Trojaner-Board - Windows 7: LyriXeeker-1 0.92.10 lässt sich nicht entfernen

Trojaner-Board (https://www.trojaner-board.de/)

- Log-Analyse und Auswertung (https://www.trojaner-board.de/log-analyse-auswertung/)

- - Windows 7: LyriXeeker-1 0.92.10 lässt sich nicht entfernen (https://www.trojaner-board.de/141830-windows-7-lyrixeeker-1-0-92-10-laesst-entfernen.html)

Windows 7: LyriXeeker-1 0.92.10 lässt sich nicht entfernen

Hallo zusammen,

ich habe mir das Firefox-AddOn LyriXeeker eingefangen. Ich habe es bemerkt, als ich im Firefox immer Werbung hatte (zufällige Wörter werden zu klickbaren Spam-Links) bzw. Firefox Werbung anzeigen wollte . Außerdem öffnen sich regelmäßig Pop-Up-Fenster ohne Inhalt (wahrscheinlich AdBlock-Plus geschuldet).

Wenn ich das Firefox-Addon LyriXeeker-1 0.92.10 deinstalliere ist das Problem temporär behoben, jedoch tritt es nach einem Neustart wieder auf - das AddOn ist einfach wieder da.

Meine "Sicherheitssoftware Microsoft Security Essentials" hat bei einer vollständigen Systemüberprüfung nichts gefunden.

Da die Logfiles für den Post zu lang sind, habe ich Sie im Anhang beigefügt. Danke für die Hilfe im Voraus.

e.rico

:hallo:

Mein Name ist Matthias und ich werde dir bei der Bereinigung deines Computers helfen.

Bitte beachte folgende Hinweise:

Falls wir Hinweise auf illegal erworbene Software finden, werden wir den Support unterbrechen bis jegliche Art von illegaler Software vom Rechner entfernt wurde.
Bitte arbeite alle Schritte in der vorgegebenen Reihefolge nacheinander ab und poste alle Logdateien in CODE-Tags.
Lies dir die Anleitungen sorgfältig durch. Solltest du Probleme haben, stoppe mit deiner Bearbeitung und beschreibe mir dein Problem so gut es geht.
Solltest du mir nicht innerhalb von 3 Tagen antworten, gehe ich davon aus, dass du keine Hilfe mehr benötigst. Dann lösche ich dein Thema aus meinem Abo.
Solltest du einmal länger abwesend sein, so gib mir bitte Bescheid!
Alle zu verwendenen Programme sind auf dem Desktop abzuspeichern und von dort zu starten!
Ich kann Dir niemals eine Garantie geben, dass auch ich alles finde. Eine Formatierung ist meist der schnellere und immer der sicherste Weg.
Solltest Du Dich für eine Bereinigung entscheiden, arbeite solange mit, bis dir jemand vom Team sagt, dass Du clean bist.

Ich habe dein Thema in Arbeit und melde mich so schnell wie möglich mit weiteren Anweisungen.

Servus,

Scan mit Combofix

WARNUNG an die MITLESER:
Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!

Downloade dir bitte Combofix vom folgenden Downloadspiegel: Link

WICHTIG: Speichere Combofix auf deinem Desktop.

Deaktiviere bitte alle deine Antivirensoftware sowie Malware/Spyware Scanner. Diese können Combofix bei der Arbeit stören. Combofix meckert auch manchmal trotzdem noch, das kannst du dann ignorieren, mir aber bitte mitteilen.

Starte die Combofix.exe und folge den Anweisungen auf dem Bildschirm.

Während Combofix läuft bitte nicht am Computer arbeiten, die Maus bewegen oder ins Combofixfenster klicken!

Wenn Combofix fertig ist, wird es ein Logfile erstellen.

Bitte poste die C:\Combofix.txt in deiner nächsten Antwort (möglichst in CODE-Tags).

Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten
Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.
starte den Rechner einfach neu. Dies sollte das Problem beheben.

ComboFix ist erledigt.

ComboFix

Code:

ComboFix 13-09-19.01 - **** 19.09.2013  16:41:45.1.8 - x64

Microsoft Windows 7 Home Premium   6.1.7601.1.1252.49.1031.18.8099.4604 [GMT 2:00]

ausgeführt von:: c:\users\****\Desktop\ComboFix.exe

AV: Microsoft Security Essentials *Disabled/Updated* {641105E6-77ED-3F35-A304-765193BCB75F}

SP: Microsoft Security Essentials *Disabled/Updated* {DF70E402-51D7-30BB-99B4-4D23E83BFDE2}

SP: Spybot - Search and Destroy *Disabled/Outdated* {9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0}

SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

.

.

((((((((((((((((((((((((((((((((((((   Weitere Löschungen   ))))))))))))))))))))))))))))))))))))))))))))))))

.

.

c:\programdata\Roaming

c:\windows\IsUn0407.exe

.

.

(((((((((((((((((((((((   Dateien erstellt von 2013-08-19 bis 2013-09-19  ))))))))))))))))))))))))))))))

.

.

2013-09-19 14:51 . 2013-09-19 14:51        --------        d-----w-        c:\users\Default\AppData\Local\temp

2013-09-19 12:54 . 2013-09-05 05:32        9694160        ----a-w-        c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{B15B6319-7AB4-424E-A123-98E6CC4E8769}\mpengine.dll

2013-09-19 12:43 . 2013-09-19 12:43        --------        d-----w-        C:\FRST

2013-09-19 12:20 . 2013-09-19 12:20        --------        d-----w-        c:\windows\SysWow64\wbem\en-US

2013-09-19 12:20 . 2013-09-19 12:20        --------        d-----w-        c:\windows\system32\wbem\en-US

2013-09-19 11:59 . 2013-09-01 15:08        79143768        ----a-w-        c:\windows\system32\MRT.exe

2013-09-19 11:51 . 2012-07-26 07:46        2560        ----a-w-        c:\windows\system32\drivers\de-DE\wdf01000.sys.mui

2013-09-19 11:51 . 2012-07-26 04:55        785512        ----a-w-        c:\windows\system32\drivers\Wdf01000.sys

2013-09-19 11:51 . 2012-07-26 04:55        54376        ----a-w-        c:\windows\system32\drivers\WdfLdr.sys

2013-09-19 11:51 . 2012-07-26 02:36        9728        ----a-w-        c:\windows\system32\Wdfres.dll

2013-09-19 11:39 . 2010-02-23 08:16        294912        ----a-w-        c:\windows\system32\browserchoice.exe

2013-09-19 11:27 . 2012-12-16 17:11        46080        ----a-w-        c:\windows\system32\atmlib.dll

2013-09-19 11:27 . 2012-12-16 14:45        367616        ----a-w-        c:\windows\system32\atmfd.dll

2013-09-19 11:27 . 2012-12-16 14:13        295424        ----a-w-        c:\windows\SysWow64\atmfd.dll

2013-09-19 11:27 . 2012-12-16 14:13        34304        ----a-w-        c:\windows\SysWow64\atmlib.dll

2013-09-19 11:27 . 2010-09-30 10:41        100864        ----a-w-        c:\windows\system32\fontsub.dll

2013-09-19 11:27 . 2010-09-30 06:47        70656        ----a-w-        c:\windows\SysWow64\fontsub.dll

2013-09-19 11:26 . 2012-07-26 03:08        84992        ----a-w-        c:\windows\system32\WUDFSvc.dll

2013-09-19 11:26 . 2012-07-26 03:08        194048        ----a-w-        c:\windows\system32\WUDFPlatform.dll

2013-09-19 11:26 . 2012-07-26 02:26        87040        ----a-w-        c:\windows\system32\drivers\WUDFPf.sys

2013-09-19 11:26 . 2012-07-26 02:26        198656        ----a-w-        c:\windows\system32\drivers\WUDFRd.sys

2013-09-19 11:26 . 2012-07-26 03:08        229888        ----a-w-        c:\windows\system32\WUDFHost.exe

2013-09-19 11:26 . 2012-07-26 03:08        744448        ----a-w-        c:\windows\system32\WUDFx.dll

2013-09-19 11:26 . 2012-07-26 03:08        45056        ----a-w-        c:\windows\system32\WUDFCoinstaller.dll

2013-09-19 11:23 . 2012-03-01 06:46        23408        ----a-w-        c:\windows\system32\drivers\fs_rec.sys

2013-09-19 11:23 . 2012-03-01 06:33        81408        ----a-w-        c:\windows\system32\imagehlp.dll

2013-09-19 11:23 . 2012-03-01 06:28        5120        ----a-w-        c:\windows\system32\wmi.dll

2013-09-19 11:23 . 2012-03-01 05:33        159232        ----a-w-        c:\windows\SysWow64\imagehlp.dll

2013-09-19 11:23 . 2012-03-01 05:29        5120        ----a-w-        c:\windows\SysWow64\wmi.dll

2013-09-19 11:18 . 2012-12-07 13:20        441856        ----a-w-        c:\windows\system32\Wpc.dll

2013-09-19 11:17 . 2010-12-23 10:42        1118720        ----a-w-        c:\windows\system32\sbe.dll

2013-09-19 11:16 . 2012-11-01 05:43        2002432        ----a-w-        c:\windows\system32\msxml6.dll

2013-09-19 11:15 . 2011-08-27 05:37        861696        ----a-w-        c:\windows\system32\oleaut32.dll

2013-09-19 10:59 . 2011-11-19 14:58        77312        ----a-w-        c:\windows\system32\packager.dll

2013-09-19 10:59 . 2011-11-19 14:01        67072        ----a-w-        c:\windows\SysWow64\packager.dll

2013-09-19 01:56 . 2012-02-17 06:38        1031680        ----a-w-        c:\windows\system32\rdpcore.dll

2013-09-19 01:56 . 2012-02-17 05:34        826880        ----a-w-        c:\windows\SysWow64\rdpcore.dll

2013-09-19 01:56 . 2012-02-17 04:57        23552        ----a-w-        c:\windows\system32\drivers\tdtcp.sys

2013-09-19 01:51 . 2012-06-02 22:19        57880        ----a-w-        c:\windows\system32\wuauclt.exe

2013-09-19 01:51 . 2012-06-02 22:19        44056        ----a-w-        c:\windows\system32\wups2.dll

2013-09-19 01:51 . 2012-06-02 22:19        2428952        ----a-w-        c:\windows\system32\wuaueng.dll

2013-09-19 01:51 . 2012-06-02 22:15        2622464        ----a-w-        c:\windows\system32\wucltux.dll

2013-09-19 01:51 . 2012-06-02 22:19        38424        ----a-w-        c:\windows\system32\wups.dll

2013-09-19 01:51 . 2012-06-02 22:19        701976        ----a-w-        c:\windows\system32\wuapi.dll

2013-09-19 01:51 . 2012-06-02 22:15        99840        ----a-w-        c:\windows\system32\wudriver.dll

2013-09-19 01:51 . 2012-06-02 13:19        186752        ----a-w-        c:\windows\system32\wuwebv.dll

2013-09-19 01:51 . 2012-06-02 13:15        36864        ----a-w-        c:\windows\system32\wuapp.exe

2013-09-19 01:32 . 2013-09-19 10:30        --------        d-----w-        c:\windows\Panther

2013-09-19 01:24 . 2013-09-19 01:24        --------        d-----w-        c:\users\Default\Roaming

2013-09-19 01:24 . 2013-09-19 01:24        --------        d-----w-        c:\users\Default\AppData\Local\Microsoft Help

2013-09-19 01:12 . 2013-09-19 01:34        --------        d-----w-        C:\$WINDOWS.~Q

2013-09-19 00:59 . 2013-09-19 01:08        --------        d-----w-        C:\$INPLACE.~TR

2013-09-19 00:40 . 2013-09-19 12:42        --------        d-----w-        c:\users\****

2013-09-19 00:40 . 2013-09-19 01:15        --------        d-----w-        c:\users\UpdatusUser

2013-09-19 00:39 . 2013-09-19 00:39        --------        d-----w-        c:\program files\AuthenTec

2013-09-19 00:38 . 2012-12-29 08:40        6382008        ----a-w-        c:\windows\system32\nvcpl.dll

2013-09-19 00:38 . 2012-12-29 08:40        3455416        ----a-w-        c:\windows\system32\nvsvc64.dll

2013-09-19 00:38 . 2012-12-29 08:40        2923201        ----a-w-        c:\windows\system32\nvcoproc.bin

2013-09-19 00:38 . 2012-12-29 08:40        997816        ----a-w-        c:\windows\system32\nv3dappshext.dll

2013-09-19 00:38 . 2012-12-29 08:40        884152        ----a-w-        c:\windows\system32\nvvsvc.exe

2013-09-19 00:38 . 2012-12-29 08:40        63928        ----a-w-        c:\windows\system32\nvshext.dll

2013-09-19 00:38 . 2012-12-29 08:40        55736        ----a-w-        c:\windows\system32\nv3dappshextr.dll

2013-09-19 00:38 . 2012-12-29 08:40        2558392        ----a-w-        c:\windows\system32\nvsvcr.dll

2013-09-19 00:38 . 2012-12-29 08:40        118712        ----a-w-        c:\windows\system32\nvmctray.dll

2013-09-19 00:38 . 2013-09-19 00:38        --------        d-----w-        c:\programdata\NVIDIA Corporation

2013-09-19 00:37 . 2013-09-19 00:50        --------        d-----w-        c:\program files (x86)\NVIDIA Corporation

2013-09-19 00:37 . 2013-09-19 00:44        --------        d-----w-        c:\program files\NVIDIA Corporation

2013-09-19 00:37 . 2013-09-19 00:37        --------        d-----w-        c:\windows\SysWow64\RTCOM

2013-09-19 00:37 . 2013-09-19 00:37        --------        d-----w-        c:\program files\Realtek

2013-09-19 00:35 . 2013-09-19 00:35        --------        d-----w-        c:\program files\Synaptics

2013-09-18 11:15 . 2013-09-19 00:56        --------        d-----w-        c:\programdata\Spybot - Search & Destroy

2013-09-18 11:14 . 2009-01-25 11:14        17272        ----a-w-        c:\windows\system32\sdnclean64.exe

2013-09-18 11:14 . 2013-09-19 00:54        --------        d-----w-        c:\program files (x86)\Spybot - Search & Destroy 2

2013-09-18 10:50 . 2013-09-05 05:32        9694160        ----a-w-        c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll

2013-09-17 11:00 . 2013-09-19 00:50        --------        d-----w-        c:\program files (x86)\LyriXeeker-1

2013-09-07 12:01 . 2013-09-07 12:01        965008        ------w-        c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{AE614C5E-E9B3-4451-B8AD-473F01ECDF0E}\gapaengine.dll

2013-09-06 08:33 . 2013-09-19 00:45        --------        d-----w-        c:\program files\Western Digital

2013-09-06 06:50 . 2013-09-06 06:50        367200        ----a-w-        c:\windows\system32\drivers\afcdp.sys

2013-09-06 06:49 . 2013-09-06 06:49        183224        ----a-w-        c:\windows\system32\drivers\tib_mounter.sys

2013-09-06 06:49 . 2013-09-06 06:49        1120032        ----a-w-        c:\windows\system32\drivers\tib.sys

2013-09-06 06:49 . 2013-09-06 06:49        161568        ----a-w-        c:\windows\system32\drivers\vididr.sys

2013-09-05 10:56 . 2013-09-19 00:48        --------        d-----w-        c:\program files (x86)\Common Files\Common Desktop Agent

2013-09-05 10:56 . 2013-09-19 00:43        --------        d-----w-        c:\program files\Common Files\Common Desktop Agent

2013-09-05 10:42 . 2013-09-19 00:54        --------        d-----w-        c:\program files (x86)\Samsung Printers

2013-09-05 10:42 . 2013-09-19 00:39        --------        d-----w-        C:\Temp

2013-09-03 13:53 . 2013-09-03 13:53        187248        ----a-w-        c:\program files (x86)\Mozilla Firefox\Plugins\nppdf32.dll

2013-09-03 11:37 . 2013-09-19 00:43        --------        d-----w-        c:\program files\iPod

2013-09-03 11:37 . 2013-09-19 00:56        --------        d-----w-        c:\programdata\34BE82C4-E596-4e99-A191-52C6199EBF69

2013-09-03 11:37 . 2013-09-19 00:50        --------        d-----w-        c:\program files (x86)\iTunes

2013-09-03 11:37 . 2013-09-19 00:43        --------        d-----w-        c:\program files\iTunes

2013-09-01 19:22 . 2013-09-19 00:55        --------        d-----w-        c:\program files (x86)\Ubisoft

2013-08-20 22:27 . 2013-08-20 22:27        20616        ----a-w-        c:\program files (x86)\Common Files\Microsoft Shared\VSTO\10.0\1031\VSTOLoaderUI.dll

2013-08-20 22:27 . 2013-08-20 22:27        10896        ----a-w-        c:\program files (x86)\Common Files\Microsoft Shared\VSTO\10.0\1031\VSTOInstallerUI.dll

.

.

.

((((((((((((((((((((((((((((((((((((   Find3M Bericht   ))))))))))))))))))))))))))))))))))))))))))))))))))))))

.

2013-09-13 16:55 . 2013-02-02 10:06        564432        ----a-w-        c:\programdata\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\integrator.exe

2013-09-13 16:47 . 2012-04-05 06:24        692616        ----a-w-        c:\windows\SysWow64\FlashPlayerApp.exe

2013-09-13 16:47 . 2012-03-26 18:22        71048        ----a-w-        c:\windows\SysWow64\FlashPlayerCPLApp.cpl

2013-09-06 06:49 . 2012-10-23 16:28        1462560        ----a-w-        c:\windows\system32\drivers\tdrpman.sys

2013-09-06 06:49 . 2012-10-23 15:45        117024        ----a-w-        c:\windows\system32\drivers\vidsflt.sys

2013-09-06 06:49 . 2012-09-06 15:53        233760        ----a-w-        c:\windows\system32\drivers\snapman.sys

2013-09-06 06:49 . 2012-10-23 15:44        108832        ----a-w-        c:\windows\system32\drivers\fltsrv.sys

2013-08-22 15:57 . 2012-06-13 16:41        941720        ------w-        c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\NISBackup\gapaengine.dll

2013-08-20 01:33 . 2013-08-20 01:33        829264        ----a-w-        c:\windows\system32\msvcr100.dll

2013-08-20 01:33 . 2013-08-20 01:33        608080        ----a-w-        c:\windows\system32\msvcp100.dll

2013-08-20 00:26 . 2013-08-20 00:26        773968        ----a-w-        c:\windows\SysWow64\msvcr100.dll

2013-08-20 00:26 . 2013-08-20 00:26        421200        ----a-w-        c:\windows\SysWow64\msvcp100.dll

2013-08-02 01:48 . 2013-09-19 11:19        44032        ----a-w-        c:\windows\apppatch\acwow64.dll

2013-06-26 17:18 . 2013-06-26 17:18        96168        ----a-w-        c:\windows\SysWow64\WindowsAccessBridge-32.dll

2013-06-26 17:17 . 2012-09-02 11:31        789416        ----a-w-        c:\windows\SysWow64\deployJava1.dll

2013-06-26 17:17 . 2012-09-02 11:31        867240        ----a-w-        c:\windows\SysWow64\npDeployJava1.dll

2006-05-03 10:06        163328        --sha-r-        c:\windows\SysWOW64\flvDX.dll

2007-02-21 11:47        31232        --sha-r-        c:\windows\SysWOW64\msfDX.dll

2008-03-16 13:30        216064        --sha-r-        c:\windows\SysWOW64\nbDX.dll

2010-01-06 22:00        107520        --sha-r-        c:\windows\SysWOW64\TAKDSDecoder.dll

.

.

((((((((((((((((((((((((((((   Autostartpunkte der Registrierung   ))))))))))))))))))))))))))))))))))))))))

.

.

*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. 

REGEDIT4

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\~\Browser Helper Objects\{11111111-1111-1111-1111-110411181156}]

2013-09-17 11:00        598528        ----a-w-        c:\program files (x86)\LyriXeeker-1\LyriXeeker-1-bho.dll

.

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro1 (ErrorConflict)]

@="{8BA85C75-763B-4103-94EB-9470F12FE0F7}"

[HKEY_CLASSES_ROOT\CLSID\{8BA85C75-763B-4103-94EB-9470F12FE0F7}]

2013-09-13 16:58        1724616        ----a-w-        c:\program files\Microsoft Office 15\root\office15\GROOVEEX.DLL

.

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro2 (SyncInProgress)]

@="{CD55129A-B1A1-438E-A425-CEBC7DC684EE}"

[HKEY_CLASSES_ROOT\CLSID\{CD55129A-B1A1-438E-A425-CEBC7DC684EE}]

2013-09-13 16:58        1724616        ----a-w-        c:\program files\Microsoft Office 15\root\office15\GROOVEEX.DLL

.

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro3 (InSync)]

@="{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}"

[HKEY_CLASSES_ROOT\CLSID\{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}]

2013-09-13 16:58        1724616        ----a-w-        c:\program files\Microsoft Office 15\root\office15\GROOVEEX.DLL

.

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"Remote Control Editor"="c:\program files (x86)\Common Files\TerraTec\Remote\TTTvRc.exe" [2013-04-15 1839616]

"updateMgr"="c:\program files (x86)\Adobe\Acrobat 7.0\Acrobat\AdobeUpdateManager.exe" [2006-03-30 313472]

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]

"Acrobat Assistant 7.0"="c:\program files (x86)\Adobe\Acrobat 7.0\Distillr\Acrotray.exe" [2008-04-23 483328]

"AcronisTibMounterMonitor"="c:\program files (x86)\Common Files\Acronis\TibMounter\TibMounterMonitor.exe" [2013-01-10 1105848]

"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2013-04-04 958576]

"Adobe Version Cue CS2"="c:\adobe\Adobe Version Cue CS2\ControlPanel\VersionCueCS2Tray.exe" [2005-04-06 856064]

"APSDaemon"="c:\program files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2013-04-21 59720]

"FreePDF Assistant"="c:\program files (x86)\FreePDF_XP\fpassist.exe" [2011-02-23 371200]

"iTunesHelper"="c:\program files (x86)\iTunes\iTunesHelper.exe" [2013-08-16 152392]

"NUSB3MON"="c:\program files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe" [2012-03-25 113288]

"PDFPrint"="c:\program files (x86)\PDF24\pdf24.exe" [2013-03-20 162856]

"Samsung PanelMgr"="c:\windows\Samsung\PanelMgr\SSMMgr.exe" [2011-07-06 688128]

"SDTray"="c:\program files (x86)\Spybot - Search & Destroy 2\SDTray.exe" [2013-07-25 5624784]

"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2013-03-12 253816]

"THX Audio Control Panel"="c:\program files (x86)\Creative\THX TruStudio Pro\THXAudioCP\THXAudio.exe" [2010-11-01 1374720]

"TrueImageMonitor.exe"="c:\program files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe" [2013-03-27 6405376]

"UpdReg"="c:\windows\UpdReg.EXE" [2000-05-10 90112]

"WD Quick View"="c:\program files (x86)\Western Digital\WD Quick View\WDDMStatus.exe" [2013-08-14 5537136]

.

c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\

Adobe Acrobat - Schnellstart.lnk - c:\windows\Installer\{AC76BA86-1033-F400-7760-100000000002}\SC_Acrobat.exe [2013-1-30 25214]

Adobe Gamma.lnk - c:\program files (x86)\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe [2005-3-16 113664]

Hotkey.lnk - c:\program files (x86)\Hotkey\Hotkey.exe [2010-11-29 2766336]

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]

"ConsentPromptBehaviorAdmin"= 5 (0x5)

"ConsentPromptBehaviorUser"= 3 (0x3)

"EnableUIADesktopToggle"= 0 (0x0)

"EnableLinkedConnections"= 1 (0x1)

.

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]

"aux1"=wdmaud.drv

.

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]

Notification Packages        REG_MULTI_SZ           scecli c:\program files\Protector Suite\psqlpwd.dll

.

R2 CECFLPKT;CECFLPKT;c:\program files (x86)\ChiconyCam\CECPLFKT.exe;c:\program files (x86)\ChiconyCam\CECPLFKT.exe [x]

R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]

R2 SDWSCService;Spybot-S&D 2 Security Center Service;c:\program files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe;c:\program files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [x]

R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x]

R3 JMCR;JMCR;c:\windows\system32\DRIVERS\jmcr.sys;c:\windows\SYSNATIVE\DRIVERS\jmcr.sys [x]

R3 MyWiFiDHCPDNS;Wireless PAN DHCP Server;c:\program files\Intel\WiFi\bin\PanDhcpDns.exe;c:\program files\Intel\WiFi\bin\PanDhcpDns.exe [x]

R3 NisDrv;Microsoft Network Inspection System;c:\windows\system32\DRIVERS\NisDrvWFP.sys;c:\windows\SYSNATIVE\DRIVERS\NisDrvWFP.sys [x]

R3 NisSrv;Microsoft-Netzwerkinspektion;c:\program files\Microsoft Security Client\NisSrv.exe;c:\program files\Microsoft Security Client\NisSrv.exe [x]

R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x]

R3 SliceDisk5;SliceDisk5;c:\program files\A-FF Find and Mount\slicedisk-x64.sys;c:\program files\A-FF Find and Mount\slicedisk-x64.sys [x]

R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]

R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys;c:\windows\SYSNATIVE\drivers\TsUsbGD.sys [x]

S0 fltsrv;Acronis Storage Filter Management;c:\windows\system32\DRIVERS\fltsrv.sys;c:\windows\SYSNATIVE\DRIVERS\fltsrv.sys [x]

S0 nvpciflt;nvpciflt;c:\windows\system32\DRIVERS\nvpciflt.sys;c:\windows\SYSNATIVE\DRIVERS\nvpciflt.sys [x]

S0 tib;Acronis TIB Manager;c:\windows\system32\DRIVERS\tib.sys;c:\windows\SYSNATIVE\DRIVERS\tib.sys [x]

S0 tib_mounter;Acronis TIB Mounter;c:\windows\system32\DRIVERS\tib_mounter.sys;c:\windows\SYSNATIVE\DRIVERS\tib_mounter.sys [x]

S0 vididr;Acronis Virtual Disk;c:\windows\system32\DRIVERS\vididr.sys;c:\windows\SYSNATIVE\DRIVERS\vididr.sys [x]

S0 vidsflt;Acronis Disk Storage Filter;c:\windows\system32\DRIVERS\vidsflt.sys;c:\windows\SYSNATIVE\DRIVERS\vidsflt.sys [x]

S2 afcdpsrv;Acronis Nonstop Backup Service;c:\program files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe;c:\program files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe [x]

S2 AMPPALR3;Intel® Centrino® Wireless Bluetooth® 3.0 + High Speed Service;c:\program files\Intel\BluetoothHS\BTHSAmpPalService.exe;c:\program files\Intel\BluetoothHS\BTHSAmpPalService.exe [x]

S2 BTHSSecurityMgr;Intel(R) Centrino(R) Wireless Bluetooth(R) 3.0 + High Speed Security Service;c:\program files\Intel\BluetoothHS\BTHSSecurityMgr.exe;c:\program files\Intel\BluetoothHS\BTHSSecurityMgr.exe [x]

S2 EyeTV Netstream;EyeTV Netstream;c:\program files (x86)\Elgato\EyeTV Netstream\EyeTVNetstreamSvc.exe;c:\program files (x86)\Elgato\EyeTV Netstream\EyeTVNetstreamSvc.exe [x]

S2 OfficeSvc;Microsoft Office-Dienst;c:\program files\Microsoft Office 15\ClientX64\integratedoffice.exe;c:\program files\Microsoft Office 15\ClientX64\integratedoffice.exe [x]

S2 PowerBiosServer;PowerBiosServer;c:\program files (x86)\Hotkey\PowerBiosServer.exe;c:\program files (x86)\Hotkey\PowerBiosServer.exe [x]

S2 SDScannerService;Spybot-S&D 2 Scanner Service;c:\program files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe;c:\program files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [x]

S2 SDUpdateService;Spybot-S&D 2 Updating Service;c:\program files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe;c:\program files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [x]

S2 SSPORT;SSPORT;c:\windows\system32\Drivers\SSPORT.sys;c:\windows\SYSNATIVE\Drivers\SSPORT.sys [x]

S2 syncagentsrv;Acronis Sync Agent Service;c:\program files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe;c:\program files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe [x]

S2 TeamViewer8;TeamViewer 8;c:\program files (x86)\TeamViewer\Version8\TeamViewer_Service.exe;c:\program files (x86)\TeamViewer\Version8\TeamViewer_Service.exe [x]

S2 UNS;Intel(R) Management and Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [x]

S2 WDBackup;WD Backup;c:\program files (x86)\Western Digital\WD SmartWare\WDBackupEngine.exe;c:\program files (x86)\Western Digital\WD SmartWare\WDBackupEngine.exe [x]

S2 WDDriveService;WD Drive Manager;c:\program files (x86)\Western Digital\WD Drive Manager\WDDriveService.exe;c:\program files (x86)\Western Digital\WD Drive Manager\WDDriveService.exe [x]

S3 afcdp;afcdp;c:\windows\system32\DRIVERS\afcdp.sys;c:\windows\SYSNATIVE\DRIVERS\afcdp.sys [x]

S3 IntcDAud;Intel(R) Display-Audio;c:\windows\system32\DRIVERS\IntcDAud.sys;c:\windows\SYSNATIVE\DRIVERS\IntcDAud.sys [x]

S3 JME;JMicron Ethernet Adapter NDIS6.20 Driver (Amd64 Bits);c:\windows\system32\DRIVERS\JME.sys;c:\windows\SYSNATIVE\DRIVERS\JME.sys [x]

S3 nusb3hub;Renesas Electronics USB 3.0 Hub Driver;c:\windows\system32\DRIVERS\nusb3hub.sys;c:\windows\SYSNATIVE\DRIVERS\nusb3hub.sys [x]

S3 nusb3xhc;Renesas Electronics USB 3.0 Host Controller Driver;c:\windows\system32\DRIVERS\nusb3xhc.sys;c:\windows\SYSNATIVE\DRIVERS\nusb3xhc.sys [x]

.

.

--- Andere Dienste/Treiber im Speicher ---

.

*NewlyCreated* - KWTIRAOC

*Deregistered* - kwtiraoc

.

Inhalt des "geplante Tasks" Ordners

.

2013-09-19 c:\windows\Tasks\Adobe Flash Player Updater.job

- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-05 16:47]

.

2013-09-19 c:\windows\Tasks\LyriXeeker-1-codedownloader.job

- c:\program files (x86)\LyriXeeker-1\LyriXeeker-1-codedownloader.exe [2013-09-17 11:00]

.

2013-09-19 c:\windows\Tasks\LyriXeeker-1-enabler.job

- c:\program files (x86)\LyriXeeker-1\LyriXeeker-1-enabler.exe [2013-09-17 11:00]

.

2013-09-19 c:\windows\Tasks\LyriXeeker-1-firefoxinstaller.job

- c:\program files (x86)\LyriXeeker-1\LyriXeeker-1-firefoxinstaller.exe [2013-09-17 11:00]

.

2013-09-19 c:\windows\Tasks\LyriXeeker-1-updater.job

- c:\program files (x86)\LyriXeeker-1\LyriXeeker-1-updater.exe [2013-09-17 11:01]

.

.

--------- X64 Entries -----------

.

.

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{11111111-1111-1111-1111-110411181156}]

2013-09-17 11:00        940544        ----a-w-        c:\program files (x86)\LyriXeeker-1\LyriXeeker-1-bho64.dll

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro1 (ErrorConflict)]

@="{8BA85C75-763B-4103-94EB-9470F12FE0F7}"

[HKEY_CLASSES_ROOT\CLSID\{8BA85C75-763B-4103-94EB-9470F12FE0F7}]

2013-09-13 16:58        2328776        ----a-w-        c:\program files\Microsoft Office 15\root\vfs\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro2 (SyncInProgress)]

@="{CD55129A-B1A1-438E-A425-CEBC7DC684EE}"

[HKEY_CLASSES_ROOT\CLSID\{CD55129A-B1A1-438E-A425-CEBC7DC684EE}]

2013-09-13 16:58        2328776        ----a-w-        c:\program files\Microsoft Office 15\root\vfs\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro3 (InSync)]

@="{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}"

[HKEY_CLASSES_ROOT\CLSID\{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}]

2013-09-13 16:58        2328776        ----a-w-        c:\program files\Microsoft Office 15\root\vfs\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\AcronisSyncError]

@="{934BC6C0-FEC2-4df5-A100-961DE2C8A0ED}"

[HKEY_CLASSES_ROOT\CLSID\{934BC6C0-FEC2-4df5-A100-961DE2C8A0ED}]

2013-03-27 22:53        2827832        ----a-w-        c:\program files (x86)\Acronis\TrueImageHome\tishell64.dll

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\AcronisSyncInProgress]

@="{00F848DC-B1D4-4892-9C25-CAADC86A215D}"

[HKEY_CLASSES_ROOT\CLSID\{00F848DC-B1D4-4892-9C25-CAADC86A215D}]

2013-03-27 22:53        2827832        ----a-w-        c:\program files (x86)\Acronis\TrueImageHome\tishell64.dll

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\AcronisSyncOk]

@="{71573297-552E-46fc-BE3D-3DFAF88D47B7}"

[HKEY_CLASSES_ROOT\CLSID\{71573297-552E-46fc-BE3D-3DFAF88D47B7}]

2013-03-27 22:53        2827832        ----a-w-        c:\program files (x86)\Acronis\TrueImageHome\tishell64.dll

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\UEAFOverlay]

@="{F2F31467-B1AC-4df0-AE79-FD5FA085E22B}"

[HKEY_CLASSES_ROOT\CLSID\{F2F31467-B1AC-4df0-AE79-FD5FA085E22B}]

2010-04-27 13:48        5947656        ----a-w-        c:\program files\Protector Suite\farchns.dll

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\UEAFOverlayOpen]

@="{A3E208F7-0E3A-4182-A7A6-B169D5D691AA}"

[HKEY_CLASSES_ROOT\CLSID\{A3E208F7-0E3A-4182-A7A6-B169D5D691AA}]

2010-04-27 13:48        5947656        ----a-w-        c:\program files\Protector Suite\farchns.dll

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"IgfxTray"="c:\windows\system32\igfxtray.exe" [2012-12-14 172144]

"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2012-12-14 399984]

"Persistence"="c:\windows\system32\igfxpers.exe" [2012-12-14 441968]

"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2012-03-25 11544680]

"Acronis Scheduler2 Service"="c:\program files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe" [2013-02-15 517912]

"CDAServer"="c:\program files\Common Files\Common Desktop Agent\CDASrv.exe" [2012-03-09 462712]

"CECAPLF"="c:\program files (x86)\ChiconyCam\CECAPLF.exe" [2010-09-17 121456]

"IntelPAN"="c:\program files\Common Files\Intel\WirelessCommon\iFrmewrk.exe" [2011-07-27 1935120]

"MSC"="c:\program files\Microsoft Security Client\msseces.exe" [2013-06-20 1356240]

"PSQLLauncher"="c:\program files\Protector Suite\launcher.exe" [2010-04-27 84744]

"THXCfg64"="c:\windows\system32\THXCfg64.dll" [2010-09-14 25600]

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]

"AppInit_DLLs"=c:\windows\System32\nvinitx.dll

.

------- Zusätzlicher Suchlauf -------

.

uLocal Page = c:\windows\system32\blank.htm

mLocal Page = c:\windows\SysWOW64\blank.htm

uInternet Settings,ProxyOverride = *.local

IE: An OneNote s&enden - c:\progra~2\MICROS~2\Office14\ONBttnIE.dll/105

IE: Ausgewählte Verknüpfungen in Adobe PDF konvertieren - c:\program files (x86)\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html

IE: Ausgewählte Verknüpfungen in vorhandene PDF-Datei konvertieren - c:\program files (x86)\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html

IE: Auswahl in Adobe PDF konvertieren - c:\program files (x86)\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html

IE: Auswahl in vorhandene PDF-Datei konvertieren - c:\program files (x86)\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html

IE: E&xport to Microsoft Excel - c:\program files\Microsoft Office 15\Root\Office15\EXCEL.EXE/3000

IE: In Adobe PDF konvertieren - c:\program files (x86)\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html

IE: In vorhandene PDF-Datei konvertieren - c:\program files (x86)\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html

IE: Nach Microsoft E&xcel exportieren - c:\progra~2\MICROS~2\Office14\EXCEL.EXE/3000

IE: Se&nd to OneNote - c:\program files\Microsoft Office 15\Root\Office15\ONBttnIE.dll/105

IE: Verknüpfungsziel in Adobe PDF konvertieren - c:\program files (x86)\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html

IE: Verknüpfungsziel in vorhandene PDF-Datei konvertieren - c:\program files (x86)\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html

Trusted Zone: dell.com

Trusted Zone: samsungsetup.com\www

TCP: DhcpNameServer = 192.168.0.1

FF - ProfilePath - c:\users\****\AppData\Roaming\Mozilla\Firefox\Profiles\x0s0w4c4.default\

FF - prefs.js: browser.startup.homepage - hxxp://www.google.de

.

- - - - Entfernte verwaiste Registrierungseinträge - - - -

.

Wow6432Node-HKLM-Run-<NO NAME> - (no file)

Notify-SDWinLogon - SDWinLogon.dll

HKLM-Run-SynTPEnh - c:\program files (x86)\Synaptics\SynTP\SynTPEnh.exe

AddRemove-Adobe Shockwave Player - c:\windows\system32\Adobe\Shockwave 11\uninstaller.exe

.

.

.

--------------------- Gesperrte Registrierungsschluessel ---------------------

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]

@Denied: (A 2) (Everyone)

@="FlashBroker"

"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_8_800_174_ActiveX.exe,-101"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]

"Enabled"=dword:00000001

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]

@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_8_800_174_ActiveX.exe"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]

@Denied: (A 2) (Everyone)

@="IFlashBroker5"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]

@="{00020424-0000-0000-C000-000000000046}"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

"Version"="1.0"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]

@Denied: (A 2) (Everyone)

@="FlashBroker"

"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_8_800_174_ActiveX.exe,-101"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]

"Enabled"=dword:00000001

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_8_800_174_ActiveX.exe"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]

@Denied: (A 2) (Everyone)

@="Shockwave Flash Object"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_8_800_174.ocx"

"ThreadingModel"="Apartment"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]

@="0"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]

@="ShockwaveFlash.ShockwaveFlash.11"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_8_800_174.ocx, 1"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]

@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]

@="1.0"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]

@="ShockwaveFlash.ShockwaveFlash"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]

@Denied: (A 2) (Everyone)

@="Macromedia Flash Factory Object"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_8_800_174.ocx"

"ThreadingModel"="Apartment"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]

@="FlashFactory.FlashFactory.1"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_8_800_174.ocx, 1"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]

@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]

@="1.0"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]

@="FlashFactory.FlashFactory"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]

@Denied: (A 2) (Everyone)

@="IFlashBroker5"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]

@="{00020424-0000-0000-C000-000000000046}"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

"Version"="1.0"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Office\Common\Smart Tag\Actions\{B7EFF951-E52F-45CC-9EF7-57124F2177CC}]

@Denied: (A) (Everyone)

"Solution"="{15727DE6-F92D-4E46-ACB4-0E2C58B31A18}"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3]

@Denied: (A) (Everyone)

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3\0]

"Key"="ActionsPane3"

"Location"="c:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTO\\ActionsPane3.xsd"

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]

@Denied: (Full) (Everyone)

.

Zeit der Fertigstellung: 2013-09-19  17:08:06

ComboFix-quarantined-files.txt  2013-09-19 15:08

.

Vor Suchlauf: 16 Verzeichnis(se), 255.204.081.664 Bytes frei

Nach Suchlauf: 23 Verzeichnis(se), 254.924.365.824 Bytes frei

.

- - End Of File - - 182A7F9CE77074901B0AC56415A49C1F

A36C5E4F47E84449FF07ED3517B43A31

Servus,

ok, gut. So geht es weiter:

Schritt 1
Downloade Dir bitte

AdwCleaner auf deinen Desktop.

Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
Starte die AdwCleaner.exe mit einem Doppelklick.
Stimme den Nutzungsbedingungen zu.
Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
- "Tracing" Schlüssel löschen
- Winsock Einstellungen zurücksetzen
- Proxy Einstellungen zurücksetzen
- Internet Explorer Richtlinien zurücksetzen
- Chrome Richtlinien zurücksetzen
- Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Schritt 2

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
Drücke eine beliebige Taste, um das Tool zu starten.
Je nach System kann der Scan eine Weile dauern.
Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.

Schritt 3
Downloade Dir bitte

Malwarebytes Anti-Malware

Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
Starte Malwarebytes' Anti-Malware (MBAM).
Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.

Bitte poste mit deiner nächsten Antwort

die Logdatei von AdwCleaner,
die Logdatei von JRT,
die Logdatei von MBAM.

Danke für's Feedback. Hier die Ergebnisse:

AdwCleaner[S0]

Code:

# AdwCleaner v3.004 - Bericht erstellt am 20/09/2013 um 01:31:52

# Updated 15/09/2013 von Xplode

# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)

# Benutzername : **** - ****-PC

# Gestartet von : C:\Users\****\Desktop\adwcleaner.exe

# Option : Löschen
 

***** [ Dienste ] *****
 
 

***** [ Dateien / Ordner ] *****
 
 

***** [ Verknüpfungen ] *****
 
 

***** [ Registrierungsdatenbank ] *****
 

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\secman.DLL

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CrossriderApp0041856.BHO

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CrossriderApp0041856.BHO.1

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CrossriderApp0041856.Sandbox

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CrossriderApp0041856.Sandbox.1

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{4D076AB4-7562-427A-B5D2-BD96E19DEE56}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{20E1481B-E285-4ABC-ADC7-AE24842B81CD}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{826D7151-8D99-434B-8540-082B8C2AE556}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110411181156}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{0194532A-A99C-4337-937E-2A452C8957BE}

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110411181156}

Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{11111111-1111-1111-1111-110411181156}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{11111111-1111-1111-1111-110411181156}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110411181156}

Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110411181156}

Schlüssel Gelöscht : HKCU\Software\Conduit

Schlüssel Gelöscht : HKCU\Software\InstallCore

Schlüssel Gelöscht : HKCU\Software\InstalledBrowserExtensions

Schlüssel Gelöscht : HKCU\Software\OCS

Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\Crossrider

Schlüssel Gelöscht : HKLM\Software\Conduit
 

***** [ Browser ] *****
 

-\\ Internet Explorer v9.0.8112.16506
 
 

-\\ Mozilla Firefox v23.0.1 (de)
 

[ Datei : C:\Users\****\AppData\Roaming\Mozilla\Firefox\Profiles\x0s0w4c4.default\prefs.js ]
 

Zeile gelöscht : user_pref("extensions.crossrider.bic", "14130a91cb231d503ede750cf13c9080");
 

*************************
 

AdwCleaner[R0].txt - [3047 octets] - [20/09/2013 01:31:18]

AdwCleaner[S0].txt - [2741 octets] - [20/09/2013 01:31:52]
 

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [2801 octets] ##########

JRT

Code:

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Junkware Removal Tool (JRT) by Thisisu

Version: 6.0.1 (09.15.2013:1)

OS: Windows 7 Home Premium x64

Ran by **** on 20.09.2013 at  1:37:53,27

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 
 
 
 

~~~ Services
 
 
 

~~~ Registry Values
 
 
 

~~~ Registry Keys
 

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{22222222-2222-2222-2222-220422182256}

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{55555555-5555-5555-5555-550455185556}

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{66666666-6666-6666-6666-660466186656}

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\TypeLib\{44444444-4444-4444-4444-440444184456}

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{22222222-2222-2222-2222-220422182256}

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\Interface\{55555555-5555-5555-5555-550455185556}

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\Interface\{66666666-6666-6666-6666-660466186656}

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\TypeLib\{44444444-4444-4444-4444-440444184456}

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Interface\{55555555-5555-5555-5555-550455185556}

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Interface\{66666666-6666-6666-6666-660466186656}

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\TypeLib\{44444444-4444-4444-4444-440444184456}

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Wow6432Node\Interface\{55555555-5555-5555-5555-550455185556}

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Wow6432Node\Interface\{66666666-6666-6666-6666-660466186656}

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Wow6432Node\TypeLib\{44444444-4444-4444-4444-440444184456}
 
 
 

~~~ Files
 
 
 

~~~ Folders
 
 
 

~~~ FireFox
 

Emptied folder: C:\Users\****\AppData\Roaming\mozilla\firefox\profiles\x0s0w4c4.default\minidumps [25 files]
 
