Ohtarwen | 28.09.2013 09:19 | Vielen Dank für deine Hilfe!
Nachdem FRST zu laufen begonnen hat, kam der Sperrbildschirm. Beenden des Prozesses X8usw (siehe oben) brachte nichts. Daher habe ich eine Systemwiederherstellung gemacht. Ich hoffe, es geht jetzt.
Hier frst.txt
FRST Logfile: Code:
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 27-09-2013 02
Ran by Huebner (administrator) on ZA-HUEBNER on 28-09-2013 09:34:17
Running from C:\Users\Huebner.STADTGEMEINDE\Desktop
Windows 7 Professional Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(devolo AG) C:\Program Files (x86)\devolo\dlan\devolonetsvc.exe
(SEIKO EPSON CORPORATION) C:\ProgramData\EPSON\EPW!3 SSRP\E_S40STB.EXE
(SEIKO EPSON CORPORATION) C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RPB.EXE
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(BUFFALO INC.) C:\Program Files (x86)\BUFFALO\NASNAVI\nassvc.exe
(Nitro PDF Software) C:\Program Files\Common Files\Nitro\Pro\8.0\NitroPDFDriverService8x64.exe
(Nalpeiron Ltd.) C:\windows\SysWOW64\NLSSRV32.EXE
(Oki Data Corporation) C:\Program Files\Okidata\Common\Extend3\portmgrsrv.exe
(Protexis Inc.) C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe
(TOSHIBA Corporation) C:\windows\system32\ThpSrv.exe
(TOSHIBA Corporation) C:\windows\system32\TODDSrv.exe
(TOSHIBA Corporation) C:\Program Files\Toshiba\Power Saver\TosCoSrv.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TECO\TecoService.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Vodafone) C:\Program Files (x86)\Vodafone\Vodafone Mobile Broadband\Bin\VmbService.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(TOSHIBA CORPORATION) C:\Program Files (x86)\TOSHIBA\ConfigFree\NDSTray.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(TOSHIBA Corporation) C:\Program Files\Toshiba\Power Saver\TPwrMain.exe
(Intel Corporation) C:\windows\system32\igfxsrvc.exe
(TOSHIBA Corporation) C:\Program Files\Toshiba\SmoothView\SmoothView.exe
(TOSHIBA Corporation) C:\Program Files\Toshiba\FlashCards\TCrdMain.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(TOSHIBA Corporation) C:\Program Files\Toshiba\TECO\Teco.exe
(TOSHIBA Corporation) C:\Windows\System32\ThpSrv.exe
(TOSHIBA Corporation) C:\Program Files\Toshiba\ReelTime\TosReelTimeMonitor.exe
(Toshiba Europe GmbH) C:\Program Files (x86)\Toshiba TEMPRO\TemproTray.exe
(Microsoft Corporation) C:\Program Files\Zune\ZuneLauncher.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(TOSHIBA Corporation) C:\Program Files (x86)\TOSHIBA\TNROTATE\TNROTATE.exe
() C:\Program Files (x86)\Corel\Corel Paint Shop Pro Photo X2\CorelIOMonitor.exe
(Vodafone) C:\Program Files (x86)\Vodafone\Vodafone Mobile Broadband\Bin\MobileBroadband.exe
(Intel Corporation) C:\windows\system32\igfxext.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\ControlCenter4\BrCtrlCntr.exe
() C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\ControlCenter4\BrCcUxSys.exe
(TOSHIBA CORPORATION) C:\Program Files (x86)\TOSHIBA\ConfigFree\CFSwMgr.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(TOSHIBA CORPORATION) C:\Program Files (x86)\TOSHIBA\ConfigFree\CFIWmxSvcs64.exe
(TOSHIBA CORPORATION) C:\Program Files (x86)\TOSHIBA\ConfigFree\CFSvcs.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSmartSrv.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TPHM\TPCHSrv.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSENotify.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TPHM\TPCHWMsg.exe
(Microsoft Corporation) c:\Program Files\Microsoft Security Client\NisSrv.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbam.exe
(Microsoft Corporation) C:\windows\regedit.exe
(Microsoft Corporation) c:\Program Files\Microsoft Security Client\MpCmdRun.exe
(Microsoft Corporation) C:\Users\Huebner.STADTGEMEINDE\AppData\Local\NDU68xWMvH8\XvX8X73B.exe
(Microsoft Corporation) C:\windows\SysWOW64\svchost.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [] - [x]
HKLM\...\Run: [HotKeysCmds] - C:\windows\system32\hkcmd.exe [ ] ()
HKLM\...\Run: [TPwrMain] - C:\Program Files\TOSHIBA\Power Saver\TPwrMain.EXE [505696 2009-11-05] (TOSHIBA Corporation)
HKLM\...\Run: [HSON] - C:\Program Files\TOSHIBA\TBS\HSON.exe [52600 2009-03-09] (TOSHIBA Corporation)
HKLM\...\Run: [SmoothView] - C:\Program Files\Toshiba\SmoothView\SmoothView.exe [570680 2009-08-13] (TOSHIBA Corporation)
HKLM\...\Run: [00TCrdMain] - C:\Program Files\TOSHIBA\FlashCards\TCrdMain.exe [913720 2010-03-25] (TOSHIBA Corporation)
HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [8305664 2009-10-30] (Realtek Semiconductor)
HKLM\...\Run: [Teco] - C:\Program Files\TOSHIBA\TECO\Teco.exe [1483776 2010-02-25] (TOSHIBA Corporation)
HKLM\...\Run: [TosSENotify] - C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosWaitSrv.exe [709976 2009-11-05] (TOSHIBA Corporation)
HKLM\...\Run: [ThpSrv] - C:\windows\system32\thpsrv /logon
HKLM\...\Run: [TosWaitSrv] - C:\Program Files\TOSHIBA\TPHM\TosWaitSrv.exe [705368 2010-02-05] (TOSHIBA Corporation)
HKLM\...\Run: [TosReelTimeMonitor] - C:\Program Files\TOSHIBA\ReelTime\TosReelTimeMonitor.exe [35672 2010-03-03] (TOSHIBA Corporation)
HKLM\...\Run: [TosVolRegulator] - C:\Program Files\TOSHIBA\TosVolRegulator\TosVolRegulator.exe [24376 2009-11-11] (TOSHIBA Corporation)
HKLM\...\Run: [Toshiba TEMPRO] - C:\Program Files (x86)\Toshiba TEMPRO\TemproTray.exe [1050072 2010-05-11] (Toshiba Europe GmbH)
HKLM\...\Run: [MSC] - c:\Program Files\Microsoft Security Client\msseces.exe [1356240 2013-06-20] (Microsoft Corporation)
HKLM-x32\...\RunOnce: [Malwarebytes Anti-Malware] - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent [532040 2013-04-04] (Malwarebytes Corporation)
Winlogon\Notify\igfxcui: C:\windows\system32\igfxdev.dll (Intel Corporation)
HKCU\...\Run: [EPSON B1100 Series] - C:\windows\system32\spool\DRIVERS\x64\3\E_IATIFEE.EXE /FU "C:\windows\TEMP\E_S94A2.tmp" /EF "HKCU"
HKCU\...\Run: [XvX8X73B.exe] - C:\Users\Huebner.STADTGEMEINDE\AppData\Local\NDU68xWMvH8\XvX8X73B.exe [90448 2013-09-27] (Microsoft Corporation)
HKCU\...\Winlogon: [Shell] cmd.exe [345088 2010-11-20] (Microsoft Corporation) <==== ATTENTION
HKCU\...\Command Processor: "C:\Users\Huebner.STADTGEMEINDE\AppData\Local\NDU68xWMvH8\XvX8X73B.exe" <======= ATTENTION
MountPoints2: E - E:\AutoRun.exe
MountPoints2: F - F:\AutoRun.exe
MountPoints2: {051ecc45-248b-11e1-aa05-0023183b6791} - E:\AutoRun.exe
MountPoints2: {13c24403-15af-11e1-ae4a-0023183b6791} - E:\AutoRun.exe
MountPoints2: {13c24406-15af-11e1-ae4a-0023183b6791} - E:\AutoRun.exe
MountPoints2: {3ffbe561-5704-11e1-911f-0023183b6791} - E:\AutoRun.exe
MountPoints2: {41de7be3-a70d-11e0-a48d-0023183b6791} - E:\AutoRun.exe
MountPoints2: {4919b63d-6a4b-11e0-9c8f-0023183b6791} - E:\AutoRun.exe
MountPoints2: {5161c698-560c-11e1-8d94-0023183b6791} - E:\AutoRun.exe
MountPoints2: {671d1ca2-c278-11e0-a916-0023183b6791} - E:\AutoRun.exe
MountPoints2: {671d1ca7-c278-11e0-a916-0023183b6791} - E:\AutoRun.exe
MountPoints2: {79ec6722-90f8-11e0-b6d4-0023183b6791} - E:\AutoRun.exe
MountPoints2: {79ec6725-90f8-11e0-b6d4-0023183b6791} - E:\AutoRun.exe
MountPoints2: {7d36bda3-ac77-11e0-b614-0023183b6791} - E:\AutoRun.exe
MountPoints2: {8b50b4cd-9c91-11e0-9cbe-806e6f6e6963} - E:\AutoRun.exe
MountPoints2: {8db90df8-6a69-11e0-bab2-0023183b6791} - E:\AutoRun.exe
MountPoints2: {9dd465e7-2007-11e1-a8db-0023183b6791} - E:\AutoRun.exe
MountPoints2: {9dd465e9-2007-11e1-a8db-0023183b6791} - E:\AutoRun.exe
MountPoints2: {a3ef63a2-86cc-11e0-ad35-0023183b6791} - E:\AutoRun.exe
MountPoints2: {a3ef63a4-86cc-11e0-ad35-0023183b6791} - E:\AutoRun.exe
MountPoints2: {ad155827-74b3-11e0-ba94-0023183b6791} - E:\AutoRun.exe
MountPoints2: {ad15582a-74b3-11e0-ba94-0023183b6791} - E:\AutoRun.exe
MountPoints2: {ba3de2a5-77fb-11e1-ae55-0023183b6791} - E:\AutoRun.exe
MountPoints2: {c79bc7e5-6ff6-11e0-980a-0023183b6791} - E:\AutoRun.exe
MountPoints2: {c79bc7e7-6ff6-11e0-980a-0023183b6791} - E:\AutoRun.exe
MountPoints2: {f95de9ac-a211-11e0-aa57-0023183b6791} - E:\AutoRun.exe
HKLM-x32\...\Run: [TNRotate] - C:\Program Files (x86)\TOSHIBA\TNRotate\TNRotate.exe [607616 2010-02-22] (TOSHIBA Corporation)
HKLM-x32\...\Run: [TWebCamera] - C:\Program Files (x86)\TOSHIBA\TOSHIBA Web Camera Application\TWebCamera.exe [2454840 2009-12-09] (TOSHIBA CORPORATION.)
HKLM-x32\...\Run: [Corel Photo Downloader] - C:\Program Files (x86)\Common Files\Corel\Corel PhotoDownloader\Corel Photo Downloader.exe [532808 2008-08-08] (Corel, Inc.)
HKLM-x32\...\Run: [Corel File Shell Monitor] - C:\Program Files (x86)\Corel\Corel Paint Shop Pro Photo X2\CorelIOMonitor.exe [16712 2008-08-08] ()
HKLM-x32\...\Run: [] - [x]
HKLM-x32\...\Run: [HPUsageTracking] - C:\Program Files (x86)\HP\HP UT\bin\hppusg.exe [30264 2009-10-06] (Hewlett-Packard Company)
HKLM-x32\...\Run: [MobileBroadband] - C:\Program Files (x86)\Vodafone\Vodafone Mobile Broadband\Bin\MobileBroadband.exe [408576 2011-04-19] (Vodafone)
HKLM-x32\...\Run: [BCSSync] - C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [89184 2012-11-05] (Microsoft Corporation)
HKLM-x32\...\Run: [DivXMediaServer] - C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe [450560 2013-08-21] (DivX, LLC)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-05-11] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [ControlCenter4] - C:\Program Files (x86)\ControlCenter4\BrCcBoot.exe [143360 2012-09-06] (Brother Industries, Ltd.)
HKLM-x32\...\Run: [BrStsMon00] - C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe [3076096 2012-06-06] (Brother Industries, Ltd.)
