| |
| |||||||
Log-Analyse und Auswertung: Malwarebytes findet 177 infizierte Minibar Objekte!(Windows 8.1)Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML |
 |
29.11.2013, 22:03
| #1 | |
| |  Malwarebytes findet 177 infizierte Minibar Objekte!(Windows 8.1) Hallo, ein Freund von mir hat mir seinen Laptop mit Windows 8.1 gegeben und mich gebeten ihn auf Vieren zu überprüfen. Ich habe dann einmal Malwarebytes installiert und habe da 177 Fehler bekommen. In fast allen steht etwas mit Minibar drinnen. Ich habe davon noch nie etwas gehört kann mir da jemand helfen? Ich habe im Internet da leider nicht viel gefunden und will es nicht einfach löschen. Falls ihr irgendwelche unerlaubten Dinge findet bitte sagt es mir. Ich glaube, dass es sein konnte das er da ein paar drauf hat, aber ich bin mir nicht sicher. Das ist die Ausgabe: Zitat:
|
|
30.11.2013, 12:29
| #2 |
| /// the machine /// TB-Ausbilder    | Malwarebytes findet 177 infizierte Minibar Objekte!(Windows 8.1) hi,
__________________Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:  FRST 32-Bit | FRST 64-Bit(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
__________________ |
|
30.11.2013, 23:00
| #3 |
| | Malwarebytes findet 177 infizierte Minibar Objekte!(Windows 8.1) Hi,
__________________Das habe ich gemacht: FRST.txt FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 30-11-2013 Ran by Hans (ATTENTION: The logged in user is not administrator) on Hans-PC on 30-11-2013 22:53:19 Running from C:\Users\Hans\Desktop Windows 8.1 (X64) OS Language: German Standard Internet Explorer Version 11 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (Microsoft Corporation) C:\Windows\System32\SkyDrive.exe (Intel Corporation) C:\Windows\System32\igfxtray.exe (Intel Corporation) C:\Windows\System32\igfxsrvc.exe (Intel Corporation) C:\Windows\System32\hkcmd.exe (Intel Corporation) C:\Windows\System32\igfxpers.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (Synaptics) C:\Program Files\Synaptics\SynTP\SynLenovoGestureMgr.exe (Lenovo) C:\Program Files\Lenovo\Onekey Theater\OnekeyStudio.exe (Lenovo (Beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe (Lenovo(beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Management\utility.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (Sysinternals - www.sysinternals.com) C:\temp\Desktops\Desktops.exe (Broadcom Corporation.) C:\Program Files\Lenovo\Bluetooth Software\BTTray.exe (Broadcom Corporation.) C:\Program Files\Lenovo\Bluetooth Software\BTStackServer.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office14\WINWORD.EXE (Dolby Laboratories Inc.) C:\Program Files (x86)\Dolby Home Theater v4\pcee4.exe (CyberLink) C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe (CyberLink Corp.) C:\Program Files (x86)\Lenovo\YouCam\YouCamTray.exe (cyberlink) C:\Program Files (x86)\Cyberlink\Shared files\brs.exe (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office14\WINWORD.EXE (Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office14\WINWORD.EXE (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe (Microsoft Corporation) C:\Windows\splwow64.exe (Google) C:\Users\Hans\AppData\Local\Google\Google Talk Plugin\googletalkplugin.exe (Microsoft Corporation) C:\Windows\Camera\Camera.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft Visual Studio 11.0\Common7\IDE\WDExpress.exe (Microsoft Corporation) C:\Users\Hans\Desktop\HTBLA\Tinf\ex004_SupplSearchTest\ex004_SupplSearch\bin\Debug\ex004_SupplSearch.vshost.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_9_900_117.exe (Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_9_900_117.exe (Foxit Corporation) C:\Users\Hans\AppData\Local\Temp\Foxit Reader Updater.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office14\OUTLOOK.EXE () C:\Program Files\Realtek\Audio\HDA\FMAPP.exe (VideoLAN) C:\Program Files (x86)\VideoLAN\VLC\vlc.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [HotKeysCmds] - "C:\WINDOWS\system32\hkcmd.exe" HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12921488 2012-09-14] (Realtek Semiconductor) HKLM\...\Run: [RtHDVBg_Dolby] - C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1214608 2012-09-14] (Realtek Semiconductor) HKLM\...\Run: [SynLenovoGestureMgr] - C:\Program Files\Synaptics\SynTP\SynLenovoGestureMgr.exe [665400 2012-08-27] (Synaptics) HKLM\...\Run: [OnekeyStudio] - C:\Program Files\Lenovo\Onekey Theater\OnekeyStudio.exe [4196432 2012-08-10] (Lenovo) HKLM\...\Run: [Energy Management] - C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe [17080376 2012-11-20] (Lenovo (Beijing) Limited) HKLM\...\Run: [EnergyUtility] - C:\Program Files (x86)\Lenovo\Energy Management\utility.exe [191544 2012-11-20] (Lenovo(beijing) Limited) HKLM\...\Run: [Launch LCore] - C:\Program Files\Logitech Gaming Software\LCore.exe [8290584 2013-08-01] (Logitech Inc.) HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2916152 2012-08-27] (Synaptics Incorporated) HKLM\...\RunOnce: [BrowserChoice] - C:\WINDOWS\BrowserChoice\browserchoice.exe [86816 2013-08-22] (Microsoft Corporation) HKLM\...\RunOnce: [*WerKernelReporting] - %SYSTEMROOT%\SYSTEM32\WerFault.exe -k -rq [458616 2013-09-30] (Microsoft Corporation) HKLM-x32\...\RunOnce: [ Malwarebytes Anti-Malware ] - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent [532040 2013-04-04] (Malwarebytes Corporation) HKLM-x32\...\Winlogon: [Userinit] C:\Windows\sysWOW64\userinit.exe [21504 2013-08-22] (Microsoft Corporation) Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation) HKCU\...\Run: [Google Update] - C:\Users\Hans\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2013-09-10] (Google Inc.) HKCU\...\Run: [Sysinternals Desktops] - C:\temp\Desktops\Desktops.exe [116824 2012-10-17] (Sysinternals - www.sysinternals.com) <===== ATTENTION HKCU\...\Run: [GoogleDriveSync] - C:\Program Files (x86)\Google\Drive\googledrivesync.exe [20133824 2013-09-25] (Google) HKCU\...\Run: [GoogleChromeAutoLaunch_29EBA8C2ED1206321A8B41FC997F63B8] - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [863184 2013-11-14] (Google Inc.) HKLM-x32\...\Run: [IAStorIcon] - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [277504 2012-08-16] (Intel Corporation) HKLM-x32\...\Run: [Dolby Home Theater v4] - C:\Program Files (x86)\Dolby Home Theater v4\pcee4.exe [508656 2012-07-25] (Dolby Laboratories Inc.) HKLM-x32\...\Run: [YouCam Mirage] - C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe [136488 2012-07-27] (CyberLink) HKLM-x32\...\Run: [YouCam Tray] - C:\Program Files (x86)\Lenovo\YouCam\YouCamTray.exe [167024 2012-07-27] (CyberLink Corp.) HKLM-x32\...\Run: [UpdateP2GShortCut] - C:\Program Files (x86)\Lenovo\Power2Go\MUITransfer\MUIStartMenu.exe [217088 2012-04-18] (CyberLink Corp.) HKLM-x32\...\Run: [RemoteControl10] - C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.exe [91432 2012-03-28] (CyberLink Corp.) HKLM-x32\...\Run: [BDRegion] - C:\Program Files (x86)\Cyberlink\Shared files\brs.exe [78352 2012-05-23] (cyberlink) HKLM-x32\...\Run: [Intel AppUp(SM) center] - C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe [155488 2012-07-12] (Intel Corporation) HKLM-x32\...\Run: [IntellingentTouchpad] - C:\Program Files (x86)\Lenovo\Intelligent Touchpad\IntelligentTouchpad.exe [673336 2012-07-23] (Microsoft) HKLM-x32\...\Run: [VirtualCloneDrive] - C:\Program Files (x86)\VirtualCloneDrive\VCDDaemon.exe [88984 2013-03-10] (Elaborate Bytes AG) HKLM-x32\...\Run: [BCSSync] - C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [89184 2012-11-05] (Microsoft Corporation) HKLM-x32\...\Run: [4StoryPrePatch] - C:\Program Files (x86)\Gameforge4D\4Story_DE\PrePatch.exe [327680 2013-02-19] (Zemi Interactive Inc.) HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation) HKLM-x32\...\Run: [LogMeIn Hamachi Ui] - C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [2349392 2013-11-11] (LogMeIn Inc.) AppInit_DLLs: C:\Windows\System32\nvinitx.dll [168616 2013-09-05] (NVIDIA Corporation) AppInit_DLLs-x32: C:\WINDOWS\SysWOW64\nvinit.dll [141336 2013-09-05] (NVIDIA Corporation) ==================== Internet (Whitelisted) ==================== ProxyServer: proxy.htl-kaindorf.ac.at:3128 HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.at/ HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://lenovo13.msn.com HKCU\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://www.lenovo.com HKCU\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://www.lenovo.com SearchScopes: HKLM - DefaultScope {D763499C-0818-4CF5-885E-E5135AA898A9} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MALNJS SearchScopes: HKLM - {D763499C-0818-4CF5-885E-E5135AA898A9} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MALNJS SearchScopes: HKLM-x32 - DefaultScope {D763499C-0818-4CF5-885E-E5135AA898A9} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MALNJS SearchScopes: HKLM-x32 - {D763499C-0818-4CF5-885E-E5135AA898A9} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MALNJS SearchScopes: HKCU - DefaultScope {D763499C-0818-4CF5-885E-E5135AA898A9} URL = SearchScopes: HKCU - {D763499C-0818-4CF5-885E-E5135AA898A9} URL = BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation) BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) BHO-x32: WebConnect - {2316c625-b487-4410-a1a5-ff040b65245f} - C:\Program Files (x86)\WebConnect\WebConnectBHO.dll (Web Connect) BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation) BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO-x32: MinibarBHO - {AA74D58F-ACD0-450D-A85E-6C04B171C044} - C:\Program Files (x86)\Minibar\Minibar.dll (KangoExtensions) BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies) Tcpip\Parameters: [DhcpNameServer] 192.168.178.1 FireFox: ======== FF ProfilePath: C:\Users\Hans\AppData\Roaming\Mozilla\Firefox\Profiles\idj3mts0.default FF Homepage: www.google.at FF Plugin: @adobe.com/FlashPlayer - C:\WINDOWS\system32\Macromed\Flash\NPSWF64_11_9_900_117.dll () FF Plugin: @java.com/DTPlugin,version=10.40.2 - C:\WINDOWS\system32\npDeployJava1.dll (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=10.40.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~3\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer - C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_117.dll () FF Plugin-x32: @esn.me/esnsonar,version=0.70.4 - C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB) FF Plugin-x32: @esn/esnlaunch,version=2.3.0 - C:\Program Files (x86)\Battlelog Web Plugins\2.3.0\npesnlaunch.dll (ESN Social Software AB) FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf - C:\Program Files (x86)\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation) FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf - C:\Program Files (x86)\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation) FF Plugin-x32: @java.com/DTPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @videolan.org/vlc,version=2.0.8 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin-x32: @videolan.org/vlc,version=2.1.1 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin HKCU: @talk.google.com/GoogleTalkPlugin - C:\Users\Hans\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll (Google) FF Plugin HKCU: @talk.google.com/O1DPlugin - C:\Users\Hans\AppData\Roaming\Mozilla\plugins\npo1d.dll (Google) FF Plugin HKCU: @talk.google.com/O3DPlugin - C:\Users\Hans\AppData\Roaming\Mozilla\plugins\npgtpo3dautoplugin.dll () FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\Hans\AppData\Local\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.) FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\Hans\AppData\Local\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.) FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml FF Extension: DownloadHelper - C:\Users\Hans\AppData\Roaming\Mozilla\Firefox\Profiles\idj3mts0.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} FF Extension: Adblock Plus - C:\Users\Hans\AppData\Roaming\Mozilla\Firefox\Profiles\idj3mts0.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi FF Extension: No Name - C:\Program Files (x86)\Mozilla Firefox\extensions\ffxtlbr@babylon.com FF HKLM-x32\...\Thunderbird\Extensions: [msktbird@mcafee.com] - C:\Program Files\McAfee\MSK Chrome: ======= CHR RestoreOnStartup: "" CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.57\PepperFlash\pepflashplayer.dll () CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.57\ppGoogleNaClPluginChrome.dll () CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.57\pdf.dll () CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll No File CHR Plugin: (Intel\u00AE Identity Protection Technology) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation) CHR Plugin: (Intel\u00AE Identity Protection Technology) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation) CHR Plugin: (VLC Web Plugin) - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN) CHR Extension: (Google Docs) - C:\Users\Hans\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0 CHR Extension: (Google Drive) - C:\Users\Hans\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0 CHR Extension: (YouTube) - C:\Users\Hans\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0 CHR Extension: (Google Search) - C:\Users\Hans\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0 CHR Extension: (WebConnect) - C:\Users\Hans\AppData\Local\Google\Chrome\User Data\Default\Extensions\ieakfmpjhljbpbfpldjkddkjmmgjmgon\1.0.0_0 CHR Extension: (LEGO Star Wars - The Quest for R2-D2) - C:\Users\Hans\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcjbcgfmgdinmcljnafppclcmckchoca\1.0_0 CHR Extension: (Need for Speed World) - C:\Users\Hans\AppData\Local\Google\Chrome\User Data\Default\Extensions\mnnelgnkomjdakpkjpkfehdipjifjmbk\1.0.0.4_0 CHR Extension: (Hangouts) - C:\Users\Hans\AppData\Local\Google\Chrome\User Data\Default\Extensions\nckgahadagoaajjgafhacjanaoiihapd\2013.1120.433.1_0 CHR Extension: (WhatsApp) - C:\Users\Hans\AppData\Local\Google\Chrome\User Data\Default\Extensions\nlcaidckidljpkkmcamnkmapfncagjfh\1_0 CHR Extension: (Google Wallet) - C:\Users\Hans\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.5.0_0 CHR Extension: (Gmail) - C:\Users\Hans\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0 CHR HKLM-x32\...