ragenhari | 10.10.2013 15:34 | Hier bitte:
FRST Logfile: Code:
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 02-10-2013
Ran by User (administrator) on User-THINK on 10-10-2013 16:17:50
Running from C:\Users\User\Desktop
Windows 7 Professional Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(AuthenTec, Inc) C:\Program Files\Lenovo Fingerprint Reader\TrueSuiteService.exe
(Lenovo.) C:\Windows\system32\ibmpmsvc.exe
(Microsoft Corporation) C:\Windows\system32\WLANExt.exe
(Lenovo) C:\Program Files (x86)\Lenovo\Access Connections\AcPrfMgrSvc.exe
(Broadcom Corporation.) C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe
(Lenovo) C:\Program Files (x86)\Lenovo\RapidBoot HDD Accelerator\FBService.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
() C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\Communications Utility\CAMMUTE.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\Communications Utility\TPKNRSVC.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\Communications Utility\vcamsvc.exe
(Lenovo Group Limited) C:\Program Files\LENOVO\VIRTSCRL\lvvsst.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
(Lenovo Group Limited) C:\Program Files\LENOVO\HOTKEY\TPHKSVC.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Lenovo) C:\Program Files (x86)\Lenovo\Access Connections\AcDeskBandHlpr.exe
(Lenovo Group Limited) C:\Program Files\LENOVO\HOTKEY\TPHKLOAD.exe
(Lenovo) C:\Program Files (x86)\Lenovo\Access Connections\AcSvc.exe
(Lenovo Group Limited) C:\Program Files\LENOVO\HOTKEY\MICMUTE.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Lenovo.) C:\Windows\System32\TpShocks.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\Communications Utility\TpKnrres.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Google Inc.) C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Microsoft Corporation) C:\Windows\System32\StikyNot.exe
(Broadcom Corporation.) C:\Program Files\Lenovo\Bluetooth Software\BTTray.exe
(Autodesk Inc) C:\Program Files (x86)\Autodesk\SketchBook Pro 6\SketchBookSnapshot.exe
(Vimicro) C:\Program Files (x86)\USB Camera\VM331STI.EXE
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\ControlCenter4\BrCcBoot.exe
(Elaborate Bytes AG) C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe
(Intel Corporation) C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe
(Dolby Laboratories Inc.) C:\Program Files (x86)\Dolby Advanced Audio v2\pcee4.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\ControlCenter4\BrCtrlCntr.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
(Synaptics Incorporated) C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE
(Lenovo) C:\Program Files (x86)\Lenovo\Access Connections\SvcGuiHlpr.exe
(Lenovo) C:\Program Files (x86)\ThinkPad\Utilities\PWMDBSVC.EXE
(Lenovo Group Limited) C:\PROGRA~2\ThinkPad\UTILIT~1\SCHTASK.exe
(AuthenTec Inc.) C:\Program Files\Lenovo Fingerprint Reader\TouchControl.exe
(Microsoft Corporation) C:\Windows\SYSTEM32\WISPTIS.EXE
(Microsoft Corporation) C:\Windows\SYSTEM32\WISPTIS.EXE
(AuthenTec Inc.) C:\Program Files\Lenovo Fingerprint Reader\x86\BioMonitor.exe
(Lenovo Group Limited) C:\PROGRA~1\LENOVO\VIRTSCRL\virtscrl.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\Browny02\BrYNSvc.exe
(Lenovo Group Limited) C:\PROGRA~1\LENOVO\HOTKEY\tpnumlkd.exe
(Microsoft Corporation) c:\Program Files\Microsoft Security Client\NisSrv.exe
(Lenovo Group Limited) C:\PROGRA~1\Lenovo\HOTKEY\MKRMSG.EXE
(Lenovo Group Limited) C:\PROGRA~1\Lenovo\HOTKEY\TPONSCR.EXE
(Lenovo Group Limited) C:\PROGRA~1\Lenovo\HOTKEY\SHTCTKY.EXE
(Broadcom Corporation.) C:\Program Files\Lenovo\Bluetooth Software\BtStackServer.exe
(Microsoft Corporation) C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
(Realsil Microelectronics Inc.) C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Lenovo Group Limited) C:\Program Files (x86)\Common Files\Lenovo\tvt_reg_monitor_svc.exe
(Symantec Corporation) C:\Program Files (x86)\Symantec\VIP Access Client\VIPAppService.exe
(Lenovo) C:\Program Files (x86)\Lenovo\message center plus\mcplaunch.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Ink\InputPersonalization.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12497552 2012-05-28] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_Dolby] - C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1180304 2012-05-30] (Realtek Semiconductor)
HKLM\...\Run: [TpShocks] - C:\Windows\SYSTEM32\TpShocks.exe [382248 2013-02-12] (Lenovo.)
HKLM\...\Run: [LENOVO.TPKNRRES] - C:\Program Files\Lenovo\Communications Utility\TPKNRRES.exe [293672 2013-01-28] (Lenovo Group Limited)
HKLM\...\Run: [] - [x]
HKLM\...\Run: [MSC] - c:\Program Files\Microsoft Security Client\msseces.exe [1356240 2013-06-20] (Microsoft Corporation)
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2963184 2013-04-24] (Synaptics Incorporated)
HKLM\...\Run: [HotKeysCmds] - "C:\Windows\system32\hkcmd.exe"
HKLM\...\Run: [AcWin7Hlpr] - C:\Program Files (x86)\Lenovo\Access Connections\AcTBenabler.exe [63784 2013-03-18] (Lenovo)
Winlogon\Notify\igfxcui: C:\Windows\SYSTEM32\igfxdev.dll (Intel Corporation)
HKCU\...\Run: [swg] - C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2013-02-22] (Google Inc.)
HKCU\...\Run: [RESTART_STICKY_NOTES] - C:\Windows\System32\StikyNot.exe [427520 2009-07-14] (Microsoft Corporation)
MountPoints2: {524a0320-d071-11e2-b1d0-2016d8d8d21e} - D:\autorun.exe
MountPoints2: {a9731e98-d44d-11e2-a29f-2016d8d8d21e} - F:\setup.exe
MountPoints2: {bb9c35c6-7c79-11e2-86fb-806e6f6e6963} - Q:\LenovoQDrive.exe
HKLM-x32\...\Run: [331BigDog] - C:\Program Files (x86)\USB Camera\VM331STI.EXE [548864 2011-11-24] (Vimicro)
HKLM-x32\...\Run: [USB3MON] - C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [291648 2012-05-21] (Intel Corporation)
HKLM-x32\...\Run: [PWMTRV] - C:\PROGRA~2\ThinkPad\UTILIT~1\PWMTR64V.DLL [6002984 2013-04-23] (Lenovo Group Limited)
HKLM-x32\...\Run: [Fastboot] - C:\Program Files (x86)\Lenovo\RapidBoot HDD Accelerator\FBConsole.exe [1095472 2012-03-12] (Lenovo)
HKLM-x32\...\Run: [Intel AppUp(SM) center] - C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe [156000 2012-12-14] (Intel Corporation)
HKLM-x32\...\Run: [Lenovo Registration] - C:\Program Files (x86)\Lenovo Registration\LenovoReg.exe [4351712 2011-07-13] (Lenovo, Inc.)
HKLM-x32\...\Run: [ControlCenter4] - C:\Program Files (x86)\ControlCenter4\BrCcBoot.exe [143360 2012-09-06] (Brother Industries, Ltd.)
HKLM-x32\...\Run: [BrStsMon00] - C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe [3076096 2012-06-06] (Brother Industries, Ltd.)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-05-11] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [VirtualCloneDrive] - C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe [88984 2013-03-10] (Elaborate Bytes AG)
HKLM-x32\...\Run: [Intel AppUp(R) center] - C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe [156000 2012-12-14] (Intel Corporation)
HKLM-x32\...\Run: [Dolby Advanced Audio v2] - C:\Program Files (x86)\Dolby Advanced Audio v2\pcee4.exe [508256 2012-04-23] (Dolby Laboratories Inc.)
HKLM-x32\...\Run: [Smart File Advisor] - C:\Program Files (x86)\Smart File Advisor\sfa.exe [283712 2013-07-22] (Filefacts.net)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKU\Default\...\RunOnce: [Lenovo.ShowBand] - C:\Program Files\Lenovo\SimpleTap DeskBand\ShowBand.exe [52584 2013-05-17] (Lenovo)
HKU\Default\...\RunOnce: [] - [x]
HKU\Default\...\RunOnce: [Lenovoautoqdrive] - C:\PROGRA~2\Common~1\Lenovo\Lenovo~1\LenovoAutorunreg.exe [159744 2011-12-15] ()
HKU\Default User\...\RunOnce: [Lenovo.ShowBand] - C:\Program Files\Lenovo\SimpleTap DeskBand\ShowBand.exe [52584 2013-05-17] (Lenovo)
HKU\Default User\...\RunOnce: [] - [x]
HKU\Default User\...\RunOnce: [Lenovoautoqdrive] - C:\PROGRA~2\Common~1\Lenovo\Lenovo~1\LenovoAutorunreg.exe [159744 2011-12-15] ()
Lsa: [Notification Packages] scecli C:\Program Files\Lenovo\Bluetooth Software\BtwProximityCP.dll ACGina
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com/ig/redirectdomain?brand=LENP&bmod=LENP
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de/
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://www.lenovo.com/welcome/thinkpad
SearchScopes: HKLM - DefaultScope {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL =
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: TrueSuite Browser Helper Object - {8590886E-EC8C-43C1-A32C-E4C2B0B6395B} - C:\Program Files\Lenovo Fingerprint Reader\IEBHO.DLL (AuthenTec Inc.)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
BHO: Symantec VIP Access Add-On - {C63CD127-A1CB-4D49-A4F7-D6F88A917BE6} - C:\Program Files (x86)\Symantec\VIP Access Client\64bit\VIPAddOnForIE64.dll (Symantec Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: TrueSuite Browser Helper Object - {8590886E-EC8C-43C1-A32C-E4C2B0B6395B} - C:\Program Files\Lenovo Fingerprint Reader\x86\IEBHO.dll (AuthenTec Inc.)
BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO-x32: Symantec VIP Access Add-On - {C63CD127-A1CB-4D49-A4F7-D6F88A917BE6} - C:\Program Files (x86)\Symantec\VIP Access Client\VIPAddOnForIE.dll (Symantec Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKCU - Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} https://fpdownload.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Handler-x32: http\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: http\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: https\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: https\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: msdaipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: msdaipp\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Filter: text/xml - {807553E5-5146-11D5-A672-00B0D022E945} - No File
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
FireFox:
========
FF ProfilePath: C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\6nke2qgo.User1
FF NewTab: www.google.de
FF Homepage: www.google.de
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_168.dll ()
FF Plugin: @java.com/DTPlugin,version=10.21.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.21.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_168.dll ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.0.59 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.40.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.40.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3555.0308 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: intel.com/AppUp - C:\Program Files (x86)\Intel\IntelAppStore\bin\npAppUp.dll (Intel)
FF Plugin HKCU: intel.com/AppUpx64 - C:\Program Files (x86)\Intel\IntelAppStore\bin\npAppUp_x64.dll (Intel)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: No Name - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\6nke2qgo.User1\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi
FF Extension: No Name - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\6nke2qgo.User1\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
FF HKLM-x32\...\Firefox\Extensions: [VIP2X@verisign.com] - C:\Program Files (x86)\Symantec\VIP Access Client\
FF Extension: Symantec VIP Access Add-On - C:\Program Files (x86)\Symantec\VIP Access Client\
Chrome:
=======
CHR Extension: () - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\cdkedefaddcdlpmiafhicjnkbogjiogj\2.0_0
CHR Extension: (Chrome In-App Payments service) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0
CHR HKLM-x32\...\Chrome\Extension: [cdkedefaddcdlpmiafhicjnkbogjiogj] - C:\Program Files\Lenovo Fingerprint Reader\x86\tschrome.crx
==================== Services (Whitelisted) =================
R2 btwdins; C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe [1005944 2012-09-24] (Broadcom Corporation.)
R2 FastbootService; C:\Program Files (x86)\Lenovo\RapidBoot HDD Accelerator\FBService.exe [169776 2012-03-12] (Lenovo)
R2 FPLService; C:\Program Files\Lenovo Fingerprint Reader\TrueSuiteService.exe [328552 2012-06-07] (AuthenTec, Inc)
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [128280 2012-02-07] ()
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [161560 2012-02-07] (Intel Corporation)
R2 LENOVO.TVTVCAM; C:\Program Files\Lenovo\Communications Utility\vcamsvc.exe [188200 2013-01-28] (Lenovo Group Limited)
R2 Lenovo.VIRTSCRLSVC; C:\Program Files\LENOVO\VIRTSCRL\lvvsst.exe [136288 2012-08-10] (Lenovo Group Limited)
S3 LSCWinService; C:\Program Files\Lenovo\Lenovo Solution Center\App\LSCWinService.exe [1674720 2013-09-25] ()
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [23808 2013-06-20] (Microsoft Corporation)
R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [366600 2013-06-20] (Microsoft Corporation)
S3 SUService; C:\Program Files (x86)\Lenovo\System Update\SUService.exe [22376 2013-06-26] ()
R2 ThinkVantage Registry Monitor Service; C:\Program Files (x86)\Common Files\Lenovo\tvt_reg_monitor_svc.exe [1028096 2010-08-31] (Lenovo Group Limited)
S3 TVT Backup Service; C:\Program Files (x86)\Lenovo\Rescue and Recovery\rrservice.exe [1517928 2013-03-11] (Lenovo Group Limited)
R2 VIPAppService; C:\Program Files (x86)\Symantec\VIP Access Client\VIPAppService.exe [84080 2012-04-19] (Symantec Corporation)
==================== Drivers (Whitelisted) ====================
R3 bcbtums; C:\Windows\System32\drivers\bcbtums.sys [165688 2012-09-25] (Broadcom Corporation.)
R0 Fastboot; C:\Windows\System32\DRIVERS\Fastboot.sys [71440 2012-03-12] (Windows (R) Win 7 DDK provider)
S3 HWHandSet; C:\Windows\System32\DRIVERS\hw_quusbmdm.sys [223232 2011-10-24] (Huawei Technologies Co., Ltd.)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [247216 2013-06-18] (Microsoft Corporation)
R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [139616 2013-06-18] (Microsoft Corporation)
R1 PHCORE; C:\Program Files\Lenovo\RapidBoot\PHCORE64.SYS [33344 2012-03-26] (Lenovo Group Limited)
R3 SmbDrvIntel; C:\Windows\System32\DRIVERS\Smb_driver_Intel.sys [27448 2012-06-20] (Synaptics Incorporated)
R3 TVTI2C; C:\Windows\System32\DRIVERS\Tvti2c.sys [40248 2011-05-29] (Lenovo Information Product(ShenZhen China) Inc.)
S3 tvtvcamd; C:\Windows\System32\DRIVERS\tvtvcamd.sys [27432 2011-12-07] (ThinkVantage Communications Utility)
S3 vm331avs; C:\Windows\System32\Drivers\vm331avs.sys [952832 2012-02-29] (Vimicro Corporation)
R3 vmulti; C:\Windows\System32\DRIVERS\vmulti.sys [9728 2012-11-12] ()
S3 dcdbas; system32\DRIVERS\dcdbas64.sys [x]
U5 hw_usbdev; C:\Windows\System32\Drivers\hw_usbdev.sys [116864 2011-10-24] (Huawei Technologies Co., Ltd.)
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-10-09 18:52 - 2013-10-09 18:52 - 00000000 ____D C:\FRST
2013-10-09 18:49 - 2013-10-09 18:49 - 01954124 _____ (Farbar) C:\Users\User\Desktop\FRST64.exe
2013-10-09 15:16 - 2013-10-09 15:16 - 01048960 _____ C:\Users\User\Downloads\adwcleaner.exe
2013-10-09 14:37 - 2013-10-09 14:37 - 00000000 ____D C:\Program Files (x86)\GOG.com
2013-10-09 14:10 - 2013-10-09 14:10 - 00001687 _____ C:\Users\Public\Desktop\Chaos on Deponia.lnk
2013-10-09 14:01 - 2013-10-09 14:01 - 00000000 ____D C:\GOG Games
2013-10-09 13:58 - 2013-10-09 13:58 - 00001265 _____ C:\Users\Public\Desktop\Virtual CloneDrive.lnk
2013-10-09 13:56 - 2013-10-09 13:56 - 01640984 _____ C:\Users\User\Downloads\setupvirtualclonedrive5.exe
2013-10-09 11:08 - 2013-10-09 12:31 - 00000000 ____D C:\Users\User\Downloads\Deponia 2 - Chaos on Deponia (November 6, 2012)
2013-10-09 09:07 - 2013-10-09 09:07 - 00014000 _____ C:\Users\User\Desktop\bookmarks-2013-10-09.json
2013-10-08 19:30 - 2013-10-09 15:27 - 00000000 ____D C:\AdwCleaner
2013-10-08 18:28 - 2013-10-08 18:28 - 00000000 ____D C:\Users\User\AppData\Roaming\Malwarebytes
2013-10-08 18:27 - 2013-10-08 18:27 - 00001124 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2013-10-08 18:27 - 2013-10-08 18:27 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-10-08 18:27 - 2013-10-08 18:27 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-10-08 18:27 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2013-10-08 18:26 - 2013-10-08 18:27 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\User\Downloads\mbam-setup-1.75.0.1300.exe
2013-10-08 13:32 - 2013-10-08 13:32 - 00000000 ____D C:\Users\Public\Lenovo
2013-10-08 13:30 - 2013-10-08 13:43 - 00000000 ____D C:\Users\User\AppData\Roaming\LSC
2013-10-08 13:13 - 2013-10-08 13:13 - 11348656 _____ (Lenovo ) C:\Users\User\Downloads\systemupdate502-06-26-2013.exe
2013-10-07 02:37 - 2013-10-07 02:37 - 00000017 _____ C:\Users\User\AppData\Local\resmon.resmoncfg
2013-10-05 22:00 - 2013-10-05 22:57 - 3266734080 _____ C:\Users\User\Downloads\X17-24289.iso
2013-10-05 20:08 - 2013-10-07 19:47 - 00000000 ____D C:\Users\User\AppData\Local\Apps\Windows 7 USB DVD Download Tool
2013-10-05 12:18 - 2013-10-05 12:19 - 35038912 _____ (Lenovo Group Limited ) C:\Users\User\Downloads\h4wg02ww.exe
2013-10-05 12:06 - 2013-10-05 12:06 - 06998632 _____ (Lenovo Group Limited ) C:\Users\User\Downloads\h4uj08ww.exe
2013-10-05 03:19 - 2013-10-05 03:19 - 00388929 _____ C:\Users\User\Downloads\idmmzcc.xpi
2013-10-05 02:27 - 2013-10-05 03:25 - 947070088 _____ (Microsoft Corporation) C:\Users\User\Downloads\windows6.1-KB976932-X64.exe
2013-10-04 11:51 - 2013-10-05 10:45 - 00000000 ____D C:\Users\User\Desktop\Skulpturvorlagen
2013-10-04 11:26 - 2013-10-04 11:26 - 07166982 _____ C:\Users\User\Desktop\20131003_171149.mp4
2013-10-02 13:11 - 2013-10-02 13:11 - 00000000 ____D C:\Users\User\AppData\Local\{8CE9F7E0-6AF3-4585-B8EB-5438E2289444}
2013-09-28 18:17 - 2013-09-28 18:23 - 312651949 _____ C:\Users\User\Downloads\Deponia_PC_Patch_1.1.5_De_Daedalic_noDRM.exe
2013-09-28 10:26 - 2013-09-28 10:26 - 00004096 _____ C:\Windows\d3dx.dat
2013-09-28 10:26 - 2013-09-28 10:26 - 00000000 ____D C:\Users\User\AppData\Roaming\Daedalic Entertainment