HKLM-x32\...\Run: [DivXUpdate] - C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [1861968 2013-08-29] ()
HKU\Administrator\...\Run: [TOSHIBA Online Product Information] - C:\Program Files (x86)\TOSHIBA\Toshiba Online Product Information\topi.exe [6203296 2009-08-12] (TOSHIBA)
HKU\Default\...\Run: [TOSHIBA Online Product Information] - C:\Program Files (x86)\TOSHIBA\Toshiba Online Product Information\topi.exe [6203296 2009-08-12] (TOSHIBA)
HKU\Default User\...\Run: [TOSHIBA Online Product Information] - C:\Program Files (x86)\TOSHIBA\Toshiba Online Product Information\topi.exe [6203296 2009-08-12] (TOSHIBA)
Startup: C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\TRDCReminder.lnk
ShortcutTarget: TRDCReminder.lnk -> C:\Program Files (x86)\TOSHIBA\TRDCReminder\TRDCReminder.exe (TOSHIBA Europe)
Startup: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\TRDCReminder.lnk
ShortcutTarget: TRDCReminder.lnk -> C:\Program Files (x86)\TOSHIBA\TRDCReminder\TRDCReminder.exe (TOSHIBA Europe)
Startup: C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\TRDCReminder.lnk
ShortcutTarget: TRDCReminder.lnk -> C:\Program Files (x86)\TOSHIBA\TRDCReminder\TRDCReminder.exe (TOSHIBA Europe)
==================== Internet (Whitelisted) ====================
ProxyServer: 20.20.20.9:8080
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKCU - DefaultScope {20640D01-6C2B-4098-AAC8-BB36A96B844D} URL = https://duckduckgo.com/?q={searchTerms}
SearchScopes: HKCU - {1D514625-819F-4B2B-A8F2-95279A4E2990} URL =
SearchScopes: HKCU - {20640D01-6C2B-4098-AAC8-BB36A96B844D} URL = https://duckduckgo.com/?q={searchTerms}
SearchScopes: HKCU - {6A0FBD7D-314D-4BB4-96EF-300AD3359631} URL = hxxp://www.benefind.de/web.php?q={searchTerms}
SearchScopes: HKCU - {86613AFE-F9AE-4A42-93E7-34954A120C99} URL = https://startpage.com/do/search?query={searchTerms}&cat=web&pl=ie&language=deutsch
SearchScopes: HKCU - {9FEDAB7D-F6B4-4B91-8AC9-ED60CC96AC0D} URL =
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO: DVDVideoSoft WebPageAdjuster Class - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns64.dll (DVDVideoSoft Ltd.)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
BHO-x32: DVDVideoSoft WebPageAdjuster Class - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll (DVDVideoSoft Ltd.)
Toolbar: HKLM-x32 - SimilarWeb - {74198672-5F7D-4FE9-A611-4AC1D5A66A15} - C:\Program Files (x86)\SimilarWeb\SimilarWeb.dll (SimilarGroup)
DPF: HKLM {02BCC737-B171-4746-94C9-0D8A0B2C0089} hxxp://office.microsoft.com/_layouts/ClientBin/ieawsdc64.cab
DPF: HKLM {67DABFBF-D0AB-41FA-9C46-CC0F21721616} hxxp://download.divx.com/player/DivXBrowserPlugin.cab
DPF: HKLM-x32 {02BCC737-B171-4746-94C9-0D8A0B2C0089} hxxp://office.microsoft.com/sites/production/ieawsdc32.cab
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
DPF: HKLM-x32 {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
Handler-x32: http\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: http\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: https\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: https\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll (Microsoft Corporation)
Handler-x32: msdaipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: msdaipp\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll (Microsoft Corporation)
Filter: text/xml - {807553E5-5146-11D5-A672-00B0D022E945} - No File
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
FireFox:
========
FF ProfilePath: C:\Users\Huebner.STADTGEMEINDE\AppData\Roaming\Mozilla\Firefox\Profiles\pilvdcyr.default
FF user.js: detected! => C:\Users\Huebner.STADTGEMEINDE\AppData\Roaming\Mozilla\Firefox\Profiles\pilvdcyr.default\user.js
FF NewTab: about:blank
FF SelectedSearchEngine: Web Search
FF Homepage: about:home
FF NetworkProxy: "ftp", "20.20.20.9"
FF NetworkProxy: "ftp_port", 8080
FF NetworkProxy: "http", "20.20.20.9"
FF NetworkProxy: "http_port", 8080
FF NetworkProxy: "no_proxies_on", "hollabrunn.noe.gv.at,hollabrunn.gv.at,localhost,127.0.0.1"
FF NetworkProxy: "share_proxy_settings", true
FF NetworkProxy: "socks", "20.20.20.9"
FF NetworkProxy: "socks_port", 8080
FF NetworkProxy: "ssl", "20.20.20.9"
FF NetworkProxy: "ssl_port", 8080
FF NetworkProxy: "type", 0
FF Plugin: @adobe.com/FlashPlayer - C:\windows\system32\Macromed\Flash\NPSWF64_11_8_800_168.dll ()
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin: @java.com/DTPlugin,version=10.11.2 - C:\windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.11.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.0.2 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.0.6 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_168.dll ()
FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin-x32: @divx.com/DivX Web Player Plug-In,version=1.0.0 - C:\Program Files (x86)\DivX\DivX Web Player\npdivx32.dll (DivX, LLC)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf - C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf - C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=1.6.0_39 - C:\windows\SysWOW64\npdeployJava1.dll (Sun Microsystems, Inc.)
FF Plugin-x32: @java.com/JavaPlugin - C:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\4.1.10329.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~4\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~4\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=14.0.8081.0709 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @nitropdf.com/NitroPDF - C:\Program Files (x86)\Nitro\Pro 8\npnitromozilla.dll (Nitro PDF)
FF Plugin-x32: @videolan.org/vlc,version=2.0.7 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: No Name - C:\Users\Huebner.STADTGEMEINDE\AppData\Roaming\Mozilla\Firefox\Profiles\pilvdcyr.default\Extensions\staged
FF Extension: iMacros for Firefox - C:\Users\Huebner.STADTGEMEINDE\AppData\Roaming\Mozilla\Firefox\Profiles\pilvdcyr.default\Extensions\{81BF1D23-5F17-408D-AC6B-BD6DF7CAF670}
FF Extension: No Name - C:\Users\Huebner.STADTGEMEINDE\AppData\Roaming\Mozilla\Firefox\Profiles\pilvdcyr.default\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi
FF Extension: No Name - C:\Users\Huebner.STADTGEMEINDE\AppData\Roaming\Mozilla\Firefox\Profiles\pilvdcyr.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA}
FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA}
FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0039-ABCDEFFEDCBA}
FF HKLM\...\Firefox\Extensions: [{C1CA7765-44E4-452e-9D00-A04F3D434281}] -
FF HKLM-x32\...\Firefox\Extensions: [{C1CA7765-44E4-452e-9D00-A04F3D434281}] - C:\Program Files\TOSHIBA\TFPU\FirefoxAddin
==================== Services (Whitelisted) =================
R2 DevoloNetworkService; C:\Program Files (x86)\devolo\dlan\devolonetsvc.exe [3526136 2013-08-27] (devolo AG)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [23808 2013-06-20] (Microsoft Corporation)
R2 NasPmService; C:\Program Files (x86)\BUFFALO\NASNAVI\nassvc.exe [251256 2010-10-28] (BUFFALO INC.)
R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [366600 2013-06-20] (Microsoft Corporation)
R2 NitroDriverReadSpool8; C:\Program Files\Common Files\Nitro\Pro\8.0\NitroPDFDriverService8x64.exe [230408 2013-06-17] (Nitro PDF Software)
R2 OpLclSrv; C:\Program Files\Okidata\Common\Extend3\portmgrsrv.exe [169984 2010-08-10] (Oki Data Corporation)
S3 rpcapd; C:\Program Files (x86)\WinPcap\rpcapd.exe [118520 2013-03-01] (Riverbed Technology, Inc.)
S3 TemproMonitoringService; C:\Program Files (x86)\Toshiba TEMPRO\TemproSvc.exe [124368 2010-05-11] (Toshiba Europe GmbH)
==================== Drivers (Whitelisted) ====================
R3 MBAMProtector; C:\windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
R3 MBAMProtector; C:\windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [247216 2013-06-18] (Microsoft Corporation)
R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [139616 2013-06-18] (Microsoft Corporation)
R2 NPF; C:\Windows\System32\drivers\npf.sys [36600 2013-03-01] (Riverbed Technology, Inc.)
R2 NPF_devolo; C:\Windows\sysWOW64\drivers\npf_devolo.sys [34048 2013-08-27] (CACE Technologies)
S3 ApfiltrService; system32\DRIVERS\Apfiltr.sys [x]
U5 ewusbnet; C:\Windows\System32\Drivers\ewusbnet.sys [243200 2009-10-21] (Huawei Technologies Co., Ltd.)
