Win8.1 | PC neuaufgesetzt, Virenscann ergab funde wie: ProtectWindowsManager.exe

DerManni · 07.05.2015, 14:09

Wunderschönen guten Tag,

ich habe vor kurzem (ein, zwei Tage) mein PC neu aufgesetzt. Der PC fuhr trotz SSD nur in 1-2 Minuten hoch, hatte beim Spielen massive durchgänig wiederkehrende Laggs und Herrunterfahren ging entweder nur per Aus/Anschalter oder Spamen des Herunterfahren Buttons. Nachdem ich mich etwas Dumm beim Neuinstallieren des OS anstellte, sprich ich alle Daten auf meinen Festplatten gelöscht habe, fing ich damit an alle Treiber neu zu installieren. Benutzte dazu den DELL Service da mein PC unerwartet von DELL ist(XPS 8700).
Zu erwähnen ist villt., dass ich mein Installieren die Zugriffsverweigerung 0xc0000005 (oder so ähnlich) bekam, gelöst durch das verwenden der Installationsformatierungsoption der Windows DELL CD.
Daraufhin habe ich Reimage herruntergeladen, musste aber festtellen, dass dies zu bezahlen ist. Jedoch bekam ich den Hinweis auf ProtectWindowsManager.exe. Das habe ich gegoogelt und bin auf dieses Forum gestoßen.

Hier nun also meine Logs.

Und die FRAGE, ergibt sich daraus irgendetwas anderes schwerwigendes ?

Gruß DerManni

schrauber · 07.05.2015, 15:22

Hi,

Logs bitte immer in den Thread posten. Zur Not aufteilen und mehrere Posts nutzen.
Ich kann auf Arbeit keine Anhänge öffnen, danke.

So funktioniert es:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR, 7Z-Archive zu packen erschwert mir massiv die Arbeit, es sei denn natürlich die Datei wäre ansonsten zu gross für das Forum. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:

Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.

DerManni · 07.05.2015, 16:27

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 06-05-2015 01
Ran by Admin (administrator) on PC on 07-05-2015 17:17:47
Running from C:\Users\Admin\Downloads
Loaded Profiles: Admin (Available profiles: Admin)
Platform: Windows 8.1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\afwServ.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\ibtrksrv.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae-svc.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae64.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Avast Software) C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\ng\ngservice.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
(Intel Corporation) C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe
(Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
(Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
(Intel(R) Corporation) C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Logitech Inc.) C:\Program Files\Logitech Gaming Software\LCore.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe
(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(ROCCAT GmbH) C:\Program Files (x86)\ROCCAT\Kone Pure Mouse\KonePureMonitor.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae.exe
(Valve Corporation) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2685072 2015-05-01] (NVIDIA Corporation)
HKLM\...\Run: [BTMTrayAgent] => rundll32.exe "C:\Program Files (x86)\Intel\Bluetooth\btmshellex.dll",TrayApp
HKLM\...\Run: [Launch LCore] => C:\Program Files\Logitech Gaming Software\LCore.exe [13318424 2015-03-12] (Logitech Inc.)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5515496 2015-05-05] (Avast Software s.r.o.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [334896 2015-04-30] (Oracle Corporation)
HKLM-x32\...\Run: [RoccatKonePure] => C:\Program Files (x86)\ROCCAT\Kone Pure Mouse\KonePureMonitor.EXE [561152 2014-01-20] (ROCCAT GmbH)
HKLM-x32\...\Run: [Malwarebytes Anti-Exploit] => C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae.exe [2618680 2015-04-08] (Malwarebytes Corporation)
HKU\S-1-5-21-395663452-3105888118-736914168-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [31280256 2015-04-17] (Skype Technologies S.A.)
HKU\S-1-5-21-395663452-3105888118-736914168-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [2889408 2015-04-14] (Valve Corporation)
HKU\S-1-5-21-395663452-3105888118-736914168-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8202008 2015-04-08] (Piriform Ltd)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2015-05-05] (Avast Software s.r.o.)
GroupPolicyUsers\S-1-5-21-395663452-3105888118-736914168-1004\User: Group Policy restriction detected <======= ATTENTION
GroupPolicyUsers\S-1-5-21-395663452-3105888118-736914168-1001\User: Group Policy restriction detected <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com
HKU\S-1-5-21-395663452-3105888118-736914168-1001\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/de-de/?ocid=iehp
SearchScopes: HKLM -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = 
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-395663452-3105888118-736914168-1001 -> {E733165D-CBCF-4FDA-883E-ADEF965B476C} URL = 
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_45\bin\ssv.dll [2015-05-05] (Oracle Corporation)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2015-05-05] (Avast Software s.r.o.)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_45\bin\jp2ssv.dll [2015-05-05] (Oracle Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-05-05] (Avast Software s.r.o.)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\g4ok9hpb.default
FF Homepage: google.de
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_17_0_0_169.dll [2015-05-05] ()
FF Plugin: @java.com/DTPlugin,version=11.45.2 -> C:\Program Files\Java\jre1.8.0_45\bin\dtplugin\npDeployJava1.dll [2015-05-05] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.45.2 -> C:\Program Files\Java\jre1.8.0_45\bin\plugin2\npjp2.dll [2015-05-05] (Oracle Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_169.dll [2015-05-05] ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=3.0.72 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2013-01-24] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2013-01-24] (Intel Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2015-04-08] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2015-04-08] (NVIDIA Corporation)
FF Extension: Adblock Plus - C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\g4ok9hpb.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2015-05-05]
FF Extension: Adblock Edge - C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\g4ok9hpb.default\Extensions\{fe272bd1-5f76-4ea4-8501-a05d35d823fc}.xpi [2015-05-07]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2015-05-05]

