FRST.txt Teil 3 Code:
2013-11-12 16:45 - 2013-11-12 16:45 - 00000000 _SHDL C:\ProgramData\Vorlagen
2013-11-12 16:45 - 2013-11-12 16:45 - 00000000 _SHDL C:\ProgramData\Startmenü
2013-11-12 16:45 - 2013-11-12 16:45 - 00000000 _SHDL C:\ProgramData\Favoriten
2013-11-12 16:45 - 2013-11-12 16:45 - 00000000 _SHDL C:\ProgramData\Dokumente
2013-11-12 16:45 - 2013-11-12 16:45 - 00000000 _SHDL C:\ProgramData\Anwendungsdaten
2013-11-12 16:45 - 2013-11-12 16:45 - 00000000 _SHDL C:\Program Files\Gemeinsame Dateien
2013-11-12 16:45 - 2013-11-12 16:45 - 00000000 _SHDL C:\Dokumente und Einstellungen
2013-11-12 16:45 - 2013-11-12 16:45 - 00000000 __SHD C:\Recovery
2013-11-12 16:45 - 2013-11-12 16:45 - 00000000 ____D C:\Users\GuT\AppData\Local\VirtualStore
2013-11-12 16:45 - 2009-07-14 05:54 - 00000000 ___RD C:\Users\GuT\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2013-11-12 16:45 - 2009-07-14 05:49 - 00000000 ___RD C:\Users\GuT\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2013-11-12 16:44 - 2013-11-24 11:03 - 01219232 _____ C:\Windows\WindowsUpdate.log
2013-11-12 16:44 - 2013-11-12 16:44 - 00001313 _____ C:\Windows\TSSysprep.log
2013-11-12 16:42 - 2013-11-12 16:42 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdFs_01_09_00.Wdf
2013-10-27 09:12 - 2013-10-27 09:12 - 30344480 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2013-10-27 09:12 - 2013-10-27 09:12 - 25257248 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2013-10-27 09:12 - 2013-10-27 09:12 - 22933792 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2013-10-27 09:12 - 2013-10-27 09:12 - 18286416 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll
2013-10-27 09:12 - 2013-10-27 09:12 - 18199872 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2013-10-27 09:12 - 2013-10-27 09:12 - 17560352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2013-10-27 09:12 - 2013-10-27 09:12 - 15855568 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2013-10-27 09:12 - 2013-10-27 09:12 - 15212336 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll
2013-10-27 09:12 - 2013-10-27 09:12 - 12572960 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2013-10-27 09:12 - 2013-10-27 09:12 - 11426568 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2013-10-27 09:12 - 2013-10-27 09:12 - 11374520 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2013-10-27 09:12 - 2013-10-27 09:12 - 09524088 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2013-10-27 09:12 - 2013-10-27 09:12 - 09480328 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2013-10-27 09:12 - 2013-10-27 09:12 - 03131680 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2013-10-27 09:12 - 2013-10-27 09:12 - 03124512 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll
2013-10-27 09:12 - 2013-10-27 09:12 - 03067560 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
2013-10-27 09:12 - 2013-10-27 09:12 - 02946848 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2013-10-27 09:12 - 2013-10-27 09:12 - 02747168 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll
2013-10-27 09:12 - 2013-10-27 09:12 - 02695200 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
2013-10-27 09:12 - 2013-10-27 09:12 - 01884448 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6433165.dll
2013-10-27 09:12 - 2013-10-27 09:12 - 01511712 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6433165.dll
2013-10-27 09:12 - 2013-10-27 09:12 - 01510176 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdagenco64.dll
2013-10-27 09:12 - 2013-10-27 09:12 - 01435504 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll
2013-10-27 09:12 - 2013-10-27 09:12 - 01241376 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2013-10-27 09:12 - 2013-10-27 09:12 - 00696096 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2013-10-27 09:12 - 2013-10-27 09:12 - 00655136 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2013-10-27 09:12 - 2013-10-27 09:12 - 00599840 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2013-10-27 09:12 - 2013-10-27 09:12 - 00560416 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2013-10-27 09:12 - 2013-10-27 09:12 - 00317472 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2013-10-27 09:12 - 2013-10-27 09:12 - 00266984 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2013-10-27 09:12 - 2013-10-27 09:12 - 00196384 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvhda64v.sys
2013-10-27 09:12 - 2013-10-27 09:12 - 00168616 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2013-10-27 09:12 - 2013-10-27 09:12 - 00141336 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2013-10-27 09:12 - 2013-10-27 09:12 - 00031520 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdap64.dll
2013-10-27 09:12 - 2013-10-27 09:12 - 00023287 _____ C:\Windows\system32\nvinfo.pb
==================== One Month Modified Files and Folders =======
2013-11-24 11:09 - 2013-11-23 21:25 - 00009864 _____ C:\Users\GuT\Desktop\FRST.txt
2013-11-24 11:07 - 2009-07-14 05:45 - 00019152 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-11-24 11:07 - 2009-07-14 05:45 - 00019152 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-11-24 11:04 - 2013-11-13 01:39 - 00657438 _____ C:\Windows\system32\perfh007.dat
2013-11-24 11:04 - 2013-11-13 01:39 - 00130810 _____ C:\Windows\system32\perfc007.dat
2013-11-24 11:04 - 2009-07-14 06:13 - 01507106 _____ C:\Windows\system32\PerfStringBackup.INI
2013-11-24 11:03 - 2013-11-12 16:44 - 01219232 _____ C:\Windows\WindowsUpdate.log
2013-11-24 11:00 - 2013-11-12 17:21 - 00000000 ____D C:\ProgramData\NVIDIA
2013-11-24 11:00 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-11-24 11:00 - 2009-07-14 05:51 - 00024280 _____ C:\Windows\setupact.log
2013-11-23 22:07 - 2013-11-13 15:30 - 00000000 ____D C:\Users\GuT\Documents\Outlook-Dateien
2013-11-23 21:59 - 2013-11-23 21:59 - 00043240 _____ C:\Users\GuT\Desktop\Logfile.zip
2013-11-23 21:56 - 2013-11-23 21:56 - 00000000 ____D C:\Program Files (x86)\7-Zip
2013-11-23 21:49 - 2013-11-23 21:49 - 01110476 _____ C:\Users\GuT\Desktop\7z920.exe
2013-11-23 21:32 - 2013-11-13 16:08 - 00000976 _____ C:\Users\Public\Desktop\FreeFileSync.lnk
2013-11-23 21:22 - 2013-11-23 21:22 - 00006046 _____ C:\Users\GuT\Desktop\Gmer.txt
2013-11-23 21:22 - 2013-11-23 21:22 - 00001131 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2013-11-23 21:22 - 2013-11-23 21:22 - 00000000 ____D C:\Users\GuT\AppData\Roaming\Malwarebytes
2013-11-23 21:22 - 2013-11-23 21:22 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-11-23 21:22 - 2013-11-23 21:22 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-11-23 21:13 - 2013-11-23 21:13 - 00377856 _____ C:\Users\GuT\Desktop\gmer_2.1.19163.exe
2013-11-23 21:12 - 2013-11-23 21:12 - 00829500 _____ C:\Users\GuT\Desktop\anleitung.xps
2013-11-23 21:12 - 2013-11-23 21:12 - 00000468 _____ C:\Users\GuT\Desktop\defogger_disable.log
2013-11-23 21:12 - 2013-11-23 21:12 - 00000000 _____ C:\Users\GuT\defogger_reenable
2013-11-23 21:12 - 2013-11-12 16:45 - 00000000 ____D C:\Users\GuT
2013-11-23 21:04 - 2013-11-23 21:04 - 00050477 _____ C:\Users\GuT\Desktop\Defogger.exe
2013-11-23 20:47 - 2013-11-23 21:25 - 00018912 _____ C:\Users\GuT\Desktop\Addition.txt
2013-11-23 20:46 - 2013-11-23 20:46 - 00000000 ____D C:\FRST
2013-11-23 20:45 - 2013-11-23 21:25 - 01958396 _____ (Farbar) C:\Users\GuT\Desktop\FRST64.exe
2013-11-23 12:43 - 2013-11-14 09:17 - 00000183 _____ C:\Windows\wiso.ini
2013-11-23 11:27 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache
2013-11-22 22:15 - 2009-07-14 06:32 - 00000000 ____D C:\Windows\system32\FxsTmp
2013-11-22 22:13 - 2013-11-22 21:58 - 00016152 _____ C:\Windows\system32\Drivers\SWDUMon.sys
2013-11-22 22:10 - 2013-11-22 22:10 - 00000000 ____H C:\ProgramData\DP45977C.lfl
2013-11-22 22:10 - 2013-11-22 22:10 - 00000000 ____D C:\Windows\SysWOW64\RTCOM
2013-11-22 22:10 - 2013-11-22 22:10 - 00000000 ____D C:\Program Files\Realtek
2013-11-22 22:09 - 2013-11-22 21:59 - 00000000 ____D C:\Program Files (x86)\Realtek
2013-11-22 22:09 - 2013-11-13 16:10 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2013-11-22 22:03 - 2013-11-22 22:03 - 00000000 ____D C:\ProgramData\AMD
2013-11-22 22:03 - 2013-11-22 22:03 - 00000000 ____D C:\Program Files (x86)\ATI Technologies
2013-11-22 22:03 - 2013-11-22 22:03 - 00000000 ____D C:\Program Files (x86)\AMD APP