 
 

~~~ Event Viewer Logs were cleared
 
 
 
 
 

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Scan was completed on 20.09.2013 at  1:43:01,27

End of JRT log

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

mbam-log-2013-09-20 (01-47-24)

Code:

Malwarebytes Anti-Malware (Test) 1.75.0.1300

www.malwarebytes.org
 

Datenbank Version: v2013.09.19.08
 

Windows 7 Service Pack 1 x64 NTFS

Internet Explorer 9.0.8112.16421

**** :: ****-PC [Administrator]
 

Schutz: Aktiviert
 

20.09.2013 01:47:24

mbam-log-2013-09-20 (01-47-24).txt
 

Art des Suchlaufs: Quick-Scan

Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM

Deaktivierte Suchlaufeinstellungen: P2P

Durchsuchte Objekte: 261393

Laufzeit: 5 Minute(n), 25 Sekunde(n)
 

Infizierte Speicherprozesse: 0

(Keine bösartigen Objekte gefunden)
 

Infizierte Speichermodule: 0

(Keine bösartigen Objekte gefunden)
 

Infizierte Registrierungsschlüssel: 0

(Keine bösartigen Objekte gefunden)
 

Infizierte Registrierungswerte: 0

(Keine bösartigen Objekte gefunden)
 

Infizierte Dateiobjekte der Registrierung: 0

(Keine bösartigen Objekte gefunden)
 

Infizierte Verzeichnisse: 0

(Keine bösartigen Objekte gefunden)
 

Infizierte Dateien: 0

(Keine bösartigen Objekte gefunden)
 

(Ende)

Servus,

Schritt 1
Kontrollscan mit FRST
Führe wie zuvor beschrieben einen Scan mit FRST aus.
Setze dazu eine Haken bei Addition.txt rechts unten und klicke auf Scan.
Es werden wieder zwei Logdateien erzeugt. Poste mir diese.

Schritt 2
Lade dir die passende Version von SystemLook vom folgenden Spiegel herunter und speichere das Tool auf dem Desktop:
SystemLook (32 bit) | SystemLook (64 bit)

Doppelklicke auf die SystemLook.exe, um das Tool zu starten.
Kopiere den Inhalt der folgenden Codebox in das Textfeld des Tools:

Code:

:filefind *LyriXeeker* :folderfind *LyriXeeker* :regfind LyriXeeker
Klicke nun auf den Button Look, um den Scan zu starten.
Der Suchlauf kann einige Zeit dauern.
Wenn der Suchlauf beendet ist, wird sich dein Editor mit den Ergebnissen öffnen, poste diese in deinen Thread.
Die Ergebnisse werden auch auf dem Desktop als SystemLook.txt gespeichert.

Bitte poste mit deiner nächsten Antwort

die beiden Logdateien von FRST,
die Logdatei von SystemLook.

Beides erledigt.

FRST (Teil 1)

Code:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 19-09-2013 01

Ran by **** (administrator) on ****-PC on 20-09-2013 23:23:53

Running from C:\Users\****\Desktop

Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard

Internet Explorer Version 10

Boot Mode: Normal
 

==================== Processes (Whitelisted) =================
 

(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe

(Microsoft Corporation) C:\Windows\system32\WLANExt.exe

(Acronis) C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe

(Adobe Systems Incorporated) c:\Adobe\Adobe Version Cue CS2\bin\VersionCueCS2.exe

(Acronis) C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe

(Intel Corporation) C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe

(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe

(Intel(R) Corporation) C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe

(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe

(Elgato Systems GmbH) C:\Program Files (x86)\Elgato\EyeTV Netstream\EyeTVNetstreamSvc.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe

(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\integratedoffice.exe

() C:\Program Files (x86)\Hotkey\PowerBiosServer.exe

(Protexis Inc.) c:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe

(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe

(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe

() c:\Adobe\Adobe Version Cue CS2\data\database\bin\mysqld-nt.exe

(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe

(Western Digital Technologies, Inc.) C:\Program Files (x86)\Western Digital\WD Drive Manager\WDDriveService.exe

(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe

(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe

(Western Digital Technologies, Inc.) C:\Program Files (x86)\Western Digital\WD SmartWare\WDBackupEngine.exe

(Microsoft Corporation) c:\Program Files\Microsoft Security Client\NisSrv.exe

(UPEK Inc.) C:\Program Files\Protector Suite\upeksvr.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe

(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe

(Acronis) C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe

(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

(Intel Corporation) C:\Windows\System32\igfxtray.exe

(Intel Corporation) C:\Windows\System32\hkcmd.exe

(Intel Corporation) C:\Windows\System32\igfxpers.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe

(Acronis) C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe

() C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe

(Chicony) C:\Program Files (x86)\ChiconyCam\CECAPLF.exe

(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe

(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe

(TerraTec Electronic GmbH) C:\Program Files (x86)\Common Files\TerraTec\Remote\TTTvRc.exe

() C:\Program Files (x86)\Hotkey\Hotkey.exe

(UPEK Inc.) C:\Program Files\Protector Suite\psqltray.exe

(Adobe Systems Inc.) C:\Program Files (x86)\Adobe\Acrobat 7.0\Distillr\acrotray.exe

(Acronis) C:\Program Files (x86)\Common Files\Acronis\TibMounter\TibMounterMonitor.exe

(Adobe Sytems Incorporated) C:\Adobe\Adobe Version Cue CS2\ControlPanel\VersionCueCS2Tray.exe

(shbox.de) C:\Program Files (x86)\FreePDF_XP\fpassist.exe

(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe

(Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe

(Geek Software GmbH) C:\Program Files (x86)\PDF24\pdf24.exe

() C:\Windows\Samsung\PanelMgr\SSMMgr.exe

(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe

(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe

(Creative Technology Ltd) C:\Program Files (x86)\Creative\THX TruStudio Pro\THXAudioCP\THXAudio.exe

(Acronis) C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe

(Western Digital Technologies, Inc.) C:\Program Files (x86)\Western Digital\WD Quick View\WDDMStatus.exe

() C:\Windows\Samsung\PanelMgr\caller64.exe

(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe

(Microsoft Corporation) C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe

(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe

(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer.exe

(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\tv_w32.exe

(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\tv_x64.exe

(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_8_800_168.exe

(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_8_800_168.exe
 

==================== Registry (Whitelisted) ==================
 

HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2052392 2010-02-11] (Synaptics Incorporated)

HKLM\...\Run: [HotKeysCmds] - C:\Windows\system32\hkcmd.exe [ ] ()

HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11544680 2012-03-25] (Realtek Semiconductor)

HKLM\...\Run: [Acronis Scheduler2 Service] - C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe [517912 2013-02-15] (Acronis)

HKLM\...\Run: [CDAServer] - C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe [462712 2012-03-09] ()

HKLM\...\Run: [CECAPLF] - C:\Program Files (x86)\ChiconyCam\CECAPLF.exe [121456 2010-09-17] (Chicony)

HKLM\...\Run: [IntelPAN] - C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe [1935120 2011-07-27] (Intel(R) Corporation)

HKLM\...\Run: [MSC] - C:\Program Files\Microsoft Security Client\msseces.exe [1356240 2013-06-20] (Microsoft Corporation)

HKLM\...\Run: [PSQLLauncher] - c:\Program Files\Protector Suite\launcher.exe [84744 2010-04-27] (UPEK Inc.)

HKLM\...\Run: [THXCfg64] - C:\Windows\system32\RunDLL32.exe C:\Windows\system32\THXCfg64.dll,RunDLLEntry THXCfg64

Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)

Winlogon\Notify\psfus: c:\Program Files\Protector Suite\psqlpwd.dll (UPEK Inc.)

HKCU\...\Run: [Remote Control Editor] - C:\Program Files (x86)\Common Files\TerraTec\Remote\TTTvRc.exe [1839616 2013-04-15] (TerraTec Electronic GmbH)

HKCU\...\Run: [updateMgr] - C:\Program Files (x86)\Adobe\Acrobat 7.0\Acrobat\AdobeUpdateManager.exe [313472 2006-03-30] (Adobe Systems Incorporated)

HKLM-x32\...\Run: [] -  [x]

HKLM-x32\...\Run: [Acrobat Assistant 7.0] - C:\Program Files (x86)\Adobe\Acrobat 7.0\Distillr\Acrotray.exe [483328 2008-04-23] (Adobe Systems Inc.)

HKLM-x32\...\Run: [AcronisTibMounterMonitor] - C:\Program Files (x86)\Common Files\Acronis\TibMounter\TibMounterMonitor.exe [1105848 2013-01-10] (Acronis)

HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)

HKLM-x32\...\Run: [Adobe Version Cue CS2] - c:\Adobe\Adobe Version Cue CS2\ControlPanel\VersionCueCS2Tray.exe [856064 2005-04-06] (Adobe Sytems Incorporated)

HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)

HKLM-x32\...\Run: [FreePDF Assistant] - C:\Program Files (x86)\FreePDF_XP\fpassist.exe [371200 2011-02-23] (shbox.de)

HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-08-16] (Apple Inc.)

HKLM-x32\...\Run: [NUSB3MON] - C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [113288 2012-03-25] (Renesas Electronics Corporation)

HKLM-x32\...\Run: [PDFPrint] - C:\Program Files (x86)\PDF24\pdf24.exe [162856 2013-03-20] (Geek Software GmbH)

HKLM-x32\...\Run: [Samsung PanelMgr] - C:\Windows\Samsung\PanelMgr\SSMMgr.exe [688128 2011-07-06] ()

HKLM-x32\...\Run: [SDTray] - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [5624784 2013-07-25] (Safer-Networking Ltd.)

HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation)

HKLM-x32\...\Run: [THX Audio Control Panel] - C:\Program Files (x86)\Creative\THX TruStudio Pro\THXAudioCP\THXAudio.exe [1374720 2010-11-01] (Creative Technology Ltd)

HKLM-x32\...\Run: [TrueImageMonitor.exe] - C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe [6405376 2013-03-28] (Acronis)

HKLM-x32\...\Run: [UpdReg] - C:\Windows\UpdReg.EXE [90112 2000-05-11] (Creative Technology Ltd.)

HKLM-x32\...\Run: [WD Quick View] - C:\Program Files (x86)\Western Digital\WD Quick View\WDDMStatus.exe [5537136 2013-08-14] (Western Digital Technologies, Inc.)

HKU\UpdatusUser\...\RunOnce: [WAB Migrate] - C:\Program Files\Windows Mail\wab.exe [516096 2010-11-21] (Microsoft Corporation)

AppInit_DLLs: C:\Windows\System32\nvinitx.dll [246024 2012-12-29] (NVIDIA Corporation)

Lsa: [Notification Packages] scecli c:\Program Files\Protector Suite\psqlpwd.dll
 

==================== Internet (Whitelisted) ====================
 

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://de.msn.com/?ocid=OIE9MSE

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xBD07CED6C30ACD01

BHO: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)

BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)

BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)

BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)

BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)

BHO-x32: Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)

BHO-x32: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office 15\root\Office15\OCHelper.dll (Microsoft Corporation)

BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)

BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)

BHO-x32: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files (x86)\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)

BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office 15\root\Office15\URLREDIR.DLL (Microsoft Corporation)

BHO-x32: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL (Microsoft Corporation)

BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

Toolbar: HKLM-x32 - Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)

Toolbar: HKLM-x32 - TerraTec Home Cinema - {AD6E6555-FB2C-47D4-8339-3E2965509877} - C:\Program Files (x86)\TerraTec\TerraTec Home Cinema\THCDeskBand.dll (TerraTec Electronic GmbH)

Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL (Microsoft Corporation)

Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)

Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
 

FireFox:

========

FF ProfilePath: C:\Users\****\AppData\Roaming\Mozilla\Firefox\Profiles\x0s0w4c4.default

FF Homepage: hxxp://www.google.de

FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_168.dll ()

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)

FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)

FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_168.dll ()

FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\system32\Adobe\Director\np32dsw.dll No File

FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()

FF Plugin-x32: @java.com/DTPlugin,version=10.25.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)

FF Plugin-x32: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

FF Plugin-x32: @microsoft.com/Lync,version=15.0 - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll (Microsoft Corporation)

FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)

FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3505.0912 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin-x32: @videolan.org/vlc,version=2.0.1 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)

FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml

FF Extension: No Name - C:\Users\****\AppData\Roaming\Mozilla\Firefox\Profiles\x0s0w4c4.default\Extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com

FF Extension: No Name - C:\Users\****\AppData\Roaming\Mozilla\Firefox\Profiles\x0s0w4c4.default\Extensions\{ce7e73df-6a44-4028-8079-5927a588c948}.xpi

FF Extension: No Name - C:\Users\****\AppData\Roaming\Mozilla\Firefox\Profiles\x0s0w4c4.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
 

==================== Services (Whitelisted) =================
 

S3 Adobe LM Service; C:\Program Files (x86)\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [72704 2013-01-30] (Adobe Systems)

R2 Adobe Version Cue CS2; c:\Adobe\Adobe Version Cue CS2\bin\VersionCueCS2.exe [163840 2005-04-06] (Adobe Systems Incorporated)

S2 CECFLPKT; C:\Program Files (x86)\ChiconyCam\CECPLFKT.exe [84592 2010-09-09] (Chicony Electronics Co., Ltd.)

R2 EyeTV Netstream; C:\Program Files (x86)\Elgato\EyeTV Netstream\EyeTVNetstreamSvc.exe [399944 2012-02-10] (Elgato Systems GmbH)

R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)

R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)

R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [23808 2013-06-20] (Microsoft Corporation)

S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [340240 2011-07-27] ()

R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [366600 2013-06-20] (Microsoft Corporation)

R2 OfficeSvc; C:\Program Files\Microsoft Office 15\ClientX64\integratedoffice.exe [1901752 2013-07-22] (Microsoft Corporation)

R2 PowerBiosServer; C:\Program Files (x86)\Hotkey\PowerBiosServer.exe [32768 2010-11-18] ()

R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1817560 2013-05-16] (Safer-Networking Ltd.)

R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [1033688 2013-05-16] (Safer-Networking Ltd.)

S2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [171928 2013-05-15] (Safer-Networking Ltd.)

R2 WDBackup; C:\Program Files (x86)\Western Digital\WD SmartWare\WDBackupEngine.exe [1042808 2013-08-14] (Western Digital Technologies, Inc.)

R2 WDDriveService; C:\Program Files (x86)\Western Digital\WD Drive Manager\WDDriveService.exe [270704 2013-08-14] (Western Digital Technologies, Inc.)
 

==================== Drivers (Whitelisted) ====================
 

R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)

R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)

R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [247216 2013-06-18] (Microsoft Corporation)

R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [139616 2013-06-18] (Microsoft Corporation)

S3 SliceDisk5; C:\Program Files\A-FF Find and Mount\slicedisk-x64.sys [31824 2011-02-25] (Atola)

S3 SliceDisk5; C:\Program Files\A-FF Find and Mount\slicedisk-x64.sys [31824 2011-02-25] (Atola)

R0 tib; C:\Windows\System32\DRIVERS\tib.sys [1120032 2013-09-06] (Acronis International GmbH)

R0 tib_mounter; C:\Windows\System32\DRIVERS\tib_mounter.sys [183224 2013-09-06] (Acronis)

R0 vidsflt; C:\Windows\System32\DRIVERS\vidsflt.sys [117024 2013-09-06] (Acronis International GmbH)

U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)

S3 catchme; \??\C:\ComboFix\catchme.sys [x]
 

==================== NetSvcs (Whitelisted) ===================
 
 

==================== One Month Created Files and Folders ========
 

2013-09-20 23:21 - 2013-09-20 23:21 - 01950622 _____ (Farbar) C:\Users\****\Desktop\FRST64.exe

2013-09-20 18:52 - 2013-09-20 18:52 - 19246592 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 15404544 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 14332928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 03959296 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 02876928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb

2013-09-20 18:52 - 2013-09-20 18:52 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2013-09-20 18:52 - 2013-09-20 18:52 - 02647040 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 02048000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 01509376 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2013-09-20 18:52 - 2013-09-20 18:52 - 01441280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl

2013-09-20 18:52 - 2013-09-20 18:52 - 01400416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat

2013-09-20 18:52 - 2013-09-20 18:52 - 01400416 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat

2013-09-20 18:52 - 2013-09-20 18:52 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 01054720 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe

2013-09-20 18:52 - 2013-09-20 18:52 - 00905728 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00762368 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00719360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00629248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00599552 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00523264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00452096 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00441856 _____ (Microsoft Corporation) C:\Windows\system32\html.iec

2013-09-20 18:52 - 2013-09-20 18:52 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00361984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec

2013-09-20 18:52 - 2013-09-20 18:52 - 00357888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00281600 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00270848 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00247296 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00242200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\url.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00232960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00226816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00226304 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00216064 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00204800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00185344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00173568 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe

2013-09-20 18:52 - 2013-09-20 18:52 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe

2013-09-20 18:52 - 2013-09-20 18:52 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00158720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00150528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe

2013-09-20 18:52 - 2013-09-20 18:52 - 00149504 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00144896 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe

2013-09-20 18:52 - 2013-09-20 18:52 - 00138752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe

2013-09-20 18:52 - 2013-09-20 18:52 - 00137216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe

2013-09-20 18:52 - 2013-09-20 18:52 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00125440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00117248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00110592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00097280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe

2013-09-20 18:52 - 2013-09-20 18:52 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe

2013-09-20 18:52 - 2013-09-20 18:52 - 00082432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00079872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx

2013-09-20 18:52 - 2013-09-20 18:52 - 00073728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe

2013-09-20 18:52 - 2013-09-20 18:52 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe

2013-09-20 18:52 - 2013-09-20 18:52 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx

2013-09-20 18:52 - 2013-09-20 18:52 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00057344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2013-09-20 18:52 - 2013-09-20 18:52 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00041984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00038400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00027648 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00023040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe

2013-09-20 18:52 - 2013-09-20 18:52 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe

2013-09-20 18:52 - 2013-09-20 18:52 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe

2013-09-20 18:52 - 2013-09-20 18:52 - 00011776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe

2013-09-20 10:46 - 2013-09-20 19:10 - 00026640 _____ C:\Windows\setupact.log

2013-09-20 10:46 - 2013-09-20 10:46 - 00000000 _____ C:\Windows\setuperr.log

2013-09-20 01:48 - 2011-03-25 05:29 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys

2013-09-20 01:48 - 2011-03-25 05:29 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys

2013-09-20 01:48 - 2011-03-25 05:29 - 00098816 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys

2013-09-20 01:48 - 2011-03-25 05:29 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys

2013-09-20 01:48 - 2011-03-25 05:29 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys

2013-09-20 01:48 - 2011-03-25 05:29 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys

2013-09-20 01:48 - 2011-03-25 05:28 - 00007936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys

2013-09-20 01:48 - 2011-03-11 08:41 - 00410496 _____ (Intel Corporation) C:\Windows\system32\Drivers\iaStorV.sys

2013-09-20 01:48 - 2011-03-11 08:41 - 00189824 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys

2013-09-20 01:48 - 2011-03-11 08:41 - 00166272 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvstor.sys

2013-09-20 01:48 - 2011-03-11 08:41 - 00148352 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvraid.sys

2013-09-20 01:48 - 2011-03-11 08:41 - 00107904 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\amdsata.sys

2013-09-20 01:48 - 2011-03-11 08:41 - 00027008 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\amdxata.sys

2013-09-20 01:48 - 2011-03-11 08:33 - 02565632 _____ (Microsoft Corporation) C:\Windows\system32\esent.dll

2013-09-20 01:48 - 2011-03-11 08:30 - 00096768 _____ (Microsoft Corporation) C:\Windows\system32\fsutil.exe

2013-09-20 01:48 - 2011-03-11 07:33 - 01699328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\esent.dll

2013-09-20 01:48 - 2011-03-11 07:31 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fsutil.exe

2013-09-20 01:48 - 2011-03-11 06:37 - 00091648 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBSTOR.SYS

2013-09-20 01:45 - 2013-09-20 01:45 - 00001113 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk

2013-09-20 01:45 - 2013-09-20 01:45 - 00000000 ____D C:\Users\****\AppData\Roaming\Malwarebytes

2013-09-20 01:45 - 2013-09-20 01:45 - 00000000 ____D C:\ProgramData\Malwarebytes

2013-09-20 01:45 - 2013-09-20 01:45 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware

2013-09-20 01:45 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys

2013-09-20 01:44 - 2013-09-20 01:44 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\****\Desktop\mbam-setup-1.75.0.1300.exe

2013-09-20 01:43 - 2013-09-20 01:43 - 00002403 _____ C:\Users\****\Desktop\JRT.txt

2013-09-20 01:37 - 2013-09-20 01:37 - 01029675 _____ (Thisisu) C:\Users\****\Desktop\JRT.exe

2013-09-20 01:37 - 2013-09-20 01:37 - 00000000 ____D C:\Windows\ERUNT

2013-09-20 01:34 - 2013-09-20 01:34 - 00002861 _____ C:\Users\****\Desktop\AdwCleaner[S0].txt

2013-09-20 01:31 - 2013-09-20 01:31 - 00000000 ____D C:\AdwCleaner

2013-09-20 01:30 - 2013-09-20 01:30 - 01039554 _____ C:\Users\****\Desktop\adwcleaner.exe

2013-09-19 17:55 - 2013-09-20 10:31 - 00000000 ____D C:\Windows\Minidump

2013-09-19 17:08 - 2013-09-19 17:11 - 00033957 _____ C:\Users\****\Desktop\ComboFix.txt

2013-09-19 16:39 - 2013-09-19 17:09 - 00000000 ____D C:\Qoobox

2013-09-19 16:39 - 2013-09-19 17:03 - 00000000 ____D C:\Windows\erdnt

2013-09-19 16:39 - 2011-06-26 08:45 - 00256000 _____ C:\Windows\PEV.exe

2013-09-19 16:39 - 2010-11-07 19:20 - 00208896 _____ C:\Windows\MBR.exe

2013-09-19 16:39 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe

2013-09-19 16:39 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe

2013-09-19 16:39 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe

2013-09-19 16:39 - 2000-08-31 02:00 - 00098816 _____ C:\Windows\sed.exe

2013-09-19 16:39 - 2000-08-31 02:00 - 00080412 _____ C:\Windows\grep.exe

2013-09-19 16:39 - 2000-08-31 02:00 - 00068096 _____ C:\Windows\zip.exe

2013-09-19 16:37 - 2013-09-19 16:37 - 05128554 ____R (Swearware) C:\Users\****\Desktop\ComboFix.exe

2013-09-19 16:29 - 2013-09-19 16:29 - 00032900 _____ C:\Users\****\Desktop\logfiles.zip

2013-09-19 14:56 - 2013-04-10 01:34 - 01247744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll

2013-09-19 14:56 - 2013-04-03 00:51 - 01643520 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll

2013-09-19 14:54 - 2013-09-19 14:58 - 00012112 _____ C:\Users\****\Desktop\Gmer.txt

2013-09-19 14:45 - 2013-09-19 14:58 - 00142885 _____ C:\Users\****\Desktop\FRST_alt.txt

2013-09-19 14:44 - 2013-09-19 14:55 - 00039322 _____ C:\Users\****\Desktop\Addition_alt.txt

2013-09-19 14:43 - 2013-09-19 14:43 - 00000000 ____D C:\FRST

2013-09-19 14:42 - 2013-09-19 14:54 - 00000474 _____ C:\Users\****\Desktop\defogger_disable.log

2013-09-19 14:42 - 2013-09-19 14:42 - 00000000 _____ C:\Users\****\defogger_reenable

2013-09-19 14:41 - 2013-09-19 14:41 - 00377856 _____ C:\Users\****\Desktop\5txgbuj5.exe

2013-09-19 14:41 - 2013-09-19 14:41 - 00050477 _____ C:\Users\****\Desktop\Defogger.exe

2013-09-19 14:34 - 2013-01-13 23:17 - 00009728 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll

2013-09-19 14:34 - 2013-01-13 23:17 - 00002560 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll

2013-09-19 14:34 - 2013-01-13 23:16 - 00010752 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll

2013-09-19 14:34 - 2013-01-13 23:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll

2013-09-19 14:34 - 2013-01-13 23:11 - 00005632 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll

2013-09-19 14:34 - 2013-01-13 23:11 - 00005632 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll

2013-09-19 14:34 - 2013-01-13 23:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-user32-l1-1-0.dll

2013-09-19 14:34 - 2013-01-13 23:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-version-l1-1-0.dll

2013-09-19 14:34 - 2013-01-13 23:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll

2013-09-19 14:34 - 2013-01-13 22:35 - 00010752 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll

2013-09-19 14:34 - 2013-01-13 22:35 - 00009728 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll

2013-09-19 14:34 - 2013-01-13 22:35 - 00002560 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll

2013-09-19 14:34 - 2013-01-13 22:32 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll

2013-09-19 14:34 - 2013-01-13 22:31 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll

2013-09-19 14:34 - 2013-01-13 22:31 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll

2013-09-19 14:34 - 2013-01-13 22:31 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll

2013-09-19 14:34 - 2013-01-13 22:31 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-version-l1-1-0.dll

2013-09-19 14:34 - 2013-01-13 22:31 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll

2013-09-19 14:34 - 2013-01-13 22:22 - 01988096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll

2013-09-19 14:34 - 2013-01-13 22:20 - 00293376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll

2013-09-19 14:34 - 2013-01-13 22:09 - 00249856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1core.dll

2013-09-19 14:34 - 2013-01-13 22:08 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10core.dll

2013-09-19 14:34 - 2013-01-13 21:58 - 01175552 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll

2013-09-19 14:34 - 2013-01-13 21:54 - 00604160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll

2013-09-19 14:34 - 2013-01-13 21:53 - 00207872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecsExt.dll

2013-09-19 14:34 - 2013-01-13 21:53 - 00187392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIAnimation.dll

2013-09-19 14:34 - 2013-01-13 21:51 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll

2013-09-19 14:34 - 2013-01-13 21:49 - 00363008 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll

2013-09-19 14:34 - 2013-01-13 21:48 - 00161792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1.dll

2013-09-19 14:34 - 2013-01-13 21:46 - 01080832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10.dll

2013-09-19 14:34 - 2013-01-13 21:43 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll

2013-09-19 14:34 - 2013-01-13 21:38 - 00333312 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1core.dll

2013-09-19 14:34 - 2013-01-13 21:38 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\d3d10core.dll

2013-09-19 14:34 - 2013-01-13 21:37 - 03419136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll

2013-09-19 14:34 - 2013-01-13 21:25 - 00245248 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecsExt.dll

2013-09-19 14:34 - 2013-01-13 21:24 - 00648192 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll

2013-09-19 14:34 - 2013-01-13 21:24 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\UIAnimation.dll

2013-09-19 14:34 - 2013-01-13 21:20 - 01238528 _____ (Microsoft Corporation) C:\Windows\system32\d3d10.dll

2013-09-19 14:34 - 2013-01-13 21:20 - 00194560 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1.dll

2013-09-19 14:34 - 2013-01-13 21:15 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll

2013-09-19 14:34 - 2013-01-13 21:10 - 03928064 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll

2013-09-19 14:34 - 2013-01-13 21:02 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll

2013-09-19 14:34 - 2013-01-13 20:34 - 00364544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsGdiConverter.dll

2013-09-19 14:34 - 2013-01-13 20:32 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll

2013-09-19 14:34 - 2013-01-13 20:09 - 00522752 _____ (Microsoft Corporation) C:\Windows\system32\XpsGdiConverter.dll

2013-09-19 14:34 - 2013-01-13 19:26 - 01158144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsPrint.dll

2013-09-19 14:34 - 2013-01-13 19:05 - 01682432 _____ (Microsoft Corporation) C:\Windows\system32\XpsPrint.dll

2013-09-19 14:34 - 2013-01-04 08:11 - 02776576 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll

2013-09-19 14:34 - 2013-01-04 08:11 - 02284544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll

2013-09-19 14:33 - 2012-08-24 20:13 - 00154480 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys

2013-09-19 14:33 - 2012-08-24 20:09 - 00458712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys

2013-09-19 14:33 - 2012-08-24 20:05 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll

2013-09-19 14:33 - 2012-08-24 20:03 - 01448448 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll

2013-09-19 14:33 - 2012-08-24 18:57 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll

2013-09-19 14:33 - 2012-08-24 18:57 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll

2013-09-19 14:33 - 2012-08-24 18:53 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll

2013-09-19 14:19 - 2013-09-18 22:06 - 02850416 _____ C:\Users\****\Desktop\Sicherungskopie_von_flic.cdr

2013-09-19 13:59 - 2013-09-01 17:08 - 79143768 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

2013-09-19 13:51 - 2012-07-26 06:55 - 00785512 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys

2013-09-19 13:51 - 2012-07-26 06:55 - 00054376 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdfLdr.sys

2013-09-19 13:51 - 2012-07-26 04:36 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\Wdfres.dll

2013-09-19 13:51 - 2012-06-02 16:35 - 00000003 _____ C:\Windows\system32\Drivers\MsftWdf_Kernel_01011_Inbox_Critical.Wdf

2013-09-19 13:48 - 2013-09-19 13:48 - 00000134 _____ C:\Users\****\Desktop\Internet Explorer-Problembehebung.url

2013-09-19 13:39 - 2010-02-23 10:16 - 00294912 _____ (Microsoft Corporation) C:\Windows\system32\browserchoice.exe

2013-09-19 13:27 - 2012-12-16 19:11 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll

2013-09-19 13:27 - 2012-12-16 16:45 - 00367616 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll

2013-09-19 13:27 - 2012-12-16 16:13 - 00295424 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll

2013-09-19 13:27 - 2012-12-16 16:13 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll

2013-09-19 13:27 - 2010-09-30 12:41 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll

2013-09-19 13:27 - 2010-09-30 08:47 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll

2013-09-19 13:26 - 2012-07-26 05:08 - 00744448 _____ (Microsoft Corporation) C:\Windows\system32\WUDFx.dll

2013-09-19 13:26 - 2012-07-26 05:08 - 00229888 _____ (Microsoft Corporation) C:\Windows\system32\WUDFHost.exe

2013-09-19 13:26 - 2012-07-26 05:08 - 00194048 _____ (Microsoft Corporation) C:\Windows\system32\WUDFPlatform.dll

2013-09-19 13:26 - 2012-07-26 05:08 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\WUDFSvc.dll

2013-09-19 13:26 - 2012-07-26 05:08 - 00045056 _____ (Microsoft Corporation) C:\Windows\system32\WUDFCoinstaller.dll

2013-09-19 13:26 - 2012-07-26 04:26 - 00198656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFRd.sys

2013-09-19 13:26 - 2012-07-26 04:26 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFPf.sys

2013-09-19 13:26 - 2012-06-02 16:57 - 00000003 _____ C:\Windows\system32\Drivers\MsftWdf_User_01_11_00_Inbox_Critical.Wdf

2013-09-19 13:23 - 2012-03-01 08:46 - 00023408 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fs_rec.sys

2013-09-19 13:23 - 2012-03-01 08:33 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll

2013-09-19 13:23 - 2012-03-01 08:28 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\wmi.dll

2013-09-19 13:23 - 2012-03-01 07:33 - 00159232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll

2013-09-19 13:23 - 2012-03-01 07:29 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmi.dll

2013-09-19 13:19 - 2013-08-02 04:23 - 05550528 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe

2013-09-19 13:19 - 2013-08-02 04:15 - 01732032 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll

2013-09-19 13:19 - 2013-08-02 04:15 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll

2013-09-19 13:19 - 2013-08-02 04:15 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll

2013-09-19 13:19 - 2013-08-02 04:15 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll

2013-09-19 13:19 - 2013-08-02 04:14 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll

2013-09-19 13:19 - 2013-08-02 04:14 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll

2013-09-19 13:19 - 2013-08-02 04:13 - 01161216 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll

2013-09-19 13:19 - 2013-08-02 04:13 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll

2013-09-19 13:19 - 2013-08-02 04:12 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll

2013-09-19 13:19 - 2013-08-02 04:12 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll

2013-09-19 13:19 - 2013-08-02 04:12 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll

2013-09-19 13:19 - 2013-08-02 04:12 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll

2013-09-19 13:19 - 2013-08-02 04:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll

2013-09-19 13:19 - 2013-08-02 04:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll

2013-09-19 13:19 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll

2013-09-19 13:19 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll

2013-09-19 13:19 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll

2013-09-19 13:19 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll

2013-09-19 13:19 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll

2013-09-19 13:19 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll

2013-09-19 13:19 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll

2013-09-19 13:19 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll

2013-09-19 13:19 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll

2013-09-19 13:19 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll

2013-09-19 13:19 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll

2013-09-19 13:19 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll

2013-09-19 13:19 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll

2013-09-19 13:19 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll

2013-09-19 13:19 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll

2013-09-19 13:19 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll

2013-09-19 13:19 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll

2013-09-19 13:19 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll

2013-09-19 13:19 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll

2013-09-19 13:19 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll

2013-09-19 13:19 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll

2013-09-19 13:19 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll

2013-09-19 13:19 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll

2013-09-19 13:19 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll

2013-09-19 13:19 - 2013-08-02 03:59 - 03968960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe

2013-09-19 13:19 - 2013-08-02 03:59 - 03913664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe

2013-09-19 13:19 - 2013-08-02 03:51 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll

2013-09-19 13:19 - 2013-08-02 03:50 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll

2013-09-19 13:19 - 2013-08-02 03:50 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll

2013-09-19 13:19 - 2013-08-02 03:50 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll

2013-09-19 13:19 - 2013-08-02 03:48 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll

2013-09-19 13:19 - 2013-08-02 03:48 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll

2013-09-19 13:19 - 2013-08-02 03:48 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll

2013-09-19 13:19 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll

2013-09-19 13:19 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll

2013-09-19 13:19 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll

2013-09-19 13:19 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll

2013-09-19 13:19 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll

2013-09-19 13:19 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll

2013-09-19 13:19 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll

2013-09-19 13:19 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll

2013-09-19 13:19 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll

2013-09-19 13:19 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll

2013-09-19 13:19 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll

2013-09-19 13:19 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll

2013-09-19 13:19 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll

2013-09-19 13:19 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll

2013-09-19 13:19 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll

2013-09-19 13:19 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll

2013-09-19 13:19 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll

2013-09-19 13:19 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll

2013-09-19 13:19 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll

2013-09-19 13:19 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll

2013-09-19 13:19 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll

2013-09-19 13:19 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll

2013-09-19 13:19 - 2013-08-02 03:09 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe

2013-09-19 13:19 - 2013-08-02 02:59 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe

2013-09-19 13:19 - 2013-08-02 02:45 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe

2013-09-19 13:19 - 2013-08-02 02:45 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll

2013-09-19 13:19 - 2013-08-02 02:45 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe

2013-09-19 13:19 - 2013-08-02 02:45 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe

2013-09-19 13:19 - 2013-08-02 02:43 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll

2013-09-19 13:19 - 2013-08-02 02:43 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll

2013-09-19 13:19 - 2013-08-02 02:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll

2013-09-19 13:19 - 2013-08-02 02:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll

2013-09-19 13:19 - 2013-02-27 08:02 - 00111448 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe

2013-09-19 13:19 - 2013-02-27 07:48 - 01930752 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll

2013-09-19 13:19 - 2013-02-27 07:47 - 00070144 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll

2013-09-19 13:19 - 2013-02-27 06:49 - 01796096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll

2013-09-19 13:18 - 2013-04-26 01:30 - 01505280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll

2013-09-19 13:18 - 2013-04-01 00:52 - 01887232 _____ (Microsoft Corporation) C:\Windows\system32\d3d11.dll

2013-09-19 13:18 - 2012-12-07 15:20 - 00441856 _____ (Microsoft Corporation) C:\Windows\system32\Wpc.dll

2013-09-19 13:18 - 2012-12-07 15:15 - 02746368 _____ (Microsoft Corporation) C:\Windows\system32\gameux.dll

2013-09-19 13:18 - 2012-12-07 14:26 - 00308736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Wpc.dll

2013-09-19 13:18 - 2012-12-07 14:20 - 02576384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gameux.dll

2013-09-19 13:18 - 2012-12-07 13:20 - 00045568 _____ (Microsoft) C:\Windows\system32\oflc-nz.rs

2013-09-19 13:18 - 2012-12-07 13:20 - 00044544 _____ (Microsoft) C:\Windows\system32\pegibbfc.rs

2013-09-19 13:18 - 2012-12-07 13:20 - 00043520 _____ (Microsoft) C:\Windows\system32\csrr.rs

2013-09-19 13:18 - 2012-12-07 13:20 - 00030720 _____ (Microsoft) C:\Windows\system32\usk.rs

2013-09-19 13:18 - 2012-12-07 13:20 - 00023552 _____ (Microsoft) C:\Windows\system32\oflc.rs

2013-09-19 13:18 - 2012-12-07 13:20 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi-pt.rs

2013-09-19 13:18 - 2012-12-07 13:20 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi-fi.rs

2013-09-19 13:18 - 2012-12-07 13:19 - 00055296 _____ (Microsoft) C:\Windows\system32\cero.rs

2013-09-19 13:18 - 2012-12-07 13:19 - 00051712 _____ (Microsoft) C:\Windows\system32\esrb.rs

2013-09-19 13:18 - 2012-12-07 13:19 - 00046592 _____ (Microsoft) C:\Windows\system32\fpb.rs

2013-09-19 13:18 - 2012-12-07 13:19 - 00040960 _____ (Microsoft) C:\Windows\system32\cob-au.rs

2013-09-19 13:18 - 2012-12-07 13:19 - 00021504 _____ (Microsoft) C:\Windows\system32\grb.rs

2013-09-19 13:18 - 2012-12-07 13:19 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi.rs

2013-09-19 13:18 - 2012-12-07 13:19 - 00015360 _____ (Microsoft) C:\Windows\system32\djctq.rs

2013-09-19 13:18 - 2012-12-07 12:46 - 00055296 _____ (Microsoft) C:\Windows\SysWOW64\cero.rs

2013-09-19 13:18 - 2012-12-07 12:46 - 00051712 _____ (Microsoft) C:\Windows\SysWOW64\esrb.rs

2013-09-19 13:18 - 2012-12-07 12:46 - 00046592 _____ (Microsoft) C:\Windows\SysWOW64\fpb.rs

2013-09-19 13:18 - 2012-12-07 12:46 - 00045568 _____ (Microsoft) C:\Windows\SysWOW64\oflc-nz.rs

2013-09-19 13:18 - 2012-12-07 12:46 - 00044544 _____ (Microsoft) C:\Windows\SysWOW64\pegibbfc.rs

2013-09-19 13:18 - 2012-12-07 12:46 - 00043520 _____ (Microsoft) C:\Windows\SysWOW64\csrr.rs

2013-09-19 13:18 - 2012-12-07 12:46 - 00040960 _____ (Microsoft) C:\Windows\SysWOW64\cob-au.rs

2013-09-19 13:18 - 2012-12-07 12:46 - 00030720 _____ (Microsoft) C:\Windows\SysWOW64\usk.rs

2013-09-19 13:18 - 2012-12-07 12:46 - 00023552 _____ (Microsoft) C:\Windows\SysWOW64\oflc.rs

2013-09-19 13:18 - 2012-12-07 12:46 - 00021504 _____ (Microsoft) C:\Windows\SysWOW64\grb.rs

2013-09-19 13:18 - 2012-12-07 12:46 - 00020480 _____ (Microsoft) C:\Windows\SysWOW64\pegi-pt.rs

2013-09-19 13:18 - 2012-12-07 12:46 - 00020480 _____ (Microsoft) C:\Windows\SysWOW64\pegi-fi.rs

2013-09-19 13:18 - 2012-12-07 12:46 - 00020480 _____ (Microsoft) C:\Windows\SysWOW64\pegi.rs

2013-09-19 13:18 - 2012-12-07 12:46 - 00015360 _____ (Microsoft) C:\Windows\SysWOW64\djctq.rs

2013-09-19 13:18 - 2012-11-30 01:17 - 00420064 _____ C:\Windows\SysWOW64\locale.nls

2013-09-19 13:18 - 2012-11-30 01:15 - 00420064 _____ C:\Windows\system32\locale.nls

2013-09-19 13:18 - 2012-10-03 19:44 - 00303104 _____ (Microsoft Corporation) C:\Windows\system32\nlasvc.dll

2013-09-19 13:18 - 2012-10-03 19:44 - 00246272 _____ (Microsoft Corporation) C:\Windows\system32\netcorehc.dll

2013-09-19 13:18 - 2012-10-03 19:44 - 00216576 _____ (Microsoft Corporation) C:\Windows\system32\ncsi.dll

2013-09-19 13:18 - 2012-10-03 19:44 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\nlaapi.dll

2013-09-19 13:18 - 2012-10-03 19:44 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\netevent.dll

2013-09-19 13:18 - 2012-10-03 19:42 - 00569344 _____ (Microsoft Corporation) C:\Windows\system32\iphlpsvc.dll

2013-09-19 13:18 - 2012-10-03 18:42 - 00175104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netcorehc.dll

2013-09-19 13:18 - 2012-10-03 18:42 - 00156672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncsi.dll

2013-09-19 13:18 - 2012-10-03 18:42 - 00018944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netevent.dll

2013-09-19 13:18 - 2012-10-03 18:07 - 00045568 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpipreg.sys

2013-09-19 13:18 - 2012-01-13 09:12 - 00052224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nlaapi.dll

2013-09-19 13:17 - 2013-07-26 04:24 - 14172672 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll

2013-09-19 13:17 - 2013-07-26 04:24 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\shdocvw.dll

2013-09-19 13:17 - 2013-07-26 03:55 - 12872704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll

2013-09-19 13:17 - 2013-07-26 03:55 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shdocvw.dll

2013-09-19 13:17 - 2013-07-25 11:25 - 01888768 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL

2013-09-19 13:17 - 2013-07-25 10:57 - 01620992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL

2013-09-19 13:17 - 2013-07-09 07:52 - 00224256 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll

2013-09-19 13:17 - 2013-07-09 07:46 - 01472512 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll

2013-09-19 13:17 - 2013-07-09 07:46 - 00184320 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll

2013-09-19 13:17 - 2013-07-09 07:46 - 00139776 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll

2013-09-19 13:17 - 2013-07-09 06:52 - 00175104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll

2013-09-19 13:17 - 2013-07-09 06:46 - 01166848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll

2013-09-19 13:17 - 2013-07-09 06:46 - 00140288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll

2013-09-19 13:17 - 2013-07-09 06:46 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll

2013-09-19 13:17 - 2013-07-06 08:03 - 01910208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys

2013-09-19 13:17 - 2013-05-13 07:50 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\certenc.dll

2013-09-19 13:17 - 2013-05-13 05:43 - 01192448 _____ (Microsoft Corporation) C:\Windows\system32\certutil.exe

2013-09-19 13:17 - 2013-05-13 05:08 - 00903168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certutil.exe

2013-09-19 13:17 - 2013-05-13 05:08 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certenc.dll

2013-09-19 13:17 - 2013-05-10 07:49 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\cryptdlg.dll

2013-09-19 13:17 - 2013-05-10 05:20 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptdlg.dll

2013-09-19 13:17 - 2013-04-12 16:45 - 01656680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys

2013-09-19 13:17 - 2013-01-03 08:00 - 00288088 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS

2013-09-19 13:17 - 2012-08-22 20:12 - 00376688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys

2013-09-19 13:17 - 2012-06-06 08:02 - 01133568 _____ (Microsoft Corporation) C:\Windows\system32\cdosys.dll

2013-09-19 13:17 - 2012-06-06 07:03 - 00805376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cdosys.dll

2013-09-19 13:17 - 2012-06-02 07:48 - 00095600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys

2013-09-19 13:17 - 2012-01-04 12:44 - 00509952 _____ (Microsoft Corporation) C:\Windows\system32\ntshrui.dll

2013-09-19 13:17 - 2012-01-04 10:58 - 00442880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntshrui.dll

2013-09-19 13:17 - 2011-11-17 08:35 - 00395776 _____ (Microsoft Corporation) C:\Windows\system32\webio.dll

2013-09-19 13:17 - 2011-11-17 08:35 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll

2013-09-19 13:17 - 2011-11-17 08:35 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll

2013-09-19 13:17 - 2011-11-17 08:35 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll

2013-09-19 13:17 - 2011-11-17 08:33 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe

2013-09-19 13:17 - 2011-11-17 07:35 - 00314880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webio.dll

2013-09-19 13:17 - 2011-05-04 07:25 - 02315776 _____ (Microsoft Corporation) C:\Windows\system32\tquery.dll

2013-09-19 13:17 - 2011-05-04 07:22 - 02223616 _____ (Microsoft Corporation) C:\Windows\system32\mssrch.dll

2013-09-19 13:17 - 2011-05-04 07:22 - 00778752 _____ (Microsoft Corporation) C:\Windows\system32\mssvp.dll

2013-09-19 13:17 - 2011-05-04 07:22 - 00491520 _____ (Microsoft Corporation) C:\Windows\system32\mssph.dll

2013-09-19 13:17 - 2011-05-04 07:22 - 00288256 _____ (Microsoft Corporation) C:\Windows\system32\mssphtb.dll

2013-09-19 13:17 - 2011-05-04 07:22 - 00075264 _____ (Microsoft Corporation) C:\Windows\system32\msscntrs.dll

2013-09-19 13:17 - 2011-05-04 07:19 - 00591872 _____ (Microsoft Corporation) C:\Windows\system32\SearchIndexer.exe

2013-09-19 13:17 - 2011-05-04 07:19 - 00249856 _____ (Microsoft Corporation) C:\Windows\system32\SearchProtocolHost.exe

2013-09-19 13:17 - 2011-05-04 07:19 - 00113664 _____ (Microsoft Corporation) C:\Windows\system32\SearchFilterHost.exe

2013-09-19 13:17 - 2011-05-04 06:34 - 01549312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tquery.dll

2013-09-19 13:17 - 2011-05-04 06:32 - 01401344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssrch.dll

2013-09-19 13:17 - 2011-05-04 06:32 - 00666624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssvp.dll

2013-09-19 13:17 - 2011-05-04 06:32 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssph.dll

2013-09-19 13:17 - 2011-05-04 06:32 - 00197120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssphtb.dll

2013-09-19 13:17 - 2011-05-04 06:32 - 00059392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msscntrs.dll

2013-09-19 13:17 - 2011-05-04 06:28 - 00427520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchIndexer.exe

2013-09-19 13:17 - 2011-05-04 06:28 - 00164352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchProtocolHost.exe

2013-09-19 13:17 - 2011-05-04 06:28 - 00086528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchFilterHost.exe

2013-09-19 13:17 - 2011-04-09 08:58 - 00142336 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe

2013-09-19 13:17 - 2011-04-09 07:56 - 00123904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\poqexec.exe

2013-09-19 13:17 - 2010-12-23 12:42 - 01118720 _____ (Microsoft Corporation) C:\Windows\system32\sbe.dll

2013-09-19 13:17 - 2010-12-23 12:42 - 00961024 _____ (Microsoft Corporation) C:\Windows\system32\CPFilters.dll

2013-09-19 13:17 - 2010-12-23 12:36 - 00259072 _____ (Microsoft Corporation) C:\Windows\system32\mpg2splt.ax

2013-09-19 13:17 - 2010-12-23 07:54 - 00850944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sbe.dll

2013-09-19 13:17 - 2010-12-23 07:54 - 00642048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CPFilters.dll

2013-09-19 13:17 - 2010-12-23 07:50 - 00199680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mpg2splt.ax

2013-09-19 13:16 - 2013-08-08 03:20 - 03155456 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys

2013-09-19 13:16 - 2013-08-05 04:25 - 00155584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ataport.sys

2013-09-19 13:16 - 2013-07-19 03:58 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll

2013-09-19 13:16 - 2013-07-19 03:41 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll

2013-09-19 13:16 - 2013-07-09 07:51 - 01217024 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll

2013-09-19 13:16 - 2013-07-09 06:52 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll

2013-09-19 13:16 - 2013-04-10 08:01 - 00983400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys

2013-09-19 13:16 - 2013-04-10 08:01 - 00265064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys

2013-09-19 13:16 - 2013-02-15 08:08 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll

2013-09-19 13:16 - 2013-02-15 08:06 - 03717632 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll

2013-09-19 13:16 - 2013-02-15 08:02 - 00158720 _____ (Microsoft Corporation) C:\Windows\system32\aaclient.dll

2013-09-19 13:16 - 2013-02-15 06:37 - 03217408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll

2013-09-19 13:16 - 2013-02-15 06:34 - 00131584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aaclient.dll

2013-09-19 13:16 - 2013-02-15 05:25 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll

2013-09-19 13:16 - 2013-02-12 06:12 - 00019968 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usb8023.sys

2013-09-19 13:16 - 2012-11-01 07:43 - 02002432 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll

2013-09-19 13:16 - 2012-11-01 07:43 - 01882624 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll

2013-09-19 13:16 - 2012-11-01 06:47 - 01389568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll

2013-09-19 13:16 - 2012-11-01 06:47 - 01236992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll

2013-09-19 13:16 - 2012-10-09 20:17 - 00226816 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcore6.dll

2013-09-19 13:16 - 2012-10-09 20:17 - 00055296 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcsvc6.dll

2013-09-19 13:16 - 2012-10-09 19:40 - 00193536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dhcpcore6.dll

2013-09-19 13:16 - 2012-10-09 19:40 - 00044032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dhcpcsvc6.dll

2013-09-19 13:16 - 2012-08-22 20:12 - 00950128 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys

2013-09-19 13:16 - 2012-08-21 23:01 - 00245760 _____ (Microsoft Corporation) C:\Windows\system32\OxpsConverter.exe

2013-09-19 13:16 - 2012-07-04 22:26 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\RNDISMP.sys

2013-09-19 13:16 - 2012-04-26 07:41 - 00149504 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorekmts.dll

2013-09-19 13:16 - 2012-04-26 07:41 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\rdpwsx.dll

2013-09-19 13:16 - 2012-04-26 07:34 - 00009216 _____ (Microsoft Corporation) C:\Windows\system32\rdrmemptylst.exe

2013-09-19 13:16 - 2012-04-07 14:31 - 03216384 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll

2013-09-19 13:16 - 2012-04-07 13:26 - 02342400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll

2013-09-19 13:16 - 2011-10-26 07:25 - 01572864 _____ (Microsoft Corporation) C:\Windows\system32\quartz.dll

2013-09-19 13:16 - 2011-10-26 07:25 - 00366592 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll

2013-09-19 13:16 - 2011-10-26 06:32 - 01328128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\quartz.dll

2013-09-19 13:16 - 2011-10-26 06:32 - 00514560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qdvd.dll

2013-09-19 13:16 - 2011-07-09 04:46 - 00288768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys

2013-09-19 13:16 - 2011-06-15 12:02 - 00212992 _____ (Microsoft Corporation) C:\Windows\system32\odbctrac.dll

2013-09-19 13:16 - 2011-06-15 12:02 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\odbccp32.dll

2013-09-19 13:16 - 2011-06-15 12:02 - 00106496 _____ (Microsoft Corporation) C:\Windows\system32\odbccu32.dll

2013-09-19 13:16 - 2011-06-15 12:02 - 00106496 _____ (Microsoft Corporation) C:\Windows\system32\odbccr32.dll

2013-09-19 13:16 - 2011-06-15 10:55 - 00319488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbcjt32.dll

2013-09-19 13:16 - 2011-06-15 10:55 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbctrac.dll

2013-09-19 13:16 - 2011-06-15 10:55 - 00122880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbccp32.dll

2013-09-19 13:16 - 2011-06-15 10:55 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbccu32.dll

2013-09-19 13:16 - 2011-06-15 10:55 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbccr32.dll

2013-09-19 13:16 - 2011-04-29 05:06 - 00467456 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv.sys

2013-09-19 13:16 - 2011-04-29 05:05 - 00410112 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys

2013-09-19 13:16 - 2011-04-29 05:05 - 00168448 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys

2013-09-19 13:16 - 2011-04-27 04:40 - 00158208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys

2013-09-19 13:16 - 2011-04-27 04:39 - 00128000 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys

2013-09-19 13:16 - 2011-03-11 08:34 - 01395712 _____ (Microsoft Corporation) C:\Windows\system32\mfc42.dll

2013-09-19 13:16 - 2011-03-11 08:34 - 01359872 _____ (Microsoft Corporation) C:\Windows\system32\mfc42u.dll

2013-09-19 13:16 - 2011-03-11 07:33 - 01164288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc42u.dll

2013-09-19 13:16 - 2011-03-11 07:33 - 01137664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc42.dll

2013-09-19 13:16 - 2011-02-25 08:19 - 02871808 _____ (Microsoft Corporation) C:\Windows\explorer.exe

2013-09-19 13:16 - 2011-02-25 07:30 - 02616320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\explorer.exe

2013-09-19 13:16 - 2011-02-03 13:25 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll

2013-09-19 13:16 - 2010-06-26 05:55 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll

2013-09-19 13:16 - 2010-06-26 05:24 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll

2013-09-19 13:15 - 2013-06-15 06:32 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys

2013-09-19 13:15 - 2013-06-04 08:00 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll

2013-09-19 13:15 - 2013-06-04 06:53 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll

2013-09-19 13:15 - 2013-04-26 07:51 - 00751104 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll

2013-09-19 13:15 - 2013-04-26 06:55 - 00492544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32spl.dll

2013-09-19 13:15 - 2013-03-19 07:53 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll

2013-09-19 13:15 - 2013-03-19 07:53 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\wwanprotdim.dll

2013-09-19 13:15 - 2013-01-24 08:01 - 00223752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fvevol.sys

2013-09-19 13:15 - 2012-11-23 05:13 - 00068608 _____ (Microsoft Corporation) C:\Windows\system32\taskhost.exe

2013-09-19 13:15 - 2012-11-22 07:44 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll

2013-09-19 13:15 - 2012-11-22 06:45 - 00626688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usp10.dll

2013-09-19 13:15 - 2012-11-20 07:48 - 00307200 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll

2013-09-19 13:15 - 2012-11-20 06:51 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll

2013-09-19 13:15 - 2012-11-02 07:59 - 00478208 _____ (Microsoft Corporation) C:\Windows\system32\dpnet.dll

2013-09-19 13:15 - 2012-11-02 07:11 - 00376832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpnet.dll

2013-09-19 13:15 - 2012-09-26 00:47 - 00078336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\synceng.dll

2013-09-19 13:15 - 2012-09-26 00:46 - 00095744 _____ (Microsoft Corporation) C:\Windows\system32\synceng.dll

2013-09-19 13:15 - 2012-08-11 02:56 - 00715776 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll

2013-09-19 13:15 - 2012-08-11 01:56 - 00542208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll

2013-09-19 13:15 - 2012-07-05 00:16 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\netapi32.dll

2013-09-19 13:15 - 2012-07-05 00:13 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\browser.dll

2013-09-19 13:15 - 2012-07-05 00:13 - 00059392 _____ (Microsoft Corporation) C:\Windows\system32\browcli.dll

2013-09-19 13:15 - 2012-07-04 23:16 - 00057344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netapi32.dll

2013-09-19 13:15 - 2012-07-04 23:14 - 00041984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\browcli.dll

2013-09-19 13:15 - 2012-05-14 07:26 - 00956928 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll

2013-09-19 13:15 - 2012-05-05 10:36 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll

2013-09-19 13:15 - 2012-05-05 09:46 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll

2013-09-19 13:15 - 2012-05-01 07:40 - 00209920 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll

2013-09-19 13:15 - 2012-04-28 05:55 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpwd.sys

2013-09-19 13:15 - 2012-03-17 09:58 - 00075120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\partmgr.sys

2013-09-19 13:15 - 2012-02-11 08:36 - 00559104 _____ (Microsoft Corporation) C:\Windows\system32\spoolsv.exe

2013-09-19 13:15 - 2012-02-11 08:36 - 00067072 _____ (Microsoft Corporation) C:\Windows\splwow64.exe

2013-09-19 13:15 - 2011-12-30 08:26 - 00515584 _____ (Microsoft Corporation) C:\Windows\system32\timedate.cpl

2013-09-19 13:15 - 2011-12-30 07:27 - 00478720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\timedate.cpl

2013-09-19 13:15 - 2011-12-28 05:59 - 00498688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys

2013-09-19 13:15 - 2011-12-16 10:46 - 00634880 _____ (Microsoft Corporation) C:\Windows\system32\msvcrt.dll

2013-09-19 13:15 - 2011-12-16 09:52 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcrt.dll

2013-09-19 13:15 - 2011-10-15 08:31 - 00723456 _____ (Microsoft Corporation) C:\Windows\system32\EncDec.dll

2013-09-19 13:15 - 2011-10-15 07:38 - 00534528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\EncDec.dll

2013-09-19 13:15 - 2011-08-27 07:37 - 00861696 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll

2013-09-19 13:15 - 2011-08-27 07:37 - 00331776 _____ (Microsoft Corporation) C:\Windows\system32\oleacc.dll

2013-09-19 13:15 - 2011-08-27 06:26 - 00571904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll

2013-09-19 13:15 - 2011-08-27 06:26 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleacc.dll

2013-09-19 13:15 - 2011-08-17 07:26 - 00613888 _____ (Microsoft Corporation) C:\Windows\system32\psisdecd.dll

2013-09-19 13:15 - 2011-08-17 07:25 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\psisrndr.ax

2013-09-19 13:15 - 2011-08-17 06:24 - 00465408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\psisdecd.dll

2013-09-19 13:15 - 2011-08-17 06:19 - 00075776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\psisrndr.ax

2013-09-19 13:15 - 2011-06-16 07:49 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\xmllite.dll

2013-09-19 13:15 - 2011-06-16 06:33 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xmllite.dll

2013-09-19 13:15 - 2011-05-24 13:42 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\umpnpmgr.dll

2013-09-19 13:15 - 2011-05-24 12:40 - 00064512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\devobj.dll

2013-09-19 13:15 - 2011-05-24 12:40 - 00044544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\devrtl.dll

2013-09-19 13:15 - 2011-05-24 12:39 - 00145920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cfgmgr32.dll

2013-09-19 13:15 - 2011-05-24 12:37 - 00252928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drvinst.exe

2013-09-19 13:15 - 2011-05-03 07:29 - 00976896 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll

2013-09-19 13:15 - 2011-05-03 06:30 - 00741376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll

2013-09-19 13:15 - 2011-04-23 00:15 - 00027520 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Diskdump.sys

2013-09-19 13:15 - 2011-03-03 08:24 - 00357888 _____ (Microsoft Corporation) C:\Windows\system32\dnsapi.dll

2013-09-19 13:15 - 2011-03-03 08:24 - 00183296 _____ (Microsoft Corporation) C:\Windows\system32\dnsrslvr.dll

2013-09-19 13:15 - 2011-03-03 08:21 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\dnscacheugc.exe

2013-09-19 13:15 - 2011-03-03 07:38 - 00270336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dnsapi.dll

2013-09-19 13:15 - 2011-03-03 07:36 - 00028672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dnscacheugc.exe

2013-09-19 13:15 - 2011-02-23 06:55 - 00090624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bowser.sys

2013-09-19 13:15 - 2011-02-18 12:51 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\prevhost.exe

2013-09-19 13:15 - 2011-02-18 07:39 - 00031232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\prevhost.exe

2013-09-19 13:15 - 2011-02-12 13:34 - 00267776 _____ (Microsoft Corporation) C:\Windows\system32\FXSCOVER.exe

2013-09-19 13:15 - 2011-02-05 19:10 - 00642944 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi

2013-09-19 13:15 - 2011-02-05 19:10 - 00020352 _____ (Microsoft Corporation) C:\Windows\system32\kdusb.dll

2013-09-19 13:15 - 2011-02-05 19:10 - 00019328 _____ (Microsoft Corporation) C:\Windows\system32\kd1394.dll

2013-09-19 13:15 - 2011-02-05 19:10 - 00017792 _____ (Microsoft Corporation) C:\Windows\system32\kdcom.dll

2013-09-19 13:15 - 2011-02-05 19:06 - 00605552 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe

2013-09-19 13:15 - 2011-02-05 19:06 - 00566208 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi

2013-09-19 13:15 - 2011-02-05 19:06 - 00518672 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe

2013-09-19 12:59 - 2011-11-19 16:58 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll

2013-09-19 12:59 - 2011-11-19 16:01 - 00067072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\packager.dll

2013-09-19 12:35 - 2013-09-19 12:35 - 01602164 _____ C:\Windows\SysWOW64\PerfStringBackup.INI

2013-09-19 12:31 - 2013-09-20 19:06 - 00001413 _____ C:\Users\****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk

2013-09-19 12:31 - 2013-09-19 14:27 - 00146616 _____ C:\Users\****\AppData\Local\GDIPFONTCACHEV1.DAT

2013-09-19 12:30 - 2013-09-19 12:30 - 00000020 ___SH C:\Users\****\ntuser.ini

2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Musik

2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Bilder

2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\Users\Default\Vorlagen

2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\Users\Default\Startmenü

2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\Users\Default\Netzwerkumgebung

2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\Users\Default\Lokale Einstellungen

2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\Users\Default\Eigene Dateien

2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\Users\Default\Druckumgebung

2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Musik

2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Bilder

2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme

2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\Users\Default\AppData\Local\Verlauf

2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\Users\Default\AppData\Local\Anwendungsdaten

2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\Users\Default\Anwendungsdaten

2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Musik

2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Bilder

2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme

2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Verlauf

2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Anwendungsdaten

2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\ProgramData\Vorlagen

2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\ProgramData\Startmenü

2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\ProgramData\Favoriten

2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\ProgramData\Dokumente

2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\ProgramData\Anwendungsdaten

2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\Program Files\Gemeinsame Dateien

2013-09-19 03:56 - 2012-02-17 08:38 - 01031680 _____ (Microsoft Corporation) C:\Windows\system32\rdpcore.dll

2013-09-19 03:56 - 2012-02-17 07:34 - 00826880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpcore.dll

2013-09-19 03:56 - 2012-02-17 06:57 - 00023552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdtcp.sys

2013-09-19 03:51 - 2012-06-03 00:19 - 02428952 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll

2013-09-19 03:51 - 2012-06-03 00:19 - 00701976 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll

2013-09-19 03:51 - 2012-06-03 00:19 - 00057880 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe

2013-09-19 03:51 - 2012-06-03 00:19 - 00044056 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll

2013-09-19 03:51 - 2012-06-03 00:19 - 00038424 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll

2013-09-19 03:51 - 2012-06-03 00:15 - 02622464 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll

2013-09-19 03:51 - 2012-06-03 00:15 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll

2013-09-19 03:51 - 2012-06-02 15:19 - 00186752 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll

2013-09-19 03:51 - 2012-06-02 15:15 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe

2013-09-19 03:32 - 2013-09-19 12:30 - 00000000 ____D C:\Windows\Panther

2013-09-19 03:30 - 2013-09-19 03:30 - 00022960 _____ C:\Windows\system32\emptyregdb.dat

2013-09-19 03:27 - 2013-09-19 03:27 - 00262144 _____ C:\Windows\system32\config\userdiff

2013-09-19 03:24 - 2013-09-19 03:24 - 00000000 ____D C:\Users\Default\Documents\Visual Studio 2008

2013-09-19 03:24 - 2013-09-19 03:24 - 00000000 ____D C:\Users\Default\AppData\Local\Microsoft Help

2013-09-19 03:24 - 2013-09-19 03:24 - 00000000 ____D C:\Users\Default User\Documents\Visual Studio 2008

2013-09-19 03:24 - 2013-09-19 03:24 - 00000000 ____D C:\Users\Default User\AppData\Local\Microsoft Help

2013-09-19 02:40 - 2013-09-19 14:42 - 00000000 ____D C:\Users\****

2013-09-19 02:40 - 2013-09-19 02:40 - 00000000 _SHDL C:\Users\UpdatusUser\Vorlagen

2013-09-19 02:40 - 2013-09-19 02:40 - 00000000 _SHDL C:\Users\UpdatusUser\Startmenü

2013-09-19 02:40 - 2013-09-19 02:40 - 00000000 _SHDL C:\Users\UpdatusUser\Netzwerkumgebung

2013-09-19 02:40 - 2013-09-19 02:40 - 00000000 _SHDL C:\Users\UpdatusUser\Lokale Einstellungen

2013-09-19 02:40 - 2013-09-19 02:40 - 00000000 _SHDL C:\Users\UpdatusUser\Eigene Dateien

2013-09-19 02:40 - 2013-09-19 02:40 - 00000000 _SHDL C:\Users\UpdatusUser\Druckumgebung

2013-09-19 02:40 - 2013-09-19 02:40 - 00000000 _SHDL C:\Users\UpdatusUser\Documents\Eigene Musik

2013-09-19 02:40 - 2013-09-19 02:40 - 00000000 _SHDL C:\Users\UpdatusUser\Documents\Eigene Bilder

2013-09-19 02:40 - 2013-09-19 02:40 - 00000000 _SHDL C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programme

2013-09-19 02:40 - 2013-09-19 02:40 - 00000000 _SHDL C:\Users\UpdatusUser\AppData\Local\Verlauf

2013-09-19 02:40 - 2013-09-19 02:40 - 00000000 _SHDL C:\Users\UpdatusUser\AppData\Local\Anwendungsdaten

2013-09-19 02:40 - 2013-09-19 02:40 - 00000000 _SHDL C:\Users\UpdatusUser\Anwendungsdaten

2013-09-19 02:40 - 2013-09-19 02:40 - 00000000 _SHDL C:\Users\****\Vorlagen

2013-09-19 02:40 - 2013-09-19 02:40 - 00000000 _SHDL C:\Users\****\Startmenü

2013-09-19 02:40 - 2013-09-19 02:40 - 00000000 _SHDL C:\Users\****\Netzwerkumgebung

2013-09-19 02:40 - 2013-09-19 02:40 - 00000000 _SHDL C:\Users\****\Lokale Einstellungen

2013-09-19 02:40 - 2013-09-19 02:40 - 00000000 _SHDL C:\Users\****\Eigene Dateien

2013-09-19 02:40 - 2013-09-19 02:40 - 00000000 _SHDL C:\Users\****\Druckumgebung

2013-09-19 02:40 - 2013-09-19 02:40 - 00000000 _SHDL C:\Users\****\Documents\Eigene Musik

2013-09-19 02:40 - 2013-09-19 02:40 - 00000000 _SHDL C:\Users\****\Documents\Eigene Bilder

2013-09-19 02:40 - 2013-09-19 02:40 - 00000000 _SHDL C:\Users\****\AppData\Roaming\Microsoft\Windows\Start Menu\Programme

2013-09-19 02:40 - 2013-09-19 02:40 - 00000000 _SHDL C:\Users\****\AppData\Local\Verlauf

2013-09-19 02:40 - 2013-09-19 02:40 - 00000000 _SHDL C:\Users\****\AppData\Local\Anwendungsdaten

2013-09-19 02:40 - 2013-09-19 02:40 - 00000000 _SHDL C:\Users\****\Anwendungsdaten

2013-09-19 02:40 - 2009-07-14 06:54 - 00000000 ___RD C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories

2013-09-19 02:40 - 2009-07-14 06:54 - 00000000 ___RD C:\Users\****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories

2013-09-19 02:40 - 2009-07-14 06:49 - 00000000 ___RD C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance

2013-09-19 02:40 - 2009-07-14 06:49 - 00000000 ___RD C:\Users\****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance

2013-09-19 02:39 - 2013-09-19 02:39 - 00001355 _____ C:\Windows\TSSysprep.log

2013-09-19 02:39 - 2013-09-19 02:39 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_tcwbf_01_09_00.Wdf

2013-09-19 02:39 - 2013-09-19 02:39 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_WinUSB_01009.Wdf

2013-09-19 02:39 - 2013-09-19 02:39 - 00000000 ____D C:\Program Files\AuthenTec

2013-09-19 02:38 - 2013-09-20 23:19 - 01604444 _____ C:\Windows\WindowsUpdate.log

2013-09-19 02:38 - 2013-09-19 02:38 - 00000000 ____D C:\ProgramData\NVIDIA Corporation

2013-09-19 02:38 - 2012-12-29 10:40 - 06382008 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll

2013-09-19 02:38 - 2012-12-29 10:40 - 03455416 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll

2013-09-19 02:38 - 2012-12-29 10:40 - 02923201 _____ C:\Windows\system32\nvcoproc.bin

2013-09-19 02:38 - 2012-12-29 10:40 - 02558392 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll

2013-09-19 02:38 - 2012-12-29 10:40 - 00997816 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshext.dll

2013-09-19 02:38 - 2012-12-29 10:40 - 00884152 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe

2013-09-19 02:38 - 2012-12-29 10:40 - 00118712 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll

2013-09-19 02:38 - 2012-12-29 10:40 - 00063928 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll

2013-09-19 02:38 - 2012-12-29 10:40 - 00055736 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshextr.dll

2013-09-19 02:37 - 2013-09-19 02:50 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation

2013-09-19 02:37 - 2013-09-19 02:44 - 00000000 ____D C:\Program Files\NVIDIA Corporation

2013-09-19 02:37 - 2013-09-19 02:37 - 00000000 ____D C:\Windows\SysWOW64\RTCOM

2013-09-19 02:37 - 2013-09-19 02:37 - 00000000 ____D C:\Program Files\Realtek

2013-09-19 02:35 - 2013-09-19 02:35 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_SynTP_01009.Wdf

2013-09-19 02:35 - 2013-09-19 02:35 - 00000000 ____D C:\Program Files\Synaptics

2013-09-19 01:32 - 2013-09-19 03:34 - 00006125 _____ C:\Windows\comsetup.log

2013-09-19 00:51 - 2013-09-19 01:17 - 00003376 _____ C:\Users\****\Desktop\Windows-Kompatibilitätsbericht.htm

2013-09-19 00:43 - 2013-09-19 01:14 - 00002544 _____ C:\Windows\diagwrn.xml

2013-09-19 00:43 - 2013-09-19 01:14 - 00001890 _____ C:\Windows\diagerr.xml

2013-09-18 22:06 - 2013-09-19 14:19 - 01831285 _____ C:\Users\****\Desktop\gutschein_flicflac.cdr

2013-09-18 21:48 - 2013-09-18 21:55 - 423572207 _____ C:\Users\****\Downloads\Windows6.1-KB947821-v28-x64.msu

2013-09-18 19:16 - 2013-02-23 01:16 - 552209689 _____ C:\Users\****\Desktop\IMG_2059.MOV

2013-09-18 13:15 - 2013-09-19 03:29 - 00000000 ____D C:\Windows\System32\Tasks\Safer-Networking

2013-09-18 13:15 - 2013-09-19 02:56 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy

2013-09-18 13:14 - 2013-09-19 02:54 - 00000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy 2

2013-09-18 13:14 - 2013-09-18 13:14 - 00001383 _____ C:\Users\Public\Desktop\Spybot-S&D Start Center.lnk

2013-09-18 13:14 - 2009-01-25 13:14 - 00017272 _____ (Safer Networking Limited) C:\Windows\system32\sdnclean64.exe

2013-09-18 13:12 - 2013-09-18 13:12 - 00614816 _____ C:\Users\****\Downloads\SpyBot Search Destroy - CHIP-Downloader.exe

2013-09-17 13:01 - 2013-09-20 23:18 - 00001308 _____ C:\Windows\Tasks\LyriXeeker-1-updater.job

2013-09-17 13:01 - 2013-09-17 13:02 - 00004338 _____ C:\Windows\System32\Tasks\LyriXeeker-1-updater

2013-09-17 13:01 - 2013-09-17 13:01 - 00004142 _____ C:\Windows\System32\Tasks\LyriXeeker-1-enabler

2013-09-17 13:00 - 2013-09-20 23:18 - 00001846 _____ C:\Windows\Tasks\LyriXeeker-1-firefoxinstaller.job

2013-09-17 13:00 - 2013-09-20 23:18 - 00001212 _____ C:\Windows\Tasks\LyriXeeker-1-codedownloader.job

2013-09-17 13:00 - 2013-09-20 23:18 - 00001112 _____ C:\Windows\Tasks\LyriXeeker-1-enabler.job

2013-09-17 13:00 - 2013-09-20 10:12 - 00000000 ____D C:\Program Files (x86)\LyriXeeker-1

2013-09-17 13:00 - 2013-09-17 13:00 - 00004242 _____ C:\Windows\System32\Tasks\LyriXeeker-1-codedownloader

2013-09-17 12:59 - 2013-09-17 12:59 - 00077236 _____ (AppWork UG (haftungsbeschränkt)) C:\Users\****\Downloads\jDownloaderWebInstaller09581.exe

2013-09-17 12:09 - 2013-09-19 03:21 - 00000000 ____D C:\Users\****\Downloads\Die Innsbrucker Böhmische - Weltreise

2013-09-17 11:48 - 2013-09-19 03:21 - 00000000 ____D C:\Users\****\Downloads\Die Innsbrucker -  Böhmische

2013-09-17 11:48 - 2013-09-17 12:00 - 71710551 _____ C:\Users\****\Downloads\DIBwe.rar

2013-09-17 11:40 - 2013-09-19 03:21 - 00000000 ____D C:\Users\****\Downloads\Die Innsbrucker Böhmische - Tip-Top WEB

2013-09-17 11:31 - 2013-09-19 03:21 - 00000000 ____D C:\Users\****\Downloads\Die Innsbrucker Böhmische - Perfectum est!

2013-09-16 17:10 - 2013-09-19 03:21 - 00000000 ____D C:\Users\****\Downloads\Windows XP Professional with Service Pack 3 (x86) - CD (German)

2013-09-16 16:30 - 2013-09-16 16:30 - 00003179 _____ C:\Users\****\Desktop\Secure Download Manager.lnk

2013-09-12 22:43 - 2013-09-12 23:36 - 00010089 _____ C:\Users\****\AppData\Roaming\Durch Trennzeichen getrennte Werte.CAL

2013-09-06 10:33 - 2013-09-19 02:45 - 00000000 ____D C:\Program Files\Western Digital

2013-09-06 08:50 - 2013-09-06 08:50 - 00367200 _____ (Acronis) C:\Windows\system32\Drivers\afcdp.sys

2013-09-06 08:49 - 2013-09-19 03:16 - 00000000 ____D C:\Users\****\AppData\Roaming\17DB5932-922E-412B-B4F0-CDE14C9D6793

2013-09-06 08:49 - 2013-09-06 08:49 - 01120032 _____ (Acronis International GmbH) C:\Windows\system32\Drivers\tib.sys

2013-09-06 08:49 - 2013-09-06 08:49 - 00183224 _____ (Acronis) C:\Windows\system32\Drivers\tib_mounter.sys

2013-09-06 08:49 - 2013-09-06 08:49 - 00161568 _____ (Acronis International GmbH) C:\Windows\system32\Drivers\vididr.sys

2013-09-06 08:49 - 2013-09-06 08:49 - 00001205 _____ C:\Users\Public\Desktop\True Image 2013.lnk

2013-09-05 12:57 - 2013-09-19 03:20 - 00000000 ___RD C:\Users\****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Samsung Printers

2013-09-05 12:56 - 2013-09-19 03:15 - 00000000 ____D C:\Users\UpdatusUser\AppData\Roaming\Samsung

2013-09-05 12:56 - 2013-09-19 02:43 - 00000000 ____D C:\Program Files\Common Files\Common Desktop Agent

2013-09-05 12:42 - 2013-09-19 02:54 - 00000000 ____D C:\Program Files (x86)\Samsung Printers

2013-09-03 13:37 - 2013-09-19 02:56 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69

2013-09-03 13:37 - 2013-09-19 02:50 - 00000000 ____D C:\Program Files (x86)\iTunes

2013-09-03 13:37 - 2013-09-19 02:43 - 00000000 ____D C:\Program Files\iTunes

2013-09-03 13:37 - 2013-09-19 02:43 - 00000000 ____D C:\Program Files\iPod

2013-09-03 13:37 - 2013-09-03 13:37 - 00001783 _____ C:\Users\Public\Desktop\iTunes.lnk

2013-09-02 12:56 - 2013-09-02 13:01 - 00000000 ____D C:\Windows\pss

2013-09-02 12:10 - 2013-09-19 03:21 - 00000000 ____D C:\Users\****\Documents\Ubisoft

2013-09-02 12:00 - 2013-09-02 12:00 - 00002490 _____ C:\Users\Public\Desktop\Tom Clancy's Splinter Cell® Blacklist™.lnk

2013-09-01 21:22 - 2013-09-19 03:20 - 00000000 ____D C:\Users\****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ubisoft

2013-09-01 21:22 - 2013-09-19 03:16 - 00000000 ____D C:\Users\****\AppData\Local\Ubisoft Game Launcher

2013-09-01 21:22 - 2013-09-19 02:55 - 00000000 ____D C:\Program Files (x86)\Ubisoft

2013-09-01 21:22 - 2013-09-01 21:22 - 00001205 _____ C:\Users\****\Desktop\Uplay.lnk

2013-08-22 08:16 - 2013-08-22 08:16 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_netaapl64_01009.Wdf

FRST (Teil 2)

Code:

==================== One Month Modified Files and Folders =======
 

2013-09-20 23:21 - 2013-09-20 23:21 - 01950622 _____ (Farbar) C:\Users\****\Desktop\FRST64.exe

2013-09-20 23:19 - 2013-09-19 02:38 - 01604444 _____ C:\Windows\WindowsUpdate.log

2013-09-20 23:18 - 2013-09-17 13:01 - 00001308 _____ C:\Windows\Tasks\LyriXeeker-1-updater.job

2013-09-20 23:18 - 2013-09-17 13:00 - 00001846 _____ C:\Windows\Tasks\LyriXeeker-1-firefoxinstaller.job

2013-09-20 23:18 - 2013-09-17 13:00 - 00001212 _____ C:\Windows\Tasks\LyriXeeker-1-codedownloader.job

2013-09-20 23:18 - 2013-09-17 13:00 - 00001112 _____ C:\Windows\Tasks\LyriXeeker-1-enabler.job

2013-09-20 22:47 - 2013-05-22 18:11 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job

2013-09-20 19:47 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache

2013-09-20 19:17 - 2011-04-12 09:43 - 00702852 _____ C:\Windows\system32\perfh007.dat

2013-09-20 19:17 - 2011-04-12 09:43 - 00150460 _____ C:\Windows\system32\perfc007.dat

2013-09-20 19:17 - 2009-07-14 07:13 - 01627884 _____ C:\Windows\system32\PerfStringBackup.INI

2013-09-20 19:17 - 2009-07-14 06:45 - 00021664 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2013-09-20 19:17 - 2009-07-14 06:45 - 00021664 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2013-09-20 19:10 - 2013-09-20 10:46 - 00026640 _____ C:\Windows\setupact.log

2013-09-20 19:10 - 2013-05-20 18:12 - 00008192 _____ C:\Windows\SysWOW64\WDPABKP.dat

2013-09-20 19:10 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT

2013-09-20 19:06 - 2013-09-19 12:31 - 00001413 _____ C:\Users\****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk

2013-09-20 18:57 - 2012-03-26 08:21 - 00000000 ____D C:\Users\****\Documents\Outlook-Dateien

2013-09-20 18:57 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\PolicyDefinitions

2013-09-20 18:56 - 2013-04-30 22:29 - 00618400 _____ C:\Windows\IE10_main.log

2013-09-20 18:52 - 2013-09-20 18:52 - 19246592 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 15404544 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 14332928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 03959296 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 02876928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb

2013-09-20 18:52 - 2013-09-20 18:52 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2013-09-20 18:52 - 2013-09-20 18:52 - 02647040 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 02048000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 01509376 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2013-09-20 18:52 - 2013-09-20 18:52 - 01441280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl

2013-09-20 18:52 - 2013-09-20 18:52 - 01400416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat

2013-09-20 18:52 - 2013-09-20 18:52 - 01400416 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat

2013-09-20 18:52 - 2013-09-20 18:52 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 01054720 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe

2013-09-20 18:52 - 2013-09-20 18:52 - 00905728 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00762368 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00719360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00629248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00599552 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00523264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00452096 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00441856 _____ (Microsoft Corporation) C:\Windows\system32\html.iec

2013-09-20 18:52 - 2013-09-20 18:52 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00361984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec

2013-09-20 18:52 - 2013-09-20 18:52 - 00357888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00281600 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00270848 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00247296 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00242200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\url.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00232960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00226816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00226304 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00216064 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00204800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00185344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00173568 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe

2013-09-20 18:52 - 2013-09-20 18:52 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe

2013-09-20 18:52 - 2013-09-20 18:52 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00158720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00150528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe

2013-09-20 18:52 - 2013-09-20 18:52 - 00149504 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00144896 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe

2013-09-20 18:52 - 2013-09-20 18:52 - 00138752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe

2013-09-20 18:52 - 2013-09-20 18:52 - 00137216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe

2013-09-20 18:52 - 2013-09-20 18:52 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00125440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00117248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00110592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00097280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe

2013-09-20 18:52 - 2013-09-20 18:52 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe

2013-09-20 18:52 - 2013-09-20 18:52 - 00082432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00079872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx

2013-09-20 18:52 - 2013-09-20 18:52 - 00073728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe

2013-09-20 18:52 - 2013-09-20 18:52 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe

2013-09-20 18:52 - 2013-09-20 18:52 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx

2013-09-20 18:52 - 2013-09-20 18:52 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00057344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2013-09-20 18:52 - 2013-09-20 18:52 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00041984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00038400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00027648 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00023040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe

2013-09-20 18:52 - 2013-09-20 18:52 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe

2013-09-20 18:52 - 2013-09-20 18:52 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe

2013-09-20 18:52 - 2013-09-20 18:52 - 00011776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe

2013-09-20 14:47 - 2013-05-22 18:11 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater

2013-09-20 14:47 - 2012-04-05 08:24 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe

2013-09-20 14:47 - 2012-03-26 20:22 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

2013-09-20 10:52 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\zh-HK

2013-09-20 10:52 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\tr-TR

2013-09-20 10:52 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\zh-HK

2013-09-20 10:52 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\tr-TR

2013-09-20 10:46 - 2013-09-20 10:46 - 00000000 _____ C:\Windows\setuperr.log

2013-09-20 10:31 - 2013-09-19 17:55 - 00000000 ____D C:\Windows\Minidump

2013-09-20 10:12 - 2013-09-17 13:00 - 00000000 ____D C:\Program Files (x86)\LyriXeeker-1

2013-09-20 01:45 - 2013-09-20 01:45 - 00001113 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk

2013-09-20 01:45 - 2013-09-20 01:45 - 00000000 ____D C:\Users\****\AppData\Roaming\Malwarebytes

2013-09-20 01:45 - 2013-09-20 01:45 - 00000000 ____D C:\ProgramData\Malwarebytes

2013-09-20 01:45 - 2013-09-20 01:45 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware

2013-09-20 01:44 - 2013-09-20 01:44 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\****\Desktop\mbam-setup-1.75.0.1300.exe

2013-09-20 01:43 - 2013-09-20 01:43 - 00002403 _____ C:\Users\****\Desktop\JRT.txt

2013-09-20 01:37 - 2013-09-20 01:37 - 01029675 _____ (Thisisu) C:\Users\****\Desktop\JRT.exe

2013-09-20 01:37 - 2013-09-20 01:37 - 00000000 ____D C:\Windows\ERUNT

2013-09-20 01:34 - 2013-09-20 01:34 - 00002861 _____ C:\Users\****\Desktop\AdwCleaner[S0].txt

2013-09-20 01:31 - 2013-09-20 01:31 - 00000000 ____D C:\AdwCleaner

2013-09-20 01:30 - 2013-09-20 01:30 - 01039554 _____ C:\Users\****\Desktop\adwcleaner.exe

2013-09-19 17:55 - 2010-11-21 05:47 - 00017810 _____ C:\Windows\PFRO.log

2013-09-19 17:11 - 2013-09-19 17:08 - 00033957 _____ C:\Users\****\Desktop\ComboFix.txt

2013-09-19 17:09 - 2013-09-19 16:39 - 00000000 ____D C:\Qoobox

2013-09-19 17:03 - 2013-09-19 16:39 - 00000000 ____D C:\Windows\erdnt

2013-09-19 16:52 - 2009-07-14 04:34 - 00000215 _____ C:\Windows\system.ini

2013-09-19 16:37 - 2013-09-19 16:37 - 05128554 ____R (Swearware) C:\Users\****\Desktop\ComboFix.exe

2013-09-19 16:29 - 2013-09-19 16:29 - 00032900 _____ C:\Users\****\Desktop\logfiles.zip

2013-09-19 14:58 - 2013-09-19 14:54 - 00012112 _____ C:\Users\****\Desktop\Gmer.txt

2013-09-19 14:58 - 2013-09-19 14:45 - 00142885 _____ C:\Users\****\Desktop\FRST_alt.txt

2013-09-19 14:55 - 2013-09-19 14:44 - 00039322 _____ C:\Users\****\Desktop\Addition_alt.txt

2013-09-19 14:54 - 2013-09-19 14:42 - 00000474 _____ C:\Users\****\Desktop\defogger_disable.log

2013-09-19 14:43 - 2013-09-19 14:43 - 00000000 ____D C:\FRST

2013-09-19 14:42 - 2013-09-19 14:42 - 00000000 _____ C:\Users\****\defogger_reenable

2013-09-19 14:42 - 2013-09-19 02:40 - 00000000 ____D C:\Users\****

2013-09-19 14:41 - 2013-09-19 14:41 - 00377856 _____ C:\Users\****\Desktop\5txgbuj5.exe

2013-09-19 14:41 - 2013-09-19 14:41 - 00050477 _____ C:\Users\****\Desktop\Defogger.exe

2013-09-19 14:27 - 2013-09-19 12:31 - 00146616 _____ C:\Users\****\AppData\Local\GDIPFONTCACHEV1.DAT

2013-09-19 14:27 - 2012-03-25 21:47 - 00000000 ___RD C:\Users\****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup

2013-09-19 14:27 - 2012-03-25 21:47 - 00000000 ___RD C:\Users\****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools

2013-09-19 14:22 - 2009-07-14 06:45 - 05158952 _____ C:\Windows\system32\FNTCACHE.DAT

2013-09-19 14:20 - 2011-04-12 09:55 - 00000000 ____D C:\Program Files\Windows Journal

2013-09-19 14:20 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files\Windows Defender

2013-09-19 14:20 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files (x86)\Windows Defender

2013-09-19 14:20 - 2009-07-14 05:20 - 00000000 ____D C:\Program Files\Common Files\System

2013-09-19 14:19 - 2013-09-18 22:06 - 01831285 _____ C:\Users\****\Desktop\gutschein_flicflac.cdr

2013-09-19 14:02 - 2013-07-18 17:57 - 00000000 ____D C:\Windows\system32\MRT

2013-09-19 13:48 - 2013-09-19 13:48 - 00000134 _____ C:\Users\****\Desktop\Internet Explorer-Problembehebung.url

2013-09-19 13:39 - 2012-03-25 22:54 - 00013178 _____ C:\Windows\IE9_main.log

2013-09-19 12:35 - 2013-09-19 12:35 - 01602164 _____ C:\Windows\SysWOW64\PerfStringBackup.INI

2013-09-19 12:33 - 2009-07-14 05:20 - 00000000 __RHD C:\Users\Public\Libraries

2013-09-19 12:30 - 2013-09-19 12:30 - 00000020 ___SH C:\Users\****\ntuser.ini

2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Musik

2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Bilder

2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\Users\Default\Vorlagen

2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\Users\Default\Startmenü

2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\Users\Default\Netzwerkumgebung

2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\Users\Default\Lokale Einstellungen

2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\Users\Default\Eigene Dateien

2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\Users\Default\Druckumgebung

2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Musik

2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Bilder

2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme

2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\Users\Default\AppData\Local\Verlauf

2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\Users\Default\AppData\Local\Anwendungsdaten

2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\Users\Default\Anwendungsdaten

2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Musik

2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Bilder

2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme

2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Verlauf

2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Anwendungsdaten

2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\ProgramData\Vorlagen

2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\ProgramData\Startmenü

2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\ProgramData\Favoriten

2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\ProgramData\Dokumente

2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\ProgramData\Anwendungsdaten

2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\Program Files\Gemeinsame Dateien

2013-09-19 12:30 - 2013-09-19 03:32 - 00000000 ____D C:\Windows\Panther

2013-09-19 12:30 - 2012-03-25 21:47 - 00000000 ____D C:\Recovery

2013-09-19 12:30 - 2009-07-14 05:20 - 00000000 __RHD C:\Users\Default

2013-09-19 12:30 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\Recovery

2013-09-19 12:30 - 2009-07-14 05:20 - 00000000 ____D C:\Program Files\Windows NT

2013-09-19 03:50 - 2009-07-14 07:32 - 00000000 ____D C:\Windows\system32\restore

2013-09-19 03:34 - 2013-09-19 01:32 - 00006125 _____ C:\Windows\comsetup.log

2013-09-19 03:32 - 2009-07-14 07:38 - 00025600 ___SH C:\Windows\system32\config\BCD-Template.LOG

2013-09-19 03:32 - 2009-07-14 07:32 - 00028672 _____ C:\Windows\system32\config\BCD-Template

2013-09-19 03:32 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\oobe

2013-09-19 03:30 - 2013-09-19 03:30 - 00022960 _____ C:\Windows\system32\emptyregdb.dat

2013-09-19 03:30 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\Registration

2013-09-19 03:29 - 2013-09-18 13:15 - 00000000 ____D C:\Windows\System32\Tasks\Safer-Networking

2013-09-19 03:29 - 2013-05-20 18:15 - 00000000 ____D C:\Windows\System32\Tasks\Western Digital

2013-09-19 03:29 - 2012-08-30 00:25 - 00000000 ____D C:\Windows\System32\Tasks\Apple

2013-09-19 03:29 - 2012-03-25 22:28 - 00000000 ____D C:\Windows\System32\Tasks\OfficeSoftwareProtectionPlatform

2013-09-19 03:29 - 2009-07-14 05:20 - 00000000 __RSD C:\Windows\Media

2013-09-19 03:27 - 2013-09-19 03:27 - 00262144 _____ C:\Windows\system32\config\userdiff

2013-09-19 03:24 - 2013-09-19 03:24 - 00000000 ____D C:\Users\Default\Documents\Visual Studio 2008

2013-09-19 03:24 - 2013-09-19 03:24 - 00000000 ____D C:\Users\Default\AppData\Local\Microsoft Help

2013-09-19 03:24 - 2013-09-19 03:24 - 00000000 ____D C:\Users\Default User\Documents\Visual Studio 2008

2013-09-19 03:24 - 2013-09-19 03:24 - 00000000 ____D C:\Users\Default User\AppData\Local\Microsoft Help

2013-09-19 03:24 - 2009-07-14 06:46 - 00005157 _____ C:\Windows\DtcInstall.log

2013-09-19 03:24 - 2009-07-14 05:20 - 00000000 ___RD C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance

2013-09-19 03:24 - 2009-07-14 05:20 - 00000000 ___RD C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories

2013-09-19 03:24 - 2009-07-14 05:20 - 00000000 ___RD C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance

2013-09-19 03:24 - 2009-07-14 05:20 - 00000000 ___RD C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories

2013-09-19 03:21 - 2013-09-17 12:09 - 00000000 ____D C:\Users\****\Downloads\Die Innsbrucker Böhmische - Weltreise

2013-09-19 03:21 - 2013-09-17 11:48 - 00000000 ____D C:\Users\****\Downloads\Die Innsbrucker -  Böhmische

2013-09-19 03:21 - 2013-09-17 11:40 - 00000000 ____D C:\Users\****\Downloads\Die Innsbrucker Böhmische - Tip-Top WEB

2013-09-19 03:21 - 2013-09-17 11:31 - 00000000 ____D C:\Users\****\Downloads\Die Innsbrucker Böhmische - Perfectum est!

2013-09-19 03:21 - 2013-09-16 17:10 - 00000000 ____D C:\Users\****\Downloads\Windows XP Professional with Service Pack 3 (x86) - CD (German)

2013-09-19 03:21 - 2013-09-02 12:10 - 00000000 ____D C:\Users\****\Documents\Ubisoft

2013-09-19 03:21 - 2013-05-04 23:01 - 00000000 ____D C:\Users\****\eTeks

2013-09-19 03:21 - 2013-04-10 09:01 - 00000000 ____D C:\Users\****\Documents\Wohnung Eisenbach

2013-09-19 03:21 - 2013-03-27 21:02 - 00000000 ____D C:\Users\****\Documents\SimCity

2013-09-19 03:21 - 2012-12-26 13:41 - 00000000 ____D C:\Users\****\Documents\My Games

2013-09-19 03:21 - 2012-10-11 15:40 - 00000000 ____D C:\Users\****\Documents\My Kindle Content

2013-09-19 03:21 - 2012-08-14 22:32 - 00000000 ____D C:\Users\****\Documents\Telekom Deutschland GmbH

2013-09-19 03:21 - 2012-08-14 22:31 - 00000000 ____D C:\Users\****\Documents\Renate

2013-09-19 03:21 - 2012-06-17 19:05 - 00000000 ____D C:\Users\****\Documents\Retrieved Contents

2013-09-19 03:21 - 2012-06-08 21:29 - 00000000 ____D C:\Users\****\Documents\Mängelrüge Reise - Tanja + Madeleine

2013-09-19 03:21 - 2012-03-26 20:22 - 00000000 ____D C:\Users\****\Documents\Visual Studio 2008

2013-09-19 03:21 - 2012-03-26 08:25 - 00000000 ____D C:\Users\****\Documents\Wohnung

2013-09-19 03:21 - 2012-03-26 08:23 - 00000000 ____D C:\Users\****\Documents\Vereinsring

2013-09-19 03:21 - 2012-03-26 08:23 - 00000000 ____D C:\Users\****\Documents\Veranstaltungsfachwirt

2013-09-19 03:21 - 2012-03-26 08:22 - 00000000 ____D C:\Users\****\Documents\Uni Würzburg

2013-09-19 03:21 - 2012-03-26 08:22 - 00000000 ____D C:\Users\****\Documents\TSV Olympia

2013-09-19 03:21 - 2012-03-26 08:22 - 00000000 ____D C:\Users\****\Documents\tiere-infos.de (Pascal)-Dateien

2013-09-19 03:21 - 2012-03-26 08:22 - 00000000 ____D C:\Users\****\Documents\StreamTransport

2013-09-19 03:21 - 2012-03-26 08:22 - 00000000 ____D C:\Users\****\Documents\Steuer-Sparbuch

2013-09-19 03:21 - 2012-03-26 08:22 - 00000000 ____D C:\Users\****\Documents\Steuer

2013-09-19 03:21 - 2012-03-26 08:22 - 00000000 ____D C:\Users\****\Documents\Sony Ericsson

2013-09-19 03:21 - 2012-03-26 08:22 - 00000000 ____D C:\Users\****\Documents\snaps-****

2013-09-19 03:21 - 2012-03-26 08:22 - 00000000 ____D C:\Users\****\Documents\Routenplaner-Service.de_1

2013-09-19 03:21 - 2012-03-26 08:21 - 00000000 ____D C:\Users\****\Documents\Musikverein

2013-09-19 03:20 - 2013-09-05 12:57 - 00000000 ___RD C:\Users\****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Samsung Printers

2013-09-19 03:20 - 2013-09-01 21:22 - 00000000 ____D C:\Users\****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ubisoft

2013-09-19 03:20 - 2013-08-04 21:23 - 00000000 ____D C:\Users\****\AppData\Roaming\Skype

2013-09-19 03:20 - 2013-07-28 14:10 - 00000000 ____D C:\Users\****\Documents\Ausbildereigungsprüfung

2013-09-19 03:20 - 2013-07-01 23:12 - 00000000 ____D C:\Users\****\Desktop\CPU

2013-09-19 03:20 - 2013-07-01 13:52 - 00000000 ____D C:\Users\****\Desktop\Präsentation

2013-09-19 03:20 - 2013-06-16 22:26 - 00000000 ____D C:\Users\****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Convar

2013-09-19 03:20 - 2013-06-16 01:21 - 00000000 ____D C:\Users\****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Quadriga Games

2013-09-19 03:20 - 2013-06-01 12:26 - 00000000 ____D C:\Users\****\AppData\Roaming\TerraTec

2013-09-19 03:20 - 2013-05-30 21:37 - 00000000 ____D C:\Users\****\Documents\Betriebswirt

2013-09-19 03:20 - 2013-03-23 12:54 - 00000000 ____D C:\Users\****\Documents\Armani

2013-09-19 03:20 - 2013-02-02 12:42 - 00000000 ____D C:\Users\****\Documents\Francisco Medina

2013-09-19 03:20 - 2013-01-29 00:56 - 00000000 ____D C:\Users\****\AppData\Roaming\Youtube Downloader HD

2013-09-19 03:20 - 2013-01-12 18:00 - 00000000 ____D C:\Users\****\Documents\Karl Jany

2013-09-19 03:20 - 2012-12-02 17:10 - 00000000 ____D C:\Users\****\AppData\Roaming\MusE

2013-09-19 03:20 - 2012-12-01 13:49 - 00000000 ____D C:\Users\****\AppData\Roaming\Samsung

2013-09-19 03:20 - 2012-11-13 00:16 - 00000000 ____D C:\Users\****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PDF Split And Merge

2013-09-19 03:20 - 2012-11-03 12:18 - 00000000 ____D C:\Users\****\Documents\FUSSBALL MANAGER 13

2013-09-19 03:20 - 2012-11-02 23:15 - 00000000 ____D C:\Users\****\AppData\Roaming\Origin

2013-09-19 03:20 - 2012-10-19 16:41 - 00000000 ____D C:\Users\****\AppData\Roaming\StageManager.BD092818F67280F4B42B04877600987F0111B594.1

2013-09-19 03:20 - 2012-10-19 15:53 - 00000000 ____D C:\Users\****\AppData\Roaming\PDAppFlex

2013-09-19 03:20 - 2012-10-18 18:04 - 00000000 ____D C:\Users\****\Documents\Kirchenverwaltungswahl 2012

2013-09-19 03:20 - 2012-10-11 15:40 - 00000000 ____D C:\Users\****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Amazon

2013-09-19 03:20 - 2012-10-07 22:35 - 00000000 ____D C:\Users\****\Documents\ML-2525W_Printd

2013-09-19 03:20 - 2012-10-07 03:32 - 00000000 ____D C:\Users\****\Documents\HVB

2013-09-19 03:20 - 2012-09-27 18:24 - 00000000 ___SD C:\Users\****\Documents\Meine Shapes

2013-09-19 03:20 - 2012-09-10 19:25 - 00000000 ____D C:\Users\****\AppData\Roaming\Mp3tag

2013-09-19 03:20 - 2012-08-04 16:33 - 00000000 ____D C:\Users\****\AppData\Roaming\TeamViewer

2013-09-19 03:20 - 2012-07-22 18:27 - 00000000 ____D C:\Users\****\AppData\Roaming\NVIDIA

2013-09-19 03:20 - 2012-07-22 18:26 - 00000000 ____D C:\Users\****\AppData\Roaming\ProtectDISC

2013-09-19 03:20 - 2012-06-19 18:31 - 00000000 __SHD C:\Users\****\Documents\cache

2013-09-19 03:20 - 2012-06-19 18:31 - 00000000 ____D C:\Users\****\AppData\Roaming\webex

2013-09-19 03:20 - 2012-05-28 21:11 - 00000000 ____D C:\Users\****\AppData\Roaming\SmartTools

2013-09-19 03:20 - 2012-05-06 19:11 - 00000000 ____D C:\Users\****\AppData\Roaming\WEB.DE

2013-09-19 03:20 - 2012-04-23 11:44 - 00000000 ____D C:\Users\****\Documents\ESM-Tools

2013-09-19 03:20 - 2012-04-23 11:43 - 00000000 ____D C:\Users\****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ESM-Tools

2013-09-19 03:20 - 2012-04-01 14:27 - 00000000 ____D C:\Users\****\AppData\Roaming\vlc

2013-09-19 03:20 - 2012-04-01 11:38 - 00000000 ____D C:\Users\****\Documents\Beruf

2013-09-19 03:20 - 2012-03-26 20:24 - 00000000 ____D C:\Users\****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\IrfanView

2013-09-19 03:20 - 2012-03-26 20:22 - 00000000 ____D C:\Users\****\Documents\Corel

2013-09-19 03:20 - 2012-03-26 16:51 - 00000000 ___SD C:\Users\****\Documents\Meine Datenquellen

2013-09-19 03:20 - 2012-03-26 08:21 - 00000000 ____D C:\Users\****\Documents\Mein Steuer-Sparbuch Heute

2013-09-19 03:20 - 2012-03-26 08:21 - 00000000 ____D C:\Users\****\Documents\Kontoauszüge

2013-09-19 03:20 - 2012-03-26 08:21 - 00000000 ____D C:\Users\****\Documents\Junge Union

2013-09-19 03:20 - 2012-03-26 08:21 - 00000000 ____D C:\Users\****\Documents\Hattrick Organizer

2013-09-19 03:20 - 2012-03-26 08:21 - 00000000 ____D C:\Users\****\Documents\Hattrick Logo

2013-09-19 03:20 - 2012-03-26 08:21 - 00000000 ____D C:\Users\****\Documents\Handy

2013-09-19 03:20 - 2012-03-26 08:21 - 00000000 ____D C:\Users\****\Documents\Facharbeit Alle Dateien

2013-09-19 03:20 - 2012-03-26 08:20 - 00000000 ____D C:\Users\****\Documents\Daten vom P1i

2013-09-19 03:20 - 2012-03-26 08:17 - 00000000 ____D C:\Users\****\Documents\CSU

2013-09-19 03:20 - 2012-03-26 08:17 - 00000000 ____D C:\Users\****\Documents\Blasmusikfreunde Eisenbach

2013-09-19 03:20 - 2012-03-26 08:16 - 00000000 ____D C:\Users\****\Documents\Bewerbung

2013-09-19 03:20 - 2012-03-26 08:16 - 00000000 ____D C:\Users\****\Documents\Barclaycard

2013-09-19 03:20 - 2012-03-26 08:16 - 00000000 ____D C:\Users\****\Documents\Auslandskrankenversicherung

2013-09-19 03:20 - 2012-03-26 08:15 - 00000000 ____D C:\Users\****\Documents\50. Geburtstag Gerald

2013-09-19 03:20 - 2012-03-25 22:48 - 00000000 ____D C:\Users\****\AppData\Roaming\Protector Suite

2013-09-19 03:20 - 2012-03-25 22:25 - 00000000 ____D C:\Users\****\AppData\Roaming\WinRAR

2013-09-19 03:20 - 2012-03-25 22:25 - 00000000 ____D C:\Users\****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR

2013-09-19 03:20 - 2012-03-25 22:16 - 00000000 ____D C:\Users\****\AppData\Roaming\Mozilla

2013-09-19 03:19 - 2013-05-16 22:04 - 00000000 ____D C:\Users\****\AppData\Roaming\bol

2013-09-19 03:19 - 2013-02-15 20:15 - 00000000 ____D C:\Users\****\AppData\Roaming\BOM

2013-09-19 03:19 - 2013-01-27 17:18 - 00000000 ____D C:\Users\****\AppData\Roaming\e-academy Inc

2013-09-19 03:19 - 2012-10-19 14:17 - 00000000 ____D C:\Users\****\AppData\Roaming\com.adobe.downloadassistant.AdobeDownloadAssistant

2013-09-19 03:19 - 2012-10-07 22:56 - 00000000 ____D C:\Users\****\AppData\Roaming\FRITZ!

2013-09-19 03:19 - 2012-09-22 23:37 - 00000000 ____D C:\Users\****\AppData\Roaming\HandBrake

2013-09-19 03:19 - 2012-09-22 23:34 - 00000000 ____D C:\Users\****\AppData\Roaming\Free iPad Video Converter

2013-09-19 03:19 - 2012-04-23 11:44 - 00000000 ____D C:\Users\****\AppData\Roaming\ESM-Tools

2013-09-19 03:19 - 2012-04-13 20:25 - 00000000 ____D C:\Users\****\AppData\Roaming\FileZilla

2013-09-19 03:19 - 2012-04-09 21:56 - 00000000 ____D C:\Users\****\AppData\Roaming\Ashampoo

2013-09-19 03:19 - 2012-04-01 10:47 - 00000000 ____D C:\Users\****\AppData\Roaming\Buhl Data Service

2013-09-19 03:19 - 2012-03-31 14:20 - 00000000 ____D C:\Users\****\AppData\Roaming\Apple Computer

2013-09-19 03:19 - 2012-03-26 21:33 - 00000000 ____D C:\Users\****\AppData\Roaming\Corel

2013-09-19 03:19 - 2012-03-26 20:24 - 00000000 ____D C:\Users\****\AppData\Roaming\IrfanView

2013-09-19 03:19 - 2012-03-26 20:22 - 00000000 ____D C:\Users\****\AppData\Roaming\Macromedia

2013-09-19 03:19 - 2012-03-25 22:29 - 00000000 ____D C:\Users\****\AppData\Roaming\InstallShield

2013-09-19 03:19 - 2012-03-25 22:11 - 00000000 ____D C:\Users\****\AppData\Roaming\Intel

2013-09-19 03:16 - 2013-09-06 08:49 - 00000000 ____D C:\Users\****\AppData\Roaming\17DB5932-922E-412B-B4F0-CDE14C9D6793

2013-09-19 03:16 - 2013-09-01 21:22 - 00000000 ____D C:\Users\****\AppData\Local\Ubisoft Game Launcher

2013-09-19 03:16 - 2013-05-20 18:15 - 00000000 ____D C:\Users\****\AppData\Local\Western_Digital_Technolog

2013-09-19 03:16 - 2013-01-29 01:10 - 00000000 ____D C:\Users\****\AppData\Local\Windows Live

2013-09-19 03:16 - 2012-12-26 13:41 - 00000000 ____D C:\Users\****\AppData\Local\My Games

2013-09-19 03:16 - 2012-12-02 17:10 - 00000000 ____D C:\Users\****\AppData\Local\MusE

2013-09-19 03:16 - 2012-11-02 23:15 - 00000000 ____D C:\Users\****\AppData\Local\Origin

2013-09-19 03:16 - 2012-09-06 17:54 - 00000000 ____D C:\Users\****\AppData\Roaming\Acronis

2013-09-19 03:16 - 2012-07-22 18:27 - 00000000 ____D C:\Users\****\AppData\Local\Quadriga Games

2013-09-19 03:16 - 2012-05-22 19:38 - 00000000 ____D C:\Users\****\AppData\Roaming\Amazon

2013-09-19 03:16 - 2012-04-23 13:50 - 00000000 ____D C:\Users\****\AppData\Local\PDF24

2013-09-19 03:16 - 2012-04-09 20:01 - 00000000 ____D C:\Users\****\AppData\Local\Western_Digital

2013-09-19 03:16 - 2012-04-09 20:00 - 00000000 ____D C:\Users\****\AppData\Local\Western Digital

2013-09-19 03:16 - 2012-03-25 23:12 - 00000000 ____D C:\Users\****\AppData\Roaming\Adobe

2013-09-19 03:16 - 2012-03-25 21:47 - 00000000 ____D C:\Users\****\AppData\Local\VirtualStore

2013-09-19 03:15 - 2013-09-05 12:56 - 00000000 ____D C:\Users\UpdatusUser\AppData\Roaming\Samsung

2013-09-19 03:15 - 2013-04-28 12:59 - 00000000 ____D C:\Users\****\AppData\Local\e-academy Inc

2013-09-19 03:15 - 2013-03-22 19:57 - 00000000 ____D C:\Users\****\AppData\Local\Macromedia

2013-09-19 03:15 - 2013-02-14 12:09 - 00000000 ____D C:\Users\****\AppData\Local\Apps\2.0

2013-09-19 03:15 - 2012-12-02 20:35 - 00000000 ____D C:\Users\****\AppData\Local\gegl-0.2

2013-09-19 03:15 - 2012-12-02 20:35 - 00000000 ____D C:\Users\****\.gimp-2.8

2013-09-19 03:15 - 2012-11-13 00:21 - 00000000 ____D C:\Users\****\.pdfsam

2013-09-19 03:15 - 2012-10-11 15:40 - 00000000 ____D C:\Users\****\AppData\Local\Amazon

2013-09-19 03:15 - 2012-10-07 22:56 - 00000000 ____D C:\Users\****\AppData\Local\FRITZ!

2013-09-19 03:15 - 2012-10-04 22:58 - 00000000 ____D C:\Users\****\AppData\Local\Eraser 6

2013-09-19 03:15 - 2012-04-09 21:55 - 00000000 ____D C:\Users\****\AppData\Local\ashampoo

2013-09-19 03:15 - 2012-04-01 10:47 - 00000000 ____D C:\Users\****\AppData\Local\Buhl Data Service

2013-09-19 03:15 - 2012-04-01 10:25 - 00000000 ____D C:\Users\****\AppData\Local\Buhl

2013-09-19 03:15 - 2012-03-31 14:20 - 00000000 ____D C:\Users\****\AppData\Local\Apple Computer

2013-09-19 03:15 - 2012-03-31 14:18 - 00000000 ____D C:\Users\****\AppData\Local\Apple

2013-09-19 03:15 - 2012-03-25 23:12 - 00000000 ____D C:\Users\****\AppData\Local\Adobe

2013-09-19 03:15 - 2012-03-25 22:24 - 00000000 ____D C:\Users\****\AppData\Local\Microsoft Help

2013-09-19 03:15 - 2012-03-25 22:16 - 00000000 ____D C:\Users\****\AppData\Local\Mozilla

2013-09-19 03:00 - 2013-01-30 22:39 - 00000000 ____D C:\Windows\SysWOW64\spool

2013-09-19 03:00 - 2012-03-26 20:23 - 00000000 ____D C:\Windows\SysWOW64\Adobe

2013-09-19 03:00 - 2012-03-26 20:22 - 00000000 ____D C:\Windows\SysWOW64\Macromed

2013-09-19 03:00 - 2012-03-25 22:47 - 00000000 ____D C:\Windows\SysWOW64\NV

2013-09-19 03:00 - 2012-03-25 22:26 - 00000000 ____D C:\Windows\SysWOW64\SDA

2013-09-19 03:00 - 2009-07-14 07:32 - 00000000 ____D C:\Windows\system32\WinBioDatabase

2013-09-19 02:59 - 2012-03-26 20:30 - 00000000 ____D C:\Windows\Samsung

2013-09-19 02:59 - 2012-03-26 20:22 - 00000000 ____D C:\Windows\system32\Macromed

2013-09-19 02:59 - 2012-03-25 22:47 - 00000000 ____D C:\Windows\system32\NV

2013-09-19 02:59 - 2011-04-12 09:54 - 00000000 ____D C:\Windows\ShellNew

2013-09-19 02:59 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\NDF

2013-09-19 02:58 - 2013-01-29 01:15 - 00000000 ____D C:\Windows\de

2013-09-19 02:58 - 2012-08-23 17:05 - 00000000 ____D C:\Windows\CheckSur

2013-09-19 02:58 - 2012-07-22 18:18 - 00000000 ____D C:\Windows\3F5C371F8EA24F259D3DD0B4526E3AEA.TMP

2013-09-19 02:58 - 2012-03-25 22:43 - 00000000 ____D C:\Windows\Downloaded Installations

2013-09-19 02:57 - 2013-01-30 22:20 - 00000000 ____D C:\Users\Public\Documents\Adobe PDF

2013-09-19 02:57 - 2012-10-02 18:25 - 00000000 ____D C:\Users\Gaeste

2013-09-19 02:57 - 2012-03-26 20:23 - 00000000 ____D C:\Users\Public\Documents\Corel

2013-09-19 02:56 - 2013-09-18 13:15 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy

2013-09-19 02:56 - 2013-09-03 13:37 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69

2013-09-19 02:56 - 2013-08-04 21:23 - 00000000 ____D C:\ProgramData\Skype

2013-09-19 02:56 - 2013-06-01 12:27 - 00000000 ____D C:\ProgramData\TerraTec

2013-09-19 02:56 - 2013-05-20 18:10 - 00000000 ____D C:\ProgramData\Package Cache

2013-09-19 02:56 - 2013-01-29 01:13 - 00000000 ____D C:\Program Files (x86)\Windows Live

2013-09-19 02:56 - 2013-01-21 22:51 - 00000000 ____D C:\ProgramData\SlySoft

2013-09-19 02:56 - 2012-11-02 23:07 - 00000000 ____D C:\ProgramData\Origin

2013-09-19 02:56 - 2012-11-02 23:07 - 00000000 ____D C:\ProgramData\Electronic Arts

