:40 - 00000000 ____D () C:\Program Files (x86)\WEB.DE MailCheck
2014-12-30 23:36 - 2014-12-30 23:36 - 00000000 ____D () C:\Users\Daniel\AppData\Local\Tempde32eb70472f50f1682ef62857f90de0____
2014-12-30 23:36 - 2014-12-30 23:36 - 00000000 ____D () C:\Users\Daniel\AppData\Local\Tempde32eb70472f50f1682ef62857f90de0___
2014-12-30 23:35 - 2014-12-30 23:35 - 00000000 ____D () C:\Users\Daniel\AppData\Local\Tempde32eb70472f50f1682ef62857f90de0__
2014-12-30 23:33 - 2014-12-30 23:33 - 00000000 ____D () C:\Users\Daniel\AppData\Local\Tempde32eb70472f50f1682ef62857f90de0_
2014-12-30 23:33 - 2014-12-30 23:33 - 00000000 ____D () C:\Users\Daniel\AppData\Local\Tempde32eb70472f50f1682ef62857f90de0
2014-12-30 23:33 - 2014-12-30 23:33 - 00000000 ____D () C:\Users\Daniel\AppData\Local\Tempb611a9446b16c0a3ab49ae1736d3f689
2014-12-29 00:08 - 2014-12-29 00:08 - 00000000 ____D () C:\Users\Daniel\AppData\Roaming\Foxit Software
2014-12-27 20:25 - 2015-01-09 08:31 - 00000000 ____D () C:\Users\Daniel\Documents\Euro Truck Simulator 2
2014-12-27 20:24 - 2014-12-27 20:24 - 00001356 _____ () C:\Users\Public\Desktop\Euro Truck Simulator 2.lnk
2014-12-27 20:24 - 2014-12-27 20:24 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Euro Truck Simulator 2
2014-12-27 20:22 - 2014-12-27 20:24 - 00000000 ____D () C:\Program Files (x86)\Euro Truck Simulator 2
2014-12-27 00:16 - 2014-04-14 04:29 - 01018880 _____ (Microsoft Corporation) C:\Windows\system32\termsrv.dll
2014-12-26 21:58 - 2014-07-24 10:44 - 16874496 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.dll
2014-12-26 21:58 - 2014-07-24 10:16 - 12730880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.dll
2014-12-26 21:58 - 2014-06-14 07:03 - 02389504 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2014-12-26 21:57 - 2014-07-24 16:28 - 00419648 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2014-12-26 21:57 - 2014-07-24 16:28 - 00412992 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\spaceport.sys
2014-12-26 21:57 - 2014-07-24 16:28 - 00280384 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pci.sys
2014-12-26 21:57 - 2014-07-24 16:28 - 00143680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2014-12-26 21:57 - 2014-07-24 16:23 - 00125472 _____ (Microsoft Corporation) C:\Windows\system32\dwmapi.dll
2014-12-26 21:57 - 2014-07-24 16:20 - 00645592 _____ (Microsoft Corporation) C:\Windows\system32\SHCore.dll
2014-12-26 21:57 - 2014-07-24 16:20 - 00263400 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettingsAdminFlows.exe
2014-12-26 21:57 - 2014-07-24 16:16 - 02574208 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
2014-12-26 21:57 - 2014-07-24 16:16 - 00211216 _____ (Microsoft Corporation) C:\Windows\system32\SndVol.exe
2014-12-26 21:57 - 2014-07-24 16:07 - 02009920 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2014-12-26 21:57 - 2014-07-24 16:05 - 01660048 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2014-12-26 21:57 - 2014-07-24 16:05 - 01519560 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
2014-12-26 21:57 - 2014-07-24 16:05 - 01488008 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2014-12-26 21:57 - 2014-07-24 16:05 - 01356840 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe
2014-12-26 21:57 - 2014-07-24 16:03 - 02141920 _____ (Microsoft Corporation) C:\Windows\system32\mfcore.dll
2014-12-26 21:57 - 2014-07-24 16:03 - 00882136 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll
2014-12-26 21:57 - 2014-07-24 16:03 - 00360480 _____ (Microsoft Corporation) C:\Windows\system32\mfreadwrite.dll
2014-12-26 21:57 - 2014-07-24 16:03 - 00233888 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll
2014-12-26 21:57 - 2014-07-24 16:03 - 00205512 _____ (Microsoft Corporation) C:\Windows\system32\mftranscode.dll
2014-12-26 21:57 - 2014-07-24 14:50 - 00098048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmapi.dll
2014-12-26 21:57 - 2014-07-24 14:48 - 02410976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL
2014-12-26 21:57 - 2014-07-24 14:48 - 00180208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SndVol.exe
2014-12-26 21:57 - 2014-07-24 14:46 - 00477200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SHCore.dll
2014-12-26 21:57 - 2014-07-24 14:36 - 02145472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfcore.dll
2014-12-26 21:57 - 2014-07-24 14:36 - 00707536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfplat.dll
2014-12-26 21:57 - 2014-07-24 14:36 - 00355800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfreadwrite.dll
2014-12-26 21:57 - 2014-07-24 14:36 - 00180720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mftranscode.dll
2014-12-26 21:57 - 2014-07-24 12:51 - 00008192 _____ (Microsoft Corporation) C:\Windows\system32\KBDRUM.DLL
2014-12-26 21:57 - 2014-07-24 12:51 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDYAK.DLL
2014-12-26 21:57 - 2014-07-24 12:51 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDTT102.DLL
2014-12-26 21:57 - 2014-07-24 12:51 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDTAT.DLL
2014-12-26 21:57 - 2014-07-24 12:51 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU1.DLL
2014-12-26 21:57 - 2014-07-24 12:51 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDBASH.DLL
2014-12-26 21:57 - 2014-07-24 12:51 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU.DLL
2014-12-26 21:57 - 2014-07-24 12:46 - 00079872 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\IPMIDrv.sys
2014-12-26 21:57 - 2014-07-24 12:45 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hdaudbus.sys
2014-12-26 21:57 - 2014-07-24 12:44 - 00674816 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys
2014-12-26 21:57 - 2014-07-24 12:43 - 00412160 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv.sys
2014-12-26 21:57 - 2014-07-24 12:42 - 00446976 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\nwifi.sys
2014-12-26 21:57 - 2014-07-24 12:42 - 00126464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\NdisImPlatform.sys
2014-12-26 21:57 - 2014-07-24 12:41 - 00118272 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bthpan.sys
2014-12-26 21:57 - 2014-07-24 12:06 - 00220160 _____ (Microsoft Corporation) C:\Windows\system32\iasnap.dll
2014-12-26 21:57 - 2014-07-24 12:05 - 00287232 _____ (Microsoft Corporation) C:\Windows\system32\usbmon.dll
2014-12-26 21:57 - 2014-07-24 12:05 - 00226816 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll
2014-12-26 21:57 - 2014-07-24 11:52 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDYAK.DLL
2014-12-26 21:57 - 2014-07-24 11:52 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDTT102.DLL
2014-12-26 21:57 - 2014-07-24 11:52 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDTAT.DLL
2014-12-26 21:57 - 2014-07-24 11:51 - 00008192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDRUM.DLL
2014-12-26 21:57 - 2014-07-24 11:51 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDRU1.DLL
2014-12-26 21:57 - 2014-07-24 11:51 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDBASH.DLL
2014-12-26 21:57 - 2014-07-24 11:51 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDRU.DLL
2014-12-26 21:57 - 2014-07-24 11:49 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\WorkFoldersGPExt.dll
2014-12-26 21:57 - 2014-07-24 11:32 - 00207360 _____ (Microsoft Corporation) C:\Windows\system32\powercfg.cpl
2014-12-26 21:57 - 2014-07-24 11:20 - 02050560 _____ (Microsoft Corporation) C:\Windows\system32\SRH.dll
2014-12-26 21:57 - 2014-07-24 11:18 - 01089024 _____ (Microsoft Corporation) C:\Windows\system32\gpedit.dll
2014-12-26 21:57 - 2014-07-24 11:12 - 00878592 _____ (Microsoft Corporation) C:\Windows\system32\ActionCenter.dll
2014-12-26 21:57 - 2014-07-24 11:10 - 01844224 _____ (Microsoft Corporation) C:\Windows\system32\Display.dll
2014-12-26 21:57 - 2014-07-24 11:10 - 00834560 _____ (Microsoft Corporation) C:\Windows\system32\osk.exe
2014-12-26 21:57 - 2014-07-24 11:10 - 00198656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WebClnt.dll
2014-12-26 21:57 - 2014-07-24 11:10 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iasnap.dll
2014-12-26 21:57 - 2014-07-24 11:05 - 00187392 _____ (Microsoft Corporation) C:\Windows\system32\WorkFoldersShell.dll
2014-12-26 21:57 - 2014-07-24 10:52 - 00621056 _____ (Microsoft Corporation) C:\Windows\system32\comdlg32.dll
2014-12-26 21:57 - 2014-07-24 10:42 - 00206336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\powercfg.cpl
2014-12-26 21:57 - 2014-07-24 10:40 - 00557056 _____ (Microsoft Corporation) C:\Windows\system32\PrintDialogs.dll