2013-09-28 10:25 - 2013-09-28 10:25 - 00002326 _____ C:\Users\Public\Desktop\Ravensburger Puzzle.lnk
2013-09-28 10:24 - 2013-09-28 10:24 - 00000000 ____D C:\Program Files (x86)\Ravensburger Digital
2013-09-28 10:22 - 2013-09-28 10:22 - 00000000 ____D C:\Users\User\Downloads\RavensburgerPuzzle_Patch_v1-2
2013-09-28 10:21 - 2013-09-28 10:21 - 00000000 ____D C:\Users\User\Downloads\Ravensburger
2013-09-24 11:25 - 2013-09-24 11:25 - 18965660 _____ C:\Users\User\Downloads\GFX_Vista_Win7_64_8.15.8.1050_Beta5.exe
2013-09-20 09:56 - 2013-09-20 09:56 - 00000000 ___RD C:\Users\User\AppData\Roaming\Brother
2013-09-19 18:30 - 2013-09-25 20:41 - 00000000 ____D C:\Users\User\Desktop\Reha-Antrag
2013-09-19 18:29 - 2013-09-25 18:15 - 00000000 ____D C:\Users\User\Desktop\Bildervorlagen
2013-09-19 16:22 - 2013-09-19 16:22 - 00913832 _____ (Oracle Corporation) C:\Users\User\Downloads\jxpiinstall.exe
2013-09-19 16:21 - 2013-09-19 16:21 - 00000000 ____D C:\ProgramData\Oracle
2013-09-19 16:20 - 2013-09-19 16:20 - 00868264 _____ (Oracle Corporation) C:\Windows\SysWOW64\npDeployJava1.dll
2013-09-19 16:20 - 2013-09-19 16:20 - 00790440 _____ (Oracle Corporation) C:\Windows\SysWOW64\deployJava1.dll
2013-09-19 16:20 - 2013-09-19 16:20 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2013-09-19 16:20 - 2013-09-19 16:20 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2013-09-19 16:20 - 2013-09-19 16:20 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2013-09-19 16:20 - 2013-09-19 16:20 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2013-09-19 16:20 - 2013-09-19 16:20 - 00000000 ____D C:\ProgramData\Sun
2013-09-19 16:20 - 2013-09-19 16:20 - 00000000 ____D C:\Program Files (x86)\Java
2013-09-19 16:18 - 2013-09-19 16:18 - 00913832 _____ (Oracle Corporation) C:\Users\User\Downloads\chromeinstall-7u40.exe
2013-09-19 16:13 - 2013-09-19 16:13 - 00405504 _____ C:\Users\User\Downloads\intel_srldetect_4.5.13.0(1).msi
2013-09-19 11:07 - 2013-09-19 11:09 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-09-18 18:24 - 2010-06-02 04:55 - 00527192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_7.dll
2013-09-18 18:24 - 2010-06-02 04:55 - 00518488 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_7.dll
2013-09-18 18:24 - 2010-06-02 04:55 - 00239960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_7.dll
2013-09-18 18:24 - 2010-06-02 04:55 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_7.dll
2013-09-18 18:24 - 2010-06-02 04:55 - 00077656 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_5.dll
2013-09-18 18:24 - 2010-06-02 04:55 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_5.dll
2013-09-18 18:24 - 2010-05-26 11:41 - 02526056 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_43.dll
2013-09-18 18:24 - 2010-05-26 11:41 - 02401112 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_43.dll
2013-09-18 18:24 - 2010-05-26 11:41 - 02106216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_43.dll
2013-09-18 18:24 - 2010-05-26 11:41 - 01998168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_43.dll
2013-09-18 18:24 - 2010-05-26 11:41 - 01907552 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_43.dll
2013-09-18 18:24 - 2010-05-26 11:41 - 01868128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_43.dll
2013-09-18 18:24 - 2010-05-26 11:41 - 00511328 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_43.dll
2013-09-18 18:24 - 2010-05-26 11:41 - 00470880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_43.dll
2013-09-18 18:24 - 2010-05-26 11:41 - 00276832 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_43.dll
2013-09-18 18:24 - 2010-05-26 11:41 - 00248672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_43.dll
2013-09-18 18:24 - 2010-02-04 10:01 - 00530776 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_6.dll
2013-09-18 18:24 - 2010-02-04 10:01 - 00528216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_6.dll
2013-09-18 18:24 - 2010-02-04 10:01 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_6.dll
2013-09-18 18:24 - 2010-02-04 10:01 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_6.dll
2013-09-18 18:24 - 2010-02-04 10:01 - 00078680 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_4.dll
2013-09-18 18:24 - 2010-02-04 10:01 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_4.dll
2013-09-18 18:24 - 2010-02-04 10:01 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_7.dll
2013-09-18 18:24 - 2010-02-04 10:01 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_7.dll
2013-09-18 18:24 - 2009-09-04 17:44 - 00517960 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_5.dll
2013-09-18 18:24 - 2009-09-04 17:44 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_5.dll
2013-09-18 18:24 - 2009-09-04 17:44 - 00176968 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_5.dll
2013-09-18 18:24 - 2009-09-04 17:44 - 00073544 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_3.dll
2013-09-18 18:24 - 2009-09-04 17:29 - 05554512 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_42.dll
2013-09-18 18:24 - 2009-09-04 17:29 - 05501792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_42.dll
2013-09-18 18:24 - 2009-09-04 17:29 - 02582888 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_42.dll
2013-09-18 18:24 - 2009-09-04 17:29 - 02475352 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_42.dll
2013-09-18 18:24 - 2009-09-04 17:29 - 01974616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_42.dll
2013-09-18 18:24 - 2009-09-04 17:29 - 01892184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_42.dll
2013-09-18 18:24 - 2009-09-04 17:29 - 00285024 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_42.dll
2013-09-18 18:24 - 2009-09-04 17:29 - 00235344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_42.dll
2013-09-18 18:24 - 2008-10-27 10:04 - 00518480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_3.dll
2013-09-18 18:24 - 2008-10-27 10:04 - 00514384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_3.dll
2013-09-18 18:24 - 2008-10-27 10:04 - 00235856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_3.dll
2013-09-18 18:24 - 2008-10-27 10:04 - 00175440 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_3.dll
2013-09-18 18:24 - 2008-10-27 10:04 - 00074576 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_2.dll
2013-09-18 18:24 - 2008-10-27 10:04 - 00070992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_2.dll
2013-09-18 18:24 - 2008-10-27 10:04 - 00025936 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_5.dll
2013-09-18 18:24 - 2008-10-27 10:04 - 00023376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_5.dll
2013-09-18 18:23 - 2008-07-31 10:41 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_2.dll
2013-09-18 18:23 - 2008-07-31 10:41 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_2.dll
2013-09-18 18:23 - 2008-07-31 10:41 - 00072200 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_1.dll
2013-09-18 18:23 - 2008-07-31 10:41 - 00068616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_1.dll
2013-09-18 18:23 - 2008-07-31 10:40 - 00513544 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_2.dll
2013-09-18 18:23 - 2008-07-31 10:40 - 00509448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_2.dll
2013-09-18 18:21 - 2013-09-18 18:23 - 00000000 ___HD C:\Windows\msdownld.tmp
2013-09-18 18:20 - 2013-09-18 18:20 - 00002368 _____ C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Call of Duty 2 SinglePlayer.lnk
2013-09-18 18:20 - 2013-09-18 18:20 - 00002368 _____ C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Call of Duty 2 MultiPlayer.lnk
2013-09-18 18:17 - 2013-09-18 18:17 - 00000000 ____D C:\Users\User\Downloads\CoD2Patchv1_3
2013-09-18 18:15 - 2013-09-18 18:16 - 38476234 _____ C:\Users\User\Downloads\CoD2Patchv1_3.zip
2013-09-18 17:35 - 2013-09-18 17:37 - 00000000 ____D C:\Users\User\Documents\Tomb Raider - Legend
2013-09-18 17:34 - 2013-09-18 17:34 - 00001075 _____ C:\Users\Public\Desktop\Tomb Raider - Legend.lnk
2013-09-18 17:19 - 2013-09-18 17:31 - 00000000 ____D C:\Program Files (x86)\Tomb Raider - Legend
2013-09-17 21:00 - 2013-09-17 21:00 - 00000000 ____D C:\Program Files (x86)\GameSpy Arcade
2013-09-17 17:21 - 2013-10-07 20:24 - 00000866 _____ C:\Windows\SysWOW64\InstallUtil.InstallLog
2013-09-14 19:33 - 2013-09-14 19:33 - 00000000 ____D C:\Users\User\Downloads\_Stoner
2013-09-14 19:32 - 2013-09-14 19:33 - 04296746 _____ C:\Users\User\Downloads\_Stoner.zip