2013-11-22 22:03 - 2013-11-22 22:02 - 00000000 ____D C:\Program Files\ATI Technologies
2013-11-22 22:02 - 2013-11-22 22:02 - 00000000 ____D C:\Program Files\ATI
2013-11-22 21:58 - 2013-11-22 21:58 - 00002497 _____ C:\Users\Public\Desktop\SlimDrivers.lnk
2013-11-22 21:58 - 2013-11-22 21:58 - 00000000 ____D C:\Users\Public\Documents\Downloaded Installers
2013-11-22 21:58 - 2013-11-22 21:58 - 00000000 ____D C:\Users\GuT\AppData\Local\SlimWare Utilities Inc
2013-11-20 20:33 - 2013-11-14 09:17 - 00000000 ____D C:\Users\GuT\Documents\Steuer-Sparbuch
2013-11-20 19:05 - 2013-11-20 18:59 - 00000000 ____D C:\Program Files\PC-WELT-Win7SP2
2013-11-19 20:31 - 2013-11-19 19:58 - 00000000 ____D C:\Windows\pss
2013-11-19 18:09 - 2013-11-13 18:13 - 00033646 _____ C:\Windows\PFRO.log
2013-11-19 18:03 - 2013-11-13 15:11 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-11-19 18:03 - 2009-07-14 03:34 - 00000478 _____ C:\Windows\win.ini
2013-11-19 17:43 - 2013-11-12 16:46 - 00001425 _____ C:\Users\GuT\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2013-11-19 17:43 - 2013-11-12 16:46 - 00000000 ___RD C:\Users\GuT\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-11-19 17:43 - 2013-11-12 16:46 - 00000000 ___RD C:\Users\GuT\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2013-11-19 17:42 - 2009-07-14 05:45 - 00418752 _____ C:\Windows\system32\FNTCACHE.DAT
2013-11-19 17:41 - 2013-11-14 17:07 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2013-11-19 17:41 - 2013-11-14 17:07 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2013-11-19 11:21 - 2013-11-12 16:54 - 00267936 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2013-11-18 21:44 - 2009-07-14 08:47 - 00000000 ____D C:\Program Files\Windows Journal
2013-11-18 21:44 - 2009-07-14 06:32 - 00000000 ____D C:\Program Files\Windows Defender
2013-11-18 21:44 - 2009-07-14 06:32 - 00000000 ____D C:\Program Files (x86)\Windows Defender
2013-11-18 21:44 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\SysWOW64\zh-HK
2013-11-18 21:44 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\SysWOW64\tr-TR
2013-11-18 21:44 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\zh-HK
2013-11-18 21:44 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\tr-TR
2013-11-18 21:44 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2013-11-18 21:43 - 2013-11-18 21:40 - 00009667 _____ C:\Windows\IE11_main.log
2013-11-18 21:41 - 2013-11-18 21:41 - 23212032 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-11-18 21:41 - 2013-11-18 21:41 - 17142784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-11-18 21:41 - 2013-11-18 21:41 - 12995584 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-11-18 21:41 - 2013-11-18 21:41 - 11220992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-11-18 21:41 - 2013-11-18 21:41 - 05765120 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-11-18 21:41 - 2013-11-18 21:41 - 04240384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-11-18 21:41 - 2013-11-18 21:41 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-11-18 21:41 - 2013-11-18 21:41 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-11-18 21:41 - 2013-11-18 21:41 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-11-18 21:41 - 2013-11-18 21:41 - 02332160 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-11-18 21:41 - 2013-11-18 21:41 - 02166272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-11-18 21:41 - 2013-11-18 21:41 - 01993728 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-11-18 21:41 - 2013-11-18 21:41 - 01926656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-11-18 21:41 - 2013-11-18 21:41 - 01818112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-11-18 21:41 - 2013-11-18 21:41 - 01394176 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-11-18 21:41 - 2013-11-18 21:41 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2013-11-18 21:41 - 2013-11-18 21:41 - 01156608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-11-18 21:41 - 2013-11-18 21:41 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2013-11-18 21:41 - 2013-11-18 21:41 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2013-11-18 21:41 - 2013-11-18 21:41 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2013-11-18 21:41 - 2013-11-18 21:41 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2013-11-18 21:41 - 2013-11-18 21:41 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-11-18 21:41 - 2013-11-18 21:41 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2013-11-18 21:41 - 2013-11-18 21:41 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-11-18 21:41 - 2013-11-18 21:41 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll
2013-11-18 21:41 - 2013-11-18 21:41 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-11-18 21:41 - 2013-11-18 21:41 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2013-11-18 21:41 - 2013-11-18 21:41 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2013-11-18 21:41 - 2013-11-18 21:41 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-11-18 21:41 - 2013-11-18 21:41 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-11-18 21:41 - 2013-11-18 21:41 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2013-11-18 21:41 - 2013-11-18 21:41 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-11-18 21:41 - 2013-11-18 21:41 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-11-18 21:41 - 2013-11-18 21:41 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-11-18 21:41 - 2013-11-18 21:41 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2013-11-18 21:41 - 2013-11-18 21:41 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-11-18 21:41 - 2013-11-18 21:41 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2013-11-18 21:41 - 2013-11-18 21:41 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2013-11-18 21:41 - 2013-11-18 21:41 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2013-11-18 21:41 - 2013-11-18 21:41 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2013-11-18 21:41 - 2013-11-18 21:41 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2013-11-18 21:41 - 2013-11-18 21:41 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2013-11-18 21:41 - 2013-11-18 21:41 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2013-11-18 21:41 - 2013-11-18 21:41 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2013-11-18 21:41 - 2013-11-18 21:41 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2013-11-18 21:41 - 2013-11-18 21:41 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-11-18 21:41 - 2013-11-18 21:41 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2013-11-18 21:41 - 2013-11-18 21:41 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-11-18 21:41 - 2013-11-18 21:41 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-11-18 21:41 - 2013-11-18 21:41 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2013-11-18 21:41 - 2013-11-18 21:41 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2013-11-18 21:41 - 2013-11-18 21:41 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2013-11-18 21:41 - 2013-11-18 21:41 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2013-11-18 21:41 - 2013-11-18 21:41 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2013-11-18 21:41 - 2013-11-18 21:41 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2013-11-18 21:41 - 2013-11-18 21:41 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2013-11-18 21:41 - 2013-11-18 21:41 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2013-11-18 21:41 - 2013-11-18 21:41 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2013-11-18 21:41 - 2013-11-18 21:41 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2013-11-18 21:41 - 2013-11-18 21:41 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-11-18 21:41 - 2013-11-18 21:41 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2013-11-18 21:41 - 2013-11-18 21:41 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2013-11-18 21:41 - 2013-11-18 21:41 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2013-11-18 21:41 - 2013-11-18 21:41 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2013-11-18 21:41 - 2013-11-18 21:41 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-11-18 21:41 - 2013-11-18 21:41 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2013-11-18 21:41 - 2013-11-18 21:41 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2013-11-18 21:41 - 2013-11-18 