| |
| |||||||
Log-Analyse und Auswertung: Windows 7: Wiederholte Funde bösartiger Software durch MBAMWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML |
 |
06.02.2014, 17:23
| #1 |
 |  Windows 7: Wiederholte Funde bösartiger Software durch MBAM Guten Tag wertes Trojaner-Board Team, seit einigen Tagen findet Malwarebytes Anti-Malware bei Kontrollscans in variierenden zeitlichen Abständen Viren auf meinem System. Die Befunde erscheinen trotz vorheriger Entfernung neu, ich vermute daher ein tieferliegendes Problem und bitte um Hilfe. Ursprüngliches Problem war der "sweet-page.com"-Virus, den ich eigenständig zu entfernen versuchte und von dem ich direkt keine sichtbaren Auswirkungen mehr feststellen kann - dennoch beunruhigen mich bereits erwähnte Funde durch MBAM. Anbei FRST64 und GMER logs. Außerdem MBAM logs der letzten Tage, die Funde enthielten. Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 05-02-2014
Ran by Henning (administrator) on FURY on 06-02-2014 16:56:23
Running from D:\Downloads
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 9
Boot Mode: Normal
The only official download link for FRST:
Download link for 32-Bit version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/
Download link for 64-Bit Version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processes (Whitelisted) =================
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Logitech Inc.) C:\Program Files\Logitech Gaming Software\LCore.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MpCmdRun.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [Nvtmru] - "C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe"
HKLM\...\Run: [ShadowPlay] - C:\Windows\system32\nvspcap64.dll [1179576 2014-01-21] (NVIDIA Corporation)
HKLM\...\Run: [NvBackend] - C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2234144 2014-01-21] (NVIDIA Corporation)
HKLM\...\Run: [Launch LCore] - C:\Program Files\Logitech Gaming Software\LCore.exe [8292120 2013-11-14] (Logitech Inc.)
HKLM\...\Run: [MSC] - C:\Program Files\Microsoft Security Client\msseces.exe [1266912 2013-10-23] (Microsoft Corporation)
HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7204568 2013-11-04] (Realtek Semiconductor)
HKLM-x32\...\Run: [NUSB3MON] - C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [113288 2010-11-17] (Renesas Electronics Corporation)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKU\.DEFAULT\...\RunOnce: [SPReview] - C:\Windows\System32\SPReview\SPReview.exe [301568 2014-01-06] (Microsoft Corporation)
HKU\S-1-5-19\...\Run: [Sidebar] - %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun
HKU\S-1-5-20\...\Run: [Sidebar] - %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun
HKU\S-1-5-21-2991333743-1983943878-3972192781-1000\...\MountPoints2: {45ea64d3-76fc-11e3-9fe1-e396b050e769} - G:\pushinst.exe
==================== Internet (Whitelisted) ====================
ProxyServer: localhost:8080
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xF6B0B7F00C0BCF01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL =
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
FireFox:
========
FF ProfilePath: C:\Users\Henning\AppData\Roaming\Mozilla\Firefox\Profiles\7h855vbo.default
FF NetworkProxy: "http", "109.73.68.233"
FF NetworkProxy: "http_port", 8089
FF NetworkProxy: "type", 4
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_43.dll ()
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_44.dll ()
FF Plugin-x32: @esn.me/esnsonar,version=0.70.4 - C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB)
FF Plugin-x32: @esn/npbattlelog,version=2.3.2 - C:\Program Files (x86)\Battlelog Web Plugins\2.3.2\npbattlelog.dll (EA Digital Illusions CE AB)
FF Plugin-x32: @java.com/DTPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: WOT - C:\Users\Henning\AppData\Roaming\Mozilla\Firefox\Profiles\7h855vbo.default\Extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7} [2014-01-29]
FF Extension: Ghostery - C:\Users\Henning\AppData\Roaming\Mozilla\Firefox\Profiles\7h855vbo.default\Extensions\firefox@ghostery.com.xpi [2014-01-29]
FF Extension: Toggle Proxy - C:\Users\Henning\AppData\Roaming\Mozilla\Firefox\Profiles\7h855vbo.default\Extensions\toggleproxy@quirkyquipu.co.uk.xpi [2014-01-30]
FF Extension: NoScript - C:\Users\Henning\AppData\Roaming\Mozilla\Firefox\Profiles\7h855vbo.default\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi [2014-01-29]
FF Extension: Adblock Plus - C:\Users\Henning\AppData\Roaming\Mozilla\Firefox\Profiles\7h855vbo.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-01-29]
==================== Services (Whitelisted) =================
R2 MsMpSvc; C:\Program Files\Microsoft Security Client\MsMpEng.exe [23808 2013-10-23] (Microsoft Corporation)
R3 NisSrv; C:\Program Files\Microsoft Security Client\NisSrv.exe [348376 2013-10-23] (Microsoft Corporation)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1593632 2014-01-21] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [16939296 2014-01-21] (NVIDIA Corporation)
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76888 2014-01-07] ()
==================== Drivers (Whitelisted) ====================
S3 avmeject; C:\Windows\System32\drivers\avmeject.sys [14120 2010-10-22] (AVM Berlin)
R3 FWLANUSB; C:\Windows\System32\DRIVERS\fwlanusb.sys [460800 2010-10-22] (AVM GmbH)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [248240 2013-09-27] (Microsoft Corporation)
R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [134944 2013-09-27] (Microsoft Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [39200 2013-12-27] (NVIDIA Corporation)
R1 Serial; C:\Windows\System32\DRIVERS\serial.sys [94208 2009-07-14] (Brother Industries Ltd.)
S3 NTIOLib_1_0_4; \??\C:\Program Files (x86)\MSI\Live Update 5\NTIOLib_X64.sys [X]
U3 uxldypob; \??\C:\Users\Henning\AppData\Local\Temp\uxldypob.sys [X]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2014-02-06 16:56 - 2014-02-06 16:56 - 00000000 ____D () C:\FRST
2014-02-06 16:55 - 2014-02-06 16:55 - 00000000 _____ () C:\Users\Henning\defogger_reenable
2014-02-06 16:47 - 2014-02-06 16:47 - 00001850 _____ () C:\Users\Henning\Desktop\060214.log
2014-02-04 06:55 - 2014-02-04 06:55 - 00000000 _____ () C:\Users\Henning\Desktop\MBAM .txt
2014-02-01 16:37 - 2014-02-01 16:37 - 00000000 ____D () C:\Windows\SysWOW64\RTCOM
2014-02-01 16:37 - 2014-02-01 16:37 - 00000000 ____D () C:\Program Files\Realtek
2014-02-01 16:37 - 2013-11-05 19:47 - 03707864 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RTKVHD64.sys
2014-02-01 16:37 - 2013-11-05 15:48 - 00681905 _____ () C:\Windows\system32\Drivers\RTAIODAT.DAT
2014-02-01 16:37 - 2013-11-04 19:26 - 00153304 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoInstII64.dll
2014-02-01 16:37 - 2013-11-04 11:11 - 02587864 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkAPO64.dll
2014-02-01 16:37 - 2013-10-28 17:29 - 01021656 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkApi64.dll
2014-02-01 16:37 - 2013-10-18 16:41 - 01286360 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTCOM64.dll
2014-02-01 16:37 - 2013-10-16 03:43 - 00209096 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAC64.dll
2014-02-01 16:37 - 2013-10-11 12:47 - 00113576 _____ (Real Sound Lab SIA) C:\Windows\system32\CONEQMSAPOGUILibrary.dll
2014-02-01 16:37 - 2013-10-09 20:12 - 02103040 _____ (Waves Audio Ltd.) C:\Windows\system32\WavesGUILib64.dll
2014-02-01 16:37 - 2013-10-09 20:12 - 02036992 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioEQ64.dll
2014-02-01 16:37 - 2013-10-09 20:12 - 01012992 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPOShell64.dll
2014-02-01 16:37 - 2013-10-07 11:05 - 02810072 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtPgEx64.dll
2014-02-01 16:37 - 2013-10-02 17:10 - 00617176 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtDataProc64.dll
2014-02-01 16:37 - 2013-09-13 18:44 - 02080472 _____ (Realtek Semiconductor Corp.) C:\Windows\RtlExUpd.dll
2014-02-01 16:37 - 2013-08-05 18:11 - 02743328 _____ (Fortemedia Corporation) C:\Windows\system32\FMAPO64.dll
2014-02-01 16:37 - 2013-07-30 14:04 - 00397080 _____ (Creative Technology Ltd.) C:\Windows\system32\MBWrp64.dll
2014-02-01 16:37 - 2013-04-24 17:16 - 01662024 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTSnMg64.cpl
2014-02-01 16:37 - 2013-01-11 16:27 - 00628504 _____ (Creative Technology Ltd.) C:\Windows\system32\MBTHX64.dll
2014-02-01 16:37 - 2013-01-11 16:27 - 00563992 _____ (Creative Technology Ltd.) C:\Windows\SysWOW64\MBTHX32.dll
2014-02-01 16:37 - 2012-03-08 11:47 - 00108640 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAR64.dll
2014-02-01 16:37 - 2011-12-20 15:32 - 00331880 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtlCPAPI64.dll
2014-02-01 16:37 - 2011-11-22 16:28 - 00014952 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCoLDR64.dll
2014-02-01 16:37 - 2010-11-08 07:31 - 00375128 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEP64A.dll
2014-02-01 16:37 - 2010-11-08 07:31 - 00310104 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DHT64.dll
2014-02-01 16:37 - 2010-11-08 07:31 - 00310104 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DAA64.dll
2014-02-01 16:37 - 2010-11-08 07:31 - 00204120 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEED64A.dll
2014-02-01 16:37 - 2010-11-08 07:31 - 00101208 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEL64A.dll
2014-02-01 16:37 - 2010-11-08 07:31 - 00078680 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEG64A.dll
2014-02-01 16:37 - 2010-11-03 18:30 - 00149608 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCfg64.dll
2014-02-01 16:37 - 2010-09-27 09:34 - 00318808 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO20.dll
2014-02-01 16:37 - 2009-11-24 09:55 - 00518896 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSX64.dll
2014-02-01 16:37 - 2009-11-24 09:55 - 00211184 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSH64.dll
2014-02-01 16:37 - 2009-11-24 09:55 - 00198896 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSHP64.dll
2014-02-01 16:37 - 2009-11-24 09:55 - 00155888 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSWOW64.dll
2014-02-01 16:37 - 2009-11-18 07:12 - 00032344 _____ (Creative Technology Ltd.) C:\Windows\system32\Drivers\MBfilt64.sys
2014-02-01 16:27 - 2014-02-01 16:27 - 00000146 _____ () C:\Users\Henning\Desktop\Sound.lnk
