Windows7: Malware eingefangen von infiziertem XP-Rechner über Fritzbox?

Sanderbörd · 11.01.2015, 19:23

Hallo liebe Experten vom Trojaner-board,

Vorbemerkung:
Bin "digital-immigrant", Alter >50 und mit begrenztem Fachwissen gesegnet. Bitte daher vorab bereits um etwas Nachsicht.

Vorgeschichte:
Ich hatte mir auf meinem alten XP-Rechner letztes Jahr im Nov. über email einen Trojaner eingefangen.
Über Avira Antivir habe ich den dann auch gefunden und "beseitigt". Leider finde ich jetzt den scan nicht mehr, da per Konfig. nur bis 30 Tage gespeichert wird, und im entsprechenden Ordner sehe ich auch keine .txt-Datei oder etwas, das nach einem Log aussieht (nur .dll Programmbibliotheken und ein XML-dokument). Die infizierte email habe ich natürlich auch gelöscht. Daher kann ich den Link daraus auch nicht posten.
Inzwischen bin ich sicher, daß der XP-Rechner noch infiziert ist und habe ihn - leider erst heute - offline genommen. Vermutlich hat er zwischenzeitlich auch noch weitere Malware nachgeladen.

Das Problem:
Ich habe mir Anfang 2015 einen neuen Win 7-Rechner angeschafft und mußte natürlich auch Daten und Sonstiges umziehen (Programme wurden natürlich neu heruntergeladen).
Für den Zeitraum von ca. 1 Woche hingen die beiden Rechner also gleichzeitig an derselben Fritzbox und ich befürchte nun, daß der neue Rechner sich am Alten "angesteckt" haben könnte. Antivir findet zwar nix, und der Rechner ist noch unauffällig, aber was heißt das schon?
Desweiteren hängen noch ein paar Notebooks und Smartphones über wlan and der Fritzbox, so daß theoretisch noch mehr betroffen sein könnte.

Bisherige Maßnahmen:
XP-Rechner ist offline und Antivir findet dort nix mehr.
Die Tools aus Eurer Anleitung (Schritt 1-4) habe ich bereits heruntergeladen, aber noch nichts ausgeführt).

Wie geht's weiter?
Auf den XP-Rechner kann ich erst mal verzichten. Ob und wie ich den weiter nutzen kann, hat für mich Prio2 (Bitte sagt mir, ob ich dazu ggf. ein separates Thema aufmachen soll, damit wir nicht durcheinander kommen).
Prio haben für mich also die im Haus vorhandenen Win7-Rechner und ggf. Smartphones.

Besten Dank schon mal für Eure Hilfe

schrauber · 11.01.2015, 19:49

hi,

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:

FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

Starte jetzt FRST.
Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

Sanderbörd · 11.01.2015, 21:43

FRST Logfile:

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 11-01-2015
Ran by Felix (ATTENTION: The logged in user is not administrator) on FELIX-QUATTRO-P on 11-01-2015 21:36:24
Running from C:\Users\Felix\Desktop
Loaded Profiles: Felix & Chef (Available profiles: Felix & Chef & Leoni & Romy & Imke & Marie)
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office14\WINWORD.EXE
(Microsoft Corporation) C:\Windows\splwow64.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7203032 2013-10-22] (Realtek Semiconductor)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2461504 2014-09-17] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959176 2014-09-12] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [702768 2014-11-24] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [157480 2014-10-15] (Apple Inc.)
HKLM-x32\...\Run: [Avira Systray] => C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe [126200 2014-11-20] (Avira Operations GmbH & Co. KG)
ShellIconOverlayIdentifiers: [ SkyDrive1] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} =>  No File
ShellIconOverlayIdentifiers: [ SkyDrive2] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} =>  No File
ShellIconOverlayIdentifiers: [ SkyDrive3] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} =>  No File
ShellIconOverlayIdentifiers-x32: [ SkyDrive1] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} =>  No File
ShellIconOverlayIdentifiers-x32: [ SkyDrive2] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} =>  No File
ShellIconOverlayIdentifiers-x32: [ SkyDrive3] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} =>  No File

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKU\S-1-5-21-442338121-1837241503-3693617225-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/de-de/?ocid=iehp
URLSearchHook: [S-1-5-21-442338121-1837241503-3693617225-1001] ATTENTION ==> Default URLSearchHook is missing.
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF ProfilePath: C:\Users\Felix\AppData\Roaming\Mozilla\Firefox\Profiles\gfn2oce0.default
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_16_0_0_235.dll ()
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.1.5 -> C:\Program Files (x86)\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_235.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~3\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~3\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3508.0205 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Extension: Cliqz Beta - C:\Users\Felix\AppData\Roaming\Mozilla\Firefox\Profiles\gfn2oce0.default\Extensions\cliqz@cliqz.com.xpi [2015-01-06]
FF HKU\S-1-5-21-442338121-1837241503-3693617225-1000\...\Firefox\Extensions: [cliqz@cliqz.com] - C:\Users\Felix\AppData\Roaming\Mozilla\Firefox\Profiles\gfn2oce0.default\extensions\cliqz@cliqz.com

Chrome: 
=======
CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - No Path
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - No Path

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [431920 2014-11-24] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [431920 2014-11-24] (Avira Operations GmbH & Co. KG)
R2 Avira.OE.ServiceHost; C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe [166192 2014-11-20] (Avira Operations GmbH & Co. KG)
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1149760 2014-09-17] (NVIDIA Corporation)
R2 lmhosts; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
R2 lmhosts; C:\Windows\SysWOW64\svchost.exe [20992 2009-07-14] (Microsoft Corporation)
R2 NlaSvc; C:\Windows\System32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
R2 NlaSvc; C:\Windows\SysWOW64\svchost.exe [20992 2009-07-14] (Microsoft Corporation)
R2 nsi; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
R2 nsi; C:\Windows\SysWOW64\svchost.exe [20992 2009-07-14] (Microsoft Corporation)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1796928 2014-09-17] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [19440960 2014-09-17] (NVIDIA Corporation)
S3 COMSysApp; %SystemRoot%\system32\dllhost.exe /Processid:{02D4B3F1-FD88-11D1-960D-00805FC79235}

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S3 adp3132; C:\Windows\system32\drivers\adp3132.sys [385072 2010-01-28] (Adaptec, Inc.)
S3 amdide64; C:\Windows\system32\drivers\amdide64.sys [11904 2011-12-18] (Advanced Micro Devices Inc.)
R0 amdkmpfd; C:\Windows\System32\drivers\amdkmpfd.sys [36096 2013-05-21] (Advanced Micro Devices, Inc.)
S3 asahci64; C:\Windows\system32\drivers\asahci64.sys [49760 2012-01-06] (Asmedia Technology)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [119272 2014-11-24] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131608 2014-11-24] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2014-11-24] (Avira Operations GmbH & Co. KG)
S3 EtronSTOR; C:\Windows\System32\Drivers\EtronSTOR.sys [32512 2012-06-13] (Etron Technology Inc)
S3 FLxHCIh; C:\Windows\system32\drivers\FLxHCIh.sys [77040 2012-11-02] (Fresco Logic)
S3 HP1319EWS; C:\Windows\System32\Drivers\HP1319EWS.sys [15360 2013-02-06] (Marvell Semiconductor, Inc.)
S3 HP1319FAX; C:\Windows\System32\Drivers\HP1319FAX.sys [16896 2013-02-06] (Marvell Semiconductor, Inc.)
R0 iaStorF; C:\Windows\System32\drivers\iaStorF.sys [28656 2013-04-22] (Intel Corporation)
S3 iaStorS; C:\Windows\system32\drivers\iaStorS.sys [652760 2012-10-18] (Intel Corporation)
S3 ISASerial; C:\Windows\system32\drivers\ISASerial.sys [72192 2008-02-20] (Windows (R) Codename Longhorn DDK provider)
S3 ISCT; C:\Windows\system32\drivers\ISCTD64.sys [46568 2013-02-14] ()
R3 MEIx64; C:\Windows\System32\DRIVERS\TeeDriverx64.sys [99288 2013-08-08] (Intel Corporation)
S3 MTsensor; C:\Windows\system32\drivers\ASACPI.sys [15416 2009-07-16] ()
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [20288 2014-09-17] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [38048 2014-09-04] (NVIDIA Corporation)
S1 oxpar; C:\Windows\system32\drivers\oxpar.sys [158208 2007-01-24] (OEM)
S3 OxPPort; C:\Windows\system32\drivers\OxPPort.sys [98304 2008-07-31] (OEM)
S3 PciIsaSerial; C:\Windows\system32\drivers\PciIsaSerial.sys [72192 2008-05-22] (Windows (R) Codename Longhorn DDK provider)
S3 PciPPorts; C:\Windows\system32\drivers\PciPPorts.sys [95744 2008-05-22] ()
S3 PciSPorts; C:\Windows\system32\drivers\PciSPorts.sys [126464 2008-05-22] ()
S3 PPorts; C:\Windows\system32\drivers\PPorts.sys [95744 2008-02-20] ()
S3 rusb3hub; C:\Windows\system32\drivers\rusb3hub.sys [102912 2012-03-15] (Renesas Electronics Corporation)
S3 rusb3xhc; C:\Windows\system32\drivers\rusb3xhc.sys [220672 2012-03-15] (Renesas Electronics Corporation)
S3 Si3124r5; C:\Windows\system32\drivers\Si3124r5.sys [340008 2010-04-13] (Silicon Image, Inc)
R0 SiFilter; C:\Windows\System32\drivers\SiWinAcc.sys [22568 2010-04-13] (Silicon Image, Inc.)
R0 SiRemFil; C:\Windows\System32\drivers\SiRemFil.sys [16936 2010-04-13] (Silicon Image, Inc.)
S3 SPorts; C:\Windows\system32\drivers\SPorts.sys [124416 2008-02-20] ()
S3 StnPport; C:\Windows\system32\drivers\StnPport.sys [97280 2009-12-17] ()
S3 StnSport; C:\Windows\system32\drivers\StnSport.sys [126464 2009-11-14] ()
S3 VUSB3HUB; C:\Windows\system32\drivers\ViaHub3.sys [225792 2013-09-25] (VIA Technologies, Inc.)
S3 xhcdrv; C:\Windows\system32\drivers\xhcdrv.sys [296960 2013-09-25] (VIA Technologies, Inc.)
S3 NmPar; \SystemRoot\system32\drivers\NmPar.sys [X]
S3 nmserial; \SystemRoot\system32\drivers\nmserial.sys [X]
S3 Oxmfuf; \SystemRoot\system32\drivers\oxmfuf.sys [X]
S3 oxser; \SystemRoot\system32\drivers\oxser.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-01-11 21:36 - 2015-01-11 21:36 - 00012081 _____ () C:\Users\Felix\Desktop\FRST.txt
2015-01-11 21:36 - 2015-01-11 21:36 - 00000000 ____D () C:\FRST
2015-01-11 18:14 - 2015-01-11 16:51 - 02124288 _____ (Farbar) C:\Users\Felix\Desktop\FRST64.exe
2015-01-11 18:14 - 2015-01-11 16:39 - 00050477 _____ () C:\Users\Felix\Desktop\Defogger.exe
2015-01-11 16:51 - 2015-01-11 16:51 - 02124288 _____ (Farbar) C:\Users\Felix\Downloads\FRST64.exe
2015-01-11 16:42 - 2015-01-11 16:42 - 00380416 _____ () C:\Users\Felix\Downloads\Gmer-19357.exe
2015-01-11 16:41 - 2015-01-11 16:41 - 01115648 _____ (Farbar) C:\Users\Felix\Downloads\FRST.exe
2015-01-11 16:39 - 2015-01-11 16:39 - 00050477 _____ () C:\Users\Felix\Downloads\Defogger.exe
2015-01-10 11:19 - 2015-01-10 11:20 - 00000000 ____D () C:\Users\Felix\Documents\0110_Soziales-Gemeinnütziges
2015-01-10 11:11 - 2015-01-10 11:14 - 00000000 ____D () C:\Users\Felix\Documents\070_Motorrad
2015-01-10 11:01 - 2015-01-10 11:02 - 00000000 ____D () C:\Users\Felix\Documents\030_Familie-Verwandte
2015-01-10 10:46 - 2015-01-10 10:46 - 00000000 ____D () C:\Users\Felix\Documents\gaby
2015-01-10 10:18 - 2015-01-11 19:20 - 00000000 ____D () C:\Users\Felix\Documents\050_EDV-PC-Div
2015-01-10 10:18 - 2015-01-10 11:10 - 00000000 ____D () C:\Users\Felix\Documents\050_Behörden_Div
2015-01-10 10:18 - 2015-01-10 11:09 - 00000000 ____D () C:\Users\Felix\Documents\040_Geistiges
2015-01-10 10:18 - 2015-01-10 10:51 - 00000000 ____D () C:\Users\Felix\Documents\010_Versicherungen_Altersvorsorge
2015-01-10 10:18 - 2015-01-10 10:18 - 00000000 ____D () C:\Users\Felix\Documents\Werkzeug_Maschinen
2015-01-10 10:18 - 2015-01-10 10:18 - 00000000 ____D () C:\Users\Felix\Documents\Spvgg Renningen
2015-01-10 10:18 - 2015-01-10 10:18 - 00000000 ____D () C:\Users\Felix\Documents\schriftv
2015-01-10 10:18 - 2015-01-10 10:18 - 00000000 ____D () C:\Users\Felix\Documents\Rechnungen
2015-01-10 10:18 - 2015-01-10 10:18 - 00000000 ____D () C:\Users\Felix\Documents\Porsche
2015-01-10 10:18 - 2015-01-10 10:18 - 00000000 ____D () C:\Users\Felix\Documents\Möbelbau
2015-01-10 10:18 - 2015-01-10 10:18 - 00000000 ____D () C:\Users\Felix\Documents\Lustiges
2015-01-10 10:18 - 2015-01-10 10:18 - 00000000 ____D () C:\Users\Felix\Documents\Landkarten
2015-01-10 10:18 - 2015-01-10 10:18 - 00000000 ____D () C:\Users\Felix\Documents\Kuchenrezepte
2015-01-10 10:18 - 2015-01-10 10:18 - 00000000 ____D () C:\Users\Felix\Documents\Kollegen
2015-01-10 10:18 - 2015-01-10 10:18 - 00000000 ____D () C:\Users\Felix\Documents\Kaminofen
2015-01-10 10:18 - 2015-01-10 10:18 - 00000000 ____D () C:\Users\Felix\Documents\HAUSBAU
2015-01-10 10:18 - 2015-01-10 10:18 - 00000000 ____D () C:\Users\Felix\Documents\Gesundheit
2015-01-10 10:18 - 2015-01-10 10:18 - 00000000 ____D () C:\Users\Felix\Documents\Einladungen_Geschenkgutscheine
2015-01-10 10:18 - 2015-01-10 10:18 - 00000000 ____D () C:\Users\Felix\Documents\ebay
2015-01-10 10:18 - 2015-01-10 10:18 - 00000000 ____D () C:\Users\Felix\Documents\090_Flugreisen
2015-01-10 10:18 - 2015-01-10 10:18 - 00000000 ____D () C:\Users\Felix\Documents\080_Bus+Bahn_DB-VVS
2015-01-10 10:18 - 2015-01-10 10:18 - 00000000 ____D () C:\Users\Felix\Documents\060_Autos
2015-01-10 10:18 - 2015-01-10 10:18 - 00000000 ____D () C:\Users\Felix\Documents\0200_Finanzamt
2015-01-10 10:18 - 2015-01-10 10:18 - 00000000 ____D () C:\Users\Felix\Documents\020_Banken
2015-01-10 10:18 - 2015-01-10 10:18 - 00000000 ____D () C:\Users\Felix\Documents\0100_Fahrrad
2015-01-09 07:52 - 2015-01-09 07:52 - 00272740 _____ () C:\Users\Chef\Documents\netzwerk-screenshots.xlsx
2015-01-08 08:03 - 2015-01-08 08:03 - 03352368 _____ () C:\Users\Felix\Downloads\M1319_FW_Upgrade_1206_20120302_signed.exe
2015-01-08 08:02 - 2015-01-08 08:02 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_HP1319FAX_01009.Wdf
2015-01-08 08:02 - 2015-01-08 08:02 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_HP1319EWS_01009.Wdf
2015-01-08 08:00 - 2015-01-08 08:03 - 00083907 _____ () C:\M1319.log
2015-01-08 08:00 - 2015-01-08 08:00 - 00000000 ____D () C:\Program Files\HP
2015-01-08 08:00 - 2013-02-06 14:02 - 00114688 _____ (Marvell) C:\Windows\system32\HPMCoSetup.dll
2015-01-08 08:00 - 2013-02-06 13:51 - 00016896 _____ (Marvell Semiconductor, Inc.) C:\Windows\system32\Drivers\HP1319FAX.sys
2015-01-08 08:00 - 2013-02-06 13:51 - 00015360 _____ (Marvell Semiconductor, Inc.) C:\Windows\system32\Drivers\HP1319EWS.sys
2015-01-08 08:00 - 2013-02-06 13:41 - 00166912 _____ (Marvell Semiconductor, Inc.) C:\Windows\system32\ZLM1319.DLL
2015-01-08 08:00 - 2013-02-06 13:13 - 00024772 _____ () C:\Windows\M1319DEF.css
2015-01-08 08:00 - 2013-02-06 13:13 - 00009731 _____ () C:\Windows\M1319BTN.js
2015-01-08 08:00 - 2013-02-06 13:13 - 00008085 _____ () C:\Windows\M1319GLB.js
2015-01-08 08:00 - 2013-02-06 13:12 - 02219152 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\Ltwvc15u.dll
2015-01-08 08:00 - 2013-02-06 13:12 - 01711248 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\ltclr15u.dll
2015-01-08 08:00 - 2013-02-06 13:12 - 01035408 _____ (The OpenSSL Project) C:\Windows\SysWOW64\ltcry15u.dll
2015-01-08 08:00 - 2013-02-06 13:12 - 00646288 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\Ltdlgfile15u.dll
2015-01-08 08:00 - 2013-02-06 13:12 - 00482448 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\ltkrn15u.dll
2015-01-08 08:00 - 2013-02-06 13:12 - 00445584 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\ltimgsfx15u.dll
2015-01-08 08:00 - 2013-02-06 13:12 - 00384144 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\Lfcmp15u.dll
2015-01-08 08:00 - 2013-02-06 13:12 - 00302224 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\ltimgcor15u.dll
2015-01-08 08:00 - 2013-02-06 13:12 - 00261264 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\LTDIS15u.dll
2015-01-08 08:00 - 2013-02-06 13:12 - 00257168 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\ltefx15u.dll
2015-01-08 08:00 - 2013-02-06 13:12 - 00232592 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\Ltdlgkrn15u.dll
2015-01-08 08:00 - 2013-02-06 13:12 - 00216208 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\ltimgefx15u.dll
2015-01-08 08:00 - 2013-02-06 13:12 - 00212112 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\ltimgclr15u.dll
2015-01-08 08:00 - 2013-02-06 13:12 - 00150672 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\ltfil15u.dll
2015-01-08 08:00 - 2013-02-06 13:12 - 00146576 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\Lftif15u.dll
2015-01-08 08:00 - 2013-02-06 13:12 - 00117904 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\Lttwn15u.dll
2015-01-08 08:00 - 2013-02-06 13:12 - 00117904 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\Ltimgutl15u.dll
2015-01-08 08:00 - 2013-02-06 13:12 - 00105616 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\ltpnt15u.dll
2015-01-08 08:00 - 2013-02-06 13:12 - 00097424 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\Lffax15u.dll
2015-01-08 08:00 - 2013-02-06 13:12 - 00068752 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\ltpdg15u.dll
2015-01-08 08:00 - 2013-02-06 13:12 - 00064656 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\LTCON15u.dll
2015-01-08 08:00 - 2013-02-06 13:12 - 00038032 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\ltimgopt15u.dll
2015-01-08 08:00 - 2013-02-06 13:12 - 00024720 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\Lfbmp15u.dll
2015-01-08 08:00 - 2013-02-06 13:09 - 00195072 _____ () C:\Windows\system32\hpsfs.dll
2015-01-08 08:00 - 2013-02-06 06:42 - 00089600 _____ (Windows (R) Win 7 DDK provider) C:\Windows\system32\m1319wia2.dll
2015-01-08 08:00 - 2013-02-06 06:42 - 00038912 _____ () C:\Windows\system32\HPImgFlt.dll
2015-01-08 08:00 - 2013-02-06 06:41 - 00409088 _____ () C:\Windows\ZSM1319.EXE
2015-01-08 08:00 - 2013-02-06 06:41 - 00409088 _____ () C:\Windows\system32\ZSM1319.EXE
2015-01-08 08:00 - 2013-02-06 06:13 - 00004451 _____ () C:\Windows\M1319OS.htm
2015-01-08 07:59 - 2015-01-08 07:59 - 16806448 _____ () C:\Users\Felix\Downloads\ljM1319-hb-pnp-win64-de.exe
2015-01-07 17:25 - 2015-01-07 17:25 - 00003029 _____ () C:\Users\Felix\Desktop\Microsoft Word 2010.lnk
2015-01-07 17:24 - 2015-01-07 17:24 - 00003095 _____ () C:\Users\Felix\Desktop\Microsoft PowerPoint 2010.lnk
2015-01-07 17:24 - 2015-01-07 17:24 - 00003047 _____ () C:\Users\Felix\Desktop\Microsoft Excel 2010.lnk
2015-01-07 17:14 - 2015-01-07 17:14 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
2015-01-07 17:13 - 2015-01-07 17:13 - 00000000 ____D () C:\Program Files\Microsoft Office
2015-01-07 17:12 - 2015-01-07 17:17 - 00000000 ____D () C:\ProgramData\Microsoft Help
2015-01-07 17:12 - 2015-01-07 17:12 - 00000000 __RHD () C:\MSOCache
2015-01-07 17:12 - 2015-01-07 17:12 - 00000000 ____D () C:\Program Files (x86)\Microsoft Analysis Services
2015-01-07 15:20 - 2015-01-07 15:20 - 00000000 ___DL () C:\Users\Felix
2015-01-07 15:14 - 2015-01-07 15:14 - 00000000 ___DL () C:\Users\Romy
2015-01-07 15:14 - 2015-01-07 15:14 - 00000000 ___DL () C:\Users\Marie
2015-01-07 15:13 - 2015-01-07 15:13 - 00000000 ___DL () C:\Users\Leoni
2015-01-07 15:12 - 2015-01-07 15:12 - 00000000 ___DL () C:\Users\Imke
2015-01-07 14:16 - 2015-01-07 14:17 - 00000000 ____D () C:\Windows\system32\MRT
2015-01-07 14:16 - 2014-11-27 16:40 - 112710672 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-01-07 14:06 - 2014-12-13 06:09 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-01-07 14:06 - 2014-12-13 04:33 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2015-01-07 14:06 - 2014-07-09 03:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDYAK.DLL
2015-01-07 14:06 - 2014-07-09 03:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDTAT.DLL
2015-01-07 14:06 - 2014-07-09 03:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU1.DLL
2015-01-07 14:06 - 2014-07-09 03:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDBASH.DLL
2015-01-07 14:06 - 2014-07-09 03:03 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU.DLL
2015-01-07 14:06 - 2014-07-09 02:31 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDYAK.DLL
2015-01-07 14:06 - 2014-07-09 02:31 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDTAT.DLL
2015-01-07 14:06 - 2014-07-09 02:31 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDRU1.DLL
2015-01-07 14:06 - 2014-07-09 02:31 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDRU.DLL
2015-01-07 14:06 - 2014-07-09 02:31 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDBASH.DLL
2015-01-07 14:06 - 2014-07-08 23:38 - 00419992 _____ () C:\Windows\system32\locale.nls
2015-01-07 14:06 - 2014-07-08 23:30 - 00419992 _____ () C:\Windows\SysWOW64\locale.nls
2015-01-07 08:15 - 2015-01-07 08:15 - 00000000 ___SD () C:\Windows\system32\CompatTel
2015-01-07 08:15 - 2015-01-07 08:15 - 00000000 ____D () C:\Windows\system32\appraiser
2015-01-06 21:53 - 2013-05-10 06:56 - 14631424 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2015-01-06 21:53 - 2013-05-10 06:56 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2015-01-06 21:53 - 2013-05-10 05:56 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL
2015-01-06 21:53 - 2013-05-10 05:56 - 11410432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
2015-01-06 21:33 - 2014-10-18 03:05 - 04121600 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll
2015-01-06 21:33 - 2014-10-18 02:33 - 03209728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mf.dll
2015-01-06 21:33 - 2014-07-07 03:06 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll
2015-01-06 21:33 - 2014-07-07 03:06 - 00055808 _____ (Microsoft Corporation) C:\Windows\system32\rrinstaller.exe
2015-01-06 21:33 - 2014-07-07 03:06 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\mfpmp.exe
2015-01-06 21:33 - 2014-07-07 03:02 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\mferror.dll
2015-01-06 21:33 - 2014-07-07 02:40 - 00103424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfps.dll
2015-01-06 21:33 - 2014-07-07 02:39 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rrinstaller.exe
2015-01-06 21:33 - 2014-07-07 02:39 - 00023040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfpmp.exe
2015-01-06 21:33 - 2014-07-07 02:37 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mferror.dll
2015-01-06 21:29 - 2014-06-27 03:08 - 02777088 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll
2015-01-06 21:29 - 2014-06-27 02:45 - 02285056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll
2015-01-06 21:28 - 2014-06-30 23:24 - 00008856 _____ (Microsoft Corporation) C:\Windows\system32\icardres.dll
2015-01-06 21:28 - 2014-06-30 23:14 - 00008856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardres.dll
2015-01-06 21:28 - 2014-03-09 22:48 - 01389208 _____ (Microsoft Corporation) C:\Windows\system32\icardagt.exe
2015-01-06 21:28 - 2014-03-09 22:48 - 00171160 _____ (Microsoft Corporation) C:\Windows\system32\infocardapi.dll
2015-01-06 21:28 - 2014-03-09 22:47 - 00619672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardagt.exe
2015-01-06 21:28 - 2014-03-09 22:47 - 00099480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\infocardapi.dll
2015-01-06 21:27 - 2014-06-06 07:16 - 00035480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TsWpfWrp.exe
2015-01-06 21:27 - 2014-06-06 07:12 - 00035480 _____ (Microsoft Corporation) C:\Windows\system32\TsWpfWrp.exe
2015-01-06 20:35 - 2015-01-06 20:35 - 00000020 ___SH () C:\Users\Chef\ntuser.ini
2015-01-06 20:35 - 2015-01-06 20:35 - 00000000 _SHDL () C:\Users\Chef\Vorlagen
2015-01-06 20:35 - 2015-01-06 20:35 - 00000000 _SHDL () C:\Users\Chef\Startmenü
2015-01-06 20:35 - 2015-01-06 20:35 - 00000000 _SHDL () C:\Users\Chef\Netzwerkumgebung
2015-01-06 20:35 - 2015-01-06 20:35 - 00000000 _SHDL () C:\Users\Chef\Lokale Einstellungen
2015-01-06 20:35 - 2015-01-06 20:35 - 00000000 _SHDL () C:\Users\Chef\Eigene Dateien
2015-01-06 20:35 - 2015-01-06 20:35 - 00000000 _SHDL () C:\Users\Chef\Druckumgebung
2015-01-06 20:35 - 2015-01-06 20:35 - 00000000 _SHDL () C:\Users\Chef\Documents\Eigene Musik
2015-01-06 20:35 - 2015-01-06 20:35 - 00000000 _SHDL () C:\Users\Chef\Documents\Eigene Bilder
2015-01-06 20:35 - 2015-01-06 20:35 - 00000000 _SHDL () C:\Users\Chef\Anwendungsdaten
2015-01-06 20:35 - 2015-01-06 20:35 - 00000000 ____D () C:\Users\Chef
2015-01-06 18:51 - 2014-12-04 03:50 - 00830976 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2015-01-06 18:51 - 2014-12-04 03:50 - 00741376 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2015-01-06 18:51 - 2014-12-04 03:50 - 00413184 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2015-01-06 18:51 - 2014-12-04 03:50 - 00396800 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2015-01-06 18:51 - 2014-12-04 03:50 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2015-01-06 18:51 - 2014-12-04 03:50 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2015-01-06 18:51 - 2014-12-04 03:44 - 01083392 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2015-01-06 18:51 - 2014-12-02 00:28 - 01232040 _____ (Microsoft Corporation) C:\Windows\system32\aitstatic.exe
2015-01-06 18:51 - 2014-08-01 12:53 - 01031168 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll
2015-01-06 18:51 - 2014-08-01 12:35 - 00793600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSWorkspace.dll
2015-01-06 18:51 - 2014-04-25 03:34 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll
2015-01-06 18:51 - 2014-04-25 03:06 - 00626688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usp10.dll
2015-01-06 18:51 - 2014-01-28 03:32 - 00228864 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll
2015-01-06 18:51 - 2013-10-30 03:32 - 00335360 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll
2015-01-06 18:51 - 2013-10-30 03:19 - 00301568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msieftp.dll
2015-01-06 18:51 - 2011-04-09 07:58 - 00142336 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe
2015-01-06 18:51 - 2011-04-09 06:56 - 00123904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\poqexec.exe
2015-01-06 18:50 - 2014-11-27 02:43 - 00389296 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-01-06 18:50 - 2014-11-27 02:10 - 00342200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2015-01-06 18:50 - 2014-11-22 04:13 - 25059840 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-01-06 18:50 - 2014-11-22 04:06 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-01-06 18:50 - 2014-11-22 04:06 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2015-01-06 18:50 - 2014-11-22 03:50 - 00580096 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-01-06 18:50 - 2014-11-22 03:50 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-01-06 18:50 - 2014-11-22 03:49 - 02885120 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-01-06 18:50 - 2014-11-22 03:49 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2015-01-06 18:50 - 2014-11-22 03:48 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-01-06 18:50 - 2014-11-22 03:41 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-01-06 18:50 - 2014-11-22 03:40 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-01-06 18:50 - 2014-11-22 03:37 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-01-06 18:50 - 2014-11-22 03:35 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2015-01-06 18:50 - 2014-11-22 03:34 - 06039552 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-01-06 18:50 - 2014-11-22 03:34 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-01-06 18:50 - 2014-11-22 03:26 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2015-01-06 18:50 - 2014-11-22 03:22 - 19749376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-01-06 18:50 - 2014-11-22 03:22 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-01-06 18:50 - 2014-11-22 03:20 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2015-01-06 18:50 - 2014-11-22 03:14 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-01-06 18:50 - 2014-11-22 03:09 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-01-06 18:50 - 2014-11-22 03:08 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-01-06 18:50 - 2014-11-22 03:07 - 00501248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-01-06 18:50 - 2014-11-22 03:07 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2015-01-06 18:50 - 2014-11-22 03:06 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2015-01-06 18:50 - 2014-11-22 03:05 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-01-06 18:50 - 2014-11-22 03:05 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2015-01-06 18:50 - 2014-11-22 03:01 - 02277888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-01-06 18:50 - 2014-11-22 02:59 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2015-01-06 18:50 - 2014-11-22 02:58 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2015-01-06 18:50 - 2014-11-22 02:56 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2015-01-06 18:50 - 2014-11-22 02:54 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2015-01-06 18:50 - 2014-11-22 02:49 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-01-06 18:50 - 2014-11-22 02:49 - 00718848 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-01-06 18:50 - 2014-11-22 02:47 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2015-01-06 18:50 - 2014-11-22 02:46 - 02125312 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-01-06 18:50 - 2014-11-22 02:45 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2015-01-06 18:50 - 2014-11-22 02:43 - 14412800 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-01-06 18:50 - 2014-11-22 02:40 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2015-01-06 18:50 - 2014-11-22 02:36 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2015-01-06 18:50 - 2014-11-22 02:35 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2015-01-06 18:50 - 2014-11-22 02:33 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2015-01-06 18:50 - 2014-11-22 02:29 - 04299264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-01-06 18:50 - 2014-11-22 02:28 - 02358272 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-01-06 18:50 - 2014-11-22 02:23 - 00688640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-01-06 18:50 - 2014-11-22 02:22 - 02052096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2015-01-06 18:50 - 2014-11-22 02:21 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2015-01-06 18:50 - 2014-11-22 02:15 - 01548288 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-01-06 18:50 - 2014-11-22 02:13 - 12836864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-01-06 18:50 - 2014-11-22 02:03 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-01-06 18:50 - 2014-11-22 02:00 - 01888256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-01-06 18:50 - 2014-11-22 01:56 - 01307136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-01-06 18:50 - 2014-11-22 01:54 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2015-01-06 18:50 - 2014-11-11 04:09 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2015-01-06 18:50 - 2014-11-11 03:44 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2015-01-06 18:50 - 2014-11-11 02:46 - 00119296 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdx.sys
2015-01-06 18:50 - 2014-10-14 03:13 - 00683520 _____ (Microsoft Corporation) C:\Windows\system32\termsrv.dll
2015-01-06 18:50 - 2014-10-14 03:09 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2015-01-06 18:50 - 2014-10-14 03:07 - 00681984 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2015-01-06 18:50 - 2014-10-14 02:47 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2015-01-06 18:50 - 2014-10-14 02:46 - 00681984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2015-01-06 18:50 - 2014-08-21 07:43 - 01882624 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2015-01-06 18:50 - 2014-08-21 07:40 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2015-01-06 18:50 - 2014-08-21 07:26 - 01237504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2015-01-06 18:50 - 2014-08-21 07:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll
2015-01-06 18:50 - 2014-06-24 04:29 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2015-01-06 18:50 - 2014-06-24 03:59 - 01987584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2015-01-06 18:50 - 2014-06-18 23:23 - 01943696 _____ (Microsoft Corporation) C:\Windows\system32\dfshim.dll
2015-01-06 18:50 - 2014-06-18 23:23 - 01131664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dfshim.dll
2015-01-06 18:50 - 2014-06-18 23:23 - 00156824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mscorier.dll
2015-01-06 18:50 - 2014-06-18 23:23 - 00156312 _____ (Microsoft Corporation) C:\Windows\system32\mscorier.dll
2015-01-06 18:50 - 2014-06-18 23:23 - 00081560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mscories.dll
2015-01-06 18:50 - 2014-06-18 23:23 - 00073880 _____ (Microsoft Corporation) C:\Windows\system32\mscories.dll
2015-01-06 18:50 - 2014-06-18 03:18 - 00692736 _____ (Microsoft Corporation) C:\Windows\system32\osk.exe
2015-01-06 18:50 - 2014-06-18 02:51 - 00646144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\osk.exe
2015-01-06 18:50 - 2014-06-06 11:10 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2015-01-06 18:50 - 2014-06-06 10:44 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2015-01-06 18:50 - 2014-05-30 07:45 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2015-01-06 18:50 - 2014-04-05 03:47 - 01903552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2015-01-06 18:50 - 2014-04-05 03:47 - 00288192 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
2015-01-06 18:50 - 2014-03-26 15:44 - 02002432 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
2015-01-06 18:50 - 2014-03-26 15:41 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml6r.dll
2015-01-06 18:50 - 2014-03-26 15:27 - 01389056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll
2015-01-06 18:50 - 2014-03-26 15:25 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6r.dll
2015-01-06 18:50 - 2014-01-29 03:32 - 00484864 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll
2015-01-06 18:50 - 2014-01-29 03:06 - 00381440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wer.dll
2015-01-06 18:50 - 2013-12-04 03:27 - 00488448 _____ (Microsoft Corporation) C:\Windows\system32\secproc.dll
2015-01-06 18:50 - 2013-12-04 03:27 - 00485888 _____ (Microsoft Corporation) C:\Windows\system32\secproc_isv.dll
2015-01-06 18:50 - 2013-12-04 03:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp_isv.dll
2015-01-06 18:50 - 2013-12-04 03:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp.dll
2015-01-06 18:50 - 2013-12-04 03:26 - 00528384 _____ (Microsoft Corporation) C:\Windows\system32\msdrm.dll
2015-01-06 18:50 - 2013-12-04 03:16 - 00658432 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_isv.exe
2015-01-06 18:50 - 2013-12-04 03:16 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate.exe
2015-01-06 18:50 - 2013-12-04 03:16 - 00553984 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp.exe
2015-01-06 18:50 - 2013-12-04 03:16 - 00552960 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp_isv.exe
2015-01-06 18:50 - 2013-12-04 03:03 - 00428032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc.dll
2015-01-06 18:50 - 2013-12-04 03:03 - 00423936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_isv.dll
2015-01-06 18:50 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp_isv.dll
2015-01-06 18:50 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp.dll
2015-01-06 18:50 - 2013-12-04 03:02 - 00390144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdrm.dll
2015-01-06 18:50 - 2013-12-04 02:54 - 00594944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_isv.exe
2015-01-06 18:50 - 2013-12-04 02:54 - 00572416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate.exe
2015-01-06 18:50 - 2013-12-04 02:54 - 00510976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp.exe
2015-01-06 18:50 - 2013-12-04 02:54 - 00508928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp_isv.exe
2015-01-06 18:50 - 2013-11-27 02:41 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2015-01-06 18:50 - 2013-11-27 02:41 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2015-01-06 18:50 - 2013-11-27 02:41 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2015-01-06 18:50 - 2013-11-27 02:41 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2015-01-06 18:50 - 2013-11-27 02:41 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2015-01-06 18:50 - 2013-11-26 12:40 - 00376768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2015-01-06 18:50 - 2013-11-23 19:26 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2015-01-06 18:50 - 2013-11-23 18:47 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2015-01-06 18:50 - 2013-08-05 03:25 - 00155584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ataport.sys
2015-01-06 18:50 - 2013-07-04 13:57 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll
2015-01-06 18:50 - 2013-07-04 13:50 - 00102400 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll
2015-01-06 18:50 - 2013-07-04 12:57 - 00205824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WebClnt.dll
2015-01-06 18:50 - 2013-07-04 12:51 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\davclnt.dll
2015-01-06 18:50 - 2013-07-04 11:11 - 00140800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys
2015-01-06 18:50 - 2012-08-22 19:12 - 00950128 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys
2015-01-06 18:50 - 2012-07-04 21:26 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\RNDISMP.sys
2015-01-06 18:49 - 2014-11-11 04:08 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-01-06 18:49 - 2014-11-11 04:08 - 00241152 _____ (Microsoft Corporation) C:\Windows\system32\pku2u.dll
2015-01-06 18:49 - 2014-11-11 03:44 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2015-01-06 18:49 - 2014-11-11 03:44 - 00186880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pku2u.dll
2015-01-06 18:49 - 2014-11-08 04:16 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2015-01-06 18:49 - 2014-11-08 03:45 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2015-01-06 18:49 - 2014-10-30 03:03 - 00165888 _____ (Microsoft Corporation) C:\Windows\system32\charmap.exe
2015-01-06 18:49 - 2014-10-30 02:45 - 00155136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\charmap.exe
2015-01-06 18:49 - 2014-10-25 02:57 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll
2015-01-06 18:49 - 2014-10-25 02:32 - 00067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\packager.dll
2015-01-06 18:49 - 2014-10-14 03:16 - 00155064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-01-06 18:49 - 2014-10-14 03:13 - 03241984 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2015-01-06 18:49 - 2014-10-14 03:12 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-01-06 18:49 - 2014-10-14 02:50 - 02363904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2015-01-06 18:49 - 2014-10-14 02:50 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2015-01-06 18:49 - 2014-10-14 02:49 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2015-01-06 18:49 - 2014-10-10 01:57 - 03198976 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-01-06 18:49 - 2014-10-03 03:12 - 02020352 _____ (Microsoft Corporation) C:\Windows\system32\WsmSvc.dll
2015-01-06 18:49 - 2014-10-03 03:12 - 00500224 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll
2015-01-06 18:49 - 2014-10-03 03:12 - 00346624 _____ (Microsoft Corporation) C:\Windows\system32\WSManMigrationPlugin.dll
2015-01-06 18:49 - 2014-10-03 03:12 - 00310272 _____ (Microsoft Corporation) C:\Windows\system32\WsmWmiPl.dll
2015-01-06 18:49 - 2014-10-03 03:12 - 00181248 _____ (Microsoft Corporation) C:\Windows\system32\WsmAuto.dll
2015-01-06 18:49 - 2014-10-03 03:11 - 00680960 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2015-01-06 18:49 - 2014-10-03 03:11 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll
2015-01-06 18:49 - 2014-10-03 03:11 - 00296448 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll
2015-01-06 18:49 - 2014-10-03 03:11 - 00284672 _____ (Microsoft Corporation) C:\Windows\system32\EncDump.dll
2015-01-06 18:49 - 2014-10-03 03:11 - 00266240 _____ (Microsoft Corporation) C:\Windows\system32\WSManHTTPConfig.exe
2015-01-06 18:49 - 2014-10-03 02:45 - 01177088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmSvc.dll
2015-01-06 18:49 - 2014-10-03 02:45 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSManMigrationPlugin.dll
2015-01-06 18:49 - 2014-10-03 02:45 - 00214016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmWmiPl.dll
2015-01-06 18:49 - 2014-10-03 02:45 - 00145920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmAuto.dll
2015-01-06 18:49 - 2014-10-03 02:44 - 00442880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AUDIOKSE.dll
2015-01-06 18:49 - 2014-10-03 02:44 - 00374784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioEng.dll
2015-01-06 18:49 - 2014-10-03 02:44 - 00198656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSManHTTPConfig.exe
2015-01-06 18:49 - 2014-10-03 02:44 - 00195584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll
2015-01-06 18:49 - 2014-09-25 03:08 - 00371712 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll
2015-01-06 18:49 - 2014-09-25 02:40 - 00519680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qdvd.dll
2015-01-06 18:49 - 2014-09-19 10:42 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-01-06 18:49 - 2014-09-19 10:42 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2015-01-06 18:49 - 2014-09-19 10:42 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2015-01-06 18:49 - 2014-09-19 10:42 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2015-01-06 18:49 - 2014-09-19 10:42 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2015-01-06 18:49 - 2014-09-19 10:42 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2015-01-06 18:49 - 2014-09-19 10:23 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2015-01-06 18:49 - 2014-09-19 10:23 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2015-01-06 18:49 - 2014-09-19 10:23 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2015-01-06 18:49 - 2014-09-19 10:23 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2015-01-06 18:49 - 2014-09-19 10:23 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2015-01-06 18:49 - 2014-09-19 10:23 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2015-01-06 18:49 - 2014-09-04 06:23 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\rastls.dll
2015-01-06 18:49 - 2014-09-04 06:04 - 00372736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rastls.dll
2015-01-06 18:49 - 2014-08-12 03:02 - 00878080 _____ (Microsoft Corporation) C:\Windows\system32\IMJP10K.DLL
2015-01-06 18:49 - 2014-08-12 02:36 - 00701440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IMJP10K.DLL
2015-01-06 18:49 - 2014-07-17 03:07 - 03722240 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2015-01-06 18:49 - 2014-07-17 03:07 - 01118720 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe
2015-01-06 18:49 - 2014-07-17 03:07 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe
2015-01-06 18:49 - 2014-07-17 03:07 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\winsta.dll
2015-01-06 18:49 - 2014-07-17 03:07 - 00150528 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorekmts.dll
2015-01-06 18:49 - 2014-07-17 02:40 - 00157696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winsta.dll
2015-01-06 18:49 - 2014-07-17 02:39 - 03221504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2015-01-06 18:49 - 2014-07-17 02:39 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstsc.exe
2015-01-06 18:49 - 2014-07-17 02:39 - 00131584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aaclient.dll
2015-01-06 18:49 - 2014-07-17 02:21 - 00212480 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpwd.sys
2015-01-06 18:49 - 2014-07-17 02:21 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys
2015-01-06 18:49 - 2014-06-25 03:05 - 14175744 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2015-01-06 18:49 - 2014-06-25 02:41 - 12874240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2015-01-06 18:49 - 2014-06-16 03:10 - 00985536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2015-01-06 18:49 - 2014-06-03 11:02 - 01941504 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2015-01-06 18:49 - 2014-06-03 11:02 - 00504320 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll
2015-01-06 18:49 - 2014-06-03 11:02 - 00112064 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2015-01-06 18:49 - 2014-06-03 10:29 - 01805824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2015-01-06 18:49 - 2014-06-03 10:29 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msihnd.dll
2015-01-06 18:49 - 2014-04-12 03:22 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2015-01-06 18:49 - 2014-04-12 03:19 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2015-01-06 18:49 - 2014-04-12 03:19 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2015-01-06 18:49 - 2014-04-12 03:19 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2015-01-06 18:49 - 2014-04-12 03:19 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2015-01-06 18:49 - 2014-03-04 10:47 - 05550016 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-01-06 18:49 - 2014-03-04 10:44 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2015-01-06 18:49 - 2014-03-04 10:44 - 00722944 _____ (Microsoft Corporation) C:\Windows\system32\objsel.dll
2015-01-06 18:49 - 2014-03-04 10:44 - 00424960 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2015-01-06 18:49 - 2014-03-04 10:44 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2015-01-06 18:49 - 2014-03-04 10:44 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2015-01-06 18:49 - 2014-03-04 10:44 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\wincredprovider.dll
2015-01-06 18:49 - 2014-03-04 10:44 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2015-01-06 18:49 - 2014-03-04 10:44 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2015-01-06 18:49 - 2014-03-04 10:43 - 00057344 _____ (Microsoft Corporation) C:\Windows\system32\cngprovider.dll
2015-01-06 18:49 - 2014-03-04 10:43 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\adprovider.dll
2015-01-06 18:49 - 2014-03-04 10:43 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\capiprovider.dll
2015-01-06 18:49 - 2014-03-04 10:43 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\dpapiprovider.dll
2015-01-06 18:49 - 2014-03-04 10:43 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\dimsroam.dll
2015-01-06 18:49 - 2014-03-04 10:20 - 03969984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2015-01-06 18:49 - 2014-03-04 10:20 - 03914176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2015-01-06 18:49 - 2014-03-04 10:17 - 00538112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\objsel.dll
2015-01-06 18:49 - 2014-03-04 10:17 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cngprovider.dll
2015-01-06 18:49 - 2014-03-04 10:17 - 00049664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adprovider.dll
2015-01-06 18:49 - 2014-03-04 10:17 - 00048128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\capiprovider.dll
2015-01-06 18:49 - 2014-03-04 10:17 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpapiprovider.dll
2015-01-06 18:49 - 2014-03-04 10:17 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dimsroam.dll
2015-01-06 18:49 - 2014-03-04 10:17 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wincredprovider.dll
2015-01-06 18:49 - 2014-03-04 10:17 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2015-01-06 18:49 - 2014-03-04 10:16 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2015-01-06 18:49 - 2014-03-04 10:16 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2015-01-06 18:49 - 2014-03-04 10:16 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2015-01-06 18:49 - 2014-03-04 10:16 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2015-01-06 18:49 - 2014-03-04 09:09 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2015-01-06 18:49 - 2014-03-04 09:09 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2015-01-06 18:49 - 2014-02-04 03:35 - 00274880 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msiscsi.sys
2015-01-06 18:49 - 2014-02-04 03:35 - 00190912 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys
2015-01-06 18:49 - 2014-02-04 03:35 - 00027584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Diskdump.sys
2015-01-06 18:49 - 2014-02-04 03:28 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\iologmsg.dll
2015-01-06 18:49 - 2014-02-04 03:00 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iologmsg.dll
2015-01-06 18:49 - 2014-01-24 03:37 - 01684928 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2015-01-06 18:49 - 2013-11-26 09:16 - 03419136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll
2015-01-06 18:49 - 2013-11-22 23:48 - 03928064 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll
2015-01-06 18:49 - 2013-07-26 03:24 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\shdocvw.dll
2015-01-06 18:49 - 2013-07-26 02:55 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shdocvw.dll
2015-01-06 18:49 - 2011-03-11 07:41 - 00410496 _____ (Intel Corporation) C:\Windows\system32\Drivers\iaStorV.sys
2015-01-06 18:49 - 2011-03-11 07:41 - 00166272 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvstor.sys
2015-01-06 18:49 - 2011-03-11 07:41 - 00148352 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvraid.sys
2015-01-06 18:49 - 2011-03-11 07:41 - 00107904 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\amdsata.sys
2015-01-06 18:49 - 2011-03-11 07:41 - 00027008 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\amdxata.sys
2015-01-06 18:49 - 2011-03-11 07:33 - 02565632 _____ (Microsoft Corporation) C:\Windows\system32\esent.dll
2015-01-06 18:49 - 2011-03-11 07:30 - 00096768 _____ (Microsoft Corporation) C:\Windows\system32\fsutil.exe
2015-01-06 18:49 - 2011-03-11 06:33 - 01699328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\esent.dll
2015-01-06 18:49 - 2011-03-11 06:31 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fsutil.exe
2015-01-06 18:49 - 2011-03-11 05:37 - 00091648 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBSTOR.SYS
2015-01-06 18:48 - 2014-10-18 03:05 - 00861696 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2015-01-06 18:48 - 2014-10-18 02:33 - 00571904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll
2015-01-06 18:48 - 2014-08-23 03:07 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2015-01-06 18:48 - 2014-08-23 02:45 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2015-01-06 18:48 - 2014-07-14 03:02 - 01216000 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2015-01-06 18:48 - 2014-07-14 02:40 - 00664064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2015-01-06 18:48 - 2012-02-11 07:36 - 00559104 _____ (Microsoft Corporation) C:\Windows\system32\spoolsv.exe
2015-01-06 18:48 - 2012-02-11 07:36 - 00067072 _____ (Microsoft Corporation) C:\Windows\splwow64.exe
2015-01-01 18:58 - 2015-01-07 14:50 - 00000000 ____D () C:\Users\Felix\AppData\Roaming\Apple Computer
2015-01-01 18:58 - 2015-01-07 14:48 - 00000000 ____D () C:\Users\Felix\AppData\Local\Apple Computer
2015-01-01 18:58 - 2015-01-01 18:58 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
2015-01-01 18:58 - 2012-10-03 16:14 - 00033240 _____ (GEAR Software Inc.) C:\Windows\system32\Drivers\GEARAspiWDM.sys
2015-01-01 18:57 - 2015-01-07 14:48 - 00000000 ____D () C:\Users\Felix\AppData\Local\Apple
2015-01-01 18:57 - 2015-01-01 18:58 - 00000000 ____D () C:\ProgramData\E1864A66-75E3-486a-BD95-D1B7D99A84A7
2015-01-01 18:57 - 2015-01-01 18:58 - 00000000 ____D () C:\Program Files\iTunes
2015-01-01 18:57 - 2015-01-01 18:58 - 00000000 ____D () C:\Program Files (x86)\iTunes
2015-01-01 18:57 - 2015-01-01 18:57 - 00000000 ____D () C:\ProgramData\Apple Computer
2015-01-01 18:57 - 2015-01-01 18:57 - 00000000 ____D () C:\ProgramData\Apple
2015-01-01 18:57 - 2015-01-01 18:57 - 00000000 ____D () C:\Program Files\iPod
2015-01-01 18:57 - 2015-01-01 18:57 - 00000000 ____D () C:\Program Files\Common Files\Apple
2015-01-01 18:18 - 2015-01-07 14:50 - 00000000 ____D () C:\Users\Felix\AppData\Roaming\IrfanView
2015-01-01 18:18 - 2015-01-01 18:18 - 00001890 _____ () C:\Users\Public\Desktop\IrfanView Thumbnails.lnk
2015-01-01 18:18 - 2015-01-01 18:18 - 00001002 _____ () C:\Users\Public\Desktop\IrfanView.lnk
2015-01-01 18:18 - 2015-01-01 18:18 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IrfanView
2015-01-01 18:18 - 2015-01-01 18:18 - 00000000 ____D () C:\Program Files (x86)\IrfanView
2015-01-01 18:17 - 2015-01-07 14:48 - 00000000 ____D () C:\Users\Felix\AppData\Local\Macromedia
2015-01-01 18:11 - 2015-01-07 14:50 - 00000000 ____D () C:\Users\Felix\AppData\Local\paint.net
2015-01-01 18:11 - 2015-01-01 18:11 - 00001204 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\paint.net.lnk
2015-01-01 18:11 - 2015-01-01 18:11 - 00000000 ___DC () C:\Program Files (x86)\Staging
2015-01-01 18:11 - 2015-01-01 18:11 - 00000000 ____D () C:\Program Files (x86)\Resources
2015-01-01 18:11 - 2015-01-01 18:11 - 00000000 ____D () C:\Program Files (x86)\FileTypes
2015-01-01 18:11 - 2015-01-01 18:11 - 00000000 ____D () C:\Program Files (x86)\Effects
2015-01-01 18:09 - 2015-01-01 18:09 - 06528454 _____ () C:\Program Files (x86)\paint.net.4.0.5.install.zip
2015-01-01 17:57 - 2015-01-01 17:58 - 00000000 ____D () C:\Users\Felix\AppData\Local\Adobe
2015-01-01 17:50 - 2015-01-07 14:50 - 00000000 ____D () C:\Users\Felix\AppData\Roaming\Skype
2015-01-01 17:50 - 2015-01-07 14:50 - 00000000 ____D () C:\Users\Felix\AppData\Local\Skype
2015-01-01 17:50 - 2015-01-01 17:50 - 00002517 _____ () C:\Users\Public\Desktop\Skype.lnk
2015-01-01 17:50 - 2015-01-01 17:50 - 00000000 ___RD () C:\Program Files (x86)\Skype
2015-01-01 17:50 - 2015-01-01 17:50 - 00000000 ____D () C:\ProgramData\Skype
2015-01-01 17:50 - 2015-01-01 17:50 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2015-01-01 17:49 - 2015-01-01 17:49 - 00000935 _____ () C:\Users\Public\Desktop\VLC media player.lnk
2015-01-01 17:49 - 2015-01-01 17:49 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2015-01-01 17:49 - 2015-01-01 17:49 - 00000000 ____D () C:\Program Files (x86)\VLC
2015-01-01 17:32 - 2015-01-07 14:50 - 00000000 ____D () C:\Users\Felix\AppData\Roaming\Thunderbird
2015-01-01 17:32 - 2015-01-07 14:50 - 00000000 ____D () C:\Users\Felix\AppData\Local\Thunderbird
2015-01-01 17:32 - 2015-01-01 17:32 - 00002098 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Thunderbird.lnk
2015-01-01 17:32 - 2015-01-01 17:32 - 00000000 ____D () C:\Program Files (x86)\Mozilla Thunderbird
2015-01-01 17:30 - 2015-01-07 14:50 - 00000000 ____D () C:\Users\Felix\AppData\Roaming\Cliqz
2015-01-01 17:30 - 2011-05-13 11:16 - 00493056 _____ ( datenhaus GmbH) C:\Windows\SysWOW64\dhRichClient3.dll
2015-01-01 17:30 - 2011-03-25 19:42 - 00338432 _____ () C:\Windows\SysWOW64\sqlite36_engine.dll
2015-01-01 17:21 - 2015-01-07 14:50 - 00000000 ____D () C:\Users\Felix\AppData\Roaming\Mozilla
2015-01-01 17:21 - 2015-01-07 14:49 - 00000000 ____D () C:\Users\Felix\AppData\Local\Mozilla
2015-01-01 17:21 - 2015-01-06 18:36 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2015-01-01 17:21 - 2015-01-01 17:21 - 00001159 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2015-01-01 17:21 - 2015-01-01 17:21 - 00001147 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2015-01-01 17:21 - 2015-01-01 17:21 - 00000000 ____D () C:\ProgramData\Mozilla
2015-01-01 17:21 - 2015-01-01 17:21 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2015-01-01 17:19 - 2015-01-07 14:50 - 00000000 ____D () C:\Users\Felix\AppData\Roaming\Macromedia
2015-01-01 16:39 - 2015-01-01 16:38 - 00043064 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2015-01-01 16:34 - 2014-05-14 17:23 - 02477536 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2015-01-01 16:34 - 2014-05-14 17:23 - 00700384 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2015-01-01 16:34 - 2014-05-14 17:23 - 00581600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2015-01-01 16:34 - 2014-05-14 17:23 - 00058336 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2015-01-01 16:34 - 2014-05-14 17:23 - 00044512 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2015-01-01 16:34 - 2014-05-14 17:23 - 00038880 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2015-01-01 16:34 - 2014-05-14 17:23 - 00036320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2015-01-01 16:34 - 2014-05-14 17:21 - 02620928 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2015-01-01 16:34 - 2014-05-14 17:20 - 00097792 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2015-01-01 16:34 - 2014-05-14 17:17 - 00092672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2015-01-01 16:34 - 2014-05-14 09:23 - 00198600 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2015-01-01 16:34 - 2014-05-14 09:23 - 00179656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2015-01-01 16:34 - 2014-05-14 09:20 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2015-01-01 16:34 - 2014-05-14 09:17 - 00033792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2015-01-01 16:09 - 2015-01-07 14:50 - 00000000 ____D () C:\Users\Felix\AppData\Roaming\Avira
2015-01-01 16:09 - 2015-01-01 20:31 - 00001137 _____ () C:\Users\Public\Desktop\Avira.lnk
2015-01-01 16:09 - 2015-01-01 20:31 - 00000000 ____D () C:\ProgramData\Package Cache
2015-01-01 16:09 - 2015-01-01 20:31 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2015-01-01 16:09 - 2015-01-01 20:31 - 00000000 ____D () C:\Program Files (x86)\Avira
2015-01-01 16:09 - 2015-01-01 16:09 - 00002066 _____ () C:\Users\Public\Desktop\Avira Control Center.lnk
2015-01-01 16:09 - 2015-01-01 16:09 - 00000000 ____D () C:\ProgramData\Avira
2015-01-01 16:09 - 2014-11-24 10:23 - 00131608 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2015-01-01 16:09 - 2014-11-24 10:23 - 00119272 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2015-01-01 16:09 - 2014-11-24 10:23 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys
2015-01-01 16:05 - 2015-01-08 19:56 - 00086160 _____ () C:\Users\Felix\AppData\Local\GDIPFONTCACHEV1.DAT
2015-01-01 16:03 - 2015-01-07 14:50 - 00000000 ___RD () C:\Users\Felix\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2015-01-01 16:03 - 2015-01-07 14:50 - 00000000 ___RD () C:\Users\Felix\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2015-01-01 16:03 - 2015-01-07 14:50 - 00000000 ____D () C:\Users\Felix\AppData\Roaming\Adobe
2015-01-01 16:03 - 2015-01-07 14:50 - 00000000 ____D () C:\Users\Felix\AppData\Local\NVIDIA Corporation
2015-01-01 16:03 - 2015-01-07 14:49 - 00000000 ____D () C:\Users\Felix\AppData\Local\NVIDIA
2015-01-01 16:03 - 2015-01-01 16:03 - 00001421 _____ () C:\Users\Felix\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2015-01-01 16:03 - 2015-01-01 16:03 - 00000020 ___SH () C:\Users\Felix\ntuser.ini
2015-01-01 16:03 - 2015-01-01 16:03 - 00000000 ____D () C:\Users\Felix\AppData\Local\VirtualStore
2015-01-01 16:03 - 2013-12-18 11:27 - 00002120 _____ () C:\Users\Felix\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft SkyDrive.lnk
2015-01-01 16:02 - 2015-01-11 13:48 - 00000000 ____D () C:\ProgramData\NVIDIA
2015-01-01 16:02 - 2015-01-01 16:05 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation
2015-01-01 16:02 - 2015-01-01 16:02 - 00001275 _____ () C:\Users\Public\Desktop\GeForce Experience.lnk
2015-01-01 16:02 - 2015-01-01 16:02 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2015-01-01 16:02 - 2015-01-01 16:02 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation
2015-01-01 16:02 - 2015-01-01 16:02 - 00000000 ____D () C:\Program Files (x86)\AGEIA Technologies
2015-01-01 16:02 - 2014-09-17 05:51 - 01538880 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdagenco6420103.dll
2015-01-01 16:02 - 2014-09-17 05:51 - 00197408 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvhda64v.sys
2015-01-01 16:02 - 2014-09-17 05:51 - 00031520 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdap64.dll
2015-01-01 16:02 - 2014-09-17 03:10 - 02799784 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll
2015-01-01 16:02 - 2014-09-17 03:10 - 02193560 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll
2015-01-01 16:02 - 2014-09-17 03:10 - 01715224 _____ (NVIDIA Corporation) C:\Windows\system32\nvspbridge64.dll
2015-01-01 16:02 - 2014-09-17 03:10 - 01291280 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspbridge.dll
2015-01-01 16:02 - 2014-09-14 00:48 - 31887680 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2015-01-01 16:02 - 2014-09-14 00:48 - 24552592 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2015-01-01 16:02 - 2014-09-14 00:48 - 20922512 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2015-01-01 16:02 - 2014-09-14 00:48 - 20589536 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll
2015-01-01 16:02 - 2014-09-14 00:48 - 19954520 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2015-01-01 16:02 - 2014-09-14 00:48 - 18106152 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2015-01-01 16:02 - 2014-09-14 00:48 - 17259664 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2015-01-01 16:02 - 2014-09-14 00:48 - 16875856 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll
2015-01-01 16:02 - 2014-09-14 00:48 - 14026304 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2015-01-01 16:02 - 2014-09-14 00:48 - 13939272 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2015-01-01 16:02 - 2014-09-14 00:48 - 13157696 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2015-01-01 16:02 - 2014-09-14 00:48 - 11392576 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2015-01-01 16:02 - 2014-09-14 00:48 - 11330776 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2015-01-01 16:02 - 2014-09-14 00:48 - 04287296 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2015-01-01 16:02 - 2014-09-14 00:48 - 04008592 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2015-01-01 16:02 - 2014-09-14 00:48 - 03223120 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
2015-01-01 16:02 - 2014-09-14 00:48 - 02838424 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
2015-01-01 16:02 - 2014-09-14 00:48 - 01876296 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6434411.dll
2015-01-01 16:02 - 2014-09-14 00:48 - 01539272 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6434411.dll
2015-01-01 16:02 - 2014-09-14 00:48 - 00984424 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll
2015-01-01 16:02 - 2014-09-14 00:48 - 00957584 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2015-01-01 16:02 - 2014-09-14 00:48 - 00925896 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2015-01-01 16:02 - 2014-09-14 00:48 - 00919240 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2015-01-01 16:02 - 2014-09-14 00:48 - 00894096 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2015-01-01 16:02 - 2014-09-14 00:48 - 00867528 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2015-01-01 16:02 - 2014-09-14 00:48 - 00501064 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll
2015-01-01 16:02 - 2014-09-14 00:48 - 00417096 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll
2015-01-01 16:02 - 2014-09-14 00:48 - 00393024 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFROpenGL.dll
2015-01-01 16:02 - 2014-09-14 00:48 - 00352016 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2015-01-01 16:02 - 2014-09-14 00:48 - 00348304 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFROpenGL.dll
2015-01-01 16:02 - 2014-09-14 00:48 - 00303600 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2015-01-01 16:02 - 2014-09-14 00:48 - 00174856 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2015-01-01 16:02 - 2014-09-14 00:48 - 00156840 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2015-01-01 16:02 - 2014-09-14 00:48 - 00073872 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll
2015-01-01 16:02 - 2014-09-14 00:48 - 00060560 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll
2015-01-01 16:02 - 2014-09-14 00:48 - 00026956 _____ () C:\Windows\system32\nvinfo.pb
2015-01-01 16:02 - 2014-09-13 22:53 - 06890696 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll
2015-01-01 16:02 - 2014-09-13 22:53 - 03529872 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll
2015-01-01 16:02 - 2014-09-13 22:53 - 02557640 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll
2015-01-01 16:02 - 2014-09-13 22:53 - 00934216 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
2015-01-01 16:02 - 2014-09-13 22:53 - 00385168 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll
2015-01-01 16:02 - 2014-09-13 22:53 - 00062608 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll
2015-01-01 16:02 - 2014-09-13 21:13 - 00613696 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe
2015-01-01 16:02 - 2014-09-11 16:37 - 03961833 _____ () C:\Windows\system32\nvcoproc.bin
2015-01-01 16:02 - 2014-09-04 20:14 - 00038048 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys
2015-01-01 16:02 - 2014-09-04 20:14 - 00034976 _____ (NVIDIA Corporation) C:\Windows\system32\nvaudcap64v.dll
2015-01-01 16:02 - 2014-09-04 20:14 - 00032416 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll
2015-01-01 16:02 - 2010-05-26 11:41 - 02401112 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_43.dll
2015-01-01 16:02 - 2010-05-26 11:41 - 01998168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_43.dll
2015-01-01 16:02 - 2010-05-26 11:41 - 00511328 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_43.dll
2015-01-01 16:02 - 2010-05-26 11:41 - 00470880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_43.dll
2015-01-01 16:01 - 2015-01-01 17:58 - 00701616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-01-01 16:01 - 2015-01-01 17:58 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-01-01 16:01 - 2015-01-01 16:02 - 00000000 ____D () C:\Program Files\NVIDIA Corporation
2015-01-01 16:01 - 2015-01-01 16:01 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
2015-01-01 16:01 - 2015-01-01 16:01 - 00002019 _____ () C:\Users\Public\Desktop\Adobe Reader XI.lnk
2015-01-01 16:01 - 2015-01-01 16:01 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Musik
2015-01-01 16:01 - 2015-01-01 16:01 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Bilder
2015-01-01 16:01 - 2015-01-01 16:01 - 00000000 _SHDL () C:\Users\Default\Vorlagen
2015-01-01 16:01 - 2015-01-01 16:01 - 00000000 _SHDL () C:\Users\Default\Startmenü
2015-01-01 16:01 - 2015-01-01 16:01 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung
2015-01-01 16:01 - 2015-01-01 16:01 - 00000000 _SHDL () C:\Users\Default\Lokale Einstellungen
2015-01-01 16:01 - 2015-01-01 16:01 - 00000000 _SHDL () C:\Users\Default\Eigene Dateien
2015-01-01 16:01 - 2015-01-01 16:01 - 00000000 _SHDL () C:\Users\Default\Druckumgebung
2015-01-01 16:01 - 2015-01-01 16:01 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik
2015-01-01 16:01 - 2015-01-01 16:01 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder
2015-01-01 16:01 - 2015-01-01 16:01 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2015-01-01 16:01 - 2015-01-01 16:01 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf
2015-01-01 16:01 - 2015-01-01 16:01 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Anwendungsdaten
2015-01-01 16:01 - 2015-01-01 16:01 - 00000000 _SHDL () C:\Users\Default\Anwendungsdaten
2015-01-01 16:01 - 2015-01-01 16:01 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik
2015-01-01 16:01 - 2015-01-01 16:01 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder
2015-01-01 16:01 - 2015-01-01 16:01 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2015-01-01 16:01 - 2015-01-01 16:01 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf
2015-01-01 16:01 - 2015-01-01 16:01 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Anwendungsdaten
2015-01-01 16:01 - 2015-01-01 16:01 - 00000000 _SHDL () C:\Programme
2015-01-01 16:01 - 2015-01-01 16:01 - 00000000 _SHDL () C:\ProgramData\Vorlagen
2015-01-01 16:01 - 2015-01-01 16:01 - 00000000 _SHDL () C:\ProgramData\Startmenü
2015-01-01 16:01 - 2015-01-01 16:01 - 00000000 _SHDL () C:\ProgramData\Microsoft\Windows\Start Menu\Programme
2015-01-01 16:01 - 2015-01-01 16:01 - 00000000 _SHDL () C:\ProgramData\Favoriten
2015-01-01 16:01 - 2015-01-01 16:01 - 00000000 _SHDL () C:\ProgramData\Dokumente
2015-01-01 16:01 - 2015-01-01 16:01 - 00000000 _SHDL () C:\ProgramData\Anwendungsdaten
2015-01-01 16:01 - 2015-01-01 16:01 - 00000000 _SHDL () C:\Program Files\Gemeinsame Dateien
2015-01-01 16:01 - 2015-01-01 16:01 - 00000000 _SHDL () C:\Dokumente und Einstellungen
2015-01-01 16:01 - 2015-01-01 16:01 - 00000000 __SHD () C:\Recovery
2015-01-01 16:01 - 2015-01-01 16:01 - 00000000 ____D () C:\Windows\SysWOW64\Macromed
2015-01-01 16:01 - 2015-01-01 16:01 - 00000000 ____D () C:\Windows\system32\Macromed
2015-01-01 16:01 - 2015-01-01 16:01 - 00000000 ____D () C:\ProgramData\Adobe
2015-01-01 16:01 - 2015-01-01 16:01 - 00000000 ____D () C:\Program Files (x86)\Adobe
2015-01-01 15:55 - 2015-01-11 21:16 - 01364578 _____ () C:\Windows\WindowsUpdate.log
2015-01-01 15:48 - 2015-01-01 15:48 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_TeeDriverx64_01011.Wdf
2015-01-01 15:48 - 2015-01-01 15:48 - 00000000 ____D () C:\Windows\SysWOW64\RTCOM
2015-01-01 15:48 - 2015-01-01 15:48 - 00000000 ____D () C:\Program Files\Realtek