2013-09-19 02:56 - 2012-10-28 17:53 - 00000000 ____D C:\Users\Admin

2013-09-19 02:56 - 2012-10-19 15:45 - 00000000 ____D C:\ProgramData\regid.1986-12.com.adobe

2013-09-19 02:56 - 2012-09-06 17:53 - 00000000 ____D C:\ProgramData\Acronis

2013-09-19 02:56 - 2012-09-02 13:31 - 00000000 ____D C:\ProgramData\Sun

2013-09-19 02:56 - 2012-06-19 18:30 - 00000000 ____D C:\ProgramData\WebEx

2013-09-19 02:56 - 2012-05-20 21:09 - 00000000 ____D C:\ProgramData\Bitstream

2013-09-19 02:56 - 2012-05-06 19:11 - 00000000 ____D C:\ProgramData\WEB.DE

2013-09-19 02:56 - 2012-05-06 12:53 - 00000000 ____D C:\ProgramData\Mozilla

2013-09-19 02:56 - 2012-04-09 21:55 - 00000000 ____D C:\ProgramData\ashampoo

2013-09-19 02:56 - 2012-04-09 20:00 - 00000000 ____D C:\ProgramData\Western Digital

2013-09-19 02:56 - 2012-04-01 10:23 - 00000000 ____D C:\ProgramData\Buhl Data Service GmbH

2013-09-19 02:56 - 2012-04-01 10:23 - 00000000 ____D C:\Program Files (x86)\WISO

2013-09-19 02:56 - 2012-03-31 17:48 - 00000000 ___HD C:\ProgramData\CanonBJ

2013-09-19 02:56 - 2012-03-31 14:19 - 00000000 ____D C:\ProgramData\Apple Computer

2013-09-19 02:56 - 2012-03-31 14:19 - 00000000 ____D C:\ProgramData\{93E26451-CD9A-43A5-A2FA-C42392EA4001}

2013-09-19 02:56 - 2012-03-31 14:17 - 00000000 ____D C:\ProgramData\Apple

2013-09-19 02:56 - 2012-03-26 21:33 - 00000000 ____D C:\ProgramData\Protexis

2013-09-19 02:56 - 2012-03-26 20:30 - 00000000 ____D C:\ProgramData\Samsung

2013-09-19 02:56 - 2012-03-25 23:27 - 00000000 ____D C:\ProgramData\Corel

2013-09-19 02:56 - 2012-03-25 23:08 - 00000000 ____D C:\ProgramData\Adobe

2013-09-19 02:56 - 2012-03-25 22:37 - 00000000 ____D C:\ProgramData\FLEXnet

2013-09-19 02:56 - 2012-03-25 22:36 - 00000000 ____D C:\ProgramData\NVIDIA

2013-09-19 02:56 - 2012-03-25 22:33 - 00000000 ____D C:\ProgramData\Creative

2013-09-19 02:56 - 2012-03-25 22:24 - 00000000 ____D C:\ProgramData\Microsoft Help

2013-09-19 02:56 - 2012-03-25 22:10 - 00000000 ____D C:\ProgramData\Intel

2013-09-19 02:55 - 2013-09-01 21:22 - 00000000 ____D C:\Program Files (x86)\Ubisoft

2013-09-19 02:55 - 2013-06-01 12:27 - 00000000 ____D C:\Program Files (x86)\TerraTec

2013-09-19 02:55 - 2013-05-20 18:12 - 00000000 ____D C:\Program Files (x86)\Western Digital

2013-09-19 02:55 - 2012-12-25 20:48 - 00000000 ____D C:\Program Files (x86)\Steam

2013-09-19 02:55 - 2012-09-30 13:38 - 00000000 ____D C:\Program Files (x86)\StreamTransport

2013-09-19 02:55 - 2012-09-02 20:42 - 00000000 ____D C:\Program Files (x86)\Tools&More

2013-09-19 02:55 - 2012-09-02 15:10 - 00000000 ____D C:\Program Files (x86)\Western Digital Corporation

2013-09-19 02:55 - 2012-05-06 19:11 - 00000000 ____D C:\Program Files (x86)\WEB.DE

2013-09-19 02:55 - 2012-04-01 14:27 - 00000000 ____D C:\Program Files (x86)\VideoLAN

2013-09-19 02:55 - 2012-03-25 22:54 - 00000000 ____D C:\Program Files (x86)\TeamViewer

2013-09-19 02:54 - 2013-09-18 13:14 - 00000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy 2

2013-09-19 02:54 - 2013-09-05 12:42 - 00000000 ____D C:\Program Files (x86)\Samsung Printers

2013-09-19 02:54 - 2013-08-04 21:23 - 00000000 ___RD C:\Program Files (x86)\Skype

2013-09-19 02:54 - 2013-06-16 23:05 - 00000000 ____D C:\Program Files (x86)\Smart PC Solutions

2013-09-19 02:54 - 2013-03-07 19:21 - 00000000 ____D C:\Program Files (x86)\SonyEditor

2013-09-19 02:54 - 2012-12-28 15:44 - 00000000 ____D C:\Program Files (x86)\SlySoft

2013-09-19 02:54 - 2012-03-26 20:30 - 00000000 ____D C:\Program Files (x86)\SamsungPrinterLiveUpdate

2013-09-19 02:54 - 2012-03-26 20:30 - 00000000 ____D C:\Program Files (x86)\Samsung

2013-09-19 02:54 - 2012-03-25 22:29 - 00000000 ____D C:\Program Files (x86)\Realtek

2013-09-19 02:54 - 2012-03-25 22:27 - 00000000 ____D C:\Program Files (x86)\Renesas Electronics

2013-09-19 02:51 - 2012-11-13 00:16 - 00000000 ____D C:\Program Files (x86)\pdfsam

2013-09-19 02:51 - 2012-11-02 23:15 - 00000000 ____D C:\Program Files (x86)\Origin Games

2013-09-19 02:51 - 2012-07-22 18:08 - 00000000 ____D C:\Program Files (x86)\Quadriga Games

2013-09-19 02:51 - 2012-03-25 23:13 - 00000000 ____D C:\Program Files (x86)\PDF24

2013-09-19 02:50 - 2013-09-19 02:37 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation

2013-09-19 02:50 - 2013-09-03 13:37 - 00000000 ____D C:\Program Files (x86)\iTunes

2013-09-19 02:50 - 2013-08-18 13:25 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox

2013-09-19 02:50 - 2013-06-26 19:17 - 00000000 ____D C:\Program Files (x86)\Java

2013-09-19 02:50 - 2013-03-14 23:18 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight

2013-09-19 02:50 - 2012-12-02 17:10 - 00000000 ____D C:\Program Files (x86)\MuseScore

2013-09-19 02:50 - 2012-11-02 23:07 - 00000000 ____D C:\Program Files (x86)\Origin

2013-09-19 02:50 - 2012-09-10 19:25 - 00000000 ____D C:\Program Files (x86)\Mp3tag

2013-09-19 02:50 - 2012-05-06 12:53 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service

2013-09-19 02:50 - 2012-03-26 20:21 - 00000000 ____D C:\Program Files (x86)\Microsoft Visual Studio 9.0

2013-09-19 02:50 - 2012-03-26 20:21 - 00000000 ____D C:\Program Files (x86)\Microsoft SDKs

2013-09-19 02:50 - 2012-03-25 22:41 - 00000000 ____D C:\Program Files (x86)\Microsoft Security Client

2013-09-19 02:50 - 2012-03-25 22:29 - 00000000 ____D C:\Program Files (x86)\Microsoft SQL Server Compact Edition

2013-09-19 02:50 - 2012-03-25 22:25 - 00000000 ____D C:\Program Files (x86)\Microsoft Analysis Services

2013-09-19 02:50 - 2012-03-25 22:24 - 00000000 ____D C:\Program Files (x86)\Microsoft Office

2013-09-19 02:50 - 2012-03-25 22:00 - 00000000 ____D C:\Program Files (x86)\JMicron

2013-09-19 02:49 - 2013-06-16 22:26 - 00000000 ____D C:\Program Files (x86)\Convar

2013-09-19 02:49 - 2013-06-01 12:27 - 00000000 ____D C:\Program Files (x86)\Elgato

2013-09-19 02:49 - 2012-12-28 23:15 - 00000000 ____D C:\Program Files (x86)\FileZilla FTP Client

2013-09-19 02:49 - 2012-12-20 13:45 - 00000000 ____D C:\Program Files (x86)\FreePDF_XP

2013-09-19 02:49 - 2012-09-14 18:31 - 00000000 ____D C:\Program Files (x86)\eXpress CheckSum Calculator

2013-09-19 02:49 - 2012-05-15 21:10 - 00000000 ____D C:\Program Files (x86)\eRightSoft

2013-09-19 02:49 - 2012-04-23 11:43 - 00000000 ____D C:\Program Files (x86)\ESM-Tools

2013-09-19 02:49 - 2012-03-26 20:24 - 00000000 ____D C:\Program Files (x86)\IrfanView

2013-09-19 02:49 - 2012-03-26 20:21 - 00000000 ____D C:\Program Files (x86)\gs

2013-09-19 02:49 - 2012-03-26 20:11 - 00000000 ____D C:\Program Files (x86)\Corel

2013-09-19 02:49 - 2012-03-25 22:32 - 00000000 ____D C:\Program Files (x86)\Creative

2013-09-19 02:49 - 2012-03-25 22:27 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information

2013-09-19 02:49 - 2012-03-25 22:27 - 00000000 ____D C:\Program Files (x86)\Hotkey

2013-09-19 02:49 - 2012-03-25 21:59 - 00000000 ____D C:\Program Files (x86)\Intel

2013-09-19 02:48 - 2013-02-15 20:15 - 00000000 ____D C:\Program Files (x86)\Biet-O-Matic

2013-09-19 02:48 - 2012-09-30 13:48 - 00000000 ____D C:\Program Files (x86)\AviSynth 2.5

2013-09-19 02:48 - 2012-08-30 00:25 - 00000000 ____D C:\Program Files (x86)\Bonjour

2013-09-19 02:48 - 2012-08-30 00:25 - 00000000 ____D C:\Program Files (x86)\Apple Software Update

2013-09-19 02:48 - 2012-05-22 19:37 - 00000000 ____D C:\Program Files (x86)\Amazon

2013-09-19 02:48 - 2012-04-09 21:55 - 00000000 ____D C:\Program Files (x86)\Ashampoo

2013-09-19 02:48 - 2012-03-25 23:09 - 00000000 ____D C:\Program Files (x86)\Adobe

2013-09-19 02:48 - 2012-03-25 22:30 - 00000000 ____D C:\Program Files (x86)\ChiconyCam

2013-09-19 02:48 - 2012-03-25 22:30 - 00000000 ____D C:\Program Files (x86)\BisonCam

2013-09-19 02:48 - 2012-03-25 22:10 - 00000000 ____D C:\Program Files (x86)\Cisco

2013-09-19 02:47 - 2012-09-06 17:53 - 00000000 ____D C:\Program Files (x86)\Acronis

2013-09-19 02:47 - 2012-03-25 22:25 - 00000000 ____D C:\Program Files\WinRAR

2013-09-19 02:45 - 2013-09-06 10:33 - 00000000 ____D C:\Program Files\Western Digital

2013-09-19 02:45 - 2012-10-21 17:54 - 00000000 ____D C:\Program Files\Recuva

2013-09-19 02:45 - 2012-03-25 22:43 - 00000000 ____D C:\Program Files\Protector Suite

2013-09-19 02:44 - 2013-09-19 02:37 - 00000000 ____D C:\Program Files\NVIDIA Corporation

2013-09-19 02:44 - 2013-03-14 23:18 - 00000000 ____D C:\Program Files\Microsoft Silverlight

2013-09-19 02:44 - 2012-03-25 22:41 - 00000000 ____D C:\Program Files\Microsoft Security Client

2013-09-19 02:43 - 2013-09-05 12:56 - 00000000 ____D C:\Program Files\Common Files\Common Desktop Agent

2013-09-19 02:43 - 2013-09-03 13:37 - 00000000 ____D C:\Program Files\iTunes

2013-09-19 02:43 - 2013-09-03 13:37 - 00000000 ____D C:\Program Files\iPod

2013-09-19 02:43 - 2013-05-20 18:12 - 00000000 ____D C:\Program Files\Common Files\Western Digital

2013-09-19 02:43 - 2013-02-02 11:56 - 00000000 ____D C:\Program Files\Microsoft Office 15

2013-09-19 02:43 - 2012-09-22 23:37 - 00000000 ____D C:\Program Files\Handbrake

2013-09-19 02:43 - 2012-09-02 15:44 - 00000000 ____D C:\Program Files\A-FF Find and Mount

2013-09-19 02:43 - 2012-08-30 00:25 - 00000000 ____D C:\Program Files\Common Files\Apple

2013-09-19 02:43 - 2012-08-30 00:25 - 00000000 ____D C:\Program Files\Bonjour

2013-09-19 02:43 - 2012-03-25 22:43 - 00000000 ____D C:\Program Files\Common Files\SPBA

2013-09-19 02:43 - 2012-03-25 22:25 - 00000000 ____D C:\Program Files\Microsoft Office

2013-09-19 02:43 - 2012-03-25 22:10 - 00000000 ____D C:\Program Files\Intel

2013-09-19 02:43 - 2012-03-25 22:10 - 00000000 ____D C:\Program Files\Common Files\Intel

2013-09-19 02:43 - 2009-07-14 05:20 - 00000000 ____D C:\Program Files\Common Files\Microsoft Shared

2013-09-19 02:40 - 2013-09-19 02:40 - 00000000 _SHDL C:\Users\UpdatusUser\Vorlagen

2013-09-19 02:40 - 2013-09-19 02:40 - 00000000 _SHDL C:\Users\UpdatusUser\Startmenü

2013-09-19 02:40 - 2013-09-19 02:40 - 00000000 _SHDL C:\Users\UpdatusUser\Netzwerkumgebung

2013-09-19 02:40 - 2013-09-19 02:40 - 00000000 _SHDL C:\Users\UpdatusUser\Lokale Einstellungen

2013-09-19 02:40 - 2013-09-19 02:40 - 00000000 _SHDL C:\Users\UpdatusUser\Eigene Dateien

2013-09-19 02:40 - 2013-09-19 02:40 - 00000000 _SHDL C:\Users\UpdatusUser\Druckumgebung

2013-09-19 02:40 - 2013-09-19 02:40 - 00000000 _SHDL C:\Users\UpdatusUser\Documents\Eigene Musik

2013-09-19 02:40 - 2013-09-19 02:40 - 00000000 _SHDL C:\Users\UpdatusUser\Documents\Eigene Bilder

2013-09-19 02:40 - 2013-09-19 02:40 - 00000000 _SHDL C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programme

2013-09-19 02:40 - 2013-09-19 02:40 - 00000000 _SHDL C:\Users\UpdatusUser\AppData\Local\Verlauf

2013-09-19 02:40 - 2013-09-19 02:40 - 00000000 _SHDL C:\Users\UpdatusUser\AppData\Local\Anwendungsdaten

2013-09-19 02:40 - 2013-09-19 02:40 - 00000000 _SHDL C:\Users\UpdatusUser\Anwendungsdaten

2013-09-19 02:40 - 2013-09-19 02:40 - 00000000 _SHDL C:\Users\****\Vorlagen

2013-09-19 02:40 - 2013-09-19 02:40 - 00000000 _SHDL C:\Users\****\Startmenü

2013-09-19 02:40 - 2013-09-19 02:40 - 00000000 _SHDL C:\Users\****\Netzwerkumgebung

2013-09-19 02:40 - 2013-09-19 02:40 - 00000000 _SHDL C:\Users\****\Lokale Einstellungen

2013-09-19 02:40 - 2013-09-19 02:40 - 00000000 _SHDL C:\Users\****\Eigene Dateien

2013-09-19 02:40 - 2013-09-19 02:40 - 00000000 _SHDL C:\Users\****\Druckumgebung

2013-09-19 02:40 - 2013-09-19 02:40 - 00000000 _SHDL C:\Users\****\Documents\Eigene Musik

2013-09-19 02:40 - 2013-09-19 02:40 - 00000000 _SHDL C:\Users\****\Documents\Eigene Bilder

2013-09-19 02:40 - 2013-09-19 02:40 - 00000000 _SHDL C:\Users\****\AppData\Roaming\Microsoft\Windows\Start Menu\Programme

2013-09-19 02:40 - 2013-09-19 02:40 - 00000000 _SHDL C:\Users\****\AppData\Local\Verlauf

2013-09-19 02:40 - 2013-09-19 02:40 - 00000000 _SHDL C:\Users\****\AppData\Local\Anwendungsdaten

2013-09-19 02:40 - 2013-09-19 02:40 - 00000000 _SHDL C:\Users\****\Anwendungsdaten

2013-09-19 02:40 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\sysprep

2013-09-19 02:39 - 2013-09-19 02:39 - 00001355 _____ C:\Windows\TSSysprep.log

2013-09-19 02:39 - 2013-09-19 02:39 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_tcwbf_01_09_00.Wdf

2013-09-19 02:39 - 2013-09-19 02:39 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_WinUSB_01009.Wdf

2013-09-19 02:39 - 2013-09-19 02:39 - 00000000 ____D C:\Program Files\AuthenTec

2013-09-19 02:39 - 2009-07-14 07:32 - 00000000 ____D C:\Windows\system32\WinBioPlugIns

2013-09-19 02:38 - 2013-09-19 02:38 - 00000000 ____D C:\ProgramData\NVIDIA Corporation

2013-09-19 02:38 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\Help

2013-09-19 02:37 - 2013-09-19 02:37 - 00000000 ____D C:\Windows\SysWOW64\RTCOM

2013-09-19 02:37 - 2013-09-19 02:37 - 00000000 ____D C:\Program Files\Realtek

2013-09-19 02:35 - 2013-09-19 02:35 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_SynTP_01009.Wdf

2013-09-19 02:35 - 2013-09-19 02:35 - 00000000 ____D C:\Program Files\Synaptics

2013-09-19 01:54 - 2012-03-25 21:47 - 01939773 _____ C:\Windows\WindowsUpdate (1).log

2013-09-19 01:17 - 2013-09-19 00:51 - 00003376 _____ C:\Users\****\Desktop\Windows-Kompatibilitätsbericht.htm

2013-09-19 01:14 - 2013-09-19 00:43 - 00002544 _____ C:\Windows\diagwrn.xml

2013-09-19 01:14 - 2013-09-19 00:43 - 00001890 _____ C:\Windows\diagerr.xml

2013-09-18 22:06 - 2013-09-19 14:19 - 02850416 _____ C:\Users\****\Desktop\Sicherungskopie_von_flic.cdr

2013-09-18 21:55 - 2013-09-18 21:48 - 423572207 _____ C:\Users\****\Downloads\Windows6.1-KB947821-v28-x64.msu

2013-09-18 13:14 - 2013-09-18 13:14 - 00001383 _____ C:\Users\Public\Desktop\Spybot-S&D Start Center.lnk

2013-09-18 13:12 - 2013-09-18 13:12 - 00614816 _____ C:\Users\****\Downloads\SpyBot Search Destroy - CHIP-Downloader.exe

2013-09-17 13:36 - 2012-12-20 13:47 - 00000000 ____D C:\Users\****\AppData\Local\FreePDF_XP

2013-09-17 13:02 - 2013-09-17 13:01 - 00004338 _____ C:\Windows\System32\Tasks\LyriXeeker-1-updater

2013-09-17 13:01 - 2013-09-17 13:01 - 00004142 _____ C:\Windows\System32\Tasks\LyriXeeker-1-enabler

2013-09-17 13:00 - 2013-09-17 13:00 - 00004242 _____ C:\Windows\System32\Tasks\LyriXeeker-1-codedownloader

2013-09-17 12:59 - 2013-09-17 12:59 - 00077236 _____ (AppWork UG (haftungsbeschränkt)) C:\Users\****\Downloads\jDownloaderWebInstaller09581.exe

2013-09-17 12:00 - 2013-09-17 11:48 - 71710551 _____ C:\Users\****\Downloads\DIBwe.rar

2013-09-16 20:59 - 2012-03-26 20:31 - 00000099 _____ C:\Users\Public\LMDebug.log

2013-09-16 16:30 - 2013-09-16 16:30 - 00003179 _____ C:\Users\****\Desktop\Secure Download Manager.lnk

2013-09-12 23:36 - 2013-09-12 22:43 - 00010089 _____ C:\Users\****\AppData\Roaming\Durch Trennzeichen getrennte Werte.CAL

2013-09-06 10:33 - 2012-03-25 22:10 - 00108534 _____ C:\Windows\DPINST.LOG

2013-09-06 08:50 - 2013-09-06 08:50 - 00367200 _____ (Acronis) C:\Windows\system32\Drivers\afcdp.sys

2013-09-06 08:49 - 2013-09-06 08:49 - 01120032 _____ (Acronis International GmbH) C:\Windows\system32\Drivers\tib.sys

2013-09-06 08:49 - 2013-09-06 08:49 - 00183224 _____ (Acronis) C:\Windows\system32\Drivers\tib_mounter.sys

2013-09-06 08:49 - 2013-09-06 08:49 - 00161568 _____ (Acronis International GmbH) C:\Windows\system32\Drivers\vididr.sys

2013-09-06 08:49 - 2013-09-06 08:49 - 00001205 _____ C:\Users\Public\Desktop\True Image 2013.lnk

2013-09-06 08:49 - 2012-10-23 18:28 - 01462560 _____ (Acronis International GmbH) C:\Windows\system32\Drivers\tdrpman.sys

2013-09-06 08:49 - 2012-10-23 17:45 - 00117024 _____ (Acronis International GmbH) C:\Windows\system32\Drivers\vidsflt.sys

2013-09-06 08:49 - 2012-10-23 17:44 - 00108832 _____ (Acronis International GmbH) C:\Windows\system32\Drivers\fltsrv.sys

2013-09-06 08:49 - 2012-09-06 17:53 - 00233760 _____ (Acronis) C:\Windows\system32\Drivers\snapman.sys

2013-09-03 13:37 - 2013-09-03 13:37 - 00001783 _____ C:\Users\Public\Desktop\iTunes.lnk

2013-09-02 13:01 - 2013-09-02 12:56 - 00000000 ____D C:\Windows\pss

2013-09-02 12:01 - 2012-07-22 18:19 - 00098951 _____ C:\Windows\DirectX.log

2013-09-02 12:00 - 2013-09-02 12:00 - 00002490 _____ C:\Users\Public\Desktop\Tom Clancy's Splinter Cell® Blacklist™.lnk

2013-09-01 21:22 - 2013-09-01 21:22 - 00001205 _____ C:\Users\****\Desktop\Uplay.lnk

2013-09-01 17:08 - 2013-09-19 13:59 - 79143768 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

2013-08-22 17:48 - 2012-04-01 10:25 - 00000687 _____ C:\Windows\wiso.ini

2013-08-22 08:16 - 2013-08-22 08:16 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_netaapl64_01009.Wdf
 

Some content of TEMP:

====================

C:\Users\****\AppData\Local\Temp\Quarantine.exe
 
 

==================== Bamital & volsnap Check =================
 

C:\Windows\System32\winlogon.exe => MD5 is legit

C:\Windows\System32\wininit.exe => MD5 is legit

C:\Windows\SysWOW64\wininit.exe => MD5 is legit

C:\Windows\explorer.exe => MD5 is legit

C:\Windows\SysWOW64\explorer.exe => MD5 is legit

C:\Windows\System32\svchost.exe => MD5 is legit

C:\Windows\SysWOW64\svchost.exe => MD5 is legit

C:\Windows\System32\services.exe => MD5 is legit

C:\Windows\System32\User32.dll => MD5 is legit

C:\Windows\SysWOW64\User32.dll => MD5 is legit

C:\Windows\System32\userinit.exe => MD5 is legit

C:\Windows\SysWOW64\userinit.exe => MD5 is legit

C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
 
 

LastRegBack: 2013-09-19 04:49
 

==================== End Of Log ============================

Addition

Code:

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 19-09-2013 01

Ran by **** at 2013-09-20 23:24:18

Running from C:\Users\****\Desktop

Boot Mode: Normal

==========================================================
 
 

==================== Installed Programs =======================
 

Acronis True Image WD*Edition (x32 Version: 13.0.14189)

Adobe Acrobat 7.0 Professional - English, Français, Deutsch (x32 Version: 7.1.0)

Adobe Acrobat 7.1.0 Professional - English, Français, Deutsch (x32 Version: 7.1.0)

Adobe Bridge 1.0 (x32 Version: 001.000.001)

Adobe Common File Installer (x32 Version: 1.00.002)

Adobe Creative Suite 2 (x32)

Adobe Flash Player 11 ActiveX (x32 Version: 11.8.800.175)

Adobe Flash Player 11 Plugin (x32 Version: 11.8.800.168)

Adobe Help Center 1.0 (x32 Version: 001.000.0002)

Adobe Illustrator CS2 (x32 Version: 12.000.000)

Adobe InCopy CS2 (x32 Version: 004.000.000)

Adobe InDesign CS2 (x32 Version: 004.000.000)

Adobe Photoshop CS2 (x32 Version: 9.0)

Adobe Reader X (10.1.8) - Deutsch (x32 Version: 10.1.8)

Adobe Shockwave Player 11.6 (x32 Version: 11.6.4.634)

Adobe SVG Viewer 3.0 (x32 Version:  3.0)

Adobe Version Cue CS2 (x32 Version: 2.0)

Amazon Kindle (HKCU)

Amazon MP3-Downloader 1.0.9 (x32)

Apple Application Support (x32 Version: 2.3.4)

Apple Mobile Device Support (Version: 6.1.0.13)

Apple Software Update (x32 Version: 2.1.3.127)

Ashampoo Burning Studio 2012 CBE v.11.0.4 (x32 Version: 11.0.4)

AttachmentsManager 1.8.5 (x32 Version: 1.8.5)

BisonCam (x32 Version: 9.2.1.71.34)

Bonjour (Version: 3.0.0.10)

ChangeNames 5.0.4 (x32 Version: 5.0.4)

ChiconyCam (x32 Version: 1.0.43.1129)

Cisco WebEx Meetings (HKCU)

Common Desktop Agent (Version: 1.62.0)

Corel Graphics - Windows Shell Extension (x32 Version: 15.2.0.686)

Corel Graphics - Windows Shell Extension (x32 Version: 15.2.686)

Corel Graphics - Windows Shell Extension 64 Bit (Version: 15.2.686)

CorelDRAW Graphics Suite X5 - BR (x32 Version: 15.3)

CorelDRAW Graphics Suite X5 - Capture (x32 Version: 15.3)

CorelDRAW Graphics Suite X5 - Common (x32 Version: 15.3)

CorelDRAW Graphics Suite X5 - Connect (x32 Version: 15.3)

CorelDRAW Graphics Suite X5 - Custom Data (x32 Version: 15.3)

CorelDRAW Graphics Suite X5 - DE (x32 Version: 15.3)

CorelDRAW Graphics Suite X5 - Draw (x32 Version: 15.3)

CorelDRAW Graphics Suite X5 - EN (x32 Version: 15.3)

CorelDRAW Graphics Suite X5 - ES (x32 Version: 15.3)

CorelDRAW Graphics Suite X5 - Extra Content (x32 Version: 15.0)

CorelDRAW Graphics Suite X5 - Extra Content (x32)

CorelDRAW Graphics Suite X5 - Filters (x32 Version: 15.3)

CorelDRAW Graphics Suite X5 - FontNav (x32 Version: 15.3)

CorelDRAW Graphics Suite X5 - FR (x32 Version: 15.3)

CorelDRAW Graphics Suite X5 - IPM (x32 Version: 15.3)

CorelDRAW Graphics Suite X5 - IT (x32 Version: 15.3)

CorelDRAW Graphics Suite X5 - NL (x32 Version: 15.3)

CorelDRAW Graphics Suite X5 - PHOTO-PAINT (x32 Version: 15.3)

CorelDRAW Graphics Suite X5 - Photozoom Plugin (x32 Version: 15.0)

CorelDRAW Graphics Suite X5 - Redist (x32 Version: 15.0)

CorelDRAW Graphics Suite X5 - Setup Files (x32 Version: 15.3)

CorelDRAW Graphics Suite X5 - VBA (x32 Version: 15.3)

CorelDRAW Graphics Suite X5 - VideoBrowser (x32 Version: 15.3)

CorelDRAW Graphics Suite X5 - VSTA (x32 Version: 15.3)

CorelDRAW Graphics Suite X5 - WT (x32 Version: 15.3)

CorelDRAW Graphics Suite X5 (x32 Version: 15.3)

CorelDRAW(R) Graphics Suite X5 (x32 Version: 15.2.0.686)

CustomAnniversaries 2.1.14 (x32 Version: 2.1.14)

CustomBirthdays 2.1.14 (x32 Version: 2.1.14)

D3DX10 (x32 Version: 15.4.2368.0902)

Data Lifeguard Diagnostic for Windows 1.24 (x32)

Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition (x32)

EditContacts 2.0.14 (x32 Version: 2.0.14)

Emergency 2013 (x32)

ESM-Installer (x32)

EyeTV Netstream for Windows Media Center (x32 Version: 1.01.00.16)

FileZilla Client 3.7.3 (x32 Version: 3.7.3)

Find and Mount 2.32 (Version: 2.32)

FormatNumbers 7.5.0 (x32 Version: 7.5.0)

Fotogalerie (x32 Version: 16.4.3505.0912)

FreePDF (Remove only) (x32)

FUSSBALL MANAGER 13 (x32 Version: 1.0.3.0)

Ghostscript GPL 8.64 (Msi Setup) (x32 Version: 8.64)

HandBrake 0.9.8 (x32 Version: 0.9.8)

Hotfix für Microsoft Visual Studio 2007 Tools for Applications - ENU (KB947789) (x32 Version: 1)

Hotkey 3.3017 (x32 Version: 3.3017)

Intel PROSet Wireless

Intel PROSet Wireless (x32)

Intel(R) Management Engine Components (x32 Version: 7.0.0.1118)

Intel(R) Processor Graphics (x32 Version: 9.17.10.2932)

Intel(R) PROSet/Wireless WiFi-Software (Version: 14.2.0000)

IrfanView (remove only) (x32 Version: 4.32)

iTunes (Version: 11.0.5.5)

Java 7 Update 25 (x32 Version: 7.0.250)

Java Auto Updater (x32 Version: 2.1.9.5)

JMicron Ethernet Adapter NDIS Driver (x32 Version: 6.0.24.7)

JMicron Flash Media Controller Driver (x32 Version: 1.0.54.1)

LyriXeeker-1 (x32 Version: 1.28.153.3)

Malwarebytes Anti-Malware Version 1.75.0.1300 (x32 Version: 1.75.0.1300)

Microsoft .NET Framework 4.5

Microsoft .NET Framework 4.5 (Version: 4.5.50709)

Microsoft Antimalware Service DE-DE Language Pack (Version: 3.0.8402.2)

Microsoft Application Error Reporting (Version: 12.0.6015.5000)

Microsoft Office Office 64-bit Components 2010 (Version: 14.0.7015.1000)

Microsoft Office Professional Plus 2013 - de-de (Version: 15.0.4535.1004)

Microsoft Office Project MUI (German) 2010 (x32 Version: 14.0.7015.1000)

Microsoft Office Project Professional 2010 (x32 Version: 14.0.7015.1000)

Microsoft Office Proof (English) 2010 (x32 Version: 14.0.7015.1000)

Microsoft Office Proof (French) 2010 (x32 Version: 14.0.7015.1000)

Microsoft Office Proof (German) 2010 (x32 Version: 14.0.7015.1000)

Microsoft Office Proof (Italian) 2010 (x32 Version: 14.0.7015.1000)

Microsoft Office Proofing (German) 2010 (x32 Version: 14.0.7015.1000)

Microsoft Office Shared 64-bit MUI (German) 2010 (Version: 14.0.7015.1000)

Microsoft Office Shared MUI (German) 2010 (x32 Version: 14.0.7015.1000)

Microsoft Office Visio 2010 (x32 Version: 14.0.7015.1000)

Microsoft Office Visio MUI (German) 2010 (x32 Version: 14.0.7015.1000)

Microsoft Project Professional 2010 (x32 Version: 14.0.7015.1000)

Microsoft Security Client (Version: 4.3.0215.0)

Microsoft Security Client DE-DE Language Pack (Version: 2.1.1116.0)

Microsoft Security Essentials (Version: 4.3.215.0)

Microsoft Silverlight (Version: 5.1.20513.0)

Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000)

Microsoft Visio Premium 2010 (x32 Version: 14.0.7015.1000)

Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001)

Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.50727.42)

Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.61000)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (x32 Version: 9.0.30729)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)

Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (Version: 10.0.40219)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219)

Microsoft Visual Studio Tools for Applications 2.0 - ENU (x32 Version: 9.0.30729)

Microsoft Visual Studio Tools for Applications 2.0 Language Pack - DEU (x32 Version: 9.0.30729)

Microsoft Visual Studio Tools for Applications 2.0 Runtime (x32 Version: 9.0.30729)

Microsoft Visual Studio Tools for Applications 2.0 Runtime Language Pack - DEU (x32 Version: 9.0.30729)

Microsoft_VC80_CRT_x86 (x32 Version: 8.0.50727.4053)

Microsoft_VC90_CRT_x86 (x32 Version: 1.00.0000)

Movie Maker (x32 Version: 16.4.3505.0912)

Mozilla Firefox 23.0.1 (x86 de) (x32 Version: 23.0.1)

Mozilla Maintenance Service (x32 Version: 23.0.1)

Mp3tag v2.52 (x32 Version: v2.52)

MSVCRT (x32 Version: 15.4.2862.0708)

MSVCRT110 (x32 Version: 16.4.1108.0727)

MSVCRT110_amd64 (Version: 16.4.1109.0912)

MSXML 4.0 SP2 (KB954430) (x32 Version: 4.20.9870.0)

MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0)

MuseScore 1.2 MuseScore score typesetter (x32 Version: 1.2.0)

NVIDIA Grafiktreiber 310.90 (Version: 310.90)

NVIDIA Install Application (Version: 2.1002.95.599)

NVIDIA Optimus 1.11.3 (Version: 1.11.3)

NVIDIA PhysX (x32 Version: 9.12.1031)

NVIDIA PhysX-Systemsoftware 9.12.1031 (Version: 9.12.1031)

NVIDIA Systemsteuerung 310.90 (Version: 310.90)

NVIDIA Update 1.11.3 (Version: 1.11.3)

NVIDIA Update Components (Version: 1.11.3)

Office 15 Click-to-Run Extensibility Component (x32 Version: 15.0.4535.1004)

Office 15 Click-to-Run Licensing Component (Version: 15.0.4535.1004)

Office 15 Click-to-Run Localization Component (x32 Version: 15.0.4535.1004)

Origin (x32 Version: 9.0.15.65)

PDF24 Creator 5.4.0 (x32)

pdfsam (HKCU Version: 2.2.1)

Photo Gallery (x32 Version: 16.4.3505.0912)

Protector Suite 2009 (Version: 5.9.3.6379)

Realtek High Definition Audio Driver (x32 Version: 6.0.1.6233)

Recuva (Version: 1.43)

RedMon - Redirection Port Monitor

Renesas Electronics USB 3.0 Host Controller Driver (x32 Version: 2.0.30.0)

Samsung Easy Printer Manager (x32 Version: 1.03.09.00(08.03.2013))

Samsung Easy Wireless Setup (x32 Version: 3.60.05)

Secure Download Manager (x32 Version: 3.1.10)

Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (x32)

SetIP (x32 Version: 1.04.01.00)

Sid Meier's Civilization V (x32)

SimCity™ (x32 Version: 1.0.0.0)

Skype™ 6.7 (x32 Version: 6.7.102)

Smart Data Recovery v4.3 (x32 Version: 4.3)

SonyEditor (remove only) (x32)

Spybot - Search & Destroy (x32 Version: 2.1.21)

Steam (x32 Version: 1.0.0.0)

StreamTransport version: 1.0.2.2171 (x32)

SUPER © v2012.build.51 (April 7, 2012) Version v2012.build.51 (x32 Version: v2012.build.51)

Synaptics Pointing Device Driver (Version: 15.0.8.0)

TeamViewer 8 (x32 Version: 8.0.20202)

TerraTec Home Cinema (x32 Version: 6.28.8)

THX TruStudio Pro (x32 Version: TAMB-CVS1D-1-LB R07)

Tom Clancy's Splinter Cell® Blacklist™ (x32 Version: 1.02)

True Image 2013 (x32 Version: 16.0.6514)

Update for Microsoft .NET Framework 4.5 (KB2750147) (x32 Version: 1)

Update for Microsoft .NET Framework 4.5 (KB2805221) (x32 Version: 1)

Update for Microsoft .NET Framework 4.5 (KB2805226) (x32 Version: 1)

Update for Microsoft Filter Pack 2.0 (KB2810071) 32-Bit Edition (x32)

Update for Microsoft Office 2010 (KB2553157) 32-Bit Edition (x32)

Update for Microsoft Office 2010 (KB2589298) 32-Bit Edition (x32)

Update for Microsoft Office 2010 (KB2589375) 32-Bit Edition (x32)

Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (x32)

Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition (x32)

Update for Microsoft Office 2010 (KB2760758) 32-Bit Edition (x32)

Update for Microsoft Office 2010 (KB2794737) 32-Bit Edition (x32)

Update for Microsoft OneNote 2010 (KB2810072) 32-Bit Edition (x32)

Uplay (x32 Version: 3.0)

Visual Basic for Applications (R) Core - English (x32 Version: 6.4.99.69)

Visual Basic for Applications (R) Core - German (x32 Version: 6.4.99.69)

Visual Basic for Applications (R) Core (x32 Version: 6.4.99.69)

VLC media player 2.0.1 (x32 Version: 2.0.1)

Wartung Samsung ML-2525W Series (x32)

WD Quick View (x32 Version: 2.2.0.8)

WD SmartWare (Version: 2.2.0.8)

WD SmartWare Installer (x32 Version: 2.2.0.8)

WEB.DE Club SmartFax (x32 Version: 2.00.223)

WebCam Installer (x32 Version: 3.32)

WebEx Schulungsmanager für Firefox oder Chrome (x32 Version: 5.29.3202)

Windows Live Communications Platform (x32 Version: 16.4.3505.0912)

Windows Live Essentials (x32 Version: 16.4.3505.0912)

Windows Live ID Sign-in Assistant (Version: 7.250.4311.0)

Windows Live Installer (x32 Version: 16.4.3505.0912)

Windows Live Photo Common (x32 Version: 16.4.3505.0912)

Windows Live PIMT Platform (x32 Version: 16.4.3505.0912)

Windows Live SOXE (x32 Version: 16.4.3505.0912)

Windows Live SOXE Definitions (x32 Version: 16.4.3505.0912)

Windows Live UX Platform (x32 Version: 16.4.3505.0912)

Windows Live UX Platform Language Pack (x32 Version: 16.4.3505.0912)

Windows Media Player Firefox Plugin (x32 Version: 1.0.0.8)

WinRAR 4.11 (64-Bit) (Version: 4.11.0)

WISO Steuer-Sparbuch 2013 (x32 Version: 20.00.8137)
 

==================== Restore Points  =========================
 

19-09-2013 01:50:47 Windows Update

19-09-2013 10:31:49 Windows Update

19-09-2013 11:20:18 Windows Update

19-09-2013 12:29:54 Windows Update

19-09-2013 12:33:52 Windows Update

20-09-2013 00:02:57 Windows Update

20-09-2013 08:27:29 Windows Update

20-09-2013 13:18:50 Windows Update

20-09-2013 16:50:17 Windows Update

20-09-2013 17:08:35 Windows Update
 

==================== Hosts content: ==========================
 

2009-07-14 04:34 - 2013-09-19 16:51 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts

127.0.0.1       localhost
 

==================== Scheduled Tasks (whitelisted) =============
 

Task: {044A6734-E90E-4F8F-B357-B2DC8AB3B5EC} - System32\Tasks\Microsoft\Windows\Time Synchronization\SynchronizeTime => Sc.exe start w32time task_started

Task: {05799850-53E8-4FF7-984B-B704CB7D3AA1} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Microsoft Office 15\ClientX64\integratedoffice.exe [2013-07-22] (Microsoft Corporation)

Task: {0831465C-3ACB-4CC8-A28E-3BC22A8D065B} - System32\Tasks\Microsoft\Windows Live\SOXE\Extractor Definitions Update Task

Task: {2FD72F9A-DD9F-419E-BFA5-0C51A0C6BAC9} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => C:\Windows\System32\sdengin2.dll [2010-11-21] (Microsoft Corporation)

Task: {39B24F8C-063B-463B-9993-496E6C1DB115} - System32\Tasks\LyriXeeker-1-updater => C:\Program Files (x86)\LyriXeeker-1\LyriXeeker-1-updater.exe

Task: {4BC35937-9FBA-47E4-A711-3E76DF30D221} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office 15\root\Office15\msoia.exe [2013-09-13] (Microsoft Corporation)

Task: {5A0D0AB1-3FE5-46DE-B8C7-B34FB26005C5} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)

Task: {5DCF99EC-17A4-4A3F-A2CE-8C93F4E1C005} - System32\Tasks\LyriXeeker-1-firefoxinstaller => C:\Program Files (x86)\LyriXeeker-1\LyriXeeker-1-firefoxinstaller.exe

Task: {69D1F12C-F8F9-473A-AE1D-6DFB8B1EDC6D} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Scan the system => C:\Program Files (x86)\Spybot - Search &amp; Destroy 2\SDScan.exe

Task: {7020F111-57EE-4ED1-9284-7363A7B2CF84} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Check for updates => C:\Program Files (x86)\Spybot - Search &amp; Destroy 2\SDUpdate.exe

Task: {9405692F-6B83-4588-AFF7-C19AF4A6F59E} - System32\Tasks\LyriXeeker-1-enabler => C:\Program Files (x86)\LyriXeeker-1\LyriXeeker-1-enabler.exe

Task: {A1D60D55-A6B8-401B-BC05-2938E02DF2F2} - System32\Tasks\Microsoft\Windows Defender\MP Scheduled Scan => d:\program files\windows defender\MpCmdRun.exe

Task: {A8E2441C-4128-421A-A19B-5882F581EE33} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Refresh immunization => C:\Program Files (x86)\Spybot - Search &amp; Destroy 2\SDImmunize.exe

Task: {AEE3A20F-B242-4771-AB4B-3A8F21AC69C5} - System32\Tasks\Microsoft\Windows\WindowsBackup\Windows Backup Monitor => C:\Windows\system32\sdclt.exe [2010-11-21] (Microsoft Corporation)

Task: {BB9BDF00-B058-4B1F-8412-CD087AE2DF14} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-09-20] (Adobe Systems Incorporated)

Task: {C4E8B14A-4159-4C58-BDAD-281DBBFC97E8} - System32\Tasks\Microsoft\Windows Defender\MpIdleTask => d:\program files\windows defender\MpCmdRun.exe

Task: {D0F8CAFA-D555-46A0-A0E4-F18D1B192200} - System32\Tasks\LyriXeeker-1-codedownloader => C:\Program Files (x86)\LyriXeeker-1\LyriXeeker-1-codedownloader.exe

Task: {FA4B8B2D-CCA2-45FD-948C-AE35EDBFB833} - System32\Tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask => Sc.exe start osppsvc

Task: {FCD0E786-5EF6-484D-AEA3-109B5CB90B08} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office 15\root\Office15\msoia.exe [2013-09-13] (Microsoft Corporation)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

Task: C:\Windows\Tasks\LyriXeeker-1-codedownloader.job => C:\Program Files (x86)\LyriXeeker-1\LyriXeeker-1-codedownloader.exe

Task: C:\Windows\Tasks\LyriXeeker-1-enabler.job => C:\Program Files (x86)\LyriXeeker-1\LyriXeeker-1-enabler.exe

Task: C:\Windows\Tasks\LyriXeeker-1-firefoxinstaller.job => C:\Program Files (x86)\LyriXeeker-1\LyriXeeker-1-firefoxinstaller.exe

Task: C:\Windows\Tasks\LyriXeeker-1-updater.job => C:\Program Files (x86)\LyriXeeker-1\LyriXeeker-1-updater.exe
 

==================== Loaded Modules (whitelisted) =============
 

2013-04-04 01:09 - 2013-04-04 01:09 - 04300432 _____ () C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Cultures\OFFICE.ODF

2013-03-27 22:39 - 2013-03-27 22:39 - 00021824 _____ () C:\Program Files (x86)\Acronis\TrueImageHome\x64\ti_managers_proxy_stub.dll

2010-01-02 16:42 - 2010-01-02 16:42 - 00098304 _____ () C:\Program Files (x86)\FileZilla FTP Client\fzshellext_64.dll

2012-12-14 02:42 - 2012-12-14 02:42 - 00438784 _____ (Intel Corporation) C:\Windows\system32\igfxrDEU.lrc

2012-03-25 22:25 - 2012-02-17 20:55 - 00193536 _____ () C:\Program Files\WinRAR\rarext.dll

2012-04-01 10:02 - 2010-02-11 12:29 - 00396584 _____ (Synaptics Incorporated) C:\Windows\system32\SynCOM.dll

2012-04-01 10:02 - 2010-02-11 12:29 - 00207144 _____ (Synaptics Incorporated) C:\Windows\system32\SynTPAPI.dll

2012-12-14 02:42 - 2012-12-14 02:42 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll

2012-03-09 09:58 - 2012-03-09 09:58 - 00057208 _____ () C:\Program Files\Common Files\Common Desktop Agent\CDASrvPS.dll

2011-07-27 20:07 - 2011-07-27 20:07 - 01501696 _____ () C:\Program Files\Common Files\Intel\WirelessCommon\LIBEAY32.dll

2012-03-25 22:32 - 2010-11-12 12:38 - 00241152 _____ () C:\Windows\SYSTEM32\APOMgr64.DLL

2013-06-01 12:27 - 2012-08-30 14:17 - 00021504 _____ (eMPIA Technology, Inc.) C:\Program Files (x86)\Common Files\TerraTec\Remote\BDADLL.dll

2010-06-25 10:38 - 2010-06-25 10:38 - 00218112 _____ (TODO: <公司名稱>) C:\Program Files (x86)\Hotkey\GetProductdll.dll

2010-08-20 10:15 - 2010-08-20 10:15 - 00220160 _____ (TODO: <公司名稱>) C:\Program Files (x86)\Hotkey\powerlife.dll

2009-06-06 14:50 - 2009-06-06 14:50 - 00019968 _____ () C:\Program Files (x86)\Hotkey\Audiodll.dll

2013-01-30 23:05 - 2006-01-12 22:20 - 00019968 _____ () C:\Program Files (x86)\Adobe\Acrobat 7.0\Distillr\acrotray.deu

2013-01-30 23:05 - 2006-01-12 22:13 - 00019968 _____ () C:\Program Files (x86)\Adobe\Acrobat 7.0\Distillr\acrotray.FRA

2013-01-10 13:43 - 2013-01-10 13:43 - 00014360 _____ () C:\Program Files (x86)\Common Files\Acronis\TibMounter\icudt38.dll

2005-04-06 17:53 - 2005-04-06 17:53 - 00425984 _____ (Adobe Systems Incorporated) c:\Adobe\Adobe Version Cue CS2\bin\AdobeUpdater.dll

2012-05-30 20:06 - 2012-05-30 20:06 - 00053608 _____ (Open Source Software community project) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\pthreadVC2.dll

2012-05-30 20:06 - 2012-05-30 20:06 - 00087912 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll

2012-05-30 20:06 - 2012-05-30 20:06 - 01242512 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll

2011-08-30 23:05 - 2011-08-30 23:05 - 00085864 _____ (Apple Inc.) C:\Windows\system32\dnssd.dll

2012-03-25 22:20 - 2012-03-25 22:20 - 00096904 _____ (Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.dll

2012-03-25 23:13 - 2013-03-20 14:38 - 00057384 _____ (Geek Software GmbH) C:\Program Files (x86)\PDF24\Settings.dll

2012-03-25 23:13 - 2013-03-20 14:38 - 00395304 _____ (Geek Software GmbH) C:\Program Files (x86)\PDF24\NotifyIcon.dll

2012-03-25 23:13 - 2013-03-20 14:38 - 00047144 _____ (Geek Software GmbH) C:\Program Files (x86)\PDF24\Language.dll

2012-03-25 23:13 - 2013-03-20 14:38 - 00382504 _____ (Geek Software GmbH) C:\Program Files (x86)\PDF24\About.dll

2013-09-18 13:14 - 2013-05-16 10:55 - 00113496 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlThirdParty150.bpl

2013-09-18 13:14 - 2013-05-16 10:55 - 03643800 _____ (Project JEDI) C:\Program Files (x86)\Spybot - Search & Destroy 2\Jcl150.bpl

2013-09-18 13:14 - 2013-05-16 10:55 - 00416600 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\DEC150.bpl

2012-03-25 22:32 - 2010-11-01 17:34 - 00159744 _____ () C:\Program Files (x86)\Creative\THX TruStudio Pro\THXAudioCP\de-DE\THXAudio.resources.dll

2013-03-28 00:37 - 2013-03-28 00:37 - 13627872 _____ () C:\Program Files (x86)\Acronis\TrueImageHome\ti_managers.dll

2012-11-21 20:16 - 2013-08-07 11:42 - 00350560 _____ (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Resource_de.dll

2012-11-21 20:16 - 2013-08-07 11:42 - 03011936 _____ (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_StaticRes.dll

2012-11-21 20:16 - 2013-08-07 11:28 - 00095584 _____ (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\tv_w32.dll

2013-08-18 13:25 - 2013-08-18 13:25 - 03551640 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll

2013-09-11 12:47 - 2013-09-11 12:47 - 16177544 _____ () C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_168.dll
 

==================== Alternate Data Streams (whitelisted) ==========
 
 
 

==================== Faulty Device Manager Devices =============
 
 

==================== Event log errors: =========================
 

Application errors:

==================

Error: (09/20/2013 07:10:45 PM) (Source: Bonjour Service) (User: )

Description: mDNSCoreReceiveResponse: Unexpected conflict discarding   22 103.0.168.192.in-addr.arpa. PTR ****-PC.local.
 

Error: (09/20/2013 07:10:45 PM) (Source: Bonjour Service) (User: )

Description: mDNSCoreReceiveResponse: Received from 192.168.0.103:5353   24 103.0.168.192.in-addr.arpa. PTR ****-PC-2.local.
 

Error: (09/20/2013 07:10:45 PM) (Source: EyeTV Netstream) (User: )

Description: UPnpFindNetstreamDevices() FAILED
 

Error: (09/20/2013 07:10:45 PM) (Source: EyeTV Netstream) (User: )

Description: .NET EXCEPTION

System.Runtime.InteropServices.COMException (0x80070420): Eine Instanz der COM-Komponente mit der CLSID {E2085F28-FEB7-404A-B8E7-E659BDEAAA02} konnte aufgrund des folgenden Fehlers nicht von der IClassFactory erstellt werden: 80070420.

   bei Elgato.EyeTVNetstream.TomaDeviceDiscovery.UPnpFindNetstreamDevices(TomaList& netstreamDevices)
 

Error: (09/20/2013 07:10:42 PM) (Source: SideBySide) (User: )

Description: Fehler beim Generieren des Aktivierungskontexts für "hxxp://schemas.microsoft.com/SMI/2005/WindowsSettings^antispywareProductDisplayName1".

Die Einstellung "hxxp://schemas.microsoft.com/SMI/2005/WindowsSettings^antispywareProductDisplayName" ist nicht registriert.
 

Error: (09/20/2013 07:10:42 PM) (Source: WinMgmt) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (09/20/2013 07:10:37 PM) (Source: Application Error) (User: )

Description: Name der fehlerhaften Anwendung: CECPLFKT.exe, Version: 0.9.1.1030, Zeitstempel: 0x4aefec4e

Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.18229, Zeitstempel: 0x51fb1072

Ausnahmecode: 0xc0000005

Fehleroffset: 0x00039393

ID des fehlerhaften Prozesses: 0x82c

Startzeit der fehlerhaften Anwendung: 0xCECPLFKT.exe0

Pfad der fehlerhaften Anwendung: CECPLFKT.exe1

Pfad des fehlerhaften Moduls: CECPLFKT.exe2

Berichtskennung: CECPLFKT.exe3
 

Error: (09/20/2013 06:59:46 PM) (Source: EyeTV Netstream) (User: )

Description: UPnpFindNetstreamDevices() FAILED
 

Error: (09/20/2013 06:59:46 PM) (Source: EyeTV Netstream) (User: )

Description: .NET EXCEPTION

System.Runtime.InteropServices.COMException (0x80070420): Eine Instanz der COM-Komponente mit der CLSID {E2085F28-FEB7-404A-B8E7-E659BDEAAA02} konnte aufgrund des folgenden Fehlers nicht von der IClassFactory erstellt werden: 80070420.

   bei Elgato.EyeTVNetstream.TomaDeviceDiscovery.UPnpFindNetstreamDevices(TomaList& netstreamDevices)
 

Error: (09/20/2013 06:59:45 PM) (Source: Bonjour Service) (User: )

Description: mDNSCoreReceiveResponse: Unexpected conflict discarding   22 103.0.168.192.in-addr.arpa. PTR ****-PC.local.
 
 

System errors:

=============

Error: (09/20/2013 07:12:46 PM) (Source: Service Control Manager) (User: )

Description: Der Dienst "NVIDIA Update Service Daemon" wurde aufgrund folgenden Fehlers nicht gestartet: 

%%1069
 

Error: (09/20/2013 07:12:46 PM) (Source: Service Control Manager) (User: )

Description: Der Dienst "nvUpdatusService" konnte sich nicht als ".\UpdatusUser" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden: 

%%1330
 

Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC).
 

Error: (09/20/2013 07:10:44 PM) (Source: Service Control Manager) (User: )

Description: Dienst "CECFLPKT" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
 

Error: (09/20/2013 07:10:42 PM) (Source: Service Control Manager) (User: )

Description: Der Dienst "Spybot-S&D 2 Security Center Service" wurde aufgrund folgenden Fehlers nicht gestartet: 

%%14001
 

Error: (09/20/2013 07:01:47 PM) (Source: Service Control Manager) (User: )

Description: Der Dienst "NVIDIA Update Service Daemon" wurde aufgrund folgenden Fehlers nicht gestartet: 

%%1069
 

Error: (09/20/2013 07:01:47 PM) (Source: Service Control Manager) (User: )

Description: Der Dienst "nvUpdatusService" konnte sich nicht als ".\UpdatusUser" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden: 

%%1330
 

Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC).
 

Error: (09/20/2013 06:59:47 PM) (Source: Service Control Manager) (User: )

Description: Dienst "CECFLPKT" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
 

Error: (09/20/2013 06:59:42 PM) (Source: Service Control Manager) (User: )

Description: Der Dienst "Spybot-S&D 2 Security Center Service" wurde aufgrund folgenden Fehlers nicht gestartet: 

%%14001
 

Error: (09/20/2013 03:28:03 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (User: NT-AUTORITÄT)

Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80070003 fehlgeschlagen: Sicherheitsupdate für Windows 7 für x64-basierte Systeme (KB2835361)
 

Error: (09/20/2013 03:28:03 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (User: NT-AUTORITÄT)

Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80070003 fehlgeschlagen: Update für Windows 7 für x64-basierte Systeme (KB2574819)
 
 

Microsoft Office Sessions:

=========================

Error: (09/20/2013 07:10:45 PM) (Source: Bonjour Service)(User: )

Description: mDNSCoreReceiveResponse: Unexpected conflict discarding   22 103.0.168.192.in-addr.arpa. PTR ****-PC.local.
 

Error: (09/20/2013 07:10:45 PM) (Source: Bonjour Service)(User: )

Description: mDNSCoreReceiveResponse: Received from 192.168.0.103:5353   24 103.0.168.192.in-addr.arpa. PTR ****-PC-2.local.
 

Error: (09/20/2013 07:10:45 PM) (Source: EyeTV Netstream)(User: )

Description: UPnpFindNetstreamDevices() FAILED
 

Error: (09/20/2013 07:10:45 PM) (Source: EyeTV Netstream)(User: )

Description: .NET EXCEPTION

System.Runtime.InteropServices.COMException (0x80070420): Eine Instanz der COM-Komponente mit der CLSID {E2085F28-FEB7-404A-B8E7-E659BDEAAA02} konnte aufgrund des folgenden Fehlers nicht von der IClassFactory erstellt werden: 80070420.

   bei Elgato.EyeTVNetstream.TomaDeviceDiscovery.UPnpFindNetstreamDevices(TomaList& netstreamDevices)
 

Error: (09/20/2013 07:10:42 PM) (Source: SideBySide)(User: )

Description: hxxp://schemas.microsoft.com/SMI/2005/WindowsSettings^antispywareProductDisplayNameC:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe
 

Error: (09/20/2013 07:10:42 PM) (Source: WinMgmt)(User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (09/20/2013 07:10:37 PM) (Source: Application Error)(User: )

Description: CECPLFKT.exe0.9.1.10304aefec4entdll.dll6.1.7601.1822951fb1072c00000050003939382c01ceb6244aa0e9a8C:\Program Files (x86)\ChiconyCam\CECPLFKT.exeC:\Windows\SysWOW64\ntdll.dll915e5234-2217-11e3-9fa1-0090f5bcd228
 

Error: (09/20/2013 06:59:46 PM) (Source: EyeTV Netstream)(User: )

Description: UPnpFindNetstreamDevices() FAILED
 

Error: (09/20/2013 06:59:46 PM) (Source: EyeTV Netstream)(User: )

Description: .NET EXCEPTION

System.Runtime.InteropServices.COMException (0x80070420): Eine Instanz der COM-Komponente mit der CLSID {E2085F28-FEB7-404A-B8E7-E659BDEAAA02} konnte aufgrund des folgenden Fehlers nicht von der IClassFactory erstellt werden: 80070420.

   bei Elgato.EyeTVNetstream.TomaDeviceDiscovery.UPnpFindNetstreamDevices(TomaList& netstreamDevices)
 

Error: (09/20/2013 06:59:45 PM) (Source: Bonjour Service)(User: )

Description: mDNSCoreReceiveResponse: Unexpected conflict discarding   22 103.0.168.192.in-addr.arpa. PTR ****-PC.local.
 
 

CodeIntegrity Errors:

===================================

  Date: 2013-09-20 19:10:09.082

  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\jmcr.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
 

  Date: 2013-09-20 19:10:09.051

  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\jmcr.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
 

  Date: 2013-09-20 19:10:09.020

  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\jmcr.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
 

  Date: 2013-09-20 19:10:08.989

  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\jmcr.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
 

  Date: 2013-09-20 19:10:08.958

  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\jmcr.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
 

  Date: 2013-09-20 19:10:08.926

  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\jmcr.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
 

  Date: 2013-09-20 18:59:02.142

  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\jmcr.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
 

  Date: 2013-09-20 18:59:02.110

  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\jmcr.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
 

  Date: 2013-09-20 18:59:02.079

  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\jmcr.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
 

  Date: 2013-09-20 18:59:02.032

  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\jmcr.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
 
 

==================== Memory info =========================== 
 

Percentage of memory in use: 38%

Total physical RAM: 8099.07 MB

Available physical RAM: 4951.09 MB

Total Pagefile: 16196.32 MB

Available Pagefile: 13063.64 MB

Total Virtual: 8192 MB

Available Virtual: 8191.83 MB
 

==================== Drives ================================
 

Drive c: () (Fixed) (Total:457.85 GB) (Free:238.65 GB) NTFS
 

==================== MBR & Partition Table ==================
 

========================================================

Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: 7C4C6991)

Partition 1: (Not Active) - (Size=8 GB) - (Type=27)

Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS)

Partition 3: (Not Active) - (Size=458 GB) - (Type=07 NTFS)
 

==================== End Of Log ============================

System Look

Code:

SystemLook 30.07.11 by jpshortstuff

Log created at 23:26 on 20/09/2013 by ****

Administrator - Elevation successful
 

========== filefind ==========
 

Searching for "*LyriXeeker*"

C:\Program Files (x86)\LyriXeeker-1\LyriXeeker-1-bg.exe        --a---- 738304 bytes        [11:00 17/09/2013]        [11:00 17/09/2013] 29ED5B105CF788506E1CB25431A61008

C:\Program Files (x86)\LyriXeeker-1\LyriXeeker-1-bho.dll        --a---- 598528 bytes        [11:00 17/09/2013]        [11:00 17/09/2013] BB212B74376AF866427E7F7348F3C3BD

C:\Program Files (x86)\LyriXeeker-1\LyriXeeker-1-bho64.dll        --a---- 940544 bytes        [11:00 17/09/2013]        [11:00 17/09/2013] 1A8B331FCC6736A13BE3C83244BD3915

C:\Program Files (x86)\LyriXeeker-1\LyriXeeker-1-buttonutil.dll        --a---- 400896 bytes        [11:00 17/09/2013]        [11:00 17/09/2013] 8F813EFE26CE98A73FF658D91571CE9C

C:\Program Files (x86)\LyriXeeker-1\LyriXeeker-1-buttonutil.exe        --a---- 338944 bytes        [11:00 17/09/2013]        [11:00 17/09/2013] F794FD3ABD8CD4A5E759D0D4B004BCDD

C:\Program Files (x86)\LyriXeeker-1\LyriXeeker-1-buttonutil64.dll        --a---- 486912 bytes        [11:00 17/09/2013]        [11:00 17/09/2013] 22B30ECF828063F4536080EF6CFB2DE1

C:\Program Files (x86)\LyriXeeker-1\LyriXeeker-1-buttonutil64.exe        --a---- 443392 bytes        [11:00 17/09/2013]        [11:00 17/09/2013] 54C3C68D397FB14B337D38F4E222F478

C:\Program Files (x86)\LyriXeeker-1\LyriXeeker-1-helper.exe        --a---- 311296 bytes        [11:00 17/09/2013]        [11:00 17/09/2013] 962B6F981655F1920DACE37DFCE61DC8

C:\Program Files (x86)\LyriXeeker-1\LyriXeeker-1.ico        --a---- 9662 bytes        [20:12 12/09/2013]        [20:12 12/09/2013] CCB861E826B3577700DC7463F1D93E2D

C:\Windows\System32\Tasks\LyriXeeker-1-codedownloader        --a---- 4242 bytes        [11:00 17/09/2013]        [11:00 17/09/2013] EA6D70E69E84E0478666D050F2B2419E

C:\Windows\System32\Tasks\LyriXeeker-1-enabler        --a---- 4142 bytes        [11:01 17/09/2013]        [11:01 17/09/2013] 1DDA77C6C31DB39E07628FFAA0897F3C

C:\Windows\System32\Tasks\LyriXeeker-1-firefoxinstaller        --a---- 4876 bytes        [11:00 17/09/2013]        [11:00 17/09/2013] 59DFB4A4E5EB7F75AE13809CFA632781

C:\Windows\System32\Tasks\LyriXeeker-1-updater        --a---- 4338 bytes        [11:01 17/09/2013]        [11:02 17/09/2013] CA59265DD252C04E487ABFB947C392E1

C:\Windows\Tasks\LyriXeeker-1-codedownloader.job        --a---- 1212 bytes        [11:00 17/09/2013]        [21:18 20/09/2013] F315CEB1B2E9256D14867D4A080CD71D

C:\Windows\Tasks\LyriXeeker-1-enabler.job        --a---- 1112 bytes        [11:00 17/09/2013]        [21:18 20/09/2013] BA0E875994804187343732B1BE0A82C7

C:\Windows\Tasks\LyriXeeker-1-firefoxinstaller.job        --a---- 1846 bytes        [11:00 17/09/2013]        [21:18 20/09/2013] 96733892E5328D8CDC9A731D4E866609

C:\Windows\Tasks\LyriXeeker-1-updater.job        --a---- 1308 bytes        [11:01 17/09/2013]        [21:18 20/09/2013] E1C3FD39D03BD2542A073225CC4AB3CF
 

========== folderfind ==========
 

Searching for "*LyriXeeker*"

C:\Program Files (x86)\LyriXeeker-1        d------        [11:00 17/09/2013]
 

========== regfind ==========
 

Searching for "LyriXeeker"

[HKEY_CURRENT_USER\Software\AppDataLow\Software\LyriXeeker-1]

[HKEY_CURRENT_USER\Software\AppDataLow\Software\LyriXeeker-1\Manifest]

"Description"="LyriXeeker will allow you to display lyrics for your favorite songs alongside any Youtube music video"

[HKEY_CURRENT_USER\Software\AppDataLow\Software\LyriXeeker-1\Manifest]

"Name"="LyriXeeker-1"

[HKEY_CURRENT_USER\Software\Microsoft\Office\15.0\Common\Internet]

"UseRWHlinkNavigation"="http://www.trojaner-board.de/141830-...new-post.html"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220422182256}\InprocServer32]

@="C:\Program Files (x86)\LyriXeeker-1\LyriXeeker-1-bho64.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{39B24F8C-063B-463B-9993-496E6C1DB115}]

"Path"="\LyriXeeker-1-updater"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{5DCF99EC-17A4-4A3F-A2CE-8C93F4E1C005}]

"Path"="\LyriXeeker-1-firefoxinstaller"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{9405692F-6B83-4588-AFF7-C19AF4A6F59E}]

"Path"="\LyriXeeker-1-enabler"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{D0F8CAFA-D555-46A0-A0E4-F18D1B192200}]

"Path"="\LyriXeeker-1-codedownloader"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\LyriXeeker-1-codedownloader]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\LyriXeeker-1-enabler]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\LyriXeeker-1-firefoxinstaller]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\LyriXeeker-1-updater]

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\LyriXeeker-1]

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{090bb045-13a7-447c-b78e-30b1ddb41389}]

"AppName"="LyriXeeker-1-buttonutil64.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{090bb045-13a7-447c-b78e-30b1ddb41389}]

"AppPath"="C:\Program Files (x86)\LyriXeeker-1"

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{2fa47400-045a-4ff8-81a2-377f157a4e5a}]

"AppName"="LyriXeeker-1-codedownloader.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{2fa47400-045a-4ff8-81a2-377f157a4e5a}]

"AppPath"="C:\Program Files (x86)\LyriXeeker-1"

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{37237a65-5777-43f2-ba9b-339de5a29d22}]

"AppName"="LyriXeeker-1-bg.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{37237a65-5777-43f2-ba9b-339de5a29d22}]

"AppPath"="C:\Program Files (x86)\LyriXeeker-1"

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4b7fb8aa-25e0-4a1d-ba79-f77e674dd6a2}]

"AppName"="LyriXeeker-1-helper.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4b7fb8aa-25e0-4a1d-ba79-f77e674dd6a2}]

"AppPath"="C:\Program Files (x86)\LyriXeeker-1"

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{90b3c11d-5652-4b5a-886b-9e20a42dbadc}]

"AppName"="LyriXeeker-1-buttonutil.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{90b3c11d-5652-4b5a-886b-9e20a42dbadc}]

"AppPath"="C:\Program Files (x86)\LyriXeeker-1"

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\LyriXeeker-1-firefoxinstaller_RASAPI32]

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\LyriXeeker-1-firefoxinstaller_RASMANCS]

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\LyriXeeker-1-updater_RASAPI32]

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\LyriXeeker-1-updater_RASMANCS]

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\LyriXeeker-1]

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\LyriXeeker-1]

"DisplayIcon"="C:\Program Files (x86)\LyriXeeker-1\utils.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\LyriXeeker-1]

"DisplayName"="LyriXeeker-1"

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\LyriXeeker-1]

"UninstallString"="C:\Program Files (x86)\LyriXeeker-1\Uninstall.exe /fromcontrolpanel=1"

[HKEY_USERS\S-1-5-21-1546768945-1265243594-1503920770-1000\Software\AppDataLow\Software\LyriXeeker-1]

[HKEY_USERS\S-1-5-21-1546768945-1265243594-1503920770-1000\Software\AppDataLow\Software\LyriXeeker-1\Manifest]

"Description"="LyriXeeker will allow you to display lyrics for your favorite songs alongside any Youtube music video"

[HKEY_USERS\S-1-5-21-1546768945-1265243594-1503920770-1000\Software\AppDataLow\Software\LyriXeeker-1\Manifest]

"Name"="LyriXeeker-1"

[HKEY_USERS\S-1-5-21-1546768945-1265243594-1503920770-1000\Software\Microsoft\Office\15.0\Common\Internet]

"UseRWHlinkNavigation"="http://www.trojaner-board.de/141830-...new-post.html"
 

-= EOF =-

Kurze ergänzende Anmerkung:

An der im 1. Post geschilderten Symptomatik (Spam-Links und leere Fenster mit Adressen, wie hxxp://ici.resynccdn.net/sd/wrap-0.01.html?u=http%3A%2F%2Fici.resynccdn.net%2Fsd%2Fapps%2Ffusionx%2F0.0.3.html%3Faff%3D1060-2028) hat sich bisher nichts geändert.

Servus,

Zitat:

Zitat von e.rico (Beitrag 1159781)

An der im 1. Post geschilderten Symptomatik (Spam-Links und leere Fenster mit Adressen, wie hxxp://ici.resynccdn.net/sd/wrap-0.01.html?u=http%3A%2F%2Fici.resynccdn.net%2Fsd%2Fapps%2Ffusionx%2F0.0.3.html%3Faff%3D1060-2028) hat sich bisher nichts geändert.

Dachte ich mir schon, ist eine neue Adware, wir entfernen sie jetzt. ;)

Ganz wichtig:
Du hast deinen Benutzernamen durch "****" unkenntlich gemacht.
Ersetze die "****" durch den richtigen Namen, sonst wird der Fix nicht funktionieren!

Schritt 1
Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:

start

FF Extension: No Name - C:\Users\****\AppData\Roaming\Mozilla\Firefox\Profiles\x0s0w4c4.default\Extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com