Chrome: 
=======
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-05-05]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [343336 2015-05-05] (Avast Software s.r.o.)
R2 avast! Firewall; C:\Program Files\AVAST Software\Avast\afwServ.exe [107448 2015-05-05] (Avast Software s.r.o.)
R3 AvastVBoxSvc; C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [4034896 2015-05-05] (Avast Software)
S3 BthHFSrv; C:\Windows\System32\BthHFSrv.dll [324608 2014-11-21] (Microsoft Corporation)
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1152656 2015-05-01] (NVIDIA Corporation)
S2 iBtSiva; C:\Program Files (x86)\Intel\Bluetooth\ibtsiva.exe [131312 2015-03-20] (Intel Corporation)
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [732160 2012-12-10] (Intel(R) Corporation) [File not signed]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [803872 2012-12-10] (Intel(R) Corporation)
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [129336 2013-01-31] (Intel Corporation)
R2 Intel(R) Wireless Bluetooth(R) 4.0 Radio Management; C:\Program Files (x86)\Intel\Bluetooth\ibtrksrv.exe [190192 2015-03-20] (Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [167736 2013-01-31] (Intel Corporation)
R2 MbaeSvc; C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae-svc.exe [656184 2015-04-08] (Malwarebytes Corporation)
S2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [1080120 2015-04-14] (Malwarebytes Corporation)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1884304 2015-05-01] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [22997648 2015-05-01] (NVIDIA Corporation)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [366520 2015-05-06] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23792 2015-05-06] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29168 2015-05-05] ()
R1 aswKbd; C:\Windows\system32\drivers\aswKbd.sys [28144 2015-05-05] (Avast Software s.r.o.)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [89944 2015-05-05] (Avast Software s.r.o.)
R0 aswNdisFlt; C:\Windows\System32\DRIVERS\aswNdisFlt.sys [449896 2015-05-05] (Avast Software s.r.o.)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93528 2015-05-05] (Avast Software s.r.o.)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65736 2015-05-05] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1047320 2015-05-05] (Avast Software s.r.o.)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [442264 2015-05-05] (Avast Software s.r.o.)
S2 aswStm; C:\Windows\system32\drivers\aswStm.sys [137288 2015-05-05] (Avast Software s.r.o.)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [272248 2015-05-05] ()
R3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [226304 2014-11-21] (Microsoft Corporation)
R3 btmhsf; C:\Windows\system32\DRIVERS\btmhsf.sys [1390904 2013-10-15] (Motorola Solutions, Inc.)
R1 ESProtectionDriver; C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae64.sys [63064 2015-04-08] ()
R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [25816 2015-04-14] (Malwarebytes Corporation)
S3 MBAMWebAccessControl; C:\WINDOWS\system32\drivers\mwac.sys [64216 2015-04-14] (Malwarebytes Corporation)
R3 NETwNe64; C:\Windows\system32\DRIVERS\NETwew00.sys [3345376 2013-08-31] (Intel Corporation)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19600 2015-05-01] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [38032 2014-11-22] (NVIDIA Corporation)
S3 pmxdrv; C:\Windows\system32\drivers\pmxdrv.sys [31152 2015-05-05] ()
R2 VBoxAswDrv; C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [273824 2015-05-05] (Avast Software)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114496 2015-05-06] (Microsoft Corporation)
U3 pxldapow; \??\C:\Users\Admin\AppData\Local\Temp\pxldapow.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-05-07 16:42 - 2015-05-07 16:51 - 00003596 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-395663452-3105888118-736914168-1001
2015-05-07 16:41 - 2015-05-07 16:42 - 00136408 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2015-05-07 16:41 - 2015-05-07 16:41 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2015-05-07 16:41 - 2015-05-07 16:41 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2015-05-07 16:41 - 2015-04-14 09:38 - 00064216 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mwac.sys
2015-05-07 16:41 - 2015-04-14 09:37 - 00107736 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2015-05-07 16:41 - 2015-04-14 09:37 - 00025816 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbam.sys
2015-05-07 16:40 - 2015-05-07 17:17 - 00014779 _____ () C:\Users\Admin\Downloads\FRST.txt
2015-05-07 16:40 - 2015-05-07 16:41 - 00029181 _____ () C:\Users\Admin\Downloads\Addition.txt
2015-05-07 16:40 - 2015-05-07 16:40 - 00001135 _____ () C:\Users\Admin\Desktop\JRT.txt
2015-05-07 16:37 - 2015-05-07 17:05 - 00002098 _____ () C:\WINDOWS\PFRO.log
2015-05-07 16:37 - 2015-05-07 17:05 - 00000462 _____ () C:\WINDOWS\setupact.log
2015-05-07 16:37 - 2015-05-07 16:37 - 00000000 _____ () C:\WINDOWS\setuperr.log
2015-05-07 16:36 - 2015-05-07 17:04 - 00115538 _____ () C:\WINDOWS\WindowsUpdate.log
2015-05-07 16:19 - 2015-05-07 16:36 - 00000000 ____D () C:\ProgramData\GlarySoft
2015-05-07 16:11 - 2015-05-07 16:18 - 00000000 ____D () C:\Program Files\Reimage
2015-05-07 16:11 - 2015-05-07 16:12 - 00000000 ____D () C:\rei
2015-05-07 16:03 - 2015-05-07 16:36 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group
2015-05-07 16:02 - 2015-05-07 16:02 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Admin\Downloads\revosetup95.exe
2015-05-07 15:55 - 2015-05-07 16:36 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\GlarySoft
2015-05-07 15:55 - 2015-05-07 16:03 - 00000000 ____D () C:\Program Files (x86)\Glarysoft
2015-05-07 15:55 - 2015-05-07 15:55 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\DiskDefrag
2015-05-07 15:52 - 2015-05-07 15:55 - 00000000 ____D () C:\ProgramData\Malwarebytes Anti-Exploit
2015-05-07 15:52 - 2015-05-07 15:52 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Exploit
2015-05-07 15:52 - 2015-05-07 15:52 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Exploit
2015-05-07 15:51 - 2015-05-07 15:52 - 03020968 _____ (Malwarebytes ) C:\Users\Admin\Downloads\mbae-setup-1.06.1.1019.exe
2015-05-07 14:50 - 2015-05-07 17:17 - 00000867 _____ () C:\Users\Admin\Desktop\GMER.log
2015-05-07 14:46 - 2015-05-07 14:46 - 00028026 _____ () C:\Users\Admin\Desktop\Addition.txt
2015-05-07 14:45 - 2015-05-07 17:17 - 00000000 ____D () C:\FRST
2015-05-07 14:45 - 2015-05-07 14:46 - 00096009 _____ () C:\Users\Admin\Desktop\FRST.txt
2015-05-07 14:44 - 2015-05-07 14:44 - 00000472 _____ () C:\Users\Admin\Desktop\defogger_disable.log
2015-05-07 14:44 - 2015-05-07 14:44 - 00000000 _____ () C:\Users\Admin\defogger_reenable
2015-05-07 14:42 - 2015-05-07 14:42 - 00001108 _____ () C:\Users\Admin\Desktop\ESET.txt
2015-05-07 14:29 - 2015-05-07 14:30 - 04737952 _____ () C:\Users\Admin\Downloads\ausetup5.3.1.20.exe
2015-05-07 14:29 - 2015-05-07 14:29 - 02102272 _____ (Farbar) C:\Users\Admin\Downloads\FRST64.exe
2015-05-07 14:29 - 2015-05-07 14:29 - 00380416 _____ () C:\Users\Admin\Downloads\Gmer-19357.exe
2015-05-07 14:29 - 2015-05-07 14:29 - 00050477 _____ () C:\Users\Admin\Downloads\Defogger.exe
2015-05-07 14:18 - 2015-05-07 14:18 - 02347384 _____ (ESET) C:\Users\Admin\Downloads\esetsmartinstaller_deu.exe
2015-05-07 14:16 - 2015-05-07 17:01 - 00001824 _____ () C:\Users\Admin\Desktop\sc-cleaner.txt
2015-05-07 14:14 - 2015-05-07 14:14 - 00000207 _____ () C:\WINDOWS\tweaking.com-regbackup-PC-Windows-8.1-(64-bit).dat
2015-05-07 14:14 - 2015-05-07 14:14 - 00000000 ____D () C:\RegBackup
2015-05-07 14:11 - 2015-05-07 14:11 - 00000763 _____ () C:\Users\Admin\Desktop\AdwCleaner[R1].txt
2015-05-07 14:10 - 2015-05-07 14:10 - 02716843 _____ (Thisisu) C:\Users\Admin\Desktop\JRT.exe
2015-05-07 14:10 - 2015-05-07 14:10 - 00463688 _____ (Bleeping Computer, LLC) C:\Users\Admin\Downloads\sc-cleaner.exe
2015-05-07 14:05 - 2015-05-07 14:05 - 00003972 _____ () C:\Users\Admin\Desktop\AdwCleaner[R0].txt
2015-05-07 13:54 - 2015-05-07 13:54 - 00010870 _____ () C:\Users\Admin\Desktop\ScanMalwarebytes.txt
2015-05-07 13:48 - 2015-05-07 13:48 - 00000000 ____D () C:\ProgramData\Malwarebytes
2015-05-07 13:45 - 2015-05-07 13:46 - 21546080 _____ (Malwarebytes Corporation ) C:\Users\Admin\Downloads\mbam-setup-2.1.6.1022.exe
2015-05-07 13:33 - 2015-05-07 13:33 - 00002778 _____ () C:\WINDOWS\System32\Tasks\CCleanerSkipUAC
2015-05-07 13:33 - 2015-05-07 13:33 - 00000834 _____ () C:\Users\Public\Desktop\CCleaner.lnk
2015-05-07 13:33 - 2015-05-07 13:33 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2015-05-07 13:33 - 2015-05-07 13:33 - 00000000 ____D () C:\Program Files\CCleaner
2015-05-07 13:13 - 2015-03-23 00:45 - 00227328 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepdu.dll
2015-05-07 13:13 - 2015-03-23 00:09 - 01111552 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2015-05-07 13:13 - 2015-03-23 00:09 - 00957440 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll
2015-05-07 13:13 - 2015-03-23 00:09 - 00769024 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll
2015-05-07 13:13 - 2015-03-23 00:09 - 00726528 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll
2015-05-07 13:13 - 2015-03-23 00:09 - 00419328 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll
2015-05-07 13:13 - 2015-03-23 00:09 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll
2015-05-07 13:13 - 2014-12-03 01:09 - 00192000 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepic.dll
2015-05-07 13:13 - 2014-11-10 01:19 - 00991232 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
2015-05-07 13:13 - 2014-11-10 01:19 - 00806400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll
2015-05-07 13:12 - 2015-01-19 20:42 - 01487976 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll
2015-05-07 12:33 - 2014-07-24 05:20 - 00875688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvcr120_clr0400.dll
2015-05-07 12:33 - 2014-07-24 05:20 - 00869544 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcr120_clr0400.dll
2015-05-07 07:59 - 2015-05-07 07:59 - 00000000 ____D () C:\Users\Admin\Documents\My games
2015-05-07 06:52 - 2015-05-07 06:52 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_User_LocationProvider_01_11_00.Wdf
2015-05-06 22:05 - 2015-05-06 22:17 - 00000000 ____D () C:\Users\Admin\AppData\Local\ftblauncher
2015-05-06 22:05 - 2015-05-06 22:06 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\ftblauncher
2015-05-06 22:04 - 2015-05-06 22:05 - 06628862 _____ () C:\Users\Admin\Downloads\FTB_Launcher.exe
2015-05-06 14:17 - 2015-05-06 14:17 - 00000000 ____D () C:\ProgramData\ROCCAT
2015-05-06 14:14 - 2015-05-06 14:14 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ROCCAT
2015-05-06 14:14 - 2015-05-06 14:14 - 00000000 ____D () C:\Program Files (x86)\ROCCAT
2015-05-06 14:13 - 2010-06-02 04:55 - 00527192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_7.dll
2015-05-06 14:13 - 2010-06-02 04:55 - 00518488 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_7.dll
2015-05-06 14:13 - 2010-06-02 04:55 - 00239960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_7.dll
2015-05-06 14:13 - 2010-06-02 04:55 - 00176984 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_7.dll
2015-05-06 14:13 - 2010-06-02 04:55 - 00077656 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_5.dll
2015-05-06 14:13 - 2010-06-02 04:55 - 00074072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_5.dll
2015-05-06 14:13 - 2010-05-26 11:41 - 02526056 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_43.dll
2015-05-06 14:13 - 2010-05-26 11:41 - 02106216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_43.dll
2015-05-06 14:13 - 2010-05-26 11:41 - 01907552 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dcsx_43.dll
2015-05-06 14:13 - 2010-05-26 11:41 - 01868128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dcsx_43.dll
2015-05-06 14:13 - 2010-02-04 10:01 - 00530776 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_6.dll
2015-05-06 14:13 - 2010-02-04 10:01 - 00528216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_6.dll
2015-05-06 14:13 - 2010-02-04 10:01 - 00238936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_6.dll
2015-05-06 14:13 - 2010-02-04 10:01 - 00176984 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_6.dll
2015-05-06 14:13 - 2010-02-04 10:01 - 00078680 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_4.dll
2015-05-06 14:13 - 2010-02-04 10:01 - 00074072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_4.dll
2015-05-06 14:13 - 2010-02-04 10:01 - 00024920 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_7.dll
2015-05-06 14:13 - 2010-02-04 10:01 - 00022360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\X3DAudio1_7.dll
2015-05-06 14:13 - 2009-09-04 17:44 - 00517960 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_5.dll
2015-05-06 14:13 - 2009-09-04 17:44 - 00515416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_5.dll
2015-05-06 14:12 - 2009-09-04 17:44 - 00238936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_5.dll
2015-05-06 14:12 - 2009-09-04 17:44 - 00176968 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_5.dll
2015-05-06 14:12 - 2009-09-04 17:44 - 00073544 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_3.dll
2015-05-06 14:12 - 2009-09-04 17:44 - 00069464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_3.dll
2015-05-06 14:12 - 2009-09-04 17:29 - 05554512 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dcsx_42.dll
2015-05-06 14:12 - 2009-09-04 17:29 - 05501792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dcsx_42.dll
2015-05-06 14:12 - 2009-09-04 17:29 - 02582888 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_42.dll
2015-05-06 14:12 - 2009-09-04 17:29 - 02475352 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_42.dll
2015-05-06 14:12 - 2009-09-04 17:29 - 01974616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_42.dll
2015-05-06 14:12 - 2009-09-04 17:29 - 01892184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_42.dll
2015-05-06 14:12 - 2009-09-04 17:29 - 00523088 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_42.dll
2015-05-06 14:12 - 2009-09-04 17:29 - 00453456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_42.dll
2015-05-06 14:12 - 2009-09-04 17:29 - 00285024 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx11_42.dll
2015-05-06 14:12 - 2009-09-04 17:29 - 00235344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx11_42.dll
2015-05-06 14:12 - 2009-03-16 14:18 - 00521560 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_4.dll
2015-05-06 14:12 - 2009-03-16 14:18 - 00517448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_4.dll
2015-05-06 14:12 - 2009-03-16 14:18 - 00235352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_4.dll
2015-05-06 14:12 - 2009-03-16 14:18 - 00174936 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_4.dll
2015-05-06 14:12 - 2009-03-16 14:18 - 00024920 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_6.dll
2015-05-06 14:12 - 2009-03-16 14:18 - 00022360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\X3DAudio1_6.dll
2015-05-06 14:12 - 2009-03-09 15:27 - 05425496 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_41.dll
2015-05-06 14:12 - 2009-03-09 15:27 - 04178264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_41.dll
2015-05-06 14:12 - 2009-03-09 15:27 - 02430312 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_41.dll
2015-05-06 14:12 - 2009-03-09 15:27 - 01846632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_41.dll
2015-05-06 14:12 - 2009-03-09 15:27 - 00520544 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_41.dll
2015-05-06 14:12 - 2009-03-09 15:27 - 00453456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_41.dll
2015-05-06 14:12 - 2008-10-27 10:04 - 00518480 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_3.dll
2015-05-06 14:12 - 2008-10-27 10:04 - 00514384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_3.dll
2015-05-06 14:12 - 2008-10-27 10:04 - 00235856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_3.dll
2015-05-06 14:12 - 2008-10-27 10:04 - 00175440 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_3.dll
2015-05-06 14:12 - 2008-10-27 10:04 - 00074576 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_2.dll
2015-05-06 14:12 - 2008-10-27 10:04 - 00070992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_2.dll
2015-05-06 14:12 - 2008-10-27 10:04 - 00025936 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_5.dll
2015-05-06 14:12 - 2008-10-27 10:04 - 00023376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\X3DAudio1_5.dll
2015-05-06 14:12 - 2008-10-15 06:22 - 05631312 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_40.dll
2015-05-06 14:12 - 2008-10-15 06:22 - 04379984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_40.dll
2015-05-06 14:12 - 2008-10-15 06:22 - 02605920 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_40.dll
2015-05-06 14:12 - 2008-10-15 06:22 - 02036576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_40.dll
2015-05-06 14:12 - 2008-10-15 06:22 - 00519000 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_40.dll
2015-05-06 14:12 - 2008-10-15 06:22 - 00452440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_40.dll
2015-05-06 14:12 - 2008-07-31 10:41 - 00238088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_2.dll
2015-05-06 14:12 - 2008-07-31 10:41 - 00177672 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_2.dll
2015-05-06 14:12 - 2008-07-31 10:41 - 00072200 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_1.dll
2015-05-06 14:12 - 2008-07-31 10:41 - 00068616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_1.dll
2015-05-06 14:12 - 2008-07-31 10:40 - 00513544 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_2.dll
2015-05-06 14:12 - 2008-07-31 10:40 - 00509448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_2.dll
2015-05-06 14:12 - 2008-07-10 11:01 - 00467984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_39.dll
2015-05-06 14:12 - 2008-07-10 11:00 - 04992520 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_39.dll
2015-05-06 14:12 - 2008-07-10 11:00 - 03851784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_39.dll
2015-05-06 14:12 - 2008-07-10 11:00 - 01942552 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_39.dll
2015-05-06 14:12 - 2008-07-10 11:00 - 01493528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_39.dll
2015-05-06 14:12 - 2008-07-10 11:00 - 00540688 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_39.dll
2015-05-06 14:12 - 2008-05-30 14:19 - 00511496 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_1.dll
2015-05-06 14:12 - 2008-05-30 14:19 - 00507400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_1.dll
2015-05-06 14:12 - 2008-05-30 14:18 - 00238088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_1.dll
2015-05-06 14:12 - 2008-05-30 14:18 - 00177672 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_1.dll
2015-05-06 14:12 - 2008-05-30 14:17 - 00068104 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_0.dll
2015-05-06 14:12 - 2008-05-30 14:17 - 00065032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_0.dll
2015-05-06 14:12 - 2008-05-30 14:17 - 00025608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\X3DAudio1_4.dll
2015-05-06 14:12 - 2008-05-30 14:16 - 00028168 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_4.dll
2015-05-06 14:12 - 2008-05-30 14:11 - 04991496 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_38.dll
2015-05-06 14:12 - 2008-05-30 14:11 - 03850760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_38.dll
2015-05-06 14:12 - 2008-05-30 14:11 - 01941528 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_38.dll
2015-05-06 14:12 - 2008-05-30 14:11 - 01491992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_38.dll