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-01-11 16:42 - 2010-11-21 07:50 - 00698688 _____ () C:\Windows\system32\perfh007.dat
2015-01-11 16:42 - 2010-11-21 07:50 - 00148828 _____ () C:\Windows\system32\perfc007.dat
2015-01-11 16:42 - 2009-07-14 06:13 - 01618320 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-01-11 13:55 - 2009-07-14 05:45 - 00021664 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-01-11 13:55 - 2009-07-14 05:45 - 00021664 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-01-11 13:48 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-01-11 13:48 - 2009-07-14 05:51 - 00045767 _____ () C:\Windows\setupact.log
2015-01-08 19:55 - 2010-11-21 04:47 - 00167264 _____ () C:\Windows\PFRO.log
2015-01-08 19:55 - 2009-07-14 05:45 - 00342504 _____ () C:\Windows\system32\FNTCACHE.DAT
2015-01-07 17:14 - 2013-12-18 11:29 - 00000000 ____D () C:\Program Files (x86)\Microsoft Office
2015-01-07 17:13 - 2009-07-14 04:20 - 00000000 ____D () C:\Program Files\Common Files\Microsoft Shared
2015-01-07 17:12 - 2010-11-21 08:00 - 00000000 ____D () C:\Windows\ShellNew
2015-01-07 10:41 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\rescache
2015-01-07 08:15 - 2010-11-21 08:00 - 00000000 ____D () C:\Program Files\Windows Journal
2015-01-07 08:15 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\SysWOW64\Dism
2015-01-07 08:15 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\Dism
2015-01-07 08:15 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
2015-01-07 08:15 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\AppCompat
2015-01-06 21:36 - 2013-12-18 11:26 - 01591896 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2015-01-01 16:03 - 2013-12-18 11:12 - 00000000 ____D () C:\Windows\Panther
2015-01-01 16:03 - 2009-07-14 05:45 - 00000000 ____D () C:\Windows\Setup
2015-01-01 16:02 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\Help
2015-01-01 16:01 - 2009-07-14 06:32 - 00000000 ____D () C:\Windows\system32\restore
2015-01-01 16:01 - 2009-07-14 04:20 - 00000000 __RHD () C:\Users\Default
2015-01-01 16:01 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\Recovery
2015-01-01 16:01 - 2009-07-14 04:20 - 00000000 ____D () C:\Program Files\Windows NT
2015-01-01 15:49 - 2013-12-18 11:14 - 00003652 _____ () C:\Windows\TSSysprep.log
2015-01-01 15:49 - 2009-07-14 05:46 - 00003806 _____ () C:\Windows\DtcInstall.log

Some content of TEMP:
====================
C:\Users\Felix\AppData\Local\Temp\avgnt.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed

==================== End Of Log ============================

--- --- ---

--- --- ---

Danke für die schnelle Rückmeldung

und hier die Addition

Code:

ATTFilter

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 11-01-2015
Ran by Felix at 2015-01-11 21:36:42
Running from C:\Users\Felix\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Avira Desktop (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AS: Avira Desktop (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Adobe Flash Player 11 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 11.9.900.170 - Adobe Systems Incorporated)
Adobe Flash Player 16 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 16.0.0.235 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.09) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.09 - Adobe Systems Incorporated)
Apple Application Support (HKLM-x32\...\{83CAF0DE-8D3B-4C37-A631-2B8F16EC3031}) (Version: 3.1 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{BDD99690-3541-4619-9D2A-3CDDB3E15F9E}) (Version: 8.0.5.6 - Apple Inc.)
Avira (HKLM-x32\...\{e7c7c227-b742-4878-9425-f09bbf9951db}) (Version: 1.1.27.25527 - Avira Operations & Co. KG)
Avira (x32 Version: 1.1.27.25527 - Avira Operations & Co. KG) Hidden
Avira Free Antivirus (HKLM-x32\...\Avira AntiVir Desktop) (Version: 14.0.7.468 - Avira)
Cliqz (HKLM-x32\...\{5A0C0737-6AFE-4DC6-A8B4-6DFE509ACD75}_is1) (Version: 0.5.53 - Cliqz.com)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Fotogalerie (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
IrfanView (remove only) (HKLM-x32\...\IrfanView) (Version: 4.38 - Irfan Skiljan)
iTunes (HKLM\...\{2ABBBD91-91E5-4AD7-929A-FE15D1DC0576}) (Version: 12.0.1.26 - Apple Inc.)
Junk Mail filter update (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft Office (HKLM-x32\...\{90150000-0138-0409-0000-0000000FF1CE}) (Version: 15.0.4454.1510 - Microsoft Corporation)
Microsoft Office 2010 Service Pack 1 (SP1) (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{047B0968-E622-4FAA-9B4B-121FA109EDDE}) (Version:  - Microsoft)
Microsoft Office Home and Student 2010 (HKLM-x32\...\Office14.SingleImage) (Version: 14.0.6029.1000 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6E8E85E8-CE4B-4FF5-91F7-04999C9FAE6A}) (Version: 8.0.50727.42 - Microsoft Corporation)
Movie Maker (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Mozilla Firefox 34.0.5 (x86 de) (HKLM-x32\...\Mozilla Firefox 34.0.5 (x86 de)) (Version: 34.0.5 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 31.3.0 - Mozilla)
Mozilla Thunderbird 31.3.0 (x86 de) (HKLM-x32\...\Mozilla Thunderbird 31.3.0 (x86 de)) (Version: 31.3.0 - Mozilla)
NVIDIA 3D Vision Controller-Treiber 344.11 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 344.11 - NVIDIA Corporation)
NVIDIA 3D Vision Treiber 344.11 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 344.11 - NVIDIA Corporation)
NVIDIA GeForce Experience 2.1.2 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.1.2 - NVIDIA Corporation)
NVIDIA Grafiktreiber 344.11 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 344.11 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.32.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.32.1 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.14.0702 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.14.0702 - NVIDIA Corporation)
paint.net (HKLM\...\{19BD2C33-16A8-4ED1-B9EA-D9E35B21EC42}) (Version: 4.0.5 - dotPDN LLC)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7071 - Realtek Semiconductor Corp.)
SHIELD Streaming (Version: 3.1.200 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (Version: 16.13.42 - NVIDIA Corporation) Hidden
Skype™ 7.0 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.0.100 - Skype Technologies S.A.)
VLC media player (HKLM\...\VLC media player) (Version: 2.1.5 - VideoLAN)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3508.0205 - Microsoft Corporation)

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)


==================== Restore Points  =========================

Check "winmgmt" service or repair WMI.


==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)


==================== Loaded Modules (whitelisted) =============

2015-01-08 08:00 - 2013-02-06 13:39 - 02360320 _____ () C:\Windows\system32\spool\DRIVERS\x64\3\ZSU1319P.DLL
2015-01-08 08:00 - 2013-02-06 13:39 - 01236992 _____ () C:\Windows\system32\spool\DRIVERS\x64\3\ZGC1319P.dll
2015-01-08 08:00 - 2013-02-06 13:39 - 00396288 _____ () C:\Windows\system32\spool\DRIVERS\x64\3\ZSD1319P.DLL

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)


==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== EXE Association (whitelisted) =============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


==================== MSCONFIG/TASK MANAGER disabled items =========

(Currently there is no automatic fix for this section.)


========================= Accounts: ==========================

Administrator (S-1-5-21-442338121-1837241503-3693617225-500 - Administrator - Disabled)
Chef (S-1-5-21-442338121-1837241503-3693617225-1001 - Administrator - Enabled) => C:\Users\Chef
Felix (S-1-5-21-442338121-1837241503-3693617225-1000 - Limited - Enabled) => C:\Users\Felix
Gast (S-1-5-21-442338121-1837241503-3693617225-501 - Limited - Enabled)
Imke (S-1-5-21-442338121-1837241503-3693617225-1005 - Limited - Enabled) => C:\Users\Imke
Leoni (S-1-5-21-442338121-1837241503-3693617225-1003 - Limited - Enabled) => C:\Users\Leoni
Marie (S-1-5-21-442338121-1837241503-3693617225-1006 - Limited - Enabled) => C:\Users\Marie
Romy (S-1-5-21-442338121-1837241503-3693617225-1004 - Limited - Enabled) => C:\Users\Romy

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (01/11/2015 07:06:05 PM) (Source: Windows Backup) (EventID: 4104) (User: )
Description: Die Sicherung war nicht erfolgreich. Fehler: "Der Prozess kann nicht auf die Datei zugreifen, da sie von einem anderen Prozess verwendet wird. (0x80070020)"

Error: (01/11/2015 01:49:45 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (01/10/2015 11:03:10 AM) (Source: Office Software Protection Platform Service) (EventID: 1014) (User: )
Description: Acquisition of End User License failed. hr=0xC004C017
Sku Id=1caef4ec-adec-4236-a835-882f5afd4bf0

Error: (01/10/2015 11:03:10 AM) (Source: Office Software Protection Platform Service) (EventID: 8200) (User: )
Description: License acquisition failure details. 
hr=0xC004C017

Error: (01/10/2015 08:13:57 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (01/09/2015 06:15:33 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (01/09/2015 07:41:18 AM) (Source: Office Software Protection Platform Service) (EventID: 1014) (User: )
Description: Acquisition of End User License failed. hr=0xC004C017
Sku Id=1caef4ec-adec-4236-a835-882f5afd4bf0

Error: (01/09/2015 07:41:18 AM) (Source: Office Software Protection Platform Service) (EventID: 8200) (User: )
Description: License acquisition failure details. 
hr=0xC004C017

Error: (01/09/2015 06:30:20 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (01/08/2015 11:02:04 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003


System errors:
=============
Error: (01/07/2015 08:18:53 AM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Der Dienst "Windows Modules Installer" wurde mit folgendem Fehler beendet: 
%%16405

Error: (01/01/2015 10:19:47 PM) (Source: DCOM) (EventID: 10010) (User: )
Description: {F9717507-6651-4EDB-BFF7-AE615179BCCF}

Error: (01/01/2015 05:05:07 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Der Dienst "Superfetch" wurde mit folgendem Fehler beendet: 
%%1062

Error: (01/01/2015 03:47:38 PM) (Source: volmgr) (EventID: 46) (User: )
Description: Die Initialisierung des Speicherabbildes ist fehlgeschlagen.


Microsoft Office Sessions:
=========================
Error: (01/11/2015 07:06:05 PM) (Source: Windows Backup) (EventID: 4104) (User: )
Description: Der Prozess kann nicht auf die Datei zugreifen, da sie von einem anderen Prozess verwendet wird. (0x80070020)

Error: (01/11/2015 01:49:45 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (01/10/2015 11:03:10 AM) (Source: Office Software Protection Platform Service) (EventID: 1014) (User: )
Description: hr=0xC004C0171caef4ec-adec-4236-a835-882f5afd4bf0

Error: (01/10/2015 11:03:10 AM) (Source: Office Software Protection Platform Service) (EventID: 8200) (User: )
Description: hr=0xC004C01700010001(0x00000000, 11:03:10:030 - hxxp://go.microsoft.com/fwlink/?LinkID=120752)
00020001(0x00000000, 11:03:10:031)
00030001(0x00000000, 11:03:10:031 - hxxp://go.microsoft.com)
00030002(0x00000000, 11:03:10:031 - 1)
00020005(0x00000000, 11:03:10:031 - 0)
0002000C(0x00000000, 11:03:10:199 - 302)
0002000E(0x00000000, 11:03:10:199 - https://activation.sls.microsoft.com/sllicensing/SLLicense.asmx?configextension=o14)
00020001(0x00000000, 11:03:10:200)
00030001(0x00000000, 11:03:10:200 - https://activation.sls.microsoft.com)
00030002(0x00000000, 11:03:10:200 - 1)
00020005(0x00000000, 11:03:10:200 - 0)
0002000C(0x00000000, 11:03:10:783 - 500)
00010002(0x8004FC01, 11:03:10:784 - <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:soap="hxxp://schemas.xmlsoap.org/soap/envelope/" xmlns:xsi="hxxp://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="hxxp://www.w3.org/2001/XMLSchema"><soap:Body><soap:Fault><faultcode>soap:Server</faultcode><faultstring>SoapException</faultstring><detail><HRESULT>0xC004C003</HRESULT><HRESULT2>0xC004C017</HRESULT2><Messages><Message>203 (Activation) - [PA Product key blocked by IpLocation rule.  ---&gt; Product key blocked by IpLocation rule]</Message></Messages></detail></soap:Fault></soap:Body></soap:Envelope>)
00010003(0x8004FC01, 11:03:10:790)

Error: (01/10/2015 08:13:57 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (01/09/2015 06:15:33 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (01/09/2015 07:41:18 AM) (Source: Office Software Protection Platform Service) (EventID: 1014) (User: )
Description: hr=0xC004C0171caef4ec-adec-4236-a835-882f5afd4bf0

Error: (01/09/2015 07:41:18 AM) (Source: Office Software Protection Platform Service) (EventID: 8200) (User: )
Description: hr=0xC004C01700010001(0x00000000, 07:41:17:469 - hxxp://go.microsoft.com/fwlink/?LinkID=120752)
00020001(0x00000000, 07:41:17:470)
00030001(0x00000000, 07:41:17:470 - hxxp://go.microsoft.com)
00030002(0x00000000, 07:41:17:470 - 1)
00020005(0x00000000, 07:41:17:470 - 0)
0002000C(0x00000000, 07:41:17:652 - 302)
0002000E(0x00000000, 07:41:17:652 - https://activation.sls.microsoft.com/sllicensing/SLLicense.asmx?configextension=o14)
00020001(0x00000000, 07:41:17:653)
00030001(0x00000000, 07:41:17:653 - https://activation.sls.microsoft.com)
00030002(0x00000000, 07:41:17:653 - 1)
00020005(0x00000000, 07:41:17:653 - 0)
0002000C(0x00000000, 07:41:18:236 - 500)
00010002(0x8004FC01, 07:41:18:236 - <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:soap="hxxp://schemas.xmlsoap.org/soap/envelope/" xmlns:xsi="hxxp://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="hxxp://www.w3.org/2001/XMLSchema"><soap:Body><soap:Fault><faultcode>soap:Server</faultcode><faultstring>SoapException</faultstring><detail><HRESULT>0xC004C003</HRESULT><HRESULT2>0xC004C017</HRESULT2><Messages><Message>203 (Activation) - [PA Product key blocked by IpLocation rule.  ---&gt; Product key blocked by IpLocation rule]</Message></Messages></detail></soap:Fault></soap:Body></soap:Envelope>)
00010003(0x8004FC01, 07:41:18:241)

Error: (01/09/2015 06:30:20 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (01/08/2015 11:02:04 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003


==================== Memory info =========================== 

Processor: Intel(R) Core(TM) i5-4590 CPU @ 3.30GHz
Percentage of memory in use: 17%
Total physical RAM: 8110.01 MB
Available physical RAM: 6708.57 MB
Total Pagefile: 16218.2 MB
Available Pagefile: 13696.91 MB
Total Virtual: 8192 MB
Available Virtual: 8191.81 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:111.79 GB) (Free:56.55 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive d: () (Fixed) (Total:1863.01 GB) (Free:1786.67 GB) NTFS

==================== MBR & Partition Table ==================

==================== End Of Log ============================

schrauber · 12.01.2015, 00:04

Hi,
unsere Tools brauchen immer Adminrechte, also die Tools immer im Adminkonto laufen lassen.

Eine Infizierung über die Fritzbox ist "nicht möglich". Ist schon möglich, aber sehr selten und nur bei spezieller Infektion.

Dahingehend ist das Log sauber, ich sehe aber etwas Adware.

Downloade Dir bitte

Malwarebytes Anti-Malware

Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
Starte Malwarebytes' Anti-Malware (MBAM).
Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.

Downloade Dir bitte

AdwCleaner auf deinen Desktop.

Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
Starte die AdwCleaner.exe mit einem Doppelklick.
Stimme den Nutzungsbedingungen zu.
Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
- "Tracing" Schlüssel löschen
- Winsock Einstellungen zurücksetzen
- Proxy Einstellungen zurücksetzen
- Internet Explorer Richtlinien zurücksetzen
- Chrome Richtlinien zurücksetzen
- Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
Drücke eine beliebige Taste, um das Tool zu starten.
Je nach System kann der Scan eine Weile dauern.
Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.

und ein frisches FRST log bitte.

Sanderbörd · 12.01.2015, 09:23

[QUOTE=schrauber;1407871]Hi,
unsere Tools brauchen immer Adminrechte, also die Tools immer im Adminkonto laufen lassen.

Sorry, da das Tool auch unter Standarduser lief hab' ich mir nix dabei gedacht.
Besten Dank für die schnelle und nächtlich Rückmeldung. Oder sitzt Ihr in Ostasien?

Hier die gewünscheten logs:
1. MBAM

Code:

ATTFilter

 Malwarebytes Anti-Malware 
www.malwarebytes.org

Suchlauf Datum: 12.01.2015
Suchlauf-Zeit: 07:31:57
Logdatei: mbam-rep-2015-01-11.txt
Administrator: Ja

Version: 2.00.4.1028
Malware Datenbank: v2015.01.11.11
Rootkit Datenbank: v2015.01.07.01
Lizenz: Kostenlos
Malware Schutz: Deaktiviert
Bösartiger Webseiten Schutz: Deaktiviert
Selbstschutz: Deaktiviert

Betriebssystem: Windows 7 Service Pack 1
CPU: x64
Dateisystem: NTFS
Benutzer: Chef

Suchlauf-Art: Bedrohungs-Suchlauf
Ergebnis: Abgeschlossen
Durchsuchte Objekte: 332954
Verstrichene Zeit: 9 Min, 12 Sek

Speicher: Aktiviert
Autostart: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Deaktiviert
Heuristik: Aktiviert
PUP: Aktiviert
PUM: Aktiviert

Prozesse: 0
(Keine schädliche Elemente erkannt)

Module: 0
(Keine schädliche Elemente erkannt)

Registrierungsschlüssel: 0
(Keine schädliche Elemente erkannt)

Registrierungswerte: 0
(Keine schädliche Elemente erkannt)

Registrierungsdaten: 0
(Keine schädliche Elemente erkannt)

Ordner: 0
(Keine schädliche Elemente erkannt)

Dateien: 0
(Keine schädliche Elemente erkannt)

Physische Sektoren: 0
(Keine schädliche Elemente erkannt)


(end)

2. AdwCl
AdwCleaner Logfile:

Code:

ATTFilter

# AdwCleaner v4.107 - Bericht erstellt am 12/01/2015 um 08:18:16
# Aktualisiert 07/01/2015 von Xplode
# Database : 2015-01-11.2 [Live]
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)
# Benutzername : Chef - FELIX-QUATTRO-P
# Gestartet von : C:\Users\Chef\Desktop\AdwCleaner_4.107.exe
# Option : Löschen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****


***** [ Tasks ] *****


***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{00B11DA2-75ED-4364-ABA5-9A95B1F5E946}
Schlüssel Gelöscht : HKCU\Software\OCS

***** [ Browser ] *****

-\\ Internet Explorer v11.0.9600.17496


-\\ Mozilla Firefox v34.0.5 (x86 de)


*************************

AdwCleaner[R0].txt - [959 octets] - [12/01/2015 07:57:04]
AdwCleaner[R1].txt - [1018 octets] - [12/01/2015 08:04:50]
AdwCleaner[S0].txt - [895 octets] - [12/01/2015 08:18:16]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [954 octets] ##########

--- --- ---

Frage, der Neugierde halber: In R1 hat ADC 3 Funde, lt. S0 aber nur 2 gelöscht.
Hier der Ausschnitt aus R1, den ich vor Neustart gezogen habe:
"***** [ Registrierungsdatenbank ] *****

Schlüssel Gefunden : HKCU\Software\OCS
Schlüssel Gefunden : [x64] HKCU\Software\OCS
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{00B11DA2-75ED-4364-ABA5-9A95B1F5E946}"

3. JRT-log

Code:

ATTFilter

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.4.1 (12.28.2014:1)
OS: Windows 7 Home Premium x64
Ran by Chef on 12.01.2015 at  8:32:49,10
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys



~~~ Files