S3 massfilter; system32\drivers\massfilter.sys [x]
S3 SANDRA; \??\C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2013.SP1\WNt500x64\Sandra.sys [x]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-09-28 09:34 - 2013-09-28 09:34 - 00256512 _____ C:\Users\Huebner.STADTGEMEINDE\AppData\Roaming\R85L2AwV
2013-09-28 09:34 - 2013-09-28 09:34 - 00256512 _____ C:\ProgramData\1IojVvnInx
2013-09-28 09:34 - 2013-09-28 09:34 - 00000000 ___DC C:\FRST
2013-09-28 09:33 - 2013-09-28 09:33 - 01953880 _____ (Farbar) C:\Users\Huebner.STADTGEMEINDE\Desktop\FRST64.exe
2013-09-28 08:36 - 2013-09-28 08:36 - 00001080 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2013-09-27 11:40 - 2013-09-27 11:40 - 00256512 _____ C:\Users\Huebner.STADTGEMEINDE\AppData\Roaming\TzpWZpne
2013-09-27 11:40 - 2013-09-27 11:40 - 00256512 _____ C:\ProgramData\w1eiwzGD
2013-09-26 13:08 - 2013-08-27 11:49 - 00221184 _____ (CACE Technologies) C:\windows\SysWOW64\devolopcap.dll
2013-09-26 13:08 - 2013-08-27 11:49 - 00081920 _____ (CACE Technologies) C:\windows\SysWOW64\devolopacket.dll
2013-09-26 13:08 - 2013-08-27 11:49 - 00034048 _____ (CACE Technologies) C:\windows\SysWOW64\Drivers\npf_devolo.sys
2013-09-25 14:25 - 2011-07-22 13:16 - 00000044 _____ C:\windows\system32\opnetext.ver
2013-09-25 14:25 - 2011-04-22 09:56 - 00003838 _____ C:\windows\system32\opnedef.str
2013-09-25 14:25 - 2011-04-08 14:21 - 00120320 _____ (Oki Data Corporation) C:\windows\system32\opnetext.dll
2013-09-25 14:25 - 2007-02-05 00:15 - 00005832 _____ C:\windows\system32\license.txt
2013-09-25 14:25 - 2005-03-14 09:05 - 00010359 _____ C:\windows\SysWOW64\opnetext.hlp
2013-09-25 14:25 - 2005-03-14 09:05 - 00010359 _____ C:\windows\system32\OPNETEXT.HLP
2013-09-25 14:25 - 2005-03-09 14:11 - 00000141 _____ C:\windows\SysWOW64\opnetext.cnt
2013-09-25 14:25 - 2005-03-09 14:11 - 00000141 _____ C:\windows\system32\opnetext.cnt
2013-09-25 14:25 - 2002-06-27 00:00 - 00000000 _____ C:\windows\SysWOW64\opnetext.gid
2013-09-25 14:25 - 2002-06-27 00:00 - 00000000 _____ C:\windows\system32\OPNETEXT.GID
2013-09-25 07:56 - 2013-09-25 07:56 - 00000000 ____D C:\Users\Huebner.STADTGEMEINDE\Desktop\Vorzugsstimmen
2013-09-24 11:31 - 2013-09-26 10:33 - 00000000 ____D C:\Users\Huebner.STADTGEMEINDE\AppData\Roaming\Nitro PDF
2013-09-24 11:17 - 2013-09-24 11:36 - 00000000 ____D C:\Users\Huebner.STADTGEMEINDE\AppData\Roaming\Nitro
2013-09-24 11:17 - 2013-09-24 11:17 - 00000000 ____D C:\Users\Huebner.STADTGEMEINDE\AppData\Roaming\FileOpen
2013-09-24 11:17 - 2013-09-24 11:17 - 00000000 ____D C:\ProgramData\FileOpen
2013-09-24 11:16 - 2013-09-24 11:16 - 00000000 ____D C:\ProgramData\Nitro
2013-09-24 11:16 - 2013-09-24 11:16 - 00000000 ____D C:\Program Files\Common Files\Nitro
2013-09-24 11:16 - 2013-09-24 11:16 - 00000000 ____D C:\Program Files (x86)\Nitro
2013-09-24 11:16 - 2013-06-17 22:00 - 00029704 _____ (Nitro PDF Software) C:\windows\system32\nitrolocalmon2.dll
2013-09-24 11:16 - 2013-06-17 22:00 - 00017928 _____ (Nitro PDF Software) C:\windows\system32\nitrolocalui2.dll
2013-09-24 11:14 - 2013-09-24 11:14 - 00000000 ____D C:\Users\Huebner.STADTGEMEINDE\AppData\Roaming\Downloaded Installations
2013-09-23 15:23 - 2013-09-23 15:23 - 00000087 _____ C:\windows\NetwkCfg.txt
2013-09-18 11:47 - 2013-09-18 11:47 - 00003118 _____ C:\windows\System32\Tasks\Microsoft_Hardware_Launch_mousekeyboardcenter_exe
2013-09-18 11:47 - 2013-09-18 11:47 - 00003092 _____ C:\windows\System32\Tasks\Microsoft_Hardware_Launch_ipoint_exe
2013-09-18 11:47 - 2013-09-18 11:47 - 00003090 _____ C:\windows\System32\Tasks\Microsoft_Hardware_Launch_itype_exe
2013-09-18 11:47 - 2013-09-18 11:47 - 00000000 ____H C:\windows\system32\Drivers\Msft_Kernel_point64_01011.Wdf
2013-09-18 11:47 - 2013-09-18 11:47 - 00000000 ____H C:\windows\system32\Drivers\Msft_Kernel_NuidFltr_01011.Wdf
2013-09-18 11:43 - 2013-09-18 11:43 - 00000000 ____H C:\windows\system32\Drivers\Msft_Kernel_dc3d_01011.Wdf
2013-09-16 07:56 - 2013-02-17 01:40 - 00028672 _____ (Microsoft Corporation) C:\windows\system32\IEUDINIT.EXE
2013-09-16 07:52 - 2013-09-16 07:52 - 19246592 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll
2013-09-16 07:52 - 2013-09-16 07:52 - 15404544 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll
2013-09-16 07:52 - 2013-09-16 07:52 - 14332928 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll
2013-09-16 07:52 - 2013-09-16 07:52 - 13761024 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieframe.dll
2013-09-16 07:52 - 2013-09-16 07:52 - 03959296 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll
2013-09-16 07:52 - 2013-09-16 07:52 - 02876928 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9.dll
2013-09-16 07:52 - 2013-09-16 07:52 - 02706432 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.tlb
2013-09-16 07:52 - 2013-09-16 07:52 - 02706432 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb
2013-09-16 07:52 - 2013-09-16 07:52 - 02647040 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll
2013-09-16 07:52 - 2013-09-16 07:52 - 02241024 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll
2013-09-16 07:52 - 2013-09-16 07:52 - 02048000 _____ (Microsoft Corporation) C:\windows\SysWOW64\iertutil.dll
2013-09-16 07:52 - 2013-09-16 07:52 - 01767936 _____ (Microsoft Corporation) C:\windows\SysWOW64\wininet.dll
2013-09-16 07:52 - 2013-09-16 07:52 - 01509376 _____ (Microsoft Corporation) C:\windows\system32\inetcpl.cpl
2013-09-16 07:52 - 2013-09-16 07:52 - 01441280 _____ (Microsoft Corporation) C:\windows\SysWOW64\inetcpl.cpl
2013-09-16 07:52 - 2013-09-16 07:52 - 01400416 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieapfltr.dat
2013-09-16 07:52 - 2013-09-16 07:52 - 01400416 _____ (Microsoft Corporation) C:\windows\system32\ieapfltr.dat
2013-09-16 07:52 - 2013-09-16 07:52 - 01365504 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll
2013-09-16 07:52 - 2013-09-16 07:52 - 01141248 _____ (Microsoft Corporation) C:\windows\SysWOW64\urlmon.dll
2013-09-16 07:52 - 2013-09-16 07:52 - 01054720 _____ (Microsoft Corporation) C:\windows\system32\MsSpellCheckingFacility.exe
2013-09-16 07:52 - 2013-09-16 07:52 - 00905728 _____ (Microsoft Corporation) C:\windows\system32\mshtmlmedia.dll
2013-09-16 07:52 - 2013-09-16 07:52 - 00855552 _____ (Microsoft Corporation) C:\windows\system32\jscript.dll
2013-09-16 07:52 - 2013-09-16 07:52 - 00762368 _____ (Microsoft Corporation) C:\windows\system32\ieapfltr.dll
2013-09-16 07:52 - 2013-09-16 07:52 - 00719360 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtmlmedia.dll
2013-09-16 07:52 - 2013-09-16 07:52 - 00690688 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript.dll
2013-09-16 07:52 - 2013-09-16 07:52 - 00629248 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieapfltr.dll
2013-09-16 07:52 - 2013-09-16 07:52 - 00603136 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll
2013-09-16 07:52 - 2013-09-16 07:52 - 00599552 _____ (Microsoft Corporation) C:\windows\system32\vbscript.dll
2013-09-16 07:52 - 2013-09-16 07:52 - 00526336 _____ (Microsoft Corporation) C:\windows\system32\ieui.dll
2013-09-16 07:52 - 2013-09-16 07:52 - 00523264 _____ (Microsoft Corporation) C:\windows\SysWOW64\vbscript.dll
2013-09-16 07:52 - 2013-09-16 07:52 - 00493056 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeeds.dll
2013-09-16 07:52 - 2013-09-16 07:52 - 00452096 _____ (Microsoft Corporation) C:\windows\system32\dxtmsft.dll
2013-09-16 07:52 - 2013-09-16 07:52 - 00441856 _____ (Microsoft Corporation) C:\windows\system32\html.iec
2013-09-16 07:52 - 2013-09-16 07:52 - 00391168 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieui.dll
2013-09-16 07:52 - 2013-09-16 07:52 - 00361984 _____ (Microsoft Corporation) C:\windows\SysWOW64\html.iec
2013-09-16 07:52 - 2013-09-16 07:52 - 00357888 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxtmsft.dll
2013-09-16 07:52 - 2013-09-16 07:52 - 00281600 _____ (Microsoft Corporation) C:\windows\system32\dxtrans.dll
2013-09-16 07:52 - 2013-09-16 07:52 - 00270848 _____ (Microsoft Corporation) C:\windows\system32\iedkcs32.dll
2013-09-16 07:52 - 2013-09-16 07:52 - 00247296 _____ (Microsoft Corporation) C:\windows\system32\webcheck.dll
2013-09-16 07:52 - 2013-09-16 07:52 - 00242200 _____ (Microsoft Corporation) C:\windows\SysWOW64\iedkcs32.dll
2013-09-16 07:52 - 2013-09-16 07:52 - 00235008 _____ (Microsoft Corporation) C:\windows\system32\url.dll
2013-09-16 07:52 - 2013-09-16 07:52 - 00232960 _____ (Microsoft Corporation) C:\windows\SysWOW64\url.dll
2013-09-16 07:52 - 2013-09-16 07:52 - 00226816 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxtrans.dll
2013-09-16 07:52 - 2013-09-16 07:52 - 00226304 _____ (Microsoft Corporation) C:\windows\system32\elshyph.dll
2013-09-16 07:52 - 2013-09-16 07:52 - 00216064 _____ (Microsoft Corporation) C:\windows\system32\msls31.dll
2013-09-16 07:52 - 2013-09-16 07:52 - 00204800 _____ (Microsoft Corporation) C:\windows\SysWOW64\webcheck.dll
2013-09-16 07:52 - 2013-09-16 07:52 - 00197120 _____ (Microsoft Corporation) C:\windows\system32\msrating.dll
2013-09-16 07:52 - 2013-09-16 07:52 - 00185344 _____ (Microsoft Corporation) C:\windows\SysWOW64\elshyph.dll
2013-09-16 07:52 - 2013-09-16 07:52 - 00173568 _____ (Microsoft Corporation) C:\windows\system32\ieUnatt.exe
2013-09-16 07:52 - 2013-09-16 07:52 - 00167424 _____ (Microsoft Corporation) C:\windows\system32\iexpress.exe
2013-09-16 07:52 - 2013-09-16 07:52 - 00163840 _____ (Microsoft Corporation) C:\windows\SysWOW64\msrating.dll
2013-09-16 07:52 - 2013-09-16 07:52 - 00158720 _____ (Microsoft Corporation) C:\windows\SysWOW64\msls31.dll
2013-09-16 07:52 - 2013-09-16 07:52 - 00150528 _____ (Microsoft Corporation) C:\windows\SysWOW64\iexpress.exe
2013-09-16 07:52 - 2013-09-16 07:52 - 00149504 _____ (Microsoft Corporation) C:\windows\system32\occache.dll
2013-09-16 07:52 - 2013-09-16 07:52 - 00144896 _____ (Microsoft Corporation) C:\windows\system32\wextract.exe
2013-09-16 07:52 - 2013-09-16 07:52 - 00138752 _____ (Microsoft Corporation) C:\windows\SysWOW64\wextract.exe
2013-09-16 07:52 - 2013-09-16 07:52 - 00137216 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieUnatt.exe
2013-09-16 07:52 - 2013-09-16 07:52 - 00136704 _____ (Microsoft Corporation) C:\windows\system32\iesysprep.dll
2013-09-16 07:52 - 2013-09-16 07:52 - 00136192 _____ (Microsoft Corporation) C:\windows\system32\iepeers.dll