2015-05-06 14:12 - 2008-05-30 14:11 - 00540688 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_38.dll
2015-05-06 14:12 - 2008-05-30 14:11 - 00467984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_38.dll
2015-05-06 14:12 - 2008-03-05 16:04 - 00489480 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_0.dll
2015-05-06 14:12 - 2008-03-05 16:03 - 00479752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_0.dll
2015-05-06 14:12 - 2008-03-05 16:03 - 00238088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_0.dll
2015-05-06 14:12 - 2008-03-05 16:03 - 00177672 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_0.dll
2015-05-06 14:12 - 2008-03-05 16:00 - 00028168 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_3.dll
2015-05-06 14:12 - 2008-03-05 16:00 - 00025608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\X3DAudio1_3.dll
2015-05-06 14:12 - 2008-03-05 15:56 - 04910088 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_37.dll
2015-05-06 14:12 - 2008-03-05 15:56 - 03786760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_37.dll
2015-05-06 14:12 - 2008-03-05 15:56 - 01860120 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_37.dll
2015-05-06 14:12 - 2008-03-05 15:56 - 01420824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_37.dll
2015-05-06 14:12 - 2008-02-05 23:07 - 00529424 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_37.dll
2015-05-06 14:12 - 2008-02-05 23:07 - 00462864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_37.dll
2015-05-06 14:12 - 2007-10-22 03:40 - 00411656 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_10.dll
2015-05-06 14:12 - 2007-10-22 03:39 - 00267272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_10.dll
2015-05-06 14:12 - 2007-10-22 03:37 - 00021000 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_2.dll
2015-05-06 14:12 - 2007-10-22 03:37 - 00017928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\X3DAudio1_2.dll
2015-05-06 14:12 - 2007-10-12 15:14 - 05081608 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_36.dll
2015-05-06 14:12 - 2007-10-12 15:14 - 03734536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_36.dll
2015-05-06 14:12 - 2007-10-12 15:14 - 02006552 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_36.dll
2015-05-06 14:12 - 2007-10-12 15:14 - 01374232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_36.dll
2015-05-06 14:12 - 2007-10-02 09:56 - 00508264 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_36.dll
2015-05-06 14:12 - 2007-10-02 09:56 - 00444776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_36.dll
2015-05-06 14:12 - 2007-07-20 00:57 - 00411496 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_9.dll
2015-05-06 14:12 - 2007-07-20 00:57 - 00267112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_9.dll
2015-05-06 14:12 - 2007-07-19 18:14 - 05073256 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_35.dll
2015-05-06 14:12 - 2007-07-19 18:14 - 03727720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_35.dll
2015-05-06 14:12 - 2007-07-19 18:14 - 01985904 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_35.dll
2015-05-06 14:12 - 2007-07-19 18:14 - 01358192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_35.dll
2015-05-06 14:12 - 2007-07-19 18:14 - 00508264 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_35.dll
2015-05-06 14:12 - 2007-07-19 18:14 - 00444776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_35.dll
2015-05-06 14:12 - 2007-06-20 20:49 - 00409960 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_8.dll
2015-05-06 14:12 - 2007-06-20 20:46 - 00266088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_8.dll
2015-05-06 14:12 - 2007-05-16 16:45 - 04496232 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_34.dll
2015-05-06 14:12 - 2007-05-16 16:45 - 03497832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_34.dll
2015-05-06 14:12 - 2007-05-16 16:45 - 01401200 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_34.dll
2015-05-06 14:12 - 2007-05-16 16:45 - 01124720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_34.dll
2015-05-06 14:12 - 2007-05-16 16:45 - 00506728 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_34.dll
2015-05-06 14:12 - 2007-05-16 16:45 - 00443752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_34.dll
2015-05-06 14:12 - 2007-04-04 18:55 - 00403304 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_7.dll
2015-05-06 14:12 - 2007-04-04 18:55 - 00261480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_7.dll
2015-05-06 14:12 - 2007-04-04 18:54 - 00107368 _____ (Microsoft Corporation) C:\WINDOWS\system32\xinput1_3.dll
2015-05-06 14:12 - 2007-04-04 18:53 - 00081768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xinput1_3.dll
2015-05-06 14:12 - 2007-03-15 16:57 - 00506728 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_33.dll
2015-05-06 14:12 - 2007-03-15 16:57 - 00443752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_33.dll
2015-05-06 14:12 - 2007-03-12 16:42 - 04494184 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_33.dll
2015-05-06 14:12 - 2007-03-12 16:42 - 03495784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_33.dll
2015-05-06 14:12 - 2007-03-12 16:42 - 01400176 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_33.dll
2015-05-06 14:12 - 2007-03-12 16:42 - 01123696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_33.dll
2015-05-06 14:12 - 2007-03-05 12:42 - 00017688 _____ (Microsoft Corporation) C:\WINDOWS\system32\x3daudio1_1.dll
2015-05-06 14:12 - 2007-03-05 12:42 - 00015128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\x3daudio1_1.dll
2015-05-06 14:12 - 2007-01-24 15:27 - 00393576 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_6.dll
2015-05-06 14:12 - 2007-01-24 15:27 - 00255848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_6.dll
2015-05-06 14:12 - 2006-12-08 12:02 - 00251672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_5.dll
2015-05-06 14:12 - 2006-12-08 12:00 - 00390424 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_5.dll
2015-05-06 14:12 - 2006-11-29 13:06 - 04398360 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_32.dll
2015-05-06 14:12 - 2006-11-29 13:06 - 03426072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_32.dll
2015-05-06 14:12 - 2006-11-29 13:06 - 00469264 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10.dll
2015-05-06 14:12 - 2006-11-29 13:06 - 00440080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10.dll
2015-05-06 14:12 - 2006-09-28 16:05 - 03977496 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_31.dll
2015-05-06 14:12 - 2006-09-28 16:05 - 02414360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_31.dll
2015-05-06 14:12 - 2006-09-28 16:05 - 00237848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_4.dll
2015-05-06 14:12 - 2006-09-28 16:04 - 00364824 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_4.dll
2015-05-06 14:12 - 2006-07-28 09:31 - 00083736 _____ (Microsoft Corporation) C:\WINDOWS\system32\xinput1_2.dll
2015-05-06 14:12 - 2006-07-28 09:30 - 00363288 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_3.dll
2015-05-06 14:12 - 2006-07-28 09:30 - 00236824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_3.dll
2015-05-06 14:12 - 2006-07-28 09:30 - 00062744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xinput1_2.dll
2015-05-06 14:12 - 2006-05-31 07:24 - 00230168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_2.dll
2015-05-06 14:12 - 2006-05-31 07:22 - 00354072 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_2.dll
2015-05-06 14:12 - 2006-03-31 12:41 - 03927248 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_30.dll
2015-05-06 14:12 - 2006-03-31 12:40 - 02388176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_30.dll
2015-05-06 14:12 - 2006-03-31 12:40 - 00352464 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_1.dll
2015-05-06 14:12 - 2006-03-31 12:39 - 00229584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_1.dll
2015-05-06 14:12 - 2006-03-31 12:39 - 00083664 _____ (Microsoft Corporation) C:\WINDOWS\system32\xinput1_1.dll
2015-05-06 14:12 - 2006-03-31 12:39 - 00062672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xinput1_1.dll
2015-05-06 14:12 - 2006-02-03 08:43 - 03830992 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_29.dll
2015-05-06 14:12 - 2006-02-03 08:43 - 02332368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_29.dll
2015-05-06 14:12 - 2006-02-03 08:42 - 00355536 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_0.dll
2015-05-06 14:12 - 2006-02-03 08:42 - 00230096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_0.dll
2015-05-06 14:12 - 2006-02-03 08:41 - 00016592 _____ (Microsoft Corporation) C:\WINDOWS\system32\x3daudio1_0.dll
2015-05-06 14:12 - 2006-02-03 08:41 - 00014032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\x3daudio1_0.dll
2015-05-06 14:12 - 2005-12-05 18:09 - 03815120 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_28.dll
2015-05-06 14:12 - 2005-12-05 18:09 - 02323664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_28.dll
2015-05-06 14:12 - 2005-07-22 19:59 - 03807440 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_27.dll
2015-05-06 14:12 - 2005-07-22 19:59 - 02319568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_27.dll
2015-05-06 14:12 - 2005-05-26 15:34 - 03767504 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_26.dll
2015-05-06 14:12 - 2005-05-26 15:34 - 02297552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_26.dll
2015-05-06 14:12 - 2005-03-18 17:19 - 03823312 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_25.dll
2015-05-06 14:12 - 2005-03-18 17:19 - 02337488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_25.dll
2015-05-06 14:12 - 2005-02-05 19:45 - 03544272 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_24.dll
2015-05-06 14:12 - 2005-02-05 19:45 - 02222800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_24.dll
2015-05-06 08:47 - 2015-05-06 08:53 - 00000000 ____D () C:\Users\Admin\Desktop\Bilder
2015-05-06 08:41 - 2015-05-06 08:41 - 00000656 __RSH () C:\Users\Admin\ntuser.pol
2015-05-06 08:41 - 2015-05-06 08:41 - 00000020 ___SH () C:\Users\Admin\ntuser.ini
2015-05-06 08:41 - 2015-05-06 08:41 - 00000000 ____D () C:\WINDOWS\System32\Tasks\WPD
2015-05-06 02:59 - 2012-08-10 04:31 - 00000013 ____R () C:\WINDOWS\csup.txt
2015-05-06 02:58 - 2015-05-06 02:58 - 00000000 ____D () C:\WINDOWS\SysWOW64\0407
2015-05-06 02:58 - 2015-05-06 02:58 - 00000000 ____D () C:\WINDOWS\system32\0407
2015-05-06 02:58 - 2015-05-06 02:58 - 00000000 ____D () C:\sources
2015-05-06 00:47 - 2015-05-07 16:09 - 00000000 ___DC () C:\WINDOWS\Panther
2015-05-06 00:47 - 2015-05-06 00:47 - 00000000 __SHD () C:\Recovery
2015-05-06 00:46 - 2015-05-07 06:53 - 00000000 ___SD () C:\WINDOWS\system32\GWX
2015-05-06 00:46 - 2015-05-06 00:46 - 24980480 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2015-05-06 00:46 - 2015-05-06 00:46 - 19695616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2015-05-06 00:46 - 2015-05-06 00:46 - 14397440 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2015-05-06 00:46 - 2015-05-06 00:46 - 12825600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2015-05-06 00:46 - 2015-05-06 00:46 - 07476032 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2015-05-06 00:46 - 2015-05-06 00:46 - 06025216 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2015-05-06 00:46 - 2015-05-06 00:46 - 04305408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2015-05-06 00:46 - 2015-05-06 00:46 - 04178944 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2015-05-06 00:46 - 2015-05-06 00:46 - 03547648 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcorets.dll
2015-05-06 00:46 - 2015-05-06 00:46 - 02886144 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2015-05-06 00:46 - 2015-05-06 00:46 - 02819584 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers.dll
2015-05-06 00:46 - 2015-05-06 00:46 - 02358784 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2015-05-06 00:46 - 2015-05-06 00:46 - 02278400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2015-05-06 00:46 - 2015-05-06 00:46 - 02171904 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsAdminFlowUI.dll
2015-05-06 00:46 - 2015-05-06 00:46 - 01970432 _____ (Microsoft Corporation) C:\WINDOWS\system32\crypt32.dll
2015-05-06 00:46 - 2015-05-06 00:46 - 01888256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2015-05-06 00:46 - 2015-05-06 00:46 - 01763352 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowsCodecs.dll
2015-05-06 00:46 - 2015-05-06 00:46 - 01733952 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2015-05-06 00:46 - 2015-05-06 00:46 - 01612992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\crypt32.dll
2015-05-06 00:46 - 2015-05-06 00:46 - 01548288 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2015-05-06 00:46 - 2015-05-06 00:46 - 01498872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2015-05-06 00:46 - 2015-05-06 00:46 - 01488040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WindowsCodecs.dll
2015-05-06 00:46 - 2015-05-06 00:46 - 01311232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2015-05-06 00:46 - 2015-05-06 00:46 - 01113920 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys
2015-05-06 00:46 - 2015-05-06 00:46 - 01090048 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmCoreR.dll
2015-05-06 00:46 - 2015-05-06 00:46 - 01032704 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcomm.dll
2015-05-06 00:46 - 2015-05-06 00:46 - 00971776 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSShared.dll
2015-05-06 00:46 - 2015-05-06 00:46 - 00950784 _____ (Microsoft Corporation) C:\WINDOWS\system32\tdh.dll
2015-05-06 00:46 - 2015-05-06 00:46 - 00880128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcomm.dll
2015-05-06 00:46 - 2015-05-06 00:46 - 00816128 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2015-05-06 00:46 - 2015-05-06 00:46 - 00811008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSShared.dll
2015-05-06 00:46 - 2015-05-06 00:46 - 00801280 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2015-05-06 00:46 - 2015-05-06 00:46 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2015-05-06 00:46 - 2015-05-06 00:46 - 00791040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MrmCoreR.dll
2015-05-06 00:46 - 2015-05-06 00:46 - 00788680 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleaut32.dll
2015-05-06 00:46 - 2015-05-06 00:46 - 00749568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tdh.dll
2015-05-06 00:46 - 2015-05-06 00:46 - 00720384 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2015-05-06 00:46 - 2015-05-06 00:46 - 00710144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2015-05-06 00:46 - 2015-05-06 00:46 - 00689152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2015-05-06 00:46 - 2015-05-06 00:46 - 00672984 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDMAgent.exe
2015-05-06 00:46 - 2015-05-06 00:46 - 00664064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2015-05-06 00:46 - 2015-05-06 00:46 - 00602776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleaut32.dll
2015-05-06 00:46 - 2015-05-06 00:46 - 00584192 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2015-05-06 00:46 - 2015-05-06 00:46 - 00535640 _____ (Microsoft Corporation) C:\WINDOWS\system32\wer.dll
2015-05-06 00:46 - 2015-05-06 00:46 - 00531616 _____ (Microsoft Corporation) C:\WINDOWS\system32\ci.dll
2015-05-06 00:46 - 2015-05-06 00:46 - 00503296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2015-05-06 00:46 - 2015-05-06 00:46 - 00463872 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettings.Handlers.dll
2015-05-06 00:46 - 2015-05-06 00:46 - 00448792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wer.dll
2015-05-06 00:46 - 2015-05-06 00:46 - 00430080 _____ (Microsoft Corporation) C:\WINDOWS\system32\schannel.dll
2015-05-06 00:46 - 2015-05-06 00:46 - 00413248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Faultrep.dll
2015-05-06 00:46 - 2015-05-06 00:46 - 00411648 _____ (Microsoft Corporation) C:\WINDOWS\system32\tracerpt.exe
2015-05-06 00:46 - 2015-05-06 00:46 - 00402432 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMPhoto.dll
2015-05-06 00:46 - 2015-05-06 00:46 - 00391680 _____ (Microsoft Corporation) C:\WINDOWS\system32\nlasvc.dll
2015-05-06 00:46 - 2015-05-06 00:46 - 00377152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\clfs.sys
2015-05-06 00:46 - 2015-05-06 00:46 - 00372408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Faultrep.dll
2015-05-06 00:46 - 2015-05-06 00:46 - 00369152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tracerpt.exe
2015-05-06 00:46 - 2015-05-06 00:46 - 00360480 _____ (Microsoft Corporation) C:\WINDOWS\system32\sechost.dll
2015-05-06 00:46 - 2015-05-06 00:46 - 00360448 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncsi.dll
2015-05-06 00:46 - 2015-05-06 00:46 - 00358912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\schannel.dll
2015-05-06 00:46 - 2015-05-06 00:46 - 00357376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMPhoto.dll
2015-05-06 00:46 - 2015-05-06 00:46 - 00346112 _____ (Microsoft Corporation) C:\WINDOWS\system32\eappcfg.dll
2015-05-06 00:46 - 2015-05-06 00:46 - 00339456 _____ (Microsoft Corporation) C:\WINDOWS\system32\eapphost.dll
2015-05-06 00:46 - 2015-05-06 00:46 - 00331776 _____ (Microsoft Corporation) C:\WINDOWS\system32\eapp3hst.dll
2015-05-06 00:46 - 2015-05-06 00:46 - 00285184 _____ (Microsoft Corporation) C:\WINDOWS\system32\wow64.dll
2015-05-06 00:46 - 2015-05-06 00:46 - 00278016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eappcfg.dll
2015-05-06 00:46 - 2015-05-06 00:46 - 00274944 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2015-05-06 00:46 - 2015-05-06 00:46 - 00273240 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsAdminFlows.exe
2015-05-06 00:46 - 2015-05-06 00:46 - 00266752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eapphost.dll
2015-05-06 00:46 - 2015-05-06 00:46 - 00264000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdFilter.sys
2015-05-06 00:46 - 2015-05-06 00:46 - 00257216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sechost.dll
2015-05-06 00:46 - 2015-05-06 00:46 - 00250880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eapp3hst.dll
2015-05-06 00:46 - 2015-05-06 00:46 - 00246272 _____ (Microsoft Corporation) C:\WINDOWS\system32\microsoft-windows-system-events.dll
2015-05-06 00:46 - 2015-05-06 00:46 - 00229888 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2015-05-06 00:46 - 2015-05-06 00:46 - 00210944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2015-05-06 00:46 - 2015-05-06 00:46 - 00131584 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpudd.dll
2015-05-06 00:46 - 2015-05-06 00:46 - 00116736 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsDatabase.dll
2015-05-06 00:46 - 2015-05-06 00:46 - 00114496 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdNisDrv.sys
2015-05-06 00:46 - 2015-05-06 00:46 - 00108944 _____ (Microsoft Corporation) C:\WINDOWS\system32\EncDump.dll
2015-05-06 00:46 - 2015-05-06 00:46 - 00102912 _____ (Microsoft Corporation) C:\WINDOWS\system32\eappgnui.dll
2015-05-06 00:46 - 2015-05-06 00:46 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll
2015-05-06 00:46 - 2015-05-06 00:46 - 00091648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eappgnui.dll
2015-05-06 00:46 - 2015-05-06 00:46 - 00075264 _____ (Microsoft Corporation) C:\WINDOWS\system32\clfsw32.dll
2015-05-06 00:46 - 2015-05-06 00:46 - 00058880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\clfsw32.dll
2015-05-06 00:46 - 2015-05-06 00:46 - 00046456 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockScreenContentServer.exe