\Chrome\Extension: [ieakfmpjhljbpbfpldjkddkjmmgjmgon] - C:\Program Files (x86)\WebConnect\ieakfmpjhljbpbfpldjkddkjmmgjmgon.crx ==================== Services (Whitelisted) ================= S2 BcmBtRSupport; C:\Windows\system32\BtwRSupportService.exe [2252504 2013-09-04] (Broadcom Corporation.) R2 btwdins; C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe [957304 2012-09-06] (Broadcom Corporation.) S2 CLKMSVC10_3A60B698; C:\Program Files (x86)\Lenovo\PowerDVD10\NavFilter\kmsvc.exe [243728 2012-05-23] (CyberLink) R2 ExpressCache; C:\Program Files\Diskeeper Corporation\ExpressCache\ExpressCache.exe [79664 2012-03-30] (Diskeeper Corporation) R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [166720 2012-06-25] (Intel Corporation) R2 lmhosts; C:\Windows\system32\svchost.exe [37768 2013-08-22] (Microsoft Corporation) R2 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [377104 2013-10-11] (LogMeIn, Inc.) S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [272176 2012-07-18] () R2 NlaSvc; C:\Windows\System32\svchost.exe [37768 2013-08-22] (Microsoft Corporation) R2 nsi; C:\Windows\system32\svchost.exe [37768 2013-08-22] (Microsoft Corporation) S3 rpcapd; C:\Program Files (x86)\WinPcap\rpcapd.exe [118520 2013-03-01] (Riverbed Technology, Inc.) R2 Update WebConnect; C:\Program Files (x86)\WebConnect\updateWebConnect.exe [65320 2013-10-04] (WebConnect) R2 Util WebConnect; C:\Program Files (x86)\WebConnect\bin\utilWebConnect.exe [65320 2013-10-04] (WebConnect) R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [346872 2013-08-22] (Microsoft Corporation) R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23840 2013-08-22] (Microsoft Corporation) R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [2699568 2012-07-18] (Intel® Corporation) ==================== Drivers (Whitelisted) ==================== S0 ADP80XX; C:\Windows\System32\drivers\ADP80XX.SYS [782176 2013-08-22] (PMC-Sierra) R3 bcbtums; C:\Windows\system32\drivers\bcbtums.sys [170712 2013-09-04] (Broadcom Corporation.) S3 bcmfn2; C:\Windows\System32\drivers\bcmfn2.sys [17624 2013-08-13] (Windows (R) Win 7 DDK provider) R3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [224768 2013-08-22] (Microsoft Corporation) R1 excfs; C:\Windows\System32\DRIVERS\excfs.sys [23344 2012-03-30] (Diskeeper Corporation) R0 excsd; C:\Windows\System32\DRIVERS\excsd.sys [95024 2012-03-30] (Diskeeper Corporation) S3 Hamachi; C:\Windows\system32\DRIVERS\Hamdrv.sys [46136 2013-07-03] (LogMeIn Inc.) S3 iaLPSSi_GPIO; C:\Windows\System32\drivers\iaLPSSi_GPIO.sys [24568 2013-07-30] (Intel Corporation) S3 iaLPSSi_I2C; C:\Windows\System32\drivers\iaLPSSi_I2C.sys [99320 2013-07-25] (Intel Corporation) S0 iaStorAV; C:\Windows\System32\drivers\iaStorAV.sys [651248 2013-08-10] (Intel Corporation) R0 intelpep; C:\Windows\System32\drivers\intelpep.sys [39768 2013-10-08] (Microsoft Corporation) R3 LGSHidFilt; C:\Windows\system32\DRIVERS\LGSHidFilt.Sys [64280 2013-05-30] (Logitech Inc.) S0 LSI_SAS3; C:\Windows\System32\drivers\lsi_sas3.sys [81760 2013-08-22] (LSI Corporation) R3 NdisVirtualBus; C:\Windows\System32\drivers\NdisVirtualBus.sys [16384 2013-08-22] (Microsoft Corporation) S3 netvsc; C:\Windows\system32\DRIVERS\netvsc63.sys [87040 2013-08-22] (Microsoft Corporation) R3 NETwNe64; C:\Windows\system32\DRIVERS\NETwew00.sys [3344352 2013-07-08] (Intel Corporation) R2 NPF; C:\Windows\System32\drivers\npf.sys [36600 2013-03-01] (Riverbed Technology, Inc.) S3 ReFS; C:\Windows\System32\Drivers\ReFS.sys [924512 2013-08-22] (Microsoft Corporation) R3 rtsuvc; C:\Windows\system32\DRIVERS\rtsuvc.sys [8222736 2012-06-15] (Realtek Semiconductor Corp.) R3 SensorsSimulatorDriver; C:\Windows\system32\DRIVERS\WUDFRd.sys [230912 2013-08-22] (Microsoft Corporation) S3 SerCx2; C:\Windows\System32\drivers\SerCx2.sys [146272 2013-08-22] (Microsoft Corporation) R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [43832 2012-08-27] (Synaptics Incorporated) S0 stornvme; C:\Windows\System32\drivers\stornvme.sys [57176 2013-10-05] (Microsoft Corporation) S3 UEFI; C:\Windows\System32\drivers\UEFI.sys [26976 2013-08-22] (Microsoft Corporation) R3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [124256 2013-08-22] (Microsoft Corporation) S3 wsvd; C:\Windows\system32\DRIVERS\wsvd.sys [102376 2012-06-13] ("CyberLink) S3 XHCIPort; C:\Windows\System32\drivers\XHCIPort.sys [188384 2012-08-09] (Windows (R) Win 7 DDK provider) ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2013-11-30 22:53 - 2013-11-30 22:53 - 00022910 _____ C:\Users\Hans\Desktop\FRST.txt 2013-11-30 22:53 - 2013-11-30 22:53 - 00000000 ____D C:\FRST 2013-11-30 22:52 - 2013-11-30 22:52 - 01959070 _____ (Farbar) C:\Users\Hans\Desktop\FRST64.exe 2013-11-29 21:08 - 2013-11-29 21:16 - 00000000 ____D C:\Users\Hans\Downloads\Trojanerbekämpfung 2013-11-29 20:22 - 2013-11-29 20:38 - 424292415 _____ C:\Users\Hans\Downloads\The Hunger Games Catching Fire 2013.CAM.XViD.ENG.a.avi 2013-11-29 20:16 - 2013-11-29 20:16 - 00000000 ____D C:\Users\Hans\AppData\Roaming\Malwarebytes 2013-11-29 20:13 - 2013-11-29 20:13 - 00000000 ____D C:\Users\HansPC-Admin\AppData\Roaming\Malwarebytes 2013-11-29 20:13 - 2013-11-29 20:13 - 00000000 ____D C:\ProgramData\Malwarebytes 2013-11-29 20:12 - 2013-11-29 20:13 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware 2013-11-29 20:12 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbam.sys 2013-11-29 17:43 - 2013-02-25 03:24 - 00390313 _____ C:\Users\Hans\Desktop\Uglies 1 - Uglies - Scott Westerfeld.mobi 2013-11-29 17:43 - 2013-02-25 03:23 - 00392997 _____ C:\Users\Hans\Desktop\Uglies 4 - Extras - Scott Westerfeld.mobi 2013-11-29 17:43 - 2013-02-25 03:23 - 00342890 _____ C:\Users\Hans\Desktop\Uglies 2 - Pretties - Westerfeld, Scott.mobi 2013-11-29 17:43 - 2013-02-25 03:23 - 00341430 _____ C:\Users\Hans\Desktop\Uglies 03 - Specials - Scott Westerfeld.mobi 2013-11-29 17:03 - 2012-12-12 17:28 - 00783136 _____ C:\Users\Hans\Desktop\Nightschool - Du darfst keinem trauen - C. J. Daugherty.mobi 2013-11-29 17:03 - 2012-12-03 16:00 - 00860247 _____ C:\Users\Hans\Desktop\Sofies Welt - Gaarder, Jostein.mobi 2013-11-29 17:03 - 2012-06-30 11:50 - 01395887 _____ C:\Users\Hans\Desktop\Seelen - Meyer, Stephenie.mobi 2013-11-29 16:20 - 2013-11-29 16:20 - 00000000 ____H C:\ProgramData\cm-lock 2013-11-29 16:13 - 2013-11-29 16:13 - 00000000 ____D C:\WINDOWS\PCHEALTH 2013-11-27 18:42 - 2013-11-27 18:42 - 00000000 ____D C:\Users\Hans\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Bluetooth-Geräte 2013-11-25 14:22 - 2013-11-25 14:22 - 00012449 _____ C:\Users\Hans\AppData\Local\recently-used.xbel 2013-11-22 18:16 - 2013-11-22 18:16 - 00001497 _____ C:\Users\HansPC-Admin\Desktop\Dungeon Defenders.lnk 2013-11-22 18:16 - 2013-11-22 18:16 - 00000000 ____D C:\Users\HansPC-Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dungeon Defenders 2013-11-22 18:08 - 2013-11-22 18:08 - 00000000 ____D C:\Users\HansPC-Admin\AppData\Local\SKIDROW 2013-11-22 18:04 - 2013-11-22 18:04 - 00002453 _____ C:\Users\Public\Desktop\Dungeon Defenders.lnk 2013-11-19 16:47 - 2013-11-19 16:47 - 00000000 ____D C:\Users\Hans\Documents\Fax 2013-11-19 10:22 - 2013-11-19 10:22 - 00000000 ____D C:\Users\Hans\Downloads\minecraft 2013-11-19 10:16 - 2013-11-19 10:16 - 00356352 _____ C:\Users\Hans\Downloads\Minecraft.exe 2013-11-19 10:14 - 2013-11-19 10:14 - 00142801 _____ C:\Users\Hans\Downloads\DefinedLauncher-AUTOUPDATE.jar.zip 2013-11-19 09:30 - 2013-11-19 09:30 - 00000000 ____D C:\WINDOWS\SysWOW64\NV 2013-11-19 09:30 - 2013-11-19 09:30 - 00000000 ____D C:\WINDOWS\system32\NV 2013-11-16 16:16 - 2013-11-16 16:22 - 329786896 _____ C:\Users\Hans\Downloads\Cyberbully.flv 2013-11-16 14:18 - 2013-11-16 14:18 - 00000000 ____D C:\WINDOWS\LastGood.Tmp 2013-11-16 13:42 - 2013-11-16 13:42 - 00000000 ____D C:\Program Files (x86)\LogMeIn Hamachi 2013-11-15 14:26 - 2013-10-23 12:29 - 00044936 _____ (Microsoft Corporation) C:\WINDOWS\system32\wldp.dll 2013-11-15 14:26 - 2013-10-23 12:21 - 00155480 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbccgp.sys 2013-11-15 14:26 - 2013-10-23 12:13 - 00171864 _____ (Microsoft Corporation) C:\WINDOWS\system32\kd_02_8086.dll 2013-11-15 14:26 - 2013-10-23 06:27 - 00249856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll 2013-11-15 14:26 - 2013-10-23 06:09 - 04104704 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncEngine.dll 2013-11-15 14:26 - 2013-10-23 06:04 - 00189952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll 2013-11-15 14:26 - 2013-10-23 05:55 - 00839680 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSShared.dll 2013-11-15 14:26 - 2013-10-23 05:46 - 00700928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSShared.dll 2013-11-15 14:26 - 2013-10-22 09:18 - 01287064 _____ (Microsoft Corporation) C:\WINDOWS\system32\kernel32.dll 2013-11-15 14:26 - 2013-10-22 08:55 - 02328872 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe 2013-11-15 14:26 - 2013-10-22 07:03 - 02065448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe 2013-11-15 14:26 - 2013-10-22 06:15 - 00558080 _____ (Microsoft Corporation) C:\WINDOWS\system32\apphelp.dll 2013-11-15 14:26 - 2013-10-22 05:04 - 00618496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\apphelp.dll 2013-11-15 14:26 - 2013-10-22 05:02 - 01036288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kernel32.dll 2013-11-15 14:26 - 2013-10-22 04:56 - 00186880 _____ (Microsoft Corporation) C:\WINDOWS\system32\WorkFoldersShell.dll 2013-11-15 14:26 - 2013-10-22 04:44 - 00761856 _____ (Microsoft Corporation) C:\WINDOWS\system32\WorkfoldersControl.dll 2013-11-15 14:26 - 2013-10-22 03:38 - 01362944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user32.dll 2013-11-15 14:26 - 2013-10-22 03:22 - 00381952 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUSettingsProvider.dll 2013-11-15 14:26 - 2013-10-22 03:13 - 01704448 _____ (Microsoft Corporation) C:\WINDOWS\system32\wucltux.dll 2013-11-15 14:26 - 2013-10-22 03:07 - 02617344 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll 2013-11-15 14:26 - 2013-10-22 02:53 - 01584128 _____ (Microsoft Corporation) C:\WINDOWS\system32\workfolderssvc.dll 2013-11-15 14:26 - 2013-10-22 02:47 - 02295808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll 2013-11-15 14:26 - 2013-10-19 10:13 - 01530200 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys 2013-11-15 14:26 - 2013-10-19 09:51 - 00481392 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll 2013-11-15 14:26 - 2013-10-19 09:08 - 23212544 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll 2013-11-15 14:26 - 2013-10-19 08:12 - 00380656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll 2013-11-15 14:26 - 2013-10-19 07:37 - 17142784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll 2013-11-15 14:26 - 2013-10-19 07:24 - 04190720 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys 2013-11-15 14:26 - 2013-10-19 07:02 - 02764288 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll 2013-11-15 14:26 - 2013-10-19 06:37 - 00111616 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwcollector.exe 2013-11-15 14:26 - 2013-10-19 06:19 - 00218624 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe 2013-11-15 14:26 - 2013-10-19 06:10 - 05765120 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll 2013-11-15 14:26 - 2013-10-19 05:52 - 02166272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll 2013-11-15 14:26 - 2013-10-19 05:48 - 00607744 _____ (Microsoft Corporation) C:\WINDOWS\system32\comdlg32.dll 2013-11-15 14:26 - 2013-10-19 05:44 - 04240384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll 2013-11-15 14:26 - 2013-10-19 05:37 - 12995584 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll 2013-11-15 14:26 - 2013-10-19 05:31 - 01993728 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl 2013-11-15 14:26 - 2013-10-19 05:03 - 00531968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comdlg32.dll 2013-11-15 14:26 - 2013-10-19 04:57 - 02143744 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll 2013-11-15 14:26 - 2013-10-19 04:56 - 11220992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll 2013-11-15 14:26 - 2013-10-19 04:55 - 01926656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl 2013-11-15 14:26 - 2013-10-19 04:53 - 02332160 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll 2013-11-15 14:26 - 2013-10-19 04:28 - 01765376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll 2013-11-15 14:26 - 2013-10-19 04:26 - 01231360 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll 2013-11-15 14:26 - 2013-10-19 04:23 - 01394176 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll 2013-11-15 14:26 - 2013-10-19 04:14 - 00888832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll 2013-11-15 14:26 - 2013-10-19 04:09 - 01818112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll 2013-11-15 14:26 - 2013-10-19 04:02 - 01156608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll 2013-11-15 14:26 - 2013-10-17 16:42 - 01399176 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmde.dll 2013-11-15 14:26 - 2013-10-17 16:42 - 01373872 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpmde.dll 2013-11-15 14:26 - 2013-10-17 15:04 - 01204968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winmde.dll 2013-11-15 14:26 - 2013-10-16 10:34 - 00518656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWAHost.exe 2013-11-15 14:26 - 2013-10-16 10:33 - 00631296 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWAHost.exe 2013-11-15 14:26 - 2013-10-13 04:06 - 00258904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdyboost.sys 2013-11-15 14:26 - 2013-10-13 03:43 - 00708616 _____ (Microsoft Corporation) C:\WINDOWS\system32\iuilp.dll 2013-11-15 14:26 - 2013-10-11 16:11 - 01843712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Display.dll 2013-11-15 14:26 - 2013-10-11 15:22 - 01816576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Display.dll 2013-11-15 14:26 - 2013-10-11 14:24 - 00909312 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmCoreR.dll 2013-11-15 14:26 - 2013-10-11 14:04 - 02570240 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers.dll 2013-11-15 14:26 - 2013-10-11 14:03 - 00621056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MrmCoreR.dll 2013-11-15 14:26 - 2013-10-10 17:44 - 00031064 _____ (Microsoft Corporation) C:\WINDOWS\system32\ploptin.dll 2013-11-15 14:26 - 2013-10-10 17:26 - 00317616 _____ (Microsoft Corporation) C:\WINDOWS\system32\wintrust.dll 2013-11-15 14:26 - 2013-10-10 17:26 - 00104320 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncryptsslp.dll 2013-11-15 14:26 - 2013-10-10 17:23 - 03395920 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSService.dll 2013-11-15 14:26 - 2013-10-10 15:53 - 00235960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wintrust.dll 2013-11-15 14:26 - 2013-10-10 15:53 - 00088272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ncryptsslp.dll 2013-11-15 14:26 - 2013-10-10 12:38 - 00221184 _____ (Microsoft Corporation) C:\WINDOWS\system32\profsvc.dll 2013-11-15 14:26 - 2013-10-09 06:40 - 00385528 _____ C:\WINDOWS\system32\ApnDatabase.xml 2013-11-15 14:26 - 2013-10-08 12:07 - 00039768 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\intelpep.sys 2013-11-15 14:26 - 2013-10-08 11:28 - 00523096 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\acpi.sys 2013-11-15 14:26 - 2013-10-08 11:13 - 02551640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys 2013-11-15 14:26 - 2013-10-08 07:46 - 00113152 _____ (Microsoft Corporation) C:\WINDOWS\system32\shsetup.dll 2013-11-15 14:26 - 2013-10-08 06:58 - 00094208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shsetup.dll 2013-11-15 14:26 - 2013-10-08 06:50 - 00656384 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsapi.dll 2013-11-15 14:26 - 2013-10-08 06:48 - 00255488 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsrslvr.dll 2013-11-15 14:26 - 2013-10-08 06:15 - 00492544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dnsapi.dll 2013-11-15 14:26 - 2013-10-08 06:09 - 01160704 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Web.Http.dll 2013-11-15 14:26 - 2013-10-08 05:50 - 00903168 _____ (Microsoft Corporation) C:\WINDOWS\system32\iphlpsvc.dll 2013-11-15 14:26 - 2013-10-08 05:50 - 00762368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Web.Http.dll 2013-11-15 14:26 - 2013-10-07 08:21 - 07399256 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe 2013-11-15 14:26 - 2013-10-07 08:21 - 00054776 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe 2013-11-15 14:26 - 2013-10-07 03:13 - 03532288 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll 2013-11-15 14:26 - 2013-10-05 16:25 - 00371032 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\spaceport.sys 2013-11-15 14:26 - 2013-10-05 16:25 - 00057176 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\stornvme.sys 2013-11-15 14:26 - 2013-10-05 15:21 - 00699840 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d10level9.dll 2013-11-15 14:26 - 2013-10-05 13:05 - 00578952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d10level9.dll 2013-11-15 14:26 - 2013-10-05 12:01 - 00454656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv.sys 2013-11-15 14:26 - 2013-10-05 10:36 - 00083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\TSWbPrxy.exe 2013-11-15 14:26 - 2013-10-05 10:18 - 01011712 _____ (Microsoft Corporation) C:\WINDOWS\system32\TSWorkspace.dll 2013-11-15 14:26 - 2013-10-05 10:07 - 00830464 _____ (Microsoft Corporation) C:\WINDOWS\system32\samsrv.dll 2013-11-15 14:26 - 2013-10-05 09:56 - 01147904 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIAutomationCore.dll 2013-11-15 14:26 - 2013-10-05 09:55 - 00226304 _____ (Microsoft Corporation) C:\WINDOWS\system32\miutils.dll 2013-11-15 14:26 - 2013-10-05 09:40 - 00795648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TSWorkspace.dll 2013-11-15 14:26 - 2013-10-05 09:24 - 00180224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\miutils.dll 2013-11-15 14:26 - 2013-10-05 09:21 - 00920064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIAutomationCore.dll 2013-11-15 14:26 - 2013-10-05 09:15 - 00286208 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcsvDevice.dll 2013-11-15 14:26 - 2013-10-05 08:43 - 00578560 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.BackgroundTransfer.dll 2013-11-15 14:26 - 2013-10-05 08:39 - 06639616 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll 2013-11-15 14:26 - 2013-10-05 08:35 - 00411648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.BackgroundTransfer.dll 2013-11-15 14:26 - 2013-10-05 08:32 - 05769728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll 2013-11-15 14:26 - 2013-10-04 09:10 - 00533504 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppReadiness.dll 2013-11-15 14:26 - 2013-09-19 06:04 - 00134656 _____ (Microsoft Corporation) C:\WINDOWS\system32\psmsrv.dll 2013-11-15 14:26 - 2013-09-17 10:06 - 01067080 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfasfsrcsnk.dll 2013-11-15 14:26 - 2013-09-17 10:06 - 00465960 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll 2013-11-15 14:26 - 2013-09-17 07:31 - 00883184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfasfsrcsnk.dll 2013-11-15 14:26 - 2013-09-17 07:31 - 00326024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll 2013-11-15 14:26 - 2013-09-17 05:37 - 00092672 _____ (Microsoft Corporation) C:\WINDOWS\system32\dafBth.dll 2013-11-15 14:26 - 2013-09-14 15:07 - 02134120 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d9.dll 2013-11-15 14:26 - 2013-09-14 15:00 - 00391512 _____ (Microsoft Corporation) C:\WINDOWS\system32\tsmf.dll 2013-11-15 14:26 - 2013-09-14 13:39 - 01799944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d9.dll 2013-11-15 14:26 - 2013-09-14 13:33 - 00345552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tsmf.dll 2013-11-15 14:26 - 2013-09-14 11:05 - 00338944 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpclip.exe 2013-11-15 14:26 - 2013-09-14 10:11 - 00433664 _____ (Microsoft Corporation) C:\WINDOWS\system32\ipnathlp.dll 2013-11-15 14:26 - 2013-09-13 09:22 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\system32\ftp.exe 2013-11-15 14:26 - 2013-09-13 08:47 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ftp.exe 2013-11-15 14:26 - 2013-09-12 09:45 - 00101888 _____ (Microsoft Corporation) C:\WINDOWS\system32\eappgnui.dll 2013-11-15 14:26 - 2013-09-12 09:08 - 00325120 _____ (Microsoft Corporation) C:\WINDOWS\system32\eapp3hst.dll 2013-11-15 14:26 - 2013-09-12 09:08 - 00103424 _____ (Microsoft Corporation) C:\WINDOWS\system32\WiFiDisplay.dll 2013-11-15 14:26 - 2013-09-12 09:02 - 00093184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eappgnui.dll 2013-11-15 14:26 - 2013-09-12 08:44 - 00331776 _____ (Microsoft Corporation) C:\WINDOWS\system32\eapphost.dll 2013-11-15 14:26 - 2013-09-12 08:37 - 00245248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eapp3hst.dll 2013-11-15 14:26 - 2013-09-12 08:37 - 00184832 _____ (Microsoft Corporation) C:\WINDOWS\system32\dafWfdProvider.dll 2013-11-15 14:26 - 2013-09-12 08:21 - 00262144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eapphost.dll 2013-11-15 14:26 - 2013-09-12 08:16 - 00335360 _____ (Microsoft Corporation) C:\WINDOWS\system32\eappcfg.dll 2013-11-15 14:26 - 2013-09-12 08:01 - 00272896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eappcfg.dll 2013-11-15 14:26 - 2013-09-11 13:46 - 00325464 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBXHCI.SYS 2013-11-15 14:26 - 2013-09-10 06:26 - 04599808 _____ (Microsoft Corporation) C:\WINDOWS\system32\d2d1.dll 2013-11-15 14:26 - 2013-09-10 05:52 - 00132608 _____ (Microsoft Corporation) C:\WINDOWS\system32\msched.dll 2013-11-15 14:26 - 2013-09-10 05:34 - 03934208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d2d1.dll 2013-11-15 14:25 - 2013-11-05 21:21 - 21196664 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll 2013-11-15 14:25 - 2013-11-05 19:51 - 18642504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll 2013-11-15 14:25 - 2013-11-05 17:20 - 13925888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll 2013-11-15 14:25 - 2013-11-05 17:11 - 18577408 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll 2013-11-15 14:25 - 2013-11-05 15:30 - 11674112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll 2013-11-15 14:25 - 2013-11-05 15:29 - 13176320 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll 2013-11-15 14:25 - 2013-10-16 16:58 - 01943536 _____ (Microsoft Corporation) C:\WINDOWS\system32\crypt32.dll 2013-11-15 14:25 - 2013-10-16 14:54 - 01581968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\crypt32.dll 2013-11-15 14:25 - 2013-10-13 03:48 - 00136536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wfplwfs.sys 2013-11-15 14:25 - 2013-10-12 22:48 - 00828416 _____ (Microsoft Corporation) C:\WINDOWS\system32\BFE.DLL 2013-11-15 14:25 - 2013-10-12 22:34 - 01104384 _____ (Microsoft Corporation) C:\WINDOWS\system32\IKEEXT.DLL 2013-11-15 14:25 - 2013-10-10 12:53 - 00160768 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxAllUserStore.dll 2013-11-15 14:25 - 2013-10-10 12:26 - 02801664 _____ (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll 2013-11-15 14:25 - 2013-10-10 12:21 - 00139776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxAllUserStore.dll 2013-11-15 14:25 - 2013-10-10 12:05 - 01019392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\actxprxy.dll 2013-11-15 14:25 - 2013-10-10 11:40 - 01302528 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll 2013-11-15 14:25 - 2013-10-10 11:34 - 01085952 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.appcore.dll 2013-11-15 14:25 - 2013-10-10 11:27 - 00869888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.appcore.dll 2013-11-15 14:25 - 2013-10-10 11:19 - 00922624 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.dll 2013-11-15 14:25 - 2013-10-05 15:21 - 01341288 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll 2013-11-15 14:25 - 2013-10-05 09:39 - 01067008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32.dll 2013-11-15 13:49 - 2013-11-15 13:50 - 00000021 _____ C:\Users\Hans\Desktop\test2.bat 2013-11-15 09:36 - 2013-11-15 14:20 - 00000066 _____ C:\Users\Hans\Desktop\test.bat 2013-11-14 14:17 - 2013-11-15 10:33 - 00000000 ____D C:\Users\HansPC-Admin\AppData\Roaming\.minecraft 2013-11-14 14:17 - 2013-11-14 14:17 - 00000000 ____D C:\Users\HansPC-Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Minecraft 2013-11-13 09:30 - 2013-11-13 09:30 - 00001793 _____ C:\Users\HansPC-Admin\Desktop\SbX RW Controlling HAK III (2010-11) mit MANZ Lernraum starten.lnk 2013-11-13 09:30 - 2013-11-13 09:30 - 00000000 ____D C:\Users\Hans\AppData\Roaming\Manz 2013-11-13 09:30 - 2013-11-13 09:30 - 00000000 ____D C:\Users\Hans\AppData\Local\Manz 2013-11-13 09:29 - 2013-11-13 09:29 - 00000000 ____D C:\Program Files (x86)\SbX-Manz 2013-11-13 09:04 - 2013-11-13 09:06 - 00000000 ____D C:\Users\HansPC-Admin\Documents\MobaXterm 2013-11-12 17:18 - 2013-11-12 17:18 - 00000000 ____D C:\Program Files (x86)\AV Geographie interaktiv 4.0 2013-11-12 08:31 - 2013-11-12 08:31 - 00000000 ____D C:\Program Files (x86)\NuGet 2013-11-11 15:42 - 2013-11-11 15:58 - 00000000 ___RD C:\Users\HansPC-Admin\Desktop\Win 95 2013-11-11 15:04 - 2013-11-11 15:04 - 00000000 ____D C:\Users\HansPC-Admin\Desktop\FREI 2013-11-11 13:33 - 2013-11-11 13:33 - 00000000 ____D