2013-09-13 10:55 - 2013-08-10 07:22 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-09-13 10:55 - 2013-08-10 07:22 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-09-13 10:55 - 2013-08-10 07:22 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-09-13 10:55 - 2013-08-10 07:21 - 19246592 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-09-13 10:55 - 2013-08-10 07:21 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-09-13 10:55 - 2013-08-10 07:21 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-09-13 10:55 - 2013-08-10 07:20 - 15404544 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-09-13 10:55 - 2013-08-10 07:20 - 03959296 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-09-13 10:55 - 2013-08-10 07:20 - 02647040 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-09-13 10:55 - 2013-08-10 07:20 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-09-13 10:55 - 2013-08-10 07:20 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-09-13 10:55 - 2013-08-10 07:20 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-09-13 10:55 - 2013-08-10 07:20 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-09-13 10:55 - 2013-08-10 07:20 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-09-13 10:55 - 2013-08-10 05:59 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-09-13 10:55 - 2013-08-10 05:59 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-09-13 10:55 - 2013-08-10 05:58 - 14332928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-09-13 10:55 - 2013-08-10 05:58 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-09-13 10:55 - 2013-08-10 05:58 - 02876928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-09-13 10:55 - 2013-08-10 05:58 - 02048000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-09-13 10:55 - 2013-08-10 05:58 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-09-13 10:55 - 2013-08-10 05:58 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-09-13 10:55 - 2013-08-10 05:58 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-09-13 10:55 - 2013-08-10 05:58 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-09-13 10:55 - 2013-08-10 05:58 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-09-13 10:55 - 2013-08-10 05:58 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-09-13 10:55 - 2013-08-10 05:58 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-09-13 10:55 - 2013-08-10 05:17 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-09-13 10:55 - 2013-08-10 05:07 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-09-13 10:55 - 2013-08-10 04:27 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-09-13 10:55 - 2013-08-10 04:17 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-09-12 19:13 - 2013-09-12 19:13 - 00000000 ____D C:\Users\User\AppData\Local\PDF Writer
2013-09-12 19:11 - 2013-09-12 19:11 - 00000000 ____D C:\Users\User\Downloads\7PDF_9_1_0_1456
2013-09-12 19:11 - 2013-09-12 19:11 - 00000000 ____D C:\Users\User\AppData\Roaming\PDF Writer
2013-09-12 19:11 - 2013-09-12 19:11 - 00000000 ____D C:\ProgramData\PDF Writer
2013-09-12 19:11 - 2013-09-12 19:11 - 00000000 ____D C:\Program Files\Common Files\7-PDF
2013-09-12 19:11 - 2013-09-12 19:11 - 00000000 ____D C:\Program Files\7-PDF
2013-09-12 19:11 - 2012-10-10 16:45 - 00210944 _____ (7-PDF, Germany - Th. Hodes) C:\Windows\system32\pdf7.dll
2013-09-12 19:11 - 2012-10-10 16:45 - 00139264 _____ (7-PDF, Germany - Th. Hodes) C:\Windows\SysWOW64\pdf7c.dll
2013-09-12 19:11 - 2008-10-30 16:45 - 00227840 _____ (Bullzip) C:\Windows\SysWOW64\bzFlRdr.dll
2013-09-12 19:11 - 2008-07-09 16:45 - 00103424 _____ (Bullzip) C:\Windows\SysWOW64\bzDCT.dll
2013-09-12 19:11 - 1999-05-07 00:00 - 00140288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comdlg32.OCX
2013-09-12 19:10 - 2013-09-12 19:10 - 04654182 _____ C:\Users\User\Downloads\7PDF_9_1_0_1456.zip
2013-09-12 19:07 - 2013-09-12 19:07 - 00000000 ____D C:\Users\User\AppData\Roaming\PDF Architect
2013-09-12 18:44 - 2013-09-12 18:45 - 17810632 _____ (pdfforge GmbH) C:\Users\User\Downloads\PDFCreator-1_7_1_setup.exe
2013-09-12 15:07 - 2013-08-08 03:20 - 03155456 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-09-12 15:07 - 2013-08-05 04:25 - 00155584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ataport.sys
2013-09-12 15:07 - 2013-08-02 04:23 - 05550528 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2013-09-12 15:07 - 2013-08-02 04:15 - 01732032 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2013-09-12 15:07 - 2013-08-02 04:15 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2013-09-12 15:07 - 2013-08-02 04:15 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2013-09-12 15:07 - 2013-08-02 04:15 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2013-09-12 15:07 - 2013-08-02 04:14 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2013-09-12 15:07 - 2013-08-02 04:14 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2013-09-12 15:07 - 2013-08-02 04:13 - 01161216 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2013-09-12 15:07 - 2013-08-02 04:13 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2013-09-12 15:07 - 2013-08-02 04:12 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2013-09-12 15:07 - 2013-08-02 04:12 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2013-09-12 15:07 - 2013-08-02 04:12 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2013-09-12 15:07 - 2013-08-02 04:12 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2013-09-12 15:07 - 2013-08-02 04:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2013-09-12 15:07 - 2013-08-02 04:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2013-09-12 15:07 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2013-09-12 15:07 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2013-09-12 15:07 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2013-09-12 15:07 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2013-09-12 15:07 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-09-12 15:07 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2013-09-12 15:07 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2013-09-12 15:07 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2013-09-12 15:07 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2013-09-12 15:07 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2013-09-12 15:07 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2013-09-12 15:07 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2013-09-12 15:07 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2013-09-12 15:07 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2013-09-12 15:07 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2013-09-12 15:07 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2013-09-12 15:07 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2013-09-12 15:07 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2013-09-12 15:07 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2013-09-12 15:07 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2013-09-12 15:07 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2013-09-12 15:07 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2013-09-12 15:07 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2013-09-12 15:07 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2013-09-12 15:07 - 2013-08-02 03:59 - 03968960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2013-09-12 15:07 - 2013-08-02 03:59 - 03913664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2013-09-12 15:07 - 2013-08-02 03:51 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2013-09-12 15:07 - 2013-08-02 03:50 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2013-09-12 15:07 - 2013-08-02 03:50 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2013-09-12 15:07 - 2013-08-02 03:50 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2013-09-12 15:07 - 2013-08-02 03:48 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2013-09-12 15:07 - 2013-08-02 03:48 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2013-09-12 15:07 - 2013-08-02 03:48 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2013-09-12 15:07 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2013-09-12 15:07 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2013-09-12 15:07 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2013-09-12 15:07 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2013-09-12 15:07 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2013-09-12 15:07 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2013-09-12 15:07 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2013-09-12 15:07 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2013-09-12 15:07 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2013-09-12 15:07 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2013-09-12 15:07 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2013-09-12 15:07 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2013-09-12 15:07 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-09-12 15:07 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2013-09-12 15:07 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2013-09-12 15:07 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2013-09-12 15:07 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2013-09-12 15:07 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2013-09-12 