2014-12-26 21:57 - 2014-07-24 10:39 - 00770048 _____ (Microsoft Corporation) C:\Windows\system32\WorkfoldersControl.dll
2014-12-26 21:57 - 2014-07-24 10:33 - 01741824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SRH.dll
2014-12-26 21:57 - 2014-07-24 10:32 - 01048064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gpedit.dll
2014-12-26 21:57 - 2014-07-24 10:27 - 00779264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\osk.exe
2014-12-26 21:57 - 2014-07-24 10:25 - 00832512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ActionCenter.dll
2014-12-26 21:57 - 2014-07-24 10:24 - 01817088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Display.dll
2014-12-26 21:57 - 2014-07-24 10:21 - 00134144 _____ (Microsoft Corporation) C:\Windows\system32\browser.dll
2014-12-26 21:57 - 2014-07-24 10:18 - 00018432 _____ (Microsoft Corporation) C:\Windows\system32\wlansvcpal.dll
2014-12-26 21:57 - 2014-07-24 10:14 - 00443904 _____ (Microsoft Corporation) C:\Windows\system32\wlansec.dll
2014-12-26 21:57 - 2014-07-24 10:12 - 00127488 _____ (Microsoft Corporation) C:\Windows\system32\WiFiDisplay.dll
2014-12-26 21:57 - 2014-07-24 10:11 - 00356864 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2014-12-26 21:57 - 2014-07-24 10:11 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\wshbth.dll
2014-12-26 21:57 - 2014-07-24 10:10 - 00540672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comdlg32.dll
2014-12-26 21:57 - 2014-07-24 10:04 - 00492032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PrintDialogs.dll
2014-12-26 21:57 - 2014-07-24 10:04 - 00183808 _____ (Microsoft Corp.) C:\Windows\system32\Defrag.exe
2014-12-26 21:57 - 2014-07-24 10:03 - 00324096 _____ (Microsoft Corporation) C:\Windows\system32\srvsvc.dll
2014-12-26 21:57 - 2014-07-24 10:02 - 00220160 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll
2014-12-26 21:57 - 2014-07-24 09:58 - 00105472 _____ (Microsoft Corporation) C:\Windows\system32\BluetoothApis.dll
2014-12-26 21:57 - 2014-07-24 09:53 - 01261056 _____ (Microsoft Corporation) C:\Windows\system32\gpsvc.dll
2014-12-26 21:57 - 2014-07-24 09:53 - 00449536 _____ (Microsoft Corporation) C:\Windows\system32\defragsvc.dll
2014-12-26 21:57 - 2014-07-24 09:49 - 01287680 _____ (Microsoft Corporation) C:\Windows\system32\mispace.dll
2014-12-26 21:57 - 2014-07-24 09:49 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\wlanapi.dll
2014-12-26 21:57 - 2014-07-24 09:48 - 00659968 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Bluetooth.dll
2014-12-26 21:57 - 2014-07-24 09:47 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\wcmcsp.dll
2014-12-26 21:57 - 2014-07-24 09:43 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshbth.dll
2014-12-26 21:57 - 2014-07-24 09:39 - 02397184 _____ (Microsoft Corporation) C:\Windows\system32\storagewmi.dll
2014-12-26 21:57 - 2014-07-24 09:38 - 00371200 _____ (Microsoft Corporation) C:\Windows\system32\wlanmsm.dll
2014-12-26 21:57 - 2014-07-24 09:36 - 00079872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\BluetoothApis.dll
2014-12-26 21:57 - 2014-07-24 09:32 - 01532416 _____ (Microsoft Corporation) C:\Windows\system32\wlansvc.dll
2014-12-26 21:57 - 2014-07-24 09:30 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlanapi.dll
2014-12-26 21:57 - 2014-07-24 09:29 - 00439296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Bluetooth.dll
2014-12-26 21:57 - 2014-07-24 09:28 - 00595456 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.dll
2014-12-26 21:57 - 2014-07-24 09:23 - 01404416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\storagewmi.dll
2014-12-26 21:57 - 2014-07-24 09:22 - 00487936 _____ (Microsoft Corporation) C:\Windows\system32\winspool.drv
2014-12-26 21:57 - 2014-07-24 09:21 - 01231872 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.dll
2014-12-26 21:57 - 2014-07-24 09:21 - 00302080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlanmsm.dll
2014-12-26 21:57 - 2014-07-24 09:18 - 01144320 _____ (Microsoft Corporation) C:\Windows\system32\wwanmm.dll
2014-12-26 21:57 - 2014-07-24 09:18 - 00795136 _____ (Microsoft Corporation) C:\Windows\system32\spoolsv.exe
2014-12-26 21:57 - 2014-07-24 09:16 - 00505344 _____ (Microsoft Corporation) C:\Windows\system32\VAN.dll
2014-12-26 21:57 - 2014-07-24 09:16 - 00084480 _____ (Microsoft Corporation) C:\Windows\system32\wpdbusenum.dll
2014-12-26 21:57 - 2014-07-24 09:15 - 00721408 _____ (Microsoft Corporation) C:\Windows\system32\twinapi.dll
2014-12-26 21:57 - 2014-07-24 09:15 - 00432128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Networking.dll
2014-12-26 21:57 - 2014-07-24 09:13 - 00226304 _____ (Microsoft Corporation) C:\Windows\system32\SndVolSSO.dll
2014-12-26 21:57 - 2014-07-24 09:10 - 00889344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.dll
2014-12-26 21:57 - 2014-07-24 09:10 - 00371712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winspool.drv
2014-12-26 21:57 - 2014-07-24 09:08 - 00321536 _____ (Microsoft Corporation) C:\Windows\system32\stobject.dll
2014-12-26 21:57 - 2014-07-24 09:05 - 00448000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\VAN.dll
2014-12-26 21:57 - 2014-07-24 09:01 - 01992192 _____ (Microsoft Corporation) C:\Windows\system32\XpsPrint.dll
2014-12-26 21:57 - 2014-07-24 09:00 - 02100736 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettingsAdminFlowUI.dll
2014-12-26 21:57 - 2014-07-24 08:58 - 00432640 _____ (Microsoft Corporation) C:\Windows\system32\wwanconn.dll
2014-12-26 21:57 - 2014-07-24 08:58 - 00288768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\stobject.dll
2014-12-26 21:57 - 2014-07-24 08:54 - 01290752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsPrint.dll
2014-12-26 21:57 - 2014-07-24 08:50 - 01182208 _____ (Microsoft Corporation) C:\Windows\system32\printui.dll
2014-12-26 21:57 - 2014-07-24 08:47 - 00576512 _____ (Microsoft Corporation) C:\Windows\system32\SettingSync.dll
2014-12-26 21:57 - 2014-07-24 08:44 - 01057792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\printui.dll
2014-12-26 21:57 - 2014-07-24 08:41 - 00459264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SettingSync.dll
2014-12-26 21:57 - 2014-07-24 08:28 - 01600000 _____ (Microsoft Corporation) C:\Windows\system32\workfolderssvc.dll
2014-12-26 21:57 - 2014-07-24 05:11 - 00513544 _____ () C:\Windows\SysWOW64\locale.nls
2014-12-26 21:57 - 2014-07-24 05:11 - 00513544 _____ () C:\Windows\system32\locale.nls
2014-12-26 21:57 - 2014-07-12 06:55 - 00268288 _____ (Microsoft Corporation) C:\Windows\system32\wisp.dll
2014-12-26 21:57 - 2014-07-12 05:58 - 00210944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wisp.dll
2014-12-26 21:57 - 2014-07-04 13:59 - 00295424 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ks.sys
2014-12-26 21:57 - 2014-07-04 11:29 - 00117248 _____ (Microsoft Corporation) C:\Windows\system32\AppxSip.dll
2014-12-26 21:57 - 2014-07-04 11:20 - 01656832 _____ (Microsoft Corporation) C:\Windows\system32\GdiPlus.dll
2014-12-26 21:57 - 2014-07-04 11:06 - 00095232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppxSip.dll
2014-12-26 21:57 - 2014-07-04 11:00 - 01351168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\GdiPlus.dll
2014-12-26 21:57 - 2014-07-04 10:30 - 00544768 _____ (Microsoft Corporation) C:\Windows\system32\AppxPackaging.dll
2014-12-26 21:57 - 2014-07-04 10:27 - 00474112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppxPackaging.dll
2014-12-26 21:57 - 2014-06-27 07:22 - 00246272 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys
2014-12-26 21:57 - 2014-06-26 01:32 - 01029632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mispace.dll
2014-12-26 21:57 - 2014-06-26 01:29 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\dab.dll
2014-12-26 21:57 - 2014-06-20 00:37 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2014-12-26 21:57 - 2014-06-19 03:13 - 00310080 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\volsnap.sys
2014-12-26 21:57 - 2014-06-14 06:46 - 02071552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2014-12-26 21:57 - 2014-06-07 13:46 - 00216368 _____ (Microsoft Corporation) C:\Windows\system32\rsaenh.dll
2014-12-26 21:57 - 2014-06-07 11:20 - 00189016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rsaenh.dll
2014-12-26 21:57 - 2014-06-05 15:00 - 01118040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys
2014-12-26 21:57 - 2014-06-05 11:18 - 01018368 _____ (Microsoft Corporation) C:\Windows\system32\aclui.dll
2014-12-26 21:57 - 2014-06-05 10:42 - 00889856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aclui.dll