~~~ Folders



~~~ FireFox

Emptied folder: C:\Users\Chef\AppData\Roaming\mozilla\firefox\profiles\z0ls01kv.default\minidumps [2 files]



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 12.01.2015 at  8:35:17,71
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

und ein frisches FRST log bitte. Voilà:

FRST Logfile:

FRST Logfile:

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 11-01-2015
Ran by Chef (administrator) on FELIX-QUATTRO-P on 12-01-2015 08:39:47
Running from C:\Users\Chef\Desktop
Loaded Profile: Chef (Available profiles: Felix & Chef & Leoni & Romy & Imke & Marie)
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7203032 2013-10-22] (Realtek Semiconductor)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2461504 2014-09-17] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959176 2014-09-12] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [702768 2014-11-24] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [157480 2014-10-15] (Apple Inc.)
HKLM-x32\...\Run: [Avira Systray] => C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe [126200 2014-11-20] (Avira Operations GmbH & Co. KG)
ShellIconOverlayIdentifiers: [ SkyDrive1] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} =>  No File
ShellIconOverlayIdentifiers: [ SkyDrive2] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} =>  No File
ShellIconOverlayIdentifiers: [ SkyDrive3] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} =>  No File
ShellIconOverlayIdentifiers-x32: [ SkyDrive1] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} =>  No File
ShellIconOverlayIdentifiers-x32: [ SkyDrive2] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} =>  No File
ShellIconOverlayIdentifiers-x32: [ SkyDrive3] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} =>  No File

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF ProfilePath: C:\Users\Chef\AppData\Roaming\Mozilla\Firefox\Profiles\z0ls01kv.default
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_16_0_0_235.dll ()
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.1.5 -> C:\Program Files (x86)\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_235.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~3\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~3\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3508.0205 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

Chrome: 
=======
CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - No Path
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - No Path

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [431920 2014-11-24] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [431920 2014-11-24] (Avira Operations GmbH & Co. KG)
R2 Avira.OE.ServiceHost; C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe [166192 2014-11-20] (Avira Operations GmbH & Co. KG)
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1149760 2014-09-17] (NVIDIA Corporation)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1796928 2014-09-17] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [19440960 2014-09-17] (NVIDIA Corporation)
S3 COMSysApp; %SystemRoot%\system32\dllhost.exe /Processid:{02D4B3F1-FD88-11D1-960D-00805FC79235}

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S3 adp3132; C:\Windows\system32\drivers\adp3132.sys [385072 2010-01-28] (Adaptec, Inc.)
S3 amdide64; C:\Windows\system32\drivers\amdide64.sys [11904 2011-12-18] (Advanced Micro Devices Inc.)
R0 amdkmpfd; C:\Windows\System32\drivers\amdkmpfd.sys [36096 2013-05-21] (Advanced Micro Devices, Inc.)
S3 asahci64; C:\Windows\system32\drivers\asahci64.sys [49760 2012-01-06] (Asmedia Technology)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [119272 2014-11-24] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131608 2014-11-24] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2014-11-24] (Avira Operations GmbH & Co. KG)
S3 EtronSTOR; C:\Windows\System32\Drivers\EtronSTOR.sys [32512 2012-06-13] (Etron Technology Inc)
S3 FLxHCIh; C:\Windows\system32\drivers\FLxHCIh.sys [77040 2012-11-02] (Fresco Logic)
S3 HP1319EWS; C:\Windows\System32\Drivers\HP1319EWS.sys [15360 2013-02-06] (Marvell Semiconductor, Inc.)
S3 HP1319FAX; C:\Windows\System32\Drivers\HP1319FAX.sys [16896 2013-02-06] (Marvell Semiconductor, Inc.)
R0 iaStorF; C:\Windows\System32\drivers\iaStorF.sys [28656 2013-04-22] (Intel Corporation)
S3 iaStorS; C:\Windows\system32\drivers\iaStorS.sys [652760 2012-10-18] (Intel Corporation)
S3 ISASerial; C:\Windows\system32\drivers\ISASerial.sys [72192 2008-02-20] (Windows (R) Codename Longhorn DDK provider)
S3 ISCT; C:\Windows\system32\drivers\ISCTD64.sys [46568 2013-02-14] ()
R3 MEIx64; C:\Windows\System32\DRIVERS\TeeDriverx64.sys [99288 2013-08-08] (Intel Corporation)
S3 MTsensor; C:\Windows\system32\drivers\ASACPI.sys [15416 2009-07-16] ()
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [20288 2014-09-17] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [38048 2014-09-04] (NVIDIA Corporation)
S1 oxpar; C:\Windows\system32\drivers\oxpar.sys [158208 2007-01-24] (OEM)
S3 OxPPort; C:\Windows\system32\drivers\OxPPort.sys [98304 2008-07-31] (OEM)
S3 PciIsaSerial; C:\Windows\system32\drivers\PciIsaSerial.sys [72192 2008-05-22] (Windows (R) Codename Longhorn DDK provider)
S3 PciPPorts; C:\Windows\system32\drivers\PciPPorts.sys [95744 2008-05-22] ()
S3 PciSPorts; C:\Windows\system32\drivers\PciSPorts.sys [126464 2008-05-22] ()
S3 PPorts; C:\Windows\system32\drivers\PPorts.sys [95744 2008-02-20] ()
S3 rusb3hub; C:\Windows\system32\drivers\rusb3hub.sys [102912 2012-03-15] (Renesas Electronics Corporation)
S3 rusb3xhc; C:\Windows\system32\drivers\rusb3xhc.sys [220672 2012-03-15] (Renesas Electronics Corporation)
S3 Si3124r5; C:\Windows\system32\drivers\Si3124r5.sys [340008 2010-04-13] (Silicon Image, Inc)
R0 SiFilter; C:\Windows\System32\drivers\SiWinAcc.sys [22568 2010-04-13] (Silicon Image, Inc.)
R0 SiRemFil; C:\Windows\System32\drivers\SiRemFil.sys [16936 2010-04-13] (Silicon Image, Inc.)
S3 SPorts; C:\Windows\system32\drivers\SPorts.sys [124416 2008-02-20] ()
S3 StnPport; C:\Windows\system32\drivers\StnPport.sys [97280 2009-12-17] ()
S3 StnSport; C:\Windows\system32\drivers\StnSport.sys [126464 2009-11-14] ()
S3 VUSB3HUB; C:\Windows\system32\drivers\ViaHub3.sys [225792 2013-09-25] (VIA Technologies, Inc.)
S3 xhcdrv; C:\Windows\system32\drivers\xhcdrv.sys [296960 2013-09-25] (VIA Technologies, Inc.)
S3 NmPar; \SystemRoot\system32\drivers\NmPar.sys [X]
S3 nmserial; \SystemRoot\system32\drivers\nmserial.sys [X]
S3 Oxmfuf; \SystemRoot\system32\drivers\oxmfuf.sys [X]
S3 oxser; \SystemRoot\system32\drivers\oxser.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-01-12 08:39 - 2015-01-12 08:39 - 00012334 _____ () C:\Users\Chef\Desktop\FRST.txt
2015-01-12 08:39 - 2015-01-11 16:51 - 02124288 _____ (Farbar) C:\Users\Chef\Desktop\FRST64.exe
2015-01-12 08:35 - 2015-01-12 08:35 - 00000754 _____ () C:\Users\Chef\Desktop\JRT.txt
2015-01-12 08:32 - 2015-01-12 08:32 - 00000000 ____D () C:\Windows\ERUNT
2015-01-12 08:30 - 2015-01-12 08:31 - 01707939 _____ (Thisisu) C:\Users\Chef\Desktop\JRT.exe
2015-01-12 08:23 - 2015-01-12 08:23 - 00001033 _____ () C:\Users\Chef\Desktop\AdwCleaner[S0]_2015-01-12.txt
2015-01-12 08:17 - 2015-01-12 08:17 - 00001018 _____ () C:\Users\Chef\Desktop\AdwCleaner[R1]_2015-01-12.txt
2015-01-12 07:56 - 2015-01-12 08:18 - 00000000 ____D () C:\AdwCleaner
2015-01-12 07:46 - 2015-01-12 07:47 - 02191360 _____ () C:\Users\Chef\Desktop\AdwCleaner_4.107.exe
2015-01-12 07:44 - 2015-01-12 07:44 - 00001216 _____ () C:\Users\Chef\Desktop\mbam-rep-2015-01-11.txt
2015-01-12 07:20 - 2015-01-12 07:21 - 00129752 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-01-12 07:19 - 2015-01-12 07:19 - 00001102 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2015-01-12 07:19 - 2015-01-12 07:19 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2015-01-12 07:19 - 2015-01-12 07:19 - 00000000 ____D () C:\ProgramData\Malwarebytes
2015-01-12 07:19 - 2015-01-12 07:19 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2015-01-12 07:19 - 2014-11-21 06:14 - 00093400 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2015-01-12 07:19 - 2014-11-21 06:14 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2015-01-12 07:19 - 2014-11-21 06:14 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2015-01-12 06:59 - 2015-01-12 07:00 - 20447072 _____ (Malwarebytes Corporation ) C:\Users\Chef\Desktop\mbam-setup-2.0.4.1028.exe
2015-01-12 06:56 - 2015-01-12 06:56 - 00000000 ____D () C:\Users\Chef\AppData\Roaming\IrfanView
2015-01-12 06:49 - 2015-01-11 16:42 - 00380416 _____ () C:\Users\Chef\Desktop\Gmer-19357.exe
2015-01-12 06:49 - 2015-01-11 16:39 - 00050477 _____ () C:\Users\Chef\Desktop\Defogger.exe
2015-01-11 21:36 - 2015-01-12 08:39 - 00000000 ____D () C:\FRST
2015-01-11 21:36 - 2015-01-11 21:36 - 00080894 _____ () C:\Users\Felix\Desktop\FRST_2015-01-11_21.40h.txt
2015-01-11 21:36 - 2015-01-11 21:36 - 00016379 _____ () C:\Users\Felix\Desktop\Addition_2015-01-11_21.40h.txt
2015-01-11 18:14 - 2015-01-11 16:51 - 02124288 _____ (Farbar) C:\Users\Felix\Desktop\FRST64.exe
2015-01-11 18:14 - 2015-01-11 16:39 - 00050477 _____ () C:\Users\Felix\Desktop\Defogger.exe
2015-01-11 16:51 - 2015-01-11 16:51 - 02124288 _____ (Farbar) C:\Users\Felix\Downloads\FRST64.exe
2015-01-11 16:42 - 2015-01-11 16:42 - 00380416 _____ () C:\Users\Felix\Downloads\Gmer-19357.exe
2015-01-11 16:41 - 2015-01-11 16:41 - 01115648 _____ (Farbar) C:\Users\Felix\Downloads\FRST.exe
2015-01-11 16:39 - 2015-01-11 16:39 - 00050477 _____ () C:\Users\Felix\Downloads\Defogger.exe
2015-01-10 11:19 - 2015-01-10 11:20 - 00000000 ____D () C:\Users\Felix\Documents\0110_Soziales-Gemeinnütziges
2015-01-10 11:11 - 2015-01-10 11:14 - 00000000 ____D () C:\Users\Felix\Documents\070_Motorrad
2015-01-10 11:01 - 2015-01-10 11:02 - 00000000 ____D () C:\Users\Felix\Documents\030_Familie-Verwandte
2015-01-10 10:46 - 2015-01-10 10:46 - 00000000 ____D () C:\Users\Felix\Documents\gaby
2015-01-10 10:18 - 2015-01-11 19:20 - 00000000 ____D () C:\Users\Felix\Documents\050_EDV-PC-Div
2015-01-10 10:18 - 2015-01-10 11:10 - 00000000 ____D () C:\Users\Felix\Documents\050_Behörden_Div
2015-01-10 10:18 - 2015-01-10 11:09 - 00000000 ____D () C:\Users\Felix\Documents\040_Geistiges
2015-01-10 10:18 - 2015-01-10 10:51 - 00000000 ____D () C:\Users\Felix\Documents\010_Versicherungen_Altersvorsorge
2015-01-10 10:18 - 2015-01-10 10:18 - 00000000 ____D () C:\Users\Felix\Documents\Werkzeug_Maschinen
2015-01-10 10:18 - 2015-01-10 10:18 - 00000000 ____D () C:\Users\Felix\Documents\Spvgg Renningen
2015-01-10 10:18 - 2015-01-10 10:18 - 00000000 ____D () C:\Users\Felix\Documents\schriftv
2015-01-10 10:18 - 2015-01-10 10:18 - 00000000 ____D () C:\Users\Felix\Documents\Rechnungen
2015-01-10 10:18 - 2015-01-10 10:18 - 00000000 ____D () C:\Users\Felix\Documents\Porsche
2015-01-10 10:18 - 2015-01-10 10:18 - 00000000 ____D () C:\Users\Felix\Documents\Möbelbau
2015-01-10 10:18 - 2015-01-10 10:18 - 00000000 ____D () C:\Users\Felix\Documents\Lustiges
2015-01-10 10:18 - 2015-01-10 10:18 - 00000000 ____D () C:\Users\Felix\Documents\Landkarten
2015-01-10 10:18 - 2015-01-10 10:18 - 00000000 ____D () C:\Users\Felix\Documents\Kuchenrezepte
2015-01-10 10:18 - 2015-01-10 10:18 - 00000000 ____D () C:\Users\Felix\Documents\Kollegen
2015-01-10 10:18 - 2015-01-10 10:18 - 00000000 ____D () C:\Users\Felix\Documents\Kaminofen
2015-01-10 10:18 - 2015-01-10 10:18 - 00000000 ____D () C:\Users\Felix\Documents\HAUSBAU
2015-01-10 10:18 - 2015-01-10 10:18 - 00000000 ____D () C:\Users\Felix\Documents\Gesundheit
2015-01-10 10:18 - 2015-01-10 10:18 - 00000000 ____D () C:\Users\Felix\Documents\Einladungen_Geschenkgutscheine
2015-01-10 10:18 - 2015-01-10 10:18 - 00000000 ____D () C:\Users\Felix\Documents\ebay
2015-01-10 10:18 - 2015-01-10 10:18 - 00000000 ____D () C:\Users\Felix\Documents\090_Flugreisen
2015-01-10 10:18 - 2015-01-10 10:18 - 00000000 ____D () C:\Users\Felix\Documents\080_Bus+Bahn_DB-VVS
2015-01-10 10:18 - 2015-01-10 10:18 - 00000000 ____D () C:\Users\Felix\Documents\060_Autos
2015-01-10 10:18 - 2015-01-10 10:18 - 00000000 ____D () C:\Users\Felix\Documents\0200_Finanzamt
2015-01-10 10:18 - 2015-01-10 10:18 - 00000000 ____D () C:\Users\Felix\Documents\020_Banken
2015-01-10 10:18 - 2015-01-10 10:18 - 00000000 ____D () C:\Users\Felix\Documents\0100_Fahrrad
2015-01-09 07:52 - 2015-01-09 07:52 - 00272740 _____ () C:\Users\Chef\Documents\netzwerk-screenshots.xlsx
2015-01-08 08:03 - 2015-01-08 08:03 - 03352368 _____ () C:\Users\Felix\Downloads\M1319_FW_Upgrade_1206_20120302_signed.exe
2015-01-08 08:02 - 2015-01-08 08:02 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_HP1319FAX_01009.Wdf
2015-01-08 08:02 - 2015-01-08 08:02 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_HP1319EWS_01009.Wdf
2015-01-08 08:00 - 2015-01-08 08:03 - 00083907 _____ () C:\M1319.log
2015-01-08 08:00 - 2015-01-08 08:00 - 00000000 ____D () C:\Program Files\HP
2015-01-08 08:00 - 2013-02-06 14:02 - 00114688 _____ (Marvell) C:\Windows\system32\HPMCoSetup.dll
2015-01-08 08:00 - 2013-02-06 13:51 - 00016896 _____ (Marvell Semiconductor, Inc.) C:\Windows\system32\Drivers\HP1319FAX.sys
2015-01-08 08:00 - 2013-02-06 13:51 - 00015360 _____ (Marvell Semiconductor, Inc.) C:\Windows\system32\Drivers\HP1319EWS.sys
2015-01-08 08:00 - 2013-02-06 13:41 - 00166912 _____ (Marvell Semiconductor, Inc.) C:\Windows\system32\ZLM1319.DLL
2015-01-08 08:00 - 2013-02-06 13:13 - 00024772 _____ () C:\Windows\M1319DEF.css
2015-01-08 08:00 - 2013-02-06 13:13 - 00009731 _____ () C:\Windows\M1319BTN.js
2015-01-08 08:00 - 2013-02-06 13:13 - 00008085 _____ () C:\Windows\M1319GLB.js
2015-01-08 08:00 - 2013-02-06 13:12 - 02219152 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\Ltwvc15u.dll
2015-01-08 08:00 - 2013-02-06 13:12 - 01711248 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\ltclr15u.dll
2015-01-08 08:00 - 2013-02-06 13:12 - 01035408 _____ (The OpenSSL Project) C:\Windows\SysWOW64\ltcry15u.dll
2015-01-08 08:00 - 2013-02-06 13:12 - 00646288 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\Ltdlgfile15u.dll
2015-01-08 08:00 - 2013-02-06 13:12 - 00482448 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\ltkrn15u.dll
2015-01-08 08:00 - 2013-02-06 13:12 - 00445584 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\ltimgsfx15u.dll
2015-01-08 08:00 - 2013-02-06 13:12 - 00384144 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\Lfcmp15u.dll
2015-01-08 08:00 - 2013-02-06 13:12 - 00302224 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\ltimgcor15u.dll
2015-01-08 08:00 - 2013-02-06 13:12 - 00261264 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\LTDIS15u.dll
2015-01-08 08:00 - 2013-02-06 13:12 - 00257168 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\ltefx15u.dll
2015-01-08 08:00 - 2013-02-06 13:12 - 00232592 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\Ltdlgkrn15u.dll
2015-01-08 08:00 - 2013-02-06 13:12 - 00216208 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\ltimgefx15u.dll
2015-01-08 08:00 - 2013-02-06 13:12 - 00212112 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\ltimgclr15u.dll
2015-01-08 08:00 - 2013-02-06 13:12 - 00150672 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\ltfil15u.dll
2015-01-08 08:00 - 2013-02-06 13:12 - 00146576 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\Lftif15u.dll
2015-01-08 08:00 - 2013-02-06 13:12 - 00117904 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\Lttwn15u.dll
2015-01-08 08:00 - 2013-02-06 13:12 - 00117904 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\Ltimgutl15u.dll
2015-01-08 08:00 - 2013-02-06 13:12 - 00105616 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\ltpnt15u.dll
2015-01-08 08:00 - 2013-02-06 13:12 - 00097424 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\Lffax15u.dll
2015-01-08 08:00 - 2013-02-06 13:12 - 00068752 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\ltpdg15u.dll
2015-01-08 08:00 - 2013-02-06 13:12 - 00064656 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\LTCON15u.dll
2015-01-08 08:00 - 2013-02-06 13:12 - 00038032 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\ltimgopt15u.dll
2015-01-08 08:00 - 2013-02-06 13:12 - 00024720 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\Lfbmp15u.dll
2015-01-08 08:00 - 2013-02-06 13:09 - 00195072 _____ () C:\Windows\system32\hpsfs.dll
2015-01-08 08:00 - 2013-02-06 06:42 - 00089600 _____ (Windows (R) Win 7 DDK provider) C:\Windows\system32\m1319wia2.dll
2015-01-08 08:00 - 2013-02-06 06:42 - 00038912 _____ () C:\Windows\system32\HPImgFlt.dll
2015-01-08 08:00 - 2013-02-06 06:41 - 00409088 _____ () C:\Windows\ZSM1319.EXE
2015-01-08 08:00 - 2013-02-06 06:41 - 00409088 _____ () C:\Windows\system32\ZSM1319.EXE
2015-01-08 08:00 - 2013-02-06 06:13 - 00004451 _____ () C:\Windows\M1319OS.htm
2015-01-08 07:59 - 2015-01-08 07:59 - 16806448 _____ () C:\Users\Felix\Downloads\ljM1319-hb-pnp-win64-de.exe
2015-01-07 17:25 - 2015-01-07 17:25 - 00003029 _____ () C:\Users\Felix\Desktop\Microsoft Word 2010.lnk
2015-01-07 17:24 - 2015-01-07 17:24 - 00003095 _____ () C:\Users\Felix\Desktop\Microsoft PowerPoint 2010.lnk
2015-01-07 17:24 - 2015-01-07 17:24 - 00003047 _____ () C:\Users\Felix\Desktop\Microsoft Excel 2010.lnk
2015-01-07 17:14 - 2015-01-07 17:14 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
2015-01-07 17:13 - 2015-01-07 17:13 - 00000000 ____D () C:\Windows\System32\Tasks\OfficeSoftwareProtectionPlatform
2015-01-07 17:13 - 2015-01-07 17:13 - 00000000 ____D () C:\Program Files\Microsoft Office
2015-01-07 17:12 - 2015-01-07 17:17 - 00000000 ____D () C:\ProgramData\Microsoft Help
2015-01-07 17:12 - 2015-01-07 17:12 - 00000000 __RHD () C:\MSOCache
2015-01-07 17:12 - 2015-01-07 17:12 - 00000000 ____D () C:\Users\Chef\AppData\Local\Microsoft Help
2015-01-07 17:12 - 2015-01-07 17:12 - 00000000 ____D () C:\Program Files (x86)\Microsoft Analysis Services
2015-01-07 15:20 - 2015-01-07 15:20 - 00000000 ___DL () C:\Users\Felix
2015-01-07 15:14 - 2015-01-07 15:14 - 00000000 ___DL () C:\Users\Romy
2015-01-07 15:14 - 2015-01-07 15:14 - 00000000 ___DL () C:\Users\Marie
2015-01-07 15:13 - 2015-01-07 15:13 - 00000000 ___DL () C:\Users\Leoni
2015-01-07 15:12 - 2015-01-07 15:12 - 00000000 ___DL () C:\Users\Imke
2015-01-07 14:16 - 2015-01-07 14:17 - 00000000 ____D () C:\Windows\system32\MRT
2015-01-07 14:16 - 2014-11-27 16:40 - 112710672 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-01-07 14:06 - 2014-12-13 06:09 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-01-07 14:06 - 2014-12-13 04:33 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2015-01-07 14:06 - 2014-07-09 03:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDYAK.DLL
2015-01-07 14:06 - 2014-07-09 03:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDTAT.DLL
2015-01-07 14:06 - 2014-07-09 03:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU1.DLL
2015-01-07 14:06 - 2014-07-09 03:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDBASH.DLL
2015-01-07 14:06 - 2014-07-09 03:03 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU.DLL
2015-01-07 14:06 - 2014-07-09 02:31 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDYAK.DLL
2015-01-07 14:06 - 2014-07-09 02:31 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDTAT.DLL
2015-01-07 14:06 - 2014-07-09 02:31 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDRU1.DLL
2015-01-07 14:06 - 2014-07-09 02:31 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDRU.DLL
2015-01-07 14:06 - 2014-07-09 02:31 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDBASH.DLL
2015-01-07 14:06 - 2014-07-08 23:38 - 00419992 _____ () C:\Windows\system32\locale.nls
2015-01-07 14:06 - 2014-07-08 23:30 - 00419992 _____ () C:\Windows\SysWOW64\locale.nls
2015-01-07 14:00 - 2015-01-08 23:18 - 00086160 _____ () C:\Users\Romy\AppData\Local\GDIPFONTCACHEV1.DAT
2015-01-07 14:00 - 2015-01-07 16:05 - 00000000 ____D () C:\Users\Marie\AppData\Local\NVIDIA Corporation
2015-01-07 14:00 - 2015-01-07 14:47 - 00000000 ___RD () C:\Users\Marie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2015-01-07 14:00 - 2015-01-07 14:47 - 00000000 ___RD () C:\Users\Marie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2015-01-07 14:00 - 2015-01-07 14:47 - 00000000 ____D () C:\Users\Marie\AppData\Roaming\Adobe
2015-01-07 14:00 - 2015-01-07 14:47 - 00000000 ____D () C:\Users\Marie\AppData\Local\NVIDIA
2015-01-07 14:00 - 2015-01-07 14:46 - 00000000 ___RD () C:\Users\Romy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2015-01-07 14:00 - 2015-01-07 14:46 - 00000000 ___RD () C:\Users\Romy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2015-01-07 14:00 - 2015-01-07 14:46 - 00000000 ____D () C:\Users\Romy\AppData\Roaming\Adobe
2015-01-07 14:00 - 2015-01-07 14:46 - 00000000 ____D () C:\Users\Romy\AppData\Local\NVIDIA Corporation
2015-01-07 14:00 - 2015-01-07 14:46 - 00000000 ____D () C:\Users\Romy\AppData\Local\NVIDIA
2015-01-07 14:00 - 2015-01-07 14:00 - 00058016 _____ () C:\Users\Marie\AppData\Local\GDIPFONTCACHEV1.DAT
2015-01-07 14:00 - 2015-01-07 14:00 - 00001421 _____ () C:\Users\Romy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2015-01-07 14:00 - 2015-01-07 14:00 - 00001421 _____ () C:\Users\Marie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2015-01-07 14:00 - 2015-01-07 14:00 - 00000020 ___SH () C:\Users\Romy\ntuser.ini
2015-01-07 14:00 - 2015-01-07 14:00 - 00000020 ___SH () C:\Users\Marie\ntuser.ini
2015-01-07 14:00 - 2015-01-07 14:00 - 00000000 ____D () C:\Users\Romy\AppData\Roaming\Apple Computer
2015-01-07 14:00 - 2015-01-07 14:00 - 00000000 ____D () C:\Users\Romy\AppData\Local\VirtualStore
2015-01-07 14:00 - 2015-01-07 14:00 - 00000000 ____D () C:\Users\Marie\AppData\Roaming\Apple Computer
2015-01-07 14:00 - 2015-01-07 14:00 - 00000000 ____D () C:\Users\Marie\AppData\Local\VirtualStore
2015-01-07 14:00 - 2013-12-18 11:27 - 00002120 _____ () C:\Users\Romy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft SkyDrive.lnk
2015-01-07 14:00 - 2013-12-18 11:27 - 00002120 _____ () C:\Users\Marie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft SkyDrive.lnk
2015-01-07 13:59 - 2015-01-07 14:47 - 00000000 ___RD () C:\Users\Leoni\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2015-01-07 13:59 - 2015-01-07 14:47 - 00000000 ___RD () C:\Users\Leoni\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2015-01-07 13:59 - 2015-01-07 14:47 - 00000000 ____D () C:\Users\Leoni\AppData\Roaming\Adobe
2015-01-07 13:59 - 2015-01-07 14:47 - 00000000 ____D () C:\Users\Leoni\AppData\Local\NVIDIA Corporation
2015-01-07 13:59 - 2015-01-07 14:47 - 00000000 ____D () C:\Users\Leoni\AppData\Local\NVIDIA
2015-01-07 13:59 - 2015-01-07 13:59 - 00058016 _____ () C:\Users\Leoni\AppData\Local\GDIPFONTCACHEV1.DAT
2015-01-07 13:59 - 2015-01-07 13:59 - 00001421 _____ () C:\Users\Leoni\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2015-01-07 13:59 - 2015-01-07 13:59 - 00000020 ___SH () C:\Users\Leoni\ntuser.ini
2015-01-07 13:59 - 2015-01-07 13:59 - 00000000 ____D () C:\Users\Leoni\AppData\Roaming\Apple Computer
2015-01-07 13:59 - 2015-01-07 13:59 - 00000000 ____D () C:\Users\Leoni\AppData\Local\VirtualStore
2015-01-07 13:59 - 2013-12-18 11:27 - 00002120 _____ () C:\Users\Leoni\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft SkyDrive.lnk
2015-01-07 13:57 - 2015-01-07 14:48 - 00000000 ___RD () C:\Users\Imke\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2015-01-07 13:57 - 2015-01-07 14:48 - 00000000 ___RD () C:\Users\Imke\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2015-01-07 13:57 - 2015-01-07 14:48 - 00000000 ____D () C:\Users\Imke\AppData\Roaming\Adobe
2015-01-07 13:57 - 2015-01-07 14:48 - 00000000 ____D () C:\Users\Imke\AppData\Local\NVIDIA Corporation
2015-01-07 13:57 - 2015-01-07 14:47 - 00000000 ____D () C:\Users\Imke\AppData\Local\NVIDIA
2015-01-07 13:57 - 2015-01-07 13:57 - 00058016 _____ () C:\Users\Imke\AppData\Local\GDIPFONTCACHEV1.DAT
2015-01-07 13:57 - 2015-01-07 13:57 - 00001421 _____ () C:\Users\Imke\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2015-01-07 13:57 - 2015-01-07 13:57 - 00000020 ___SH () C:\Users\Imke\ntuser.ini
2015-01-07 13:57 - 2015-01-07 13:57 - 00000000 ____D () C:\Users\Imke\AppData\Roaming\Apple Computer
2015-01-07 13:57 - 2015-01-07 13:57 - 00000000 ____D () C:\Users\Imke\AppData\Local\VirtualStore
2015-01-07 13:57 - 2013-12-18 11:27 - 00002120 _____ () C:\Users\Imke\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft SkyDrive.lnk
2015-01-07 11:23 - 2015-01-07 11:23 - 00000000 ____D () C:\Users\Chef\AppData\Roaming\Thunderbird
2015-01-07 11:23 - 2015-01-07 11:23 - 00000000 ____D () C:\Users\Chef\AppData\Local\Thunderbird
2015-01-07 11:17 - 2015-01-07 11:17 - 00000000 ____D () C:\Users\Chef\AppData\Roaming\Macromedia
2015-01-07 11:17 - 2015-01-07 11:17 - 00000000 ____D () C:\Users\Chef\AppData\Local\Macromedia
2015-01-07 11:11 - 2015-01-07 11:11 - 00000000 ____D () C:\Users\Chef\AppData\Roaming\Mozilla
2015-01-07 11:11 - 2015-01-07 11:11 - 00000000 ____D () C:\Users\Chef\AppData\Local\Mozilla
2015-01-07 09:24 - 2015-01-07 09:24 - 00000000 ____D () C:\Users\Chef\AppData\Roaming\Avira
2015-01-07 08:15 - 2015-01-07 08:15 - 00000000 ___SD () C:\Windows\system32\CompatTel
2015-01-07 08:15 - 2015-01-07 08:15 - 00000000 ____D () C:\Windows\system32\appraiser
2015-01-06 21:53 - 2013-05-10 06:56 - 14631424 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2015-01-06 21:53 - 2013-05-10 06:56 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2015-01-06 21:53 - 2013-05-10 05:56 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL
2015-01-06 21:53 - 2013-05-10 05:56 - 11410432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
2015-01-06 21:33 - 2014-10-18 03:05 - 04121600 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll
2015-01-06 21:33 - 2014-10-18 02:33 - 03209728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mf.dll
2015-01-06 21:33 - 2014-07-07 03:06 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll
2015-01-06 21:33 - 2014-07-07 03:06 - 00055808 _____ (Microsoft Corporation) C:\Windows\system32\rrinstaller.exe
2015-01-06 21:33 - 2014-07-07 03:06 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\mfpmp.exe
2015-01-06 21:33 - 2014-07-07 03:02 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\mferror.dll
2015-01-06 21:33 - 2014-07-07 02:40 - 00103424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfps.dll
2015-01-06 21:33 - 2014-07-07 02:39 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rrinstaller.exe
2015-01-06 21:33 - 2014-07-07 02:39 - 00023040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfpmp.exe
2015-01-06 21:33 - 2014-07-07 02:37 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mferror.dll
2015-01-06 21:29 - 2014-06-27 03:08 - 02777088 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll
2015-01-06 21:29 - 2014-06-27 02:45 - 02285056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll
2015-01-06 21:28 - 2014-06-30 23:24 - 00008856 _____ (Microsoft Corporation) C:\Windows\system32\icardres.dll
2015-01-06 21:28 - 2014-06-30 23:14 - 00008856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardres.dll
2015-01-06 21:28 - 2014-03-09 22:48 - 01389208 _____ (Microsoft Corporation) C:\Windows\system32\icardagt.exe
2015-01-06 21:28 - 2014-03-09 22:48 - 00171160 _____ (Microsoft Corporation) C:\Windows\system32\infocardapi.dll
2015-01-06 21:28 - 2014-03-09 22:47 - 00619672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardagt.exe
2015-01-06 21:28 - 2014-03-09 22:47 - 00099480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\infocardapi.dll
2015-01-06 21:27 - 2014-06-06 07:16 - 00035480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TsWpfWrp.exe
2015-01-06 21:27 - 2014-06-06 07:12 - 00035480 _____ (Microsoft Corporation) C:\Windows\system32\TsWpfWrp.exe
2015-01-06 20:35 - 2015-01-12 06:49 - 00000000 ____D () C:\Users\Chef
2015-01-06 20:35 - 2015-01-08 21:56 - 00086160 _____ () C:\Users\Chef\AppData\Local\GDIPFONTCACHEV1.DAT
2015-01-06 20:35 - 2015-01-06 20:36 - 00000000 ____D () C:\Users\Chef\AppData\Local\NVIDIA Corporation
2015-01-06 20:35 - 2015-01-06 20:35 - 00001421 _____ () C:\Users\Chef\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2015-01-06 20:35 - 2015-01-06 20:35 - 00000020 ___SH () C:\Users\Chef\ntuser.ini
2015-01-06 20:35 - 2015-01-06 20:35 - 00000000 _SHDL () C:\Users\Chef\Vorlagen
2015-01-06 20:35 - 2015-01-06 20:35 - 00000000 _SHDL () C:\Users\Chef\Startmenü
2015-01-06 20:35 - 2015-01-06 20:35 - 00000000 _SHDL () C:\Users\Chef\Netzwerkumgebung
2015-01-06 20:35 - 2015-01-06 20:35 - 00000000 _SHDL () C:\Users\Chef\Lokale Einstellungen
2015-01-06 20:35 - 2015-01-06 20:35 - 00000000 _SHDL () C:\Users\Chef\Eigene Dateien
2015-01-06 20:35 - 2015-01-06 20:35 - 00000000 _SHDL () C:\Users\Chef\Druckumgebung
2015-01-06 20:35 - 2015-01-06 20:35 - 00000000 _SHDL () C:\Users\Chef\Documents\Eigene Musik
2015-01-06 20:35 - 2015-01-06 20:35 - 00000000 _SHDL () C:\Users\Chef\Documents\Eigene Bilder
2015-01-06 20:35 - 2015-01-06 20:35 - 00000000 _SHDL () C:\Users\Chef\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2015-01-06 20:35 - 2015-01-06 20:35 - 00000000 _SHDL () C:\Users\Chef\AppData\Local\Verlauf
2015-01-06 20:35 - 2015-01-06 20:35 - 00000000 _SHDL () C:\Users\Chef\AppData\Local\Anwendungsdaten
2015-01-06 20:35 - 2015-01-06 20:35 - 00000000 _SHDL () C:\Users\Chef\Anwendungsdaten
2015-01-06 20:35 - 2015-01-06 20:35 - 00000000 ____D () C:\Users\Chef\AppData\Roaming\Apple Computer
2015-01-06 20:35 - 2015-01-06 20:35 - 00000000 ____D () C:\Users\Chef\AppData\Roaming\Adobe
2015-01-06 20:35 - 2015-01-06 20:35 - 00000000 ____D () C:\Users\Chef\AppData\Local\VirtualStore
2015-01-06 20:35 - 2015-01-06 20:35 - 00000000 ____D () C:\Users\Chef\AppData\Local\NVIDIA
2015-01-06 20:35 - 2013-12-18 11:27 - 00002120 _____ () C:\Users\Chef\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft SkyDrive.lnk
2015-01-06 20:35 - 2009-07-14 05:54 - 00000000 ___RD () C:\Users\Chef\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2015-01-06 20:35 - 2009-07-14 05:49 - 00000000 ___RD () C:\Users\Chef\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2015-01-06 18:51 - 2014-12-04 03:50 - 00830976 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2015-01-06 18:51 - 2014-12-04 03:50 - 00741376 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2015-01-06 18:51 - 2014-12-04 03:50 - 00413184 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2015-01-06 18:51 - 2014-12-04 03:50 - 00396800 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2015-01-06 18:51 - 2014-12-04 03:50 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2015-01-06 18:51 - 2014-12-04 03:50 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2015-01-06 18:51 - 2014-12-04 03:44 - 01083392 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2015-01-06 18:51 - 2014-12-02 00:28 - 01232040 _____ (Microsoft Corporation) C:\Windows\system32\aitstatic.exe
2015-01-06 18:51 - 2014-08-01 12:53 - 01031168 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll
2015-01-06 18:51 - 2014-08-01 12:35 - 00793600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSWorkspace.dll
2015-01-06 18:51 - 2014-04-25 03:34 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll
2015-01-06 18:51 - 2014-04-25 03:06 - 00626688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usp10.dll
2015-01-06 18:51 - 2014-01-28 03:32 - 00228864 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll
2015-01-06 18:51 - 2013-10-30 03:32 - 00335360 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll
2015-01-06 18:51 - 2013-10-30 03:19 - 00301568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msieftp.dll
2015-01-06 18:51 - 2011-04-09 07:58 - 00142336 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe
2015-01-06 18:51 - 2011-04-09 06:56 - 00123904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\poqexec.exe
2015-01-06 18:50 - 2014-11-27 02:43 - 00389296 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-01-06 18:50 - 2014-11-27 02:10 - 00342200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2015-01-06 18:50 - 2014-11-22 04:13 - 25059840 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-01-06 18:50 - 2014-11-22 04:06 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-01-06 18:50 - 2014-11-22 04:06 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2015-01-06 18:50 - 2014-11-22 03:50 - 00580096 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-01-06 18:50 - 2014-11-22 03:50 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-01-06 18:50 - 2014-11-22 03:49 - 02885120 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-01-06 18:50 - 2014-11-22 03:49 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2015-01-06 18:50 - 2014-11-22 03:48 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-01-06 18:50 - 2014-11-22 03:41 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-01-06 18:50 - 2014-11-22 03:40 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-01-06 18:50 - 2014-11-22 03:37 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-01-06 18:50 - 2014-11-22 03:35 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2015-01-06 18:50 - 2014-11-22 03:34 - 06039552 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-01-06 18:50 - 2014-11-22 03:34 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-01-06 18:50 - 2014-11-22 03:26 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2015-01-06 18:50 - 2014-11-22 03:22 - 19749376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-01-06 18:50 - 2014-11-22 03:22 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-01-06 18:50 - 2014-11-22 03:20 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2015-01-06 18:50 - 2014-11-22 03:14 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-01-06 18:50 - 2014-11-22 03:09 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-01-06 18:50 - 2014-11-22 03:08 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-01-06 18:50 - 2014-11-22 03:07 - 00501248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-01-06 18:50 - 2014-11-22 03:07 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2015-01-06 18:50 - 2014-11-22 03:06 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2015-01-06 18:50 - 2014-11-22 03:05 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-01-06 18:50 - 2014-11-22 03:05 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2015-01-06 18:50 - 2014-11-22 03:01 - 02277888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-01-06 18:50 - 2014-11-22 02:59 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2015-01-06 18:50 - 2014-11-22 02:58 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2015-01-06 18:50 - 2014-11-22 02:56 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2015-01-06 18:50 - 2014-11-22 02:54 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2015-01-06 18:50 - 2014-11-22 02:49 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-01-06 18:50 - 2014-11-22 02:49 - 00718848 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-01-06 18:50 - 2014-11-22 02:47 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2015-01-06 18:50 - 2014-11-22 02:46 - 02125312 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-01-06 18:50 - 2014-11-22 02:45 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2015-01-06 18:50 - 2014-11-22 02:43 - 14412800 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-01-06 18:50 - 2014-11-22 02:40 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2015-01-06 18:50 - 2014-11-22 02:36 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2015-01-06 18:50 - 2014-11-22 02:35 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2015-01-06 18:50 - 2014-11-22 02:33 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2015-01-06 18:50 - 2014-11-22 02:29 - 04299264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-01-06 18:50 - 2014-11-22 02:28 - 02358272 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-01-06 18:50 - 2014-11-22 02:23 - 00688640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-01-06 18:50 - 2014-11-22 02:22 - 02052096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2015-01-06 18:50 - 2014-11-22 02:21 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2015-01-06 18:50 - 2014-11-22 02:15 - 01548288 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-01-06 18:50 - 2014-11-22 02:13 - 12836864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-01-06 18:50 - 2014-11-22 02:03 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-01-06 18:50 - 2014-11-22 02:00 - 01888256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-01-06 18:50 - 2014-11-22 01:56 - 01307136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-01-06 18:50 - 2014-11-22 01:54 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2015-01-06 18:50 - 2014-11-11 04:09 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2015-01-06 18:50 - 2014-11-11 03:44 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2015-01-06 18:50 - 2014-11-11 02:46 - 00119296 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdx.sys
2015-01-06 18:50 - 2014-10-14 03:13 - 00683520 _____ (Microsoft Corporation) C:\Windows\system32\termsrv.dll
2015-01-06 18:50 - 2014-10-14 03:09 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2015-01-06 18:50 - 2014-10-14 03:07 - 00681984 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2015-01-06 18:50 - 2014-10-14 02:47 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2015-01-06 18:50 - 2014-10-14 02:46 - 00681984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2015-01-06 18:50 - 2014-08-21 07:43 - 01882624 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2015-01-06 18:50 - 2014-08-21 07:40 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2015-01-06 18:50 - 2014-08-21 07:26 - 01237504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2015-01-06 18:50 - 2014-08-21 07:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll
2015-01-06 18:50 - 2014-06-24 04:29 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2015-01-06 18:50 - 2014-06-24 03:59 - 01987584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2015-01-06 18:50 - 2014-06-18 23:23 - 01943696 _____ (Microsoft Corporation) C:\Windows\system32\dfshim.dll
2015-01-06 18:50 - 2014-06-18 23:23 - 01131664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dfshim.dll
2015-01-06 18:50 - 2014-06-18 23:23 - 00156824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mscorier.dll
2015-01-06 18:50 - 2014-06-18 23:23 - 00156312 _____ (Microsoft Corporation) C:\Windows\system32\mscorier.dll
2015-01-06 18:50 - 2014-06-18 23:23 - 00081560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mscories.dll
2015-01-06 18:50 - 2014-06-18 23:23 - 00073880 _____ (Microsoft Corporation) C:\Windows\system32\mscories.dll
2015-01-06 18:50 - 2014-06-18 03:18 - 00692736 _____ (Microsoft Corporation) C:\Windows\system32\osk.exe
2015-01-06 18:50 - 2014-06-18 02:51 - 00646144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\osk.exe
2015-01-06 18:50 - 2014-06-06 11:10 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2015-01-06 18:50 - 2014-06-06 10:44 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2015-01-06 18:50 - 2014-05-30 07:45 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2015-01-06 18:50 - 2014-04-05 03:47 - 01903552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2015-01-06 18:50 - 2014-04-05 03:47 - 00288192 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
2015-01-06 18:50 - 2014-03-26 15:44 - 02002432 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
2015-01-06 18:50 - 2014-03-26 15:41 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml6r.dll
2015-01-06 18:50 - 2014-03-26 15:27 - 01389056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll
2015-01-06 18:50 - 2014-03-26 15:25 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6r.dll
2015-01-06 18:50 - 2014-01-29 03:32 - 00484864 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll
2015-01-06 18:50 - 2014-01-29 03:06 - 00381440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wer.dll
2015-01-06 18:50 - 2013-12-04 03:27 - 00488448 _____ (Microsoft Corporation) C:\Windows\system32\secproc.dll
2015-01-06 18:50 - 2013-12-04 03:27 - 00485888 _____ (Microsoft Corporation) C:\Windows\system32\secproc_isv.dll
2015-01-06 18:50 - 2013-12-04 03:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp_isv.dll
2015-01-06 18:50 - 2013-12-04 03:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp.dll
2015-01-06 18:50 - 2013-12-04 03:26 - 00528384 _____ (Microsoft Corporation) C:\Windows\system32\msdrm.dll
2015-01-06 18:50 - 2013-12-04 03:16 - 00658432 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_isv.exe
2015-01-06 18:50 - 2013-12-04 03:16 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate.exe
2015-01-06 18:50 - 2013-12-04 03:16 - 00553984 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp.exe
2015-01-06 18:50 - 2013-12-04 03:16 - 00552960 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp_isv.exe
2015-01-06 18:50 - 2013-12-04 03:03 - 00428032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc.dll
2015-01-06 18:50 - 2013-12-04 03:03 - 00423936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_isv.dll
2015-01-06 18:50 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp_isv.dll
2015-01-06 18:50 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp.dll
2015-01-06 18:50 - 2013-12-04 03:02 - 00390144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdrm.dll
2015-01-06 18:50 - 2013-12-04 02:54 - 00594944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_isv.exe
2015-01-06 18:50 - 2013-12-04 02:54 - 00572416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate.exe
2015-01-06 18:50 - 2013-12-04 02:54 - 00510976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp.exe
2015-01-06 18:50 - 2013-12-04 02:54 - 00508928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp_isv.exe
2015-01-06 18:50 - 2013-11-27 02:41 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2015-01-06 18:50 - 2013-11-27 02:41 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2015-01-06 18:50 - 2013-11-27 02:41 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2015-01-06 18:50 - 2013-11-27 02:41 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2015-01-06 18:50 - 2013-11-27 02:41 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2015-01-06 18:50 - 2013-11-26 12:40 - 00376768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2015-01-06 18:50 - 2013-11-23 19:26 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2015-01-06 18:50 - 2013-11-23 18:47 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2015-01-06 18:50 - 2013-08-05 03:25 - 00155584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ataport.sys
2015-01-06 18:50 - 2013-07-04 13:57 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll
2015-01-06 18:50 - 2013-07-04 13:50 - 00102400 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll
2015-01-06 18:50 - 2013-07-04 12:57 - 00205824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WebClnt.dll
2015-01-06 18:50 - 2013-07-04 12:51 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\davclnt.dll
2015-01-06 18:50 - 2013-07-04 11:11 - 00140800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys
2015-01-06 18:50 - 2012-08-22 19:12 - 00950128 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys
2015-01-06 18:50 - 2012-07-04 21:26 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\RNDISMP.sys
2015-01-06 18:49 - 2014-11-11 04:08 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-01-06 18:49 - 2014-11-11 04:08 - 00241152 _____ (Microsoft Corporation) C:\Windows\system32\pku2u.dll
2015-01-06 18:49 - 2014-11-11 03:44 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2015-01-06 18:49 - 2014-11-11 03:44 - 00186880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pku2u.dll
2015-01-06 18:49 - 2014-11-08 04:16 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2015-01-06 18:49 - 2014-11-08 03:45 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2015-01-06 18:49 - 2014-10-30 03:03 - 00165888 _____ (Microsoft Corporation) C:\Windows\system32\charmap.exe
2015-01-06 18:49 - 2014-10-30 02:45 - 00155136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\charmap.exe
2015-01-06 18:49 - 2014-10-25 02:57 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll
2015-01-06 18:49 - 2014-10-25 02:32 - 00067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\packager.dll
2015-01-06 18:49 - 2014-10-14 03:16 - 00155064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-01-06 18:49 - 2014-10-14 03:13 - 03241984 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2015-01-06 18:49 - 2014-10-14 03:12 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-01-06 18:49 - 2014-10-14 02:50 - 02363904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2015-01-06 18:49 - 2014-10-14 02:50 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2015-01-06 18:49 - 2014-10-14 02:49 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2015-01-06 18:49 - 2014-10-10 01:57 - 03198976 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-01-06 18:49 - 2014-10-03 03:12 - 02020352 _____ (Microsoft Corporation) C:\Windows\system32\WsmSvc.dll
2015-01-06 18:49 - 2014-10-03 03:12 - 00500224 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll
2015-01-06 18:49 - 2014-10-03 03:12 - 00346624 _____ (Microsoft Corporation) C:\Windows\system32\WSManMigrationPlugin.dll
2015-01-06 18:49 - 2014-10-03 03:12 - 00310272 _____ (Microsoft Corporation) C:\Windows\system32\WsmWmiPl.dll
2015-01-06 18:49 - 2014-10-03 03:12 - 00181248 _____ (Microsoft Corporation) C:\Windows\system32\WsmAuto.dll
2015-01-06 18:49 - 2014-10-03 03:11 - 00680960 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2015-01-06 18:49 - 2014-10-03 03:11 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll
2015-01-06 18:49 - 2014-10-03 03:11 - 00296448 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll
2015-01-06 18:49 - 2014-10-03 03:11 - 00284672 _____ (Microsoft Corporation) C:\Windows\system32\EncDump.dll
2015-01-06 18:49 - 2014-10-03 03:11 - 00266240 _____ (Microsoft Corporation) C:\Windows\system32\WSManHTTPConfig.exe
2015-01-06 18:49 - 2014-10-03 02:45 - 01177088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmSvc.dll
2015-01-06 18:49 - 2014-10-03 02:45 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSManMigrationPlugin.dll
2015-01-06 18:49 - 2014-10-03 02:45 - 00214016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmWmiPl.dll
2015-01-06 18:49 - 2014-10-03 02:45 - 00145920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmAuto.dll
2015-01-06 18:49 - 2014-10-03 02:44 - 00442880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AUDIOKSE.dll
2015-01-06 18:49 - 2014-10-03 02:44 - 00374784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioEng.dll
2015-01-06 18:49 - 2014-10-03 02:44 - 00198656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSManHTTPConfig.exe
2015-01-06 18:49 - 2014-10-03 02:44 - 00195584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll
2015-01-06 18:49 - 2014-09-25 03:08 - 00371712 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll
2015-01-06 18:49 - 2014-09-25 02:40 - 00519680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qdvd.dll
2015-01-06 18:49 - 2014-09-19 10:42 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-01-06 18:49 - 2014-09-19 10:42 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2015-01-06 18:49 - 2014-09-19 10:42 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2015-01-06 18:49 - 2014-09-19 10:42 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2015-01-06 18:49 - 2014-09-19 10:42 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2015-01-06 18:49 - 2014-09-19 10:42 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2015-01-06 18:49 - 2014-09-19 10:23 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2015-01-06 18:49 - 2014-09-19 10:23 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2015-01-06 18:49 - 2014-09-19 10:23 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2015-01-06 18:49 - 2014-09-19 10:23 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2015-01-06 18:49 - 2014-09-19 10:23 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2015-01-06 18:49 - 2014-09-19 10:23 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2015-01-06 18:49 - 2014-09-04 06:23 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\rastls.dll
2015-01-06 18:49 - 2014-09-04 06:04 - 00372736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rastls.dll
2015-01-06 18:49 - 2014-08-12 03:02 - 00878080 _____ (Microsoft Corporation) C:\Windows\system32\IMJP10K.DLL
2015-01-06 18:49 - 2014-08-12 02:36 - 00701440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IMJP10K.DLL
2015-01-06 18:49 - 2014-07-17 03:07 - 03722240 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2015-01-06 18:49 - 2014-07-17 03:07 - 01118720 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe
2015-01-06 18:49 - 2014-07-17 03:07 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe
2015-01-06 18:49 - 2014-07-17 03:07 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\winsta.dll
2015-01-06 18:49 - 2014-07-17 03:07 - 00150528 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorekmts.dll
2015-01-06 18:49 - 2014-07-17 02:40 - 00157696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winsta.dll
2015-01-06 18:49 - 2014-07-17 02:39 - 03221504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2015-01-06 18:49 - 2014-07-17 02:39 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstsc.exe
2015-01-06 18:49 - 2014-07-17 02:39 - 00131584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aaclient.dll
2015-01-06 18:49 - 2014-07-17 02:21 - 00212480 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpwd.sys
2015-01-06 18:49 - 2014-07-17 02:21 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys
2015-01-06 18:49 - 2014-06-25 03:05 - 14175744 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2015-01-06 18:49 - 2014-06-25 02:41 - 12874240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2015-01-06 18:49 - 2014-06-16 03:10 - 00985536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2015-01-06 18:49 - 2014-06-03 11:02 - 01941504 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2015-01-06 18:49 - 2014-06-03 11:02 - 00504320 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll
2015-01-06 18:49 - 2014-06-03 11:02 - 00112064 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2015-01-06 18:49 - 2014-06-03 10:29 - 01805824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2015-01-06 18:49 - 2014-06-03 10:29 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msihnd.dll
2015-01-06 18:49 - 2014-04-12 03:22 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2015-01-06 18:49 - 2014-04-12 03:19 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2015-01-06 18:49 - 2014-04-12 03:19 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2015-01-06 18:49 - 2014-04-12 03:19 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2015-01-06 18:49 - 2014-04-12 03:19 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2015-01-06 18:49 - 2014-03-04 10:47 - 05550016 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-01-06 18:49 - 2014-03-04 10:44 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2015-01-06 18:49 - 2014-03-04 10:44 - 00722944 _____ (Microsoft Corporation) C:\Windows\system32\objsel.dll
2015-01-06 18:49 - 2014-03-04 10:44 - 00424960 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2015-01-06 18:49 - 2014-03-04 10:44 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2015-01-06 18:49 - 2014-03-04 10:44 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2015-01-06 18:49 - 2014-03-04 10:44 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\wincredprovider.dll
2015-01-06 18:49 - 2014-03-04 10:44 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2015-01-06 18:49 - 2014-03-04 10:44 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2015-01-06 18:49 - 2014-03-04 10:43 - 00057344 _____ (Microsoft Corporation) C:\Windows\system32\cngprovider.dll
2015-01-06 18:49 - 2014-03-04 10:43 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\adprovider.dll
2015-01-06 18:49 - 2014-03-04 10:43 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\capiprovider.dll
2015-01-06 18:49 - 2014-03-04 10:43 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\dpapiprovider.dll
2015-01-06 18:49 - 2014-03-04 10:43 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\dimsroam.dll
2015-01-06 18:49 - 2014-03-04 10:20 - 03969984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2015-01-06 18:49 - 2014-03-04 10:20 - 03914176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2015-01-06 18:49 - 2014-03-04 10:17 - 00538112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\objsel.dll
2015-01-06 18:49 - 2014-03-04 10:17 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cngprovider.dll
2015-01-06 18:49 - 2014-03-04 10:17 - 00049664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adprovider.dll
2015-01-06 18:49 - 2014-03-04 10:17 - 00048128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\capiprovider.dll
2015-01-06 18:49 - 2014-03-04 10:17 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpapiprovider.dll
2015-01-06 18:49 - 2014-03-04 10:17 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dimsroam.dll
2015-01-06 18:49 - 2014-03-04 10:17 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wincredprovider.dll
2015-01-06 18:49 - 2014-03-04 10:17 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2015-01-06 18:49 - 2014-03-04 10:16 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2015-01-06 18:49 - 2014-03-04 10:16 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2015-01-06 18:49 - 2014-03-04 10:16 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2015-01-06 18:49 - 2014-03-04 10:16 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2015-01-06 18:49 - 2014-03-04 09:09 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2015-01-06 18:49 - 2014-03-04 09:09 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2015-01-06 18:49 - 2014-02-04 03:35 - 00274880 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msiscsi.sys
2015-01-06 18:49 - 2014-02-04 03:35 - 00190912 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys
2015-01-06 18:49 - 2014-02-04 03:35 - 00027584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Diskdump.sys
2015-01-06 18:49 - 2014-02-04 03:28 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\iologmsg.dll
2015-01-06 18:49 - 2014-02-04 03:00 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iologmsg.dll
2015-01-06 18:49 - 2014-01-24 03:37 - 01684928 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2015-01-06 18:49 - 2013-11-26 09:16 - 03419136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll
2015-01-06 18:49 - 2013-11-22 23:48 - 03928064 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll
2015-01-06 18:49 - 2013-07-26 03:24 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\shdocvw.dll
2015-01-06 18:49 - 2013-07-26 02:55 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shdocvw.dll
2015-01-06 18:49 - 2011-03-11 07:41 - 00410496 _____ (Intel Corporation) C:\Windows\system32\Drivers\iaStorV.sys
2015-01-06 18:49 - 2011-03-11 07:41 - 00166272 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvstor.sys
2015-01-06 18:49 - 2011-03-11 07:41 - 00148352 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvraid.sys
2015-01-06 18:49 - 2011-03-11 07:41 - 00107904 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\amdsata.sys
2015-01-06 18:49 - 2011-03-11 07:41 - 00027008 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\amdxata.sys
2015-01-06 18:49 - 2011-03-11 07:33 - 02565632 _____ (Microsoft Corporation) C:\Windows\system32\esent.dll
2015-01-06 18:49 - 2011-03-11 07:30 - 00096768 _____ (Microsoft Corporation) C:\Windows\system32\fsutil.exe
2015-01-06 18:49 - 2011-03-11 06:33 - 01699328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\esent.dll
2015-01-06 18:49 - 2011-03-11 06:31 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fsutil.exe
2015-01-06 18:49 - 2011-03-11 05:37 - 00091648 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBSTOR.SYS
2015-01-06 18:48 - 2014-10-18 03:05 - 00861696 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2015-01-06 18:48 - 2014-10-18 02:33 - 00571904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll
2015-01-06 18:48 - 2014-08-23 03:07 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2015-01-06 18:48 - 2014-08-23 02:45 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2015-01-06 18:48 - 2014-07-14 03:02 - 01216000 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2015-01-06 18:48 - 2014-07-14 02:40 - 00664064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2015-01-06 18:48 - 2012-02-11 07:36 - 00559104 _____ (Microsoft Corporation) C:\Windows\system32\spoolsv.exe
2015-01-06 18:48 - 2012-02-11 07:36 - 00067072 _____ (Microsoft Corporation) C:\Windows\splwow64.exe
2015-01-01 18:58 - 2015-01-07 14:50 - 00000000 ____D () C:\Users\Felix\AppData\Roaming\Apple Computer
2015-01-01 18:58 - 2015-01-07 14:48 - 00000000 ____D () C:\Users\Felix\AppData\Local\Apple Computer
2015-01-01 18:58 - 2015-01-01 18:58 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
2015-01-01 18:58 - 2012-10-03 16:14 - 00033240 _____ (GEAR Software Inc.) C:\Windows\system32\Drivers\GEARAspiWDM.sys
2015-01-01 18:57 - 2015-01-07 14:48 - 00000000 ____D () C:\Users\Felix\AppData\Local\Apple
2015-01-01 18:57 - 2015-01-01 18:58 - 00000000 ____D () C:\ProgramData\E1864A66-75E3-486a-BD95-D1B7D99A84A7
2015-01-01 18:57 - 2015-01-01 18:58 - 00000000 ____D () C:\Program Files\iTunes
2015-01-01 18:57 - 2015-01-01 18:58 - 00000000 ____D () C:\Program Files (x86)\iTunes
2015-01-01 18:57 - 2015-01-01 18:57 - 00000000 ____D () C:\ProgramData\Apple Computer
2015-01-01 18:57 - 2015-01-01 18:57 - 00000000 ____D () C:\ProgramData\Apple
2015-01-01 18:57 - 2015-01-01 18:57 - 00000000 ____D () C:\Program Files\iPod
2015-01-01 18:57 - 2015-01-01 18:57 - 00000000 ____D () C:\Program Files\Common Files\Apple
2015-01-01 18:18 - 2015-01-07 14:50 - 00000000 ____D () C:\Users\Felix\AppData\Roaming\IrfanView
2015-01-01 18:18 - 2015-01-01 18:18 - 00001890 _____ () C:\Users\Public\Desktop\IrfanView Thumbnails.lnk
2015-01-01 18:18 - 2015-01-01 18:18 - 00001002 _____ () C:\Users\Public\Desktop\IrfanView.lnk
2015-01-01 18:18 - 2015-01-01 18:18 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IrfanView
2015-01-01 18:18 - 2015-01-01 18:18 - 00000000 ____D () C:\Program Files (x86)\IrfanView
2015-01-01 18:17 - 2015-01-07 14:48 - 00000000 ____D () C:\Users\Felix\AppData\Local\Macromedia
2015-01-01 18:11 - 2015-01-07 14:50 - 00000000 ____D () C:\Users\Felix\AppData\Local\paint.net
2015-01-01 18:11 - 2015-01-01 18:11 - 00001204 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\paint.net.lnk
2015-01-01 18:11 - 2015-01-01 18:11 - 00000000 ___DC () C:\Program Files (x86)\Staging
2015-01-01 18:11 - 2015-01-01 18:11 - 00000000 ____D () C:\Program Files (x86)\Resources
2015-01-01 18:11 - 2015-01-01 18:11 - 00000000 ____D () C:\Program Files (x86)\FileTypes
2015-01-01 18:11 - 2015-01-01 18:11 - 00000000 ____D () C:\Program Files (x86)\Effects
2015-01-01 18:09 - 2015-01-01 18:09 - 06528454 _____ () C:\Program Files (x86)\paint.net.4.0.5.install.zip
2015-01-01 17:57 - 2015-01-01 17:58 - 00000000 ____D () C:\Users\Felix\AppData\Local\Adobe
2015-01-01 17:50 - 2015-01-07 14:50 - 00000000 ____D () C:\Users\Felix\AppData\Roaming\Skype
2015-01-01 17:50 - 2015-01-07 14:50 - 00000000 ____D () C:\Users\Felix\AppData\Local\Skype
2015-01-01 17:50 - 2015-01-01 17:50 - 00002517 _____ () C:\Users\Public\Desktop\Skype.lnk
2015-01-01 17:50 - 2015-01-01 17:50 - 00000000 ___RD () C:\Program Files (x86)\Skype
2015-01-01 17:50 - 2015-01-01 17:50 - 00000000 ____D () C:\ProgramData\Skype
2015-01-01 17:50 - 2015-01-01 17:50 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2015-01-01 17:49 - 2015-01-01 17:49 - 00000935 _____ () C:\Users\Public\Desktop\VLC media player.lnk
2015-01-01 17:49 - 2015-01-01 17:49 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2015-01-01 17:49 - 2015-01-01 17:49 - 00000000 ____D () C:\Program Files (x86)\VLC
2015-01-01 17:32 - 2015-01-07 14:50 - 00000000 ____D () C:\Users\Felix\AppData\Roaming\Thunderbird
2015-01-01 17:32 - 2015-01-07 14:50 - 00000000 ____D () C:\Users\Felix\AppData\Local\Thunderbird
2015-01-01 17:32 - 2015-01-01 17:32 - 00002098 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Thunderbird.lnk
2015-01-01 17:32 - 2015-01-01 17:32 - 00000000 ____D () C:\Program Files (x86)\Mozilla Thunderbird
2015-01-01 17:30 - 2015-01-07 14:50 - 00000000 ____D () C:\Users\Felix\AppData\Roaming\Cliqz
2015-01-01 17:30 - 2011-05-13 11:16 - 00493056 _____ ( datenhaus GmbH) C:\Windows\SysWOW64\dhRichClient3.dll
2015-01-01 17:30 - 2011-03-25 19:42 - 00338432 _____ () C:\Windows\SysWOW64\sqlite36_engine.dll
2015-01-01 17:21 - 2015-01-07 14:50 - 00000000 ____D () C:\Users\Felix\AppData\Roaming\Mozilla
2015-01-01 17:21 - 2015-01-07 14:49 - 00000000 ____D () C:\Users\Felix\AppData\Local\Mozilla
2015-01-01 17:21 - 2015-01-06 18:36 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2015-01-01 17:21 - 2015-01-01 17:21 - 00001159 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2015-01-01 17:21 - 2015-01-01 17:21 - 00001147 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2015-01-01 17:21 - 2015-01-01 17:21 - 00000000 ____D () C:\ProgramData\Mozilla
2015-01-01 17:21 - 2015-01-01 17:21 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2015-01-01 17:19 - 2015-01-07 14:50 - 00000000 ____D () C:\Users\Felix\AppData\Roaming\Macromedia
2015-01-01 16:39 - 2015-01-01 16:38 - 00043064 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2015-01-01 16:34 - 2014-05-14 17:23 - 02477536 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2015-01-01 16:34 - 2014-05-14 17:23 - 00700384 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2015-01-01 16:34 - 2014-05-14 17:23 - 00581600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2015-01-01 16:34 - 2014-05-14 17:23 - 00058336 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2015-01-01 16:34 - 2014-05-14 17:23 - 00044512 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2015-01-01 16:34 - 2014-05-14 17:23 - 00038880 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2015-01-01 16:34 - 2014-05-14 17:23 - 00036320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2015-01-01 16:34 - 2014-05-14 17:21 - 02620928 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2015-01-01 16:34 - 2014-05-14 17:20 - 00097792 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2015-01-01 16:34 - 2014-05-14 17:17 - 00092672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2015-01-01 16:34 - 2014-05-14 09:23 - 00198600 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2015-01-01 16:34 - 2014-05-14 09:23 - 00179656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2015-01-01 16:34 - 2014-05-14 09:20 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2015-01-01 16:34 - 2014-05-14 09:17 - 00033792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2015-01-01 16:09 - 2015-01-07 14:50 - 00000000 ____D () C:\Users\Felix\AppData\Roaming\Avira
2015-01-01 16:09 - 2015-01-01 20:31 - 00001137 _____ () C:\Users\Public\Desktop\Avira.lnk
2015-01-01 16:09 - 2015-01-01 20:31 - 00000000 ____D () C:\ProgramData\Package Cache
2015-01-01 16:09 - 2015-01-01 20:31 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2015-01-01 16:09 - 2015-01-01 20:31 - 00000000 ____D () C:\Program Files (x86)\Avira
2015-01-01 16:09 - 2015-01-01 16:09 - 00002066 _____ () C:\Users\Public\Desktop\Avira Control Center.lnk
2015-01-01 16:09 - 2015-01-01 16:09 - 00000000 ____D () C:\ProgramData\Avira
2015-01-01 16:09 - 2014-11-24 10:23 - 00131608 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2015-01-01 16:09 - 2014-11-24 10:23 - 00119272 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2015-01-01 16:09 - 2014-11-24 10:23 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys
2015-01-01 16:05 - 2015-01-08 19:56 - 00086160 _____ () C:\Users\Felix\AppData\Local\GDIPFONTCACHEV1.DAT
2015-01-01 16:03 - 2015-01-07 14:50 - 00000000 ___RD () C:\Users\Felix\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2015-01-01 16:03 - 2015-01-07 14:50 - 00000000 ___RD () C:\Users\Felix\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2015-01-01 16:03 - 2015-01-07 14:50 - 00000000 ____D () C:\Users\Felix\AppData\Roaming\Adobe
2015-01-01 16:03 - 2015-01-07 14:50 - 00000000 ____D () C:\Users\Felix\AppData\Local\NVIDIA Corporation
2015-01-01 16:03 - 2015-01-07 14:49 - 00000000 ____D () C:\Users\Felix\AppData\Local\NVIDIA
2015-01-01 16:03 - 2015-01-01 16:03 - 00001421 _____ () C:\Users\Felix\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2015-01-01 16:03 - 2015-01-01 16:03 - 00000020 ___SH () C:\Users\Felix\ntuser.ini
2015-01-01 16:03 - 2015-01-01 16:03 - 00000000 ____D () C:\Users\Felix\AppData\Local\VirtualStore
2015-01-01 16:03 - 2013-12-18 11:27 - 00002120 _____ () C:\Users\Felix\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft SkyDrive.lnk
2015-01-01 16:02 - 2015-01-12 08:20 - 00000000 ____D () C:\ProgramData\NVIDIA
2015-01-01 16:02 - 2015-01-01 16:05 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation
2015-01-01 16:02 - 2015-01-01 16:02 - 00001275 _____ () C:\Users\Public\Desktop\GeForce Experience.lnk
2015-01-01 16:02 - 2015-01-01 16:02 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2015-01-01 16:02 - 2015-01-01 16:02 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation
2015-01-01 16:02 - 2015-01-01 16:02 - 00000000 ____D () C:\Program Files (x86)\AGEIA Technologies
2015-01-01 16:02 - 2014-09-17 05:51 - 01538880 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdagenco6420103.dll
2015-01-01 16:02 - 2014-09-17 05:51 - 00197408 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvhda64v.sys
2015-01-01 16:02 - 2014-09-17 05:51 - 00031520 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdap64.dll
2015-01-01 16:02 - 2014-09-17 03:10 - 02799784 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll
2015-01-01 16:02 - 2014-09-17 03:10 - 02193560 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll
2015-01-01 16:02 - 2014-09-17 03:10 - 01715224 _____ (NVIDIA Corporation) C:\Windows\system32\nvspbridge64.dll
2015-01-01 16:02 - 2014-09-17 03:10 - 01291280 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspbridge.dll
2015-01-01 16:02 - 2014-09-14 00:48 - 31887680 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2015-01-01 16:02 - 2014-09-14 00:48 - 24552592 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2015-01-01 16:02 - 2014-09-14 00:48 - 20922512 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2015-01-01 16:02 - 2014-09-14 00:48 - 20589536 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll
2015-01-01 16:02 - 2014-09-14 00:48 - 19954520 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2015-01-01 16:02 - 2014-09-14 00:48 - 18106152 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2015-01-01 16:02 - 2014-09-14 00:48 - 17259664 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2015-01-01 16:02 - 2014-09-14 00:48 - 16875856 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll
2015-01-01 16:02 - 2014-09-14 00:48 - 14026304 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2015-01-01 16:02 - 2014-09-14 00:48 - 13939272 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2015-01-01 16:02 - 2014-09-14 00:48 - 13157696 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2015-01-01 16:02 - 2014-09-14 00:48 - 11392576 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2015-01-01 16:02 - 2014-09-14 00:48 - 11330776 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2015-01-01 16:02 - 2014-09-14 00:48 - 04287296 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2015-01-01 16:02 - 2014-09-14 00:48 - 04008592 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2015-01-01 16:02 - 2014-09-14 00:48 - 03223120 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
2015-01-01 16:02 - 2014-09-14 00:48 - 02838424 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
2015-01-01 16:02 - 2014-09-14 00:48 - 01876296 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6434411.dll
2015-01-01 16:02 - 2014-09-14 00:48 - 01539272 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6434411.dll
2015-01-01 16:02 - 2014-09-14 00:48 - 00984424 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll
2015-01-01 16:02 - 2014-09-14 00:48 - 00957584 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2015-01-01 16:02 - 2014-09-14 00:48 - 00925896 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2015-01-01 16:02 - 2014-09-14 00:48 - 00919240 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2015-01-01 16:02 - 2014-09-14 00:48 - 00894096 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2015-01-01 16:02 - 2014-09-14 00:48 - 00867528 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2015-01-01 16:02 - 2014-09-14 00:48 - 00501064 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll
2015-01-01 16:02 - 2014-09-14 00:48 - 00417096 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll
2015-01-01 16:02 - 2014-09-14 00:48 - 00393024 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFROpenGL.dll
2015-01-01 16:02 - 2014-09-14 00:48 - 00352016 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2015-01-01 16:02 - 2014-09-14 00:48 - 00348304 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFROpenGL.dll
2015-01-01 16:02 - 2014-09-14 00:48 - 00303600 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2015-01-01 16:02 - 2014-09-14 00:48 - 00174856 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2015-01-01 16:02 - 2014-09-14 00:48 - 00156840 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2015-01-01 16:02 - 2014-09-14 00:48 - 00073872 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll
2015-01-01 16:02 - 2014-09-14 00:48 - 00060560 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll
2015-01-01 16:02 - 2014-09-14 00:48 - 00026956 _____ () C:\Windows\system32\nvinfo.pb
2015-01-01 16:02 - 2014-09-13 22:53 - 06890696 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll
2015-01-01 16:02 - 2014-09-13 22:53 - 03529872 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll
2015-01-01 16:02 - 2014-09-13 22:53 - 02557640 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll
2015-01-01 16:02 - 2014-09-13 22:53 - 00934216 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
2015-01-01 16:02 - 2014-09-13 22:53 - 00385168 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll
2015-01-01 16:02 - 2014-09-13 22:53 - 00062608 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll
2015-01-01 16:02 - 2014-09-13 21:13 - 00613696 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe
2015-01-01 16:02 - 2014-09-11 16:37 - 03961833 _____ () C:\Windows\system32\nvcoproc.bin
2015-01-01 16:02 - 2014-09-04 20:14 - 00038048 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys
2015-01-01 16:02 - 2014-09-04 20:14 - 00034976 _____ (NVIDIA Corporation) C:\Windows\system32\nvaudcap64v.dll
2015-01-01 16:02 - 2014-09-04 20:14 - 00032416 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll
2015-01-01 16:02 - 2010-05-26 11:41 - 02401112 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_43.dll
2015-01-01 16:02 - 2010-05-26 11:41 - 01998168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_43.dll
2015-01-01 16:02 - 2010-05-26 11:41 - 00511328 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_43.dll
2015-01-01 16:02 - 2010-05-26 11:41 - 00470880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_43.dll
2015-01-01 16:01 - 2015-01-01 17:58 - 00701616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-01-01 16:01 - 2015-01-01 17:58 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-01-01 16:01 - 2015-01-01 16:02 - 00000000 ____D () C:\Program Files\NVIDIA Corporation
2015-01-01 16:01 - 2015-01-01 16:01 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
2015-01-01 16:01 - 2015-01-01 16:01 - 00002019 _____ () C:\Users\Public\Desktop\Adobe Reader XI.lnk
2015-01-01 16:01 - 2015-01-01 16:01 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Musik
2015-01-01 16:01 - 2015-01-01 16:01 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Bilder
2015-01-01 16:01 - 2015-01-01 16:01 - 00000000 _SHDL () C:\Users\Default\Vorlagen
2015-01-01 16:01 - 2015-01-01 16:01 - 00000000 _SHDL () C:\Users\Default\Startmenü
2015-01-01 16:01 - 2015-01-01 16:01 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung
2015-01-01 16:01 - 2015-01-01 16:01 - 00000000 _SHDL () C:\Users\Default\Lokale Einstellungen
2015-01-01 16:01 - 2015-01-01 16:01 - 00000000 _SHDL () C:\Users\Default\Eigene Dateien
2015-01-01 16:01 - 2015-01-01 16:01 - 00000000 _SHDL () C:\Users\Default\Druckumgebung
2015-01-01 16:01 - 2015-01-01 16:01 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik
2015-01-01 16:01 - 2015-01-01 16:01 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder
2015-01-01 16:01 - 2015-01-01 16:01 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2015-01-01 16:01 - 2015-01-01 16:01 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf
2015-01-01 16:01 - 2015-01-01 16:01 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Anwendungsdaten
2015-01-01 16:01 - 2015-01-01 16:01 - 00000000 _SHDL () C:\Users\Default\Anwendungsdaten
2015-01-01 16:01 - 2015-01-01 16:01 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik
2015-01-01 16:01 - 2015-01-01 16:01 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder
2015-01-01 16:01 - 2015-01-01 16:01 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2015-01-01 16:01 - 2015-01-01 16:01 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf
2015-01-01 16:01 - 2015-01-01 16:01 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Anwendungsdaten
2015-01-01 16:01 - 2015-01-01 16:01 - 00000000 _SHDL () C:\Programme
2015-01-01 16:01 - 2015-01-01 16:01 - 00000000 _SHDL () C:\ProgramData\Vorlagen
2015-01-01 16:01 - 2015-01-01 16:01 - 00000000 _SHDL () C:\ProgramData\Startmenü
2015-01-01 16:01 - 2015-01-01 16:01 - 00000000 _SHDL () C:\ProgramData\Microsoft\Windows\Start Menu\Programme
2015-01-01 16:01 - 2015-01-01 16:01 - 00000000 _SHDL () C:\ProgramData\Favoriten
2015-01-01 16:01 - 2015-01-01 16:01 - 00000000 _SHDL () C:\ProgramData\Dokumente
2015-01-01 16:01 - 2015-01-01 16:01 - 00000000 _SHDL () C:\ProgramData\Anwendungsdaten
2015-01-01 16:01 - 2015-01-01 16:01 - 00000000 _SHDL () C:\Program Files\Gemeinsame Dateien
2015-01-01 16:01 - 2015-01-01 16:01 - 00000000 _SHDL () C:\Dokumente und Einstellungen
2015-01-01 16:01 - 2015-01-01 16:01 - 00000000 __SHD () C:\Recovery
2015-01-01 16:01 - 2015-01-01 16:01 - 00000000 ____D () C:\Windows\SysWOW64\Macromed
2015-01-01 16:01 - 2015-01-01 16:01 - 00000000 ____D () C:\Windows\system32\Macromed
2015-01-01 16:01 - 2015-01-01 16:01 - 00000000 ____D () C:\ProgramData\Adobe
2015-01-01 16:01 - 2015-01-01 16:01 - 00000000 ____D () C:\Program Files (x86)\Adobe
2015-01-01 15:55 - 2015-01-12 08:23 - 01377509 _____ () C:\Windows\WindowsUpdate.log
2015-01-01 15:48 - 2015-01-01 15:48 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_TeeDriverx64_01011.Wdf
2015-01-01 15:48 - 2015-01-01 15:48 - 00000000 ____D () C:\Windows\SysWOW64\RTCOM
2015-01-01 15:48 - 2015-01-01 15:48 - 00000000 ____D () C:\Program Files\Realtek

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-01-12 08:27 - 2010-11-21 07:50 - 00698688 _____ () C:\Windows\system32\perfh007.dat
2015-01-12 08:27 - 2010-11-21 07:50 - 00148828 _____ () C:\Windows\system32\perfc007.dat
2015-01-12 08:27 - 2009-07-14 06:13 - 01618320 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-01-12 08:27 - 2009-07-14 05:45 - 00021664 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-01-12 08:27 - 2009-07-14 05:45 - 00021664 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-01-12 08:20 - 2010-11-21 04:47 - 00167842 _____ () C:\Windows\PFRO.log
2015-01-12 08:20 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-01-12 08:20 - 2009-07-14 05:51 - 00046103 _____ () C:\Windows\setupact.log
2015-01-08 19:55 - 2009-07-14 05:45 - 00342504 _____ () C:\Windows\system32\FNTCACHE.DAT
2015-01-07 17:14 - 2013-12-18 11:29 - 00000000 ____D () C:\Program Files (x86)\Microsoft Office
2015-01-07 17:13 - 2009-07-14 04:20 - 00000000 ____D () C:\Program Files\Common Files\Microsoft Shared
2015-01-07 17:12 - 2010-11-21 08:00 - 00000000 ____D () C:\Windows\ShellNew
2015-01-07 10:41 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\rescache
2015-01-07 08:15 - 2010-11-21 08:00 - 00000000 ____D () C:\Program Files\Windows Journal
2015-01-07 08:15 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\SysWOW64\Dism
2015-01-07 08:15 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\Dism
2015-01-07 08:15 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
2015-01-07 08:15 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\AppCompat
2015-01-06 21:36 - 2013-12-18 11:26 - 01591896 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2015-01-01 16:03 - 2013-12-18 11:12 - 00000000 ____D () C:\Windows\Panther
2015-01-01 16:03 - 2009-07-14 05:45 - 00000000 ____D () C:\Windows\Setup
2015-01-01 16:02 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\Help
2015-01-01 16:01 - 2009-07-14 06:32 - 00000000 ____D () C:\Windows\system32\restore
2015-01-01 16:01 - 2009-07-14 04:20 - 00000000 __RHD () C:\Users\Default
2015-01-01 16:01 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\Recovery
2015-01-01 16:01 - 2009-07-14 04:20 - 00000000 ____D () C:\Program Files\Windows NT
2015-01-01 15:49 - 2013-12-18 11:14 - 00003652 _____ () C:\Windows\TSSysprep.log
2015-01-01 15:49 - 2009-07-14 05:46 - 00003806 _____ () C:\Windows\DtcInstall.log

Some content of TEMP:
====================
C:\Users\Chef\AppData\Local\Temp\avgnt.exe
C:\Users\Chef\AppData\Local\Temp\ose00000.exe
C:\Users\Chef\AppData\Local\Temp\Quarantine.exe
C:\Users\Chef\AppData\Local\Temp\sqlite3.dll
C:\Users\Felix\AppData\Local\Temp\avgnt.exe
C:\Users\Imke\AppData\Local\Temp\avgnt.exe
C:\Users\Leoni\AppData\Local\Temp\avgnt.exe
C:\Users\Marie\AppData\Local\Temp\avgnt.exe
C:\Users\Romy\AppData\Local\Temp\avgnt.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-01-06 19:30

==================== End Of Log ============================

--- --- ---

--- --- ---

--- --- ---

Frst addition

Code:

ATTFilter

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 11-01-2015
Ran by Chef at 2015-01-12 08:40:03
Running from C:\Users\Chef\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Avira Desktop (Disabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AS: Avira Desktop (Disabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Adobe Flash Player 11 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 11.9.900.170 - Adobe Systems Incorporated)
Adobe Flash Player 16 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 16.0.0.235 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.09) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.09 - Adobe Systems Incorporated)
Apple Application Support (HKLM-x32\...\{83CAF0DE-8D3B-4C37-A631-2B8F16EC3031}) (Version: 3.1 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{BDD99690-3541-4619-9D2A-3CDDB3E15F9E}) (Version: 8.0.5.6 - Apple Inc.)
Avira (HKLM-x32\...\{e7c7c227-b742-4878-9425-f09bbf9951db}) (Version: 1.1.27.25527 - Avira Operations & Co. KG)
Avira (x32 Version: 1.1.27.25527 - Avira Operations & Co. KG) Hidden
Avira Free Antivirus (HKLM-x32\...\Avira AntiVir Desktop) (Version: 14.0.7.468 - Avira)
Cliqz (HKLM-x32\...\{5A0C0737-6AFE-4DC6-A8B4-6DFE509ACD75}_is1) (Version: 0.5.53 - Cliqz.com)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Fotogalerie (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
IrfanView (remove only) (HKLM-x32\...\IrfanView) (Version: 4.38 - Irfan Skiljan)
iTunes (HKLM\...\{2ABBBD91-91E5-4AD7-929A-FE15D1DC0576}) (Version: 12.0.1.26 - Apple Inc.)
Junk Mail filter update (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Malwarebytes Anti-Malware Version 2.0.4.1028 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.4.1028 - Malwarebytes Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft Office (HKLM-x32\...\{90150000-0138-0409-0000-0000000FF1CE}) (Version: 15.0.4454.1510 - Microsoft Corporation)
Microsoft Office 2010 Service Pack 1 (SP1) (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{047B0968-E622-4FAA-9B4B-121FA109EDDE}) (Version:  - Microsoft)
Microsoft Office Home and Student 2010 (HKLM-x32\...\Office14.SingleImage) (Version: 14.0.6029.1000 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6E8E85E8-CE4B-4FF5-91F7-04999C9FAE6A}) (Version: 8.0.50727.42 - Microsoft Corporation)
Movie Maker (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Mozilla Firefox 34.0.5 (x86 de) (HKLM-x32\...\Mozilla Firefox 34.0.5 (x86 de)) (Version: 34.0.5 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 31.3.0 - Mozilla)
Mozilla Thunderbird 31.3.0 (x86 de) (HKLM-x32\...\Mozilla Thunderbird 31.3.0 (x86 de)) (Version: 31.3.0 - Mozilla)
NVIDIA 3D Vision Controller-Treiber 344.11 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 344.11 - NVIDIA Corporation)
NVIDIA 3D Vision Treiber 344.11 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 344.11 - NVIDIA Corporation)
NVIDIA GeForce Experience 2.1.2 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.1.2 - NVIDIA Corporation)
NVIDIA Grafiktreiber 344.11 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 344.11 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.32.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.32.1 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.14.0702 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.14.0702 - NVIDIA Corporation)
paint.net (HKLM\...\{19BD2C33-16A8-4ED1-B9EA-D9E35B21EC42}) (Version: 4.0.5 - dotPDN LLC)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7071 - Realtek Semiconductor Corp.)
SHIELD Streaming (Version: 3.1.200 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (Version: 16.13.42 - NVIDIA Corporation) Hidden
Skype™ 7.0 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.0.100 - Skype Technologies S.A.)
VLC media player (HKLM\...\VLC media player) (Version: 2.1.5 - VideoLAN)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3508.0205 - Microsoft Corporation)

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)


==================== Restore Points  =========================

01-01-2015 18:11:11 paint.net v4.0.5
01-01-2015 18:37:12 Windows-Sicherung
01-01-2015 18:57:38 Installed iTunes
01-01-2015 19:02:03 Removed Bonjour
01-01-2015 19:02:47 Removed Apple Software Update
06-01-2015 18:47:12 Windows-Sicherung
06-01-2015 21:27:40 Windows Update
07-01-2015 14:16:47 Windows Update
07-01-2015 17:12:33 Installed Microsoft Office Home and Student 2010
11-01-2015 19:00:04 Windows-Sicherung

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {16076726-EBC5-4144-8EB9-FF3FE3A3F3AF} - System32\Tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask => Sc.exe start osppsvc

==================== Loaded Modules (whitelisted) =============

2015-01-01 16:02 - 2014-09-13 22:53 - 00116880 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2015-01-08 08:02 - 2013-02-06 13:39 - 00065024 _____ () C:\Windows\system32\spool\PRTPROCS\x64\ZPP1319P.DLL
2014-10-11 13:06 - 2014-10-11 13:06 - 00073544 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2014-10-11 13:05 - 2014-10-11 13:05 - 01044776 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)


==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== EXE Association (whitelisted) =============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


==================== MSCONFIG/TASK MANAGER disabled items =========

(Currently there is no automatic fix for this section.)


========================= Accounts: ==========================

Administrator (S-1-5-21-442338121-1837241503-3693617225-500 - Administrator - Disabled)
Chef (S-1-5-21-442338121-1837241503-3693617225-1001 - Administrator - Enabled) => C:\Users\Chef
Felix (S-1-5-21-442338121-1837241503-3693617225-1000 - Limited - Enabled) => C:\Users\Felix
Gast (S-1-5-21-442338121-1837241503-3693617225-501 - Limited - Enabled)
Imke (S-1-5-21-442338121-1837241503-3693617225-1005 - Limited - Enabled) => C:\Users\Imke
Leoni (S-1-5-21-442338121-1837241503-3693617225-1003 - Limited - Enabled) => C:\Users\Leoni
Marie (S-1-5-21-442338121-1837241503-3693617225-1006 - Limited - Enabled) => C:\Users\Marie
Romy (S-1-5-21-442338121-1837241503-3693617225-1004 - Limited - Enabled) => C:\Users\Romy

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================

System errors:
=============

Microsoft Office Sessions:
=========================

==================== Memory info =========================== 

Processor: Intel(R) Core(TM) i5-4590 CPU @ 3.30GHz
Percentage of memory in use: 17%
Total physical RAM: 8110.01 MB
Available physical RAM: 6679.51 MB
Total Pagefile: 16218.2 MB
Available Pagefile: 14581.39 MB
Total Virtual: 8192 MB
Available Virtual: 8191.83 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:111.79 GB) (Free:56.26 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
Drive d: () (Fixed) (Total:1863.01 GB) (Free:1786.64 GB) NTFS
Drive j: (USB-BBZ) (Removable) (Total:1.95 GB) (Free:1.66 GB) FAT

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 111.8 GB) (Disk ID: 69DDA7F9)
Partition 1: (Active) - (Size=111.8 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 1863 GB) (Disk ID: 69DDA7F1)
Partition 1: (Not Active) - (Size=1863 GB) - (Type=07 NTFS)

========================================================
Disk: 6 (Size: 2 GB) (Disk ID: 0135D756)
Partition 1: (Active) - (Size=2 GB) - (Type=06)

==================== End Of Log ============================

Eine Verständnisfrage noch: Habe "Antworten" gewählt und dann bereits Code-tags für die logs der div. Tools bekommen. Habe dann die logs dazwischen eingefügt. In der Vorschau hab ich dann für MBAM und JRT dann aber nur Eure Anweisungen und kein log gesehen. Hab dann die logs in nochmals gelöscht und in neue Code-tags eingefügt. Wo war der / mein Fehler?

Gruß
Sanderbörd

schrauber · 12.01.2015, 09:43

Bei manchen Logs setzt das FOrum automatisch schon Codetags

ESET Online Scanner

Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
Lade und starte Eset Online Scanner
Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
Klicke auf Starten.
Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
Klicke am Ende des Suchlaufs auf Fertig stellen.
Schließe das Fenster von ESET.
Explorer öffnen.
C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
Logfile hier posten.
Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

Downloade Dir bitte

SecurityCheck und:

Speichere es auf dem Desktop.
Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.

Poste den Inhalt bitte hier.

und ein frisches FRST log bitte. Noch Probleme?

Sanderbörd · 13.01.2015, 08:01

Hallo Schrauber,

hier erst mal der eset log

Code:

ATTFilter

ESETSmartInstaller@High as downloader log:
all ok
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.7623
# api_version=3.0.2
# EOSSerial=5a8fe17a055dcf44b563d0671263679b
# engine=21932
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2015-01-13 12:49:11
# local_time=2015-01-13 01:49:11 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# lang=1031
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode_1='Avira Desktop'
# compatibility_mode=1810 16777213 100 99 16409 4292751 0 0
# compatibility_mode_1=''
# compatibility_mode=5893 16776574 100 94 33739665 172740001 0 0
# scanned=323531
# found=3
# cleaned=0
# scan_time=8374
sh=FB3F7E2BF56F5EA06763303CDAA0E962E975E063 ft=1 fh=c0dea5299389dc4e vn="Variante von Win32/DownloadSponsor.C evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Felix\AppData\Local\Temp\DMR\dmr_72.exe"
sh=FB3F7E2BF56F5EA06763303CDAA0E962E975E063 ft=1 fh=c0dea5299389dc4e vn="Variante von Win32/DownloadSponsor.C evtl. unerwünschte Anwendung" ac=I fn="D:\Felix\AppData\Local\Temp\DMR\dmr_72.exe"
sh=138D13018DB82462919E1AAC442CF174642C3594 ft=0 fh=0000000000000000 vn="Variante von Win32/DownloadSponsor.C evtl. unerwünschte Anwendung" ac=I fn="D:\FELIX-QUATTRO-P\Backup Set 2015-01-01 183711\Backup Files 2015-01-01 183711\Backup files 1.zip"

Security check und FRST schicke ich nach.

Gruß Sanderbörd

Guten Morgen!

Hier der log v. SecurityCheck

Code:

ATTFilter

 Results of screen317's Security Check version 0.99.93  
 Windows 7 Service Pack 1 x64 (UAC is enabled)  
 Internet Explorer 11  
``````````````Antivirus/Firewall Check:`````````````` 
Avira Desktop   
 Antivirus up to date!   
`````````Anti-malware/Other Utilities Check:````````` 
 Adobe Flash Player 16.0.0.235  
 Adobe Reader XI  
 Mozilla Firefox (34.0.5) 
 Mozilla Thunderbird (31.3.0) 
````````Process Check: objlist.exe by Laurent````````  
 Avira Antivir avgnt.exe 
 Avira Antivir avguard.exe 
`````````````````System Health check````````````````` 
 Total Fragmentation on Drive C:  
````````````````````End of Log``````````````````````