21:41 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-11-18 21:41 - 2013-11-18 21:41 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2013-11-18 21:41 - 2013-11-18 21:41 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2013-11-18 21:41 - 2013-11-18 21:41 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-11-18 21:41 - 2013-11-18 21:41 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-11-18 21:41 - 2013-11-18 21:41 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-11-18 21:41 - 2013-11-18 21:41 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2013-11-18 21:41 - 2013-11-18 21:41 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2013-11-18 21:41 - 2013-11-18 21:41 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2013-11-18 21:41 - 2013-11-18 21:41 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2013-11-18 21:41 - 2013-11-18 21:41 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2013-11-18 21:41 - 2013-11-18 21:41 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-11-18 21:41 - 2013-11-18 21:41 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-11-18 21:41 - 2013-11-18 21:41 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2013-11-18 21:41 - 2013-11-18 21:41 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-11-18 21:41 - 2013-11-18 21:41 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2013-11-18 21:41 - 2013-11-18 21:41 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2013-11-18 21:41 - 2013-11-18 21:41 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2013-11-18 21:41 - 2013-11-18 21:41 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-11-18 21:41 - 2013-11-18 21:41 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2013-11-18 21:41 - 2013-11-18 21:41 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-11-18 21:41 - 2013-11-18 21:41 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2013-11-18 21:41 - 2013-11-18 21:41 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2013-11-18 21:41 - 2013-11-18 21:41 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2013-11-18 21:41 - 2013-11-18 21:41 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2013-11-18 21:41 - 2013-11-18 21:41 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2013-11-18 21:41 - 2013-11-18 21:41 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2013-11-18 21:41 - 2013-11-18 21:41 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2013-11-18 21:41 - 2013-11-18 21:41 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-11-18 21:41 - 2013-11-18 21:41 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2013-11-18 21:41 - 2013-11-18 21:41 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2013-11-18 21:41 - 2013-11-18 21:41 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2013-11-18 21:41 - 2013-11-18 21:41 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-11-18 21:41 - 2013-11-18 21:41 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-11-18 21:41 - 2013-11-18 21:41 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2013-11-18 21:41 - 2013-11-18 21:41 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2013-11-18 21:41 - 2013-11-18 21:41 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2013-11-18 21:41 - 2013-11-18 21:41 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2013-11-18 21:41 - 2013-11-18 21:41 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2013-11-18 21:41 - 2013-11-18 21:41 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2013-11-18 21:41 - 2013-11-18 21:41 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2013-11-18 21:18 - 2013-11-18 21:18 - 00000000 ___HD C:\ProgramData\CanonIJScan
2013-11-18 21:18 - 2013-11-18 21:18 - 00000000 _____ C:\Users\GuT\Sti_Trace.log
2013-11-18 21:18 - 2013-11-18 21:16 - 00000000 ____D C:\Users\GuT\AppData\Roaming\Canon
2013-11-18 21:16 - 2013-11-18 21:16 - 00002099 _____ C:\Users\Public\Desktop\MP Navigator EX 2.0.lnk
2013-11-18 21:16 - 2013-11-18 21:16 - 00000000 ____D C:\Program Files (x86)\Canon
2013-11-18 21:13 - 2009-07-14 04:20 - 00000000 __RSD C:\Windows\Media
2013-11-18 21:12 - 2013-11-18 21:12 - 00000000 ___HD C:\Windows\system32\CanonIJ Uninstaller Information
2013-11-18 21:12 - 2013-11-18 21:12 - 00000000 ___HD C:\Program Files\CanonBJ
2013-11-17 19:14 - 2013-11-17 19:14 - 00000000 ____D C:\ProgramData\TreeCardGames
2013-11-17 19:13 - 2013-11-17 19:13 - 00001037 _____ C:\Users\Public\Desktop\123 Free Solitaire.lnk
2013-11-17 19:13 - 2013-11-17 19:13 - 00000000 ____D C:\Users\GuT\AppData\Roaming\TreeCardGames
2013-11-17 19:13 - 2013-11-17 19:13 - 00000000 ____D C:\Program Files (x86)\123 Free Solitaire
2013-11-17 18:41 - 2013-11-13 09:25 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-11-17 16:46 - 2013-11-17 16:45 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-11-17 16:22 - 2013-11-13 15:02 - 00000000 ____D C:\ProgramData\Adobe
2013-11-14 17:23 - 2009-07-14 06:32 - 00000000 ____D C:\Program Files\Windows Sidebar
2013-11-14 17:23 - 2009-07-14 06:32 - 00000000 ____D C:\Program Files\Windows Portable Devices
2013-11-14 17:23 - 2009-07-14 06:32 - 00000000 ____D C:\Program Files\Windows Photo Viewer
2013-11-14 17:23 - 2009-07-14 06:32 - 00000000 ____D C:\Program Files\DVD Maker
2013-11-14 17:23 - 2009-07-14 06:32 - 00000000 ____D C:\Program Files (x86)\Windows Sidebar
2013-11-14 17:23 - 2009-07-14 06:32 - 00000000 ____D C:\Program Files (x86)\Windows Portable Devices
2013-11-14 17:23 - 2009-07-14 06:32 - 00000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2013-11-14 17:23 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\SysWOW64\sppui
2013-11-14 17:23 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\SysWOW64\Setup
2013-11-14 17:23 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\SysWOW64\oobe
2013-11-14 17:23 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\SysWOW64\migwiz
2013-11-14 17:23 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\SysWOW64\manifeststore
2013-11-14 17:23 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\SysWOW64\Dism
2013-11-14 17:23 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\SysWOW64\AdvancedInstallers
2013-11-14 17:23 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\servicing
2013-11-14 17:23 - 2009-07-14 04:20 - 00000000 ____D C:\Program Files\Common Files\System
2013-11-14 17:22 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\sppui
2013-11-14 17:22 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\Setup
2013-11-14 17:22 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\oobe
2013-11-14 17:22 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\migwiz
2013-11-14 17:22 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\manifeststore
2013-11-14 17:22 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\Dism
2013-11-14 17:22 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\AdvancedInstallers
2013-11-14 17:19 - 2009-07-14 03:36 - 00175616 _____ (Microsoft Corporation) C:\Windows\system32\msclmd.dll
2013-11-14 17:19 - 2009-07-14 03:36 - 00152576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msclmd.dll
2013-11-14 16:54 - 2013-11-14 16:54 - 00000000 ____D C:\Windows\system32\SPReview
2013-11-14 16:54 - 2013-11-14 16:54 - 00000000 ____D C:\Windows\system32\EventProviders
2013-11-14 16:52 - 2013-11-12 17:02 - 82896128 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-11-14 16:52 - 2013-11-12 17:02 - 00000000 ____D C:\Windows\system32\MRT
2013-11-14 16:48 - 2013-11-14 16:45 - 00000000 ____D C:\Program Files\Windows Live
2013-11-14 16:48 - 2009-07-14 04:20 - 00000000 ____D C:\Program Files\Common Files\Microsoft Shared
2013-11-14 16:47 - 2013-11-13 15:14 - 00000000 ____D C:\Program Files (x86)\Microsoft SQL Server Compact Edition
2013-11-14 16:46 - 2013-11-14 16:46 - 00000020 _____ C:\Windows\ û+
2013-11-14 16:45 - 2013-11-14 16:45 - 00000194 _____ C:\Windows\DirectX.log
2013-11-14 14:24 - 2013-11-14 14:24 - 00000000 ____D C:\Users\GuT\AppData\Local\Windows Live
2013-11-14 13:09 - 2013-11-14 09:17 - 00000000 ____D C:\Users\GuT\Documents\Mein Steuer-Sparbuch Heute
2013-11-14 10:09 - 2013-11-14 10:09 - 00002099 _____ C:\Users\Public\Desktop\WISO Steuer-Sparbuch 2014.lnk
2013-11-14 10:09 - 2013-11-14 09:17 - 00000000 ____D C:\Users\GuT\AppData\Local\Buhl
2013-11-14 09:21 - 2013-11-14 09:08 - 00000000 ____D C:\Program Files (x86)\WISO