2014-01-30 12:51 - 2014-01-30 12:51 - 00000000 ____D () C:\Program Files (x86)\AGEIA Technologies
2014-01-30 12:51 - 2014-01-15 23:35 - 00599840 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe
2014-01-30 12:46 - 2014-01-16 00:13 - 31421216 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2014-01-30 12:46 - 2014-01-16 00:13 - 25255200 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2014-01-30 12:46 - 2014-01-16 00:13 - 23672096 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2014-01-30 12:46 - 2014-01-16 00:13 - 17714760 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2014-01-30 12:46 - 2014-01-16 00:13 - 17560352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2014-01-30 12:46 - 2014-01-16 00:13 - 12668192 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2014-01-30 12:46 - 2014-01-16 00:13 - 11631544 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2014-01-30 12:46 - 2014-01-16 00:13 - 11583616 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2014-01-30 12:46 - 2014-01-16 00:13 - 09723944 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2014-01-30 12:46 - 2014-01-16 00:13 - 09686304 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2014-01-30 12:46 - 2014-01-16 00:13 - 03142432 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2014-01-30 12:46 - 2014-01-16 00:13 - 02956576 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2014-01-30 12:46 - 2014-01-16 00:13 - 02782496 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll
2014-01-30 12:46 - 2014-01-16 00:13 - 02410784 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll
2014-01-30 12:46 - 2014-01-16 00:13 - 01885472 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6433467.dll
2014-01-30 12:46 - 2014-01-16 00:13 - 01515296 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6433467.dll
2014-01-30 12:46 - 2014-01-16 00:13 - 00892704 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2014-01-30 12:46 - 2014-01-16 00:13 - 00892192 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2014-01-30 12:46 - 2014-01-16 00:13 - 00863520 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2014-01-30 12:46 - 2014-01-16 00:13 - 00859936 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2014-01-30 12:46 - 2014-01-16 00:13 - 00832424 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2014-01-30 12:46 - 2014-01-16 00:13 - 00483104 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll
2014-01-30 12:46 - 2014-01-16 00:13 - 00408352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll
2014-01-30 12:46 - 2014-01-16 00:13 - 00378656 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFROpenGL.dll
2014-01-30 12:46 - 2014-01-16 00:13 - 00353504 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2014-01-30 12:46 - 2014-01-16 00:13 - 00333600 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFROpenGL.dll
2014-01-30 12:46 - 2014-01-16 00:13 - 00305600 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2014-01-30 12:46 - 2014-01-16 00:13 - 00174296 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2014-01-30 12:46 - 2014-01-16 00:13 - 00148016 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2014-01-30 12:45 - 2014-01-30 12:45 - 00000000 ____D () C:\NVIDIA
2014-01-30 12:32 - 2013-12-27 19:42 - 00039200 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys
2014-01-30 12:32 - 2013-12-27 19:42 - 00033056 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll
2014-01-30 10:41 - 2014-02-06 15:38 - 00006917 _____ () C:\Windows\setupact.log
2014-01-30 10:41 - 2014-01-30 10:41 - 00000000 _____ () C:\Windows\setuperr.log
2014-01-29 14:12 - 2014-01-29 14:12 - 00000085 _____ () C:\Windows\wininit.ini
2014-01-29 14:07 - 2014-02-06 16:47 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-01-29 14:07 - 2014-02-05 21:47 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-01-29 13:55 - 2014-01-29 14:12 - 00000000 ____D () C:\ProgramData\Spybot - Search & Destroy
2014-01-29 13:55 - 2014-01-29 13:55 - 00000000 ____D () C:\Windows\System32\Tasks\Safer-Networking
2014-01-29 06:47 - 2014-01-29 06:47 - 00000000 ____D () C:\Users\Henning\AppData\Roaming\Mozilla
2014-01-29 06:47 - 2014-01-29 06:47 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-01-29 06:46 - 2014-01-29 06:47 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-01-28 23:06 - 2014-01-28 23:06 - 00000000 ____D () C:\Windows\ERUNT
2014-01-28 22:50 - 2014-01-28 22:50 - 00005298 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_51-b13.log
2014-01-28 22:50 - 2014-01-28 22:50 - 00000000 ____D () C:\ProgramData\Oracle
2014-01-28 21:49 - 2014-01-28 22:50 - 00000000 ____D () C:\Program Files (x86)\Java
2014-01-28 21:49 - 2014-01-28 21:49 - 00000000 ____D () C:\ProgramData\Sun
2014-01-28 21:49 - 2013-12-18 21:09 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-01-28 21:49 - 2013-12-18 21:04 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-01-28 21:49 - 2013-12-18 21:04 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-01-28 21:49 - 2013-12-18 21:03 - 00174504 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-01-28 21:48 - 2014-01-28 21:52 - 00000000 ____D () C:\ProgramData\WPM
2014-01-27 18:11 - 2014-01-27 18:11 - 00002776 _____ () C:\Windows\System32\Tasks\CCleanerSkipUAC
2014-01-27 18:11 - 2014-01-27 18:11 - 00000000 ____D () C:\Program Files\CCleaner
2014-01-26 20:05 - 2014-02-06 16:47 - 00405288 _____ () C:\Windows\WindowsUpdate.log
2014-01-24 19:28 - 2010-10-22 02:00 - 00480632 ____N (AVM Berlin) C:\Windows\instwcli.dex
2014-01-17 21:56 - 2014-01-17 21:56 - 00000000 ____D () C:\Users\Henning\AppData\Local\Blizzard
2014-01-17 21:29 - 2014-01-27 10:36 - 00000000 ____D () C:\Users\Henning\AppData\Local\Battle.net
2014-01-17 21:29 - 2014-01-17 21:37 - 00000000 ____D () C:\Users\Henning\AppData\Roaming\Battle.net
2014-01-17 21:29 - 2014-01-17 21:29 - 00000000 ____D () C:\Users\Henning\AppData\Local\Blizzard Entertainment
2014-01-17 21:29 - 2014-01-17 21:29 - 00000000 ____D () C:\ProgramData\Blizzard Entertainment
2014-01-17 21:27 - 2014-01-17 21:27 - 00000000 ____D () C:\ProgramData\Battle.net
2014-01-16 22:14 - 2014-01-16 22:14 - 00000000 ____D () C:\Users\Henning\AppData\Roaming\Mp3tag
2014-01-16 22:02 - 2014-01-16 22:02 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdFs_01_09_00.Wdf
2014-01-15 15:34 - 2013-11-26 12:40 - 00376768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2014-01-15 15:32 - 2013-11-27 02:41 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2014-01-15 15:32 - 2013-11-27 02:41 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2014-01-15 15:32 - 2013-11-27 02:41 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2014-01-15 15:32 - 2013-11-27 02:41 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2014-01-15 15:32 - 2013-11-27 02:41 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2014-01-15 15:32 - 2013-11-27 02:41 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys
2014-01-15 15:32 - 2013-11-27 02:41 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2014-01-15 15:32 - 2013-11-26 11:32 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-01-15 06:41 - 2014-01-15 06:41 - 00000000 ____D () C:\Windows\pss
2014-01-13 00:58 - 2014-01-13 00:58 - 00000000 ____D () C:\Windows\SysWOW64\directx
2014-01-13 00:58 - 2014-01-13 00:58 - 00000000 ____D () C:\Program Files (x86)\Microsoft XNA
2014-01-11 22:27 - 2014-01-11 22:27 - 00000000 ____D () C:\Windows\46ED2B6485C74E1F920CA555B21F2E4C.TMP
2014-01-10 22:15 - 2014-01-10 22:15 - 00000000 ____D () C:\Users\Henning\AppData\Roaming\SumatraPDF
2014-01-10 01:56 - 2014-01-10 01:59 - 00000000 ____D () C:\Users\Henning\AppData\Local\GOG.com
2014-01-09 16:34 - 2012-08-22 10:19 - 00011832 _____ (Windows (R) Codename Longhorn DDK provider) C:\Windows\acpimof.dll
2014-01-09 00:39 - 2014-01-09 00:39 - 00000049 _____ () C:\Windows\11993802
2014-01-09 00:39 - 2014-01-09 00:39 - 00000000 ____D () C:\Users\Henning\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\EVE
2014-01-08 23:36 - 2014-02-05 17:44 - 00000000 ____D () C:\Users\Henning\AppData\Roaming\EVEMon
2014-01-08 23:36 - 2014-01-08 23:36 - 00000000 ____D () C:\Users\Henning\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\EVEMon
2014-01-08 23:35 - 2014-01-08 23:35 - 00000000 ____D () C:\Users\Henning\AppData\Local\CCP
2014-01-08 17:27 - 2010-07-21 23:08 - 01864192 _____ (Microsoft Corporation) C:\Windows\system32\ExplorerFrame.dll
2014-01-08 17:09 - 2010-11-20 14:27 - 02851840 _____ (Microsoft Corporation) C:\Windows\system32\themeui.dll.backup
2014-01-08 17:09 - 2009-07-14 02:41 - 00332288 _____ (Microsoft Corporation) C:\Windows\system32\uxtheme.dll.backup
2014-01-08 17:09 - 2009-07-14 02:41 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\themeservice.dll.backup
2014-01-07 23:12 - 2014-01-07 23:15 - 00001164 _____ () C:\Users\Henning\Desktop\Transaktionen.lnk
2014-01-07 23:12 - 2014-01-07 23:14 - 00001102 _____ () C:\Users\Henning\Desktop\*.lnk
2014-01-07 22:45 - 2014-01-07 22:45 - 00001382 _____ () C:\Users\Henning\Desktop\GeForce Experience.lnk
2014-01-07 20:10 - 2014-01-07 20:10 - 00000000 ____D () C:\Users\Henning\AppData\Local\PunkBuster
2014-01-07 18:54 - 2014-01-07 18:54 - 00000000 ____D () C:\Users\Henning\AppData\Local\ESN
2014-01-07 18:43 - 2014-01-07 18:43 - 00000000 ____D () C:\Users\Henning\AppData\Roaming\WinRAR
2014-01-07 18:24 - 2014-01-16 00:13 - 15690744 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2014-01-07 18:24 - 2013-12-19 21:33 - 01884448 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6433221.dll
2014-01-07 18:24 - 2013-12-19 21:33 - 01511712 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6433221.dll
2014-01-07 18:24 - 2013-11-28 14:38 - 00197408 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvhda64v.sys
2014-01-07 18:24 - 2013-11-28 14:38 - 00031520 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdap64.dll
2014-01-07 18:24 - 2013-11-22 09:36 - 01515296 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdagenco6420103.dll
2014-01-07 17:45 - 2014-01-07 17:45 - 00000000 ___SD () C:\Users\Henning\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OpenOffice 4.0.1
2014-01-07 17:45 - 2014-01-07 17:45 - 00000000 ____D () C:\Users\Henning\AppData\Roaming\OpenOffice
