Trojaner-Board

Trojaner-Board (https://www.trojaner-board.de/)
-   Plagegeister aller Art und deren Bekämpfung (https://www.trojaner-board.de/plagegeister-aller-art-deren-bekaempfung/)
-   -   "rvzr-a.akamaihd.net" entfernen (https://www.trojaner-board.de/145046-rvzr-a-akamaihd-net-entfernen.html)

Physcia 23.11.2013 08:52
"rvzr-a.akamaihd.net" entfernen
 
Hallo!
Bei mir gehen ständig Seiten auf, deren Adresse mit "rvzr-a.akamaihd.net" beginnt.
Ich habe gelesen, dass auch andere schon dieses Problem haben. Ich weiß allerdings nicht, ob ich das 1:1 übernehmen kann.
Ich habe einen Virenscan gemacht, der nichts ergab.
Auch der Durchlauf mit Malwarebytes Anti-Malware ergab nichts.
Ich habe hier mal die Datei eingefügt.
Ich hoffe, ihr könnt mir helfen, ich habe nämlich absolut keine Ahnung von Computern und bin ein bißchen verzweifelt.
Vielen Dank! Physcia

Malwarebytes Anti-Malware 1.75.0.1300
www.malwarebytes.org

Datenbank Version: v2013.11.22.04

Windows 8 x64 NTFS
Internet Explorer 11.0.9600.16438
:: [Administrator]

23.11.2013 07:57:52
mbam-log-2013-11-23 (07-57-52).txt

Art des Suchlaufs: Quick-Scan
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 221856
Laufzeit: 4 Minute(n), 19 Sekunde(n)

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung: 0
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateien: 0
(Keine bösartigen Objekte gefunden)

(Ende)

schrauber 23.11.2013 08:58
hi,

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST Download FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
  • Starte jetzt FRST.
  • Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
  • Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
  • Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)


Physcia 23.11.2013 09:23
Hallo Schrauber!
Vielen Dank für die schnelle Antwort.
Hier die beiden FRST Dateien

FRST:

FRST Logfile:
Code:
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 23-11-2013
Ran by  (administrator) on R on 23-11-2013 09:11:13
Running from C:\Users\\Downloads
Windows 8.1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(AMD) C:\Windows\System32\atiesrxx.exe
(Cisco Systems, Inc.) C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnagent.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Qualcomm Atheros Commnucations) C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\AdminService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\Acer Cloud\CCDMonitorService.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Launch Manager\LMSvc.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.21.165\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.21.165\GoogleCrashHandler64.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe
(WildTangent) C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\avp.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\avpui.exe
(IvoSoft) C:\Program Files\Classic Shell\ClassicStartMenu.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Launch Manager\LMEvent.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Launch Manager\LMTray.exe
(Atheros Communications) C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtvStack.exe
() C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\ActivateDesktop.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDTouch.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Dropbox, Inc.) C:\Users\jokrause\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Cisco Systems, Inc.) C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnui.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerTray.exe
(CyberLink) C:\Program Files (x86)\CyberLink\MediaEspresso\DeviceDetector\DeviceDetector.exe
(Intel Corporation) C:\Windows\System32\igfxext.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerEvent.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbam.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_9_900_117.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_9_900_117.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [HotKeysCmds] - "C:\WINDOWS\system32\hkcmd.exe"
HKLM\...\Run: [ETDCtrl] - C:\Program Files\Elantech\ETDCtrl.exe [2890640 2013-04-22] (ELAN Microelectronics Corp.)
HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13427784 2013-03-18] (Realtek Semiconductor)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKLM\...\Policies\Explorer\Run: [BtvStack] - C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtvStack.exe [132736 2013-04-15] ( (Atheros Communications))
HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [642656 2013-03-14] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-09-05] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-09-13] (Apple Inc.)
HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-10-23] (Apple Inc.)
HKLM-x32\...\Run: [Cisco AnyConnect Secure Mobility Agent for Windows] - C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnui.exe [703888 2013-08-30] (Cisco Systems, Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
Startup: C:\Users\jokrause\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\jokrause\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
Startup: C:\Users\jokrause\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk
ShortcutTarget: OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk -> C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://acer13.msn.com
SearchScopes: HKLM - DefaultScope {023890F6-8E1E-4E6B-9445-8303DF902AEA} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MAARJS
SearchScopes: HKLM - {023890F6-8E1E-4E6B-9445-8303DF902AEA} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MAARJS
SearchScopes: HKLM - {AA9A4890-4262-4441-8977-E2FFCBFB706C} URL = hxxp://de.yhs4.search.yahoo.com/yhs/search?hspart=acer&hsimp=yhs-acer_001&p={searchTerms}
SearchScopes: HKLM-x32 - DefaultScope {023890F6-8E1E-4E6B-9445-8303DF902AEA} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MAARJS
SearchScopes: HKLM-x32 - {023890F6-8E1E-4E6B-9445-8303DF902AEA} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MAARJS
SearchScopes: HKLM-x32 - {AA9A4890-4262-4441-8977-E2FFCBFB706C} URL = hxxp://de.yhs4.search.yahoo.com/yhs/search?hspart=acer&hsimp=yhs-acer_001&p={searchTerms}
SearchScopes: HKCU - DefaultScope {023890F6-8E1E-4E6B-9445-8303DF902AEA} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&fr=vc_trans_8140&type=horus
SearchScopes: HKCU - {023890F6-8E1E-4E6B-9445-8303DF902AEA} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&fr=vc_trans_8140&type=horus
SearchScopes: HKCU - {A2021B17-EA17-44CC-B7A0-4A2B846F1F23} URL = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT3317893&CUI=UN77561317948995333&UM=2
SearchScopes: HKCU - {AA9A4890-4262-4441-8977-E2FFCBFB706C} URL = hxxp://de.yhs4.search.yahoo.com/yhs/search?hspart=acer&hsimp=yhs-acer_001&p={searchTerms}
BHO: Plus-HD-3.8 - {11111111-1111-1111-1111-110311901130} - C:\Program Files (x86)\Plus-HD-3.8\Plus-HD-3.8-bho64.dll No File
BHO: ExplorerBHO Class - {449D0D6E-2412-4E61-B68F-1CB625CD9E52} - C:\Program Files\Classic Shell\ClassicExplorer64.dll (IvoSoft)
BHO: Content Blocker Plugin - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\x64\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO)
BHO: Virtual Keyboard Plugin - {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\x64\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO)
BHO: CIESpeechBHO Class - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\IEPlugIn.dll (Qualcomm Atheros Commnucations)
BHO: Safe Money Plugin - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\x64\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO)
BHO: URL Advisor Plugin - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\x64\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO)
BHO: ClassicIEBHO Class - {EA801577-E6AD-4BD5-8F71-4BE0154331A4} - C:\Program Files\Classic Shell\ClassicIEDLL_64.dll (IvoSoft)
BHO-x32: ExplorerBHO Class - {449D0D6E-2412-4E61-B68F-1CB625CD9E52} - C:\Program Files\Classic Shell\ClassicExplorer32.dll (IvoSoft)
BHO-x32: Content Blocker Plugin - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO)
BHO-x32: Virtual Keyboard Plugin - {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Safe Money Plugin - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: URL Advisor Plugin - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO)
BHO-x32: ClassicIEBHO Class - {EA801577-E6AD-4BD5-8F71-4BE0154331A4} - C:\Program Files\Classic Shell\ClassicIEDLL_32.dll (IvoSoft)
Toolbar: HKLM - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer64.dll (IvoSoft)
Toolbar: HKLM-x32 - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer32.dll (IvoSoft)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\..\Interfaces\{4CF73BC3-13D4-4768-9887-A6B3AE941E68}: [NameServer]62.109.121.2 62.109.121.1

FireFox:
========
FF ProfilePath: C:\Users\jokrause\AppData\Roaming\Mozilla\Firefox\Profiles\jweuep0p.default
FF DefaultSearchEngine: RadioTotal4 Customized Web Search
FF SelectedSearchEngine: RadioTotal4 Customized Web Search
FF Homepage: hxxp://www.google.de/
FF Keyword.URL: hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3317893&SearchSource=2&CUI=UN30420036142443115&UM=2&q=
FF Plugin: @adobe.com/FlashPlayer - C:\WINDOWS\system32\Macromed\Flash\NPSWF64_11_9_900_117.dll ()
FF Plugin: @videolan.org/vlc,version=2.1.0 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_117.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=3.5.29 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 - C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\1\NP_wtapp.dll ()
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Users\jokrause\AppData\Roaming\Mozilla\Firefox\Profiles\jweuep0p.default\searchplugins\conduit.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Plus-HD-3.8 - C:\Users\jokrause\AppData\Roaming\Mozilla\Firefox\Profiles\jweuep0p.default\Extensions\c17236e8-fd66-44bc-aeef-1e00981cbb64@0a4ee0fe-5356-4fd3-b37c-5cd5671a315c.com
FF Extension: vis - C:\Users\jokrause\AppData\Roaming\Mozilla\Firefox\Profiles\jweuep0p.default\Extensions\EFGLQA@78ETGYN-0W7FN789T87.COM
FF Extension: RadioTotal4  - C:\Users\jokrause\AppData\Roaming\Mozilla\Firefox\Profiles\jweuep0p.default\Extensions\{61f0d019-b016-4d56-9dae-7b7706cd6755}
FF HKLM-x32\...\Firefox\Extensions: [{ee8cd9f6-dae3-4889-816b-99fe80dae284}] - C:\Program Files (x86)\WinSecurity\winsecurity.xpi
FF Extension: No Name - C:\Program Files (x86)\WinSecurity\winsecurity.xpi
FF HKLM-x32\...\Firefox\Extensions:  - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\url_advisor@kaspersky.com
FF Extension: Kaspersky URL Advisor - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\url_advisor@kaspersky.com
FF HKLM-x32\...\Firefox\Extensions: [virtual_keyboard@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\virtual_keyboard@kaspersky.com
FF Extension: Virtual Keyboard - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\virtual_keyboard@kaspersky.com
FF HKLM-x32\...\Firefox\Extensions: [content_blocker@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\content_blocker@kaspersky.com
FF Extension: Dangerous Websites Blocker - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\content_blocker@kaspersky.com
FF HKLM-x32\...\Firefox\Extensions: [anti_banner@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\anti_banner@kaspersky.com
FF Extension: Anti-Banner - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\anti_banner@kaspersky.com
FF HKLM-x32\...\Firefox\Extensions: [online_banking@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\online_banking@kaspersky.com
FF Extension: Safe Money - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\online_banking@kaspersky.com
FF HKLM-x32\...\Thunderbird\Extensions: [msktbird@mcafee.com] - C:\Program Files\McAfee\MSK

==================== Services (Whitelisted) =================

R2 AtherosSvc; C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\adminservice.exe [228480 2013-04-15] (Qualcomm Atheros Commnucations)
R2 AVP; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\avp.exe [214512 2013-10-17] (Kaspersky Lab ZAO)
R2 CCDMonitorService; C:\Program Files (x86)\Acer\Acer Cloud\CCDMonitorService.exe [2615368 2013-02-19] (Acer Incorporated)
S3 DeviceFastLaneService; C:\Program Files\Acer\Acer Device Fast-lane\DeviceFastLaneSvc.exe [469648 2012-11-16] (Acer Incorporated)
R3 ePowerSvc; C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe [662088 2013-03-15] (Acer Incorporated)
R2 GamesAppIntegrationService; C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe [240736 2013-10-07] (WildTangent)
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [820184 2013-02-13] (Intel(R) Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-05-08] (Intel Corporation)
R2 LMSvc; C:\Program Files\Acer\Acer Launch Manager\LMSvc.exe [431656 2013-03-15] (Acer Incorporate)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [346872 2013-08-22] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23840 2013-08-22] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