C:\Windows\Tasks\LyriXeeker-1-updater.job

C:\Windows\Tasks\LyriXeeker-1-firefoxinstaller.job

C:\Windows\Tasks\LyriXeeker-1-codedownloader.job

C:\Windows\Tasks\LyriXeeker-1-enabler.job

Task: {39B24F8C-063B-463B-9993-496E6C1DB115} - System32\Tasks\LyriXeeker-1-updater => C:\Program Files (x86)\LyriXeeker-1\LyriXeeker-1-updater.exe

C:\Program Files (x86)\LyriXeeker-1

Task: {5DCF99EC-17A4-4A3F-A2CE-8C93F4E1C005} - System32\Tasks\LyriXeeker-1-firefoxinstaller => C:\Program Files (x86)\LyriXeeker-1\LyriXeeker-1-firefoxinstaller.exe

Task: {9405692F-6B83-4588-AFF7-C19AF4A6F59E} - System32\Tasks\LyriXeeker-1-enabler => C:\Program Files (x86)\LyriXeeker-1\LyriXeeker-1-enabler.exe

Task: {D0F8CAFA-D555-46A0-A0E4-F18D1B192200} - System32\Tasks\LyriXeeker-1-codedownloader => C:\Program Files (x86)\LyriXeeker-1\LyriXeeker-1-codedownloader.exe

Task: C:\Windows\Tasks\LyriXeeker-1-codedownloader.job => C:\Program Files (x86)\LyriXeeker-1\LyriXeeker-1-codedownloader.exe

Task: C:\Windows\Tasks\LyriXeeker-1-enabler.job => C:\Program Files (x86)\LyriXeeker-1\LyriXeeker-1-enabler.exe

Task: C:\Windows\Tasks\LyriXeeker-1-firefoxinstaller.job => C:\Program Files (x86)\LyriXeeker-1\LyriXeeker-1-firefoxinstaller.exe

Task: C:\Windows\Tasks\LyriXeeker-1-updater.job => C:\Program Files (x86)\LyriXeeker-1\LyriXeeker-1-updater.exe

Reg: reg delete "HKEY_CURRENT_USER\Software\AppDataLow\Software\LyriXeeker-1" /f

Reg: reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220422182256}" /f

Reg: reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\LyriXeeker-1" /f

Reg: reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{090bb045-13a7-447c-b78e-30b1ddb41389}" /f

Reg: reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{2fa47400-045a-4ff8-81a2-377f157a4e5a}" /f

Reg: reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{37237a65-5777-43f2-ba9b-339de5a29d22}" /f

Reg: reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4b7fb8aa-25e0-4a1d-ba79-f77e674dd6a2}" /f

Reg: reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{90b3c11d-5652-4b5a-886b-9e20a42dbadc}" /f

Reg: reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\LyriXeeker-1-firefoxinstaller_RASAPI32" /f

Reg: reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\LyriXeeker-1-firefoxinstaller_RASMANCS" /f

Reg: reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\LyriXeeker-1-updater_RASAPI32" /f

Reg: reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\LyriXeeker-1-updater_RASMANCS" /f

Reg: reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\LyriXeeker-1" /f

end

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).

Starte nun FRST erneut und klicke den Entfernen Button.
Das Tool erstellt eine Fixlog.txt.
Poste mir deren Inhalt.

Schritt 2
Wenn FRST deinen Rechner beim Fix nicht automatisch neu gestartet hat, so starte deinen Rechner jetzt per Hand neu!

Schritt 3
Kontrollscan mit FRST
Führe wie zuvor beschrieben einen Scan mit FRST aus.
Setze dazu eine Haken bei Addition.txt rechts unten und klicke auf Scan.
Es werden wieder zwei Logdateien erzeugt. Poste mir diese.

Gibt es noch Probleme mit LyriXeeker in einem Browser? Wenn ja, welche?

Bitte poste mit deiner nächsten Antwort

die Logdatei des FRST-Fix,
die beiden neuen Logdateien von FRST nach dem Neustart,
die Beantwortung der gestellten Fragen.

Hallo Matthias,

danke. Hier die gewünschten Logfiles.

FRST-Fix

Code:

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 21-09-2013

Ran by **** at 2013-09-21 12:54:07 Run:1

Running from C:\Users\****\Desktop

Boot Mode: Normal

==============================================
 

Content of fixlist:

*****************

start

FF Extension: No Name - C:\Users\****\AppData\Roaming\Mozilla\Firefox\Profiles\x0s0w4c4.default\Extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com

C:\Windows\Tasks\LyriXeeker-1-updater.job

C:\Windows\Tasks\LyriXeeker-1-firefoxinstaller.job

C:\Windows\Tasks\LyriXeeker-1-codedownloader.job

C:\Windows\Tasks\LyriXeeker-1-enabler.job

Task: {39B24F8C-063B-463B-9993-496E6C1DB115} - System32\Tasks\LyriXeeker-1-updater => C:\Program Files (x86)\LyriXeeker-1\LyriXeeker-1-updater.exe

C:\Program Files (x86)\LyriXeeker-1

Task: {5DCF99EC-17A4-4A3F-A2CE-8C93F4E1C005} - System32\Tasks\LyriXeeker-1-firefoxinstaller => C:\Program Files (x86)\LyriXeeker-1\LyriXeeker-1-firefoxinstaller.exe

Task: {9405692F-6B83-4588-AFF7-C19AF4A6F59E} - System32\Tasks\LyriXeeker-1-enabler => C:\Program Files (x86)\LyriXeeker-1\LyriXeeker-1-enabler.exe

Task: {D0F8CAFA-D555-46A0-A0E4-F18D1B192200} - System32\Tasks\LyriXeeker-1-codedownloader => C:\Program Files (x86)\LyriXeeker-1\LyriXeeker-1-codedownloader.exe

Task: C:\Windows\Tasks\LyriXeeker-1-codedownloader.job => C:\Program Files (x86)\LyriXeeker-1\LyriXeeker-1-codedownloader.exe

Task: C:\Windows\Tasks\LyriXeeker-1-enabler.job => C:\Program Files (x86)\LyriXeeker-1\LyriXeeker-1-enabler.exe

Task: C:\Windows\Tasks\LyriXeeker-1-firefoxinstaller.job => C:\Program Files (x86)\LyriXeeker-1\LyriXeeker-1-firefoxinstaller.exe

Task: C:\Windows\Tasks\LyriXeeker-1-updater.job => C:\Program Files (x86)\LyriXeeker-1\LyriXeeker-1-updater.exe

Reg: reg delete "HKEY_CURRENT_USER\Software\AppDataLow\Software\LyriXeeker-1" /f

Reg: reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220422182256}" /f

Reg: reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\LyriXeeker-1" /f

Reg: reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{090bb045-13a7-447c-b78e-30b1ddb41389}" /f

Reg: reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{2fa47400-045a-4ff8-81a2-377f157a4e5a}" /f

Reg: reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{37237a65-5777-43f2-ba9b-339de5a29d22}" /f

Reg: reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4b7fb8aa-25e0-4a1d-ba79-f77e674dd6a2}" /f

Reg: reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{90b3c11d-5652-4b5a-886b-9e20a42dbadc}" /f

Reg: reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\LyriXeeker-1-firefoxinstaller_RASAPI32" /f

Reg: reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\LyriXeeker-1-firefoxinstaller_RASMANCS" /f

Reg: reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\LyriXeeker-1-updater_RASAPI32" /f

Reg: reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\LyriXeeker-1-updater_RASMANCS" /f

Reg: reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\LyriXeeker-1" /f

end

*****************
 

C:\Users\****\AppData\Roaming\Mozilla\Firefox\Profiles\x0s0w4c4.default\Extensions\763ab44b-71df-436c-906e-2ee8e1d7b302@af951efb-381e-47b2-ac45-80df41e44bc7.com => Moved successfully.

C:\Windows\Tasks\LyriXeeker-1-updater.job => Moved successfully.

C:\Windows\Tasks\LyriXeeker-1-firefoxinstaller.job => Moved successfully.

C:\Windows\Tasks\LyriXeeker-1-codedownloader.job => Moved successfully.

C:\Windows\Tasks\LyriXeeker-1-enabler.job => Moved successfully.

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{39B24F8C-063B-463B-9993-496E6C1DB115} => Key deleted successfully.

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{39B24F8C-063B-463B-9993-496E6C1DB115} => Key deleted successfully.

C:\Windows\System32\Tasks\LyriXeeker-1-updater => Moved successfully.

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\LyriXeeker-1-updater => Key deleted successfully.

C:\Program Files (x86)\LyriXeeker-1 => Moved successfully.

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{5DCF99EC-17A4-4A3F-A2CE-8C93F4E1C005} => Key deleted successfully.

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{5DCF99EC-17A4-4A3F-A2CE-8C93F4E1C005} => Key deleted successfully.

C:\Windows\System32\Tasks\LyriXeeker-1-firefoxinstaller => Moved successfully.

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\LyriXeeker-1-firefoxinstaller => Key deleted successfully.

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{9405692F-6B83-4588-AFF7-C19AF4A6F59E} => Key deleted successfully.

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{9405692F-6B83-4588-AFF7-C19AF4A6F59E} => Key deleted successfully.

C:\Windows\System32\Tasks\LyriXeeker-1-enabler => Moved successfully.

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\LyriXeeker-1-enabler => Key deleted successfully.

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{D0F8CAFA-D555-46A0-A0E4-F18D1B192200} => Key deleted successfully.

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{D0F8CAFA-D555-46A0-A0E4-F18D1B192200} => Key deleted successfully.

C:\Windows\System32\Tasks\LyriXeeker-1-codedownloader => Moved successfully.

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\LyriXeeker-1-codedownloader => Key deleted successfully.

C:\Windows\Tasks\LyriXeeker-1-codedownloader.job not found.

C:\Windows\Tasks\LyriXeeker-1-enabler.job not found.

C:\Windows\Tasks\LyriXeeker-1-firefoxinstaller.job not found.

C:\Windows\Tasks\LyriXeeker-1-updater.job not found.
 

========= reg delete "HKEY_CURRENT_USER\Software\AppDataLow\Software\LyriXeeker-1" /f =========
 

Der Vorgang wurde erfolgreich beendet.
 
 
 

========= End of Reg: =========
 
 

========= reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220422182256}" /f =========
 

Der Vorgang wurde erfolgreich beendet.
 
 
 

========= End of Reg: =========
 
 

========= reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\LyriXeeker-1" /f =========
 

Der Vorgang wurde erfolgreich beendet.
 
 
 

========= End of Reg: =========
 
 

========= reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{090bb045-13a7-447c-b78e-30b1ddb41389}" /f =========
 

Der Vorgang wurde erfolgreich beendet.
 
 
 

========= End of Reg: =========
 
 

========= reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{2fa47400-045a-4ff8-81a2-377f157a4e5a}" /f =========
 

Der Vorgang wurde erfolgreich beendet.
 
 
 

========= End of Reg: =========
 
 

========= reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{37237a65-5777-43f2-ba9b-339de5a29d22}" /f =========
 

Der Vorgang wurde erfolgreich beendet.
 
 
 

========= End of Reg: =========
 
 

========= reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4b7fb8aa-25e0-4a1d-ba79-f77e674dd6a2}" /f =========
 

Der Vorgang wurde erfolgreich beendet.
 
 
 

========= End of Reg: =========
 
 

========= reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{90b3c11d-5652-4b5a-886b-9e20a42dbadc}" /f =========
 

Der Vorgang wurde erfolgreich beendet.
 
 
 

========= End of Reg: =========
 
 

========= reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\LyriXeeker-1-firefoxinstaller_RASAPI32" /f =========
 

Der Vorgang wurde erfolgreich beendet.
 
 
 

========= End of Reg: =========
 
 

========= reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\LyriXeeker-1-firefoxinstaller_RASMANCS" /f =========
 

Der Vorgang wurde erfolgreich beendet.
 
 
 

========= End of Reg: =========
 
 

========= reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\LyriXeeker-1-updater_RASAPI32" /f =========
 

Der Vorgang wurde erfolgreich beendet.
 
 
 

========= End of Reg: =========
 
 

========= reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\LyriXeeker-1-updater_RASMANCS" /f =========
 

Der Vorgang wurde erfolgreich beendet.
 
 
 

========= End of Reg: =========
 
 

========= reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\LyriXeeker-1" /f =========
 

Der Vorgang wurde erfolgreich beendet.
 
 
 

========= End of Reg: =========
 
 

==== End of Fixlog ====

FRST (Teil 1)

Code:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 21-09-2013

Ran by **** (administrator) on ****-PC on 21-09-2013 13:01:22

Running from C:\Users\****\Desktop

Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard

Internet Explorer Version 10

Boot Mode: Normal
 

==================== Processes (Whitelisted) =================
 

(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe

(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe

(Microsoft Corporation) C:\Windows\system32\WLANExt.exe

(UPEK Inc.) C:\Program Files\Protector Suite\upeksvr.exe

(Acronis) C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe

(Adobe Systems Incorporated) c:\Adobe\Adobe Version Cue CS2\bin\VersionCueCS2.exe

(Acronis) C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe

(Intel Corporation) C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe

(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe

(Intel(R) Corporation) C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe

(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

(Intel Corporation) C:\Windows\System32\igfxtray.exe

(Intel Corporation) C:\Windows\System32\hkcmd.exe

(Intel Corporation) C:\Windows\System32\igfxpers.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe

(Acronis) C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe

() C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe

(Chicony) C:\Program Files (x86)\ChiconyCam\CECAPLF.exe

(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe

(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe

(UPEK Inc.) C:\Program Files\Protector Suite\psqltray.exe

(TerraTec Electronic GmbH) C:\Program Files (x86)\Common Files\TerraTec\Remote\TTTvRc.exe

(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Acrobat 7.0\Acrobat\Acrobat_sl.exe

(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe

(Elgato Systems GmbH) C:\Program Files (x86)\Elgato\EyeTV Netstream\EyeTVNetstreamSvc.exe

() C:\Program Files (x86)\Hotkey\Hotkey.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe

(Adobe Systems Inc.) C:\Program Files (x86)\Adobe\Acrobat 7.0\Distillr\acrotray.exe

(Acronis) C:\Program Files (x86)\Common Files\Acronis\TibMounter\TibMounterMonitor.exe

(Adobe Sytems Incorporated) C:\Adobe\Adobe Version Cue CS2\ControlPanel\VersionCueCS2Tray.exe

(shbox.de) C:\Program Files (x86)\FreePDF_XP\fpassist.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe

(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe

(Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe

(Geek Software GmbH) C:\Program Files (x86)\PDF24\pdf24.exe

() C:\Windows\Samsung\PanelMgr\SSMMgr.exe

(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe

(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe

() C:\Windows\Samsung\PanelMgr\caller64.exe

(Creative Technology Ltd) C:\Program Files (x86)\Creative\THX TruStudio Pro\THXAudioCP\THXAudio.exe

(Acronis) C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe

(Western Digital Technologies, Inc.) C:\Program Files (x86)\Western Digital\WD Quick View\WDDMStatus.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe

(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe

(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\integratedoffice.exe

() C:\Program Files (x86)\Hotkey\PowerBiosServer.exe

(Protexis Inc.) c:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe

(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe

(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe

(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe

() c:\Adobe\Adobe Version Cue CS2\data\database\bin\mysqld-nt.exe

(Western Digital Technologies, Inc.) C:\Program Files (x86)\Western Digital\WD Drive Manager\WDDriveService.exe

(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe

(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe

(Western Digital Technologies, Inc.) C:\Program Files (x86)\Western Digital\WD SmartWare\WDBackupEngine.exe

(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer.exe

(Microsoft Corporation) c:\Program Files\Microsoft Security Client\NisSrv.exe

(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\tv_w32.exe

(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\tv_x64.exe

(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe

(Microsoft Corporation) C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe

(Acronis) C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
 

==================== Registry (Whitelisted) ==================
 

HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2052392 2010-02-11] (Synaptics Incorporated)

HKLM\...\Run: [HotKeysCmds] - C:\Windows\system32\hkcmd.exe [ ] ()

HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11544680 2012-03-25] (Realtek Semiconductor)

HKLM\...\Run: [Acronis Scheduler2 Service] - C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe [517912 2013-02-15] (Acronis)

HKLM\...\Run: [CDAServer] - C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe [462712 2012-03-09] ()

HKLM\...\Run: [CECAPLF] - C:\Program Files (x86)\ChiconyCam\CECAPLF.exe [121456 2010-09-17] (Chicony)

HKLM\...\Run: [IntelPAN] - C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe [1935120 2011-07-27] (Intel(R) Corporation)

HKLM\...\Run: [MSC] - C:\Program Files\Microsoft Security Client\msseces.exe [1356240 2013-06-20] (Microsoft Corporation)

HKLM\...\Run: [PSQLLauncher] - c:\Program Files\Protector Suite\launcher.exe [84744 2010-04-27] (UPEK Inc.)

HKLM\...\Run: [THXCfg64] - C:\Windows\system32\RunDLL32.exe C:\Windows\system32\THXCfg64.dll,RunDLLEntry THXCfg64

Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)

Winlogon\Notify\psfus: c:\Program Files\Protector Suite\psqlpwd.dll (UPEK Inc.)

HKCU\...\Run: [Remote Control Editor] - C:\Program Files (x86)\Common Files\TerraTec\Remote\TTTvRc.exe [1839616 2013-04-15] (TerraTec Electronic GmbH)

HKCU\...\Run: [updateMgr] - C:\Program Files (x86)\Adobe\Acrobat 7.0\Acrobat\AdobeUpdateManager.exe [313472 2006-03-30] (Adobe Systems Incorporated)

HKLM-x32\...\Run: [] -  [x]

HKLM-x32\...\Run: [Acrobat Assistant 7.0] - C:\Program Files (x86)\Adobe\Acrobat 7.0\Distillr\Acrotray.exe [483328 2008-04-23] (Adobe Systems Inc.)

HKLM-x32\...\Run: [AcronisTibMounterMonitor] - C:\Program Files (x86)\Common Files\Acronis\TibMounter\TibMounterMonitor.exe [1105848 2013-01-10] (Acronis)

HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)

HKLM-x32\...\Run: [Adobe Version Cue CS2] - c:\Adobe\Adobe Version Cue CS2\ControlPanel\VersionCueCS2Tray.exe [856064 2005-04-06] (Adobe Sytems Incorporated)

HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)

HKLM-x32\...\Run: [FreePDF Assistant] - C:\Program Files (x86)\FreePDF_XP\fpassist.exe [371200 2011-02-23] (shbox.de)

HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-08-16] (Apple Inc.)

HKLM-x32\...\Run: [NUSB3MON] - C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [113288 2012-03-25] (Renesas Electronics Corporation)

HKLM-x32\...\Run: [PDFPrint] - C:\Program Files (x86)\PDF24\pdf24.exe [162856 2013-03-20] (Geek Software GmbH)

HKLM-x32\...\Run: [Samsung PanelMgr] - C:\Windows\Samsung\PanelMgr\SSMMgr.exe [688128 2011-07-06] ()

HKLM-x32\...\Run: [SDTray] - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [5624784 2013-07-25] (Safer-Networking Ltd.)

HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation)

HKLM-x32\...\Run: [THX Audio Control Panel] - C:\Program Files (x86)\Creative\THX TruStudio Pro\THXAudioCP\THXAudio.exe [1374720 2010-11-01] (Creative Technology Ltd)

HKLM-x32\...\Run: [TrueImageMonitor.exe] - C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe [6405376 2013-03-28] (Acronis)

HKLM-x32\...\Run: [UpdReg] - C:\Windows\UpdReg.EXE [90112 2000-05-11] (Creative Technology Ltd.)

HKLM-x32\...\Run: [WD Quick View] - C:\Program Files (x86)\Western Digital\WD Quick View\WDDMStatus.exe [5537136 2013-08-14] (Western Digital Technologies, Inc.)

HKU\UpdatusUser\...\RunOnce: [WAB Migrate] - C:\Program Files\Windows Mail\wab.exe [516096 2010-11-21] (Microsoft Corporation)

AppInit_DLLs: C:\Windows\System32\nvinitx.dll [246024 2012-12-29] (NVIDIA Corporation)

Lsa: [Notification Packages] scecli c:\Program Files\Protector Suite\psqlpwd.dll
 

==================== Internet (Whitelisted) ====================
 

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://de.msn.com/?ocid=OIE9MSE

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xBD07CED6C30ACD01

BHO: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)

BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)

BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)

BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)

BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)

BHO-x32: Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)

BHO-x32: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office 15\root\Office15\OCHelper.dll (Microsoft Corporation)

BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)

BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)

BHO-x32: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files (x86)\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)

BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office 15\root\Office15\URLREDIR.DLL (Microsoft Corporation)

BHO-x32: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL (Microsoft Corporation)

BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

Toolbar: HKLM-x32 - Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)

Toolbar: HKLM-x32 - TerraTec Home Cinema - {AD6E6555-FB2C-47D4-8339-3E2965509877} - C:\Program Files (x86)\TerraTec\TerraTec Home Cinema\THCDeskBand.dll (TerraTec Electronic GmbH)

Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL (Microsoft Corporation)

Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)

Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
 

FireFox:

========

FF ProfilePath: C:\Users\****\AppData\Roaming\Mozilla\Firefox\Profiles\x0s0w4c4.default

FF Homepage: hxxp://www.google.de

FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_168.dll ()

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)

FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)

FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_168.dll ()

FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\system32\Adobe\Director\np32dsw.dll No File

FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()

FF Plugin-x32: @java.com/DTPlugin,version=10.25.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)

FF Plugin-x32: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

FF Plugin-x32: @microsoft.com/Lync,version=15.0 - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll (Microsoft Corporation)

FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)

FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3505.0912 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF Plugin-x32: @videolan.org/vlc,version=2.0.1 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)

FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml

FF Extension: No Name - C:\Users\****\AppData\Roaming\Mozilla\Firefox\Profiles\x0s0w4c4.default\Extensions\{ce7e73df-6a44-4028-8079-5927a588c948}.xpi

FF Extension: No Name - C:\Users\****\AppData\Roaming\Mozilla\Firefox\Profiles\x0s0w4c4.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
 

==================== Services (Whitelisted) =================
 

S3 Adobe LM Service; C:\Program Files (x86)\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [72704 2013-01-30] (Adobe Systems)

R2 Adobe Version Cue CS2; c:\Adobe\Adobe Version Cue CS2\bin\VersionCueCS2.exe [163840 2005-04-06] (Adobe Systems Incorporated)

S2 CECFLPKT; C:\Program Files (x86)\ChiconyCam\CECPLFKT.exe [84592 2010-09-09] (Chicony Electronics Co., Ltd.)

R2 EyeTV Netstream; C:\Program Files (x86)\Elgato\EyeTV Netstream\EyeTVNetstreamSvc.exe [399944 2012-02-10] (Elgato Systems GmbH)

R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)

R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)

R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [23808 2013-06-20] (Microsoft Corporation)

S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [340240 2011-07-27] ()

R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [366600 2013-06-20] (Microsoft Corporation)

R2 OfficeSvc; C:\Program Files\Microsoft Office 15\ClientX64\integratedoffice.exe [1901752 2013-07-22] (Microsoft Corporation)

R2 PowerBiosServer; C:\Program Files (x86)\Hotkey\PowerBiosServer.exe [32768 2010-11-18] ()

R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1817560 2013-05-16] (Safer-Networking Ltd.)

R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [1033688 2013-05-16] (Safer-Networking Ltd.)

S2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [171928 2013-05-15] (Safer-Networking Ltd.)

R2 WDBackup; C:\Program Files (x86)\Western Digital\WD SmartWare\WDBackupEngine.exe [1042808 2013-08-14] (Western Digital Technologies, Inc.)

R2 WDDriveService; C:\Program Files (x86)\Western Digital\WD Drive Manager\WDDriveService.exe [270704 2013-08-14] (Western Digital Technologies, Inc.)
 

==================== Drivers (Whitelisted) ====================
 

R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)

R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)

R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [247216 2013-06-18] (Microsoft Corporation)

R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [139616 2013-06-18] (Microsoft Corporation)

S3 SliceDisk5; C:\Program Files\A-FF Find and Mount\slicedisk-x64.sys [31824 2011-02-25] (Atola)

S3 SliceDisk5; C:\Program Files\A-FF Find and Mount\slicedisk-x64.sys [31824 2011-02-25] (Atola)

R0 tib; C:\Windows\System32\DRIVERS\tib.sys [1120032 2013-09-06] (Acronis International GmbH)

R0 tib_mounter; C:\Windows\System32\DRIVERS\tib_mounter.sys [183224 2013-09-06] (Acronis)

R0 vidsflt; C:\Windows\System32\DRIVERS\vidsflt.sys [117024 2013-09-06] (Acronis International GmbH)

U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)

S3 catchme; \??\C:\ComboFix\catchme.sys [x]
 

==================== NetSvcs (Whitelisted) ===================
 
 

==================== One Month Created Files and Folders ========
 

2013-09-21 12:53 - 2013-09-21 12:53 - 01956670 _____ (Farbar) C:\Users\****\Desktop\FRST64.exe

2013-09-20 23:26 - 2013-09-20 23:27 - 00016514 _____ C:\Users\****\Desktop\SystemLook.txt

2013-09-20 23:26 - 2013-09-20 23:26 - 00165376 _____ C:\Users\****\Desktop\SystemLook_x64.exe

2013-09-20 23:24 - 2013-09-20 23:26 - 00035577 _____ C:\Users\****\Desktop\Addition_alt1.txt

2013-09-20 23:24 - 2013-09-20 23:25 - 00153316 _____ C:\Users\****\Desktop\FRST_alt1.txt

2013-09-20 23:04 - 2013-04-17 09:02 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll

2013-09-20 23:04 - 2013-04-17 08:24 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 19246592 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 15404544 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 14332928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 03959296 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 02876928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb

2013-09-20 18:52 - 2013-09-20 18:52 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2013-09-20 18:52 - 2013-09-20 18:52 - 02647040 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 02048000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 01509376 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2013-09-20 18:52 - 2013-09-20 18:52 - 01441280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl

2013-09-20 18:52 - 2013-09-20 18:52 - 01400416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat

2013-09-20 18:52 - 2013-09-20 18:52 - 01400416 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat

2013-09-20 18:52 - 2013-09-20 18:52 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 01054720 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe

2013-09-20 18:52 - 2013-09-20 18:52 - 00905728 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00762368 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00719360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00629248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00599552 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00523264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00452096 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00441856 _____ (Microsoft Corporation) C:\Windows\system32\html.iec

2013-09-20 18:52 - 2013-09-20 18:52 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00361984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec

2013-09-20 18:52 - 2013-09-20 18:52 - 00357888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00281600 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00270848 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00247296 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00242200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\url.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00232960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00226816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00226304 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00216064 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00204800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00185344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00173568 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe

2013-09-20 18:52 - 2013-09-20 18:52 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe

2013-09-20 18:52 - 2013-09-20 18:52 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00158720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00150528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe

2013-09-20 18:52 - 2013-09-20 18:52 - 00149504 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00144896 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe

2013-09-20 18:52 - 2013-09-20 18:52 - 00138752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe

2013-09-20 18:52 - 2013-09-20 18:52 - 00137216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe

2013-09-20 18:52 - 2013-09-20 18:52 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00125440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00117248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00110592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00097280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe

2013-09-20 18:52 - 2013-09-20 18:52 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe

2013-09-20 18:52 - 2013-09-20 18:52 - 00082432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00079872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx

2013-09-20 18:52 - 2013-09-20 18:52 - 00073728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe

2013-09-20 18:52 - 2013-09-20 18:52 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe

2013-09-20 18:52 - 2013-09-20 18:52 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx

2013-09-20 18:52 - 2013-09-20 18:52 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00057344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2013-09-20 18:52 - 2013-09-20 18:52 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00041984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00038400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00027648 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00023040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe

2013-09-20 18:52 - 2013-09-20 18:52 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe

2013-09-20 18:52 - 2013-09-20 18:52 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe

2013-09-20 18:52 - 2013-09-20 18:52 - 00011776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe

2013-09-20 10:46 - 2013-09-21 12:56 - 00042624 _____ C:\Windows\setupact.log

2013-09-20 10:46 - 2013-09-20 10:46 - 00000000 _____ C:\Windows\setuperr.log

2013-09-20 01:48 - 2011-03-25 05:29 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys

2013-09-20 01:48 - 2011-03-25 05:29 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys

2013-09-20 01:48 - 2011-03-25 05:29 - 00098816 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys

2013-09-20 01:48 - 2011-03-25 05:29 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys

2013-09-20 01:48 - 2011-03-25 05:29 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys

2013-09-20 01:48 - 2011-03-25 05:29 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys

2013-09-20 01:48 - 2011-03-25 05:28 - 00007936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys

2013-09-20 01:48 - 2011-03-11 08:41 - 00410496 _____ (Intel Corporation) C:\Windows\system32\Drivers\iaStorV.sys

2013-09-20 01:48 - 2011-03-11 08:41 - 00189824 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys

2013-09-20 01:48 - 2011-03-11 08:41 - 00166272 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvstor.sys

2013-09-20 01:48 - 2011-03-11 08:41 - 00148352 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvraid.sys

2013-09-20 01:48 - 2011-03-11 08:41 - 00107904 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\amdsata.sys

2013-09-20 01:48 - 2011-03-11 08:41 - 00027008 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\amdxata.sys

2013-09-20 01:48 - 2011-03-11 08:33 - 02565632 _____ (Microsoft Corporation) C:\Windows\system32\esent.dll

2013-09-20 01:48 - 2011-03-11 08:30 - 00096768 _____ (Microsoft Corporation) C:\Windows\system32\fsutil.exe

2013-09-20 01:48 - 2011-03-11 07:33 - 01699328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\esent.dll

2013-09-20 01:48 - 2011-03-11 07:31 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fsutil.exe

2013-09-20 01:48 - 2011-03-11 06:37 - 00091648 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBSTOR.SYS

2013-09-20 01:45 - 2013-09-20 01:45 - 00001113 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk

2013-09-20 01:45 - 2013-09-20 01:45 - 00000000 ____D C:\Users\****\AppData\Roaming\Malwarebytes

2013-09-20 01:45 - 2013-09-20 01:45 - 00000000 ____D C:\ProgramData\Malwarebytes

2013-09-20 01:45 - 2013-09-20 01:45 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware

2013-09-20 01:45 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys

2013-09-20 01:44 - 2013-09-20 01:44 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\****\Desktop\mbam-setup-1.75.0.1300.exe

2013-09-20 01:43 - 2013-09-20 01:43 - 00002403 _____ C:\Users\****\Desktop\JRT.txt

2013-09-20 01:37 - 2013-09-20 01:37 - 01029675 _____ (Thisisu) C:\Users\****\Desktop\JRT.exe

2013-09-20 01:37 - 2013-09-20 01:37 - 00000000 ____D C:\Windows\ERUNT

2013-09-20 01:34 - 2013-09-20 01:34 - 00002861 _____ C:\Users\****\Desktop\AdwCleaner[S0].txt

2013-09-20 01:31 - 2013-09-20 01:31 - 00000000 ____D C:\AdwCleaner

2013-09-20 01:30 - 2013-09-20 01:30 - 01039554 _____ C:\Users\****\Desktop\adwcleaner.exe

2013-09-19 17:55 - 2013-09-20 10:31 - 00000000 ____D C:\Windows\Minidump

2013-09-19 17:08 - 2013-09-19 17:11 - 00033957 _____ C:\Users\****\Desktop\ComboFix.txt

2013-09-19 16:39 - 2013-09-19 17:09 - 00000000 ____D C:\Qoobox

2013-09-19 16:39 - 2013-09-19 17:03 - 00000000 ____D C:\Windows\erdnt

2013-09-19 16:39 - 2011-06-26 08:45 - 00256000 _____ C:\Windows\PEV.exe

2013-09-19 16:39 - 2010-11-07 19:20 - 00208896 _____ C:\Windows\MBR.exe

2013-09-19 16:39 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe

2013-09-19 16:39 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe

2013-09-19 16:39 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe

2013-09-19 16:39 - 2000-08-31 02:00 - 00098816 _____ C:\Windows\sed.exe

2013-09-19 16:39 - 2000-08-31 02:00 - 00080412 _____ C:\Windows\grep.exe

2013-09-19 16:39 - 2000-08-31 02:00 - 00068096 _____ C:\Windows\zip.exe

2013-09-19 16:37 - 2013-09-19 16:37 - 05128554 ____R (Swearware) C:\Users\****\Desktop\ComboFix.exe

2013-09-19 16:29 - 2013-09-19 16:29 - 00032900 _____ C:\Users\****\Desktop\logfiles.zip

2013-09-19 14:56 - 2013-04-10 01:34 - 01247744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll

2013-09-19 14:56 - 2013-04-03 00:51 - 01643520 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll

2013-09-19 14:54 - 2013-09-19 14:58 - 00012112 _____ C:\Users\****\Desktop\Gmer.txt

2013-09-19 14:45 - 2013-09-19 14:58 - 00142885 _____ C:\Users\****\Desktop\FRST_alt.txt

2013-09-19 14:44 - 2013-09-19 14:55 - 00039322 _____ C:\Users\****\Desktop\Addition_alt.txt

2013-09-19 14:43 - 2013-09-19 14:43 - 00000000 ____D C:\FRST

2013-09-19 14:42 - 2013-09-19 14:54 - 00000474 _____ C:\Users\****\Desktop\defogger_disable.log

2013-09-19 14:42 - 2013-09-19 14:42 - 00000000 _____ C:\Users\****\defogger_reenable

2013-09-19 14:41 - 2013-09-19 14:41 - 00377856 _____ C:\Users\****\Desktop\5txgbuj5.exe

2013-09-19 14:41 - 2013-09-19 14:41 - 00050477 _____ C:\Users\****\Desktop\Defogger.exe

2013-09-19 14:34 - 2013-01-13 23:17 - 00009728 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll

2013-09-19 14:34 - 2013-01-13 23:17 - 00002560 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll

2013-09-19 14:34 - 2013-01-13 23:16 - 00010752 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll

2013-09-19 14:34 - 2013-01-13 23:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll

2013-09-19 14:34 - 2013-01-13 23:11 - 00005632 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll

2013-09-19 14:34 - 2013-01-13 23:11 - 00005632 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll

2013-09-19 14:34 - 2013-01-13 23:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-user32-l1-1-0.dll

2013-09-19 14:34 - 2013-01-13 23:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-version-l1-1-0.dll

2013-09-19 14:34 - 2013-01-13 23:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll

2013-09-19 14:34 - 2013-01-13 22:35 - 00010752 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll

2013-09-19 14:34 - 2013-01-13 22:35 - 00009728 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll

2013-09-19 14:34 - 2013-01-13 22:35 - 00002560 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll

2013-09-19 14:34 - 2013-01-13 22:32 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll

2013-09-19 14:34 - 2013-01-13 22:31 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll

2013-09-19 14:34 - 2013-01-13 22:31 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll

2013-09-19 14:34 - 2013-01-13 22:31 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll

2013-09-19 14:34 - 2013-01-13 22:31 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-version-l1-1-0.dll

2013-09-19 14:34 - 2013-01-13 22:31 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll

2013-09-19 14:34 - 2013-01-13 22:22 - 01988096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll

2013-09-19 14:34 - 2013-01-13 22:20 - 00293376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll

2013-09-19 14:34 - 2013-01-13 22:09 - 00249856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1core.dll

2013-09-19 14:34 - 2013-01-13 22:08 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10core.dll

2013-09-19 14:34 - 2013-01-13 21:58 - 01175552 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll

2013-09-19 14:34 - 2013-01-13 21:54 - 00604160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll

2013-09-19 14:34 - 2013-01-13 21:53 - 00207872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecsExt.dll

2013-09-19 14:34 - 2013-01-13 21:53 - 00187392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIAnimation.dll

2013-09-19 14:34 - 2013-01-13 21:51 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll

2013-09-19 14:34 - 2013-01-13 21:49 - 00363008 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll

2013-09-19 14:34 - 2013-01-13 21:48 - 00161792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1.dll

2013-09-19 14:34 - 2013-01-13 21:46 - 01080832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10.dll

2013-09-19 14:34 - 2013-01-13 21:38 - 00333312 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1core.dll

2013-09-19 14:34 - 2013-01-13 21:38 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\d3d10core.dll

2013-09-19 14:34 - 2013-01-13 21:37 - 03419136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll

2013-09-19 14:34 - 2013-01-13 21:25 - 00245248 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecsExt.dll

2013-09-19 14:34 - 2013-01-13 21:24 - 00648192 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll

2013-09-19 14:34 - 2013-01-13 21:24 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\UIAnimation.dll

2013-09-19 14:34 - 2013-01-13 21:20 - 01238528 _____ (Microsoft Corporation) C:\Windows\system32\d3d10.dll

2013-09-19 14:34 - 2013-01-13 21:20 - 00194560 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1.dll

2013-09-19 14:34 - 2013-01-13 21:10 - 03928064 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll

2013-09-19 14:34 - 2013-01-13 21:02 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll

2013-09-19 14:34 - 2013-01-13 20:34 - 00364544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsGdiConverter.dll

2013-09-19 14:34 - 2013-01-13 20:32 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll

2013-09-19 14:34 - 2013-01-13 20:09 - 00522752 _____ (Microsoft Corporation) C:\Windows\system32\XpsGdiConverter.dll

2013-09-19 14:34 - 2013-01-13 19:26 - 01158144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsPrint.dll

2013-09-19 14:34 - 2013-01-13 19:05 - 01682432 _____ (Microsoft Corporation) C:\Windows\system32\XpsPrint.dll

2013-09-19 14:34 - 2013-01-04 08:11 - 02776576 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll

2013-09-19 14:34 - 2013-01-04 08:11 - 02284544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll

2013-09-19 14:33 - 2012-08-24 20:13 - 00154480 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys

2013-09-19 14:33 - 2012-08-24 20:09 - 00458712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys

2013-09-19 14:33 - 2012-08-24 20:05 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll

2013-09-19 14:33 - 2012-08-24 20:03 - 01448448 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll

2013-09-19 14:33 - 2012-08-24 18:57 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll

2013-09-19 14:33 - 2012-08-24 18:57 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll

2013-09-19 14:33 - 2012-08-24 18:53 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll

2013-09-19 14:19 - 2013-09-18 22:06 - 02850416 _____ C:\Users\****\Desktop\Sicherungskopie_von_flic.cdr

2013-09-19 13:59 - 2013-09-01 17:08 - 79143768 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

2013-09-19 13:51 - 2012-07-26 06:55 - 00785512 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys

2013-09-19 13:51 - 2012-07-26 06:55 - 00054376 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdfLdr.sys

2013-09-19 13:51 - 2012-07-26 04:36 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\Wdfres.dll

2013-09-19 13:51 - 2012-06-02 16:35 - 00000003 _____ C:\Windows\system32\Drivers\MsftWdf_Kernel_01011_Inbox_Critical.Wdf

2013-09-19 13:48 - 2013-09-19 13:48 - 00000134 _____ C:\Users\****\Desktop\Internet Explorer-Problembehebung.url

2013-09-19 13:39 - 2010-02-23 10:16 - 00294912 _____ (Microsoft Corporation) C:\Windows\system32\browserchoice.exe

2013-09-19 13:27 - 2012-12-16 19:11 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll

2013-09-19 13:27 - 2012-12-16 16:45 - 00367616 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll

2013-09-19 13:27 - 2012-12-16 16:13 - 00295424 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll

2013-09-19 13:27 - 2012-12-16 16:13 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll

2013-09-19 13:27 - 2010-09-30 12:41 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll

2013-09-19 13:27 - 2010-09-30 08:47 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll

2013-09-19 13:26 - 2012-07-26 05:08 - 00744448 _____ (Microsoft Corporation) C:\Windows\system32\WUDFx.dll

2013-09-19 13:26 - 2012-07-26 05:08 - 00229888 _____ (Microsoft Corporation) C:\Windows\system32\WUDFHost.exe

2013-09-19 13:26 - 2012-07-26 05:08 - 00194048 _____ (Microsoft Corporation) C:\Windows\system32\WUDFPlatform.dll

2013-09-19 13:26 - 2012-07-26 05:08 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\WUDFSvc.dll

2013-09-19 13:26 - 2012-07-26 05:08 - 00045056 _____ (Microsoft Corporation) C:\Windows\system32\WUDFCoinstaller.dll

2013-09-19 13:26 - 2012-07-26 04:26 - 00198656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFRd.sys

2013-09-19 13:26 - 2012-07-26 04:26 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WUDFPf.sys

2013-09-19 13:26 - 2012-06-02 16:57 - 00000003 _____ C:\Windows\system32\Drivers\MsftWdf_User_01_11_00_Inbox_Critical.Wdf

2013-09-19 13:23 - 2012-03-01 08:46 - 00023408 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fs_rec.sys

2013-09-19 13:23 - 2012-03-01 08:33 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll

2013-09-19 13:23 - 2012-03-01 08:28 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\wmi.dll

2013-09-19 13:23 - 2012-03-01 07:33 - 00159232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll

2013-09-19 13:23 - 2012-03-01 07:29 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmi.dll

2013-09-19 13:19 - 2013-08-02 04:23 - 05550528 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe

2013-09-19 13:19 - 2013-08-02 04:15 - 01732032 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll

2013-09-19 13:19 - 2013-08-02 04:15 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll

2013-09-19 13:19 - 2013-08-02 04:15 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll

2013-09-19 13:19 - 2013-08-02 04:15 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll

2013-09-19 13:19 - 2013-08-02 04:14 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll

2013-09-19 13:19 - 2013-08-02 04:14 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll

2013-09-19 13:19 - 2013-08-02 04:13 - 01161216 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll

2013-09-19 13:19 - 2013-08-02 04:13 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll

2013-09-19 13:19 - 2013-08-02 04:12 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll

2013-09-19 13:19 - 2013-08-02 04:12 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll

2013-09-19 13:19 - 2013-08-02 04:12 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll

2013-09-19 13:19 - 2013-08-02 04:12 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll

2013-09-19 13:19 - 2013-08-02 04:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll

2013-09-19 13:19 - 2013-08-02 04:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll

2013-09-19 13:19 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll

2013-09-19 13:19 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll

2013-09-19 13:19 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll

2013-09-19 13:19 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll

2013-09-19 13:19 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll

2013-09-19 13:19 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll

2013-09-19 13:19 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll

2013-09-19 13:19 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll

2013-09-19 13:19 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll

2013-09-19 13:19 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll

2013-09-19 13:19 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll

2013-09-19 13:19 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll

2013-09-19 13:19 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll

2013-09-19 13:19 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll

2013-09-19 13:19 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll

2013-09-19 13:19 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll

2013-09-19 13:19 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll

2013-09-19 13:19 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll

2013-09-19 13:19 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll

2013-09-19 13:19 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll

2013-09-19 13:19 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll

2013-09-19 13:19 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll

2013-09-19 13:19 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll

2013-09-19 13:19 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll

2013-09-19 13:19 - 2013-08-02 03:59 - 03968960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe

2013-09-19 13:19 - 2013-08-02 03:59 - 03913664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe

2013-09-19 13:19 - 2013-08-02 03:51 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll

2013-09-19 13:19 - 2013-08-02 03:50 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll

2013-09-19 13:19 - 2013-08-02 03:50 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll

2013-09-19 13:19 - 2013-08-02 03:50 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll

2013-09-19 13:19 - 2013-08-02 03:48 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll

2013-09-19 13:19 - 2013-08-02 03:48 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll

2013-09-19 13:19 - 2013-08-02 03:48 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll

2013-09-19 13:19 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll

2013-09-19 13:19 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll

2013-09-19 13:19 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll

2013-09-19 13:19 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll

2013-09-19 13:19 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll

2013-09-19 13:19 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll

2013-09-19 13:19 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll

2013-09-19 13:19 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll

2013-09-19 13:19 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll

2013-09-19 13:19 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll

2013-09-19 13:19 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll

2013-09-19 13:19 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll

2013-09-19 13:19 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll

2013-09-19 13:19 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll

2013-09-19 13:19 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll

2013-09-19 13:19 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll

2013-09-19 13:19 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll

2013-09-19 13:19 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll

2013-09-19 13:19 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll

2013-09-19 13:19 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll

2013-09-19 13:19 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll

2013-09-19 13:19 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll

2013-09-19 13:19 - 2013-08-02 03:09 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe

2013-09-19 13:19 - 2013-08-02 02:59 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe

2013-09-19 13:19 - 2013-08-02 02:45 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe

2013-09-19 13:19 - 2013-08-02 02:45 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll

2013-09-19 13:19 - 2013-08-02 02:45 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe

2013-09-19 13:19 - 2013-08-02 02:45 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe

2013-09-19 13:19 - 2013-08-02 02:43 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll

2013-09-19 13:19 - 2013-08-02 02:43 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll

2013-09-19 13:19 - 2013-08-02 02:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll

2013-09-19 13:19 - 2013-08-02 02:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll

2013-09-19 13:19 - 2013-02-27 08:02 - 00111448 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe

2013-09-19 13:19 - 2013-02-27 07:48 - 01930752 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll

2013-09-19 13:19 - 2013-02-27 07:47 - 00070144 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll

2013-09-19 13:19 - 2013-02-27 06:49 - 01796096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll

2013-09-19 13:18 - 2013-04-26 01:30 - 01505280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll

2013-09-19 13:18 - 2013-04-01 00:52 - 01887232 _____ (Microsoft Corporation) C:\Windows\system32\d3d11.dll

2013-09-19 13:18 - 2012-12-07 15:20 - 00441856 _____ (Microsoft Corporation) C:\Windows\system32\Wpc.dll

2013-09-19 13:18 - 2012-12-07 15:15 - 02746368 _____ (Microsoft Corporation) C:\Windows\system32\gameux.dll

2013-09-19 13:18 - 2012-12-07 14:26 - 00308736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Wpc.dll

2013-09-19 13:18 - 2012-12-07 14:20 - 02576384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gameux.dll

2013-09-19 13:18 - 2012-12-07 13:20 - 00045568 _____ (Microsoft) C:\Windows\system32\oflc-nz.rs

2013-09-19 13:18 - 2012-12-07 13:20 - 00044544 _____ (Microsoft) C:\Windows\system32\pegibbfc.rs

2013-09-19 13:18 - 2012-12-07 13:20 - 00043520 _____ (Microsoft) C:\Windows\system32\csrr.rs

2013-09-19 13:18 - 2012-12-07 13:20 - 00030720 _____ (Microsoft) C:\Windows\system32\usk.rs

2013-09-19 13:18 - 2012-12-07 13:20 - 00023552 _____ (Microsoft) C:\Windows\system32\oflc.rs

2013-09-19 13:18 - 2012-12-07 13:20 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi-pt.rs

2013-09-19 13:18 - 2012-12-07 13:20 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi-fi.rs

2013-09-19 13:18 - 2012-12-07 13:19 - 00055296 _____ (Microsoft) C:\Windows\system32\cero.rs

2013-09-19 13:18 - 2012-12-07 13:19 - 00051712 _____ (Microsoft) C:\Windows\system32\esrb.rs

2013-09-19 13:18 - 2012-12-07 13:19 - 00046592 _____ (Microsoft) C:\Windows\system32\fpb.rs

2013-09-19 13:18 - 2012-12-07 13:19 - 00040960 _____ (Microsoft) C:\Windows\system32\cob-au.rs

2013-09-19 13:18 - 2012-12-07 13:19 - 00021504 _____ (Microsoft) C:\Windows\system32\grb.rs

2013-09-19 13:18 - 2012-12-07 13:19 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi.rs

2013-09-19 13:18 - 2012-12-07 13:19 - 00015360 _____ (Microsoft) C:\Windows\system32\djctq.rs

2013-09-19 13:18 - 2012-12-07 12:46 - 00055296 _____ (Microsoft) C:\Windows\SysWOW64\cero.rs

2013-09-19 13:18 - 2012-12-07 12:46 - 00051712 _____ (Microsoft) C:\Windows\SysWOW64\esrb.rs

2013-09-19 13:18 - 2012-12-07 12:46 - 00046592 _____ (Microsoft) C:\Windows\SysWOW64\fpb.rs

2013-09-19 13:18 - 2012-12-07 12:46 - 00045568 _____ (Microsoft) C:\Windows\SysWOW64\oflc-nz.rs

2013-09-19 13:18 - 2012-12-07 12:46 - 00044544 _____ (Microsoft) C:\Windows\SysWOW64\pegibbfc.rs

2013-09-19 13:18 - 2012-12-07 12:46 - 00043520 _____ (Microsoft) C:\Windows\SysWOW64\csrr.rs

2013-09-19 13:18 - 2012-12-07 12:46 - 00040960 _____ (Microsoft) C:\Windows\SysWOW64\cob-au.rs

2013-09-19 13:18 - 2012-12-07 12:46 - 00030720 _____ (Microsoft) C:\Windows\SysWOW64\usk.rs

2013-09-19 13:18 - 2012-12-07 12:46 - 00023552 _____ (Microsoft) C:\Windows\SysWOW64\oflc.rs

2013-09-19 13:18 - 2012-12-07 12:46 - 00021504 _____ (Microsoft) C:\Windows\SysWOW64\grb.rs

2013-09-19 13:18 - 2012-12-07 12:46 - 00020480 _____ (Microsoft) C:\Windows\SysWOW64\pegi-pt.rs

2013-09-19 13:18 - 2012-12-07 12:46 - 00020480 _____ (Microsoft) C:\Windows\SysWOW64\pegi-fi.rs

2013-09-19 13:18 - 2012-12-07 12:46 - 00020480 _____ (Microsoft) C:\Windows\SysWOW64\pegi.rs

2013-09-19 13:18 - 2012-12-07 12:46 - 00015360 _____ (Microsoft) C:\Windows\SysWOW64\djctq.rs

2013-09-19 13:18 - 2012-11-30 01:17 - 00420064 _____ C:\Windows\SysWOW64\locale.nls

2013-09-19 13:18 - 2012-11-30 01:15 - 00420064 _____ C:\Windows\system32\locale.nls

2013-09-19 13:18 - 2012-10-03 19:44 - 00303104 _____ (Microsoft Corporation) C:\Windows\system32\nlasvc.dll

2013-09-19 13:18 - 2012-10-03 19:44 - 00246272 _____ (Microsoft Corporation) C:\Windows\system32\netcorehc.dll

2013-09-19 13:18 - 2012-10-03 19:44 - 00216576 _____ (Microsoft Corporation) C:\Windows\system32\ncsi.dll

2013-09-19 13:18 - 2012-10-03 19:44 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\nlaapi.dll

2013-09-19 13:18 - 2012-10-03 19:44 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\netevent.dll

2013-09-19 13:18 - 2012-10-03 19:42 - 00569344 _____ (Microsoft Corporation) C:\Windows\system32\iphlpsvc.dll

2013-09-19 13:18 - 2012-10-03 18:42 - 00175104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netcorehc.dll

2013-09-19 13:18 - 2012-10-03 18:42 - 00156672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncsi.dll

2013-09-19 13:18 - 2012-10-03 18:42 - 00018944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netevent.dll

2013-09-19 13:18 - 2012-10-03 18:07 - 00045568 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpipreg.sys

2013-09-19 13:18 - 2012-01-13 09:12 - 00052224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nlaapi.dll

2013-09-19 13:17 - 2013-07-26 04:24 - 14172672 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll

2013-09-19 13:17 - 2013-07-26 04:24 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\shdocvw.dll

2013-09-19 13:17 - 2013-07-26 03:55 - 12872704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll

2013-09-19 13:17 - 2013-07-26 03:55 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shdocvw.dll