2014-12-26 21:57 - 2014-05-31 06:00 - 01463808 _____ (Microsoft Corporation) C:\Windows\system32\wsecedit.dll
2014-12-26 21:57 - 2014-05-31 05:18 - 01319936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wsecedit.dll
2014-12-26 21:57 - 2014-05-29 07:23 - 00427008 _____ (Microsoft Corporation) C:\Windows\system32\clusapi.dll
2014-12-26 21:57 - 2014-05-29 06:25 - 00313856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\clusapi.dll
2014-12-26 21:57 - 2014-05-26 08:26 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\AppxSysprep.dll
2014-12-26 21:57 - 2014-05-10 11:12 - 00387896 _____ (Microsoft Corporation) C:\Windows\system32\bcryptprimitives.dll
2014-12-26 21:57 - 2014-05-10 09:46 - 00335680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcryptprimitives.dll
2014-12-26 21:57 - 2014-05-06 05:41 - 00486744 _____ (Microsoft Corporation) C:\Windows\system32\netcfgx.dll
2014-12-26 21:57 - 2014-05-06 01:55 - 00391000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netcfgx.dll
2014-12-26 21:57 - 2014-03-25 03:27 - 00160600 _____ (Microsoft Corporation) C:\Windows\system32\winmmbase.dll
2014-12-26 21:57 - 2014-03-25 03:27 - 00123920 _____ (Microsoft Corporation) C:\Windows\system32\winmm.dll
2014-12-26 21:57 - 2014-03-25 02:20 - 00128568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winmm.dll
2014-12-26 21:57 - 2014-03-25 02:20 - 00127544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winmmbase.dll
2014-12-26 21:39 - 2014-12-04 00:37 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-12-26 21:39 - 2014-12-04 00:09 - 00830464 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2014-12-26 21:39 - 2014-12-03 00:09 - 01083392 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-12-26 21:39 - 2014-12-03 00:09 - 00740864 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2014-12-26 21:39 - 2014-12-03 00:09 - 00412672 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2014-12-26 21:39 - 2014-12-03 00:09 - 00396288 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2014-12-26 21:39 - 2014-12-03 00:09 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2014-12-26 21:39 - 2014-11-10 03:29 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\DeviceSetupStatusProvider.dll
2014-12-26 21:39 - 2014-11-10 02:51 - 00028672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DeviceSetupStatusProvider.dll
2014-12-26 21:39 - 2014-11-01 00:57 - 01091072 _____ (Microsoft Corporation) C:\Windows\system32\MrmCoreR.dll
2014-12-26 21:39 - 2014-11-01 00:47 - 00790528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MrmCoreR.dll
2014-12-26 21:39 - 2014-10-31 00:39 - 01970432 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2014-12-26 21:39 - 2014-10-31 00:38 - 01612992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2014-12-26 21:39 - 2014-10-13 03:33 - 00116032 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2014-12-26 21:39 - 2014-10-11 01:58 - 03320320 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2014-12-26 21:39 - 2014-10-11 01:53 - 03607040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2014-12-26 21:39 - 2014-10-08 08:30 - 00110080 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll
2014-12-26 21:39 - 2014-10-08 08:09 - 00428032 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll
2014-12-26 21:39 - 2014-10-08 07:27 - 00325120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msihnd.dll
2014-12-26 21:39 - 2014-10-08 06:32 - 02773504 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2014-12-26 21:39 - 2014-10-08 06:19 - 02459136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2014-12-26 19:07 - 2015-01-08 14:34 - 00000000 ____D () C:\Program Files (x86)\OptuOn
2014-12-26 19:03 - 2015-01-08 14:34 - 00000000 ____D () C:\Program Files (x86)\Unisales
2014-12-26 19:01 - 2014-12-26 19:01 - 00000000 ____D () C:\Program Files (x86)\Share the Wealth
2014-12-26 19:00 - 2015-01-08 14:34 - 00000000 ____D () C:\Program Files (x86)\YouettubeAAdBillocke
2014-12-26 19:00 - 2015-01-08 14:34 - 00000000 ____D () C:\Program Files (x86)\unisAlEEs
2014-12-26 19:00 - 2014-12-26 19:00 - 00000000 ____D () C:\Program Files (x86)\uonaisaeles
2014-12-25 23:39 - 2014-12-25 23:39 - 00000000 ____D () C:\Users\Daniel\AppData\Local\Macromedia
2014-12-25 20:54 - 2015-01-09 08:07 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-12-25 20:54 - 2014-12-25 20:57 - 00003772 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-12-25 20:53 - 2014-12-25 20:57 - 00000000 ____D () C:\Users\Daniel\AppData\Local\Adobe
2014-12-25 13:32 - 2014-12-25 13:32 - 00001078 _____ () C:\Users\UpdatusUser\Desktop\Spielkiste.lnk
2014-12-25 13:32 - 2014-12-25 13:32 - 00000000 ____D () C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Der Planer 3
2014-12-25 13:32 - 2014-12-25 13:32 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Der Planer 3
2014-12-25 13:31 - 2014-12-25 13:31 - 00000000 ____D () C:\Program Files (x86)\phenomedia
2014-12-25 13:31 - 2014-12-25 13:31 - 00000000 ____D () C:\Program Files (x86)\bellaundben
2014-12-25 11:32 - 2015-01-07 11:23 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-12-25 11:32 - 2014-12-25 11:33 - 00000000 ____D () C:\Users\Daniel\AppData\Roaming\Mozilla
2014-12-25 11:32 - 2014-12-25 11:33 - 00000000 ____D () C:\Users\Daniel\AppData\Local\Mozilla
2014-12-25 11:32 - 2014-12-25 11:32 - 00000000 ____D () C:\ProgramData\Mozilla
2014-12-25 11:31 - 2014-12-25 11:32 - 39441776 _____ () C:\Users\Daniel\Downloads\Firefox_Setup_de34.0.5.exe
2014-12-25 11:28 - 2014-12-27 20:15 - 00000000 ____D () C:\Users\Daniel\AppData\Roaming\Skype
2014-12-25 11:28 - 2014-12-25 11:28 - 00000000 ____D () C:\Users\Daniel\AppData\Local\Skype
2014-12-25 11:02 - 2014-12-27 20:15 - 00000000 ____D () C:\ProgramData\Skype
2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Musik
2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Bilder
2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\Users\Default\Vorlagen
2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\Users\Default\Startmenü
2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung
2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\Users\Default\Lokale Einstellungen
2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\Users\Default\Eigene Dateien
2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\Users\Default\Druckumgebung
2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik
2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder
2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf
2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Anwendungsdaten
2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\Users\Default\Anwendungsdaten
2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik
2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder
2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf
2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Anwendungsdaten
2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\Programme
2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\ProgramData\Vorlagen
2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\ProgramData\Startmenü
2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\ProgramData\Microsoft\Windows\Start Menu\Programme
2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\ProgramData\Dokumente
2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\ProgramData\Anwendungsdaten
2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\Program Files\Gemeinsame Dateien
2014-12-25 01:02 - 2014-12-25 01:02 - 00000000 _SHDL () C:\Dokumente und Einstellungen
2014-12-25 00:48 - 2014-12-25 00:48 - 00002774 _____ () C:\Windows\System32\Tasks\CCleanerSkipUAC
2014-12-25 00:48 - 2014-12-25 00:48 - 00000838 _____ () C:\Users\Public\Desktop\CCleaner.lnk
2014-12-25 00:48 - 2014-12-25 00:48 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2014-12-25 00:48 - 2014-12-25 00:48 - 00000000 ____D () C:\Program Files\CCleaner
2014-12-25 00:47 - 2014-12-25 00:47 - 04188536 _____ (Piriform Ltd) C:\Users\Daniel\Downloads\ccsetup501_slim.exe
2014-12-25 00:47 - 2014-12-25 00:47 - 04188536 _____ (Piriform Ltd) C:\Users\Daniel\Downloads\ccsetup501_slim (1).exe
2014-12-25 00:44 - 2014-12-25 00:44 - 00000000 ____D () C:\Windows\3F5C371F8EA24F259D3DD0B4526E3AEA.TMP
2014-12-25 00:28 - 2014-12-25 00:28 - 00000221 _____ () C:\Users\Daniel\Desktop\Train Simulator 2015.url
2014-12-25 00:28 - 2014-12-25 00:28 - 00000000 ____D () C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2014-12-24 23:49 - 2015-01-09 12:46 - 00000000 ____D () C:\Program Files (x86)\Steam