S0 ADP80XX; C:\Windows\System32\drivers\ADP80XX.SYS [782176 2013-08-22] (PMC-Sierra)
R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [314016 2013-11-12] ()
S3 bcmfn2; C:\Windows\System32\drivers\bcmfn2.sys [17624 2013-08-13] (Windows (R) Win 7 DDK provider)
R3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [224768 2013-08-22] (Microsoft Corporation)
S3 dot4; C:\Windows\system32\DRIVERS\Dot4.sys [151968 2012-10-19] (Windows (R) Win 7 DDK provider)
S3 Dot4Print; C:\Windows\System32\drivers\Dot4Prt.sys [27040 2012-10-19] (Windows (R) Win 7 DDK provider)
S3 iaLPSSi_GPIO; C:\Windows\System32\drivers\iaLPSSi_GPIO.sys [24568 2013-07-30] (Intel Corporation)
S3 iaLPSSi_I2C; C:\Windows\System32\drivers\iaLPSSi_I2C.sys [99320 2013-07-25] (Intel Corporation)
S0 iaStorAV; C:\Windows\System32\drivers\iaStorAV.sys [651248 2013-08-10] (Intel Corporation)
R0 intelpep; C:\Windows\System32\drivers\intelpep.sys [39768 2013-10-08] (Microsoft Corporation)
R0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [458336 2013-11-23] (Kaspersky Lab ZAO)
S0 klelam; C:\Windows\System32\DRIVERS\klelam.sys [29616 2012-07-27] (Kaspersky Lab)
R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [626272 2013-11-23] (Kaspersky Lab ZAO)
R1 KLIM6; C:\Windows\system32\DRIVERS\klim6.sys [30304 2013-10-17] (Kaspersky Lab ZAO)
S3 klkbdflt; C:\Windows\system32\DRIVERS\klkbdflt.sys [29280 2013-10-17] (Kaspersky Lab ZAO)
S3 klmouflt; C:\Windows\system32\DRIVERS\klmouflt.sys [29280 2013-10-17] (Kaspersky Lab ZAO)
R1 klpd; C:\Windows\system32\DRIVERS\klpd.sys [15456 2013-04-12] (Kaspersky Lab ZAO)
R1 klwfp; C:\Windows\system32\DRIVERS\klwfp.sys [64608 2013-05-07] (Kaspersky Lab ZAO)
R1 kneps; C:\Windows\system32\DRIVERS\kneps.sys [178784 2013-06-06] (Kaspersky Lab ZAO)
R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [43680 2013-11-12] ()
R3 LMDriver; C:\Windows\System32\drivers\LMDriver.sys [21360 2013-01-10] (Acer Incorporated)
S0 LSI_SAS3; C:\Windows\System32\drivers\lsi_sas3.sys [81760 2013-08-22] (LSI Corporation)
R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [99800 2013-05-08] (Intel Corporation)
R3 NdisVirtualBus; C:\Windows\System32\drivers\NdisVirtualBus.sys [16384 2013-08-22] (Microsoft Corporation)
S3 netvsc; C:\Windows\system32\DRIVERS\netvsc63.sys [87040 2013-08-22] (Microsoft Corporation)
R3 RadioShim; C:\Windows\System32\drivers\RadioShim.sys [15704 2013-01-10] (Acer Incorporated)
S3 ReFS; C:\Windows\System32\Drivers\ReFS.sys [924512 2013-08-22] (Microsoft Corporation)
S3 SerCx2; C:\Windows\System32\drivers\SerCx2.sys [146272 2013-08-22] (Microsoft Corporation)
S0 stornvme; C:\Windows\System32\drivers\stornvme.sys [57176 2013-10-05] (Microsoft Corporation)
S3 UEFI; C:\Windows\System32\drivers\UEFI.sys [26976 2013-08-22] (Microsoft Corporation)
S3 vpnva; C:\Windows\system32\DRIVERS\vpnva64-6.sys [52080 2013-08-30] (Cisco Systems, Inc.)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [124256 2013-08-22] (Microsoft Corporation)
S3 BTATH_LWFLT; \SystemRoot\system32\DRIVERS\btath_lwflt.sys [x]
U5 klflt; C:\Windows\System32\Drivers\klflt.sys [112224 2013-06-08] (Kaspersky Lab ZAO)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-11-23 09:11 - 2013-11-23 09:11 - 00020960 _____ C:\Users\jokrause\Downloads\FRST.txt
2013-11-23 09:11 - 2013-11-23 09:11 - 00000000 ____D C:\FRST
2013-11-23 09:10 - 2013-11-23 09:10 - 01957916 _____ (Farbar) C:\Users\jokrause\Downloads\FRST64.exe
2013-11-22 20:57 - 2013-11-22 20:57 - 00002354 _____ C:\Users\jokrause\Desktop\Sicherer Zahlungsverkehr.lnk
2013-11-22 20:57 - 2013-11-22 20:57 - 00001349 _____ C:\Users\jokrause\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Kaspersky Internet Security.lnk
2013-11-22 20:56 - 2013-11-22 20:56 - 00001144 _____ C:\Users\Public\Desktop\Kaspersky Internet Security.lnk
2013-11-22 20:56 - 2013-05-06 09:13 - 00110176 _____ (Kaspersky Lab ZAO) C:\WINDOWS\system32\klfphc.dll
2013-11-22 20:55 - 2013-11-23 09:06 - 00000000 ____D C:\ProgramData\Kaspersky Lab
2013-11-22 20:55 - 2013-11-23 07:16 - 00626272 _____ (Kaspersky Lab ZAO) C:\WINDOWS\system32\Drivers\klif.sys
2013-11-22 20:55 - 2013-11-22 20:55 - 00000000 ____D C:\Program Files (x86)\Kaspersky Lab
2013-11-22 20:55 - 2013-06-08 20:18 - 00112224 _____ (Kaspersky Lab ZAO) C:\WINDOWS\system32\Drivers\klflt.sys
2013-11-22 10:50 - 2013-11-22 16:50 - 00000000 ____D C:\AdwCleaner
2013-11-22 10:50 - 2013-11-22 10:50 - 01085542 _____ C:\Users\jokrause\Downloads\adwcleaner_3012.exe
2013-11-21 09:48 - 2013-11-21 09:48 - 00000000 ____D C:\Users\jokrause\AppData\Roaming\Malwarebytes
2013-11-21 09:46 - 2013-11-21 09:46 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\jokrause\Downloads\mbam-setup-1.75.0.1300(1).exe
2013-11-21 09:46 - 2013-11-21 09:46 - 00001129 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2013-11-21 09:46 - 2013-11-21 09:46 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-11-21 09:46 - 2013-11-21 09:46 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-11-21 09:46 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbam.sys
2013-11-21 09:44 - 2013-11-21 09:45 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\jokrause\Downloads\mbam-setup-1.75.0.1300.exe
2013-11-21 09:01 - 2013-11-21 09:01 - 00000000 _____ C:\autoexec.bat
2013-11-21 09:00 - 2013-11-21 09:00 - 00000000 ____D C:\Program Files\Enigma Software Group
2013-11-21 08:59 - 2013-11-21 09:42 - 00000000 ____D C:\WINDOWS\72AAF4551E54475BB0AB5413C78D0E63.TMP
2013-11-21 08:57 - 2013-11-21 08:57 - 00728960 _____ (Enigma Software Group USA, LLC.) C:\Users\jokrause\Downloads\SpyHunter-Installer.exe
2013-11-20 21:40 - 2013-11-20 21:40 - 00001056 _____ C:\Users\Public\Desktop\R i386 3.0.2.lnk
2013-11-20 21:40 - 2013-11-20 21:40 - 00001049 _____ C:\Users\Public\Desktop\R x64 3.0.2.lnk
2013-11-20 21:40 - 2013-11-20 21:40 - 00000000 ____D C:\Tinn-R
2013-11-20 21:39 - 2013-11-20 21:39 - 00000000 ____D C:\Program Files\R
2013-11-20 21:33 - 2013-11-20 21:33 - 00264616 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\javaws.exe
2013-11-20 21:33 - 2013-11-20 21:33 - 00175016 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\javaw.exe
2013-11-20 21:33 - 2013-11-20 21:33 - 00174504 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\java.exe
2013-11-20 21:33 - 2013-11-20 21:33 - 00096168 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-32.dll
2013-11-20 21:33 - 2013-11-20 21:33 - 00000000 ____D C:\ProgramData\Sun
2013-11-20 21:33 - 2013-11-20 21:33 - 00000000 ____D C:\ProgramData\Oracle
2013-11-20 21:33 - 2013-11-20 21:33 - 00000000 ____D C:\Program Files (x86)\Java
2013-11-20 21:31 - 2013-11-20 21:31 - 00915368 _____ (Oracle Corporation) C:\Users\jokrause\Downloads\jxpiinstall.exe
2013-11-20 21:29 - 2013-11-20 21:29 - 00000000 ____D C:\Users\jokrause\Documents\R
2013-11-20 21:27 - 2013-11-20 22:28 - 00000000 ____D C:\Users\jokrause\AppData\Roaming\Tinn-R
2013-11-17 11:07 - 2013-11-05 21:21 - 21196664 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2013-11-17 11:07 - 2013-11-05 19:51 - 18642504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2013-11-17 11:07 - 2013-11-05 17:20 - 13925888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2013-11-17 11:07 - 2013-11-05 17:11 - 18577408 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2013-11-17 11:07 - 2013-11-05 15:30 - 11674112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2013-11-17 11:07 - 2013-11-05 15:29 - 13176320 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2013-11-17 11:07 - 2013-10-10 12:26 - 02801664 _____ (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll
2013-11-17 11:07 - 2013-10-10 12:05 - 01019392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\actxprxy.dll
2013-11-17 11:07 - 2013-10-10 11:34 - 01085952 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.appcore.dll
2013-11-17 11:07 - 2013-10-10 11:27 - 00869888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.appcore.dll
2013-11-17 11:06 - 2013-10-23 12:29 - 00044936 _____ (Microsoft Corporation) C:\WINDOWS\system32\wldp.dll
2013-11-17 11:06 - 2013-10-23 12:21 - 00155480 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbccgp.sys
2013-11-17 11:06 - 2013-10-23 12:13 - 00171864 _____ (Microsoft Corporation) C:\WINDOWS\system32\kd_02_8086.dll
2013-11-17 11:06 - 2013-10-23 06:27 - 00249856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2013-11-17 11:06 - 2013-10-23 06:09 - 04104704 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncEngine.dll
2013-11-17 11:06 - 2013-10-23 06:04 - 00189952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2013-11-17 11:06 - 2013-10-23 05:55 - 00839680 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSShared.dll
2013-11-17 11:06 - 2013-10-23 05:46 - 00700928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSShared.dll
2013-11-17 11:06 - 2013-10-22 09:18 - 01287064 _____ (Microsoft Corporation) C:\WINDOWS\system32\kernel32.dll
2013-11-17 11:06 - 2013-10-22 08:55 - 02328872 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe
2013-11-17 11:06 - 2013-10-22 07:03 - 02065448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe
2013-11-17 11:06 - 2013-10-22 06:15 - 00558080 _____ (Microsoft Corporation) C:\WINDOWS\system32\apphelp.dll
2013-11-17 11:06 - 2013-10-22 05:04 - 00618496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\apphelp.dll
2013-11-17 11:06 - 2013-10-22 05:02 - 01036288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kernel32.dll
2013-11-17 11:06 - 2013-10-22 04:56 - 00186880 _____ (Microsoft Corporation) C:\WINDOWS\system32\WorkFoldersShell.dll
2013-11-17 11:06 - 2013-10-22 04:44 - 00761856 _____ (Microsoft Corporation) C:\WINDOWS\system32\WorkfoldersControl.dll
2013-11-17 11:06 - 2013-10-22 03:38 - 01362944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user32.dll
2013-11-17 11:06 - 2013-10-22 03:22 - 00381952 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUSettingsProvider.dll
2013-11-17 11:06 - 2013-10-22 03:13 - 01704448 _____ (Microsoft Corporation) C:\WINDOWS\system32\wucltux.dll
2013-11-17 11:06 - 2013-10-22 03:07 - 02617344 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll
2013-11-17 11:06 - 2013-10-22 02:53 - 01584128 _____ (Microsoft Corporation) C:\WINDOWS\system32\workfolderssvc.dll
2013-11-17 11:06 - 2013-10-22 02:47 - 02295808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll
2013-11-17 11:06 - 2013-10-19 10:13 - 01530200 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2013-11-17 11:06 - 2013-10-19 09:51 - 00481392 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll
2013-11-17 11:06 - 2013-10-19 08:12 - 00380656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll
2013-11-17 11:06 - 2013-10-19 07:24 - 04190720 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2013-11-17 11:06 - 2013-10-19 05:48 - 00607744 _____ (Microsoft Corporation) C:\WINDOWS\system32\comdlg32.dll
2013-11-17 11:06 - 2013-10-19 05:03 - 00531968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comdlg32.dll
2013-11-17 11:06 - 2013-10-19 04:57 - 02143744 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2013-11-17 11:06 - 2013-10-19 04:28 - 01765376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll
2013-11-17 11:06 - 2013-10-19 04:26 - 01231360 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll
2013-11-17 11:06 - 2013-10-19 04:14 - 00888832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll
2013-11-17 11:06 - 2013-10-17 16:42 - 01399176 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmde.dll
2013-11-17 11:06 - 2013-10-17 16:42 - 01373872 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpmde.dll
2013-11-17 11:06 - 2013-10-17 15:04 - 01204968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winmde.dll
2013-11-17 11:06 - 2013-10-16 10:34 - 00518656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWAHost.exe
2013-11-17 11:06 - 2013-10-16 10:33 - 00631296 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWAHost.exe
2013-11-17 11:06 - 2013-10-13 04:06 - 00258904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdyboost.sys
2013-11-17 11:06 - 2013-10-13 03:43 - 00708616 _____ (Microsoft Corporation) C:\WINDOWS\system32\iuilp.dll
2013-11-17 11:06 - 2013-10-11 16:11 - 01843712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Display.dll
2013-11-17 11:06 - 2013-10-11 15:22 - 01816576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Display.dll
2013-11-17 11:06 - 2013-10-11 14:24 - 00909312 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmCoreR.dll
2013-11-17 11:06 - 2013-10-11 14:04 - 02570240 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers.dll
2013-11-17 11:06 - 2013-10-11 14:03 - 00621056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MrmCoreR.dll
2013-11-17 11:06 - 2013-10-10 17:44 - 00031064 _____ (Microsoft Corporation) C:\WINDOWS\system32\ploptin.dll
2013-11-17 11:06 - 2013-10-10 17:26 - 00317616 _____ (Microsoft Corporation) C:\WINDOWS\system32\wintrust.dll
2013-11-17 11:06 - 2013-10-10 17:26 - 00104320 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncryptsslp.dll
2013-11-17 11:06 - 2013-10-10 17:23 - 03395920 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSService.dll
2013-11-17 11:06 - 2013-10-10 15:53 - 00235960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wintrust.dll
2013-11-17 11:06 - 2013-10-10 15:53 - 00088272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ncryptsslp.dll
2013-11-17 11:06 - 2013-10-10 12:53 - 00160768 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxAllUserStore.dll
2013-11-17 11:06 - 2013-10-10 12:38 - 00221184 _____ (Microsoft Corporation) C:\WINDOWS\system32\profsvc.dll
2013-11-17 11:06 - 2013-10-10 12:21 - 00139776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxAllUserStore.dll
2013-11-17 11:06 - 2013-10-10 11:40 - 01302528 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2013-11-17 11:06 - 2013-10-10 11:19 - 00922624 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.dll
2013-11-17 11:06 - 2013-10-09 06:40 - 00385528 _____ C:\WINDOWS\system32\ApnDatabase.xml
2013-11-17 11:06 - 2013-10-08 12:07 - 00039768 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\intelpep.sys
2013-11-17 11:06 - 2013-10-08 11:28 - 00523096 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\acpi.sys
2013-11-17 11:06 - 2013-10-08 11:13 - 02551640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2013-11-17 11:06 - 2013-10-08 07:46 - 00113152 _____ (Microsoft Corporation) C:\WINDOWS\system32\shsetup.dll
2013-11-17 11:06 - 2013-10-08 06:58 - 00094208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shsetup.dll
2013-11-17 11:06 - 2013-10-08 06:50 - 00656384 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsapi.dll
2013-11-17 11:06 - 2013-10-08 06:48 - 00255488 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsrslvr.dll
2013-11-17 11:06 - 2013-10-08 06:15 - 00492544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dnsapi.dll
2013-11-17 11:06 - 2013-10-08 06:09 - 01160704 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Web.Http.dll
2013-11-17 11:06 - 2013-10-08 05:50 - 00903168 _____ (Microsoft Corporation) C:\WINDOWS\system32\iphlpsvc.dll
2013-11-17 11:06 - 2013-10-08 05:50 - 00762368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Web.Http.dll
2013-11-17 11:06 - 2013-10-07 08:21 - 07399256 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2013-11-17 11:06 - 2013-10-07 08:21 - 00054776 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
2013-11-17 11:06 - 2013-10-07 03:13 - 03532288 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2013-11-17 11:06 - 2013-10-05 16:25 - 00371032 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\spaceport.sys
2013-11-17 11:06 - 2013-10-05 16:25 - 00057176 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\stornvme.sys
2013-11-17 11:06 - 2013-10-05 15:21 - 00699840 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d10level9.dll
2013-11-17 11:06 - 2013-10-05 13:05 - 00578952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d10level9.dll
2013-11-17 11:06 - 2013-10-05 12:01 - 00454656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv.sys
2013-11-17 11:06 - 2013-10-05 10:36 - 00083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\TSWbPrxy.exe
2013-11-17 11:06 - 2013-10-05 10:18 - 01011712 _____ (Microsoft Corporation) C:\WINDOWS\system32\TSWorkspace.dll
2013-11-17 11:06 - 2013-10-05 10:07 - 00830464 _____ (Microsoft Corporation) C:\WINDOWS\system32\samsrv.dll
2013-11-17 11:06 - 2013-10-05 09:56 - 01147904 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIAutomationCore.dll
2013-11-17 11:06 - 2013-10-05 09:55 - 00226304 _____ (Microsoft Corporation) C:\WINDOWS\system32\miutils.dll
2013-11-17 11:06 - 2013-10-05 09:40 - 00795648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TSWorkspace.dll
2013-11-17 11:06 - 2013-10-05 09:24 - 00180224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\miutils.dll
2013-11-17 11:06 - 2013-10-05 09:21 - 00920064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIAutomationCore.dll
2013-11-17 11:06 - 2013-10-05 09:15 - 00286208 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcsvDevice.dll
2013-11-17 11:06 - 2013-10-05 08:43 - 00578560 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.BackgroundTransfer.dll
2013-11-17 11:06 - 2013-10-05 08:39 - 06639616 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll
2013-11-17 11:06 - 2013-10-05 08:35 - 00411648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.BackgroundTransfer.dll
2013-11-17 11:06 - 2013-10-05 08:32 - 05769728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll
2013-11-17 11:06 - 2013-10-04 09:10 - 00533504 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppReadiness.dll
2013-11-17 11:06 - 2013-09-19 06:04 - 00134656 _____ (Microsoft Corporation) C:\WINDOWS\system32\psmsrv.dll
2013-11-17 11:06 - 2013-09-17 10:06 - 01067080 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfasfsrcsnk.dll
2013-11-17 11:06 - 2013-09-17 10:06 - 00465960 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2013-11-17 11:06 - 2013-09-17 07:31 - 00883184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfasfsrcsnk.dll
2013-11-17 11:06 - 2013-09-17 07:31 - 00326024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll
2013-11-17 11:06 - 2013-09-17 05:37 - 00092672 _____ (Microsoft Corporation) C:\WINDOWS\system32\dafBth.dll
2013-11-17 11:06 - 2013-09-14 15:07 - 02134120 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d9.dll
2013-11-17 11:06 - 2013-09-14 15:00 - 00391512 _____ (Microsoft Corporation) C:\WINDOWS\system32\tsmf.dll
2013-11-17 11:06 - 2013-09-14 13:39 - 01799944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d9.dll
2013-11-17 11:06 - 2013-09-14 13:33 - 00345552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tsmf.dll
2013-11-17 11:06 - 2013-09-14 11:05 - 00338944 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpclip.exe
2013-11-17 11:06 - 2013-09-14 10:11 - 00433664 _____ (Microsoft Corporation) C:\WINDOWS\system32\ipnathlp.dll
2013-11-17 11:06 - 2013-09-13 09:22 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\system32\ftp.exe
2013-11-17 11:06 - 2013-09-13 08:47 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ftp.exe
2013-11-17 11:06 - 2013-09-12 09:45 - 00101888 _____ (Microsoft Corporation) C:\WINDOWS\system32\eappgnui.dll
2013-11-17 11:06 - 2013-09-12 09:08 - 00325120 _____ (Microsoft Corporation) C:\WINDOWS\system32\eapp3hst.dll
2013-11-17 11:06 - 2013-09-12 09:08 - 00103424 _____ (Microsoft Corporation) C:\WINDOWS\system32\WiFiDisplay.dll
2013-11-17 11:06 - 2013-09-12 09:02 - 00093184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eappgnui.dll
2013-11-17 11:06 - 2013-09-12 08:44 - 00331776 _____ (Microsoft Corporation) C:\WINDOWS\system32\eapphost.dll
2013-11-17 11:06 - 2013-09-12 08:37 - 00245248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eapp3hst.dll
2013-11-17 11:06 - 2013-09-12 08:37 - 00184832 _____ (Microsoft Corporation) C:\WINDOWS\system32\dafWfdProvider.dll
2013-11-17 11:06 - 2013-09-12 08:21 - 00262144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eapphost.dll
2013-11-17 11:06 - 2013-09-12 08:16 - 00335360 _____ (Microsoft Corporation) C:\WINDOWS\system32\eappcfg.dll
2013-11-17 11:06 - 2013-09-12 08:01 - 00272896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eappcfg.dll
2013-11-17 11:06 - 2013-09-11 13:46 - 00325464 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBXHCI.SYS
2013-11-17 11:06 - 2013-09-10 06:26 - 04599808 _____ (Microsoft Corporation) C:\WINDOWS\system32\d2d1.dll
2013-11-17 11:06 - 2013-09-10 05:52 - 00132608 _____ (Microsoft Corporation) C:\WINDOWS\system32\msched.dll
2013-11-17 11:06 - 2013-09-10 05:34 - 03934208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d2d1.dll