Aktuelles FRST:

FRST Logfile:

FRST Logfile:

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 11-01-2015
Ran by Chef (administrator) on FELIX-QUATTRO-P on 13-01-2015 07:47:14
Running from C:\Users\Chef\Desktop
Loaded Profile: Chef (Available profiles: Felix & Chef & Leoni & Romy & Imke & Marie)
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7203032 2013-10-22] (Realtek Semiconductor)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2461504 2014-09-17] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959176 2014-09-12] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [702768 2014-11-24] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [157480 2014-10-15] (Apple Inc.)
HKLM-x32\...\Run: [Avira Systray] => C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe [126200 2014-11-20] (Avira Operations GmbH & Co. KG)
ShellIconOverlayIdentifiers: [ SkyDrive1] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} =>  No File
ShellIconOverlayIdentifiers: [ SkyDrive2] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} =>  No File
ShellIconOverlayIdentifiers: [ SkyDrive3] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} =>  No File
ShellIconOverlayIdentifiers-x32: [ SkyDrive1] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} =>  No File
ShellIconOverlayIdentifiers-x32: [ SkyDrive2] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} =>  No File
ShellIconOverlayIdentifiers-x32: [ SkyDrive3] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} =>  No File

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF ProfilePath: C:\Users\Chef\AppData\Roaming\Mozilla\Firefox\Profiles\z0ls01kv.default
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_16_0_0_235.dll ()
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.1.5 -> C:\Program Files (x86)\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_235.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~3\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~3\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3508.0205 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

Chrome: 
=======
CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - No Path
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - No Path

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [431920 2014-11-24] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [431920 2014-11-24] (Avira Operations GmbH & Co. KG)
R2 Avira.OE.ServiceHost; C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe [166192 2014-11-20] (Avira Operations GmbH & Co. KG)
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1149760 2014-09-17] (NVIDIA Corporation)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1796928 2014-09-17] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [19440960 2014-09-17] (NVIDIA Corporation)
S3 COMSysApp; %SystemRoot%\system32\dllhost.exe /Processid:{02D4B3F1-FD88-11D1-960D-00805FC79235}

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S3 adp3132; C:\Windows\system32\drivers\adp3132.sys [385072 2010-01-28] (Adaptec, Inc.)
S3 amdide64; C:\Windows\system32\drivers\amdide64.sys [11904 2011-12-18] (Advanced Micro Devices Inc.)
R0 amdkmpfd; C:\Windows\System32\drivers\amdkmpfd.sys [36096 2013-05-21] (Advanced Micro Devices, Inc.)
S3 asahci64; C:\Windows\system32\drivers\asahci64.sys [49760 2012-01-06] (Asmedia Technology)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [119272 2014-11-24] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131608 2014-11-24] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2014-11-24] (Avira Operations GmbH & Co. KG)
S3 EtronSTOR; C:\Windows\System32\Drivers\EtronSTOR.sys [32512 2012-06-13] (Etron Technology Inc)
S3 FLxHCIh; C:\Windows\system32\drivers\FLxHCIh.sys [77040 2012-11-02] (Fresco Logic)
S3 HP1319EWS; C:\Windows\System32\Drivers\HP1319EWS.sys [15360 2013-02-06] (Marvell Semiconductor, Inc.)
S3 HP1319FAX; C:\Windows\System32\Drivers\HP1319FAX.sys [16896 2013-02-06] (Marvell Semiconductor, Inc.)
R0 iaStorF; C:\Windows\System32\drivers\iaStorF.sys [28656 2013-04-22] (Intel Corporation)
S3 iaStorS; C:\Windows\system32\drivers\iaStorS.sys [652760 2012-10-18] (Intel Corporation)
S3 ISASerial; C:\Windows\system32\drivers\ISASerial.sys [72192 2008-02-20] (Windows (R) Codename Longhorn DDK provider)
S3 ISCT; C:\Windows\system32\drivers\ISCTD64.sys [46568 2013-02-14] ()
R3 MEIx64; C:\Windows\System32\DRIVERS\TeeDriverx64.sys [99288 2013-08-08] (Intel Corporation)
S3 MTsensor; C:\Windows\system32\drivers\ASACPI.sys [15416 2009-07-16] ()
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [20288 2014-09-17] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [38048 2014-09-04] (NVIDIA Corporation)
S1 oxpar; C:\Windows\system32\drivers\oxpar.sys [158208 2007-01-24] (OEM)
S3 OxPPort; C:\Windows\system32\drivers\OxPPort.sys [98304 2008-07-31] (OEM)
S3 PciIsaSerial; C:\Windows\system32\drivers\PciIsaSerial.sys [72192 2008-05-22] (Windows (R) Codename Longhorn DDK provider)
S3 PciPPorts; C:\Windows\system32\drivers\PciPPorts.sys [95744 2008-05-22] ()
S3 PciSPorts; C:\Windows\system32\drivers\PciSPorts.sys [126464 2008-05-22] ()
S3 PPorts; C:\Windows\system32\drivers\PPorts.sys [95744 2008-02-20] ()
S3 rusb3hub; C:\Windows\system32\drivers\rusb3hub.sys [102912 2012-03-15] (Renesas Electronics Corporation)
S3 rusb3xhc; C:\Windows\system32\drivers\rusb3xhc.sys [220672 2012-03-15] (Renesas Electronics Corporation)
S3 Si3124r5; C:\Windows\system32\drivers\Si3124r5.sys [340008 2010-04-13] (Silicon Image, Inc)
R0 SiFilter; C:\Windows\System32\drivers\SiWinAcc.sys [22568 2010-04-13] (Silicon Image, Inc.)
R0 SiRemFil; C:\Windows\System32\drivers\SiRemFil.sys [16936 2010-04-13] (Silicon Image, Inc.)
S3 SPorts; C:\Windows\system32\drivers\SPorts.sys [124416 2008-02-20] ()
S3 StnPport; C:\Windows\system32\drivers\StnPport.sys [97280 2009-12-17] ()
S3 StnSport; C:\Windows\system32\drivers\StnSport.sys [126464 2009-11-14] ()
S3 VUSB3HUB; C:\Windows\system32\drivers\ViaHub3.sys [225792 2013-09-25] (VIA Technologies, Inc.)
S3 xhcdrv; C:\Windows\system32\drivers\xhcdrv.sys [296960 2013-09-25] (VIA Technologies, Inc.)
S3 NmPar; \SystemRoot\system32\drivers\NmPar.sys [X]
S3 nmserial; \SystemRoot\system32\drivers\nmserial.sys [X]
S3 Oxmfuf; \SystemRoot\system32\drivers\oxmfuf.sys [X]
S3 oxser; \SystemRoot\system32\drivers\oxser.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-01-13 07:47 - 2015-01-13 07:47 - 00012522 _____ () C:\Users\Chef\Desktop\FRST.txt
2015-01-13 07:09 - 2015-01-13 07:09 - 00852505 _____ () C:\Users\Chef\Desktop\SecurityCheck.exe
2015-01-12 23:12 - 2015-01-12 23:12 - 02347384 _____ (ESET) C:\Users\Chef\Desktop\esetsmartinstaller_deu.exe
2015-01-12 20:55 - 2015-01-12 20:55 - 00000000 __SHD () C:\Users\Felix\AppData\Local\EmieUserList
2015-01-12 20:55 - 2015-01-12 20:55 - 00000000 __SHD () C:\Users\Felix\AppData\Local\EmieSiteList
2015-01-12 20:55 - 2015-01-12 20:55 - 00000000 __SHD () C:\Users\Felix\AppData\Local\EmieBrowserModeList
2015-01-12 08:40 - 2015-01-12 08:40 - 00010135 _____ () C:\Users\Chef\Desktop\Addition12-01.txt
2015-01-12 08:39 - 2015-01-12 08:40 - 00091319 _____ () C:\Users\Chef\Desktop\FRST12-01.txt
2015-01-12 08:39 - 2015-01-11 16:51 - 02124288 _____ (Farbar) C:\Users\Chef\Desktop\FRST64.exe
2015-01-12 08:35 - 2015-01-12 08:35 - 00000754 _____ () C:\Users\Chef\Desktop\JRT.txt
2015-01-12 08:32 - 2015-01-12 08:32 - 00000000 ____D () C:\Windows\ERUNT
2015-01-12 08:30 - 2015-01-12 08:31 - 01707939 _____ (Thisisu) C:\Users\Chef\Desktop\JRT.exe
2015-01-12 08:23 - 2015-01-12 08:23 - 00001033 _____ () C:\Users\Chef\Desktop\AdwCleaner[S0]_2015-01-12.txt
2015-01-12 08:17 - 2015-01-12 08:17 - 00001018 _____ () C:\Users\Chef\Desktop\AdwCleaner[R1]_2015-01-12.txt
2015-01-12 07:56 - 2015-01-12 08:18 - 00000000 ____D () C:\AdwCleaner
2015-01-12 07:46 - 2015-01-12 07:47 - 02191360 _____ () C:\Users\Chef\Desktop\AdwCleaner_4.107.exe
2015-01-12 07:44 - 2015-01-12 07:44 - 00001216 _____ () C:\Users\Chef\Desktop\mbam-rep-2015-01-12.txt
2015-01-12 07:20 - 2015-01-12 07:21 - 00129752 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-01-12 07:19 - 2015-01-12 07:19 - 00001102 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2015-01-12 07:19 - 2015-01-12 07:19 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2015-01-12 07:19 - 2015-01-12 07:19 - 00000000 ____D () C:\ProgramData\Malwarebytes
2015-01-12 07:19 - 2015-01-12 07:19 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2015-01-12 07:19 - 2014-11-21 06:14 - 00093400 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2015-01-12 07:19 - 2014-11-21 06:14 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2015-01-12 07:19 - 2014-11-21 06:14 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2015-01-12 06:59 - 2015-01-12 07:00 - 20447072 _____ (Malwarebytes Corporation ) C:\Users\Chef\Desktop\mbam-setup-2.0.4.1028.exe
2015-01-12 06:56 - 2015-01-12 06:56 - 00000000 ____D () C:\Users\Chef\AppData\Roaming\IrfanView
2015-01-12 06:49 - 2015-01-11 16:42 - 00380416 _____ () C:\Users\Chef\Desktop\Gmer-19357.exe
2015-01-12 06:49 - 2015-01-11 16:39 - 00050477 _____ () C:\Users\Chef\Desktop\Defogger.exe
2015-01-11 21:36 - 2015-01-13 07:47 - 00000000 ____D () C:\FRST
2015-01-11 21:36 - 2015-01-11 21:36 - 00080894 _____ () C:\Users\Felix\Desktop\FRST_2015-01-11_21.40h.txt
2015-01-11 21:36 - 2015-01-11 21:36 - 00016379 _____ () C:\Users\Felix\Desktop\Addition_2015-01-11_21.40h.txt
2015-01-11 18:14 - 2015-01-11 16:51 - 02124288 _____ (Farbar) C:\Users\Felix\Desktop\FRST64.exe
2015-01-11 18:14 - 2015-01-11 16:39 - 00050477 _____ () C:\Users\Felix\Desktop\Defogger.exe
2015-01-11 16:51 - 2015-01-11 16:51 - 02124288 _____ (Farbar) C:\Users\Felix\Downloads\FRST64.exe
2015-01-11 16:42 - 2015-01-11 16:42 - 00380416 _____ () C:\Users\Felix\Downloads\Gmer-19357.exe
2015-01-11 16:41 - 2015-01-11 16:41 - 01115648 _____ (Farbar) C:\Users\Felix\Downloads\FRST.exe
2015-01-11 16:39 - 2015-01-11 16:39 - 00050477 _____ () C:\Users\Felix\Downloads\Defogger.exe
2015-01-10 11:19 - 2015-01-10 11:20 - 00000000 ____D () C:\Users\Felix\Documents\0110_Soziales-Gemeinnütziges
2015-01-10 11:11 - 2015-01-10 11:14 - 00000000 ____D () C:\Users\Felix\Documents\070_Motorrad
2015-01-10 11:01 - 2015-01-10 11:02 - 00000000 ____D () C:\Users\Felix\Documents\030_Familie-Verwandte
2015-01-10 10:46 - 2015-01-10 10:46 - 00000000 ____D () C:\Users\Felix\Documents\gaby
2015-01-10 10:18 - 2015-01-11 19:20 - 00000000 ____D () C:\Users\Felix\Documents\050_EDV-PC-Div
2015-01-10 10:18 - 2015-01-10 11:10 - 00000000 ____D () C:\Users\Felix\Documents\050_Behörden_Div
2015-01-10 10:18 - 2015-01-10 11:09 - 00000000 ____D () C:\Users\Felix\Documents\040_Geistiges
2015-01-10 10:18 - 2015-01-10 10:51 - 00000000 ____D () C:\Users\Felix\Documents\010_Versicherungen_Altersvorsorge
2015-01-10 10:18 - 2015-01-10 10:18 - 00000000 ____D () C:\Users\Felix\Documents\Werkzeug_Maschinen
2015-01-10 10:18 - 2015-01-10 10:18 - 00000000 ____D () C:\Users\Felix\Documents\Spvgg Renningen
2015-01-10 10:18 - 2015-01-10 10:18 - 00000000 ____D () C:\Users\Felix\Documents\schriftv
2015-01-10 10:18 - 2015-01-10 10:18 - 00000000 ____D () C:\Users\Felix\Documents\Rechnungen
2015-01-10 10:18 - 2015-01-10 10:18 - 00000000 ____D () C:\Users\Felix\Documents\Porsche
2015-01-10 10:18 - 2015-01-10 10:18 - 00000000 ____D () C:\Users\Felix\Documents\Möbelbau
2015-01-10 10:18 - 2015-01-10 10:18 - 00000000 ____D () C:\Users\Felix\Documents\Lustiges
2015-01-10 10:18 - 2015-01-10 10:18 - 00000000 ____D () C:\Users\Felix\Documents\Landkarten
2015-01-10 10:18 - 2015-01-10 10:18 - 00000000 ____D () C:\Users\Felix\Documents\Kuchenrezepte
2015-01-10 10:18 - 2015-01-10 10:18 - 00000000 ____D () C:\Users\Felix\Documents\Kollegen
2015-01-10 10:18 - 2015-01-10 10:18 - 00000000 ____D () C:\Users\Felix\Documents\Kaminofen
2015-01-10 10:18 - 2015-01-10 10:18 - 00000000 ____D () C:\Users\Felix\Documents\HAUSBAU
2015-01-10 10:18 - 2015-01-10 10:18 - 00000000 ____D () C:\Users\Felix\Documents\Gesundheit
2015-01-10 10:18 - 2015-01-10 10:18 - 00000000 ____D () C:\Users\Felix\Documents\Einladungen_Geschenkgutscheine
2015-01-10 10:18 - 2015-01-10 10:18 - 00000000 ____D () C:\Users\Felix\Documents\ebay
2015-01-10 10:18 - 2015-01-10 10:18 - 00000000 ____D () C:\Users\Felix\Documents\090_Flugreisen
2015-01-10 10:18 - 2015-01-10 10:18 - 00000000 ____D () C:\Users\Felix\Documents\080_Bus+Bahn_DB-VVS
2015-01-10 10:18 - 2015-01-10 10:18 - 00000000 ____D () C:\Users\Felix\Documents\060_Autos
2015-01-10 10:18 - 2015-01-10 10:18 - 00000000 ____D () C:\Users\Felix\Documents\0200_Finanzamt
2015-01-10 10:18 - 2015-01-10 10:18 - 00000000 ____D () C:\Users\Felix\Documents\020_Banken
2015-01-10 10:18 - 2015-01-10 10:18 - 00000000 ____D () C:\Users\Felix\Documents\0100_Fahrrad
2015-01-09 07:52 - 2015-01-09 07:52 - 00272740 _____ () C:\Users\Chef\Documents\netzwerk-screenshots.xlsx
2015-01-08 08:03 - 2015-01-08 08:03 - 03352368 _____ () C:\Users\Felix\Downloads\M1319_FW_Upgrade_1206_20120302_signed.exe
2015-01-08 08:02 - 2015-01-08 08:02 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_HP1319FAX_01009.Wdf
2015-01-08 08:02 - 2015-01-08 08:02 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_HP1319EWS_01009.Wdf
2015-01-08 08:00 - 2015-01-08 08:03 - 00083907 _____ () C:\M1319.log
2015-01-08 08:00 - 2015-01-08 08:00 - 00000000 ____D () C:\Program Files\HP
2015-01-08 08:00 - 2013-02-06 14:02 - 00114688 _____ (Marvell) C:\Windows\system32\HPMCoSetup.dll
2015-01-08 08:00 - 2013-02-06 13:51 - 00016896 _____ (Marvell Semiconductor, Inc.) C:\Windows\system32\Drivers\HP1319FAX.sys
2015-01-08 08:00 - 2013-02-06 13:51 - 00015360 _____ (Marvell Semiconductor, Inc.) C:\Windows\system32\Drivers\HP1319EWS.sys
2015-01-08 08:00 - 2013-02-06 13:41 - 00166912 _____ (Marvell Semiconductor, Inc.) C:\Windows\system32\ZLM1319.DLL
2015-01-08 08:00 - 2013-02-06 13:13 - 00024772 _____ () C:\Windows\M1319DEF.css
2015-01-08 08:00 - 2013-02-06 13:13 - 00009731 _____ () C:\Windows\M1319BTN.js
2015-01-08 08:00 - 2013-02-06 13:13 - 00008085 _____ () C:\Windows\M1319GLB.js
2015-01-08 08:00 - 2013-02-06 13:12 - 02219152 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\Ltwvc15u.dll
2015-01-08 08:00 - 2013-02-06 13:12 - 01711248 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\ltclr15u.dll
2015-01-08 08:00 - 2013-02-06 13:12 - 01035408 _____ (The OpenSSL Project) C:\Windows\SysWOW64\ltcry15u.dll
2015-01-08 08:00 - 2013-02-06 13:12 - 00646288 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\Ltdlgfile15u.dll
2015-01-08 08:00 - 2013-02-06 13:12 - 00482448 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\ltkrn15u.dll
2015-01-08 08:00 - 2013-02-06 13:12 - 00445584 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\ltimgsfx15u.dll
2015-01-08 08:00 - 2013-02-06 13:12 - 00384144 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\Lfcmp15u.dll
2015-01-08 08:00 - 2013-02-06 13:12 - 00302224 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\ltimgcor15u.dll
2015-01-08 08:00 - 2013-02-06 13:12 - 00261264 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\LTDIS15u.dll
2015-01-08 08:00 - 2013-02-06 13:12 - 00257168 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\ltefx15u.dll
2015-01-08 08:00 - 2013-02-06 13:12 - 00232592 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\Ltdlgkrn15u.dll
2015-01-08 08:00 - 2013-02-06 13:12 - 00216208 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\ltimgefx15u.dll
2015-01-08 08:00 - 2013-02-06 13:12 - 00212112 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\ltimgclr15u.dll
2015-01-08 08:00 - 2013-02-06 13:12 - 00150672 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\ltfil15u.dll
2015-01-08 08:00 - 2013-02-06 13:12 - 00146576 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\Lftif15u.dll
2015-01-08 08:00 - 2013-02-06 13:12 - 00117904 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\Lttwn15u.dll
2015-01-08 08:00 - 2013-02-06 13:12 - 00117904 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\Ltimgutl15u.dll
2015-01-08 08:00 - 2013-02-06 13:12 - 00105616 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\ltpnt15u.dll
2015-01-08 08:00 - 2013-02-06 13:12 - 00097424 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\Lffax15u.dll
2015-01-08 08:00 - 2013-02-06 13:12 - 00068752 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\ltpdg15u.dll
2015-01-08 08:00 - 2013-02-06 13:12 - 00064656 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\LTCON15u.dll
2015-01-08 08:00 - 2013-02-06 13:12 - 00038032 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\ltimgopt15u.dll
2015-01-08 08:00 - 2013-02-06 13:12 - 00024720 _____ (LEAD Technologies, Inc.) C:\Windows\SysWOW64\Lfbmp15u.dll
2015-01-08 08:00 - 2013-02-06 13:09 - 00195072 _____ () C:\Windows\system32\hpsfs.dll
2015-01-08 08:00 - 2013-02-06 06:42 - 00089600 _____ (Windows (R) Win 7 DDK provider) C:\Windows\system32\m1319wia2.dll
2015-01-08 08:00 - 2013-02-06 06:42 - 00038912 _____ () C:\Windows\system32\HPImgFlt.dll
2015-01-08 08:00 - 2013-02-06 06:41 - 00409088 _____ () C:\Windows\ZSM1319.EXE
2015-01-08 08:00 - 2013-02-06 06:41 - 00409088 _____ () C:\Windows\system32\ZSM1319.EXE
2015-01-08 08:00 - 2013-02-06 06:13 - 00004451 _____ () C:\Windows\M1319OS.htm
2015-01-08 07:59 - 2015-01-08 07:59 - 16806448 _____ () C:\Users\Felix\Downloads\ljM1319-hb-pnp-win64-de.exe
2015-01-07 17:25 - 2015-01-07 17:25 - 00003029 _____ () C:\Users\Felix\Desktop\Microsoft Word 2010.lnk
2015-01-07 17:24 - 2015-01-07 17:24 - 00003095 _____ () C:\Users\Felix\Desktop\Microsoft PowerPoint 2010.lnk
2015-01-07 17:24 - 2015-01-07 17:24 - 00003047 _____ () C:\Users\Felix\Desktop\Microsoft Excel 2010.lnk
2015-01-07 17:14 - 2015-01-07 17:14 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
2015-01-07 17:13 - 2015-01-07 17:13 - 00000000 ____D () C:\Windows\System32\Tasks\OfficeSoftwareProtectionPlatform
2015-01-07 17:13 - 2015-01-07 17:13 - 00000000 ____D () C:\Program Files\Microsoft Office
2015-01-07 17:12 - 2015-01-07 17:17 - 00000000 ____D () C:\ProgramData\Microsoft Help
2015-01-07 17:12 - 2015-01-07 17:12 - 00000000 __RHD () C:\MSOCache
2015-01-07 17:12 - 2015-01-07 17:12 - 00000000 ____D () C:\Users\Chef\AppData\Local\Microsoft Help
2015-01-07 17:12 - 2015-01-07 17:12 - 00000000 ____D () C:\Program Files (x86)\Microsoft Analysis Services
2015-01-07 15:20 - 2015-01-07 15:20 - 00000000 ___DL () C:\Users\Felix
2015-01-07 15:14 - 2015-01-07 15:14 - 00000000 ___DL () C:\Users\Romy
2015-01-07 15:14 - 2015-01-07 15:14 - 00000000 ___DL () C:\Users\Marie
2015-01-07 15:13 - 2015-01-07 15:13 - 00000000 ___DL () C:\Users\Leoni
2015-01-07 15:12 - 2015-01-07 15:12 - 00000000 ___DL () C:\Users\Imke
2015-01-07 14:16 - 2015-01-07 14:17 - 00000000 ____D () C:\Windows\system32\MRT
2015-01-07 14:16 - 2014-11-27 16:40 - 112710672 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-01-07 14:06 - 2014-12-13 06:09 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-01-07 14:06 - 2014-12-13 04:33 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2015-01-07 14:06 - 2014-07-09 03:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDYAK.DLL
2015-01-07 14:06 - 2014-07-09 03:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDTAT.DLL
2015-01-07 14:06 - 2014-07-09 03:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU1.DLL
2015-01-07 14:06 - 2014-07-09 03:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDBASH.DLL
2015-01-07 14:06 - 2014-07-09 03:03 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU.DLL
2015-01-07 14:06 - 2014-07-09 02:31 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDYAK.DLL
2015-01-07 14:06 - 2014-07-09 02:31 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDTAT.DLL
2015-01-07 14:06 - 2014-07-09 02:31 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDRU1.DLL
2015-01-07 14:06 - 2014-07-09 02:31 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDRU.DLL
2015-01-07 14:06 - 2014-07-09 02:31 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDBASH.DLL
2015-01-07 14:06 - 2014-07-08 23:38 - 00419992 _____ () C:\Windows\system32\locale.nls
2015-01-07 14:06 - 2014-07-08 23:30 - 00419992 _____ () C:\Windows\SysWOW64\locale.nls
2015-01-07 14:00 - 2015-01-08 23:18 - 00086160 _____ () C:\Users\Romy\AppData\Local\GDIPFONTCACHEV1.DAT
2015-01-07 14:00 - 2015-01-07 16:05 - 00000000 ____D () C:\Users\Marie\AppData\Local\NVIDIA Corporation
2015-01-07 14:00 - 2015-01-07 14:47 - 00000000 ___RD () C:\Users\Marie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2015-01-07 14:00 - 2015-01-07 14:47 - 00000000 ___RD () C:\Users\Marie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2015-01-07 14:00 - 2015-01-07 14:47 - 00000000 ____D () C:\Users\Marie\AppData\Roaming\Adobe
2015-01-07 14:00 - 2015-01-07 14:47 - 00000000 ____D () C:\Users\Marie\AppData\Local\NVIDIA
2015-01-07 14:00 - 2015-01-07 14:46 - 00000000 ___RD () C:\Users\Romy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2015-01-07 14:00 - 2015-01-07 14:46 - 00000000 ___RD () C:\Users\Romy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2015-01-07 14:00 - 2015-01-07 14:46 - 00000000 ____D () C:\Users\Romy\AppData\Roaming\Adobe
2015-01-07 14:00 - 2015-01-07 14:46 - 00000000 ____D () C:\Users\Romy\AppData\Local\NVIDIA Corporation
2015-01-07 14:00 - 2015-01-07 14:46 - 00000000 ____D () C:\Users\Romy\AppData\Local\NVIDIA
2015-01-07 14:00 - 2015-01-07 14:00 - 00058016 _____ () C:\Users\Marie\AppData\Local\GDIPFONTCACHEV1.DAT
2015-01-07 14:00 - 2015-01-07 14:00 - 00001421 _____ () C:\Users\Romy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2015-01-07 14:00 - 2015-01-07 14:00 - 00001421 _____ () C:\Users\Marie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2015-01-07 14:00 - 2015-01-07 14:00 - 00000020 ___SH () C:\Users\Romy\ntuser.ini
2015-01-07 14:00 - 2015-01-07 14:00 - 00000020 ___SH () C:\Users\Marie\ntuser.ini
2015-01-07 14:00 - 2015-01-07 14:00 - 00000000 ____D () C:\Users\Romy\AppData\Roaming\Apple Computer
2015-01-07 14:00 - 2015-01-07 14:00 - 00000000 ____D () C:\Users\Romy\AppData\Local\VirtualStore
2015-01-07 14:00 - 2015-01-07 14:00 - 00000000 ____D () C:\Users\Marie\AppData\Roaming\Apple Computer
2015-01-07 14:00 - 2015-01-07 14:00 - 00000000 ____D () C:\Users\Marie\AppData\Local\VirtualStore
2015-01-07 14:00 - 2013-12-18 11:27 - 00002120 _____ () C:\Users\Romy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft SkyDrive.lnk
2015-01-07 14:00 - 2013-12-18 11:27 - 00002120 _____ () C:\Users\Marie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft SkyDrive.lnk
2015-01-07 13:59 - 2015-01-07 14:47 - 00000000 ___RD () C:\Users\Leoni\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2015-01-07 13:59 - 2015-01-07 14:47 - 00000000 ___RD () C:\Users\Leoni\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2015-01-07 13:59 - 2015-01-07 14:47 - 00000000 ____D () C:\Users\Leoni\AppData\Roaming\Adobe
2015-01-07 13:59 - 2015-01-07 14:47 - 00000000 ____D () C:\Users\Leoni\AppData\Local\NVIDIA Corporation
2015-01-07 13:59 - 2015-01-07 14:47 - 00000000 ____D () C:\Users\Leoni\AppData\Local\NVIDIA
2015-01-07 13:59 - 2015-01-07 13:59 - 00058016 _____ () C:\Users\Leoni\AppData\Local\GDIPFONTCACHEV1.DAT
2015-01-07 13:59 - 2015-01-07 13:59 - 00001421 _____ () C:\Users\Leoni\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2015-01-07 13:59 - 2015-01-07 13:59 - 00000020 ___SH () C:\Users\Leoni\ntuser.ini
2015-01-07 13:59 - 2015-01-07 13:59 - 00000000 ____D () C:\Users\Leoni\AppData\Roaming\Apple Computer
2015-01-07 13:59 - 2015-01-07 13:59 - 00000000 ____D () C:\Users\Leoni\AppData\Local\VirtualStore
2015-01-07 13:59 - 2013-12-18 11:27 - 00002120 _____ () C:\Users\Leoni\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft SkyDrive.lnk
2015-01-07 13:57 - 2015-01-07 14:48 - 00000000 ___RD () C:\Users\Imke\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2015-01-07 13:57 - 2015-01-07 14:48 - 00000000 ___RD () C:\Users\Imke\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2015-01-07 13:57 - 2015-01-07 14:48 - 00000000 ____D () C:\Users\Imke\AppData\Roaming\Adobe
2015-01-07 13:57 - 2015-01-07 14:48 - 00000000 ____D () C:\Users\Imke\AppData\Local\NVIDIA Corporation
2015-01-07 13:57 - 2015-01-07 14:47 - 00000000 ____D () C:\Users\Imke\AppData\Local\NVIDIA
2015-01-07 13:57 - 2015-01-07 13:57 - 00058016 _____ () C:\Users\Imke\AppData\Local\GDIPFONTCACHEV1.DAT
2015-01-07 13:57 - 2015-01-07 13:57 - 00001421 _____ () C:\Users\Imke\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2015-01-07 13:57 - 2015-01-07 13:57 - 00000020 ___SH () C:\Users\Imke\ntuser.ini
2015-01-07 13:57 - 2015-01-07 13:57 - 00000000 ____D () C:\Users\Imke\AppData\Roaming\Apple Computer
2015-01-07 13:57 - 2015-01-07 13:57 - 00000000 ____D () C:\Users\Imke\AppData\Local\VirtualStore
2015-01-07 13:57 - 2013-12-18 11:27 - 00002120 _____ () C:\Users\Imke\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft SkyDrive.lnk
2015-01-07 11:23 - 2015-01-07 11:23 - 00000000 ____D () C:\Users\Chef\AppData\Roaming\Thunderbird
2015-01-07 11:23 - 2015-01-07 11:23 - 00000000 ____D () C:\Users\Chef\AppData\Local\Thunderbird
2015-01-07 11:17 - 2015-01-07 11:17 - 00000000 ____D () C:\Users\Chef\AppData\Roaming\Macromedia
2015-01-07 11:17 - 2015-01-07 11:17 - 00000000 ____D () C:\Users\Chef\AppData\Local\Macromedia
2015-01-07 11:11 - 2015-01-07 11:11 - 00000000 ____D () C:\Users\Chef\AppData\Roaming\Mozilla
2015-01-07 11:11 - 2015-01-07 11:11 - 00000000 ____D () C:\Users\Chef\AppData\Local\Mozilla
2015-01-07 09:24 - 2015-01-07 09:24 - 00000000 ____D () C:\Users\Chef\AppData\Roaming\Avira
2015-01-07 08:15 - 2015-01-07 08:15 - 00000000 ___SD () C:\Windows\system32\CompatTel
2015-01-07 08:15 - 2015-01-07 08:15 - 00000000 ____D () C:\Windows\system32\appraiser
2015-01-06 21:53 - 2013-05-10 06:56 - 14631424 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2015-01-06 21:53 - 2013-05-10 06:56 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2015-01-06 21:53 - 2013-05-10 05:56 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL
2015-01-06 21:53 - 2013-05-10 05:56 - 11410432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
2015-01-06 21:33 - 2014-10-18 03:05 - 04121600 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll
2015-01-06 21:33 - 2014-10-18 02:33 - 03209728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mf.dll
2015-01-06 21:33 - 2014-07-07 03:06 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll
2015-01-06 21:33 - 2014-07-07 03:06 - 00055808 _____ (Microsoft Corporation) C:\Windows\system32\rrinstaller.exe
2015-01-06 21:33 - 2014-07-07 03:06 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\mfpmp.exe
2015-01-06 21:33 - 2014-07-07 03:02 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\mferror.dll
2015-01-06 21:33 - 2014-07-07 02:40 - 00103424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfps.dll
2015-01-06 21:33 - 2014-07-07 02:39 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rrinstaller.exe
2015-01-06 21:33 - 2014-07-07 02:39 - 00023040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfpmp.exe
2015-01-06 21:33 - 2014-07-07 02:37 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mferror.dll
2015-01-06 21:29 - 2014-06-27 03:08 - 02777088 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll
2015-01-06 21:29 - 2014-06-27 02:45 - 02285056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll
2015-01-06 21:28 - 2014-06-30 23:24 - 00008856 _____ (Microsoft Corporation) C:\Windows\system32\icardres.dll
2015-01-06 21:28 - 2014-06-30 23:14 - 00008856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardres.dll
2015-01-06 21:28 - 2014-03-09 22:48 - 01389208 _____ (Microsoft Corporation) C:\Windows\system32\icardagt.exe
2015-01-06 21:28 - 2014-03-09 22:48 - 00171160 _____ (Microsoft Corporation) C:\Windows\system32\infocardapi.dll
2015-01-06 21:28 - 2014-03-09 22:47 - 00619672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardagt.exe
2015-01-06 21:28 - 2014-03-09 22:47 - 00099480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\infocardapi.dll
2015-01-06 21:27 - 2014-06-06 07:16 - 00035480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TsWpfWrp.exe
2015-01-06 21:27 - 2014-06-06 07:12 - 00035480 _____ (Microsoft Corporation) C:\Windows\system32\TsWpfWrp.exe
2015-01-06 20:35 - 2015-01-12 06:49 - 00000000 ____D () C:\Users\Chef
2015-01-06 20:35 - 2015-01-08 21:56 - 00086160 _____ () C:\Users\Chef\AppData\Local\GDIPFONTCACHEV1.DAT
2015-01-06 20:35 - 2015-01-06 20:36 - 00000000 ____D () C:\Users\Chef\AppData\Local\NVIDIA Corporation
2015-01-06 20:35 - 2015-01-06 20:35 - 00001421 _____ () C:\Users\Chef\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2015-01-06 20:35 - 2015-01-06 20:35 - 00000020 ___SH () C:\Users\Chef\ntuser.ini
2015-01-06 20:35 - 2015-01-06 20:35 - 00000000 _SHDL () C:\Users\Chef\Vorlagen
2015-01-06 20:35 - 2015-01-06 20:35 - 00000000 _SHDL () C:\Users\Chef\Startmenü
2015-01-06 20:35 - 2015-01-06 20:35 - 00000000 _SHDL () C:\Users\Chef\Netzwerkumgebung
2015-01-06 20:35 - 2015-01-06 20:35 - 00000000 _SHDL () C:\Users\Chef\Lokale Einstellungen
2015-01-06 20:35 - 2015-01-06 20:35 - 00000000 _SHDL () C:\Users\Chef\Eigene Dateien
2015-01-06 20:35 - 2015-01-06 20:35 - 00000000 _SHDL () C:\Users\Chef\Druckumgebung
2015-01-06 20:35 - 2015-01-06 20:35 - 00000000 _SHDL () C:\Users\Chef\Documents\Eigene Musik
2015-01-06 20:35 - 2015-01-06 20:35 - 00000000 _SHDL () C:\Users\Chef\Documents\Eigene Bilder
2015-01-06 20:35 - 2015-01-06 20:35 - 00000000 _SHDL () C:\Users\Chef\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2015-01-06 20:35 - 2015-01-06 20:35 - 00000000 _SHDL () C:\Users\Chef\AppData\Local\Verlauf
2015-01-06 20:35 - 2015-01-06 20:35 - 00000000 _SHDL () C:\Users\Chef\AppData\Local\Anwendungsdaten
2015-01-06 20:35 - 2015-01-06 20:35 - 00000000 _SHDL () C:\Users\Chef\Anwendungsdaten
2015-01-06 20:35 - 2015-01-06 20:35 - 00000000 ____D () C:\Users\Chef\AppData\Roaming\Apple Computer
2015-01-06 20:35 - 2015-01-06 20:35 - 00000000 ____D () C:\Users\Chef\AppData\Roaming\Adobe
2015-01-06 20:35 - 2015-01-06 20:35 - 00000000 ____D () C:\Users\Chef\AppData\Local\VirtualStore
2015-01-06 20:35 - 2015-01-06 20:35 - 00000000 ____D () C:\Users\Chef\AppData\Local\NVIDIA
2015-01-06 20:35 - 2013-12-18 11:27 - 00002120 _____ () C:\Users\Chef\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft SkyDrive.lnk
2015-01-06 20:35 - 2009-07-14 05:54 - 00000000 ___RD () C:\Users\Chef\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2015-01-06 20:35 - 2009-07-14 05:49 - 00000000 ___RD () C:\Users\Chef\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2015-01-06 18:51 - 2014-12-04 03:50 - 00830976 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2015-01-06 18:51 - 2014-12-04 03:50 - 00741376 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2015-01-06 18:51 - 2014-12-04 03:50 - 00413184 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2015-01-06 18:51 - 2014-12-04 03:50 - 00396800 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2015-01-06 18:51 - 2014-12-04 03:50 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2015-01-06 18:51 - 2014-12-04 03:50 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2015-01-06 18:51 - 2014-12-04 03:44 - 01083392 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2015-01-06 18:51 - 2014-12-02 00:28 - 01232040 _____ (Microsoft Corporation) C:\Windows\system32\aitstatic.exe
2015-01-06 18:51 - 2014-08-01 12:53 - 01031168 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll
2015-01-06 18:51 - 2014-08-01 12:35 - 00793600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSWorkspace.dll
2015-01-06 18:51 - 2014-04-25 03:34 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll
2015-01-06 18:51 - 2014-04-25 03:06 - 00626688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usp10.dll
2015-01-06 18:51 - 2014-01-28 03:32 - 00228864 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll
2015-01-06 18:51 - 2013-10-30 03:32 - 00335360 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll
2015-01-06 18:51 - 2013-10-30 03:19 - 00301568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msieftp.dll
2015-01-06 18:51 - 2011-04-09 07:58 - 00142336 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe
2015-01-06 18:51 - 2011-04-09 06:56 - 00123904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\poqexec.exe
2015-01-06 18:50 - 2014-11-27 02:43 - 00389296 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-01-06 18:50 - 2014-11-27 02:10 - 00342200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2015-01-06 18:50 - 2014-11-22 04:13 - 25059840 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-01-06 18:50 - 2014-11-22 04:06 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-01-06 18:50 - 2014-11-22 04:06 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2015-01-06 18:50 - 2014-11-22 03:50 - 00580096 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-01-06 18:50 - 2014-11-22 03:50 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-01-06 18:50 - 2014-11-22 03:49 - 02885120 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-01-06 18:50 - 2014-11-22 03:49 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2015-01-06 18:50 - 2014-11-22 03:48 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-01-06 18:50 - 2014-11-22 03:41 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-01-06 18:50 - 2014-11-22 03:40 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-01-06 18:50 - 2014-11-22 03:37 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-01-06 18:50 - 2014-11-22 03:35 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2015-01-06 18:50 - 2014-11-22 03:34 - 06039552 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-01-06 18:50 - 2014-11-22 03:34 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-01-06 18:50 - 2014-11-22 03:26 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2015-01-06 18:50 - 2014-11-22 03:22 - 19749376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-01-06 18:50 - 2014-11-22 03:22 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-01-06 18:50 - 2014-11-22 03:20 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2015-01-06 18:50 - 2014-11-22 03:14 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-01-06 18:50 - 2014-11-22 03:09 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-01-06 18:50 - 2014-11-22 03:08 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-01-06 18:50 - 2014-11-22 03:07 - 00501248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-01-06 18:50 - 2014-11-22 03:07 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2015-01-06 18:50 - 2014-11-22 03:06 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2015-01-06 18:50 - 2014-11-22 03:05 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-01-06 18:50 - 2014-11-22 03:05 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2015-01-06 18:50 - 2014-11-22 03:01 - 02277888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-01-06 18:50 - 2014-11-22 02:59 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2015-01-06 18:50 - 2014-11-22 02:58 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2015-01-06 18:50 - 2014-11-22 02:56 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2015-01-06 18:50 - 2014-11-22 02:54 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2015-01-06 18:50 - 2014-11-22 02:49 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-01-06 18:50 - 2014-11-22 02:49 - 00718848 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-01-06 18:50 - 2014-11-22 02:47 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2015-01-06 18:50 - 2014-11-22 02:46 - 02125312 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-01-06 18:50 - 2014-11-22 02:45 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2015-01-06 18:50 - 2014-11-22 02:43 - 14412800 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-01-06 18:50 - 2014-11-22 02:40 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2015-01-06 18:50 - 2014-11-22 02:36 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2015-01-06 18:50 - 2014-11-22 02:35 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2015-01-06 18:50 - 2014-11-22 02:33 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2015-01-06 18:50 - 2014-11-22 02:29 - 04299264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-01-06 18:50 - 2014-11-22 02:28 - 02358272 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-01-06 18:50 - 2014-11-22 02:23 - 00688640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-01-06 18:50 - 2014-11-22 02:22 - 02052096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2015-01-06 18:50 - 2014-11-22 02:21 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2015-01-06 18:50 - 2014-11-22 02:15 - 01548288 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-01-06 18:50 - 2014-11-22 02:13 - 12836864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-01-06 18:50 - 2014-11-22 02:03 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-01-06 18:50 - 2014-11-22 02:00 - 01888256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-01-06 18:50 - 2014-11-22 01:56 - 01307136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-01-06 18:50 - 2014-11-22 01:54 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2015-01-06 18:50 - 2014-11-11 04:09 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2015-01-06 18:50 - 2014-11-11 03:44 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2015-01-06 18:50 - 2014-11-11 02:46 - 00119296 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdx.sys
2015-01-06 18:50 - 2014-10-14 03:13 - 00683520 _____ (Microsoft Corporation) C:\Windows\system32\termsrv.dll
2015-01-06 18:50 - 2014-10-14 03:09 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2015-01-06 18:50 - 2014-10-14 03:07 - 00681984 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2015-01-06 18:50 - 2014-10-14 02:47 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2015-01-06 18:50 - 2014-10-14 02:46 - 00681984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2015-01-06 18:50 - 2014-08-21 07:43 - 01882624 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2015-01-06 18:50 - 2014-08-21 07:40 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2015-01-06 18:50 - 2014-08-21 07:26 - 01237504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2015-01-06 18:50 - 2014-08-21 07:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll
2015-01-06 18:50 - 2014-06-24 04:29 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2015-01-06 18:50 - 2014-06-24 03:59 - 01987584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2015-01-06 18:50 - 2014-06-18 23:23 - 01943696 _____ (Microsoft Corporation) C:\Windows\system32\dfshim.dll
2015-01-06 18:50 - 2014-06-18 23:23 - 01131664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dfshim.dll
2015-01-06 18:50 - 2014-06-18 23:23 - 00156824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mscorier.dll
2015-01-06 18:50 - 2014-06-18 23:23 - 00156312 _____ (Microsoft Corporation) C:\Windows\system32\mscorier.dll
2015-01-06 18:50 - 2014-06-18 23:23 - 00081560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mscories.dll
2015-01-06 18:50 - 2014-06-18 23:23 - 00073880 _____ (Microsoft Corporation) C:\Windows\system32\mscories.dll
2015-01-06 18:50 - 2014-06-18 03:18 - 00692736 _____ (Microsoft Corporation) C:\Windows\system32\osk.exe
2015-01-06 18:50 - 2014-06-18 02:51 - 00646144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\osk.exe
2015-01-06 18:50 - 2014-06-06 11:10 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2015-01-06 18:50 - 2014-06-06 10:44 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2015-01-06 18:50 - 2014-05-30 07:45 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2015-01-06 18:50 - 2014-04-05 03:47 - 01903552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2015-01-06 18:50 - 2014-04-05 03:47 - 00288192 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
2015-01-06 18:50 - 2014-03-26 15:44 - 02002432 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
2015-01-06 18:50 - 2014-03-26 15:41 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml6r.dll
2015-01-06 18:50 - 2014-03-26 15:27 - 01389056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll
2015-01-06 18:50 - 2014-03-26 15:25 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6r.dll
2015-01-06 18:50 - 2014-01-29 03:32 - 00484864 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll
2015-01-06 18:50 - 2014-01-29 03:06 - 00381440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wer.dll
2015-01-06 18:50 - 2013-12-04 03:27 - 00488448 _____ (Microsoft Corporation) C:\Windows\system32\secproc.dll
2015-01-06 18:50 - 2013-12-04 03:27 - 00485888 _____ (Microsoft Corporation) C:\Windows\system32\secproc_isv.dll
2015-01-06 18:50 - 2013-12-04 03:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp_isv.dll
2015-01-06 18:50 - 2013-12-04 03:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp.dll
2015-01-06 18:50 - 2013-12-04 03:26 - 00528384 _____ (Microsoft Corporation) C:\Windows\system32\msdrm.dll
2015-01-06 18:50 - 2013-12-04 03:16 - 00658432 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_isv.exe
2015-01-06 18:50 - 2013-12-04 03:16 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate.exe
2015-01-06 18:50 - 2013-12-04 03:16 - 00553984 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp.exe
2015-01-06 18:50 - 2013-12-04 03:16 - 00552960 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp_isv.exe
2015-01-06 18:50 - 2013-12-04 03:03 - 00428032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc.dll
2015-01-06 18:50 - 2013-12-04 03:03 - 00423936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_isv.dll
2015-01-06 18:50 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp_isv.dll
2015-01-06 18:50 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp.dll
2015-01-06 18:50 - 2013-12-04 03:02 - 00390144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdrm.dll
2015-01-06 18:50 - 2013-12-04 02:54 - 00594944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_isv.exe
2015-01-06 18:50 - 2013-12-04 02:54 - 00572416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate.exe
2015-01-06 18:50 - 2013-12-04 02:54 - 00510976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp.exe
2015-01-06 18:50 - 2013-12-04 02:54 - 00508928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp_isv.exe
2015-01-06 18:50 - 2013-11-27 02:41 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2015-01-06 18:50 - 2013-11-27 02:41 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2015-01-06 18:50 - 2013-11-27 02:41 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2015-01-06 18:50 - 2013-11-27 02:41 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2015-01-06 18:50 - 2013-11-27 02:41 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2015-01-06 18:50 - 2013-11-26 12:40 - 00376768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2015-01-06 18:50 - 2013-11-23 19:26 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2015-01-06 18:50 - 2013-11-23 18:47 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2015-01-06 18:50 - 2013-08-05 03:25 - 00155584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ataport.sys
2015-01-06 18:50 - 2013-07-04 13:57 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll
2015-01-06 18:50 - 2013-07-04 13:50 - 00102400 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll
2015-01-06 18:50 - 2013-07-04 12:57 - 00205824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WebClnt.dll
2015-01-06 18:50 - 2013-07-04 12:51 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\davclnt.dll
2015-01-06 18:50 - 2013-07-04 11:11 - 00140800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys
2015-01-06 18:50 - 2012-08-22 19:12 - 00950128 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys
2015-01-06 18:50 - 2012-07-04 21:26 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\RNDISMP.sys
2015-01-06 18:49 - 2014-11-11 04:08 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-01-06 18:49 - 2014-11-11 04:08 - 00241152 _____ (Microsoft Corporation) C:\Windows\system32\pku2u.dll
2015-01-06 18:49 - 2014-11-11 03:44 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2015-01-06 18:49 - 2014-11-11 03:44 - 00186880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pku2u.dll
2015-01-06 18:49 - 2014-11-08 04:16 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2015-01-06 18:49 - 2014-11-08 03:45 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2015-01-06 18:49 - 2014-10-30 03:03 - 00165888 _____ (Microsoft Corporation) C:\Windows\system32\charmap.exe
2015-01-06 18:49 - 2014-10-30 02:45 - 00155136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\charmap.exe
2015-01-06 18:49 - 2014-10-25 02:57 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll
2015-01-06 18:49 - 2014-10-25 02:32 - 00067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\packager.dll
2015-01-06 18:49 - 2014-10-14 03:16 - 00155064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-01-06 18:49 - 2014-10-14 03:13 - 03241984 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2015-01-06 18:49 - 2014-10-14 03:12 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-01-06 18:49 - 2014-10-14 02:50 - 02363904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2015-01-06 18:49 - 2014-10-14 02:50 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2015-01-06 18:49 - 2014-10-14 02:49 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2015-01-06 18:49 - 2014-10-10 01:57 - 03198976 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-01-06 18:49 - 2014-10-03 03:12 - 02020352 _____ (Microsoft Corporation) C:\Windows\system32\WsmSvc.dll
2015-01-06 18:49 - 2014-10-03 03:12 - 00500224 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll
2015-01-06 18:49 - 2014-10-03 03:12 - 00346624 _____ (Microsoft Corporation) C:\Windows\system32\WSManMigrationPlugin.dll
2015-01-06 18:49 - 2014-10-03 03:12 - 00310272 _____ (Microsoft Corporation) C:\Windows\system32\WsmWmiPl.dll
2015-01-06 18:49 - 2014-10-03 03:12 - 00181248 _____ (Microsoft Corporation) C:\Windows\system32\WsmAuto.dll
2015-01-06 18:49 - 2014-10-03 03:11 - 00680960 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2015-01-06 18:49 - 2014-10-03 03:11 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll
2015-01-06 18:49 - 2014-10-03 03:11 - 00296448 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll
2015-01-06 18:49 - 2014-10-03 03:11 - 00284672 _____ (Microsoft Corporation) C:\Windows\system32\EncDump.dll
2015-01-06 18:49 - 2014-10-03 03:11 - 00266240 _____ (Microsoft Corporation) C:\Windows\system32\WSManHTTPConfig.exe
2015-01-06 18:49 - 2014-10-03 02:45 - 01177088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmSvc.dll
2015-01-06 18:49 - 2014-10-03 02:45 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSManMigrationPlugin.dll
2015-01-06 18:49 - 2014-10-03 02:45 - 00214016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmWmiPl.dll
2015-01-06 18:49 - 2014-10-03 02:45 - 00145920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmAuto.dll
2015-01-06 18:49 - 2014-10-03 02:44 - 00442880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AUDIOKSE.dll
2015-01-06 18:49 - 2014-10-03 02:44 - 00374784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioEng.dll
2015-01-06 18:49 - 2014-10-03 02:44 - 00198656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSManHTTPConfig.exe
2015-01-06 18:49 - 2014-10-03 02:44 - 00195584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll
2015-01-06 18:49 - 2014-09-25 03:08 - 00371712 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll
2015-01-06 18:49 - 2014-09-25 02:40 - 00519680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qdvd.dll
2015-01-06 18:49 - 2014-09-19 10:42 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-01-06 18:49 - 2014-09-19 10:42 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2015-01-06 18:49 - 2014-09-19 10:42 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2015-01-06 18:49 - 2014-09-19 10:42 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2015-01-06 18:49 - 2014-09-19 10:42 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2015-01-06 18:49 - 2014-09-19 10:42 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2015-01-06 18:49 - 2014-09-19 10:23 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2015-01-06 18:49 - 2014-09-19 10:23 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2015-01-06 18:49 - 2014-09-19 10:23 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2015-01-06 18:49 - 2014-09-19 10:23 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2015-01-06 18:49 - 2014-09-19 10:23 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2015-01-06 18:49 - 2014-09-19 10:23 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2015-01-06 18:49 - 2014-09-04 06:23 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\rastls.dll
2015-01-06 18:49 - 2014-09-04 06:04 - 00372736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rastls.dll
2015-01-06 18:49 - 2014-08-12 03:02 - 00878080 _____ (Microsoft Corporation) C:\Windows\system32\IMJP10K.DLL
2015-01-06 18:49 - 2014-08-12 02:36 - 00701440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IMJP10K.DLL
2015-01-06 18:49 - 2014-07-17 03:07 - 03722240 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2015-01-06 18:49 - 2014-07-17 03:07 - 01118720 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe
2015-01-06 18:49 - 2014-07-17 03:07 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe
2015-01-06 18:49 - 2014-07-17 03:07 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\winsta.dll
2015-01-06 18:49 - 2014-07-17 03:07 - 00150528 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorekmts.dll
2015-01-06 18:49 - 2014-07-17 02:40 - 00157696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winsta.dll
2015-01-06 18:49 - 2014-07-17 02:39 - 03221504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2015-01-06 18:49 - 2014-07-17 02:39 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstsc.exe
2015-01-06 18:49 - 2014-07-17 02:39 - 00131584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aaclient.dll
2015-01-06 18:49 - 2014-07-17 02:21 - 00212480 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpwd.sys
2015-01-06 18:49 - 2014-07-17 02:21 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys
2015-01-06 18:49 - 2014-06-25 03:05 - 14175744 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2015-01-06 18:49 - 2014-06-25 02:41 - 12874240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2015-01-06 18:49 - 2014-06-16 03:10 - 00985536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2015-01-06 18:49 - 2014-06-03 11:02 - 01941504 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2015-01-06 18:49 - 2014-06-03 11:02 - 00504320 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll
2015-01-06 18:49 - 2014-06-03 11:02 - 00112064 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2015-01-06 18:49 - 2014-06-03 10:29 - 01805824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2015-01-06 18:49 - 2014-06-03 10:29 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msihnd.dll
2015-01-06 18:49 - 2014-04-12 03:22 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2015-01-06 18:49 - 2014-04-12 03:19 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2015-01-06 18:49 - 2014-04-12 03:19 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2015-01-06 18:49 - 2014-04-12 03:19 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2015-01-06 18:49 - 2014-04-12 03:19 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2015-01-06 18:49 - 2014-03-04 10:47 - 05550016 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-01-06 18:49 - 2014-03-04 10:44 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2015-01-06 18:49 - 2014-03-04 10:44 - 00722944 _____ (Microsoft Corporation) C:\Windows\system32\objsel.dll
2015-01-06 18:49 - 2014-03-04 10:44 - 00424960 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2015-01-06 18:49 - 2014-03-04 10:44 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2015-01-06 18:49 - 2014-03-04 10:44 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2015-01-06 18:49 - 2014-03-04 10:44 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\wincredprovider.dll
2015-01-06 18:49 - 2014-03-04 10:44 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2015-01-06 18:49 - 2014-03-04 10:44 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2015-01-06 18:49 - 2014-03-04 10:43 - 00057344 _____ (Microsoft Corporation) C:\Windows\system32\cngprovider.dll
2015-01-06 18:49 - 2014-03-04 10:43 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\adprovider.dll
2015-01-06 18:49 - 2014-03-04 10:43 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\capiprovider.dll
2015-01-06 18:49 - 2014-03-04 10:43 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\dpapiprovider.dll
2015-01-06 18:49 - 2014-03-04 10:43 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\dimsroam.dll
2015-01-06 18:49 - 2014-03-04 10:20 - 03969984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2015-01-06 18:49 - 2014-03-04 10:20 - 03914176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2015-01-06 18:49 - 2014-03-04 10:17 - 00538112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\objsel.dll
2015-01-06 18:49 - 2014-03-04 10:17 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cngprovider.dll
2015-01-06 18:49 - 2014-03-04 10:17 - 00049664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adprovider.dll
2015-01-06 18:49 - 2014-03-04 10:17 - 00048128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\capiprovider.dll
2015-01-06 18:49 - 2014-03-04 10:17 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpapiprovider.dll
2015-01-06 18:49 - 2014-03-04 10:17 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dimsroam.dll
2015-01-06 18:49 - 2014-03-04 10:17 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wincredprovider.dll
2015-01-06 18:49 - 2014-03-04 10:17 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2015-01-06 18:49 - 2014-03-04 10:16 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2015-01-06 18:49 - 2014-03-04 10:16 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2015-01-06 18:49 - 2014-03-04 10:16 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2015-01-06 18:49 - 2014-03-04 10:16 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2015-01-06 18:49 - 2014-03-04 09:09 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2015-01-06 18:49 - 2014-03-04 09:09 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2015-01-06 18:49 - 2014-02-04 03:35 - 00274880 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msiscsi.sys
2015-01-06 18:49 - 2014-02-04 03:35 - 00190912 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys
2015-01-06 18:49 - 2014-02-04 03:35 - 00027584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Diskdump.sys
2015-01-06 18:49 - 2014-02-04 03:28 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\iologmsg.dll
2015-01-06 18:49 - 2014-02-04 03:00 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iologmsg.dll
2015-01-06 18:49 - 2014-01-24 03:37 - 01684928 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2015-01-06 18:49 - 2013-11-26 09:16 - 03419136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll
2015-01-06 18:49 - 2013-11-22 23:48 - 03928064 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll
2015-01-06 18:49 - 2013-07-26 03:24 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\shdocvw.dll
2015-01-06 18:49 - 2013-07-26 02:55 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shdocvw.dll
2015-01-06 18:49 - 2011-03-11 07:41 - 00410496 _____ (Intel Corporation) C:\Windows\system32\Drivers\iaStorV.sys
2015-01-06 18:49 - 2011-03-11 07:41 - 00166272 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvstor.sys
2015-01-06 18:49 - 2011-03-11 07:41 - 00148352 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvraid.sys
2015-01-06 18:49 - 2011-03-11 07:41 - 00107904 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\amdsata.sys
2015-01-06 18:49 - 2011-03-11 07:41 - 00027008 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\amdxata.sys
2015-01-06 18:49 - 2011-03-11 07:33 - 02565632 _____ (Microsoft Corporation) C:\Windows\system32\esent.dll
2015-01-06 18:49 - 2011-03-11 07:30 - 00096768 _____ (Microsoft Corporation) C:\Windows\system32\fsutil.exe
2015-01-06 18:49 - 2011-03-11 06:33 - 01699328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\esent.dll
2015-01-06 18:49 - 2011-03-11 06:31 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fsutil.exe
2015-01-06 18:49 - 2011-03-11 05:37 - 00091648 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBSTOR.SYS
2015-01-06 18:48 - 2014-10-18 03:05 - 00861696 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2015-01-06 18:48 - 2014-10-18 02:33 - 00571904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll
2015-01-06 18:48 - 2014-08-23 03:07 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2015-01-06 18:48 - 2014-08-23 02:45 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2015-01-06 18:48 - 2014-07-14 03:02 - 01216000 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2015-01-06 18:48 - 2014-07-14 02:40 - 00664064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2015-01-06 18:48 - 2012-02-11 07:36 - 00559104 _____ (Microsoft Corporation) C:\Windows\system32\spoolsv.exe
2015-01-06 18:48 - 2012-02-11 07:36 - 00067072 _____ (Microsoft Corporation) C:\Windows\splwow64.exe
2015-01-01 18:58 - 2015-01-07 14:50 - 00000000 ____D () C:\Users\Felix\AppData\Roaming\Apple Computer
2015-01-01 18:58 - 2015-01-07 14:48 - 00000000 ____D () C:\Users\Felix\AppData\Local\Apple Computer
2015-01-01 18:58 - 2015-01-01 18:58 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
2015-01-01 18:58 - 2012-10-03 16:14 - 00033240 _____ (GEAR Software Inc.) C:\Windows\system32\Drivers\GEARAspiWDM.sys
2015-01-01 18:57 - 2015-01-07 14:48 - 00000000 ____D () C:\Users\Felix\AppData\Local\Apple
2015-01-01 18:57 - 2015-01-01 18:58 - 00000000 ____D () C:\ProgramData\E1864A66-75E3-486a-BD95-D1B7D99A84A7
2015-01-01 18:57 - 2015-01-01 18:58 - 00000000 ____D () C:\Program Files\iTunes
2015-01-01 18:57 - 2015-01-01 18:58 - 00000000 ____D () C:\Program Files (x86)\iTunes
2015-01-01 18:57 - 2015-01-01 18:57 - 00000000 ____D () C:\ProgramData\Apple Computer
2015-01-01 18:57 - 2015-01-01 18:57 - 00000000 ____D () C:\ProgramData\Apple
2015-01-01 18:57 - 2015-01-01 18:57 - 00000000 ____D () C:\Program Files\iPod
2015-01-01 18:57 - 2015-01-01 18:57 - 00000000 ____D () C:\Program Files\Common Files\Apple
2015-01-01 18:18 - 2015-01-07 14:50 - 00000000 ____D () C:\Users\Felix\AppData\Roaming\IrfanView
2015-01-01 18:18 - 2015-01-01 18:18 - 00001890 _____ () C:\Users\Public\Desktop\IrfanView Thumbnails.lnk
2015-01-01 18:18 - 2015-01-01 18:18 - 00001002 _____ () C:\Users\Public\Desktop\IrfanView.lnk
2015-01-01 18:18 - 2015-01-01 18:18 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IrfanView
2015-01-01 18:18 - 2015-01-01 18:18 - 00000000 ____D () C:\Program Files (x86)\IrfanView
2015-01-01 18:17 - 2015-01-07 14:48 - 00000000 ____D () C:\Users\Felix\AppData\Local\Macromedia
2015-01-01 18:11 - 2015-01-07 14:50 - 00000000 ____D () C:\Users\Felix\AppData\Local\paint.net
2015-01-01 18:11 - 2015-01-01 18:11 - 00001204 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\paint.net.lnk
2015-01-01 18:11 - 2015-01-01 18:11 - 00000000 ___DC () C:\Program Files (x86)\Staging
2015-01-01 18:11 - 2015-01-01 18:11 - 00000000 ____D () C:\Program Files (x86)\Resources
2015-01-01 18:11 - 2015-01-01 18:11 - 00000000 ____D () C:\Program Files (x86)\FileTypes
2015-01-01 18:11 - 2015-01-01 18:11 - 00000000 ____D () C:\Program Files (x86)\Effects
2015-01-01 18:09 - 2015-01-01 18:09 - 06528454 _____ () C:\Program Files (x86)\paint.net.4.0.5.install.zip
2015-01-01 17:57 - 2015-01-01 17:58 - 00000000 ____D () C:\Users\Felix\AppData\Local\Adobe
2015-01-01 17:50 - 2015-01-07 14:50 - 00000000 ____D () C:\Users\Felix\AppData\Roaming\Skype
2015-01-01 17:50 - 2015-01-07 14:50 - 00000000 ____D () C:\Users\Felix\AppData\Local\Skype
2015-01-01 17:50 - 2015-01-01 17:50 - 00002517 _____ () C:\Users\Public\Desktop\Skype.lnk
2015-01-01 17:50 - 2015-01-01 17:50 - 00000000 ___RD () C:\Program Files (x86)\Skype
2015-01-01 17:50 - 2015-01-01 17:50 - 00000000 ____D () C:\ProgramData\Skype
2015-01-01 17:50 - 2015-01-01 17:50 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2015-01-01 17:49 - 2015-01-01 17:49 - 00000935 _____ () C:\Users\Public\Desktop\VLC media player.lnk
2015-01-01 17:49 - 2015-01-01 17:49 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2015-01-01 17:49 - 2015-01-01 17:49 - 00000000 ____D () C:\Program Files (x86)\VLC
2015-01-01 17:32 - 2015-01-07 14:50 - 00000000 ____D () C:\Users\Felix\AppData\Roaming\Thunderbird
2015-01-01 17:32 - 2015-01-07 14:50 - 00000000 ____D () C:\Users\Felix\AppData\Local\Thunderbird
2015-01-01 17:32 - 2015-01-01 17:32 - 00002098 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Thunderbird.lnk
2015-01-01 17:32 - 2015-01-01 17:32 - 00000000 ____D () C:\Program Files (x86)\Mozilla Thunderbird
2015-01-01 17:30 - 2015-01-07 14:50 - 00000000 ____D () C:\Users\Felix\AppData\Roaming\Cliqz
2015-01-01 17:30 - 2011-05-13 11:16 - 00493056 _____ ( datenhaus GmbH) C:\Windows\SysWOW64\dhRichClient3.dll
2015-01-01 17:30 - 2011-03-25 19:42 - 00338432 _____ () C:\Windows\SysWOW64\sqlite36_engine.dll
2015-01-01 17:21 - 2015-01-07 14:50 - 00000000 ____D () C:\Users\Felix\AppData\Roaming\Mozilla
2015-01-01 17:21 - 2015-01-07 14:49 - 00000000 ____D () C:\Users\Felix\AppData\Local\Mozilla
2015-01-01 17:21 - 2015-01-06 18:36 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2015-01-01 17:21 - 2015-01-01 17:21 - 00001159 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2015-01-01 17:21 - 2015-01-01 17:21 - 00001147 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2015-01-01 17:21 - 2015-01-01 17:21 - 00000000 ____D () C:\ProgramData\Mozilla
2015-01-01 17:21 - 2015-01-01 17:21 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2015-01-01 17:19 - 2015-01-07 14:50 - 00000000 ____D () C:\Users\Felix\AppData\Roaming\Macromedia
2015-01-01 16:39 - 2015-01-01 16:38 - 00043064 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2015-01-01 16:34 - 2014-05-14 17:23 - 02477536 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2015-01-01 16:34 - 2014-05-14 17:23 - 00700384 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2015-01-01 16:34 - 2014-05-14 17:23 - 00581600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2015-01-01 16:34 - 2014-05-14 17:23 - 00058336 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2015-01-01 16:34 - 2014-05-14 17:23 - 00044512 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2015-01-01 16:34 - 2014-05-14 17:23 - 00038880 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2015-01-01 16:34 - 2014-05-14 17:23 - 00036320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2015-01-01 16:34 - 2014-05-14 17:21 - 02620928 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2015-01-01 16:34 - 2014-05-14 17:20 - 00097792 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2015-01-01 16:34 - 2014-05-14 17:17 - 00092672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2015-01-01 16:34 - 2014-05-14 09:23 - 00198600 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2015-01-01 16:34 - 2014-05-14 09:23 - 00179656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2015-01-01 16:34 - 2014-05-14 09:20 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2015-01-01 16:34 - 2014-05-14 09:17 - 00033792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2015-01-01 16:09 - 2015-01-07 14:50 - 00000000 ____D () C:\Users\Felix\AppData\Roaming\Avira
2015-01-01 16:09 - 2015-01-01 20:31 - 00001137 _____ () C:\Users\Public\Desktop\Avira.lnk
2015-01-01 16:09 - 2015-01-01 20:31 - 00000000 ____D () C:\ProgramData\Package Cache
2015-01-01 16:09 - 2015-01-01 20:31 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2015-01-01 16:09 - 2015-01-01 20:31 - 00000000 ____D () C:\Program Files (x86)\Avira
2015-01-01 16:09 - 2015-01-01 16:09 - 00002066 _____ () C:\Users\Public\Desktop\Avira Control Center.lnk
2015-01-01 16:09 - 2015-01-01 16:09 - 00000000 ____D () C:\ProgramData\Avira
2015-01-01 16:09 - 2014-11-24 10:23 - 00131608 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2015-01-01 16:09 - 2014-11-24 10:23 - 00119272 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2015-01-01 16:09 - 2014-11-24 10:23 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys
2015-01-01 16:05 - 2015-01-08 19:56 - 00086160 _____ () C:\Users\Felix\AppData\Local\GDIPFONTCACHEV1.DAT
2015-01-01 16:03 - 2015-01-07 14:50 - 00000000 ___RD () C:\Users\Felix\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2015-01-01 16:03 - 2015-01-07 14:50 - 00000000 ___RD () C:\Users\Felix\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2015-01-01 16:03 - 2015-01-07 14:50 - 00000000 ____D () C:\Users\Felix\AppData\Roaming\Adobe
2015-01-01 16:03 - 2015-01-07 14:50 - 00000000 ____D () C:\Users\Felix\AppData\Local\NVIDIA Corporation
2015-01-01 16:03 - 2015-01-07 14:49 - 00000000 ____D () C:\Users\Felix\AppData\Local\NVIDIA
2015-01-01 16:03 - 2015-01-01 16:03 - 00001421 _____ () C:\Users\Felix\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2015-01-01 16:03 - 2015-01-01 16:03 - 00000020 ___SH () C:\Users\Felix\ntuser.ini
2015-01-01 16:03 - 2015-01-01 16:03 - 00000000 ____D () C:\Users\Felix\AppData\Local\VirtualStore
2015-01-01 16:03 - 2013-12-18 11:27 - 00002120 _____ () C:\Users\Felix\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft SkyDrive.lnk
2015-01-01 16:02 - 2015-01-12 16:10 - 00000000 ____D () C:\ProgramData\NVIDIA
2015-01-01 16:02 - 2015-01-01 16:05 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation
2015-01-01 16:02 - 2015-01-01 16:02 - 00001275 _____ () C:\Users\Public\Desktop\GeForce Experience.lnk
2015-01-01 16:02 - 2015-01-01 16:02 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2015-01-01 16:02 - 2015-01-01 16:02 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation
2015-01-01 16:02 - 2015-01-01 16:02 - 00000000 ____D () C:\Program Files (x86)\AGEIA Technologies
2015-01-01 16:02 - 2014-09-17 05:51 - 01538880 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdagenco6420103.dll
2015-01-01 16:02 - 2014-09-17 05:51 - 00197408 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvhda64v.sys
2015-01-01 16:02 - 2014-09-17 05:51 - 00031520 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdap64.dll
2015-01-01 16:02 - 2014-09-17 03:10 - 02799784 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll
2015-01-01 16:02 - 2014-09-17 03:10 - 02193560 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll
2015-01-01 16:02 - 2014-09-17 03:10 - 01715224 _____ (NVIDIA Corporation) C:\Windows\system32\nvspbridge64.dll
2015-01-01 16:02 - 2014-09-17 03:10 - 01291280 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspbridge.dll
2015-01-01 16:02 - 2014-09-14 00:48 - 31887680 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2015-01-01 16:02 - 2014-09-14 00:48 - 24552592 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2015-01-01 16:02 - 2014-09-14 00:48 - 20922512 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2015-01-01 16:02 - 2014-09-14 00:48 - 20589536 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll
2015-01-01 16:02 - 2014-09-14 00:48 - 19954520 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2015-01-01 16:02 - 2014-09-14 00:48 - 18106152 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2015-01-01 16:02 - 2014-09-14 00:48 - 17259664 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2015-01-01 16:02 - 2014-09-14 00:48 - 16875856 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll
2015-01-01 16:02 - 2014-09-14 00:48 - 14026304 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2015-01-01 16:02 - 2014-09-14 00:48 - 13939272 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2015-01-01 16:02 - 2014-09-14 00:48 - 13157696 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2015-01-01 16:02 - 2014-09-14 00:48 - 11392576 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2015-01-01 16:02 - 2014-09-14 00:48 - 11330776 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2015-01-01 16:02 - 2014-09-14 00:48 - 04287296 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2015-01-01 16:02 - 2014-09-14 00:48 - 04008592 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2015-01-01 16:02 - 2014-09-14 00:48 - 03223120 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
2015-01-01 16:02 - 2014-09-14 00:48 - 02838424 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
2015-01-01 16:02 - 2014-09-14 00:48 - 01876296 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6434411.dll
2015-01-01 16:02 - 2014-09-14 00:48 - 01539272 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6434411.dll
2015-01-01 16:02 - 2014-09-14 00:48 - 00984424 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll
2015-01-01 16:02 - 2014-09-14 00:48 - 00957584 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2015-01-01 16:02 - 2014-09-14 00:48 - 00925896 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2015-01-01 16:02 - 2014-09-14 00:48 - 00919240 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2015-01-01 16:02 - 2014-09-14 00:48 - 00894096 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2015-01-01 16:02 - 2014-09-14 00:48 - 00867528 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2015-01-01 16:02 - 2014-09-14 00:48 - 00501064 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll
2015-01-01 16:02 - 2014-09-14 00:48 - 00417096 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll
2015-01-01 16:02 - 2014-09-14 00:48 - 00393024 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFROpenGL.dll
2015-01-01 16:02 - 2014-09-14 00:48 - 00352016 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2015-01-01 16:02 - 2014-09-14 00:48 - 00348304 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFROpenGL.dll
2015-01-01 16:02 - 2014-09-14 00:48 - 00303600 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2015-01-01 16:02 - 2014-09-14 00:48 - 00174856 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2015-01-01 16:02 - 2014-09-14 00:48 - 00156840 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2015-01-01 16:02 - 2014-09-14 00:48 - 00073872 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll
2015-01-01 16:02 - 2014-09-14 00:48 - 00060560 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll
2015-01-01 16:02 - 2014-09-14 00:48 - 00026956 _____ () C:\Windows\system32\nvinfo.pb
2015-01-01 16:02 - 2014-09-13 22:53 - 06890696 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll
2015-01-01 16:02 - 2014-09-13 22:53 - 03529872 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll
2015-01-01 16:02 - 2014-09-13 22:53 - 02557640 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll
2015-01-01 16:02 - 2014-09-13 22:53 - 00934216 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
2015-01-01 16:02 - 2014-09-13 22:53 - 00385168 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll
2015-01-01 16:02 - 2014-09-13 22:53 - 00062608 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll
2015-01-01 16:02 - 2014-09-13 21:13 - 00613696 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe
2015-01-01 16:02 - 2014-09-11 16:37 - 03961833 _____ () C:\Windows\system32\nvcoproc.bin
2015-01-01 16:02 - 2014-09-04 20:14 - 00038048 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys
2015-01-01 16:02 - 2014-09-04 20:14 - 00034976 _____ (NVIDIA Corporation) C:\Windows\system32\nvaudcap64v.dll
2015-01-01 16:02 - 2014-09-04 20:14 - 00032416 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll
2015-01-01 16:02 - 2010-05-26 11:41 - 02401112 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_43.dll
2015-01-01 16:02 - 2010-05-26 11:41 - 01998168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_43.dll
2015-01-01 16:02 - 2010-05-26 11:41 - 00511328 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_43.dll
2015-01-01 16:02 - 2010-05-26 11:41 - 00470880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_43.dll
2015-01-01 16:01 - 2015-01-01 17:58 - 00701616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-01-01 16:01 - 2015-01-01 17:58 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-01-01 16:01 - 2015-01-01 16:02 - 00000000 ____D () C:\Program Files\NVIDIA Corporation
2015-01-01 16:01 - 2015-01-01 16:01 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
2015-01-01 16:01 - 2015-01-01 16:01 - 00002019 _____ () C:\Users\Public\Desktop\Adobe Reader XI.lnk
2015-01-01 16:01 - 2015-01-01 16:01 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Musik
2015-01-01 16:01 - 2015-01-01 16:01 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Bilder
2015-01-01 16:01 - 2015-01-01 16:01 - 00000000 _SHDL () C:\Users\Default\Vorlagen
2015-01-01 16:01 - 2015-01-01 16:01 - 00000000 _SHDL () C:\Users\Default\Startmenü
2015-01-01 16:01 - 2015-01-01 16:01 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung
2015-01-01 16:01 - 2015-01-01 16:01 - 00000000 _SHDL () C:\Users\Default\Lokale Einstellungen
2015-01-01 16:01 - 2015-01-01 16:01 - 00000000 _SHDL () C:\Users\Default\Eigene Dateien
2015-01-01 16:01 - 2015-01-01 16:01 - 00000000 _SHDL () C:\Users\Default\Druckumgebung
2015-01-01 16:01 - 2015-01-01 16:01 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik
2015-01-01 16:01 - 2015-01-01 16:01 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder
2015-01-01 16:01 - 2015-01-01 16:01 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2015-01-01 16:01 - 2015-01-01 16:01 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf
2015-01-01 16:01 - 2015-01-01 16:01 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Anwendungsdaten
2015-01-01 16:01 - 2015-01-01 16:01 - 00000000 _SHDL () C:\Users\Default\Anwendungsdaten
2015-01-01 16:01 - 2015-01-01 16:01 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik
2015-01-01 16:01 - 2015-01-01 16:01 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder
2015-01-01 16:01 - 2015-01-01 16:01 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2015-01-01 16:01 - 2015-01-01 16:01 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf
2015-01-01 16:01 - 2015-01-01 16:01 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Anwendungsdaten
2015-01-01 16:01 - 2015-01-01 16:01 - 00000000 _SHDL () C:\Programme
2015-01-01 16:01 - 2015-01-01 16:01 - 00000000 _SHDL () C:\ProgramData\Vorlagen
2015-01-01 16:01 - 2015-01-01 16:01 - 00000000 _SHDL () C:\ProgramData\Startmenü
2015-01-01 16:01 - 2015-01-01 16:01 - 00000000 _SHDL () C:\ProgramData\Microsoft\Windows\Start Menu\Programme
2015-01-01 16:01 - 2015-01-01 16:01 - 00000000 _SHDL () C:\ProgramData\Favoriten
2015-01-01 16:01 - 2015-01-01 16:01 - 00000000 _SHDL () C:\ProgramData\Dokumente
2015-01-01 16:01 - 2015-01-01 16:01 - 00000000 _SHDL () C:\ProgramData\Anwendungsdaten
2015-01-01 16:01 - 2015-01-01 16:01 - 00000000 _SHDL () C:\Program Files\Gemeinsame Dateien
2015-01-01 16:01 - 2015-01-01 16:01 - 00000000 _SHDL () C:\Dokumente und Einstellungen
2015-01-01 16:01 - 2015-01-01 16:01 - 00000000 __SHD () C:\Recovery
2015-01-01 16:01 - 2015-01-01 16:01 - 00000000 ____D () C:\Windows\SysWOW64\Macromed
2015-01-01 16:01 - 2015-01-01 16:01 - 00000000 ____D () C:\Windows\system32\Macromed
2015-01-01 16:01 - 2015-01-01 16:01 - 00000000 ____D () C:\ProgramData\Adobe
2015-01-01 16:01 - 2015-01-01 16:01 - 00000000 ____D () C:\Program Files (x86)\Adobe
2015-01-01 15:55 - 2015-01-13 07:06 - 01396159 _____ () C:\Windows\WindowsUpdate.log
2015-01-01 15:48 - 2015-01-01 15:48 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_TeeDriverx64_01011.Wdf
2015-01-01 15:48 - 2015-01-01 15:48 - 00000000 ____D () C:\Windows\SysWOW64\RTCOM
2015-01-01 15:48 - 2015-01-01 15:48 - 00000000 ____D () C:\Program Files\Realtek