2014-12-24 23:49 - 2014-12-24 23:49 - 00000933 _____ () C:\Users\Public\Desktop\Steam.lnk
2014-12-24 23:49 - 2014-12-24 23:49 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam
2014-12-24 23:08 - 2014-12-24 23:11 - 345295856 _____ (GIANTS Software ) C:\Users\Daniel\Downloads\FarmingSimulator2015Patch1.2DE.exe
2014-12-24 23:02 - 2014-12-25 00:45 - 00000000 ____D () C:\Users\Daniel\AppData\Roaming\NVIDIA
2014-12-24 23:01 - 2014-12-24 23:01 - 00000000 ____D () C:\Users\Daniel\Documents\My Games
2014-12-24 23:00 - 2014-12-24 23:00 - 00001295 _____ () C:\Users\Daniel\Desktop\Landwirtschafts Simulator 15 .lnk
2014-12-24 23:00 - 2014-12-24 23:00 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Landwirtschafts Simulator 2015
2014-12-24 22:55 - 2015-01-01 01:58 - 00000000 ____D () C:\Program Files (x86)\Landwirtschafts Simulator 2015
2014-12-24 22:41 - 2014-12-24 22:41 - 00000000 __SHD () C:\Users\Daniel\AppData\Local\EmieBrowserModeList
2014-12-24 21:40 - 2014-11-26 22:10 - 00714720 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-12-24 21:40 - 2014-11-26 22:10 - 00106976 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-12-24 21:14 - 2014-12-24 21:14 - 00000000 ____D () C:\Users\Daniel\AppData\Local\Acer Aspire R7 Tutorial
2014-12-24 21:07 - 2014-12-24 21:07 - 00000000 ____D () C:\Users\Public\Pokki
2014-12-24 21:04 - 2014-12-24 21:04 - 00001276 _____ () C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HD Audio-Manager.lnk
2014-12-24 21:04 - 2014-12-24 21:04 - 00000000 ____D () C:\Users\Daniel\AppData\Roaming\Atheros
2014-12-24 21:04 - 2014-12-24 21:04 - 00000000 ____D () C:\Users\Daniel\AppData\Local\iGware
2014-12-24 20:43 - 2014-12-24 20:47 - 00002177 _____ () C:\Users\Daniel\Desktop\BlueStacks App Player - CHIP Downloader.lnk
2014-12-24 20:29 - 2014-12-24 20:31 - 00000000 ____D () C:\Windows\system32\MRT
2014-12-24 20:29 - 2014-11-27 16:40 - 112710672 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-12-24 20:23 - 2014-12-24 20:23 - 00001823 _____ () C:\Users\Public\Desktop\Start BlueStacks.lnk
2014-12-24 20:22 - 2014-12-24 20:29 - 00000000 ____D () C:\Program Files (x86)\BlueStacks
2014-12-24 20:22 - 2014-12-24 20:22 - 00001880 _____ () C:\Users\Public\Desktop\Apps.lnk
2014-12-24 20:22 - 2014-12-24 20:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BlueStacks
2014-12-24 20:17 - 2014-12-25 00:49 - 00000000 ____D () C:\ProgramData\BlueStacksSetup
2014-12-24 20:17 - 2014-12-24 20:17 - 00000000 ____D () C:\Windows\System32\Tasks\Abelssoft
2014-12-24 20:17 - 2014-12-24 20:17 - 00000000 ____D () C:\Users\Daniel\AppData\Roaming\Abelssoft
2014-12-24 20:17 - 2014-12-24 20:17 - 00000000 ____D () C:\Users\Daniel\AppData\Local\Bluestacks
2014-12-24 20:17 - 2014-12-24 20:17 - 00000000 ____D () C:\Users\Daniel\AppData\Local\Abelssoft
2014-12-24 20:17 - 2014-12-24 20:17 - 00000000 ____D () C:\ProgramData\XDMessagingv4
2014-12-24 20:16 - 2014-12-24 20:16 - 00001066 _____ () C:\Users\Public\Desktop\CHIP Updater.lnk
2014-12-24 20:16 - 2014-12-24 20:16 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CHIP Updater
2014-12-24 20:16 - 2014-12-24 20:16 - 00000000 ____D () C:\Program Files (x86)\CHIP Updater
2014-12-24 20:14 - 2014-11-22 03:49 - 02885120 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-12-24 20:14 - 2014-11-22 03:34 - 06039552 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-12-24 20:14 - 2014-11-22 03:22 - 19749376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-12-24 20:14 - 2014-11-22 03:08 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-12-24 20:14 - 2014-11-22 03:05 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-12-24 20:14 - 2014-11-22 03:01 - 02277888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-12-24 20:14 - 2014-11-22 02:49 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-12-24 20:14 - 2014-11-22 02:49 - 00718848 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-12-24 20:14 - 2014-11-22 02:49 - 00373760 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-12-24 20:14 - 2014-11-22 02:46 - 02125312 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-12-24 20:14 - 2014-11-22 02:43 - 14412800 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-12-24 20:14 - 2014-11-22 02:35 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-12-24 20:14 - 2014-11-22 02:33 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-12-24 20:14 - 2014-11-22 02:29 - 04299264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-12-24 20:14 - 2014-11-22 02:23 - 00688640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-12-24 20:14 - 2014-11-22 02:23 - 00326656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-12-24 20:14 - 2014-11-22 02:22 - 02052096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-12-24 20:14 - 2014-11-22 02:15 - 01548288 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-12-24 20:14 - 2014-11-22 02:13 - 12836864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-12-24 20:14 - 2014-11-22 02:03 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-12-24 20:14 - 2014-11-22 02:00 - 01888256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-12-24 20:14 - 2014-11-22 01:56 - 01307136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-12-24 20:14 - 2014-11-22 01:54 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-12-24 20:14 - 2014-10-31 05:57 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-12-24 20:14 - 2014-10-31 05:50 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-12-24 20:14 - 2014-10-31 05:38 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-12-24 20:14 - 2014-10-31 05:30 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-12-24 20:14 - 2014-10-31 04:44 - 02865152 _____ (Microsoft Corporation) C:\Windows\system32\actxprxy.dll
2014-12-24 20:14 - 2014-10-31 04:11 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-12-24 20:14 - 2014-10-31 04:02 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-12-24 20:14 - 2014-10-31 03:26 - 01042944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\actxprxy.dll
2014-12-24 20:13 - 2014-12-24 20:14 - 51859586 _____ () C:\Users\Daniel\Downloads\com.supercell.clashofclans_6.322.3.apk
2014-12-24 20:13 - 2014-12-24 20:13 - 00000884 _____ () C:\Users\Public\Desktop\Acer Care Center.lnk
2014-12-24 20:13 - 2014-11-22 04:13 - 25059840 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-12-24 20:13 - 2014-11-22 03:50 - 00580096 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-12-24 20:13 - 2014-11-22 03:49 - 00417280 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2014-12-24 20:13 - 2014-11-22 03:48 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-12-24 20:13 - 2014-11-22 03:35 - 00812544 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2014-12-24 20:13 - 2014-11-22 03:07 - 00501248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-12-24 20:13 - 2014-11-22 03:06 - 00340992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2014-12-24 20:13 - 2014-11-22 03:06 - 00145408 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2014-12-24 20:13 - 2014-11-22 03:05 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2014-12-24 20:13 - 2014-11-22 02:59 - 01032704 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll
2014-12-24 20:13 - 2014-11-22 02:55 - 00661504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2014-12-24 20:13 - 2014-11-22 02:52 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2014-12-24 20:13 - 2014-11-22 02:34 - 00128000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2014-12-24 20:13 - 2014-11-22 02:29 - 00880128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll
2014-12-24 20:13 - 2014-11-22 02:28 - 02358272 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-12-24 20:13 - 2014-11-22 02:25 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2014-12-24 20:13 - 2014-10-31 06:12 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2014-12-24 20:13 - 2014-10-31 06:12 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2014-12-24 20:13 - 2014-10-31 06:10 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2014-12-24 20:13 - 2014-10-31 06:09 - 00064512 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2014-12-24 20:13 - 2014-10-31 06:08 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2014-12-24 20:13 - 2014-10-31 06:06 - 00237568 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2014-12-24 20:13 - 2014-10-31 06:06 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-12-24 20:13 - 2014-10-31 06:06 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-12-24 20:13 - 2014-10-31 05:56 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-12-24 20:13 - 2014-10-31 05:54 - 00132096 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2014-12-24 20:13 - 2014-10-31 05:53 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-12-24 20:13 - 2014-10-31 05:52 - 00108544 _____ (Microsoft Corporation) C:\Windows\system32\hlink.dll