2013-11-16 06:12 - 2013-11-16 06:12 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-11-15 10:36 - 2013-11-15 10:36 - 00000000 ____D C:\Users\jokrause\Documents\OneNote-Notizbücher
2013-11-15 10:31 - 2013-11-15 10:31 - 00598304 _____ C:\Users\jokrause\Downloads\Workflowy_Allmyapps.exe
2013-11-15 09:31 - 2013-11-15 09:31 - 00005354 _____ C:\Users\jokrause\AppData\Local\recently-used.xbel
2013-11-15 09:27 - 2013-11-15 09:31 - 00000000 ____D C:\Users\jokrause\AppData\Local\gtk-2.0
2013-11-15 09:27 - 2013-11-15 09:27 - 00000000 ____D C:\Users\jokrause\.thumbnails
2013-11-14 11:16 - 2013-10-19 09:08 - 23212544 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2013-11-14 11:16 - 2013-10-19 07:37 - 17142784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2013-11-14 11:16 - 2013-10-19 07:02 - 02764288 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2013-11-14 11:16 - 2013-10-19 06:37 - 00111616 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwcollector.exe
2013-11-14 11:16 - 2013-10-19 06:19 - 00218624 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2013-11-14 11:16 - 2013-10-19 06:10 - 05765120 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2013-11-14 11:16 - 2013-10-19 05:52 - 02166272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2013-11-14 11:16 - 2013-10-19 05:44 - 04240384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2013-11-14 11:16 - 2013-10-19 05:37 - 12995584 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2013-11-14 11:16 - 2013-10-19 05:31 - 01993728 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2013-11-14 11:16 - 2013-10-19 04:56 - 11220992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2013-11-14 11:16 - 2013-10-19 04:55 - 01926656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2013-11-14 11:16 - 2013-10-19 04:53 - 02332160 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2013-11-14 11:16 - 2013-10-19 04:23 - 01394176 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2013-11-14 11:16 - 2013-10-19 04:09 - 01818112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2013-11-14 11:16 - 2013-10-19 04:02 - 01156608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2013-11-14 11:16 - 2013-10-13 03:48 - 00136536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wfplwfs.sys
2013-11-14 11:16 - 2013-10-12 22:48 - 00828416 _____ (Microsoft Corporation) C:\WINDOWS\system32\BFE.DLL
2013-11-14 11:16 - 2013-10-12 22:34 - 01104384 _____ (Microsoft Corporation) C:\WINDOWS\system32\IKEEXT.DLL
2013-11-14 11:16 - 2013-10-05 15:21 - 01341288 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll
2013-11-14 11:16 - 2013-10-05 09:39 - 01067008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32.dll
2013-11-14 11:14 - 2013-10-16 16:58 - 01943536 _____ (Microsoft Corporation) C:\WINDOWS\system32\crypt32.dll
2013-11-14 11:14 - 2013-10-16 14:54 - 01581968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\crypt32.dll
2013-11-14 11:13 - 2013-11-14 11:13 - 02724864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb
2013-11-14 11:13 - 2013-11-14 11:13 - 02724864 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb
2013-11-13 09:55 - 2013-11-13 09:55 - 03049560 _____ (Cisco Systems, Inc.) C:\Users\jokrause\Downloads\anyconnect-win-3.1.04066-web-deploy-k9.exe
2013-11-13 09:55 - 2013-11-13 09:55 - 00000000 ____D C:\Users\jokrause\AppData\Local\Cisco
2013-11-13 09:55 - 2013-11-13 09:55 - 00000000 ____D C:\ProgramData\Cisco
2013-11-13 09:55 - 2013-11-13 09:55 - 00000000 ____D C:\Program Files (x86)\Cisco
2013-11-13 09:55 - 2013-08-30 22:51 - 00112080 ____R (Cisco Systems, Inc.) C:\WINDOWS\system32\Drivers\acsock64.sys
2013-11-12 19:21 - 2013-11-12 19:21 - 00000000 ____D C:\Users\jokrause\Documents\ANNO 1404 Venedig
2013-11-12 18:45 - 2013-11-12 19:21 - 00000000 ____D C:\Users\jokrause\AppData\Roaming\Ubisoft
2013-11-12 18:44 - 2013-11-12 18:44 - 00000000 ____D C:\ProgramData\Solidshield
2013-11-12 18:33 - 2013-11-12 18:33 - 00314016 _____ C:\WINDOWS\system32\Drivers\atksgt.sys
2013-11-12 18:33 - 2013-11-12 18:33 - 00043680 _____ C:\WINDOWS\system32\Drivers\lirsgt.sys
2013-11-12 18:33 - 2013-11-12 18:33 - 00010123 _____ C:\WINDOWS\DirectX.log
2013-11-12 18:33 - 2009-03-16 14:18 - 00521560 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_4.dll
2013-11-12 18:33 - 2009-03-16 14:18 - 00517448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_4.dll
2013-11-12 18:33 - 2009-03-16 14:18 - 00235352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_4.dll
2013-11-12 18:33 - 2009-03-16 14:18 - 00174936 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_4.dll
2013-11-12 18:33 - 2009-03-16 14:18 - 00073544 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_3.dll
2013-11-12 18:33 - 2009-03-16 14:18 - 00069448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_3.dll
2013-11-12 18:33 - 2009-03-16 14:18 - 00024920 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_6.dll
2013-11-12 18:33 - 2009-03-16 14:18 - 00022360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\X3DAudio1_6.dll
2013-11-12 18:33 - 2009-03-09 15:27 - 05425496 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_41.dll
2013-11-12 18:33 - 2009-03-09 15:27 - 04178264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_41.dll
2013-11-12 18:33 - 2009-03-09 15:27 - 02430312 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_41.dll
2013-11-12 18:33 - 2009-03-09 15:27 - 01846632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_41.dll
2013-11-12 18:33 - 2009-03-09 15:27 - 00520544 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_41.dll
2013-11-12 18:33 - 2009-03-09 15:27 - 00453456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_41.dll
2013-11-12 18:33 - 2008-10-15 07:03 - 00518480 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_3.dll
2013-11-12 18:33 - 2008-10-15 07:03 - 00514384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_3.dll
2013-11-12 18:33 - 2008-10-15 07:03 - 00235856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_3.dll
2013-11-12 18:33 - 2008-10-15 07:03 - 00175440 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_3.dll
2013-11-12 18:33 - 2008-10-15 07:03 - 00074576 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_2.dll
2013-11-12 18:33 - 2008-10-15 07:03 - 00070992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_2.dll
2013-11-12 18:33 - 2008-10-15 07:03 - 00025936 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_5.dll
2013-11-12 18:33 - 2008-10-15 07:03 - 00023376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\X3DAudio1_5.dll
2013-11-12 18:33 - 2008-10-15 06:22 - 05631312 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_40.dll
2013-11-12 18:33 - 2008-10-15 06:22 - 04379984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_40.dll
2013-11-12 18:33 - 2008-10-15 06:22 - 02605920 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_40.dll
2013-11-12 18:33 - 2008-10-15 06:22 - 02036576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_40.dll
2013-11-12 18:33 - 2008-10-15 06:22 - 00519000 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_40.dll
2013-11-12 18:33 - 2008-10-15 06:22 - 00452440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_40.dll
2013-11-12 18:33 - 2008-07-30 06:20 - 00513544 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_2.dll
2013-11-12 18:33 - 2008-07-30 06:20 - 00509448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_2.dll
2013-11-12 18:33 - 2008-07-30 06:20 - 00238088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_2.dll
2013-11-12 18:33 - 2008-07-30 06:20 - 00177672 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_2.dll
2013-11-12 18:33 - 2008-07-30 06:20 - 00072200 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_1.dll
2013-11-12 18:33 - 2008-07-30 06:20 - 00068616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_1.dll
2013-11-12 18:33 - 2008-07-10 11:01 - 00467984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_39.dll
2013-11-12 18:33 - 2008-07-10 11:00 - 04992520 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_39.dll
2013-11-12 18:33 - 2008-07-10 11:00 - 03851784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_39.dll
2013-11-12 18:33 - 2008-07-10 11:00 - 01942552 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_39.dll
2013-11-12 18:33 - 2008-07-10 11:00 - 01493528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_39.dll
2013-11-12 18:33 - 2008-07-10 11:00 - 00540688 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_39.dll
2013-11-12 18:33 - 2008-05-30 14:19 - 00511496 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_1.dll
2013-11-12 18:33 - 2008-05-30 14:19 - 00507400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_1.dll
2013-11-12 18:33 - 2008-05-30 14:18 - 00238088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_1.dll
2013-11-12 18:33 - 2008-05-30 14:18 - 00177672 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_1.dll
2013-11-12 18:33 - 2008-05-30 14:17 - 00068104 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_0.dll
2013-11-12 18:33 - 2008-05-30 14:17 - 00065032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_0.dll
2013-11-12 18:33 - 2008-05-30 14:17 - 00025608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\X3DAudio1_4.dll
2013-11-12 18:33 - 2008-05-30 14:16 - 00028168 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_4.dll
2013-11-12 18:33 - 2008-05-30 14:11 - 04991496 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_38.dll
2013-11-12 18:33 - 2008-05-30 14:11 - 03850760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_38.dll
2013-11-12 18:33 - 2008-05-30 14:11 - 01941528 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_38.dll
2013-11-12 18:33 - 2008-05-30 14:11 - 01491992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_38.dll
2013-11-12 18:33 - 2008-05-30 14:11 - 00540688 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_38.dll
2013-11-12 18:33 - 2008-05-30 14:11 - 00467984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_38.dll
2013-11-12 18:33 - 2008-03-05 16:04 - 00489480 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_0.dll
2013-11-12 18:33 - 2008-03-05 16:03 - 00479752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_0.dll
2013-11-12 18:33 - 2008-03-05 16:03 - 00238088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_0.dll
2013-11-12 18:33 - 2008-03-05 16:03 - 00177672 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_0.dll
2013-11-12 18:33 - 2008-03-05 16:00 - 00028168 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_3.dll
2013-11-12 18:33 - 2008-03-05 16:00 - 00025608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\X3DAudio1_3.dll
2013-11-12 18:33 - 2008-03-05 15:56 - 04910088 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_37.dll
2013-11-12 18:33 - 2008-03-05 15:56 - 03786760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_37.dll
2013-11-12 18:33 - 2008-03-05 15:56 - 01860120 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_37.dll
2013-11-12 18:33 - 2008-03-05 15:56 - 01420824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_37.dll
2013-11-12 18:33 - 2008-02-05 23:07 - 00529424 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_37.dll
2013-11-12 18:33 - 2008-02-05 23:07 - 00462864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_37.dll
2013-11-12 18:33 - 2007-10-22 03:40 - 00411656 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_10.dll
2013-11-12 18:33 - 2007-10-22 03:39 - 00267272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_10.dll
2013-11-12 18:33 - 2007-10-22 03:37 - 00021000 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_2.dll
2013-11-12 18:33 - 2007-10-22 03:37 - 00017928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\X3DAudio1_2.dll
2013-11-12 18:33 - 2007-10-12 15:14 - 05081608 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_36.dll
2013-11-12 18:33 - 2007-10-12 15:14 - 03734536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_36.dll
2013-11-12 18:33 - 2007-10-12 15:14 - 02006552 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_36.dll
2013-11-12 18:33 - 2007-10-12 15:14 - 01374232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_36.dll
2013-11-12 18:33 - 2007-10-02 09:56 - 00508264 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_36.dll
2013-11-12 18:33 - 2007-10-02 09:56 - 00444776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_36.dll
2013-11-12 18:33 - 2007-07-20 00:57 - 00411496 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_9.dll
2013-11-12 18:33 - 2007-07-20 00:57 - 00267112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_9.dll
2013-11-12 18:33 - 2007-07-19 18:14 - 05073256 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_35.dll
2013-11-12 18:33 - 2007-07-19 18:14 - 03727720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_35.dll
2013-11-12 18:33 - 2007-07-19 18:14 - 01985904 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_35.dll
2013-11-12 18:33 - 2007-07-19 18:14 - 01358192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_35.dll
2013-11-12 18:33 - 2007-07-19 18:14 - 00508264 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_35.dll
2013-11-12 18:33 - 2007-07-19 18:14 - 00444776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_35.dll
2013-11-12 18:33 - 2007-06-20 20:49 - 00409960 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_8.dll
2013-11-12 18:33 - 2007-06-20 20:46 - 00266088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_8.dll
2013-11-12 18:33 - 2007-05-16 16:45 - 04496232 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_34.dll
2013-11-12 18:33 - 2007-05-16 16:45 - 03497832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_34.dll
2013-11-12 18:33 - 2007-05-16 16:45 - 01401200 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_34.dll
2013-11-12 18:33 - 2007-05-16 16:45 - 01124720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_34.dll
2013-11-12 18:33 - 2007-05-16 16:45 - 00506728 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_34.dll
2013-11-12 18:33 - 2007-05-16 16:45 - 00443752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_34.dll
2013-11-12 18:33 - 2007-04-04 18:55 - 00403304 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_7.dll
2013-11-12 18:33 - 2007-04-04 18:55 - 00261480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_7.dll
2013-11-12 18:33 - 2007-04-04 18:54 - 00107368 _____ (Microsoft Corporation) C:\WINDOWS\system32\xinput1_3.dll
2013-11-12 18:33 - 2007-04-04 18:53 - 00081768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xinput1_3.dll
2013-11-12 18:33 - 2007-03-15 16:57 - 00506728 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_33.dll
2013-11-12 18:33 - 2007-03-15 16:57 - 00443752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_33.dll
2013-11-12 18:33 - 2007-03-12 16:42 - 04494184 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_33.dll
2013-11-12 18:33 - 2007-03-12 16:42 - 03495784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_33.dll
2013-11-12 18:33 - 2007-03-12 16:42 - 01400176 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_33.dll
2013-11-12 18:33 - 2007-03-12 16:42 - 01123696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_33.dll
2013-11-12 18:33 - 2007-03-05 12:42 - 00017688 _____ (Microsoft Corporation) C:\WINDOWS\system32\x3daudio1_1.dll
2013-11-12 18:33 - 2007-03-05 12:42 - 00015128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\x3daudio1_1.dll
2013-11-12 18:33 - 2007-01-24 15:27 - 00393576 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_6.dll
2013-11-12 18:33 - 2007-01-24 15:27 - 00255848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_6.dll
2013-11-12 18:33 - 2006-12-08 12:02 - 00251672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_5.dll
2013-11-12 18:33 - 2006-12-08 12:00 - 00390424 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_5.dll
2013-11-12 18:33 - 2006-11-29 13:06 - 04398360 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_32.dll
2013-11-12 18:33 - 2006-11-29 13:06 - 03426072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_32.dll
2013-11-12 18:33 - 2006-11-29 13:06 - 00469264 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10.dll
2013-11-12 18:33 - 2006-11-29 13:06 - 00440080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10.dll
2013-11-12 18:33 - 2006-09-28 16:05 - 03977496 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_31.dll
2013-11-12 18:33 - 2006-09-28 16:05 - 02414360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_31.dll
2013-11-12 18:33 - 2006-09-28 16:05 - 00237848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_4.dll
2013-11-12 18:33 - 2006-09-28 16:04 - 00364824 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_4.dll
2013-11-12 18:33 - 2006-07-28 09:31 - 00083736 _____ (Microsoft Corporation) C:\WINDOWS\system32\xinput1_2.dll
2013-11-12 18:33 - 2006-07-28 09:30 - 00363288 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_3.dll
2013-11-12 18:33 - 2006-07-28 09:30 - 00236824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_3.dll
2013-11-12 18:33 - 2006-07-28 09:30 - 00062744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xinput1_2.dll
2013-11-12 18:33 - 2006-05-31 07:24 - 00230168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_2.dll
2013-11-12 18:33 - 2006-05-31 07:22 - 00354072 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_2.dll
2013-11-12 18:33 - 2006-03-31 12:41 - 03927248 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_30.dll
2013-11-12 18:33 - 2006-03-31 12:40 - 02388176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_30.dll
2013-11-12 18:33 - 2006-03-31 12:40 - 00352464 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_1.dll
2013-11-12 18:33 - 2006-03-31 12:39 - 00229584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_1.dll
2013-11-12 18:33 - 2006-03-31 12:39 - 00083664 _____ (Microsoft Corporation) C:\WINDOWS\system32\xinput1_1.dll
2013-11-12 18:33 - 2006-03-31 12:39 - 00062672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xinput1_1.dll
2013-11-12 18:33 - 2006-02-03 08:43 - 03830992 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_29.dll
2013-11-12 18:33 - 2006-02-03 08:43 - 02332368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_29.dll
2013-11-12 18:33 - 2006-02-03 08:42 - 00355536 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_0.dll
2013-11-12 18:33 - 2006-02-03 08:42 - 00230096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_0.dll
2013-11-12 18:33 - 2006-02-03 08:41 - 00016592 _____ (Microsoft Corporation) C:\WINDOWS\system32\x3daudio1_0.dll
2013-11-12 18:33 - 2006-02-03 08:41 - 00014032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\x3daudio1_0.dll
2013-11-12 18:33 - 2005-12-05 18:09 - 03815120 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_28.dll
2013-11-12 18:33 - 2005-12-05 18:09 - 02323664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_28.dll
2013-11-12 18:33 - 2005-07-22 19:59 - 03807440 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_27.dll
2013-11-12 18:33 - 2005-07-22 19:59 - 02319568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_27.dll
2013-11-12 18:33 - 2005-05-26 15:34 - 03767504 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_26.dll
2013-11-12 18:33 - 2005-05-26 15:34 - 02297552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_26.dll
2013-11-12 18:33 - 2005-03-18 17:19 - 03823312 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_25.dll
2013-11-12 18:33 - 2005-03-18 17:19 - 02337488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_25.dll
2013-11-12 18:33 - 2005-02-05 19:45 - 03544272 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_24.dll
2013-11-12 18:33 - 2005-02-05 19:45 - 02222800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_24.dll
2013-11-12 18:25 - 2013-11-12 18:25 - 00000000 ____D C:\Program Files (x86)\Ubisoft
2013-11-12 17:12 - 2013-11-15 09:31 - 00000000 ____D C:\Users\jokrause\.gimp-2.8
2013-11-12 17:12 - 2013-11-12 17:12 - 00000000 ____D C:\Users\jokrause\AppData\Local\gegl-0.2
2013-11-12 17:10 - 2013-11-23 09:03 - 00003946 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{D22DDD98-4022-4D59-B4F0-5DF20EC6EF68}
2013-11-12 17:08 - 2013-11-21 10:13 - 00000000 ____D C:\Program Files (x86)\WinSecurity
2013-11-12 17:08 - 2013-11-12 17:09 - 00000000 ____D C:\Program Files\GIMP 2
2013-11-12 17:08 - 2013-11-12 17:08 - 00000000 ____D C:\Users\jokrause\AppData\Roaming\Windows Net Data
2013-11-12 17:07 - 2013-11-12 18:38 - 00000898 _____ C:\WINDOWS\SysWOW64\InstallUtil.InstallLog
2013-11-12 17:05 - 2013-11-21 10:16 - 00000000 ____D C:\Program Files (x86)\SearchProtect
2013-11-12 17:05 - 2013-11-21 10:13 - 00000000 ____D C:\Users\jokrause\AppData\Roaming\SearchProtect
2013-11-12 17:05 - 2013-11-21 10:13 - 00000000 ____D C:\ProgramData\Conduit