2015-05-06 00:46 - 2015-05-06 00:46 - 00044024 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdBoot.sys
2015-05-06 00:46 - 2015-05-06 00:46 - 00038264 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFaultSecure.exe
2015-05-06 00:46 - 2015-05-06 00:46 - 00033584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFaultSecure.exe
2015-05-06 00:46 - 2015-05-06 00:46 - 00014848 _____ (Microsoft Corporation) C:\WINDOWS\system32\winshfhc.dll
2015-05-06 00:46 - 2015-05-06 00:46 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\wow64cpu.dll
2015-05-06 00:46 - 2015-05-06 00:46 - 00012800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winshfhc.dll
2015-05-06 00:46 - 2015-05-06 00:46 - 00000000 ___SD () C:\WINDOWS\SysWOW64\GWX
2015-05-06 00:45 - 2015-05-06 00:45 - 04298240 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_47.dll
2015-05-06 00:45 - 2015-05-06 00:45 - 03678720 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2015-05-06 00:45 - 2015-05-06 00:45 - 03551744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_47.dll
2015-05-06 00:45 - 2015-05-06 00:45 - 03097600 _____ (Microsoft Corporation) C:\WINDOWS\system32\msftedit.dll
2015-05-06 00:45 - 2015-05-06 00:45 - 02865152 _____ (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll
2015-05-06 00:45 - 2015-05-06 00:45 - 02773504 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll
2015-05-06 00:45 - 2015-05-06 00:45 - 02484224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msftedit.dll
2015-05-06 00:45 - 2015-05-06 00:45 - 02459136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll
2015-05-06 00:45 - 2015-05-06 00:45 - 02373632 _____ (Microsoft Corporation) C:\WINDOWS\system32\wucltux.dll
2015-05-06 00:45 - 2015-05-06 00:45 - 02257408 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2015-05-06 00:45 - 2015-05-06 00:45 - 02125824 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2015-05-06 00:45 - 2015-05-06 00:45 - 02052608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2015-05-06 00:45 - 2015-05-06 00:45 - 01943040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll
2015-05-06 00:45 - 2015-05-06 00:45 - 01488896 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc42u.dll
2015-05-06 00:45 - 2015-05-06 00:45 - 01464832 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc42.dll
2015-05-06 00:45 - 2015-05-06 00:45 - 01385256 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll
2015-05-06 00:45 - 2015-05-06 00:45 - 01230336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfc42u.dll
2015-05-06 00:45 - 2015-05-06 00:45 - 01204224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfc42.dll
2015-05-06 00:45 - 2015-05-06 00:45 - 01124352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll
2015-05-06 00:45 - 2015-05-06 00:45 - 00933888 _____ (Microsoft Corporation) C:\WINDOWS\system32\calc.exe
2015-05-06 00:45 - 2015-05-06 00:45 - 00891392 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
2015-05-06 00:45 - 2015-05-06 00:45 - 00816128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\calc.exe
2015-05-06 00:45 - 2015-05-06 00:45 - 00814080 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll
2015-05-06 00:45 - 2015-05-06 00:45 - 00780800 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsm.dll
2015-05-06 00:45 - 2015-05-06 00:45 - 00723072 _____ (Microsoft Corporation) C:\WINDOWS\system32\SHCore.dll
2015-05-06 00:45 - 2015-05-06 00:45 - 00721920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll
2015-05-06 00:45 - 2015-05-06 00:45 - 00563504 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2015-05-06 00:45 - 2015-05-06 00:45 - 00560392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SHCore.dll
2015-05-06 00:45 - 2015-05-06 00:45 - 00538624 _____ (Microsoft Corporation) C:\WINDOWS\system32\scesrv.dll
2015-05-06 00:45 - 2015-05-06 00:45 - 00513488 _____ () C:\WINDOWS\SysWOW64\locale.nls
2015-05-06 00:45 - 2015-05-06 00:45 - 00513488 _____ () C:\WINDOWS\system32\locale.nls
2015-05-06 00:45 - 2015-05-06 00:45 - 00445440 _____ (Microsoft Corporation) C:\WINDOWS\system32\certcli.dll
2015-05-06 00:45 - 2015-05-06 00:45 - 00408064 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUSettingsProvider.dll
2015-05-06 00:45 - 2015-05-06 00:45 - 00396419 _____ () C:\WINDOWS\system32\ApnDatabase.xml
2015-05-06 00:45 - 2015-05-06 00:45 - 00393728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\scesrv.dll
2015-05-06 00:45 - 2015-05-06 00:45 - 00374272 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2015-05-06 00:45 - 2015-05-06 00:45 - 00358912 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\atmfd.dll
2015-05-06 00:45 - 2015-05-06 00:45 - 00324096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\certcli.dll
2015-05-06 00:45 - 2015-05-06 00:45 - 00316928 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll
2015-05-06 00:45 - 2015-05-06 00:45 - 00301056 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\atmfd.dll
2015-05-06 00:45 - 2015-05-06 00:45 - 00285696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll
2015-05-06 00:45 - 2015-05-06 00:45 - 00267264 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinSetupUI.dll
2015-05-06 00:45 - 2015-05-06 00:45 - 00262144 _____ (Microsoft Corporation) C:\WINDOWS\system32\webcheck.dll
2015-05-06 00:45 - 2015-05-06 00:45 - 00259072 _____ (Microsoft Corporation) C:\WINDOWS\system32\pku2u.dll
2015-05-06 00:45 - 2015-05-06 00:45 - 00230400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webcheck.dll
2015-05-06 00:45 - 2015-05-06 00:45 - 00225280 _____ (Microsoft Corporation) C:\WINDOWS\system32\profsvc.dll
2015-05-06 00:45 - 2015-05-06 00:45 - 00208896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pku2u.dll
2015-05-06 00:45 - 2015-05-06 00:45 - 00203264 _____ (Microsoft Corporation) C:\WINDOWS\system32\ubpm.dll
2015-05-06 00:45 - 2015-05-06 00:45 - 00200192 _____ (Microsoft Corporation) C:\WINDOWS\system32\storewuauth.dll
2015-05-06 00:45 - 2015-05-06 00:45 - 00177984 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys
2015-05-06 00:45 - 2015-05-06 00:45 - 00167424 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rfcomm.sys
2015-05-06 00:45 - 2015-05-06 00:45 - 00145408 _____ (Microsoft Corporation) C:\WINDOWS\system32\iepeers.dll
2015-05-06 00:45 - 2015-05-06 00:45 - 00140800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxdav.sys
2015-05-06 00:45 - 2015-05-06 00:45 - 00140288 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuwebv.dll
2015-05-06 00:45 - 2015-05-06 00:45 - 00133256 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
2015-05-06 00:45 - 2015-05-06 00:45 - 00128000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iepeers.dll
2015-05-06 00:45 - 2015-05-06 00:45 - 00124928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuwebv.dll
2015-05-06 00:45 - 2015-05-06 00:45 - 00097792 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidbth.sys
2015-05-06 00:45 - 2015-05-06 00:45 - 00095744 _____ (Microsoft Corporation) C:\WINDOWS\system32\wudriver.dll
2015-05-06 00:45 - 2015-05-06 00:45 - 00088064 _____ (Microsoft Corporation) C:\WINDOWS\system32\MshtmlDac.dll
2015-05-06 00:45 - 2015-05-06 00:45 - 00087040 _____ (Microsoft Corporation) C:\WINDOWS\system32\TSWbPrxy.exe
2015-05-06 00:45 - 2015-05-06 00:45 - 00081920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wudriver.dll
2015-05-06 00:45 - 2015-05-06 00:45 - 00076288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll
2015-05-06 00:45 - 2015-05-06 00:45 - 00075264 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorageContextHandler.dll
2015-05-06 00:45 - 2015-05-06 00:45 - 00066048 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups.dll
2015-05-06 00:45 - 2015-05-06 00:45 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MshtmlDac.dll
2015-05-06 00:45 - 2015-05-06 00:45 - 00060928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StorageContextHandler.dll
2015-05-06 00:45 - 2015-05-06 00:45 - 00052224 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups2.dll
2015-05-06 00:45 - 2015-05-06 00:45 - 00044032 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll
2015-05-06 00:45 - 2015-05-06 00:45 - 00035840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\atlthunk.dll
2015-05-06 00:45 - 2015-05-06 00:45 - 00035840 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapp.exe
2015-05-06 00:45 - 2015-05-06 00:45 - 00035840 _____ (Adobe Systems) C:\WINDOWS\SysWOW64\atmlib.dll
2015-05-06 00:45 - 2015-05-06 00:45 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceSetupStatusProvider.dll
2015-05-06 00:45 - 2015-05-06 00:45 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapp.exe
2015-05-06 00:45 - 2015-05-06 00:45 - 00028672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DeviceSetupStatusProvider.dll
2015-05-06 00:45 - 2015-05-06 00:45 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wups.dll
2015-05-06 00:45 - 2015-05-06 00:45 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaext.dll
2015-05-06 00:45 - 2015-05-06 00:45 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\system32\wu.upgrade.ps.dll
2015-05-06 00:44 - 2015-05-06 00:44 - 22291584 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2015-05-06 00:44 - 2015-05-06 00:44 - 19731824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2015-05-06 00:44 - 2015-05-06 00:44 - 02501368 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe
2015-05-06 00:44 - 2015-05-06 00:44 - 02207488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe
2015-05-06 00:44 - 2015-05-06 00:44 - 01091072 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll
2015-05-06 00:44 - 2015-05-06 00:44 - 00991552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\http.sys
2015-05-06 00:44 - 2015-05-06 00:44 - 00864256 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32spl.dll
2015-05-06 00:44 - 2015-05-06 00:44 - 00490496 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtmsft.dll
2015-05-06 00:44 - 2015-05-06 00:44 - 00418304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtmsft.dll
2015-05-06 00:44 - 2015-05-06 00:44 - 00417280 _____ (Microsoft Corporation) C:\WINDOWS\system32\html.iec
2015-05-06 00:44 - 2015-05-06 00:44 - 00347136 _____ (Microsoft Corporation) C:\WINDOWS\system32\photowiz.dll
2015-05-06 00:44 - 2015-05-06 00:44 - 00340992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\html.iec
2015-05-06 00:44 - 2015-05-06 00:44 - 00327168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
2015-05-06 00:44 - 2015-05-06 00:44 - 00290816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\photowiz.dll
2015-05-06 00:44 - 2015-05-06 00:44 - 00262144 _____ () C:\WINDOWS\system32\config\userdiff
2015-05-06 00:44 - 2015-05-06 00:44 - 00146432 _____ (Microsoft Corporation) C:\WINDOWS\system32\poqexec.exe
2015-05-06 00:44 - 2015-05-06 00:44 - 00129536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\poqexec.exe
2015-05-06 00:44 - 2015-05-06 00:44 - 00075776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ahcache.sys
2015-05-06 00:44 - 2015-05-06 00:44 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\setup16.exe
2015-05-06 00:44 - 2015-05-06 00:44 - 00016896 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntvdm64.dll
2015-05-06 00:44 - 2015-05-06 00:44 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntvdm64.dll
2015-05-06 00:44 - 2015-05-06 00:44 - 00008704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\instnm.exe
2015-05-06 00:44 - 2015-05-06 00:44 - 00005632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wow32.dll
2015-05-06 00:44 - 2015-05-06 00:44 - 00004096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user.exe
2015-05-06 00:43 - 2015-05-06 00:43 - 00024576 _____ (Microsoft Corporation) C:\WINDOWS\system32\sdbinst.exe
2015-05-06 00:43 - 2015-05-06 00:43 - 00021504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sdbinst.exe
2015-05-05 23:52 - 2015-05-05 23:52 - 00000000 _SHDL () C:\Users\Default\Vorlagen
2015-05-05 23:52 - 2015-05-05 23:52 - 00000000 _SHDL () C:\Users\Default\Startmenü
2015-05-05 23:52 - 2015-05-05 23:52 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung
2015-05-05 23:52 - 2015-05-05 23:52 - 00000000 _SHDL () C:\Users\Default\Lokale Einstellungen
2015-05-05 23:52 - 2015-05-05 23:52 - 00000000 _SHDL () C:\Users\Default\Eigene Dateien
2015-05-05 23:52 - 2015-05-05 23:52 - 00000000 _SHDL () C:\Users\Default\Druckumgebung
2015-05-05 23:52 - 2015-05-05 23:52 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik
2015-05-05 23:52 - 2015-05-05 23:52 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder
2015-05-05 23:52 - 2015-05-05 23:52 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2015-05-05 23:52 - 2015-05-05 23:52 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf
2015-05-05 23:52 - 2015-05-05 23:52 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Anwendungsdaten
2015-05-05 23:52 - 2015-05-05 23:52 - 00000000 _SHDL () C:\Users\Default\Anwendungsdaten
2015-05-05 23:52 - 2015-05-05 23:52 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik
2015-05-05 23:52 - 2015-05-05 23:52 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder
2015-05-05 23:52 - 2015-05-05 23:52 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2015-05-05 23:52 - 2015-05-05 23:52 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf
2015-05-05 23:52 - 2015-05-05 23:52 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Anwendungsdaten
2015-05-05 23:51 - 2015-05-05 23:51 - 00022960 _____ () C:\WINDOWS\system32\emptyregdb.dat
2015-05-05 23:50 - 2015-05-05 23:50 - 00001547 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2015-05-05 23:49 - 2015-05-07 16:14 - 00000000 ____D () C:\Users\Admin
2015-05-05 23:49 - 2015-05-05 23:51 - 00020958 _____ () C:\WINDOWS\diagwrn.xml
2015-05-05 23:49 - 2015-05-05 23:51 - 00020958 _____ () C:\WINDOWS\diagerr.xml
2015-05-05 23:49 - 2015-05-05 23:49 - 00000000 _SHDL () C:\Users\Admin\Vorlagen
2015-05-05 23:49 - 2015-05-05 23:49 - 00000000 _SHDL () C:\Users\Admin\Startmenü
2015-05-05 23:49 - 2015-05-05 23:49 - 00000000 _SHDL () C:\Users\Admin\Netzwerkumgebung
2015-05-05 23:49 - 2015-05-05 23:49 - 00000000 _SHDL () C:\Users\Admin\Lokale Einstellungen
2015-05-05 23:49 - 2015-05-05 23:49 - 00000000 _SHDL () C:\Users\Admin\Eigene Dateien
2015-05-05 23:49 - 2015-05-05 23:49 - 00000000 _SHDL () C:\Users\Admin\Druckumgebung
2015-05-05 23:49 - 2015-05-05 23:49 - 00000000 _SHDL () C:\Users\Admin\Documents\Eigene Musik
2015-05-05 23:49 - 2015-05-05 23:49 - 00000000 _SHDL () C:\Users\Admin\Documents\Eigene Bilder
2015-05-05 23:49 - 2015-05-05 23:49 - 00000000 _SHDL () C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2015-05-05 23:49 - 2015-05-05 23:49 - 00000000 _SHDL () C:\Users\Admin\AppData\Local\Verlauf
2015-05-05 23:49 - 2015-05-05 23:49 - 00000000 _SHDL () C:\Users\Admin\AppData\Local\Anwendungsdaten
2015-05-05 23:49 - 2015-05-05 23:49 - 00000000 _SHDL () C:\Users\Admin\Anwendungsdaten
2015-05-05 23:49 - 2015-05-05 23:49 - 00000000 ___RD () C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2015-05-05 23:49 - 2015-05-05 23:49 - 00000000 ____D () C:\WINDOWS\system32\config\bbimigrate
2015-05-05 23:49 - 2014-11-21 12:52 - 00000000 ___RD () C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2015-05-05 23:49 - 2014-11-21 12:52 - 00000000 ___RD () C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2015-05-05 23:49 - 2014-11-21 05:42 - 00000369 _____ () C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pictures.lnk
2015-05-05 23:49 - 2014-11-21 05:42 - 00000369 _____ () C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Documents.lnk
2015-05-05 23:49 - 2013-08-22 17:36 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2015-05-05 23:48 - 2015-05-07 17:05 - 00000000 ____D () C:\ProgramData\NVIDIA
2015-05-05 23:48 - 2015-05-07 15:54 - 00009096 _____ () C:\WINDOWS\system32\lvcoinst.log
2015-05-05 23:48 - 2015-05-05 23:50 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation
2015-05-05 23:48 - 2015-05-05 23:50 - 00000000 ____D () C:\Program Files\NVIDIA Corporation
2015-05-05 23:48 - 2015-05-05 23:50 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation
2015-05-05 23:48 - 2015-05-05 23:48 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf
2015-05-05 23:48 - 2015-05-05 23:48 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_Kernel_iBtFltCoex_01009.Wdf
2015-05-05 23:48 - 2015-05-05 23:48 - 00000000 ____D () C:\Program Files\Common Files\logishrd
2015-05-05 23:48 - 2015-05-05 23:48 - 00000000 ____D () C:\iBTWU
2015-05-05 23:48 - 2015-04-08 23:30 - 06841488 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll
2015-05-05 23:48 - 2015-04-08 23:30 - 03478344 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvc64.dll
2015-05-05 23:48 - 2015-04-08 23:30 - 02558608 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvcr.dll
2015-05-05 23:48 - 2015-04-08 23:30 - 01047696 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshext.dll
2015-05-05 23:48 - 2015-04-08 23:30 - 00936264 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvvsvc.exe
2015-05-05 23:48 - 2015-04-08 23:30 - 00385168 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvmctray.dll
2015-05-05 23:48 - 2015-04-08 23:30 - 00075080 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshextr.dll
2015-05-05 23:48 - 2015-04-08 23:30 - 00062608 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvshext.dll
2015-05-05 23:48 - 2015-04-08 19:52 - 04336074 _____ () C:\WINDOWS\system32\nvcoproc.bin
2015-05-05 21:17 - 2015-05-05 21:17 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\EncryptStick
2015-05-05 20:52 - 2015-05-07 17:05 - 00000000 ____D () C:\WINDOWS\system32\appraiser
2015-05-05 20:46 - 2015-05-05 23:50 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2015-05-05 20:46 - 2015-05-05 20:46 - 00110688 _____ (Oracle Corporation) C:\WINDOWS\system32\WindowsAccessBridge-64.dll
2015-05-05 20:46 - 2015-05-05 20:46 - 00000000 ____D () C:\Users\Admin\AppData\Local\Steam
2015-05-05 20:46 - 2015-05-05 20:46 - 00000000 ____D () C:\ProgramData\Sun
2015-05-05 20:46 - 2015-05-05 20:46 - 00000000 ____D () C:\ProgramData\Oracle
2015-05-05 20:46 - 2015-05-05 20:46 - 00000000 ____D () C:\Program Files\Java
2015-05-05 20:43 - 2015-05-05 20:43 - 00000000 ____D () C:\Users\Admin\AppData\Local\Macromedia
2015-05-05 20:41 - 2015-05-07 17:08 - 00000000 ____D () C:\Program Files (x86)\Steam
2015-05-05 20:41 - 2015-05-05 23:50 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam
2015-05-05 20:41 - 2015-05-05 20:41 - 00000963 _____ () C:\Users\Public\Desktop\Steam.lnk
2015-05-05 20:40 - 2015-05-07 16:52 - 00000884 _____ () C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2015-05-05 20:40 - 2015-05-05 20:40 - 00003772 _____ () C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
2015-05-05 20:39 - 2015-05-05 20:40 - 00000000 ____D () C:\Users\Admin\AppData\Local\Adobe
2015-05-05 20:05 - 2015-05-05 20:06 - 00000000 ____D () C:\WINDOWS\system32\MRT
2015-05-05 20:05 - 2015-04-01 11:16 - 128913832 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2015-05-05 19:40 - 2015-05-07 16:12 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\TS3Client
2015-05-05 19:40 - 2015-05-05 23:50 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamSpeak 3 Client
2015-05-05 19:40 - 2015-05-05 19:40 - 00000967 _____ () C:\Users\Public\Desktop\TeamSpeak 3 Client.lnk
2015-05-05 19:40 - 2015-05-05 19:40 - 00000000 ____D () C:\Program Files\TeamSpeak 3 Client
2015-05-05 19:24 - 2015-05-07 17:08 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\Skype
2015-05-05 19:24 - 2015-05-05 23:50 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2015-05-05 19:24 - 2015-05-05 19:24 - 00002699 _____ () C:\Users\Public\Desktop\Skype.lnk
2015-05-05 19:24 - 2015-05-05 19:24 - 00000000 ___RD () C:\Program Files (x86)\Skype
2015-05-05 19:24 - 2015-05-05 19:24 - 00000000 ____D () C:\Users\Admin\Tracing