2014-12-24 20:13 - 2014-10-31 05:51 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-12-24 20:13 - 2014-10-31 05:51 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-12-24 20:13 - 2014-10-31 05:40 - 00033280 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2014-12-24 20:13 - 2014-10-31 05:29 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2014-12-24 20:13 - 2014-10-31 05:29 - 00087552 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2014-12-24 20:13 - 2014-10-31 05:28 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2014-12-24 20:13 - 2014-10-31 05:25 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-12-24 20:13 - 2014-10-31 05:24 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2014-12-24 20:13 - 2014-10-31 05:19 - 00152064 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2014-12-24 20:13 - 2014-10-31 04:42 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2014-12-24 20:13 - 2014-10-31 04:28 - 00137728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2014-12-24 20:13 - 2014-10-31 04:28 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2014-12-24 20:13 - 2014-10-31 04:27 - 00152064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2014-12-24 20:13 - 2014-10-31 04:26 - 00057344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2014-12-24 20:13 - 2014-10-31 04:25 - 00011264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2014-12-24 20:13 - 2014-10-31 04:24 - 00235520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2014-12-24 20:13 - 2014-10-31 04:24 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-12-24 20:13 - 2014-10-31 04:23 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-12-24 20:13 - 2014-10-31 04:16 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-12-24 20:13 - 2014-10-31 04:15 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-12-24 20:13 - 2014-10-31 04:14 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2014-12-24 20:13 - 2014-10-31 04:13 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-12-24 20:13 - 2014-10-31 04:13 - 00099328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\hlink.dll
2014-12-24 20:13 - 2014-10-31 04:12 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-12-24 20:13 - 2014-10-31 04:03 - 00027136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2014-12-24 20:13 - 2014-10-31 03:57 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-12-24 20:13 - 2014-10-31 03:56 - 00091136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2014-12-24 20:13 - 2014-10-31 03:56 - 00090624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2014-12-24 20:13 - 2014-10-31 03:56 - 00073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2014-12-24 20:13 - 2014-10-31 03:53 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-12-24 20:13 - 2014-10-31 03:53 - 00052736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2014-12-24 20:13 - 2014-10-31 03:48 - 00130048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2014-12-24 20:13 - 2014-10-31 03:24 - 00040448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2014-12-24 20:13 - 2014-02-06 12:30 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-12-24 20:12 - 2014-11-07 05:16 - 01762840 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2014-12-24 20:12 - 2014-11-07 04:26 - 01489072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2014-12-24 20:12 - 2014-10-30 23:37 - 00129536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\poqexec.exe
2014-12-24 20:12 - 2014-10-30 23:34 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe
2014-12-24 20:12 - 2014-10-13 03:43 - 00238912 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\sdbus.sys
2014-12-24 20:12 - 2014-10-13 03:43 - 00153920 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dumpsd.sys
2014-12-24 20:12 - 2014-10-13 03:43 - 00086336 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pdc.sys
2014-12-24 20:12 - 2014-10-13 03:43 - 00039744 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\intelpep.sys
2014-12-24 20:10 - 2014-11-10 00:19 - 00991232 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2014-12-24 20:10 - 2014-11-10 00:19 - 00806400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2014-12-24 20:10 - 2014-11-10 00:18 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\pku2u.dll
2014-12-24 20:10 - 2014-11-10 00:18 - 00208896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pku2u.dll
2014-12-24 20:09 - 2014-10-23 06:48 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll
2014-12-24 20:09 - 2014-10-23 06:05 - 00072192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\packager.dll
2014-12-24 20:09 - 2014-10-17 08:01 - 00789184 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2014-12-24 20:09 - 2014-10-17 07:58 - 00602768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll
2014-12-24 20:09 - 2014-10-10 02:58 - 00177472 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2014-12-24 20:09 - 2014-10-10 02:58 - 00027456 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpvideominiport.sys
2014-12-24 20:09 - 2014-10-10 02:44 - 00563976 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2014-12-24 20:09 - 2014-10-08 08:37 - 00736768 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2014-12-24 20:09 - 2014-10-08 08:37 - 00154112 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2014-12-24 20:09 - 2014-10-08 08:34 - 00131584 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll
2014-12-24 20:09 - 2014-10-08 08:24 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\rfxvmt.dll
2014-12-24 20:09 - 2014-10-08 07:56 - 00445440 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
2014-12-24 20:09 - 2014-10-08 07:51 - 00736768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2014-12-24 20:09 - 2014-10-08 07:51 - 00154112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2014-12-24 20:09 - 2014-10-08 07:18 - 00324096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll
2014-12-24 20:09 - 2014-10-08 07:17 - 01441792 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-12-24 20:09 - 2014-10-08 06:23 - 03547648 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2014-12-24 20:09 - 2014-10-07 07:28 - 00500016 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll
2014-12-24 20:09 - 2014-10-07 07:27 - 00482872 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll
2014-12-24 20:09 - 2014-10-07 07:27 - 00394120 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll
2014-12-24 20:09 - 2014-10-07 07:27 - 00272248 _____ (Microsoft Corporation) C:\Windows\system32\audiodg.exe
2014-12-24 20:09 - 2014-10-07 07:27 - 00108432 _____ (Microsoft Corporation) C:\Windows\system32\EncDump.dll
2014-12-24 20:09 - 2014-10-07 04:34 - 00370424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll
2014-12-24 20:09 - 2014-10-07 04:34 - 00344536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AUDIOKSE.dll
2014-12-24 20:09 - 2014-10-07 04:33 - 00424544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioEng.dll
2014-12-24 20:09 - 2014-10-07 04:30 - 04182016 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-12-24 20:09 - 2014-10-07 02:54 - 00226304 _____ (Microsoft Corporation) C:\Windows\system32\AudioEndpointBuilder.dll
2014-12-24 20:09 - 2014-10-07 02:46 - 00911360 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2014-12-24 20:09 - 2014-09-27 08:13 - 00104336 _____ (Microsoft Corporation) C:\Windows\system32\ncryptsslp.dll
2014-12-24 20:09 - 2014-09-27 06:24 - 00088800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncryptsslp.dll
2014-12-24 20:09 - 2014-09-27 04:38 - 00426496 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2014-12-24 20:09 - 2014-09-27 04:30 - 00185856 _____ (Microsoft Corporation) C:\Windows\system32\dpapisrv.dll
2014-12-24 20:09 - 2014-09-27 04:17 - 00357376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2014-12-24 20:09 - 2014-08-23 06:18 - 02149376 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2014-12-24 20:09 - 2014-08-23 06:03 - 01346048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2014-12-24 20:08 - 2015-01-04 11:43 - 00000000 ____D () C:\Program Files (x86)\Google
2014-12-24 20:08 - 2014-12-24 20:08 - 00000000 ____D () C:\Users\Daniel\AppData\Local\Google