2013-11-12 17:05 - 2013-11-12 17:05 - 00000000 ____D C:\Users\jokrause\AppData\Local\Conduit
2013-11-12 17:05 - 2013-11-12 17:05 - 00000000 ____D C:\Program Files (x86)\Conduit
2013-11-12 17:04 - 2013-11-12 17:05 - 00000009 _____ C:\END
2013-11-12 17:01 - 2013-11-12 17:01 - 00002236 _____ C:\Users\Public\Desktop\Google Earth.lnk
2013-11-12 17:00 - 2013-11-23 09:05 - 00001134 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2013-11-12 17:00 - 2013-11-23 07:12 - 00001130 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2013-11-12 17:00 - 2013-11-12 17:00 - 00004106 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2013-11-12 17:00 - 2013-11-12 17:00 - 00003870 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2013-11-12 16:59 - 2013-11-12 17:01 - 00000000 ____D C:\Users\jokrause\AppData\Local\Google
2013-11-12 16:59 - 2013-11-12 17:00 - 00000000 ____D C:\Program Files (x86)\Google
2013-11-12 16:59 - 2013-11-12 16:59 - 00819152 _____ (Google Inc.) C:\Users\jokrause\Downloads\GoogleEarthSetup.exe
2013-11-12 12:25 - 2013-11-23 07:13 - 00000000 ___RD C:\Users\jokrause\Dropbox
2013-11-12 12:25 - 2013-11-12 12:25 - 00001058 _____ C:\Users\jokrause\Desktop\Dropbox.lnk
2013-11-12 12:24 - 2013-11-12 12:24 - 00000000 ____D C:\Users\jokrause\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2013-11-12 12:23 - 2013-11-23 07:13 - 00000000 ____D C:\Users\jokrause\AppData\Roaming\Dropbox
2013-11-12 12:23 - 2013-11-12 12:23 - 35334016 _____ (Dropbox, Inc.) C:\Users\jokrause\Downloads\Dropbox 2.4.7.exe
2013-11-10 10:08 - 2013-11-10 10:08 - 00000000 ____D C:\Users\Default\AppData\Local\Microsoft Help
2013-11-10 10:08 - 2013-11-10 10:08 - 00000000 ____D C:\Users\Default User\AppData\Local\Microsoft Help
2013-11-07 07:35 - 2013-11-07 07:35 - 00000000 ___RD C:\WINDOWS\BrowserChoice
2013-11-05 20:33 - 2013-11-17 15:35 - 00087520 _____ C:\Users\jokrause\AppData\Local\GDIPFONTCACHEV1.DAT
2013-11-05 20:31 - 2013-11-13 10:21 - 00000000 ____D C:\Users\jokrause\AppData\Roaming\vlc
2013-11-05 20:31 - 2013-11-13 10:05 - 00000000 ____D C:\Users\jokrause\AppData\Roaming\dvdcss
2013-11-05 17:49 - 2013-11-22 21:31 - 00002715 _____ C:\Users\Public\Desktop\Skype.lnk
2013-11-05 17:49 - 2013-11-19 18:50 - 00000000 ____D C:\Users\jokrause\AppData\Roaming\Skype
2013-11-05 17:49 - 2013-11-05 17:49 - 00000000 ___RD C:\Program Files (x86)\Skype
2013-11-05 17:48 - 2013-11-22 21:31 - 00000000 ____D C:\ProgramData\Skype
2013-11-05 17:47 - 2013-11-05 17:48 - 35060384 _____ (Skype Technologies S.A.) C:\Users\jokrause\Downloads\SkypeSetupFull6.10.60.104.exe
2013-11-05 15:46 - 2013-11-05 15:46 - 02671854 _____ C:\Users\jokrause\Downloads\lightning-2.6.2-tb+sm-windows(1).xpi
2013-11-05 15:45 - 2013-11-05 15:45 - 02671854 _____ C:\Users\jokrause\Downloads\lightning-2.6.2-tb+sm-windows.xpi
2013-11-05 15:35 - 2013-11-05 15:35 - 04433586 _____ (Tinn-R Team                                                ) C:\Users\jokrause\Downloads\Tinn-R_2.4.1.7_setup.exe
2013-11-05 15:30 - 2013-11-05 15:31 - 53957312 _____ (R Core Team                                                ) C:\Users\jokrause\Downloads\R-3.0.2-win.exe
2013-11-05 14:10 - 2013-11-05 14:10 - 00010495 _____ C:\Users\jokrause\Downloads\jokrause_elster_2048.pfx
2013-11-05 13:56 - 2013-11-10 10:07 - 00000000 ____D C:\Program Files (x86)\Microsoft Works
2013-11-05 13:56 - 2013-11-05 13:56 - 00000000 ____D C:\WINDOWS\PCHEALTH
2013-11-05 13:53 - 2013-11-05 13:53 - 00000000 ____D C:\Program Files\Microsoft Office
2013-11-05 13:52 - 2013-11-05 13:52 - 00000000 __RHD C:\MSOCache
2013-11-05 13:08 - 2013-11-22 07:58 - 00000000 ____D C:\Users\jokrause\AppData\Local\Deployment
2013-11-05 13:08 - 2013-11-05 13:08 - 00000000 ____D C:\Users\jokrause\AppData\Local\Apps\2.0
2013-11-05 13:03 - 2013-11-14 12:48 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-11-05 13:03 - 2013-11-05 13:03 - 00000000 ____D C:\Users\jokrause\AppData\Local\Microsoft Help
2013-11-05 12:01 - 2013-11-05 12:01 - 00004868 _____ C:\Users\jokrause\Downloads\nat9.ani
2013-11-05 10:28 - 2013-11-14 10:45 - 00000000 ____D C:\Users\jokrause\Documents\Eigene Dokumente
2013-11-05 10:27 - 2013-11-05 10:27 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf
2013-11-05 10:17 - 2013-11-05 10:17 - 00000000 ____D C:\Users\jokrause\AppData\Roaming\TreeCardGames
2013-11-05 10:17 - 2013-11-05 10:17 - 00000000 ____D C:\ProgramData\TreeCardGames
2013-11-05 10:14 - 2013-11-05 10:14 - 00000000 ____D C:\Users\Public\CyberLink
2013-11-05 10:14 - 2013-11-05 10:14 - 00000000 ____D C:\Users\jokrause\AppData\Roaming\CyberLink
2013-11-05 10:14 - 2013-11-05 10:14 - 00000000 ____D C:\Users\jokrause\AppData\Local\Cyberlink
2013-11-05 10:11 - 2013-11-05 10:11 - 00000000 ____D C:\Program Files (x86)\123 Free Solitaire
2013-11-05 10:10 - 2013-11-05 10:10 - 07103672 _____ (TreeCardGames                                              ) C:\Users\jokrause\Downloads\123freesolitaire-v100-setup.exe
2013-11-05 09:58 - 2013-11-23 07:13 - 00000000 __RDO C:\Users\jokrause\SkyDrive
2013-11-05 09:47 - 2013-11-05 14:20 - 00000000 ____D C:\Users\jokrause\AppData\Roaming\Apple Computer
2013-11-05 09:47 - 2013-11-05 09:47 - 00001799 _____ C:\Users\Public\Desktop\iTunes.lnk
2013-11-05 09:47 - 2013-11-05 09:47 - 00000000 ____D C:\Users\jokrause\AppData\Local\Apple Computer
2013-11-05 09:47 - 2012-08-21 13:01 - 00033240 _____ (GEAR Software Inc.) C:\WINDOWS\system32\Drivers\GEARAspiWDM.sys
2013-11-05 09:46 - 2013-11-05 09:47 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2013-11-05 09:46 - 2013-11-05 09:47 - 00000000 ____D C:\Program Files\iTunes
2013-11-05 09:46 - 2013-11-05 09:47 - 00000000 ____D C:\Program Files (x86)\iTunes
2013-11-05 09:46 - 2013-11-05 09:46 - 00000000 ____D C:\ProgramData\Apple Computer
2013-11-05 09:46 - 2013-11-05 09:46 - 00000000 ____D C:\Program Files\iPod
2013-11-05 09:45 - 2013-11-05 09:45 - 00000000 ____D C:\WINDOWS\System32\Tasks\Apple
2013-11-05 09:45 - 2013-11-05 09:45 - 00000000 ____D C:\Users\jokrause\AppData\Local\Apple
2013-11-05 09:45 - 2013-11-05 09:45 - 00000000 ____D C:\Program Files (x86)\Apple Software Update
2013-11-05 09:44 - 2013-11-05 09:45 - 00000000 ____D C:\ProgramData\Apple
2013-11-05 09:44 - 2013-11-05 09:44 - 00000000 ____D C:\Program Files\Common Files\Apple
2013-11-05 09:44 - 2013-11-05 09:44 - 00000000 ____D C:\Program Files\Bonjour
2013-11-05 09:44 - 2013-11-05 09:44 - 00000000 ____D C:\Program Files (x86)\Bonjour
2013-11-05 09:40 - 2013-11-05 09:42 - 100422480 _____ (Apple Inc.) C:\Users\jokrause\Downloads\iTunes64Setup.exe
2013-11-05 09:30 - 2013-11-05 09:30 - 00000000 ____D C:\Users\jokrause\AppData\Roaming\WildTangent
2013-11-05 09:29 - 2013-11-05 09:29 - 00002043 _____ C:\Users\Public\Desktop\Adobe Reader XI.lnk
2013-11-05 09:28 - 2013-11-08 16:14 - 00000000 ____D C:\ProgramData\Adobe
2013-11-05 09:28 - 2013-11-05 09:28 - 00000000 ____D C:\Program Files (x86)\Adobe
2013-11-05 09:24 - 2013-11-05 09:24 - 00000891 _____ C:\Users\Public\Desktop\VLC media player.lnk
2013-11-05 09:24 - 2013-11-05 09:24 - 00000000 ____D C:\Program Files\VideoLAN
2013-11-05 09:23 - 2013-11-05 09:23 - 23280480 _____ C:\Users\jokrause\Downloads\vlc-2.1.0-win64.exe
2013-11-05 09:21 - 2013-11-22 07:47 - 00000000 ____D C:\Users\jokrause\AppData\Local\Thunderbird
2013-11-05 09:21 - 2013-11-05 09:21 - 00000000 ____D C:\Users\jokrause\AppData\Roaming\Thunderbird
2013-11-05 09:20 - 2013-11-22 08:00 - 00000000 ____D C:\Program Files (x86)\Mozilla Thunderbird
2013-11-05 09:20 - 2013-11-05 09:20 - 00002106 _____ C:\Users\Public\Desktop\Mozilla Thunderbird.lnk
2013-11-05 09:19 - 2013-11-05 09:19 - 21981512 _____ (Mozilla) C:\Users\jokrause\Downloads\Thunderbird_Setup_24.1.0.exe
2013-11-05 08:58 - 2013-11-22 22:09 - 00000000 ____D C:\Users\jokrause\AppData\Roaming\ClassicShell
2013-11-05 08:58 - 2013-11-05 08:54 - 00002174 _____ C:\Users\jokrause\AppData\Roaming\Microsoft\Windows\Start Menu\startscreen.lnk
2013-11-05 08:54 - 2013-11-05 08:54 - 05629632 _____ (IvoSoft) C:\Users\jokrause\Downloads\ClassicShellSetup_4_0_2.exe
2013-11-05 08:54 - 2013-11-05 08:54 - 00000000 ____D C:\Program Files\Classic Shell
2013-11-05 08:13 - 2013-11-05 08:13 - 00000000 ____D C:\Users\jokrause\Documents\Bluetooth Folder
2013-11-05 08:13 - 2013-11-05 08:13 - 00000000 ____D C:\Users\jokrause\AppData\Local\BMExplorer
2013-11-05 08:11 - 2013-11-05 08:11 - 00001458 _____ C:\Users\jokrause\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2013-11-05 08:11 - 2013-11-05 08:11 - 00000020 ___SH C:\Users\jokrause\ntuser.ini
2013-11-05 08:08 - 2013-11-23 07:51 - 01503578 _____ C:\WINDOWS\WindowsUpdate.log
2013-11-05 08:08 - 2013-11-05 08:08 - 00000000 _SHDL C:\Users\Default\Vorlagen
2013-11-05 08:08 - 2013-11-05 08:08 - 00000000 _SHDL C:\Users\Default\Startmenü
2013-11-05 08:08 - 2013-11-05 08:08 - 00000000 _SHDL C:\Users\Default\Netzwerkumgebung
2013-11-05 08:08 - 2013-11-05 08:08 - 00000000 _SHDL C:\Users\Default\Lokale Einstellungen
2013-11-05 08:08 - 2013-11-05 08:08 - 00000000 _SHDL C:\Users\Default\Eigene Dateien
2013-11-05 08:08 - 2013-11-05 08:08 - 00000000 _SHDL C:\Users\Default\Druckumgebung
2013-11-05 08:08 - 2013-11-05 08:08 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Musik
2013-11-05 08:08 - 2013-11-05 08:08 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Bilder
2013-11-05 08:08 - 2013-11-05 08:08 - 00000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2013-11-05 08:08 - 2013-11-05 08:08 - 00000000 _SHDL C:\Users\Default\AppData\Local\Verlauf
2013-11-05 08:08 - 2013-11-05 08:08 - 00000000 _SHDL C:\Users\Default\AppData\Local\Anwendungsdaten
2013-11-05 08:08 - 2013-11-05 08:08 - 00000000 _SHDL C:\Users\Default\Anwendungsdaten
2013-11-05 08:08 - 2013-11-05 08:08 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Musik
2013-11-05 08:08 - 2013-11-05 08:08 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Bilder
2013-11-05 08:08 - 2013-11-05 08:08 - 00000000 _SHDL C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2013-11-05 08:08 - 2013-11-05 08:08 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Verlauf
2013-11-05 08:08 - 2013-11-05 08:08 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Anwendungsdaten
2013-11-05 08:07 - 2013-11-05 08:07 - 00022960 _____ C:\WINDOWS\system32\emptyregdb.dat
2013-11-05 07:57 - 2013-11-05 07:57 - 00000000 ____D C:\WINDOWS\system32\config\bbimigrate
2013-11-05 07:56 - 2013-11-15 09:27 - 00000000 ____D C:\Users\jokrause
2013-11-05 07:56 - 2013-11-05 08:08 - 00020958 _____ C:\WINDOWS\diagwrn.xml
2013-11-05 07:56 - 2013-11-05 08:08 - 00020958 _____ C:\WINDOWS\diagerr.xml
2013-11-05 07:56 - 2013-11-05 07:56 - 00000000 _SHDL C:\Users\jokrause\Vorlagen
2013-11-05 07:56 - 2013-11-05 07:56 - 00000000 _SHDL C:\Users\jokrause\Startmenü
2013-11-05 07:56 - 2013-11-05 07:56 - 00000000 _SHDL C:\Users\jokrause\Netzwerkumgebung
2013-11-05 07:56 - 2013-11-05 07:56 - 00000000 _SHDL C:\Users\jokrause\Lokale Einstellungen
2013-11-05 07:56 - 2013-11-05 07:56 - 00000000 _SHDL C:\Users\jokrause\Eigene Dateien
2013-11-05 07:56 - 2013-11-05 07:56 - 00000000 _SHDL C:\Users\jokrause\Druckumgebung
2013-11-05 07:56 - 2013-11-05 07:56 - 00000000 _SHDL C:\Users\jokrause\Documents\Eigene Musik
2013-11-05 07:56 - 2013-11-05 07:56 - 00000000 _SHDL C:\Users\jokrause\Documents\Eigene Bilder
2013-11-05 07:56 - 2013-11-05 07:56 - 00000000 _SHDL C:\Users\jokrause\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2013-11-05 07:56 - 2013-11-05 07:56 - 00000000 _SHDL C:\Users\jokrause\AppData\Local\Verlauf
2013-11-05 07:56 - 2013-11-05 07:56 - 00000000 _SHDL C:\Users\jokrause\AppData\Local\Anwendungsdaten
2013-11-05 07:56 - 2013-11-05 07:56 - 00000000 _SHDL C:\Users\jokrause\Anwendungsdaten
2013-11-05 07:56 - 2013-11-05 07:56 - 00000000 ___RD C:\Users\jokrause\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2013-11-05 07:56 - 2013-08-22 16:36 - 00000000 ___RD C:\Users\jokrause\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2013-11-05 07:56 - 2013-08-22 16:36 - 00000000 ___RD C:\Users\jokrause\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2013-11-05 07:56 - 2013-08-22 16:36 - 00000000 ____D C:\Users\jokrause\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2013-11-05 07:52 - 2013-11-05 07:58 - 00000000 ____D C:\Program Files (x86)\Intel
2013-11-05 07:52 - 2013-11-05 07:52 - 00000000 ____D C:\WINDOWS\SysWOW64\RTCOM
2013-11-05 07:52 - 2013-11-05 07:52 - 00000000 ____D C:\Program Files\Realtek
2013-11-05 07:52 - 2013-11-05 07:52 - 00000000 ____D C:\Program Files\Elantech
2013-11-05 07:52 - 2013-11-05 07:52 - 00000000 ____D C:\Program Files\Common Files\ATI Technologies
2013-11-05 07:52 - 2013-11-05 07:52 - 00000000 ____D C:\Program Files\AMD
2013-11-05 07:51 - 2013-11-05 07:58 - 00000000 ____D C:\Program Files\Intel
2013-11-05 07:51 - 2013-11-05 07:51 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_TeeDriverx64_01011.Wdf
2013-11-05 07:50 - 2013-11-06 07:52 - 00000000 ___DC C:\WINDOWS\Panther
2013-11-05 07:50 - 2013-11-05 07:50 - 00000000 __SHD C:\Recovery
2013-11-05 07:48 - 2013-11-05 07:48 - 02140888 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll
2013-11-05 07:48 - 2013-11-05 07:48 - 01765384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11.dll
2013-11-05 07:48 - 2013-11-05 07:48 - 01286552 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll
2013-11-05 07:48 - 2013-11-05 07:48 - 01217024 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Streaming.dll
2013-11-05 07:48 - 2013-11-05 07:48 - 01018960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll
2013-11-05 07:48 - 2013-11-05 07:48 - 00977408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Streaming.dll
2013-11-05 07:48 - 2013-11-05 07:48 - 00872840 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfplat.dll
2013-11-05 07:48 - 2013-11-05 07:48 - 00698232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfplat.dll
2013-11-05 07:48 - 2013-11-05 07:48 - 00516496 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll
2013-11-05 07:48 - 2013-11-05 07:48 - 00406400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxgi.dll
2013-11-05 07:48 - 2013-11-05 07:48 - 00382808 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2013-11-05 07:48 - 2013-11-05 07:48 - 00294400 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Sensors.dll
2013-11-05 07:48 - 2013-11-05 07:48 - 00225792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Sensors.dll
2013-11-05 07:47 - 2013-11-05 07:47 - 00262144 _____ C:\WINDOWS\system32\config\userdiff
2013-11-05 07:46 - 2013-11-05 07:46 - 00000000 ____D C:\WINDOWS\SysWOW64\XPSViewer
2013-11-05 07:46 - 2013-11-05 07:46 - 00000000 ____D C:\Program Files\Reference Assemblies
2013-11-05 07:46 - 2013-11-05 07:46 - 00000000 ____D C:\Program Files\MSBuild
2013-11-05 07:46 - 2013-11-05 07:46 - 00000000 ____D C:\Program Files (x86)\Reference Assemblies
2013-11-05 07:46 - 2013-11-05 07:46 - 00000000 ____D C:\Program Files (x86)\MSBuild
2013-11-05 07:45 - 2013-08-03 05:48 - 01166520 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationNative_v0300.dll
2013-11-05 07:45 - 2013-08-03 05:48 - 00124112 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2013-11-05 07:45 - 2013-08-03 05:48 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe
2013-11-05 07:45 - 2013-08-03 05:41 - 00778936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationNative_v0300.dll
2013-11-05 07:45 - 2013-08-03 05:41 - 00102608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2013-11-05 07:45 - 2013-08-03 05:41 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TsWpfWrp.exe
2013-11-05 07:31 - 2013-11-05 08:08 - 00006532 _____ C:\WINDOWS\comsetup.log
2013-11-05 02:53 - 2013-11-05 02:53 - 00000000 ____D C:\Users\jokrause\AppData\Roaming\Macromedia
2013-11-05 02:25 - 2013-11-22 21:55 - 00003600 _____ C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1679506624-2517906247-3148078019-1001
2013-11-05 02:22 - 2013-11-05 02:22 - 00000000 ____D C:\Users\Public\OEM
2013-11-05 02:22 - 2013-11-05 02:22 - 00000000 ____D C:\Users\jokrause\PicStream
2013-11-05 02:22 - 2013-11-05 02:22 - 00000000 ____D C:\Users\jokrause\Documents\clear.fi
2013-11-05 02:21 - 2013-11-05 13:27 - 00000000 ____D C:\Users\jokrause\AppData\Local\clear.fi
2013-11-05 02:17 - 2013-11-05 02:17 - 00000000 ____D C:\Users\jokrause\AppData\Roaming\Atheros
2013-11-05 02:17 - 2013-11-05 02:17 - 00000000 ____D C:\ProgramData\OEM_YAHOO
2013-11-05 02:17 - 2013-11-05 02:17 - 00000000 ____D C:\Program Files\Preload
2013-11-05 02:17 - 2013-11-05 02:17 - 00000000 ____D C:\Program Files\Accessory Store
2013-11-05 02:17 - 2013-11-05 02:17 - 00000000 ____D C:\Program Files (x86)\OEM
2013-11-05 02:16 - 2013-11-20 21:01 - 00000000 ___RD C:\Users\jokrause\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-11-05 02:16 - 2013-11-20 21:01 - 00000000 ___RD C:\Users\jokrause\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2013-11-05 02:16 - 2013-11-05 10:43 - 00000000 ____D C:\Users\jokrause\AppData\Roaming\Adobe
2013-11-05 02:16 - 2013-11-05 03:01 - 00000000 ____D C:\Users\jokrause\AppData\Local\VirtualStore
2013-11-05 02:16 - 2013-11-05 02:16 - 00000000 ____D C:\WINDOWS\System32\Tasks\WPD
2013-11-05 02:15 - 2013-11-12 12:18 - 00000000 ____D C:\Users\jokrause\AppData\Local\Packages
2013-11-05 02:01 - 2013-11-05 02:01 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Musik
2013-11-05 02:01 - 2013-11-05 02:01 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Bilder
2013-11-05 02:01 - 2013-11-05 02:01 - 00000000 _SHDL C:\Users\Default.migrated\Vorlagen
2013-11-05 02:01 - 2013-11-05 02:01 - 00000000 _SHDL C:\Users\Default.migrated\Startmenü
2013-11-05 02:01 - 2013-11-05 02:01 - 00000000 _SHDL C:\Users\Default.migrated\Netzwerkumgebung
2013-11-05 02:01 - 2013-11-05 02:01 - 00000000 _SHDL C:\Users\Default.migrated\Lokale Einstellungen
2013-11-05 02:01 - 2013-11-05 02:01 - 00000000 _SHDL C:\Users\Default.migrated\Eigene Dateien
2013-11-05 02:01 - 2013-11-05 02:01 - 00000000 _SHDL C:\Users\Default.migrated\Druckumgebung
2013-11-05 02:01 - 2013-11-05 02:01 - 00000000 _SHDL C:\Users\Default.migrated\Documents\Eigene Musik
2013-11-05 02:01 - 2013-11-05 02:01 - 00000000 _SHDL C:\Users\Default.migrated\Documents\Eigene Bilder
2013-11-05 02:01 - 2013-11-05 02:01 - 00000000 _SHDL C:\Users\Default.migrated\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2013-11-05 02:01 - 2013-11-05 02:01 - 00000000 _SHDL C:\Users\Default.migrated\AppData\Local\Verlauf
2013-11-05 02:01 - 2013-11-05 02:01 - 00000000 _SHDL C:\Users\Default.migrated\AppData\Local\Anwendungsdaten
2013-11-05 02:01 - 2013-11-05 02:01 - 00000000 _SHDL C:\Users\Default.migrated\Anwendungsdaten
2013-11-05 02:01 - 2013-11-05 02:01 - 00000000 _SHDL C:\Programme
2013-11-05 02:01 - 2013-11-05 02:01 - 00000000 _SHDL C:\ProgramData\Vorlagen
2013-11-05 02:01 - 2013-11-05 02:01 - 00000000 _SHDL C:\ProgramData\Startmenü
2013-11-05 02:01 - 2013-11-05 02:01 - 00000000 _SHDL C:\ProgramData\Dokumente
2013-11-05 02:01 - 2013-11-05 02:01 - 00000000 _SHDL C:\ProgramData\Anwendungsdaten
2013-11-05 02:01 - 2013-11-05 02:01 - 00000000 _SHDL C:\Program Files\Gemeinsame Dateien
2013-11-05 02:01 - 2013-11-05 02:01 - 00000000 _SHDL C:\Dokumente und Einstellungen
2013-11-04 23:09 - 2013-11-04 23:09 - 00000000 ____D C:\Users\jokrause\AppData\Local\Macromedia
2013-11-04 23:03 - 2013-11-05 10:43 - 00000000 ____D C:\Users\jokrause\AppData\Local\Adobe
2013-11-04 22:52 - 2013-11-15 20:33 - 00000000 ____D C:\Users\jokrause\AppData\Local\Mozilla
2013-11-04 22:52 - 2013-11-04 22:52 - 00000000 ____D C:\Users\jokrause\AppData\Roaming\Mozilla
2013-11-04 22:49 - 2013-11-22 20:50 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-11-04 22:49 - 2013-11-04 22:49 - 00001155 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2013-11-04 22:49 - 2013-11-04 22:49 - 00000000 ____D C:\ProgramData\Mozilla
2013-11-04 22:45 - 2013-11-04 22:45 - 00003558 _____ C:\WINDOWS\System32\Tasks\CreateChoiceProcessTask
2013-11-04 22:24 - 2013-11-14 12:46 - 00000000 ____D C:\WINDOWS\system32\MRT
2013-11-04 22:24 - 2013-11-14 12:41 - 82896128 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2013-11-04 21:48 - 2013-11-04 21:48 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_User_LocationProvider_01_11_00.Wdf
2013-11-04 21:44 - 2013-11-04 21:44 - 00000000 ____D C:\Users\jokrause\AppData\Roaming\OpenOffice
2013-11-04 21:44 - 2013-05-04 05:51 - 00014848 ____N (Microsoft) C:\WINDOWS\system32\rars.rs
2013-11-04 21:44 - 2013-05-04 05:10 - 00014848 ____N (Microsoft) C:\WINDOWS\SysWOW64\rars.rs
2013-11-04 21:43 - 2013-11-04 21:43 - 00001116 _____ C:\Users\Public\Desktop\OpenOffice 4.0.1.lnk
2013-11-04 21:43 - 2013-11-04 21:43 - 00000000 ____D C:\Program Files (x86)\OpenOffice 4