2013-09-19 13:17 - 2013-07-25 11:25 - 01888768 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL

2013-09-19 13:17 - 2013-07-25 10:57 - 01620992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL

2013-09-19 13:17 - 2013-07-09 07:52 - 00224256 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll

2013-09-19 13:17 - 2013-07-09 07:46 - 01472512 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll

2013-09-19 13:17 - 2013-07-09 07:46 - 00184320 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll

2013-09-19 13:17 - 2013-07-09 07:46 - 00139776 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll

2013-09-19 13:17 - 2013-07-09 06:52 - 00175104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll

2013-09-19 13:17 - 2013-07-09 06:46 - 01166848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll

2013-09-19 13:17 - 2013-07-09 06:46 - 00140288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll

2013-09-19 13:17 - 2013-07-09 06:46 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll

2013-09-19 13:17 - 2013-07-06 08:03 - 01910208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys

2013-09-19 13:17 - 2013-05-13 07:50 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\certenc.dll

2013-09-19 13:17 - 2013-05-13 05:43 - 01192448 _____ (Microsoft Corporation) C:\Windows\system32\certutil.exe

2013-09-19 13:17 - 2013-05-13 05:08 - 00903168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certutil.exe

2013-09-19 13:17 - 2013-05-13 05:08 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certenc.dll

2013-09-19 13:17 - 2013-05-10 07:49 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\cryptdlg.dll

2013-09-19 13:17 - 2013-05-10 05:20 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptdlg.dll

2013-09-19 13:17 - 2013-04-12 16:45 - 01656680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys

2013-09-19 13:17 - 2013-01-03 08:00 - 00288088 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS

2013-09-19 13:17 - 2012-08-22 20:12 - 00376688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys

2013-09-19 13:17 - 2012-06-06 08:02 - 01133568 _____ (Microsoft Corporation) C:\Windows\system32\cdosys.dll

2013-09-19 13:17 - 2012-06-06 07:03 - 00805376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cdosys.dll

2013-09-19 13:17 - 2012-06-02 07:48 - 00095600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys

2013-09-19 13:17 - 2012-01-04 12:44 - 00509952 _____ (Microsoft Corporation) C:\Windows\system32\ntshrui.dll

2013-09-19 13:17 - 2012-01-04 10:58 - 00442880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntshrui.dll

2013-09-19 13:17 - 2011-11-17 08:35 - 00395776 _____ (Microsoft Corporation) C:\Windows\system32\webio.dll

2013-09-19 13:17 - 2011-11-17 08:35 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll

2013-09-19 13:17 - 2011-11-17 08:35 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll

2013-09-19 13:17 - 2011-11-17 08:35 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll

2013-09-19 13:17 - 2011-11-17 08:33 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe

2013-09-19 13:17 - 2011-11-17 07:35 - 00314880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webio.dll

2013-09-19 13:17 - 2011-05-04 07:25 - 02315776 _____ (Microsoft Corporation) C:\Windows\system32\tquery.dll

2013-09-19 13:17 - 2011-05-04 07:22 - 02223616 _____ (Microsoft Corporation) C:\Windows\system32\mssrch.dll

2013-09-19 13:17 - 2011-05-04 07:22 - 00778752 _____ (Microsoft Corporation) C:\Windows\system32\mssvp.dll

2013-09-19 13:17 - 2011-05-04 07:22 - 00491520 _____ (Microsoft Corporation) C:\Windows\system32\mssph.dll

2013-09-19 13:17 - 2011-05-04 07:22 - 00288256 _____ (Microsoft Corporation) C:\Windows\system32\mssphtb.dll

2013-09-19 13:17 - 2011-05-04 07:22 - 00075264 _____ (Microsoft Corporation) C:\Windows\system32\msscntrs.dll

2013-09-19 13:17 - 2011-05-04 07:19 - 00591872 _____ (Microsoft Corporation) C:\Windows\system32\SearchIndexer.exe

2013-09-19 13:17 - 2011-05-04 07:19 - 00249856 _____ (Microsoft Corporation) C:\Windows\system32\SearchProtocolHost.exe

2013-09-19 13:17 - 2011-05-04 07:19 - 00113664 _____ (Microsoft Corporation) C:\Windows\system32\SearchFilterHost.exe

2013-09-19 13:17 - 2011-05-04 06:34 - 01549312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tquery.dll

2013-09-19 13:17 - 2011-05-04 06:32 - 01401344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssrch.dll

2013-09-19 13:17 - 2011-05-04 06:32 - 00666624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssvp.dll

2013-09-19 13:17 - 2011-05-04 06:32 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssph.dll

2013-09-19 13:17 - 2011-05-04 06:32 - 00197120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssphtb.dll

2013-09-19 13:17 - 2011-05-04 06:32 - 00059392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msscntrs.dll

2013-09-19 13:17 - 2011-05-04 06:28 - 00427520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchIndexer.exe

2013-09-19 13:17 - 2011-05-04 06:28 - 00164352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchProtocolHost.exe

2013-09-19 13:17 - 2011-05-04 06:28 - 00086528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchFilterHost.exe

2013-09-19 13:17 - 2011-04-09 08:58 - 00142336 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe

2013-09-19 13:17 - 2011-04-09 07:56 - 00123904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\poqexec.exe

2013-09-19 13:17 - 2010-12-23 12:42 - 01118720 _____ (Microsoft Corporation) C:\Windows\system32\sbe.dll

2013-09-19 13:17 - 2010-12-23 12:42 - 00961024 _____ (Microsoft Corporation) C:\Windows\system32\CPFilters.dll

2013-09-19 13:17 - 2010-12-23 12:36 - 00259072 _____ (Microsoft Corporation) C:\Windows\system32\mpg2splt.ax

2013-09-19 13:17 - 2010-12-23 07:54 - 00850944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sbe.dll

2013-09-19 13:17 - 2010-12-23 07:54 - 00642048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CPFilters.dll

2013-09-19 13:17 - 2010-12-23 07:50 - 00199680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mpg2splt.ax

2013-09-19 13:16 - 2013-08-08 03:20 - 03155456 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys

2013-09-19 13:16 - 2013-08-05 04:25 - 00155584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ataport.sys

2013-09-19 13:16 - 2013-07-19 03:58 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll

2013-09-19 13:16 - 2013-07-19 03:41 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll

2013-09-19 13:16 - 2013-07-09 07:51 - 01217024 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll

2013-09-19 13:16 - 2013-07-09 06:52 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll

2013-09-19 13:16 - 2013-04-10 08:01 - 00983400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys

2013-09-19 13:16 - 2013-04-10 08:01 - 00265064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys

2013-09-19 13:16 - 2013-02-15 08:08 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll

2013-09-19 13:16 - 2013-02-15 08:06 - 03717632 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll

2013-09-19 13:16 - 2013-02-15 08:02 - 00158720 _____ (Microsoft Corporation) C:\Windows\system32\aaclient.dll

2013-09-19 13:16 - 2013-02-15 06:37 - 03217408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll

2013-09-19 13:16 - 2013-02-15 06:34 - 00131584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aaclient.dll

2013-09-19 13:16 - 2013-02-15 05:25 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll

2013-09-19 13:16 - 2013-02-12 06:12 - 00019968 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usb8023.sys

2013-09-19 13:16 - 2012-11-01 07:43 - 02002432 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll

2013-09-19 13:16 - 2012-11-01 07:43 - 01882624 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll

2013-09-19 13:16 - 2012-11-01 06:47 - 01389568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll

2013-09-19 13:16 - 2012-11-01 06:47 - 01236992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll

2013-09-19 13:16 - 2012-10-09 20:17 - 00226816 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcore6.dll

2013-09-19 13:16 - 2012-10-09 20:17 - 00055296 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcsvc6.dll

2013-09-19 13:16 - 2012-10-09 19:40 - 00193536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dhcpcore6.dll

2013-09-19 13:16 - 2012-10-09 19:40 - 00044032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dhcpcsvc6.dll

2013-09-19 13:16 - 2012-08-22 20:12 - 00950128 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys

2013-09-19 13:16 - 2012-08-21 23:01 - 00245760 _____ (Microsoft Corporation) C:\Windows\system32\OxpsConverter.exe

2013-09-19 13:16 - 2012-07-04 22:26 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\RNDISMP.sys

2013-09-19 13:16 - 2012-04-26 07:41 - 00149504 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorekmts.dll

2013-09-19 13:16 - 2012-04-26 07:41 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\rdpwsx.dll

2013-09-19 13:16 - 2012-04-26 07:34 - 00009216 _____ (Microsoft Corporation) C:\Windows\system32\rdrmemptylst.exe

2013-09-19 13:16 - 2012-04-07 14:31 - 03216384 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll

2013-09-19 13:16 - 2012-04-07 13:26 - 02342400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll

2013-09-19 13:16 - 2011-10-26 07:25 - 01572864 _____ (Microsoft Corporation) C:\Windows\system32\quartz.dll

2013-09-19 13:16 - 2011-10-26 07:25 - 00366592 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll

2013-09-19 13:16 - 2011-10-26 06:32 - 01328128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\quartz.dll

2013-09-19 13:16 - 2011-10-26 06:32 - 00514560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qdvd.dll

2013-09-19 13:16 - 2011-07-09 04:46 - 00288768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys

2013-09-19 13:16 - 2011-06-15 12:02 - 00212992 _____ (Microsoft Corporation) C:\Windows\system32\odbctrac.dll

2013-09-19 13:16 - 2011-06-15 12:02 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\odbccp32.dll

2013-09-19 13:16 - 2011-06-15 12:02 - 00106496 _____ (Microsoft Corporation) C:\Windows\system32\odbccu32.dll

2013-09-19 13:16 - 2011-06-15 12:02 - 00106496 _____ (Microsoft Corporation) C:\Windows\system32\odbccr32.dll

2013-09-19 13:16 - 2011-06-15 10:55 - 00319488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbcjt32.dll

2013-09-19 13:16 - 2011-06-15 10:55 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbctrac.dll

2013-09-19 13:16 - 2011-06-15 10:55 - 00122880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbccp32.dll

2013-09-19 13:16 - 2011-06-15 10:55 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbccu32.dll

2013-09-19 13:16 - 2011-06-15 10:55 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\odbccr32.dll

2013-09-19 13:16 - 2011-04-29 05:06 - 00467456 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv.sys

2013-09-19 13:16 - 2011-04-29 05:05 - 00410112 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys

2013-09-19 13:16 - 2011-04-29 05:05 - 00168448 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys

2013-09-19 13:16 - 2011-04-27 04:40 - 00158208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys

2013-09-19 13:16 - 2011-04-27 04:39 - 00128000 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys

2013-09-19 13:16 - 2011-03-11 08:34 - 01395712 _____ (Microsoft Corporation) C:\Windows\system32\mfc42.dll

2013-09-19 13:16 - 2011-03-11 08:34 - 01359872 _____ (Microsoft Corporation) C:\Windows\system32\mfc42u.dll

2013-09-19 13:16 - 2011-03-11 07:33 - 01164288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc42u.dll

2013-09-19 13:16 - 2011-03-11 07:33 - 01137664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc42.dll

2013-09-19 13:16 - 2011-02-25 08:19 - 02871808 _____ (Microsoft Corporation) C:\Windows\explorer.exe

2013-09-19 13:16 - 2011-02-25 07:30 - 02616320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\explorer.exe

2013-09-19 13:16 - 2011-02-03 13:25 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll

2013-09-19 13:16 - 2010-06-26 05:55 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll

2013-09-19 13:16 - 2010-06-26 05:24 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll

2013-09-19 13:15 - 2013-06-15 06:32 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys

2013-09-19 13:15 - 2013-06-04 08:00 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll

2013-09-19 13:15 - 2013-06-04 06:53 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll

2013-09-19 13:15 - 2013-04-26 07:51 - 00751104 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll

2013-09-19 13:15 - 2013-04-26 06:55 - 00492544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32spl.dll

2013-09-19 13:15 - 2013-03-19 07:53 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll

2013-09-19 13:15 - 2013-03-19 07:53 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\wwanprotdim.dll

2013-09-19 13:15 - 2013-01-24 08:01 - 00223752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fvevol.sys

2013-09-19 13:15 - 2012-11-23 05:13 - 00068608 _____ (Microsoft Corporation) C:\Windows\system32\taskhost.exe

2013-09-19 13:15 - 2012-11-22 07:44 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll

2013-09-19 13:15 - 2012-11-22 06:45 - 00626688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usp10.dll

2013-09-19 13:15 - 2012-11-20 07:48 - 00307200 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll

2013-09-19 13:15 - 2012-11-20 06:51 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll

2013-09-19 13:15 - 2012-11-02 07:59 - 00478208 _____ (Microsoft Corporation) C:\Windows\system32\dpnet.dll

2013-09-19 13:15 - 2012-11-02 07:11 - 00376832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpnet.dll

2013-09-19 13:15 - 2012-09-26 00:47 - 00078336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\synceng.dll

2013-09-19 13:15 - 2012-09-26 00:46 - 00095744 _____ (Microsoft Corporation) C:\Windows\system32\synceng.dll

2013-09-19 13:15 - 2012-08-11 02:56 - 00715776 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll

2013-09-19 13:15 - 2012-08-11 01:56 - 00542208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll

2013-09-19 13:15 - 2012-07-05 00:16 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\netapi32.dll

2013-09-19 13:15 - 2012-07-05 00:13 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\browser.dll

2013-09-19 13:15 - 2012-07-05 00:13 - 00059392 _____ (Microsoft Corporation) C:\Windows\system32\browcli.dll

2013-09-19 13:15 - 2012-07-04 23:16 - 00057344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netapi32.dll

2013-09-19 13:15 - 2012-07-04 23:14 - 00041984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\browcli.dll

2013-09-19 13:15 - 2012-05-14 07:26 - 00956928 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll

2013-09-19 13:15 - 2012-05-05 10:36 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll

2013-09-19 13:15 - 2012-05-05 09:46 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll

2013-09-19 13:15 - 2012-05-01 07:40 - 00209920 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll

2013-09-19 13:15 - 2012-04-28 05:55 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpwd.sys

2013-09-19 13:15 - 2012-03-17 09:58 - 00075120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\partmgr.sys

2013-09-19 13:15 - 2012-02-11 08:36 - 00559104 _____ (Microsoft Corporation) C:\Windows\system32\spoolsv.exe

2013-09-19 13:15 - 2012-02-11 08:36 - 00067072 _____ (Microsoft Corporation) C:\Windows\splwow64.exe

2013-09-19 13:15 - 2011-12-30 08:26 - 00515584 _____ (Microsoft Corporation) C:\Windows\system32\timedate.cpl

2013-09-19 13:15 - 2011-12-30 07:27 - 00478720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\timedate.cpl

2013-09-19 13:15 - 2011-12-28 05:59 - 00498688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys

2013-09-19 13:15 - 2011-12-16 10:46 - 00634880 _____ (Microsoft Corporation) C:\Windows\system32\msvcrt.dll

2013-09-19 13:15 - 2011-12-16 09:52 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcrt.dll

2013-09-19 13:15 - 2011-10-15 08:31 - 00723456 _____ (Microsoft Corporation) C:\Windows\system32\EncDec.dll

2013-09-19 13:15 - 2011-10-15 07:38 - 00534528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\EncDec.dll

2013-09-19 13:15 - 2011-08-27 07:37 - 00861696 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll

2013-09-19 13:15 - 2011-08-27 07:37 - 00331776 _____ (Microsoft Corporation) C:\Windows\system32\oleacc.dll

2013-09-19 13:15 - 2011-08-27 06:26 - 00571904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll

2013-09-19 13:15 - 2011-08-27 06:26 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleacc.dll

2013-09-19 13:15 - 2011-08-17 07:26 - 00613888 _____ (Microsoft Corporation) C:\Windows\system32\psisdecd.dll

2013-09-19 13:15 - 2011-08-17 07:25 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\psisrndr.ax

2013-09-19 13:15 - 2011-08-17 06:24 - 00465408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\psisdecd.dll

2013-09-19 13:15 - 2011-08-17 06:19 - 00075776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\psisrndr.ax

2013-09-19 13:15 - 2011-06-16 07:49 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\xmllite.dll

2013-09-19 13:15 - 2011-06-16 06:33 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xmllite.dll

2013-09-19 13:15 - 2011-05-24 13:42 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\umpnpmgr.dll

2013-09-19 13:15 - 2011-05-24 12:40 - 00064512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\devobj.dll

2013-09-19 13:15 - 2011-05-24 12:40 - 00044544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\devrtl.dll

2013-09-19 13:15 - 2011-05-24 12:39 - 00145920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cfgmgr32.dll

2013-09-19 13:15 - 2011-05-24 12:37 - 00252928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drvinst.exe

2013-09-19 13:15 - 2011-05-03 07:29 - 00976896 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll

2013-09-19 13:15 - 2011-05-03 06:30 - 00741376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll

2013-09-19 13:15 - 2011-04-23 00:15 - 00027520 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Diskdump.sys

2013-09-19 13:15 - 2011-03-03 08:24 - 00357888 _____ (Microsoft Corporation) C:\Windows\system32\dnsapi.dll

2013-09-19 13:15 - 2011-03-03 08:24 - 00183296 _____ (Microsoft Corporation) C:\Windows\system32\dnsrslvr.dll

2013-09-19 13:15 - 2011-03-03 08:21 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\dnscacheugc.exe

2013-09-19 13:15 - 2011-03-03 07:38 - 00270336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dnsapi.dll

2013-09-19 13:15 - 2011-03-03 07:36 - 00028672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dnscacheugc.exe

2013-09-19 13:15 - 2011-02-23 06:55 - 00090624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bowser.sys

2013-09-19 13:15 - 2011-02-18 12:51 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\prevhost.exe

2013-09-19 13:15 - 2011-02-18 07:39 - 00031232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\prevhost.exe

2013-09-19 13:15 - 2011-02-12 13:34 - 00267776 _____ (Microsoft Corporation) C:\Windows\system32\FXSCOVER.exe

2013-09-19 13:15 - 2011-02-05 19:10 - 00642944 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi

2013-09-19 13:15 - 2011-02-05 19:10 - 00020352 _____ (Microsoft Corporation) C:\Windows\system32\kdusb.dll

2013-09-19 13:15 - 2011-02-05 19:10 - 00019328 _____ (Microsoft Corporation) C:\Windows\system32\kd1394.dll

2013-09-19 13:15 - 2011-02-05 19:10 - 00017792 _____ (Microsoft Corporation) C:\Windows\system32\kdcom.dll

2013-09-19 13:15 - 2011-02-05 19:06 - 00605552 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe

2013-09-19 13:15 - 2011-02-05 19:06 - 00566208 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi

2013-09-19 13:15 - 2011-02-05 19:06 - 00518672 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe

2013-09-19 12:59 - 2011-11-19 16:58 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll

2013-09-19 12:59 - 2011-11-19 16:01 - 00067072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\packager.dll

2013-09-19 12:35 - 2013-09-19 12:35 - 01602164 _____ C:\Windows\SysWOW64\PerfStringBackup.INI

2013-09-19 12:31 - 2013-09-20 19:06 - 00001413 _____ C:\Users\****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk

2013-09-19 12:31 - 2013-09-19 14:27 - 00146616 _____ C:\Users\****\AppData\Local\GDIPFONTCACHEV1.DAT

2013-09-19 12:30 - 2013-09-19 12:30 - 00000020 ___SH C:\Users\****\ntuser.ini

2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Musik

2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Bilder

2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\Users\Default\Vorlagen

2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\Users\Default\Startmenü

2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\Users\Default\Netzwerkumgebung

2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\Users\Default\Lokale Einstellungen

2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\Users\Default\Eigene Dateien

2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\Users\Default\Druckumgebung

2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Musik

2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Bilder

2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme

2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\Users\Default\AppData\Local\Verlauf

2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\Users\Default\AppData\Local\Anwendungsdaten

2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\Users\Default\Anwendungsdaten

2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Musik

2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Bilder

2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme

2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Verlauf

2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Anwendungsdaten

2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\ProgramData\Vorlagen

2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\ProgramData\Startmenü

2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\ProgramData\Favoriten

2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\ProgramData\Dokumente

2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\ProgramData\Anwendungsdaten

2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\Program Files\Gemeinsame Dateien

2013-09-19 03:56 - 2012-02-17 08:38 - 01031680 _____ (Microsoft Corporation) C:\Windows\system32\rdpcore.dll

2013-09-19 03:56 - 2012-02-17 07:34 - 00826880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpcore.dll

2013-09-19 03:56 - 2012-02-17 06:57 - 00023552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdtcp.sys

2013-09-19 03:51 - 2012-06-03 00:19 - 02428952 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll

2013-09-19 03:51 - 2012-06-03 00:19 - 00701976 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll

2013-09-19 03:51 - 2012-06-03 00:19 - 00057880 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe

2013-09-19 03:51 - 2012-06-03 00:19 - 00044056 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll

2013-09-19 03:51 - 2012-06-03 00:19 - 00038424 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll

2013-09-19 03:51 - 2012-06-03 00:15 - 02622464 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll

2013-09-19 03:51 - 2012-06-03 00:15 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll

2013-09-19 03:51 - 2012-06-02 15:19 - 00186752 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll

2013-09-19 03:51 - 2012-06-02 15:15 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe

2013-09-19 03:32 - 2013-09-19 12:30 - 00000000 ____D C:\Windows\Panther

2013-09-19 03:30 - 2013-09-19 03:30 - 00022960 _____ C:\Windows\system32\emptyregdb.dat

2013-09-19 03:27 - 2013-09-19 03:27 - 00262144 _____ C:\Windows\system32\config\userdiff

2013-09-19 03:24 - 2013-09-19 03:24 - 00000000 ____D C:\Users\Default\Documents\Visual Studio 2008

2013-09-19 03:24 - 2013-09-19 03:24 - 00000000 ____D C:\Users\Default\AppData\Local\Microsoft Help

2013-09-19 03:24 - 2013-09-19 03:24 - 00000000 ____D C:\Users\Default User\Documents\Visual Studio 2008

2013-09-19 03:24 - 2013-09-19 03:24 - 00000000 ____D C:\Users\Default User\AppData\Local\Microsoft Help

2013-09-19 02:40 - 2013-09-19 14:42 - 00000000 ____D C:\Users\****

2013-09-19 02:40 - 2013-09-19 02:40 - 00000000 _SHDL C:\Users\UpdatusUser\Vorlagen

2013-09-19 02:40 - 2013-09-19 02:40 - 00000000 _SHDL C:\Users\UpdatusUser\Startmenü

2013-09-19 02:40 - 2013-09-19 02:40 - 00000000 _SHDL C:\Users\UpdatusUser\Netzwerkumgebung

2013-09-19 02:40 - 2013-09-19 02:40 - 00000000 _SHDL C:\Users\UpdatusUser\Lokale Einstellungen

2013-09-19 02:40 - 2013-09-19 02:40 - 00000000 _SHDL C:\Users\UpdatusUser\Eigene Dateien

2013-09-19 02:40 - 2013-09-19 02:40 - 00000000 _SHDL C:\Users\UpdatusUser\Druckumgebung

2013-09-19 02:40 - 2013-09-19 02:40 - 00000000 _SHDL C:\Users\UpdatusUser\Documents\Eigene Musik

2013-09-19 02:40 - 2013-09-19 02:40 - 00000000 _SHDL C:\Users\UpdatusUser\Documents\Eigene Bilder

2013-09-19 02:40 - 2013-09-19 02:40 - 00000000 _SHDL C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programme

2013-09-19 02:40 - 2013-09-19 02:40 - 00000000 _SHDL C:\Users\UpdatusUser\AppData\Local\Verlauf

2013-09-19 02:40 - 2013-09-19 02:40 - 00000000 _SHDL C:\Users\UpdatusUser\AppData\Local\Anwendungsdaten

2013-09-19 02:40 - 2013-09-19 02:40 - 00000000 _SHDL C:\Users\UpdatusUser\Anwendungsdaten

2013-09-19 02:40 - 2013-09-19 02:40 - 00000000 _SHDL C:\Users\****\Vorlagen

2013-09-19 02:40 - 2013-09-19 02:40 - 00000000 _SHDL C:\Users\****\Startmenü

2013-09-19 02:40 - 2013-09-19 02:40 - 00000000 _SHDL C:\Users\****\Netzwerkumgebung

2013-09-19 02:40 - 2013-09-19 02:40 - 00000000 _SHDL C:\Users\****\Lokale Einstellungen

2013-09-19 02:40 - 2013-09-19 02:40 - 00000000 _SHDL C:\Users\****\Eigene Dateien

2013-09-19 02:40 - 2013-09-19 02:40 - 00000000 _SHDL C:\Users\****\Druckumgebung

2013-09-19 02:40 - 2013-09-19 02:40 - 00000000 _SHDL C:\Users\****\Documents\Eigene Musik

2013-09-19 02:40 - 2013-09-19 02:40 - 00000000 _SHDL C:\Users\****\Documents\Eigene Bilder

2013-09-19 02:40 - 2013-09-19 02:40 - 00000000 _SHDL C:\Users\****\AppData\Roaming\Microsoft\Windows\Start Menu\Programme

2013-09-19 02:40 - 2013-09-19 02:40 - 00000000 _SHDL C:\Users\****\AppData\Local\Verlauf

2013-09-19 02:40 - 2013-09-19 02:40 - 00000000 _SHDL C:\Users\****\AppData\Local\Anwendungsdaten

2013-09-19 02:40 - 2013-09-19 02:40 - 00000000 _SHDL C:\Users\****\Anwendungsdaten

2013-09-19 02:40 - 2009-07-14 06:54 - 00000000 ___RD C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories

2013-09-19 02:40 - 2009-07-14 06:54 - 00000000 ___RD C:\Users\****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories

2013-09-19 02:40 - 2009-07-14 06:49 - 00000000 ___RD C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance

2013-09-19 02:40 - 2009-07-14 06:49 - 00000000 ___RD C:\Users\****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance

2013-09-19 02:39 - 2013-09-19 02:39 - 00001355 _____ C:\Windows\TSSysprep.log

2013-09-19 02:39 - 2013-09-19 02:39 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_tcwbf_01_09_00.Wdf

2013-09-19 02:39 - 2013-09-19 02:39 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_WinUSB_01009.Wdf

2013-09-19 02:39 - 2013-09-19 02:39 - 00000000 ____D C:\Program Files\AuthenTec

2013-09-19 02:38 - 2013-09-21 13:00 - 01623939 _____ C:\Windows\WindowsUpdate.log

2013-09-19 02:38 - 2013-09-19 02:38 - 00000000 ____D C:\ProgramData\NVIDIA Corporation

2013-09-19 02:38 - 2012-12-29 10:40 - 06382008 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll

2013-09-19 02:38 - 2012-12-29 10:40 - 03455416 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll

2013-09-19 02:38 - 2012-12-29 10:40 - 02923201 _____ C:\Windows\system32\nvcoproc.bin

2013-09-19 02:38 - 2012-12-29 10:40 - 02558392 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll

2013-09-19 02:38 - 2012-12-29 10:40 - 00997816 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshext.dll

2013-09-19 02:38 - 2012-12-29 10:40 - 00884152 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe

2013-09-19 02:38 - 2012-12-29 10:40 - 00118712 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll

2013-09-19 02:38 - 2012-12-29 10:40 - 00063928 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll

2013-09-19 02:38 - 2012-12-29 10:40 - 00055736 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshextr.dll

2013-09-19 02:37 - 2013-09-19 02:50 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation

2013-09-19 02:37 - 2013-09-19 02:44 - 00000000 ____D C:\Program Files\NVIDIA Corporation

2013-09-19 02:37 - 2013-09-19 02:37 - 00000000 ____D C:\Windows\SysWOW64\RTCOM

2013-09-19 02:37 - 2013-09-19 02:37 - 00000000 ____D C:\Program Files\Realtek

2013-09-19 02:35 - 2013-09-19 02:35 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_SynTP_01009.Wdf

2013-09-19 02:35 - 2013-09-19 02:35 - 00000000 ____D C:\Program Files\Synaptics

2013-09-19 01:32 - 2013-09-19 03:34 - 00006125 _____ C:\Windows\comsetup.log

2013-09-19 00:51 - 2013-09-19 01:17 - 00003376 _____ C:\Users\****\Desktop\Windows-Kompatibilitätsbericht.htm

2013-09-19 00:43 - 2013-09-19 01:14 - 00002544 _____ C:\Windows\diagwrn.xml

2013-09-19 00:43 - 2013-09-19 01:14 - 00001890 _____ C:\Windows\diagerr.xml

2013-09-18 22:06 - 2013-09-19 14:19 - 01831285 _____ C:\Users\****\Desktop\gutschein_flicflac.cdr

2013-09-18 21:48 - 2013-09-18 21:55 - 423572207 _____ C:\Users\****\Downloads\Windows6.1-KB947821-v28-x64.msu

2013-09-18 19:16 - 2013-02-23 01:16 - 552209689 _____ C:\Users\****\Desktop\IMG_2059.MOV

2013-09-18 13:15 - 2013-09-19 03:29 - 00000000 ____D C:\Windows\System32\Tasks\Safer-Networking

2013-09-18 13:15 - 2013-09-19 02:56 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy

2013-09-18 13:14 - 2013-09-19 02:54 - 00000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy 2

2013-09-18 13:14 - 2013-09-18 13:14 - 00001383 _____ C:\Users\Public\Desktop\Spybot-S&D Start Center.lnk

2013-09-18 13:14 - 2009-01-25 13:14 - 00017272 _____ (Safer Networking Limited) C:\Windows\system32\sdnclean64.exe

2013-09-18 13:12 - 2013-09-18 13:12 - 00614816 _____ C:\Users\****\Downloads\SpyBot Search Destroy - CHIP-Downloader.exe

2013-09-17 12:59 - 2013-09-17 12:59 - 00077236 _____ (AppWork UG (haftungsbeschränkt)) C:\Users\****\Downloads\jDownloaderWebInstaller09581.exe

2013-09-17 12:09 - 2013-09-19 03:21 - 00000000 ____D C:\Users\****\Downloads\Die Innsbrucker Böhmische - Weltreise

2013-09-17 11:48 - 2013-09-19 03:21 - 00000000 ____D C:\Users\****\Downloads\Die Innsbrucker -  Böhmische

2013-09-17 11:48 - 2013-09-17 12:00 - 71710551 _____ C:\Users\****\Downloads\DIBwe.rar

2013-09-17 11:40 - 2013-09-19 03:21 - 00000000 ____D C:\Users\****\Downloads\Die Innsbrucker Böhmische - Tip-Top WEB

2013-09-17 11:31 - 2013-09-19 03:21 - 00000000 ____D C:\Users\****\Downloads\Die Innsbrucker Böhmische - Perfectum est!

2013-09-16 17:10 - 2013-09-19 03:21 - 00000000 ____D C:\Users\****\Downloads\Windows XP Professional with Service Pack 3 (x86) - CD (German)

2013-09-16 16:30 - 2013-09-16 16:30 - 00003179 _____ C:\Users\****\Desktop\Secure Download Manager.lnk

2013-09-12 22:43 - 2013-09-12 23:36 - 00010089 _____ C:\Users\****\AppData\Roaming\Durch Trennzeichen getrennte Werte.CAL

2013-09-06 10:33 - 2013-09-19 02:45 - 00000000 ____D C:\Program Files\Western Digital

2013-09-06 08:50 - 2013-09-06 08:50 - 00367200 _____ (Acronis) C:\Windows\system32\Drivers\afcdp.sys

2013-09-06 08:49 - 2013-09-19 03:16 - 00000000 ____D C:\Users\****\AppData\Roaming\17DB5932-922E-412B-B4F0-CDE14C9D6793

2013-09-06 08:49 - 2013-09-06 08:49 - 01120032 _____ (Acronis International GmbH) C:\Windows\system32\Drivers\tib.sys

2013-09-06 08:49 - 2013-09-06 08:49 - 00183224 _____ (Acronis) C:\Windows\system32\Drivers\tib_mounter.sys

2013-09-06 08:49 - 2013-09-06 08:49 - 00161568 _____ (Acronis International GmbH) C:\Windows\system32\Drivers\vididr.sys

2013-09-06 08:49 - 2013-09-06 08:49 - 00001205 _____ C:\Users\Public\Desktop\True Image 2013.lnk

2013-09-05 12:57 - 2013-09-19 03:20 - 00000000 ___RD C:\Users\****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Samsung Printers

2013-09-05 12:56 - 2013-09-19 03:15 - 00000000 ____D C:\Users\UpdatusUser\AppData\Roaming\Samsung

2013-09-05 12:56 - 2013-09-19 02:43 - 00000000 ____D C:\Program Files\Common Files\Common Desktop Agent

2013-09-05 12:42 - 2013-09-19 02:54 - 00000000 ____D C:\Program Files (x86)\Samsung Printers

2013-09-03 13:37 - 2013-09-19 02:56 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69

2013-09-03 13:37 - 2013-09-19 02:50 - 00000000 ____D C:\Program Files (x86)\iTunes

2013-09-03 13:37 - 2013-09-19 02:43 - 00000000 ____D C:\Program Files\iTunes

2013-09-03 13:37 - 2013-09-19 02:43 - 00000000 ____D C:\Program Files\iPod

2013-09-03 13:37 - 2013-09-03 13:37 - 00001783 _____ C:\Users\Public\Desktop\iTunes.lnk

2013-09-02 12:56 - 2013-09-02 13:01 - 00000000 ____D C:\Windows\pss

2013-09-02 12:10 - 2013-09-19 03:21 - 00000000 ____D C:\Users\****\Documents\Ubisoft

2013-09-02 12:00 - 2013-09-02 12:00 - 00002490 _____ C:\Users\Public\Desktop\Tom Clancy's Splinter Cell® Blacklist™.lnk

2013-09-01 21:22 - 2013-09-19 03:20 - 00000000 ____D C:\Users\****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ubisoft

2013-09-01 21:22 - 2013-09-19 03:16 - 00000000 ____D C:\Users\****\AppData\Local\Ubisoft Game Launcher

2013-09-01 21:22 - 2013-09-19 02:55 - 00000000 ____D C:\Program Files (x86)\Ubisoft

2013-09-01 21:22 - 2013-09-01 21:22 - 00001205 _____ C:\Users\****\Desktop\Uplay.lnk

2013-08-22 08:16 - 2013-08-22 08:16 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_netaapl64_01009.Wdf

FRST (Teil 2)

Code:

==================== One Month Modified Files and Folders =======
 

2013-09-21 13:00 - 2013-09-19 02:38 - 01623939 _____ C:\Windows\WindowsUpdate.log

2013-09-21 12:57 - 2013-05-20 18:12 - 00008192 _____ C:\Windows\SysWOW64\WDPABKP.dat

2013-09-21 12:56 - 2013-09-20 10:46 - 00042624 _____ C:\Windows\setupact.log

2013-09-21 12:56 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT

2013-09-21 12:55 - 2012-03-26 08:21 - 00000000 ____D C:\Users\****\Documents\Outlook-Dateien

2013-09-21 12:54 - 2009-07-14 06:45 - 00021664 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2013-09-21 12:54 - 2009-07-14 06:45 - 00021664 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2013-09-21 12:53 - 2013-09-21 12:53 - 01956670 _____ (Farbar) C:\Users\****\Desktop\FRST64.exe

2013-09-21 12:53 - 2011-04-12 09:43 - 00702852 _____ C:\Windows\system32\perfh007.dat

2013-09-21 12:53 - 2011-04-12 09:43 - 00150460 _____ C:\Windows\system32\perfc007.dat

2013-09-21 12:53 - 2009-07-14 07:13 - 01627884 _____ C:\Windows\system32\PerfStringBackup.INI

2013-09-21 12:47 - 2013-05-22 18:11 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job

2013-09-20 23:42 - 2013-08-04 21:23 - 00000000 ____D C:\Users\****\AppData\Roaming\Skype

2013-09-20 23:27 - 2013-09-20 23:26 - 00016514 _____ C:\Users\****\Desktop\SystemLook.txt

2013-09-20 23:26 - 2013-09-20 23:26 - 00165376 _____ C:\Users\****\Desktop\SystemLook_x64.exe

2013-09-20 23:26 - 2013-09-20 23:24 - 00035577 _____ C:\Users\****\Desktop\Addition_alt1.txt

2013-09-20 23:25 - 2013-09-20 23:24 - 00153316 _____ C:\Users\****\Desktop\FRST_alt1.txt

2013-09-20 19:47 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache

2013-09-20 19:06 - 2013-09-19 12:31 - 00001413 _____ C:\Users\****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk

2013-09-20 18:57 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\PolicyDefinitions

2013-09-20 18:56 - 2013-04-30 22:29 - 00618400 _____ C:\Windows\IE10_main.log

2013-09-20 18:52 - 2013-09-20 18:52 - 19246592 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 15404544 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 14332928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 03959296 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 02876928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb

2013-09-20 18:52 - 2013-09-20 18:52 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2013-09-20 18:52 - 2013-09-20 18:52 - 02647040 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 02048000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 01509376 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2013-09-20 18:52 - 2013-09-20 18:52 - 01441280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl

2013-09-20 18:52 - 2013-09-20 18:52 - 01400416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat

2013-09-20 18:52 - 2013-09-20 18:52 - 01400416 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat

2013-09-20 18:52 - 2013-09-20 18:52 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 01054720 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe

2013-09-20 18:52 - 2013-09-20 18:52 - 00905728 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00762368 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00719360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00629248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00599552 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00523264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00452096 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00441856 _____ (Microsoft Corporation) C:\Windows\system32\html.iec

2013-09-20 18:52 - 2013-09-20 18:52 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00361984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec

2013-09-20 18:52 - 2013-09-20 18:52 - 00357888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00281600 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00270848 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00247296 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00242200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\url.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00232960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00226816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00226304 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00216064 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00204800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00185344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00173568 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe

2013-09-20 18:52 - 2013-09-20 18:52 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe

2013-09-20 18:52 - 2013-09-20 18:52 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00158720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00150528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe

2013-09-20 18:52 - 2013-09-20 18:52 - 00149504 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00144896 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe

2013-09-20 18:52 - 2013-09-20 18:52 - 00138752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe

2013-09-20 18:52 - 2013-09-20 18:52 - 00137216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe

2013-09-20 18:52 - 2013-09-20 18:52 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00125440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00117248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00110592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00097280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe

2013-09-20 18:52 - 2013-09-20 18:52 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe

2013-09-20 18:52 - 2013-09-20 18:52 - 00082432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00079872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx

2013-09-20 18:52 - 2013-09-20 18:52 - 00073728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe

2013-09-20 18:52 - 2013-09-20 18:52 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe

2013-09-20 18:52 - 2013-09-20 18:52 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx

2013-09-20 18:52 - 2013-09-20 18:52 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00057344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2013-09-20 18:52 - 2013-09-20 18:52 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00041984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00038400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00027648 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00023040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll

2013-09-20 18:52 - 2013-09-20 18:52 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe

2013-09-20 18:52 - 2013-09-20 18:52 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe

2013-09-20 18:52 - 2013-09-20 18:52 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe

2013-09-20 18:52 - 2013-09-20 18:52 - 00011776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe

2013-09-20 14:47 - 2013-05-22 18:11 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater

2013-09-20 14:47 - 2012-04-05 08:24 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe

2013-09-20 14:47 - 2012-03-26 20:22 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

2013-09-20 10:52 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\zh-HK

2013-09-20 10:52 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\tr-TR

2013-09-20 10:52 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\zh-HK

2013-09-20 10:52 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\tr-TR

2013-09-20 10:46 - 2013-09-20 10:46 - 00000000 _____ C:\Windows\setuperr.log

2013-09-20 10:31 - 2013-09-19 17:55 - 00000000 ____D C:\Windows\Minidump

2013-09-20 01:45 - 2013-09-20 01:45 - 00001113 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk

2013-09-20 01:45 - 2013-09-20 01:45 - 00000000 ____D C:\Users\****\AppData\Roaming\Malwarebytes

2013-09-20 01:45 - 2013-09-20 01:45 - 00000000 ____D C:\ProgramData\Malwarebytes

2013-09-20 01:45 - 2013-09-20 01:45 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware

2013-09-20 01:44 - 2013-09-20 01:44 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\****\Desktop\mbam-setup-1.75.0.1300.exe

2013-09-20 01:43 - 2013-09-20 01:43 - 00002403 _____ C:\Users\****\Desktop\JRT.txt

2013-09-20 01:37 - 2013-09-20 01:37 - 01029675 _____ (Thisisu) C:\Users\****\Desktop\JRT.exe

2013-09-20 01:37 - 2013-09-20 01:37 - 00000000 ____D C:\Windows\ERUNT

2013-09-20 01:34 - 2013-09-20 01:34 - 00002861 _____ C:\Users\****\Desktop\AdwCleaner[S0].txt

2013-09-20 01:31 - 2013-09-20 01:31 - 00000000 ____D C:\AdwCleaner

2013-09-20 01:30 - 2013-09-20 01:30 - 01039554 _____ C:\Users\****\Desktop\adwcleaner.exe

2013-09-19 17:55 - 2010-11-21 05:47 - 00017810 _____ C:\Windows\PFRO.log

2013-09-19 17:11 - 2013-09-19 17:08 - 00033957 _____ C:\Users\****\Desktop\ComboFix.txt

2013-09-19 17:09 - 2013-09-19 16:39 - 00000000 ____D C:\Qoobox

2013-09-19 17:03 - 2013-09-19 16:39 - 00000000 ____D C:\Windows\erdnt

2013-09-19 16:52 - 2009-07-14 04:34 - 00000215 _____ C:\Windows\system.ini

2013-09-19 16:37 - 2013-09-19 16:37 - 05128554 ____R (Swearware) C:\Users\****\Desktop\ComboFix.exe

2013-09-19 16:29 - 2013-09-19 16:29 - 00032900 _____ C:\Users\****\Desktop\logfiles.zip

2013-09-19 14:58 - 2013-09-19 14:54 - 00012112 _____ C:\Users\****\Desktop\Gmer.txt

2013-09-19 14:58 - 2013-09-19 14:45 - 00142885 _____ C:\Users\****\Desktop\FRST_alt.txt

2013-09-19 14:55 - 2013-09-19 14:44 - 00039322 _____ C:\Users\****\Desktop\Addition_alt.txt

2013-09-19 14:54 - 2013-09-19 14:42 - 00000474 _____ C:\Users\****\Desktop\defogger_disable.log

2013-09-19 14:43 - 2013-09-19 14:43 - 00000000 ____D C:\FRST

2013-09-19 14:42 - 2013-09-19 14:42 - 00000000 _____ C:\Users\****\defogger_reenable

2013-09-19 14:42 - 2013-09-19 02:40 - 00000000 ____D C:\Users\****

2013-09-19 14:41 - 2013-09-19 14:41 - 00377856 _____ C:\Users\****\Desktop\5txgbuj5.exe

2013-09-19 14:41 - 2013-09-19 14:41 - 00050477 _____ C:\Users\****\Desktop\Defogger.exe

2013-09-19 14:27 - 2013-09-19 12:31 - 00146616 _____ C:\Users\****\AppData\Local\GDIPFONTCACHEV1.DAT

2013-09-19 14:27 - 2012-03-25 21:47 - 00000000 ___RD C:\Users\****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup

2013-09-19 14:27 - 2012-03-25 21:47 - 00000000 ___RD C:\Users\****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools

2013-09-19 14:22 - 2009-07-14 06:45 - 05158952 _____ C:\Windows\system32\FNTCACHE.DAT

2013-09-19 14:20 - 2011-04-12 09:55 - 00000000 ____D C:\Program Files\Windows Journal

2013-09-19 14:20 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files\Windows Defender

2013-09-19 14:20 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files (x86)\Windows Defender

2013-09-19 14:20 - 2009-07-14 05:20 - 00000000 ____D C:\Program Files\Common Files\System

2013-09-19 14:19 - 2013-09-18 22:06 - 01831285 _____ C:\Users\****\Desktop\gutschein_flicflac.cdr

2013-09-19 14:02 - 2013-07-18 17:57 - 00000000 ____D C:\Windows\system32\MRT

2013-09-19 13:48 - 2013-09-19 13:48 - 00000134 _____ C:\Users\****\Desktop\Internet Explorer-Problembehebung.url

2013-09-19 13:39 - 2012-03-25 22:54 - 00013178 _____ C:\Windows\IE9_main.log

2013-09-19 12:35 - 2013-09-19 12:35 - 01602164 _____ C:\Windows\SysWOW64\PerfStringBackup.INI

2013-09-19 12:33 - 2009-07-14 05:20 - 00000000 __RHD C:\Users\Public\Libraries

2013-09-19 12:30 - 2013-09-19 12:30 - 00000020 ___SH C:\Users\****\ntuser.ini

2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Musik

2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Bilder

2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\Users\Default\Vorlagen

2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\Users\Default\Startmenü

2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\Users\Default\Netzwerkumgebung

2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\Users\Default\Lokale Einstellungen

2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\Users\Default\Eigene Dateien

2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\Users\Default\Druckumgebung

2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Musik

2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Bilder

2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme

2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\Users\Default\AppData\Local\Verlauf

2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\Users\Default\AppData\Local\Anwendungsdaten

2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\Users\Default\Anwendungsdaten

2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Musik

2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Bilder

2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme

2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Verlauf

2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Anwendungsdaten

2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\ProgramData\Vorlagen

2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\ProgramData\Startmenü

2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\ProgramData\Favoriten

2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\ProgramData\Dokumente

2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\ProgramData\Anwendungsdaten

2013-09-19 12:30 - 2013-09-19 12:30 - 00000000 _SHDL C:\Program Files\Gemeinsame Dateien

2013-09-19 12:30 - 2013-09-19 03:32 - 00000000 ____D C:\Windows\Panther

2013-09-19 12:30 - 2012-03-25 21:47 - 00000000 ____D C:\Recovery

2013-09-19 12:30 - 2009-07-14 05:20 - 00000000 __RHD C:\Users\Default

2013-09-19 12:30 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\Recovery

2013-09-19 12:30 - 2009-07-14 05:20 - 00000000 ____D C:\Program Files\Windows NT

2013-09-19 03:50 - 2009-07-14 07:32 - 00000000 ____D C:\Windows\system32\restore

2013-09-19 03:34 - 2013-09-19 01:32 - 00006125 _____ C:\Windows\comsetup.log

2013-09-19 03:32 - 2009-07-14 07:38 - 00025600 ___SH C:\Windows\system32\config\BCD-Template.LOG

2013-09-19 03:32 - 2009-07-14 07:32 - 00028672 _____ C:\Windows\system32\config\BCD-Template

2013-09-19 03:32 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\oobe

2013-09-19 03:30 - 2013-09-19 03:30 - 00022960 _____ C:\Windows\system32\emptyregdb.dat

2013-09-19 03:30 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\Registration

2013-09-19 03:29 - 2013-09-18 13:15 - 00000000 ____D C:\Windows\System32\Tasks\Safer-Networking

2013-09-19 03:29 - 2013-05-20 18:15 - 00000000 ____D C:\Windows\System32\Tasks\Western Digital

2013-09-19 03:29 - 2012-08-30 00:25 - 00000000 ____D C:\Windows\System32\Tasks\Apple

2013-09-19 03:29 - 2012-03-25 22:28 - 00000000 ____D C:\Windows\System32\Tasks\OfficeSoftwareProtectionPlatform

2013-09-19 03:29 - 2009-07-14 05:20 - 00000000 __RSD C:\Windows\Media

2013-09-19 03:27 - 2013-09-19 03:27 - 00262144 _____ C:\Windows\system32\config\userdiff

2013-09-19 03:24 - 2013-09-19 03:24 - 00000000 ____D C:\Users\Default\Documents\Visual Studio 2008

2013-09-19 03:24 - 2013-09-19 03:24 - 00000000 ____D C:\Users\Default\AppData\Local\Microsoft Help

2013-09-19 03:24 - 2013-09-19 03:24 - 00000000 ____D C:\Users\Default User\Documents\Visual Studio 2008

2013-09-19 03:24 - 2013-09-19 03:24 - 00000000 ____D C:\Users\Default User\AppData\Local\Microsoft Help

2013-09-19 03:24 - 2009-07-14 06:46 - 00005157 _____ C:\Windows\DtcInstall.log

2013-09-19 03:24 - 2009-07-14 05:20 - 00000000 ___RD C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance

2013-09-19 03:24 - 2009-07-14 05:20 - 00000000 ___RD C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories

2013-09-19 03:24 - 2009-07-14 05:20 - 00000000 ___RD C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance

2013-09-19 03:24 - 2009-07-14 05:20 - 00000000 ___RD C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories

2013-09-19 03:21 - 2013-09-17 12:09 - 00000000 ____D C:\Users\****\Downloads\Die Innsbrucker Böhmische - Weltreise

2013-09-19 03:21 - 2013-09-17 11:48 - 00000000 ____D C:\Users\****\Downloads\Die Innsbrucker -  Böhmische

2013-09-19 03:21 - 2013-09-17 11:40 - 00000000 ____D C:\Users\****\Downloads\Die Innsbrucker Böhmische - Tip-Top WEB

2013-09-19 03:21 - 2013-09-17 11:31 - 00000000 ____D C:\Users\****\Downloads\Die Innsbrucker Böhmische - Perfectum est!

2013-09-19 03:21 - 2013-09-16 17:10 - 00000000 ____D C:\Users\****\Downloads\Windows XP Professional with Service Pack 3 (x86) - CD (German)

2013-09-19 03:21 - 2013-09-02 12:10 - 00000000 ____D C:\Users\****\Documents\Ubisoft

2013-09-19 03:21 - 2013-05-04 23:01 - 00000000 ____D C:\Users\****\eTeks

2013-09-19 03:21 - 2013-04-10 09:01 - 00000000 ____D C:\Users\****\Documents\Wohnung Eisenbach

2013-09-19 03:21 - 2013-03-27 21:02 - 00000000 ____D C:\Users\****\Documents\SimCity

2013-09-19 03:21 - 2012-12-26 13:41 - 00000000 ____D C:\Users\****\Documents\My Games

2013-09-19 03:21 - 2012-10-11 15:40 - 00000000 ____D C:\Users\****\Documents\My Kindle Content

2013-09-19 03:21 - 2012-08-14 22:32 - 00000000 ____D C:\Users\****\Documents\Telekom Deutschland GmbH

2013-09-19 03:21 - 2012-08-14 22:31 - 00000000 ____D C:\Users\****\Documents\Renate

2013-09-19 03:21 - 2012-06-17 19:05 - 00000000 ____D C:\Users\****\Documents\Retrieved Contents

2013-09-19 03:21 - 2012-06-08 21:29 - 00000000 ____D C:\Users\****\Documents\Mängelrüge Reise - Tanja + Madeleine

2013-09-19 03:21 - 2012-03-26 20:22 - 00000000 ____D C:\Users\****\Documents\Visual Studio 2008

2013-09-19 03:21 - 2012-03-26 08:25 - 00000000 ____D C:\Users\****\Documents\Wohnung

2013-09-19 03:21 - 2012-03-26 08:23 - 00000000 ____D C:\Users\****\Documents\Vereinsring

2013-09-19 03:21 - 2012-03-26 08:23 - 00000000 ____D C:\Users\****\Documents\Veranstaltungsfachwirt

2013-09-19 03:21 - 2012-03-26 08:22 - 00000000 ____D C:\Users\****\Documents\Uni Würzburg

2013-09-19 03:21 - 2012-03-26 08:22 - 00000000 ____D C:\Users\****\Documents\TSV Olympia

2013-09-19 03:21 - 2012-03-26 08:22 - 00000000 ____D C:\Users\****\Documents\tiere-infos.de (Pascal)-Dateien

2013-09-19 03:21 - 2012-03-26 08:22 - 00000000 ____D C:\Users\****\Documents\StreamTransport

2013-09-19 03:21 - 2012-03-26 08:22 - 00000000 ____D C:\Users\****\Documents\Steuer-Sparbuch

2013-09-19 03:21 - 2012-03-26 08:22 - 00000000 ____D C:\Users\****\Documents\Steuer

2013-09-19 03:21 - 2012-03-26 08:22 - 00000000 ____D C:\Users\****\Documents\Sony Ericsson

2013-09-19 03:21 - 2012-03-26 08:22 - 00000000 ____D C:\Users\****\Documents\snaps-****

2013-09-19 03:21 - 2012-03-26 08:22 - 00000000 ____D C:\Users\****\Documents\Routenplaner-Service.de_1

2013-09-19 03:21 - 2012-03-26 08:21 - 00000000 ____D C:\Users\****\Documents\Musikverein

2013-09-19 03:20 - 2013-09-05 12:57 - 00000000 ___RD C:\Users\****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Samsung Printers

2013-09-19 03:20 - 2013-09-01 21:22 - 00000000 ____D C:\Users\****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ubisoft

2013-09-19 03:20 - 2013-07-28 14:10 - 00000000 ____D C:\Users\****\Documents\Ausbildereigungsprüfung

2013-09-19 03:20 - 2013-07-01 23:12 - 00000000 ____D C:\Users\****\Desktop\CPU

2013-09-19 03:20 - 2013-07-01 13:52 - 00000000 ____D C:\Users\****\Desktop\Präsentation

2013-09-19 03:20 - 2013-06-16 22:26 - 00000000 ____D C:\Users\****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Convar

2013-09-19 03:20 - 2013-06-16 01:21 - 00000000 ____D C:\Users\****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Quadriga Games

2013-09-19 03:20 - 2013-06-01 12:26 - 00000000 ____D C:\Users\****\AppData\Roaming\TerraTec

2013-09-19 03:20 - 2013-05-30 21:37 - 00000000 ____D C:\Users\****\Documents\Betriebswirt

2013-09-19 03:20 - 2013-03-23 12:54 - 00000000 ____D C:\Users\****\Documents\Armani

2013-09-19 03:20 - 2013-02-02 12:42 - 00000000 ____D C:\Users\****\Documents\Francisco Medina

2013-09-19 03:20 - 2013-01-29 00:56 - 00000000 ____D C:\Users\****\AppData\Roaming\Youtube Downloader HD

2013-09-19 03:20 - 2013-01-12 18:00 - 00000000 ____D C:\Users\****\Documents\Karl Jany

2013-09-19 03:20 - 2012-12-02 17:10 - 00000000 ____D C:\Users\****\AppData\Roaming\MusE

2013-09-19 03:20 - 2012-12-01 13:49 - 00000000 ____D C:\Users\****\AppData\Roaming\Samsung

2013-09-19 03:20 - 2012-11-13 00:16 - 00000000 ____D C:\Users\****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PDF Split And Merge

2013-09-19 03:20 - 2012-11-03 12:18 - 00000000 ____D C:\Users\****\Documents\FUSSBALL MANAGER 13

2013-09-19 03:20 - 2012-11-02 23:15 - 00000000 ____D C:\Users\****\AppData\Roaming\Origin

2013-09-19 03:20 - 2012-10-19 16:41 - 00000000 ____D C:\Users\****\AppData\Roaming\StageManager.BD092818F67280F4B42B04877600987F0111B594.1

2013-09-19 03:20 - 2012-10-19 15:53 - 00000000 ____D C:\Users\****\AppData\Roaming\PDAppFlex

2013-09-19 03:20 - 2012-10-18 18:04 - 00000000 ____D C:\Users\****\Documents\Kirchenverwaltungswahl 2012

2013-09-19 03:20 - 2012-10-11 15:40 - 00000000 ____D C:\Users\****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Amazon

2013-09-19 03:20 - 2012-10-07 22:35 - 00000000 ____D C:\Users\****\Documents\ML-2525W_Printd

2013-09-19 03:20 - 2012-10-07 03:32 - 00000000 ____D C:\Users\****\Documents\HVB

2013-09-19 03:20 - 2012-09-27 18:24 - 00000000 ___SD C:\Users\****\Documents\Meine Shapes

2013-09-19 03:20 - 2012-09-10 19:25 - 00000000 ____D C:\Users\****\AppData\Roaming\Mp3tag

2013-09-19 03:20 - 2012-08-04 16:33 - 00000000 ____D C:\Users\****\AppData\Roaming\TeamViewer

2013-09-19 03:20 - 2012-07-22 18:27 - 00000000 ____D C:\Users\****\AppData\Roaming\NVIDIA

2013-09-19 03:20 - 2012-07-22 18:26 - 00000000 ____D C:\Users\****\AppData\Roaming\ProtectDISC

2013-09-19 03:20 - 2012-06-19 18:31 - 00000000 __SHD C:\Users\****\Documents\cache

2013-09-19 03:20 - 2012-06-19 18:31 - 00000000 ____D C:\Users\****\AppData\Roaming\webex

2013-09-19 03:20 - 2012-05-28 21:11 - 00000000 ____D C:\Users\****\AppData\Roaming\SmartTools

2013-09-19 03:20 - 2012-05-06 19:11 - 00000000 ____D C:\Users\****\AppData\Roaming\WEB.DE

2013-09-19 03:20 - 2012-04-23 11:44 - 00000000 ____D C:\Users\****\Documents\ESM-Tools

2013-09-19 03:20 - 2012-04-23 11:43 - 00000000 ____D C:\Users\****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ESM-Tools

2013-09-19 03:20 - 2012-04-01 14:27 - 00000000 ____D C:\Users\****\AppData\Roaming\vlc

2013-09-19 03:20 - 2012-04-01 11:38 - 00000000 ____D C:\Users\****\Documents\Beruf

2013-09-19 03:20 - 2012-03-26 20:24 - 00000000 ____D C:\Users\****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\IrfanView

2013-09-19 03:20 - 2012-03-26 20:22 - 00000000 ____D C:\Users\****\Documents\Corel

2013-09-19 03:20 - 2012-03-26 16:51 - 00000000 ___SD C:\Users\****\Documents\Meine Datenquellen

2013-09-19 03:20 - 2012-03-26 08:21 - 00000000 ____D C:\Users\****\Documents\Mein Steuer-Sparbuch Heute