2013-09-16 07:52 - 2013-09-16 07:52 - 00135680 _____ (Microsoft Corporation) C:\windows\system32\IEAdvpack.dll
2013-09-16 07:52 - 2013-09-16 07:52 - 00125440 _____ (Microsoft Corporation) C:\windows\SysWOW64\occache.dll
2013-09-16 07:52 - 2013-09-16 07:52 - 00117248 _____ (Microsoft Corporation) C:\windows\SysWOW64\iepeers.dll
2013-09-16 07:52 - 2013-09-16 07:52 - 00110592 _____ (Microsoft Corporation) C:\windows\SysWOW64\IEAdvpack.dll
2013-09-16 07:52 - 2013-09-16 07:52 - 00109056 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesysprep.dll
2013-09-16 07:52 - 2013-09-16 07:52 - 00102912 _____ (Microsoft Corporation) C:\windows\system32\inseng.dll
2013-09-16 07:52 - 2013-09-16 07:52 - 00097280 _____ (Microsoft Corporation) C:\windows\system32\mshtmled.dll
2013-09-16 07:52 - 2013-09-16 07:52 - 00092160 _____ (Microsoft Corporation) C:\windows\system32\SetIEInstalledDate.exe
2013-09-16 07:52 - 2013-09-16 07:52 - 00089600 _____ (Microsoft Corporation) C:\windows\system32\RegisterIEPKEYs.exe
2013-09-16 07:52 - 2013-09-16 07:52 - 00082432 _____ (Microsoft Corporation) C:\windows\SysWOW64\inseng.dll
2013-09-16 07:52 - 2013-09-16 07:52 - 00081408 _____ (Microsoft Corporation) C:\windows\system32\icardie.dll
2013-09-16 07:52 - 2013-09-16 07:52 - 00079872 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtmled.dll
2013-09-16 07:52 - 2013-09-16 07:52 - 00077312 _____ (Microsoft Corporation) C:\windows\system32\tdc.ocx
2013-09-16 07:52 - 2013-09-16 07:52 - 00073728 _____ (Microsoft Corporation) C:\windows\SysWOW64\SetIEInstalledDate.exe
2013-09-16 07:52 - 2013-09-16 07:52 - 00071680 _____ (Microsoft Corporation) C:\windows\SysWOW64\RegisterIEPKEYs.exe
2013-09-16 07:52 - 2013-09-16 07:52 - 00069120 _____ (Microsoft Corporation) C:\windows\SysWOW64\icardie.dll
2013-09-16 07:52 - 2013-09-16 07:52 - 00067072 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll
2013-09-16 07:52 - 2013-09-16 07:52 - 00062976 _____ (Microsoft Corporation) C:\windows\system32\pngfilt.dll
2013-09-16 07:52 - 2013-09-16 07:52 - 00061952 _____ (Microsoft Corporation) C:\windows\SysWOW64\tdc.ocx
2013-09-16 07:52 - 2013-09-16 07:52 - 00061440 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesetup.dll
2013-09-16 07:52 - 2013-09-16 07:52 - 00057344 _____ (Microsoft Corporation) C:\windows\SysWOW64\pngfilt.dll
2013-09-16 07:52 - 2013-09-16 07:52 - 00053248 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll
2013-09-16 07:52 - 2013-09-16 07:52 - 00052224 _____ (Microsoft Corporation) C:\windows\system32\msfeedsbs.dll
2013-09-16 07:52 - 2013-09-16 07:52 - 00051712 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe
2013-09-16 07:52 - 2013-09-16 07:52 - 00051200 _____ (Microsoft Corporation) C:\windows\system32\imgutil.dll
2013-09-16 07:52 - 2013-09-16 07:52 - 00048640 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtmler.dll
2013-09-16 07:52 - 2013-09-16 07:52 - 00048640 _____ (Microsoft Corporation) C:\windows\system32\mshtmler.dll
2013-09-16 07:52 - 2013-09-16 07:52 - 00041984 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeedsbs.dll
2013-09-16 07:52 - 2013-09-16 07:52 - 00039936 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll
2013-09-16 07:52 - 2013-09-16 07:52 - 00039424 _____ (Microsoft Corporation) C:\windows\SysWOW64\jsproxy.dll
2013-09-16 07:52 - 2013-09-16 07:52 - 00038400 _____ (Microsoft Corporation) C:\windows\SysWOW64\imgutil.dll
2013-09-16 07:52 - 2013-09-16 07:52 - 00033280 _____ (Microsoft Corporation) C:\windows\SysWOW64\iernonce.dll
2013-09-16 07:52 - 2013-09-16 07:52 - 00027648 _____ (Microsoft Corporation) C:\windows\system32\licmgr10.dll
2013-09-16 07:52 - 2013-09-16 07:52 - 00023040 _____ (Microsoft Corporation) C:\windows\SysWOW64\licmgr10.dll
2013-09-16 07:52 - 2013-09-16 07:52 - 00013824 _____ (Microsoft Corporation) C:\windows\system32\mshta.exe
2013-09-16 07:52 - 2013-09-16 07:52 - 00012800 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshta.exe
2013-09-16 07:52 - 2013-09-16 07:52 - 00012800 _____ (Microsoft Corporation) C:\windows\system32\msfeedssync.exe
2013-09-16 07:52 - 2013-09-16 07:52 - 00011776 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeedssync.exe
2013-09-16 07:47 - 2013-09-16 07:56 - 00010999 _____ C:\windows\IE10_main.log
2013-09-11 15:51 - 2009-11-27 14:29 - 00013056 _____ C:\windows\SysWOW64\CNC1749D.TBL
2013-09-11 15:51 - 2009-11-27 14:29 - 00013056 _____ C:\windows\system32\CNC1749D.TBL
2013-09-11 13:58 - 2010-08-25 05:00 - 00361472 _____ (CANON INC.) C:\windows\system32\CNMLMAE.DLL
2013-09-10 13:32 - 2013-09-10 13:53 - 00000181 _____ C:\Users\Huebner.STADTGEMEINDE\AppData\Roaming\Opusbext.dat
2013-09-10 13:28 - 2011-07-04 19:42 - 00024064 _____ (Oki Data Corporation) C:\windows\system32\OPPFLM64.DLL
==================== One Month Modified Files and Folders =======
2013-09-28 09:34 - 2013-09-28 09:34 - 00256512 _____ C:\Users\Huebner.STADTGEMEINDE\AppData\Roaming\R85L2AwV
2013-09-28 09:34 - 2013-09-28 09:34 - 00256512 _____ C:\ProgramData\1IojVvnInx
2013-09-28 09:34 - 2013-09-28 09:34 - 00000000 ___DC C:\FRST
2013-09-28 09:33 - 2013-09-28 09:33 - 01953880 _____ (Farbar) C:\Users\Huebner.STADTGEMEINDE\Desktop\FRST64.exe
2013-09-28 09:33 - 2010-10-19 15:30 - 01061309 _____ C:\windows\WindowsUpdate.log
2013-09-28 09:26 - 2009-07-14 19:58 - 00705468 _____ C:\windows\system32\perfh007.dat
2013-09-28 09:26 - 2009-07-14 19:58 - 00151930 _____ C:\windows\system32\perfc007.dat
2013-09-28 09:26 - 2009-07-14 07:13 - 01635776 _____ C:\windows\system32\PerfStringBackup.INI
2013-09-28 09:24 - 2013-07-09 13:11 - 00011632 _____ C:\windows\setupact.log
2013-09-28 08:55 - 2009-07-14 06:45 - 00022208 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-09-28 08:55 - 2009-07-14 06:45 - 00022208 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-09-28 08:50 - 2009-07-14 05:20 - 00000000 ____D C:\windows\tracing
2013-09-28 08:45 - 2012-03-30 07:50 - 00000884 _____ C:\windows\Tasks\Adobe Flash Player Updater.job
2013-09-28 08:36 - 2013-09-28 08:36 - 00001080 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2013-09-28 08:36 - 2013-03-18 14:28 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-09-28 08:24 - 2011-11-23 09:34 - 00065536 _____ C:\windows\system32\Ikeext.etl
2013-09-28 08:24 - 2009-07-14 07:08 - 00000006 ____H C:\windows\Tasks\SA.DAT
2013-09-27 11:45 - 2009-07-14 06:45 - 00499184 _____ C:\windows\system32\FNTCACHE.DAT
2013-09-27 11:40 - 2013-09-27 11:40 - 00256512 _____ C:\Users\Huebner.STADTGEMEINDE\AppData\Roaming\TzpWZpne
2013-09-27 11:40 - 2013-09-27 11:40 - 00256512 _____ C:\ProgramData\w1eiwzGD
2013-09-27 10:40 - 2011-04-06 15:08 - 00000152 _____ C:\windows\system32\config\netlogon.ftl
2013-09-27 10:10 - 2011-04-08 09:38 - 00003958 _____ C:\windows\System32\Tasks\User_Feed_Synchronization-{2A3B3BEC-1FC4-4161-B63B-A0492BDDC68F}
2013-09-27 09:26 - 2009-07-14 05:20 - 00000000 ____D C:\windows\IME
2013-09-26 13:09 - 2013-08-21 08:12 - 00000000 ____D C:\Program Files (x86)\devolo
2013-09-26 10:33 - 2013-09-24 11:31 - 00000000 ____D C:\Users\Huebner.STADTGEMEINDE\AppData\Roaming\Nitro PDF
2013-09-25 14:25 - 2010-07-07 04:08 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2013-09-25 14:23 - 2013-07-25 10:47 - 00000000 ____D C:\Program Files\Okidata
2013-09-25 07:56 - 2013-09-25 07:56 - 00000000 ____D C:\Users\Huebner.STADTGEMEINDE\Desktop\Vorzugsstimmen
2013-09-24 14:45 - 2011-04-12 15:44 - 00000000 ____D C:\Users\Huebner.STADTGEMEINDE\Desktop\pastebin
2013-09-24 11:36 - 2013-09-24 11:17 - 00000000 ____D C:\Users\Huebner.STADTGEMEINDE\AppData\Roaming\Nitro
2013-09-24 11:17 - 2013-09-24 11:17 - 00000000 ____D C:\Users\Huebner.STADTGEMEINDE\AppData\Roaming\FileOpen
2013-09-24 11:17 - 2013-09-24 11:17 - 00000000 ____D C:\ProgramData\FileOpen
2013-09-24 11:16 - 2013-09-24 11:16 - 00000000 ____D C:\ProgramData\Nitro
2013-09-24 11:16 - 2013-09-24 11:16 - 00000000 ____D C:\Program Files\Common Files\Nitro
2013-09-24 11:16 - 2013-09-24 11:16 - 00000000 ____D C:\Program Files (x86)\Nitro
2013-09-24 11:14 - 2013-09-24 11:14 - 00000000 ____D C:\Users\Huebner.STADTGEMEINDE\AppData\Roaming\Downloaded Installations
2013-09-24 10:32 - 2009-07-14 05:20 - 00000000 ____D C:\windows\system32\NDF
2013-09-23 15:23 - 2013-09-23 15:23 - 00000087 _____ C:\windows\NetwkCfg.txt
2013-09-20 11:56 - 2013-03-03 11:41 - 00000336 _____ C:\windows\BRCALIB.INI
2013-09-20 11:45 - 2012-03-30 07:50 - 00692616 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerApp.exe
2013-09-20 11:45 - 2012-03-30 07:50 - 00003822 _____ C:\windows\System32\Tasks\Adobe Flash Player Updater
2013-09-20 11:45 - 2011-05-18 07:51 - 00071048 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-09-18 11:47 - 2013-09-18 11:47 - 00003118 _____ C:\windows\System32\Tasks\Microsoft_Hardware_Launch_mousekeyboardcenter_exe
2013-09-18 11:47 - 2013-09-18 11:47 - 00003092 _____ C:\windows\System32\Tasks\Microsoft_Hardware_Launch_ipoint_exe
2013-09-18 11:47 - 2013-09-18 11:47 - 00003090 _____ C:\windows\System32\Tasks\Microsoft_Hardware_Launch_itype_exe
2013-09-18 11:47 - 2013-09-18 11:47 - 00000000 ____H C:\windows\system32\Drivers\Msft_Kernel_point64_01011.Wdf
2013-09-18 11:47 - 2013-09-18 11:47 - 00000000 ____H C:\windows\system32\Drivers\Msft_Kernel_NuidFltr_01011.Wdf
2013-09-18 11:43 - 2013-09-18 11:43 - 00000000 ____H C:\windows\system32\Drivers\Msft_Kernel_dc3d_01011.Wdf
2013-09-17 16:04 - 2013-07-25 10:53 - 00000000 ____D C:\Users\Huebner.STADTGEMEINDE\AppData\Roaming\Okidata
2013-09-17 15:42 - 2013-02-14 10:11 - 00000000 ____D C:\ProgramData\Okidata
2013-09-17 10:29 - 2009-07-14 05:20 - 00000000 ____D C:\windows\rescache
2013-09-17 08:02 - 2012-10-24 11:11 - 00000000 ____D C:\Users\Huebner.STADTGEMEINDE\AppData\Roaming\vlc
2013-09-17 07:16 - 2011-04-06 15:11 - 00001420 _____ C:\Users\Huebner.STADTGEMEINDE\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2013-09-17 07:15 - 2010-07-07 13:34 - 00000000 ____D C:\windows\Panther
2013-09-16 17:08 - 2009-07-14 05:20 - 00000000 ____D C:\windows\PolicyDefinitions
2013-09-16 07:56 - 2013-09-16 07:47 - 00010999 _____ C:\windows\IE10_main.log
2013-09-16 07:52 - 2013-09-16 07:52 - 19246592 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll
2013-09-16 07:52 - 2013-09-16 07:52 - 15404544 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll
2013-09-16 07:52 - 2013-09-16 07:52 - 14332928 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll
2013-09-16 07:52 - 2013-09-16 07:52 - 13761024 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieframe.dll
2013-09-16 07:52 - 2013-09-16 07:52 - 03959296 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll
2013-09-16 07:52 - 2013-09-16 07:52 - 02876928 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9.dll
2013-09-16 07:52 - 2013-09-16 07:52 - 02706432 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.tlb
2013-09-16 07:52 - 2013-09-16 07:52 - 02706432 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb
2013-09-16 07:52 - 2013-09-16 07:52 - 02647040 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll
2013-09-16 07:52 - 2013-09-16 07:52 - 02241024 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll
2013-09-16 07:52 - 2013-09-16 07:52 - 02048000 _____ (Microsoft Corporation) C:\windows\SysWOW64\iertutil.dll
2013-09-16 07:52 - 2013-09-16 07:52 - 01767936 _____ (Microsoft Corporation) C:\windows\SysWOW64\wininet.dll
2013-09-16 07:52 - 2013-09-16 07:52 - 01509376 _____ (Microsoft Corporation) C:\windows\system32\inetcpl.cpl
2013-09-16 07:52 - 2013-09-16 07:52 - 01441280 _____ (Microsoft Corporation) C:\windows\SysWOW64\inetcpl.cpl
2013-09-16 07:52 - 2013-09-16 07:52 - 01400416 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieapfltr.dat
2013-09-16 07:52 - 2013-09-16 07:52 - 01400416 _____ (Microsoft Corporation) C:\windows\system32\ieapfltr.dat
2013-09-16 07:52 - 2013-09-16 07:52 - 01365504 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll
2013-09-16 07:52 - 2013-09-16 07:52 - 01141248 _____ (Microsoft Corporation) C:\windows\SysWOW64\urlmon.dll
2013-09-16 07:52 - 2013-09-16 07:52 - 01054720 _____ (Microsoft Corporation) C:\windows\system32\MsSpellCheckingFacility.exe
2013-09-16 07:52 - 2013-09-16 07:52 - 00905728 _____ (Microsoft Corporation) C:\windows\system32\mshtmlmedia.dll
2013-09-16 07:52 - 2013-09-16 07:52 - 00855552 _____ (Microsoft Corporation) C:\windows\system32\jscript.dll
2013-09-16 07:52 - 2013-09-16 07:52 - 00762368 _____ (Microsoft Corporation) C:\windows\system32\ieapfltr.dll
2013-09-16 07:52 - 2013-09-16 07:52 - 00719360 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtmlmedia.dll
2013-09-16 07:52 - 2013-09-16 07:52 - 00690688 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript.dll
2013-09-16 07:52 - 2013-09-16 07:52 - 00629248 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieapfltr.dll
2013-09-16 07:52 - 2013-09-16 07:52 - 00603136 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll
2013-09-16 07:52 - 2013-09-16 07:52 - 00599552 _____ (Microsoft Corporation) C:\windows\system32\vbscript.dll
2013-09-16 07:52 - 2013-09-16 07:52 - 00526336 _____ (Microsoft Corporation) C:\windows\system32\ieui.dll
2013-09-16 07:52 - 2013-09-16 07:52 - 00523264 _____ (Microsoft Corporation) C:\windows\SysWOW64\vbscript.dll
2013-09-16 07:52 - 2013-09-16 07:52 - 00493056 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeeds.dll
2013-09-16 07:52 - 2013-09-16 07:52 - 00452096 _____ (Microsoft Corporation) C:\windows\system32\dxtmsft.dll
2013-09-16 07:52 - 2013-09-16 07:52 - 00441856 _____ (Microsoft Corporation) C:\windows\system32\html.iec
2013-09-16 07:52 - 2013-09-16 07:52 - 00391168 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieui.dll
2013-09-16 07:52 - 2013-09-16 07:52 - 00361984 _____ (Microsoft Corporation) C:\windows\SysWOW64\html.iec
2013-09-16 07:52 - 2013-09-16 07:52 - 00357888 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxtmsft.dll
2013-09-16 07:52 - 2013-09-16 07:52 - 00281600 _____ (Microsoft Corporation) C:\windows\system32\dxtrans.dll
2013-09-16 07:52 - 2013-09-16 07:52 - 00270848 _____ (Microsoft Corporation) C:\windows\system32\iedkcs32.dll
2013-09-16 07:52 - 2013-09-16 07:52 - 00247296 _____ (Microsoft Corporation) C:\windows\system32\webcheck.dll
2013-09-16 07:52 - 2013-09-16 07:52 - 00242200 _____ (Microsoft Corporation) C:\windows\SysWOW64\iedkcs32.dll
2013-09-16 07:52 - 2013-09-16 07:52 - 00235008 _____ (Microsoft Corporation) C:\windows\system32\url.dll
2013-09-16 07:52 - 2013-09-16 07:52 - 00232960 _____ (Microsoft Corporation) C:\windows\SysWOW64\url.dll
2013-09-16 07:52 - 2013-09-16 07:52 - 00226816 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxtrans.dll
2013-09-16 07:52 - 2013-09-16 07:52 - 00226304 _____ (Microsoft Corporation) C:\windows\system32\elshyph.dll
2013-09-16 07:52 - 2013-09-16 07:52 - 00216064 _____ (Microsoft Corporation) C:\windows\system32\msls31.dll
2013-09-16 07:52 - 2013-09-16 07:52 - 00204800 _____ (Microsoft Corporation) C:\windows\SysWOW64\webcheck.dll
2013-09-16 07:52 - 2013-09-16 07:52 - 00197120 _____ (Microsoft Corporation) C:\windows\system32\msrating.dll
2013-09-16 07:52 - 2013-09-16 07:52 - 00185344 _____ (Microsoft Corporation) C:\windows\SysWOW64\elshyph.dll
2013-09-16 07:52 - 2013-09-16 07:52 - 00173568 _____ (Microsoft Corporation) C:\windows\system32\ieUnatt.exe
2013-09-16 07:52 - 2013-09-16 07:52 - 00167424 _____ (Microsoft Corporation) C:\windows\system32\iexpress.exe
2013-09-16 07:52 - 2013-09-16 07:52 - 00163840 _____ (Microsoft Corporation) C:\windows\SysWOW64\msrating.dll
2013-09-16 07:52 - 2013-09-16 07:52 - 00158720 _____ (Microsoft Corporation) C:\windows\SysWOW64\msls31.dll
2013-09-16 07:52 - 2013-09-16 07:52 - 00150528 _____ (Microsoft Corporation) C:\windows\SysWOW64\iexpress.exe
2013-09-16 07:52 - 2013-09-16 07:52 - 00149504 _____ (Microsoft Corporation) C:\windows\system32\occache.dll
2013-09-16 07:52 - 2013-09-16 07:52 - 00144896 _____ (Microsoft Corporation) C:\windows\system32\wextract.exe
2013-09-16 07:52 - 2013-09-16 07:52 - 00138752 _____ (Microsoft Corporation) C:\windows\SysWOW64\wextract.exe
2013-09-16 07:52 - 2013-09-16 07:52 - 00137216 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieUnatt.exe
2013-09-16 07:52 - 2013-09-16 07:52 - 00136704 _____ (Microsoft Corporation) C:\windows\system32\iesysprep.dll
2013-09-16 07:52 - 2013-09-16 07:52 - 00136192 _____ (Microsoft Corporation) C:\windows\system32\iepeers.dll
2013-09-16 07:52 - 2013-09-16 07:52 - 00135680 _____ (Microsoft Corporation) C:\windows\system32\IEAdvpack.dll
2013-09-16 07:52 - 2013-09-16 07:52 - 00125440 _____ (Microsoft Corporation) C:\windows\SysWOW64\occache.dll
2013-09-16 07:52 - 2013-09-16 07:52 - 00117248 _____ (Microsoft Corporation) C:\windows\SysWOW64\iepeers.dll
2013-09-16 07:52 - 2013-09-16 07:52 - 00110592 _____ (Microsoft Corporation) C:\windows\SysWOW64\IEAdvpack.dll
2013-09-16 07:52 - 2013-09-16 07:52 - 00109056 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesysprep.dll
2013-09-16 07:52 - 2013-09-16 07:52 - 00102912 _____ (Microsoft Corporation) C:\windows\system32\inseng.dll
2013-09-16 07:52 - 2013-09-16 07:52 - 00097280 _____ (Microsoft Corporation) C:\windows\system32\mshtmled.dll
2013-09-16 07:52 - 2013-09-16 07:52 - 00092160 _____ (Microsoft Corporation) C:\windows\system32\SetIEInstalledDate.exe
2013-09-16 07:52 - 2013-09-16 07:52 - 00089600 _____ (Microsoft Corporation) C:\windows\system32\RegisterIEPKEYs.exe
2013-09-16 07:52 - 2013-09-16 07:52 - 00082432 _____ (Microsoft Corporation) C:\windows\SysWOW64\inseng.dll
2013-09-16 07:52 - 2013-09-16 07:52 - 00081408 _____ (Microsoft Corporation) C:\windows\system32\icardie.dll
2013-09-16 07:52 - 2013-09-16 07:52 - 00079872 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtmled.dll
2013-09-16 07:52 - 2013-09-16 07:52 - 00077312 _____ (Microsoft Corporation) C:\windows\system32\tdc.ocx
2013-09-16 07:52 - 2013-09-16 07:52 - 00073728 _____ (Microsoft Corporation) C:\windows\SysWOW64\SetIEInstalledDate.exe
2013-09-16 07:52 - 2013-09-16 07:52 - 00071680 _____ (Microsoft Corporation) C:\windows\SysWOW64\RegisterIEPKEYs.exe
2013-09-16 07:52 - 2013-09-16 07:52 - 00069120 _____ (Microsoft Corporation) C:\windows\SysWOW64\icardie.dll
2013-09-16 07:52 - 2013-09-16 07:52 - 00067072 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll
2013-09-16 07:52 - 2013-09-16 07:52 - 00062976 _____ (Microsoft Corporation) C:\windows\system32\pngfilt.dll
2013-09-16 07:52 - 2013-09-16 07:52 - 00061952 _____ (Microsoft Corporation) C:\windows\SysWOW64\tdc.ocx
2013-09-16 07:52 - 2013-09-16 07:52 - 00061440 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesetup.dll
2013-09-16 07:52 - 2013-09-16 07:52 - 00057344 _____ (Microsoft Corporation) C:\windows\SysWOW64\pngfilt.dll
2013-09-16 07:52 - 2013-09-16 07:52 - 00053248 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll
2013-09-16 07:52 - 2013-09-16 07:52 - 00052224 _____ (Microsoft Corporation) C:\windows\system32\msfeedsbs.dll
2013-09-16 07:52 - 2013-09-16 07:52 - 00051712 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe
2013-09-16 07:52 - 2013-09-16 07:52 - 00051200 _____ (Microsoft Corporation) C:\windows\system32\imgutil.dll
2013-09-16 07:52 - 2013-09-16 07:52 - 00048640 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtmler.dll
2013-09-16 07:52 - 2013-09-16 07:52 - 00048640 _____ (Microsoft Corporation) C:\windows\system32\mshtmler.dll
2013-09-16 07:52 - 2013-09-16 07:52 - 00041984 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeedsbs.dll
2013-09-16 07:52 - 2013-09-16 07:52 - 00039936 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll
2013-09-16 07:52 - 2013-09-16 07:52 - 00039424 _____ (Microsoft Corporation) C:\windows\SysWOW64\jsproxy.dll
2013-09-16 07:52 - 2013-09-16 07:52 - 00038400 _____ (Microsoft Corporation) C:\windows\SysWOW64\imgutil.dll
2013-09-16 07:52 - 2013-09-16 07:52 - 00033280 _____ (Microsoft Corporation) C:\windows\SysWOW64\iernonce.dll
2013-09-16 07:52 - 2013-09-16 07:52 - 00027648 _____ (Microsoft Corporation) C:\windows\system32\licmgr10.dll
2013-09-16 07:52 - 2013-09-16 07:52 - 00023040 _____ (Microsoft Corporation) C:\windows\SysWOW64\licmgr10.dll
2013-09-16 07:52 - 2013-09-16 07:52 - 00013824 _____ (Microsoft Corporation) C:\windows\system32\mshta.exe
2013-09-16 07:52 - 2013-09-16 07:52 - 00012800 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshta.exe
2013-09-16 07:52 - 2013-09-16 07:52 - 00012800 _____ (Microsoft Corporation) C:\windows\system32\msfeedssync.exe
2013-09-16 07:52 - 2013-09-16 07:52 - 00011776 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeedssync.exe
2013-09-16 07:42 - 2013-04-15 11:24 - 00000000 ____D C:\ProgramData\DivX
2013-09-16 07:41 - 2013-04-15 11:25 - 00000000 ____D C:\Program Files (x86)\DivX