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-01-12 23:26 - 2010-11-21 07:50 - 00698688 _____ () C:\Windows\system32\perfh007.dat
2015-01-12 23:26 - 2010-11-21 07:50 - 00148828 _____ () C:\Windows\system32\perfc007.dat
2015-01-12 23:26 - 2009-07-14 06:13 - 01618320 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-01-12 23:22 - 2009-07-14 05:51 - 00047066 _____ () C:\Windows\setupact.log
2015-01-12 16:17 - 2009-07-14 05:45 - 00021664 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-01-12 16:17 - 2009-07-14 05:45 - 00021664 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-01-12 16:10 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-01-12 08:20 - 2010-11-21 04:47 - 00167842 _____ () C:\Windows\PFRO.log
2015-01-08 19:55 - 2009-07-14 05:45 - 00342504 _____ () C:\Windows\system32\FNTCACHE.DAT
2015-01-07 17:14 - 2013-12-18 11:29 - 00000000 ____D () C:\Program Files (x86)\Microsoft Office
2015-01-07 17:13 - 2009-07-14 04:20 - 00000000 ____D () C:\Program Files\Common Files\Microsoft Shared
2015-01-07 17:12 - 2010-11-21 08:00 - 00000000 ____D () C:\Windows\ShellNew
2015-01-07 10:41 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\rescache
2015-01-07 08:15 - 2010-11-21 08:00 - 00000000 ____D () C:\Program Files\Windows Journal
2015-01-07 08:15 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\SysWOW64\Dism
2015-01-07 08:15 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\Dism
2015-01-07 08:15 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
2015-01-07 08:15 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\AppCompat
2015-01-06 21:36 - 2013-12-18 11:26 - 01591896 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2015-01-01 16:03 - 2013-12-18 11:12 - 00000000 ____D () C:\Windows\Panther
2015-01-01 16:03 - 2009-07-14 05:45 - 00000000 ____D () C:\Windows\Setup
2015-01-01 16:02 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\Help
2015-01-01 16:01 - 2009-07-14 06:32 - 00000000 ____D () C:\Windows\system32\restore
2015-01-01 16:01 - 2009-07-14 04:20 - 00000000 __RHD () C:\Users\Default
2015-01-01 16:01 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\Recovery
2015-01-01 16:01 - 2009-07-14 04:20 - 00000000 ____D () C:\Program Files\Windows NT
2015-01-01 15:49 - 2013-12-18 11:14 - 00003652 _____ () C:\Windows\TSSysprep.log
2015-01-01 15:49 - 2009-07-14 05:46 - 00003806 _____ () C:\Windows\DtcInstall.log

Some content of TEMP:
====================
C:\Users\Chef\AppData\Local\Temp\avgnt.exe
C:\Users\Chef\AppData\Local\Temp\ose00000.exe
C:\Users\Chef\AppData\Local\Temp\Quarantine.exe
C:\Users\Chef\AppData\Local\Temp\sqlite3.dll
C:\Users\Felix\AppData\Local\Temp\avgnt.exe
C:\Users\Imke\AppData\Local\Temp\avgnt.exe
C:\Users\Leoni\AppData\Local\Temp\avgnt.exe
C:\Users\Marie\AppData\Local\Temp\avgnt.exe
C:\Users\Romy\AppData\Local\Temp\avgnt.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-01-06 19:30

==================== End Of Log ============================

--- --- ---

--- --- ---

--- --- ---

und Addition:

Code:

ATTFilter

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 11-01-2015
Ran by Chef at 2015-01-13 07:47:27
Running from C:\Users\Chef\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Avira Desktop (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AS: Avira Desktop (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Adobe Flash Player 11 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 11.9.900.170 - Adobe Systems Incorporated)
Adobe Flash Player 16 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 16.0.0.235 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.09) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.09 - Adobe Systems Incorporated)
Apple Application Support (HKLM-x32\...\{83CAF0DE-8D3B-4C37-A631-2B8F16EC3031}) (Version: 3.1 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{BDD99690-3541-4619-9D2A-3CDDB3E15F9E}) (Version: 8.0.5.6 - Apple Inc.)
Avira (HKLM-x32\...\{e7c7c227-b742-4878-9425-f09bbf9951db}) (Version: 1.1.27.25527 - Avira Operations & Co. KG)
Avira (x32 Version: 1.1.27.25527 - Avira Operations & Co. KG) Hidden
Avira Free Antivirus (HKLM-x32\...\Avira AntiVir Desktop) (Version: 14.0.7.468 - Avira)
Cliqz (HKLM-x32\...\{5A0C0737-6AFE-4DC6-A8B4-6DFE509ACD75}_is1) (Version: 0.5.53 - Cliqz.com)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Fotogalerie (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
IrfanView (remove only) (HKLM-x32\...\IrfanView) (Version: 4.38 - Irfan Skiljan)
iTunes (HKLM\...\{2ABBBD91-91E5-4AD7-929A-FE15D1DC0576}) (Version: 12.0.1.26 - Apple Inc.)
Junk Mail filter update (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Malwarebytes Anti-Malware Version 2.0.4.1028 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.4.1028 - Malwarebytes Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft Office (HKLM-x32\...\{90150000-0138-0409-0000-0000000FF1CE}) (Version: 15.0.4454.1510 - Microsoft Corporation)
Microsoft Office 2010 Service Pack 1 (SP1) (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{047B0968-E622-4FAA-9B4B-121FA109EDDE}) (Version:  - Microsoft)
Microsoft Office Home and Student 2010 (HKLM-x32\...\Office14.SingleImage) (Version: 14.0.6029.1000 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6E8E85E8-CE4B-4FF5-91F7-04999C9FAE6A}) (Version: 8.0.50727.42 - Microsoft Corporation)
Movie Maker (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Mozilla Firefox 34.0.5 (x86 de) (HKLM-x32\...\Mozilla Firefox 34.0.5 (x86 de)) (Version: 34.0.5 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 31.3.0 - Mozilla)
Mozilla Thunderbird 31.3.0 (x86 de) (HKLM-x32\...\Mozilla Thunderbird 31.3.0 (x86 de)) (Version: 31.3.0 - Mozilla)
NVIDIA 3D Vision Controller-Treiber 344.11 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 344.11 - NVIDIA Corporation)
NVIDIA 3D Vision Treiber 344.11 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 344.11 - NVIDIA Corporation)
NVIDIA GeForce Experience 2.1.2 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.1.2 - NVIDIA Corporation)
NVIDIA Grafiktreiber 344.11 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 344.11 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.32.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.32.1 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.14.0702 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.14.0702 - NVIDIA Corporation)
paint.net (HKLM\...\{19BD2C33-16A8-4ED1-B9EA-D9E35B21EC42}) (Version: 4.0.5 - dotPDN LLC)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7071 - Realtek Semiconductor Corp.)
SHIELD Streaming (Version: 3.1.200 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (Version: 16.13.42 - NVIDIA Corporation) Hidden
Skype™ 7.0 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.0.100 - Skype Technologies S.A.)
VLC media player (HKLM\...\VLC media player) (Version: 2.1.5 - VideoLAN)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3508.0205 - Microsoft Corporation)

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)


==================== Restore Points  =========================

01-01-2015 18:11:11 paint.net v4.0.5
01-01-2015 18:37:12 Windows-Sicherung
01-01-2015 18:57:38 Installed iTunes
01-01-2015 19:02:03 Removed Bonjour
01-01-2015 19:02:47 Removed Apple Software Update
06-01-2015 18:47:12 Windows-Sicherung
06-01-2015 21:27:40 Windows Update
07-01-2015 14:16:47 Windows Update
07-01-2015 17:12:33 Installed Microsoft Office Home and Student 2010
11-01-2015 19:00:04 Windows-Sicherung

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {16076726-EBC5-4144-8EB9-FF3FE3A3F3AF} - System32\Tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask => Sc.exe start osppsvc

==================== Loaded Modules (whitelisted) =============

2015-01-08 08:02 - 2013-02-06 13:39 - 00065024 _____ () C:\Windows\system32\spool\PRTPROCS\x64\ZPP1319P.DLL
2015-01-08 08:00 - 2013-02-06 13:39 - 02360320 _____ () C:\Windows\system32\spool\DRIVERS\x64\3\ZSU1319P.DLL
2015-01-08 08:00 - 2013-02-06 13:39 - 01236992 _____ () C:\Windows\system32\spool\DRIVERS\x64\3\ZGC1319P.dll
2015-01-01 16:02 - 2014-09-13 22:53 - 00116880 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2014-10-11 13:06 - 2014-10-11 13:06 - 00073544 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2014-10-11 13:05 - 2014-10-11 13:05 - 01044776 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2015-01-01 17:21 - 2014-11-26 17:40 - 03758192 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)


==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== EXE Association (whitelisted) =============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


==================== MSCONFIG/TASK MANAGER disabled items =========

(Currently there is no automatic fix for this section.)


========================= Accounts: ==========================

Administrator (S-1-5-21-442338121-1837241503-3693617225-500 - Administrator - Disabled)
Chef (S-1-5-21-442338121-1837241503-3693617225-1001 - Administrator - Enabled) => C:\Users\Chef
Felix (S-1-5-21-442338121-1837241503-3693617225-1000 - Limited - Enabled) => C:\Users\Felix
Gast (S-1-5-21-442338121-1837241503-3693617225-501 - Limited - Enabled)
Imke (S-1-5-21-442338121-1837241503-3693617225-1005 - Limited - Enabled) => C:\Users\Imke
Leoni (S-1-5-21-442338121-1837241503-3693617225-1003 - Limited - Enabled) => C:\Users\Leoni
Marie (S-1-5-21-442338121-1837241503-3693617225-1006 - Limited - Enabled) => C:\Users\Marie
Romy (S-1-5-21-442338121-1837241503-3693617225-1004 - Limited - Enabled) => C:\Users\Romy

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (01/13/2015 01:50:51 AM) (Source: SideBySide) (EventID: 80) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (01/12/2015 11:24:47 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (01/12/2015 11:24:44 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (01/12/2015 11:24:44 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (01/12/2015 11:13:08 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (01/12/2015 11:13:00 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (01/12/2015 04:11:56 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003


System errors:
=============
Error: (01/12/2015 07:04:10 PM) (Source: Service Control Manager) (EventID: 7011) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst lmhosts erreicht.


Microsoft Office Sessions:
=========================
Error: (01/13/2015 01:50:51 AM) (Source: SideBySide) (EventID: 80) (User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Program Files (x86)\ESET\ESET Online Scanner\ESETSmartInstaller.exe

Error: (01/12/2015 11:24:47 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\Chef\Desktop\esetsmartinstaller_deu.exe

Error: (01/12/2015 11:24:44 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\Chef\Desktop\esetsmartinstaller_deu.exe

Error: (01/12/2015 11:24:44 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\Chef\Desktop\esetsmartinstaller_deu.exe

Error: (01/12/2015 11:13:08 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\Chef\Desktop\esetsmartinstaller_deu.exe

Error: (01/12/2015 11:13:00 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\Chef\Downloads\esetsmartinstaller_deu.exe

Error: (01/12/2015 04:11:56 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003


==================== Memory info =========================== 

Processor: Intel(R) Core(TM) i5-4590 CPU @ 3.30GHz
Percentage of memory in use: 14%
Total physical RAM: 8110.01 MB
Available physical RAM: 6951.84 MB
Total Pagefile: 16218.2 MB
Available Pagefile: 14265.67 MB
Total Virtual: 8192 MB
Available Virtual: 8191.83 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:111.79 GB) (Free:55.89 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
Drive d: () (Fixed) (Total:1863.01 GB) (Free:1786.47 GB) NTFS
Drive j: (INTENSO) (Removable) (Total:3.62 GB) (Free:3.62 GB) FAT32
Drive k: (USB-BBZ) (Removable) (Total:1.95 GB) (Free:1.66 GB) FAT
Drive l: (TOSHIBA EXT) (Fixed) (Total:465.76 GB) (Free:457.16 GB) NTFS
Drive m: (TREKSTOR) (Fixed) (Total:465.65 GB) (Free:253.72 GB) FAT32

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 111.8 GB) (Disk ID: 69DDA7F9)
Partition 1: (Active) - (Size=111.8 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 1863 GB) (Disk ID: 69DDA7F1)
Partition 1: (Not Active) - (Size=1863 GB) - (Type=07 NTFS)

========================================================
Disk: 6 (Size: 3.6 GB) (Disk ID: 04DD5721)
Partition 1: (Active) - (Size=3.6 GB) - (Type=0B)

========================================================
Disk: 7 (Size: 2 GB) (Disk ID: 0135D756)
Partition 1: (Active) - (Size=2 GB) - (Type=06)

========================================================
Disk: 8 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: 9C354F87)
Partition 1: (Not Active) - (Size=465.8 GB) - (Type=07 NTFS)

========================================================
Disk: 9 (Size: 465.8 GB) (Disk ID: 0A0231FC)
Partition 1: (Not Active) - (Size=465.8 GB) - (Type=0C)

==================== End Of Log ============================

Bzgl. "Noch Probleme?"
Probleme mit diesem Rechner keine (für meinen XP--Rechner, siehe Vorgeschichte, mache ich ein neues Thema auf), aber Fragen:
1. Was ist mit den Funden aus eset zu tun?
2. Welche Tools sollen wieder entfernt werden und welche nicht. Im Zusammenhang damit: Welche regelmäßige "Hygiene" soll ich meinem Rechner angedeihen lassen? Wie eingangs erwähnt, ist mein Wissen begrenzt und das was man sich als Laie im Laufe der Zeit so zusammenliest ist dann im Ergebnis z.T. widersprüchlich und nicht konsistent.
3. Trennung v. System und Benutzerdaten: Habe ca. 1 Tag im Netz nach einer sinnvollen Methode gesucht und dann meine Benutzerordner (außer "Admin" und "Öffentlich") von C: nach D: verschoben und dann auf C: mit symlink verknüpft (Natürlich nach Anleitung und danach auch Admin per cmd wieder deaktiviert). Grundsätzlich funktioniert's. Frage: Sind Euch Nebenwirkungen bekannt, die ggf. erst später auftreten?

An dieser Stelle schon mal ein großes Zwischenlob: Eure Anleitungen haben einwandfrei funktioniert und die Antwortzeiten waren für mein Verständnis sehr zügig.

Gruß Sanderbörd

schrauber · 13.01.2015, 10:58

Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:

ATTFilter

CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - No Path
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - No Path
Emptytemp:

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).

Starte nun FRST erneut und klicke den Entfernen Button.
Das Tool erstellt eine Fixlog.txt.
Poste mir deren Inhalt.

Zitat:

1. Was ist mit den Funden aus eset zu tun?

Nix, sind nur Temps, machen wir mit obigem Fix. Und estwas in deinem Backup. backup löschen.

Zitat:

3. Trennung v. System und Benutzerdaten: Habe ca. 1 Tag im Netz nach einer sinnvollen Methode gesucht und dann meine Benutzerordner (außer "Admin" und "Öffentlich") von C: nach D: verschoben und dann auf C: mit symlink verknüpft (Natürlich nach Anleitung und danach auch Admin per cmd wieder deaktiviert). Grundsätzlich funktioniert's. Frage: Sind Euch Nebenwirkungen bekannt, die ggf. erst später auftreten?

Ich kenne keine

für den XP einfach mal ne Fehlerbeschreibung und FRST Logs posten, brauchst keinen neuen Thread aufmachen.

Für diesen Rechner:

Fertig

Die Reihenfolge ist hier entscheidend.

Falls Defogger benutzt wurde: Defogger nochmal starten und auf re-enable klicken.
Falls Combofix benutzt wurde: (Alternativ in uninstall.exe umbenennen und starten)
- Windowstaste + R > Combofix /Uninstall (eingeben) > OK
- Alternative: Combofix.exe in uninstall.exe umbenennen und starten
- Combofix wird jetzt starten, sich evtl updaten und dann alle Reste von sich selbst entfernen.
Downloade Dir bitte auf jeden Fall DelFix auf deinen Desktop:
- Schließe alle offenen Programme.
- Starte die delfix.exe mit einem Doppelklick.
- Setze vor jede Funktion ein Häkchen.
- Klicke auf Start.
- Hinweis: DelFix entfernt u. a. alle verwendeten Programme, die Quarantäne unserer Scanner, den Java-Cache und löscht sich abschließend selbst.
- Starte deinen Rechner abschließend neu.
Sollten jetzt noch Programme aus unserer Bereinigung übrig sein kannst du sie bedenkenlos löschen.

Falls Du Lob oder Kritik abgeben möchtest kannst Du das hier tun

Hier noch ein paar Tipps zur Absicherung deines Systems.

Ich kann garnicht zu oft erwähnen, wie wichtig es ist, dass dein System Up to Date ist.

Bitte überprüfe ob dein System Windows Updates automatisch herunter lädt
Windows Updates
- Windows XP: Start --> Systemsteuerung --> Doppelklick auf Automatische Updates
- Windows Vista / 7: Start --> Systemsteuerung --> System und Sicherheit --> Automatische Updates aktivieren oder deaktivieren
Gehe sicher das die automatischen Updates aktiviert sind.
Software Updates
Installierte Software kann ebenfalls Sicherheitslücken haben, welche Malware nutzen kann, um dein System zu infizieren.
Um deine Installierte Software up to date zu halten, empfehle ich dir Secunia Online Software.

Anti- Viren Software

Gehe sicher immer eine Anti Viren Software installiert zu haben und das diese auch up to date ist. Es ist nämlich nutzlos wenn diese out of date sind.

Zusätzlicher Schutz

MalwareBytes Anti Malware
Dies ist eines der besten Anti-Malware Tools auf dem Markt. Es ist ein On- Demond Scan Tool welches viele aktuelle Malware erkennt und auch entfernt.
Update das Tool und lass es einmal in der Woche laufen. Die Kaufversion biete zudem noch einen Hintergrundwächter.
Ein Tutorial zur Verwendung findest Du hier.
WinPatrol
Diese Software macht einen Snapshot deines Systems und warnt dich vor eventuellen Änderungen. Downloade dir die Freeware Version von hier.

Sicheres Browsen

SpywareBlaster
Eine kurze Einführung findest du Hier
MVPs hosts file
Ein Tutorial findest Du hier. Leider habe ich bis jetzt kein deutschsprachiges gefunden.
WOT (Web of trust)
Dieses AddOn warnt Dich bevor Du eine als schädlich gemeldete Seite besuchst.

Alternative Browser

Andere Browser tendieren zu etwas mehr Sicherheit als der IE, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden.

Opera
Mozilla Firefox.
- Hinweis: Für diesen Browser habe ich hier ein paar nützliche Add Ons
- NoScript
  Dieses AddOn blockt JavaScript, Java and Flash und andere Plugins. Sie werden nur dann ausgeführt wenn Du es bestätigst.
- AdblockPlus
  Dieses AddOn blockt die meisten Werbung von selbst. Ein Rechtsklick auf den Banner um diesen zu AdBlockPlus hinzu zu fügen reicht und dieser wird nicht mehr geladen.
  Es spart ausserdem Downloadkapazität.

Performance
Bereinige regelmäßig deine Temp Files. Ich empfehle hierzu TFC
Halte dich fern von jedlichen Registry Cleanern.
Diese Schaden deinem System mehr als sie helfen. Hier ein paar ( englishe ) Links
Miekemoes Blogspot ( MVP )
Bill Castner ( MVP )

Don'ts

Klicke nicht auf alles nur weil es Dich dazu auffordert und schön bunt ist.
verwende keine peer to peer oder Filesharing Software (Emule, uTorrent,..)
Lass die Finger von Cracks, Keygens, Serials oder anderer illegaler Software.
Öffne keine Anhänge von Dir nicht bekannten Emails. Achte vor allem auf die Dateiendung wie zb deinFoto.jpg.exe

Nun bleibt mir nur noch dir viel Spass beim sicheren Surfen zu wünschen.

Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so das ich diesen Thread aus meinen Abos löschen kann.

Sanderbörd · 13.01.2015, 23:01

Hallo Schrauber,
danke für die ausführliche Rü..

Hier der Fixlog:

Code:

ATTFilter

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 11-01-2015
Ran by Chef at 2015-01-13 22:38:20 Run:1
Running from C:\Users\Chef\Desktop
Loaded Profiles: Felix & Chef (Available profiles: Felix & Chef & Leoni & Romy & Imke & Marie)
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - No Path
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - No Path
Emptytemp:
*****************

"HKLM\SOFTWARE\Google\Chrome\Extensions\flliilndjeohchalpbbcdekjklbdgfkk" => Key deleted successfully.
"HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\flliilndjeohchalpbbcdekjklbdgfkk" => Key deleted successfully.
EmptyTemp: => Removed 281.8 MB temporary data.


The system needed a reboot. 

==== End of Fixlog 22:38:38 ====

Falls beim Rest der Putzaktion noch Fragen sein sollten, melde ich mich nochmal.
Den Frst vom XP-Rechner schiebe ich dann wie's zeitlich paßt hinterher.

Besten Dank!
Sanderbörd

schrauber · 14.01.2015, 08:24

ok

Sanderbörd · 14.01.2015, 20:48

Ab hier geht's weiter mit dem alten XP-Rechner.
Anm.: Hab den Rechner noch offline und zieh mir die logs über USB-Stick (Der hing beim scan mit dran).

Frst:

FRST Logfile:

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 11-01-2015
Ran by Chef (administrator) on ALBERS2 on 14-01-2015 20:14:27
Running from C:\Dokumente und Einstellungen\Chef\Desktop
Loaded Profile: Chef (Available profiles: Felix & Kinder & Romy & Gaby & Chef & Gast)
Platform: Microsoft Windows XP Home Edition Service Pack 3 (X86) OS Language: Deutsch (Deutschland)
Internet Explorer Version 6 (Default browser: Opera)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(ATI Technologies Inc.) C:\WINDOWS\system32\ati2evxx.exe
(Avira Operations GmbH & Co. KG) C:\Programme\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Programme\Avira\AntiVir Desktop\avguard.exe
(Apple Inc.) C:\Programme\Gemeinsame Dateien\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Programme\Bonjour\mDNSResponder.exe
(Garmin Ltd or its subsidiaries) C:\Programme\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe
(Marvell) C:\Programme\HP\HP LaserJet M1319 MFP Series\ReceiveFaxUtility.exe
(Oracle Corporation) C:\Programme\Java\jre7\bin\jqs.exe
(Microsoft Corporation) C:\Programme\Gemeinsame Dateien\Microsoft Shared\VS7DEBUG\MDM.EXE
(Microsoft Corporation) C:\Programme\Microsoft SQL Server\MSSQL$PINNACLESYS\Binn\sqlservr.exe
( ) C:\WINDOWS\system32\slserv.exe
(TeamViewer GmbH) C:\Programme\TeamViewer\Version8\TeamViewer_Service.exe
(Avira Operations GmbH & Co. KG) C:\Programme\Avira\My Avira\Avira.OE.ServiceHost.exe
(Pinnacle Systems) C:\Programme\Pinnacle\Shared Files\Programs\MediaServer\PMSHost.exe
(Avira Operations GmbH & Co. KG) C:\Programme\Avira\AntiVir Desktop\avshadow.exe
(ATI Technologies Inc.) C:\WINDOWS\system32\ati2evxx.exe
(Realtek Semiconductor Corp.) C:\WINDOWS\SOUNDMAN.EXE
(RealTek Semicoductor Corp.) C:\WINDOWS\ALCWZRD.EXE
(Realtek Semiconductor Corp.) C:\WINDOWS\ALCMTR.EXE
(ATI Technologies, Inc.) C:\ATI-CPanel\atiptaxx.exe
(Pinnacle Systems) C:\Programme\Pinnacle\Shared Files\Programs\Remote\remoterm.exe
(Lexmark International, Inc.) C:\Programme\Lexmark 5200 Series\lxbtbmgr.exe
(Lexmark International, Inc.) C:\Programme\Lexmark 5200 Series\lxbtbmon.exe
(FotoNation Inc.) C:\Programme\Gemeinsame Dateien\FotoNation\EvLstnr.exe
(Spigot, Inc.) C:\Programme\pdfforge Toolbar\SearchSettings.exe
(Apple Inc.) C:\Programme\QuickTime\QTTask.exe
(Adobe Systems Incorporated) C:\Programme\Gemeinsame Dateien\Adobe\ARM\1.0\AdobeARM.exe
(SONIX) C:\WINDOWS\FixCamera.exe
(Sonix) C:\WINDOWS\vsnp2uvc.exe
() C:\WINDOWS\tsnp2uvc.exe
(Avira Operations GmbH & Co. KG) C:\Programme\Avira\AntiVir Desktop\avgnt.exe
(Oracle Corporation) C:\Programme\Gemeinsame Dateien\Java\Java Update\jusched.exe
(Apple Inc.) C:\Programme\iTunes\iTunesHelper.exe
(Sony Corporation) C:\Programme\Sony\ReaderDesktop\appHelper\ReaderAppHelper.exe
(Geek Software GmbH) C:\Programme\PDF24\pdf24.exe
(Apple Inc.) C:\Programme\iPod\bin\iPodService.exe
(LionSea) C:\Programme\DriverTuner\DriverTuner.exe
(Avira Operations GmbH & Co. KG) C:\Programme\Avira\My Avira\Avira.OE.Systray.exe
(Garmin Ltd or its subsidiaries) C:\Programme\Garmin\Express Tray\ExpressTray.exe
(Microsoft Corporation) C:\Programme\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [Verknüpfung mit der High Definition Audio-Eigenschaftenseite] => C:\WINDOWS\system32\HDAudPropShortcut.exe [61952 2004-03-17] (Windows (R) Server 2003 DDK provider)
HKLM\...\Run: [SoundMan] => C:\WINDOWS\SOUNDMAN.EXE [77824 2004-10-21] (Realtek Semiconductor Corp.)
HKLM\...\Run: [AlcWzrd] => C:\WINDOWS\ALCWZRD.EXE [2744832 2004-10-21] (RealTek Semicoductor Corp.)
HKLM\...\Run: [Alcmtr] => C:\WINDOWS\ALCMTR.EXE [57344 2004-10-13] (Realtek Semiconductor Corp.)
HKLM\...\Run: [ATIPTA] => C:\ATI-CPanel\atiptaxx.exe [344064 2004-09-29] (ATI Technologies, Inc.)
HKLM\...\Run: [NeroFilterCheck] => C:\WINDOWS\system32\NeroCheck.exe [155648 2001-07-09] (Ahead Software Gmbh)
HKLM\...\Run: [PMCS] => C:\Programme\Pinnacle\Shared Files\Programs\MediaCenterService\PMC.Service.Main.exe [24576 2004-09-29] (Pinnacle Systems)
HKLM\...\Run: [PinnacleDriverCheck] => C:\WINDOWS\system32\PSDrvCheck.exe [406016 2003-11-10] ()
HKLM\...\Run: [PMCRemote] => C:\Programme\Pinnacle\Shared Files\Programs\Remote\Remoterm.exe [73728 2004-09-23] (Pinnacle Systems)
HKLM\...\Run: [Lexmark 5200 series] => C:\Programme\Lexmark 5200 series\lxbtbmgr.exe [57344 2004-06-04] (Lexmark International, Inc.)
HKLM\...\Run: [FaxCenterServer] => C:\Programme\Lexmark Fax Solutions\fm3032.exe [294912 2004-03-23] ()
HKLM\...\Run: [EVENTLISTENER] => C:\Programme\Gemeinsame Dateien\FotoNation\EvLstnr.exe [53248 2000-06-20] (FotoNation Inc.)
HKLM\...\Run: [SearchSettings] => C:\Programme\pdfforge Toolbar\SearchSettings.exe [1024512 2009-07-29] (Spigot, Inc.)
HKLM\...\Run: [QuickTime Task] => C:\Programme\QuickTime\QTTask.exe [421888 2010-11-29] (Apple Inc.)
HKLM\...\Run: [LXBTCATS] => rundll32 C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\LXBTtime.dll,_RunDLLEntry@16
HKLM\...\Run: [Adobe ARM] => C:\Programme\Gemeinsame Dateien\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM\...\Run: [FixCamera] => C:\WINDOWS\FixCamera.exe [188928 2008-08-21] (SONIX)
HKLM\...\Run: [snp2uvc] => C:\WINDOWS\vsnp2uvc.exe [675840 2008-08-01] (Sonix)
HKLM\...\Run: [tsnp2uvc] => C:\WINDOWS\tsnp2uvc.exe [320512 2009-12-11] ()
HKLM\...\Run: [KeePass 2 PreLoad] => C:\Programme\KeePass Password Safe 2\KeePass.exe [1764352 2011-07-12] (Dominik Reichl)
HKLM\...\Run: [avgnt] => C:\Programme\Avira\AntiVir Desktop\avgnt.exe [702768 2014-12-18] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [] => [X]
HKLM\...\Run: [SunJavaUpdateSched] => C:\Programme\Gemeinsame Dateien\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation)
HKLM\...\Run: [APSDaemon] => C:\Programme\Gemeinsame Dateien\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM\...\Run: [iTunesHelper] => C:\Programme\iTunes\iTunesHelper.exe [152392 2013-08-16] (Apple Inc.)
HKLM\...\Run: [Reader Application Helper] => C:\Programme\Sony\ReaderDesktop\appHelper\ReaderAppHelper.exe [899400 2013-06-25] (Sony Corporation)
HKLM\...\Run: [PDFPrint] => C:\Programme\PDF24\pdf24.exe [191528 2014-07-04] (Geek Software GmbH)
HKLM\...\Run: [DriverTuner] => C:\Programme\DriverTuner\DriverTuner.exe [10632504 2014-06-03] (LionSea)
HKLM\...\Run: [Avira Systray] => C:\Programme\Avira\My Avira\Avira.OE.Systray.exe [126200 2014-11-20] (Avira Operations GmbH & Co. KG)
Winlogon\Notify\AtiExtEvent: C:\WINDOWS\system32\Ati2evxx.dll (ATI Technologies Inc.)
HKU\S-1-5-21-2627930752-4006264225-1260829912-1011\...\Run: [GarminExpressTrayApp] => C:\Programme\Garmin\Express Tray\ExpressTray.exe [1093464 2013-07-09] (Garmin Ltd or its subsidiaries)
HKU\S-1-5-18\...\Policies\Explorer: [CDRAutoRun] 0
Startup: C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\Microsoft Office.lnk
ShortcutTarget: Microsoft Office.lnk -> C:\Programme\Microsoft Office\Office\OSA9.EXE (Microsoft Corporation)
Startup: C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\p6_19_erinnerung.lnk
ShortcutTarget: p6_19_erinnerung.lnk -> C:\Programme\phase6\phase6_19\WinStart\p6erinnerung.exe (phase6)
Startup: C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\Service Manager.lnk
ShortcutTarget: Service Manager.lnk -> C:\Programme\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe (Microsoft Corporation)
Startup: C:\Dokumente und Einstellungen\Felix\Startmenü\Programme\Autostart\PRINTKEY2000.EXE (Fred's Software)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd={SUB_PRD}&clcid={SUB_CLSID}&pver={SUB_PVER}&ar=home
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://toolbar.ask.com/toolbarv/askRedirect?o=13165&gct=&gc=1&q=
HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
HKU\S-1-5-21-2627930752-4006264225-1260829912-1011\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
HKU\S-1-5-21-2627930752-4006264225-1260829912-1011\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
URLSearchHook: HKU\S-1-5-21-2627930752-4006264225-1260829912-1011 - Microsoft Url Sucheingriff - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} - C:\WINDOWS\system32\shdocvw.dll (Microsoft Corporation)
URLSearchHook: HKU\S-1-5-21-2627930752-4006264225-1260829912-1011 - (No Name) - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - C:\Programme\pdfforge Toolbar\SearchSettings.dll (Spigot, Inc.)
HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs,Tabs: "https://isearch.avg.com/tab?cid={19E78611-FC58-4219-A8BE-7F5A905A3F7F}&mid=1641c162318647d0a38bd1589ef8451f-891fe622c8f554069bdcbd4028370be4bed45561&lang=de&ds=AVG&pr=fr&d=2012-09-15 23:46:47&v=12.2.5.4&sap=nt" <======= ATTENTION
SearchScopes: HKLM -> DefaultScope value is missing.
SearchScopes: HKU\S-1-5-21-2627930752-4006264225-1260829912-1011 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-2627930752-4006264225-1260829912-1011 -> {AFDBDDAA-5D3F-42EE-B79C-185A7020515B} URL = 
BHO: XTTBPos00 Class -> {055FD26D-3A88-4e15-963D-DC8493744B1D} -> C:\Programme\ICQToolbar\toolbaru.dll (IE Toolbar)
BHO: Conduit Engine  -> {30F9B915-B755-4826-820B-08FBA6BD249D} -> C:\Programme\ConduitEngine\prxConduitEngine.dll (Conduit Ltd.)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Programme\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Skype Browser Helper -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Programme\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
BHO: pdfforge Toolbar -> {B922D405-6D13-4A2B-AE89-08A030DA4402} -> C:\Programme\pdfforge Toolbar\pdfforgeToolbarIE.dll (Spigot, Inc.)
BHO: ST-de3 Toolbar -> {cc05a3e3-64c3-4af2-bfc1-af0d66b69065} -> C:\Programme\softonic-de3\prxtbsof1.dll (Conduit Ltd.)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Programme\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO: No Name -> {E312764E-7706-43F1-8DAB-FCDD2B1E416D} -> C:\Programme\pdfforge Toolbar\SearchSettings.dll (Spigot, Inc.)
Toolbar: HKLM - pdfforge Toolbar - {B922D405-6D13-4A2B-AE89-08A030DA4402} - C:\Programme\pdfforge Toolbar\pdfforgeToolbarIE.dll (Spigot, Inc.)
Toolbar: HKLM - ST-de3 Toolbar - {cc05a3e3-64c3-4af2-bfc1-af0d66b69065} - C:\Programme\softonic-de3\prxtbsof1.dll (Conduit Ltd.)
Toolbar: HKLM - Conduit Engine  - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Programme\ConduitEngine\prxConduitEngine.dll (Conduit Ltd.)
Toolbar: HKU\S-1-5-21-2627930752-4006264225-1260829912-1011 -> ST-de3 Toolbar - {CC05A3E3-64C3-4AF2-BFC1-AF0D66B69065} - C:\Programme\softonic-de3\prxtbsof1.dll (Conduit Ltd.)
DPF: {166B1BCA-3F9C-11CF-8075-444553540000} hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
Handler: http\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler: http\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler: https\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler: https\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler: ipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - c:\Programme\Gemeinsame Dateien\Microsoft Shared\Information Retrieval\msitss.dll (Microsoft Corporation)
Handler: msdaipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler: msdaipp\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Programme\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
Winsock: Catalog5 04 C:\Programme\Bonjour\mdnsNSP.dll [121704] (Apple Inc.)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt

FireFox:
========
FF ProfilePath: C:\Dokumente und Einstellungen\Chef\Anwendungsdaten\Mozilla\Firefox\Profiles\xfmnamqy.default
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF32_14_0_0_145.dll ()
FF Plugin: @adobe.com/ShockwavePlayer -> C:\WINDOWS\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
FF Plugin: @Apple.com/iTunes,version=1.0 -> C:\Programme\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin: @java.com/DTPlugin,version=10.25.2 -> C:\WINDOWS\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.25.2 -> C:\Programme\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/WPF,version=3.5 -> c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF Plugin: @sony.com/ReaderDesktop -> C:\Programme\Sony\ReaderDesktop\npreaderdetectmoz.dll (Sony Corporation)
FF Plugin: @videolan.org/vlc,version=2.0.2 -> C:\Programme\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: Adobe Reader -> C:\Programme\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Extension: Garmin Communicator - C:\Dokumente und Einstellungen\Chef\Anwendungsdaten\Mozilla\Firefox\Profiles\xfmnamqy.default\Extensions\{195A3098-0BD5-4e90-AE22-BA1C540AFD1E} [2014-02-27]
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
FF Extension: Microsoft .NET Framework Assistant - c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension [2009-10-12]
FF Extension: No Name - C:\Programme\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} [Not Found]

Chrome: 
=======
CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - No Path

========================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AntiVirSchedulerService; C:\Programme\Avira\AntiVir Desktop\sched.exe [431920 2014-12-18] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Programme\Avira\AntiVir Desktop\avguard.exe [431920 2014-12-18] (Avira Operations GmbH & Co. KG)
R2 Apple Mobile Device; C:\Programme\Gemeinsame Dateien\Apple\Mobile Device Support\AppleMobileDeviceService.exe [57008 2012-12-21] (Apple Inc.)
R2 Avira.OE.ServiceHost; C:\Programme\Avira\My Avira\Avira.OE.ServiceHost.exe [166192 2014-11-20] (Avira Operations GmbH & Co. KG)
R2 Bonjour Service; C:\Programme\Bonjour\mDNSResponder.exe [390504 2011-08-30] (Apple Inc.)
R2 EpgSpooler; c:\Programme\Pinnacle\MediaCenter\EpgSpoolerSrv.exe [20480 2004-09-30] ( ) [File not signed]
R2 Garmin Core Update Service; C:\Programme\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe [219480 2013-07-09] (Garmin Ltd or its subsidiaries)
R2 HPM1319RcvFaxSrvc; C:\Programme\HP\HP LaserJet M1319 MFP Series\ReceiveFaxUtility.exe [348160 2010-07-05] (Marvell) [File not signed]
S3 IDriverT; C:\Programme\Gemeinsame Dateien\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-03] (Macrovision Corporation) [File not signed]
R3 iPod Service; C:\Programme\iPod\bin\iPodService.exe [553288 2013-08-16] (Apple Inc.)
R2 JavaQuickStarterService; C:\Programme\Java\jre7\bin\jqs.exe [182184 2013-07-17] (Oracle Corporation)
S3 lxbt_device; C:\WINDOWS\system32\lxbtcoms.exe [421888 2004-02-20] (Lexmark International, Inc.)
R2 MDM; C:\Programme\Gemeinsame Dateien\Microsoft Shared\VS7DEBUG\MDM.EXE [322120 2003-06-19] (Microsoft Corporation)
S3 MozillaMaintenance; C:\Programme\Mozilla Maintenance Service\maintenanceservice.exe [115608 2014-02-27] (Mozilla Foundation)
R2 MSSQL$PINNACLESYS; C:\Programme\Microsoft SQL Server\MSSQL$PINNACLESYS\Binn\sqlservr.exe [7520337 2002-12-17] (Microsoft Corporation) [File not signed]
S3 MSSQLServerADHelper; C:\Programme\Microsoft SQL Server\80\Tools\Binn\sqladhlp.exe [66112 2002-12-17] (Microsoft Corporation) [File not signed]
R2 PinnacleSys.MediaServer; c:\programme\pinnacle\shared files\programs\mediaserver\pmshost.exe [45056 2004-07-22] (Pinnacle Systems) [File not signed]
S2 SkypeUpdate; C:\Programme\Skype\Updater\Updater.exe [315008 2014-04-03] (Skype Technologies)
R2 SLService; C:\WINDOWS\system32\slserv.exe [45056 2003-07-02] ( )
S3 Software Jukebox v2.0 Service; C:\Programme\Gemeinsame Dateien\MSJB DE01FSC Shared\Service\Software Jukebox v2.0 Service File.exe [68096 2004-12-21] () [File not signed]
S3 Sony SCSI Helper Service; C:\Programme\Gemeinsame Dateien\Sony Shared\Fsk\SonySCSIHelperService.exe [73728 2013-05-23] (Sony Corporation) [File not signed]
S3 SQLAgent$PINNACLESYS; C:\Programme\Microsoft SQL Server\MSSQL$PINNACLESYS\Binn\sqlagent.EXE [311872 2002-12-17] (Microsoft Corporation) [File not signed]
R2 TeamViewer8; C:\Programme\TeamViewer\Version8\TeamViewer_Service.exe [4308320 2013-08-07] (TeamViewer GmbH)
S3 WMPNetworkSvc; C:\Programme\Windows Media Player\WMPNetwk.exe [920576 2006-11-03] (Microsoft Corporation)
S3 COMSysApp; C:\WINDOWS\system32\dllhost.exe /Processid:{02D4B3F1-FD88-11D1-960D-00805FC79235}
S3 SwPrv; C:\WINDOWS\system32\dllhost.exe /Processid:{9EBF84DB-73F1-4B99-BD60-D507F637E85F}