2013-09-19 03:20 - 2012-03-26 08:21 - 00000000 ____D C:\Users\****\Documents\Kontoauszüge

2013-09-19 03:20 - 2012-03-26 08:21 - 00000000 ____D C:\Users\****\Documents\Junge Union

2013-09-19 03:20 - 2012-03-26 08:21 - 00000000 ____D C:\Users\****\Documents\Hattrick Organizer

2013-09-19 03:20 - 2012-03-26 08:21 - 00000000 ____D C:\Users\****\Documents\Hattrick Logo

2013-09-19 03:20 - 2012-03-26 08:21 - 00000000 ____D C:\Users\****\Documents\Handy

2013-09-19 03:20 - 2012-03-26 08:21 - 00000000 ____D C:\Users\****\Documents\Facharbeit Alle Dateien

2013-09-19 03:20 - 2012-03-26 08:20 - 00000000 ____D C:\Users\****\Documents\Daten vom P1i

2013-09-19 03:20 - 2012-03-26 08:17 - 00000000 ____D C:\Users\****\Documents\CSU

2013-09-19 03:20 - 2012-03-26 08:17 - 00000000 ____D C:\Users\****\Documents\Blasmusikfreunde Eisenbach

2013-09-19 03:20 - 2012-03-26 08:16 - 00000000 ____D C:\Users\****\Documents\Bewerbung

2013-09-19 03:20 - 2012-03-26 08:16 - 00000000 ____D C:\Users\****\Documents\Barclaycard

2013-09-19 03:20 - 2012-03-26 08:16 - 00000000 ____D C:\Users\****\Documents\Auslandskrankenversicherung

2013-09-19 03:20 - 2012-03-26 08:15 - 00000000 ____D C:\Users\****\Documents\50. Geburtstag Gerald

2013-09-19 03:20 - 2012-03-25 22:48 - 00000000 ____D C:\Users\****\AppData\Roaming\Protector Suite

2013-09-19 03:20 - 2012-03-25 22:25 - 00000000 ____D C:\Users\****\AppData\Roaming\WinRAR

2013-09-19 03:20 - 2012-03-25 22:25 - 00000000 ____D C:\Users\****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR

2013-09-19 03:20 - 2012-03-25 22:16 - 00000000 ____D C:\Users\****\AppData\Roaming\Mozilla

2013-09-19 03:19 - 2013-05-16 22:04 - 00000000 ____D C:\Users\****\AppData\Roaming\bol

2013-09-19 03:19 - 2013-02-15 20:15 - 00000000 ____D C:\Users\****\AppData\Roaming\BOM

2013-09-19 03:19 - 2013-01-27 17:18 - 00000000 ____D C:\Users\****\AppData\Roaming\e-academy Inc

2013-09-19 03:19 - 2012-10-19 14:17 - 00000000 ____D C:\Users\****\AppData\Roaming\com.adobe.downloadassistant.AdobeDownloadAssistant

2013-09-19 03:19 - 2012-10-07 22:56 - 00000000 ____D C:\Users\****\AppData\Roaming\FRITZ!

2013-09-19 03:19 - 2012-09-22 23:37 - 00000000 ____D C:\Users\****\AppData\Roaming\HandBrake

2013-09-19 03:19 - 2012-09-22 23:34 - 00000000 ____D C:\Users\****\AppData\Roaming\Free iPad Video Converter

2013-09-19 03:19 - 2012-04-23 11:44 - 00000000 ____D C:\Users\****\AppData\Roaming\ESM-Tools

2013-09-19 03:19 - 2012-04-13 20:25 - 00000000 ____D C:\Users\****\AppData\Roaming\FileZilla

2013-09-19 03:19 - 2012-04-09 21:56 - 00000000 ____D C:\Users\****\AppData\Roaming\Ashampoo

2013-09-19 03:19 - 2012-04-01 10:47 - 00000000 ____D C:\Users\****\AppData\Roaming\Buhl Data Service

2013-09-19 03:19 - 2012-03-31 14:20 - 00000000 ____D C:\Users\****\AppData\Roaming\Apple Computer

2013-09-19 03:19 - 2012-03-26 21:33 - 00000000 ____D C:\Users\****\AppData\Roaming\Corel

2013-09-19 03:19 - 2012-03-26 20:24 - 00000000 ____D C:\Users\****\AppData\Roaming\IrfanView

2013-09-19 03:19 - 2012-03-26 20:22 - 00000000 ____D C:\Users\****\AppData\Roaming\Macromedia

2013-09-19 03:19 - 2012-03-25 22:29 - 00000000 ____D C:\Users\****\AppData\Roaming\InstallShield

2013-09-19 03:19 - 2012-03-25 22:11 - 00000000 ____D C:\Users\****\AppData\Roaming\Intel

2013-09-19 03:16 - 2013-09-06 08:49 - 00000000 ____D C:\Users\****\AppData\Roaming\17DB5932-922E-412B-B4F0-CDE14C9D6793

2013-09-19 03:16 - 2013-09-01 21:22 - 00000000 ____D C:\Users\****\AppData\Local\Ubisoft Game Launcher

2013-09-19 03:16 - 2013-05-20 18:15 - 00000000 ____D C:\Users\****\AppData\Local\Western_Digital_Technolog

2013-09-19 03:16 - 2013-01-29 01:10 - 00000000 ____D C:\Users\****\AppData\Local\Windows Live

2013-09-19 03:16 - 2012-12-26 13:41 - 00000000 ____D C:\Users\****\AppData\Local\My Games

2013-09-19 03:16 - 2012-12-02 17:10 - 00000000 ____D C:\Users\****\AppData\Local\MusE

2013-09-19 03:16 - 2012-11-02 23:15 - 00000000 ____D C:\Users\****\AppData\Local\Origin

2013-09-19 03:16 - 2012-09-06 17:54 - 00000000 ____D C:\Users\****\AppData\Roaming\Acronis

2013-09-19 03:16 - 2012-07-22 18:27 - 00000000 ____D C:\Users\****\AppData\Local\Quadriga Games

2013-09-19 03:16 - 2012-05-22 19:38 - 00000000 ____D C:\Users\****\AppData\Roaming\Amazon

2013-09-19 03:16 - 2012-04-23 13:50 - 00000000 ____D C:\Users\****\AppData\Local\PDF24

2013-09-19 03:16 - 2012-04-09 20:01 - 00000000 ____D C:\Users\****\AppData\Local\Western_Digital

2013-09-19 03:16 - 2012-04-09 20:00 - 00000000 ____D C:\Users\****\AppData\Local\Western Digital

2013-09-19 03:16 - 2012-03-25 23:12 - 00000000 ____D C:\Users\****\AppData\Roaming\Adobe

2013-09-19 03:16 - 2012-03-25 21:47 - 00000000 ____D C:\Users\****\AppData\Local\VirtualStore

2013-09-19 03:15 - 2013-09-05 12:56 - 00000000 ____D C:\Users\UpdatusUser\AppData\Roaming\Samsung

2013-09-19 03:15 - 2013-04-28 12:59 - 00000000 ____D C:\Users\****\AppData\Local\e-academy Inc

2013-09-19 03:15 - 2013-03-22 19:57 - 00000000 ____D C:\Users\****\AppData\Local\Macromedia

2013-09-19 03:15 - 2013-02-14 12:09 - 00000000 ____D C:\Users\****\AppData\Local\Apps\2.0

2013-09-19 03:15 - 2012-12-02 20:35 - 00000000 ____D C:\Users\****\AppData\Local\gegl-0.2

2013-09-19 03:15 - 2012-12-02 20:35 - 00000000 ____D C:\Users\****\.gimp-2.8

2013-09-19 03:15 - 2012-11-13 00:21 - 00000000 ____D C:\Users\****\.pdfsam

2013-09-19 03:15 - 2012-10-11 15:40 - 00000000 ____D C:\Users\****\AppData\Local\Amazon

2013-09-19 03:15 - 2012-10-07 22:56 - 00000000 ____D C:\Users\****\AppData\Local\FRITZ!

2013-09-19 03:15 - 2012-10-04 22:58 - 00000000 ____D C:\Users\****\AppData\Local\Eraser 6

2013-09-19 03:15 - 2012-04-09 21:55 - 00000000 ____D C:\Users\****\AppData\Local\ashampoo

2013-09-19 03:15 - 2012-04-01 10:47 - 00000000 ____D C:\Users\****\AppData\Local\Buhl Data Service

2013-09-19 03:15 - 2012-04-01 10:25 - 00000000 ____D C:\Users\****\AppData\Local\Buhl

2013-09-19 03:15 - 2012-03-31 14:20 - 00000000 ____D C:\Users\****\AppData\Local\Apple Computer

2013-09-19 03:15 - 2012-03-31 14:18 - 00000000 ____D C:\Users\****\AppData\Local\Apple

2013-09-19 03:15 - 2012-03-25 23:12 - 00000000 ____D C:\Users\****\AppData\Local\Adobe

2013-09-19 03:15 - 2012-03-25 22:24 - 00000000 ____D C:\Users\****\AppData\Local\Microsoft Help

2013-09-19 03:15 - 2012-03-25 22:16 - 00000000 ____D C:\Users\****\AppData\Local\Mozilla

2013-09-19 03:00 - 2013-01-30 22:39 - 00000000 ____D C:\Windows\SysWOW64\spool

2013-09-19 03:00 - 2012-03-26 20:23 - 00000000 ____D C:\Windows\SysWOW64\Adobe

2013-09-19 03:00 - 2012-03-26 20:22 - 00000000 ____D C:\Windows\SysWOW64\Macromed

2013-09-19 03:00 - 2012-03-25 22:47 - 00000000 ____D C:\Windows\SysWOW64\NV

2013-09-19 03:00 - 2012-03-25 22:26 - 00000000 ____D C:\Windows\SysWOW64\SDA

2013-09-19 03:00 - 2009-07-14 07:32 - 00000000 ____D C:\Windows\system32\WinBioDatabase

2013-09-19 02:59 - 2012-03-26 20:30 - 00000000 ____D C:\Windows\Samsung

2013-09-19 02:59 - 2012-03-26 20:22 - 00000000 ____D C:\Windows\system32\Macromed

2013-09-19 02:59 - 2012-03-25 22:47 - 00000000 ____D C:\Windows\system32\NV

2013-09-19 02:59 - 2011-04-12 09:54 - 00000000 ____D C:\Windows\ShellNew

2013-09-19 02:59 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\NDF

2013-09-19 02:58 - 2013-01-29 01:15 - 00000000 ____D C:\Windows\de

2013-09-19 02:58 - 2012-08-23 17:05 - 00000000 ____D C:\Windows\CheckSur

2013-09-19 02:58 - 2012-07-22 18:18 - 00000000 ____D C:\Windows\3F5C371F8EA24F259D3DD0B4526E3AEA.TMP

2013-09-19 02:58 - 2012-03-25 22:43 - 00000000 ____D C:\Windows\Downloaded Installations

2013-09-19 02:57 - 2013-01-30 22:20 - 00000000 ____D C:\Users\Public\Documents\Adobe PDF

2013-09-19 02:57 - 2012-10-02 18:25 - 00000000 ____D C:\Users\Gaeste

2013-09-19 02:57 - 2012-03-26 20:23 - 00000000 ____D C:\Users\Public\Documents\Corel

2013-09-19 02:56 - 2013-09-18 13:15 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy

2013-09-19 02:56 - 2013-09-03 13:37 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69

2013-09-19 02:56 - 2013-08-04 21:23 - 00000000 ____D C:\ProgramData\Skype

2013-09-19 02:56 - 2013-06-01 12:27 - 00000000 ____D C:\ProgramData\TerraTec

2013-09-19 02:56 - 2013-05-20 18:10 - 00000000 ____D C:\ProgramData\Package Cache

2013-09-19 02:56 - 2013-01-29 01:13 - 00000000 ____D C:\Program Files (x86)\Windows Live

2013-09-19 02:56 - 2013-01-21 22:51 - 00000000 ____D C:\ProgramData\SlySoft

2013-09-19 02:56 - 2012-11-02 23:07 - 00000000 ____D C:\ProgramData\Origin

2013-09-19 02:56 - 2012-11-02 23:07 - 00000000 ____D C:\ProgramData\Electronic Arts

2013-09-19 02:56 - 2012-10-28 17:53 - 00000000 ____D C:\Users\Admin

2013-09-19 02:56 - 2012-10-19 15:45 - 00000000 ____D C:\ProgramData\regid.1986-12.com.adobe

2013-09-19 02:56 - 2012-09-06 17:53 - 00000000 ____D C:\ProgramData\Acronis

2013-09-19 02:56 - 2012-09-02 13:31 - 00000000 ____D C:\ProgramData\Sun

2013-09-19 02:56 - 2012-06-19 18:30 - 00000000 ____D C:\ProgramData\WebEx

2013-09-19 02:56 - 2012-05-20 21:09 - 00000000 ____D C:\ProgramData\Bitstream

2013-09-19 02:56 - 2012-05-06 19:11 - 00000000 ____D C:\ProgramData\WEB.DE

2013-09-19 02:56 - 2012-05-06 12:53 - 00000000 ____D C:\ProgramData\Mozilla

2013-09-19 02:56 - 2012-04-09 21:55 - 00000000 ____D C:\ProgramData\ashampoo

2013-09-19 02:56 - 2012-04-09 20:00 - 00000000 ____D C:\ProgramData\Western Digital

2013-09-19 02:56 - 2012-04-01 10:23 - 00000000 ____D C:\ProgramData\Buhl Data Service GmbH

2013-09-19 02:56 - 2012-04-01 10:23 - 00000000 ____D C:\Program Files (x86)\WISO

2013-09-19 02:56 - 2012-03-31 17:48 - 00000000 ___HD C:\ProgramData\CanonBJ

2013-09-19 02:56 - 2012-03-31 14:19 - 00000000 ____D C:\ProgramData\Apple Computer

2013-09-19 02:56 - 2012-03-31 14:19 - 00000000 ____D C:\ProgramData\{93E26451-CD9A-43A5-A2FA-C42392EA4001}

2013-09-19 02:56 - 2012-03-31 14:17 - 00000000 ____D C:\ProgramData\Apple

2013-09-19 02:56 - 2012-03-26 21:33 - 00000000 ____D C:\ProgramData\Protexis

2013-09-19 02:56 - 2012-03-26 20:30 - 00000000 ____D C:\ProgramData\Samsung

2013-09-19 02:56 - 2012-03-25 23:27 - 00000000 ____D C:\ProgramData\Corel

2013-09-19 02:56 - 2012-03-25 23:08 - 00000000 ____D C:\ProgramData\Adobe

2013-09-19 02:56 - 2012-03-25 22:37 - 00000000 ____D C:\ProgramData\FLEXnet

2013-09-19 02:56 - 2012-03-25 22:36 - 00000000 ____D C:\ProgramData\NVIDIA

2013-09-19 02:56 - 2012-03-25 22:33 - 00000000 ____D C:\ProgramData\Creative

2013-09-19 02:56 - 2012-03-25 22:24 - 00000000 ____D C:\ProgramData\Microsoft Help

2013-09-19 02:56 - 2012-03-25 22:10 - 00000000 ____D C:\ProgramData\Intel

2013-09-19 02:55 - 2013-09-01 21:22 - 00000000 ____D C:\Program Files (x86)\Ubisoft

2013-09-19 02:55 - 2013-06-01 12:27 - 00000000 ____D C:\Program Files (x86)\TerraTec

2013-09-19 02:55 - 2013-05-20 18:12 - 00000000 ____D C:\Program Files (x86)\Western Digital

2013-09-19 02:55 - 2012-12-25 20:48 - 00000000 ____D C:\Program Files (x86)\Steam

2013-09-19 02:55 - 2012-09-30 13:38 - 00000000 ____D C:\Program Files (x86)\StreamTransport

2013-09-19 02:55 - 2012-09-02 20:42 - 00000000 ____D C:\Program Files (x86)\Tools&More

2013-09-19 02:55 - 2012-09-02 15:10 - 00000000 ____D C:\Program Files (x86)\Western Digital Corporation

2013-09-19 02:55 - 2012-05-06 19:11 - 00000000 ____D C:\Program Files (x86)\WEB.DE

2013-09-19 02:55 - 2012-04-01 14:27 - 00000000 ____D C:\Program Files (x86)\VideoLAN

2013-09-19 02:55 - 2012-03-25 22:54 - 00000000 ____D C:\Program Files (x86)\TeamViewer

2013-09-19 02:54 - 2013-09-18 13:14 - 00000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy 2

2013-09-19 02:54 - 2013-09-05 12:42 - 00000000 ____D C:\Program Files (x86)\Samsung Printers

2013-09-19 02:54 - 2013-08-04 21:23 - 00000000 ___RD C:\Program Files (x86)\Skype

2013-09-19 02:54 - 2013-06-16 23:05 - 00000000 ____D C:\Program Files (x86)\Smart PC Solutions

2013-09-19 02:54 - 2013-03-07 19:21 - 00000000 ____D C:\Program Files (x86)\SonyEditor

2013-09-19 02:54 - 2012-12-28 15:44 - 00000000 ____D C:\Program Files (x86)\SlySoft

2013-09-19 02:54 - 2012-03-26 20:30 - 00000000 ____D C:\Program Files (x86)\SamsungPrinterLiveUpdate

2013-09-19 02:54 - 2012-03-26 20:30 - 00000000 ____D C:\Program Files (x86)\Samsung

2013-09-19 02:54 - 2012-03-25 22:29 - 00000000 ____D C:\Program Files (x86)\Realtek

2013-09-19 02:54 - 2012-03-25 22:27 - 00000000 ____D C:\Program Files (x86)\Renesas Electronics

2013-09-19 02:51 - 2012-11-13 00:16 - 00000000 ____D C:\Program Files (x86)\pdfsam

2013-09-19 02:51 - 2012-11-02 23:15 - 00000000 ____D C:\Program Files (x86)\Origin Games

2013-09-19 02:51 - 2012-07-22 18:08 - 00000000 ____D C:\Program Files (x86)\Quadriga Games

2013-09-19 02:51 - 2012-03-25 23:13 - 00000000 ____D C:\Program Files (x86)\PDF24

2013-09-19 02:50 - 2013-09-19 02:37 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation

2013-09-19 02:50 - 2013-09-03 13:37 - 00000000 ____D C:\Program Files (x86)\iTunes

2013-09-19 02:50 - 2013-08-18 13:25 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox

2013-09-19 02:50 - 2013-06-26 19:17 - 00000000 ____D C:\Program Files (x86)\Java

2013-09-19 02:50 - 2013-03-14 23:18 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight

2013-09-19 02:50 - 2012-12-02 17:10 - 00000000 ____D C:\Program Files (x86)\MuseScore

2013-09-19 02:50 - 2012-11-02 23:07 - 00000000 ____D C:\Program Files (x86)\Origin

2013-09-19 02:50 - 2012-09-10 19:25 - 00000000 ____D C:\Program Files (x86)\Mp3tag

2013-09-19 02:50 - 2012-05-06 12:53 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service

2013-09-19 02:50 - 2012-03-26 20:21 - 00000000 ____D C:\Program Files (x86)\Microsoft Visual Studio 9.0

2013-09-19 02:50 - 2012-03-26 20:21 - 00000000 ____D C:\Program Files (x86)\Microsoft SDKs

2013-09-19 02:50 - 2012-03-25 22:41 - 00000000 ____D C:\Program Files (x86)\Microsoft Security Client

2013-09-19 02:50 - 2012-03-25 22:29 - 00000000 ____D C:\Program Files (x86)\Microsoft SQL Server Compact Edition

2013-09-19 02:50 - 2012-03-25 22:25 - 00000000 ____D C:\Program Files (x86)\Microsoft Analysis Services

2013-09-19 02:50 - 2012-03-25 22:24 - 00000000 ____D C:\Program Files (x86)\Microsoft Office

2013-09-19 02:50 - 2012-03-25 22:00 - 00000000 ____D C:\Program Files (x86)\JMicron

2013-09-19 02:49 - 2013-06-16 22:26 - 00000000 ____D C:\Program Files (x86)\Convar

2013-09-19 02:49 - 2013-06-01 12:27 - 00000000 ____D C:\Program Files (x86)\Elgato

2013-09-19 02:49 - 2012-12-28 23:15 - 00000000 ____D C:\Program Files (x86)\FileZilla FTP Client

2013-09-19 02:49 - 2012-12-20 13:45 - 00000000 ____D C:\Program Files (x86)\FreePDF_XP

2013-09-19 02:49 - 2012-09-14 18:31 - 00000000 ____D C:\Program Files (x86)\eXpress CheckSum Calculator

2013-09-19 02:49 - 2012-05-15 21:10 - 00000000 ____D C:\Program Files (x86)\eRightSoft

2013-09-19 02:49 - 2012-04-23 11:43 - 00000000 ____D C:\Program Files (x86)\ESM-Tools

2013-09-19 02:49 - 2012-03-26 20:24 - 00000000 ____D C:\Program Files (x86)\IrfanView

2013-09-19 02:49 - 2012-03-26 20:21 - 00000000 ____D C:\Program Files (x86)\gs

2013-09-19 02:49 - 2012-03-26 20:11 - 00000000 ____D C:\Program Files (x86)\Corel

2013-09-19 02:49 - 2012-03-25 22:32 - 00000000 ____D C:\Program Files (x86)\Creative

2013-09-19 02:49 - 2012-03-25 22:27 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information

2013-09-19 02:49 - 2012-03-25 22:27 - 00000000 ____D C:\Program Files (x86)\Hotkey

2013-09-19 02:49 - 2012-03-25 21:59 - 00000000 ____D C:\Program Files (x86)\Intel

2013-09-19 02:48 - 2013-02-15 20:15 - 00000000 ____D C:\Program Files (x86)\Biet-O-Matic

2013-09-19 02:48 - 2012-09-30 13:48 - 00000000 ____D C:\Program Files (x86)\AviSynth 2.5

2013-09-19 02:48 - 2012-08-30 00:25 - 00000000 ____D C:\Program Files (x86)\Bonjour

2013-09-19 02:48 - 2012-08-30 00:25 - 00000000 ____D C:\Program Files (x86)\Apple Software Update

2013-09-19 02:48 - 2012-05-22 19:37 - 00000000 ____D C:\Program Files (x86)\Amazon

2013-09-19 02:48 - 2012-04-09 21:55 - 00000000 ____D C:\Program Files (x86)\Ashampoo

2013-09-19 02:48 - 2012-03-25 23:09 - 00000000 ____D C:\Program Files (x86)\Adobe

2013-09-19 02:48 - 2012-03-25 22:30 - 00000000 ____D C:\Program Files (x86)\ChiconyCam

2013-09-19 02:48 - 2012-03-25 22:30 - 00000000 ____D C:\Program Files (x86)\BisonCam

2013-09-19 02:48 - 2012-03-25 22:10 - 00000000 ____D C:\Program Files (x86)\Cisco

2013-09-19 02:47 - 2012-09-06 17:53 - 00000000 ____D C:\Program Files (x86)\Acronis

2013-09-19 02:47 - 2012-03-25 22:25 - 00000000 ____D C:\Program Files\WinRAR

2013-09-19 02:45 - 2013-09-06 10:33 - 00000000 ____D C:\Program Files\Western Digital

2013-09-19 02:45 - 2012-10-21 17:54 - 00000000 ____D C:\Program Files\Recuva

2013-09-19 02:45 - 2012-03-25 22:43 - 00000000 ____D C:\Program Files\Protector Suite

2013-09-19 02:44 - 2013-09-19 02:37 - 00000000 ____D C:\Program Files\NVIDIA Corporation

2013-09-19 02:44 - 2013-03-14 23:18 - 00000000 ____D C:\Program Files\Microsoft Silverlight

2013-09-19 02:44 - 2012-03-25 22:41 - 00000000 ____D C:\Program Files\Microsoft Security Client

2013-09-19 02:43 - 2013-09-05 12:56 - 00000000 ____D C:\Program Files\Common Files\Common Desktop Agent

2013-09-19 02:43 - 2013-09-03 13:37 - 00000000 ____D C:\Program Files\iTunes

2013-09-19 02:43 - 2013-09-03 13:37 - 00000000 ____D C:\Program Files\iPod

2013-09-19 02:43 - 2013-05-20 18:12 - 00000000 ____D C:\Program Files\Common Files\Western Digital

2013-09-19 02:43 - 2013-02-02 11:56 - 00000000 ____D C:\Program Files\Microsoft Office 15

2013-09-19 02:43 - 2012-09-22 23:37 - 00000000 ____D C:\Program Files\Handbrake

2013-09-19 02:43 - 2012-09-02 15:44 - 00000000 ____D C:\Program Files\A-FF Find and Mount

2013-09-19 02:43 - 2012-08-30 00:25 - 00000000 ____D C:\Program Files\Common Files\Apple

2013-09-19 02:43 - 2012-08-30 00:25 - 00000000 ____D C:\Program Files\Bonjour

2013-09-19 02:43 - 2012-03-25 22:43 - 00000000 ____D C:\Program Files\Common Files\SPBA

2013-09-19 02:43 - 2012-03-25 22:25 - 00000000 ____D C:\Program Files\Microsoft Office

2013-09-19 02:43 - 2012-03-25 22:10 - 00000000 ____D C:\Program Files\Intel

2013-09-19 02:43 - 2012-03-25 22:10 - 00000000 ____D C:\Program Files\Common Files\Intel

2013-09-19 02:43 - 2009-07-14 05:20 - 00000000 ____D C:\Program Files\Common Files\Microsoft Shared

2013-09-19 02:40 - 2013-09-19 02:40 - 00000000 _SHDL C:\Users\UpdatusUser\Vorlagen

2013-09-19 02:40 - 2013-09-19 02:40 - 00000000 _SHDL C:\Users\UpdatusUser\Startmenü

2013-09-19 02:40 - 2013-09-19 02:40 - 00000000 _SHDL C:\Users\UpdatusUser\Netzwerkumgebung

2013-09-19 02:40 - 2013-09-19 02:40 - 00000000 _SHDL C:\Users\UpdatusUser\Lokale Einstellungen

2013-09-19 02:40 - 2013-09-19 02:40 - 00000000 _SHDL C:\Users\UpdatusUser\Eigene Dateien

2013-09-19 02:40 - 2013-09-19 02:40 - 00000000 _SHDL C:\Users\UpdatusUser\Druckumgebung

2013-09-19 02:40 - 2013-09-19 02:40 - 00000000 _SHDL C:\Users\UpdatusUser\Documents\Eigene Musik

2013-09-19 02:40 - 2013-09-19 02:40 - 00000000 _SHDL C:\Users\UpdatusUser\Documents\Eigene Bilder

2013-09-19 02:40 - 2013-09-19 02:40 - 00000000 _SHDL C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programme

2013-09-19 02:40 - 2013-09-19 02:40 - 00000000 _SHDL C:\Users\UpdatusUser\AppData\Local\Verlauf

2013-09-19 02:40 - 2013-09-19 02:40 - 00000000 _SHDL C:\Users\UpdatusUser\AppData\Local\Anwendungsdaten

2013-09-19 02:40 - 2013-09-19 02:40 - 00000000 _SHDL C:\Users\UpdatusUser\Anwendungsdaten

2013-09-19 02:40 - 2013-09-19 02:40 - 00000000 _SHDL C:\Users\****\Vorlagen

2013-09-19 02:40 - 2013-09-19 02:40 - 00000000 _SHDL C:\Users\****\Startmenü

2013-09-19 02:40 - 2013-09-19 02:40 - 00000000 _SHDL C:\Users\****\Netzwerkumgebung

2013-09-19 02:40 - 2013-09-19 02:40 - 00000000 _SHDL C:\Users\****\Lokale Einstellungen

2013-09-19 02:40 - 2013-09-19 02:40 - 00000000 _SHDL C:\Users\****\Eigene Dateien

2013-09-19 02:40 - 2013-09-19 02:40 - 00000000 _SHDL C:\Users\****\Druckumgebung

2013-09-19 02:40 - 2013-09-19 02:40 - 00000000 _SHDL C:\Users\****\Documents\Eigene Musik

2013-09-19 02:40 - 2013-09-19 02:40 - 00000000 _SHDL C:\Users\****\Documents\Eigene Bilder

2013-09-19 02:40 - 2013-09-19 02:40 - 00000000 _SHDL C:\Users\****\AppData\Roaming\Microsoft\Windows\Start Menu\Programme

2013-09-19 02:40 - 2013-09-19 02:40 - 00000000 _SHDL C:\Users\****\AppData\Local\Verlauf

2013-09-19 02:40 - 2013-09-19 02:40 - 00000000 _SHDL C:\Users\****\AppData\Local\Anwendungsdaten

2013-09-19 02:40 - 2013-09-19 02:40 - 00000000 _SHDL C:\Users\****\Anwendungsdaten

2013-09-19 02:40 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\sysprep

2013-09-19 02:39 - 2013-09-19 02:39 - 00001355 _____ C:\Windows\TSSysprep.log

2013-09-19 02:39 - 2013-09-19 02:39 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_tcwbf_01_09_00.Wdf

2013-09-19 02:39 - 2013-09-19 02:39 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_WinUSB_01009.Wdf

2013-09-19 02:39 - 2013-09-19 02:39 - 00000000 ____D C:\Program Files\AuthenTec

2013-09-19 02:39 - 2009-07-14 07:32 - 00000000 ____D C:\Windows\system32\WinBioPlugIns

2013-09-19 02:38 - 2013-09-19 02:38 - 00000000 ____D C:\ProgramData\NVIDIA Corporation

2013-09-19 02:38 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\Help

2013-09-19 02:37 - 2013-09-19 02:37 - 00000000 ____D C:\Windows\SysWOW64\RTCOM

2013-09-19 02:37 - 2013-09-19 02:37 - 00000000 ____D C:\Program Files\Realtek

2013-09-19 02:35 - 2013-09-19 02:35 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_SynTP_01009.Wdf

2013-09-19 02:35 - 2013-09-19 02:35 - 00000000 ____D C:\Program Files\Synaptics

2013-09-19 01:54 - 2012-03-25 21:47 - 01939773 _____ C:\Windows\WindowsUpdate (1).log

2013-09-19 01:17 - 2013-09-19 00:51 - 00003376 _____ C:\Users\****\Desktop\Windows-Kompatibilitätsbericht.htm

2013-09-19 01:14 - 2013-09-19 00:43 - 00002544 _____ C:\Windows\diagwrn.xml

2013-09-19 01:14 - 2013-09-19 00:43 - 00001890 _____ C:\Windows\diagerr.xml

2013-09-18 22:06 - 2013-09-19 14:19 - 02850416 _____ C:\Users\****\Desktop\Sicherungskopie_von_flic.cdr

2013-09-18 21:55 - 2013-09-18 21:48 - 423572207 _____ C:\Users\****\Downloads\Windows6.1-KB947821-v28-x64.msu

2013-09-18 13:14 - 2013-09-18 13:14 - 00001383 _____ C:\Users\Public\Desktop\Spybot-S&D Start Center.lnk

2013-09-18 13:12 - 2013-09-18 13:12 - 00614816 _____ C:\Users\****\Downloads\SpyBot Search Destroy - CHIP-Downloader.exe

2013-09-17 13:36 - 2012-12-20 13:47 - 00000000 ____D C:\Users\****\AppData\Local\FreePDF_XP

2013-09-17 12:59 - 2013-09-17 12:59 - 00077236 _____ (AppWork UG (haftungsbeschränkt)) C:\Users\****\Downloads\jDownloaderWebInstaller09581.exe

2013-09-17 12:00 - 2013-09-17 11:48 - 71710551 _____ C:\Users\****\Downloads\DIBwe.rar

2013-09-16 20:59 - 2012-03-26 20:31 - 00000099 _____ C:\Users\Public\LMDebug.log

2013-09-16 16:30 - 2013-09-16 16:30 - 00003179 _____ C:\Users\****\Desktop\Secure Download Manager.lnk

2013-09-12 23:36 - 2013-09-12 22:43 - 00010089 _____ C:\Users\****\AppData\Roaming\Durch Trennzeichen getrennte Werte.CAL

2013-09-06 10:33 - 2012-03-25 22:10 - 00108534 _____ C:\Windows\DPINST.LOG

2013-09-06 08:50 - 2013-09-06 08:50 - 00367200 _____ (Acronis) C:\Windows\system32\Drivers\afcdp.sys

2013-09-06 08:49 - 2013-09-06 08:49 - 01120032 _____ (Acronis International GmbH) C:\Windows\system32\Drivers\tib.sys

2013-09-06 08:49 - 2013-09-06 08:49 - 00183224 _____ (Acronis) C:\Windows\system32\Drivers\tib_mounter.sys

2013-09-06 08:49 - 2013-09-06 08:49 - 00161568 _____ (Acronis International GmbH) C:\Windows\system32\Drivers\vididr.sys

2013-09-06 08:49 - 2013-09-06 08:49 - 00001205 _____ C:\Users\Public\Desktop\True Image 2013.lnk

2013-09-06 08:49 - 2012-10-23 18:28 - 01462560 _____ (Acronis International GmbH) C:\Windows\system32\Drivers\tdrpman.sys

2013-09-06 08:49 - 2012-10-23 17:45 - 00117024 _____ (Acronis International GmbH) C:\Windows\system32\Drivers\vidsflt.sys

2013-09-06 08:49 - 2012-10-23 17:44 - 00108832 _____ (Acronis International GmbH) C:\Windows\system32\Drivers\fltsrv.sys

2013-09-06 08:49 - 2012-09-06 17:53 - 00233760 _____ (Acronis) C:\Windows\system32\Drivers\snapman.sys

2013-09-03 13:37 - 2013-09-03 13:37 - 00001783 _____ C:\Users\Public\Desktop\iTunes.lnk

2013-09-02 13:01 - 2013-09-02 12:56 - 00000000 ____D C:\Windows\pss

2013-09-02 12:01 - 2012-07-22 18:19 - 00098951 _____ C:\Windows\DirectX.log

2013-09-02 12:00 - 2013-09-02 12:00 - 00002490 _____ C:\Users\Public\Desktop\Tom Clancy's Splinter Cell® Blacklist™.lnk

2013-09-01 21:22 - 2013-09-01 21:22 - 00001205 _____ C:\Users\****\Desktop\Uplay.lnk

2013-09-01 17:08 - 2013-09-19 13:59 - 79143768 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

2013-08-22 17:48 - 2012-04-01 10:25 - 00000687 _____ C:\Windows\wiso.ini

2013-08-22 08:16 - 2013-08-22 08:16 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_netaapl64_01009.Wdf
 

Some content of TEMP:

====================

C:\Users\****\AppData\Local\Temp\Quarantine.exe
 
 

==================== Bamital & volsnap Check =================
 

C:\Windows\System32\winlogon.exe => MD5 is legit

C:\Windows\System32\wininit.exe => MD5 is legit

C:\Windows\SysWOW64\wininit.exe => MD5 is legit

C:\Windows\explorer.exe => MD5 is legit

C:\Windows\SysWOW64\explorer.exe => MD5 is legit

C:\Windows\System32\svchost.exe => MD5 is legit

C:\Windows\SysWOW64\svchost.exe => MD5 is legit

C:\Windows\System32\services.exe => MD5 is legit

C:\Windows\System32\User32.dll => MD5 is legit

C:\Windows\SysWOW64\User32.dll => MD5 is legit

C:\Windows\System32\userinit.exe => MD5 is legit

C:\Windows\SysWOW64\userinit.exe => MD5 is legit

C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
 
 

LastRegBack: 2013-09-19 04:49
 

==================== End Of Log ============================

Addition

Code:

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 21-09-2013

Ran by **** at 2013-09-21 13:01:56

Running from C:\Users\****\Desktop

Boot Mode: Normal

==========================================================
 
 

==================== Installed Programs ======================
 

Acronis True Image WD*Edition (x32 Version: 13.0.14189)

Adobe Acrobat 7.0 Professional - English, Français, Deutsch (x32 Version: 7.1.0)

Adobe Acrobat 7.1.0 Professional - English, Français, Deutsch (x32 Version: 7.1.0)

Adobe Bridge 1.0 (x32 Version: 001.000.001)

Adobe Common File Installer (x32 Version: 1.00.002)

Adobe Creative Suite 2 (x32)

Adobe Flash Player 11 ActiveX (x32 Version: 11.8.800.175)

Adobe Flash Player 11 Plugin (x32 Version: 11.8.800.168)

Adobe Help Center 1.0 (x32 Version: 001.000.0002)

Adobe Illustrator CS2 (x32 Version: 12.000.000)

Adobe InCopy CS2 (x32 Version: 004.000.000)

Adobe InDesign CS2 (x32 Version: 004.000.000)

Adobe Photoshop CS2 (x32 Version: 9.0)

Adobe Reader X (10.1.8) - Deutsch (x32 Version: 10.1.8)

Adobe Shockwave Player 11.6 (x32 Version: 11.6.4.634)

Adobe SVG Viewer 3.0 (x32 Version:  3.0)

Adobe Version Cue CS2 (x32 Version: 2.0)

Amazon Kindle (HKCU)

Amazon MP3-Downloader 1.0.9 (x32)

Apple Application Support (x32 Version: 2.3.4)

Apple Mobile Device Support (Version: 6.1.0.13)

Apple Software Update (x32 Version: 2.1.3.127)

Ashampoo Burning Studio 2012 CBE v.11.0.4 (x32 Version: 11.0.4)

AttachmentsManager 1.8.5 (x32 Version: 1.8.5)

BisonCam (x32 Version: 9.2.1.71.34)

Bonjour (Version: 3.0.0.10)

ChangeNames 5.0.4 (x32 Version: 5.0.4)

ChiconyCam (x32 Version: 1.0.43.1129)

Cisco WebEx Meetings (HKCU)

Common Desktop Agent (Version: 1.62.0)

Corel Graphics - Windows Shell Extension (x32 Version: 15.2.0.686)

Corel Graphics - Windows Shell Extension (x32 Version: 15.2.686)

Corel Graphics - Windows Shell Extension 64 Bit (Version: 15.2.686)

CorelDRAW Graphics Suite X5 - BR (x32 Version: 15.3)

CorelDRAW Graphics Suite X5 - Capture (x32 Version: 15.3)

CorelDRAW Graphics Suite X5 - Common (x32 Version: 15.3)

CorelDRAW Graphics Suite X5 - Connect (x32 Version: 15.3)

CorelDRAW Graphics Suite X5 - Custom Data (x32 Version: 15.3)

CorelDRAW Graphics Suite X5 - DE (x32 Version: 15.3)

CorelDRAW Graphics Suite X5 - Draw (x32 Version: 15.3)

CorelDRAW Graphics Suite X5 - EN (x32 Version: 15.3)

CorelDRAW Graphics Suite X5 - ES (x32 Version: 15.3)

CorelDRAW Graphics Suite X5 - Extra Content (x32 Version: 15.0)

CorelDRAW Graphics Suite X5 - Extra Content (x32)

CorelDRAW Graphics Suite X5 - Filters (x32 Version: 15.3)

CorelDRAW Graphics Suite X5 - FontNav (x32 Version: 15.3)

CorelDRAW Graphics Suite X5 - FR (x32 Version: 15.3)

CorelDRAW Graphics Suite X5 - IPM (x32 Version: 15.3)

CorelDRAW Graphics Suite X5 - IT (x32 Version: 15.3)

CorelDRAW Graphics Suite X5 - NL (x32 Version: 15.3)

CorelDRAW Graphics Suite X5 - PHOTO-PAINT (x32 Version: 15.3)

CorelDRAW Graphics Suite X5 - Photozoom Plugin (x32 Version: 15.0)

CorelDRAW Graphics Suite X5 - Redist (x32 Version: 15.0)

CorelDRAW Graphics Suite X5 - Setup Files (x32 Version: 15.3)

CorelDRAW Graphics Suite X5 - VBA (x32 Version: 15.3)

CorelDRAW Graphics Suite X5 - VideoBrowser (x32 Version: 15.3)

CorelDRAW Graphics Suite X5 - VSTA (x32 Version: 15.3)

CorelDRAW Graphics Suite X5 - WT (x32 Version: 15.3)

CorelDRAW Graphics Suite X5 (x32 Version: 15.3)

CorelDRAW(R) Graphics Suite X5 (x32 Version: 15.2.0.686)

CustomAnniversaries 2.1.14 (x32 Version: 2.1.14)

CustomBirthdays 2.1.14 (x32 Version: 2.1.14)

D3DX10 (x32 Version: 15.4.2368.0902)

Data Lifeguard Diagnostic for Windows 1.24 (x32)

Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition (x32)

EditContacts 2.0.14 (x32 Version: 2.0.14)

Emergency 2013 (x32)

ESM-Installer (x32)

EyeTV Netstream for Windows Media Center (x32 Version: 1.01.00.16)

FileZilla Client 3.7.3 (x32 Version: 3.7.3)

Find and Mount 2.32 (Version: 2.32)

FormatNumbers 7.5.0 (x32 Version: 7.5.0)

Fotogalerie (x32 Version: 16.4.3505.0912)

FreePDF (Remove only) (x32)

FUSSBALL MANAGER 13 (x32 Version: 1.0.3.0)

Ghostscript GPL 8.64 (Msi Setup) (x32 Version: 8.64)

HandBrake 0.9.8 (x32 Version: 0.9.8)

Hotfix für Microsoft Visual Studio 2007 Tools for Applications - ENU (KB947789) (x32 Version: 1)

Hotkey 3.3017 (x32 Version: 3.3017)

Intel PROSet Wireless

Intel PROSet Wireless (x32)

Intel(R) Management Engine Components (x32 Version: 7.0.0.1118)

Intel(R) Processor Graphics (x32 Version: 9.17.10.2932)

Intel(R) PROSet/Wireless WiFi-Software (Version: 14.2.0000)

IrfanView (remove only) (x32 Version: 4.32)

iTunes (Version: 11.0.5.5)

Java 7 Update 25 (x32 Version: 7.0.250)

Java Auto Updater (x32 Version: 2.1.9.5)

JMicron Ethernet Adapter NDIS Driver (x32 Version: 6.0.24.7)

JMicron Flash Media Controller Driver (x32 Version: 1.0.54.1)

Malwarebytes Anti-Malware Version 1.75.0.1300 (x32 Version: 1.75.0.1300)

Microsoft .NET Framework 4.5

Microsoft .NET Framework 4.5 (Version: 4.5.50709)

Microsoft Antimalware Service DE-DE Language Pack (Version: 3.0.8402.2)

Microsoft Application Error Reporting (Version: 12.0.6015.5000)

Microsoft Office Office 64-bit Components 2010 (Version: 14.0.7015.1000)

Microsoft Office Professional Plus 2013 - de-de (Version: 15.0.4535.1004)

Microsoft Office Project MUI (German) 2010 (x32 Version: 14.0.7015.1000)

Microsoft Office Project Professional 2010 (x32 Version: 14.0.7015.1000)

Microsoft Office Proof (English) 2010 (x32 Version: 14.0.7015.1000)

Microsoft Office Proof (French) 2010 (x32 Version: 14.0.7015.1000)

Microsoft Office Proof (German) 2010 (x32 Version: 14.0.7015.1000)

Microsoft Office Proof (Italian) 2010 (x32 Version: 14.0.7015.1000)

Microsoft Office Proofing (German) 2010 (x32 Version: 14.0.7015.1000)

Microsoft Office Shared 64-bit MUI (German) 2010 (Version: 14.0.7015.1000)

Microsoft Office Shared MUI (German) 2010 (x32 Version: 14.0.7015.1000)

Microsoft Office Visio 2010 (x32 Version: 14.0.7015.1000)

Microsoft Office Visio MUI (German) 2010 (x32 Version: 14.0.7015.1000)

Microsoft Project Professional 2010 (x32 Version: 14.0.7015.1000)

Microsoft Security Client (Version: 4.3.0215.0)

Microsoft Security Client DE-DE Language Pack (Version: 2.1.1116.0)

Microsoft Security Essentials (Version: 4.3.215.0)

Microsoft Silverlight (Version: 5.1.20513.0)

Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000)

Microsoft Visio Premium 2010 (x32 Version: 14.0.7015.1000)

Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001)

Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.50727.42)

Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.61000)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (x32 Version: 9.0.30729)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)

Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (Version: 10.0.40219)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219)

Microsoft Visual Studio Tools for Applications 2.0 - ENU (x32 Version: 9.0.30729)

Microsoft Visual Studio Tools for Applications 2.0 Language Pack - DEU (x32 Version: 9.0.30729)

Microsoft Visual Studio Tools for Applications 2.0 Runtime (x32 Version: 9.0.30729)

Microsoft Visual Studio Tools for Applications 2.0 Runtime Language Pack - DEU (x32 Version: 9.0.30729)

Microsoft_VC80_CRT_x86 (x32 Version: 8.0.50727.4053)

Microsoft_VC90_CRT_x86 (x32 Version: 1.00.0000)

Movie Maker (x32 Version: 16.4.3505.0912)

Mozilla Firefox 23.0.1 (x86 de) (x32 Version: 23.0.1)

Mozilla Maintenance Service (x32 Version: 23.0.1)

Mp3tag v2.52 (x32 Version: v2.52)

MSVCRT (x32 Version: 15.4.2862.0708)

MSVCRT110 (x32 Version: 16.4.1108.0727)

MSVCRT110_amd64 (Version: 16.4.1109.0912)

MSXML 4.0 SP2 (KB954430) (x32 Version: 4.20.9870.0)

MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0)

MuseScore 1.2 MuseScore score typesetter (x32 Version: 1.2.0)

NVIDIA Grafiktreiber 310.90 (Version: 310.90)

NVIDIA Install Application (Version: 2.1002.95.599)

NVIDIA Optimus 1.11.3 (Version: 1.11.3)

NVIDIA PhysX (x32 Version: 9.12.1031)

NVIDIA PhysX-Systemsoftware 9.12.1031 (Version: 9.12.1031)

NVIDIA Systemsteuerung 310.90 (Version: 310.90)

NVIDIA Update 1.11.3 (Version: 1.11.3)

NVIDIA Update Components (Version: 1.11.3)

Office 15 Click-to-Run Extensibility Component (x32 Version: 15.0.4535.1004)

Office 15 Click-to-Run Licensing Component (Version: 15.0.4535.1004)

Office 15 Click-to-Run Localization Component (x32 Version: 15.0.4535.1004)

Origin (x32 Version: 9.0.15.65)

PDF24 Creator 5.4.0 (x32)

pdfsam (HKCU Version: 2.2.1)

Photo Gallery (x32 Version: 16.4.3505.0912)

Protector Suite 2009 (Version: 5.9.3.6379)

Realtek High Definition Audio Driver (x32 Version: 6.0.1.6233)

Recuva (Version: 1.43)

RedMon - Redirection Port Monitor

Renesas Electronics USB 3.0 Host Controller Driver (x32 Version: 2.0.30.0)

Samsung Easy Printer Manager (x32 Version: 1.03.09.00(08.03.2013))

Samsung Easy Wireless Setup (x32 Version: 3.60.05)

Secure Download Manager (x32 Version: 3.1.10)

Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (x32)

SetIP (x32 Version: 1.04.01.00)

Sid Meier's Civilization V (x32)

SimCity™ (x32 Version: 1.0.0.0)

Skype™ 6.7 (x32 Version: 6.7.102)

Smart Data Recovery v4.3 (x32 Version: 4.3)

SonyEditor (remove only) (x32)

Spybot - Search & Destroy (x32 Version: 2.1.21)

Steam (x32 Version: 1.0.0.0)

StreamTransport version: 1.0.2.2171 (x32)

SUPER © v2012.build.51 (April 7, 2012) Version v2012.build.51 (x32 Version: v2012.build.51)

Synaptics Pointing Device Driver (Version: 15.0.8.0)

TeamViewer 8 (x32 Version: 8.0.20935)

TerraTec Home Cinema (x32 Version: 6.28.8)

THX TruStudio Pro (x32 Version: TAMB-CVS1D-1-LB R07)

Tom Clancy's Splinter Cell® Blacklist™ (x32 Version: 1.02)

True Image 2013 (x32 Version: 16.0.6514)

Update for Microsoft .NET Framework 4.5 (KB2750147) (x32 Version: 1)

Update for Microsoft .NET Framework 4.5 (KB2805221) (x32 Version: 1)

Update for Microsoft .NET Framework 4.5 (KB2805226) (x32 Version: 1)

Update for Microsoft Filter Pack 2.0 (KB2810071) 32-Bit Edition (x32)

Update for Microsoft Office 2010 (KB2553157) 32-Bit Edition (x32)

Update for Microsoft Office 2010 (KB2589298) 32-Bit Edition (x32)

Update for Microsoft Office 2010 (KB2589375) 32-Bit Edition (x32)

Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (x32)

Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition (x32)

Update for Microsoft Office 2010 (KB2760758) 32-Bit Edition (x32)

Update for Microsoft Office 2010 (KB2794737) 32-Bit Edition (x32)

Update for Microsoft OneNote 2010 (KB2810072) 32-Bit Edition (x32)

Uplay (x32 Version: 3.0)

Visual Basic for Applications (R) Core - English (x32 Version: 6.4.99.69)

Visual Basic for Applications (R) Core - German (x32 Version: 6.4.99.69)

Visual Basic for Applications (R) Core (x32 Version: 6.4.99.69)

VLC media player 2.0.1 (x32 Version: 2.0.1)

Wartung Samsung ML-2525W Series (x32)

WD Quick View (x32 Version: 2.2.0.8)

WD SmartWare (Version: 2.2.0.8)

WD SmartWare Installer (x32 Version: 2.2.0.8)

WEB.DE Club SmartFax (x32 Version: 2.00.223)

WebCam Installer (x32 Version: 3.32)

WebEx Schulungsmanager für Firefox oder Chrome (x32 Version: 5.29.3202)

Windows Live Communications Platform (x32 Version: 16.4.3505.0912)

Windows Live Essentials (x32 Version: 16.4.3505.0912)

Windows Live ID Sign-in Assistant (Version: 7.250.4311.0)

Windows Live Installer (x32 Version: 16.4.3505.0912)

Windows Live Photo Common (x32 Version: 16.4.3505.0912)

Windows Live PIMT Platform (x32 Version: 16.4.3505.0912)

Windows Live SOXE (x32 Version: 16.4.3505.0912)

Windows Live SOXE Definitions (x32 Version: 16.4.3505.0912)

Windows Live UX Platform (x32 Version: 16.4.3505.0912)

Windows Live UX Platform Language Pack (x32 Version: 16.4.3505.0912)

Windows Media Player Firefox Plugin (x32 Version: 1.0.0.8)

WinRAR 4.11 (64-Bit) (Version: 4.11.0)

WISO Steuer-Sparbuch 2013 (x32 Version: 20.00.8137)
 

==================== Restore Points  =========================
 

19-09-2013 01:50:47 Windows Update

19-09-2013 10:31:49 Windows Update

19-09-2013 11:20:18 Windows Update

19-09-2013 12:29:54 Windows Update

19-09-2013 12:33:52 Windows Update

20-09-2013 00:02:57 Windows Update

20-09-2013 08:27:29 Windows Update

20-09-2013 13:18:50 Windows Update

20-09-2013 16:50:17 Windows Update

20-09-2013 17:08:35 Windows Update

20-09-2013 22:08:44 Windows Update
 

==================== Hosts content: ==========================
 

2009-07-14 04:34 - 2013-09-19 16:51 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts

127.0.0.1       localhost
 

==================== Scheduled Tasks (whitelisted) =============
 

Task: {044A6734-E90E-4F8F-B357-B2DC8AB3B5EC} - System32\Tasks\Microsoft\Windows\Time Synchronization\SynchronizeTime => Sc.exe start w32time task_started

Task: {05799850-53E8-4FF7-984B-B704CB7D3AA1} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Microsoft Office 15\ClientX64\integratedoffice.exe [2013-07-22] (Microsoft Corporation)

Task: {0831465C-3ACB-4CC8-A28E-3BC22A8D065B} - System32\Tasks\Microsoft\Windows Live\SOXE\Extractor Definitions Update Task

Task: {2FD72F9A-DD9F-419E-BFA5-0C51A0C6BAC9} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => C:\Windows\System32\sdengin2.dll [2010-11-21] (Microsoft Corporation)

Task: {4BC35937-9FBA-47E4-A711-3E76DF30D221} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office 15\root\Office15\msoia.exe [2013-09-13] (Microsoft Corporation)

Task: {5A0D0AB1-3FE5-46DE-B8C7-B34FB26005C5} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)

Task: {69D1F12C-F8F9-473A-AE1D-6DFB8B1EDC6D} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Scan the system => C:\Program Files (x86)\Spybot - Search &amp; Destroy 2\SDScan.exe

Task: {7020F111-57EE-4ED1-9284-7363A7B2CF84} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Check for updates => C:\Program Files (x86)\Spybot - Search &amp; Destroy 2\SDUpdate.exe

Task: {A1D60D55-A6B8-401B-BC05-2938E02DF2F2} - System32\Tasks\Microsoft\Windows Defender\MP Scheduled Scan => d:\program files\windows defender\MpCmdRun.exe

Task: {A8E2441C-4128-421A-A19B-5882F581EE33} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Refresh immunization => C:\Program Files (x86)\Spybot - Search &amp; Destroy 2\SDImmunize.exe

Task: {AEE3A20F-B242-4771-AB4B-3A8F21AC69C5} - System32\Tasks\Microsoft\Windows\WindowsBackup\Windows Backup Monitor => C:\Windows\system32\sdclt.exe [2010-11-21] (Microsoft Corporation)

Task: {BB9BDF00-B058-4B1F-8412-CD087AE2DF14} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-09-20] (Adobe Systems Incorporated)

Task: {C4E8B14A-4159-4C58-BDAD-281DBBFC97E8} - System32\Tasks\Microsoft\Windows Defender\MpIdleTask => d:\program files\windows defender\MpCmdRun.exe

Task: {FA4B8B2D-CCA2-45FD-948C-AE35EDBFB833} - System32\Tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask => Sc.exe start osppsvc

Task: {FCD0E786-5EF6-484D-AEA3-109B5CB90B08} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office 15\root\Office15\msoia.exe [2013-09-13] (Microsoft Corporation)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
 

==================== Loaded Modules (whitelisted) =============
 

2013-04-04 01:09 - 2013-04-04 01:09 - 04300432 _____ () C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Cultures\OFFICE.ODF

2010-01-02 16:42 - 2010-01-02 16:42 - 00098304 _____ () C:\Program Files (x86)\FileZilla FTP Client\fzshellext_64.dll

2013-03-27 22:39 - 2013-03-27 22:39 - 00021824 _____ () C:\Program Files (x86)\Acronis\TrueImageHome\x64\ti_managers_proxy_stub.dll

2012-12-14 02:42 - 2012-12-14 02:42 - 00438784 _____ (Intel Corporation) C:\Windows\system32\igfxrDEU.lrc

2011-04-06 00:26 - 2011-04-06 00:26 - 00261536 _____ (Corel Corporation) c:\Program Files (x86)\Common Files\Corel\Shared\Shell\Extension\x64\ShellXP.dll

2011-04-06 00:25 - 2011-04-06 00:25 - 00800160 _____ (Corel Corporation) c:\Program Files (x86)\Common Files\Corel\Shared\Shell\Extension\x64\FileInfoProvider.dll

2012-12-14 02:42 - 2012-12-14 02:42 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll

2012-03-25 22:29 - 2012-03-25 22:23 - 00149608 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCfg64.dll

2012-03-25 22:29 - 2012-03-25 22:23 - 02654824 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkAPO64.dll

2012-03-09 09:58 - 2012-03-09 09:58 - 00057208 _____ () C:\Program Files\Common Files\Common Desktop Agent\CDASrvPS.dll

2011-07-27 20:07 - 2011-07-27 20:07 - 01501696 _____ () C:\Program Files\Common Files\Intel\WirelessCommon\LIBEAY32.dll

2012-03-25 22:32 - 2010-11-12 12:38 - 00241152 _____ () C:\Windows\SYSTEM32\APOMgr64.DLL

2013-06-01 12:27 - 2012-08-30 14:17 - 00021504 _____ (eMPIA Technology, Inc.) C:\Program Files (x86)\Common Files\TerraTec\Remote\BDADLL.dll

2010-06-25 10:38 - 2010-06-25 10:38 - 00218112 _____ (TODO: <公司名稱>) C:\Program Files (x86)\Hotkey\GetProductdll.dll

2010-08-20 10:15 - 2010-08-20 10:15 - 00220160 _____ (TODO: <公司名稱>) C:\Program Files (x86)\Hotkey\powerlife.dll

2009-06-06 14:50 - 2009-06-06 14:50 - 00019968 _____ () C:\Program Files (x86)\Hotkey\Audiodll.dll

2013-01-30 23:05 - 2006-01-12 22:20 - 00019968 _____ () C:\Program Files (x86)\Adobe\Acrobat 7.0\Distillr\acrotray.deu

2013-01-30 23:05 - 2006-01-12 22:13 - 00019968 _____ () C:\Program Files (x86)\Adobe\Acrobat 7.0\Distillr\acrotray.FRA

2013-01-10 13:43 - 2013-01-10 13:43 - 00014360 _____ () C:\Program Files (x86)\Common Files\Acronis\TibMounter\icudt38.dll

2005-04-06 17:53 - 2005-04-06 17:53 - 00425984 _____ (Adobe Systems Incorporated) c:\Adobe\Adobe Version Cue CS2\bin\AdobeUpdater.dll

2012-05-30 20:06 - 2012-05-30 20:06 - 00053608 _____ (Open Source Software community project) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\pthreadVC2.dll

2012-05-30 20:06 - 2012-05-30 20:06 - 00087912 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll

2012-05-30 20:06 - 2012-05-30 20:06 - 01242512 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll

2012-03-25 22:20 - 2012-03-25 22:20 - 00096904 _____ (Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.dll

2012-03-25 23:13 - 2013-03-20 14:38 - 00057384 _____ (Geek Software GmbH) C:\Program Files (x86)\PDF24\Settings.dll

2012-03-25 23:13 - 2013-03-20 14:38 - 00395304 _____ (Geek Software GmbH) C:\Program Files (x86)\PDF24\NotifyIcon.dll

2012-03-25 23:13 - 2013-03-20 14:38 - 00047144 _____ (Geek Software GmbH) C:\Program Files (x86)\PDF24\Language.dll

2012-03-25 23:13 - 2013-03-20 14:38 - 00382504 _____ (Geek Software GmbH) C:\Program Files (x86)\PDF24\About.dll

2013-09-18 13:14 - 2013-05-16 10:55 - 00113496 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlThirdParty150.bpl

2013-09-18 13:14 - 2013-05-16 10:55 - 03643800 _____ (Project JEDI) C:\Program Files (x86)\Spybot - Search & Destroy 2\Jcl150.bpl

2013-09-18 13:14 - 2013-05-16 10:55 - 00416600 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\DEC150.bpl

2012-03-25 22:32 - 2010-11-01 17:34 - 00159744 _____ () C:\Program Files (x86)\Creative\THX TruStudio Pro\THXAudioCP\de-DE\THXAudio.resources.dll

2013-03-28 00:37 - 2013-03-28 00:37 - 13627872 _____ () C:\Program Files (x86)\Acronis\TrueImageHome\ti_managers.dll

2012-11-21 20:16 - 2013-09-12 10:31 - 00362336 _____ (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Resource_de.dll

2012-11-21 20:16 - 2013-09-12 10:31 - 03031904 _____ (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_StaticRes.dll

2012-11-21 20:16 - 2013-09-12 10:22 - 00095584 _____ (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\tv_w32.dll
 

==================== Alternate Data Streams (whitelisted) ======
 
 

==================== Safe Mode (whitelisted) ===================
 
 

==================== Faulty Device Manager Devices =============
 
 

==================== Event log errors: =========================
 

Application errors:

==================

Error: (09/21/2013 00:58:03 PM) (Source: EyeTV Netstream) (User: )

Description: UPnpFindNetstreamDevices() FAILED
 

Error: (09/21/2013 00:58:03 PM) (Source: EyeTV Netstream) (User: )

Description: .NET EXCEPTION

System.Runtime.InteropServices.COMException (0x80070420): Eine Instanz der COM-Komponente mit der CLSID {E2085F28-FEB7-404A-B8E7-E659BDEAAA02} konnte aufgrund des folgenden Fehlers nicht von der IClassFactory erstellt werden: 80070420.

   bei Elgato.EyeTVNetstream.TomaDeviceDiscovery.UPnpFindNetstreamDevices(TomaList& netstreamDevices)
 

Error: (09/21/2013 00:57:50 PM) (Source: Bonjour Service) (User: )

Description: mDNSCoreReceiveResponse: Unexpected conflict discarding   22 103.0.168.192.in-addr.arpa. PTR ****-PC.local.
 

Error: (09/21/2013 00:57:50 PM) (Source: Bonjour Service) (User: )

Description: mDNSCoreReceiveResponse: Received from 192.168.0.103:5353   24 103.0.168.192.in-addr.arpa. PTR ****-PC-2.local.
 

Error: (09/21/2013 00:57:44 PM) (Source: WinMgmt) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (09/21/2013 00:57:42 PM) (Source: SideBySide) (User: )

Description: Fehler beim Generieren des Aktivierungskontexts für "hxxp://schemas.microsoft.com/SMI/2005/WindowsSettings^antispywareProductDisplayName1".

Die Einstellung "hxxp://schemas.microsoft.com/SMI/2005/WindowsSettings^antispywareProductDisplayName" ist nicht registriert.
 

Error: (09/21/2013 00:57:10 PM) (Source: Application Error) (User: )

Description: Name der fehlerhaften Anwendung: CECPLFKT.exe, Version: 0.9.1.1030, Zeitstempel: 0x4aefec4e

Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.18229, Zeitstempel: 0x51fb1072

Ausnahmecode: 0xc0000005

Fehleroffset: 0x00039393

ID des fehlerhaften Prozesses: 0xab0

Startzeit der fehlerhaften Anwendung: 0xCECPLFKT.exe0

Pfad der fehlerhaften Anwendung: CECPLFKT.exe1

Pfad des fehlerhaften Moduls: CECPLFKT.exe2

Berichtskennung: CECPLFKT.exe3
 

Error: (09/21/2013 00:51:30 PM) (Source: EyeTV Netstream) (User: )

Description: UPnpFindNetstreamDevices() FAILED
 

Error: (09/21/2013 00:51:30 PM) (Source: EyeTV Netstream) (User: )

Description: .NET EXCEPTION

System.Runtime.InteropServices.COMException (0x80004005): Eine Instanz der COM-Komponente mit der CLSID {E2085F28-FEB7-404A-B8E7-E659BDEAAA02} konnte aufgrund des folgenden Fehlers nicht von der IClassFactory erstellt werden: 80004005.

   bei Elgato.EyeTVNetstream.TomaDeviceDiscovery.UPnpFindNetstreamDevices(TomaList& netstreamDevices)
 

Error: (09/21/2013 00:46:59 PM) (Source: EyeTV Netstream) (User: )

Description: UPnpFindNetstreamDevices() FAILED
 
 

System errors:

=============

Error: (09/21/2013 01:00:00 PM) (Source: Service Control Manager) (User: )

Description: Der Dienst "NVIDIA Update Service Daemon" wurde aufgrund folgenden Fehlers nicht gestartet: 

%%1069
 

Error: (09/21/2013 01:00:00 PM) (Source: Service Control Manager) (User: )

Description: Der Dienst "nvUpdatusService" konnte sich nicht als ".\UpdatusUser" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden: 

%%1330
 

Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC).
 

Error: (09/21/2013 00:57:57 PM) (Source: Service Control Manager) (User: )

Description: Dienst "CECFLPKT" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
 

Error: (09/21/2013 00:57:42 PM) (Source: Service Control Manager) (User: )

Description: Der Dienst "Spybot-S&D 2 Security Center Service" wurde aufgrund folgenden Fehlers nicht gestartet: 

%%14001
 

Error: (09/21/2013 00:48:56 PM) (Source: Service Control Manager) (User: )

Description: Der Dienst "NVIDIA Update Service Daemon" wurde aufgrund folgenden Fehlers nicht gestartet: 

%%1069
 

Error: (09/21/2013 00:48:56 PM) (Source: Service Control Manager) (User: )

Description: Der Dienst "nvUpdatusService" konnte sich nicht als ".\UpdatusUser" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden: 

%%1330
 

Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC).
 

Error: (09/21/2013 00:46:57 PM) (Source: Service Control Manager) (User: )

Description: Dienst "CECFLPKT" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
 

Error: (09/21/2013 00:46:49 PM) (Source: Service Control Manager) (User: )

Description: Der Dienst "Spybot-S&D 2 Security Center Service" wurde aufgrund folgenden Fehlers nicht gestartet: 

%%14001
 

Error: (09/21/2013 00:09:02 AM) (Source: DCOM) (User: )

Description: {C3D84F57-9904-4F7D-8D79-1D72DAD51ADC}
 

Error: (09/20/2013 07:12:46 PM) (Source: Service Control Manager) (User: )

Description: Der Dienst "NVIDIA Update Service Daemon" wurde aufgrund folgenden Fehlers nicht gestartet: 

%%1069
 
 

Microsoft Office Sessions:

=========================

Error: (09/21/2013 00:58:03 PM) (Source: EyeTV Netstream)(User: )

Description: UPnpFindNetstreamDevices() FAILED
 

Error: (09/21/2013 00:58:03 PM) (Source: EyeTV Netstream)(User: )

Description: .NET EXCEPTION

System.Runtime.InteropServices.COMException (0x80070420): Eine Instanz der COM-Komponente mit der CLSID {E2085F28-FEB7-404A-B8E7-E659BDEAAA02} konnte aufgrund des folgenden Fehlers nicht von der IClassFactory erstellt werden: 80070420.

   bei Elgato.EyeTVNetstream.TomaDeviceDiscovery.UPnpFindNetstreamDevices(TomaList& netstreamDevices)
 

Error: (09/21/2013 00:57:50 PM) (Source: Bonjour Service)(User: )

Description: mDNSCoreReceiveResponse: Unexpected conflict discarding   22 103.0.168.192.in-addr.arpa. PTR ****-PC.local.
 

Error: (09/21/2013 00:57:50 PM) (Source: Bonjour Service)(User: )

Description: mDNSCoreReceiveResponse: Received from 192.168.0.103:5353   24 103.0.168.192.in-addr.arpa. PTR ****-PC-2.local.
 

Error: (09/21/2013 00:57:44 PM) (Source: WinMgmt)(User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (09/21/2013 00:57:42 PM) (Source: SideBySide)(User: )

Description: hxxp://schemas.microsoft.com/SMI/2005/WindowsSettings^antispywareProductDisplayNameC:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe
 

Error: (09/21/2013 00:57:10 PM) (Source: Application Error)(User: )

Description: CECPLFKT.exe0.9.1.10304aefec4entdll.dll6.1.7601.1822951fb1072c000000500039393ab001ceb6b9449aff65C:\Program Files (x86)\ChiconyCam\CECPLFKT.exeC:\Windows\SysWOW64\ntdll.dll8fcbfed5-22ac-11e3-b075-0090f5bcd228
 

Error: (09/21/2013 00:51:30 PM) (Source: EyeTV Netstream)(User: )

Description: UPnpFindNetstreamDevices() FAILED
 

Error: (09/21/2013 00:51:30 PM) (Source: EyeTV Netstream)(User: )

Description: .NET EXCEPTION

System.Runtime.InteropServices.COMException (0x80004005): Eine Instanz der COM-Komponente mit der CLSID {E2085F28-FEB7-404A-B8E7-E659BDEAAA02} konnte aufgrund des folgenden Fehlers nicht von der IClassFactory erstellt werden: 80004005.

   bei Elgato.EyeTVNetstream.TomaDeviceDiscovery.UPnpFindNetstreamDevices(TomaList& netstreamDevices)
 

Error: (09/21/2013 00:46:59 PM) (Source: EyeTV Netstream)(User: )

Description: UPnpFindNetstreamDevices() FAILED
 
 

CodeIntegrity Errors:

===================================

  Date: 2013-09-21 12:56:28.187

  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\jmcr.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
 

  Date: 2013-09-21 12:56:28.156

  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\jmcr.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
 

  Date: 2013-09-21 12:56:28.124

  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\jmcr.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
 

  Date: 2013-09-21 12:56:28.093

  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\jmcr.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
 

  Date: 2013-09-21 12:56:28.046

  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\jmcr.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
 

  Date: 2013-09-21 12:56:28.015

  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\jmcr.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
 

  Date: 2013-09-21 12:45:54.263

  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\jmcr.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
 

  Date: 2013-09-21 12:45:54.232

  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\jmcr.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
 

  Date: 2013-09-21 12:45:54.185

  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\jmcr.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
 

  Date: 2013-09-21 12:45:54.154

  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\jmcr.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
 
 

==================== Memory info =========================== 
 

Percentage of memory in use: 29%

Total physical RAM: 8099.07 MB

Available physical RAM: 5720.05 MB

Total Pagefile: 16196.32 MB

Available Pagefile: 13629.97 MB

Total Virtual: 8192 MB

Available Virtual: 8191.82 MB
 

==================== Drives ================================
 

Drive c: () (Fixed) (Total:457.85 GB) (Free:238.57 GB) NTFS

Drive d: (DVDHERGOLSHUSER) (CDROM) (Total:2.69 GB) (Free:0 GB) UDF
 

==================== MBR & Partition Table ==================
 

========================================================

Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: 7C4C6991)

Partition 1: (Not Active) - (Size=8 GB) - (Type=27)

Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS)

Partition 3: (Not Active) - (Size=458 GB) - (Type=07 NTFS)
 

==================== End Of Log ============================

Zitat:

Zitat von M-K-D-B (Beitrag 1159918)

Gibt es noch Probleme mit LyriXeeker in einem Browser? Wenn ja, welche?

Ich habe jetzt 10 Minuten getestet und mir sind keine Problematiken mehr aufgefallen. Weder Spam-Links noch leere Seiten. Super, danke schonmal.

Servus,

Schritt 1

ESET Online Scanner

Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
Lade und starte Eset Online Scanner
Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
Klicke auf Starten.
Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
Klicke am Ende des Suchlaufs auf Fertig stellen.
Schließe das Fenster von ESET.
Explorer öffnen.
C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
Logfile hier posten.
Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

Schritt 2
Downloade Dir bitte

SecurityCheck und:

Speichere es auf dem Desktop.
Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.

Poste den Inhalt bitte hier.

Bitte poste mit deiner nächsten Antwort

die Logdatei von ESET,
die Logdatei von SecurityCheck.

ESET

Code:

ESETSmartInstaller@High as downloader log:

all ok

# version=8

# OnlineScannerApp.exe=1.0.0.1

# OnlineScanner.ocx=1.0.0.6920

# api_version=3.0.2

# EOSSerial=cfe65ee4716dc7419302e1d51680ad8b

# engine=15219

# end=finished

# remove_checked=false

# archives_checked=true

# unwanted_checked=false

# unsafe_checked=false

# antistealth_checked=true

# utc_time=2013-09-22 09:07:11

# local_time=2013-09-22 11:07:11 (+0100, Mitteleuropäische Sommerzeit)

# country="Germany"

# lang=1033

# osver=6.1.7601 NT Service Pack 1

# compatibility_mode=5893 16776574 100 94 290815 131513881 0 0

# scanned=292849

# found=0

# cleaned=0

# scan_time=12774

Security Check

Code:

 Results of screen317's Security Check version 0.99.73  

 Windows 7 Service Pack 1 x64 (UAC is enabled)  

 Internet Explorer 10  
 ``````````````Antivirus/Firewall Check:`````````````` 