2013-09-12 14:09 - 2011-04-12 16:52 - 00000952 ___SH C:\ProgramData\KGyGaAvL.sys
2013-09-12 14:09 - 2011-04-12 11:09 - 00000000 ____D C:\Users\Huebner.STADTGEMEINDE\Documents\My PSP Files
2013-09-11 14:03 - 2013-02-21 16:57 - 00000000 ____D C:\ProgramData\CanonIJPLM
2013-09-10 14:54 - 2013-04-15 11:41 - 00000000 ____D C:\Users\Huebner.STADTGEMEINDE\AppData\Roaming\DivX
2013-09-10 14:27 - 2013-07-09 13:11 - 00009048 _____ C:\windows\PFRO.log
2013-09-10 13:53 - 2013-09-10 13:32 - 00000181 _____ C:\Users\Huebner.STADTGEMEINDE\AppData\Roaming\Opusbext.dat
2013-09-10 13:29 - 2009-07-14 05:20 - 00000000 ____D C:\windows\Web
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2013-09-23 10:58
==================== End Of Log ============================ --- --- ---
und hier additions.txt Code:
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 27-09-2013 02
Ran by Huebner at 2013-09-28 09:36:19
Running from C:\Users\Huebner.STADTGEMEINDE\Desktop
Boot Mode: Normal
==========================================================
==================== Security Center ========================
AV: Microsoft Security Essentials (Enabled - Up to date) {641105E6-77ED-3F35-A304-765193BCB75F}
AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Microsoft Security Essentials (Enabled - Up to date) {DF70E402-51D7-30BB-99B4-4D23E83BFDE2}
==================== Installed Programs ======================
64 Bit HP CIO Components Installer (Version: 7.2.4)
Adobe AIR (x32 Version: 1.5.3.9130)
Adobe Flash Player 11 ActiveX (x32 Version: 11.8.800.175)
Adobe Flash Player 11 Plugin (x32 Version: 11.8.800.168)
Adobe Reader XI (11.0.04) - Deutsch (x32 Version: 11.0.04)
Applet (HKCU)
Atheros Driver Installation Program (x32 Version: 5.0)
Bluetooth Stack for Windows by Toshiba (Version: v7.10.01(T))
Brother MFL-Pro Suite DCP-9055CDN (x32 Version: 1.1.5.0)
BUFFALO LinkStation(LX-WXL) Setup Guide (x32)
BUFFALO NAS Navigator2 (x32)
Bullzip PDF Printer 7.2.0.1304 (Version: 7.2.0.1304)
Canon MP160 Benutzerregistrierung (x32)
CCleaner (Version: 4.03)
Corel Paint Shop Pro Photo X2 (x32 Version: 12.50.0001)
Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition (x32)
devolo dLAN Cockpit (x32 Version: 4.1.3.0)
DivX-Setup (x32 Version: 2.6.1.84)
EPSON B1100 Series Printer Uninstall
Foxit Reader (x32 Version: 6.0.6.722)
Free YouTube to MP3 Converter version 3.12.1.320 (x32 Version: 3.12.1.320)
GPL Ghostscript Lite 8.70 (x32)
HP Deskjet 3520 series - Grundlegende Software für das Gerät (Version: 28.0.1315.0)
HP Deskjet 3520 series Setup Guide (x32 Version: 27.0.0)
HP LaserJet P2050 Series 6.0 (Version: 6.0)
HP LaserJet Professional CP1520 Series (x32)
hppFonts (x32 Version: 001.001.00061)
hppQFolderP2050 (x32 Version: 1.00.0000)
hppusgP2050 (x32 Version: 1.1.0.1)
ImagXpress (x32 Version: 7.0.74.0)
Intel(R) Graphics Media Accelerator Driver (x32 Version: 8.15.10.2082)
Intel(R) Management Engine Components (x32 Version: 6.0.0.1179)
Intel(R) Network Connections Drivers (Version: 14.8)
Intel(R) Rapid Storage Technology (x32 Version: 9.5.7.1002)
Java 7 Update 11 (64-bit) (Version: 7.0.110)
Java SE Development Kit 7 Update 11 (64-bit) (Version: 1.7.0.110)
Java(TM) 6 Update 39 (x32 Version: 6.0.390)
Junk Mail filter update (x32 Version: 14.0.8089.726)
Malwarebytes Anti-Malware Version 1.75.0.1300 (x32 Version: 1.75.0.1300)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319)
Microsoft .NET Framework 4 Extended (Version: 4.0.30319)
Microsoft .NET Framework 4 Extended DEU Language Pack (Version: 4.0.30319)
Microsoft Access 2010 (x32 Version: 14.0.7015.1000)
Microsoft Antimalware Service DE-DE Language Pack (Version: 3.0.8402.2)
Microsoft Application Error Reporting (Version: 12.0.6015.5000)
Microsoft Choice Guard (x32 Version: 2.0.48.0)
Microsoft Office Access 2010 (x32 Version: 14.0.7015.1000)
Microsoft Office Access MUI (German) 2010 (x32 Version: 14.0.7015.1000)
Microsoft Office Access Runtime (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Excel MUI (German) 2010 (x32 Version: 14.0.7015.1000)
Microsoft Office File Validation Add-In (x32 Version: 14.0.5130.5003)
Microsoft Office Home and Business 2010 (x32 Version: 14.0.7015.1000)
Microsoft Office Office 64-bit Components 2010 (Version: 14.0.7015.1000)
Microsoft Office OneNote MUI (German) 2010 (x32 Version: 14.0.7015.1000)
Microsoft Office Outlook MUI (German) 2010 (x32 Version: 14.0.7015.1000)
Microsoft Office PowerPoint MUI (German) 2010 (x32 Version: 14.0.7015.1000)
Microsoft Office Professional Edition 2003 (x32 Version: 11.0.8173.0)
Microsoft Office Proof (English) 2010 (x32 Version: 14.0.7015.1000)
Microsoft Office Proof (French) 2010 (x32 Version: 14.0.7015.1000)
Microsoft Office Proof (German) 2010 (x32 Version: 14.0.7015.1000)
Microsoft Office Proof (Italian) 2010 (x32 Version: 14.0.7015.1000)
Microsoft Office Proofing (German) 2010 (x32 Version: 14.0.7015.1000)
Microsoft Office Publisher MUI (German) 2010 (x32 Version: 14.0.7015.1000)
Microsoft Office Shared 64-bit MUI (German) 2010 (Version: 14.0.7015.1000)
Microsoft Office Shared MUI (German) 2010 (x32 Version: 14.0.7015.1000)
Microsoft Office Single Image 2010 (x32 Version: 14.0.7015.1000)
Microsoft Office Word MUI (German) 2010 (x32 Version: 14.0.7015.1000)
Microsoft Security Client (Version: 4.3.0215.0)
Microsoft Security Client DE-DE Language Pack (Version: 2.1.1116.0)
Microsoft Security Essentials (Version: 4.3.215.0)
Microsoft Silverlight (x32 Version: 4.1.10329.0)
Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.61000)
Microsoft Visual C++ 2008 ATL Update kb973924 - x64 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (Version: 10.0.40219)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219)
Mobile Connect (x32 Version: 1.00.0000)
Mozilla Firefox 23.0.1 (x86 de) (x32 Version: 23.0.1)
Mozilla Maintenance Service (x32 Version: 23.0.1)
MSVC80_x64_v2 (Version: 1.0.3.0)
MSVC80_x86_v2 (x32 Version: 1.0.3.0)
MSVC90_x64 (Version: 1.0.1.2)
MSVC90_x86 (x32 Version: 1.0.1.2)
MSVCRT (x32 Version: 14.0.1468.721)
MSXML 4.0 SP3 Parser (KB973685) (x32 Version: 4.30.2107.0)
neroxml (x32 Version: 1.0.0)
NirSoft ProduKey (x32)
Nitro Pro 8 (Version: 8.5.5.2)
OKI Color Swatch-Dienstprogramm (x32 Version: 2.1.11)
OKI Configuration Tool (x32 Version: 1.3.1)
OKI Device Setting (x32 Version: 1.4.4)
OKI MB4x1/ES41x1/MPS42x Scanner (x32 Version: 1.1.1.0)
OKI MC5(3)x2/ES5(3)4x2 Scanner (x32 Version: 1.0.0.2)
OKI Network Extension (x32 Version: 1.00.000)
OKI Network Setting (x32 Version: 1.0.1)
OpenEdge 10.1C Shared Network Installation (x32 Version: 10.1C)
PC Connectivity Solution (x32 Version: 11.4.19.0)
PDF reDirect (remove only) (x32 Version: v2.5.0)
Photo Service - powered by myphotobook (x32 Version: 1.0.7)
Photo Service - powered by myphotobook (x32 Version: 1.0.7-279)
PlayReady PC Runtime amd64 (Version: 1.3.0)
RarZilla Free Unrar (x32 Version: 2.90)
Realtek High Definition Audio Driver (x32 Version: 6.0.1.5971)
Recuva (Version: 1.42)
RICOH R5U230 Media Driver ver.2.08.03.03 (x32 Version: 2.08.03.03)
ScannerDriver (Version: 1.0.0.2)
ScannerDriver (Version: 1.1.1.0)
Scribus 1.4.2 (x32 Version: 1.4.2)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (x32)
SES Driver (Version: 1.0.0)
SimilarWeb (x32 Version: 0.0.0.1)
TeamViewer 8 (x32 Version: 8.0.16642)
TOSHIBA 180 Degrees Rotation Utility (x32 Version: 1.3.0)
Toshiba Assist (x32 Version: 3.00.10)
TOSHIBA ConfigFree (x32 Version: 8.0.28)
TOSHIBA Disc Creator (Version: 2.1.0.2 for x64)
TOSHIBA DVD PLAYER (x32 Version: 3.01.2.12-A)
TOSHIBA eco Utility (Version: 1.2.7.64)
TOSHIBA eco Utility (x32 Version: 1.2.7.64)
TOSHIBA HDD Protection (Version: 2.2.0.3)
TOSHIBA HDD/SSD Alert (Version: 3.1.64.4)
TOSHIBA HDD/SSD Alert (x32 Version: 3.1.64.4)
Toshiba Manuals (x32 Version: 10.02)
Toshiba Online Product Information (x32 Version: 2.08.0001)
TOSHIBA PC Health Monitor (Version: 1.5.6.64)
TOSHIBA Recovery Media Creator (Version: 2.1.0.4 x64)
TOSHIBA Recovery Media Creator Reminder (x32 Version: 1.00.0019)
TOSHIBA ReelTime (Version: 1.6.06.64)
TOSHIBA ReelTime (x32 Version: 1.6.06.64)
TOSHIBA Service Station (x32 Version: 2.1.40)
TOSHIBA Sicherheits-Assistent (x32 Version: 2.0.8)
Toshiba TEMPRO (x32 Version: 3.33)
TOSHIBA Value Added Package (Version: 1.3.5.64)
TOSHIBA Value Added Package (x32 Version: 1.3.5.64)
TOSHIBA Web Camera Application (x32 Version: 1.1.2.8)
TX Text Control 14.0 (x32 Version: 14.0)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2473228) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2468871) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2533523) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2600217) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2836939) (x32 Version: 1)
Update for Microsoft Office 2010 (KB2494150) (x32)
Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition (x32)
VC80CRTRedist - 8.0.50727.6195 (x32 Version: 1.2.0)
VLC media player 2.0.6 (Version: 2.0.6)
VLC media player 2.0.7 (x32 Version: 2.0.7)
Vodafone Mobile Broadband (x32 Version: 10.2.103.31248)
WebReg (x32 Version: 100.0.170.000)
Winamp (x32 Version: 5.623 )
Winamp Erkennungs-Plug-in (HKCU Version: 1.0.0.1)
Windows Driver Package - Western Digital Technologies (WDC_SAM) WDC_SAM (01/19/2011 1.0.0009.0) (Version: 01/19/2011 1.0.0009.0)
Windows Live Call (x32 Version: 14.0.8064.0206)
Windows Live Communications Platform (x32 Version: 14.0.8064.206)
Windows Live Essentials (x32 Version: 14.0.8089.0726)
Windows Live Essentials (x32 Version: 14.0.8089.726)
Windows Live Fotogalerie (x32 Version: 14.0.8081.709)
Windows Live ID Sign-in Assistant (Version: 6.500.3165.0)
Windows Live Mail (x32 Version: 14.0.8089.0726)
Windows Live Messenger (x32 Version: 14.0.8089.0726)
Windows Live Movie Maker (x32 Version: 14.0.8091.0730)
Windows Live Sync (x32 Version: 14.0.8089.726)
Windows Live Writer (x32 Version: 14.0.8089.0726)
Windows Live-Uploadtool (x32 Version: 14.0.8014.1029)
Windows Mobile Device Updater Component (Version: 04.08.2345.00)
Windows-Treiberpaket - Nokia pccsmcfd (08/22/2008 7.0.0.0) (Version: 08/22/2008 7.0.0.0)
WinPcap 4.1.3 (x32 Version: 4.1.0.2980)
Wireshark 1.8.6 (64-bit) (x32 Version: 1.8.6)
Zune (Version: 04.08.2345.00)
Zune Language Pack (CHS) (Version: 04.08.2345.00)
Zune Language Pack (CHT) (Version: 04.08.2345.00)
Zune Language Pack (CSY) (Version: 04.08.2345.00)
Zune Language Pack (DAN) (Version: 04.08.2345.00)