2015-05-05 19:24 - 2015-05-05 19:24 - 00000000 ____D () C:\Users\Admin\AppData\Local\Skype
2015-05-05 19:24 - 2015-05-05 19:24 - 00000000 ____D () C:\ProgramData\Skype
2015-05-05 19:12 - 2015-05-05 23:50 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Logitech
2015-05-05 19:12 - 2015-05-05 19:12 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\Logitech
2015-05-05 19:12 - 2015-05-05 19:12 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\Logishrd
2015-05-05 19:12 - 2015-05-05 19:12 - 00000000 ____D () C:\Users\Admin\AppData\Local\Logitech
2015-05-05 19:12 - 2015-05-05 19:12 - 00000000 ____D () C:\ProgramData\LogiShrd
2015-05-05 19:12 - 2015-05-05 19:12 - 00000000 ____D () C:\ProgramData\Apple
2015-05-05 19:12 - 2015-05-05 19:12 - 00000000 ____D () C:\Program Files\Logitech Gaming Software
2015-05-05 19:10 - 2015-05-05 19:11 - 24907859 _____ () C:\Users\Admin\Downloads\ROCCAT_Kone_Pure_DRV1.14_FW1.21.zip
2015-05-05 19:06 - 2015-05-05 19:06 - 00000000 ____D () C:\Users\Admin\Downloads\cpu-z_172
2015-05-05 19:02 - 2015-05-05 19:02 - 00000117 _____ () C:\WINDOWS\system32\netcfg-1472921.txt
2015-05-05 18:47 - 2015-05-05 18:47 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\NVIDIA
2015-05-05 18:46 - 2015-05-05 18:46 - 00000117 _____ () C:\WINDOWS\system32\netcfg-538015.txt
2015-05-05 18:46 - 2015-05-05 18:46 - 00000117 _____ () C:\WINDOWS\system32\netcfg-537968.txt
2015-05-05 18:44 - 2015-05-05 18:44 - 00001058 _____ () C:\WINDOWS\system32\netcfg-372750.txt
2015-05-05 18:44 - 2015-05-05 18:44 - 00000322 _____ () C:\WINDOWS\system32\netcfg-408484.txt
2015-05-05 18:44 - 2012-10-25 10:18 - 00723088 _____ (Realtek ) C:\WINDOWS\system32\Drivers\Rt630x64.sys
2015-05-05 18:44 - 2012-05-05 06:49 - 00074344 _____ (Realtek Semiconductor Corporation) C:\WINDOWS\system32\RtNicProp64.dll
2015-05-05 18:43 - 2015-05-07 15:57 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\Intel
2015-05-05 18:43 - 2015-05-05 19:12 - 00000000 ____D () C:\ProgramData\Package Cache
2015-05-05 18:43 - 2015-05-05 18:43 - 00000117 _____ () C:\WINDOWS\system32\netcfg-362593.txt
2015-05-05 18:43 - 2015-05-05 18:43 - 00000117 _____ () C:\WINDOWS\system32\netcfg-356125.txt
2015-05-05 18:43 - 2015-05-05 18:43 - 00000117 _____ () C:\WINDOWS\system32\netcfg-348906.txt
2015-05-05 18:43 - 2015-05-05 18:43 - 00000117 _____ () C:\WINDOWS\system32\netcfg-346390.txt
2015-05-05 18:43 - 2015-05-05 18:43 - 00000000 ____D () C:\ProgramData\Intel.sav
2015-05-05 18:41 - 2015-05-05 18:41 - 00000000 _____ () C:\WINDOWS\SysWOW64\agent.log
2015-05-05 18:41 - 2013-01-24 15:57 - 00016344 _____ (Intel Corporation) C:\WINDOWS\system32\Drivers\IntelMEFWVer.dll
2015-05-05 18:40 - 2015-05-07 15:57 - 00000000 ____D () C:\ProgramData\Intel
2015-05-05 18:40 - 2015-05-05 18:40 - 00000117 _____ () C:\WINDOWS\system32\netcfg-160250.txt
2015-05-05 18:40 - 2015-05-05 18:40 - 00000117 _____ () C:\WINDOWS\system32\netcfg-155500.txt
2015-05-05 18:40 - 2013-01-28 20:36 - 00053248 _____ (Windows XP Bundled build C-Centric Single User) C:\WINDOWS\SysWOW64\CSVer.dll
2015-05-05 18:39 - 2015-05-06 14:14 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2015-05-05 18:39 - 2015-05-05 23:50 - 00000000 ____D () C:\WINDOWS\system32\SRSLabs
2015-05-05 18:39 - 2015-05-05 19:02 - 00000000 ___HD () C:\Program Files (x86)\Temp
2015-05-05 18:39 - 2015-05-05 19:02 - 00000000 ____D () C:\Program Files (x86)\Realtek
2015-05-05 18:39 - 2015-05-05 18:57 - 00001536 _____ () C:\WINDOWS\SysWOW64\RtkMsgs.dll
2015-05-05 18:39 - 2015-05-05 18:53 - 00000000 ____D () C:\ProgramData\Dell
2015-05-05 18:39 - 2015-05-05 18:39 - 00849522 _____ () C:\WINDOWS\system32\Drivers\rtwavesskdy.dat
2015-05-05 18:39 - 2015-05-05 18:39 - 00463760 _____ () C:\WINDOWS\system32\Drivers\rtwavesmapro.dat
2015-05-05 18:39 - 2015-05-05 18:39 - 00019501 _____ () C:\WINDOWS\system32\Drivers\rtwavesmaprocap.dat
2015-05-05 18:39 - 2015-05-05 18:39 - 00000000 ____D () C:\Dell
2015-05-05 18:37 - 2015-05-05 18:37 - 00000117 _____ () C:\WINDOWS\system32\netcfg-9843.txt
2015-05-05 18:36 - 2015-05-05 18:36 - 00000117 _____ () C:\WINDOWS\system32\netcfg-1972218.txt
2015-05-05 18:35 - 2015-05-05 18:35 - 00031152 _____ () C:\WINDOWS\system32\Drivers\pmxdrv.sys
2015-05-05 18:28 - 2015-05-06 08:43 - 00000000 ____D () C:\Users\Admin\Documents\Wiederhergestellt
2015-05-05 18:13 - 2015-05-07 16:06 - 00000000 ____D () C:\Program Files (x86)\RescuePRO Deluxe
2015-05-05 18:12 - 2015-05-06 08:54 - 00173711 _____ () C:\Users\Admin\rpro.log
2015-05-05 18:12 - 2015-05-05 18:12 - 00000000 ____D () C:\Users\Admin\licman
2015-05-05 18:12 - 2015-05-05 18:12 - 00000000 ____D () C:\Users\Admin\AppData\Local\LC Technology Inc
2015-05-05 18:06 - 2015-05-05 18:06 - 00000000 ____D () C:\Users\Admin\AppData\Local\Apps\2.0
2015-05-05 18:03 - 2015-05-05 18:03 - 00000117 _____ () C:\WINDOWS\system32\netcfg-10453.txt
2015-05-05 18:02 - 2015-05-05 18:02 - 00000117 _____ () C:\WINDOWS\system32\netcfg-3685375.txt
2015-05-05 18:01 - 2015-05-05 18:01 - 00000000 ____D () C:\Users\Admin\Downloads\Samsung_SSD_840_PRO_Series_DXM06B0Q
2015-05-05 17:51 - 2015-05-05 23:50 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung SSD Magician
2015-05-05 17:51 - 2015-05-05 17:51 - 00000000 ____D () C:\ProgramData\Samsung
2015-05-05 17:51 - 2015-05-05 17:51 - 00000000 ____D () C:\Program Files (x86)\Samsung SSD Magician
2015-05-05 17:50 - 2015-05-05 17:50 - 00003144 _____ () C:\WINDOWS\System32\Tasks\{DE9775E2-C2A2-468E-995E-9EF467873ABA}
2015-05-05 17:46 - 2015-05-07 15:57 - 00000000 ____D () C:\Program Files\Intel
2015-05-05 17:46 - 2015-05-07 15:57 - 00000000 ____D () C:\Program Files (x86)\Intel
2015-05-05 17:46 - 2015-05-05 17:46 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_Kernel_btmaux_01009.Wdf
2015-05-05 17:46 - 2015-05-05 17:46 - 00000000 ____D () C:\Users\Admin\Documents\Meine empfangenen Dateien
2015-05-05 17:40 - 2013-05-04 06:51 - 00014848 _____ (Microsoft) C:\WINDOWS\system32\rars.rs
2015-05-05 17:40 - 2013-05-04 06:10 - 00014848 _____ (Microsoft) C:\WINDOWS\SysWOW64\rars.rs
2015-05-05 17:36 - 2015-05-05 17:36 - 00000117 _____ () C:\WINDOWS\system32\netcfg-2080296.txt
2015-05-05 17:36 - 2015-05-05 17:36 - 00000117 _____ () C:\WINDOWS\system32\netcfg-2080218.txt
2015-05-05 17:32 - 2015-05-05 17:32 - 00000000 ____D () C:\temp
2015-05-05 17:32 - 2015-04-09 02:58 - 31570064 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvoglv64.dll
2015-05-05 17:32 - 2015-04-09 02:58 - 30397072 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcompiler.dll
2015-05-05 17:32 - 2015-04-09 02:58 - 25375048 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcompiler.dll
2015-05-05 17:32 - 2015-04-09 02:58 - 24053576 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvoglv32.dll
2015-05-05 17:32 - 2015-04-09 02:58 - 17176128 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvwgf2umx.dll
2015-05-05 17:32 - 2015-04-09 02:58 - 15818528 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvd3dumx.dll
2015-05-05 17:32 - 2015-04-09 02:58 - 15716232 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvopencl.dll
2015-05-05 17:32 - 2015-04-09 02:58 - 14617288 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvwgf2um.dll
2015-05-05 17:32 - 2015-04-09 02:58 - 14006752 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll
2015-05-05 17:32 - 2015-04-09 02:58 - 12852784 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvopencl.dll
2015-05-05 17:32 - 2015-04-09 02:58 - 12689592 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvd3dum.dll
2015-05-05 17:32 - 2015-04-09 02:58 - 11380728 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuda.dll
2015-05-05 17:32 - 2015-04-09 02:58 - 10423952 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvlddmkm.sys
2015-05-05 17:32 - 2015-04-09 02:58 - 03317344 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvapi64.dll
2015-05-05 17:32 - 2015-04-09 02:58 - 02935416 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvapi.dll
2015-05-05 17:32 - 2015-04-09 02:58 - 02896528 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll
2015-05-05 17:32 - 2015-04-09 02:58 - 02573456 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvid.dll
2015-05-05 17:32 - 2015-04-09 02:58 - 01895568 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispco6435012.dll
2015-05-05 17:32 - 2015-04-09 02:58 - 01557648 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispgenco6435012.dll
2015-05-05 17:32 - 2015-04-09 02:58 - 01086424 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvumdshimx.dll
2015-05-05 17:32 - 2015-04-09 02:58 - 01047368 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFR64.dll
2015-05-05 17:32 - 2015-04-09 02:58 - 01037640 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvFBC64.dll
2015-05-05 17:32 - 2015-04-09 02:58 - 00970568 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFR.dll
2015-05-05 17:32 - 2015-04-09 02:58 - 00962192 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvFBC.dll
2015-05-05 17:32 - 2015-04-09 02:58 - 00927440 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvumdshim.dll
2015-05-05 17:32 - 2015-04-09 02:58 - 00499344 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncodeAPI64.dll
2015-05-05 17:32 - 2015-04-09 02:58 - 00402576 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncodeAPI.dll
2015-05-05 17:32 - 2015-04-09 02:58 - 00390472 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFROpenGL.dll
2015-05-05 17:32 - 2015-04-09 02:58 - 00346256 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFROpenGL.dll
2015-05-05 17:32 - 2015-04-09 02:58 - 00175880 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvinitx.dll
2015-05-05 17:32 - 2015-04-09 02:58 - 00154256 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvinit.dll
2015-05-05 17:32 - 2015-04-09 02:58 - 00150648 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvoglshim64.dll
2015-05-05 17:32 - 2015-04-09 02:58 - 00128512 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvoglshim32.dll
2015-05-05 17:32 - 2015-04-09 02:58 - 00078480 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.dll
2015-05-05 17:32 - 2015-04-09 02:58 - 00066704 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.dll
2015-05-05 17:32 - 2015-04-09 02:58 - 00029329 _____ () C:\WINDOWS\system32\nvinfo.pb
2015-05-05 17:32 - 2015-04-08 22:32 - 00560968 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvStreaming.exe
2015-05-05 17:29 - 2015-05-05 17:29 - 00001138 _____ () C:\WINDOWS\system32\netcfg-1656828.txt
2015-05-05 17:29 - 2015-05-05 17:29 - 00000345 _____ () C:\WINDOWS\system32\netcfg-1656609.txt
2015-05-05 17:29 - 2015-05-05 17:29 - 00000117 _____ () C:\WINDOWS\system32\netcfg-1660484.txt
2015-05-05 17:29 - 2015-05-05 17:29 - 00000117 _____ () C:\WINDOWS\system32\netcfg-1656046.txt
2015-05-05 17:22 - 2015-05-05 23:50 - 00000000 ____D () C:\WINDOWS\SysWOW64\vbox
2015-05-05 17:22 - 2015-05-05 23:50 - 00000000 ____D () C:\WINDOWS\system32\vbox
2015-05-05 17:22 - 2015-05-05 23:50 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software
2015-05-05 17:22 - 2015-05-05 17:22 - 01047320 _____ (Avast Software s.r.o.) C:\WINDOWS\system32\Drivers\aswSnx.sys
2015-05-05 17:22 - 2015-05-05 17:22 - 00449896 _____ (Avast Software s.r.o.) C:\WINDOWS\system32\Drivers\aswNdisFlt.sys
2015-05-05 17:22 - 2015-05-05 17:22 - 00442264 _____ (Avast Software s.r.o.) C:\WINDOWS\system32\Drivers\aswSP.sys
2015-05-05 17:22 - 2015-05-05 17:22 - 00364472 _____ (Avast Software s.r.o.) C:\WINDOWS\system32\aswBoot.exe
2015-05-05 17:22 - 2015-05-05 17:22 - 00272248 _____ () C:\WINDOWS\system32\Drivers\aswVmm.sys
2015-05-05 17:22 - 2015-05-05 17:22 - 00137288 _____ (Avast Software s.r.o.) C:\WINDOWS\system32\Drivers\aswStm.sys
2015-05-05 17:22 - 2015-05-05 17:22 - 00093528 _____ (Avast Software s.r.o.) C:\WINDOWS\system32\Drivers\aswRdr2.sys
2015-05-05 17:22 - 2015-05-05 17:22 - 00089944 _____ (Avast Software s.r.o.) C:\WINDOWS\system32\Drivers\aswMonFlt.sys
2015-05-05 17:22 - 2015-05-05 17:22 - 00065736 _____ () C:\WINDOWS\system32\Drivers\aswRvrt.sys
2015-05-05 17:22 - 2015-05-05 17:22 - 00043112 _____ (Avast Software s.r.o.) C:\WINDOWS\avastSS.scr
2015-05-05 17:22 - 2015-05-05 17:22 - 00029168 _____ () C:\WINDOWS\system32\Drivers\aswHwid.sys
2015-05-05 17:22 - 2015-05-05 17:22 - 00028144 _____ (Avast Software s.r.o.) C:\WINDOWS\system32\Drivers\aswKbd.sys
2015-05-05 17:22 - 2015-05-05 17:22 - 00003924 _____ () C:\WINDOWS\System32\Tasks\avast! Emergency Update
2015-05-05 17:22 - 2015-05-05 17:22 - 00001982 _____ () C:\Users\Public\Desktop\Avast SafeZone.lnk
2015-05-05 17:22 - 2015-05-05 17:22 - 00001922 _____ () C:\Users\Public\Desktop\Avast Internet Security.lnk
2015-05-05 17:22 - 2015-05-05 17:22 - 00000250 _____ () C:\WINDOWS\system32\netcfg-1281234.txt
2015-05-05 17:22 - 2015-05-05 17:22 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\AVAST Software
2015-05-05 17:21 - 2015-05-05 23:50 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2015-05-05 17:21 - 2015-05-05 17:36 - 00000000 ____D () C:\Users\Admin\AppData\Local\NVIDIA Corporation
2015-05-05 17:21 - 2015-05-05 17:21 - 00001377 _____ () C:\Users\Public\Desktop\GeForce Experience.lnk
2015-05-05 17:21 - 2015-05-05 17:21 - 00000000 ____D () C:\Users\Admin\AppData\Local\NVIDIA
2015-05-05 17:21 - 2015-05-01 18:51 - 01316184 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvspcap.dll
2015-05-05 17:21 - 2015-05-01 18:51 - 01316000 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvspbridge.dll
2015-05-05 17:21 - 2015-05-01 18:50 - 01756424 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvspbridge64.dll
2015-05-05 17:21 - 2015-05-01 18:50 - 01570672 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvspcap64.dll
2015-05-05 17:21 - 2014-11-22 12:46 - 00038032 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvvad64v.sys
2015-05-05 17:21 - 2014-11-22 12:46 - 00035472 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvaudcap64v.dll
2015-05-05 17:21 - 2014-11-22 12:46 - 00032400 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvaudcap32v.dll
2015-05-05 17:21 - 2010-05-26 11:41 - 02401112 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_43.dll
2015-05-05 17:21 - 2010-05-26 11:41 - 01998168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_43.dll
2015-05-05 17:21 - 2010-05-26 11:41 - 00511328 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_43.dll
2015-05-05 17:21 - 2010-05-26 11:41 - 00470880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_43.dll
2015-05-05 17:21 - 2010-05-26 11:41 - 00276832 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx11_43.dll
2015-05-05 17:21 - 2010-05-26 11:41 - 00248672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx11_43.dll
2015-05-05 17:16 - 2015-05-05 17:16 - 00000000 ____D () C:\Program Files\AVAST Software
2015-05-05 17:15 - 2015-05-05 17:15 - 00000000 ____D () C:\ProgramData\AVAST Software
2015-05-05 17:11 - 2015-05-05 17:33 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2015-05-05 17:11 - 2015-05-05 17:11 - 00001159 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2015-05-05 17:11 - 2015-05-05 17:11 - 00001147 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2015-05-05 17:11 - 2015-05-05 17:11 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\Mozilla
2015-05-05 17:11 - 2015-05-05 17:11 - 00000000 ____D () C:\Users\Admin\AppData\Local\Mozilla
2015-05-05 17:11 - 2015-05-05 17:11 - 00000000 ____D () C:\ProgramData\Mozilla
2015-05-05 17:11 - 2015-05-05 17:11 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2015-05-05 17:04 - 2015-05-05 17:04 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\Macromedia
2015-05-05 17:03 - 2015-05-07 14:05 - 00001007 _____ () C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2015-05-05 17:03 - 2015-05-06 14:15 - 00000000 ____D () C:\Users\Admin\AppData\Local\VirtualStore
2015-05-05 17:03 - 2015-05-06 08:41 - 00000000 ____D () C:\Users\Admin\AppData\Local\Packages
2015-05-05 17:03 - 2015-05-05 23:50 - 00000000 ____D () C:\ProgramData\PRICache
2015-05-05 17:03 - 2015-05-05 17:03 - 00000000 ____D () C:\Users\Admin\AppData\Roaming\Adobe
2015-05-05 17:02 - 2015-05-05 17:02 - 00000117 _____ () C:\WINDOWS\system32\netcfg-50906.txt
2015-05-05 17:02 - 2015-05-05 17:02 - 00000117 _____ () C:\WINDOWS\system32\netcfg-50890.txt
2015-05-05 17:02 - 2015-05-05 17:02 - 00000117 _____ () C:\WINDOWS\system32\netcfg-42953.txt
2015-05-05 17:01 - 2015-05-05 17:01 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Musik
2015-05-05 17:01 - 2015-05-05 17:01 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Bilder
2015-05-05 17:01 - 2015-05-05 17:01 - 00000000 _SHDL () C:\Users\Default.migrated\Vorlagen
2015-05-05 17:01 - 2015-05-05 17:01 - 00000000 _SHDL () C:\Users\Default.migrated\Startmenü
2015-05-05 17:01 - 2015-05-05 17:01 - 00000000 _SHDL () C:\Users\Default.migrated\Netzwerkumgebung
2015-05-05 17:01 - 2015-05-05 17:01 - 00000000 _SHDL () C:\Users\Default.migrated\Lokale Einstellungen
2015-05-05 17:01 - 2015-05-05 17:01 - 00000000 _SHDL () C:\Users\Default.migrated\Eigene Dateien
2015-05-05 17:01 - 2015-05-05 17:01 - 00000000 _SHDL () C:\Users\Default.migrated\Druckumgebung
2015-05-05 17:01 - 2015-05-05 17:01 - 00000000 _SHDL () C:\Users\Default.migrated\Documents\Eigene Musik
2015-05-05 17:01 - 2015-05-05 17:01 - 00000000 _SHDL () C:\Users\Default.migrated\Documents\Eigene Bilder
2015-05-05 17:01 - 2015-05-05 17:01 - 00000000 _SHDL () C:\Users\Default.migrated\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2015-05-05 17:01 - 2015-05-05 17:01 - 00000000 _SHDL () C:\Users\Default.migrated\AppData\Local\Verlauf
2015-05-05 17:01 - 2015-05-05 17:01 - 00000000 _SHDL () C:\Users\Default.migrated\AppData\Local\Anwendungsdaten
2015-05-05 17:01 - 2015-05-05 17:01 - 00000000 _SHDL () C:\Users\Default.migrated\Anwendungsdaten
2015-05-05 17:01 - 2015-05-05 17:01 - 00000000 _SHDL () C:\Programme
2015-05-05 17:01 - 2015-05-05 17:01 - 00000000 _SHDL () C:\ProgramData\Vorlagen
2015-05-05 17:01 - 2015-05-05 17:01 - 00000000 _SHDL () C:\ProgramData\Startmenü
2015-05-05 17:01 - 2015-05-05 17:01 - 00000000 _SHDL () C:\ProgramData\Microsoft\Windows\Start Menu\Programme
2015-05-05 17:01 - 2015-05-05 17:01 - 00000000 _SHDL () C:\ProgramData\Dokumente
2015-05-05 17:01 - 2015-05-05 17:01 - 00000000 _SHDL () C:\ProgramData\Anwendungsdaten
2015-05-05 17:01 - 2015-05-05 17:01 - 00000000 _SHDL () C:\Program Files\Gemeinsame Dateien
2015-05-05 17:01 - 2015-05-05 17:01 - 00000000 _SHDL () C:\Dokumente und Einstellungen
2015-05-05 17:00 - 2015-05-05 17:00 - 00001136 _____ () C:\WINDOWS\system32\netcfg-17343.txt
2015-05-05 17:00 - 2015-05-05 17:00 - 00001136 _____ () C:\WINDOWS\system32\netcfg-15171.txt
2015-05-05 17:00 - 2015-05-05 17:00 - 00001102 _____ () C:\WINDOWS\system32\netcfg-23546.txt
2015-05-05 17:00 - 2015-05-05 17:00 - 00000197 _____ () C:\WINDOWS\system32\netcfg-15484.txt
2015-05-05 17:00 - 2015-05-05 17:00 - 00000185 _____ () C:\WINDOWS\system32\netcfg-16781.txt
2015-05-05 17:00 - 2015-05-05 17:00 - 00000164 _____ () C:\WINDOWS\system32\netcfg-14796.txt
2015-05-05 17:00 - 2015-05-05 17:00 - 00000163 _____ () C:\WINDOWS\system32\netcfg-23406.txt
2015-05-05 17:00 - 2015-05-05 17:00 - 00000161 _____ () C:\WINDOWS\system32\netcfg-16000.txt
2015-05-05 17:00 - 2015-05-05 17:00 - 00000160 _____ () C:\WINDOWS\system32\netcfg-15890.txt
2015-05-05 17:00 - 2015-05-05 17:00 - 00000160 _____ () C:\WINDOWS\system32\netcfg-15015.txt
2015-05-05 17:00 - 2015-05-05 17:00 - 00000160 _____ () C:\WINDOWS\system32\netcfg-14437.txt
2015-05-05 17:00 - 2015-05-05 17:00 - 00000159 _____ () C:\WINDOWS\system32\netcfg-14125.txt
2015-05-05 17:00 - 2015-05-05 17:00 - 00000157 _____ () C:\WINDOWS\system32\netcfg-15750.txt
2015-05-05 17:00 - 2015-05-05 17:00 - 00000157 _____ () C:\WINDOWS\system32\netcfg-14906.txt
2015-05-05 17:00 - 2015-05-05 17:00 - 00000150 _____ () C:\WINDOWS\system32\netcfg-13953.txt