15:07 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2013-09-12 15:07 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2013-09-12 15:07 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2013-09-12 15:07 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2013-09-12 15:07 - 2013-08-02 03:09 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2013-09-12 15:07 - 2013-08-02 02:59 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2013-09-12 15:07 - 2013-08-02 02:45 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2013-09-12 15:07 - 2013-08-02 02:45 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2013-09-12 15:07 - 2013-08-02 02:45 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2013-09-12 15:07 - 2013-08-02 02:45 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2013-09-12 15:07 - 2013-08-02 02:43 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2013-09-12 15:07 - 2013-08-02 02:43 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2013-09-12 15:07 - 2013-08-02 02:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2013-09-12 15:07 - 2013-08-02 02:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2013-09-12 15:07 - 2013-07-26 04:24 - 14172672 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2013-09-12 15:07 - 2013-07-26 04:24 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\shdocvw.dll
2013-09-12 15:07 - 2013-07-26 03:55 - 12872704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2013-09-12 15:07 - 2013-07-26 03:55 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shdocvw.dll
2013-09-11 22:35 - 2013-09-11 22:36 - 18450184 _____ (Intel Corporation) C:\Users\User\Downloads\winxp_144212.exe
2013-09-11 22:26 - 2013-09-11 22:26 - 18965660 _____ C:\Users\User\Downloads\Win_7.exe
2013-09-10 15:33 - 2013-09-10 15:40 - 145394600 _____ (Intel Corporation) C:\Users\User\Downloads\Win64_152818.exe
2013-09-10 12:27 - 2013-09-10 12:42 - 00000000 ____D C:\Camera
==================== One Month Modified Files and Folders =======
2013-10-10 16:20 - 2013-02-22 01:22 - 00001124 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-10-10 16:09 - 2013-02-22 00:59 - 01055828 _____ C:\Windows\WindowsUpdate.log
2013-10-10 16:00 - 2009-07-14 06:45 - 00035504 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-10-10 16:00 - 2009-07-14 06:45 - 00035504 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-10-10 15:54 - 2013-02-22 01:22 - 00001120 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-10-10 15:54 - 2013-02-22 01:06 - 00000828 _____ C:\Windows\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon.job
2013-10-10 15:52 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-10-10 15:52 - 2009-07-14 06:51 - 00085264 _____ C:\Windows\setupact.log
2013-10-09 18:52 - 2013-10-09 18:52 - 00000000 ____D C:\FRST
2013-10-09 18:49 - 2013-10-09 18:49 - 01954124 _____ (Farbar) C:\Users\User\Desktop\FRST64.exe
2013-10-09 15:27 - 2013-10-08 19:30 - 00000000 ____D C:\AdwCleaner
2013-10-09 15:16 - 2013-10-09 15:16 - 01048960 _____ C:\Users\User\Downloads\adwcleaner.exe
2013-10-09 14:37 - 2013-10-09 14:37 - 00000000 ____D C:\Program Files (x86)\GOG.com
2013-10-09 14:16 - 2013-06-07 08:46 - 00000000 ____D C:\Users\User\AppData\Local\Daedalic Entertainment
2013-10-09 14:10 - 2013-10-09 14:10 - 00001687 _____ C:\Users\Public\Desktop\Chaos on Deponia.lnk
2013-10-09 14:01 - 2013-10-09 14:01 - 00000000 ____D C:\GOG Games
2013-10-09 13:58 - 2013-10-09 13:58 - 00001265 _____ C:\Users\Public\Desktop\Virtual CloneDrive.lnk
2013-10-09 13:56 - 2013-10-09 13:56 - 01640984 _____ C:\Users\User\Downloads\setupvirtualclonedrive5.exe
2013-10-09 12:31 - 2013-10-09 11:08 - 00000000 ____D C:\Users\User\Downloads\Deponia 2 - Chaos on Deponia (November 6, 2012)
2013-10-09 11:33 - 2013-02-22 09:43 - 00698764 _____ C:\Windows\system32\perfh007.dat
2013-10-09 11:33 - 2013-02-22 09:43 - 00148788 _____ C:\Windows\system32\perfc007.dat
2013-10-09 11:33 - 2009-07-14 07:13 - 01612484 _____ C:\Windows\system32\PerfStringBackup.INI
2013-10-09 09:07 - 2013-10-09 09:07 - 00014000 _____ C:\Users\User\Desktop\bookmarks-2013-10-09.json
2013-10-08 22:20 - 2010-11-21 05:47 - 00556572 _____ C:\Windows\PFRO.log
2013-10-08 19:09 - 2013-02-22 01:06 - 00000830 _____ C:\Windows\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d.job
2013-10-08 18:28 - 2013-10-08 18:28 - 00000000 ____D C:\Users\User\AppData\Roaming\Malwarebytes
2013-10-08 18:27 - 2013-10-08 18:27 - 00001124 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2013-10-08 18:27 - 2013-10-08 18:27 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-10-08 18:27 - 2013-10-08 18:27 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-10-08 18:27 - 2013-10-08 18:26 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\User\Downloads\mbam-setup-1.75.0.1300.exe
2013-10-08 18:23 - 2013-02-22 01:07 - 00000000 ____D C:\Program Files (x86)\Realtek
2013-10-08 18:23 - 2013-02-22 01:06 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2013-10-08 16:41 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\NDF
2013-10-08 14:15 - 2013-02-22 01:22 - 00004120 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2013-10-08 14:15 - 2013-02-22 01:22 - 00003868 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2013-10-08 13:43 - 2013-10-08 13:30 - 00000000 ____D C:\Users\User\AppData\Roaming\LSC
2013-10-08 13:36 - 2013-02-22 01:20 - 629785600 ___SH C:\Windows\lenovo_fastboot.img
2013-10-08 13:33 - 2013-06-07 09:23 - 00000030 _____ C:\Windows\success64.log
2013-10-08 13:33 - 2013-02-22 01:06 - 00000000 ____D C:\Program Files\Common Files\Lenovo
2013-10-08 13:32 - 2013-10-08 13:32 - 00000000 ____D C:\Users\Public\Lenovo
2013-10-08 13:31 - 2013-02-22 01:18 - 00000000 ____D C:\Windows\Downloaded Installations
2013-10-08 13:31 - 2013-02-22 01:06 - 00000000 ____D C:\Program Files (x86)\Lenovo
2013-10-08 13:30 - 2013-06-07 09:32 - 00000000 ____D C:\ldiag
2013-10-08 13:30 - 2013-06-07 09:24 - 00000030 _____ C:\Windows\success32.log
2013-10-08 13:30 - 2013-02-22 01:18 - 00000000 ____D C:\Windows\System32\Tasks\Lenovo
2013-10-08 13:29 - 2013-02-22 01:06 - 00000000 ____D C:\Program Files\Lenovo
2013-10-08 13:16 - 2013-02-22 01:29 - 00000000 ____D C:\Windows\System32\Tasks\TVT
2013-10-08 13:13 - 2013-10-08 13:13 - 11348656 _____ (Lenovo ) C:\Users\User\Downloads\systemupdate502-06-26-2013.exe
2013-10-07 20:24 - 2013-09-17 17:21 - 00000866 _____ C:\Windows\SysWOW64\InstallUtil.InstallLog
2013-10-07 20:09 - 2013-06-20 22:19 - 00000000 ____D C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Bluetooth-Geräte
2013-10-07 19:48 - 2013-06-07 01:00 - 00000000 ____D C:\Users\User
2013-10-07 19:47 - 2013-10-05 20:08 - 00000000 ____D C:\Users\User\AppData\Local\Apps\Windows 7 USB DVD Download Tool
2013-10-07 19:47 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\registration
2013-10-07 02:37 - 2013-10-07 02:37 - 00000017 _____ C:\Users\User\AppData\Local\resmon.resmoncfg
2013-10-05 22:57 - 2013-10-05 22:00 - 3266734080 _____ C:\Users\User\Downloads\X17-24289.iso
2013-10-05 12:21 - 2013-02-22 01:13 - 00000000 ____D C:\Program Files (x86)\Cisco
2013-10-05 12:21 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\zh-HK
2013-10-05 12:21 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\tr-TR
2013-10-05 12:21 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\th-TH
2013-10-05 12:21 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\sl-SI
2013-10-05 12:21 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\sk-SK
2013-10-05 12:21 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\ro-RO
2013-10-05 12:21 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\lv-LV
2013-10-05 12:21 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\lt-LT
2013-10-05 12:21 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\hr-HR
2013-10-05 12:21 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\he-IL
2013-10-05 12:21 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\et-EE
2013-10-05 12:21 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\bg-BG
2013-10-05 12:21 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\ar-SA
2013-10-05 12:20 - 2013-02-22 01:12 - 06059112 _____ (Broadcom Corporation) C:\Windows\system32\Drivers\BCMWL664.SYS
2013-10-05 12:20 - 2013-02-22 01:12 - 04395520 _____ (Broadcom Corporation) C:\Windows\system32\bcmihvsrv64.dll
2013-10-05 12:20 - 2013-02-22 01:12 - 03659264 _____ (Broadcom Corporation) C:\Windows\system32\bcmihvui64.dll
2013-10-05 12:20 - 2013-02-22 01:12 - 00095584 _____ (Broadcom Corporation) C:\Windows\system32\bcmwlcoi.dll
2013-10-05 12:20 - 2013-02-22 01:12 - 00006656 _____ C:\Windows\system32\bcmwlrc.dll
2013-10-05 12:19 - 2013-10-05 12:18 - 35038912 _____ (Lenovo Group Limited ) C:\Users\User\Downloads\h4wg02ww.exe
2013-10-05 12:06 - 2013-10-05 12:06 - 06998632 _____ (Lenovo Group Limited ) C:\Users\User\Downloads\h4uj08ww.exe