==================== One Month Modified Files and Folders =======

2021-10-21 14:36 - 2013-07-23 22:55 - 00000852 _____ C:\WINDOWS\system32\Drivers\RTKHDRC.dat
2021-10-04 08:34 - 2013-07-23 22:55 - 00000712 _____ C:\WINDOWS\system32\Drivers\RTMICEQ0.dat
2013-11-23 09:11 - 2013-11-23 09:11 - 00020960 _____ C:\Users\jokrause\Downloads\FRST.txt
2013-11-23 09:11 - 2013-11-23 09:11 - 00000000 ____D C:\FRST
2013-11-23 09:10 - 2013-11-23 09:10 - 01957916 _____ (Farbar) C:\Users\jokrause\Downloads\FRST64.exe
2013-11-23 09:06 - 2013-11-22 20:55 - 00000000 ____D C:\ProgramData\Kaspersky Lab
2013-11-23 09:05 - 2013-11-12 17:00 - 00001134 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2013-11-23 09:03 - 2013-11-12 17:10 - 00003946 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{D22DDD98-4022-4D59-B4F0-5DF20EC6EF68}
2013-11-23 09:00 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\sru
2013-11-23 07:51 - 2013-11-05 08:08 - 01503578 _____ C:\WINDOWS\WindowsUpdate.log
2013-11-23 07:16 - 2013-11-22 20:55 - 00626272 _____ (Kaspersky Lab ZAO) C:\WINDOWS\system32\Drivers\klif.sys
2013-11-23 07:16 - 2013-10-17 15:47 - 00458336 _____ (Kaspersky Lab ZAO) C:\WINDOWS\system32\Drivers\kl1.sys
2013-11-23 07:13 - 2013-11-12 12:25 - 00000000 ___RD C:\Users\jokrause\Dropbox
2013-11-23 07:13 - 2013-11-12 12:23 - 00000000 ____D C:\Users\jokrause\AppData\Roaming\Dropbox
2013-11-23 07:13 - 2013-11-05 09:58 - 00000000 __RDO C:\Users\jokrause\SkyDrive
2013-11-23 07:12 - 2013-11-12 17:00 - 00001130 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2013-11-22 22:09 - 2013-11-05 08:58 - 00000000 ____D C:\Users\jokrause\AppData\Roaming\ClassicShell
2013-11-22 21:55 - 2013-11-05 02:25 - 00003600 _____ C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1679506624-2517906247-3148078019-1001
2013-11-22 21:31 - 2013-11-05 17:49 - 00002715 _____ C:\Users\Public\Desktop\Skype.lnk
2013-11-22 21:31 - 2013-11-05 17:48 - 00000000 ____D C:\ProgramData\Skype
2013-11-22 20:57 - 2013-11-22 20:57 - 00002354 _____ C:\Users\jokrause\Desktop\Sicherer Zahlungsverkehr.lnk
2013-11-22 20:57 - 2013-11-22 20:57 - 00001349 _____ C:\Users\jokrause\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Kaspersky Internet Security.lnk
2013-11-22 20:57 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\tracing
2013-11-22 20:56 - 2013-11-22 20:56 - 00001144 _____ C:\Users\Public\Desktop\Kaspersky Internet Security.lnk
2013-11-22 20:56 - 2013-09-30 05:14 - 01776918 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2013-11-22 20:56 - 2013-09-30 04:56 - 00765582 _____ C:\WINDOWS\system32\perfh007.dat
2013-11-22 20:56 - 2013-09-30 04:56 - 00159366 _____ C:\WINDOWS\system32\perfc007.dat
2013-11-22 20:56 - 2013-08-22 14:25 - 00262144 ___SH C:\WINDOWS\system32\config\ELAM
2013-11-22 20:55 - 2013-11-22 20:55 - 00000000 ____D C:\Program Files (x86)\Kaspersky Lab
2013-11-22 20:55 - 2012-07-26 09:12 - 00000000 ___HD C:\WINDOWS\ELAMBKUP
2013-11-22 20:50 - 2013-11-04 22:49 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-11-22 20:50 - 2013-09-29 20:04 - 00051208 _____ C:\WINDOWS\PFRO.log
2013-11-22 20:50 - 2013-08-22 15:45 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2013-11-22 20:49 - 2013-08-22 14:25 - 21233664 ___SH C:\WINDOWS\system32\config\BBI
2013-11-22 16:50 - 2013-11-22 10:50 - 00000000 ____D C:\AdwCleaner
2013-11-22 11:18 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\rescache
2013-11-22 10:50 - 2013-11-22 10:50 - 01085542 _____ C:\Users\jokrause\Downloads\adwcleaner_3012.exe
2013-11-22 08:00 - 2013-11-05 09:20 - 00000000 ____D C:\Program Files (x86)\Mozilla Thunderbird
2013-11-22 07:58 - 2013-11-05 13:08 - 00000000 ____D C:\Users\jokrause\AppData\Local\Deployment
2013-11-22 07:47 - 2013-11-05 09:21 - 00000000 ____D C:\Users\jokrause\AppData\Local\Thunderbird
2013-11-21 10:42 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\AppReadiness
2013-11-21 10:16 - 2013-11-12 17:05 - 00000000 ____D C:\Program Files (x86)\SearchProtect
2013-11-21 10:13 - 2013-11-12 17:08 - 00000000 ____D C:\Program Files (x86)\WinSecurity
2013-11-21 10:13 - 2013-11-12 17:05 - 00000000 ____D C:\Users\jokrause\AppData\Roaming\SearchProtect
2013-11-21 10:13 - 2013-11-12 17:05 - 00000000 ____D C:\ProgramData\Conduit
2013-11-21 09:48 - 2013-11-21 09:48 - 00000000 ____D C:\Users\jokrause\AppData\Roaming\Malwarebytes
2013-11-21 09:46 - 2013-11-21 09:46 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\jokrause\Downloads\mbam-setup-1.75.0.1300(1).exe
2013-11-21 09:46 - 2013-11-21 09:46 - 00001129 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2013-11-21 09:46 - 2013-11-21 09:46 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-11-21 09:46 - 2013-11-21 09:46 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-11-21 09:45 - 2013-11-21 09:44 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\jokrause\Downloads\mbam-setup-1.75.0.1300.exe
2013-11-21 09:42 - 2013-11-21 08:59 - 00000000 ____D C:\WINDOWS\72AAF4551E54475BB0AB5413C78D0E63.TMP
2013-11-21 09:01 - 2013-11-21 09:01 - 00000000 _____ C:\autoexec.bat
2013-11-21 09:00 - 2013-11-21 09:00 - 00000000 ____D C:\Program Files\Enigma Software Group
2013-11-21 08:57 - 2013-11-21 08:57 - 00728960 _____ (Enigma Software Group USA, LLC.) C:\Users\jokrause\Downloads\SpyHunter-Installer.exe
2013-11-20 22:28 - 2013-11-20 21:27 - 00000000 ____D C:\Users\jokrause\AppData\Roaming\Tinn-R
2013-11-20 21:40 - 2013-11-20 21:40 - 00001056 _____ C:\Users\Public\Desktop\R i386 3.0.2.lnk
2013-11-20 21:40 - 2013-11-20 21:40 - 00001049 _____ C:\Users\Public\Desktop\R x64 3.0.2.lnk
2013-11-20 21:40 - 2013-11-20 21:40 - 00000000 ____D C:\Tinn-R
2013-11-20 21:39 - 2013-11-20 21:39 - 00000000 ____D C:\Program Files\R
2013-11-20 21:33 - 2013-11-20 21:33 - 00264616 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\javaws.exe
2013-11-20 21:33 - 2013-11-20 21:33 - 00175016 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\javaw.exe
2013-11-20 21:33 - 2013-11-20 21:33 - 00174504 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\java.exe
2013-11-20 21:33 - 2013-11-20 21:33 - 00096168 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-32.dll
2013-11-20 21:33 - 2013-11-20 21:33 - 00000000 ____D C:\ProgramData\Sun
2013-11-20 21:33 - 2013-11-20 21:33 - 00000000 ____D C:\ProgramData\Oracle
2013-11-20 21:33 - 2013-11-20 21:33 - 00000000 ____D C:\Program Files (x86)\Java
2013-11-20 21:31 - 2013-11-20 21:31 - 00915368 _____ (Oracle Corporation) C:\Users\jokrause\Downloads\jxpiinstall.exe
2013-11-20 21:29 - 2013-11-20 21:29 - 00000000 ____D C:\Users\jokrause\Documents\R
2013-11-20 21:01 - 2013-11-05 02:16 - 00000000 ___RD C:\Users\jokrause\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-11-20 21:01 - 2013-11-05 02:16 - 00000000 ___RD C:\Users\jokrause\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2013-11-20 21:00 - 2013-08-22 15:44 - 00397952 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2013-11-20 20:57 - 2013-08-22 16:36 - 00000000 ___RD C:\WINDOWS\ToastData
2013-11-20 20:57 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\WinStore
2013-11-20 20:57 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\migwiz
2013-11-20 20:57 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\PolicyDefinitions
2013-11-19 18:50 - 2013-11-05 17:49 - 00000000 ____D C:\Users\jokrause\AppData\Roaming\Skype
2013-11-17 15:35 - 2013-11-05 20:33 - 00087520 _____ C:\Users\jokrause\AppData\Local\GDIPFONTCACHEV1.DAT
2013-11-16 06:12 - 2013-11-16 06:12 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-11-15 20:33 - 2013-11-04 22:52 - 00000000 ____D C:\Users\jokrause\AppData\Local\Mozilla
2013-11-15 10:36 - 2013-11-15 10:36 - 00000000 ____D C:\Users\jokrause\Documents\OneNote-Notizbücher
2013-11-15 10:31 - 2013-11-15 10:31 - 00598304 _____ C:\Users\jokrause\Downloads\Workflowy_Allmyapps.exe
2013-11-15 09:31 - 2013-11-15 09:31 - 00005354 _____ C:\Users\jokrause\AppData\Local\recently-used.xbel
2013-11-15 09:31 - 2013-11-15 09:27 - 00000000 ____D C:\Users\jokrause\AppData\Local\gtk-2.0
2013-11-15 09:31 - 2013-11-12 17:12 - 00000000 ____D C:\Users\jokrause\.gimp-2.8
2013-11-15 09:27 - 2013-11-15 09:27 - 00000000 ____D C:\Users\jokrause\.thumbnails
2013-11-15 09:27 - 2013-11-05 07:56 - 00000000 ____D C:\Users\jokrause
2013-11-14 13:16 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\NDF
2013-11-14 12:48 - 2013-11-05 13:03 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-11-14 12:46 - 2013-11-04 22:24 - 00000000 ____D C:\WINDOWS\system32\MRT
2013-11-14 12:41 - 2013-11-04 22:24 - 82896128 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2013-11-14 11:13 - 2013-11-14 11:13 - 02724864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb
2013-11-14 11:13 - 2013-11-14 11:13 - 02724864 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb
2013-11-14 10:45 - 2013-11-05 10:28 - 00000000 ____D C:\Users\jokrause\Documents\Eigene Dokumente
2013-11-13 10:21 - 2013-11-05 20:31 - 00000000 ____D C:\Users\jokrause\AppData\Roaming\vlc
2013-11-13 10:05 - 2013-11-05 20:31 - 00000000 ____D C:\Users\jokrause\AppData\Roaming\dvdcss
2013-11-13 09:55 - 2013-11-13 09:55 - 03049560 _____ (Cisco Systems, Inc.) C:\Users\jokrause\Downloads\anyconnect-win-3.1.04066-web-deploy-k9.exe
2013-11-13 09:55 - 2013-11-13 09:55 - 00000000 ____D C:\Users\jokrause\AppData\Local\Cisco
2013-11-13 09:55 - 2013-11-13 09:55 - 00000000 ____D C:\ProgramData\Cisco
2013-11-13 09:55 - 2013-11-13 09:55 - 00000000 ____D C:\Program Files (x86)\Cisco
2013-11-12 19:21 - 2013-11-12 19:21 - 00000000 ____D C:\Users\jokrause\Documents\ANNO 1404 Venedig
2013-11-12 19:21 - 2013-11-12 18:45 - 00000000 ____D C:\Users\jokrause\AppData\Roaming\Ubisoft
2013-11-12 18:44 - 2013-11-12 18:44 - 00000000 ____D C:\ProgramData\Solidshield
2013-11-12 18:42 - 2013-05-29 08:07 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2013-11-12 18:38 - 2013-11-12 17:07 - 00000898 _____ C:\WINDOWS\SysWOW64\InstallUtil.InstallLog
2013-11-12 18:33 - 2013-11-12 18:33 - 00314016 _____ C:\WINDOWS\system32\Drivers\atksgt.sys
2013-11-12 18:33 - 2013-11-12 18:33 - 00043680 _____ C:\WINDOWS\system32\Drivers\lirsgt.sys
2013-11-12 18:33 - 2013-11-12 18:33 - 00010123 _____ C:\WINDOWS\DirectX.log
2013-11-12 18:25 - 2013-11-12 18:25 - 00000000 ____D C:\Program Files (x86)\Ubisoft
2013-11-12 17:12 - 2013-11-12 17:12 - 00000000 ____D C:\Users\jokrause\AppData\Local\gegl-0.2
2013-11-12 17:09 - 2013-11-12 17:08 - 00000000 ____D C:\Program Files\GIMP 2
2013-11-12 17:08 - 2013-11-12 17:08 - 00000000 ____D C:\Users\jokrause\AppData\Roaming\Windows Net Data
2013-11-12 17:05 - 2013-11-12 17:05 - 00000000 ____D C:\Users\jokrause\AppData\Local\Conduit
2013-11-12 17:05 - 2013-11-12 17:05 - 00000000 ____D C:\Program Files (x86)\Conduit
2013-11-12 17:05 - 2013-11-12 17:04 - 00000009 _____ C:\END
2013-11-12 17:01 - 2013-11-12 17:01 - 00002236 _____ C:\Users\Public\Desktop\Google Earth.lnk
2013-11-12 17:01 - 2013-11-12 16:59 - 00000000 ____D C:\Users\jokrause\AppData\Local\Google
2013-11-12 17:00 - 2013-11-12 17:00 - 00004106 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2013-11-12 17:00 - 2013-11-12 17:00 - 00003870 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2013-11-12 17:00 - 2013-11-12 16:59 - 00000000 ____D C:\Program Files (x86)\Google
2013-11-12 16:59 - 2013-11-12 16:59 - 00819152 _____ (Google Inc.) C:\Users\jokrause\Downloads\GoogleEarthSetup.exe
2013-11-12 15:45 - 2013-08-22 15:46 - 00291782 _____ C:\WINDOWS\setupact.log
2013-11-12 12:25 - 2013-11-12 12:25 - 00001058 _____ C:\Users\jokrause\Desktop\Dropbox.lnk
2013-11-12 12:24 - 2013-11-12 12:24 - 00000000 ____D C:\Users\jokrause\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2013-11-12 12:23 - 2013-11-12 12:23 - 35334016 _____ (Dropbox, Inc.) C:\Users\jokrause\Downloads\Dropbox 2.4.7.exe
2013-11-12 12:18 - 2013-11-05 02:15 - 00000000 ____D C:\Users\jokrause\AppData\Local\Packages
2013-11-10 10:08 - 2013-11-10 10:08 - 00000000 ____D C:\Users\Default\AppData\Local\Microsoft Help
2013-11-10 10:08 - 2013-11-10 10:08 - 00000000 ____D C:\Users\Default User\AppData\Local\Microsoft Help
2013-11-10 10:07 - 2013-11-05 13:56 - 00000000 ____D C:\Program Files (x86)\Microsoft Works
2013-11-08 16:14 - 2013-11-05 09:28 - 00000000 ____D C:\ProgramData\Adobe
2013-11-07 07:35 - 2013-11-07 07:35 - 00000000 ___RD C:\WINDOWS\BrowserChoice
2013-11-06 07:52 - 2013-11-05 07:50 - 00000000 ___DC C:\WINDOWS\Panther
2013-11-06 00:31 - 2013-08-22 16:38 - 00693240 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2013-11-06 00:31 - 2013-08-22 16:38 - 00105464 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2013-11-05 21:21 - 2013-11-17 11:07 - 21196664 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2013-11-05 19:51 - 2013-11-17 11:07 - 18642504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2013-11-05 17:49 - 2013-11-05 17:49 - 00000000 ___RD C:\Program Files (x86)\Skype
2013-11-05 17:48 - 2013-11-05 17:47 - 35060384 _____ (Skype Technologies S.A.) C:\Users\jokrause\Downloads\SkypeSetupFull6.10.60.104.exe
2013-11-05 17:20 - 2013-11-17 11:07 - 13925888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2013-11-05 17:11 - 2013-11-17 11:07 - 18577408 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2013-11-05 15:46 - 2013-11-05 15:46 - 02671854 _____ C:\Users\jokrause\Downloads\lightning-2.6.2-tb+sm-windows(1).xpi
2013-11-05 15:45 - 2013-11-05 15:45 - 02671854 _____ C:\Users\jokrause\Downloads\lightning-2.6.2-tb+sm-windows.xpi
2013-11-05 15:35 - 2013-11-05 15:35 - 04433586 _____ (Tinn-R Team                                                ) C:\Users\jokrause\Downloads\Tinn-R_2.4.1.7_setup.exe
2013-11-05 15:31 - 2013-11-05 15:30 - 53957312 _____ (R Core Team                                                ) C:\Users\jokrause\Downloads\R-3.0.2-win.exe
2013-11-05 15:30 - 2013-11-17 11:07 - 11674112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2013-11-05 15:29 - 2013-11-17 11:07 - 13176320 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2013-11-05 14:20 - 2013-11-05 09:47 - 00000000 ____D C:\Users\jokrause\AppData\Roaming\Apple Computer
2013-11-05 14:10 - 2013-11-05 14:10 - 00010495 _____ C:\Users\jokrause\Downloads\jokrause_elster_2048.pfx
2013-11-05 13:56 - 2013-11-05 13:56 - 00000000 ____D C:\WINDOWS\PCHEALTH
2013-11-05 13:56 - 2013-08-22 16:36 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
2013-11-05 13:56 - 2013-07-23 23:15 - 00000000 ____D C:\Program Files (x86)\Microsoft Office
2013-11-05 13:53 - 2013-11-05 13:53 - 00000000 ____D C:\Program Files\Microsoft Office
2013-11-05 13:53 - 2013-09-30 04:59 - 00000000 ____D C:\WINDOWS\ShellNew
2013-11-05 13:52 - 2013-11-05 13:52 - 00000000 __RHD C:\MSOCache
2013-11-05 13:27 - 2013-11-05 02:21 - 00000000 ____D C:\Users\jokrause\AppData\Local\clear.fi
2013-11-05 13:08 - 2013-11-05 13:08 - 00000000 ____D C:\Users\jokrause\AppData\Local\Apps\2.0
2013-11-05 13:03 - 2013-11-05 13:03 - 00000000 ____D C:\Users\jokrause\AppData\Local\Microsoft Help
2013-11-05 12:01 - 2013-11-05 12:01 - 00004868 _____ C:\Users\jokrause\Downloads\nat9.ani
2013-11-05 10:43 - 2013-11-05 02:16 - 00000000 ____D C:\Users\jokrause\AppData\Roaming\Adobe
2013-11-05 10:43 - 2013-11-04 23:03 - 00000000 ____D C:\Users\jokrause\AppData\Local\Adobe
2013-11-05 10:27 - 2013-11-05 10:27 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf
2013-11-05 10:17 - 2013-11-05 10:17 - 00000000 ____D C:\Users\jokrause\AppData\Roaming\TreeCardGames
2013-11-05 10:17 - 2013-11-05 10:17 - 00000000 ____D C:\ProgramData\TreeCardGames
2013-11-05 10:14 - 2013-11-05 10:14 - 00000000 ____D C:\Users\Public\CyberLink
2013-11-05 10:14 - 2013-11-05 10:14 - 00000000 ____D C:\Users\jokrause\AppData\Roaming\CyberLink
2013-11-05 10:14 - 2013-11-05 10:14 - 00000000 ____D C:\Users\jokrause\AppData\Local\Cyberlink
2013-11-05 10:14 - 2013-07-23 23:18 - 00000000 ____D C:\ProgramData\CyberLink