2013-11-14 09:17 - 2013-11-14 09:17 - 00002099 _____ C:\Users\Public\Desktop\WISO Steuer-Sparbuch 2013.lnk
2013-11-14 09:17 - 2013-11-14 09:07 - 00000000 ____D C:\ProgramData\Buhl Data Service GmbH
2013-11-13 20:09 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\NDF
2013-11-13 19:05 - 2013-11-13 19:05 - 01526060 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2013-11-13 18:13 - 2013-11-12 16:50 - 00109688 _____ C:\Users\GuT\AppData\Local\GDIPFONTCACHEV1.DAT
2013-11-13 16:13 - 2013-11-13 16:13 - 00001570 _____ C:\Users\Public\Desktop\StarMoney 9.0 Pocket.lnk
2013-11-13 16:13 - 2013-11-13 16:13 - 00001242 _____ C:\Users\Public\Desktop\StarMoney 9.0 Pocket Startcenter.lnk
2013-11-13 16:13 - 2013-11-13 16:13 - 00000000 ____D C:\ProgramData\StarFinanz
2013-11-13 16:12 - 2013-11-13 16:12 - 00000000 ____D C:\Program Files (x86)\Business Objects
2013-11-13 16:12 - 2009-07-14 03:34 - 00017486 _____ C:\Windows\system32\Drivers\etc\services
2013-11-13 16:10 - 2013-11-13 16:10 - 00000000 ____D C:\Program Files (x86)\Renesas Electronics
2013-11-13 16:09 - 2013-11-13 16:09 - 00000000 ____D C:\Users\GuT\AppData\Local\Google
2013-11-13 16:08 - 2013-11-13 16:08 - 00000000 ____D C:\Users\GuT\AppData\Roaming\OpenCandy
2013-11-13 16:08 - 2013-11-13 16:08 - 00000000 ____D C:\Program Files\FreeFileSync
2013-11-13 16:03 - 2013-11-13 09:26 - 00000000 ____D C:\Users\GuT\AppData\Local\Mozilla
2013-11-13 15:52 - 2013-11-13 15:11 - 00000000 ____D C:\Users\GuT\AppData\Local\Microsoft Help
2013-11-13 15:14 - 2013-11-13 15:14 - 00000000 ____D C:\Windows\PCHEALTH
2013-11-13 15:14 - 2013-11-13 15:14 - 00000000 ____D C:\Program Files (x86)\Microsoft Synchronization Services
2013-11-13 15:14 - 2013-11-13 15:14 - 00000000 ____D C:\Program Files (x86)\Microsoft Sync Framework
2013-11-13 15:14 - 2013-11-13 15:11 - 00000000 ____D C:\Program Files (x86)\Microsoft Office
2013-11-13 15:14 - 2009-07-14 08:46 - 00000000 ____D C:\Windows\ShellNew
2013-11-13 15:14 - 2009-07-14 06:32 - 00000000 ____D C:\Program Files (x86)\MSBuild
2013-11-13 15:13 - 2013-11-13 15:13 - 00000000 ____D C:\Windows\System32\Tasks\OfficeSoftwareProtectionPlatform
2013-11-13 15:12 - 2013-11-13 15:12 - 00000000 ____D C:\Program Files (x86)\Microsoft Visual Studio 8
2013-11-13 15:11 - 2013-11-13 15:11 - 00000000 __RHD C:\MSOCache
2013-11-13 15:11 - 2013-11-13 15:11 - 00000000 ____D C:\Program Files\Microsoft Office
2013-11-13 15:11 - 2013-11-13 15:11 - 00000000 ____D C:\Program Files (x86)\Microsoft Analysis Services
2013-11-13 15:10 - 2013-11-13 12:38 - 00000000 ____D C:\Users\GuT\AppData\Local\Adobe
2013-11-13 15:10 - 2013-11-13 08:21 - 00000000 ____D C:\Users\GuT\AppData\Roaming\Adobe
2013-11-13 15:03 - 2013-11-13 15:03 - 00002019 _____ C:\Users\Public\Desktop\Adobe Reader XI.lnk
2013-11-13 15:03 - 2009-07-14 06:37 - 00000000 ____D C:\Windows\SysWOW64\winrm
2013-11-13 15:03 - 2009-07-14 06:37 - 00000000 ____D C:\Windows\SysWOW64\WCN
2013-11-13 15:03 - 2009-07-14 06:37 - 00000000 ____D C:\Windows\SysWOW64\sysprep
2013-11-13 15:03 - 2009-07-14 06:37 - 00000000 ____D C:\Windows\SysWOW64\slmgr
2013-11-13 15:03 - 2009-07-14 06:37 - 00000000 ____D C:\Windows\SysWOW64\Printing_Admin_Scripts
2013-11-13 15:03 - 2009-07-14 06:37 - 00000000 ____D C:\Windows\system32\winrm
2013-11-13 15:03 - 2009-07-14 06:37 - 00000000 ____D C:\Windows\system32\WCN
2013-11-13 15:03 - 2009-07-14 06:37 - 00000000 ____D C:\Windows\system32\slmgr
2013-11-13 15:03 - 2009-07-14 06:37 - 00000000 ____D C:\Windows\system32\Printing_Admin_Scripts
2013-11-13 15:03 - 2009-07-14 06:37 - 00000000 ____D C:\Windows\DigitalLocker
2013-11-13 15:03 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\SysWOW64\MUI
2013-11-13 15:03 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\SysWOW64\com
2013-11-13 15:03 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\sysprep
2013-11-13 15:03 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\MUI
2013-11-13 15:03 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\com
2013-11-13 15:03 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\IME
2013-11-13 15:02 - 2013-11-13 15:02 - 00000000 ____D C:\Program Files (x86)\Adobe
2013-11-13 12:41 - 2013-11-13 12:41 - 00000000 ____D C:\Users\GuT\AppData\Local\Macromedia
2013-11-13 12:38 - 2013-11-13 12:38 - 00000000 ____D C:\ProgramData\McAfee
2013-11-13 12:38 - 2013-11-13 08:21 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-11-13 12:38 - 2013-11-13 08:21 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-11-13 09:26 - 2013-11-13 09:26 - 00000000 ____D C:\Users\GuT\AppData\Roaming\Mozilla
2013-11-13 09:25 - 2013-11-13 09:25 - 00001151 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2013-11-13 09:25 - 2013-11-13 09:25 - 00000000 ____D C:\ProgramData\Mozilla
2013-11-13 09:24 - 2013-11-13 09:24 - 00003532 _____ C:\Windows\System32\Tasks\CreateChoiceProcessTask
2013-11-13 08:21 - 2013-11-13 08:21 - 00000000 ____D C:\Windows\SysWOW64\Macromed
2013-11-13 08:21 - 2013-11-13 08:21 - 00000000 ____D C:\Windows\system32\Macromed
2013-11-13 08:21 - 2013-11-13 08:21 - 00000000 ____D C:\Users\GuT\AppData\Roaming\Macromedia
2013-11-13 07:39 - 2013-11-13 07:39 - 00000000 ____D C:\Program Files (x86)\Samsung Magician
2013-11-13 07:39 - 2013-11-13 07:37 - 00001107 _____ C:\Users\Public\Desktop\Samsung Magician.lnk
2013-11-13 07:37 - 2013-11-13 07:37 - 00000000 ____D C:\ProgramData\Samsung
2013-11-13 01:40 - 2009-07-14 06:38 - 00025600 ___SH C:\Windows\system32\config\BCD-Template.LOG
2013-11-13 01:40 - 2009-07-14 06:32 - 00028672 _____ C:\Windows\system32\config\BCD-Template
2013-11-13 01:40 - 2009-07-14 05:45 - 00000000 ____D C:\Windows\Setup
2013-11-13 01:39 - 2013-11-13 01:39 - 00295922 _____ C:\Windows\system32\perfi007.dat
2013-11-13 01:39 - 2013-11-13 01:39 - 00038104 _____ C:\Windows\system32\perfd007.dat
2013-11-13 01:39 - 2013-11-13 01:39 - 00000000 ____D C:\Windows\SysWOW64\XPSViewer
2013-11-13 01:39 - 2013-11-13 01:39 - 00000000 ____D C:\Windows\SysWOW64\de
2013-11-13 01:39 - 2013-11-13 01:39 - 00000000 ____D C:\Windows\SysWOW64\0407
2013-11-13 01:39 - 2013-11-13 01:39 - 00000000 ____D C:\Windows\system32\de
2013-11-13 01:39 - 2013-11-13 01:39 - 00000000 ____D C:\Windows\system32\0407
2013-11-13 01:39 - 2009-07-14 06:32 - 00000000 ____D C:\Windows\system32\WinBioPlugIns
2013-11-12 17:21 - 2013-11-12 17:21 - 00000020 ___SH C:\Users\UpdatusUser\ntuser.ini
2013-11-12 17:21 - 2013-11-12 17:21 - 00000000 _SHDL C:\Users\UpdatusUser\Vorlagen
2013-11-12 17:21 - 2013-11-12 17:21 - 00000000 _SHDL C:\Users\UpdatusUser\Startmenü
2013-11-12 17:21 - 2013-11-12 17:21 - 00000000 _SHDL C:\Users\UpdatusUser\Netzwerkumgebung
2013-11-12 17:21 - 2013-11-12 17:21 - 00000000 _SHDL C:\Users\UpdatusUser\Lokale Einstellungen
2013-11-12 17:21 - 2013-11-12 17:21 - 00000000 _SHDL C:\Users\UpdatusUser\Eigene Dateien
2013-11-12 17:21 - 2013-11-12 17:21 - 00000000 _SHDL C:\Users\UpdatusUser\Druckumgebung
2013-11-12 17:21 - 2013-11-12 17:21 - 00000000 _SHDL C:\Users\UpdatusUser\Documents\Eigene Musik
2013-11-12 17:21 - 2013-11-12 17:21 - 00000000 _SHDL C:\Users\UpdatusUser\Documents\Eigene Bilder
2013-11-12 17:21 - 2013-11-12 17:21 - 00000000 _SHDL C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2013-11-12 17:21 - 2013-11-12 17:21 - 00000000 _SHDL C:\Users\UpdatusUser\AppData\Local\Verlauf
2013-11-12 17:21 - 2013-11-12 17:21 - 00000000 _SHDL C:\Users\UpdatusUser\AppData\Local\Anwendungsdaten
2013-11-12 17:21 - 2013-11-12 17:21 - 00000000 _SHDL C:\Users\UpdatusUser\Anwendungsdaten
2013-11-12 17:21 - 2013-11-12 17:20 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2013-11-12 17:21 - 2013-11-12 17:20 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2013-11-12 17:21 - 2013-11-12 17:20 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2013-11-12 17:21 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\Help
2013-11-12 17:15 - 2013-11-12 17:13 - 00004507 _____ C:\Windows\IE9_main.log
2013-11-12 16:49 - 2013-11-12 16:49 - 00000000 ____D C:\Program Files\Microsoft Security Client
2013-11-12 16:49 - 2013-11-12 16:49 - 00000000 ____D C:\Program Files (x86)\Microsoft Security Client
2013-11-12 16:47 - 2009-07-14 06:32 - 00000000 ____D C:\Windows\system32\restore
2013-11-12 16:47 - 2009-07-14 04:20 - 00000000 __RHD C:\Users\Public\Libraries
2013-11-12 16:45 - 2013-11-13 01:40 - 00000000 ____D C:\Windows\Panther
2013-11-12 16:45 - 2013-11-12 16:45 - 00000020 ___SH C:\Users\GuT\ntuser.ini