Zune Language Pack (DEU) (Version: 04.08.2345.00)
Zune Language Pack (ELL) (Version: 04.08.2345.00)
Zune Language Pack (ESP) (Version: 04.08.2345.00)
Zune Language Pack (FIN) (Version: 04.08.2345.00)
Zune Language Pack (FRA) (Version: 04.08.2345.00)
Zune Language Pack (HUN) (Version: 04.08.2345.00)
Zune Language Pack (IND) (Version: 04.08.2345.00)
Zune Language Pack (ITA) (Version: 04.08.2345.00)
Zune Language Pack (JPN) (Version: 04.08.2345.00)
Zune Language Pack (KOR) (Version: 04.08.2345.00)
Zune Language Pack (MSL) (Version: 04.08.2345.00)
Zune Language Pack (NLD) (Version: 04.08.2345.00)
Zune Language Pack (NOR) (Version: 04.08.2345.00)
Zune Language Pack (PLK) (Version: 04.08.2345.00)
Zune Language Pack (PTB) (Version: 04.08.2345.00)
Zune Language Pack (PTG) (Version: 04.08.2345.00)
Zune Language Pack (RUS) (Version: 04.08.2345.00)
Zune Language Pack (SVE) (Version: 04.08.2345.00)
==================== Restore Points =========================
05-08-2013 10:00:03 Windows-Sicherung
08-08-2013 08:16:06 Windows Update
12-08-2013 05:42:46 Windows Update
12-08-2013 10:00:03 Windows-Sicherung
14-08-2013 09:00:19 Windows Update
19-08-2013 05:23:01 Windows Update
19-08-2013 10:00:03 Windows-Sicherung
22-08-2013 08:19:01 Windows Update
22-08-2013 12:43:38 Installiert Brother Software Suite
04-09-2013 06:44:46 Windows-Sicherung
09-09-2013 05:45:41 Windows Update
09-09-2013 10:00:11 Windows-Sicherung
10-09-2013 12:23:08 Installiert ScannerDriver
10-09-2013 12:45:14 Installiert ScannerDriver
13-09-2013 05:42:22 Windows Update
16-09-2013 05:48:22 Windows Update
16-09-2013 05:48:51 Windows Modules Installer
16-09-2013 05:50:10 Windows Modules Installer
16-09-2013 10:00:03 Windows-Sicherung
17-09-2013 13:36:17 Installiert ActKey
17-09-2013 14:04:03 Entfernt ActKey
18-09-2013 09:45:44 DCInstallRestorePoint
23-09-2013 05:29:19 Windows Update
23-09-2013 10:00:02 Windows-Sicherung
24-09-2013 09:15:24 Nitro Pro 8 wird installiert
25-09-2013 12:21:44 Installiert ScannerDriver
25-09-2013 12:22:50 Installiert Color Swatch Utility
25-09-2013 12:24:02 Konfiguriert ScannerDriver
25-09-2013 12:25:14 Installiert OKI Network Extension
25-09-2013 12:26:08 Installiert Color Swatch Utility
26-09-2013 11:16:08 Windows Update
==================== Hosts content: ==========================
2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____N C:\windows\system32\Drivers\etc\hosts
==================== Scheduled Tasks (whitelisted) =============
Task: {0091A139-3FB5-406B-ACB7-437864756CAC} - System32\Tasks\User_Feed_Synchronization-{2A3B3BEC-1FC4-4161-B63B-A0492BDDC68F} => C:\windows\system32\msfeedssync.exe [2013-09-16] (Microsoft Corporation)
Task: {00E0B394-E47E-4CA3-9E94-285DB6EA6287} - System32\Tasks\0 => Iexplore.exe
Task: {0EFBADA3-1E02-4602-A775-4AFE32A2D0B4} - System32\Tasks\Microsoft_Hardware_Launch_mousekeyboardcenter_exe => c:\Program Files\Microsoft Mouse and Keyboard Center\mousekeyboardcenter.exe
Task: {11C72E30-1150-46A8-96E7-749E9D1E5751} - System32\Tasks\Microsoft\Windows\Windows Activation Technologies\ValidationTask => C:\Windows\system32\Wat\WatAdminSvc.exe [2011-04-20] (Microsoft Corporation)
Task: {2AFABEA8-4B75-436C-80DA-34F04498471D} - System32\Tasks\Huebner Local Autobackup => C:\Program Files (x86)\Nero\Nero BackItUp & Burn\Nero BackItUp\NBCore.exe
Task: {2B689807-4D14-44D9-BBE7-F76BF898CAD2} - System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-1676436058-1265901383-628622809-1329 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe
Task: {36EECBED-7FFB-41FE-8A9F-317FC68E3D4D} - System32\Tasks\{A634BD6A-5406-4E01-A996-52C1712CF733} => E:\AutoRun.exe
Task: {4BAAD33E-A786-4529-9AB3-55725D74EEF1} - System32\Tasks\{DC61BF3E-0921-4D1E-8544-7060BFF09A1E} => E:\AutoRun.exe
Task: {4D686959-ACF6-4405-AA01-00EF0C1FA2A5} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-06-19] (Piriform Ltd)
Task: {65F2DB13-CC7A-4426-932A-2F576105422D} - System32\Tasks\Microsoft_Hardware_Launch_itype_exe => c:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe
Task: {6A05B33A-5BC8-47D0-BA5D-E24B6497015F} - System32\Tasks\{1EF0D3A4-9A21-4DC0-9ED6-32EA6C556258} => E:\AutoRun.exe
Task: {783718AF-1FBC-4046-8F1E-BFB9861C8454} - System32\Tasks\{3DCBAF4B-49A7-4D1C-AD82-F31294AD8D42} => E:\AutoRun.exe
Task: {7C8B0501-0611-41FE-A2EC-4C584F8B2187} - System32\Tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask => Sc.exe start osppsvc
Task: {81E301E1-B973-48A5-B547-809C445A0281} - System32\Tasks\2157 => C:\temp\launchie.vbsC:\temp\launchie.vbs //B
Task: {891156EF-E8A1-4D80-92FD-938D500B8164} - System32\Tasks\Adobe Flash Player Updater => C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-09-20] (Adobe Systems Incorporated)
Task: {95B7D184-0ED1-4442-B411-34E7A8D527A9} - System32\Tasks\Java Update Scheduler => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
Task: {9F00D6CB-7709-4360-87D2-AF096A954035} - System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-1676436058-1265901383-628622809-1329 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe
Task: {AC234B68-F7BC-4B79-8292-FDE73A78AA83} - System32\Tasks\ConfigFree Startup Programs => C:\Program Files (x86)\TOSHIBA\ConfigFree\NDSTray.exe [2010-02-22] (TOSHIBA CORPORATION)
Task: {AD50F691-D5B6-4222-AFD0-55790FF58658} - System32\Tasks\Adobe-Online-Aktualisierungsprogramm => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-05-11] (Adobe Systems Incorporated)
Task: {CB072CE2-D1AA-461D-82A8-0681059E665E} - System32\Tasks\{83D1B20C-0716-43E7-9549-A1E4C924A3A3} => E:\AutoRun.exe
Task: {D9FC4D44-38FC-42D5-97D7-C0DFC3F3EC77} - System32\Tasks\{78E76B38-A761-45F9-B402-615F8DE68E82} => \\TSRA\Standamt\WinStA\UPDATE.EXE
Task: {FAB26A7A-F878-4677-88D9-EE84BBC5BEB9} - System32\Tasks\Microsoft_Hardware_Launch_ipoint_exe => c:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe
Task: C:\windows\Tasks\Adobe Flash Player Updater.job => C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
==================== Loaded Modules (whitelisted) =============
2010-03-03 14:15 - 2010-03-03 14:15 - 08762680 _____ () C:\Program Files\Toshiba\FlashCards\BlackPng.dll
2009-11-03 13:26 - 2009-11-03 13:26 - 00053560 _____ () C:\Program Files\TOSHIBA\FlashCards\Hotkey\FnZ.dll
2010-03-03 14:15 - 2010-03-03 14:15 - 00019256 _____ () C:\Program Files\TOSHIBA\FlashCards\Hotkey\FnF10.dll
2010-03-03 14:15 - 2010-03-03 14:15 - 00019256 _____ () C:\Program Files\TOSHIBA\FlashCards\Hotkey\FnF11.dll
2010-07-07 04:08 - 2009-06-22 14:40 - 00022328 _____ () C:\Program Files\TOSHIBA\Toshiba Assist\NotifyX.dll
2009-03-12 20:08 - 2009-03-12 20:08 - 00048640 _____ () C:\Program Files (x86)\Toshiba\PCDiag\NotifyPCD.dll
2009-07-25 16:38 - 2009-07-25 16:38 - 00017800 _____ () C:\Program Files\TOSHIBA\TOSHIBA Disc Creator\NotifyTDC.dll
2010-02-25 17:19 - 2010-02-25 17:19 - 00578936 _____ () C:\Program Files\Toshiba\TECO\TecoPower.dll
2009-11-05 09:18 - 2009-11-05 09:18 - 00079192 _____ () C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosIPCWraper.dll
2011-04-19 17:12 - 2011-04-19 17:12 - 00308736 _____ () C:\Program Files (x86)\Vodafone\Vodafone Mobile Broadband\Bin\Vodafone.View.Taskbar.dll
2009-07-13 23:03 - 2009-07-14 03:15 - 00364544 _____ () C:\Windows\SysWOW64\msjetoledb40.dll
2013-08-22 14:44 - 2009-02-27 16:38 - 00139264 ____R () C:\Program Files (x86)\Brother\BrUtilities\BrLogAPI.dll
2013-08-29 02:25 - 2013-08-29 02:25 - 00100688 _____ () C:\Program Files (x86)\DivX\DivX Update\DivXUpdateCheck.dll
2013-08-19 15:17 - 2013-08-19 15:17 - 03551640 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
==================== Alternate Data Streams (whitelisted) =========
AlternateDataStreams: C:\Windows:nlsPreferences
==================== Safe Mode (whitelisted) ===================
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Wdf01000.sys => ""="Driver"
==================== Faulty Device Manager Devices =============
Name: Atheros AR9280 Wireless Network Adapter
Description: Atheros AR9280 Wireless Network Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Atheros Communications Inc.
Service: athr
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
Name:
Description:
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
==================== Event log errors: =========================
Application errors:
==================
Error: (09/28/2013 09:32:24 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: iexplore.exe, Version: 10.0.9200.16686, Zeitstempel: 0x52058d43
Name des fehlerhaften Moduls: ieapfltr.dll, Version: 10.0.9200.16521, Zeitstempel: 0x512077a4
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000000000001a129
ID des fehlerhaften Prozesses: 0x5c0
Startzeit der fehlerhaften Anwendung: 0xiexplore.exe0
Pfad der fehlerhaften Anwendung: iexplore.exe1
Pfad des fehlerhaften Moduls: iexplore.exe2
Berichtskennung: iexplore.exe3
Error: (09/28/2013 08:48:06 AM) (Source: Application Hang) (User: )
Description: Programm iexplore.exe, Version 10.0.9200.16686 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
Prozess-ID: dfc
Startzeit: 01cebc169b8b6d73
Endzeit: 10
Anwendungspfad: C:\Program Files\Internet Explorer\iexplore.exe
Berichts-ID: e270da7e-2809-11e3-8d63-0023183b6791
Error: (09/28/2013 08:13:44 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: svchost.exe, Version: 6.1.7600.16385, Zeitstempel: 0x4a5bc100
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00006dc0
ID des fehlerhaften Prozesses: 0xed4
Startzeit der fehlerhaften Anwendung: 0xsvchost.exe0
Pfad der fehlerhaften Anwendung: svchost.exe1
Pfad des fehlerhaften Moduls: svchost.exe2
Berichtskennung: svchost.exe3
Error: (09/27/2013 07:36:41 AM) (Source: Application Hang) (User: )
Description: Programm IEXPLORE.EXE, Version 10.0.9200.16686 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
Prozess-ID: ac8
Startzeit: 01cebb42ef7471cf
Endzeit: 31
Anwendungspfad: C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
Berichts-ID:
Error: (09/26/2013 01:05:45 PM) (Source: VmbService) (User: )
Description: GetClient
Error: (09/24/2013 06:53:03 PM) (Source: VmbService) (User: )
Description: GetClient
Error: (09/23/2013 00:23:51 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"1". Fehler in Manifest- oder Richtliniendatei "WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"2" in Zeile WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"3.