2014-12-24 20:08 - 2014-09-10 07:25 - 00474432 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2014-12-24 20:08 - 2014-09-08 04:07 - 02497344 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2014-12-24 20:08 - 2014-09-08 04:07 - 00428864 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
2014-12-24 20:08 - 2014-09-07 23:08 - 00389176 _____ () C:\Windows\system32\ApnDatabase.xml
2014-12-24 20:08 - 2014-09-04 23:30 - 00822272 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll
2014-12-24 20:08 - 2014-09-04 23:21 - 01053184 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll
2014-12-24 20:08 - 2014-09-04 04:05 - 00836176 _____ (Microsoft Corporation) C:\Windows\system32\mfmp4srcsnk.dll
2014-12-24 20:08 - 2014-09-04 03:22 - 00670384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfmp4srcsnk.dll
2014-12-24 20:08 - 2014-09-04 02:01 - 00448512 _____ (Microsoft Corporation) C:\Windows\system32\puiobj.dll
2014-12-24 20:08 - 2014-09-04 01:32 - 00334336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\puiobj.dll
2014-12-24 20:08 - 2014-09-04 01:10 - 00118272 _____ (Microsoft Corporation) C:\Windows\system32\winbici.dll
2014-12-24 20:08 - 2014-08-31 01:17 - 00148800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBSTOR.SYS
2014-12-24 20:08 - 2014-08-31 01:15 - 21197152 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2014-12-24 20:08 - 2014-08-30 23:59 - 18723112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2014-12-24 20:08 - 2014-08-30 23:05 - 00615424 _____ (Microsoft Corporation) C:\Windows\system32\FXSCOMEX.dll
2014-12-24 20:08 - 2014-08-30 22:58 - 00275968 _____ (Microsoft Corporation) C:\Windows\system32\FXSAPI.dll
2014-12-24 20:08 - 2014-08-30 22:04 - 00941568 _____ (Microsoft Corporation) C:\Windows\system32\MFMediaEngine.dll
2014-12-24 20:08 - 2014-08-30 21:53 - 00239104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FXSAPI.dll
2014-12-24 20:08 - 2014-08-30 21:17 - 00799744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFMediaEngine.dll
2014-12-24 20:08 - 2014-08-28 03:55 - 07484224 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2014-12-24 20:08 - 2014-08-28 01:21 - 02480128 _____ (Microsoft Corporation) C:\Windows\system32\WsmSvc.dll
2014-12-24 20:08 - 2014-08-28 01:06 - 02030592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmSvc.dll
2014-12-24 20:08 - 2014-08-23 06:14 - 13424128 _____ (Microsoft Corporation) C:\Windows\system32\twinui.dll
2014-12-24 20:08 - 2014-08-23 06:04 - 11820544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.dll
2014-12-24 20:08 - 2014-08-23 05:50 - 02714112 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers.dll
2014-12-24 20:08 - 2014-08-02 01:51 - 00545792 _____ (Microsoft Corporation) C:\Windows\system32\untfs.dll
2014-12-24 20:08 - 2014-08-02 01:35 - 00485376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\untfs.dll
2014-12-24 20:08 - 2014-07-24 12:22 - 00308736 _____ (Microsoft Corporation) C:\Windows\system32\compstui.dll
2014-12-24 20:08 - 2014-07-24 10:53 - 00215552 _____ (Microsoft Corporation) C:\Windows\system32\prnntfy.dll
2014-12-24 20:08 - 2014-07-24 10:13 - 00195584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\prnntfy.dll
2014-12-24 20:08 - 2014-07-24 09:20 - 00187392 _____ (Microsoft Corporation) C:\Windows\system32\puiapi.dll
2014-12-24 20:08 - 2014-07-24 09:08 - 00162816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\puiapi.dll
2014-12-24 20:08 - 2014-07-24 08:49 - 00263680 _____ (Microsoft Corporation) C:\Windows\system32\DafPrintProvider.dll
2014-12-24 20:08 - 2014-07-24 08:43 - 00200192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DafPrintProvider.dll
2014-12-24 20:07 - 2014-12-24 20:07 - 42184784 _____ (Google Inc.) C:\Users\Daniel\Downloads\ChromeStandaloneSetup.exe
2014-12-24 20:07 - 2014-10-18 10:55 - 00055776 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2014-12-24 20:07 - 2014-10-18 09:09 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2014-12-24 20:07 - 2014-10-18 09:09 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2014-12-24 20:07 - 2014-10-18 08:25 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2014-12-24 20:07 - 2014-10-18 07:50 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\wuaext.dll
2014-12-24 20:07 - 2014-10-18 07:38 - 03557376 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2014-12-24 20:07 - 2014-10-18 07:27 - 00035840 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2014-12-24 20:07 - 2014-10-18 07:26 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2014-12-24 20:07 - 2014-10-18 07:23 - 00407552 _____ (Microsoft Corporation) C:\Windows\system32\WUSettingsProvider.dll
2014-12-24 20:07 - 2014-10-18 07:23 - 00095744 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2014-12-24 20:07 - 2014-10-18 07:21 - 00894976 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2014-12-24 20:07 - 2014-10-18 07:20 - 01714176 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2014-12-24 20:07 - 2014-10-18 07:14 - 00124928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2014-12-24 20:07 - 2014-10-18 07:14 - 00029696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2014-12-24 20:07 - 2014-10-18 07:12 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2014-12-24 20:07 - 2014-10-18 07:11 - 00723968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2014-12-24 20:07 - 2014-09-22 05:38 - 01519488 _____ (Microsoft Corporation) C:\Windows\system32\user32.dll
2014-12-24 20:07 - 2014-09-22 04:06 - 00258368 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdFilter.sys
2014-12-24 20:07 - 2014-09-22 04:06 - 00114496 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdNisDrv.sys
2014-12-24 20:07 - 2014-09-22 03:49 - 00035320 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdBoot.sys
2014-12-24 20:07 - 2014-09-19 01:16 - 01346048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user32.dll
2014-12-24 20:07 - 2014-09-02 23:08 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\winshfhc.dll
2014-12-24 20:07 - 2014-09-02 23:08 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winshfhc.dll
2014-12-24 20:06 - 2014-08-16 05:08 - 01507648 _____ (Microsoft Corporation) C:\Windows\system32\propsys.dll
2014-12-24 20:06 - 2014-08-16 05:01 - 01710184 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2014-12-24 20:06 - 2014-08-16 04:58 - 01112512 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2014-12-24 20:06 - 2014-08-16 04:16 - 01205976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\propsys.dll
2014-12-24 20:06 - 2014-08-16 04:03 - 01467384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2014-12-24 20:06 - 2014-08-16 02:31 - 00838144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2014-12-24 20:06 - 2014-08-16 02:04 - 00359424 _____ (Microsoft Corporation) C:\Windows\system32\Wldap32.dll
2014-12-24 20:06 - 2014-08-16 01:58 - 00287744 _____ (Microsoft Corporation) C:\Windows\system32\SystemEventsBrokerServer.dll
2014-12-24 20:06 - 2014-08-16 01:53 - 00118272 _____ (Microsoft Corporation) C:\Windows\system32\httpprxm.dll
2014-12-24 20:06 - 2014-08-16 01:46 - 00290816 _____ (Microsoft Corporation) C:\Windows\system32\ProximityService.dll
2014-12-24 20:06 - 2014-08-16 01:45 - 00267776 _____ (Microsoft Corporation) C:\Windows\system32\bisrv.dll
2014-12-24 20:06 - 2014-08-16 01:43 - 00321024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Wldap32.dll
2014-12-24 20:06 - 2014-08-16 01:43 - 00075776 _____ (Microsoft Corporation) C:\Windows\system32\adhsvc.dll
2014-12-24 20:06 - 2014-08-16 01:31 - 00914432 _____ (Microsoft Corporation) C:\Windows\system32\iphlpsvc.dll
2014-12-24 20:06 - 2014-08-16 01:31 - 00286208 _____ (Microsoft Corporation) C:\Windows\system32\pcsvDevice.dll
2014-12-24 20:06 - 2014-08-16 01:29 - 00249344 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2014-12-24 20:06 - 2014-08-16 01:23 - 01106432 _____ (Microsoft Corporation) C:\Windows\system32\SearchFolder.dll
2014-12-24 20:06 - 2014-08-16 01:22 - 00717824 _____ (Microsoft Corporation) C:\Windows\system32\SkyDriveTelemetry.dll
2014-12-24 20:06 - 2014-08-16 01:22 - 00286208 _____ (Microsoft Corporation) C:\Windows\system32\SkyDriveShell.dll
2014-12-24 20:06 - 2014-08-16 01:19 - 00189952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2014-12-24 20:06 - 2014-08-16 01:18 - 04758528 _____ (Microsoft Corporation) C:\Windows\system32\SyncEngine.dll
2014-12-24 20:06 - 2014-08-16 01:17 - 08757760 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Search.dll
2014-12-24 20:06 - 2014-08-16 01:14 - 00265216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SkyDriveShell.dll