C:\Users\HansPC-Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Tftpd64 2013-11-11 13:33 - 2013-11-11 13:33 - 00000000 ____D C:\Program Files\Tftpd64 2013-11-10 14:15 - 2012-11-13 21:00 - 00000000 ____D C:\Users\Hans\Downloads\One Piece_Music & Song Collection 4 2013-11-10 12:48 - 2013-11-10 14:15 - 171148868 _____ C:\Users\Hans\Downloads\SA-SER-OnePieMusAndSonCol4.rar 2013-11-10 12:35 - 2012-11-13 21:00 - 00000000 ____D C:\Users\Hans\Downloads\One Piece_Music & Song Collection 2 2013-11-10 11:50 - 2013-11-10 12:35 - 176350242 _____ C:\Users\Hans\Downloads\SA-SER-OnePieMusAndSonCol2.rar 2013-11-10 11:49 - 2012-11-13 21:00 - 00000000 ____D C:\Users\Hans\Downloads\One Piece_Music & Song Collection 1 2013-11-10 11:04 - 2013-11-10 11:49 - 177947893 _____ C:\Users\Hans\Downloads\SA-SER-OnePieMusAndSonCol1.rar 2013-11-10 11:03 - 2012-11-13 20:59 - 00000000 ____D C:\Users\Hans\Downloads\One Piece_Music & Song Collection 3 2013-11-10 10:47 - 2013-11-10 11:03 - 80006674 _____ C:\Users\Hans\Downloads\SA-SER-OnePieMusAndSonCol3.rar 2013-11-09 22:59 - 2013-11-09 22:59 - 00000000 ____D C:\Users\Hans\AppData\Local\Intel_Corporation 2013-11-09 20:27 - 2013-11-29 16:53 - 00000000 __RDO C:\Users\Hans\SkyDrive 2013-11-09 19:41 - 2013-11-25 17:48 - 1647787275 _____ C:\WINDOWS\MEMORY.DMP 2013-11-09 19:41 - 2013-11-09 19:41 - 00000000 ____D C:\WINDOWS\Minidump 2013-11-09 17:12 - 2013-11-09 17:12 - 00000000 ___RD C:\WINDOWS\BrowserChoice 2013-11-09 15:05 - 2013-11-09 15:05 - 00001461 _____ C:\Users\Hans\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2013-11-09 15:05 - 2013-11-09 15:05 - 00000020 ___SH C:\Users\Hans\ntuser.ini 2013-11-09 15:02 - 2013-11-09 15:02 - 00001461 _____ C:\Users\HansPC-Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2013-11-09 15:01 - 2013-11-09 15:01 - 00000020 ___SH C:\Users\HansPC-Admin\ntuser.ini 2013-11-09 14:38 - 2013-11-09 14:38 - 00000000 _SHDL C:\Users\Default\Vorlagen 2013-11-09 14:38 - 2013-11-09 14:38 - 00000000 _SHDL C:\Users\Default\Startmenü 2013-11-09 14:38 - 2013-11-09 14:38 - 00000000 _SHDL C:\Users\Default\Netzwerkumgebung 2013-11-09 14:38 - 2013-11-09 14:38 - 00000000 _SHDL C:\Users\Default\Lokale Einstellungen 2013-11-09 14:38 - 2013-11-09 14:38 - 00000000 _SHDL C:\Users\Default\Eigene Dateien 2013-11-09 14:38 - 2013-11-09 14:38 - 00000000 _SHDL C:\Users\Default\Druckumgebung 2013-11-09 14:38 - 2013-11-09 14:38 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Musik 2013-11-09 14:38 - 2013-11-09 14:38 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Bilder 2013-11-09 14:38 - 2013-11-09 14:38 - 00000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2013-11-09 14:38 - 2013-11-09 14:38 - 00000000 _SHDL C:\Users\Default\AppData\Local\Verlauf 2013-11-09 14:38 - 2013-11-09 14:38 - 00000000 _SHDL C:\Users\Default\AppData\Local\Anwendungsdaten 2013-11-09 14:38 - 2013-11-09 14:38 - 00000000 _SHDL C:\Users\Default\Anwendungsdaten 2013-11-09 14:38 - 2013-11-09 14:38 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Musik 2013-11-09 14:38 - 2013-11-09 14:38 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Bilder 2013-11-09 14:38 - 2013-11-09 14:38 - 00000000 _SHDL C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2013-11-09 14:38 - 2013-11-09 14:38 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Verlauf 2013-11-09 14:38 - 2013-11-09 14:38 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Anwendungsdaten 2013-11-09 14:37 - 2013-11-09 14:37 - 00022960 _____ C:\WINDOWS\system32\emptyregdb.dat 2013-11-09 14:26 - 2013-11-09 14:26 - 00000000 ____D C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Lenovo 2013-11-09 14:26 - 2013-11-09 14:26 - 00000000 ____D C:\Users\Default\AppData\Local\Google 2013-11-09 14:26 - 2013-11-09 14:26 - 00000000 ____D C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Lenovo 2013-11-09 14:26 - 2013-11-09 14:26 - 00000000 ____D C:\Users\Default User\AppData\Local\Google 2013-11-09 14:19 - 2013-11-29 16:19 - 00000000 ____D C:\Users\Hans 2013-11-09 14:19 - 2013-11-25 17:53 - 00000000 ____D C:\Users\HansPC-Admin 2013-11-09 14:19 - 2013-11-09 14:37 - 00040008 _____ C:\WINDOWS\diagwrn.xml 2013-11-09 14:19 - 2013-11-09 14:37 - 00040008 _____ C:\WINDOWS\diagerr.xml 2013-11-09 14:19 - 2013-11-09 14:21 - 00000000 ___RD C:\Users\HansPC-Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools 2013-11-09 14:19 - 2013-11-09 14:20 - 00000000 ___RD C:\Users\Hans\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools 2013-11-09 14:19 - 2013-11-09 14:19 - 00000000 _SHDL C:\Users\HansPC-Admin\Vorlagen 2013-11-09 14:19 - 2013-11-09 14:19 - 00000000 _SHDL C:\Users\HansPC-Admin\Startmenü 2013-11-09 14:19 - 2013-11-09 14:19 - 00000000 _SHDL C:\Users\HansPC-Admin\Netzwerkumgebung 2013-11-09 14:19 - 2013-11-09 14:19 - 00000000 _SHDL C:\Users\HansPC-Admin\Lokale Einstellungen 2013-11-09 14:19 - 2013-11-09 14:19 - 00000000 _SHDL C:\Users\HansPC-Admin\Eigene Dateien 2013-11-09 14:19 - 2013-11-09 14:19 - 00000000 _SHDL C:\Users\HansPC-Admin\Druckumgebung 2013-11-09 14:19 - 2013-11-09 14:19 - 00000000 _SHDL C:\Users\HansPC-Admin\Documents\Eigene Musik 2013-11-09 14:19 - 2013-11-09 14:19 - 00000000 _SHDL C:\Users\HansPC-Admin\Documents\Eigene Bilder 2013-11-09 14:19 - 2013-11-09 14:19 - 00000000 _SHDL C:\Users\HansPC-Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2013-11-09 14:19 - 2013-11-09 14:19 - 00000000 _SHDL C:\Users\HansPC-Admin\AppData\Local\Verlauf 2013-11-09 14:19 - 2013-11-09 14:19 - 00000000 _SHDL C:\Users\HansPC-Admin\AppData\Local\Anwendungsdaten 2013-11-09 14:19 - 2013-11-09 14:19 - 00000000 _SHDL C:\Users\HansPC-Admin\Anwendungsdaten 2013-11-09 14:19 - 2013-11-09 14:19 - 00000000 _SHDL C:\Users\Hans\Vorlagen 2013-11-09 14:19 - 2013-11-09 14:19 - 00000000 _SHDL C:\Users\Hans\Startmenü 2013-11-09 14:19 - 2013-11-09 14:19 - 00000000 _SHDL C:\Users\Hans\Netzwerkumgebung 2013-11-09 14:19 - 2013-11-09 14:19 - 00000000 _SHDL C:\Users\Hans\Lokale Einstellungen 2013-11-09 14:19 - 2013-11-09 14:19 - 00000000 _SHDL C:\Users\Hans\Eigene Dateien 2013-11-09 14:19 - 2013-11-09 14:19 - 00000000 _SHDL C:\Users\Hans\Druckumgebung 2013-11-09 14:19 - 2013-11-09 14:19 - 00000000 _SHDL C:\Users\Hans\Documents\Eigene Musik 2013-11-09 14:19 - 2013-11-09 14:19 - 00000000 _SHDL C:\Users\Hans\Documents\Eigene Bilder 2013-11-09 14:19 - 2013-11-09 14:19 - 00000000 _SHDL C:\Users\Hans\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2013-11-09 14:19 - 2013-11-09 14:19 - 00000000 _SHDL C:\Users\Hans\AppData\Local\Verlauf 2013-11-09 14:19 - 2013-11-09 14:19 - 00000000 _SHDL C:\Users\Hans\AppData\Local\Anwendungsdaten 2013-11-09 14:19 - 2013-11-09 14:19 - 00000000 _SHDL C:\Users\Hans\Anwendungsdaten 2013-11-09 14:19 - 2013-08-22 16:36 - 00000000 ___RD C:\Users\HansPC-Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories 2013-11-09 14:19 - 2013-08-22 16:36 - 00000000 ___RD C:\Users\HansPC-Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility 2013-11-09 14:19 - 2013-08-22 16:36 - 00000000 ___RD C:\Users\Hans\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories 2013-11-09 14:19 - 2013-08-22 16:36 - 00000000 ___RD C:\Users\Hans\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility 2013-11-09 14:19 - 2013-08-22 16:36 - 00000000 ____D C:\Users\HansPC-Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance 2013-11-09 14:19 - 2013-08-22 16:36 - 00000000 ____D C:\Users\Hans\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance 2013-11-09 14:14 - 2013-11-09 14:14 - 00018960 _____ (Logitech, Inc.) C:\WINDOWS\system32\Drivers\LNonPnP.sys 2013-11-09 14:14 - 2013-11-09 14:14 - 00000776 _____ C:\WINDOWS\LkmdfCoInst.log 2013-11-09 14:14 - 2013-11-09 14:14 - 00000000 ____D C:\WINDOWS\SysWOW64\RTCOM 2013-11-09 14:14 - 2013-11-09 14:14 - 00000000 ____D C:\Program Files\Realtek 2013-11-09 14:14 - 2013-08-29 23:43 - 06599968 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll 2013-11-09 14:14 - 2013-08-29 23:43 - 03452192 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvc64.dll 2013-11-09 14:14 - 2013-08-29 23:43 - 02559776 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvcr.dll 2013-11-09 14:14 - 2013-08-29 23:43 - 01042208 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshext.dll 2013-11-09 14:14 - 2013-08-29 23:43 - 00920864 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvvsvc.exe 2013-11-09 14:14 - 2013-08-29 23:43 - 00580384 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\oemdspif.dll 2013-11-09 14:14 - 2013-08-29 23:43 - 00219424 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvmctray.dll 2013-11-09 14:14 - 2013-08-29 23:43 - 00067072 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshextr.dll 2013-11-09 14:14 - 2013-08-29 23:43 - 00063776 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvshext.dll 2013-11-09 14:14 - 2013-08-29 21:28 - 03349466 _____ C:\WINDOWS\system32\nvcoproc.bin 2013-11-09 14:13 - 2013-11-30 17:00 - 01954190 _____ C:\WINDOWS\WindowsUpdate.log 2013-11-09 14:12 - 2013-11-09 14:24 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation 2013-11-09 14:12 - 2013-11-09 14:24 - 00000000 ____D C:\Program Files (x86)\Intel 2013-11-09 14:12 - 2013-11-09 14:14 - 00000000 ____D C:\Program Files\NVIDIA Corporation 2013-11-09 14:12 - 2013-11-09 14:12 - 00000264 _____ C:\WINDOWS\Tasks\Synaptics TouchPad Enhancements.job 2013-11-09 14:12 - 2013-11-09 14:12 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_SynTP_01009.Wdf 2013-11-09 14:12 - 2013-11-09 14:12 - 00000000 ____D C:\ProgramData\NVIDIA Corporation 2013-11-09 14:12 - 2013-10-03 23:43 - 00064000 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.DLL 2013-11-09 14:12 - 2013-10-03 23:43 - 00060416 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.DLL 2013-11-09 14:11 - 2013-11-09 14:11 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_Smb_driver_Intel_01009.Wdf 2013-11-09 14:11 - 2013-11-09 14:11 - 00000000 ____D C:\Program Files\Synaptics 2013-11-09 14:09 - 2013-11-09 15:02 - 00000000 ___DC C:\WINDOWS\Panther 2013-11-09 14:09 - 2013-11-09 14:09 - 00000000 __SHD C:\Recovery 2013-11-09 14:08 - 2013-11-09 14:08 - 02140888 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll 2013-11-09 14:08 - 2013-11-09 14:08 - 01765384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11.dll 2013-11-09 14:08 - 2013-11-09 14:08 - 01286552 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll 2013-11-09 14:08 - 2013-11-09 14:08 - 01217024 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Streaming.dll 2013-11-09 14:08 - 2013-11-09 14:08 - 01018960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll 2013-11-09 14:08 - 2013-11-09 14:08 - 00977408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Streaming.dll 2013-11-09 14:08 - 2013-11-09 14:08 - 00872840 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfplat.dll 2013-11-09 14:08 - 2013-11-09 14:08 - 00698232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfplat.dll 2013-11-09 14:08 - 2013-11-09 14:08 - 00516496 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll 2013-11-09 14:08 - 2013-11-09 14:08 - 00406400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxgi.dll 2013-11-09 14:08 - 2013-11-09 14:08 - 00382808 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys 2013-11-09 14:08 - 2013-11-09 14:08 - 00294400 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Sensors.dll 2013-11-09 14:08 - 2013-11-09 14:08 - 00225792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Sensors.dll 2013-11-09 14:04 - 2013-11-09 14:27 - 00000000 ____D C:\Program Files (x86)\MSBuild 2013-11-09 14:04 - 2013-11-09 14:04 - 00000000 ____D C:\WINDOWS\SysWOW64\XPSViewer 2013-11-09 14:04 - 2013-11-09 14:04 - 00000000 ____D C:\Program Files\Reference Assemblies 2013-11-09 14:04 - 2013-11-09 14:04 - 00000000 ____D C:\Program Files\MSBuild 2013-11-09 14:04 - 2013-11-09 14:04 - 00000000 ____D C:\Program Files (x86)\Reference Assemblies 2013-11-09 14:04 - 2013-08-03 05:48 - 01166520 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationNative_v0300.dll 2013-11-09 14:04 - 2013-08-03 05:48 - 00124112 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll 2013-11-09 14:04 - 2013-08-03 05:48 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe 2013-11-09 14:04 - 2013-08-03 05:41 - 00778936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationNative_v0300.dll 2013-11-09 14:04 - 2013-08-03 05:41 - 00102608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll 2013-11-09 14:04 - 2013-08-03 05:41 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TsWpfWrp.exe 2013-11-09 13:39 - 2013-11-09 13:39 - 00000000 ____D C:\Users\Hans\Documents\Logitech Gaming Software 2013-11-09 13:27 - 2013-11-09 14:37 - 00006611 _____ C:\WINDOWS\comsetup.log 2013-11-08 21:37 - 2013-11-08 21:37 - 05877760 _____ C:\hamachi-update 2013-11-08 14:06 - 2013-11-08 21:37 - 00000009 _____ C:\h2-sta-142-960-235 2013-11-08 14:06 - 2013-11-08 14:06 - 00000273 _____ C:\h2-key-142-960-235 2013-11-08 08:26 - 2013-11-08 21:37 - 00000009 _____ C:\h2-sta-142-941-573 2013-11-08 08:26 - 2013-11-08 08:26 - 00000273 _____ C:\h2-key-142-941-573 2013-11-05 15:31 - 2013-11-09 14:27 - 00000000 ____D C:\Users\HansPC-Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Nmap 2013-11-05 15:30 - 