Die im Manifest gefundene Komponenten-ID stimmt nicht mit der ID der angeforderten Komponente überein.
Verweis: WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1".
Definition: WLMFDS,processorArchitecture="x86",type="win32",version="1.0.0.1".
Verwenden Sie das Programm "sxstrace.exe" für eine detaillierte Diagnose.
Error: (09/23/2013 00:22:38 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "assemblyIdentity1". Fehler in Manifest- oder Richtliniendatei "assemblyIdentity2" in Zeile assemblyIdentity3.
Der Wert "MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR" des "version"-Attributs im assemblyIdentity-Element ist ungültig.
Error: (09/20/2013 11:53:47 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: WINWORD.EXE, Version: 14.0.7015.1000, Zeitstempel: 0x51cca7cc
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0e9dfa9c
ID des fehlerhaften Prozesses: 0x1310
Startzeit der fehlerhaften Anwendung: 0xWINWORD.EXE0
Pfad der fehlerhaften Anwendung: WINWORD.EXE1
Pfad des fehlerhaften Moduls: WINWORD.EXE2
Berichtskennung: WINWORD.EXE3
Error: (09/19/2013 10:33:50 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"1". Fehler in Manifest- oder Richtliniendatei "WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"2" in Zeile WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"3.
Die im Manifest gefundene Komponenten-ID stimmt nicht mit der ID der angeforderten Komponente überein.
Verweis: WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1".
Definition: WLMFDS,processorArchitecture="x86",type="win32",version="1.0.0.1".
Verwenden Sie das Programm "sxstrace.exe" für eine detaillierte Diagnose.
System errors:
=============
Error: (09/28/2013 08:27:16 AM) (Source: TermService) (User: )
Description: Der Terminalserver kann den Dienstprinzipalnamen "TERMSRV", der für die Serverauthentifizierung verwendet werden soll, nicht registrieren. Der folgende Fehler ist aufgetreten: Die angegebene Domäne ist nicht vorhanden, oder es konnte keine Verbindung hergestellt werden.
.
Error: (09/28/2013 08:24:44 AM) (Source: Microsoft-Windows-GroupPolicy) (User: STADTGEMEINDE)
Description: Bei der Verarbeitung der Gruppenrichtlinie ist aufgrund fehlender Netzwerkkonnektivität mit einem Domänencontroller ein Fehler aufgetreten. Dies kann eine vorübergehende Bedingung sein. Es wird eine Erfolgsmeldung generiert, wenn die Verbindung des Computers mit dem Domänencontroller wiederhergestellt wurde und wenn die Gruppenrichtlinie erfolgreich verarbeitet wurde. Falls für mehrere Stunden keine Erfolgsmeldung angezeigt wird, wenden Sie sich an den Administrator.
Error: (09/28/2013 08:24:40 AM) (Source: Microsoft-Windows-GroupPolicy) (User: NT-AUTORITÄT)
Description: Bei der Verarbeitung der Gruppenrichtlinie ist aufgrund fehlender Netzwerkkonnektivität mit einem Domänencontroller ein Fehler aufgetreten. Dies kann eine vorübergehende Bedingung sein. Es wird eine Erfolgsmeldung generiert, wenn die Verbindung des Computers mit dem Domänencontroller wiederhergestellt wurde und wenn die Gruppenrichtlinie erfolgreich verarbeitet wurde. Falls für mehrere Stunden keine Erfolgsmeldung angezeigt wird, wenden Sie sich an den Administrator.
Error: (09/28/2013 08:24:36 AM) (Source: NETLOGON) (User: )
Description: Der Computer konnte eine sichere Sitzung mit einem
Domänencontroller in der Domäne STADTGEMEINDE aufgrund der folgenden
Ursache nicht einrichten:
%%1311
Dies kann zu Authentifizierungsproblemen führen. Stellen
Sie sicher, dass der Computer mit dem Netzwerk verbunden ist.
Wenden Sie sich an den Domänenadministrator, wenn das Problem
weiterhin besteht.
ZUSÄTZLICHE INFORMATIONEN
Wenn dieser Computer ein Domänencontroller der bestimmten
Domäne ist, wird eine sichere Sitzung zum primären
Domänencontrolleremulator in der bestimmten Domäne eingerichtet.
Andernfalls richtet dieser Computer eine sichere Sitzung zu
einem beliebigen Domänencontroller in der bestimmten Domäne ein.
Error: (09/28/2013 08:23:39 AM) (Source: Microsoft Antimalware) (User: )
Description: Beim Aktualisieren der Signaturen wurde von %NT-AUTORITÄT60 ein Fehler festgestellt.
Neue Signaturversion:
Vorherige Signaturversion: 1.159.771.0
Aktualisierungsquelle: %NT-AUTORITÄT59
Aktualisierungsphase: 4.3.0215.00
Quellpfad: 4.3.0215.01
Signaturtyp: %NT-AUTORITÄT602
Aktualisierungstyp: %NT-AUTORITÄT604
Benutzer: NT-AUTORITÄT\SYSTEM
Aktuelle Modulversion: %NT-AUTORITÄT605
Vorherige Modulversion: %NT-AUTORITÄT606
Fehlercode: %NT-AUTORITÄT607
Fehlerbeschreibung: %NT-AUTORITÄT608
Error: (09/28/2013 08:23:39 AM) (Source: Microsoft Antimalware) (User: )
Description: Beim Aktualisieren der Signaturen wurde von %NT-AUTORITÄT60 ein Fehler festgestellt.
Neue Signaturversion:
Vorherige Signaturversion: 1.159.771.0
Aktualisierungsquelle: %NT-AUTORITÄT59
Aktualisierungsphase: 4.3.0215.00
Quellpfad: 4.3.0215.01
Signaturtyp: %NT-AUTORITÄT602
Aktualisierungstyp: %NT-AUTORITÄT604
Benutzer: NT-AUTORITÄT\SYSTEM
Aktuelle Modulversion: %NT-AUTORITÄT605
Vorherige Modulversion: %NT-AUTORITÄT606
Fehlercode: %NT-AUTORITÄT607
Fehlerbeschreibung: %NT-AUTORITÄT608
Error: (09/28/2013 08:15:48 AM) (Source: TermService) (User: )
Description: Der Terminalserver kann den Dienstprinzipalnamen "TERMSRV", der für die Serverauthentifizierung verwendet werden soll, nicht registrieren. Der folgende Fehler ist aufgetreten: Die angegebene Domäne ist nicht vorhanden, oder es konnte keine Verbindung hergestellt werden.
.
Error: (09/28/2013 08:13:25 AM) (Source: Microsoft-Windows-GroupPolicy) (User: STADTGEMEINDE)
Description: Bei der Verarbeitung der Gruppenrichtlinie ist aufgrund fehlender Netzwerkkonnektivität mit einem Domänencontroller ein Fehler aufgetreten. Dies kann eine vorübergehende Bedingung sein. Es wird eine Erfolgsmeldung generiert, wenn die Verbindung des Computers mit dem Domänencontroller wiederhergestellt wurde und wenn die Gruppenrichtlinie erfolgreich verarbeitet wurde. Falls für mehrere Stunden keine Erfolgsmeldung angezeigt wird, wenden Sie sich an den Administrator.
Error: (09/28/2013 08:13:07 AM) (Source: Microsoft-Windows-GroupPolicy) (User: NT-AUTORITÄT)
Description: Fehler bei der Verarbeitung der Gruppenrichtlinie. Der Computername konnte nicht aufgelöst werden. Dies kann mindestens eine der folgenden Ursachen haben:
a) Fehler bei der Namensauflösung mit dem aktuellen Domänencontroller.
b) Active Directory-Replikationswartezeit (ein auf einem anderen Domänencontroller erstelltes Konto hat nicht auf dem aktuellen Domänencontroller repliziert).
Error: (09/28/2013 08:13:04 AM) (Source: NETLOGON) (User: )
Description: Der Computer konnte eine sichere Sitzung mit einem
Domänencontroller in der Domäne STADTGEMEINDE aufgrund der folgenden
Ursache nicht einrichten:
%%1311
Dies kann zu Authentifizierungsproblemen führen. Stellen
Sie sicher, dass der Computer mit dem Netzwerk verbunden ist.
Wenden Sie sich an den Domänenadministrator, wenn das Problem
weiterhin besteht.
ZUSÄTZLICHE INFORMATIONEN
Wenn dieser Computer ein Domänencontroller der bestimmten
Domäne ist, wird eine sichere Sitzung zum primären
Domänencontrolleremulator in der bestimmten Domäne eingerichtet.
Andernfalls richtet dieser Computer eine sichere Sitzung zu
einem beliebigen Domänencontroller in der bestimmten Domäne ein.
Microsoft Office Sessions:
=========================
Error: (09/28/2013 09:32:24 AM) (Source: Application Error)(User: )
Description: iexplore.exe10.0.9200.1668652058d43ieapfltr.dll10.0.9200.16521512077a4c0000005000000000001a1295c001cebc1cb040a2ffC:\Program Files\Internet Explorer\iexplore.exeC:\windows\System32\ieapfltr.dll1d7c777e-2810-11e3-8d63-0023183b6791
Error: (09/28/2013 08:48:06 AM) (Source: Application Hang)(User: )
Description: iexplore.exe10.0.9200.16686dfc01cebc169b8b6d7310C:\Program Files\Internet Explorer\iexplore.exee270da7e-2809-11e3-8d63-0023183b6791
Error: (09/28/2013 08:13:44 AM) (Source: Application Error)(User: )
Description: svchost.exe6.1.7600.163854a5bc100unknown0.0.0.000000000c000000500006dc0ed401cebc11dc802dc3C:\windows\SysWOW64\svchost.exeunknown209009ff-2805-11e3-83fa-0023183b6791
Error: (09/27/2013 07:36:41 AM) (Source: Application Hang)(User: )
Description: IEXPLORE.EXE10.0.9200.16686ac801cebb42ef7471cf31C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
Error: (09/26/2013 01:05:45 PM) (Source: VmbService)(User: )
Description: GetClient
Error: (09/24/2013 06:53:03 PM) (Source: VmbService)(User: )
Description: GetClient
Error: (09/23/2013 00:23:51 PM) (Source: SideBySide)(User: )
Description: WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"WLMFDS,processorArchitecture="x86",type="win32",version="1.0.0.1"c:\program files (x86)\windows live\photo gallery\MovieMaker.Exec:\program files (x86)\windows live\photo gallery\WLMFDS.DLL8
Error: (09/23/2013 00:22:38 PM) (Source: SideBySide)(User: )
Description: assemblyIdentityversionMAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINORC:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dllC:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dll3
Error: (09/20/2013 11:53:47 AM) (Source: Application Error)(User: )
Description: WINWORD.EXE14.0.7015.100051cca7ccunknown0.0.0.000000000c00000050e9dfa9c131001ceb5e3a9850a62C:\Program Files (x86)\Microsoft Office\Office14\WINWORD.EXEunknown8af05626-21da-11e3-8fd0-0023183b6791
Error: (09/19/2013 10:33:50 AM) (Source: SideBySide)(User: )
Description: WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"WLMFDS,processorArchitecture="x86",type="win32",version="1.0.0.1"c:\program files (x86)\windows live\photo gallery\MovieMaker.Exec:\program files (x86)\windows live\photo gallery\WLMFDS.DLL8
==================== Memory info ===========================
Percentage of memory in use: 59%
Total physical RAM: 3824.43 MB
Available physical RAM: 1561.81 MB
Total Pagefile: 7647.04 MB
Available Pagefile: 5260.02 MB
Total Virtual: 8192 MB
Available Virtual: 8191.81 MB
==================== Drives ================================
Drive c: (TI30640600A) (Fixed) (Total:288.1 GB) (Free:160.1 GB) NTFS ==>[System with boot components (obtained from reading drive)]
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or Vista) (Size: 298 GB) (Disk ID: 9B3C41A1)
Partition 1: (Active) - (Size=1 GB) - (Type=27)
Partition 2: (Not Active) - (Size=288 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=9 GB) - (Type=17)
==================== End Of Log ============================ |