2014-01-07 17:35 - 2014-01-07 17:35 - 00000000 ____D () C:\Users\Henning\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2014-01-07 17:34 - 2014-01-07 17:34 - 00000000 ____D () C:\Program Files\WinRAR
2014-01-07 17:25 - 2014-01-07 17:25 - 00000000 ____D () C:\Program Files\Microsoft Security Client
2014-01-07 17:25 - 2014-01-07 17:25 - 00000000 ____D () C:\Program Files (x86)\Microsoft Security Client
2014-01-07 17:06 - 2014-01-07 17:25 - 00001912 _____ () C:\Windows\epplauncher.mif
2014-01-07 11:37 - 2014-01-08 06:34 - 00000000 ____D () C:\Program Files (x86)\Battlelog Web Plugins
2014-01-07 11:36 - 2014-01-11 01:57 - 00214392 _____ () C:\Windows\SysWOW64\PnkBstrB.exe
2014-01-07 11:36 - 2014-01-10 22:31 - 00214392 _____ () C:\Windows\SysWOW64\PnkBstrB.ex0
2014-01-07 11:36 - 2014-01-07 11:36 - 00076888 _____ () C:\Windows\SysWOW64\PnkBstrA.exe
2014-01-07 11:36 - 2014-01-07 11:36 - 00000000 ____D () C:\ProgramData\Package Cache
2014-01-07 11:36 - 2010-06-02 04:55 - 00527192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_7.dll
2014-01-07 11:36 - 2010-06-02 04:55 - 00518488 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_7.dll
2014-01-07 11:36 - 2010-06-02 04:55 - 00239960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_7.dll
2014-01-07 11:36 - 2010-06-02 04:55 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_7.dll
2014-01-07 11:36 - 2010-06-02 04:55 - 00077656 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_5.dll
2014-01-07 11:36 - 2010-06-02 04:55 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_5.dll
2014-01-07 11:36 - 2010-05-26 11:41 - 02526056 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_43.dll
2014-01-07 11:36 - 2010-05-26 11:41 - 02106216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_43.dll
2014-01-07 11:36 - 2010-05-26 11:41 - 01907552 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_43.dll
2014-01-07 11:36 - 2010-05-26 11:41 - 01868128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_43.dll
2014-01-07 11:36 - 2010-02-04 10:01 - 00530776 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_6.dll
2014-01-07 11:36 - 2010-02-04 10:01 - 00528216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_6.dll
2014-01-07 11:36 - 2010-02-04 10:01 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_6.dll
2014-01-07 11:36 - 2010-02-04 10:01 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_6.dll
2014-01-07 11:36 - 2010-02-04 10:01 - 00078680 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_4.dll
2014-01-07 11:36 - 2010-02-04 10:01 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_4.dll
2014-01-07 11:36 - 2010-02-04 10:01 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_7.dll
2014-01-07 11:36 - 2010-02-04 10:01 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_7.dll
2014-01-07 11:36 - 2009-09-04 17:44 - 00517960 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_5.dll
2014-01-07 11:36 - 2009-09-04 17:44 - 00515416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_5.dll
2014-01-07 11:36 - 2009-09-04 17:44 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_5.dll
2014-01-07 11:36 - 2009-09-04 17:44 - 00176968 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_5.dll
2014-01-07 11:36 - 2009-09-04 17:44 - 00073544 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_3.dll
2014-01-07 11:36 - 2009-09-04 17:44 - 00069464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_3.dll
2014-01-07 11:36 - 2009-09-04 17:29 - 05554512 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_42.dll
2014-01-07 11:36 - 2009-09-04 17:29 - 05501792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_42.dll
2014-01-07 11:36 - 2009-09-04 17:29 - 02582888 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_42.dll
2014-01-07 11:36 - 2009-09-04 17:29 - 02475352 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_42.dll
2014-01-07 11:36 - 2009-09-04 17:29 - 01974616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_42.dll
2014-01-07 11:36 - 2009-09-04 17:29 - 00523088 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_42.dll
2014-01-07 11:36 - 2009-09-04 17:29 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_42.dll
2014-01-07 11:36 - 2009-09-04 17:29 - 00285024 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_42.dll
2014-01-07 11:36 - 2009-09-04 17:29 - 00235344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_42.dll
2014-01-07 11:36 - 2009-03-16 14:18 - 00521560 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_4.dll
2014-01-07 11:36 - 2009-03-16 14:18 - 00517448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_4.dll
2014-01-07 11:36 - 2009-03-16 14:18 - 00235352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_4.dll
2014-01-07 11:36 - 2009-03-16 14:18 - 00174936 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_4.dll
2014-01-07 11:36 - 2009-03-16 14:18 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_6.dll
2014-01-07 11:36 - 2009-03-16 14:18 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_6.dll
2014-01-07 11:36 - 2009-03-09 15:27 - 05425496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_41.dll
2014-01-07 11:36 - 2009-03-09 15:27 - 04178264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_41.dll
2014-01-07 11:36 - 2009-03-09 15:27 - 02430312 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_41.dll
2014-01-07 11:36 - 2009-03-09 15:27 - 01846632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_41.dll
2014-01-07 11:36 - 2009-03-09 15:27 - 00520544 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_41.dll
2014-01-07 11:36 - 2009-03-09 15:27 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_41.dll
2014-01-07 11:36 - 2008-10-27 10:04 - 00518480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_3.dll
2014-01-07 11:36 - 2008-10-27 10:04 - 00514384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_3.dll
2014-01-07 11:36 - 2008-10-27 10:04 - 00235856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_3.dll
2014-01-07 11:36 - 2008-10-27 10:04 - 00175440 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_3.dll
2014-01-07 11:36 - 2008-10-27 10:04 - 00074576 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_2.dll
2014-01-07 11:36 - 2008-10-27 10:04 - 00070992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_2.dll
2014-01-07 11:36 - 2008-10-27 10:04 - 00025936 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_5.dll
2014-01-07 11:36 - 2008-10-27 10:04 - 00023376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_5.dll
2014-01-07 11:36 - 2008-10-15 06:22 - 05631312 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_40.dll
2014-01-07 11:36 - 2008-10-15 06:22 - 04379984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_40.dll
2014-01-07 11:36 - 2008-10-15 06:22 - 02605920 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_40.dll
2014-01-07 11:36 - 2008-10-15 06:22 - 02036576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_40.dll
2014-01-07 11:36 - 2008-10-15 06:22 - 00519000 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_40.dll
2014-01-07 11:36 - 2008-10-15 06:22 - 00452440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_40.dll
2014-01-07 11:36 - 2008-07-31 10:41 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_2.dll
2014-01-07 11:36 - 2008-07-31 10:41 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_2.dll
2014-01-07 11:36 - 2008-07-31 10:41 - 00072200 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_1.dll
2014-01-07 11:36 - 2008-07-31 10:41 - 00068616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_1.dll
2014-01-07 11:36 - 2008-07-31 10:40 - 00513544 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_2.dll
2014-01-07 11:36 - 2008-07-31 10:40 - 00509448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_2.dll
2014-01-07 11:36 - 2008-07-10 11:01 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_39.dll
2014-01-07 11:36 - 2008-07-10 11:00 - 04992520 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_39.dll
2014-01-07 11:36 - 2008-07-10 11:00 - 03851784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_39.dll
2014-01-07 11:36 - 2008-07-10 11:00 - 01942552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_39.dll
2014-01-07 11:36 - 2008-07-10 11:00 - 01493528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_39.dll
2014-01-07 11:36 - 2008-07-10 11:00 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_39.dll
2014-01-07 11:36 - 2008-05-30 14:19 - 00511496 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_1.dll
2014-01-07 11:36 - 2008-05-30 14:19 - 00507400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_1.dll
2014-01-07 11:36 - 2008-05-30 14:18 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_1.dll
2014-01-07 11:36 - 2008-05-30 14:18 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_1.dll
2014-01-07 11:36 - 2008-05-30 14:17 - 00068104 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_0.dll
2014-01-07 11:36 - 2008-05-30 14:17 - 00065032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_0.dll
2014-01-07 11:36 - 2008-05-30 14:17 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_4.dll
2014-01-07 11:36 - 2008-05-30 14:16 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_4.dll
2014-01-07 11:36 - 2008-05-30 14:11 - 04991496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_38.dll
2014-01-07 11:36 - 2008-05-30 14:11 - 03850760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_38.dll
2014-01-07 11:36 - 2008-05-30 14:11 - 01941528 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_38.dll
2014-01-07 11:36 - 2008-05-30 14:11 - 01491992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_38.dll
2014-01-07 11:36 - 2008-05-30 14:11 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_38.dll
2014-01-07 11:36 - 2008-05-30 14:11 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_38.dll
2014-01-07 11:36 - 2008-03-05 16:04 - 00489480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_0.dll
2014-01-07 11:36 - 2008-03-05 16:03 - 00479752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_0.dll
2014-01-07 11:36 - 2008-03-05 16:03 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_0.dll
2014-01-07 11:36 - 2008-03-05 16:03 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_0.dll
2014-01-07 11:36 - 2008-03-05 16:00 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_3.dll
2014-01-07 11:36 - 2008-03-05 16:00 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_3.dll