2013-11-12 16:45 - 2013-11-12 16:45 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Musik
2013-11-12 16:45 - 2013-11-12 16:45 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Bilder
2013-11-12 16:45 - 2013-11-12 16:45 - 00000000 _SHDL C:\Users\GuT\Vorlagen
2013-11-12 16:45 - 2013-11-12 16:45 - 00000000 _SHDL C:\Users\GuT\Startmenü
2013-11-12 16:45 - 2013-11-12 16:45 - 00000000 _SHDL C:\Users\GuT\Netzwerkumgebung
2013-11-12 16:45 - 2013-11-12 16:45 - 00000000 _SHDL C:\Users\GuT\Lokale Einstellungen
2013-11-12 16:45 - 2013-11-12 16:45 - 00000000 _SHDL C:\Users\GuT\Eigene Dateien
2013-11-12 16:45 - 2013-11-12 16:45 - 00000000 _SHDL C:\Users\GuT\Druckumgebung
2013-11-12 16:45 - 2013-11-12 16:45 - 00000000 _SHDL C:\Users\GuT\Documents\Eigene Musik
2013-11-12 16:45 - 2013-11-12 16:45 - 00000000 _SHDL C:\Users\GuT\Documents\Eigene Bilder
2013-11-12 16:45 - 2013-11-12 16:45 - 00000000 _SHDL C:\Users\GuT\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2013-11-12 16:45 - 2013-11-12 16:45 - 00000000 _SHDL C:\Users\GuT\AppData\Local\Verlauf
2013-11-12 16:45 - 2013-11-12 16:45 - 00000000 _SHDL C:\Users\GuT\AppData\Local\Anwendungsdaten
2013-11-12 16:45 - 2013-11-12 16:45 - 00000000 _SHDL C:\Users\GuT\Anwendungsdaten
2013-11-12 16:45 - 2013-11-12 16:45 - 00000000 _SHDL C:\Users\Default\Vorlagen
2013-11-12 16:45 - 2013-11-12 16:45 - 00000000 _SHDL C:\Users\Default\Startmenü
2013-11-12 16:45 - 2013-11-12 16:45 - 00000000 _SHDL C:\Users\Default\Netzwerkumgebung
2013-11-12 16:45 - 2013-11-12 16:45 - 00000000 _SHDL C:\Users\Default\Lokale Einstellungen
2013-11-12 16:45 - 2013-11-12 16:45 - 00000000 _SHDL C:\Users\Default\Eigene Dateien
2013-11-12 16:45 - 2013-11-12 16:45 - 00000000 _SHDL C:\Users\Default\Druckumgebung
2013-11-12 16:45 - 2013-11-12 16:45 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Musik
2013-11-12 16:45 - 2013-11-12 16:45 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Bilder
2013-11-12 16:45 - 2013-11-12 16:45 - 00000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2013-11-12 16:45 - 2013-11-12 16:45 - 00000000 _SHDL C:\Users\Default\AppData\Local\Verlauf
2013-11-12 16:45 - 2013-11-12 16:45 - 00000000 _SHDL C:\Users\Default\AppData\Local\Anwendungsdaten
2013-11-12 16:45 - 2013-11-12 16:45 - 00000000 _SHDL C:\Users\Default\Anwendungsdaten
2013-11-12 16:45 - 2013-11-12 16:45 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Musik
2013-11-12 16:45 - 2013-11-12 16:45 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Bilder
2013-11-12 16:45 - 2013-11-12 16:45 - 00000000 _SHDL C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2013-11-12 16:45 - 2013-11-12 16:45 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Verlauf
2013-11-12 16:45 - 2013-11-12 16:45 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Anwendungsdaten
2013-11-12 16:45 - 2013-11-12 16:45 - 00000000 _SHDL C:\Programme
2013-11-12 16:45 - 2013-11-12 16:45 - 00000000 _SHDL C:\ProgramData\Vorlagen
2013-11-12 16:45 - 2013-11-12 16:45 - 00000000 _SHDL C:\ProgramData\Startmenü
2013-11-12 16:45 - 2013-11-12 16:45 - 00000000 _SHDL C:\ProgramData\Favoriten
2013-11-12 16:45 - 2013-11-12 16:45 - 00000000 _SHDL C:\ProgramData\Dokumente
2013-11-12 16:45 - 2013-11-12 16:45 - 00000000 _SHDL C:\ProgramData\Anwendungsdaten
2013-11-12 16:45 - 2013-11-12 16:45 - 00000000 _SHDL C:\Program Files\Gemeinsame Dateien
2013-11-12 16:45 - 2013-11-12 16:45 - 00000000 _SHDL C:\Dokumente und Einstellungen
2013-11-12 16:45 - 2013-11-12 16:45 - 00000000 __SHD C:\Recovery
2013-11-12 16:45 - 2013-11-12 16:45 - 00000000 ____D C:\Users\GuT\AppData\Local\VirtualStore
2013-11-12 16:45 - 2009-07-14 04:20 - 00000000 __RHD C:\Users\Default
2013-11-12 16:45 - 2009-07-14 04:20 - 00000000 ____D C:\Program Files\Windows NT
2013-11-12 16:44 - 2013-11-12 16:44 - 00001313 _____ C:\Windows\TSSysprep.log
2013-11-12 16:44 - 2009-07-14 05:46 - 00001774 _____ C:\Windows\DtcInstall.log
2013-11-12 16:42 - 2013-11-12 16:42 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdFs_01_09_00.Wdf
2013-11-12 16:42 - 2009-07-14 08:46 - 00000000 ____D C:\Windows\CSC
2013-10-27 09:12 - 2013-10-27 09:12 - 30344480 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2013-10-27 09:12 - 2013-10-27 09:12 - 25257248 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2013-10-27 09:12 - 2013-10-27 09:12 - 22933792 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2013-10-27 09:12 - 2013-10-27 09:12 - 18286416 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll
2013-10-27 09:12 - 2013-10-27 09:12 - 18199872 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2013-10-27 09:12 - 2013-10-27 09:12 - 17560352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2013-10-27 09:12 - 2013-10-27 09:12 - 15855568 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2013-10-27 09:12 - 2013-10-27 09:12 - 15212336 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll
2013-10-27 09:12 - 2013-10-27 09:12 - 12572960 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2013-10-27 09:12 - 2013-10-27 09:12 - 11426568 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2013-10-27 09:12 - 2013-10-27 09:12 - 11374520 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2013-10-27 09:12 - 2013-10-27 09:12 - 09524088 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2013-10-27 09:12 - 2013-10-27 09:12 - 09480328 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2013-10-27 09:12 - 2013-10-27 09:12 - 03131680 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2013-10-27 09:12 - 2013-10-27 09:12 - 03124512 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll
2013-10-27 09:12 - 2013-10-27 09:12 - 03067560 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
2013-10-27 09:12 - 2013-10-27 09:12 - 02946848 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2013-10-27 09:12 - 2013-10-27 09:12 - 02747168 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll
2013-10-27 09:12 - 2013-10-27 09:12 - 02695200 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
2013-10-27 09:12 - 2013-10-27 09:12 - 01884448 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6433165.dll
2013-10-27 09:12 - 2013-10-27 09:12 - 01511712 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6433165.dll
2013-10-27 09:12 - 2013-10-27 09:12 - 01510176 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdagenco64.dll
2013-10-27 09:12 - 2013-10-27 09:12 - 01435504 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll
2013-10-27 09:12 - 2013-10-27 09:12 - 01241376 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2013-10-27 09:12 - 2013-10-27 09:12 - 00696096 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2013-10-27 09:12 - 2013-10-27 09:12 - 00655136 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2013-10-27 09:12 - 2013-10-27 09:12 - 00599840 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2013-10-27 09:12 - 2013-10-27 09:12 - 00560416 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2013-10-27 09:12 - 2013-10-27 09:12 - 00317472 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2013-10-27 09:12 - 2013-10-27 09:12 - 00266984 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2013-10-27 09:12 - 2013-10-27 09:12 - 00196384 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvhda64v.sys
2013-10-27 09:12 - 2013-10-27 09:12 - 00168616 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2013-10-27 09:12 - 2013-10-27 09:12 - 00141336 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2013-10-27 09:12 - 2013-10-27 09:12 - 00031520 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdap64.dll
2013-10-27 09:12 - 2013-10-27 09:12 - 00023287 _____ C:\Windows\system32\nvinfo.pb
Some content of TEMP:
====================
C:\Users\GuT\AppData\Local\Temp\install_reader11_de_mssa_aaa_aih.exe
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2013-11-23 11:20
==================== End Of Log ============================ Hallo Schrauber,
hier die Addition.txt. Code:
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 23-11-2013 03
Ran by GuT at 2013-11-23 20:46:42
Running from G:\Users\Thomas\Downloads\a-vir
Boot Mode: Normal
==========================================================
==================== Security Center ========================
AV: Microsoft Security Essentials (Enabled - Up to date) {641105E6-77ED-3F35-A304-765193BCB75F}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Microsoft Security Essentials (Enabled - Up to date) {DF70E402-51D7-30BB-99B4-4D23E83BFDE2}