2013-11-05 15:30 - 00000000 ____D C:\Program Files (x86)\Nmap 2013-11-04 14:40 - 2013-11-22 18:08 - 00000000 ____D C:\Users\HansPC-Admin\AppData\Roaming\NVIDIA 2013-11-04 14:40 - 2013-11-04 14:40 - 00000000 ____D C:\ProgramData\Energy Management 2013-11-04 14:33 - 2013-11-04 14:36 - 259454424 _____ (NVIDIA Corporation) C:\Users\Hans\Downloads\331.65-notebook-win8-win7-64bit-international-whql.exe 2013-11-04 10:02 - 2013-11-04 10:02 - 00000000 ____D C:\Program Files (x86)\CodeMeter 2013-11-04 08:36 - 2013-11-04 08:36 - 00000000 ____D C:\Users\Hans\AppData\Roaming\poclbm 2013-11-04 08:32 - 2013-11-04 08:33 - 00000000 ____D C:\Users\Hans\AppData\Roaming\Bitcoin 2013-11-04 08:31 - 2013-11-04 08:44 - 00000000 ____D C:\Users\Hans\Downloads\bitcoin 2013-11-04 08:31 - 2013-11-04 08:31 - 00000000 ____D C:\Users\Hans\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Bitcoin 2013-11-03 16:42 - 2013-11-09 14:27 - 00000000 ____D C:\Users\HansPC-Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\iPadian 2013-11-03 16:42 - 2013-11-03 16:42 - 00000000 ____D C:\Users\HansPC-Admin\Documents\iPadian 2013-11-03 16:42 - 2013-11-03 16:42 - 00000000 ____D C:\Users\Hans\iPadian 2013-11-03 16:41 - 2013-11-09 14:27 - 00000000 ____D C:\Users\HansPC-Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AppsHat 2013-11-03 16:41 - 2013-11-03 16:41 - 00000000 ____D C:\Users\HansPC-Admin\AppData\Local\WebPlayer 2013-11-03 16:41 - 2013-11-03 16:41 - 00000000 ____D C:\Users\HansPC-Admin\AppData\Local\Minibar 2013-11-03 16:41 - 2013-11-03 16:41 - 00000000 ____D C:\Program Files (x86)\Minibar 2013-11-03 16:40 - 2013-11-09 14:27 - 00000000 ____D C:\Users\HansPC-Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FilesFrog Update Checker 2013-11-03 16:40 - 2013-11-03 16:40 - 00000009 _____ C:\END 2013-11-03 16:40 - 2013-11-03 16:40 - 00000000 ____D C:\Users\HansPC-Admin\AppData\Local\FilesFrog Update Checker 2013-11-03 16:39 - 2013-11-03 16:39 - 00134829 _____ C:\Users\Hans\Downloads\ipadian2.zip 2013-11-03 15:32 - 2013-11-29 17:41 - 00000000 ____D C:\Users\Hans\Documents\My Kindle Content 2013-11-03 15:32 - 2013-11-09 14:20 - 00000000 ____D C:\Users\Hans\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Amazon 2013-11-03 15:32 - 2013-11-03 15:32 - 00000000 ____D C:\Users\Hans\AppData\Local\Amazon 2013-11-03 15:30 - 2013-11-03 15:30 - 00616584 _____ C:\Users\Hans\Downloads\pg3070.mobi 2013-11-02 22:14 - 2013-10-01 21:23 - 00000000 ____D C:\Users\Hans\Downloads\mystyle1274 2013-11-02 16:28 - 2013-10-30 12:21 - 00000000 ____D C:\Users\Hans\Downloads\644 Pitbull_Baba 2013-11-02 12:42 - 2013-11-02 13:17 - 107095722 _____ C:\Users\Hans\Downloads\644 Pitbull_Baba.rar 2013-11-01 15:34 - 2013-11-01 15:34 - 00000000 ____D C:\Users\HansPC-Admin\Documents\Assassin's Creed III 2013-11-01 09:53 - 2013-11-01 09:53 - 00000000 ____D C:\Users\Hans\Documents\Assassin's Creed III 2013-11-01 09:51 - 2010-06-02 04:55 - 00527192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_7.dll 2013-11-01 09:51 - 2010-06-02 04:55 - 00518488 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_7.dll 2013-11-01 09:51 - 2010-06-02 04:55 - 00239960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_7.dll 2013-11-01 09:51 - 2010-06-02 04:55 - 00176984 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_7.dll 2013-11-01 09:51 - 2010-06-02 04:55 - 00077656 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_5.dll 2013-11-01 09:51 - 2010-06-02 04:55 - 00074072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_5.dll 2013-11-01 09:51 - 2010-05-26 11:41 - 02526056 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_43.dll 2013-11-01 09:51 - 2010-05-26 11:41 - 02401112 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_43.dll 2013-11-01 09:51 - 2010-05-26 11:41 - 02106216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_43.dll 2013-11-01 09:51 - 2010-05-26 11:41 - 01998168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_43.dll 2013-11-01 09:51 - 2010-05-26 11:41 - 01907552 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dcsx_43.dll 2013-11-01 09:51 - 2010-05-26 11:41 - 01868128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dcsx_43.dll 2013-11-01 09:51 - 2010-05-26 11:41 - 00511328 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_43.dll 2013-11-01 09:51 - 2010-05-26 11:41 - 00470880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_43.dll 2013-11-01 09:51 - 2010-05-26 11:41 - 00276832 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx11_43.dll 2013-11-01 09:51 - 2010-05-26 11:41 - 00248672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx11_43.dll 2013-11-01 09:51 - 2010-02-04 10:01 - 00530776 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_6.dll 2013-11-01 09:51 - 2010-02-04 10:01 - 00528216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_6.dll 2013-11-01 09:51 - 2010-02-04 10:01 - 00238936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_6.dll 2013-11-01 09:51 - 2010-02-04 10:01 - 00176984 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_6.dll 2013-11-01 09:51 - 2010-02-04 10:01 - 00078680 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_4.dll 2013-11-01 09:51 - 2010-02-04 10:01 - 00074072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_4.dll 2013-11-01 09:51 - 2010-02-04 10:01 - 00024920 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_7.dll 2013-11-01 09:51 - 2010-02-04 10:01 - 00022360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\X3DAudio1_7.dll 2013-11-01 09:51 - 2009-09-04 17:44 - 00517960 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_5.dll 2013-11-01 09:51 - 2009-09-04 17:44 - 00515416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_5.dll 2013-11-01 09:51 - 2009-09-04 17:44 - 00238936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_5.dll 2013-11-01 09:51 - 2009-09-04 17:44 - 00176968 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_5.dll 2013-11-01 09:51 - 2009-09-04 17:44 - 00073544 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_3.dll 2013-11-01 09:51 - 2009-09-04 17:44 - 00069464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_3.dll 2013-11-01 09:51 - 2009-09-04 17:29 - 05554512 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dcsx_42.dll 2013-11-01 09:51 - 2009-09-04 17:29 - 05501792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dcsx_42.dll 2013-11-01 09:51 - 2009-09-04 17:29 - 02582888 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_42.dll 2013-11-01 09:51 - 2009-09-04 17:29 - 02475352 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_42.dll 2013-11-01 09:51 - 2009-09-04 17:29 - 01974616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_42.dll 2013-11-01 09:51 - 2009-09-04 17:29 - 01892184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_42.dll 2013-11-01 09:51 - 2009-09-04 17:29 - 00523088 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_42.dll 2013-11-01 09:51 - 2009-09-04 17:29 - 00453456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_42.dll 2013-11-01 09:51 - 2009-09-04 17:29 - 00285024 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx11_42.dll 2013-11-01 09:51 - 2009-09-04 17:29 - 00235344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx11_42.dll 2013-11-01 09:51 - 2009-03-16 14:18 - 00521560 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_4.dll 2013-11-01 09:51 - 2009-03-16 14:18 - 00517448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_4.dll 2013-11-01 09:51 - 2009-03-16 14:18 - 00235352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_4.dll 2013-11-01 09:51 - 2009-03-16 14:18 - 00174936 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_4.dll 2013-11-01 09:51 - 2009-03-16 14:18 - 00024920 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_6.dll 2013-11-01 09:51 - 2009-03-16 14:18 - 00022360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\X3DAudio1_6.dll 2013-11-01 09:51 - 2009-03-09 15:27 - 05425496 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_41.dll 2013-11-01 09:51 - 2009-03-09 15:27 - 04178264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_41.dll 2013-11-01 09:51 - 2009-03-09 15:27 - 02430312 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_41.dll 2013-11-01 09:51 - 2009-03-09 15:27 - 01846632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_41.dll 2013-11-01 09:51 - 2009-03-09 15:27 - 00520544 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_41.dll 2013-11-01 09:51 - 2009-03-09 15:27 - 00453456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_41.dll 2013-11-01 09:51 - 2008-10-27 10:04 - 00518480 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_3.dll 2013-11-01 09:51 - 2008-10-27 10:04 - 00514384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_3.dll 2013-11-01 09:51 - 2008-10-27 10:04 - 00235856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_3.dll 2013-11-01 09:51 - 2008-10-27 10:04 - 00175440 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_3.dll 2013-11-01 09:51 - 2008-10-27 10:04 - 00074576 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_2.dll 2013-11-01 09:51 - 2008-10-27 10:04 - 00070992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_2.dll 2013-11-01 09:51 - 2008-10-27 10:04 - 00025936 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_5.dll 2013-11-01 09:51 - 2008-10-27 10:04 - 00023376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\X3DAudio1_5.dll 2013-11-01 09:51 - 2008-10-15 06:22 - 05631312 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_40.dll 2013-11-01 09:51 - 2008-10-15 06:22 - 04379984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_40.dll 2013-11-01 09:51 - 2008-10-15 06:22 - 02605920 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_40.dll 2013-11-01 09:51 - 2008-10-15 06:22 - 02036576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_40.dll 2013-11-01 09:51 - 2008-10-15 06:22 - 00519000 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_40.dll 2013-11-01 09:51 - 2008-10-15 06:22 - 00452440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_40.dll 2013-11-01 09:51 - 2008-07-31 10:41 - 00238088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_2.dll 2013-11-01 09:51 - 2008-07-31 10:41 - 00177672 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_2.dll 2013-11-01 09:51 - 2008-07-31 10:41 - 00072200 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_1.dll 2013-11-01 09:51 - 2008-07-31 10:41 - 00068616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_1.dll 2013-11-01 09:51 - 2008-07-31 10:40 - 00513544 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_2.dll 2013-11-01 09:51 - 2008-07-31 10:40 - 00509448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_2.dll 2013-11-01 09:51 - 2008-07-10 11:01 - 00467984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_39.dll 2013-11-01 09:51 - 2008-07-10 11:00 - 04992520 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_39.dll 2013-11-01 09:51 - 2008-07-10 11:00 - 03851784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_39.dll 2013-11-01 09:51 - 2008-07-10 11:00 - 01942552 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_39.dll 2013-11-01 09:51 - 2008-07-10 11:00 - 01493528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_39.dll 2013-11-01 09:51 - 2008-07-10 11:00 - 00540688 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_39.dll 2013-11-01 09:51 - 2008-05-30 14:19 - 00511496 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_1.dll 2013-11-01 09:51 - 2008-05-30 14:19 - 00507400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_1.dll 2013-11-01 09:51 - 2008-05-30 14:18 - 00238088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_1.dll 2013-11-01 09:51 - 2008-05-30 14:18 - 00177672 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_1.dll 2013-11-01 09:51 - 2008-05-30 14:17 - 00068104 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_0.dll 2013-11-01 09:51 - 2008-05-30 14:17 - 00065032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_0.dll 2013-11-01 09:51 - 2008-05-30 14:17 - 00025608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\X3DAudio1_4.dll 2013-11-01 09:51 - 2008-05-30 14:16 - 00028168 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_4.dll 2013-11-01 09:51 - 2008-05-30 14:11 - 04991496 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_38.dll 2013-11-01 09:51 - 2008-05-30 14:11 - 03850760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_38.dll 2013-11-01 09:51 - 2008-05-30 14:11 - 01941528 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_38.dll 2013-11-01 09:51 - 2008-05-30 14:11 - 01491992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_38.dll 2013-11-01 09:51 - 2008-05-30 14:11 - 00540688 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_38.dll 2013-11-01 09:51 - 2008-05-30 14:11 - 00467984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_38.dll 2013-11-01 09:51 - 2008-03-05 16:04 - 00489480 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_0.dll 2013-11-01 09:51 - 2008-03-05 16:03 - 00479752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_0.dll 2013-11-01 09:51 - 2008-03-05 16:03 - 00238088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_0.dll 2013-11-01 09:51 - 2008-03-05 16:03 - 00177672 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_0.dll 