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R3 3xHybrid; C:\WINDOWS\System32\DRIVERS\3xHybrid.sys [698368 2004-09-03] (Philips Semiconductors GmbH)
S3 61883; C:\WINDOWS\System32\DRIVERS\61883.sys [48128 2008-04-13] (Microsoft Corporation)
R2 acedrv10; C:\WINDOWS\system32\drivers\acedrv10.sys [330144 2007-07-27] (Protect Software GmbH)
R2 acehlp10; C:\WINDOWS\system32\drivers\acehlp10.sys [251680 2007-07-27] (Protect Software GmbH)
R3 ASAPIW2k; C:\WINDOWS\System32\drivers\ASAPIW2k.sys [11264 2003-11-28] (Pinnacle Systems GmbH) [File not signed]
R2 avgntflt; C:\WINDOWS\System32\DRIVERS\avgntflt.sys [98160 2014-10-09] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\WINDOWS\System32\DRIVERS\avipbb.sys [136216 2014-10-09] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\WINDOWS\System32\DRIVERS\avkmgr.sys [37352 2013-10-07] (Avira Operations GmbH & Co. KG)
S3 CCDECODE; C:\WINDOWS\System32\DRIVERS\CCDECODE.sys [17024 2008-04-13] (Microsoft Corporation)
S3 grmnusb; C:\WINDOWS\System32\drivers\grmnusb.sys [15720 2012-04-18] (GARMIN Corp.)
S3 HdAudAddService; C:\WINDOWS\System32\drivers\HdAudio.sys [113664 2004-03-17] (Windows (R) Server 2003 DDK provider)
S3 HP1319EWS; C:\WINDOWS\System32\Drivers\HP1319EWS.sys [12800 2008-11-10] (Marvell Semiconductor, Inc.)
S3 HP1319FAX; C:\WINDOWS\System32\Drivers\HP1319FAX.sys [13824 2008-11-10] (Marvell Semiconductor, Inc.)
S3 MPE; C:\WINDOWS\System32\DRIVERS\MPE.sys [15232 2008-04-13] (Microsoft Corporation)
R3 Mtlmnt5; C:\WINDOWS\System32\DRIVERS\Mtlmnt5.sys [221736 2003-07-16] ( )
S3 Mtlstrm; C:\WINDOWS\System32\DRIVERS\Mtlstrm.sys [1301128 2003-07-02] ( )
S3 NdisIP; C:\WINDOWS\System32\DRIVERS\NdisIP.sys [10880 2008-04-13] (Microsoft Corporation)
S3 NtMtlFax; C:\WINDOWS\System32\DRIVERS\NtMtlFax.sys [167384 2003-07-02] ( )
S0 RecAgent; C:\WINDOWS\System32\DRIVERS\RecAgent.sys [13776 2004-08-03] (Smart Link)
S3 RTL8023xp; C:\WINDOWS\System32\DRIVERS\Rtlnicxp.sys [71168 2004-10-15] (Realtek Semiconductor Corporation                           ) [File not signed]
R3 rtl8139; C:\WINDOWS\System32\DRIVERS\RTL8139.SYS [20992 2004-08-03] (Realtek Semiconductor Corporation)
S3 SIVDRIVER; C:\WINDOWS\system32\Drivers\SIVX32.sys [48480 2008-02-11] (Ray Hinchliffe)
R3 Slntamr; C:\WINDOWS\System32\DRIVERS\slntamr.sys [548952 2003-08-20] ( )
S3 SlNtHal; C:\WINDOWS\System32\DRIVERS\Slnthal.sys [86128 2003-07-02] ( )
R3 SlWdmSup; C:\WINDOWS\System32\DRIVERS\SlWdmSup.sys [39348 2003-07-02] (Vireo Software)
S3 SNP2UVC; C:\WINDOWS\System32\DRIVERS\snp2uvc.sys [3482240 2009-12-18] () [File not signed]
R1 ssmdrv; C:\WINDOWS\System32\DRIVERS\ssmdrv.sys [28520 2012-08-27] (Avira GmbH)
S4 Edprvir; No ImagePath
U5 ScsiPort; C:\WINDOWS\system32\drivers\scsiport.sys [96384 2008-04-13] (Microsoft Corporation)
U1 WS2IFSL; No ImagePath

==================== NetSvcs (Whitelisted) ===================


(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-01-14 20:14 - 2015-01-14 20:14 - 00022092 _____ () C:\Dokumente und Einstellungen\Chef\Desktop\FRST.txt
2015-01-14 20:14 - 2015-01-14 20:14 - 00000000 ____D () C:\FRST
2015-01-14 20:10 - 2015-01-11 16:41 - 01115648 _____ (Farbar) C:\Dokumente und Einstellungen\Chef\Desktop\FRST.exe
2015-01-09 07:15 - 2015-01-09 07:15 - 00004608 _____ () C:\Dokumente und Einstellungen\Chef\Lokale Einstellungen\Anwendungsdaten\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2015-01-08 23:25 - 2015-01-08 23:25 - 00000000 ___SD () C:\Dokumente und Einstellungen\Chef\UserData
2015-01-08 20:17 - 2015-01-09 07:17 - 00000501 _____ () C:\WINDOWS\nsw.log
2015-01-04 13:25 - 2015-01-04 14:28 - 00000000 ____D () C:\Dokumente und Einstellungen\Felix\Eigene Dateien\Textilankauf
2015-01-02 14:18 - 2015-01-02 20:41 - 00000000 ____D () C:\Dokumente und Einstellungen\Felix\Eigene Dateien\Momox
2014-12-30 11:58 - 2015-01-07 18:22 - 00171008 _____ () C:\Dokumente und Einstellungen\Felix\Desktop\2014-12-30_Kabelbw.xls
2014-12-19 16:56 - 2014-12-19 16:56 - 00000000 ____D () C:\Dokumente und Einstellungen\Chef\Lokale Einstellungen\Anwendungsdaten\DriverTuner

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-01-14 20:14 - 2012-09-16 13:39 - 00000000 ____D () C:\Dokumente und Einstellungen\Chef\Lokale Einstellungen\Temp
2015-01-14 20:08 - 2012-09-08 22:38 - 01278753 _____ () C:\WINDOWS\setupapi.log
2015-01-14 20:05 - 2014-10-15 18:11 - 00000414 _____ () C:\WINDOWS\Tasks\Opera scheduled Autoupdate 1413393108.job
2015-01-14 20:05 - 2014-07-13 16:36 - 00000220 _____ () C:\WINDOWS\Tasks\Ende des Supports für Microsoft Windows XP –  Benachrichtigung – Anmeldung.job
2015-01-14 20:05 - 2009-10-12 09:01 - 00000000 ____D () C:\Programme\Opera
2015-01-14 20:05 - 2004-12-21 18:57 - 00295018 _____ () C:\checkrun.txt
2015-01-14 20:01 - 2004-12-21 18:11 - 01779578 _____ () C:\WINDOWS\WindowsUpdate.log
2015-01-14 20:00 - 2004-12-21 18:15 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT
2015-01-14 20:00 - 2004-12-21 18:09 - 00000159 _____ () C:\WINDOWS\wiadebug.log
2015-01-14 20:00 - 2004-12-21 18:09 - 00000050 _____ () C:\WINDOWS\wiaservc.log
2015-01-14 20:00 - 2004-10-28 17:23 - 00001158 _____ () C:\WINDOWS\system32\wpa.dbl
2015-01-11 22:50 - 2013-07-20 22:24 - 01117038 _____ () C:\Dokumente und Einstellungen\LocalService\Lokale Einstellungen\Anwendungsdaten\WPFFontCache_v0400-S-1-5-21-2627930752-4006264225-1260829912-1011-0.dat
2015-01-11 22:50 - 2012-08-17 02:46 - 00636574 _____ () C:\Dokumente und Einstellungen\LocalService\Lokale Einstellungen\Anwendungsdaten\WPFFontCache_v0400-S-1-5-21-2627930752-4006264225-1260829912-1007-0.dat
2015-01-11 22:50 - 2012-08-17 02:45 - 00319622 _____ () C:\Dokumente und Einstellungen\LocalService\Lokale Einstellungen\Anwendungsdaten\WPFFontCache_v0400-System.dat
2015-01-11 22:50 - 2005-01-22 23:17 - 00000300 ___SH () C:\Dokumente und Einstellungen\Felix\ntuser.ini
2015-01-11 22:50 - 2005-01-22 23:17 - 00000000 ____D () C:\Dokumente und Einstellungen\Felix
2015-01-11 22:50 - 2004-12-21 18:15 - 00032614 _____ () C:\WINDOWS\SchedLgU.Txt
2015-01-11 22:49 - 2011-07-21 21:12 - 00000000 ____D () C:\Dokumente und Einstellungen\Felix\Anwendungsdaten\KeePass
2015-01-11 20:47 - 2012-12-17 17:27 - 00001018 _____ () C:\WINDOWS\Tasks\FacebookUpdateTaskUserS-1-5-21-2627930752-4006264225-1260829912-1007UA.job
2015-01-11 18:44 - 2005-01-22 23:17 - 00000000 ____D () C:\Dokumente und Einstellungen\Felix\Lokale Einstellungen\Temp
2015-01-11 18:43 - 2011-01-31 05:31 - 00000000 ____D () C:\Dokumente und Einstellungen\Felix\Anwendungsdaten\PriceGong
2015-01-11 16:43 - 2013-08-09 15:41 - 00000664 _____ () C:\Dokumente und Einstellungen\Felix\Lokale Einstellungen\Anwendungsdaten\d3d9caps.tmp
2015-01-11 14:58 - 2012-09-16 13:39 - 00000190 ___SH () C:\Dokumente und Einstellungen\Chef\ntuser.ini
2015-01-11 14:58 - 2012-09-16 13:39 - 00000000 ____D () C:\Dokumente und Einstellungen\Chef
2015-01-11 14:47 - 2012-12-17 17:27 - 00000996 _____ () C:\WINDOWS\Tasks\FacebookUpdateTaskUserS-1-5-21-2627930752-4006264225-1260829912-1007Core.job
2015-01-10 09:39 - 2010-03-19 21:26 - 00000000 ____D () C:\Dokumente und Einstellungen\Felix\Anwendungsdaten\vlc
2015-01-09 20:20 - 2013-08-11 16:42 - 00002229 _____ () C:\Dokumente und Einstellungen\Felix\Desktop\SyncToy 2.1.lnk
2015-01-09 20:18 - 2013-08-11 16:41 - 00002229 _____ () C:\Dokumente und Einstellungen\Chef\Desktop\SyncToy 2.1.lnk
2015-01-09 18:56 - 2013-07-20 18:29 - 00000664 _____ () C:\WINDOWS\system32\d3d9caps.dat
2015-01-09 18:41 - 2012-09-12 21:12 - 00498462 _____ () C:\WINDOWS\FaxSetup.log
2015-01-09 18:41 - 2012-09-12 21:12 - 00247855 _____ () C:\WINDOWS\ocgen.log
2015-01-09 18:41 - 2012-09-12 21:12 - 00192661 _____ () C:\WINDOWS\tsoc.log
2015-01-09 18:41 - 2012-09-12 21:12 - 00166819 _____ () C:\WINDOWS\comsetup.log
2015-01-09 18:41 - 2012-09-12 21:12 - 00102199 _____ () C:\WINDOWS\ntdtcsetup.log
2015-01-09 18:41 - 2012-09-12 21:12 - 00079163 _____ () C:\WINDOWS\iis6.log
2015-01-09 18:41 - 2012-09-12 21:12 - 00027903 _____ () C:\WINDOWS\ocmsn.log
2015-01-09 18:41 - 2012-09-12 21:12 - 00025288 _____ () C:\WINDOWS\msgsocm.log
2015-01-09 18:41 - 2012-09-12 21:12 - 00004635 _____ () C:\WINDOWS\imsins.log
2015-01-09 18:41 - 2004-12-21 18:06 - 01230940 _____ () C:\WINDOWS\system32\PerfStringBackup.INI
2015-01-09 07:31 - 2012-09-16 13:39 - 00000000 ___HD () C:\Dokumente und Einstellungen\Chef\Netzwerkumgebung
2015-01-08 23:03 - 2005-01-22 23:17 - 00000000 ___HD () C:\Dokumente und Einstellungen\Felix\Netzwerkumgebung
2015-01-08 21:52 - 2014-07-13 16:36 - 00000214 _____ () C:\WINDOWS\Tasks\Ende des Supports für Microsoft Windows XP – Monatliche Benachrichtigung.job
2015-01-08 20:00 - 2005-03-06 22:05 - 00000000 ____D () C:\Dokumente und Einstellungen\Felix\Eigene Dateien\Felix
2015-01-08 08:07 - 2014-10-17 20:50 - 00319622 _____ () C:\Dokumente und Einstellungen\LocalService\Lokale Einstellungen\Anwendungsdaten\WPFFontCache_v0400-S-1-5-21-2627930752-4006264225-1260829912-501-0.dat
2015-01-07 10:53 - 2013-12-22 13:47 - 00000000 ____D () C:\Dokumente und Einstellungen\Gast\Lokale Einstellungen\Temp
2015-01-07 10:53 - 2013-12-22 13:47 - 00000000 ____D () C:\Dokumente und Einstellungen\Gast
2015-01-04 14:29 - 2009-10-12 12:33 - 00000000 ____D () C:\Programme\Mozilla Thunderbird
2015-01-02 19:12 - 2005-02-03 08:08 - 00000000 ____D () C:\Dokumente und Einstellungen\Felix\Eigene Dateien\Romy
2014-12-28 18:43 - 2006-11-16 18:04 - 00070656 _____ () C:\Dokumente und Einstellungen\Felix\Lokale Einstellungen\Anwendungsdaten\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2014-12-28 18:29 - 2005-01-22 23:17 - 00000000 ___RD () C:\Dokumente und Einstellungen\Felix\Eigene Dateien\Eigene Bilder Felix
2014-12-28 18:20 - 2009-10-12 12:26 - 00000000 ____D () C:\Dokumente und Einstellungen\Felix\Lokale Einstellungen\Anwendungsdaten\Paint.NET
2014-12-27 19:55 - 2004-12-21 18:06 - 00000000 ___RD () C:\Dokumente und Einstellungen\All Users\Dokumente
2014-12-24 13:11 - 2005-09-04 19:59 - 00002477 _____ () C:\Dokumente und Einstellungen\Felix\Desktop\Microsoft Word.lnk
2014-12-19 21:10 - 2012-09-09 11:16 - 00000000 ____D () C:\WINDOWS\system32\NtmsData
2014-12-19 17:36 - 2004-12-21 18:11 - 00000000 ____D () C:\WINDOWS\Registration
2014-12-19 17:30 - 2004-12-21 18:06 - 00000000 ___RD () C:\Programme
2014-12-19 17:30 - 2004-12-21 18:06 - 00000000 ___RD () C:\Dokumente und Einstellungen\All Users\Startmenü\Programme
2014-12-19 17:04 - 2004-12-21 18:24 - 00000000 ____D () C:\WINDOWS\system32\ReinstallBackups
2014-12-19 08:18 - 2005-09-04 19:58 - 00002513 _____ () C:\Dokumente und Einstellungen\Felix\Desktop\Microsoft Excel.lnk
2014-12-18 16:24 - 2008-12-14 10:12 - 00000000 ____D () C:\Programme\Mozilla Firefox
2014-12-17 23:28 - 2013-02-22 08:17 - 00000000 ____D () C:\Dokumente und Einstellungen\Felix\Lokale Einstellungen\Anwendungsdaten\WMTools Downloaded Files
2014-12-17 23:10 - 2006-11-16 18:04 - 00000069 _____ () C:\WINDOWS\NeroDigital.ini
2014-12-17 20:08 - 2010-03-19 20:04 - 00000000 ____D () C:\Dokumente und Einstellungen\Felix\Anwendungsdaten\dvdcss

Some content of TEMP:
====================
C:\Dokumente und Einstellungen\Chef\Lokale Einstellungen\Temp\avgnt.exe
C:\Dokumente und Einstellungen\Chef\Lokale Einstellungen\Temp\CommonInstaller.exe
C:\Dokumente und Einstellungen\Chef\Lokale Einstellungen\Temp\UNINSTALL.EXE
C:\Dokumente und Einstellungen\Felix\Lokale Einstellungen\Temp\AskSLib.dll
C:\Dokumente und Einstellungen\Felix\Lokale Einstellungen\Temp\avgnt.exe
C:\Dokumente und Einstellungen\Felix\Lokale Einstellungen\Temp\avguidx.dll
C:\Dokumente und Einstellungen\Felix\Lokale Einstellungen\Temp\Bootstrapper.exe
C:\Dokumente und Einstellungen\Felix\Lokale Einstellungen\Temp\BootstrapperARA.dll
C:\Dokumente und Einstellungen\Felix\Lokale Einstellungen\Temp\BootstrapperARU.dll
C:\Dokumente und Einstellungen\Felix\Lokale Einstellungen\Temp\BootstrapperCHS.dll
C:\Dokumente und Einstellungen\Felix\Lokale Einstellungen\Temp\BootstrapperCHT.dll
C:\Dokumente und Einstellungen\Felix\Lokale Einstellungen\Temp\BootstrapperCSY.dll
C:\Dokumente und Einstellungen\Felix\Lokale Einstellungen\Temp\BootstrapperDAN.dll
C:\Dokumente und Einstellungen\Felix\Lokale Einstellungen\Temp\BootstrapperDEU.dll
C:\Dokumente und Einstellungen\Felix\Lokale Einstellungen\Temp\BootstrapperELL.dll
C:\Dokumente und Einstellungen\Felix\Lokale Einstellungen\Temp\BootstrapperENU.dll
C:\Dokumente und Einstellungen\Felix\Lokale Einstellungen\Temp\BootstrapperESN.dll
C:\Dokumente und Einstellungen\Felix\Lokale Einstellungen\Temp\BootstrapperESP.dll
C:\Dokumente und Einstellungen\Felix\Lokale Einstellungen\Temp\BootstrapperFIN.dll
C:\Dokumente und Einstellungen\Felix\Lokale Einstellungen\Temp\BootstrapperFRA.dll
C:\Dokumente und Einstellungen\Felix\Lokale Einstellungen\Temp\BootstrapperHEB.dll
C:\Dokumente und Einstellungen\Felix\Lokale Einstellungen\Temp\BootstrapperHRV.dll
C:\Dokumente und Einstellungen\Felix\Lokale Einstellungen\Temp\BootstrapperHUN.dll
C:\Dokumente und Einstellungen\Felix\Lokale Einstellungen\Temp\BootstrapperITA.dll
C:\Dokumente und Einstellungen\Felix\Lokale Einstellungen\Temp\BootstrapperJPN.dll
C:\Dokumente und Einstellungen\Felix\Lokale Einstellungen\Temp\BootstrapperKOR.dll
C:\Dokumente und Einstellungen\Felix\Lokale Einstellungen\Temp\BootstrapperLOC.dll
C:\Dokumente und Einstellungen\Felix\Lokale Einstellungen\Temp\BootstrapperNLD.dll
C:\Dokumente und Einstellungen\Felix\Lokale Einstellungen\Temp\BootstrapperNOR.dll
C:\Dokumente und Einstellungen\Felix\Lokale Einstellungen\Temp\BootstrapperPLK.dll
C:\Dokumente und Einstellungen\Felix\Lokale Einstellungen\Temp\BootstrapperPTB.dll
C:\Dokumente und Einstellungen\Felix\Lokale Einstellungen\Temp\BootstrapperPTG.dll
C:\Dokumente und Einstellungen\Felix\Lokale Einstellungen\Temp\BootstrapperRUS.dll
C:\Dokumente und Einstellungen\Felix\Lokale Einstellungen\Temp\BootstrapperSKY.dll
C:\Dokumente und Einstellungen\Felix\Lokale Einstellungen\Temp\BootstrapperSLV.dll
C:\Dokumente und Einstellungen\Felix\Lokale Einstellungen\Temp\BootstrapperSVE.dll
C:\Dokumente und Einstellungen\Felix\Lokale Einstellungen\Temp\BootstrapperTHA.dll
C:\Dokumente und Einstellungen\Felix\Lokale Einstellungen\Temp\BootstrapperTRK.dll
C:\Dokumente und Einstellungen\Felix\Lokale Einstellungen\Temp\BootstrapperUKR.dll
C:\Dokumente und Einstellungen\Felix\Lokale Einstellungen\Temp\CommonInstaller.exe
C:\Dokumente und Einstellungen\Felix\Lokale Einstellungen\Temp\dotNetFx40_Client_setup.exe
C:\Dokumente und Einstellungen\Felix\Lokale Einstellungen\Temp\Garmin.Cartography.DeviceInteraction.dll
C:\Dokumente und Einstellungen\Felix\Lokale Einstellungen\Temp\Garmin.Cartography.MapUpdate.Client.Core.dll
C:\Dokumente und Einstellungen\Felix\Lokale Einstellungen\Temp\GarminMapUpdater.exe
C:\Dokumente und Einstellungen\Felix\Lokale Einstellungen\Temp\ginstall.dll
C:\Dokumente und Einstellungen\Felix\Lokale Einstellungen\Temp\GLF2C.tmp.tbsoft.dll
C:\Dokumente und Einstellungen\Felix\Lokale Einstellungen\Temp\GpsImgWrapper.dll
C:\Dokumente und Einstellungen\Felix\Lokale Einstellungen\Temp\Ionic.Zip.dll
C:\Dokumente und Einstellungen\Felix\Lokale Einstellungen\Temp\MachineIdCreator.exe
C:\Dokumente und Einstellungen\Felix\Lokale Einstellungen\Temp\mfc100.dll
C:\Dokumente und Einstellungen\Felix\Lokale Einstellungen\Temp\MFPL7014.DLL
C:\Dokumente und Einstellungen\Felix\Lokale Einstellungen\Temp\msvcp100.dll
C:\Dokumente und Einstellungen\Felix\Lokale Einstellungen\Temp\msvcp60.dll
C:\Dokumente und Einstellungen\Felix\Lokale Einstellungen\Temp\msvcr100.dll
C:\Dokumente und Einstellungen\Felix\Lokale Einstellungen\Temp\nsj16D.tmp.ConduitEngineEmbbed.exe
C:\Dokumente und Einstellungen\Felix\Lokale Einstellungen\Temp\nsu1C9.tmp.ConduitEngineEmbbed.exe
C:\Dokumente und Einstellungen\Felix\Lokale Einstellungen\Temp\nsw2C2.tmp.ConduitEngineEmbbed.exe
C:\Dokumente und Einstellungen\Felix\Lokale Einstellungen\Temp\Paint.NET.3.36.exe
C:\Dokumente und Einstellungen\Felix\Lokale Einstellungen\Temp\PRINTKEY2000.EXE
C:\Dokumente und Einstellungen\Felix\Lokale Einstellungen\Temp\setup_wm.exe
C:\Dokumente und Einstellungen\Felix\Lokale Einstellungen\Temp\softonic-de3.exe
C:\Dokumente und Einstellungen\Felix\Lokale Einstellungen\Temp\TDSLSpeedManager.exe
C:\Dokumente und Einstellungen\Felix\Lokale Einstellungen\Temp\TDSLSpeedMgrSetup.exe
C:\Dokumente und Einstellungen\Felix\Lokale Einstellungen\Temp\ToolbarInstaller.exe
C:\Dokumente und Einstellungen\Felix\Lokale Einstellungen\Temp\twapi-2.0a2.dll
C:\Dokumente und Einstellungen\Felix\Lokale Einstellungen\Temp\UNNeroBurnRights.exe
C:\Dokumente und Einstellungen\Felix\Lokale Einstellungen\Temp\usb_lib.dll
C:\Dokumente und Einstellungen\Felix\Lokale Einstellungen\Temp\_CD_Start.exe
C:\Dokumente und Einstellungen\Felix\Lokale Einstellungen\Temp\_VWUPSRV.EXE
C:\Dokumente und Einstellungen\Gaby\Lokale Einstellungen\Temp\SkypeSetup.exe
C:\Dokumente und Einstellungen\Gast\Lokale Einstellungen\Temp\avgnt.exe
C:\Dokumente und Einstellungen\Kinder\Lokale Einstellungen\Temp\avgnt.exe
C:\Dokumente und Einstellungen\Kinder\Lokale Einstellungen\Temp\msvcp60.dll
C:\Dokumente und Einstellungen\Kinder\Lokale Einstellungen\Temp\twapi-2.0a2.dll
C:\Dokumente und Einstellungen\Romy\Lokale Einstellungen\Temp\SkypeSetup.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed

==================== End Of Log ============================

--- --- ---

--- --- ---

Addition

Code:

ATTFilter

Additional scan result of Farbar Recovery Scan Tool (x86) Version: 11-01-2015
Ran by Chef at 2015-01-14 20:16:02
Running from C:\Dokumente und Einstellungen\Chef\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {00000000-0000-0000-0000-000000000000}
AV: Avira Desktop (Disabled - Up to date) {AD166499-45F9-482A-A743-FDD3350758C7}
AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {804E5358-FFA4-00DA-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {804E5358-FFA4-00EB-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz (Disabled - Up to date) {804E5358-FFA4-00FC-0D24-347CA8A3377C}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Adobe Digital Editions 2.0 (HKLM\...\Adobe Digital Editions 2.0) (Version: 2.0.1 - Adobe Systems Incorporated)
Adobe Flash Player 14 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 14.0.0.145 - Adobe Systems Incorporated)
Adobe Flash Player 14 Plugin (HKLM\...\Adobe Flash Player Plugin) (Version: 14.0.0.145 - Adobe Systems Incorporated)
Adobe Reader X (10.1.10) - Deutsch (HKLM\...\{AC76BA86-7AD7-1031-7B44-AA1000000001}) (Version: 10.1.10 - Adobe Systems Incorporated)
Adobe Shockwave Player 11.6 (HKLM\...\Adobe Shockwave Player) (Version: 11.6.4.634 - Adobe Systems, Inc.)
Apple Application Support (HKLM\...\{5D09C772-ECB3-442B-9CC6-B4341C78FDC2}) (Version: 2.3.4 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{E14ADE0E-75F3-4A46-87E5-26692DD626EC}) (Version: 6.1.0.13 - Apple Inc.)
Apple Software Update (HKLM\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
ATI Control Panel (HKLM\...\{0BEDBD4E-2D34-47B5-9973-57E62B29307C}) (Version: 6.14.10.5125 - )
ATI Display Driver (HKLM\...\ATI Display Driver) (Version: 8.062-040929a-018622C-Fujitsu Siemens Computers - )
Avira (HKLM\...\{e7c7c227-b742-4878-9425-f09bbf9951db}) (Version: 1.1.27.25527 - Avira Operations & Co. KG)
Avira (Version: 1.1.27.25527 - Avira Operations & Co. KG) Hidden
Avira Free Antivirus (HKLM\...\Avira AntiVir Desktop) (Version: 14.0.7.468 - Avira)
Bonjour (HKLM\...\{79155F2B-9895-49D7-8612-D92580E0DE5B}) (Version: 3.0.0.10 - Apple Inc.)
CCleaner (HKLM\...\CCleaner) (Version: 3.11 - Piriform)
Conduit Engine  (HKLM\...\conduitEngine) (Version:  - Conduit Ltd.) <==== ATTENTION
Digital Camera Driver (HKLM\...\Digital Camera Driver) (Version:  - )
Elevated Installer (Version: 2.2.16 - Garmin Ltd or its subsidiaries) Hidden
ElsterFormular (HKLM\...\ElsterFormular) (Version: 15.2.20140326 - Landesfinanzdirektion Thüringen)
Facebook Video Calling 3.1.0.521 (HKLM\...\{2091F234-EB58-4B80-8C96-8EB78C808CF7}) (Version: 3.1.521 - Skype Limited)
FaxSendInstaller (HKLM\...\{C876CEE1-32CC-4E96-832F-1D321E35A451}) (Version: 1.0.1 - Hewlett-Packard)
FaxSetupInstaller (HKLM\...\{1F2E313E-CBAA-4337-A46B-794E8E4FE6C2}) (Version: 1.0.1 - Hewlett-Packard)
Free YouTube to Mp3 Converter version 3.1 (HKLM\...\Free YouTube to Mp3 Converter_is1) (Version:  - DVD Video Soft Limited.)
Garmin Express (HKLM\...\{090dbdaf-9c21-4003-9544-3a57184fff74}) (Version: 2.2.16 - Garmin Ltd or its subsidiaries)
Garmin Express (Version: 2.2.16 - Garmin Ltd or its subsidiaries) Hidden
Garmin Express Tray (Version: 2.2.16 - Garmin Ltd or its subsidiaries) Hidden
Garmin Update Service (Version: 2.2.16 - Garmin Ltd or its subsidiaries) Hidden
Garmin USB Drivers (HKLM\...\{ABA5E381-EC46-425C-86C5-5CD15BBFB4BF}) (Version: 2.3.1.0 - Garmin Ltd or its subsidiaries)
Google SketchUp 7 (HKLM\...\{BA9C8A3B-7A17-4A52-9F11-A6E823EE4305}) (Version: 2.0.11067 - Google, Inc.)
High Definition Audio Driver Package - KB835221 (HKLM\...\KB835221WXP) (Version: 20040219.000000 - Microsoft Corporation)
Horse Life (HKLM\...\Horse Life_is1) (Version:  - )
Hotfix für Windows Media Player 11 (KB939683) (HKLM\...\KB939683) (Version:  - Microsoft Corporation)
Hotfix für Windows XP (KB2443685) (HKLM\...\KB2443685) (Version: 1 - Microsoft Corporation)
Hotfix für Windows XP (KB2570791) (HKLM\...\KB2570791) (Version: 1 - Microsoft Corporation)
Hotfix für Windows XP (KB2633952) (HKLM\...\KB2633952) (Version: 1 - Microsoft Corporation)
Hotfix für Windows XP (KB2756822) (HKLM\...\KB2756822) (Version: 1 - Microsoft Corporation)
Hotfix für Windows XP (KB2779562) (HKLM\...\KB2779562) (Version: 1 - Microsoft Corporation)
Hotfix für Windows XP (KB952287) (HKLM\...\KB952287) (Version: 1 - Microsoft Corporation)
Hotfix für Windows XP (KB961118) (HKLM\...\KB961118) (Version: 1 - Microsoft Corporation)
Hotfix für Windows XP (KB970653-v3) (HKLM\...\KB970653-v3) (Version: 3 - Microsoft Corporation)
Hotfix für Windows XP (KB976098-v2) (HKLM\...\KB976098-v2) (Version: 2 - Microsoft Corporation)
Hotfix für Windows XP (KB979306) (HKLM\...\KB979306) (Version: 1 - Microsoft Corporation)
Hotfix für Windows XP (KB981793) (HKLM\...\KB981793) (Version: 1 - Microsoft Corporation)
HP LaserJet M1319 MFP Series (HKLM\...\HP LaserJet M1319 MFP) (Version:  - )
HP LaserJet M1319 MFP Series Toolbox (HKLM\...\{96BFE9CE-5A9D-4F6E-A406-7E0206BE5A6A}) (Version: 1.0.11 - Hewlett-Packard)
hppusgM1310 (Version: 000.000.00004 - Hewlett-Packard) Hidden
InterVideo WinDVD (HKLM\...\{91810AFC-A4F8-4EBA-A5AA-B198BBC81144}) (Version: 5.0-B11.639 - InterVideo Inc.)
IrfanView (remove only) (HKLM\...\IrfanView) (Version:  - )
iTunes (HKLM\...\{9B486871-27EB-49A5-8832-77176E63333C}) (Version: 11.0.5.5 - Apple Inc.)
Java 7 Update 25 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83217025FF}) (Version: 7.0.250 - Oracle)
KeePass Password Safe 2.16 (HKLM\...\KeePassPasswordSafe2_is1) (Version:  - Dominik Reichl)
Lexmark 5200 Series (HKLM\...\Lexmark 5200 Series) (Version:  - )
Microsoft .NET Framework 1.1 (HKLM\...\Microsoft .NET Framework 1.1  (1033)) (Version:  - )
Microsoft .NET Framework 1.1 Security Update (KB2698023) (HKLM\...\M2698023) (Version:  - )
Microsoft .NET Framework 1.1 Security Update (KB2833941) (HKLM\...\M2833941) (Version:  - )
Microsoft .NET Framework 1.1 Security Update (KB979906) (HKLM\...\M979906) (Version:  - )
Microsoft .NET Framework 2.0 Service Pack 2 (HKLM\...\{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}) (Version: 2.2.30729 - Microsoft Corporation)
Microsoft .NET Framework 2.0 Service Pack 2 Language Pack - DEU (HKLM\...\{C314CE45-3392-3B73-B4E1-139CD41CA933}) (Version: 2.2.30729 - Microsoft Corporation)
Microsoft .NET Framework 3.0 Service Pack 2 (HKLM\...\{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}) (Version: 3.2.30729 - Microsoft Corporation)
Microsoft .NET Framework 3.0 Service Pack 2 Language Pack - DEU (HKLM\...\{C2C284D2-6BD7-3B34-B0C5-B2CAED168DF7}) (Version: 3.2.30729 - Microsoft Corporation)
Microsoft .NET Framework 3.5 Language Pack SP1 - DEU (HKLM\...\Microsoft .NET Framework 3.5 Language Pack SP1 - deu) (Version:  - Microsoft Corporation)
Microsoft .NET Framework 3.5 SP1 (HKLM\...\Microsoft .NET Framework 3.5 SP1) (Version:  - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile (HKLM\...\Microsoft .NET Framework 4 Client Profile) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (HKLM\...\Microsoft .NET Framework 4 Client Profile DEU Language Pack) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft Compression Client Pack 1.0 for Windows XP (HKLM\...\MSCompPackV1) (Version: 1 - Microsoft Corporation)
Microsoft Office 2000 Disc 2 (HKLM\...\{00040407-78E1-11D2-B60F-006097C998E7}) (Version: 9.00.2816 - Microsoft Corporation)
Microsoft Office 2000 Premium (HKLM\...\{00000407-78E1-11D2-B60F-006097C998E7}) (Version: 9.00.2816 - Microsoft Corporation)
Microsoft SQL Server Desktop Engine (PINNACLESYS) (HKLM\...\{E09B48B5-E141-427A-AB0C-D3605127224A}) (Version: 8.00.761 - Microsoft Corporation)
Microsoft Sync Framework 2.0 Core Components (x86) ENU  (HKLM\...\{FF63121D-91C6-42CC-B341-F1AA729728E7}) (Version: 2.0.1578.0 - Microsoft Corporation)
Microsoft Sync Framework 2.0 Provider Services (x86) ENU  (HKLM\...\{D3A80508-CD83-4CA3-8671-914A1BC78B61}) (Version: 2.0.1578.0 - Microsoft Corporation)
Microsoft User-Mode Driver Framework Feature Pack 1.0 (HKLM\...\Wudf01000) (Version:  - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30411 (HKLM\...\{5DA8F6CD-C70E-39D8-8430-3D9808D6BD17}) (Version: 9.0.30411 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Works (HKLM\...\{B26E3B0D-C2FA-4370-B068-7C476766F029}) (Version: 08.04.0702 - Microsoft Corporation)
MozBackup 1.4.10 (HKLM\...\MozBackup) (Version:  - Pavel Cvrcek)
Mozilla Firefox 20.0.1 (x86 de) (HKLM\...\Mozilla Firefox 20.0.1 (x86 de)) (Version: 20.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 20.0.1 - Mozilla)
Mozilla Thunderbird 15.0.1 (x86 de) (HKLM\...\Mozilla Thunderbird 15.0.1 (x86 de)) (Version: 15.0.1 - Mozilla)
MrvlUsgTracking (Version: 1.0.7 - Marvell) Hidden
MSXML 4.0 SP2 (KB927978) (HKLM\...\{37477865-A3F1-4772-AD43-AAFC6BCFF99F}) (Version: 4.20.9841.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB936181) (HKLM\...\{C04E32E0-0416-434D-AFB9-6969D703A9EF}) (Version: 4.20.9848.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB954430) (HKLM\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
MSXML 6 Service Pack 2 (KB973686) (HKLM\...\{56EA8BC0-3751-4B93-BC9D-6651CC36E5AA}) (Version: 6.20.2003.0 - Microsoft Corporation)
My Scene(TM) EROBERT Hollywood (HKLM\...\My Scene(TM) EROBERT Hollywood) (Version:  - )
Nero BurnRights (HKLM\...\Nero BurnRights!UninstallKey) (Version:  - )
Nero OEM (HKLM\...\Nero - Burning Rom!UninstallKey) (Version:  - )
NeroVision Express 2 (HKLM\...\NeroVision!UninstallKey) (Version:  - )
Nikon View Ver.3 (HKLM\...\{6BC47F60-E41B-11D3-BF8E-00E0295703D2}) (Version:  - )
OpenOffice.org 3.4 (HKLM\...\{4C552FD3-2CCD-4E00-AC64-0681DBB3F8B5}) (Version: 3.4.9590 - OpenOffice.org)
Opera 12.17 (HKLM\...\Opera 12.17.1863) (Version: 12.17.1863 - Opera Software ASA)
Opera Stable 26.0.1656.60 (HKLM\...\Opera 26.0.1656.60) (Version: 26.0.1656.60 - Opera Software ASA)
Paint.NET v3.36 (HKLM\...\{43602F34-1AA3-44FB-AEB2-D08C2C73743F}) (Version: 3.36.0 - dotPDN LLC)
PDF24 Creator 6.7.0 (HKLM\...\{81A6F461-0DBA-4F12-B56F-0E977EC10576}_is1) (Version:  - PDF24.org)
pdfforge Toolbar v1.1.1 (HKLM\...\{4EF8BE6A-899C-4196-94E7-297C5F7A203E}) (Version: 1.1.1 - Spigot, Inc.) <==== ATTENTION
Pinnacle MediaCenter (HKLM\...\{F38ADCA4-AF7C-4C73-9021-6F1EA15D15EA}) (Version: 2.01.191 - )
Pinnacle MediaServer (HKLM\...\{460CE8B9-6EC2-458A-90D4-691631ECE9D9}) (Version: 1.00.050 - )
Pontifex Demo (HKLM\...\Pontifex Demo) (Version:  - )
ProtectDisc Helper Driver 10 (HKLM\...\ProtectDisc Driver 10) (Version: 10.0.0.3 - )
QuickTime (HKLM\...\{57752979-A1C9-4C02-856B-FBB27AC4E02C}) (Version: 7.69.80.9 - Apple Inc.)
RAW FILE CONVERTER LE (HKLM\...\{D680C913-5955-469D-9D88-C1940F7506D6}) (Version:  - )
Reader for PC (HKLM\...\{7FAEB610-D6B1-42CE-9EEA-6A5001C2E732}) (Version: 2.1.00.06250 - Sony Corporation)
ReceiveInstaller (HKLM\...\{75A791DE-3A44-4DAA-BB10-837EC3306E5B}) (Version: 1.0.1 - Hewlett-Packard)
Riding Star (HKLM\...\{A80AC620-12FA-11D5-B287-0050DA4BBA2C}) (Version:  - )
Riding Star 3 (HKLM\...\Riding Star 3) (Version:  - DTP)
Scan To (Version: 1.0.1 - HP) Hidden
Sicherheitsupdate für Microsoft Windows (KB2564958) (HKLM\...\KB2564958) (Version:  - Microsoft Corporation)
Sicherheitsupdate für Step by Step Interactive Training (KB898458) (HKLM\...\KB898458) (Version: 20050502.101010 - Microsoft Corporation)
Sicherheitsupdate für Step by Step Interactive Training (KB923723) (HKLM\...\KB923723) (Version: 20050502.101010 - Microsoft Corporation)
Sicherheitsupdate für Windows Media Player (KB2378111) (Version:  - Microsoft Corporation) Hidden
Sicherheitsupdate für Windows Media Player (KB2834904) (HKLM\...\KB2834904_WM11) (Version:  - Microsoft Corporation)
Sicherheitsupdate für Windows Media Player (KB2834904-v2) (HKLM\...\KB2834904-v2_WM11) (Version:  - Microsoft Corporation)
Sicherheitsupdate für Windows Media Player (KB911564) (Version:  - Microsoft Corporation) Hidden
Sicherheitsupdate für Windows Media Player (KB952069) (Version:  - Microsoft Corporation) Hidden
Sicherheitsupdate für Windows Media Player (KB954155) (Version:  - Microsoft Corporation) Hidden
Sicherheitsupdate für Windows Media Player (KB968816) (Version:  - Microsoft Corporation) Hidden
Sicherheitsupdate für Windows Media Player (KB973540) (HKLM\...\KB973540_WM9) (Version:  - Microsoft Corporation)
Sicherheitsupdate für Windows Media Player (KB973540) (Version:  - Microsoft Corporation) Hidden
Sicherheitsupdate für Windows Media Player (KB975558) (Version:  - Microsoft Corporation) Hidden
Sicherheitsupdate für Windows Media Player (KB978695) (Version:  - Microsoft Corporation) Hidden
Sicherheitsupdate für Windows Media Player 10 (KB911565) (Version:  - Microsoft Corporation) Hidden
Sicherheitsupdate für Windows Media Player 10 (KB917734) (Version:  - Microsoft Corporation) Hidden
Sicherheitsupdate für Windows Media Player 10 (KB936782) (Version:  - Microsoft Corporation) Hidden
Sicherheitsupdate für Windows Media Player 11 (KB954154) (HKLM\...\KB954154_WM11) (Version:  - Microsoft Corporation)
Sicherheitsupdate für Windows Media Player 6.4 (KB925398) (HKLM\...\KB925398_WMP64) (Version:  - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2079403) (HKLM\...\KB2079403) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2115168) (HKLM\...\KB2115168) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2229593) (HKLM\...\KB2229593) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2296011) (HKLM\...\KB2296011) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2347290) (HKLM\...\KB2347290) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2360937) (HKLM\...\KB2360937) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2387149) (HKLM\...\KB2387149) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2393802) (HKLM\...\KB2393802) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2412687) (HKLM\...\KB2412687) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2419632) (HKLM\...\KB2419632) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2423089) (HKLM\...\KB2423089) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2440591) (HKLM\...\KB2440591) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2443105) (HKLM\...\KB2443105) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2476490) (HKLM\...\KB2476490) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2478960) (HKLM\...\KB2478960) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2478971) (HKLM\...\KB2478971) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2479943) (HKLM\...\KB2479943) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2481109) (HKLM\...\KB2481109) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2483185) (HKLM\...\KB2483185) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2485663) (HKLM\...\KB2485663) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2491683) (HKLM\...\KB2491683) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2503665) (HKLM\...\KB2503665) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2506212) (HKLM\...\KB2506212) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2507618) (HKLM\...\KB2507618) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2507938) (HKLM\...\KB2507938) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2508272) (HKLM\...\KB2508272) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2508429) (HKLM\...\KB2508429) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2509553) (HKLM\...\KB2509553) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2510581) (HKLM\...\KB2510581) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2524375) (HKLM\...\KB2524375) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2530548) (HKLM\...\KB2530548) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2535512) (HKLM\...\KB2535512) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2536276) (HKLM\...\KB2536276) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2536276-v2) (HKLM\...\KB2536276-v2) (Version: 2 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2544521) (HKLM\...\KB2544521) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2544893) (HKLM\...\KB2544893) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2544893-v2) (HKLM\...\KB2544893-v2) (Version: 2 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2555917) (HKLM\...\KB2555917) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2559049) (HKLM\...\KB2559049) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2562937) (HKLM\...\KB2562937) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2566454) (HKLM\...\KB2566454) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2567053) (HKLM\...\KB2567053) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2567680) (HKLM\...\KB2567680) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2570222) (HKLM\...\KB2570222) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2570947) (HKLM\...\KB2570947) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2584146) (HKLM\...\KB2584146) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2585542) (HKLM\...\KB2585542) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2586448) (HKLM\...\KB2586448) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2592799) (HKLM\...\KB2592799) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2598479) (HKLM\...\KB2598479) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2603381) (HKLM\...\KB2603381) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2618444) (HKLM\...\KB2618444) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2618451) (HKLM\...\KB2618451) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2619339) (HKLM\...\KB2619339) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2620712) (HKLM\...\KB2620712) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2621440) (HKLM\...\KB2621440) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2624667) (HKLM\...\KB2624667) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2631813) (HKLM\...\KB2631813) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2633171) (HKLM\...\KB2633171) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2639417) (HKLM\...\KB2639417) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2641653) (HKLM\...\KB2641653) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2646524) (HKLM\...\KB2646524) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2647516) (HKLM\...\KB2647516) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2647518) (HKLM\...\KB2647518) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2653956) (HKLM\...\KB2653956) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2655992) (HKLM\...\KB2655992) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2659262) (HKLM\...\KB2659262) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2660465) (HKLM\...\KB2660465) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2661637) (HKLM\...\KB2661637) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2675157) (HKLM\...\KB2675157) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2676562) (HKLM\...\KB2676562) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2685939) (HKLM\...\KB2685939) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2686509) (HKLM\...\KB2686509) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2691442) (HKLM\...\KB2691442) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2695962) (HKLM\...\KB2695962) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2698365) (HKLM\...\KB2698365) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2699988) (HKLM\...\KB2699988) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2705219) (HKLM\...\KB2705219) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2707511) (HKLM\...\KB2707511) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2709162) (HKLM\...\KB2709162) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2712808) (HKLM\...\KB2712808) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2718523) (HKLM\...\KB2718523) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2719985) (HKLM\...\KB2719985) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2722913) (HKLM\...\KB2722913) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2723135) (HKLM\...\KB2723135) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2724197) (HKLM\...\KB2724197) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2727528) (HKLM\...\KB2727528) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2731847) (HKLM\...\KB2731847) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2744842) (HKLM\...\KB2744842) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2753842) (HKLM\...\KB2753842) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2753842-v2) (HKLM\...\KB2753842-v2) (Version: 2 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2757638) (HKLM\...\KB2757638) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2758857) (HKLM\...\KB2758857) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2761226) (HKLM\...\KB2761226) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2761465) (HKLM\...\KB2761465) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2770660) (HKLM\...\KB2770660) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2778344) (HKLM\...\KB2778344) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2779030) (HKLM\...\KB2779030) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2780091) (HKLM\...\KB2780091) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2792100) (HKLM\...\KB2792100) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2797052) (HKLM\...\KB2797052) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2799329) (HKLM\...\KB2799329) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2799494) (HKLM\...\KB2799494) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2802968) (HKLM\...\KB2802968) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2807986) (HKLM\...\KB2807986) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2808735) (HKLM\...\KB2808735) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2809289) (HKLM\...\KB2809289) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2813170) (HKLM\...\KB2813170) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2813345) (HKLM\...\KB2813345) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2817183) (HKLM\...\KB2817183) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2820197) (HKLM\...\KB2820197) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2820917) (HKLM\...\KB2820917) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2829361) (HKLM\...\KB2829361) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2829530) (HKLM\...\KB2829530) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2834886) (HKLM\...\KB2834886) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2838727) (HKLM\...\KB2838727) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2839229) (HKLM\...\KB2839229) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2845187) (HKLM\...\KB2845187) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2846071) (HKLM\...\KB2846071) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2847311) (HKLM\...\KB2847311) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2849470) (HKLM\...\KB2849470) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2850851) (HKLM\...\KB2850851) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2850869) (HKLM\...\KB2850869) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2859537) (HKLM\...\KB2859537) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2862152) (HKLM\...\KB2862152) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2862330) (HKLM\...\KB2862330) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2862335) (HKLM\...\KB2862335) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2862772) (HKLM\...\KB2862772) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2864063) (HKLM\...\KB2864063) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2868038) (HKLM\...\KB2868038) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2868626) (HKLM\...\KB2868626) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2870699) (HKLM\...\KB2870699) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2876217) (HKLM\...\KB2876217) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2876315) (HKLM\...\KB2876315) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2876331) (HKLM\...\KB2876331) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2879017) (HKLM\...\KB2879017) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2883150) (HKLM\...\KB2883150) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2888505) (HKLM\...\KB2888505) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2892075) (HKLM\...\KB2892075) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2893294) (HKLM\...\KB2893294) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2893984) (HKLM\...\KB2893984) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2898715) (HKLM\...\KB2898715) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2898785) (HKLM\...\KB2898785) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2900986) (HKLM\...\KB2900986) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2909212) (HKLM\...\KB2909212) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2909921) (HKLM\...\KB2909921) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2914368) (HKLM\...\KB2914368) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2916036) (HKLM\...\KB2916036) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2922229) (HKLM\...\KB2922229) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2925418) (HKLM\...\KB2925418) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2929961) (HKLM\...\KB2929961) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2930275) (HKLM\...\KB2930275) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2936068) (HKLM\...\KB2936068) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB2964358) (HKLM\...\KB2964358) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB923561) (HKLM\...\KB923561) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB923689) (HKLM\...\KB923689) (Version:  - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB938464) (HKLM\...\KB938464) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB941569) (HKLM\...\KB941569) (Version:  - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB946648) (HKLM\...\KB946648) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB950759) (HKLM\...\KB950759) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB950760) (HKLM\...\KB950760) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB950762) (HKLM\...\KB950762) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB950974) (HKLM\...\KB950974) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB951066) (HKLM\...\KB951066) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB951376) (HKLM\...\KB951376) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB951376-v2) (HKLM\...\KB951376-v2) (Version: 2 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB951698) (HKLM\...\KB951698) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB951748) (HKLM\...\KB951748) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB952004) (HKLM\...\KB952004) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB952954) (HKLM\...\KB952954) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB953838) (HKLM\...\KB953838) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB953839) (HKLM\...\KB953839) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB954211) (HKLM\...\KB954211) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB954600) (HKLM\...\KB954600) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB955069) (HKLM\...\KB955069) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB956390) (HKLM\...\KB956390) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB956391) (HKLM\...\KB956391) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB956572) (HKLM\...\KB956572) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB956744) (HKLM\...\KB956744) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB956802) (HKLM\...\KB956802) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB956803) (HKLM\...\KB956803) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB956841) (HKLM\...\KB956841) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB956844) (HKLM\...\KB956844) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB957095) (HKLM\...\KB957095) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB957097) (HKLM\...\KB957097) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB958215) (HKLM\...\KB958215) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB958644) (HKLM\...\KB958644) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB958687) (HKLM\...\KB958687) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB958690) (HKLM\...\KB958690) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB958869) (HKLM\...\KB958869) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB959426) (HKLM\...\KB959426) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB960225) (HKLM\...\KB960225) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB960714) (HKLM\...\KB960714) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB960715) (HKLM\...\KB960715) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB960803) (HKLM\...\KB960803) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB960859) (HKLM\...\KB960859) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB961371) (HKLM\...\KB961371) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB961373) (HKLM\...\KB961373) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB961501) (HKLM\...\KB961501) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB963027) (HKLM\...\KB963027) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB968537) (HKLM\...\KB968537) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB969059) (HKLM\...\KB969059) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB969897) (HKLM\...\KB969897) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB969898) (HKLM\...\KB969898) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB969947) (HKLM\...\KB969947) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB970238) (HKLM\...\KB970238) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB970430) (HKLM\...\KB970430) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB971468) (HKLM\...\KB971468) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB971486) (HKLM\...\KB971486) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB971557) (HKLM\...\KB971557) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB971633) (HKLM\...\KB971633) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB971657) (HKLM\...\KB971657) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB972260) (HKLM\...\KB972260) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB972270) (HKLM\...\KB972270) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB973346) (HKLM\...\KB973346) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB973354) (HKLM\...\KB973354) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB973507) (HKLM\...\KB973507) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB973525) (HKLM\...\KB973525) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB973869) (HKLM\...\KB973869) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB973904) (HKLM\...\KB973904) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB974112) (HKLM\...\KB974112) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB974318) (HKLM\...\KB974318) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB974392) (HKLM\...\KB974392) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB974455) (HKLM\...\KB974455) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB974571) (HKLM\...\KB974571) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB975025) (HKLM\...\KB975025) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB975467) (HKLM\...\KB975467) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB975560) (HKLM\...\KB975560) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB975561) (HKLM\...\KB975561) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB975562) (HKLM\...\KB975562) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB975713) (HKLM\...\KB975713) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB976325) (HKLM\...\KB976325) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB977165) (HKLM\...\KB977165) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB977816) (HKLM\...\KB977816) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB977914) (HKLM\...\KB977914) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB978037) (HKLM\...\KB978037) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB978251) (HKLM\...\KB978251) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB978262) (HKLM\...\KB978262) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB978338) (HKLM\...\KB978338) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB978542) (HKLM\...\KB978542) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB978601) (HKLM\...\KB978601) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB978706) (HKLM\...\KB978706) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB979309) (HKLM\...\KB979309) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB979482) (HKLM\...\KB979482) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB979559) (HKLM\...\KB979559) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB979683) (HKLM\...\KB979683) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB979687) (HKLM\...\KB979687) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB980195) (HKLM\...\KB980195) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB980218) (HKLM\...\KB980218) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB980232) (HKLM\...\KB980232) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB980436) (HKLM\...\KB980436) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB981322) (HKLM\...\KB981322) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB981997) (HKLM\...\KB981997) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB982132) (HKLM\...\KB982132) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB982381) (HKLM\...\KB982381) (Version: 1 - Microsoft Corporation)
Sicherheitsupdate für Windows XP (KB982665) (HKLM\...\KB982665) (Version: 1 - Microsoft Corporation)
Skype Click to Call (HKLM\...\{B6CF2967-C81E-40C0-9815-C05774FEF120}) (Version: 5.9.9216 - Skype Technologies S.A.)
Skype™ 6.21 (HKLM\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 6.21.104 - Skype Technologies S.A.)
Smart Link 56K Modem (HKLM\...\SLAMRMO) (Version:  - )
softonic-de3 Toolbar (HKLM\...\softonic-de3 Toolbar) (Version: 6.3.3.3 - ) <==== ATTENTION
Star Stable 4 (HKLM\...\{A8522694-A08C-4844-872B-F69A175EF59C}) (Version: 1.00.0000 - Stabenfeldt)
swMSM (Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
SyncToy 2.1 (x86) (HKLM\...\{A066194B-DC8F-449A-8E0F-B57BDD3A2072}) (Version: 2.1.0 - Microsoft)
TeamViewer 8 (HKLM\...\TeamViewer 8) (Version: 8.0.20202 - TeamViewer)
Turbo Lister 2 (HKLM\...\{8927E07C-97F7-4A54-88FB-D976F50DD46E}) (Version: 2.00.0000 - eBay Inc.)
Uninstall 1.0.0.1 (HKLM\...\Uninstall_is1) (Version:  - )
Update 4.0.3 for Microsoft .NET Framework 4 Client Profile (KB2600211) (HKLM\...\{3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2600211) (Version: 1 - Microsoft Corporation)
Update für Windows XP (KB2345886) (HKLM\...\KB2345886) (Version: 1 - Microsoft Corporation)
Update für Windows XP (KB2541763) (HKLM\...\KB2541763) (Version: 1 - Microsoft Corporation)
Update für Windows XP (KB2607712) (HKLM\...\KB2607712) (Version: 1 - Microsoft Corporation)
Update für Windows XP (KB2616676) (HKLM\...\KB2616676) (Version: 1 - Microsoft Corporation)
Update für Windows XP (KB2641690) (HKLM\...\KB2641690) (Version: 1 - Microsoft Corporation)
Update für Windows XP (KB2661254-v2) (HKLM\...\KB2661254-v2) (Version: 2 - Microsoft Corporation)
Update für Windows XP (KB2718704) (HKLM\...\KB2718704) (Version: 1 - Microsoft Corporation)
Update für Windows XP (KB2736233) (HKLM\...\KB2736233) (Version: 1 - Microsoft Corporation)
Update für Windows XP (KB2749655) (HKLM\...\KB2749655) (Version: 1 - Microsoft Corporation)
Update für Windows XP (KB2863058) (HKLM\...\KB2863058) (Version: 1 - Microsoft Corporation)
Update für Windows XP (KB2904266) (HKLM\...\KB2904266) (Version: 1 - Microsoft Corporation)
Update für Windows XP (KB2934207) (HKLM\...\KB2934207) (Version: 1 - Microsoft Corporation)
Update für Windows XP (KB951072-v2) (HKLM\...\KB951072-v2) (Version: 2 - Microsoft Corporation)
Update für Windows XP (KB951978) (HKLM\...\KB951978) (Version: 1 - Microsoft Corporation)
Update für Windows XP (KB955759) (HKLM\...\KB955759) (Version: 1 - Microsoft Corporation)
Update für Windows XP (KB955839) (HKLM\...\KB955839) (Version: 1 - Microsoft Corporation)
Update für Windows XP (KB967715) (HKLM\...\KB967715) (Version: 1 - Microsoft Corporation)
Update für Windows XP (KB968389) (HKLM\...\KB968389) (Version: 1 - Microsoft Corporation)
Update für Windows XP (KB971029) (HKLM\...\KB971029) (Version: 1 - Microsoft Corporation)
Update für Windows XP (KB971737) (HKLM\...\KB971737) (Version: 1 - Microsoft Corporation)
Update für Windows XP (KB973687) (HKLM\...\KB973687) (Version: 1 - Microsoft Corporation)
Update für Windows XP (KB973815) (HKLM\...\KB973815) (Version: 1 - Microsoft Corporation)
Update für Windows XP (KB976749) (HKLM\...\KB976749) (Version: 1 - Microsoft Corporation)
Update für Windows XP (KB978207) (HKLM\...\KB978207) (Version: 1 - Microsoft Corporation)
Update für Windows XP (KB980182) (HKLM\...\KB980182) (Version: 1 - Microsoft Corporation)
USB Video Device (HKLM\...\{399C37FB-08AF-493B-BFED-20FBD85EDF7F}) (Version: 5.8.48205.104 - Sonix)
Video Power (HKLM\...\{17DB3734-EAB4-4717-954B-C860EE162FBA}) (Version: 1.0.24 - Video Power)
VLC media player 2.0.2 (HKLM\...\VLC media player) (Version: 2.0.2 - VideoLAN)
WebFldrs XP (Version: 9.50.7523 - Microsoft Corporation) Hidden
Windows Driver Package - Garmin (grmnusb) GARMIN Devices  (04/19/2012 2.3.1.0) (HKLM\...\98157A226B40B173301B0F53C8E98C47805D5152) (Version: 04/19/2012 2.3.1.0 - Garmin)
Windows Imaging Component (HKLM\...\WIC) (Version: 3.0.0.0 - Microsoft Corporation)
Windows Media Format 11 runtime (HKLM\...\Windows Media Format Runtime) (Version:  - )
Windows Media Player 11 (HKLM\...\Windows Media Player) (Version:  - )
Windows XP Service Pack 3 (HKLM\...\Windows XP Service Pack) (Version: 20080414.031514 - Microsoft Corporation)
WinZip (HKLM\...\WinZip) (Version:  - )
XML Paper Specification Shared Components Language Pack 1.0 (Version:  - Microsoft Corporation) Hidden

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)


==================== Restore Points  =========================

11-12-2014 07:56:19 Systemprüfpunkt
12-12-2014 14:30:39 Systemprüfpunkt
13-12-2014 19:48:41 Systemprüfpunkt
15-12-2014 12:41:50 Systemprüfpunkt
17-12-2014 19:15:15 Systemprüfpunkt
18-12-2014 19:40:41 Systemprüfpunkt
19-12-2014 21:28:17 Systemprüfpunkt
20-12-2014 22:02:39 Systemprüfpunkt
22-12-2014 10:45:40 Systemprüfpunkt
23-12-2014 11:04:54 Systemprüfpunkt
24-12-2014 11:36:26 Systemprüfpunkt
27-12-2014 13:55:52 Systemprüfpunkt
28-12-2014 14:47:50 Systemprüfpunkt
29-12-2014 15:39:03 Systemprüfpunkt
30-12-2014 16:25:57 Systemprüfpunkt
31-12-2014 16:44:08 Systemprüfpunkt
01-01-2015 18:11:17 Systemprüfpunkt
02-01-2015 18:43:17 Systemprüfpunkt
03-01-2015 19:03:58 Systemprüfpunkt
04-01-2015 20:07:07 Systemprüfpunkt
05-01-2015 20:45:30 Systemprüfpunkt
06-01-2015 20:49:53 Systemprüfpunkt
08-01-2015 06:57:55 Systemprüfpunkt
09-01-2015 07:00:33 Systemprüfpunkt
10-01-2015 09:58:34 Systemprüfpunkt
11-01-2015 14:03:06 Systemprüfpunkt

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2004-10-28 17:22 - 2006-02-10 21:34 - 00000847 ____A C:\WINDOWS\system32\Drivers\etc\hosts
127.0.0.1       localhost
127.0.0.1       localhost


==================== Scheduled Tasks (whitelisted) =============


(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\WINDOWS\Tasks\Ende des Supports für Microsoft Windows XP –  Benachrichtigung – Anmeldung.job => C:\WINDOWS\system32\xp_eos.exe
Task: C:\WINDOWS\Tasks\Ende des Supports für Microsoft Windows XP – Monatliche Benachrichtigung.job => C:\WINDOWS\system32\xp_eos.exe
Task: C:\WINDOWS\Tasks\FacebookUpdateTaskUserS-1-5-21-2627930752-4006264225-1260829912-1007Core.job => C:\Dokumente und Einstellungen\Felix\Lokale Einstellungen\Anwendungsdaten\Facebook\Update\FacebookUpdate.exe
Task: C:\WINDOWS\Tasks\FacebookUpdateTaskUserS-1-5-21-2627930752-4006264225-1260829912-1007UA.job => C:\Dokumente und Einstellungen\Felix\Lokale Einstellungen\Anwendungsdaten\Facebook\Update\FacebookUpdate.exe
Task: C:\WINDOWS\Tasks\Opera scheduled Autoupdate 1413393108.job => C:\Programme\Opera\launcher.exe

==================== Loaded Modules (whitelisted) =============

2005-01-29 13:45 - 2004-03-23 15:02 - 00032768 ____N () C:\WINDOWS\system32\LXPRMON.DLL
2005-01-29 13:38 - 2004-02-12 16:09 - 00075264 _____ () C:\WINDOWS\System32\spool\PRTPROCS\W32X86\LXBTPP5C.dll
2013-04-21 20:44 - 2013-04-21 20:44 - 00087952 _____ () C:\Programme\Gemeinsame Dateien\Apple\Apple Application Support\zlib1.dll
2013-04-21 20:44 - 2013-04-21 20:44 - 01242952 _____ () C:\Programme\Gemeinsame Dateien\Apple\Apple Application Support\libxml2.dll
2013-07-10 20:32 - 2013-07-10 20:32 - 03391488 _____ () c:\windows\assembly\nativeimages1_v1.1.4322\mscorlib\1.0.5000.0__b77a5c561934e089_0cb8bca0\mscorlib.dll
2013-07-10 20:31 - 2013-07-10 20:31 - 01966080 _____ () c:\windows\assembly\nativeimages1_v1.1.4322\system\1.0.5000.0__b77a5c561934e089_25a16ab1\system.dll
2013-07-10 20:32 - 2013-07-10 20:32 - 02088960 _____ () c:\windows\assembly\nativeimages1_v1.1.4322\system.xml\1.0.5000.0__b77a5c561934e089_a9b0a5de\system.xml.dll
2014-05-08 12:21 - 2014-05-08 12:21 - 00301056 _____ () C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\PDFShell.DEU
2005-09-04 20:38 - 1998-10-17 06:00 - 00034304 _____ () C:\Programme\WinZip\WZSHLEXT.DLL
2004-10-28 17:22 - 2008-04-14 03:22 - 00014336 _____ () C:\WINDOWS\system32\msdmo.dll
2011-07-19 22:00 - 2009-12-11 14:16 - 00320512 _____ () C:\WINDOWS\tsnp2uvc.exe
2013-06-25 17:23 - 2013-06-25 17:23 - 00880640 _____ () C:\Programme\Sony\ReaderDesktop\appHelper\fsk.dll
2013-06-25 17:24 - 2013-06-25 17:24 - 00040264 _____ () C:\Programme\Sony\ReaderDesktop\appHelper\FskMediaPlayers.dll
2013-06-25 17:24 - 2013-06-25 17:24 - 00239944 _____ () C:\Programme\Sony\ReaderDesktop\appHelper\Fskin.dll
2013-06-25 17:24 - 2013-06-25 17:24 - 00026952 _____ () C:\Programme\Sony\ReaderDesktop\appHelper\FskinLocalize.dll
2013-05-23 18:54 - 2013-05-23 18:54 - 00798720 _____ () C:\Programme\Sony\ReaderDesktop\appHelper\FskSecurity.dll
2013-06-25 17:24 - 2013-06-25 17:24 - 00125256 _____ () C:\Programme\Sony\ReaderDesktop\appHelper\FskDocumentViewer.dll
2013-06-25 17:24 - 2013-06-25 17:24 - 00016200 _____ () C:\Programme\Sony\ReaderDesktop\appHelper\FskPower.dll
2013-06-25 17:24 - 2013-06-25 17:24 - 00024904 _____ () C:\Programme\Sony\ReaderDesktop\appHelper\FskNetInterface.dll
2013-06-25 17:24 - 2013-06-25 17:24 - 00017224 _____ () C:\Programme\Sony\ReaderDesktop\appHelper\FskMobileMediaDevice.dll
2013-06-25 17:24 - 2013-06-25 17:24 - 00015176 _____ () C:\Programme\Sony\ReaderDesktop\appHelper\FskTimeHardware.dll
2013-06-25 17:24 - 2013-06-25 17:24 - 00034632 _____ () C:\Programme\Sony\ReaderDesktop\appHelper\ticket.dll
2013-06-25 17:24 - 2013-06-25 17:24 - 00018760 _____ () C:\Programme\Sony\ReaderDesktop\appHelper\ebookDeviceNotifier.dll
2013-06-25 17:24 - 2013-06-25 17:24 - 00092488 _____ () C:\Programme\Sony\ReaderDesktop\appHelper\ebookUsb.dll
2013-06-25 17:24 - 2013-06-25 17:24 - 00149832 _____ () C:\Programme\Sony\ReaderDesktop\appHelper\readerAppHelper.dll
2013-06-25 17:24 - 2013-06-25 17:24 - 00178504 _____ () C:\Programme\Sony\ReaderDesktop\appHelper\USBDetector.dll
2014-08-18 17:17 - 2014-06-03 17:07 - 00092984 _____ () C:\Programme\DriverTuner\zlibwapi.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)

AlternateDataStreams: C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\TEMP:B14B4A95

==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== EXE Association (whitelisted) =============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


==================== MSCONFIG/TASK MANAGER disabled items =========

(Currently there is no automatic fix for this section.)