2014-01-07 11:36 - 2008-03-05 15:56 - 04910088 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_37.dll
2014-01-07 11:36 - 2008-03-05 15:56 - 03786760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_37.dll
2014-01-07 11:36 - 2008-03-05 15:56 - 01860120 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_37.dll
2014-01-07 11:36 - 2008-03-05 15:56 - 01420824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_37.dll
2014-01-07 11:36 - 2008-02-05 23:07 - 00529424 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_37.dll
2014-01-07 11:36 - 2008-02-05 23:07 - 00462864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_37.dll
2014-01-07 11:36 - 2007-10-22 03:40 - 00411656 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_10.dll
2014-01-07 11:36 - 2007-10-22 03:39 - 00267272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_10.dll
2014-01-07 11:36 - 2007-10-22 03:37 - 00021000 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_2.dll
2014-01-07 11:36 - 2007-10-22 03:37 - 00017928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_2.dll
2014-01-07 11:36 - 2007-10-12 15:14 - 05081608 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_36.dll
2014-01-07 11:36 - 2007-10-12 15:14 - 03734536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_36.dll
2014-01-07 11:36 - 2007-10-12 15:14 - 02006552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_36.dll
2014-01-07 11:36 - 2007-10-12 15:14 - 01374232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_36.dll
2014-01-07 11:36 - 2007-10-02 09:56 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_36.dll
2014-01-07 11:36 - 2007-10-02 09:56 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_36.dll
2014-01-07 11:36 - 2007-07-20 00:57 - 00411496 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_9.dll
2014-01-07 11:36 - 2007-07-20 00:57 - 00267112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_9.dll
2014-01-07 11:36 - 2007-07-19 18:14 - 05073256 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_35.dll
2014-01-07 11:36 - 2007-07-19 18:14 - 03727720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_35.dll
2014-01-07 11:36 - 2007-07-19 18:14 - 01985904 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_35.dll
2014-01-07 11:36 - 2007-07-19 18:14 - 01358192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_35.dll
2014-01-07 11:36 - 2007-07-19 18:14 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_35.dll
2014-01-07 11:36 - 2007-07-19 18:14 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_35.dll
2014-01-07 11:36 - 2007-06-20 20:49 - 00409960 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_8.dll
2014-01-07 11:36 - 2007-06-20 20:46 - 00266088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_8.dll
2014-01-07 11:36 - 2007-05-16 16:45 - 04496232 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_34.dll
2014-01-07 11:36 - 2007-05-16 16:45 - 03497832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_34.dll
2014-01-07 11:36 - 2007-05-16 16:45 - 01401200 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_34.dll
2014-01-07 11:36 - 2007-05-16 16:45 - 01124720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_34.dll
2014-01-07 11:36 - 2007-05-16 16:45 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_34.dll
2014-01-07 11:36 - 2007-05-16 16:45 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_34.dll
2014-01-07 11:36 - 2007-04-04 18:55 - 00403304 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_7.dll
2014-01-07 11:36 - 2007-04-04 18:55 - 00261480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_7.dll
2014-01-07 11:36 - 2007-04-04 18:54 - 00107368 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_3.dll
2014-01-07 11:36 - 2007-04-04 18:53 - 00081768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_3.dll
2014-01-07 11:36 - 2007-03-15 16:57 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_33.dll
2014-01-07 11:36 - 2007-03-15 16:57 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_33.dll
2014-01-07 11:36 - 2007-03-12 16:42 - 04494184 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_33.dll
2014-01-07 11:36 - 2007-03-12 16:42 - 03495784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_33.dll
2014-01-07 11:36 - 2007-03-12 16:42 - 01400176 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_33.dll
2014-01-07 11:36 - 2007-03-12 16:42 - 01123696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_33.dll
2014-01-07 11:36 - 2007-03-05 12:42 - 00017688 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_1.dll
2014-01-07 11:36 - 2007-03-05 12:42 - 00015128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_1.dll
2014-01-07 11:36 - 2007-01-24 15:27 - 00393576 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_6.dll
2014-01-07 11:36 - 2007-01-24 15:27 - 00255848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_6.dll
2014-01-07 11:36 - 2006-12-08 12:02 - 00251672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_5.dll
2014-01-07 11:36 - 2006-12-08 12:00 - 00390424 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_5.dll
2014-01-07 11:36 - 2006-11-29 13:06 - 04398360 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_32.dll
2014-01-07 11:36 - 2006-11-29 13:06 - 03426072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_32.dll
2014-01-07 11:36 - 2006-11-29 13:06 - 00469264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10.dll
2014-01-07 11:36 - 2006-11-29 13:06 - 00440080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10.dll
2014-01-07 11:36 - 2006-09-28 16:05 - 03977496 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_31.dll
2014-01-07 11:36 - 2006-09-28 16:05 - 00237848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_4.dll
2014-01-07 11:36 - 2006-09-28 16:04 - 00364824 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_4.dll
2014-01-07 11:36 - 2006-07-28 09:31 - 00083736 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_2.dll
2014-01-07 11:36 - 2006-07-28 09:30 - 00363288 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_3.dll
2014-01-07 11:36 - 2006-07-28 09:30 - 00236824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_3.dll
2014-01-07 11:36 - 2006-07-28 09:30 - 00062744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_2.dll
2014-01-07 11:36 - 2006-05-31 07:24 - 00230168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_2.dll
2014-01-07 11:36 - 2006-05-31 07:22 - 00354072 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_2.dll
2014-01-07 11:36 - 2006-03-31 12:41 - 03927248 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_30.dll
2014-01-07 11:36 - 2006-03-31 12:40 - 02388176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_30.dll
2014-01-07 11:36 - 2006-03-31 12:40 - 00352464 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_1.dll
2014-01-07 11:36 - 2006-03-31 12:39 - 00229584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_1.dll
2014-01-07 11:36 - 2006-03-31 12:39 - 00083664 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_1.dll
2014-01-07 11:36 - 2006-03-31 12:39 - 00062672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_1.dll
2014-01-07 11:36 - 2006-02-03 08:43 - 03830992 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_29.dll
2014-01-07 11:36 - 2006-02-03 08:43 - 02332368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_29.dll
2014-01-07 11:36 - 2006-02-03 08:42 - 00355536 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_0.dll
2014-01-07 11:36 - 2006-02-03 08:42 - 00230096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_0.dll
2014-01-07 11:36 - 2006-02-03 08:41 - 00016592 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_0.dll
2014-01-07 11:36 - 2006-02-03 08:41 - 00014032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_0.dll
2014-01-07 11:36 - 2005-12-05 18:09 - 03815120 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_28.dll
2014-01-07 11:36 - 2005-12-05 18:09 - 02323664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_28.dll
2014-01-07 11:36 - 2005-07-22 19:59 - 03807440 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_27.dll
2014-01-07 11:36 - 2005-07-22 19:59 - 02319568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_27.dll
2014-01-07 11:36 - 2005-05-26 15:34 - 03767504 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_26.dll
2014-01-07 11:36 - 2005-05-26 15:34 - 02297552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_26.dll
2014-01-07 11:36 - 2005-03-18 17:19 - 03823312 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_25.dll
2014-01-07 11:36 - 2005-03-18 17:19 - 02337488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_25.dll
2014-01-07 11:36 - 2005-02-05 19:45 - 03544272 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_24.dll
2014-01-07 11:36 - 2005-02-05 19:45 - 02222800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_24.dll
2014-01-07 06:22 - 2014-02-05 20:40 - 00000873 _____ () C:\Users\Henning\Dokumente\Desktop.txt
2014-01-07 06:22 - 2014-02-01 22:04 - 00005804 _____ () C:\Users\Henning\Dokumente\Transaktionen.txt
2014-01-07 06:22 - 2014-01-18 15:05 - 00000000 ___RD () C:\Users\Henning\Dokumente
2014-01-07 06:22 - 2014-01-09 16:28 - 00000961 _____ () C:\Users\Henning\Dokumente\Rechner (2011).txt
2014-01-07 06:22 - 2014-01-07 23:13 - 00000346 _____ () C:\Users\Henning\Dokumente\formatC.txt
2014-01-07 06:22 - 2014-01-07 06:22 - 00000000 ____D () C:\Users\Henning\Dokumente\Witcher 2
2014-01-07 06:22 - 2014-01-07 06:22 - 00000000 ____D () C:\Users\Henning\Dokumente\My Games
2014-01-07 06:22 - 2014-01-07 06:22 - 00000000 ____D () C:\Users\Henning\Dokumente\GOG.com Downloads (alt)
2014-01-07 06:22 - 2014-01-07 06:22 - 00000000 ____D () C:\Users\Henning\Dokumente\EWS
2014-01-07 06:22 - 2014-01-07 06:22 - 00000000 ____D () C:\Users\Henning\Dokumente\EVE
2014-01-07 06:22 - 2014-01-07 06:22 - 00000000 ____D () C:\Users\Henning\Dokumente\BioWare
2014-01-07 06:22 - 2014-01-07 06:22 - 00000000 ____D () C:\Users\Henning\Dokumente\Battlefield 4
2014-01-07 06:22 - 2013-12-08 15:57 - 00000506 _____ () C:\Users\Henning\Dokumente\Berechnung der Kapazität.txt
2014-01-07 06:22 - 2013-04-21 09:26 - 00001394 _____ () C:\Users\Henning\Dokumente\Planescape Torment.txt
2014-01-07 06:22 - 2012-07-13 17:44 - 00000101 _____ () C:\Users\Henning\Dokumente\Windows von einer Zeitspanne abhängig herunterfahren.txt
2014-01-07 06:22 - 2012-06-17 09:26 - 00000770 _____ () C:\Users\Henning\Dokumente\Win7 VirtualStore.txt