2013-11-05 10:11 - 2013-11-05 10:11 - 00000000 ____D C:\Program Files (x86)\123 Free Solitaire
2013-11-05 10:10 - 2013-11-05 10:10 - 07103672 _____ (TreeCardGames                                              ) C:\Users\jokrause\Downloads\123freesolitaire-v100-setup.exe
2013-11-05 09:47 - 2013-11-05 09:47 - 00001799 _____ C:\Users\Public\Desktop\iTunes.lnk
2013-11-05 09:47 - 2013-11-05 09:47 - 00000000 ____D C:\Users\jokrause\AppData\Local\Apple Computer
2013-11-05 09:47 - 2013-11-05 09:46 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2013-11-05 09:47 - 2013-11-05 09:46 - 00000000 ____D C:\Program Files\iTunes
2013-11-05 09:47 - 2013-11-05 09:46 - 00000000 ____D C:\Program Files (x86)\iTunes
2013-11-05 09:46 - 2013-11-05 09:46 - 00000000 ____D C:\ProgramData\Apple Computer
2013-11-05 09:46 - 2013-11-05 09:46 - 00000000 ____D C:\Program Files\iPod
2013-11-05 09:45 - 2013-11-05 09:45 - 00000000 ____D C:\WINDOWS\System32\Tasks\Apple
2013-11-05 09:45 - 2013-11-05 09:45 - 00000000 ____D C:\Users\jokrause\AppData\Local\Apple
2013-11-05 09:45 - 2013-11-05 09:45 - 00000000 ____D C:\Program Files (x86)\Apple Software Update
2013-11-05 09:45 - 2013-11-05 09:44 - 00000000 ____D C:\ProgramData\Apple
2013-11-05 09:44 - 2013-11-05 09:44 - 00000000 ____D C:\Program Files\Common Files\Apple
2013-11-05 09:44 - 2013-11-05 09:44 - 00000000 ____D C:\Program Files\Bonjour
2013-11-05 09:44 - 2013-11-05 09:44 - 00000000 ____D C:\Program Files (x86)\Bonjour
2013-11-05 09:42 - 2013-11-05 09:40 - 100422480 _____ (Apple Inc.) C:\Users\jokrause\Downloads\iTunes64Setup.exe
2013-11-05 09:30 - 2013-11-05 09:30 - 00000000 ____D C:\Users\jokrause\AppData\Roaming\WildTangent
2013-11-05 09:30 - 2013-05-29 08:00 - 00000000 ____D C:\ProgramData\WildTangent
2013-11-05 09:30 - 2013-05-29 08:00 - 00000000 ____D C:\Program Files (x86)\WildTangent Games
2013-11-05 09:29 - 2013-11-05 09:29 - 00002043 _____ C:\Users\Public\Desktop\Adobe Reader XI.lnk
2013-11-05 09:28 - 2013-11-05 09:28 - 00000000 ____D C:\Program Files (x86)\Adobe
2013-11-05 09:24 - 2013-11-05 09:24 - 00000891 _____ C:\Users\Public\Desktop\VLC media player.lnk
2013-11-05 09:24 - 2013-11-05 09:24 - 00000000 ____D C:\Program Files\VideoLAN
2013-11-05 09:23 - 2013-11-05 09:23 - 23280480 _____ C:\Users\jokrause\Downloads\vlc-2.1.0-win64.exe
2013-11-05 09:21 - 2013-11-05 09:21 - 00000000 ____D C:\Users\jokrause\AppData\Roaming\Thunderbird
2013-11-05 09:20 - 2013-11-05 09:20 - 00002106 _____ C:\Users\Public\Desktop\Mozilla Thunderbird.lnk
2013-11-05 09:19 - 2013-11-05 09:19 - 21981512 _____ (Mozilla) C:\Users\jokrause\Downloads\Thunderbird_Setup_24.1.0.exe
2013-11-05 08:54 - 2013-11-05 08:58 - 00002174 _____ C:\Users\jokrause\AppData\Roaming\Microsoft\Windows\Start Menu\startscreen.lnk
2013-11-05 08:54 - 2013-11-05 08:54 - 05629632 _____ (IvoSoft) C:\Users\jokrause\Downloads\ClassicShellSetup_4_0_2.exe
2013-11-05 08:54 - 2013-11-05 08:54 - 00000000 ____D C:\Program Files\Classic Shell
2013-11-05 08:54 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\restore
2013-11-05 08:13 - 2013-11-05 08:13 - 00000000 ____D C:\Users\jokrause\Documents\Bluetooth Folder
2013-11-05 08:13 - 2013-11-05 08:13 - 00000000 ____D C:\Users\jokrause\AppData\Local\BMExplorer
2013-11-05 08:13 - 2013-07-23 23:06 - 00000000 ____D C:\ProgramData\Atheros
2013-11-05 08:11 - 2013-11-05 08:11 - 00001458 _____ C:\Users\jokrause\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2013-11-05 08:11 - 2013-11-05 08:11 - 00000020 ___SH C:\Users\jokrause\ntuser.ini
2013-11-05 08:08 - 2013-11-05 08:08 - 00000000 _SHDL C:\Users\Default\Vorlagen
2013-11-05 08:08 - 2013-11-05 08:08 - 00000000 _SHDL C:\Users\Default\Startmenü
2013-11-05 08:08 - 2013-11-05 08:08 - 00000000 _SHDL C:\Users\Default\Netzwerkumgebung
2013-11-05 08:08 - 2013-11-05 08:08 - 00000000 _SHDL C:\Users\Default\Lokale Einstellungen
2013-11-05 08:08 - 2013-11-05 08:08 - 00000000 _SHDL C:\Users\Default\Eigene Dateien
2013-11-05 08:08 - 2013-11-05 08:08 - 00000000 _SHDL C:\Users\Default\Druckumgebung
2013-11-05 08:08 - 2013-11-05 08:08 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Musik
2013-11-05 08:08 - 2013-11-05 08:08 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Bilder
2013-11-05 08:08 - 2013-11-05 08:08 - 00000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2013-11-05 08:08 - 2013-11-05 08:08 - 00000000 _SHDL C:\Users\Default\AppData\Local\Verlauf
2013-11-05 08:08 - 2013-11-05 08:08 - 00000000 _SHDL C:\Users\Default\AppData\Local\Anwendungsdaten
2013-11-05 08:08 - 2013-11-05 08:08 - 00000000 _SHDL C:\Users\Default\Anwendungsdaten
2013-11-05 08:08 - 2013-11-05 08:08 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Musik
2013-11-05 08:08 - 2013-11-05 08:08 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Bilder
2013-11-05 08:08 - 2013-11-05 08:08 - 00000000 _SHDL C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2013-11-05 08:08 - 2013-11-05 08:08 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Verlauf
2013-11-05 08:08 - 2013-11-05 08:08 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Anwendungsdaten
2013-11-05 08:08 - 2013-11-05 07:56 - 00020958 _____ C:\WINDOWS\diagwrn.xml
2013-11-05 08:08 - 2013-11-05 07:56 - 00020958 _____ C:\WINDOWS\diagerr.xml
2013-11-05 08:08 - 2013-11-05 07:31 - 00006532 _____ C:\WINDOWS\comsetup.log
2013-11-05 08:08 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\Registration
2013-11-05 08:08 - 2013-08-22 16:36 - 00000000 ____D C:\Program Files\Windows NT
2013-11-05 08:08 - 2013-08-22 14:36 - 00000000 __RHD C:\Users\Default
2013-11-05 08:07 - 2013-11-05 08:07 - 00022960 _____ C:\WINDOWS\system32\emptyregdb.dat
2013-11-05 08:04 - 2013-08-22 16:36 - 00000000 __RSD C:\WINDOWS\Media
2013-11-05 08:04 - 2013-08-22 16:36 - 00000000 __RHD C:\Users\Public\Libraries
2013-11-05 08:00 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\Help
2013-11-05 08:00 - 2013-08-22 14:36 - 00000000 ____D C:\WINDOWS\system32\Sysprep
2013-11-05 07:58 - 2013-11-05 07:52 - 00000000 ____D C:\Program Files (x86)\Intel
2013-11-05 07:58 - 2013-11-05 07:51 - 00000000 ____D C:\Program Files\Intel
2013-11-05 07:58 - 2013-09-30 04:56 - 00000000 ____D C:\WINDOWS\SysWOW64\WCN
2013-11-05 07:58 - 2013-09-30 04:56 - 00000000 ____D C:\WINDOWS\SysWOW64\sysprep
2013-11-05 07:58 - 2013-09-30 04:56 - 00000000 ____D C:\WINDOWS\system32\WCN
2013-11-05 07:58 - 2013-08-22 16:43 - 00000000 ____D C:\WINDOWS\DigitalLocker
2013-11-05 07:58 - 2013-08-22 16:37 - 00004893 _____ C:\WINDOWS\DtcInstall.log
2013-11-05 07:58 - 2013-08-22 16:36 - 00000000 __SHD C:\Program Files\Windows Sidebar
2013-11-05 07:58 - 2013-08-22 16:36 - 00000000 __SHD C:\Program Files (x86)\Windows Sidebar
2013-11-05 07:58 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\SysWOW64\migwiz
2013-11-05 07:58 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\SysWOW64\IME
2013-11-05 07:58 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2013-11-05 07:58 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\spool
2013-11-05 07:58 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\IME
2013-11-05 07:58 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\IME
2013-11-05 07:58 - 2013-08-22 14:36 - 00000000 ____D C:\WINDOWS\SysWOW64\SMI
2013-11-05 07:58 - 2013-08-22 14:36 - 00000000 ____D C:\WINDOWS\system32\oobe
2013-11-05 07:58 - 2013-05-29 07:46 - 00000000 ____D C:\ProgramData\PRICache
2013-11-05 07:58 - 2012-07-26 06:37 - 00000000 ____D C:\Users\Default.migrated
2013-11-05 07:57 - 2013-11-05 07:57 - 00000000 ____D C:\WINDOWS\system32\config\bbimigrate
2013-11-05 07:57 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\Recovery
2013-11-05 07:56 - 2013-11-05 07:56 - 00000000 _SHDL C:\Users\jokrause\Vorlagen
2013-11-05 07:56 - 2013-11-05 07:56 - 00000000 _SHDL C:\Users\jokrause\Startmenü
2013-11-05 07:56 - 2013-11-05 07:56 - 00000000 _SHDL C:\Users\jokrause\Netzwerkumgebung
2013-11-05 07:56 - 2013-11-05 07:56 - 00000000 _SHDL C:\Users\jokrause\Lokale Einstellungen
2013-11-05 07:56 - 2013-11-05 07:56 - 00000000 _SHDL C:\Users\jokrause\Eigene Dateien
2013-11-05 07:56 - 2013-11-05 07:56 - 00000000 _SHDL C:\Users\jokrause\Druckumgebung
2013-11-05 07:56 - 2013-11-05 07:56 - 00000000 _SHDL C:\Users\jokrause\Documents\Eigene Musik
2013-11-05 07:56 - 2013-11-05 07:56 - 00000000 _SHDL C:\Users\jokrause\Documents\Eigene Bilder
2013-11-05 07:56 - 2013-11-05 07:56 - 00000000 _SHDL C:\Users\jokrause\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2013-11-05 07:56 - 2013-11-05 07:56 - 00000000 _SHDL C:\Users\jokrause\AppData\Local\Verlauf
2013-11-05 07:56 - 2013-11-05 07:56 - 00000000 _SHDL C:\Users\jokrause\AppData\Local\Anwendungsdaten
2013-11-05 07:56 - 2013-11-05 07:56 - 00000000 _SHDL C:\Users\jokrause\Anwendungsdaten
2013-11-05 07:56 - 2013-11-05 07:56 - 00000000 ___RD C:\Users\jokrause\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2013-11-05 07:52 - 2013-11-05 07:52 - 00000000 ____D C:\WINDOWS\SysWOW64\RTCOM
2013-11-05 07:52 - 2013-11-05 07:52 - 00000000 ____D C:\Program Files\Realtek
2013-11-05 07:52 - 2013-11-05 07:52 - 00000000 ____D C:\Program Files\Elantech
2013-11-05 07:52 - 2013-11-05 07:52 - 00000000 ____D C:\Program Files\Common Files\ATI Technologies
2013-11-05 07:52 - 2013-11-05 07:52 - 00000000 ____D C:\Program Files\AMD
2013-11-05 07:52 - 2013-08-22 15:46 - 00000084 _____ C:\WINDOWS\setuperr.log
2013-11-05 07:51 - 2013-11-05 07:51 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_TeeDriverx64_01011.Wdf
2013-11-05 07:50 - 2013-11-05 07:50 - 00000000 __SHD C:\Recovery
2013-11-05 07:49 - 2013-08-22 16:36 - 00262144 _____ C:\WINDOWS\system32\config\BCD-Template
2013-11-05 07:48 - 2013-11-05 07:48 - 02140888 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll
2013-11-05 07:48 - 2013-11-05 07:48 - 01765384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11.dll
2013-11-05 07:48 - 2013-11-05 07:48 - 01286552 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll
2013-11-05 07:48 - 2013-11-05 07:48 - 01217024 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Streaming.dll
2013-11-05 07:48 - 2013-11-05 07:48 - 01018960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll
2013-11-05 07:48 - 2013-11-05 07:48 - 00977408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Streaming.dll
2013-11-05 07:48 - 2013-11-05 07:48 - 00872840 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfplat.dll
2013-11-05 07:48 - 2013-11-05 07:48 - 00698232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfplat.dll
2013-11-05 07:48 - 2013-11-05 07:48 - 00516496 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll
2013-11-05 07:48 - 2013-11-05 07:48 - 00406400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxgi.dll
2013-11-05 07:48 - 2013-11-05 07:48 - 00382808 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2013-11-05 07:48 - 2013-11-05 07:48 - 00294400 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Sensors.dll
2013-11-05 07:48 - 2013-11-05 07:48 - 00225792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Sensors.dll
2013-11-05 07:48 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\Camera
2013-11-05 07:47 - 2013-11-05 07:47 - 00262144 _____ C:\WINDOWS\system32\config\userdiff
2013-11-05 07:46 - 2013-11-05 07:46 - 00000000 ____D C:\WINDOWS\SysWOW64\XPSViewer
2013-11-05 07:46 - 2013-11-05 07:46 - 00000000 ____D C:\Program Files\Reference Assemblies
2013-11-05 07:46 - 2013-11-05 07:46 - 00000000 ____D C:\Program Files\MSBuild
2013-11-05 07:46 - 2013-11-05 07:46 - 00000000 ____D C:\Program Files (x86)\Reference Assemblies
2013-11-05 07:46 - 2013-11-05 07:46 - 00000000 ____D C:\Program Files (x86)\MSBuild
2013-11-05 07:46 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\SysWOW64\MUI
2013-11-05 07:46 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\MUI
2013-11-05 07:40 - 2013-07-23 22:44 - 01263822 _____ C:\WINDOWS\WindowsUpdate (1).log
2013-11-05 03:01 - 2013-11-05 02:16 - 00000000 ____D C:\Users\jokrause\AppData\Local\VirtualStore
2013-11-05 02:53 - 2013-11-05 02:53 - 00000000 ____D C:\Users\jokrause\AppData\Roaming\Macromedia
2013-11-05 02:22 - 2013-11-05 02:22 - 00000000 ____D C:\Users\Public\OEM
2013-11-05 02:22 - 2013-11-05 02:22 - 00000000 ____D C:\Users\jokrause\PicStream
2013-11-05 02:22 - 2013-11-05 02:22 - 00000000 ____D C:\Users\jokrause\Documents\clear.fi
2013-11-05 02:17 - 2013-11-05 02:17 - 00000000 ____D C:\Users\jokrause\AppData\Roaming\Atheros
2013-11-05 02:17 - 2013-11-05 02:17 - 00000000 ____D C:\ProgramData\OEM_YAHOO
2013-11-05 02:17 - 2013-11-05 02:17 - 00000000 ____D C:\Program Files\Preload
2013-11-05 02:17 - 2013-11-05 02:17 - 00000000 ____D C:\Program Files\Accessory Store
2013-11-05 02:17 - 2013-11-05 02:17 - 00000000 ____D C:\Program Files (x86)\OEM
2013-11-05 02:17 - 2013-05-29 08:26 - 00000000 ___HD C:\OEM
2013-11-05 02:16 - 2013-11-05 02:16 - 00000000 ____D C:\WINDOWS\System32\Tasks\WPD
2013-11-05 02:01 - 2013-11-05 02:01 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Musik
2013-11-05 02:01 - 2013-11-05 02:01 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Bilder
2013-11-05 02:01 - 2013-11-05 02:01 - 00000000 _SHDL C:\Users\Default.migrated\Vorlagen
2013-11-05 02:01 - 2013-11-05 02:01 - 00000000 _SHDL C:\Users\Default.migrated\Startmenü
2013-11-05 02:01 - 2013-11-05 02:01 - 00000000 _SHDL C:\Users\Default.migrated\Netzwerkumgebung
2013-11-05 02:01 - 2013-11-05 02:01 - 00000000 _SHDL C:\Users\Default.migrated\Lokale Einstellungen
2013-11-05 02:01 - 2013-11-05 02:01 - 00000000 _SHDL C:\Users\Default.migrated\Eigene Dateien
2013-11-05 02:01 - 2013-11-05 02:01 - 00000000 _SHDL C:\Users\Default.migrated\Druckumgebung
2013-11-05 02:01 - 2013-11-05 02:01 - 00000000 _SHDL C:\Users\Default.migrated\Documents\Eigene Musik
2013-11-05 02:01 - 2013-11-05 02:01 - 00000000 _SHDL C:\Users\Default.migrated\Documents\Eigene Bilder
2013-11-05 02:01 - 2013-11-05 02:01 - 00000000 _SHDL C:\Users\Default.migrated\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2013-11-05 02:01 - 2013-11-05 02:01 - 00000000 _SHDL C:\Users\Default.migrated\AppData\Local\Verlauf
2013-11-05 02:01 - 2013-11-05 02:01 - 00000000 _SHDL C:\Users\Default.migrated\AppData\Local\Anwendungsdaten
2013-11-05 02:01 - 2013-11-05 02:01 - 00000000 _SHDL C:\Users\Default.migrated\Anwendungsdaten
2013-11-05 02:01 - 2013-11-05 02:01 - 00000000 _SHDL C:\Programme
2013-11-05 02:01 - 2013-11-05 02:01 - 00000000 _SHDL C:\ProgramData\Vorlagen
2013-11-05 02:01 - 2013-11-05 02:01 - 00000000 _SHDL C:\ProgramData\Startmenü
2013-11-05 02:01 - 2013-11-05 02:01 - 00000000 _SHDL C:\ProgramData\Dokumente
2013-11-05 02:01 - 2013-11-05 02:01 - 00000000 _SHDL C:\ProgramData\Anwendungsdaten
2013-11-05 02:01 - 2013-11-05 02:01 - 00000000 _SHDL C:\Program Files\Gemeinsame Dateien
2013-11-05 02:01 - 2013-11-05 02:01 - 00000000 _SHDL C:\Dokumente und Einstellungen
2013-11-04 23:09 - 2013-11-04 23:09 - 00000000 ____D C:\Users\jokrause\AppData\Local\Macromedia
2013-11-04 22:52 - 2013-11-04 22:52 - 00000000 ____D C:\Users\jokrause\AppData\Roaming\Mozilla
2013-11-04 22:49 - 2013-11-04 22:49 - 00001155 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2013-11-04 22:49 - 2013-11-04 22:49 - 00000000 ____D C:\ProgramData\Mozilla
2013-11-04 22:45 - 2013-11-04 22:45 - 00003558 _____ C:\WINDOWS\System32\Tasks\CreateChoiceProcessTask
2013-11-04 22:42 - 2013-05-29 08:02 - 00000000 ____D C:\ProgramData\McAfee
2013-11-04 22:41 - 2013-07-23 23:15 - 00000000 ____D C:\ProgramData\Norton
2013-11-04 21:48 - 2013-11-04 21:48 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_User_LocationProvider_01_11_00.Wdf
2013-11-04 21:44 - 2013-11-04 21:44 - 00000000 ____D C:\Users\jokrause\AppData\Roaming\OpenOffice
2013-11-04 21:43 - 2013-11-04 21:43 - 00001116 _____ C:\Users\Public\Desktop\OpenOffice 4.0.1.lnk
2013-11-04 21:43 - 2013-11-04 21:43 - 00000000 ____D C:\Program Files (x86)\OpenOffice 4