2013-10-05 10:45 - 2013-10-04 11:51 - 00000000 ____D C:\Users\User\Desktop\Skulpturvorlagen
2013-10-05 03:25 - 2013-10-05 02:27 - 947070088 _____ (Microsoft Corporation) C:\Users\User\Downloads\windows6.1-KB976932-X64.exe
2013-10-05 03:19 - 2013-10-05 03:19 - 00388929 _____ C:\Users\User\Downloads\idmmzcc.xpi
2013-10-04 11:26 - 2013-10-04 11:26 - 07166982 _____ C:\Users\User\Desktop\20131003_171149.mp4
2013-10-02 13:11 - 2013-10-02 13:11 - 00000000 ____D C:\Users\User\AppData\Local\{8CE9F7E0-6AF3-4585-B8EB-5438E2289444}
2013-09-28 18:23 - 2013-09-28 18:17 - 312651949 _____ C:\Users\User\Downloads\Deponia_PC_Patch_1.1.5_De_Daedalic_noDRM.exe
2013-09-28 17:32 - 2013-06-07 08:39 - 00000000 ____D C:\Program Files (x86)\Daedalic Entertainment
2013-09-28 16:16 - 2013-06-07 01:08 - 00000000 ____D C:\Users\User\AppData\Local\Google
2013-09-28 10:26 - 2013-09-28 10:26 - 00004096 _____ C:\Windows\d3dx.dat
2013-09-28 10:26 - 2013-09-28 10:26 - 00000000 ____D C:\Users\User\AppData\Roaming\Daedalic Entertainment
2013-09-28 10:25 - 2013-09-28 10:25 - 00002326 _____ C:\Users\Public\Desktop\Ravensburger Puzzle.lnk
2013-09-28 10:24 - 2013-09-28 10:24 - 00000000 ____D C:\Program Files (x86)\Ravensburger Digital
2013-09-28 10:22 - 2013-09-28 10:22 - 00000000 ____D C:\Users\User\Downloads\RavensburgerPuzzle_Patch_v1-2
2013-09-28 10:21 - 2013-09-28 10:21 - 00000000 ____D C:\Users\User\Downloads\Ravensburger
2013-09-25 20:41 - 2013-09-19 18:30 - 00000000 ____D C:\Users\User\Desktop\Reha-Antrag
2013-09-25 18:15 - 2013-09-19 18:29 - 00000000 ____D C:\Users\User\Desktop\Bildervorlagen
2013-09-24 11:25 - 2013-09-24 11:25 - 18965660 _____ C:\Users\User\Downloads\GFX_Vista_Win7_64_8.15.8.1050_Beta5.exe
2013-09-20 09:56 - 2013-09-20 09:56 - 00000000 ___RD C:\Users\User\AppData\Roaming\Brother
2013-09-19 16:22 - 2013-09-19 16:22 - 00913832 _____ (Oracle Corporation) C:\Users\User\Downloads\jxpiinstall.exe
2013-09-19 16:21 - 2013-09-19 16:21 - 00000000 ____D C:\ProgramData\Oracle
2013-09-19 16:20 - 2013-09-19 16:20 - 00868264 _____ (Oracle Corporation) C:\Windows\SysWOW64\npDeployJava1.dll
2013-09-19 16:20 - 2013-09-19 16:20 - 00790440 _____ (Oracle Corporation) C:\Windows\SysWOW64\deployJava1.dll
2013-09-19 16:20 - 2013-09-19 16:20 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2013-09-19 16:20 - 2013-09-19 16:20 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2013-09-19 16:20 - 2013-09-19 16:20 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2013-09-19 16:20 - 2013-09-19 16:20 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2013-09-19 16:20 - 2013-09-19 16:20 - 00000000 ____D C:\ProgramData\Sun
2013-09-19 16:20 - 2013-09-19 16:20 - 00000000 ____D C:\Program Files (x86)\Java
2013-09-19 16:18 - 2013-09-19 16:18 - 00913832 _____ (Oracle Corporation) C:\Users\User\Downloads\chromeinstall-7u40.exe
2013-09-19 16:13 - 2013-09-19 16:13 - 00405504 _____ C:\Users\User\Downloads\intel_srldetect_4.5.13.0(1).msi
2013-09-19 15:57 - 2013-02-22 01:16 - 00015402 _____ C:\Windows\system32\results.xml
2013-09-19 15:55 - 2013-06-08 17:59 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-09-19 15:37 - 2013-06-06 21:26 - 00000000 ____D C:\Users\User\AppData\Local\Mozilla
2013-09-19 11:09 - 2013-09-19 11:07 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-09-18 18:25 - 2013-06-07 15:08 - 00000000 ____D C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2013-09-18 18:24 - 2013-06-07 21:25 - 00000000 ____D C:\Windows\SysWOW64\directx
2013-09-18 18:23 - 2013-09-18 18:21 - 00000000 ___HD C:\Windows\msdownld.tmp
2013-09-18 18:20 - 2013-09-18 18:20 - 00002368 _____ C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Call of Duty 2 SinglePlayer.lnk
2013-09-18 18:20 - 2013-09-18 18:20 - 00002368 _____ C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Call of Duty 2 MultiPlayer.lnk
2013-09-18 18:17 - 2013-09-18 18:17 - 00000000 ____D C:\Users\User\Downloads\CoD2Patchv1_3
2013-09-18 18:16 - 2013-09-18 18:15 - 38476234 _____ C:\Users\User\Downloads\CoD2Patchv1_3.zip
2013-09-18 17:37 - 2013-09-18 17:35 - 00000000 ____D C:\Users\User\Documents\Tomb Raider - Legend
2013-09-18 17:34 - 2013-09-18 17:34 - 00001075 _____ C:\Users\Public\Desktop\Tomb Raider - Legend.lnk
2013-09-18 17:31 - 2013-09-18 17:19 - 00000000 ____D C:\Program Files (x86)\Tomb Raider - Legend
2013-09-17 21:00 - 2013-09-17 21:00 - 00000000 ____D C:\Program Files (x86)\GameSpy Arcade
2013-09-17 20:39 - 2013-06-06 19:48 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-09-17 20:39 - 2013-06-06 19:48 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-09-17 19:16 - 2013-06-29 22:26 - 00000000 ____D C:\Users\User\AppData\Local\WinZip
2013-09-17 19:00 - 2013-06-13 20:01 - 00000000 ____D C:\Program Files (x86)\Smart File Advisor
2013-09-14 19:33 - 2013-09-14 19:33 - 00000000 ____D C:\Users\User\Downloads\_Stoner
2013-09-14 19:33 - 2013-09-14 19:32 - 04296746 _____ C:\Users\User\Downloads\_Stoner.zip
2013-09-13 11:23 - 2013-06-08 21:29 - 00000000 ___RD C:\Users\User\Virtual Machines
2013-09-13 11:23 - 2013-06-06 18:10 - 00000000 ___RD C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-09-13 11:23 - 2013-06-06 18:10 - 00000000 ___RD C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2013-09-13 11:22 - 2009-07-14 06:45 - 00288240 _____ C:\Windows\system32\FNTCACHE.DAT
2013-09-13 10:54 - 2013-07-13 20:58 - 00000000 ____D C:\Windows\system32\MRT
2013-09-13 10:51 - 2013-06-06 19:48 - 79143768 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-09-12 19:13 - 2013-09-12 19:13 - 00000000 ____D C:\Users\User\AppData\Local\PDF Writer
2013-09-12 19:11 - 2013-09-12 19:11 - 00000000 ____D C:\Users\User\Downloads\7PDF_9_1_0_1456
2013-09-12 19:11 - 2013-09-12 19:11 - 00000000 ____D C:\Users\User\AppData\Roaming\PDF Writer
2013-09-12 19:11 - 2013-09-12 19:11 - 00000000 ____D C:\ProgramData\PDF Writer
2013-09-12 19:11 - 2013-09-12 19:11 - 00000000 ____D C:\Program Files\Common Files\7-PDF
2013-09-12 19:11 - 2013-09-12 19:11 - 00000000 ____D C:\Program Files\7-PDF
2013-09-12 19:10 - 2013-09-12 19:10 - 04654182 _____ C:\Users\User\Downloads\7PDF_9_1_0_1456.zip
2013-09-12 19:07 - 2013-09-12 19:07 - 00000000 ____D C:\Users\User\AppData\Roaming\PDF Architect
2013-09-12 18:45 - 2013-09-12 18:44 - 17810632 _____ (pdfforge GmbH) C:\Users\User\Downloads\PDFCreator-1_7_1_setup.exe
2013-09-11 22:36 - 2013-09-11 22:35 - 18450184 _____ (Intel Corporation) C:\Users\User\Downloads\winxp_144212.exe
2013-09-11 22:26 - 2013-09-11 22:26 - 18965660 _____ C:\Users\User\Downloads\Win_7.exe
2013-09-10 15:40 - 2013-09-10 15:33 - 145394600 _____ (Intel Corporation) C:\Users\User\Downloads\Win64_152818.exe
2013-09-10 12:42 - 2013-09-10 12:27 - 00000000 ____D C:\Camera
Some content of TEMP:
====================
C:\Users\User\AppData\Local\Temp\7z920.exe
C:\Users\User\AppData\Local\Temp\betterads.exe
C:\Users\User\AppData\Local\Temp\fp_pl_pfs_installer-1.exe
C:\Users\User\AppData\Local\Temp\fp_pl_pfs_installer-2.exe
C:\Users\User\AppData\Local\Temp\fp_pl_pfs_installer.exe
C:\Users\User\AppData\Local\Temp\msxml6-KB927977-enu-amd64.exe
C:\Users\User\AppData\Local\Temp\Quarantine.exe
C:\Users\User\AppData\Local\Temp\sfa_inst.exe
C:\Users\User\AppData\Local\Temp\utt4B54.tmp.exe
C:\Users\User\AppData\Local\Temp\xerces-c_2_5_0.dll
C:\Users\User\AppData\Local\Temp\xmlDeployer.exe
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2011-02-24 19:04
==================== End Of Log ============================ --- --- --- Code:
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 02-10-2013
Ran by User at 2013-10-10 16:21:37
Running from C:\Users\User\Desktop
Boot Mode: Normal
==========================================================
==================== Security Center ========================
==================== Installed Programs ======================
7-PDF Printer 9.1.0.1456 (Version: 9.1.0.1456)
Absolute Reminder (x32 Version: 2.0.0.19)
Adobe AIR (x32 Version: 3.9.0.1030)
Adobe Flash Player 11 ActiveX (x32 Version: 11.7.700.202)
Adobe Flash Player 11 Plugin (x32 Version: 11.8.800.168)
Adobe Reader XI (11.0.04) - Deutsch (x32 Version: 11.0.04)
Anzeige am Bildschirm (Version: 7.12.00)
ArtRage 2 Starter Edition (x32 Version: 2.6.0)
ArtRage 4 (x32 Version: 4.0.2.1)
Autodesk SketchBook Pro 6 (x32 Version: 6.00.0000)
Broadcom 802.11 Network Adapter (Version: 6.30.59.91)
Brother MFL-Pro Suite MFC-7360N (x32 Version: 1.1.3.0)
Chaos on Deponia (x32 Version: 2.0.0.3)
Cisco EAP-FAST Module (x32 Version: 2.2.14)
Cisco LEAP Module (x32 Version: 1.0.19)
Cisco PEAP Module (x32 Version: 1.1.6)
Compatibility Pack für 2007 Office System (x32 Version: 12.0.6612.1000)
Create Recovery Media (x32 Version: 1.20.0.00)
D3DX10 (x32 Version: 15.4.2368.0902)
Dolby Advanced Audio v2 (x32 Version: 7.2.8000.13)
ElsterFormular (x32 Version: 14.3.20130522)
Energie-Manager (x32 Version: 6.54)
Evernote v. 4.2.3 (x32 Version: 4.2.3.15)
File Shredder 2.5