========================= Accounts: ==========================

Administrator (S-1-5-21-2627930752-4006264225-1260829912-500 - Administrator - Enabled)
ASPNET (S-1-5-21-2627930752-4006264225-1260829912-1004 - Limited - Enabled)
Chef (S-1-5-21-2627930752-4006264225-1260829912-1011 - Administrator - Enabled) => %SystemDrive%\Dokumente und Einstellungen\Chef
Felix (S-1-5-21-2627930752-4006264225-1260829912-1007 - Limited - Enabled) => %SystemDrive%\Dokumente und Einstellungen\Felix
Gaby (S-1-5-21-2627930752-4006264225-1260829912-1010 - Limited - Enabled) => %SystemDrive%\Dokumente und Einstellungen\Gaby
Gast (S-1-5-21-2627930752-4006264225-1260829912-501 - Limited - Enabled) => %SystemDrive%\Dokumente und Einstellungen\Gast
Hilfeassistent (S-1-5-21-2627930752-4006264225-1260829912-1006 - Limited - Disabled)
Kinder (S-1-5-21-2627930752-4006264225-1260829912-1008 - Limited - Enabled) => %SystemDrive%\Dokumente und Einstellungen\Kinder
Romy (S-1-5-21-2627930752-4006264225-1260829912-1009 - Limited - Enabled) => %SystemDrive%\Dokumente und Einstellungen\Romy
SUPPORT_388945a0 (S-1-5-21-2627930752-4006264225-1260829912-1002 - Limited - Disabled)

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (01/11/2015 08:47:05 PM) (Source: Google Update) (EventID: 20) (User: ALBERS2)
Description: Network Request Error.
Error: 0x80040801. Http status code: 0.
Url=https://www.facebook.com/omaha/update.php
Trying config: source=IE, direct connection.
trying CUP:WinHTTP.
Send request returned 0x80040801. Http status code 0.
trying WinHTTP.
Send request returned 0x80040801. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80040801. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send request returned 0x80040801. Http status code 0.
trying WinHTTP.
Send request returned 0x80040801. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80040801. Http status code 0.
Trying config: source=IE, direct connection.
trying CUP:WinHTTP.
Send request returned 0x80040801. Http status code 0.
trying WinHTTP.
Send request returned 0x80040801. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80040801. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send request returned 0x80040801

Error: (01/11/2015 05:47:05 PM) (Source: Google Update) (EventID: 20) (User: ALBERS2)
Description: Network Request Error.
Error: 0x80040801. Http status code: 0.
Url=https://www.facebook.com/omaha/update.php
Trying config: source=IE, direct connection.
trying CUP:WinHTTP.
Send request returned 0x80040801. Http status code 0.
trying WinHTTP.
Send request returned 0x80040801. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80040801. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send request returned 0x80040801. Http status code 0.
trying WinHTTP.
Send request returned 0x80040801. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80040801. Http status code 0.
Trying config: source=IE, direct connection.
trying CUP:WinHTTP.
Send request returned 0x80040801. Http status code 0.
trying WinHTTP.
Send request returned 0x80040801. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80040801. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send request returned 0x80040801

Error: (01/11/2015 04:43:30 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 3063438

Error: (01/11/2015 04:43:30 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 3063438

Error: (01/11/2015 04:43:30 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (01/11/2015 04:43:27 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 3060797

Error: (01/11/2015 04:43:27 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 3060797

Error: (01/11/2015 04:43:27 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (01/11/2015 04:43:25 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 3058844

Error: (01/11/2015 04:43:25 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 3058844


System errors:
=============
Error: (01/14/2015 08:01:25 PM) (Source: Windows Update Agent) (EventID: 16) (User: )
Description: Verbindung nicht möglich: Es konnte keine Verbindung mit dem Dienst "Automatische Updates" hergestellt werden, daher können Updates nicht nach dem angegebenen Zeitplan heruntergeladen und installiert werden. Es wird weiterhin versucht, eine Verbindung herzustellen.

Error: (01/08/2015 06:59:52 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "WMI-Leistungsadapter" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1053

Error: (01/08/2015 06:59:52 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Zeitüberschreitung (30000 ms) beim Verbindungsversuch mit Dienst WMI-Leistungsadapter.

Error: (01/07/2015 06:08:28 PM) (Source: Service Control Manager) (EventID: 7011) (User: )
Description: Zeitüberschreitung (30000 ms) beim Warten auf eine Transaktionsrückmeldung von Dienst HPM1319RcvFaxSrvc.

Error: (01/05/2015 00:47:42 PM) (Source: Service Control Manager) (EventID: 7011) (User: )
Description: Zeitüberschreitung (30000 ms) beim Warten auf eine Transaktionsrückmeldung von Dienst HPM1319RcvFaxSrvc.

Error: (01/03/2015 09:51:56 PM) (Source: Service Control Manager) (EventID: 7011) (User: )
Description: Zeitüberschreitung (30000 ms) beim Warten auf eine Transaktionsrückmeldung von Dienst Garmin Core Update Service.

Error: (01/03/2015 00:56:12 PM) (Source: Service Control Manager) (EventID: 7011) (User: )
Description: Zeitüberschreitung (30000 ms) beim Warten auf eine Transaktionsrückmeldung von Dienst HPM1319RcvFaxSrvc.

Error: (01/02/2015 01:42:20 PM) (Source: Service Control Manager) (EventID: 7022) (User: )
Description: Der Dienst "Pinnacle Systems Media Service" wurde nicht ordnungsgemäß gestartet.

Error: (01/01/2015 02:43:10 PM) (Source: Dhcp) (EventID: 1002) (User: )
Description: Die IP-Adresslease 46.223.59.142 für die Netzwerkkarte mit der Netzwerkadresse 0011D81CACEC wurde durch
den DHCP-Server 0.0.0.0 abgelehnt (der DHCP-Server hat eine DHCPNACK-Meldung gesendet).

Error: (01/01/2015 02:42:28 PM) (Source: Dhcp) (EventID: 1002) (User: )
Description: Die IP-Adresslease 192.168.178.30 für die Netzwerkkarte mit der Netzwerkadresse 0011D81CACEC wurde durch
den DHCP-Server 10.118.192.1 abgelehnt (der DHCP-Server hat eine DHCPNACK-Meldung gesendet).


Microsoft Office Sessions:
=========================
Error: (01/11/2015 08:47:05 PM) (Source: Google Update) (EventID: 20) (User: ALBERS2)
Description: Network Request Error.
Error: 0x80040801. Http status code: 0.
Url=https://www.facebook.com/omaha/update.php
Trying config: source=IE, direct connection.
trying CUP:WinHTTP.
Send request returned 0x80040801. Http status code 0.
trying WinHTTP.
Send request returned 0x80040801. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80040801. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send request returned 0x80040801. Http status code 0.
trying WinHTTP.
Send request returned 0x80040801. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80040801. Http status code 0.
Trying config: source=IE, direct connection.
trying CUP:WinHTTP.
Send request returned 0x80040801. Http status code 0.
trying WinHTTP.
Send request returned 0x80040801. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80040801. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send request returned 0x80040801

Error: (01/11/2015 05:47:05 PM) (Source: Google Update) (EventID: 20) (User: ALBERS2)
Description: Network Request Error.
Error: 0x80040801. Http status code: 0.
Url=https://www.facebook.com/omaha/update.php
Trying config: source=IE, direct connection.
trying CUP:WinHTTP.
Send request returned 0x80040801. Http status code 0.
trying WinHTTP.
Send request returned 0x80040801. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80040801. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send request returned 0x80040801. Http status code 0.
trying WinHTTP.
Send request returned 0x80040801. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80040801. Http status code 0.
Trying config: source=IE, direct connection.
trying CUP:WinHTTP.
Send request returned 0x80040801. Http status code 0.
trying WinHTTP.
Send request returned 0x80040801. Http status code 0.
trying CUP:iexplore.
Send request returned 0x80040801. Http status code 0.
Trying config: source=auto, wpad=1, script=.
trying CUP:WinHTTP.
Send request returned 0x80040801

Error: (01/11/2015 04:43:30 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 3063438

Error: (01/11/2015 04:43:30 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 3063438

Error: (01/11/2015 04:43:30 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (01/11/2015 04:43:27 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 3060797

Error: (01/11/2015 04:43:27 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 3060797

Error: (01/11/2015 04:43:27 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (01/11/2015 04:43:25 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 3058844

Error: (01/11/2015 04:43:25 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 3058844


==================== Memory info =========================== 

Processor:  Intel(R) Pentium(R) 4 CPU 2.93GHz
Percentage of memory in use: 23%
Total physical RAM: 2559.3 MB
Available physical RAM: 1952.98 MB
Total Pagefile: 3174.89 MB
Available Pagefile: 2408.29 MB
Total Virtual: 2047.88 MB
Available Virtual: 1956.35 MB

==================== Drives ================================

Drive c: (412757) (Fixed) (Total:149.05 GB) (Free:57.83 GB) NTFS ==>[Drive with boot components (Windows XP)]
Drive e: (USB-BBZ) (Removable) (Total:1.95 GB) (Free:1.66 GB) FAT

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 149.1 GB) (Disk ID: 8354AD7E)
Partition 1: (Active) - (Size=149 GB) - (Type=07 NTFS)

========================================================
Disk: 6 (Size: 2 GB) (Disk ID: 0135D756)
Partition 1: (Active) - (Size=2 GB) - (Type=06)

==================== End Of Log ============================

Vermutlich ist das Resultat nicht sehr schmeichelhaft für mich

Aber was nütz's?
Ich hoffe, Dir wird nicht schwindelig davon.

Gruß Sanderbörd

schrauber · 15.01.2015, 07:04

So schlimm sieht das gar nit aus.

Lade Dir bitte von hier

Revo Uninstaller (alternativ portable Revo Uninstaller) herunter.

Installiere und starte das Programm. (Bebilderte Anleitung zu Revo Uninstaller)
Klicke auf Optionen und wähle als Sprache Deutsch.
Suche im Uninstallerfeld nach den Programmen:

Conduit Engine

pdfforge Toolbar v1.1.1

softonic-de3 Toolbar
Wähle die Programme nacheinander aus und klicke jedes Mal auf Uninstall.
Wähle anschließend den Modus "Moderat" aus.
Reste löschen:
Klicke auf dann auf und dann auf .

Scan mit Combofix

WARNUNG an die MITLESER:
Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!

Downloade dir bitte Combofix vom folgenden Downloadspiegel: Link

WICHTIG: Speichere Combofix auf deinem Desktop

Deaktiviere bitte alle deine Antivirensoftware sowie Malware/Spyware Scanner. Diese können Combofix bei der Arbeit stören.

Starte die Combofix.exe und folge den Anweisungen auf dem Bildschirm.

Combofix wird überprüfen, ob die Microsoft Windows Wiederherstellungskonsole installiert ist.
Ist diese nicht installiert, erlaube Combofix diese herunter zu laden und zu installieren. Folge dazu einfach den Anweisungen und aktzeptiere die Endbenutzer-Lizenz.
Bei heutiger Malware ist dies sehr empfehlenswert, da diese uns eine Möglichkeit bietet, dein System zu reparieren, falls etwas schief geht.
Bestätige die Information, dass die Wiederherstellungskonsole installiert wurde mit Ja.
Hinweis: Ist diese bereits installiert, wird Combofix mit der Malwareentfernung fortfahren.

Während Combofix läuft bitte nicht am Computer arbeiten, die Maus bewegen oder ins Combofixfenster klicken!

Wenn Combofix fertig ist, wird es eine Logfile erstellen.

Bitte poste die C:\Combofix.txt in deiner nächsten Antwort.

Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten
Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.
starte den Rechner einfach neu. Dies sollte das Problem beheben.

Sanderbörd · 15.01.2015, 23:53

Hallo Schrauber
Hat alles soweit funktioniert
Hier der log v. Combofix

Code:

ATTFilter

ComboFix 15-01-08.01 - Chef 15.01.2015  23:21:34.1.1 - x86
Microsoft Windows XP Home Edition  5.1.2600.3.1252.49.1031.18.2559.1962 [GMT 1:00]
ausgeführt von:: c:\dokumente und einstellungen\Chef\Desktop\ComboFix.exe
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Outdated* {00000000-0000-0000-0000-000000000000}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {804E5358-FFA4-00DA-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {804E5358-FFA4-00EB-0D24-347CA8A3377C}
AV: AntiVir PersonalEdition Classic Virenschutz *Enabled/Updated* {804E5358-FFA4-00FC-0D24-347CA8A3377C}
AV: Avira Desktop *Disabled/Outdated* {AD166499-45F9-482A-A743-FDD3350758C7}
.
.
((((((((((((((((((((((((((((((((((((   Weitere Löschungen   ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\dokume~1\Chef\LOKALE~1\Temp\avgnt.exe\Avira.OE.ExtApi.dll
c:\dokumente und einstellungen\All Users\Anwendungsdaten\TEMP
c:\dokumente und einstellungen\Chef\Anwendungsdaten\PriceGong
c:\dokumente und einstellungen\Chef\Anwendungsdaten\PriceGong\Data\1.txt
c:\dokumente und einstellungen\Chef\Anwendungsdaten\PriceGong\Data\a.txt
c:\dokumente und einstellungen\Chef\Anwendungsdaten\PriceGong\Data\b.txt
c:\dokumente und einstellungen\Chef\Anwendungsdaten\PriceGong\Data\c.txt
c:\dokumente und einstellungen\Chef\Anwendungsdaten\PriceGong\Data\d.txt
c:\dokumente und einstellungen\Chef\Anwendungsdaten\PriceGong\Data\e.txt
c:\dokumente und einstellungen\Chef\Anwendungsdaten\PriceGong\Data\f.txt
c:\dokumente und einstellungen\Chef\Anwendungsdaten\PriceGong\Data\g.txt
c:\dokumente und einstellungen\Chef\Anwendungsdaten\PriceGong\Data\h.txt
c:\dokumente und einstellungen\Chef\Anwendungsdaten\PriceGong\Data\i.txt
c:\dokumente und einstellungen\Chef\Anwendungsdaten\PriceGong\Data\j.txt
c:\dokumente und einstellungen\Chef\Anwendungsdaten\PriceGong\Data\k.txt
c:\dokumente und einstellungen\Chef\Anwendungsdaten\PriceGong\Data\l.txt
c:\dokumente und einstellungen\Chef\Anwendungsdaten\PriceGong\Data\m.txt
c:\dokumente und einstellungen\Chef\Anwendungsdaten\PriceGong\Data\n.txt
c:\dokumente und einstellungen\Chef\Anwendungsdaten\PriceGong\Data\o.txt
c:\dokumente und einstellungen\Chef\Anwendungsdaten\PriceGong\Data\p.txt
c:\dokumente und einstellungen\Chef\Anwendungsdaten\PriceGong\Data\q.txt
c:\dokumente und einstellungen\Chef\Anwendungsdaten\PriceGong\Data\r.txt
c:\dokumente und einstellungen\Chef\Anwendungsdaten\PriceGong\Data\s.txt
c:\dokumente und einstellungen\Chef\Anwendungsdaten\PriceGong\Data\t.txt
c:\dokumente und einstellungen\Chef\Anwendungsdaten\PriceGong\Data\u.txt
c:\dokumente und einstellungen\Chef\Anwendungsdaten\PriceGong\Data\v.txt
c:\dokumente und einstellungen\Chef\Anwendungsdaten\PriceGong\Data\w.txt
c:\dokumente und einstellungen\Chef\Anwendungsdaten\PriceGong\Data\wlu.txt
c:\dokumente und einstellungen\Chef\Anwendungsdaten\PriceGong\Data\x.txt
c:\dokumente und einstellungen\Chef\Anwendungsdaten\PriceGong\Data\y.txt
c:\dokumente und einstellungen\Chef\Anwendungsdaten\PriceGong\Data\z.txt
c:\dokumente und einstellungen\Chef\Lokale Einstellungen\Temp\avgnt.exe\Avira.OE.ExtApi.dll
c:\dokumente und einstellungen\Felix\WINDOWS
C:\install.exe
c:\windows\$msi31uninstall_kb893803v2$
c:\windows\$msi31uninstall_kb893803v2$\msi.dll
c:\windows\$msi31uninstall_kb893803v2$\reg00003
c:\windows\$msi31uninstall_kb893803v2$\reg00004
c:\windows\$msi31uninstall_kb893803v2$\reg00005
c:\windows\$msi31uninstall_kb893803v2$\reg00006
c:\windows\$msi31uninstall_kb893803v2$\reg00007
c:\windows\$msi31uninstall_kb893803v2$\reg00008
c:\windows\$msi31uninstall_kb893803v2$\reg00009
c:\windows\$msi31uninstall_kb893803v2$\reg00010
c:\windows\$msi31uninstall_kb893803v2$\reg00011
c:\windows\$msi31uninstall_kb893803v2$\reg00012
c:\windows\$msi31uninstall_kb893803v2$\reg00013
c:\windows\$msi31uninstall_kb893803v2$\reg00014
c:\windows\$msi31uninstall_kb893803v2$\reg00015
c:\windows\$msi31uninstall_kb893803v2$\reg00016
c:\windows\$msi31uninstall_kb893803v2$\reg00017
c:\windows\$msi31uninstall_kb893803v2$\reg00018
c:\windows\$msi31uninstall_kb893803v2$\reg00019
c:\windows\$msi31uninstall_kb893803v2$\reg00020
c:\windows\$msi31uninstall_kb893803v2$\reg00021
c:\windows\$msi31uninstall_kb893803v2$\reg00022
c:\windows\$msi31uninstall_kb893803v2$\reg00023
c:\windows\$msi31uninstall_kb893803v2$\reg00024
c:\windows\$msi31uninstall_kb893803v2$\reg00025
c:\windows\$msi31uninstall_kb893803v2$\reg00026
c:\windows\$msi31uninstall_kb893803v2$\reg00027
c:\windows\$msi31uninstall_kb893803v2$\reg00028
c:\windows\$msi31uninstall_kb893803v2$\reg00029
c:\windows\$msi31uninstall_kb893803v2$\reg00030
c:\windows\$msi31uninstall_kb893803v2$\reg00031
c:\windows\$msi31uninstall_kb893803v2$\reg00032
c:\windows\$msi31uninstall_kb893803v2$\reg00033
c:\windows\$msi31uninstall_kb893803v2$\reg00034
c:\windows\$msi31uninstall_kb893803v2$\reg00035
c:\windows\$msi31uninstall_kb893803v2$\reg00036
c:\windows\$msi31uninstall_kb893803v2$\reg00037
c:\windows\$msi31uninstall_kb893803v2$\reg00038
c:\windows\$msi31uninstall_kb893803v2$\reg00039
c:\windows\$msi31uninstall_kb893803v2$\reg00040
c:\windows\$msi31uninstall_kb893803v2$\reg00041
c:\windows\$msi31uninstall_kb893803v2$\reg00042
c:\windows\$msi31uninstall_kb893803v2$\reg00043
c:\windows\$msi31uninstall_kb893803v2$\reg00044
c:\windows\$msi31uninstall_kb893803v2$\reg00045
c:\windows\$msi31uninstall_kb893803v2$\reg00046
c:\windows\$msi31uninstall_kb893803v2$\reg00047
c:\windows\$msi31uninstall_kb893803v2$\reg00048
c:\windows\$msi31uninstall_kb893803v2$\reg00051
c:\windows\$msi31uninstall_kb893803v2$\reg00052
c:\windows\$msi31uninstall_kb893803v2$\reg00053
c:\windows\$msi31uninstall_kb893803v2$\reg00054
c:\windows\$msi31uninstall_kb893803v2$\reg00055
c:\windows\$msi31uninstall_kb893803v2$\reg00056
c:\windows\$msi31uninstall_kb893803v2$\reg00057
c:\windows\$msi31uninstall_kb893803v2$\reg00058
c:\windows\$msi31uninstall_kb893803v2$\reg00059
c:\windows\$msi31uninstall_kb893803v2$\reg00060
c:\windows\$msi31uninstall_kb893803v2$\reg00061
c:\windows\$msi31uninstall_kb893803v2$\reg00062
c:\windows\$msi31uninstall_kb893803v2$\reg00063
c:\windows\$msi31uninstall_kb893803v2$\reg00064
c:\windows\$msi31uninstall_kb893803v2$\reg00065
c:\windows\$msi31uninstall_kb893803v2$\reg00066
c:\windows\$msi31uninstall_kb893803v2$\reg00067
c:\windows\$msi31uninstall_kb893803v2$\reg00068
c:\windows\$msi31uninstall_kb893803v2$\reg00069
c:\windows\$msi31uninstall_kb893803v2$\reg00070
c:\windows\$msi31uninstall_kb893803v2$\reg00071
c:\windows\$msi31uninstall_kb893803v2$\reg00072
c:\windows\$msi31uninstall_kb893803v2$\reg00073
c:\windows\$msi31uninstall_kb893803v2$\reg00074
c:\windows\$msi31uninstall_kb893803v2$\reg00075
c:\windows\$msi31uninstall_kb893803v2$\reg00076
c:\windows\$msi31uninstall_kb893803v2$\reg00077
c:\windows\$msi31uninstall_kb893803v2$\reg00078
c:\windows\$msi31uninstall_kb893803v2$\reg00079
c:\windows\$msi31uninstall_kb893803v2$\reg00080
c:\windows\$msi31uninstall_kb893803v2$\reg00081
c:\windows\$msi31uninstall_kb893803v2$\reg00082
c:\windows\$msi31uninstall_kb893803v2$\reg00083
c:\windows\$msi31uninstall_kb893803v2$\reg00084
c:\windows\$msi31uninstall_kb893803v2$\reg00085
c:\windows\$msi31uninstall_kb893803v2$\reg00086
c:\windows\$msi31uninstall_kb893803v2$\reg00087
c:\windows\$msi31uninstall_kb893803v2$\reg00088
c:\windows\$msi31uninstall_kb893803v2$\reg00089
c:\windows\$msi31uninstall_kb893803v2$\reg00090
c:\windows\$msi31uninstall_kb893803v2$\reg00091
c:\windows\$msi31uninstall_kb893803v2$\reg00092
c:\windows\$msi31uninstall_kb893803v2$\reg00093
c:\windows\$msi31uninstall_kb893803v2$\reg00094
c:\windows\$msi31uninstall_kb893803v2$\reg00095
c:\windows\$msi31uninstall_kb893803v2$\reg00096
c:\windows\$msi31uninstall_kb893803v2$\reg00097
c:\windows\$msi31uninstall_kb893803v2$\reg00098
c:\windows\$msi31uninstall_kb893803v2$\reg00099
c:\windows\$msi31uninstall_kb893803v2$\reg00100
c:\windows\$msi31uninstall_kb893803v2$\reg00101
c:\windows\$msi31uninstall_kb893803v2$\reg00102
c:\windows\$msi31uninstall_kb893803v2$\reg00103
c:\windows\$msi31uninstall_kb893803v2$\reg00104
c:\windows\$msi31uninstall_kb893803v2$\reg00105
c:\windows\$msi31uninstall_kb893803v2$\reg00106
c:\windows\$msi31uninstall_kb893803v2$\reg00107
c:\windows\$msi31uninstall_kb893803v2$\reg00108
c:\windows\$msi31uninstall_kb893803v2$\reg00109
c:\windows\$msi31uninstall_kb893803v2$\reg00110
c:\windows\$msi31uninstall_kb893803v2$\reg00111
c:\windows\$msi31uninstall_kb893803v2$\reg00112
c:\windows\$msi31uninstall_kb893803v2$\reg00113
c:\windows\$msi31uninstall_kb893803v2$\reg00114
c:\windows\$msi31uninstall_kb893803v2$\reg00115
c:\windows\$msi31uninstall_kb893803v2$\reg00116
c:\windows\$msi31uninstall_kb893803v2$\spuninst\spuninst.exe
c:\windows\$msi31uninstall_kb893803v2$\spuninst\spuninst.inf
c:\windows\$msi31uninstall_kb893803v2$\spuninst\spuninst.txt
c:\windows\$msi31uninstall_kb893803v2$\spuninst\updspapi.dll
c:\windows\IsUn0407.exe
c:\windows\system32\FE05DA0D.dll
c:\windows\system32\FE05EFED.dll
c:\windows\system32\FE05F051.dll
c:\windows\system32\FE05F3D5.dll
c:\windows\unin0407.exe
.
.
(((((((((((((((((((((((   Dateien erstellt von 2014-12-15 bis 2015-01-15  ))))))))))))))))))))))))))))))
.
.
2015-01-15 21:52 . 2015-01-15 21:52	--------	d-----w-	c:\programme\VS Revo Group
2015-01-14 19:14 . 2015-01-14 19:16	--------	d-----w-	C:\FRST
2015-01-08 22:25 . 2015-01-08 22:25	--------	d-s---w-	c:\dokumente und einstellungen\Chef\UserData
2014-12-19 15:56 . 2014-12-19 15:56	--------	d-----w-	c:\dokumente und einstellungen\Chef\Lokale Einstellungen\Anwendungsdaten\DriverTuner
.
.
.
((((((((((((((((((((((((((((((((((((   Find3M Bericht   ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
.
((((((((((((((((((((((((((((   Autostartpunkte der Registrierung   ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. 
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"GarminExpressTrayApp"="c:\programme\Garmin\Express Tray\ExpressTray.exe" [2013-07-09 1093464]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Verknüpfung mit der High Definition Audio-Eigenschaftenseite"="HDAudPropShortcut.exe" [2004-03-17 61952]
"SoundMan"="SOUNDMAN.EXE" [2004-10-21 77824]
"AlcWzrd"="ALCWZRD.EXE" [2004-10-21 2744832]
"ATIPTA"="c:\ati-cpanel\atiptaxx.exe" [2004-09-29 344064]
"NeroFilterCheck"="c:\windows\system32\NeroCheck.exe" [2001-07-09 155648]
"PMCS"="c:\programme\Pinnacle\Shared Files\Programs\MediaCenterService\PMC.Service.Main.exe" [2004-09-29 24576]
"PinnacleDriverCheck"="c:\windows\system32\PSDrvCheck.exe" [2003-11-10 406016]
"PMCRemote"="c:\programme\Pinnacle\Shared Files\Programs\Remote\Remoterm.exe" [2004-09-23 73728]
"Lexmark 5200 series"="c:\programme\Lexmark 5200 series\lxbtbmgr.exe" [2004-06-04 57344]
"FaxCenterServer"="c:\programme\Lexmark Fax Solutions\fm3032.exe" [2004-03-23 294912]
"EVENTLISTENER"="c:\programme\Gemeinsame Dateien\FotoNation\EvLstnr.exe" [2000-06-20 53248]
"QuickTime Task"="c:\programme\QuickTime\QTTask.exe" [2010-11-29 421888]
"LXBTCATS"="c:\windows\System32\spool\DRIVERS\W32X86\3\LXBTtime.dll" [2004-03-17 65536]
"Adobe ARM"="c:\programme\Gemeinsame Dateien\Adobe\ARM\1.0\AdobeARM.exe" [2013-11-21 959904]
"FixCamera"="c:\windows\FixCamera.exe" [2008-08-21 188928]
"snp2uvc"="c:\windows\vsnp2uvc.exe" [2008-08-01 675840]
"tsnp2uvc"="c:\windows\tsnp2uvc.exe" [2009-12-11 320512]
"KeePass 2 PreLoad"="c:\programme\KeePass Password Safe 2\KeePass.exe" [2011-07-12 1764352]
"avgnt"="c:\programme\Avira\AntiVir Desktop\avgnt.exe" [2014-12-18 702768]
"SunJavaUpdateSched"="c:\programme\Gemeinsame Dateien\Java\Java Update\jusched.exe" [2013-03-12 253816]
"APSDaemon"="c:\programme\Gemeinsame Dateien\Apple\Apple Application Support\APSDaemon.exe" [2013-04-21 59720]
"iTunesHelper"="c:\programme\iTunes\iTunesHelper.exe" [2013-08-16 152392]
"Reader Application Helper"="c:\programme\Sony\ReaderDesktop\appHelper\ReaderAppHelper.exe" [2013-06-25 899400]
"PDFPrint"="c:\programme\PDF24\pdf24.exe" [2014-07-04 191528]
"DriverTuner"="c:\programme\DriverTuner\DriverTuner.exe" [2014-06-03 10632504]
"Avira Systray"="c:\programme\Avira\My Avira\Avira.OE.Systray.exe" [2014-11-20 126200]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]
.
c:\dokumente und einstellungen\All Users\Startmenü\Programme\Autostart\
Microsoft Office.lnk - c:\programme\Microsoft Office\Office\OSA9.EXE -b -l [1999-2-17 65588]
p6_19_erinnerung.lnk - c:\programme\phase6\phase6_19\WinStart\p6erinnerung.exe [2007-2-11 49152]
Service Manager.lnk - c:\programme\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe /n [2002-12-17 74308]
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Programme\\Pinnacle\\MediaCenter\\PMC.exe"=
"c:\\Programme\\Pinnacle\\MediaCenter\\PmcSettings.exe"=
"c:\\Programme\\Pinnacle\\Shared Files\\Programs\\MediaManager\\PMSManager.exe"=
"c:\\Programme\\Pinnacle\\MediaCenter\\EpgSpoolerSrv.exe"=
"c:\\Programme\\Pinnacle\\Shared Files\\Programs\\MediaCenterService\\PMC.Service.Main.exe"=
"c:\\Programme\\Pinnacle\\MediaCenter\\tvtvWizard.exe"=
"c:\\Programme\\Pinnacle\\Shared Files\\Programs\\MediaServer\\PMSInstallInit.exe"=
"c:\\Programme\\IncrediMail\\bin\\ImApp.exe"=
"c:\\Programme\\Opera\\opera.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Programme\\TeamViewer\\Version8\\TeamViewer.exe"=
"c:\\Programme\\TeamViewer\\Version8\\TeamViewer_Service.exe"=
"c:\\Programme\\Gemeinsame Dateien\\Apple\\Apple Application Support\\WebKit2WebProcess.exe"=
"c:\\Programme\\Bonjour\\mDNSResponder.exe"=
"c:\\Programme\\iTunes\\iTunes.exe"=
"c:\\Programme\\Skype\\Phone\\Skype.exe"=
.
R1 avkmgr;avkmgr;c:\windows\system32\drivers\avkmgr.sys [01.11.2012 12:04 37352]
R2 acedrv10;acedrv10;c:\windows\system32\drivers\ACEDRV10.sys [27.07.2007 09:13 330144]
R2 acehlp10;acehlp10;c:\windows\system32\drivers\acehlp10.sys [27.07.2007 11:46 251680]
R2 AntiVirSchedulerService;Avira Planer;c:\programme\Avira\AntiVir Desktop\sched.exe [01.11.2012 12:04 431920]
R2 Avira.OE.ServiceHost;Avira Service Host;c:\programme\Avira\My Avira\Avira.OE.ServiceHost.exe [20.11.2014 14:13 166192]
R2 Garmin Core Update Service;Garmin Core Update Service;c:\programme\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe [09.07.2013 07:23 219480]
R2 HPM1319RcvFaxSrvc;HP M1319 Receive Fax Service;c:\programme\HP\HP LaserJet M1319 MFP Series\ReceiveFaxUtility.exe [05.07.2010 16:28 348160]
R2 TeamViewer8;TeamViewer 8;c:\programme\TeamViewer\Version8\TeamViewer_Service.exe [11.08.2013 15:02 4308320]
R3 3xHybrid;Pinnacle PCTV 300i Stereo DVB-T;c:\windows\system32\drivers\3xHybrid.sys [28.10.2004 17:32 698368]
S2 SkypeUpdate;Skype Updater;c:\programme\Skype\Updater\Updater.exe [03.04.2014 19:21 315008]
S3 HP1319EWS;HP1319EWS;c:\windows\system32\drivers\HP1319EWS.sys [02.02.2013 22:36 12800]
S3 HP1319FAX;HP1319MFP FAX;c:\windows\system32\drivers\HP1319FAX.sys [02.02.2013 22:34 13824]
S3 SIVDRIVER;SIV Kernel Driver;c:\windows\system32\drivers\SIVX32.sys [08.09.2012 19:58 48480]
S4 Edprvir;Edprvir; [x]
.
--- Andere Dienste/Treiber im Speicher ---
.
*NewlyCreated* - WS2IFSL
.
Inhalt des "geplante Tasks" Ordners
.
2015-01-15 c:\windows\Tasks\Ende des Supports für Microsoft Windows XP –  Benachrichtigung – Anmeldung.job
- c:\windows\system32\xp_eos.exe [2014-03-12 23:28]
.
2015-01-08 c:\windows\Tasks\Ende des Supports für Microsoft Windows XP – Monatliche Benachrichtigung.job
- c:\windows\system32\xp_eos.exe [2014-03-12 23:28]
.
2015-01-11 c:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2627930752-4006264225-1260829912-1007Core.job
- c:\dokumente und einstellungen\Felix\Lokale Einstellungen\Anwendungsdaten\Facebook\Update\FacebookUpdate.exe [2012-12-17 12:42]
.
2015-01-14 c:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2627930752-4006264225-1260829912-1007UA.job
- c:\dokumente und einstellungen\Felix\Lokale Einstellungen\Anwendungsdaten\Facebook\Update\FacebookUpdate.exe [2012-12-17 12:42]
.
2015-01-15 c:\windows\Tasks\Opera scheduled Autoupdate 1413393108.job
- c:\programme\Opera\launcher.exe [2014-10-15 08:50]
.
.
------- Zusätzlicher Suchlauf -------
.
uInternet Settings,ProxyOverride = *.local
IE: Nach Microsoft &Excel exportieren - c:\progra~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
TCP: DhcpNameServer = 192.168.178.1
FF - ProfilePath - c:\dokumente und einstellungen\Chef\Anwendungsdaten\Mozilla\Firefox\Profiles\xfmnamqy.default\
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
Toolbar-{30F9B915-B755-4826-820B-08FBA6BD249D} - (no file)
AddRemove-Microsoft Interactive Training - c:\windows\IsUn0407.exe
.
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, hxxp://www.gmer.net
Rootkit scan 2015-01-15 23:32
Windows 5.1.2600 Service Pack 3 NTFS
.
Scanne versteckte Prozesse... 
.
Scanne versteckte Autostarteinträge... 
.
HKLM\Software\Microsoft\Windows\CurrentVersion\Run
  LXBTCATS = rundll32 c:\windows\System32\spool\DRIVERS\W32X86\3\LXBTtime.dll,_RunDLLEntry@16??????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????? 
.
Scanne versteckte Dateien... 
.
Scan erfolgreich abgeschlossen
versteckte Dateien: 0
.
**************************************************************************
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil32_14_0_0_145_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil32_14_0_0_145_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
--------------------- Durch laufende Prozesse gestartete DLLs ---------------------
.
- - - - - - - > 'winlogon.exe'(536)
c:\windows\system32\Ati2evxx.dll
.
- - - - - - - > 'explorer.exe'(600)
c:\windows\system32\WPDShServiceObj.dll
c:\programme\Nikon\NkView\MLCamView.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
------------------------ Weitere laufende Prozesse ------------------------
.
c:\windows\system32\Ati2evxx.exe
c:\programme\Avira\AntiVir Desktop\avguard.exe
c:\programme\Gemeinsame Dateien\Apple\Mobile Device Support\AppleMobileDeviceService.exe
c:\programme\Bonjour\mDNSResponder.exe
c:\progra~1\pinnacle\mediac~1\epgspo~2.exe
c:\programme\Java\jre7\bin\jqs.exe
c:\programme\Gemeinsame Dateien\Microsoft Shared\VS7DEBUG\MDM.EXE
c:\programme\Microsoft SQL Server\MSSQL$PINNACLESYS\Binn\sqlservr.exe
c:\programme\pinnacle\shared files\programs\mediaserver\pmshost.exe
c:\windows\system32\Ati2evxx.exe
c:\programme\Avira\AntiVir Desktop\avshadow.exe
c:\windows\SOUNDMAN.EXE
c:\windows\ALCWZRD.EXE
c:\programme\Lexmark 5200 series\lxbtbmon.exe
c:\programme\iPod\bin\iPodService.exe
c:\programme\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe
c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe
.
**************************************************************************
.
Zeit der Fertigstellung: 2015-01-15  23:41:11 - PC wurde neu gestartet
ComboFix-quarantined-files.txt  2015-01-15 22:41
.
Vor Suchlauf: 27 Verzeichnis(se), 63.837.511.680 Bytes frei
Nach Suchlauf: 29 Verzeichnis(se), 64.851.124.224 Bytes frei
.
WindowsXP-KB310994-SP2-Home-BootDisk-DEU.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
UnsupportedDebug="do not select this" /debug
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Home Edition" /noexecute=optin /fastdetect
.
- - End Of File - - 2AC8A494BDBD3E7AEDE45DFC2EDDDAE5
72B8CE41AF0DE751C946802B3ED844B4

Gruß
Sanderbörd

Noch eine Bemerkung bzw. Verständnisfrage:
Offiziell ist doch der Support für XP seit April 14 eingestellt.
Jedoch habe ich danach beim Herunterfahren mehrfach updates installiert bekommen, so auch heute. Wie geht das zusammen?

Gruß Sanderbörd

schrauber · 16.01.2015, 07:43

Wenn die vorher schon gefehlt haben kann das sein.

Downloade Dir bitte

Malwarebytes Anti-Malware

Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
Starte Malwarebytes' Anti-Malware (MBAM).
Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.

Downloade Dir bitte

AdwCleaner auf deinen Desktop.

Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
Starte die AdwCleaner.exe mit einem Doppelklick.
Stimme den Nutzungsbedingungen zu.
Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
- "Tracing" Schlüssel löschen
- Winsock Einstellungen zurücksetzen
- Proxy Einstellungen zurücksetzen
- Internet Explorer Richtlinien zurücksetzen
- Chrome Richtlinien zurücksetzen
- Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
Drücke eine beliebige Taste, um das Tool zu starten.
Je nach System kann der Scan eine Weile dauern.
Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.

und ein frisches FRST log bitte.

Sanderbörd · 17.01.2015, 14:29

Hallo Schrauber,

hier die gewünschten logs:
1. mabam

Code:

ATTFilter

 Malwarebytes Anti-Malware 
www.malwarebytes.org

Suchlauf Datum: 17.01.2015
Suchlauf-Zeit: 12:22:18
Logdatei: xp-mbam.txt
Administrator: Ja

Version: 2.00.4.1028
Malware Datenbank: v2015.01.17.02
Rootkit Datenbank: v2015.01.14.01
Lizenz: Kostenlos
Malware Schutz: Deaktiviert
Bösartiger Webseiten Schutz: Deaktiviert
Selbstschutz: Deaktiviert

Betriebssystem: Windows XP Service Pack 3
CPU: x86
Dateisystem: NTFS
Benutzer: Chef

Suchlauf-Art: Bedrohungs-Suchlauf
Ergebnis: Abgeschlossen
Durchsuchte Objekte: 536491
Verstrichene Zeit: 37 Min, 57 Sek

Speicher: Aktiviert
Autostart: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Deaktiviert
Heuristik: Aktiviert
PUP: Aktiviert
PUM: Aktiviert

Prozesse: 0
(Keine schädliche Elemente erkannt)

Module: 0
(Keine schädliche Elemente erkannt)

Registrierungsschlüssel: 16
PUP.Optional.ConduitTB.A, HKU\S-1-5-21-2627930752-4006264225-1260829912-1007-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{30F9B915-B755-4826-820B-08FBA6BD249D}, Löschen bei Neustart, [9bdbc830f0990b2b81a2ac4251b19f61], 
PUP.Optional.ConduitTB.A, HKU\S-1-5-21-2627930752-4006264225-1260829912-1010-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{30F9B915-B755-4826-820B-08FBA6BD249D}, Löschen bei Neustart, [9bdbc830f0990b2b81a2ac4251b19f61], 
PUP.Optional.PriceGong.A, HKU\S-1-5-21-2627930752-4006264225-1260829912-1007-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\PriceGong, Löschen bei Neustart, [562012e6533657df4ceb631660a32fd1], 
PUP.Optional.Softonic.A, HKU\S-1-5-21-2627930752-4006264225-1260829912-1007-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\Softonic, Löschen bei Neustart, [7402a0588207b581a4d8750006fd35cb], 
Trojan.BHO, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{055FD26D-3A88-4e15-963D-DC8493744B1D}, In Quarantäne, [4d295c9c4c3da19587c4425a45c00000], 
Trojan.BHO, HKLM\SOFTWARE\CLASSES\CLSID\{055FD26D-3A88-4E15-963D-DC8493744B1D}, In Quarantäne, [4d295c9c4c3da19587c4425a45c00000], 
Trojan.BHO, HKLM\SOFTWARE\CLASSES\CLSID\{4BD2D6C3-31DC-B947-23D0-DC52EC4F0C4C}, In Quarantäne, [4d295c9c4c3da19587c4425a45c00000], 
Trojan.BHO, HKLM\SOFTWARE\CLASSES\TYPELIB\{77D6DDFA-7834-4541-B2B3-A8B0FB0E3924}, In Quarantäne, [4d295c9c4c3da19587c4425a45c00000], 
Trojan.BHO, HKLM\SOFTWARE\CLASSES\CLSID\{055FD26D-3A88-4E15-963D-DC8493744B1D}\INPROCSERVER32, In Quarantäne, [4d295c9c4c3da19587c4425a45c00000], 
Trojan.BHO, HKU\S-1-5-21-2627930752-4006264225-1260829912-1007-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{055FD26D-3A88-4E15-963D-DC8493744B1D}, Löschen bei Neustart, [4d295c9c4c3da19587c4425a45c00000], 
Trojan.BHO, HKU\S-1-5-21-2627930752-4006264225-1260829912-1007-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{055FD26D-3A88-4E15-963D-DC8493744B1D}, Löschen bei Neustart, [4d295c9c4c3da19587c4425a45c00000], 
Trojan.BHO, HKU\S-1-5-21-2627930752-4006264225-1260829912-1008-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{055FD26D-3A88-4E15-963D-DC8493744B1D}, Löschen bei Neustart, [4d295c9c4c3da19587c4425a45c00000], 
Trojan.BHO, HKU\S-1-5-21-2627930752-4006264225-1260829912-1009-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{055FD26D-3A88-4E15-963D-DC8493744B1D}, Löschen bei Neustart, [4d295c9c4c3da19587c4425a45c00000], 
Trojan.BHO, HKU\S-1-5-21-2627930752-4006264225-1260829912-1010-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{055FD26D-3A88-4E15-963D-DC8493744B1D}, Löschen bei Neustart, [4d295c9c4c3da19587c4425a45c00000], 
Trojan.BHO, HKU\S-1-5-21-2627930752-4006264225-1260829912-1011-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{055FD26D-3A88-4E15-963D-DC8493744B1D}, Löschen bei Neustart, [4d295c9c4c3da19587c4425a45c00000], 
Trojan.BHO, HKU\S-1-5-21-2627930752-4006264225-1260829912-501-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{055FD26D-3A88-4E15-963D-DC8493744B1D}, Löschen bei Neustart, [4d295c9c4c3da19587c4425a45c00000], 

Registrierungswerte: 0
(Keine schädliche Elemente erkannt)

Registrierungsdaten: 1
PUP.Optional.Conduit, HKU\S-1-5-21-2627930752-4006264225-1260829912-1007-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, hxxp://search.conduit.com?SearchSource=10&ctid=CT2431245&CUI=UN28097231481723010, Gut: (www.google.com), Schlecht: (hxxp://search.conduit.com?SearchSource=10&ctid=CT2431245&CUI=UN28097231481723010),Löschen bei Neustart,[9bdbec0c3e4bf541d14a5c3c2adb09f7]

Ordner: 2
PUP.Optional.PriceGong.A, C:\Dokumente und Einstellungen\Felix\Anwendungsdaten\PriceGong, In Quarantäne, [9adc10e88009b581fcbd61d7996a02fe], 
PUP.Optional.PriceGong.A, C:\Dokumente und Einstellungen\Felix\Anwendungsdaten\PriceGong\Data, In Quarantäne, [9adc10e88009b581fcbd61d7996a02fe], 