Some content of TEMP:
====================
C:\Users\jokrause\AppData\Local\Temp\autorun.dll
C:\Users\jokrause\AppData\Local\Temp\avgnt.exe
C:\Users\jokrause\AppData\Local\Temp\ICReinstall_Workflowy_Allmyapps.exe
C:\Users\jokrause\AppData\Local\Temp\ose00000.exe
C:\Users\jokrause\AppData\Local\Temp\ose00002.exe
C:\Users\jokrause\AppData\Local\Temp\SHSetup.exe
C:\Users\jokrause\AppData\Local\Temp\ubiB303.tmp.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\explorer.exe
[2013-11-17 11:06] - [2013-10-22 08:55] - 2328872 ____A (Microsoft Corporation) 63DC38C3E4564B2405D562855643ABA2

C:\Windows\SysWOW64\explorer.exe
[2013-11-17 11:06] - [2013-10-22 07:03] - 2065448 ____A (Microsoft Corporation) 1A0BC9598E4A58FC84570FFF5A108E58

C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll
[2013-11-17 11:06] - [2013-10-22 03:38] - 1362944 ____A (Microsoft Corporation) C72456BFFE941714CF05B0AA0BEE5B45

C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-11-19 06:59

==================== End Of Log ============================
--- --- ---




Vielen Dank! Physcia

Physcia 23.11.2013 10:32
und die Addition Datei:
Code:
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 23-11-2013
Ran by at 2013-11-23 09:13:14
Running from C:\Users\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Kaspersky Internet Security (Enabled - Up to date) {179979E8-273D-D14E-0543-2861940E4886}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Kaspersky Internet Security (Enabled - Up to date) {ACF8980C-0107-DEC0-3FF3-1313EF89023B}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: Kaspersky Internet Security (Enabled) {2FA2F8CD-6D52-D016-2E1C-81546ADD0FFD}

==================== Installed Programs ======================

 clear.fi SDK - Video 2 (x32 Version: 2.1.2606)
 clear.fi SDK- Movie 2 (x32 Version: 2.1.2606)
123 Free Solitaire v10.0 (x32)
Acer Device Fast-lane (Version: 1.00.3011)
Acer Launch Manager (Version: 8.00.3003)
Acer Power Management (Version: 7.00.3013)
Acer Recovery Management (Version: 6.00.3016)
AcerCloud Docs (x32 Version: 1.01.2008)
AcerCloud Portal (x32 Version: 2.02.2021)
Adobe Flash Player 11 Plugin (x32 Version: 11.9.900.117)
Adobe Reader XI (11.0.05) - Deutsch (x32 Version: 11.0.05)
AMD Accelerated Video Transcoding (Version: 12.10.100.30314)
AMD APP SDK Runtime (Version: 10.0.1124.2)
AMD Catalyst Install Manager (Version: 8.0.911.0)
ANNO 1404 - Venedig (x32 Version: 2.0.5008.0)
Anno 1404 (x32 Version: 1.00.0000)
ANNO 1404 (x32 Version: 1.02.0000)
Apple Application Support (x32 Version: 2.3.6)
Apple Mobile Device Support (Version: 7.0.0.117)
Apple Software Update (x32 Version: 2.1.3.127)
Bejeweled 3 (x32 Version: 2.2.0.98)
Bonjour (Version: 3.0.0.10)
Broadcom Card Reader Driver Installer (Version: 16.0.2.3)
Broadcom NetLink Controller (Version: 16.0.2.1)
Catalyst Control Center - Branding (x32 Version: 1.00.0000)
Catalyst Control Center (x32 Version: 2013.0314.1033.17070)
Catalyst Control Center InstallProxy (x32 Version: 2013.0314.1033.17070)
Catalyst Control Center Localization All (x32 Version: 2013.0314.1033.17070)
Catalyst Control Center Profiles Mobile (x32 Version: 2013.0314.1033.17070)
CCC Help Chinese Standard (x32 Version: 2013.0314.1032.17070)
CCC Help Chinese Traditional (x32 Version: 2013.0314.1032.17070)
CCC Help Czech (x32 Version: 2013.0314.1032.17070)
CCC Help Danish (x32 Version: 2013.0314.1032.17070)
CCC Help Dutch (x32 Version: 2013.0314.1032.17070)
CCC Help English (x32 Version: 2013.0314.1032.17070)
CCC Help Finnish (x32 Version: 2013.0314.1032.17070)
CCC Help French (x32 Version: 2013.0314.1032.17070)
CCC Help German (x32 Version: 2013.0314.1032.17070)
CCC Help Greek (x32 Version: 2013.0314.1032.17070)
CCC Help Hungarian (x32 Version: 2013.0314.1032.17070)
CCC Help Italian (x32 Version: 2013.0314.1032.17070)
CCC Help Japanese (x32 Version: 2013.0314.1032.17070)
CCC Help Korean (x32 Version: 2013.0314.1032.17070)
CCC Help Norwegian (x32 Version: 2013.0314.1032.17070)
CCC Help Polish (x32 Version: 2013.0314.1032.17070)
CCC Help Portuguese (x32 Version: 2013.0314.1032.17070)
CCC Help Russian (x32 Version: 2013.0314.1032.17070)
CCC Help Spanish (x32 Version: 2013.0314.1032.17070)
CCC Help Swedish (x32 Version: 2013.0314.1032.17070)
CCC Help Thai (x32 Version: 2013.0314.1032.17070)
CCC Help Turkish (x32 Version: 2013.0314.1032.17070)
ccc-utility64 (Version: 2013.0314.1033.17070)
Cisco AnyConnect Secure Mobility Client  (x32 Version: 3.1.04066)
Cisco AnyConnect Secure Mobility Client (x32 Version: 3.1.04066)
Classic Shell (Version: 4.0.2)
clear.fi Media (x32 Version: 2.02.2012)
clear.fi Photo (x32 Version: 2.02.2016)
CyberLink MediaEspresso 6.5 (x32 Version: 6.5.3729_45993)
Delicious: Emily's Childhood Memories Premium Edition (x32 Version: 3.0.2.32)
Dropbox (HKCU Version: 2.4.7)
eBay Worldwide (x32 Version: 2.4.0105)
ETDWare PS/2-X64 11.6.23.203_WHQL (Version: 11.6.23.203)
GIMP 2.8.6 (Version: 2.8.6)
Google Earth (x32 Version: 7.1.2.2041)
Google Update Helper (x32 Version: 1.3.21.165)
Governor of Poker 2 Premium Edition (x32 Version: 2.2.0.110)
Identity Card (x32 Version: 2.00.3006)
Intel(R) Management Engine Components (x32 Version: 9.5.3.1520)
Intel(R) Processor Graphics (x32 Version: 10.18.10.3316)
Intel(R) SDK for OpenCL - CPU Only Runtime Package (x32 Version: 3.0.0.63463)
Intel® Trusted Connect Service Client (Version: 1.27.798.1)
iTunes (Version: 11.1.2.32)
Java 7 Update 45 (x32 Version: 7.0.450)
Java Auto Updater (x32 Version: 2.1.9.8)
Jewel Match 3 (x32 Version: 2.2.0.98)
John Deere Drive Green (x32 Version: 2.2.0.95)
Kaspersky Internet Security (x32 Version: 14.0.0.4651)
Live Updater (x32 Version: 2.00.3010)
Magic Academy (x32 Version: 2.2.0.98)
Malwarebytes Anti-Malware Version 1.75.0.1300 (x32 Version: 1.75.0.1300)
Microsoft Office (x32 Version: 15.0.4454.1510)
Microsoft Office 2007 Service Pack 3 (SP3) (x32)
Microsoft Office Excel MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Home and Student 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Office 64-bit Components 2007 (Version: 12.0.6612.1000)
Microsoft Office OneNote MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office PowerPoint MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Proof (English) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Proof (French) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Proof (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Proof (Italian) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Proofing (German) 2007 (x32 Version: 12.0.4518.1014)
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) (x32)
Microsoft Office Shared 64-bit MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office Shared MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Word MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (Version: 10.0.40219)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219)
Microsoft Visual Studio 2005 Tools for Office Runtime (x32 Version: 8.0.60940.0)
Mozilla Firefox 25.0.1 (x86 de) (x32 Version: 25.0.1)
Mozilla Maintenance Service (x32 Version: 24.1.1)
Mozilla Thunderbird 24.1.1 (x86 de) (x32 Version: 24.1.1)
Nero BackItUp (x32 Version: 12.5.5000)
Nero BackItUp 12 Essentials OEM.a01 (x32 Version: 12.5.00500)
Nero BackItUp Help (CHM) (x32 Version: 12.0.10000)
Nero ControlCenter (x32 Version: 11.0.15600)
Nero ControlCenter Help (CHM) (x32 Version: 12.0.7000)
Nero Core Components (x32 Version: 11.0.20200)
Nero Launcher (x32 Version: 12.2.7000)
Nero RescueAgent (x32 Version: 12.0.3001)
Nero RescueAgent Help (CHM) (x32 Version: 12.0.7000)
Nero Update (x32 Version: 11.0.11800.31.0)
OEM Application Profile (x32 Version: 1.00.0000)
Office Addin (x32 Version: 2.02.2008)
Office Addin 2003 (x32 Version: 2.02.2008)
OpenOffice 4.0.1 (x32 Version: 4.01.9714)
Plants vs. Zombies - Game of the Year (x32 Version: 2.2.0.98)
Prerequisite installer (x32 Version: 12.0.0003)
PX Profile Update (x32 Version: 1.00.1.)
Qualcomm Atheros Bluetooth Suite (64) (Version: 8.0.0.224)
Qualcomm Atheros WLAN and Bluetooth Client Installation Program (x32 Version: 11.49)
R for Windows 3.0.2 (Version: 3.0.2)
Realtek High Definition Audio Driver (x32 Version: 6.0.1.6865)
Shared C Run-time for x64 (Version: 10.0.0)
Skype™ 6.10 (x32 Version: 6.10.104)
Spielkanäle (x32 Version: 8.1.0.17)
Tales of Lagoona (x32 Version: 2.2.0.110)
Tinn-R 2.4.1.7 (x32)
Update for 2007 Microsoft Office System (KB967642) (x32)
Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition (x32)
Update for Microsoft Office 2007 suites (KB2687493) 32-Bit Edition (x32)
Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (x32)
Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition (x32)
Update für Microsoft Office Excel 2007 Help (KB963678) (x32)
Update für Microsoft Office Powerpoint 2007 Help (KB963669) (x32)
Update für Microsoft Office Word 2007 Help (KB963665) (x32)
Update Installer for WildTangent Games App (x32)
VIS (x32)
Visual Studio 2005 Tools for Office Second Edition Runtime (x32)
Visual Studio Tools for the Office system 3.0 Runtime (x32 Version: 9.0.30729)
Visual Studio Tools for the Office system 3.0 Runtime (x32)
Visual Studio Tools for the Office system 3.0 Runtime Service Pack 1 (KB949258) (x32 Version: 1)
VLC media player 2.1.0 (Version: 2.1.0)
WildTangent Games (x32 Version: 1.0.4.0)
WildTangent Games App (x32 Version: 4.0.10.5)
WinSecurity (x32)