==================== Installed Programs ======================
123 Free Solitaire v10.0 (x32)
Adobe Flash Player 11 ActiveX (x32 Version: 11.9.900.152)
Adobe Flash Player 11 Plugin (x32 Version: 11.9.900.152)
Adobe Reader XI (11.0.05) - Deutsch (x32 Version: 11.0.05)
AMD APP SDK Runtime (Version: 10.0.938.2)
AMD Catalyst Install Manager (Version: 8.0.881.0)
AMD Fuel (Version: 2012.0704.2139.36919)
Bing Bar (x32 Version: 7.0.619.0)
Canon MP Navigator EX 2.0 (x32)
CanoScan 5600F Scanner Driver
Catalyst Control Center - Branding (x32 Version: 1.00.0000)
Catalyst Control Center (x32 Version: 2012.0704.2139.36919)
Catalyst Control Center InstallProxy (x32 Version: 2012.0704.2139.36919)
Catalyst Control Center Localization All (x32 Version: 2012.0704.2139.36919)
CCC Help Chinese Standard (x32 Version: 2012.0704.2138.36919)
CCC Help Chinese Traditional (x32 Version: 2012.0704.2138.36919)
CCC Help Czech (x32 Version: 2012.0704.2138.36919)
CCC Help Danish (x32 Version: 2012.0704.2138.36919)
CCC Help Dutch (x32 Version: 2012.0704.2138.36919)
CCC Help English (x32 Version: 2012.0704.2138.36919)
CCC Help Finnish (x32 Version: 2012.0704.2138.36919)
CCC Help French (x32 Version: 2012.0704.2138.36919)
CCC Help German (x32 Version: 2012.0704.2138.36919)
CCC Help Greek (x32 Version: 2012.0704.2138.36919)
CCC Help Hungarian (x32 Version: 2012.0704.2138.36919)
CCC Help Italian (x32 Version: 2012.0704.2138.36919)
CCC Help Japanese (x32 Version: 2012.0704.2138.36919)
CCC Help Korean (x32 Version: 2012.0704.2138.36919)
CCC Help Norwegian (x32 Version: 2012.0704.2138.36919)
CCC Help Polish (x32 Version: 2012.0704.2138.36919)
CCC Help Portuguese (x32 Version: 2012.0704.2138.36919)
CCC Help Russian (x32 Version: 2012.0704.2138.36919)
CCC Help Spanish (x32 Version: 2012.0704.2138.36919)
CCC Help Swedish (x32 Version: 2012.0704.2138.36919)
CCC Help Thai (x32 Version: 2012.0704.2138.36919)
CCC Help Turkish (x32 Version: 2012.0704.2138.36919)
ccc-utility64 (Version: 2012.0704.2139.36919)
Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition (x32)
FreeFileSync 5.23 (x32 Version: 5.23)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319)
Microsoft Office Access MUI (German) 2010 (x32 Version: 14.0.7015.1000)
Microsoft Office Excel MUI (German) 2010 (x32 Version: 14.0.7015.1000)
Microsoft Office Groove MUI (German) 2010 (x32 Version: 14.0.7015.1000)
Microsoft Office InfoPath MUI (German) 2010 (x32 Version: 14.0.7015.1000)
Microsoft Office Office 64-bit Components 2010 (Version: 14.0.7015.1000)
Microsoft Office OneNote MUI (German) 2010 (x32 Version: 14.0.7015.1000)
Microsoft Office Outlook MUI (German) 2010 (x32 Version: 14.0.7015.1000)
Microsoft Office PowerPoint MUI (German) 2010 (x32 Version: 14.0.7015.1000)
Microsoft Office Professional Plus 2010 (x32 Version: 14.0.7015.1000)
Microsoft Office Proof (English) 2010 (x32 Version: 14.0.7015.1000)
Microsoft Office Proof (French) 2010 (x32 Version: 14.0.7015.1000)
Microsoft Office Proof (German) 2010 (x32 Version: 14.0.7015.1000)
Microsoft Office Proof (Italian) 2010 (x32 Version: 14.0.7015.1000)
Microsoft Office Proofing (German) 2010 (x32 Version: 14.0.7015.1000)
Microsoft Office Publisher MUI (German) 2010 (x32 Version: 14.0.7015.1000)
Microsoft Office Shared 64-bit MUI (German) 2010 (Version: 14.0.7015.1000)
Microsoft Office Shared MUI (German) 2010 (x32 Version: 14.0.7015.1000)
Microsoft Office Word MUI (German) 2010 (x32 Version: 14.0.7015.1000)
Microsoft Security Client (Version: 4.4.0304.0)
Microsoft Security Essentials (Version: 4.4.304.0)
Microsoft Silverlight (Version: 5.1.20913.0)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (Version: 10.0.40219)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219)
Mozilla Firefox 25.0.1 (x86 de) (x32 Version: 25.0.1)
Mozilla Maintenance Service (x32 Version: 25.0.1)
NVIDIA 3D Vision Treiber 331.65 (Version: 331.65)
NVIDIA Grafiktreiber 331.65 (Version: 331.65)
NVIDIA HD-Audiotreiber 1.3.26.4 (Version: 1.3.26.4)
NVIDIA Install Application (Version: 2.1002.133.889)
NVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.13.3165)
NVIDIA Systemsteuerung 331.65 (Version: 331.65)
NVIDIA Update 1.15.2 (Version: 1.15.2)
NVIDIA Update Components (Version: 1.15.2)
Realtek Ethernet Controller Driver (x32 Version: 7.56.316.2012)
Realtek High Definition Audio Driver (x32 Version: 6.0.1.7083)
Renesas Electronics USB 3.0 Host Controller Driver (x32 Version: 2.1.25.0)
Samsung Magician (x32 Version: 4.2.1)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (x32)
SlimDrivers (x32 Version: 2.2.32705)
StarMoney (x32 Version: 4.0.1.51)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939v3) (x32 Version: 3)
Update for Microsoft Access 2010 (KB2553446) 32-Bit Edition (x32)
Update for Microsoft Filter Pack 2.0 (KB2810071) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2589298) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2589375) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2597087) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2794737) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2825640) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2826026) 32-Bit Edition (x32)
Update for Microsoft OneNote 2010 (KB2810072) 32-Bit Edition (x32)
Update for Microsoft PowerPoint 2010 (KB2553145) 32-Bit Edition (x32)
Update for Microsoft Visio Viewer 2010 (KB2810066) 32-Bit Edition (x32)
Update for Microsoft Word 2010 (KB2827323) 32-Bit Edition (x32)
Windows Live ID Sign-in Assistant (Version: 7.250.4232.0)
WISO Steuer-Sparbuch 2013 (x32 Version: 20.09.8389)
WISO Steuer-Sparbuch 2014 (x32 Version: 21.00.8480)
==================== Restore Points =========================
24-10-2013 14:33:43 Windows Update
28-10-2013 15:45:31 Windows Update
31-10-2013 19:04:41 Windows Update
02-11-2013 17:06:11 SlimDrivers Installing Drivers
02-11-2013 17:18:42 Installiert Realtek Ethernet Controller Driver
02-11-2013 20:33:22 SlimDrivers Installing Drivers
04-11-2013 16:26:19 Windows Update
08-11-2013 15:19:48 Windows Update
11-11-2013 17:30:13 Windows Update
12-11-2013 13:29:29 Installiert StarMoney
18-11-2013 20:21:24 Windows Update
19-11-2013 17:00:31 Windows Update
19-11-2013 18:52:39 Windows Update
20-11-2013 18:02:47 Konfiguriert Renesas Electronics USB 3.0 Host Controller Driver
22-11-2013 20:57:40 Windows Update
22-11-2013 20:59:29 Installiert Realtek Ethernet Controller Driver
==================== Hosts content: ==========================
2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
==================== Scheduled Tasks (whitelisted) =============
Task: {45F02422-BA30-4EA3-9E48-8497B73F002E} - System32\Tasks\Microsoft\Windows\MUI\Lpksetup => C:\Windows\System32\lpksetup.exe [2010-11-20] (Microsoft Corporation)
Task: {ED696A55-C5C9-4B30-8833-F2AFA4E8F0B6} - System32\Tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask => Sc.exe start osppsvc
Task: {FE67F5CB-AD82-4E37-9626-9FB5E7C5196E} - System32\Tasks\CreateChoiceProcessTask => C:\Windows\System32\browserchoice.exe [2010-02-23] (Microsoft Corporation)
==================== Loaded Modules (whitelisted) =============
2013-09-05 00:17 - 2013-09-05 00:17 - 04300456 _____ () C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Cultures\OFFICE.ODF
2013-11-13 07:39 - 2013-05-16 14:42 - 00013824 _____ () C:\Program Files (x86)\Samsung Magician\SAMSUNG_SSD.dll
2013-11-17 16:45 - 2013-11-17 16:45 - 03363952 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
2013-09-05 00:14 - 2013-09-05 00:14 - 04300456 _____ () C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF
2013-11-13 12:38 - 2013-11-13 12:38 - 16237448 _____ () C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_152.dll
==================== Safe Mode (whitelisted) ===================
==================== Faulty Device Manager Devices =============
Name: SCSI-Controller
Description: SCSI-Controller
Class Guid:
Manufacturer:
Service:
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
==================== Event log errors: =========================
Application errors:
==================
Error: (11/14/2013 06:02:37 PM) (Source: ESENT) (User: )
Description: WinMail (2208) WindowsMail0: Die Sicherung wurde abgebrochen, weil sie vom Client angehalten wurde, oder weil die Verbindung mit dem Client unterbrochen wurde.