Google Chrome (x32 Version: 30.0.1599.69)
Google Toolbar for Internet Explorer (x32 Version: 1.0.0)
Google Toolbar for Internet Explorer (x32 Version: 7.5.4413.1752)
Handset WinDriver 1.02.02.00 (x32 Version: 1.02.02.00)
Harveys Neue Augen (x32 Version: 1.0)
Helium (x32 Version: 1.0.0)
Integrated Camera (x32 Version: 5.12.423.3)
Intel AppUp(R) center (x32 Version: 41651)
Intel(R) Control Center (x32 Version: 1.2.1.1007)
Intel(R) Manageability Engine Firmware Recovery Agent (x32 Version: 1.0.0.35342)
Intel(R) Management Engine Components (x32 Version: 8.0.2.1410)
Intel(R) Processor Graphics (x32 Version: 9.17.10.3223)
Intel(R) SDK for OpenCL - CPU Only Runtime Package (x32 Version: 2.0.0.37149)
Intel(R) USB 3.0 eXtensible Host Controller Driver (x32 Version: 1.0.5.235)
Intel® Trusted Connect Service Client (Version: 1.23.605.1)
IrfanView (remove only) (x32 Version: 4.35)
IsoBuster 3.2 (x32 Version: 3.2)
Java 7 Update 21 (64-bit) (Version: 7.0.210)
Java 7 Update 40 (x32 Version: 7.0.400)
Java Auto Updater (x32 Version: 2.1.9.8)
Junk Mail filter update (x32 Version: 15.4.3502.0922)
LEGO Digital Designer (x32)
Lenovo Auto Scroll Utility (Version: 2.02)
Lenovo Bluetooth with Enhanced Data Rate Software (Version: 6.5.1.3300)
Lenovo Patch Utility (x32 Version: 1.3.0.9)
Lenovo Patch Utility (x32 Version: 1.4.0.4)
Lenovo Patch Utility 64 bit (Version: 1.3.0.9)
Lenovo Patch Utility 64 bit (Version: 1.4.0.4)
Lenovo Power Management Driver (Version: 1.67.03.13)
Lenovo Registration (x32 Version: 1.0.4)
Lenovo SimpleTap (Version: 3.2.0004.00)
Lenovo Solution Center (Version: 2.3.002.00)
Lenovo System Update (x32 Version: 5.02.0018)
Lenovo User Guide (x32 Version: 1.0.0009.00)
Lenovo Warranty Information (x32 Version: 1.0.0005.00)
Lenovo Welcome (x32 Version: 3.1.0020.00)
Malwarebytes Anti-Malware Version 1.75.0.1300 (x32 Version: 1.75.0.1300)
Medal of Honor Allied Assault (x32)
Medal of Honor Allied Assault(tm) Breakthrough (x32)
Medal of Honor Allied Assault(tm) Spearhead (x32)
Mesh Runtime (x32 Version: 15.4.5722.2)
Message Center Plus (Version: 3.1.0004.00)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft .NET Framework 4 Extended (Version: 4.0.30319)
Microsoft Application Error Reporting (Version: 12.0.6015.5000)
Microsoft Office File Validation Add-In (x32 Version: 14.0.5130.5003)
Microsoft Office Professional Edition 2003 (x32 Version: 11.0.8173.0)
Microsoft Security Client (Version: 4.3.0215.0)
Microsoft Security Essentials (Version: 4.3.215.0)
Microsoft Silverlight (Version: 5.1.20513.0)
Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.61000)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.30319 (Version: 10.0.30319)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319 (x32 Version: 10.0.30319)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (x32 Version: 11.0.50727.1)
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.50727 (x32 Version: 11.0.50727)
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.50727 (x32 Version: 11.0.50727)
Mozilla Firefox 24.0 (x86 de) (x32 Version: 24.0)
Mozilla Maintenance Service (x32 Version: 24.0)
MSVCRT (x32 Version: 15.4.2862.0708)
MSVCRT_amd64 (x32 Version: 15.4.2862.0708)
OpenGL Extensions Viewer 4.0 (x32 Version: 410)
Password Vault (Version: 5.4.100.232)
RadiAnt DICOM Viewer (64-bit) (x32 Version: 1.8.6.6744)
RapidBoot (Version: 1.20)
RapidBoot HDD Accelerator (x32 Version: 1.0.5.9)
Ravensburger Puzzle (x32 Version: 1.2)
Realtek High Definition Audio Driver (x32 Version: 6.0.1.6649)
Realtek PCIE Card Reader (x32 Version: 6.1.8400.28121)
Rescue and Recovery (x32 Version: 4.51.0045.00)
ResidualVM 0.1.1 (x32)
SAMSUNG USB Driver for Mobile Phones (Version: 1.5.23.0)
Smart File Advisor 1.1.2 (x32 Version: 1.1.2)
Super File Shredder version 4.12 (x32 Version: 4.12)
System Requirements Lab for Intel (x32 Version: 4.5.13.0)
ThinkPad UltraNav Driver (Version: 16.2.19.7)
ThinkVantage Access Connections (x32 Version: 6.01)
ThinkVantage Communications Utility (Version: 3.0.42.0)
ThinkVantage System für aktiven Festplattenschutz (Version: 1.77.0.11)
Tomb Raider: Legend 1.0 (x32)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2468871) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2533523) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2600217) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2836939) (x32 Version: 1)
VIP Access (x32 Version: 2.0.5.13)
VirtualCloneDrive (x32 Version: 5.4.7.0)
VirtualTablet Server (x32 Version: 1.0.0.0)
VirtualTablet Server (x32 Version: 1.1.0)
Windows Live Communications Platform (x32 Version: 15.4.3502.0922)
Windows Live Essentials (x32 Version: 15.4.3502.0922)
Windows Live Essentials (x32 Version: 15.4.3555.0308)
Windows Live Fotogalerie (x32 Version: 15.4.3502.0922)
Windows Live ID Sign-in Assistant (Version: 7.250.4232.0)
Windows Live Installer (x32 Version: 15.4.3502.0922)
Windows Live Language Selector (Version: 15.4.3555.0308)
Windows Live Mail (x32 Version: 15.4.3502.0922)
Windows Live Mesh (x32 Version: 15.4.3502.0922)
Windows Live Mesh ActiveX control for remote connections (x32 Version: 15.4.5722.2)
Windows Live Messenger (x32 Version: 15.4.3538.0513)
Windows Live MIME IFilter (Version: 15.4.3502.0922)
Windows Live Movie Maker (x32 Version: 15.4.3502.0922)
Windows Live Photo Common (x32 Version: 15.4.3502.0922)
Windows Live Photo Gallery (x32 Version: 15.4.3502.0922)
Windows Live PIMT Platform (x32 Version: 15.4.3508.1109)
Windows Live Remote Client (Version: 15.4.5722.2)
Windows Live Remote Client Resources (Version: 15.4.5722.2)
Windows Live Remote Service (Version: 15.4.5722.2)
Windows Live Remote Service Resources (Version: 15.4.5722.2)
Windows Live SOXE (x32 Version: 15.4.3502.0922)
Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922)
Windows Live UX Platform (x32 Version: 15.4.3502.0922)
Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109)
Windows Live Writer (x32 Version: 15.4.3502.0922)
Windows Live Writer Resources (x32 Version: 15.4.3502.0922)
Windows XP Mode (Version: 1.3.7600.16432)
Windows-Treiberpaket - Intel (iaStor) hdc (11/29/2011 11.0.0.1032) (Version: 11/29/2011 11.0.0.1032)
Windows-Treiberpaket - Lenovo 1.65.05.20 (02/29/2012 1.65.05.20) (Version: 02/29/2012 1.65.05.20)
Windows-Treiberpaket - Synaptics (SmbDrvAMDASF) System (06/21/2012 16.1.4.17) (Version: 06/21/2012 16.1.4.17)
Windows-Treiberpaket - Synaptics (SynTP) Mouse (06/21/2012 16.1.4.17) (Version: 06/21/2012 16.1.4.17)
WinRAR 4.00 (64-bit) (Version: 4.00.0)
WinZip 17.5 (Version: 17.5.10480)
==================== Restore Points =========================
08-10-2013 11:13:35 Removed Lenovo System Update.
08-10-2013 11:15:15 Installed Lenovo System Update.
08-10-2013 11:46:42 Windows Update
08-10-2013 16:22:44 Entfernt Realtek Ethernet Controller All-In-One Windows Driver
09-10-2013 11:57:25 Gerätetreiber-Paketinstallation: Elaborate Bytes AG Speichercontroller
==================== Hosts content: ==========================
2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____N C:\Windows\system32\Drivers\etc\hosts
==================== Scheduled Tasks (whitelisted) =============
Task: {1B7CE128-C7D7-47B6-A9DD-82D704594147} - System32\Tasks\TVT\TVSUUpdateTask => C:\Program Files (x86)\Lenovo\System Update\tvsuShim.exe [2013-06-26] ()
Task: {207289EC-B15E-4027-97A2-D72DF9A25DE8} - System32\Tasks\Lenovo\Lenovo Customer Feedback Program => C:\Program Files\Lenovo\Customer Feedback Program\Lenovo.TVT.CustomerFeedback.Agent.exe [2013-05-17] (Lenovo)
Task: {23ED1F36-F00E-43DE-A4D7-60A208FEEAC8} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-02-22] (Google Inc.)
Task: {3B28615C-1847-4831-B21C-E9779E76AC38} - System32\Tasks\Microsoft\Windows\TabletPC\InputPersonalization => C:\Program Files\Common Files\Microsoft Shared\Ink\InputPersonalization.exe [2009-07-14] (Microsoft Corporation)
Task: {4458B5AC-50E3-498B-8905-98A1F2D9E1E9} - System32\Tasks\TVT\ChangePWD => %RR%\rrcmd.exe
Task: {46B8484F-8EEE-4BE3-889B-60DA0059B46A} - System32\Tasks\Lenovo\LSC\LSCHardwareScan => C:\Program Files\Lenovo\Lenovo Solution Center\LSC.exe [2013-09-25] ()
Task: {47468136-14F0-4DD2-AEA4-5204E15FE118} - System32\Tasks\Microsoft\Windows\PLA\LSC Memory => C:\Windows\system32\pla.dll [2010-11-21] (Microsoft Corporation)
Task: {4F3AA27C-AEDC-48D2-9650-450090838AC6} - System32\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe [2011-11-25] (Intel Corporation)
Task: {5292B700-F3D8-4B17-BC1C-D08E382EA46F} - System32\Tasks\Lenovo\Lenovo Solution Center Launcher => C:\Program Files\lenovo\lenovo solution center\App\LSCService.exe [2013-09-25] (Lenovo)
Task: {8002AB0A-EB8D-4E06-ACB6-2FF87C4B6007} - System32\Tasks\TVT\LaunchRnR => %RR%\rrcmd.exe
Task: {86767A6F-96A6-435A-85C8-E394666D6C93} - System32\Tasks\TVT\UpdateRnR => %TVTCOMMON%\Scheduler\tvtsetsched.exe
Task: {8E8290ED-0F5A-46F7-9A4F-4E6B19EEAD7B} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-02-22] (Google Inc.)