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-05-07 17:11 - 2014-11-21 05:35 - 01686150 _____ () C:\WINDOWS\system32\PerfStringBackup.INI
2015-05-07 17:11 - 2014-11-21 04:45 - 00726688 _____ () C:\WINDOWS\system32\perfh007.dat
2015-05-07 17:11 - 2014-11-21 04:45 - 00151380 _____ () C:\WINDOWS\system32\perfc007.dat
2015-05-07 17:05 - 2014-11-21 12:51 - 00000000 ___SD () C:\WINDOWS\system32\CompatTel
2015-05-07 17:05 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\sr-Latn-RS
2015-05-07 17:05 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\sr-Latn-CS
2015-05-07 17:05 - 2013-08-22 16:45 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT
2015-05-07 17:04 - 2012-07-26 09:59 - 00000000 ____D () C:\WINDOWS\CbsTemp
2015-05-07 17:00 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\sru
2015-05-07 14:06 - 2013-08-22 15:25 - 00262144 ___SH () C:\WINDOWS\system32\config\BBI
2015-05-07 14:01 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\AppCompat
2015-05-07 13:55 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\schemas
2015-05-07 13:24 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\AppReadiness
2015-05-06 14:12 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\restore
2015-05-06 00:47 - 2013-08-22 17:36 - 00262144 _____ () C:\WINDOWS\system32\config\BCD-Template
2015-05-06 00:46 - 2013-08-22 17:36 - 00000000 ___RD () C:\WINDOWS\ImmersiveControlPanel
2015-05-06 00:46 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2015-05-06 00:46 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2015-05-06 00:46 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\WinStore
2015-05-06 00:46 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files\Windows Defender
2015-05-06 00:46 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files (x86)\Windows Defender
2015-05-06 00:45 - 2013-08-22 17:36 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
2015-05-06 00:45 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\PolicyDefinitions
2015-05-06 00:44 - 2013-08-22 17:36 - 00000000 ___RD () C:\WINDOWS\ToastData
2015-05-05 23:52 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\Registration
2015-05-05 23:52 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files\Windows NT
2015-05-05 23:52 - 2013-08-22 15:36 - 00000000 __RHD () C:\Users\Default
2015-05-05 23:51 - 2013-08-22 17:36 - 00000000 __RSD () C:\WINDOWS\Media
2015-05-05 23:51 - 2013-08-22 17:36 - 00000000 __RHD () C:\Users\Public\Libraries
2015-05-05 23:50 - 2014-11-21 04:45 - 00000000 ____D () C:\WINDOWS\SysWOW64\WCN
2015-05-05 23:50 - 2014-11-21 04:45 - 00000000 ____D () C:\WINDOWS\SysWOW64\sysprep
2015-05-05 23:50 - 2014-11-21 04:45 - 00000000 ____D () C:\WINDOWS\system32\WCN
2015-05-05 23:50 - 2013-08-22 17:43 - 00000000 ____D () C:\WINDOWS\DigitalLocker
2015-05-05 23:50 - 2013-08-22 17:36 - 00000000 __SHD () C:\Program Files\Windows Sidebar
2015-05-05 23:50 - 2013-08-22 17:36 - 00000000 __SHD () C:\Program Files (x86)\Windows Sidebar
2015-05-05 23:50 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\MUI
2015-05-05 23:50 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\migwiz
2015-05-05 23:50 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\IME
2015-05-05 23:50 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\WinBioPlugIns
2015-05-05 23:50 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\spool
2015-05-05 23:50 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\MUI
2015-05-05 23:50 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\IME
2015-05-05 23:50 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\IME
2015-05-05 23:50 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\Help
2015-05-05 23:50 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files\Common Files\microsoft shared
2015-05-05 23:50 - 2013-08-22 16:44 - 00338016 _____ () C:\WINDOWS\system32\FNTCACHE.DAT
2015-05-05 23:50 - 2013-08-22 15:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\SMI
2015-05-05 23:50 - 2013-08-22 15:25 - 00008192 ___SH () C:\WINDOWS\system32\config\ELAM
2015-05-05 23:50 - 2012-07-26 07:37 - 00000000 ____D () C:\Users\Default.migrated
2015-05-05 23:49 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\Recovery
2015-05-05 23:48 - 2013-08-22 15:36 - 00000000 ____D () C:\WINDOWS\system32\Sysprep
2015-05-05 23:10 - 2012-07-26 10:12 - 00000000 ____D () C:\WINDOWS\AUInstallAgent
2015-04-14 01:24 - 2014-11-21 13:01 - 00792056 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2015-04-14 01:24 - 2014-11-21 13:01 - 00178168 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl

==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-05-05 23:47

==================== End Of Log ============================

--- --- ---

DerManni · 07.05.2015, 16:32

Code:

ATTFilter

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 06-05-2015 01
Ran by Admin at 2015-05-07 17:18:04
Running from C:\Users\Admin\Downloads
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Admin (S-1-5-21-395663452-3105888118-736914168-1001 - Administrator - Enabled) => C:\Users\Admin
Administrator (S-1-5-21-395663452-3105888118-736914168-500 - Administrator - Disabled)
Faimilie (S-1-5-21-395663452-3105888118-736914168-1004 - Limited - Enabled)
Gast (S-1-5-21-395663452-3105888118-736914168-501 - Limited - Disabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: avast! Antivirus (Disabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Disabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
FW: avast! Antivirus (Disabled) {2F96FC65-F07D-9D1E-5A6E-3DA5C487EAF0}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Adobe Flash Player 17 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 17.0.0.169 - Adobe Systems Incorporated)
Arma 3 (HKLM-x32\...\Steam App 107410) (Version:  - Bohemia Interactive)
Avast Internet Security (HKLM-x32\...\Avast) (Version: 10.2.2218 - AVAST Software)
Borderlands 2 (HKLM-x32\...\Steam App 49520) (Version:  - Gearbox Software)
CCleaner (HKLM\...\CCleaner) (Version: 5.05 - Piriform)
Cities: Skylines (HKLM-x32\...\Steam App 255710) (Version:  - Colossal Order Ltd.)
Counter-Strike: Global Offensive (HKLM-x32\...\Steam App 730) (Version:  - Valve)
Dell Custom Help (Version: 15.06.0000.0090 - Intel Corporation) Hidden
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.0.0.1310 - Intel Corporation)
Intel(R) Wireless Bluetooth(R)(patch version 17.1.1512.771) (HKLM\...\{302600C1-6BDF-4FD1-1501-148929CC1385}) (Version: 17.1.1501.0514 - Intel Corporation)
Intel® PROSet/Wireless Software (HKLM-x32\...\{80074a53-9c74-49ed-bad4-0fb14b19a01d}) (Version: 15.6.0 - Intel Corporation)
Java 8 Update 45 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418045F0}) (Version: 8.0.450 - Oracle Corporation)
Logitech Gaming Software 8.58 (HKLM\...\Logitech Gaming Software) (Version: 8.58.183 - Logitech Inc.)
Malwarebytes Anti-Exploit version 1.06.1.1019 (HKLM\...\Malwarebytes Anti-Exploit_is1) (Version: 1.06.1.1019 - Malwarebytes)
Malwarebytes Anti-Malware Version 2.1.6.1022 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.1.6.1022 - Malwarebytes Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Mozilla Firefox 37.0.2 (x86 de) (HKLM-x32\...\Mozilla Firefox 37.0.2 (x86 de)) (Version: 37.0.2 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 37.0.1 - Mozilla)
NVIDIA 3D Vision Controller-Treiber 349.95 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 349.95 - NVIDIA Corporation)
NVIDIA 3D Vision Treiber 350.12 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 350.12 - NVIDIA Corporation)
NVIDIA GeForce Experience 2.4.3.22 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.4.3.22 - NVIDIA Corporation)
NVIDIA Grafiktreiber 350.12 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 350.12 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.33.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.33.0 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.15.0324 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.15.0324 - NVIDIA Corporation)
Realtek Ethernet Controller All-In-One Windows Driver (HKLM-x32\...\{F7E7F0CB-AA41-4D5A-B6F2-8E6738EB063F}) (Version: 8.7.1025.2012 - Realtek)
ROCCAT Kone Pure Mouse Driver (HKLM-x32\...\{4905245D-56E7-4176-BE68-962728B803D6}) (Version:  - Roccat GmbH)
Samsung SSD Magician (HKLM-x32\...\{29AE3F9F-7158-4ca7-B1ED-28A73ECDB215}_is1) (Version: 3.2 - Samsung Electronics)
SHIELD Streaming (Version: 4.1.1000 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (Version: 2.4.3.22 - NVIDIA Corporation) Hidden
Skype™ 7.4 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.4.102 - Skype Technologies S.A.)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.16 - TeamSpeak Systems GmbH)

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)


==================== Restore Points  =========================

06-05-2015 14:12:42 DirectX wurde installiert
07-05-2015 15:57:22 Removed Intel® PROSet/Wireless WiFi Software

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2013-08-22 15:25 - 2013-08-22 15:25 - 00000824 ____A C:\WINDOWS\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {01BEB495-4B7A-4018-9EC0-FC6F6A0D816C} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\Windows\system32\MRT.exe [2015-04-01] (Microsoft Corporation)
Task: {1D8CB57E-630C-4366-9D14-F0B2DA346053} - System32\Tasks\Microsoft\Windows\Setup\gwx\runappraiser => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-05-06] (Microsoft Corporation)
Task: {2618AE69-308F-42D7-9CA2-0D51947C3BB9} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2015-04-08] (Piriform Ltd)
Task: {5A857769-5BB9-4841-9067-E373B8672534} - System32\Tasks\{DE9775E2-C2A2-468E-995E-9EF467873ABA} => pcalua.exe -a "J:\Magician Software\Samsung_Magician_Setup_v.3.2.exe" -d "J:\Magician Software"
Task: {8D779767-AFF7-4135-856F-DFF8DEA929A1} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxcontent => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-05-06] (Microsoft Corporation)
Task: {A4B99C9F-FC30-45E4-AEAF-36D9050B5A9B} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-05-05] (Adobe Systems Incorporated)
Task: {C1ADBC45-34E5-4879-8E35-5E013ED230B2} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxconfig => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-05-06] (Microsoft Corporation)
Task: {DB0B910B-425A-4351-B483-3180D0098A00} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2015-05-05] (Avast Software s.r.o.)
Task: {DE8E9171-727F-4CF9-B022-AD34B744770C} - \ReimageUpdater No Task File <==== ATTENTION
Task: {FA37DFD0-76A6-4016-9567-E9956AEBC9DA} - System32\Tasks\Microsoft\Windows\Setup\gwx\launchtrayprocess => C:\Windows\system32\GWX\GWX.exe [2015-05-06] (Microsoft Corporation)
Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

==================== Loaded Modules (whitelisted) ==============

2015-05-05 23:48 - 2015-04-08 23:30 - 00116552 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2014-09-18 09:23 - 2014-09-18 09:23 - 00866584 _____ () C:\Program Files\Logitech Gaming Software\libGLESv2.dll
2015-03-12 20:23 - 2015-03-12 20:23 - 01050904 _____ () C:\Program Files\Logitech Gaming Software\platforms\qwindows.dll
2014-09-18 09:23 - 2014-09-18 09:23 - 00059160 _____ () C:\Program Files\Logitech Gaming Software\libEGL.dll
2015-03-12 20:23 - 2015-03-12 20:23 - 00242456 _____ () C:\Program Files\Logitech Gaming Software\imageformats\qjpeg.dll
2015-04-01 21:51 - 2015-04-01 21:51 - 00055576 _____ () C:\Program Files\CCleaner\branding.dll
2015-04-08 21:53 - 2015-04-08 21:53 - 00057344 _____ () C:\Program Files\CCleaner\lang\lang-1031.dll
2015-05-05 17:22 - 2015-05-05 17:22 - 00104400 _____ () C:\Program Files\AVAST Software\Avast\log.dll
2015-05-05 17:22 - 2015-05-05 17:22 - 00081728 _____ () C:\Program Files\AVAST Software\Avast\JsonRpcServer.dll
2015-05-07 10:59 - 2015-05-07 10:59 - 02926592 _____ () C:\Program Files\AVAST Software\Avast\defs\15050700\algo.dll
2015-05-05 18:40 - 2013-01-24 15:57 - 01199576 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll
2015-05-05 17:21 - 2015-05-01 18:52 - 00011920 _____ () C:\Program Files (x86)\NVIDIA Corporation\Update Core\detoured.dll
2015-05-05 20:46 - 2015-03-10 08:37 - 00775680 _____ () C:\Program Files (x86)\Steam\SDL2.dll
2015-05-05 20:46 - 2014-12-02 02:29 - 05002752 _____ () C:\Program Files (x86)\Steam\v8.dll
2015-05-05 20:46 - 2015-04-14 01:44 - 02371776 _____ () C:\Program Files (x86)\Steam\video.dll
2015-05-05 20:46 - 2014-12-02 02:29 - 01612800 _____ () C:\Program Files (x86)\Steam\icui18n.dll
2015-05-05 20:46 - 2014-12-02 02:29 - 01210368 _____ () C:\Program Files (x86)\Steam\icuuc.dll
2015-05-05 20:46 - 2014-12-01 23:31 - 02396672 _____ () C:\Program Files (x86)\Steam\libavcodec-56.dll
2015-05-05 20:46 - 2014-12-01 23:31 - 00479744 _____ () C:\Program Files (x86)\Steam\libavformat-56.dll
2015-05-05 20:46 - 2014-12-01 23:31 - 00332800 _____ () C:\Program Files (x86)\Steam\libavresample-2.dll
2015-05-05 20:46 - 2014-12-01 23:31 - 00442880 _____ () C:\Program Files (x86)\Steam\libavutil-54.dll
2015-05-05 20:46 - 2014-12-01 23:31 - 00485888 _____ () C:\Program Files (x86)\Steam\libswscale-3.dll
2015-05-05 20:46 - 2015-04-14 01:44 - 00702656 _____ () C:\Program Files (x86)\Steam\bin\chromehtml.DLL
2015-05-05 17:22 - 2015-05-05 17:22 - 40540672 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2015-05-06 14:14 - 2012-06-23 14:54 - 00061440 _____ () C:\Program Files (x86)\ROCCAT\Kone Pure Mouse\hiddriver.dll
2015-05-05 20:46 - 2015-02-25 03:58 - 34641288 _____ () C:\Program Files (x86)\Steam\bin\libcef.dll
2015-05-05 17:22 - 2015-05-05 17:22 - 00985600 _____ () C:\Program Files\AVAST Software\Avast\ffmpegsumo.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)


==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== EXE Association (whitelisted) ===============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, the associated entry will be removed from the registry.)