2013-11-01 09:51 - 2008-03-05 16:00 - 00028168 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_3.dll 2013-11-01 09:51 - 2008-03-05 16:00 - 00025608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\X3DAudio1_3.dll 2013-11-01 09:51 - 2008-03-05 15:56 - 04910088 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_37.dll 2013-11-01 09:51 - 2008-03-05 15:56 - 03786760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_37.dll 2013-11-01 09:51 - 2008-03-05 15:56 - 01860120 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_37.dll 2013-11-01 09:51 - 2008-03-05 15:56 - 01420824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_37.dll 2013-11-01 09:51 - 2008-02-05 23:07 - 00529424 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_37.dll 2013-11-01 09:51 - 2008-02-05 23:07 - 00462864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_37.dll 2013-11-01 09:51 - 2007-10-22 03:40 - 00411656 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_10.dll 2013-11-01 09:51 - 2007-10-22 03:39 - 00267272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_10.dll 2013-11-01 09:51 - 2007-10-22 03:37 - 00021000 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_2.dll 2013-11-01 09:51 - 2007-10-22 03:37 - 00017928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\X3DAudio1_2.dll 2013-11-01 09:51 - 2007-10-12 15:14 - 05081608 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_36.dll 2013-11-01 09:51 - 2007-10-12 15:14 - 03734536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_36.dll 2013-11-01 09:51 - 2007-10-12 15:14 - 02006552 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_36.dll 2013-11-01 09:51 - 2007-10-12 15:14 - 01374232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_36.dll 2013-11-01 09:51 - 2007-10-02 09:56 - 00508264 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_36.dll 2013-11-01 09:51 - 2007-10-02 09:56 - 00444776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_36.dll 2013-11-01 09:51 - 2007-07-20 00:57 - 00411496 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_9.dll 2013-11-01 09:51 - 2007-07-20 00:57 - 00267112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_9.dll 2013-11-01 09:51 - 2007-07-19 18:14 - 05073256 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_35.dll 2013-11-01 09:51 - 2007-07-19 18:14 - 03727720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_35.dll 2013-11-01 09:51 - 2007-07-19 18:14 - 01985904 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_35.dll 2013-11-01 09:51 - 2007-07-19 18:14 - 01358192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_35.dll 2013-11-01 09:51 - 2007-07-19 18:14 - 00508264 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_35.dll 2013-11-01 09:51 - 2007-07-19 18:14 - 00444776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_35.dll 2013-11-01 09:51 - 2007-06-20 20:49 - 00409960 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_8.dll 2013-11-01 09:51 - 2007-06-20 20:46 - 00266088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_8.dll 2013-11-01 09:51 - 2007-05-16 16:45 - 04496232 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_34.dll 2013-11-01 09:51 - 2007-05-16 16:45 - 03497832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_34.dll 2013-11-01 09:51 - 2007-05-16 16:45 - 01401200 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_34.dll 2013-11-01 09:51 - 2007-05-16 16:45 - 01124720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_34.dll 2013-11-01 09:51 - 2007-05-16 16:45 - 00506728 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_34.dll 2013-11-01 09:51 - 2007-05-16 16:45 - 00443752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_34.dll 2013-11-01 09:51 - 2007-04-04 18:55 - 00403304 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_7.dll 2013-11-01 09:51 - 2007-04-04 18:55 - 00261480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_7.dll 2013-11-01 09:51 - 2007-04-04 18:54 - 00107368 _____ (Microsoft Corporation) C:\WINDOWS\system32\xinput1_3.dll 2013-11-01 09:51 - 2007-04-04 18:53 - 00081768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xinput1_3.dll 2013-11-01 09:51 - 2007-03-15 16:57 - 00506728 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_33.dll 2013-11-01 09:51 - 2007-03-15 16:57 - 00443752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_33.dll 2013-11-01 09:51 - 2007-03-12 16:42 - 04494184 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_33.dll 2013-11-01 09:51 - 2007-03-12 16:42 - 03495784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_33.dll 2013-11-01 09:51 - 2007-03-12 16:42 - 01400176 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_33.dll 2013-11-01 09:51 - 2007-03-12 16:42 - 01123696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_33.dll 2013-11-01 09:51 - 2007-03-05 12:42 - 00017688 _____ (Microsoft Corporation) C:\WINDOWS\system32\x3daudio1_1.dll 2013-11-01 09:51 - 2007-03-05 12:42 - 00015128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\x3daudio1_1.dll 2013-11-01 09:51 - 2007-01-24 15:27 - 00393576 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_6.dll 2013-11-01 09:51 - 2007-01-24 15:27 - 00255848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_6.dll 2013-11-01 09:51 - 2006-12-08 12:02 - 00251672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_5.dll 2013-11-01 09:51 - 2006-12-08 12:00 - 00390424 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_5.dll 2013-11-01 09:51 - 2006-11-29 13:06 - 04398360 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_32.dll 2013-11-01 09:51 - 2006-11-29 13:06 - 03426072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_32.dll 2013-11-01 09:51 - 2006-11-29 13:06 - 00469264 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10.dll 2013-11-01 09:51 - 2006-11-29 13:06 - 00440080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10.dll 2013-11-01 09:51 - 2006-09-28 16:05 - 03977496 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_31.dll 2013-11-01 09:51 - 2006-09-28 16:05 - 02414360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_31.dll 2013-11-01 09:51 - 2006-09-28 16:05 - 00237848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_4.dll 2013-11-01 09:51 - 2006-09-28 16:04 - 00364824 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_4.dll 2013-11-01 09:51 - 2006-07-28 09:31 - 00083736 _____ (Microsoft Corporation) C:\WINDOWS\system32\xinput1_2.dll 2013-11-01 09:51 - 2006-07-28 09:30 - 00363288 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_3.dll 2013-11-01 09:51 - 2006-07-28 09:30 - 00236824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_3.dll 2013-11-01 09:51 - 2006-07-28 09:30 - 00062744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xinput1_2.dll 2013-11-01 09:51 - 2006-05-31 07:24 - 00230168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_2.dll 2013-11-01 09:51 - 2006-05-31 07:22 - 00354072 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_2.dll 2013-11-01 09:51 - 2006-03-31 12:40 - 00352464 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_1.dll 2013-11-01 09:51 - 2006-03-31 12:39 - 00229584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_1.dll 2013-11-01 09:51 - 2006-03-31 12:39 - 00083664 _____ (Microsoft Corporation) C:\WINDOWS\system32\xinput1_1.dll 2013-11-01 09:51 - 2006-03-31 12:39 - 00062672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xinput1_1.dll 2013-11-01 09:50 - 2006-03-31 12:41 - 03927248 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_30.dll 2013-11-01 09:50 - 2006-03-31 12:40 - 02388176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_30.dll 2013-11-01 09:50 - 2006-02-03 08:43 - 03830992 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_29.dll 2013-11-01 09:50 - 2006-02-03 08:43 - 02332368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_29.dll 2013-11-01 09:50 - 2006-02-03 08:42 - 00355536 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_0.dll 2013-11-01 09:50 - 2006-02-03 08:42 - 00230096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_0.dll 2013-11-01 09:50 - 2006-02-03 08:41 - 00016592 _____ (Microsoft Corporation) C:\WINDOWS\system32\x3daudio1_0.dll 2013-11-01 09:50 - 2006-02-03 08:41 - 00014032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\x3daudio1_0.dll 2013-11-01 09:50 - 2005-12-05 18:09 - 03815120 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_28.dll 2013-11-01 09:50 - 2005-12-05 18:09 - 02323664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_28.dll 2013-11-01 09:50 - 2005-07-22 19:59 - 03807440 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_27.dll 2013-11-01 09:50 - 2005-07-22 19:59 - 02319568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_27.dll 2013-11-01 09:50 - 2005-05-26 15:34 - 03767504 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_26.dll 2013-11-01 09:50 - 2005-05-26 15:34 - 02297552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_26.dll 2013-11-01 09:50 - 2005-03-18 17:19 - 03823312 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_25.dll 2013-11-01 09:50 - 2005-03-18 17:19 - 02337488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_25.dll 2013-11-01 09:50 - 2005-02-05 19:45 - 03544272 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_24.dll 2013-11-01 09:50 - 2005-02-05 19:45 - 02222800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_24.dll 2013-11-01 09:49 - 2013-11-01 09:49 - 00000000 ____D C:\ProgramData\Orbit 2013-11-01 09:28 - 2013-11-01 09:28 - 00000000 ____D C:\Program Files (x86)\Ubisoft 2013-10-31 23:02 - 2013-10-31 23:02 - 00001877 _____ C:\Users\Hans\Documents\Toll.txt 2013-10-31 20:50 - 2013-11-12 17:41 - 00000000 ____D C:\Users\Hans\dwhelper 2013-10-31 19:46 - 2013-10-27 01:17 - 00000000 ____D C:\Users\Hans\Downloads\Kontor Top Of The Clubs - The Biggest Hits Of The Year MMXIII 2013-10-31 16:48 - 2013-10-31 19:09 - 434182425 _____ C:\Users\Hans\Downloads\KON_TBHOTJ_1_2.rar ==================== One Month Modified Files and Folders ======= 2013-11-30 22:53 - 2013-11-30 22:53 - 00022910 _____ C:\Users\Hans\Desktop\FRST.txt 2013-11-30 22:53 - 2013-11-30 22:53 - 00000000 ____D C:\FRST 2013-11-30 22:52 - 2013-11-30 22:52 - 01959070 _____ (Farbar) C:\Users\Hans\Desktop\FRST64.exe 2013-11-30 22:42 - 2013-09-10 12:30 - 00000884 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job 2013-11-30 22:29 - 2013-09-10 15:14 - 00001132 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-1388790469-3518899823-685314149-1003UA.job 2013-11-30 22:27 - 2013-09-27 15:54 - 00000000 ____D C:\Users\Hans\Documents\Outlook-Dateien 2013-11-30 22:14 - 2013-09-10 06:04 - 00001138 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job 2013-11-30 22:00 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\sru 2013-11-30 17:00 - 2013-11-09 14:13 - 01954190 _____ C:\WINDOWS\WindowsUpdate.log 2013-11-30 16:29 - 2013-09-10 15:14 - 00001080 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-1388790469-3518899823-685314149-1003Core.job 2013-11-30 16:21 - 2013-09-18 08:01 - 00000290 _____ C:\WINDOWS\Tasks\AutoKMS.job 2013-11-30 14:14 - 2013-09-10 06:04 - 00001134 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job 2013-11-29 21:16 - 2013-11-29 21:08 - 00000000 ____D C:\Users\Hans\Downloads\Trojanerbekämpfung 2013-11-29 20:40 - 2013-09-09 19:18 - 00000000 ____D C:\Users\Hans\AppData\Roaming\vlc 2013-11-29 20:38 - 2013-11-29 20:22 - 424292415 _____ C:\Users\Hans\Downloads\The Hunger Games Catching Fire 2013.CAM.XViD.ENG.a.avi 2013-11-29 20:19 - 2013-09-30 05:14 - 01780340 _____ C:\WINDOWS\system32\PerfStringBackup.INI 2013-11-29 20:19 - 2013-09-30 04:56 - 00766620 _____ C:\WINDOWS\system32\perfh007.dat 2013-11-29 20:19 - 2013-09-30 04:56 - 00159902 _____ C:\WINDOWS\system32\perfc007.dat 2013-11-29 20:16 - 2013-11-29 20:16 - 00000000 ____D C:\Users\Hans\AppData\Roaming\Malwarebytes 2013-11-29 20:13 - 2013-11-29 20:13 - 00000000 ____D C:\Users\HansPC-Admin\AppData\Roaming\Malwarebytes 2013-11-29 20:13 - 2013-11-29 20:13 - 00000000 ____D C:\ProgramData\Malwarebytes 2013-11-29 20:13 - 2013-11-29 20:12 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware 2013-11-29 20:08 - 2013-08-22 15:46 - 00384359 _____ C:\WINDOWS\setupact.log 2013-11-29 19:55 - 2013-10-15 08:45 - 00000000 ____D C:\Users\Hans\Desktop\One Piece 2013-11-29 19:35 - 2013-09-09 16:20 - 00000000 ____D C:\Users\Hans\AppData\Local\VirtualStore 2013-11-29 17:41 - 2013-11-03 15:32 - 00000000 ____D C:\Users\Hans\Documents\My Kindle Content 2013-11-29 17:04 - 2013-09-11 14:23 - 00000000 ___RD C:\Users\Hans\Google Drive 2013-11-29 16:53 - 2013-11-09 20:27 - 00000000 __RDO C:\Users\Hans\SkyDrive 2013-11-29 16:20 - 2013-11-29 16:20 - 00000000 ____H C:\ProgramData\cm-lock 2013-11-29 16:20 - 2013-09-29 20:04 - 00013732 _____ C:\WINDOWS\PFRO.log 2013-11-29 16:20 - 2013-08-22 15:45 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT 2013-11-29 16:19 - 2013-11-09 14:19 - 00000000 ____D C:\Users\Hans 2013-11-29 16:15 - 2013-09-18 07:54 - 00000000 ____D C:\ProgramData\Microsoft Help 2013-11-29 16:13 - 2013-11-29 16:13 - 00000000 ____D C:\WINDOWS\PCHEALTH 2013-11-29 16:11 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\AppReadiness 2013-11-29 16:09 - 2013-09-13 07:32 - 00000000 ____D C:\ProgramData\Package Cache 2013-11-29 07:54 - 2013-09-21 