Task: {A9CCB400-0F87-4670-B6FC-463B765F21BB} - System32\Tasks\Lenovo\Message Center Plus Launcher => C:\Program Files (x86)\Lenovo\message center plus\mcplaunch.exe [2012-05-15] (Lenovo)
Task: {AC7CE9EC-DC79-4549-8A79-5A6D5EFBB839} - System32\Tasks\Lenovo\SimpleTap\Start SimpleTap for User-THINK.User => C:\Program Files\Lenovo\SimpleTap\SimpleTap.exe [2012-05-15] (Lenovo)
Task: {E219A671-0732-4BAC-BFE3-498F169614A7} - System32\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe [2011-11-25] (Intel Corporation)
Task: {F7951B2A-DE66-49ED-8C8D-22A302910811} - System32\Tasks\CreateChoiceProcessTask => C:\Windows\System32\browserchoice.exe [2010-02-23] (Microsoft Corporation)
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon.job => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe
Task: C:\Windows\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d.job => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe
==================== Loaded Modules (whitelisted) =============
2013-02-22 01:17 - 2013-04-23 06:54 - 00104960 ____N () C:\Program Files (x86)\ThinkPad\Utilities\GR\PWMRT64V.DLL
2013-09-03 14:16 - 2012-04-01 00:06 - 02689536 _____ () C:\Program Files\File Shredder\fsshell.dll
2013-06-07 15:02 - 2011-03-02 12:40 - 00164864 _____ () C:\Program Files\WinRAR\rarext.dll
2013-02-22 01:13 - 2012-03-20 00:09 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll
2012-06-07 01:03 - 2012-06-07 01:03 - 01163624 ____N () C:\Program Files\Lenovo Fingerprint Reader\DataManager.dll
2012-06-07 01:04 - 2012-06-07 01:04 - 00087912 ____N () C:\Program Files\Lenovo Fingerprint Reader\ssutil.dll
2013-02-22 01:20 - 2012-03-12 12:07 - 00030512 ____N () C:\Program Files (x86)\Lenovo\RapidBoot HDD Accelerator\FBServiceps.dll
2013-06-07 09:00 - 2011-08-02 20:58 - 02201088 ____N () C:\Program Files\Lenovo\Communications Utility\cxcore210.dll
2013-06-07 09:00 - 2011-08-02 20:58 - 02085888 ____N () C:\Program Files\Lenovo\Communications Utility\cv210.dll
2013-03-18 17:26 - 2013-03-18 17:26 - 00092456 _____ () C:\Program Files (x86)\Lenovo\Access Connections\AcWrpc.dll
2013-06-06 23:36 - 2009-02-27 16:38 - 00139264 ____R () C:\Program Files (x86)\Brother\BrUtilities\BrLogAPI.dll
2013-02-22 01:22 - 2012-12-14 19:55 - 00322048 ____N () C:\Program Files (x86)\Intel\IntelAppStore\bin\log4cplus.dll
2013-02-22 01:22 - 2012-12-14 19:55 - 00400384 ____N () C:\Program Files (x86)\Intel\IntelAppStore\bin\sqlite3.dll
2013-02-22 01:22 - 2012-12-14 19:55 - 00016896 ____N () C:\Program Files (x86)\Intel\IntelAppStore\bin\featureController.dll
2013-02-22 01:22 - 2012-12-14 19:55 - 00062976 ____N () C:\Program Files (x86)\Intel\IntelAppStore\bin\osEvents.dll
2013-02-22 01:22 - 2012-12-14 19:55 - 00195584 ____N () C:\Program Files (x86)\Intel\IntelAppStore\bin\libgsoap.dll
2013-02-22 01:22 - 2012-12-14 19:55 - 00062464 ____N () C:\Program Files (x86)\Intel\IntelAppStore\bin\zlib1.dll
2013-02-22 01:22 - 2012-12-14 19:55 - 00020480 ____N () C:\Program Files (x86)\Intel\IntelAppStore\bin\eventsSender.dll
2013-02-22 01:22 - 2012-12-14 19:55 - 00446976 ____N () C:\Program Files (x86)\Intel\IntelAppStore\bin\deviceProfile.dll
2013-02-22 01:22 - 2012-12-14 19:55 - 00064512 ____N () C:\Program Files (x86)\Intel\IntelAppStore\bin\serviceManagerStarter.dll
2013-02-22 01:05 - 2012-02-07 11:39 - 01198872 ____N () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll
2013-09-19 11:07 - 2013-09-19 11:07 - 03279768 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
==================== Alternate Data Streams (whitelisted) =========
==================== Safe Mode (whitelisted) ===================
==================== Faulty Device Manager Devices =============
Name: Ethernet-Controller
Description: Ethernet-Controller
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
Name: Microsoft-Adapter für Miniports virtueller WiFis
Description: Microsoft-Adapter für Miniports virtueller WiFis
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: vwifimp
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
Name: Integrated Camera
Description: Integrated Camera
Class Guid: {6bdd1fc6-810f-11d0-bec7-08002be2092f}
Manufacturer: Vimicro
Service: vm331avs
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
Name: Camera Plus (VGA Resolution Maximum)
Description: Camera Plus (VGA Resolution Maximum)
Class Guid: {6bdd1fc6-810f-11d0-bec7-08002be2092f}
Manufacturer: Lenovo
Service: tvtvcamd
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
==================== Event log errors: =========================
Application errors:
==================
Error: (10/10/2013 03:53:23 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (10/10/2013 03:36:09 PM) (Source: ESENT) (User: )
Description: taskhost (5052) Versuch, Datei "C:\Users\User\AppData\Local\Microsoft\Windows\WebCache\WebCacheV01.dat" für den Lesezugriff zu öffnen, ist mit Systemfehler 32 (0x00000020): "Der Prozess kann nicht auf die Datei zugreifen, da sie von einem anderen Prozess verwendet wird. " fehlgeschlagen. Fehler -1032 (0xfffffbf8) beim Öffnen von Dateien.
Error: (10/10/2013 03:35:16 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (10/09/2013 03:29:41 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (10/09/2013 00:51:32 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: Explorer.EXE, Version: 6.1.7601.17567, Zeitstempel: 0x4d672ee4
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc000041d
Fehleroffset: 0x00000000098b0fd8
ID des fehlerhaften Prozesses: 0x7d0
Startzeit der fehlerhaften Anwendung: 0xExplorer.EXE0
Pfad der fehlerhaften Anwendung: Explorer.EXE1
Pfad des fehlerhaften Moduls: Explorer.EXE2
Berichtskennung: Explorer.EXE3
Error: (10/09/2013 00:51:22 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: Explorer.EXE, Version: 6.1.7601.17567, Zeitstempel: 0x4d672ee4
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00000000098b0fd8
ID des fehlerhaften Prozesses: 0x7d0
Startzeit der fehlerhaften Anwendung: 0xExplorer.EXE0
Pfad der fehlerhaften Anwendung: Explorer.EXE1
Pfad des fehlerhaften Moduls: Explorer.EXE2
Berichtskennung: Explorer.EXE3
Error: (10/09/2013 09:19:12 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (10/09/2013 08:45:46 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (10/09/2013 00:09:57 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (10/08/2013 10:21:04 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
System errors:
=============
Error: (10/10/2013 03:51:48 PM) (Source: Microsoft Antimalware) (User: )
Description: Beim Aktualisieren der Signaturen wurde von %NT-AUTORITÄT60 ein Fehler festgestellt.
Neue Signaturversion:
Vorherige Signaturversion: 1.159.1804.0
Aktualisierungsquelle: %NT-AUTORITÄT59
Aktualisierungsphase: 4.3.0215.00
Quellpfad: 4.3.0215.01
Signaturtyp: %NT-AUTORITÄT602
Aktualisierungstyp: %NT-AUTORITÄT604
Benutzer: NT-AUTORITÄT\SYSTEM
Aktuelle Modulversion: %NT-AUTORITÄT605
Vorherige Modulversion: %NT-AUTORITÄT606
Fehlercode: %NT-AUTORITÄT607
Fehlerbeschreibung: %NT-AUTORITÄT608
Error: (10/10/2013 03:37:17 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Intelligenter Hintergrundübertragungsdienst" wurde mit folgendem dienstspezifischem Fehler beendet: %%-2147024864.
Error: (10/10/2013 03:37:17 PM) (Source: Microsoft-Windows-Bits-Client) (User: NT-AUTORITÄT)
Description: Fehler beim Starten des BITS-Dienstes. Fehler: 2147942432.
Error: (10/10/2013 03:36:15 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Windows Search" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1053
Error: (10/10/2013 03:36:15 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Windows Search erreicht.
Error: (10/09/2013 03:30:40 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Windows Search" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1053
Error: (10/09/2013 03:30:40 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Windows Search erreicht.
Error: (10/09/2013 08:47:31 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Intelligenter Hintergrundübertragungsdienst" wurde mit folgendem dienstspezifischem Fehler beendet: %%-2147024864.
Error: (10/09/2013 08:47:30 AM) (Source: Microsoft-Windows-Bits-Client) (User: NT-AUTORITÄT)
Description: Fehler beim Starten des BITS-Dienstes. Fehler: 2147942432.
Error: (10/09/2013 08:46:41 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Windows Search" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1053
Microsoft Office Sessions:
=========================
Error: (10/10/2013 03:53:23 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (10/10/2013 03:36:09 PM) (Source: ESENT)(User: )
Description: taskhost5052C:\Users\User\AppData\Local\Microsoft\Windows\WebCache\WebCacheV01.dat-1032 (0xfffffbf8)32 (0x00000020)Der Prozess kann nicht auf die Datei zugreifen, da sie von einem anderen Prozess verwendet wird.
Error: (10/10/2013 03:35:16 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (10/09/2013 03:29:41 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (10/09/2013 00:51:32 PM) (Source: Application Error)(User: )
Description: Explorer.EXE6.1.7601.175674d672ee4unknown0.0.0.000000000c000041d00000000098b0fd87d001cec4bfc9f1f0b3C:\Windows\Explorer.EXEunknownc1a3336d-30d0-11e3-96d3-2016d8d8d21e
Error: (10/09/2013 00:51:22 PM) (Source: Application Error)(User: )
Description: Explorer.EXE6.1.7601.175674d672ee4unknown0.0.0.000000000c000000500000000098b0fd87d001cec4bfc9f1f0b3C:\Windows\Explorer.EXEunknownbbc9f1e1-30d0-11e3-96d3-2016d8d8d21e
Error: (10/09/2013 09:19:12 AM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (10/09/2013 08:45:46 AM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (10/09/2013 00:09:57 AM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (10/08/2013 10:21:04 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
CodeIntegrity Errors:
===================================
Date: 2013-06-10 18:13:56.590
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\IntcDAud.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2013-06-10 18:13:56.512
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\IntcDAud.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2013-06-09 15:09:13.866
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\IntcDAud.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2013-06-09 15:09:13.788
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\IntcDAud.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2013-06-09 09:43:18.412
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\IntcDAud.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2013-06-09 09:43:18.334
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\IntcDAud.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2013-06-08 21:27:12.167
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\IntcDAud.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2013-06-08 21:27:12.089
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\IntcDAud.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2013-06-08 17:54:28.989
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\IntcDAud.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2013-06-08 17:54:28.926
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\IntcDAud.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
==================== Memory info ===========================
Percentage of memory in use: 52%
Total physical RAM: 3816.23 MB
Available physical RAM: 1803.56 MB
Total Pagefile: 7630.65 MB
Available Pagefile: 5536.09 MB
Total Virtual: 8192 MB
Available Virtual: 8191.83 MB
==================== Drives ================================
Drive c: (Windows7_OS) (Fixed) (Total:282.95 GB) (Free:156.29 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive q: (Lenovo_Recovery) (Fixed) (Total:13.67 GB) (Free:3.1 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (Size: 298 GB) (Disk ID: 92F58942)
Partition 1: (Active) - (Size=1 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=283 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=14 GB) - (Type=07 NTFS)
==================== End Of Log ============================ |