Dateien: 68
PUP.Optional.ClientConnect, C:\Dokumente und Einstellungen\Felix\Lokale Einstellungen\Temp\softonic-de3\nsn1AF.tbsof2.dll, In Quarantäne, [ee88bb3d90f9979f3a0280429e63936d], 
PUP.Optional.ClientConnect, C:\Dokumente und Einstellungen\Felix\Lokale Einstellungen\Anwendungsdaten\Conduit\Community Alerts\Alert.dll, In Quarantäne, [9bdbf0081475e0562319ad155ea3f40c], 
PUP.Optional.Conduit, C:\Dokumente und Einstellungen\Felix\Lokale Einstellungen\Anwendungsdaten\softonic-de3\hk64tbsof0.dll, In Quarantäne, [4630a55310795adc9d4b86a90ef2817f], 
PUP.Optional.ClientConnect, C:\Dokumente und Einstellungen\Felix\Lokale Einstellungen\Anwendungsdaten\softonic-de3\hk64tbsof2.dll, In Quarantäne, [403633c51772ee4883b9d4ee926f6b95], 
PUP.Optional.Conduit, C:\Dokumente und Einstellungen\Felix\Lokale Einstellungen\Anwendungsdaten\softonic-de3\hktbsof0.dll, In Quarantäne, [86f0995f8aff40f605e346e998681de3], 
PUP.Optional.ClientConnect, C:\Dokumente und Einstellungen\Felix\Lokale Einstellungen\Anwendungsdaten\softonic-de3\hktbsof2.dll, In Quarantäne, [ec8a8c6cdaaffc3a8bb1873b7f82ff01], 
PUP.Optional.Conduit, C:\Dokumente und Einstellungen\Felix\Lokale Einstellungen\Anwendungsdaten\softonic-de3\ldrtbsof0.dll, In Quarantäne, [61156098464370c606e282adcb35758b], 
PUP.Optional.ClientConnect, C:\Dokumente und Einstellungen\Felix\Lokale Einstellungen\Anwendungsdaten\softonic-de3\ldrtbsof2.dll, In Quarantäne, [afc722d6d8b11a1c3606f4cec0412bd5], 
PUP.Optional.ClientConnect, C:\Dokumente und Einstellungen\Felix\Lokale Einstellungen\Anwendungsdaten\softonic-de3\prxtbsof2.dll, In Quarantäne, [afc7f602672290a64af24b7720e16f91], 
PUP.Optional.Conduit, C:\Dokumente und Einstellungen\Felix\Lokale Einstellungen\Anwendungsdaten\softonic-de3\tbsof0.dll, In Quarantäne, [fb7b8c6c9ced57df8a5e5ad526da27d9], 
PUP.Optional.ClientConnect, C:\Dokumente und Einstellungen\Felix\Lokale Einstellungen\Anwendungsdaten\softonic-de3\tbsof1.dll, In Quarantäne, [fd79f60282071d192b11833fab569d63], 
PUP.Optional.ClientConnect, C:\Dokumente und Einstellungen\Felix\Lokale Einstellungen\Anwendungsdaten\softonic-de3\tbsof2.dll, In Quarantäne, [443206f2a8e16cca4af24e7416ebf907], 
PUP.Optional.PriceGong.A, C:\Dokumente und Einstellungen\Felix\Anwendungsdaten\PriceGong\Data\i.xml, In Quarantäne, [9adc10e88009b581fcbd61d7996a02fe], 
PUP.Optional.PriceGong.A, C:\Dokumente und Einstellungen\Felix\Anwendungsdaten\PriceGong\Data\1.txt, In Quarantäne, [9adc10e88009b581fcbd61d7996a02fe], 
PUP.Optional.PriceGong.A, C:\Dokumente und Einstellungen\Felix\Anwendungsdaten\PriceGong\Data\1.xml, In Quarantäne, [9adc10e88009b581fcbd61d7996a02fe], 
PUP.Optional.PriceGong.A, C:\Dokumente und Einstellungen\Felix\Anwendungsdaten\PriceGong\Data\a.txt, In Quarantäne, [9adc10e88009b581fcbd61d7996a02fe], 
PUP.Optional.PriceGong.A, C:\Dokumente und Einstellungen\Felix\Anwendungsdaten\PriceGong\Data\a.xml, In Quarantäne, [9adc10e88009b581fcbd61d7996a02fe], 
PUP.Optional.PriceGong.A, C:\Dokumente und Einstellungen\Felix\Anwendungsdaten\PriceGong\Data\b.txt, In Quarantäne, [9adc10e88009b581fcbd61d7996a02fe], 
PUP.Optional.PriceGong.A, C:\Dokumente und Einstellungen\Felix\Anwendungsdaten\PriceGong\Data\b.xml, In Quarantäne, [9adc10e88009b581fcbd61d7996a02fe], 
PUP.Optional.PriceGong.A, C:\Dokumente und Einstellungen\Felix\Anwendungsdaten\PriceGong\Data\c.txt, In Quarantäne, [9adc10e88009b581fcbd61d7996a02fe], 
PUP.Optional.PriceGong.A, C:\Dokumente und Einstellungen\Felix\Anwendungsdaten\PriceGong\Data\c.xml, In Quarantäne, [9adc10e88009b581fcbd61d7996a02fe], 
PUP.Optional.PriceGong.A, C:\Dokumente und Einstellungen\Felix\Anwendungsdaten\PriceGong\Data\d.txt, In Quarantäne, [9adc10e88009b581fcbd61d7996a02fe], 
PUP.Optional.PriceGong.A, C:\Dokumente und Einstellungen\Felix\Anwendungsdaten\PriceGong\Data\d.xml, In Quarantäne, [9adc10e88009b581fcbd61d7996a02fe], 
PUP.Optional.PriceGong.A, C:\Dokumente und Einstellungen\Felix\Anwendungsdaten\PriceGong\Data\e.txt, In Quarantäne, [9adc10e88009b581fcbd61d7996a02fe], 
PUP.Optional.PriceGong.A, C:\Dokumente und Einstellungen\Felix\Anwendungsdaten\PriceGong\Data\e.xml, In Quarantäne, [9adc10e88009b581fcbd61d7996a02fe], 
PUP.Optional.PriceGong.A, C:\Dokumente und Einstellungen\Felix\Anwendungsdaten\PriceGong\Data\f.txt, In Quarantäne, [9adc10e88009b581fcbd61d7996a02fe], 
PUP.Optional.PriceGong.A, C:\Dokumente und Einstellungen\Felix\Anwendungsdaten\PriceGong\Data\f.xml, In Quarantäne, [9adc10e88009b581fcbd61d7996a02fe], 
PUP.Optional.PriceGong.A, C:\Dokumente und Einstellungen\Felix\Anwendungsdaten\PriceGong\Data\g.txt, In Quarantäne, [9adc10e88009b581fcbd61d7996a02fe], 
PUP.Optional.PriceGong.A, C:\Dokumente und Einstellungen\Felix\Anwendungsdaten\PriceGong\Data\g.xml, In Quarantäne, [9adc10e88009b581fcbd61d7996a02fe], 
PUP.Optional.PriceGong.A, C:\Dokumente und Einstellungen\Felix\Anwendungsdaten\PriceGong\Data\h.txt, In Quarantäne, [9adc10e88009b581fcbd61d7996a02fe], 
PUP.Optional.PriceGong.A, C:\Dokumente und Einstellungen\Felix\Anwendungsdaten\PriceGong\Data\h.xml, In Quarantäne, [9adc10e88009b581fcbd61d7996a02fe], 
PUP.Optional.PriceGong.A, C:\Dokumente und Einstellungen\Felix\Anwendungsdaten\PriceGong\Data\i.txt, In Quarantäne, [9adc10e88009b581fcbd61d7996a02fe], 
PUP.Optional.PriceGong.A, C:\Dokumente und Einstellungen\Felix\Anwendungsdaten\PriceGong\Data\j.txt, In Quarantäne, [9adc10e88009b581fcbd61d7996a02fe], 
PUP.Optional.PriceGong.A, C:\Dokumente und Einstellungen\Felix\Anwendungsdaten\PriceGong\Data\J.xml, In Quarantäne, [9adc10e88009b581fcbd61d7996a02fe], 
PUP.Optional.PriceGong.A, C:\Dokumente und Einstellungen\Felix\Anwendungsdaten\PriceGong\Data\k.txt, In Quarantäne, [9adc10e88009b581fcbd61d7996a02fe], 
PUP.Optional.PriceGong.A, C:\Dokumente und Einstellungen\Felix\Anwendungsdaten\PriceGong\Data\k.xml, In Quarantäne, [9adc10e88009b581fcbd61d7996a02fe], 
PUP.Optional.PriceGong.A, C:\Dokumente und Einstellungen\Felix\Anwendungsdaten\PriceGong\Data\l.txt, In Quarantäne, [9adc10e88009b581fcbd61d7996a02fe], 
PUP.Optional.PriceGong.A, C:\Dokumente und Einstellungen\Felix\Anwendungsdaten\PriceGong\Data\l.xml, In Quarantäne, [9adc10e88009b581fcbd61d7996a02fe], 
PUP.Optional.PriceGong.A, C:\Dokumente und Einstellungen\Felix\Anwendungsdaten\PriceGong\Data\m.txt, In Quarantäne, [9adc10e88009b581fcbd61d7996a02fe], 
PUP.Optional.PriceGong.A, C:\Dokumente und Einstellungen\Felix\Anwendungsdaten\PriceGong\Data\m.xml, In Quarantäne, [9adc10e88009b581fcbd61d7996a02fe], 
PUP.Optional.PriceGong.A, C:\Dokumente und Einstellungen\Felix\Anwendungsdaten\PriceGong\Data\n.txt, In Quarantäne, [9adc10e88009b581fcbd61d7996a02fe], 
PUP.Optional.PriceGong.A, C:\Dokumente und Einstellungen\Felix\Anwendungsdaten\PriceGong\Data\n.xml, In Quarantäne, [9adc10e88009b581fcbd61d7996a02fe], 
PUP.Optional.PriceGong.A, C:\Dokumente und Einstellungen\Felix\Anwendungsdaten\PriceGong\Data\o.txt, In Quarantäne, [9adc10e88009b581fcbd61d7996a02fe], 
PUP.Optional.PriceGong.A, C:\Dokumente und Einstellungen\Felix\Anwendungsdaten\PriceGong\Data\o.xml, In Quarantäne, [9adc10e88009b581fcbd61d7996a02fe], 
PUP.Optional.PriceGong.A, C:\Dokumente und Einstellungen\Felix\Anwendungsdaten\PriceGong\Data\p.txt, In Quarantäne, [9adc10e88009b581fcbd61d7996a02fe], 
PUP.Optional.PriceGong.A, C:\Dokumente und Einstellungen\Felix\Anwendungsdaten\PriceGong\Data\p.xml, In Quarantäne, [9adc10e88009b581fcbd61d7996a02fe], 
PUP.Optional.PriceGong.A, C:\Dokumente und Einstellungen\Felix\Anwendungsdaten\PriceGong\Data\q.txt, In Quarantäne, [9adc10e88009b581fcbd61d7996a02fe], 
PUP.Optional.PriceGong.A, C:\Dokumente und Einstellungen\Felix\Anwendungsdaten\PriceGong\Data\q.xml, In Quarantäne, [9adc10e88009b581fcbd61d7996a02fe], 
PUP.Optional.PriceGong.A, C:\Dokumente und Einstellungen\Felix\Anwendungsdaten\PriceGong\Data\r.txt, In Quarantäne, [9adc10e88009b581fcbd61d7996a02fe], 
PUP.Optional.PriceGong.A, C:\Dokumente und Einstellungen\Felix\Anwendungsdaten\PriceGong\Data\r.xml, In Quarantäne, [9adc10e88009b581fcbd61d7996a02fe], 
PUP.Optional.PriceGong.A, C:\Dokumente und Einstellungen\Felix\Anwendungsdaten\PriceGong\Data\s.txt, In Quarantäne, [9adc10e88009b581fcbd61d7996a02fe], 
PUP.Optional.PriceGong.A, C:\Dokumente und Einstellungen\Felix\Anwendungsdaten\PriceGong\Data\s.xml, In Quarantäne, [9adc10e88009b581fcbd61d7996a02fe], 
PUP.Optional.PriceGong.A, C:\Dokumente und Einstellungen\Felix\Anwendungsdaten\PriceGong\Data\t.txt, In Quarantäne, [9adc10e88009b581fcbd61d7996a02fe], 
PUP.Optional.PriceGong.A, C:\Dokumente und Einstellungen\Felix\Anwendungsdaten\PriceGong\Data\t.xml, In Quarantäne, [9adc10e88009b581fcbd61d7996a02fe], 
PUP.Optional.PriceGong.A, C:\Dokumente und Einstellungen\Felix\Anwendungsdaten\PriceGong\Data\u.txt, In Quarantäne, [9adc10e88009b581fcbd61d7996a02fe], 
PUP.Optional.PriceGong.A, C:\Dokumente und Einstellungen\Felix\Anwendungsdaten\PriceGong\Data\u.xml, In Quarantäne, [9adc10e88009b581fcbd61d7996a02fe], 
PUP.Optional.PriceGong.A, C:\Dokumente und Einstellungen\Felix\Anwendungsdaten\PriceGong\Data\v.txt, In Quarantäne, [9adc10e88009b581fcbd61d7996a02fe], 
PUP.Optional.PriceGong.A, C:\Dokumente und Einstellungen\Felix\Anwendungsdaten\PriceGong\Data\v.xml, In Quarantäne, [9adc10e88009b581fcbd61d7996a02fe], 
PUP.Optional.PriceGong.A, C:\Dokumente und Einstellungen\Felix\Anwendungsdaten\PriceGong\Data\w.txt, In Quarantäne, [9adc10e88009b581fcbd61d7996a02fe], 
PUP.Optional.PriceGong.A, C:\Dokumente und Einstellungen\Felix\Anwendungsdaten\PriceGong\Data\w.xml, In Quarantäne, [9adc10e88009b581fcbd61d7996a02fe], 
PUP.Optional.PriceGong.A, C:\Dokumente und Einstellungen\Felix\Anwendungsdaten\PriceGong\Data\wlu.txt, In Quarantäne, [9adc10e88009b581fcbd61d7996a02fe], 
PUP.Optional.PriceGong.A, C:\Dokumente und Einstellungen\Felix\Anwendungsdaten\PriceGong\Data\x.txt, In Quarantäne, [9adc10e88009b581fcbd61d7996a02fe], 
PUP.Optional.PriceGong.A, C:\Dokumente und Einstellungen\Felix\Anwendungsdaten\PriceGong\Data\x.xml, In Quarantäne, [9adc10e88009b581fcbd61d7996a02fe], 
PUP.Optional.PriceGong.A, C:\Dokumente und Einstellungen\Felix\Anwendungsdaten\PriceGong\Data\y.txt, In Quarantäne, [9adc10e88009b581fcbd61d7996a02fe], 
PUP.Optional.PriceGong.A, C:\Dokumente und Einstellungen\Felix\Anwendungsdaten\PriceGong\Data\y.xml, In Quarantäne, [9adc10e88009b581fcbd61d7996a02fe], 
PUP.Optional.PriceGong.A, C:\Dokumente und Einstellungen\Felix\Anwendungsdaten\PriceGong\Data\z.txt, In Quarantäne, [9adc10e88009b581fcbd61d7996a02fe], 
PUP.Optional.PriceGong.A, C:\Dokumente und Einstellungen\Felix\Anwendungsdaten\PriceGong\Data\z.xml, In Quarantäne, [9adc10e88009b581fcbd61d7996a02fe], 
Trojan.BHO, C:\Programme\ICQToolbar\toolbaru.dll, In Quarantäne, [4d295c9c4c3da19587c4425a45c00000], 

Physische Sektoren: 0
(Keine schädliche Elemente erkannt)


(end)

2. AdwCl

Code:

ATTFilter

# AdwCleaner v4.108 - Bericht erstellt am 17/01/2015 um 13:21:57
# Aktualisiert 17/01/2015 von Xplode
# Database : 2015-01-13.2 [Local]
# Betriebssystem : Microsoft Windows XP Service Pack 3 (32 bits)
# Benutzername : Chef - ALBERS2
# Gestartet von : C:\Dokumente und Einstellungen\Chef\Desktop\AdwCleaner_4.108.exe
# Option : Löschen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****

Ordner Gelöscht : C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\GamesBar
Ordner Gelöscht : C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\ICQ\ICQToolbar
Ordner Gelöscht : C:\Programme\AskSearch
Ordner Gelöscht : C:\Programme\AVG Secure Search
Ordner Gelöscht : C:\Programme\Conduit
Ordner Gelöscht : C:\Programme\ICQ6Toolbar
Ordner Gelöscht : C:\Programme\icqtoolbar
Ordner Gelöscht : C:\Dokumente und Einstellungen\Chef\Lokale Einstellungen\Anwendungsdaten\Conduit
Ordner Gelöscht : C:\Dokumente und Einstellungen\Chef\Lokale Einstellungen\Anwendungsdaten\ConduitEngine
Ordner Gelöscht : C:\Dokumente und Einstellungen\Felix\Lokale Einstellungen\Anwendungsdaten\Conduit
Ordner Gelöscht : C:\Dokumente und Einstellungen\Felix\Lokale Einstellungen\Anwendungsdaten\ConduitEngine
Ordner Gelöscht : C:\Dokumente und Einstellungen\Felix\Lokale Einstellungen\Anwendungsdaten\softonic-de3
Ordner Gelöscht : C:\Dokumente und Einstellungen\Felix\Anwendungsdaten\AVG Secure Search
Ordner Gelöscht : C:\Dokumente und Einstellungen\Felix\Anwendungsdaten\pdfforge
Ordner Gelöscht : C:\Dokumente und Einstellungen\Felix\Anwendungsdaten\Search Settings
Ordner Gelöscht : C:\Dokumente und Einstellungen\Gaby\Lokale Einstellungen\Anwendungsdaten\Conduit
Ordner Gelöscht : C:\Dokumente und Einstellungen\Gaby\Lokale Einstellungen\Anwendungsdaten\ConduitEngine
Ordner Gelöscht : C:\Dokumente und Einstellungen\Gaby\Lokale Einstellungen\Anwendungsdaten\softonic-de3
Ordner Gelöscht : C:\Dokumente und Einstellungen\Gaby\Anwendungsdaten\pdfforge
Ordner Gelöscht : C:\Dokumente und Einstellungen\Gaby\Anwendungsdaten\Search Settings
Datei Gelöscht : C:\WINDOWS\system32\conduitEngine.tmp
Datei Gelöscht : C:\Programme\Mozilla Firefox\Components\AskSearch.js

***** [ Tasks ] *****


***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Toolbar.CT2431245
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{9C049BA6-EA47-4AC3-AED6-A66D8DC9E1D8}
Schlüssel Gelöscht : HKCU\Software\Conduit
Schlüssel Gelöscht : HKLM\SOFTWARE\AskBarDis
Schlüssel Gelöscht : HKLM\SOFTWARE\Conduit
Schlüssel Gelöscht : HKLM\SOFTWARE\ICQ\ICQToolbar

***** [ Browser ] *****

-\\ Internet Explorer v6.0.2900.5512

Einstellung Wiederhergestellt : HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURls [Tabs]
Einstellung Wiederhergestellt : HKLM\SOFTWARE\Microsoft\Internet Explorer\Search [Default_Search_URL]

-\\ Mozilla Firefox v20.0.1 (de)

[hz4p7kqj.default\prefs.js] - Zeile gelöscht : user_pref("browser.search.defaultenginename", "AVG Secure Search");
[hz4p7kqj.default\prefs.js] - Zeile gelöscht : user_pref("browser.search.selectedEngine", "AVG Secure Search");

-\\ Opera v26.0.1656.60


*************************

AdwCleaner[R0].txt - [4057 octets] - [17/01/2015 13:18:13]
AdwCleaner[S0].txt - [3559 octets] - [17/01/2015 13:21:57]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [3619 octets] ##########

3. JRT

Code:

ATTFilter

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.4.1 (12.28.2014:1)
OS: Microsoft Windows XP x86
Ran by Chef on 17.01.2015 at 13:37:19,67
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys



~~~ Files

Successfully deleted: [File] C:\WINDOWS\prefetch\DRIVERTUNER.EXE-2C755ABB.pf



~~~ Folders





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 17.01.2015 at 13:40:31,45
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

4. FRST

FRST Logfile:

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 17-01-2015 01
Ran by Chef (administrator) on ALBERS2 on 17-01-2015 13:49:10
Running from C:\Dokumente und Einstellungen\Chef\Desktop
Loaded Profiles: Chef (Available profiles: Felix & Kinder & Romy & Gaby & Chef & Gast)
Platform: Microsoft Windows XP Home Edition Service Pack 3 (X86) OS Language: Deutsch (Deutschland)
Internet Explorer Version 6 (Default browser: IE)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(ATI Technologies Inc.) C:\WINDOWS\system32\ati2evxx.exe
(Avira Operations GmbH & Co. KG) C:\Programme\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Programme\Avira\AntiVir Desktop\avguard.exe
(Apple Inc.) C:\Programme\Gemeinsame Dateien\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Programme\Bonjour\mDNSResponder.exe
(Garmin Ltd or its subsidiaries) C:\Programme\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe
(Marvell) C:\Programme\HP\HP LaserJet M1319 MFP Series\ReceiveFaxUtility.exe
(Oracle Corporation) C:\Programme\Java\jre7\bin\jqs.exe
(Microsoft Corporation) C:\Programme\Gemeinsame Dateien\Microsoft Shared\VS7DEBUG\MDM.EXE
(Microsoft Corporation) C:\Programme\Microsoft SQL Server\MSSQL$PINNACLESYS\Binn\sqlservr.exe
( ) C:\WINDOWS\system32\slserv.exe
(TeamViewer GmbH) C:\Programme\TeamViewer\Version8\TeamViewer_Service.exe
(Avira Operations GmbH & Co. KG) C:\Programme\Avira\My Avira\Avira.OE.ServiceHost.exe
(Pinnacle Systems) C:\Programme\Pinnacle\Shared Files\Programs\MediaServer\PMSHost.exe
(ATI Technologies Inc.) C:\WINDOWS\system32\ati2evxx.exe
(Avira Operations GmbH & Co. KG) C:\Programme\Avira\AntiVir Desktop\avshadow.exe
(Realtek Semiconductor Corp.) C:\WINDOWS\SOUNDMAN.EXE
(RealTek Semicoductor Corp.) C:\WINDOWS\ALCWZRD.EXE
(ATI Technologies, Inc.) C:\ATI-CPanel\atiptaxx.exe
(Pinnacle Systems) C:\Programme\Pinnacle\Shared Files\Programs\Remote\remoterm.exe
(Lexmark International, Inc.) C:\Programme\Lexmark 5200 Series\lxbtbmgr.exe
(FotoNation Inc.) C:\Programme\Gemeinsame Dateien\FotoNation\EvLstnr.exe
(Apple Inc.) C:\Programme\QuickTime\QTTask.exe
(Lexmark International, Inc.) C:\Programme\Lexmark 5200 Series\lxbtbmon.exe
(Adobe Systems Incorporated) C:\Programme\Gemeinsame Dateien\Adobe\ARM\1.0\AdobeARM.exe
(SONIX) C:\WINDOWS\FixCamera.exe
(Sonix) C:\WINDOWS\vsnp2uvc.exe
() C:\WINDOWS\tsnp2uvc.exe
(Avira Operations GmbH & Co. KG) C:\Programme\Avira\AntiVir Desktop\avgnt.exe
(Oracle Corporation) C:\Programme\Gemeinsame Dateien\Java\Java Update\jusched.exe
(Apple Inc.) C:\Programme\iTunes\iTunesHelper.exe
(Sony Corporation) C:\Programme\Sony\ReaderDesktop\appHelper\ReaderAppHelper.exe
(Geek Software GmbH) C:\Programme\PDF24\pdf24.exe
(LionSea) C:\Programme\DriverTuner\DriverTuner.exe
(Avira Operations GmbH & Co. KG) C:\Programme\Avira\My Avira\Avira.OE.Systray.exe
(Garmin Ltd or its subsidiaries) C:\Programme\Garmin\Express Tray\ExpressTray.exe
(Apple Inc.) C:\Programme\iPod\bin\iPodService.exe
(Microsoft Corporation) C:\Programme\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe
(Oracle Corporation) C:\Programme\Gemeinsame Dateien\Java\Java Update\jucheck.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [Verknüpfung mit der High Definition Audio-Eigenschaftenseite] => C:\WINDOWS\system32\HDAudPropShortcut.exe [61952 2004-03-17] (Windows (R) Server 2003 DDK provider)
HKLM\...\Run: [SoundMan] => C:\WINDOWS\SOUNDMAN.EXE [77824 2004-10-21] (Realtek Semiconductor Corp.)
HKLM\...\Run: [AlcWzrd] => C:\WINDOWS\ALCWZRD.EXE [2744832 2004-10-21] (RealTek Semicoductor Corp.)
HKLM\...\Run: [ATIPTA] => C:\ATI-CPanel\atiptaxx.exe [344064 2004-09-29] (ATI Technologies, Inc.)
HKLM\...\Run: [NeroFilterCheck] => C:\WINDOWS\system32\NeroCheck.exe [155648 2001-07-09] (Ahead Software Gmbh)
HKLM\...\Run: [PMCS] => C:\Programme\Pinnacle\Shared Files\Programs\MediaCenterService\PMC.Service.Main.exe [24576 2004-09-29] (Pinnacle Systems)
HKLM\...\Run: [PinnacleDriverCheck] => C:\WINDOWS\system32\PSDrvCheck.exe [406016 2003-11-10] ()
HKLM\...\Run: [PMCRemote] => C:\Programme\Pinnacle\Shared Files\Programs\Remote\Remoterm.exe [73728 2004-09-23] (Pinnacle Systems)
HKLM\...\Run: [Lexmark 5200 series] => C:\Programme\Lexmark 5200 series\lxbtbmgr.exe [57344 2004-06-04] (Lexmark International, Inc.)
HKLM\...\Run: [FaxCenterServer] => C:\Programme\Lexmark Fax Solutions\fm3032.exe [294912 2004-03-23] ()
HKLM\...\Run: [EVENTLISTENER] => C:\Programme\Gemeinsame Dateien\FotoNation\EvLstnr.exe [53248 2000-06-20] (FotoNation Inc.)
HKLM\...\Run: [QuickTime Task] => C:\Programme\QuickTime\QTTask.exe [421888 2010-11-29] (Apple Inc.)
HKLM\...\Run: [LXBTCATS] => rundll32 C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\LXBTtime.dll,_RunDLLEntry@16
HKLM\...\Run: [Adobe ARM] => C:\Programme\Gemeinsame Dateien\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM\...\Run: [FixCamera] => C:\WINDOWS\FixCamera.exe [188928 2008-08-21] (SONIX)
HKLM\...\Run: [snp2uvc] => C:\WINDOWS\vsnp2uvc.exe [675840 2008-08-01] (Sonix)
HKLM\...\Run: [tsnp2uvc] => C:\WINDOWS\tsnp2uvc.exe [320512 2009-12-11] ()
HKLM\...\Run: [KeePass 2 PreLoad] => C:\Programme\KeePass Password Safe 2\KeePass.exe [1764352 2011-07-12] (Dominik Reichl)
HKLM\...\Run: [avgnt] => C:\Programme\Avira\AntiVir Desktop\avgnt.exe [702768 2014-12-18] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [SunJavaUpdateSched] => C:\Programme\Gemeinsame Dateien\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation)
HKLM\...\Run: [APSDaemon] => C:\Programme\Gemeinsame Dateien\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM\...\Run: [iTunesHelper] => C:\Programme\iTunes\iTunesHelper.exe [152392 2013-08-16] (Apple Inc.)
HKLM\...\Run: [Reader Application Helper] => C:\Programme\Sony\ReaderDesktop\appHelper\ReaderAppHelper.exe [899400 2013-06-25] (Sony Corporation)
HKLM\...\Run: [PDFPrint] => C:\Programme\PDF24\pdf24.exe [191528 2014-07-04] (Geek Software GmbH)
HKLM\...\Run: [DriverTuner] => C:\Programme\DriverTuner\DriverTuner.exe [10632504 2014-06-03] (LionSea)
HKLM\...\Run: [Avira Systray] => C:\Programme\Avira\My Avira\Avira.OE.Systray.exe [126200 2014-11-20] (Avira Operations GmbH & Co. KG)
Winlogon\Notify\AtiExtEvent: C:\WINDOWS\system32\Ati2evxx.dll (ATI Technologies Inc.)
HKU\S-1-5-21-2627930752-4006264225-1260829912-1011\...\Run: [GarminExpressTrayApp] => C:\Programme\Garmin\Express Tray\ExpressTray.exe [1093464 2013-07-09] (Garmin Ltd or its subsidiaries)
HKU\S-1-5-18\...\Policies\Explorer: [CDRAutoRun] 0
Startup: C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\Microsoft Office.lnk
ShortcutTarget: Microsoft Office.lnk -> C:\Programme\Microsoft Office\Office\OSA9.EXE (Microsoft Corporation)
Startup: C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\p6_19_erinnerung.lnk
ShortcutTarget: p6_19_erinnerung.lnk -> C:\Programme\phase6\phase6_19\WinStart\p6erinnerung.exe (phase6)
Startup: C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\Service Manager.lnk
ShortcutTarget: Service Manager.lnk -> C:\Programme\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe (Microsoft Corporation)
Startup: C:\Dokumente und Einstellungen\Felix\Startmenü\Programme\Autostart\PRINTKEY2000.EXE (Fred's Software)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKU\S-1-5-21-2627930752-4006264225-1260829912-1011\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd={SUB_PRD}&clcid={SUB_CLSID}&pver={SUB_PVER}&ar=home
HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
HKU\S-1-5-21-2627930752-4006264225-1260829912-1011\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
HKU\S-1-5-21-2627930752-4006264225-1260829912-1011\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
URLSearchHook: HKU\S-1-5-21-2627930752-4006264225-1260829912-1011 - Microsoft Url Sucheingriff - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} - C:\WINDOWS\system32\shdocvw.dll (Microsoft Corporation)
HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs,Tabs: "hxxp://www.google.com" <======= ATTENTION
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-2627930752-4006264225-1260829912-1011 -> {AFDBDDAA-5D3F-42EE-B79C-185A7020515B} URL = 
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Programme\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Skype Browser Helper -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Programme\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Programme\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
DPF: {166B1BCA-3F9C-11CF-8075-444553540000} hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
Handler: http\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler: http\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler: https\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler: https\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler: ipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - c:\Programme\Gemeinsame Dateien\Microsoft Shared\Information Retrieval\msitss.dll (Microsoft Corporation)
Handler: msdaipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler: msdaipp\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Programme\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
Winsock: Catalog5 04 C:\Programme\Bonjour\mdnsNSP.dll [121704] (Apple Inc.)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF ProfilePath: C:\Dokumente und Einstellungen\Chef\Anwendungsdaten\Mozilla\Firefox\Profiles\xfmnamqy.default
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF32_14_0_0_145.dll ()
FF Plugin: @adobe.com/ShockwavePlayer -> C:\WINDOWS\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
FF Plugin: @Apple.com/iTunes,version=1.0 -> C:\Programme\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin: @java.com/DTPlugin,version=10.25.2 -> C:\WINDOWS\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.25.2 -> C:\Programme\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/WPF,version=3.5 -> c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF Plugin: @sony.com/ReaderDesktop -> C:\Programme\Sony\ReaderDesktop\npreaderdetectmoz.dll (Sony Corporation)
FF Plugin: @videolan.org/vlc,version=2.0.2 -> C:\Programme\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: Adobe Reader -> C:\Programme\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Extension: Garmin Communicator - C:\Dokumente und Einstellungen\Chef\Anwendungsdaten\Mozilla\Firefox\Profiles\xfmnamqy.default\Extensions\{195A3098-0BD5-4e90-AE22-BA1C540AFD1E} [2014-02-27]
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
FF Extension: Microsoft .NET Framework Assistant - c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension [2009-10-12]

Chrome: 
=======
CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - No Path

========================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AntiVirSchedulerService; C:\Programme\Avira\AntiVir Desktop\sched.exe [431920 2014-12-18] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Programme\Avira\AntiVir Desktop\avguard.exe [431920 2014-12-18] (Avira Operations GmbH & Co. KG)
R2 Apple Mobile Device; C:\Programme\Gemeinsame Dateien\Apple\Mobile Device Support\AppleMobileDeviceService.exe [57008 2012-12-21] (Apple Inc.)
R2 Avira.OE.ServiceHost; C:\Programme\Avira\My Avira\Avira.OE.ServiceHost.exe [166192 2014-11-20] (Avira Operations GmbH & Co. KG)
R2 Bonjour Service; C:\Programme\Bonjour\mDNSResponder.exe [390504 2011-08-30] (Apple Inc.)
R2 EpgSpooler; c:\Programme\Pinnacle\MediaCenter\EpgSpoolerSrv.exe [20480 2004-09-30] ( ) [File not signed]
R2 Garmin Core Update Service; C:\Programme\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe [219480 2013-07-09] (Garmin Ltd or its subsidiaries)
R2 HPM1319RcvFaxSrvc; C:\Programme\HP\HP LaserJet M1319 MFP Series\ReceiveFaxUtility.exe [348160 2010-07-05] (Marvell) [File not signed]
S3 IDriverT; C:\Programme\Gemeinsame Dateien\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-03] (Macrovision Corporation) [File not signed]
R3 iPod Service; C:\Programme\iPod\bin\iPodService.exe [553288 2013-08-16] (Apple Inc.)
R2 JavaQuickStarterService; C:\Programme\Java\jre7\bin\jqs.exe [182184 2013-07-17] (Oracle Corporation)
S3 lxbt_device; C:\WINDOWS\system32\lxbtcoms.exe [421888 2004-02-20] (Lexmark International, Inc.)
R2 MDM; C:\Programme\Gemeinsame Dateien\Microsoft Shared\VS7DEBUG\MDM.EXE [322120 2003-06-19] (Microsoft Corporation)
S3 MozillaMaintenance; C:\Programme\Mozilla Maintenance Service\maintenanceservice.exe [115608 2014-02-27] (Mozilla Foundation)
R2 MSSQL$PINNACLESYS; C:\Programme\Microsoft SQL Server\MSSQL$PINNACLESYS\Binn\sqlservr.exe [7520337 2002-12-17] (Microsoft Corporation) [File not signed]
S3 MSSQLServerADHelper; C:\Programme\Microsoft SQL Server\80\Tools\Binn\sqladhlp.exe [66112 2002-12-17] (Microsoft Corporation) [File not signed]
R2 PinnacleSys.MediaServer; c:\programme\pinnacle\shared files\programs\mediaserver\pmshost.exe [45056 2004-07-22] (Pinnacle Systems) [File not signed]
S2 SkypeUpdate; C:\Programme\Skype\Updater\Updater.exe [315008 2014-04-03] (Skype Technologies)
R2 SLService; C:\WINDOWS\system32\slserv.exe [45056 2003-07-02] ( )
S3 Software Jukebox v2.0 Service; C:\Programme\Gemeinsame Dateien\MSJB DE01FSC Shared\Service\Software Jukebox v2.0 Service File.exe [68096 2004-12-21] () [File not signed]
S3 Sony SCSI Helper Service; C:\Programme\Gemeinsame Dateien\Sony Shared\Fsk\SonySCSIHelperService.exe [73728 2013-05-23] (Sony Corporation) [File not signed]
S3 SQLAgent$PINNACLESYS; C:\Programme\Microsoft SQL Server\MSSQL$PINNACLESYS\Binn\sqlagent.EXE [311872 2002-12-17] (Microsoft Corporation) [File not signed]
R2 TeamViewer8; C:\Programme\TeamViewer\Version8\TeamViewer_Service.exe [4308320 2013-08-07] (TeamViewer GmbH)
S3 WMPNetworkSvc; C:\Programme\Windows Media Player\WMPNetwk.exe [920576 2006-11-03] (Microsoft Corporation)
S3 SwPrv; C:\WINDOWS\system32\dllhost.exe /Processid:{9EBF84DB-73F1-4B99-BD60-D507F637E85F}

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R3 3xHybrid; C:\WINDOWS\System32\DRIVERS\3xHybrid.sys [698368 2004-09-03] (Philips Semiconductors GmbH)
S3 61883; C:\WINDOWS\System32\DRIVERS\61883.sys [48128 2008-04-13] (Microsoft Corporation)
R2 acedrv10; C:\WINDOWS\system32\drivers\acedrv10.sys [330144 2007-07-27] (Protect Software GmbH)
R2 acehlp10; C:\WINDOWS\system32\drivers\acehlp10.sys [251680 2007-07-27] (Protect Software GmbH)
R3 ASAPIW2k; C:\WINDOWS\System32\drivers\ASAPIW2k.sys [11264 2003-11-28] (Pinnacle Systems GmbH) [File not signed]
R2 avgntflt; C:\WINDOWS\System32\DRIVERS\avgntflt.sys [98160 2014-10-09] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\WINDOWS\System32\DRIVERS\avipbb.sys [136216 2014-10-09] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\WINDOWS\System32\DRIVERS\avkmgr.sys [37352 2013-10-07] (Avira Operations GmbH & Co. KG)
S3 CCDECODE; C:\WINDOWS\System32\DRIVERS\CCDECODE.sys [17024 2008-04-13] (Microsoft Corporation)
S3 grmnusb; C:\WINDOWS\System32\drivers\grmnusb.sys [15720 2012-04-18] (GARMIN Corp.)
S3 HdAudAddService; C:\WINDOWS\System32\drivers\HdAudio.sys [113664 2004-03-17] (Windows (R) Server 2003 DDK provider)
S3 HP1319EWS; C:\WINDOWS\System32\Drivers\HP1319EWS.sys [12800 2008-11-10] (Marvell Semiconductor, Inc.)
S3 HP1319FAX; C:\WINDOWS\System32\Drivers\HP1319FAX.sys [13824 2008-11-10] (Marvell Semiconductor, Inc.)
S3 MPE; C:\WINDOWS\System32\DRIVERS\MPE.sys [15232 2008-04-13] (Microsoft Corporation)
R3 Mtlmnt5; C:\WINDOWS\System32\DRIVERS\Mtlmnt5.sys [221736 2003-07-16] ( )
S3 Mtlstrm; C:\WINDOWS\System32\DRIVERS\Mtlstrm.sys [1301128 2003-07-02] ( )
S3 NdisIP; C:\WINDOWS\System32\DRIVERS\NdisIP.sys [10880 2008-04-13] (Microsoft Corporation)
S3 NtMtlFax; C:\WINDOWS\System32\DRIVERS\NtMtlFax.sys [167384 2003-07-02] ( )
S0 RecAgent; C:\WINDOWS\System32\DRIVERS\RecAgent.sys [13776 2004-08-03] (Smart Link)
S3 RTL8023xp; C:\WINDOWS\System32\DRIVERS\Rtlnicxp.sys [71168 2004-10-15] (Realtek Semiconductor Corporation                           ) [File not signed]
R3 rtl8139; C:\WINDOWS\System32\DRIVERS\RTL8139.SYS [20992 2004-08-03] (Realtek Semiconductor Corporation)
S3 SIVDRIVER; C:\WINDOWS\system32\Drivers\SIVX32.sys [48480 2008-02-11] (Ray Hinchliffe)
R3 Slntamr; C:\WINDOWS\System32\DRIVERS\slntamr.sys [548952 2003-08-20] ( )
S3 SlNtHal; C:\WINDOWS\System32\DRIVERS\Slnthal.sys [86128 2003-07-02] ( )
R3 SlWdmSup; C:\WINDOWS\System32\DRIVERS\SlWdmSup.sys [39348 2003-07-02] (Vireo Software)
S3 SNP2UVC; C:\WINDOWS\System32\DRIVERS\snp2uvc.sys [3482240 2009-12-18] () [File not signed]
R1 ssmdrv; C:\WINDOWS\System32\DRIVERS\ssmdrv.sys [28520 2012-08-27] (Avira GmbH)
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S4 Edprvir; No ImagePath
U5 ScsiPort; C:\WINDOWS\system32\drivers\scsiport.sys [96384 2008-04-13] (Microsoft Corporation)
U3 TlntSvr; No ImagePath

==================== NetSvcs (Whitelisted) ===================


(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-01-17 13:49 - 2015-01-17 13:49 - 00020119 _____ () C:\Dokumente und Einstellungen\Chef\Desktop\FRST.txt
2015-01-17 13:49 - 2015-01-17 13:49 - 00000000 ____D () C:\Dokumente und Einstellungen\Chef\Desktop\FRST-OlderVersion
2015-01-17 13:40 - 2015-01-17 13:40 - 00000660 _____ () C:\Dokumente und Einstellungen\Chef\Desktop\JRT.txt
2015-01-17 13:37 - 2015-01-17 13:37 - 00000000 ____D () C:\WINDOWS\ERUNT
2015-01-17 13:18 - 2015-01-17 13:22 - 00000000 ____D () C:\AdwCleaner
2015-01-17 12:21 - 2015-01-17 13:10 - 00114904 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2015-01-17 12:21 - 2015-01-17 12:21 - 00000755 _____ () C:\Dokumente und Einstellungen\All Users\Desktop\ Malwarebytes Anti-Malware .lnk
2015-01-17 12:21 - 2015-01-17 12:21 - 00000000 ____D () C:\Programme\ Malwarebytes Anti-Malware 
2015-01-17 12:21 - 2015-01-17 12:21 - 00000000 ____D () C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\ Malwarebytes Anti-Malware 
2015-01-17 12:21 - 2015-01-17 12:21 - 00000000 ____D () C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Malwarebytes
2015-01-17 12:21 - 2014-11-21 06:14 - 00054360 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2015-01-17 12:21 - 2014-11-21 06:14 - 00023256 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbam.sys
2015-01-17 12:19 - 2015-01-17 11:59 - 01707939 _____ (Thisisu) C:\Dokumente und Einstellungen\Chef\Desktop\JRT.exe
2015-01-17 12:19 - 2015-01-17 11:58 - 02186752 _____ () C:\Dokumente und Einstellungen\Chef\Desktop\AdwCleaner_4.108.exe
2015-01-17 12:18 - 2015-01-17 11:57 - 20447072 _____ (Malwarebytes Corporation ) C:\Dokumente und Einstellungen\Chef\Desktop\mbam-setup-2.0.4.1028.exe
2015-01-15 23:41 - 2015-01-15 23:41 - 00021242 _____ () C:\ComboFix.txt
2015-01-15 23:41 - 2015-01-15 23:41 - 00000000 ____D () C:\Dokumente und Einstellungen\Romy\Lokale Einstellungen\temp
2015-01-15 23:41 - 2015-01-15 23:41 - 00000000 ____D () C:\Dokumente und Einstellungen\NetworkService\Lokale Einstellungen\temp
2015-01-15 23:41 - 2015-01-15 23:41 - 00000000 ____D () C:\Dokumente und Einstellungen\LocalService\Lokale Einstellungen\temp
2015-01-15 23:41 - 2015-01-15 23:41 - 00000000 ____D () C:\Dokumente und Einstellungen\Kinder\Lokale Einstellungen\temp
2015-01-15 23:41 - 2015-01-15 23:41 - 00000000 ____D () C:\Dokumente und Einstellungen\Gaby\Lokale Einstellungen\temp
2015-01-15 23:28 - 2015-01-17 13:49 - 00000000 ____D () C:\Dokumente und Einstellungen\Chef\Lokale Einstellungen\temp
2015-01-15 23:16 - 2015-01-15 23:16 - 00000000 _RSHD () C:\cmdcons
2015-01-15 23:16 - 2005-01-22 23:17 - 00000211 _____ () C:\Boot.bak
2015-01-15 23:16 - 2004-08-03 23:00 - 00262448 __RSH () C:\cmldr
2015-01-15 23:10 - 2011-06-26 07:45 - 00256000 _____ () C:\WINDOWS\PEV.exe
2015-01-15 23:10 - 2010-11-07 18:20 - 00208896 _____ () C:\WINDOWS\MBR.exe
2015-01-15 23:10 - 2009-04-20 05:56 - 00060416 _____ (NirSoft) C:\WINDOWS\NIRCMD.exe
2015-01-15 23:10 - 2000-08-31 01:00 - 00518144 _____ (SteelWerX) C:\WINDOWS\SWREG.exe
2015-01-15 23:10 - 2000-08-31 01:00 - 00406528 _____ (SteelWerX) C:\WINDOWS\SWSC.exe
2015-01-15 23:10 - 2000-08-31 01:00 - 00212480 _____ (SteelWerX) C:\WINDOWS\SWXCACLS.exe
2015-01-15 23:10 - 2000-08-31 01:00 - 00098816 _____ () C:\WINDOWS\sed.exe
2015-01-15 23:10 - 2000-08-31 01:00 - 00080412 _____ () C:\WINDOWS\grep.exe
2015-01-15 23:10 - 2000-08-31 01:00 - 00068096 _____ () C:\WINDOWS\zip.exe
2015-01-15 23:06 - 2015-01-15 23:41 - 00000000 ____D () C:\Qoobox
2015-01-15 23:05 - 2015-01-15 23:39 - 00000000 ____D () C:\WINDOWS\erdnt
2015-01-15 23:05 - 2015-01-15 23:05 - 00000000 ___RD () C:\Dokumente und Einstellungen\Chef\Startmenü\Programme\Verwaltung
2015-01-15 23:03 - 2015-01-15 22:45 - 05609736 ____R (Swearware) C:\Dokumente und Einstellungen\Chef\Desktop\ComboFix.exe
2015-01-15 22:52 - 2015-01-15 22:52 - 00000895 _____ () C:\Dokumente und Einstellungen\Chef\Desktop\Revo Uninstaller.lnk
2015-01-15 22:52 - 2015-01-15 22:52 - 00000000 ____D () C:\Programme\VS Revo Group
2015-01-15 22:51 - 2015-01-15 22:45 - 02623656 _____ (VS Revo Group Ltd.) C:\Dokumente und Einstellungen\Chef\Desktop\revosetup95.exe
2015-01-14 20:14 - 2015-01-17 13:49 - 00000000 ____D () C:\FRST
2015-01-14 20:10 - 2015-01-17 13:49 - 01117696 _____ (Farbar) C:\Dokumente und Einstellungen\Chef\Desktop\FRST.exe
2015-01-09 07:15 - 2015-01-09 07:15 - 00004608 _____ () C:\Dokumente und Einstellungen\Chef\Lokale Einstellungen\Anwendungsdaten\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2015-01-08 23:25 - 2015-01-08 23:25 - 00000000 ___SD () C:\Dokumente und Einstellungen\Chef\UserData
2015-01-08 20:17 - 2015-01-09 07:17 - 00000501 _____ () C:\WINDOWS\nsw.log
2015-01-04 13:25 - 2015-01-04 14:28 - 00000000 ____D () C:\Dokumente und Einstellungen\Felix\Eigene Dateien\Textilankauf
2015-01-02 14:18 - 2015-01-02 20:41 - 00000000 ____D () C:\Dokumente und Einstellungen\Felix\Eigene Dateien\Momox
2014-12-30 11:58 - 2015-01-07 18:22 - 00171008 _____ () C:\Dokumente und Einstellungen\Felix\Desktop\2014-12-30_Kabelbw.xls
2014-12-19 16:56 - 2014-12-19 16:56 - 00000000 ____D () C:\Dokumente und Einstellungen\Chef\Lokale Einstellungen\Anwendungsdaten\DriverTuner

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-01-17 13:43 - 2012-09-08 22:38 - 01678456 _____ () C:\WINDOWS\setupapi.log
2015-01-17 13:27 - 2004-12-21 18:11 - 01836445 _____ () C:\WINDOWS\WindowsUpdate.log
2015-01-17 13:26 - 2014-10-15 18:11 - 00000414 _____ () C:\WINDOWS\Tasks\Opera scheduled Autoupdate 1413393108.job
2015-01-17 13:26 - 2014-07-13 16:36 - 00000220 _____ () C:\WINDOWS\Tasks\Ende des Supports für Microsoft Windows XP –  Benachrichtigung – Anmeldung.job
2015-01-17 13:26 - 2004-12-21 18:57 - 00295138 _____ () C:\checkrun.txt
2015-01-17 13:26 - 2004-12-21 18:09 - 00000159 _____ () C:\WINDOWS\wiadebug.log
2015-01-17 13:25 - 2004-12-21 18:15 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT
2015-01-17 13:25 - 2004-12-21 18:09 - 00000050 _____ () C:\WINDOWS\wiaservc.log
2015-01-17 13:24 - 2013-07-20 22:24 - 01117038 _____ () C:\Dokumente und Einstellungen\LocalService\Lokale Einstellungen\Anwendungsdaten\WPFFontCache_v0400-S-1-5-21-2627930752-4006264225-1260829912-1011-0.dat
2015-01-17 13:24 - 2012-09-16 13:39 - 00000190 ___SH () C:\Dokumente und Einstellungen\Chef\ntuser.ini
2015-01-17 13:24 - 2012-09-16 13:39 - 00000000 ____D () C:\Dokumente und Einstellungen\Chef
2015-01-17 13:24 - 2012-08-17 02:45 - 00319622 _____ () C:\Dokumente und Einstellungen\LocalService\Lokale Einstellungen\Anwendungsdaten\WPFFontCache_v0400-System.dat
2015-01-17 13:24 - 2004-12-21 18:15 - 00032614 _____ () C:\WINDOWS\SchedLgU.Txt
2015-01-17 13:22 - 2008-07-04 17:51 - 00000000 ____D () C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\ICQ
2015-01-17 13:22 - 2004-12-21 18:06 - 00000000 ___RD () C:\Programme
2015-01-17 13:01 - 2010-02-10 17:35 - 00000000 __HDC () C:\WINDOWS\$NtUninstallKB977165_0$
2015-01-17 12:21 - 2004-12-21 18:06 - 00000000 ___RD () C:\Dokumente und Einstellungen\All Users\Startmenü\Programme
2015-01-17 11:52 - 2013-07-20 18:29 - 00000664 _____ () C:\WINDOWS\system32\d3d9caps.dat
2015-01-17 11:47 - 2012-12-17 17:27 - 00001018 _____ () C:\WINDOWS\Tasks\FacebookUpdateTaskUserS-1-5-21-2627930752-4006264225-1260829912-1007UA.job
2015-01-17 11:25 - 2004-12-21 18:15 - 00000000 __SHD () C:\Dokumente und Einstellungen\NetworkService
2015-01-17 11:08 - 2004-10-28 17:23 - 00001158 _____ () C:\WINDOWS\system32\wpa.dbl
2015-01-16 00:01 - 2013-07-12 22:50 - 00000000 ____D () C:\WINDOWS\system32\MRT
2015-01-15 23:52 - 2007-02-25 21:16 - 110348472 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2015-01-15 23:32 - 2004-10-28 17:23 - 00000227 _____ () C:\WINDOWS\system.ini
2015-01-15 23:31 - 2009-10-12 09:01 - 00000000 ____D () C:\Programme\Opera
2015-01-15 23:16 - 2004-10-28 17:23 - 00000327 __RSH () C:\boot.ini
2015-01-15 23:05 - 2012-09-16 13:39 - 00000000 ___RD () C:\Dokumente und Einstellungen\Chef\Startmenü\Programme
2015-01-11 22:50 - 2012-08-17 02:46 - 00636574 _____ () C:\Dokumente und Einstellungen\LocalService\Lokale Einstellungen\Anwendungsdaten\WPFFontCache_v0400-S-1-5-21-2627930752-4006264225-1260829912-1007-0.dat
2015-01-11 22:50 - 2005-01-22 23:17 - 00000300 ___SH () C:\Dokumente und Einstellungen\Felix\ntuser.ini
2015-01-11 22:50 - 2005-01-22 23:17 - 00000000 ____D () C:\Dokumente und Einstellungen\Felix
2015-01-11 22:49 - 2011-07-21 21:12 - 00000000 ____D () C:\Dokumente und Einstellungen\Felix\Anwendungsdaten\KeePass
2015-01-11 18:44 - 2005-01-22 23:17 - 00000000 ____D () C:\Dokumente und Einstellungen\Felix\Lokale Einstellungen\Temp
2015-01-11 16:43 - 2013-08-09 15:41 - 00000664 _____ () C:\Dokumente und Einstellungen\Felix\Lokale Einstellungen\Anwendungsdaten\d3d9caps.tmp
2015-01-11 14:47 - 2012-12-17 17:27 - 00000996 _____ () C:\WINDOWS\Tasks\FacebookUpdateTaskUserS-1-5-21-2627930752-4006264225-1260829912-1007Core.job
2015-01-10 09:39 - 2010-03-19 21:26 - 00000000 ____D () C:\Dokumente und Einstellungen\Felix\Anwendungsdaten\vlc
2015-01-09 20:20 - 2013-08-11 16:42 - 00002229 _____ () C:\Dokumente und Einstellungen\Felix\Desktop\SyncToy 2.1.lnk
2015-01-09 20:18 - 2013-08-11 16:41 - 00002229 _____ () C:\Dokumente und Einstellungen\Chef\Desktop\SyncToy 2.1.lnk
2015-01-09 18:41 - 2012-09-12 21:12 - 00498462 _____ () C:\WINDOWS\FaxSetup.log
2015-01-09 18:41 - 2012-09-12 21:12 - 00247855 _____ () C:\WINDOWS\ocgen.log
2015-01-09 18:41 - 2012-09-12 21:12 - 00192661 _____ () C:\WINDOWS\tsoc.log
2015-01-09 18:41 - 2012-09-12 21:12 - 00166819 _____ () C:\WINDOWS\comsetup.log
2015-01-09 18:41 - 2012-09-12 21:12 - 00102199 _____ () C:\WINDOWS\ntdtcsetup.log
2015-01-09 18:41 - 2012-09-12 21:12 - 00079163 _____ () C:\WINDOWS\iis6.log
2015-01-09 18:41 - 2012-09-12 21:12 - 00027903 _____ () C:\WINDOWS\ocmsn.log
2015-01-09 18:41 - 2012-09-12 21:12 - 00025288 _____ () C:\WINDOWS\msgsocm.log
2015-01-09 18:41 - 2012-09-12 21:12 - 00004635 _____ () C:\WINDOWS\imsins.log
2015-01-09 18:41 - 2004-12-21 18:06 - 01230940 _____ () C:\WINDOWS\system32\PerfStringBackup.INI
2015-01-09 07:31 - 2012-09-16 13:39 - 00000000 ___HD () C:\Dokumente und Einstellungen\Chef\Netzwerkumgebung
2015-01-08 23:03 - 2005-01-22 23:17 - 00000000 ___HD () C:\Dokumente und Einstellungen\Felix\Netzwerkumgebung
2015-01-08 21:52 - 2014-07-13 16:36 - 00000214 _____ () C:\WINDOWS\Tasks\Ende des Supports für Microsoft Windows XP – Monatliche Benachrichtigung.job
2015-01-08 20:00 - 2005-03-06 22:05 - 00000000 ____D () C:\Dokumente und Einstellungen\Felix\Eigene Dateien\Felix
2015-01-08 08:07 - 2014-10-17 20:50 - 00319622 _____ () C:\Dokumente und Einstellungen\LocalService\Lokale Einstellungen\Anwendungsdaten\WPFFontCache_v0400-S-1-5-21-2627930752-4006264225-1260829912-501-0.dat
2015-01-07 10:53 - 2013-12-22 13:47 - 00000000 ____D () C:\Dokumente und Einstellungen\Gast\Lokale Einstellungen\Temp
2015-01-07 10:53 - 2013-12-22 13:47 - 00000000 ____D () C:\Dokumente und Einstellungen\Gast
2015-01-04 14:29 - 2009-10-12 12:33 - 00000000 ____D () C:\Programme\Mozilla Thunderbird
2015-01-02 19:12 - 2005-02-03 08:08 - 00000000 ____D () C:\Dokumente und Einstellungen\Felix\Eigene Dateien\Romy
2014-12-28 18:43 - 2006-11-16 18:04 - 00070656 _____ () C:\Dokumente und Einstellungen\Felix\Lokale Einstellungen\Anwendungsdaten\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2014-12-28 18:29 - 2005-01-22 23:17 - 00000000 ___RD () C:\Dokumente und Einstellungen\Felix\Eigene Dateien\Eigene Bilder Felix
2014-12-28 18:20 - 2009-10-12 12:26 - 00000000 ____D () C:\Dokumente und Einstellungen\Felix\Lokale Einstellungen\Anwendungsdaten\Paint.NET
2014-12-27 19:55 - 2004-12-21 18:06 - 00000000 ___RD () C:\Dokumente und Einstellungen\All Users\Dokumente
2014-12-24 13:11 - 2005-09-04 19:59 - 00002477 _____ () C:\Dokumente und Einstellungen\Felix\Desktop\Microsoft Word.lnk
2014-12-19 21:10 - 2012-09-09 11:16 - 00000000 ____D () C:\WINDOWS\system32\NtmsData
2014-12-19 17:36 - 2004-12-21 18:11 - 00000000 ____D () C:\WINDOWS\Registration
2014-12-19 17:04 - 2004-12-21 18:24 - 00000000 ____D () C:\WINDOWS\system32\ReinstallBackups
2014-12-19 08:18 - 2005-09-04 19:58 - 00002513 _____ () C:\Dokumente und Einstellungen\Felix\Desktop\Microsoft Excel.lnk
2014-12-18 16:24 - 2008-12-14 10:12 - 00000000 ____D () C:\Programme\Mozilla Firefox

==================== Files in the root of some directories =======
2015-01-09 07:15 - 2015-01-09 07:15 - 0004608 _____ () C:\Dokumente und Einstellungen\Chef\Lokale Einstellungen\Anwendungsdaten\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2012-09-16 13:39 - 2012-09-18 21:25 - 0000137 _____ () C:\Dokumente und Einstellungen\Chef\Lokale Einstellungen\Anwendungsdaten\fusioncache.dat

Some content of TEMP:
====================
C:\Dokumente und Einstellungen\Chef\Lokale Einstellungen\temp\avgnt.exe
C:\Dokumente und Einstellungen\Chef\Lokale Einstellungen\temp\Quarantine.exe
C:\Dokumente und Einstellungen\Chef\Lokale Einstellungen\temp\sqlite3.dll
C:\Dokumente und Einstellungen\Felix\Lokale Einstellungen\temp\AskSLib.dll
C:\Dokumente und Einstellungen\Felix\Lokale Einstellungen\temp\avgnt.exe
C:\Dokumente und Einstellungen\Felix\Lokale Einstellungen\temp\avguidx.dll
C:\Dokumente und Einstellungen\Felix\Lokale Einstellungen\temp\Bootstrapper.exe
C:\Dokumente und Einstellungen\Felix\Lokale Einstellungen\temp\BootstrapperARA.dll
C:\Dokumente und Einstellungen\Felix\Lokale Einstellungen\temp\BootstrapperARU.dll
C:\Dokumente und Einstellungen\Felix\Lokale Einstellungen\temp\BootstrapperCHS.dll
C:\Dokumente und Einstellungen\Felix\Lokale Einstellungen\temp\BootstrapperCHT.dll
C:\Dokumente und Einstellungen\Felix\Lokale Einstellungen\temp\BootstrapperCSY.dll
C:\Dokumente und Einstellungen\Felix\Lokale Einstellungen\temp\BootstrapperDAN.dll
C:\Dokumente und Einstellungen\Felix\Lokale Einstellungen\temp\BootstrapperDEU.dll
C:\Dokumente und Einstellungen\Felix\Lokale Einstellungen\temp\BootstrapperELL.dll
C:\Dokumente und Einstellungen\Felix\Lokale Einstellungen\temp\BootstrapperENU.dll
C:\Dokumente und Einstellungen\Felix\Lokale Einstellungen\temp\BootstrapperESN.dll
C:\Dokumente und Einstellungen\Felix\Lokale Einstellungen\temp\BootstrapperESP.dll
C:\Dokumente und Einstellungen\Felix\Lokale Einstellungen\temp\BootstrapperFIN.dll
C:\Dokumente und Einstellungen\Felix\Lokale Einstellungen\temp\BootstrapperFRA.dll
C:\Dokumente und Einstellungen\Felix\Lokale Einstellungen\temp\BootstrapperHEB.dll
C:\Dokumente und Einstellungen\Felix\Lokale Einstellungen\temp\BootstrapperHRV.dll
C:\Dokumente und Einstellungen\Felix\Lokale Einstellungen\temp\BootstrapperHUN.dll
C:\Dokumente und Einstellungen\Felix\Lokale Einstellungen\temp\BootstrapperITA.dll
C:\Dokumente und Einstellungen\Felix\Lokale Einstellungen\temp\BootstrapperJPN.dll
C:\Dokumente und Einstellungen\Felix\Lokale Einstellungen\temp\BootstrapperKOR.dll
C:\Dokumente und Einstellungen\Felix\Lokale Einstellungen\temp\BootstrapperLOC.dll
C:\Dokumente und Einstellungen\Felix\Lokale Einstellungen\temp\BootstrapperNLD.dll
C:\Dokumente und Einstellungen\Felix\Lokale Einstellungen\temp\BootstrapperNOR.dll
C:\Dokumente und Einstellungen\Felix\Lokale Einstellungen\temp\BootstrapperPLK.dll
C:\Dokumente und Einstellungen\Felix\Lokale Einstellungen\temp\BootstrapperPTB.dll
C:\Dokumente und Einstellungen\Felix\Lokale Einstellungen\temp\BootstrapperPTG.dll
C:\Dokumente und Einstellungen\Felix\Lokale Einstellungen\temp\BootstrapperRUS.dll
C:\Dokumente und Einstellungen\Felix\Lokale Einstellungen\temp\BootstrapperSKY.dll
C:\Dokumente und Einstellungen\Felix\Lokale Einstellungen\temp\BootstrapperSLV.dll
C:\Dokumente und Einstellungen\Felix\Lokale Einstellungen\temp\BootstrapperSVE.dll
C:\Dokumente und Einstellungen\Felix\Lokale Einstellungen\temp\BootstrapperTHA.dll
C:\Dokumente und Einstellungen\Felix\Lokale Einstellungen\temp\BootstrapperTRK.dll
C:\Dokumente und Einstellungen\Felix\Lokale Einstellungen\temp\BootstrapperUKR.dll
C:\Dokumente und Einstellungen\Felix\Lokale Einstellungen\temp\CommonInstaller.exe
C:\Dokumente und Einstellungen\Felix\Lokale Einstellungen\temp\dotNetFx40_Client_setup.exe
C:\Dokumente und Einstellungen\Felix\Lokale Einstellungen\temp\Garmin.Cartography.DeviceInteraction.dll
C:\Dokumente und Einstellungen\Felix\Lokale Einstellungen\temp\Garmin.Cartography.MapUpdate.Client.Core.dll
C:\Dokumente und Einstellungen\Felix\Lokale Einstellungen\temp\GarminMapUpdater.exe
C:\Dokumente und Einstellungen\Felix\Lokale Einstellungen\temp\ginstall.dll
C:\Dokumente und Einstellungen\Felix\Lokale Einstellungen\temp\GLF2C.tmp.tbsoft.dll
C:\Dokumente und Einstellungen\Felix\Lokale Einstellungen\temp\GpsImgWrapper.dll
C:\Dokumente und Einstellungen\Felix\Lokale Einstellungen\temp\Ionic.Zip.dll
C:\Dokumente und Einstellungen\Felix\Lokale Einstellungen\temp\MachineIdCreator.exe
C:\Dokumente und Einstellungen\Felix\Lokale Einstellungen\temp\mfc100.dll
C:\Dokumente und Einstellungen\Felix\Lokale Einstellungen\temp\MFPL7014.DLL
C:\Dokumente und Einstellungen\Felix\Lokale Einstellungen\temp\msvcp100.dll
C:\Dokumente und Einstellungen\Felix\Lokale Einstellungen\temp\msvcp60.dll
C:\Dokumente und Einstellungen\Felix\Lokale Einstellungen\temp\msvcr100.dll
C:\Dokumente und Einstellungen\Felix\Lokale Einstellungen\temp\nsj16D.tmp.ConduitEngineEmbbed.exe
C:\Dokumente und Einstellungen\Felix\Lokale Einstellungen\temp\nsu1C9.tmp.ConduitEngineEmbbed.exe
C:\Dokumente und Einstellungen\Felix\Lokale Einstellungen\temp\nsw2C2.tmp.ConduitEngineEmbbed.exe
C:\Dokumente und Einstellungen\Felix\Lokale Einstellungen\temp\Paint.NET.3.36.exe
C:\Dokumente und Einstellungen\Felix\Lokale Einstellungen\temp\PRINTKEY2000.EXE
C:\Dokumente und Einstellungen\Felix\Lokale Einstellungen\temp\setup_wm.exe
C:\Dokumente und Einstellungen\Felix\Lokale Einstellungen\temp\softonic-de3.exe
C:\Dokumente und Einstellungen\Felix\Lokale Einstellungen\temp\TDSLSpeedManager.exe
C:\Dokumente und Einstellungen\Felix\Lokale Einstellungen\temp\TDSLSpeedMgrSetup.exe
C:\Dokumente und Einstellungen\Felix\Lokale Einstellungen\temp\ToolbarInstaller.exe
C:\Dokumente und Einstellungen\Felix\Lokale Einstellungen\temp\twapi-2.0a2.dll
C:\Dokumente und Einstellungen\Felix\Lokale Einstellungen\temp\UNNeroBurnRights.exe
C:\Dokumente und Einstellungen\Felix\Lokale Einstellungen\temp\usb_lib.dll
C:\Dokumente und Einstellungen\Felix\Lokale Einstellungen\temp\_CD_Start.exe
C:\Dokumente und Einstellungen\Felix\Lokale Einstellungen\temp\_VWUPSRV.EXE
C:\Dokumente und Einstellungen\Gast\Lokale Einstellungen\temp\avgnt.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed

==================== End Of Log ============================

--- --- ---

--- --- ---

14.01.2015, 08:24	#10
schrauber /// the machine /// TB-Ausbilder	Windows7: Malware eingefangen von infiziertem XP-Rechner über Fritzbox? ok __________________ gruß, schrauber *Proud Member of UNITE and ASAP since 2009* Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM!

Windows7: Malware eingefangen von infiziertem XP-Rechner über Fritzbox?

Plagegeister aller Art und deren Bekämpfung: Windows7: Malware eingefangen von infiziertem XP-Rechner über Fritzbox?