09:32 - 00000000 ____D C:\Users\Hans\Desktop\HTBLA 2013-11-27 18:42 - 2013-11-27 18:42 - 00000000 ____D C:\Users\Hans\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Bluetooth-Geräte 2013-11-25 17:53 - 2013-11-09 14:19 - 00000000 ____D C:\Users\HansPC-Admin 2013-11-25 17:49 - 2013-11-09 19:41 - 00000000 ____D C:\WINDOWS\Minidump 2013-11-25 17:48 - 2013-11-09 19:41 - 1647787275 _____ C:\WINDOWS\MEMORY.DMP 2013-11-25 16:24 - 2013-09-14 19:45 - 00000000 ____D C:\Users\Hans\.VirtualBox 2013-11-25 16:24 - 2013-09-10 16:25 - 00005847 _____ C:\Users\Hans\AppData\Roaming\TimeSnapper.log 2013-11-25 16:13 - 2013-09-14 19:47 - 00000000 ____D C:\Users\Hans\VirtualBox VMs 2013-11-25 15:42 - 2013-10-03 16:27 - 00000000 ____D C:\Users\Hans\.gimp-2.8 2013-11-25 14:22 - 2013-11-25 14:22 - 00012449 _____ C:\Users\Hans\AppData\Local\recently-used.xbel 2013-11-25 14:22 - 2013-10-03 16:32 - 00000000 ____D C:\Users\Hans\AppData\Local\gtk-2.0 2013-11-25 13:44 - 2013-09-11 13:55 - 00000000 ____D C:\Users\Hans\AppData\Roaming\FileZilla 2013-11-22 18:16 - 2013-11-22 18:16 - 00001497 _____ C:\Users\HansPC-Admin\Desktop\Dungeon Defenders.lnk 2013-11-22 18:16 - 2013-11-22 18:16 - 00000000 ____D C:\Users\HansPC-Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dungeon Defenders 2013-11-22 18:08 - 2013-11-22 18:08 - 00000000 ____D C:\Users\HansPC-Admin\AppData\Local\SKIDROW 2013-11-22 18:08 - 2013-11-04 14:40 - 00000000 ____D C:\Users\HansPC-Admin\AppData\Roaming\NVIDIA 2013-11-22 18:08 - 2013-09-10 13:06 - 00062740 _____ C:\WINDOWS\DirectX.log 2013-11-22 18:04 - 2013-11-22 18:04 - 00002453 _____ C:\Users\Public\Desktop\Dungeon Defenders.lnk 2013-11-22 18:03 - 2013-10-10 16:31 - 00000000 ____D C:\Program Files (x86)\Spiele 2013-11-22 10:13 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\NDF 2013-11-22 09:41 - 2013-10-07 14:46 - 00000000 ____D C:\Users\Hans\AppData\Roaming\.minecraft 2013-11-22 08:23 - 2013-09-13 08:07 - 00000000 ____D C:\Users\Hans\Documents\Visual Studio 2012 2013-11-21 22:25 - 2013-09-11 16:01 - 00000000 ____D C:\Users\Hans\Documents\Spiele 2013-11-19 16:47 - 2013-11-19 16:47 - 00000000 ____D C:\Users\Hans\Documents\Fax 2013-11-19 11:30 - 2013-09-09 19:17 - 00267936 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe 2013-11-19 10:22 - 2013-11-19 10:22 - 00000000 ____D C:\Users\Hans\Downloads\minecraft 2013-11-19 10:16 - 2013-11-19 10:16 - 00356352 _____ C:\Users\Hans\Downloads\Minecraft.exe 2013-11-19 10:14 - 2013-11-19 10:14 - 00142801 _____ C:\Users\Hans\Downloads\DefinedLauncher-AUTOUPDATE.jar.zip 2013-11-19 09:30 - 2013-11-19 09:30 - 00000000 ____D C:\WINDOWS\SysWOW64\NV 2013-11-19 09:30 - 2013-11-19 09:30 - 00000000 ____D C:\WINDOWS\system32\NV 2013-11-19 09:30 - 2012-11-20 08:21 - 00000000 ____D C:\ProgramData\NVIDIA 2013-11-17 14:38 - 2013-09-30 19:16 - 00001675 _____ C:\Users\Hans\Documents\Movie.txt 2013-11-16 19:28 - 2013-09-27 15:36 - 00000000 ____D C:\Program Files (x86)\JDownloader 2013-11-16 16:22 - 2013-11-16 16:16 - 329786896 _____ C:\Users\Hans\Downloads\Cyberbully.flv 2013-11-16 14:49 - 2013-09-10 06:02 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox 2013-11-16 14:18 - 2013-11-16 14:18 - 00000000 ____D C:\WINDOWS\LastGood.Tmp 2013-11-16 14:13 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\rescache 2013-11-16 13:53 - 2013-09-09 16:21 - 00000000 ___RD C:\Users\Hans\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup 2013-11-16 13:53 - 2013-09-09 16:21 - 00000000 ___RD C:\Users\Hans\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools 2013-11-16 13:47 - 2013-08-22 15:44 - 00501072 _____ C:\WINDOWS\system32\FNTCACHE.DAT 2013-11-16 13:45 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\WinStore 2013-11-16 13:45 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\migwiz 2013-11-16 13:45 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\PolicyDefinitions 2013-11-16 13:42 - 2013-11-16 13:42 - 00000000 ____D C:\Program Files (x86)\LogMeIn Hamachi 2013-11-16 13:40 - 2013-08-22 16:36 - 00000000 ___RD C:\WINDOWS\ToastData 2013-11-15 14:29 - 2013-09-09 18:49 - 00000000 ____D C:\WINDOWS\system32\MRT 2013-11-15 14:28 - 2013-09-09 18:49 - 82896128 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe 2013-11-15 14:20 - 2013-11-15 09:36 - 00000066 _____ C:\Users\Hans\Desktop\test.bat 2013-11-15 13:50 - 2013-11-15 13:49 - 00000021 _____ C:\Users\Hans\Desktop\test2.bat 2013-11-15 10:33 - 2013-11-14 14:17 - 00000000 ____D C:\Users\HansPC-Admin\AppData\Roaming\.minecraft 2013-11-14 14:17 - 2013-11-14 14:17 - 00000000 ____D C:\Users\HansPC-Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Minecraft 2013-11-13 09:30 - 2013-11-13 09:30 - 00001793 _____ C:\Users\HansPC-Admin\Desktop\SbX RW Controlling HAK III (2010-11) mit MANZ Lernraum starten.lnk 2013-11-13 09:30 - 2013-11-13 09:30 - 00000000 ____D C:\Users\Hans\AppData\Roaming\Manz 2013-11-13 09:30 - 2013-11-13 09:30 - 00000000 ____D C:\Users\Hans\AppData\Local\Manz 2013-11-13 09:29 - 2013-11-13 09:29 - 00000000 ____D C:\Program Files (x86)\SbX-Manz 2013-11-13 09:13 - 2013-09-23 08:32 - 00000000 ____D C:\Users\Hans\AppData\Local\Microsoft Help 2013-11-13 09:06 - 2013-11-13 09:04 - 00000000 ____D C:\Users\HansPC-Admin\Documents\MobaXterm 2013-11-12 17:41 - 2013-10-31 20:50 - 00000000 ____D C:\Users\Hans\dwhelper 2013-11-12 17:18 - 2013-11-12 17:18 - 00000000 ____D C:\Program Files (x86)\AV Geographie interaktiv 4.0 2013-11-12 08:31 - 2013-11-12 08:31 - 00000000 ____D C:\Program Files (x86)\NuGet 2013-11-12 08:31 - 2013-09-13 07:33 - 00000000 ____D C:\Program Files (x86)\Microsoft SQL Server 2013-11-12 08:31 - 2013-08-22 16:36 - 00000000 ____D C:\Program Files\Common Files\microsoft shared 2013-11-12 08:21 - 2013-09-13 07:33 - 00000000 ____D C:\WINDOWS\SysWOW64\1033 2013-11-12 08:21 - 2013-09-13 07:33 - 00000000 ____D C:\WINDOWS\system32\1033 2013-11-11 15:58 - 2013-11-11 15:42 - 00000000 ___RD C:\Users\HansPC-Admin\Desktop\Win 95 2013-11-11 15:04 - 2013-11-11 15:04 - 00000000 ____D C:\Users\HansPC-Admin\Desktop\FREI 2013-11-11 13:33 - 2013-11-11 13:33 - 00000000 ____D C:\Users\HansPC-Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Tftpd64 2013-11-11 13:33 - 2013-11-11 13:33 - 00000000 ____D C:\Program Files\Tftpd64 2013-11-10 14:15 - 2013-11-10 12:48 - 171148868 _____ C:\Users\Hans\Downloads\SA-SER-OnePieMusAndSonCol4.rar 2013-11-10 12:35 - 2013-11-10 11:50 - 176350242 _____ C:\Users\Hans\Downloads\SA-SER-OnePieMusAndSonCol2.rar 2013-11-10 11:58 - 2013-09-09 16:20 - 00000000 ____D C:\Users\Hans\AppData\Local\Packages 2013-11-10 11:49 - 2013-11-10 11:04 - 177947893 _____ C:\Users\Hans\Downloads\SA-SER-OnePieMusAndSonCol1.rar 2013-11-10 11:03 - 2013-11-10 10:47 - 80006674 _____ C:\Users\Hans\Downloads\SA-SER-OnePieMusAndSonCol3.rar 2013-11-09 22:59 - 2013-11-09 22:59 - 00000000 ____D C:\Users\Hans\AppData\Local\Intel_Corporation 2013-11-09 21:26 - 2013-09-10 06:02 - 00000000 ____D C:\Users\Hans\AppData\Roaming\Mozilla 2013-11-09 17:39 - 2013-10-08 10:28 - 00000000 ____D C:\Users\Hans\AppData\Local\LogMeIn Hamachi 2013-11-09 17:12 - 2013-11-09 17:12 - 00000000 ___RD C:\WINDOWS\BrowserChoice 2013-11-09 17:02 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\restore 2013-11-09 15:05 - 2013-11-09 15:05 - 00001461 _____ C:\Users\Hans\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2013-11-09 15:05 - 2013-11-09 15:05 - 00000020 ___SH C:\Users\Hans\ntuser.ini 2013-11-09 15:04 - 2013-09-09 23:01 - 00000000 ____D C:\Users\HansPC-Admin\AppData\Local\Packages 2013-11-09 15:03 - 2013-08-22 15:46 - 00000766 _____ C:\WINDOWS\setuperr.log 2013-11-09 15:02 - 2013-11-09 15:02 - 00001461 _____ C:\Users\HansPC-Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2013-11-09 15:02 - 2013-11-09 14:09 - 00000000 ___DC C:\WINDOWS\Panther 2013-11-09 15:02 - 2013-09-09 23:01 - 00000000 ___RD C:\Users\HansPC-Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup 2013-11-09 15:02 - 2013-09-09 23:01 - 00000000 ___RD C:\Users\HansPC-Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools 2013-11-09 15:01 - 2013-11-09 15:01 - 00000020 ___SH C:\Users\HansPC-Admin\ntuser.ini 2013-11-09 14:38 - 2013-11-09 14:38 - 00000000 _SHDL C:\Users\Default\Vorlagen 2013-11-09 14:38 - 2013-11-09 14:38 - 00000000 _SHDL C:\Users\Default\Startmenü 2013-11-09 14:38 - 2013-11-09 14:38 - 00000000 _SHDL C:\Users\Default\Netzwerkumgebung 2013-11-09 14:38 - 2013-11-09 14:38 - 00000000 _SHDL C:\Users\Default\Lokale Einstellungen 2013-11-09 14:38 - 2013-11-09 14:38 - 00000000 _SHDL C:\Users\Default\Eigene Dateien 2013-11-09 14:38 - 2013-11-09 14:38 - 00000000 _SHDL C:\Users\Default\Druckumgebung 2013-11-09 14:38 - 2013-11-09 14:38 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Musik 2013-11-09 14:38 - 2013-11-09 14:38 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Bilder 2013-11-09 14:38 - 2013-11-09 14:38 - 00000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2013-11-09 14:38 - 2013-11-09 14:38 - 00000000 _SHDL C:\Users\Default\AppData\Local\Verlauf 2013-11-09 14:38 - 2013-11-09 14:38 - 00000000 _SHDL C:\Users\Default\AppData\Local\Anwendungsdaten 2013-11-09 14:38 - 2013-11-09 14:38 - 00000000 _SHDL C:\Users\Default\Anwendungsdaten 2013-11-09 14:38 - 2013-11-09 14:38 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Musik 2013-11-09 14:38 - 2013-11-09 14:38 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Bilder 2013-11-09 14:38 - 2013-11-09 14:38 - 00000000 _SHDL C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2013-11-09 14:38 - 2013-11-09 14:38 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Verlauf 2013-11-09 14:38 - 2013-11-09 14:38 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Anwendungsdaten 2013-11-09 14:38 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\Registration 2013-11-09 14:38 - 2013-08-22 16:36 - 00000000 ____D C:\Program Files\Windows NT 2013-11-09 14:38 - 2013-08-22 14:36 - 00000000 __RHD C:\Users\Default 2013-11-09 14:37 - 2013-11-09 14:37 - 00022960 _____ C:\WINDOWS\system32\emptyregdb.dat 2013-11-09 14:37 - 2013-11-09 14:19 - 00040008 _____ C:\WINDOWS\diagwrn.xml 2013-11-09 14:37 - 2013-11-09 14:19 - 00040008 _____ C:\WINDOWS\diagerr.xml 2013-11-09 14:37 - 2013-11-09 13:27 - 00006611 _____ C:\WINDOWS\comsetup.log 2013-11-09 14:35 - 2013-08-22 16:36 - 00000000 __RSD C:\WINDOWS\Media 2013-11-09 14:35 - 2013-08-22 16:36 - 00000000 __RHD C:\Users\Public\Libraries 2013-11-09 14:34 - 2012-11-20 08:34 - 01804472 _____ C:\WINDOWS\SysWOW64\PerfStringBackup.INI 2013-11-09 14:27 - 2013-11-09 14:04 - 00000000 ____D C:\Program Files (x86)\MSBuild 2013-11-09 14:27 - 2013-11-05 15:31 - 00000000 ____D C:\Users\HansPC-Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Nmap 2013-11-09 14:27 - 2013-11-03 16:42 - 00000000 ____D C:\Users\HansPC-Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\iPadian 2013-11-09 14:27 - 2013-11-03 16:41 - 00000000 ____D C:\Users\HansPC-Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AppsHat 2013-11-09 14:27 - 2013-11-03 16:40 - 00000000 ____D C:\Users\HansPC-Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FilesFrog Update Checker 2013-11-09 14:27 - 2013-09-30 04:59 - 00000000 ____D C:\WINDOWS\ShellNew 2013-11-09 14:27 - 2013-09-13 12:34 - 00000000 ____D C:\Users\Hans\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\GeoGebra 4.2 2013-11-09 14:27 - 2013-09-10 12:26 - 00000000 ____D C:\Users\HansPC-Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR 2013-11-09 14:27 - 2013-08-22 14:36 - 00000000 ____D C:\WINDOWS\system32\Sysprep 2013-11-09 14:27 - 2012-11-20 08:26 - 00000000 ____D C:\WINDOWS\SysWOW64\Atheros_L1e 2013-11-09 14:26 - 2013-11-09 14:26 - 00000000 ____D C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Lenovo 2013-11-09 14:26 - 2013-11-09 14:26 - 00000000 ____D C:\Users\Default\AppData\Local\Google 2013-11-09 14:26 - 2013-11-09 14:26 - 00000000 ____D C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Lenovo 2013-11-09 14:26 - 2013-11-09 14:26 - 00000000 ____D C:\Users\Default User\AppData\Local\Google 2013-11-09 14:26 - 2013-09-30 04:56 - 00000000 ____D C:\WINDOWS\SysWOW64\WCN 2013-11-09 14:26 - 2013-09-30 04:56 - 00000000 ____D C:\WINDOWS\SysWOW64\sysprep 2013-11-09 14:26 - 2013-09-30 04:56 - 00000000 ____D C:\WINDOWS\system32\WCN 2013-11-09 14:26 - 2013-08-22 16:37 - 00004893 _____ C:\WINDOWS\DtcInstall.log 2013-11-09 14:26 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\SysWOW64\migwiz 2013-11-09 14:26 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\SysWOW64\IME 2013-11-09 14:26 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\WinBioPlugIns 2013-11-09 14:26 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\spool 2013-11-09 14:26 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\IME 2013-11-09 14:26 - 2013-08-22 14:36 - 00000000 ____D C:\WINDOWS\SysWOW64\SMI 2013-11-09 14:26 - 2013-08-22 14:36 - 00000000 ____D C:\WINDOWS\system32\oobe 2013-11-09 14:26 - 2012-11-20 08:27 - 00000000 ____D C:\WINDOWS\SysWOW64\SDA 2013-11-09 14:26 - 2012-07-26 06:37 - 00000000 ____D C:\Users\Default.migrated 2013-11-09 14:24 - 2013-11-09 14:12 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation 2013-11-09 14:24 - 2013-11-09 14:12 - 00000000 ____D C:\Program Files (x86)\Intel 2013-11-09 