Error: (11/14/2013 06:02:36 PM) (Source: ESENT) (User: )
Description: WinMail (1116) WindowsMail0: Die Sicherung wurde abgebrochen, weil sie vom Client angehalten wurde, oder weil die Verbindung mit dem Client unterbrochen wurde.
Error: (11/14/2013 05:08:58 PM) (Source: MsiInstaller) (User: PC-Biero)
Description: Product: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 -- Error 1935.An error occurred during the installation of assembly 'Microsoft.VC90.ATL,version="9.0.30729.6161",publicKeyToken="1fc8b3b9a1e18e3b",processorArchitecture="x86",type="win32"'. Please refer to Help and Support for more information. HRESULT: 0x80070BC9. assembly interface: IAssemblyCacheItem, function: Commit, component: {03329364-ED3E-3EF1-ACB0-C1E9F5282929}
Error: (11/14/2013 04:48:20 PM) (Source: MsiInstaller) (User: NT-AUTORITÄT)
Description: Fehler beim Beenden einer Windows Installer-Transaktion: WLSetup. Fehler 1603 beim Beenden der Transaktion.
Error: (11/13/2013 04:10:24 PM) (Source: MsiInstaller) (User: PC-Biero)
Description: Product: Renesas Electronics USB 3.0 Host Controller Driver -- This installation cannot be run by directly launching the MSI package. You must run setup.exe.
Error: (11/13/2013 09:21:21 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: daemonu.exe, Version: 1.15.2.0, Zeitstempel: 0x526769f5
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000005
Fehleroffset: 0x742a6a64
ID des fehlerhaften Prozesses: 0xf98
Startzeit der fehlerhaften Anwendung: 0xdaemonu.exe0
Pfad der fehlerhaften Anwendung: daemonu.exe1
Pfad des fehlerhaften Moduls: daemonu.exe2
Berichtskennung: daemonu.exe3
Error: (11/13/2013 09:21:20 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: nvSCPAPISvr.exe, Version: 7.17.13.3165, Zeitstempel: 0x52677ceb
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000005
Fehleroffset: 0x742a6a64
ID des fehlerhaften Prozesses: 0x328
Startzeit der fehlerhaften Anwendung: 0xnvSCPAPISvr.exe0
Pfad der fehlerhaften Anwendung: nvSCPAPISvr.exe1
Pfad des fehlerhaften Moduls: nvSCPAPISvr.exe2
Berichtskennung: nvSCPAPISvr.exe3
Error: (11/12/2013 11:20:17 PM) (Source: System Restore) (User: )
Description: Fehler beim Erstellen des Wiederherstellungspunkts (Prozess = C:\Windows\servicing\TrustedInstaller.exe; Beschreibung = Windows Modules Installer; Fehler = 0x81000101).
Error: (11/12/2013 11:20:17 PM) (Source: VSS) (User: )
Description: Volumeschattenkopie-Dienstfehler: Unerwarteter Fehler "DeviceIoControl(\\?\Volume{d5d78059-4bb0-11e3-b426-806e6f6e6963} - 0000000000000128,0x0053c008,000000000014EAF0,0,000000000042FFB0,4096,[0])". hr = 0x80070079, Das Zeitlimit für die Semaphore wurde erreicht.
.
Vorgang:
EndPrepareSnapshots wird verarbeitet
Kontext:
Ausführungskontext: System Provider
Error: (11/12/2013 11:10:15 PM) (Source: System Restore) (User: )
Description: Fehler beim Erstellen des Wiederherstellungspunkts (Prozess = C:\Windows\system32\svchost.exe -k netsvcs; Beschreibung = Windows Update; Fehler = 0x81000101).
System errors:
=============
Error: (11/23/2013 10:55:45 AM) (Source: Schannel) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung generiert: 40. Der interne Fehlerstatus lautet: 252.
Error: (11/20/2013 06:19:19 PM) (Source: Schannel) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung generiert: 40. Der interne Fehlerstatus lautet: 252.
Error: (11/20/2013 06:06:04 PM) (Source: Schannel) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung generiert: 40. Der interne Fehlerstatus lautet: 252.
Error: (11/19/2013 05:46:01 PM) (Source: Schannel) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung generiert: 40. Der interne Fehlerstatus lautet: 252.
Error: (11/19/2013 05:43:42 PM) (Source: Disk) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk2\DR2 gefunden.
Error: (11/19/2013 05:43:42 PM) (Source: Disk) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk2\DR2 gefunden.
Error: (11/19/2013 05:43:41 PM) (Source: Disk) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk2\DR2 gefunden.
Error: (11/19/2013 05:43:41 PM) (Source: Disk) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk2\DR2 gefunden.
Error: (11/19/2013 05:43:40 PM) (Source: Disk) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk2\DR2 gefunden.
Error: (11/19/2013 05:43:40 PM) (Source: Disk) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk2\DR2 gefunden.
Microsoft Office Sessions:
=========================
Error: (11/14/2013 06:02:37 PM) (Source: ESENT)(User: )
Description: WinMail2208WindowsMail0:
Error: (11/14/2013 06:02:36 PM) (Source: ESENT)(User: )
Description: WinMail1116WindowsMail0:
Error: (11/14/2013 05:08:58 PM) (Source: MsiInstaller)(User: PC-Biero)
Description: Product: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 -- Error 1935.An error occurred during the installation of assembly 'Microsoft.VC90.ATL,version="9.0.30729.6161",publicKeyToken="1fc8b3b9a1e18e3b",processorArchitecture="x86",type="win32"'. Please refer to Help and Support for more information. HRESULT: 0x80070BC9. assembly interface: IAssemblyCacheItem, function: Commit, component: {03329364-ED3E-3EF1-ACB0-C1E9F5282929}(NULL)(NULL)(NULL)(NULL)(NULL)
Error: (11/14/2013 04:48:20 PM) (Source: MsiInstaller)(User: NT-AUTORITÄT)
Description: WLSetup1603(NULL)(NULL)(NULL)(NULL)
Error: (11/13/2013 04:10:24 PM) (Source: MsiInstaller)(User: PC-Biero)
Description: Product: Renesas Electronics USB 3.0 Host Controller Driver -- This installation cannot be run by directly launching the MSI package. You must run setup.exe.(NULL)(NULL)(NULL)(NULL)(NULL)
Error: (11/13/2013 09:21:21 AM) (Source: Application Error)(User: )
Description: daemonu.exe1.15.2.0526769f5unknown0.0.0.000000000c0000005742a6a64f9801cee040407282ebC:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exeunknown937b5253-4c3c-11e3-8faa-1c6f654e3649
Error: (11/13/2013 09:21:20 AM) (Source: Application Error)(User: )
Description: nvSCPAPISvr.exe7.17.13.316552677cebunknown0.0.0.000000000c0000005742a6a6432801cee03ff70a4da7C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exeunknown92ec7fc3-4c3c-11e3-8faa-1c6f654e3649
Error: (11/12/2013 11:20:17 PM) (Source: System Restore)(User: )
Description: C:\Windows\servicing\TrustedInstaller.exeWindows Modules Installer0x81000101
Error: (11/12/2013 11:20:17 PM) (Source: VSS)(User: )
Description: DeviceIoControl(\\?\Volume{d5d78059-4bb0-11e3-b426-806e6f6e6963} - 0000000000000128,0x0053c008,000000000014EAF0,0,000000000042FFB0,4096,[0])0x80070079, Das Zeitlimit für die Semaphore wurde erreicht.