2014-01-07 06:22 - 2011-06-02 12:13 - 00000285 _____ () C:\Users\Henning\Dokumente\FTP und mail.txt
2014-01-07 06:22 - 2011-04-27 23:31 - 00000674 _____ () C:\Users\Henning\Dokumente\Rechner (2009).txt
2014-01-07 06:22 - 2011-02-17 14:24 - 00000843 _____ () C:\Users\Henning\Dokumente\Reconnect Speedport W 722V, W 504V, W 920V.txt
2014-01-07 06:22 - 2011-02-16 12:57 - 00000185 _____ () C:\Users\Henning\Dokumente\TS-IPs.txt
2014-01-07 06:22 - 2010-01-12 20:53 - 00000000 _____ () C:\Users\Henning\Dokumente\ptbtime1.ptb.de.txt
2014-01-07 06:22 - 2009-12-24 22:17 - 00000131 _____ () C:\Users\Henning\Dokumente\TCOM.txt
2014-01-07 06:22 - 2009-08-15 21:41 - 00000110 _____ () C:\Users\Henning\Dokumente\Charles M. Schulz.txt
==================== One Month Modified Files and Folders =======
2014-02-06 16:56 - 2014-02-06 16:56 - 00000000 ____D () C:\FRST
2014-02-06 16:55 - 2014-02-06 16:55 - 00000000 _____ () C:\Users\Henning\defogger_reenable
2014-02-06 16:55 - 2014-01-06 19:02 - 00000000 ____D () C:\Users\Henning
2014-02-06 16:47 - 2014-02-06 16:47 - 00001850 _____ () C:\Users\Henning\Desktop\060214.log
2014-02-06 16:47 - 2014-01-29 14:07 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-02-06 16:47 - 2014-01-26 20:05 - 00405288 _____ () C:\Windows\WindowsUpdate.log
2014-02-06 16:37 - 2014-01-06 21:39 - 00000000 ____D () C:\Program Files (x86)\Steam
2014-02-06 16:34 - 2014-01-06 23:09 - 00000000 ____D () C:\Users\Henning\AppData\Roaming\vlc
2014-02-06 15:54 - 2009-07-14 05:45 - 00013552 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-02-06 15:54 - 2009-07-14 05:45 - 00013552 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-02-06 15:44 - 2009-07-14 18:58 - 00673882 _____ () C:\Windows\system32\perfh007.dat
2014-02-06 15:44 - 2009-07-14 18:58 - 00139022 _____ () C:\Windows\system32\perfc007.dat
2014-02-06 15:44 - 2009-07-14 06:13 - 01553918 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-02-06 15:38 - 2014-01-30 10:41 - 00006917 _____ () C:\Windows\setupact.log
2014-02-06 15:38 - 2014-01-06 20:56 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-02-06 15:38 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-02-05 21:47 - 2014-01-29 14:07 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-02-05 21:47 - 2014-01-06 22:28 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-02-05 21:47 - 2014-01-06 22:28 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-02-05 20:40 - 2014-01-07 06:22 - 00000873 _____ () C:\Users\Henning\Dokumente\Desktop.txt
2014-02-05 17:44 - 2014-01-08 23:36 - 00000000 ____D () C:\Users\Henning\AppData\Roaming\EVEMon
2014-02-04 06:55 - 2014-02-04 06:55 - 00000000 _____ () C:\Users\Henning\Desktop\MBAM .txt
2014-02-01 22:04 - 2014-01-07 06:22 - 00005804 _____ () C:\Users\Henning\Dokumente\Transaktionen.txt
2014-02-01 16:37 - 2014-02-01 16:37 - 00000000 ____D () C:\Windows\SysWOW64\RTCOM
2014-02-01 16:37 - 2014-02-01 16:37 - 00000000 ____D () C:\Program Files\Realtek
2014-02-01 16:37 - 2014-01-06 19:20 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-02-01 16:37 - 2014-01-06 19:20 - 00000000 ____D () C:\Program Files (x86)\Realtek
2014-02-01 16:27 - 2014-02-01 16:27 - 00000146 _____ () C:\Users\Henning\Desktop\Sound.lnk
2014-01-30 12:51 - 2014-01-30 12:51 - 00000000 ____D () C:\Program Files (x86)\AGEIA Technologies
2014-01-30 12:51 - 2014-01-06 20:56 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation
2014-01-30 12:45 - 2014-01-30 12:45 - 00000000 ____D () C:\NVIDIA
2014-01-30 10:41 - 2014-01-30 10:41 - 00000000 _____ () C:\Windows\setuperr.log
2014-01-29 14:12 - 2014-01-29 14:12 - 00000085 _____ () C:\Windows\wininit.ini
2014-01-29 14:12 - 2014-01-29 13:55 - 00000000 ____D () C:\ProgramData\Spybot - Search & Destroy
2014-01-29 13:55 - 2014-01-29 13:55 - 00000000 ____D () C:\Windows\System32\Tasks\Safer-Networking
2014-01-29 06:47 - 2014-01-29 06:47 - 00000000 ____D () C:\Users\Henning\AppData\Roaming\Mozilla
2014-01-29 06:47 - 2014-01-29 06:47 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-01-29 06:47 - 2014-01-29 06:46 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-01-28 23:06 - 2014-01-28 23:06 - 00000000 ____D () C:\Windows\ERUNT
2014-01-28 22:50 - 2014-01-28 22:50 - 00005298 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_51-b13.log
2014-01-28 22:50 - 2014-01-28 22:50 - 00000000 ____D () C:\ProgramData\Oracle
2014-01-28 22:50 - 2014-01-28 21:49 - 00000000 ____D () C:\Program Files (x86)\Java
2014-01-28 21:52 - 2014-01-28 21:48 - 00000000 ____D () C:\ProgramData\WPM
2014-01-28 21:49 - 2014-01-28 21:49 - 00000000 ____D () C:\ProgramData\Sun
2014-01-27 18:11 - 2014-01-27 18:11 - 00002776 _____ () C:\Windows\System32\Tasks\CCleanerSkipUAC
2014-01-27 18:11 - 2014-01-27 18:11 - 00000000 ____D () C:\Program Files\CCleaner
2014-01-27 10:36 - 2014-01-17 21:29 - 00000000 ____D () C:\Users\Henning\AppData\Local\Battle.net
2014-01-24 06:46 - 2014-01-06 19:03 - 00000000 ___RD () C:\Users\Henning\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-01-21 06:39 - 2014-01-06 22:28 - 00000000 ____D () C:\Users\Henning\AppData\Local\Adobe
2014-01-21 03:53 - 2014-01-06 20:57 - 01179576 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll
2014-01-21 03:53 - 2014-01-06 20:57 - 01048152 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll
2014-01-19 08:33 - 2014-01-06 20:04 - 00270496 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2014-01-18 15:05 - 2014-01-07 06:22 - 00000000 ___RD () C:\Users\Henning\Dokumente
2014-01-18 13:08 - 2014-01-06 21:56 - 00000000 ____D () C:\Spiele
2014-01-17 21:56 - 2014-01-17 21:56 - 00000000 ____D () C:\Users\Henning\AppData\Local\Blizzard
2014-01-17 21:37 - 2014-01-17 21:29 - 00000000 ____D () C:\Users\Henning\AppData\Roaming\Battle.net
2014-01-17 21:29 - 2014-01-17 21:29 - 00000000 ____D () C:\Users\Henning\AppData\Local\Blizzard Entertainment
2014-01-17 21:29 - 2014-01-17 21:29 - 00000000 ____D () C:\ProgramData\Blizzard Entertainment
2014-01-17 21:27 - 2014-01-17 21:27 - 00000000 ____D () C:\ProgramData\Battle.net
2014-01-16 22:14 - 2014-01-16 22:14 - 00000000 ____D () C:\Users\Henning\AppData\Roaming\Mp3tag
2014-01-16 22:02 - 2014-01-16 22:02 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdFs_01_09_00.Wdf
2014-01-16 00:13 - 2014-01-30 12:46 - 31421216 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2014-01-16 00:13 - 2014-01-30 12:46 - 25255200 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2014-01-16 00:13 - 2014-01-30 12:46 - 23672096 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2014-01-16 00:13 - 2014-01-30 12:46 - 17714760 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2014-01-16 00:13 - 2014-01-30 12:46 - 17560352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2014-01-16 00:13 - 2014-01-30 12:46 - 12668192 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2014-01-16 00:13 - 2014-01-30 12:46 - 11631544 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2014-01-16 00:13 - 2014-01-30 12:46 - 11583616 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2014-01-16 00:13 - 2014-01-30 12:46 - 09723944 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2014-01-16 00:13 - 2014-01-30 12:46 - 09686304 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2014-01-16 00:13 - 2014-01-30 12:46 - 03142432 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2014-01-16 00:13 - 2014-01-30 12:46 - 02956576 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2014-01-16 00:13 - 2014-01-30 12:46 - 02782496 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll
2014-01-16 00:13 - 2014-01-30 12:46 - 02410784 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll
2014-01-16 00:13 - 2014-01-30 12:46 - 01885472 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6433467.dll
2014-01-16 00:13 - 2014-01-30 12:46 - 01515296 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6433467.dll
2014-01-16 00:13 - 2014-01-30 12:46 - 00892704 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2014-01-16 00:13 - 2014-01-30 12:46 - 00892192 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2014-01-16 00:13 - 2014-01-30 12:46 - 00863520 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2014-01-16 00:13 - 2014-01-30 12:46 - 00859936 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2014-01-16 00:13 - 2014-01-30 12:46 - 00832424 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2014-01-16 00:13 - 2014-01-30 12:46 - 00483104 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll
2014-01-16 00:13 - 2014-01-30 12:46 - 00408352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll
2014-01-16 00:13 - 2014-01-30 12:46 - 00378656 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFROpenGL.dll
2014-01-16 00:13 - 2014-01-30 12:46 - 00353504 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2014-01-16 00:13 - 2014-01-30 12:46 - 00333600 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFROpenGL.dll
2014-01-16 00:13 - 2014-01-30 12:46 - 00305600 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2014-01-16 00:13 - 2014-01-30 12:46 - 00174296 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2014-01-16 00:13 - 2014-01-30 12:46 - 00148016 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2014-01-16 00:13 - 2014-01-07 18:24 - 15690744 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2014-01-16 00:13 - 2014-01-06 20:56 - 00061216 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll
2014-01-16 00:13 - 2014-01-06 20:56 - 00053024 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll
2014-01-16 00:13 - 2014-01-06 20:55 - 18184976 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll
2014-01-16 00:13 - 2014-01-06 20:55 - 14668008 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll
2014-01-16 00:13 - 2014-01-06 20:55 - 03087112 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
2014-01-16 00:13 - 2014-01-06 20:55 - 02711656 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
2014-01-16 00:13 - 2014-01-06 20:55 - 00947808 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll
2014-01-16 00:13 - 2014-01-06 20:55 - 00024544 _____ () C:\Windows\system32\nvinfo.pb
2014-01-15 23:35 - 2014-01-30 12:51 - 00599840 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe
2014-01-15 22:53 - 2014-01-06 20:56 - 06712608 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll
2014-01-15 22:53 - 2014-01-06 20:56 - 03498272 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll
2014-01-15 22:53 - 2014-01-06 20:56 - 02559776 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll
2014-01-15 22:53 - 2014-01-06 20:56 - 00923936 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
2014-01-15 22:53 - 2014-01-06 20:56 - 00386336 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll
2014-01-15 22:53 - 2014-01-06 20:56 - 00063776 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll
2014-01-15 17:57 - 2009-07-14 05:45 - 00287600 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-01-15 15:35 - 2014-01-06 19:52 - 86054176 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-01-15 15:35 - 2014-01-06 19:52 - 00000000 ____D () C:\Windows\system32\MRT
2014-01-15 06:41 - 2014-01-15 06:41 - 00000000 ____D () C:\Windows\pss
2014-01-13 23:31 - 2014-01-06 20:56 - 03559557 _____ () C:\Windows\system32\nvcoproc.bin
2014-01-13 00:58 - 2014-01-13 00:58 - 00000000 ____D () C:\Windows\SysWOW64\directx
2014-01-13 00:58 - 2014-01-13 00:58 - 00000000 ____D () C:\Program Files (x86)\Microsoft XNA
2014-01-11 22:27 - 2014-01-11 22:27 - 00000000 ____D () C:\Windows\46ED2B6485C74E1F920CA555B21F2E4C.TMP
2014-01-11 01:57 - 2014-01-07 11:36 - 00214392 _____ () C:\Windows\SysWOW64\PnkBstrB.exe
2014-01-11 01:55 - 2014-01-06 22:05 - 00000000 ____D () C:\Program Files (x86)\Origin
2014-01-10 22:31 - 2014-01-07 11:36 - 00214392 _____ () C:\Windows\SysWOW64\PnkBstrB.ex0
2014-01-10 22:15 - 2014-01-10 22:15 - 00000000 ____D () C:\Users\Henning\AppData\Roaming\SumatraPDF
2014-01-10 08:29 - 2014-01-06 20:09 - 00064840 _____ () C:\Users\Henning\AppData\Local\GDIPFONTCACHEV1.DAT
2014-01-10 01:59 - 2014-01-10 01:56 - 00000000 ____D () C:\Users\Henning\AppData\Local\GOG.com
2014-01-09 16:28 - 2014-01-07 06:22 - 00000961 _____ () C:\Users\Henning\Dokumente\Rechner (2011).txt
2014-01-09 00:39 - 2014-01-09 00:39 - 00000049 _____ () C:\Windows\11993802
2014-01-09 00:39 - 2014-01-09 00:39 - 00000000 ____D () C:\Users\Henning\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\EVE
2014-01-08 23:36 - 2014-01-08 23:36 - 00000000 ____D () C:\Users\Henning\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\EVEMon
2014-01-08 23:35 - 2014-01-08 23:35 - 00000000 ____D () C:\Users\Henning\AppData\Local\CCP
2014-01-08 19:22 - 2014-01-06 23:06 - 00000000 ____D () C:\Users\Henning\AppData\Roaming\Winamp
2014-01-08 19:17 - 2014-01-06 22:37 - 00000000 ____D () C:\Users\Henning\AppData\Roaming\NVIDIA
2014-01-08 17:09 - 2014-01-06 20:26 - 02851840 _____ (Microsoft Corporation) C:\Windows\system32\themeui.dll
2014-01-08 17:09 - 2009-07-14 00:55 - 00332288 _____ (Microsoft Corporation) C:\Windows\system32\uxtheme.dll
2014-01-08 17:09 - 2009-07-14 00:54 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\themeservice.dll
2014-01-08 06:34 - 2014-01-07 11:37 - 00000000 ____D () C:\Program Files (x86)\Battlelog Web Plugins
2014-01-07 23:15 - 2014-01-07 23:12 - 00001164 _____ () C:\Users\Henning\Desktop\Transaktionen.lnk
2014-01-07 23:14 - 2014-01-07 23:12 - 00001102 _____ () C:\Users\Henning\Desktop\*.lnk
2014-01-07 23:13 - 2014-01-07 06:22 - 00000346 _____ () C:\Users\Henning\Dokumente\formatC.txt
2014-01-07 22:45 - 2014-01-07 22:45 - 00001382 _____ () C:\Users\Henning\Desktop\GeForce Experience.lnk
2014-01-07 20:10 - 2014-01-07 20:10 - 00000000 ____D () C:\Users\Henning\AppData\Local\PunkBuster
2014-01-07 20:10 - 2014-01-06 22:06 - 00000000 ____D () C:\ProgramData\Origin
2014-01-07 20:10 - 2014-01-06 22:06 - 00000000 ____D () C:\ProgramData\Electronic Arts
2014-01-07 20:09 - 2014-01-06 22:06 - 00000000 ____D () C:\Users\Henning\AppData\Local\Origin
2014-01-07 18:54 - 2014-01-07 18:54 - 00000000 ____D () C:\Users\Henning\AppData\Local\ESN
2014-01-07 18:43 - 2014-01-07 18:43 - 00000000 ____D () C:\Users\Henning\AppData\Roaming\WinRAR
2014-01-07 17:45 - 2014-01-07 17:45 - 00000000 ___SD () C:\Users\Henning\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OpenOffice 4.0.1
2014-01-07 17:45 - 2014-01-07 17:45 - 00000000 ____D () C:\Users\Henning\AppData\Roaming\OpenOffice
2014-01-07 17:35 - 2014-01-07 17:35 - 00000000 ____D () C:\Users\Henning\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2014-01-07 17:34 - 2014-01-07 17:34 - 00000000 ____D () C:\Program Files\WinRAR
2014-01-07 17:25 - 2014-01-07 17:25 - 00000000 ____D () C:\Program Files\Microsoft Security Client
2014-01-07 17:25 - 2014-01-07 17:25 - 00000000 ____D () C:\Program Files (x86)\Microsoft Security Client
2014-01-07 17:25 - 2014-01-07 17:06 - 00001912 _____ () C:\Windows\epplauncher.mif
2014-01-07 11:36 - 2014-01-07 11:36 - 00076888 _____ () C:\Windows\SysWOW64\PnkBstrA.exe
2014-01-07 11:36 - 2014-01-07 11:36 - 00000000 ____D () C:\ProgramData\Package Cache
2014-01-07 07:05 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\rescache
2014-01-07 06:30 - 2014-01-06 22:06 - 00000000 ____D () C:\Users\Henning\AppData\Roaming\Origin
2014-01-07 06:22 - 2014-01-07 06:22 - 00000000 ____D () C:\Users\Henning\Dokumente\Witcher 2
2014-01-07 06:22 - 2014-01-07 06:22 - 00000000 ____D () C:\Users\Henning\Dokumente\My Games
2014-01-07 06:22 - 2014-01-07 06:22 - 00000000 ____D () C:\Users\Henning\Dokumente\GOG.com Downloads (alt)
2014-01-07 06:22 - 2014-01-07 06:22 - 00000000 ____D () C:\Users\Henning\Dokumente\EWS
2014-01-07 06:22 - 2014-01-07 06:22 - 00000000 ____D () C:\Users\Henning\Dokumente\EVE
2014-01-07 06:22 - 2014-01-07 06:22 - 00000000 ____D () C:\Users\Henning\Dokumente\BioWare
2014-01-07 06:22 - 2014-01-07 06:22 - 00000000 ____D () C:\Users\Henning\Dokumente\Battlefield 4
Some content of TEMP:
====================
C:\Users\Henning\AppData\Local\Temp\nv3DVStreaming.dll
C:\Users\Henning\AppData\Local\Temp\nvSCPAPI.dll
C:\Users\Henning\AppData\Local\Temp\nvStereoApiI.dll
C:\Users\Henning\AppData\Local\Temp\nvStInst.exe
C:\Users\Henning\AppData\Local\Temp\Quarantine.exe
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2014-01-30 11:11
==================== End Of Log ============================
Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 05-02-2014
Ran by Henning at 2014-02-06 16:56:35
Running from D:\Downloads
Boot Mode: Normal
==========================================================
==================== Security Center ========================
AV: Microsoft Security Essentials (Enabled - Up to date) {641105E6-77ED-3F35-A304-765193BCB75F}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Microsoft Security Essentials (Enabled - Up to date) {DF70E402-51D7-30BB-99B4-4D23E83BFDE2}
==================== Installed Programs ======================
Adobe Flash Player 12 Plugin (x32 Version: 12.0.0.44 - Adobe Systems Incorporated)
Baldur's Gate 2 Complete (x32 Version: 2.0.0.12 - GOG.com)
Battle.net (x32 Version: - Blizzard Entertainment)
Battlefield 4™ (x32 Version: 1.0.0.1 - Electronic Arts)
CCleaner (Version: 4.10 - Piriform)
CPUID CPU-Z 1.68 (Version: - )
Dishonored (x32 Version: 1.0 - Bethesda Softworks)
Dota 2 (x32 Version: - Valve)
ESN Sonar (x32 Version: 0.70.4 - ESN Social Software AB)
EVE Online (nur entfernen) (x32 Version: - CCP Games Ltd.)
EVEMon (x32 Version: 1.8.5.4162 - battleclinic.com)
Fraps (x32 Version: - )
GeForce Experience NvStream Client Components (Version: 1.6.28 - NVIDIA Corporation) Hidden
GOG.com Downloader version 3.6.0 (x32 Version: 3.6.0 - GOG.com)
Hearthstone (x32 Version: - Blizzard Entertainment)
Intel(R) Management Engine Components (x32 Version: 7.1.50.1172 - Intel Corporation)
Java 7 Update 51 (x32 Version: 7.0.510 - Oracle)
Java Auto Updater (x32 Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden
JDownloader 0.9 (x32 Version: 0.9 - AppWork GmbH)
Logitech Gaming Software (Version: 8.45.88 - Logitech Inc.) Hidden
Logitech Gaming Software 8.51 (Version: 8.51.5 - Logitech Inc.)
Malwarebytes Anti-Malware Version 1.75.0.1300 (x32 Version: 1.75.0.1300 - Malwarebytes Corporation)
Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (Deutsch) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Security Client (Version: 4.4.0304.0 - Microsoft Corporation) Hidden
Microsoft Security Essentials (Version: 4.4.304.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (x32 Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (x32 Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.60610 (Version: 11.0.60610 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.60610 (Version: 11.0.60610 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.60610 (x32 Version: 11.0.60610 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.60610 (x32 Version: 11.0.60610 - Microsoft Corporation) Hidden
Microsoft XNA Framework Redistributable 3.1 (x32 Version: 3.1.10527.0 - Microsoft Corporation)
Mozilla Firefox 26.0 (x86 de) (x32 Version: 26.0 - Mozilla)
Mozilla Maintenance Service (x32 Version: 26.0 - Mozilla)
Mp3tag v2.58 (x32 Version: v2.58 - Florian Heidenreich)
NVIDIA 3D Vision Controller-Treiber 334.67 (Version: 334.67 - NVIDIA Corporation)
NVIDIA 3D Vision Treiber 334.67 (Version: 334.67 - NVIDIA Corporation)
NVIDIA GeForce Experience 1.8.2 (Version: 1.8.2 - NVIDIA Corporation)
NVIDIA Grafiktreiber 334.67 (Version: 334.67 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.30.1 (Version: 1.3.30.1 - NVIDIA Corporation)
NVIDIA Install Application (Version: 2.1002.145.1024 - NVIDIA Corporation) Hidden
NVIDIA LED Visualizer 1.0 (Version: 1.0 - NVIDIA Corporation) Hidden
NVIDIA Network Service (Version: 1.0 - NVIDIA Corporation) Hidden
NVIDIA PhysX (x32 Version: 9.13.1220 - NVIDIA Corporation) Hidden
NVIDIA PhysX-Systemsoftware 9.13.1220 (Version: 9.13.1220 - NVIDIA Corporation)
NVIDIA ShadowPlay 11.10.11 (Version: 11.10.11 - NVIDIA Corporation) Hidden
NVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.13.3467 - NVIDIA Corporation) Hidden
NVIDIA Systemsteuerung 334.67 (Version: 334.67 - NVIDIA Corporation) Hidden
NVIDIA Update 11.10.11 (Version: 11.10.11 - NVIDIA Corporation) Hidden
NVIDIA Update Core (Version: 11.10.11 - NVIDIA Corporation) Hidden
NVIDIA Virtual Audio 1.2.20 (Version: 1.2.20 - NVIDIA Corporation)
OpenOffice 4.0.1 (x32 Version: 4.01.9714 - Apache Software Foundation)
Origin (x32 Version: 9.3.11.2762 - Electronic Arts, Inc.)
PunkBuster Services (x32 Version: 0.993 - Even Balance, Inc.)
Realtek Ethernet Controller Driver (x32 Version: 7.72.410.2013 - Realtek)
Realtek High Definition Audio Driver (x32 Version: 6.0.1.7083 - Realtek Semiconductor Corp.)