2014-12-24 20:06 - 2014-08-16 01:13 - 06649344 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2014-12-24 20:06 - 2014-08-16 01:13 - 05902848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Search.dll
2014-12-24 20:06 - 2014-08-16 01:13 - 00840192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchFolder.dll
2014-12-24 20:06 - 2014-08-16 01:11 - 00920064 _____ (Microsoft Corporation) C:\Windows\system32\WSShared.dll
2014-12-24 20:06 - 2014-08-16 01:10 - 01120768 _____ (Microsoft Corporation) C:\Windows\system32\SkyDrive.exe
2014-12-24 20:06 - 2014-08-16 01:08 - 05777408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2014-12-24 20:06 - 2014-08-16 01:07 - 00756224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSShared.dll
2014-12-24 20:06 - 2014-07-24 16:28 - 00468288 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBHUB3.SYS
2014-12-24 20:06 - 2014-07-24 12:42 - 01200640 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bthport.sys
2014-12-24 20:06 - 2014-07-24 12:41 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bridge.sys
2014-12-24 20:06 - 2014-07-24 11:09 - 01057280 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll
2014-12-24 20:06 - 2014-07-24 10:27 - 00855552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdvidcrl.dll
2014-12-24 20:05 - 2014-09-04 01:12 - 00590336 _____ (Microsoft Corporation) C:\Windows\system32\rastls.dll
2014-12-24 20:05 - 2014-09-04 01:01 - 00514048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rastls.dll
2014-12-24 20:05 - 2014-06-09 23:13 - 00035480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TsWpfWrp.exe
2014-12-24 20:05 - 2014-06-09 23:13 - 00035480 _____ (Microsoft Corporation) C:\Windows\system32\TsWpfWrp.exe
2014-12-24 20:04 - 2014-08-23 08:48 - 02374784 _____ (Microsoft Corporation) C:\Windows\explorer.exe
2014-12-24 20:04 - 2014-08-23 08:13 - 02084520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\explorer.exe
2014-12-24 20:04 - 2014-08-23 07:10 - 00068096 _____ (Microsoft Corporation) C:\Windows\system32\UXInit.dll
2014-12-24 20:04 - 2014-08-23 06:32 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UXInit.dll
2014-12-24 20:04 - 2014-08-23 05:33 - 00796672 _____ (Microsoft Corporation) C:\Windows\system32\uDWM.dll
2014-12-24 20:04 - 2014-08-15 01:36 - 00146752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msgpioclx.sys
2014-12-24 20:04 - 2014-08-02 01:18 - 01212928 _____ (Microsoft Corporation) C:\Windows\system32\schedsvc.dll
2014-12-24 20:04 - 2014-07-30 02:56 - 00299520 _____ (Microsoft Corporation) C:\Windows\system32\WSDMon.dll
2014-12-24 20:04 - 2014-07-29 06:22 - 00205824 _____ (Microsoft Corporation) C:\Windows\system32\tcpmon.dll
2014-12-24 20:03 - 2014-07-24 04:20 - 00875688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcr120_clr0400.dll
2014-12-24 20:03 - 2014-07-24 04:20 - 00869544 _____ (Microsoft Corporation) C:\Windows\system32\msvcr120_clr0400.dll
2014-12-24 20:02 - 2014-08-07 03:12 - 01336624 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2014-12-24 20:02 - 2014-08-02 04:56 - 01064448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2014-12-24 20:02 - 2014-07-15 19:16 - 03048880 _____ (Microsoft Corporation) C:\Windows\system32\WpcMon.exe
2014-12-24 20:02 - 2014-07-15 09:29 - 03118080 _____ (Microsoft Corporation) C:\Windows\system32\Wpc.dll
2014-12-24 20:02 - 2014-07-15 09:22 - 02861056 _____ (Microsoft Corporation) C:\Windows\system32\WpcWebSync.dll
2014-12-24 20:02 - 2014-07-15 09:03 - 02344448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Wpc.dll
2014-12-24 20:02 - 2014-07-12 05:17 - 00623616 _____ (Microsoft Corporation) C:\Windows\system32\MDMAgent.exe
2014-12-24 20:02 - 2014-05-01 14:31 - 00055328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wpcfltr.sys
2014-12-24 20:01 - 2014-06-20 02:48 - 01273184 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2014-12-24 20:01 - 2014-06-20 00:52 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2014-12-24 20:01 - 2014-06-13 02:15 - 00517528 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll
2014-12-24 20:01 - 2014-06-13 02:14 - 01557848 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2014-12-24 20:01 - 2014-06-13 01:10 - 00406400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll
2014-12-24 20:01 - 2014-06-06 12:34 - 02133504 _____ (Microsoft Corporation) C:\Windows\system32\dwmcore.dll
2014-12-24 20:01 - 2014-06-02 03:10 - 00423768 _____ (Microsoft Corporation) C:\Windows\system32\hal.dll
2014-12-24 20:01 - 2014-05-31 11:07 - 00440664 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2014-12-24 20:01 - 2014-05-31 11:07 - 00089944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2014-12-24 20:01 - 2014-05-31 11:07 - 00027480 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2014-12-24 20:01 - 2014-05-31 07:30 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2014-12-24 20:01 - 2014-05-31 07:27 - 00110592 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFPf.sys
2014-12-24 20:01 - 2014-05-31 07:26 - 00227840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFRd.sys
2014-12-24 20:01 - 2014-05-31 05:01 - 00284672 _____ (Microsoft Corporation) C:\Windows\system32\WUDFHost.exe
2014-12-24 20:01 - 2014-05-31 05:01 - 00209408 _____ (Microsoft Corporation) C:\Windows\system32\WUDFPlatform.dll
2014-12-24 20:01 - 2014-05-31 05:01 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\WUDFSvc.dll
2014-12-24 20:01 - 2014-05-27 10:56 - 00323584 _____ (Microsoft Corporation) C:\Windows\system32\DaOtpCredentialProvider.dll
2014-12-24 20:01 - 2014-05-27 10:53 - 00270848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DaOtpCredentialProvider.dll
2014-12-24 19:57 - 2014-06-06 14:04 - 00586240 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2014-12-24 19:57 - 2014-06-06 13:18 - 00488960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2014-12-24 19:57 - 2014-05-31 11:06 - 00555736 _____ (Microsoft Corporation) C:\Windows\system32\twinapi.appcore.dll
2014-12-24 19:57 - 2014-05-31 03:37 - 01054208 _____ (Microsoft Corporation) C:\Windows\system32\twinui.appcore.dll
2014-12-24 19:57 - 2014-05-31 03:35 - 00828928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.appcore.dll
2014-12-24 19:57 - 2014-05-30 04:03 - 00563200 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2014-12-24 19:47 - 2014-05-19 07:31 - 00057856 _____ (Microsoft Corporation) C:\Windows\system32\drvcfg.exe
2014-12-24 19:47 - 2014-05-19 07:21 - 00110592 _____ (Microsoft Corporation) C:\Windows\system32\drvinst.exe
2014-12-24 19:47 - 2014-05-19 06:23 - 00098816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drvinst.exe
2014-12-24 19:47 - 2014-05-01 06:24 - 02834944 _____ (Microsoft Corporation) C:\Windows\system32\wpccpl.dll
2014-12-24 19:47 - 2014-04-30 05:43 - 01975296 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2014-12-24 19:47 - 2014-04-30 05:26 - 01345536 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2014-12-24 19:47 - 2014-04-30 04:47 - 01509888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2014-12-24 19:39 - 2014-12-24 19:39 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_LocationProvider_01_11_00.Wdf
2014-12-24 19:38 - 2015-01-09 07:19 - 00003942 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{61AB47E5-AB5A-4D8B-89BB-14B1822A6C56}
2014-12-24 19:38 - 2014-12-24 19:38 - 00000000 __SHD () C:\Users\Daniel\AppData\Local\EmieUserList
2014-12-24 19:38 - 2014-12-24 19:38 - 00000000 __SHD () C:\Users\Daniel\AppData\Local\EmieSiteList
2014-12-24 19:33 - 2015-01-08 21:38 - 00003596 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-223822767-1807346583-171944255-1002
2014-12-24 19:31 - 2014-12-24 19:31 - 00002001 _____ () C:\Users\Public\Desktop\abMedia.lnk
2014-12-24 19:29 - 2014-12-24 19:29 - 00000000 ____D () C:\Users\Public\OEM
2014-12-24 19:28 - 2015-01-09 12:48 - 00000000 ____D () C:\Users\Daniel\AppData\Local\CrashDumps
2014-12-24 19:28 - 2014-12-24 20:22 - 00000000 ____D () C:\ProgramData\BlueStacks
2014-12-24 19:28 - 2014-12-24 19:28 - 00003334 _____ () C:\Windows\System32\Tasks\AcerCloud
2014-12-24 19:28 - 2014-12-24 19:28 - 00000000 ____D () C:\Users\Daniel\AppData\Roaming\WildTangent
2014-12-24 19:27 - 2015-01-09 12:47 - 00000000 ___RD () C:\Users\Daniel\OneDrive
2014-12-24 19:27 - 2014-12-24 19:28 - 00002102 _____ () C:\Users\Public\Desktop\Acer Portal.lnk
2014-12-24 19:26 - 2015-01-09 12:47 - 00000000 ____D () C:\Users\Daniel\AppData\Local\clear.fi
2014-12-24 19:26 - 2014-12-24 19:26 - 00000000 ____D () C:\Users\Daniel\PicStream
2014-12-24 19:13 - 2014-12-24 19:13 - 00000000 ____D () C:\Users\Daniel\AppData\Local\AOP SDK