Vorgang:
EndPrepareSnapshots wird verarbeitet
Kontext:
Ausführungskontext: System Provider
Error: (11/12/2013 11:10:15 PM) (Source: System Restore)(User: )
Description: C:\Windows\system32\svchost.exe -k netsvcsWindows Update0x81000101
==================== Memory info ===========================
Percentage of memory in use: 44%
Total physical RAM: 4092.53 MB
Available physical RAM: 2258.5 MB
Total Pagefile: 8183.23 MB
Available Pagefile: 6302.67 MB
Total Virtual: 8192 MB
Available Virtual: 8191.79 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:111.69 GB) (Free:68.97 GB) NTFS
Drive f: (System-reserviert) (Fixed) (Total:0.1 GB) (Free:0.07 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive g: () (Fixed) (Total:931.41 GB) (Free:404.28 GB) NTFS
Drive l: (OCZ RALLY2) (Removable) (Total:7.73 GB) (Free:6.2 GB) FAT32
Drive z: (FRITZ.NAS) (Network) (Total:931.28 GB) (Free:352.38 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 112 GB) (Disk ID: A01FB156)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=112 GB) - (Type=07 NTFS)
========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 932 GB) (Disk ID: 5C18105B)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=931 GB) - (Type=07 NTFS)
========================================================
Disk: 2 (Size: 8 GB) (Disk ID: 779614D0)
Partition 1: (Not Active) - (Size=8 GB) - (Type=0B)
==================== End Of Log ============================ Hallo Schrauber,
hier die GMER.txt Code:
GMER Logfile:
Code:
GMER 2.1.19163 - hxxp://www.gmer.net
Rootkit scan 2013-11-23 21:22:05
Windows 6.1.7601 Service Pack 1 x64 \Device\Harddisk0\DR0 -> \Device\00000057 Samsung_ rev.EXT0 111,79GB
Running: gmer_2.1.19163.exe; Driver: C:\Users\GuT\AppData\Local\Temp\pwddapog.sys
---- Kernel code sections - GMER 2.1 ----
INITKDBG C:\Windows\system32\ntoskrnl.exe!ExDeleteNPagedLookasideList + 528 fffff80002fb8000 45 bytes [00, 00, 15, 02, 46, 69, 6C, ...]
INITKDBG C:\Windows\system32\ntoskrnl.exe!ExDeleteNPagedLookasideList + 575 fffff80002fb802f 16 bytes [00, 00, 00, 00, 00, 00, 00, ...]
---- User code sections - GMER 2.1 ----
.text C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe[3012] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69 0000000076a81465 2 bytes [A8, 76]
.text C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe[3012] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155 0000000076a814bb 2 bytes [A8, 76]
.text ... * 2
.text C:\Program Files (x86)\Samsung Magician\Samsung Magician.exe[3156] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69 0000000076a81465 2 bytes [A8, 76]
.text C:\Program Files (x86)\Samsung Magician\Samsung Magician.exe[3156] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155 0000000076a814bb 2 bytes [A8, 76]
.text ... * 2
.text C:\Program Files (x86)\Microsoft Office\Office14\OUTLOOK.EXE[4744] C:\Windows\syswow64\kernel32.dll!SetUnhandledExceptionFilter 0000000077298769 5 bytes JMP 0000000165147dbc
.text C:\Program Files (x86)\Microsoft Office\Office14\OUTLOOK.EXE[4744] C:\Windows\syswow64\ole32.dll!OleLoadFromStream 0000000075456143 5 bytes JMP 000000016566c706
.text C:\Program Files (x86)\Microsoft Office\Office14\OUTLOOK.EXE[4744] C:\Windows\syswow64\OLEAUT32.dll!SysFreeString 0000000076453e59 5 bytes JMP 0000000165173556
.text C:\Program Files (x86)\Microsoft Office\Office14\OUTLOOK.EXE[4744] C:\Windows\syswow64\OLEAUT32.dll!VariantClear 0000000076453eae 5 bytes JMP 0000000165199255
.text C:\Program Files (x86)\Microsoft Office\Office14\OUTLOOK.EXE[4744] C:\Windows\syswow64\OLEAUT32.dll!SysAllocStringByteLen 0000000076454731 5 bytes JMP 000000016518db5c
.text C:\Program Files (x86)\Microsoft Office\Office14\OUTLOOK.EXE[4744] C:\Windows\syswow64\OLEAUT32.dll!VariantChangeType 0000000076455dee 5 bytes JMP 00000001651a2989
.text C:\Program Files (x86)\Microsoft Office\Office14\OUTLOOK.EXE[4744] C:\Program Files (x86)\Microsoft Office\Office14\BCSProxy32.dll!ReleaseMutex + 215 000000006e8b2338 4 bytes [74, 43, BB, 40]
? C:\Windows\system32\mssprxy.dll [4744] entry point in ".rdata" section 000000006f3171e6
.text C:\Program Files (x86)\Microsoft Office\Office14\OUTLOOK.EXE[4744] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69 0000000076a81465 2 bytes [A8, 76]
.text C:\Program Files (x86)\Microsoft Office\Office14\OUTLOOK.EXE[4744] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155 0000000076a814bb 2 bytes [A8, 76]
.text ... * 2
.text C:\Program Files (x86)\Microsoft Office\Office14\OUTLOOK.EXE[4744] C:\Program Files (x86)\Microsoft Office\Office14\MSTORES.DLL!??_7CMsoString@@6B@ + 628 000000006c3e5390 4 bytes [A1, F2, 98, 33]
.text C:\Program Files (x86)\Microsoft Office\Office14\MSTORDB.EXE[3524] C:\Windows\syswow64\ole32.dll!OleLoadFromStream 0000000075456143 5 bytes JMP 000000016566c706
.text C:\Program Files (x86)\Microsoft Office\Office14\MSTORDB.EXE[3524] C:\Windows\syswow64\OLEAUT32.dll!SysFreeString 0000000076453e59 5 bytes JMP 0000000165173556
.text C:\Program Files (x86)\Microsoft Office\Office14\MSTORDB.EXE[3524] C:\Windows\syswow64\OLEAUT32.dll!VariantClear 0000000076453eae 5 bytes JMP 0000000165199255
.text C:\Program Files (x86)\Microsoft Office\Office14\MSTORDB.EXE[3524] C:\Windows\syswow64\OLEAUT32.dll!SysAllocStringByteLen 0000000076454731 5 bytes JMP 000000016518db5c
.text C:\Program Files (x86)\Microsoft Office\Office14\MSTORDB.EXE[3524] C:\Windows\syswow64\OLEAUT32.dll!VariantChangeType 0000000076455dee 5 bytes JMP 00000001651a2989
.text C:\Program Files (x86)\Microsoft Office\Office14\MSTORDB.EXE[3524] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69 0000000076a81465 2 bytes [A8, 76]
.text C:\Program Files (x86)\Microsoft Office\Office14\MSTORDB.EXE[3524] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155 0000000076a814bb 2 bytes [A8, 76]
.text ... * 2
---- EOF - GMER 2.1 ---- --- --- --- MBAM.log Code:
Malwarebytes Anti-Malware 1.75.0.1300
www.malwarebytes.org
Datenbank Version: v2013.11.23.08
Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 11.0.9600.16428
GuT :: PC-BIERO [Administrator]
23.11.2013 21:25:11
MBAM-log-2013-11-23 (21-39-33).txt
Art des Suchlaufs: Quick-Scan
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 225103
Laufzeit: 1 Minute(n), 45 Sekunde(n)
Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)
Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)
Infizierte Registrierungsschlüssel: 0
(Keine bösartigen Objekte gefunden)
Infizierte Registrierungswerte: 0
(Keine bösartigen Objekte gefunden)
Infizierte Dateiobjekte der Registrierung: 0
(Keine bösartigen Objekte gefunden)
Infizierte Verzeichnisse: 2
C:\Users\GuT\AppData\Roaming\OpenCandy (PUP.Optional.OpenCandy) -> Keine Aktion durchgeführt.
C:\Users\GuT\AppData\Roaming\OpenCandy\609EF1D2A8E2410C89BB6C2B1B5D0241 (PUP.Optional.OpenCandy) -> Keine Aktion durchgeführt.
Infizierte Dateien: 1
C:\Users\GuT\AppData\Roaming\OpenCandy\609EF1D2A8E2410C89BB6C2B1B5D0241\Setupsft_chr_p1v7.exe (PUP.Optional.OpenCandy) -> Keine Aktion durchgeführt.
(Ende) |