==================== Restore Points  =========================

22-11-2013 10:16:35 Geplanter Prüfpunkt

==================== Hosts content: ==========================

2013-08-22 14:25 - 2013-08-22 14:25 - 00000824 ____N C:\WINDOWS\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {05293577-D647-4185-B859-C94839A0B2E3} - System32\Tasks\Microsoft\Windows\SettingSync\NetworkStateChangeTask
Task: {0AAEFF03-E1B2-42D9-8095-9C4D02801D18} - System32\Tasks\Power Management => C:\Program Files\Acer\Acer Power Management\ePowerTray.exe [2013-03-15] (Acer Incorporated)
Task: {1F712D34-FB89-4250-B1F2-CDB6EAFE712D} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\Windows\System32\MRT.exe [2013-11-14] (Microsoft Corporation)
Task: {1FB95EA9-5042-4178-BB2D-296273122803} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-11-12] (Google Inc.)
Task: {2C9C0C6C-2A74-46F2-858A-4389D253EAD0} - System32\Tasks\Microsoft\Windows\Sysmain\HybridDriveCachePrepopulate
Task: {352E6CA0-7314-4DF4-89C4-682368D80D57} - System32\Tasks\Microsoft\Windows\Workplace Join\Automatic-Workplace-Join => C:\Windows\System32\AutoWorkplace.exe [2013-08-22] (Microsoft Corporation)
Task: {3B6D8A73-F20B-4C93-B8FB-56A154F172D2} - System32\Tasks\Microsoft\Windows\Time Zone\SynchronizeTimeZone => C:\Windows\System32\tzsync.exe [2013-08-22] (Microsoft Corporation)
Task: {4715885D-0279-467C-A997-C6141AFB40A5} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {49754026-21E1-41FC-94FD-727AFE414FE7} - System32\Tasks\Microsoft\Windows\Sysmain\HybridDriveCacheRebalance
Task: {51CC7AD8-E364-4FAF-90AB-9E0E630BD097} - System32\Tasks\ALU => C:\Program Files (x86)\Acer\Live Updater\updater.exe [2013-03-13] ()
Task: {685803A8-67D5-46CA-A8D4-A46C12897ED5} - System32\Tasks\ALUAgent => C:\Program Files (x86)\Acer\Live Updater\liveupdater_agent.exe [2013-01-22] ()
Task: {6AA91E8C-DDBD-4979-8464-4062F7681A19} - System32\Tasks\Microsoft\Windows\Plug and Play\Plug and Play Cleanup
Task: {6DFCB649-0769-4F83-BB10-F60F235F6D3D} - System32\Tasks\Microsoft\Windows\SkyDrive\Idle Sync Maintenance Task
Task: {872D0E53-FD2E-41E3-B431-698AF82882CE} - System32\Tasks\Microsoft\Windows\SkyDrive\Routine Maintenance Task
Task: {8CC813C9-712A-41EF-9512-B233444FC669} - System32\Tasks\Microsoft\Windows\AppxDeploymentClient\Pre-staged app cleanup => C:\Windows\System32\AppXDeploymentClient.dll [2013-09-30] (Microsoft Corporation)
Task: {9FF4C139-5234-410C-B7FA-23EE2FD2AB53} - System32\Tasks\Microsoft\Windows\Work Folders\Work Folders Maintenance Work
Task: {CE23B4D0-DD17-4DD2-9E0C-06E07661CDBF} - System32\Tasks\Launch Manager => C:\Program Files\Acer\Acer Launch Manager\LMLauncher.exe [2013-03-15] (Acer Incorporate)
Task: {CFD7C21A-808B-487B-A6EC-8A10E44E8360} - System32\Tasks\Microsoft\Windows\SettingSync\BackupTask
Task: {DA46820F-FF8A-4B5E-A6B2-B12185DCFFFB} - System32\Tasks\Microsoft\Windows\Work Folders\Work Folders Logon Synchronization
Task: {E6D378FA-E068-4BCB-80DE-56D43A249507} - System32\Tasks\Microsoft\Windows\RecoveryEnvironment\VerifyWinRE
Task: {F90BC3F8-2912-4C90-9591-2E76E76C86FA} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-11-12] (Google Inc.)
Task: {F9B2689C-2D1A-4EED-96EC-FA905FD4EF4A} - System32\Tasks\DeviceDetector => C:\Program Files (x86)\CyberLink\MediaEspresso\DeviceDetector\DeviceDetector.exe [2013-02-08] (CyberLink)
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2013-04-15 10:23 - 2013-04-15 10:23 - 00011264 _____ () C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\Modules\ActivateDesktopDebugger\ActivateDesktopDebugger.dll
2013-04-15 10:20 - 2013-04-15 10:20 - 00086016 _____ () C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\Modules\Map\MAP.dll
2013-08-30 23:11 - 2013-08-30 23:11 - 00063376 _____ () C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\zlib1.dll
2013-09-13 19:51 - 2013-09-13 19:51 - 00087952 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2013-09-13 19:51 - 2013-09-13 19:51 - 01242952 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2013-07-23 22:46 - 2013-05-08 21:23 - 01199576 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll
2013-06-17 12:35 - 2013-06-17 12:35 - 00478400 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\dblite.dll
2013-05-08 14:52 - 2013-05-08 14:52 - 01270464 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\kpcengine.2.3.dll
2013-10-19 00:55 - 2013-10-19 00:55 - 25100288 _____ () C:\Users\jokrause\AppData\Roaming\Dropbox\bin\libcef.dll
2013-11-05 09:20 - 2013-11-22 08:00 - 03008624 _____ () C:\Program Files (x86)\Mozilla Thunderbird\mozjs.dll
2013-11-05 09:20 - 2013-11-22 08:00 - 00158832 _____ () C:\Program Files (x86)\Mozilla Thunderbird\NSLDAP32V60.dll
2013-11-05 09:20 - 2013-11-22 08:00 - 00023152 _____ () C:\Program Files (x86)\Mozilla Thunderbird\NSLDAPPR32V60.dll
2013-11-16 06:12 - 2013-11-16 06:12 - 03363952 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll

==================== Alternate Data Streams (whitelisted) =========

AlternateDataStreams: C:\Users\jokrause\SkyDrive:ms-properties

==================== Safe Mode (whitelisted) ===================


==================== Faulty Device Manager Devices =============

Name: Cisco AnyConnect Secure Mobility Client Virtual Miniport Adapter for Windows x64
Description: Cisco AnyConnect Secure Mobility Client Virtual Miniport Adapter for Windows x64
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Cisco Systems
Service: vpnva
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.

Name: Intel(R) Display-Audio
Description: Intel(R) Display-Audio
Class Guid: {4d36e96c-e325-11ce-bfc1-08002be10318}
Manufacturer: Intel(R) Corporation
Service: IntcDAud
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.


==================== Event log errors: =========================

Application errors:
==================
Error: (11/22/2013 09:21:03 PM) (Source: Customer Experience Improvement Program) (User: )
Description: 80070005

Error: (11/22/2013 08:51:54 PM) (Source: RasClient) (User: )
Description: CoID={6456FC48-8458-4675-9BD6-8175B2F7F7C6}: Der Benutzer "SYSTEM" hat eine Verbindung mit dem Namen "Breitbandverbindung" gewählt, die Verbindung konnte jedoch nicht hergestellt werden. Der durch den Fehler zurückgegebene Ursachencode lautet: 651.

Error: (11/22/2013 11:55:03 AM) (Source: ATIeRecord) (User: )
Description: ATI EEU Client has failed to start

Error: (11/22/2013 10:09:41 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "asmv2:clrClassInvocation1". Fehler in Manifest- oder Richtliniendatei "asmv2:clrClassInvocation2" in Zeile asmv2:clrClassInvocation3.
Das asmv2:clrClassInvocation-Element wird als untergeordnetes Element des urn:schemas-microsoft-com:asm.v1^entryPoint-Elements angezeigt, das von dieser Windows-Version nicht unterstützt wird.

Error: (11/22/2013 10:09:41 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "asmv2:clrClassInvocation1". Fehler in Manifest- oder Richtliniendatei "asmv2:clrClassInvocation2" in Zeile asmv2:clrClassInvocation3.
Das asmv2:clrClassInvocation-Element wird als untergeordnetes Element des urn:schemas-microsoft-com:asm.v1^entryPoint-Elements angezeigt, das von dieser Windows-Version nicht unterstützt wird.

Error: (11/22/2013 10:09:41 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "asmv2:clrClassInvocation1". Fehler in Manifest- oder Richtliniendatei "asmv2:clrClassInvocation2" in Zeile asmv2:clrClassInvocation3.
Das asmv2:clrClassInvocation-Element wird als untergeordnetes Element des urn:schemas-microsoft-com:asm.v1^entryPoint-Elements angezeigt, das von dieser Windows-Version nicht unterstützt wird.

Error: (11/22/2013 10:06:10 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "assemblyIdentity1". Fehler in Manifest- oder Richtliniendatei "assemblyIdentity2" in Zeile assemblyIdentity3.
Der Wert "x64" des "processorArchitecture"-Attributs im assemblyIdentity-Element ist ungültig.

Error: (11/22/2013 08:26:54 AM) (Source: Customer Experience Improvement Program) (User: )
Description: 80070005

Error: (11/21/2013 10:19:11 AM) (Source: RasClient) (User: )
Description: CoID={23338EF3-0C12-45A0-8AF6-B86DA916C401}: Der Benutzer "SYSTEM" hat eine Verbindung mit dem Namen "Breitbandverbindung" gewählt, die Verbindung konnte jedoch nicht hergestellt werden. Der durch den Fehler zurückgegebene Ursachencode lautet: 651.

Error: (11/21/2013 10:14:44 AM) (Source: Application Hang) (User: )
Description: Programm LiveComm.exe, Version 17.5.9600.20315 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 195d0

Startzeit: 01cee699661869b3

Endzeit: 4294967295

Anwendungspfad: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20315_x64__8wekyb3d8bbwe\LiveComm.exe

Berichts-ID: 59c75bb1-528d-11e3-be78-24fd52d6853f

Vollständiger Name des fehlerhaften Pakets: microsoft.windowscommunicationsapps_17.5.9600.20315_x64__8wekyb3d8bbwe

Anwendungs-ID, die relativ zum fehlerhaften Paket ist: ppleae38af2e007f4358a809ac99a64a67c1


System errors:
=============
Error: (11/23/2013 07:16:51 AM) (Source: Service Control Manager) (User: )
Description: Der Aufruf "ScRegSetValueExW" ist für "FailureActions" aufgrund folgenden Fehlers fehlgeschlagen:
%%5

Error: (11/22/2013 08:53:36 PM) (Source: DCOM) (User: NT-AUTORITÄT)
Description: ComputerstandardLokalAktivierung{C2F03A33-21F5-47FA-B4BB-156362A2F239}{316CDED5-E4AE-4B15-9113-7055D84DCC97}NT-AUTORITÄTLokaler DienstS-1-5-19LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar

Error: (11/22/2013 10:00:03 AM) (Source: DCOM) (User: NT-AUTORITÄT)
Description: ComputerstandardLokalAktivierung{C2F03A33-21F5-47FA-B4BB-156362A2F239}{316CDED5-E4AE-4B15-9113-7055D84DCC97}NT-AUTORITÄTLokaler DienstS-1-5-19LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar

Error: (11/21/2013 10:20:22 AM) (Source: DCOM) (User: NT-AUTORITÄT)
Description: ComputerstandardLokalAktivierung{C2F03A33-21F5-47FA-B4BB-156362A2F239}{316CDED5-E4AE-4B15-9113-7055D84DCC97}NT-AUTORITÄTLokaler DienstS-1-5-19LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar

Error: (11/21/2013 10:00:16 AM) (Source: DCOM) (User: NT-AUTORITÄT)
Description: ComputerstandardLokalAktivierung{C2F03A33-21F5-47FA-B4BB-156362A2F239}{316CDED5-E4AE-4B15-9113-7055D84DCC97}NT-AUTORITÄTLokaler DienstS-1-5-19LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar

Error: (11/21/2013 06:42:58 AM) (Source: BTHUSB) (User: )
Description: Der lokale Bluetooth-Adapter ist aus einem unbekannten Grund fehlgeschlagen und wird nicht verwendet. Der Treiber wurde entladen.

Error: (11/20/2013 09:06:19 PM) (Source: DCOM) (User: NT-AUTORITÄT)
Description: ComputerstandardLokalAktivierung{C2F03A33-21F5-47FA-B4BB-156362A2F239}{316CDED5-E4AE-4B15-9113-7055D84DCC97}NT-AUTORITÄTLokaler DienstS-1-5-19LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar

Error: (11/20/2013 00:35:58 PM) (Source: DCOM) (User: NT-AUTORITÄT)
Description: ComputerstandardLokalAktivierung{C2F03A33-21F5-47FA-B4BB-156362A2F239}{316CDED5-E4AE-4B15-9113-7055D84DCC97}NT-AUTORITÄTLokaler DienstS-1-5-19LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar

Error: (11/19/2013 10:00:01 AM) (Source: DCOM) (User: NT-AUTORITÄT)
Description: ComputerstandardLokalAktivierung{C2F03A33-21F5-47FA-B4BB-156362A2F239}{316CDED5-E4AE-4B15-9113-7055D84DCC97}NT-AUTORITÄTLokaler DienstS-1-5-19LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar

Error: (11/18/2013 04:32:24 PM) (Source: DCOM) (User: NT-AUTORITÄT)
Description: ComputerstandardLokalAktivierung{C2F03A33-21F5-47FA-B4BB-156362A2F239}{316CDED5-E4AE-4B15-9113-7055D84DCC97}NT-AUTORITÄTLokaler DienstS-1-5-19LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar


Microsoft Office Sessions:
=========================
Error: (11/21/2013 08:26:06 AM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 1, Application Name: Microsoft Office Excel, Application Version: 12.0.6683.5002, Microsoft Office Version: 12.0.6612.1000. This session lasted 5484 seconds with 3960 seconds of active time.  This session ended with a crash.


==================== Memory info ===========================

Percentage of memory in use: 55%
Total physical RAM: 3816.27 MB
Available physical RAM: 1694.77 MB
Total Pagefile: 6504.27 MB
Available Pagefile: 4314.23 MB
Total Virtual: 131072 MB
Available Virtual: 131071.79 MB

==================== Drives ================================

Drive c: (Acer) (Fixed) (Total:681.85 GB) (Free:636.94 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 699 GB) (Disk ID: 422B340A)

Partition: GPT Partition Type
==================== End Of Log ============================
Danke

Hallo Schrauber!
Es ist mir etwas peinlich. Aber ich hatte offensichtlich immer nur das schnelle Scannen mit Malwarebytes Anti-Malware gemacht.
Ich hab jetzt nochmal so einen richtigen Scan gestartet und da hat er jetzt schon was gefunden, aber er ist noch nicht fertig.
Ich muss dann nochmal eine log datei davon schicken.
Tut mir total leid.
Physcia

Hallo!
Der vollständige Scan mit Malwarebytes Anti-Malware ergab:

Code:
Malwarebytes Anti-Malware 1.75.0.1300
www.malwarebytes.org

Datenbank Version: v2013.11.22.04

Windows 8 x64 NTFS
Internet Explorer 11.0.9600.16438
 ::  [Administrator]

23.11.2013 09:08:18
mbam-log-2013-11-23 (09-08-18).txt

Art des Suchlaufs: Vollständiger Suchlauf (C:\|)
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 363223
Laufzeit: 45 Minute(n), 45 Sekunde(n)

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung: 0
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateien: 11
C:\Users\jokrause\AppData\Local\Microsoft\Windows\INetCache\IE\9RD436ER\checktbexist[1].exe (PUP.Optional.Conduit.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\jokrause\AppData\Local\Microsoft\Windows\INetCache\IE\D2D248W0\conduitinstaller[1].exe (PUP.Optional.Conduit.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\jokrause\AppData\Local\Microsoft\Windows\INetCache\IE\D2D248W0\iminent[1].msi (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\jokrause\AppData\Local\Microsoft\Windows\INetCache\IE\D2D248W0\SPSetup[1].exe (PUP.Optional.Conduit.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\jokrause\AppData\Local\Microsoft\Windows\INetCache\IE\GY0M1FRG\IminentMinibarIE[1].exe (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\jokrause\AppData\Local\Microsoft\Windows\INetCache\IE\GY0M1FRG\MinibarFirefox[1].exe (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\jokrause\AppData\Local\Microsoft\Windows\INetCache\IE\GY0M1FRG\radiototal4[1].exe (PUP.Optional.Conduit.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\jokrause\AppData\Local\Microsoft\Windows\INetCache\IE\GY0M1FRG\RadioTotal4[2].exe (PUP.Optional.Conduit.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\jokrause\AppData\Local\Microsoft\Windows\INetCache\IE\OY2EEXN1\MinibarChrome[1].exe (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\jokrause\AppData\Local\Microsoft\Windows\INetCache\IE\OY2EEXN1\statisticsstub[1].exe (PUP.Optional.Conduit.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\jokrause\AppData\LocalLow\GutscheinCodes\winsecurity.dll (PUP.Optional.WinSecurity.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.

(Ende)
Wird das Problem behoden sein, wenn ich auf entfernen klicke?
Vielen Dank! Physcia

Hallo!
Also das Problem ist leider nicht behoben.
Ich brauch weiterhin Hilfe!
Vielen Dank!
Physcia

schrauber 24.11.2013 08:14
Downloade Dir bitte AdwCleaner Logo Icon AdwCleaner auf deinen Desktop.
  • Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
  • Starte die AdwCleaner.exe mit einem Doppelklick.
  • Stimme den Nutzungsbedingungen zu.
  • Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
    • "Tracing" Schlüssel löschen
    • Winsock Einstellungen zurücksetzen
    • Proxy Einstellungen zurücksetzen
    • Internet Explorer Richtlinien zurücksetzen
    • Chrome Richtlinien zurücksetzen
    • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
  • Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
  • Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
  • Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
  • Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

  • Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
  • Drücke eine beliebige Taste, um das Tool zu starten.
  • Je nach System kann der Scan eine Weile dauern.
  • Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
  • Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.


und ein frisches FRST log bitte.


Alle Zeitangaben in WEZ +1. Es ist jetzt 14:00 Uhr.

Copyright ©2000-2025, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131