14:24 - 2013-08-22 16:43 - 00000000 ____D C:\WINDOWS\DigitalLocker 2013-11-09 14:24 - 2013-08-22 16:36 - 00000000 __SHD C:\Program Files\Windows Sidebar 2013-11-09 14:24 - 2013-08-22 16:36 - 00000000 __SHD C:\Program Files (x86)\Windows Sidebar 2013-11-09 14:24 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\IME 2013-11-09 14:24 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\Help 2013-11-09 14:24 - 2012-10-10 00:10 - 00000000 ____D C:\ProgramData\PRICache 2013-11-09 14:21 - 2013-11-09 14:19 - 00000000 ___RD C:\Users\HansPC-Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools 2013-11-09 14:21 - 2013-09-09 23:01 - 00000000 ____D C:\Users\HansPC-Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Lenovo 2013-11-09 14:21 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\Recovery 2013-11-09 14:20 - 2013-11-09 14:19 - 00000000 ___RD C:\Users\Hans\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools 2013-11-09 14:20 - 2013-11-03 15:32 - 00000000 ____D C:\Users\Hans\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Amazon 2013-11-09 14:20 - 2013-09-09 16:20 - 00000000 ____D C:\Users\Hans\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Lenovo 2013-11-09 14:19 - 2013-11-09 14:19 - 00000000 _SHDL C:\Users\HansPC-Admin\Vorlagen 2013-11-09 14:19 - 2013-11-09 14:19 - 00000000 _SHDL C:\Users\HansPC-Admin\Startmenü 2013-11-09 14:19 - 2013-11-09 14:19 - 00000000 _SHDL C:\Users\HansPC-Admin\Netzwerkumgebung 2013-11-09 14:19 - 2013-11-09 14:19 - 00000000 _SHDL C:\Users\HansPC-Admin\Lokale Einstellungen 2013-11-09 14:19 - 2013-11-09 14:19 - 00000000 _SHDL C:\Users\HansPC-Admin\Eigene Dateien 2013-11-09 14:19 - 2013-11-09 14:19 - 00000000 _SHDL C:\Users\HansPC-Admin\Druckumgebung 2013-11-09 14:19 - 2013-11-09 14:19 - 00000000 _SHDL C:\Users\HansPC-Admin\Documents\Eigene Musik 2013-11-09 14:19 - 2013-11-09 14:19 - 00000000 _SHDL C:\Users\HansPC-Admin\Documents\Eigene Bilder 2013-11-09 14:19 - 2013-11-09 14:19 - 00000000 _SHDL C:\Users\HansPC-Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2013-11-09 14:19 - 2013-11-09 14:19 - 00000000 _SHDL C:\Users\HansPC-Admin\AppData\Local\Verlauf 2013-11-09 14:19 - 2013-11-09 14:19 - 00000000 _SHDL C:\Users\HansPC-Admin\AppData\Local\Anwendungsdaten 2013-11-09 14:19 - 2013-11-09 14:19 - 00000000 _SHDL C:\Users\HansPC-Admin\Anwendungsdaten 2013-11-09 14:19 - 2013-11-09 14:19 - 00000000 _SHDL C:\Users\Hans\Vorlagen 2013-11-09 14:19 - 2013-11-09 14:19 - 00000000 _SHDL C:\Users\Hans\Startmenü 2013-11-09 14:19 - 2013-11-09 14:19 - 00000000 _SHDL C:\Users\Hans\Netzwerkumgebung 2013-11-09 14:19 - 2013-11-09 14:19 - 00000000 _SHDL C:\Users\Hans\Lokale Einstellungen 2013-11-09 14:19 - 2013-11-09 14:19 - 00000000 _SHDL C:\Users\Hans\Eigene Dateien 2013-11-09 14:19 - 2013-11-09 14:19 - 00000000 _SHDL C:\Users\Hans\Druckumgebung 2013-11-09 14:19 - 2013-11-09 14:19 - 00000000 _SHDL C:\Users\Hans\Documents\Eigene Musik 2013-11-09 14:19 - 2013-11-09 14:19 - 00000000 _SHDL C:\Users\Hans\Documents\Eigene Bilder 2013-11-09 14:19 - 2013-11-09 14:19 - 00000000 _SHDL C:\Users\Hans\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2013-11-09 14:19 - 2013-11-09 14:19 - 00000000 _SHDL C:\Users\Hans\AppData\Local\Verlauf 2013-11-09 14:19 - 2013-11-09 14:19 - 00000000 _SHDL C:\Users\Hans\AppData\Local\Anwendungsdaten 2013-11-09 14:19 - 2013-11-09 14:19 - 00000000 _SHDL C:\Users\Hans\Anwendungsdaten 2013-11-09 14:14 - 2013-11-09 14:14 - 00018960 _____ (Logitech, Inc.) C:\WINDOWS\system32\Drivers\LNonPnP.sys 2013-11-09 14:14 - 2013-11-09 14:14 - 00000776 _____ C:\WINDOWS\LkmdfCoInst.log 2013-11-09 14:14 - 2013-11-09 14:14 - 00000000 ____D C:\WINDOWS\SysWOW64\RTCOM 2013-11-09 14:14 - 2013-11-09 14:14 - 00000000 ____D C:\Program Files\Realtek 2013-11-09 14:14 - 2013-11-09 14:12 - 00000000 ____D C:\Program Files\NVIDIA Corporation 2013-11-09 14:12 - 2013-11-09 14:12 - 00000264 _____ C:\WINDOWS\Tasks\Synaptics TouchPad Enhancements.job 2013-11-09 14:12 - 2013-11-09 14:12 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_SynTP_01009.Wdf 2013-11-09 14:12 - 2013-11-09 14:12 - 00000000 ____D C:\ProgramData\NVIDIA Corporation 2013-11-09 14:11 - 2013-11-09 14:11 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_Smb_driver_Intel_01009.Wdf 2013-11-09 14:11 - 2013-11-09 14:11 - 00000000 ____D C:\Program Files\Synaptics 2013-11-09 14:09 - 2013-11-09 14:09 - 00000000 __SHD C:\Recovery 2013-11-09 14:08 - 2013-11-09 14:08 - 02140888 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll 2013-11-09 14:08 - 2013-11-09 14:08 - 01765384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11.dll 2013-11-09 14:08 - 2013-11-09 14:08 - 01286552 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll 2013-11-09 14:08 - 2013-11-09 14:08 - 01217024 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Streaming.dll 2013-11-09 14:08 - 2013-11-09 14:08 - 01018960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll 2013-11-09 14:08 - 2013-11-09 14:08 - 00977408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Streaming.dll 2013-11-09 14:08 - 2013-11-09 14:08 - 00872840 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfplat.dll 2013-11-09 14:08 - 2013-11-09 14:08 - 00698232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfplat.dll 2013-11-09 14:08 - 2013-11-09 14:08 - 00516496 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll 2013-11-09 14:08 - 2013-11-09 14:08 - 00406400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxgi.dll 2013-11-09 14:08 - 2013-11-09 14:08 - 00382808 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys 2013-11-09 14:08 - 2013-11-09 14:08 - 00294400 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Sensors.dll 2013-11-09 14:08 - 2013-11-09 14:08 - 00225792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Sensors.dll 2013-11-09 14:08 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\Camera 2013-11-09 14:04 - 2013-11-09 14:04 - 00000000 ____D C:\WINDOWS\SysWOW64\XPSViewer 2013-11-09 14:04 - 2013-11-09 14:04 - 00000000 ____D C:\Program Files\Reference Assemblies 2013-11-09 14:04 - 2013-11-09 14:04 - 00000000 ____D C:\Program Files\MSBuild 2013-11-09 14:04 - 2013-11-09 14:04 - 00000000 ____D C:\Program Files (x86)\Reference Assemblies 2013-11-09 14:04 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\SysWOW64\MUI 2013-11-09 14:04 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\MUI 2013-11-09 13:57 - 2012-11-20 08:59 - 01269437 _____ C:\WINDOWS\WindowsUpdate (1).log 2013-11-09 13:39 - 2013-11-09 13:39 - 00000000 ____D C:\Users\Hans\Documents\Logitech Gaming Software 2013-11-09 13:16 - 2013-09-09 18:43 - 00000000 ____D C:\Users\HansPC-Admin\AppData\Roaming\vlc 2013-11-09 13:10 - 2012-07-26 09:12 - 00000000 ____D C:\WINDOWS\AUInstallAgent 2013-11-08 21:37 - 2013-11-08 21:37 - 05877760 _____ C:\hamachi-update 2013-11-08 21:37 - 2013-11-08 14:06 - 00000009 _____ C:\h2-sta-142-960-235 2013-11-08 21:37 - 2013-11-08 08:26 - 00000009 _____ C:\h2-sta-142-941-573 2013-11-08 21:37 - 2013-10-30 09:42 - 00918816 _____ C:\h2-engine.log 2013-11-08 21:37 - 2013-10-30 09:42 - 00001465 _____ C:\h2-engine.cfg.bak 2013-11-08 21:37 - 2013-10-30 09:42 - 00001465 _____ C:\h2-engine.cfg 2013-11-08 21:37 - 2013-10-30 09:42 - 00000438 _____ C:\h2-engine.ini.bak 2013-11-08 21:37 - 2013-10-30 09:42 - 00000438 _____ C:\h2-engine.ini 2013-11-08 21:11 - 2012-11-20 08:20 - 00000000 ____D C:\Program Files\Common Files\Intel 2013-11-08 21:11 - 2012-11-20 08:19 - 00000000 ____D C:\Intel 2013-11-08 14:06 - 2013-11-08 14:06 - 00000273 _____ C:\h2-key-142-960-235 2013-11-08 08:26 - 2013-11-08 08:26 - 00000273 _____ C:\h2-key-142-941-573 2013-11-06 00:31 - 2013-08-22 16:38 - 00693240 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe 2013-11-06 00:31 - 2013-08-22 16:38 - 00105464 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl 2013-11-05 21:21 - 2013-11-15 14:25 - 21196664 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll 2013-11-05 19:51 - 2013-11-15 14:25 - 18642504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll 2013-11-05 17:20 - 2013-11-15 14:25 - 13925888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll 2013-11-05 17:11 - 2013-11-15 14:25 - 18577408 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll 2013-11-05 15:30 - 2013-11-15 14:25 - 11674112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll 2013-11-05 15:30 - 2013-11-05 15:30 - 00000000 ____D C:\Program Files (x86)\Nmap 2013-11-05 15:29 - 2013-11-15 14:25 - 13176320 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll 2013-11-04 14:41 - 2013-10-30 09:34 - 00000000 ____D C:\Users\HansPC-Admin\AppData\Local\LogMeIn Hamachi 2013-11-04 14:40 - 2013-11-04 14:40 - 00000000 ____D C:\ProgramData\Energy Management 2013-11-04 14:36 - 2013-11-04 14:33 - 259454424 _____ (NVIDIA Corporation) C:\Users\Hans\Downloads\331.65-notebook-win8-win7-64bit-international-whql.exe 2013-11-04 10:02 - 2013-11-04 10:02 - 00000000 ____D C:\Program Files (x86)\CodeMeter 2013-11-04 08:44 - 2013-11-04 08:31 - 00000000 ____D C:\Users\Hans\Downloads\bitcoin 2013-11-04 08:36 - 2013-11-04 08:36 - 00000000 ____D C:\Users\Hans\AppData\Roaming\poclbm 2013-11-04 08:33 - 2013-11-04 08:32 - 00000000 ____D C:\Users\Hans\AppData\Roaming\Bitcoin 2013-11-04 08:31 - 2013-11-04 08:31 - 00000000 ____D C:\Users\Hans\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Bitcoin 2013-11-04 08:18 - 2013-09-11 13:12 - 00000000 ____D C:\Users\Hans\AppData\Roaming\NVIDIA 2013-11-03 16:42 - 2013-11-03 16:42 - 00000000 ____D C:\Users\HansPC-Admin\Documents\iPadian 2013-11-03 16:42 - 2013-11-03 16:42 - 00000000 ____D C:\Users\Hans\iPadian 2013-11-03 16:41 - 2013-11-03 16:41 - 00000000 ____D C:\Users\HansPC-Admin\AppData\Local\WebPlayer 2013-11-03 16:41 - 2013-11-03 16:41 - 00000000 ____D C:\Users\HansPC-Admin\AppData\Local\Minibar 2013-11-03 16:41 - 2013-11-03 16:41 - 00000000 ____D C:\Program Files (x86)\Minibar 2013-11-03 16:40 - 2013-11-03 16:40 - 00000009 _____ C:\END 2013-11-03 16:40 - 2013-11-03 16:40 - 00000000 ____D C:\Users\HansPC-Admin\AppData\Local\FilesFrog Update Checker 2013-11-03 16:39 - 2013-11-03 16:39 - 00134829 _____ C:\Users\Hans\Downloads\ipadian2.zip 2013-11-03 15:32 - 2013-11-03 15:32 - 00000000 ____D C:\Users\Hans\AppData\Local\Amazon 2013-11-03 15:30 - 2013-11-03 15:30 - 00616584 _____ C:\Users\Hans\Downloads\pg3070.mobi 2013-11-02 13:17 - 2013-11-02 12:42 - 107095722 _____ C:\Users\Hans\Downloads\644 Pitbull_Baba.rar 2013-11-01 15:34 - 2013-11-01 15:34 - 00000000 ____D C:\Users\HansPC-Admin\Documents\Assassin's Creed III 2013-11-01 09:53 - 2013-11-01 09:53 - 00000000 ____D C:\Users\Hans\Documents\Assassin's Creed III 2013-11-01 09:49 - 2013-11-01 09:49 - 00000000 ____D C:\ProgramData\Orbit 2013-11-01 09:28 - 2013-11-01 09:28 - 00000000 ____D C:\Program Files (x86)\Ubisoft 2013-10-31 23:02 - 2013-10-31 23:02 - 00001877 _____ C:\Users\Hans\Documents\Toll.txt 2013-10-31 19:09 - 2013-10-31 16:48 - 434182425 _____ C:\Users\Hans\Downloads\KON_TBHOTJ_1_2.rar Files to move or delete: ==================== C:\temp\Desktops\Desktops.exe Some content of TEMP: ==================== C:\Users\Hans\AppData\Local\Temp\Checkupdate.exe C:\Users\Hans\AppData\Local\Temp\Foxit Reader Updater.exe C:\Users\Hans\AppData\Local\Temp\gcapi_dll.dll C:\Users\Hans\AppData\Local\Temp\gtapi_signed.dll C:\Users\Hans\AppData\Local\Temp\i4jdel0.exe C:\Users\Hans\AppData\Local\Temp\vlc-2.1.1-win32.exe ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit ==================== End Of Log ============================ |
|
30.11.2013, 23:01
| #4 | |
| | Malwarebytes findet 177 infizierte Minibar Objekte!(Windows 8.1) Addition.txt Zitat:
|
|
01.12.2013, 16:08
| #5 |
| /// the machine /// TB-Ausbilder | Malwarebytes findet 177 infizierte Minibar Objekte!(Windows 8.1) Funde von MBAM löschen lassen.  So funktioniert es:Posten in CODE-Tags Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR, 7Z-Archive zu packen erschwert mir massiv die Arbeit, es sei denn natürlich die Datei wäre ansonsten zu gross für das Forum. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:
Downloade Dir bitte  AdwCleaner auf deinen Desktop.
Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
und ein frisches FRST log bitte.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
02.12.2013, 21:37
| #6 |
| | Malwarebytes findet 177 infizierte Minibar Objekte!(Windows 8.1) Danke das mit dem Code habe ich nicht gewusst! Andere Frage: Was ist "Funde von MBAM löschen lassen." gemeint? |
|
03.12.2013, 12:20
| #7 |
| /// the machine /// TB-Ausbilder | Malwarebytes findet 177 infizierte Minibar Objekte!(Windows 8.1) Na wenn MBAm was beim Scan findet musst du es löschen lassen.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
| Themen zu Malwarebytes findet 177 infizierte Minibar Objekte!(Windows 8.1) |
| anti-malware, appdata, browser, detected, explorer, homepage, infizierte, install.exe, internet, malwarebytes, microsoft, pup.optional.babylon.a, pup.optional.browsefox.a, pup.optional.delta.a, pup.optional.filesfrog.a, pup.optional.minibar.a, pup.optional.opencandy, pup.optional.optimzerpro.a, pup.optional.somoto, pup.optional.somoto.a, pup.optional.webconnect.a, registry, services, software, vieren, windows |
Linear-Darstellung