2014-12-24 19:12 - 2014-12-24 19:12 - 00000000 ____D () C:\Users\Daniel\AppData\Roaming\Macromedia
2014-12-24 19:12 - 2014-12-24 19:12 - 00000000 ____D () C:\Program Files (x86)\OEM
2014-12-24 19:11 - 2015-01-08 12:57 - 00001013 _____ () C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-12-24 19:11 - 2014-12-31 16:20 - 00000000 ____D () C:\Users\Daniel\AppData\Local\Packages
2014-12-24 19:11 - 2014-12-24 21:17 - 00000000 ____D () C:\Users\Daniel\AppData\Local\VirtualStore
2014-12-24 19:11 - 2014-12-24 19:11 - 00001786 _____ () C:\Users\Public\Desktop\Online kaufen.lnk
2014-12-24 19:11 - 2014-12-24 19:11 - 00000180 _____ () C:\Windows\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2014-12-24 19:11 - 2014-12-24 19:11 - 00000000 ____D () C:\Windows\System32\Tasks\WPD
2014-12-24 19:11 - 2014-12-24 19:11 - 00000000 ____D () C:\Windows\oem
2014-12-24 19:11 - 2014-12-24 19:11 - 00000000 ____D () C:\Users\Daniel\AppData\Roaming\Adobe
2014-12-24 19:11 - 2014-12-24 19:11 - 00000000 ____D () C:\Users\Daniel\AppData\Local\OEM
2014-12-24 19:11 - 2014-12-24 19:11 - 00000000 ____D () C:\ProgramData\OEM_YAHOO
2014-12-24 19:11 - 2014-12-24 19:11 - 00000000 ____D () C:\Program Files\Accessory Store
2014-12-24 19:10 - 2014-12-26 15:58 - 00000000 ____D () C:\Users\Daniel
2014-12-24 19:10 - 2014-12-24 19:10 - 00000020 ___SH () C:\Users\Daniel\ntuser.ini
2014-12-24 19:10 - 2014-12-24 19:10 - 00000000 _SHDL () C:\Users\Daniel\Vorlagen
2014-12-24 19:10 - 2014-12-24 19:10 - 00000000 _SHDL () C:\Users\Daniel\Startmenü
2014-12-24 19:10 - 2014-12-24 19:10 - 00000000 _SHDL () C:\Users\Daniel\Netzwerkumgebung
2014-12-24 19:10 - 2014-12-24 19:10 - 00000000 _SHDL () C:\Users\Daniel\Lokale Einstellungen
2014-12-24 19:10 - 2014-12-24 19:10 - 00000000 _SHDL () C:\Users\Daniel\Eigene Dateien
2014-12-24 19:10 - 2014-12-24 19:10 - 00000000 _SHDL () C:\Users\Daniel\Druckumgebung
2014-12-24 19:10 - 2014-12-24 19:10 - 00000000 _SHDL () C:\Users\Daniel\Documents\Eigene Musik
2014-12-24 19:10 - 2014-12-24 19:10 - 00000000 _SHDL () C:\Users\Daniel\Documents\Eigene Bilder
2014-12-24 19:10 - 2014-12-24 19:10 - 00000000 _SHDL () C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-12-24 19:10 - 2014-12-24 19:10 - 00000000 _SHDL () C:\Users\Daniel\AppData\Local\Verlauf
2014-12-24 19:10 - 2014-12-24 19:10 - 00000000 _SHDL () C:\Users\Daniel\AppData\Local\Anwendungsdaten
2014-12-24 19:10 - 2014-12-24 19:10 - 00000000 _SHDL () C:\Users\Daniel\Anwendungsdaten
2014-12-24 19:10 - 2014-07-25 22:18 - 00000000 ___RD () C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-12-24 19:10 - 2014-03-18 11:33 - 00000000 ___RD () C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2014-12-24 19:10 - 2014-03-18 11:13 - 00000369 _____ () C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pictures.lnk
2014-12-24 19:10 - 2014-03-18 11:13 - 00000369 _____ () C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Documents.lnk
2014-12-24 19:10 - 2013-08-22 16:36 - 00000000 ___RD () C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-12-24 19:10 - 2013-08-22 16:36 - 00000000 ____D () C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-01-09 12:49 - 2014-07-25 22:21 - 00000000 ___SD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acer
2015-01-09 12:49 - 2014-07-25 22:20 - 00000000 ____D () C:\Program Files (x86)\Acer
2015-01-09 12:49 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\AppReadiness
2015-01-09 12:43 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\sru
2015-01-09 00:17 - 2014-08-31 00:14 - 00765582 _____ () C:\Windows\system32\perfh007.dat
2015-01-09 00:17 - 2014-08-31 00:14 - 00159366 _____ () C:\Windows\system32\perfc007.dat
2015-01-09 00:17 - 2014-03-18 11:03 - 01776918 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-01-08 23:25 - 2013-08-22 15:45 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-01-08 23:24 - 2014-08-30 14:59 - 00000000 ____D () C:\Program Files (x86)\AGEIA Technologies
2015-01-08 14:42 - 2013-08-22 14:25 - 00262144 ___SH () C:\Windows\system32\config\BBI
2015-01-08 14:35 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\Vss
2015-01-06 23:00 - 2014-07-25 22:28 - 00000000 ____D () C:\ProgramData\McAfee
2015-01-06 23:00 - 2014-07-25 22:28 - 00000000 ____D () C:\Program Files\Common Files\mcafee
2015-01-06 22:48 - 2014-07-25 22:21 - 00000000 ____D () C:\ProgramData\Package Cache
2015-01-06 22:40 - 2013-08-22 16:36 - 00000000 ___HD () C:\Windows\ELAMBKUP
2015-01-06 22:40 - 2013-08-22 14:25 - 00262144 ___SH () C:\Windows\system32\config\ELAM
2015-01-06 22:38 - 2014-07-25 22:00 - 00000000 ____D () C:\Users\Administrator
2015-01-06 15:09 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\LiveKernelReports
2015-01-03 21:54 - 2013-08-22 15:44 - 00347808 _____ () C:\Windows\system32\FNTCACHE.DAT
2015-01-03 21:15 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\NDF
2015-01-02 02:21 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\rescache
2015-01-01 01:46 - 2014-03-18 10:45 - 00000000 ____D () C:\Program Files\Windows Journal
2015-01-01 01:46 - 2013-08-22 16:36 - 00000000 ___RD () C:\Windows\ToastData
2015-01-01 01:46 - 2013-08-22 16:36 - 00000000 ___RD () C:\Windows\ImmersiveControlPanel
2015-01-01 01:46 - 2013-08-22 16:36 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2015-01-01 01:46 - 2013-08-22 16:36 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2015-01-01 01:46 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\SysWOW64\setup
2015-01-01 01:46 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\SysWOW64\InputMethod
2015-01-01 01:46 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\setup
2015-01-01 01:46 - 2013-08-22 14:36 - 00000000 ____D () C:\Windows\system32\oobe
2014-12-31 00:11 - 2013-08-22 16:20 - 00000000 ____D () C:\Windows\CbsTemp
2014-12-27 00:15 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files\Common Files\microsoft shared
2014-12-25 01:02 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files\Windows NT
2014-12-25 01:02 - 2013-08-22 14:36 - 00000000 __RHD () C:\Users\Default
2014-12-25 00:48 - 2014-07-25 22:58 - 00000000 ____D () C:\Windows\Panther
2014-12-24 21:36 - 2013-08-22 16:36 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-12-24 21:36 - 2013-08-22 16:36 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-12-24 21:36 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\WinStore
2014-12-24 21:36 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\sr-Latn-RS
2014-12-24 21:36 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\sr-Latn-CS
2014-12-24 21:36 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\PolicyDefinitions
2014-12-24 21:36 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\MediaViewer
2014-12-24 21:36 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\FileManager
2014-12-24 21:36 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\Camera
2014-12-24 21:36 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files\Windows Defender
2014-12-24 21:36 - 2013-08-22 16:36 - 00000000 ____D () C:\Program Files (x86)\Windows Defender
2014-12-24 20:22 - 2013-08-22 16:36 - 00000000 __RHD () C:\Users\Public\Libraries
2014-12-24 20:13 - 2014-07-25 22:20 - 00000000 ____D () C:\ProgramData\acer
2014-12-24 19:45 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\restore
2014-12-24 19:28 - 2014-07-25 22:24 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2014-12-24 19:28 - 2014-07-25 22:23 - 00000000 ____D () C:\ProgramData\WildTangent
2014-12-24 19:28 - 2014-07-25 22:23 - 00000000 ____D () C:\Program Files (x86)\WildTangent Games
2014-12-24 19:26 - 2014-07-25 22:57 - 00000000 ___HD () C:\OEM
2014-12-24 19:26 - 2014-07-25 22:21 - 00000000 ____D () C:\ProgramData\OEM

Some content of TEMP:
====================
C:\Users\Daniel\AppData\Local\Temp\avgnt.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-01-07 07:25

==================== End Of Log ============================

--- --- ---

Ist der Laptop jetzt OK ?

08.01.2015, 07:18	#4
schrauber /// the machine /// TB-Ausbilder	Ständige Werbung trotz AdBlock, Inernet Explorer springt Werbungsseiten werden geöffnet, filepony kann nicht Einfach das Log aufteilen und mehrere Posts benutzen __________________ gruß, schrauber *Proud Member of UNITE and ASAP since 2009* Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM!

Ständige Werbung trotz AdBlock, Inernet Explorer springt Werbungsseiten werden geöffnet, filepony kann nicht

Log-Analyse und Auswertung: Ständige Werbung trotz AdBlock, Inernet Explorer springt Werbungsseiten werden geöffnet, filepony kann nicht