IE trusted site: HKU\S-1-5-21-395663452-3105888118-736914168-1001\...\dell.com -> dell.com


==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-395663452-3105888118-736914168-1001\Control Panel\Desktop\\Wallpaper -> C:\WINDOWS\web\wallpaper\Windows\img0.jpg
DNS Servers: 192.168.2.1

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)


==================== FirewallRules (whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
FirewallRules: [{8CE99A56-CBBA-4C1D-A5E0-9CE8DE92BEDF}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{6FF9E6DD-3519-45DE-9C51-55D0832B4B71}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{541CCB7F-A395-4966-A57B-72BF91347A94}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{90AE1680-B77D-4CDB-9413-00D75D3F9CF0}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{3700D59C-6BA7-4181-AF9B-E9BF99D39DEF}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{BDF52479-D547-4750-8508-9E4F2793D42E}] => (Allow) C:\Program Files\Logitech Gaming Software\LCore.exe
FirewallRules: [{569485DE-2539-43D7-B751-CDB834F88391}] => (Allow) C:\Program Files\Logitech Gaming Software\LCore.exe
FirewallRules: [{F911610C-18C2-47C5-9D7B-F349538BD983}] => (Allow) C:\Program Files\AVAST Software\Avast\ng\vbox\aswFe.exe
FirewallRules: [{DF57E6F3-F726-4E1A-8226-48B7A99CD817}] => (Allow) C:\Program Files\AVAST Software\Avast\ng\vbox\aswFe.exe
FirewallRules: [{CA2C3D4C-B2D1-428B-BF9A-F75525FABFD3}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{70084C9B-359A-4B21-98B4-B5502CF38E77}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{C7D329AA-9228-404D-8200-CEEF5DE2985A}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{92801155-478F-4589-9906-C52C7F5C005F}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{A6EB08BA-3B8D-4E41-BFA2-92D7C6737492}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{A5D28C84-B113-4D22-93F7-ACCC3FDA1153}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{FB5AF047-2E4B-4B08-96FE-B4246BFE5D4D}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{CA54A146-D853-454E-B99F-7EBA37AC4412}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{5CB05613-DCA2-4AD8-9AAB-803D8DC1FED2}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{5BD8C8C5-10CB-46D0-8316-43D6C26A5AE5}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{5D2E364A-0FAA-4F69-B667-B7E9FB53783F}] => (Allow) D:\Spiele\Steam\steamapps\common\Borderlands 2\Binaries\Win32\Launcher.exe
FirewallRules: [{90F41C92-2A0C-43B5-9282-70A0643563D6}] => (Allow) D:\Spiele\Steam\steamapps\common\Borderlands 2\Binaries\Win32\Launcher.exe
FirewallRules: [{ADE2EAF8-9697-4371-B8AC-C3D0355C11AD}] => (Allow) D:\Spiele\Steam\steamapps\common\Arma 3\arma3launcher.exe
FirewallRules: [{F8E2A56A-42AB-4577-B7B2-177811759DF2}] => (Allow) D:\Spiele\Steam\steamapps\common\Arma 3\arma3launcher.exe
FirewallRules: [{B32E67A2-DB6D-4749-9964-3EA0E57A839F}] => (Allow) D:\Spiele\Steam\steamapps\common\Cities_Skylines\Cities.exe
FirewallRules: [{F8E2E167-E1F5-440D-822A-ADB0C0935DCF}] => (Allow) D:\Spiele\Steam\steamapps\common\Cities_Skylines\Cities.exe

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (05/07/2015 04:46:24 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_6240486fecbd8abb.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_6240486fecbd8abb.manifest2" in Zeile C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_6240486fecbd8abb.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_6240486fecbd8abb.manifest.
Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_a9ed7f470139b3c1.manifest.

Error: (05/07/2015 04:46:23 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_6240486fecbd8abb.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_6240486fecbd8abb.manifest2" in Zeile C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_6240486fecbd8abb.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_6240486fecbd8abb.manifest.
Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_a9ed7f470139b3c1.manifest.

Error: (05/07/2015 04:00:15 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: unInstaller.exe, Version: 5.3.1.20, Zeitstempel: 0x550f7536
Name des fehlerhaften Moduls: MSVCR90.dll, Version: 9.0.30729.8387, Zeitstempel: 0x51ea24a5
Ausnahmecode: 0xc0000417
Fehleroffset: 0x00037256
ID des fehlerhaften Prozesses: 0x18b4
Startzeit der fehlerhaften Anwendung: 0xunInstaller.exe0
Pfad der fehlerhaften Anwendung: unInstaller.exe1
Pfad des fehlerhaften Moduls: unInstaller.exe2
Berichtskennung: unInstaller.exe3
Vollständiger Name des fehlerhaften Pakets: unInstaller.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: unInstaller.exe5

Error: (05/07/2015 04:00:06 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: unInstaller.exe, Version: 5.3.1.20, Zeitstempel: 0x550f7536
Name des fehlerhaften Moduls: MSVCR90.dll, Version: 9.0.30729.8387, Zeitstempel: 0x51ea24a5
Ausnahmecode: 0xc0000417
Fehleroffset: 0x00037256
ID des fehlerhaften Prozesses: 0x1414
Startzeit der fehlerhaften Anwendung: 0xunInstaller.exe0
Pfad der fehlerhaften Anwendung: unInstaller.exe1
Pfad des fehlerhaften Moduls: unInstaller.exe2
Berichtskennung: unInstaller.exe3
Vollständiger Name des fehlerhaften Pakets: unInstaller.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: unInstaller.exe5

Error: (05/07/2015 03:59:51 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: Uninstaller.exe, Version: 5.3.1.20, Zeitstempel: 0x550f7536
Name des fehlerhaften Moduls: MSVCR90.dll, Version: 9.0.30729.8387, Zeitstempel: 0x51ea24a5
Ausnahmecode: 0xc0000417
Fehleroffset: 0x00037256
ID des fehlerhaften Prozesses: 0x864
Startzeit der fehlerhaften Anwendung: 0xUninstaller.exe0
Pfad der fehlerhaften Anwendung: Uninstaller.exe1
Pfad des fehlerhaften Moduls: Uninstaller.exe2
Berichtskennung: Uninstaller.exe3
Vollständiger Name des fehlerhaften Pakets: Uninstaller.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: Uninstaller.exe5

Error: (05/07/2015 03:57:29 PM) (Source: Microsoft-Windows-WMI) (EventID: 10) (User: NT-AUTORITÄT)
Description: Der Ereignisfilter mit der Abfrage "select * from CIntelWLANEvent" konnte im Namespace "//./ROOT/default" aufgrund des Fehlers "0x80041010" nicht reaktiviert werden. Solange dieses Problem besteht, können mit diesem Filter keine Ereignisse übermittelt werden.

Error: (05/07/2015 03:55:44 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "Microsoft.VC90.ATL,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="9.0.21022.8"1".
Die abhängige Assemblierung "Microsoft.VC90.ATL,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="9.0.21022.8"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".

Error: (05/07/2015 02:18:15 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_6240486fecbd8abb.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_6240486fecbd8abb.manifest2" in Zeile C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_6240486fecbd8abb.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_6240486fecbd8abb.manifest.
Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_a9ed7f470139b3c1.manifest.

Error: (05/07/2015 02:18:14 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_6240486fecbd8abb.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_6240486fecbd8abb.manifest2" in Zeile C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_6240486fecbd8abb.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_6240486fecbd8abb.manifest.
Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_a9ed7f470139b3c1.manifest.

Error: (05/07/2015 02:18:11 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_6240486fecbd8abb.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_6240486fecbd8abb.manifest2" in Zeile C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_6240486fecbd8abb.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_6240486fecbd8abb.manifest.
Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_a9ed7f470139b3c1.manifest.


System errors:
=============
Error: (05/07/2015 04:39:03 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Steam Client Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (05/07/2015 04:39:03 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Bluetooth OBEX Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (05/07/2015 04:39:03 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Bluetooth Device Monitor" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (05/07/2015 04:39:02 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Windows Modules Installer" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 120000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (05/07/2015 04:39:02 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Skype Updater" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (05/07/2015 04:39:02 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Reimage Real Time Protector" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (05/07/2015 04:39:02 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "NVIDIA Streamer Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (05/07/2015 04:39:02 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "NVIDIA Network Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (05/07/2015 04:39:02 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Malwarebytes Anti-Exploit Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (05/07/2015 04:39:02 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Intel(R) Wireless Bluetooth(R) 4.0 Radio Management" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.


Microsoft Office Sessions:
=========================
Error: (05/07/2015 04:46:24 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_6240486fecbd8abb.manifestC:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_a9ed7f470139b3c1.manifestC:\Users\Admin\Downloads\esetsmartinstaller_deu.exe

Error: (05/07/2015 04:46:23 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_6240486fecbd8abb.manifestC:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_a9ed7f470139b3c1.manifestC:\Users\Admin\Downloads\esetsmartinstaller_deu.exe

Error: (05/07/2015 04:00:15 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: unInstaller.exe5.3.1.20550f7536MSVCR90.dll9.0.30729.838751ea24a5c00004170003725618b401d088ce2231b9e1C:\Program Files (x86)\Glarysoft\Absolute Uninstaller 5\unInstaller.exeC:\WINDOWS\WinSxS\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.8387_none_5094ca96bcb6b2bb\MSVCR90.dll62ad2803-f4c1-11e4-be6e-b8ca3a809666

Error: (05/07/2015 04:00:06 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: unInstaller.exe5.3.1.20550f7536MSVCR90.dll9.0.30729.838751ea24a5c000041700037256141401d088ce1d32fadbC:\Program Files (x86)\Glarysoft\Absolute Uninstaller 5\unInstaller.exeC:\WINDOWS\WinSxS\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.8387_none_5094ca96bcb6b2bb\MSVCR90.dll5cee2cbf-f4c1-11e4-be6e-b8ca3a809666

Error: (05/07/2015 03:59:51 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Uninstaller.exe5.3.1.20550f7536MSVCR90.dll9.0.30729.838751ea24a5c00004170003725686401d088cd7328cec3C:\Program Files (x86)\Glarysoft\Absolute Uninstaller 5\Uninstaller.exeC:\WINDOWS\WinSxS\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.8387_none_5094ca96bcb6b2bb\MSVCR90.dll544bd903-f4c1-11e4-be6e-b8ca3a809666

Error: (05/07/2015 03:57:29 PM) (Source: Microsoft-Windows-WMI) (EventID: 10) (User: NT-AUTORITÄT)
Description: //./ROOT/defaultselect * from CIntelWLANEvent0x80041010

Error: (05/07/2015 03:55:44 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Microsoft.VC90.ATL,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="9.0.21022.8"C:\Program Files (x86)\Glary Utilities 5\ContextHandler.dll

Error: (05/07/2015 02:18:15 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_6240486fecbd8abb.manifestC:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_a9ed7f470139b3c1.manifestC:\Users\Admin\Downloads\esetsmartinstaller_deu.exe

Error: (05/07/2015 02:18:14 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_6240486fecbd8abb.manifestC:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_a9ed7f470139b3c1.manifestC:\Users\Admin\Downloads\esetsmartinstaller_deu.exe

Error: (05/07/2015 02:18:11 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_6240486fecbd8abb.manifestC:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17415_none_a9ed7f470139b3c1.manifestC:\Users\Admin\Downloads\esetsmartinstaller_deu.exe


==================== Memory info =========================== 

Processor: Intel(R) Core(TM) i7-4770 CPU @ 3.40GHz
Percentage of memory in use: 12%
Total physical RAM: 16333.71 MB
Available physical RAM: 14259.47 MB
Total Pagefile: 19277.71 MB
Available Pagefile: 17135.66 MB
Total Virtual: 131072 MB
Available Virtual: 131071.84 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:237.52 GB) (Free:171.01 GB) NTFS
Drive d: () (Fixed) (Total:1863.02 GB) (Free:1832.83 GB) NTFS
Drive e: () (Fixed) (Total:29.8 GB) (Free:29.41 GB) FAT32 ==>[System with boot components (obtained from reading drive)]
Drive j: (RESOURCE_CD) (CDROM) (Total:1.94 GB) (Free:0 GB) CDFS
Drive k: () (Removable) (Total:28.94 GB) (Free:28.89 GB) FAT32

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 238.5 GB) (Disk ID: E82FBA1C)

Partition: GPT Partition Type.

========================================================
Disk: 1 (Size: 1863 GB) (Disk ID: 6285B48C)

Partition: GPT Partition Type.

========================================================
Disk: 2 (MBR Code: Windows 7 or 8) (Size: 29.8 GB) (Disk ID: F68DB753)
Partition 1: (Active) - (Size=29.8 GB) - (Type=0C)

========================================================
Disk: 3 (Size: 29 GB) (Disk ID: 00000000)

Partition: GPT Partition Type.

==================== End Of Log ============================

Code:

ATTFilter

GMER Logfile:

	Code: 

 ATTFilter

  
	GMER 2.1.19357 - hxxp://www.gmer.net
Rootkit scan 2015-05-07 17:17:31
Windows 6.2.9200  x64 \Device\Harddisk0\DR0 -> \Device\00000033 Samsung_SSD_840_PRO_Series rev.DXM06B0Q 238,47GB
Running: Gmer-19357.exe; Driver: C:\Users\Admin\AppData\Local\Temp\pxldapow.sys


---- Threads - GMER 2.1 ----

Thread  C:\WINDOWS\system32\csrss.exe [796:828]      fffff960008c72d0
Thread  C:\WINDOWS\system32\csrss.exe [796:948]      fffff960008c72d0
Thread  C:\WINDOWS\system32\svchost.exe [1732:3104]  00007ff9e8fc1600
Thread  C:\WINDOWS\system32\svchost.exe [1732:3112]  00007ff9e8f61b70
Thread  C:\WINDOWS\system32\svchost.exe [1732:3724]  00007ff9ec094440
Thread  C:\WINDOWS\system32\svchost.exe [1732:5064]  00007ff9ec091040

---- Disk sectors - GMER 2.1 ----

Disk    \Device\Harddisk0\DR0                        unknown MBR code

---- EOF - GMER 2.1 ----
         
 --- --- ---

Vielen Vielen Dank für die Mühe!
Da die Scans mittlerweile, danke eurer Tipps hier im Forum, negativ ausfallen, habe ich mich auf die drei Logs beschränkt.
GMER spuckt zugriffsfehler aus, er kann auf zwei Datei nicht zugreifen:
Windows\System32\config\system
Benutzer\Admin\ntuser.dat

Ist das wichtig ?

Ich hoffe es ist nichts auffällig dabei!

Gruß DerManni

schrauber · 08.05.2015, 09:13

Sieht gut aus. Reimage ist Adware

08.05.2015, 09:13	#5
schrauber /// the machine /// TB-Ausbilder	Win8.1 \| PC neuaufgesetzt, Virenscann ergab funde wie: ProtectWindowsManager.exe Sieht gut aus. Reimage ist Adware __________________ gruß, schrauber *Proud Member of UNITE and ASAP since 2009* Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM!

Win8.1 | PC neuaufgesetzt, Virenscann ergab funde wie: ProtectWindowsManager.exe

Log-Analyse und Auswertung: Win8.1 | PC neuaufgesetzt, Virenscann ergab funde wie: ProtectWindowsManager.exe