Microsoft Security Essentials   

 Antivirus up to date!  
 `````````Anti-malware/Other Utilities Check:````````` 

 Spybot - Search & Destroy 

 Malwarebytes Anti-Malware Version 1.75.0.1300  

 Java 7 Update 25  

 Adobe Flash Player 11.8.800.168  

 Adobe Reader 10.1.8 Adobe Reader out of Date!  

 Mozilla Firefox (23.0.1) 
 ````````Process Check: objlist.exe by Laurent````````  

 Microsoft Security Essentials MSMpEng.exe 

 Microsoft Security Essentials msseces.exe 

 Malwarebytes Anti-Malware mbamservice.exe  

 Malwarebytes Anti-Malware mbamgui.exe  

 Spybot Teatimer.exe is disabled! 

 Malwarebytes' Anti-Malware mbamscheduler.exe   
 `````````````````System Health check````````````````` 

 Total Fragmentation on Drive C:  
 ````````````````````End of Log``````````````````````

Servus,

Wenn du keine Probleme mehr hast, dann sind wir hier fertig. Deine Logdateien sind sauber. :daumenhoc
Zum Schluss müssen wir noch ein paar abschließende Schritte unternehmen, um deinen Pc aufzuräumen und abzusichern.

Schritt 1
Dein Java ist nicht mehr aktuell. Älter Versionen enthalten Sicherheitslücken, die von Malware missbraucht werden können.

Downloade dir bitte die neueste Java-Version von hier:
Java Download (32 bit)
Java Download (64 bit)
Speichere die Datei auf deinem Desktop.
Schließe alle laufenden Programme. Speziell deinen Browser.
Starte die Datei. Diese wird die neueste Java Version ( Java 7 Update 40 ) installieren.
Entferne den Haken bei "Installieren Sie die Ask-Toolbar ..." während der Installation.
Wenn die Installation beendet wurde
Start --> Systemsteuerung --> Programme und deinstalliere alle älteren Java Versionen.
Starte deinen Rechner neu sobald alle älteren Versionen deinstalliert wurden.

schneller Plugin-Test: PluginCheck

Schritt 2
Deinstalliere bitte deine aktuelle Version von Adobe Reader
Start--> Systemsteuerung--> Software / Programme deinstallieren--> Adobe Reader
und lade dir die neue Version von Hier herunter-
Entferne den Hacken für den McAfee SecurityScan bzw. Google Chrome.

Schritt 3

Klicke auf http://www.trojaner-board.de/picture...&pictureid=324 > Hilfe > Über Firefox
Warte bis das Update geladen ist, klicke auf Update installieren und lasse Firefox neu starten.
Prüfe bitte, ob weitere Updates vorliegen oder ob Firefox aktuell ist.
Klicke nun auf http://www.trojaner-board.de/picture...&pictureid=324 > Add-ons > http://www.trojaner-board.de/picture...&pictureid=326 > Auf Updates überprüfen
Nach einem weiteren Neustart von Firefox sollte alles aktuell sein.

Prüfe bitte auch (regelmässig) ob folgende Links fehlende Updates bei deinen Plugins zeigen:

Schritt 4
Die Reihenfolge ist hier entscheidend.

Falls Defogger benutzt wurde: Defogger nochmal starten und auf re-enable klicken.
Falls Combofix benutzt wurde: (Alternativ in uninstall.exe umbenennen und starten)
- Windowstaste + R > Combofix /Uninstall (eingeben) > OK
- Alternative: Combofix.exe in uninstall.exe umbenennen und starten
- Combofix wird jetzt starten, sich evtl updaten und dann alle Reste von sich selbst entfernen.
Downloade Dir bitte auf jeden Fall DelFix auf deinen Desktop:
- Schließe alle offenen Programme.
- Starte die delfix.exe mit einem Doppelklick.
- Setze vor jede Funktion ein Häkchen.
- Klicke auf Start.
- Hinweis: DelFix entfernt u. a. alle verwendeten Programme, die Quarantäne unserer Scanner, den Java-Cache und löscht sich abschließend selbst.
- Starte deinen Rechner abschließend neu.
Sollten jetzt noch Programme aus unserer Bereinigung übrig sein kannst du sie bedenkenlos löschen.

Schritt 5
Abschließend habe ich noch ein paar Tipps zur Absicherung deines Systems.

Ich kann gar nicht zu oft erwähnen, wie wichtig es ist, dass dein System Up to Date ist.

Bitte überprüfe ob dein System Windows Updates automatisch herunter lädt
Windows Updates
- Windows XP: Start --> Systemsteuerung --> Doppelklick auf Automatische Updates
- Windows Vista / 7: Start --> Systemsteuerung --> System und Sicherheit --> Automatische Updates aktivieren oder deaktivieren
Gehe sicher das die automatischen Updates aktiviert sind.
Software Updates
Installierte Software kann ebenfalls Sicherheitslücken haben, welche Malware nutzen kann, um dein System zu infizieren.
Um deine Installierte Software up to date zu halten, empfehle ich dir Secunia Online Software.

Anti- Viren Software

Gehe sicher, dass du immer nur eine Anti-Viren Software installiert hast und dass diese auch up to date ist!

Zusätzlicher Schutz

MalwareBytes Anti Malware
Dies ist eines der besten Anti-Malware Tools auf dem Markt. Es ist ein On- Demond Scan Tool welches viele aktuelle Malware erkennt und auch entfernt.
Update das Tool und lass es einmal in der Woche laufen. Die Kaufversion bietet zudem noch einen Hintergrundwächter.
Ein Tutorial zur Verwendung findest Du hier.
WinPatrol
Diese Software macht einen Snapshot deines Systems und warnt dich vor eventuellen Änderungen. Downloade dir die Freeware Version von hier.

Sicheres Browsen

SpywareBlaster
Eine kurze Einführung findest du Hier
WOT (Web of trust)
Dieses AddOn warnt dich, bevor Du eine als schädlich gemeldete Seite besuchst.

Alternative Browser
Andere Browser tendieren zu etwas mehr Sicherheit als der IE, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden.

Opera
Mozilla Firefox.
- Hinweis: Für diesen Browser habe ich hier ein paar nützliche Add Ons
- NoScript
  Dieses AddOn blockt JavaScript, Java and Flash und andere Plugins. Sie werden nur dann ausgeführt, wenn Du es bestätigst.
- AdblockPlus
  Dieses AddOn blockt die meisten Werbung von selbst. Ein Rechtsklick auf den Banner um diesen zu AdBlockPlus hinzu zu fügen reicht und dieser wird nicht mehr geladen.
  Es spart ausserdem Downloadkapazität.

Performance
Bereinige regelmäßig deine Temp Files. Ich empfehle hierzu TFC

Halte dich fern von Registry Cleanern.
Diese Schaden deinem System mehr als dass sie helfen. Hier ein englischer Link:
Miekemoes Blogspot ( MVP )

Was du vermeiden solltest:

Klicke nicht auf alles, nur weil es dich dazu auffordert und schön bunt ist.
Verwende keine P2P oder Filesharing Software (Emule, uTorrent,..)
Lass die Finger von Cracks, Keygens, Serials oder anderer illegaler Software.
Öffne keine Anhänge von dir nicht bekannten Emails. Achte vor allem auf die Dateiendung wie z.B. deinFoto.jpg.exe.

Nun bleibt mir nur noch dir viel Spaß beim sicheren Surfen zu wünschen... ... und vielleicht möchtest du ja das Trojaner-Board unterstützen?

Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so dass ich dieses Thema aus meinen Abos löschen kann.