Renesas Electronics USB 3.0 Host Controller Driver (x32 Version: 2.0.34.0 - Renesas Electronics Corporation)
Renesas Electronics USB 3.0 Host Controller Driver (x32 Version: 2.0.34.0 - Renesas Electronics Corporation) Hidden
SHIELD Streaming (Version: 1.7.306 - NVIDIA Corporation) Hidden
Steam (x32 Version: - Valve Corporation)
SumatraPDF (x32 Version: 2.4 - Krzysztof Kowalczyk)
TeamSpeak 3 Client (HKCU Version: 3.0.13 - TeamSpeak Systems GmbH)
Trillian (x32 Version: - Cerulean Studios, LLC)
VLC media player 2.1.2 (Version: 2.1.2 - VideoLAN)
Winamp (x32 Version: 5.666 - Nullsoft, Inc)
WinRAR 5.01 (64-Bit) (Version: 5.01.0 - win.rar GmbH)
==================== Restore Points =========================
19-01-2014 10:08:52 Windows Update
22-01-2014 15:47:08 Windows Update
26-01-2014 10:36:53 Windows Update
26-01-2014 22:47:05 DirectX wurde installiert
26-01-2014 22:47:43 Microsoft Visual C++ 2005 Redistributable wird installiert
28-01-2014 21:49:55 Installed Java 7 Update 51
29-01-2014 12:56:43 Windows Update
30-01-2014 11:32:54 DirectX wurde installiert
30-01-2014 11:48:25 Gerätetreiber-Paketinstallation: NVIDIA Grafikkarte
30-01-2014 11:50:45 Gerätetreiber-Paketinstallation: NVIDIA USB-Controller
01-02-2014 15:49:28 Windows Update
05-02-2014 05:47:01 Windows Update
==================== Hosts content: ==========================
2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
==================== Scheduled Tasks (whitelisted) =============
Task: {9696B963-60B9-4A80-B87C-594F89AA2ABF} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-02-05] (Adobe Systems Incorporated)
Task: {ADE2609D-473A-4281-B5D6-AE9E0CE2E632} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-01-21] (Piriform Ltd)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
==================== Loaded Modules (whitelisted) =============
2014-01-29 06:46 - 2013-12-05 20:36 - 03559024 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
==================== Alternate Data Streams (whitelisted) =========
==================== Safe Mode (whitelisted) ===================
==================== Faulty Device Manager Devices =============
==================== Event log errors: =========================
Application errors:
==================
Error: (02/06/2014 03:39:56 PM) (Source: Steam Client Service) (User: )
Description: Error: Failed to poke open firewall
Error: (02/05/2014 05:10:28 PM) (Source: Steam Client Service) (User: )
Description: Error: Failed to poke open firewall
Error: (02/04/2014 04:35:20 PM) (Source: Steam Client Service) (User: )
Description: Error: Failed to poke open firewall
Error: (02/03/2014 04:37:44 PM) (Source: Steam Client Service) (User: )
Description: Error: Failed to poke open firewall
Error: (02/02/2014 00:11:23 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: vlc.exe, Version: 2.1.2.0, Zeitstempel: 0x52a74df9
Name des fehlerhaften Moduls: vlc.exe, Version: 2.1.2.0, Zeitstempel: 0x52a74df9
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00000000000019b4
ID des fehlerhaften Prozesses: 0xf08
Startzeit der fehlerhaften Anwendung: 0xvlc.exe0
Pfad der fehlerhaften Anwendung: vlc.exe1
Pfad des fehlerhaften Moduls: vlc.exe2
Berichtskennung: vlc.exe3
Error: (02/02/2014 11:53:35 AM) (Source: Steam Client Service) (User: )
Description: Error: Failed to poke open firewall
Error: (02/01/2014 08:04:13 PM) (Source: Steam Client Service) (User: )
Description: Error: Failed to poke open firewall
Error: (02/01/2014 01:27:20 PM) (Source: Steam Client Service) (User: )
Description: Error: Failed to poke open firewall
Error: (01/31/2014 00:09:39 PM) (Source: Steam Client Service) (User: )
Description: Error: Failed to poke open firewall
Error: (01/30/2014 02:49:15 PM) (Source: Steam Client Service) (User: )
Description: Error: Failed to poke open firewall
System errors:
=============
Error: (02/06/2014 04:43:15 PM) (Source: FWLANUSB) (User: )
Description: AVM FRITZ!WLAN USB Stick v1.1 : Fehlfunktion des Netzwerkadapters wurde ermittelt.
Microsoft Office Sessions:
=========================
Error: (02/06/2014 03:39:56 PM) (Source: Steam Client Service)(User: )
Description: Failed to poke open firewall
Error: (02/05/2014 05:10:28 PM) (Source: Steam Client Service)(User: )
Description: Failed to poke open firewall
Error: (02/04/2014 04:35:20 PM) (Source: Steam Client Service)(User: )
Description: Failed to poke open firewall
Error: (02/03/2014 04:37:44 PM) (Source: Steam Client Service)(User: )
Description: Failed to poke open firewall
Error: (02/02/2014 00:11:23 PM) (Source: Application Error)(User: )
Description: vlc.exe2.1.2.052a74df9vlc.exe2.1.2.052a74df9c000000500000000000019b4f0801cf1ffe65e53ecaD:\Programme (D)\VLC\vlc.exeD:\Programme (D)\VLC\vlc.exebfe4c041-8bfa-11e3-83ad-001a4f4943c6
Error: (02/02/2014 11:53:35 AM) (Source: Steam Client Service)(User: )
Description: Failed to poke open firewall
Error: (02/01/2014 08:04:13 PM) (Source: Steam Client Service)(User: )
Description: Failed to poke open firewall
Error: (02/01/2014 01:27:20 PM) (Source: Steam Client Service)(User: )
Description: Failed to poke open firewall
Error: (01/31/2014 00:09:39 PM) (Source: Steam Client Service)(User: )
Description: Failed to poke open firewall
Error: (01/30/2014 02:49:15 PM) (Source: Steam Client Service)(User: )
Description: Failed to poke open firewall
==================== Memory info ===========================
Percentage of memory in use: 28%
Total physical RAM: 8161.05 MB
Available physical RAM: 5814.5 MB
Total Pagefile: 16320.27 MB
Available Pagefile: 13979.04 MB
Total Virtual: 8192 MB
Available Virtual: 8191.79 MB
==================== Drives ================================
Drive c: (CT240M500SSD1) (Fixed) (Total:223.47 GB) (Free:100.88 GB) NTFS
Drive d: (HUA722050CLA330) (Fixed) (Total:465.76 GB) (Free:275.26 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 224 GB) (Disk ID: 6FDDAC81)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=223 GB) - (Type=07 NTFS)
========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: D1307F0B)
Partition 1: (Not Active) - (Size=466 GB) - (Type=07 NTFS)
==================== End Of Log ============================
Code:
ATTFilter GMER 2.1.19357 - hxxp://www.gmer.net
Rootkit scan 2014-02-06 17:06:27
Windows 6.1.7601 Service Pack 1 x64 \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-0 Crucial_CT240M500SSD1 rev.MU03 223,57GB
Running: 4woorksk.exe; Driver: C:\Users\Henning\AppData\Local\Temp\uxldypob.sys
---- Kernel code sections - GMER 2.1 ----
INITKDBG C:\Windows\system32\ntoskrnl.exe!ExDeleteNPagedLookasideList + 528 fffff80002dfc000 8 bytes [00, 00, 15, 02, 46, 69, 6C, ...]
INITKDBG C:\Windows\system32\ntoskrnl.exe!ExDeleteNPagedLookasideList + 544 fffff80002dfc010 29 bytes [00, 04, 00, 00, 80, 01, 00, ...]
---- User code sections - GMER 2.1 ----
.text C:\Windows\SysWOW64\PnkBstrA.exe[1812] C:\Windows\SysWOW64\WSOCK32.dll!setsockopt + 322 0000000072281a22 2 bytes [28, 72]
.text C:\Windows\SysWOW64\PnkBstrA.exe[1812] C:\Windows\SysWOW64\WSOCK32.dll!setsockopt + 496 0000000072281ad0 2 bytes [28, 72]
.text C:\Windows\SysWOW64\PnkBstrA.exe[1812] C:\Windows\SysWOW64\WSOCK32.dll!setsockopt + 552 0000000072281b08 2 bytes [28, 72]
.text C:\Windows\SysWOW64\PnkBstrA.exe[1812] C:\Windows\SysWOW64\WSOCK32.dll!setsockopt + 730 0000000072281bba 2 bytes [28, 72]
.text C:\Windows\SysWOW64\PnkBstrA.exe[1812] C:\Windows\SysWOW64\WSOCK32.dll!setsockopt + 762 0000000072281bda 2 bytes [28, 72]
.text C:\Windows\SysWOW64\PnkBstrA.exe[1812] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69 0000000075681465 2 bytes [68, 75]
.text C:\Windows\SysWOW64\PnkBstrA.exe[1812] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155 00000000756814bb 2 bytes [68, 75]
.text ... * 2
---- EOF - GMER 2.1 ----
Code:
ATTFilter Malwarebytes Anti-Malware 1.75.0.1300 www.malwarebytes.org Datenbank Version: v2014.01.28.08 Windows 7 Service Pack 1 x64 NTFS Internet Explorer 9.0.8112.16421 Henning :: FURY [Administrator] 28.01.2014 22:03:02 mbam-log-2014-01-28 (22-03-02).txt Art des Suchlaufs: Vollständiger Suchlauf (C:\|D:\|E:\|) Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM Deaktivierte Suchlaufeinstellungen: P2P Durchsuchte Objekte: 376155 Laufzeit: 14 Minute(n), 31 Sekunde(n) Infizierte Speicherprozesse: 0 (Keine bösartigen Objekte gefunden) Infizierte Speichermodule: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungsschlüssel: 5 HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86} (PUP.Optional.Qone8) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCU\Software\InstallCore\1I1T1Q1S (PUP.Optional.InstallCore.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCU\SOFTWARE\INSTALLCORE (PUP.Optional.InstallCore.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKLM\SOFTWARE\sweet-pageSoftware (PUP.Optional.SweetPage.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86} (PUP.Optional.Qone8) -> Erfolgreich gelöscht und in Quarantäne gestellt. Infizierte Registrierungswerte: 1 HKCU\Software\InstallCore|tb (PUP.Optional.InstallCore.A) -> Daten: 0V1D1S1R1D0V1O -> Erfolgreich gelöscht und in Quarantäne gestellt. Infizierte Dateiobjekte der Registrierung: 6 HKCU\SOFTWARE\Microsoft\Internet Explorer\Main|Default_Page_URL (PUP.Optional.SweetPage.A) -> Bösartig: (hxxp://www.sweet-page.com/?type=hp&ts=1390942105&from=cor&uid=CrucialXCT240M500SSD1_13340954E8430954E843) Gut: (hxxp://www.google.com) -> Erfolgreich ersetzt und in Quarantäne gestellt. HKCU\Software\Microsoft\Internet Explorer\Main|Start Page (PUP.Optional.SweetPage.A) -> Bösartig: (hxxp://www.sweet-page.com/?type=hp&ts=1390942105&from=cor&uid=CrucialXCT240M500SSD1_13340954E8430954E843) Gut: (hxxp://www.google.com) -> Erfolgreich ersetzt und in Quarantäne gestellt. HKLM\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\open\command| (PUP.Optional.SweetPage.A) -> Bösartig: ("C:\Program Files (x86)\Mozilla Firefox\firefox.exe" hxxp://www.sweet-page.com/?type=sc&ts=1390942105&from=cor&uid=CrucialXCT240M500SSD1_13340954E8430954E843) Gut: (firefox.exe) -> Erfolgreich ersetzt und in Quarantäne gestellt. HKLM\SOFTWARE\Microsoft\Internet Explorer\Main|Start Page (PUP.Optional.SweetPage.A) -> Bösartig: (hxxp://www.sweet-page.com/?type=hp&ts=1390942105&from=cor&uid=CrucialXCT240M500SSD1_13340954E8430954E843) Gut: (hxxp://www.google.com) -> Erfolgreich ersetzt und in Quarantäne gestellt. HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes|DefaultScope (PUP.Optional.Qone8) -> Bösartig: ({33BB0A4E-99AF-4226-BDF6-49120163DE86}) Gut: ({0633EE93-D776-472f-A0FF-E1416B8B2E3A}) -> Erfolgreich ersetzt und in Quarantäne gestellt. HKLM\Software\Microsoft\Internet Explorer\Main|Default_Page_URL (PUP.Optional.SweetPage.A) -> Bösartig: (hxxp://www.sweet-page.com/?type=hp&ts=1390942105&from=cor&uid=CrucialXCT240M500SSD1_13340954E8430954E843) Gut: (hxxp://www.google.com) -> Erfolgreich ersetzt und in Quarantäne gestellt. Infizierte Verzeichnisse: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateien: 2 C:\Users\Henning\AppData\Local\Temp\fullpackage_temp1390942084\package1.zip (PUP.Optional.SkyTech.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\sweet-page.xml (PUP.Optional.SweetPage.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. (Ende) Code:
ATTFilter Malwarebytes Anti-Malware 1.75.0.1300 www.malwarebytes.org Datenbank Version: v2014.02.04.03 Windows 7 Service Pack 1 x64 NTFS Internet Explorer 9.0.8112.16421 Henning :: FURY [Administrator] 04.02.2014 06:38:55 mbam-log-2014-02-04 (06-38-55).txt Art des Suchlaufs: Vollständiger Suchlauf (C:\|D:\|E:\|) Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM Deaktivierte Suchlaufeinstellungen: P2P Durchsuchte Objekte: 380874 Laufzeit: 16 Minute(n), 3 Sekunde(n) Infizierte Speicherprozesse: 0 (Keine bösartigen Objekte gefunden) Infizierte Speichermodule: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungsschlüssel: 1 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C} (PUP.Optional.SupTab.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. Infizierte Registrierungswerte: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateiobjekte der Registrierung: 0 (Keine bösartigen Objekte gefunden) Infizierte Verzeichnisse: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateien: 0 (Keine bösartigen Objekte gefunden) (Ende) Code:
ATTFilter Malwarebytes Anti-Malware 1.75.0.1300 www.malwarebytes.org Datenbank Version: v2014.02.06.05 Windows 7 Service Pack 1 x64 NTFS Internet Explorer 9.0.8112.16421 Henning :: FURY [Administrator] 06.02.2014 15:40:33 mbam-log-2014-02-06 (15-40-33).txt Art des Suchlaufs: Vollständiger Suchlauf (C:\|D:\|E:\|) Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM Deaktivierte Suchlaufeinstellungen: P2P Durchsuchte Objekte: 381783 Laufzeit: 16 Minute(n), 37 Sekunde(n) Infizierte Speicherprozesse: 0 (Keine bösartigen Objekte gefunden) Infizierte Speichermodule: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungsschlüssel: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungswerte: 1 HKLM\SOFTWARE\Mozilla\Firefox\Extensions|lightningnewtab@gmail.com (PUP.Optional.Lightning.A) -> Daten: C:\Users\Henning\AppData\Roaming\Mozilla\Firefox\Profiles\2vp0uvrs.default\extensions\lightningnewtab@gmail.com.xpi -> Erfolgreich gelöscht und in Quarantäne gestellt. Infizierte Dateiobjekte der Registrierung: 0 (Keine bösartigen Objekte gefunden) Infizierte Verzeichnisse: 2 C:\ProgramData\IePluginService (PUP.Optional.IePluginService.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\ProgramData\IePluginService\update (PUP.Optional.IePluginService.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. Infizierte Dateien: 1 C:\ProgramData\IePluginService\update\conf (PUP.Optional.IePluginService.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. (Ende) |
|
06.02.2014, 17:30
| #2 |
| /// the machine /// TB-Ausbilder    | Windows 7: Wiederholte Funde bösartiger Software durch MBAM hi,
__________________Downloade Dir bitte  AdwCleaner auf deinen Desktop.
Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
und ein frisches FRST log bitte.
__________________ |
|
06.02.2014, 18:42
| #3 |
| | Windows 7: Wiederholte Funde bösartiger Software durch MBAM Hi schrauber,
__________________ADWCleaner Code:
ATTFilter # AdwCleaner v3.018 - Bericht erstellt am 06/02/2014 um 18:31:12
# Updated 28/01/2014 von Xplode
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)
# Benutzername : Henning - FURY
# Gestartet von : C:\Users\Henning\Desktop\adwcleaner.exe
# Option : Löschen
***** [ Dienste ] *****
***** [ Dateien / Ordner ] *****
***** [ Verknüpfungen ] *****
***** [ Registrierungsdatenbank ] *****
***** [ Browser ] *****
-\\ Internet Explorer v0.0.0.0
-\\ Mozilla Firefox v26.0 (de)
[ Datei : C:\Users\Henning\AppData\Roaming\Mozilla\Firefox\Profiles\7h855vbo.default\prefs.js ]
*************************
AdwCleaner[R0].txt - [792 octets] - [06/02/2014 18:30:54]
AdwCleaner[S0].txt - [714 octets] - [06/02/2014 18:31:12]
########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [773 octets] ##########
Code:
ATTFilter ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.1 (02.04.2014:1)
OS: Windows 7 Home Premium x64
Ran by Henning on 06.02.2014 at 18:35:40,37
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~ Services
~~~ Registry Values
~~~ Registry Keys
~~~ Files
~~~ Folders
~~~ FireFox
Emptied folder: C:\Users\Henning\AppData\Roaming\mozilla\firefox\profiles\7h855vbo.default\minidumps [3 files]
~~~ Event Viewer Logs were cleared
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 06.02.2014 at 18:36:32,86
Computer was rebooted
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 05-02-2014
Ran by Henning (administrator) on FURY on 06-02-2014 18:38:46
Running from C:\Users\Henning\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 9
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Logitech Inc.) C:\Program Files\Logitech Gaming Software\LCore.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [Nvtmru] - "C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe"
HKLM\...\Run: [ShadowPlay] - C:\Windows\system32\nvspcap64.dll [1179576 2014-01-21] (NVIDIA Corporation)
HKLM\...\Run: [NvBackend] - C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2234144 2014-01-21] (NVIDIA Corporation)
HKLM\...\Run: [Launch LCore] - C:\Program Files\Logitech Gaming Software\LCore.exe [8292120 2013-11-14] (Logitech Inc.)
HKLM\...\Run: [MSC] - C:\Program Files\Microsoft Security Client\msseces.exe [1266912 2013-10-23] (Microsoft Corporation)
HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7204568 2013-11-04] (Realtek Semiconductor)
HKLM-x32\...\Run: [NUSB3MON] - C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [113288 2010-11-17] (Renesas Electronics Corporation)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKU\.DEFAULT\...\RunOnce: [SPReview] - C:\Windows\System32\SPReview\SPReview.exe [301568 2014-01-06] (Microsoft Corporation)
HKU\S-1-5-19\...\Run: [Sidebar] - %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun
HKU\S-1-5-20\...\Run: [Sidebar] - %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun
HKU\S-1-5-21-2991333743-1983943878-3972192781-1000\...\MountPoints2: {45ea64d3-76fc-11e3-9fe1-e396b050e769} - G:\pushinst.exe
==================== Internet (Whitelisted) ====================
ProxyServer: localhost:8080
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xF6B0B7F00C0BCF01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL =
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
FireFox:
========
FF ProfilePath: C:\Users\Henning\AppData\Roaming\Mozilla\Firefox\Profiles\7h855vbo.default
FF NetworkProxy: "http", "109.73.68.233"
FF NetworkProxy: "http_port", 8089
FF NetworkProxy: "type", 4
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_43.dll ()
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_44.dll ()
FF Plugin-x32: @esn.me/esnsonar,version=0.70.4 - C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB)
FF Plugin-x32: @esn/npbattlelog,version=2.3.2 - C:\Program Files (x86)\Battlelog Web Plugins\2.3.2\npbattlelog.dll (EA Digital Illusions CE AB)
FF Plugin-x32: @java.com/DTPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: WOT - C:\Users\Henning\AppData\Roaming\Mozilla\Firefox\Profiles\7h855vbo.default\Extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7} [2014-01-29]
FF Extension: Ghostery - C:\Users\Henning\AppData\Roaming\Mozilla\Firefox\Profiles\7h855vbo.default\Extensions\firefox@ghostery.com.xpi [2014-01-29]
FF Extension: Toggle Proxy - C:\Users\Henning\AppData\Roaming\Mozilla\Firefox\Profiles\7h855vbo.default\Extensions\toggleproxy@quirkyquipu.co.uk.xpi [2014-01-30]
FF Extension: NoScript - C:\Users\Henning\AppData\Roaming\Mozilla\Firefox\Profiles\7h855vbo.default\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi [2014-01-29]
FF Extension: Adblock Plus - C:\Users\Henning\AppData\Roaming\Mozilla\Firefox\Profiles\7h855vbo.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-01-29]
==================== Services (Whitelisted) =================
R2 MsMpSvc; C:\Program Files\Microsoft Security Client\MsMpEng.exe [23808 2013-10-23] (Microsoft Corporation)
S3 NisSrv; C:\Program Files\Microsoft Security Client\NisSrv.exe [348376 2013-10-23] (Microsoft Corporation)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1593632 2014-01-21] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [16939296 2014-01-21] (NVIDIA Corporation)
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76888 2014-01-07] ()
==================== Drivers (Whitelisted) ====================
S3 avmeject; C:\Windows\System32\drivers\avmeject.sys [14120 2010-10-22] (AVM Berlin)
R3 FWLANUSB; C:\Windows\System32\DRIVERS\fwlanusb.sys [460800 2010-10-22] (AVM GmbH)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [248240 2013-09-27] (Microsoft Corporation)
S3 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [134944 2013-09-27] (Microsoft Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [39200 2013-12-27] (NVIDIA Corporation)
R1 Serial; C:\Windows\System32\DRIVERS\serial.sys [94208 2009-07-14] (Brother Industries Ltd.)
S3 NTIOLib_1_0_4; \??\C:\Program Files (x86)\MSI\Live Update 5\NTIOLib_X64.sys [X]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2014-02-06 18:36 - 2014-02-06 18:36 - 00000783 _____ () C:\Users\Henning\Desktop\JRT.txt
2014-02-06 18:32 - 2014-02-06 18:32 - 00000852 _____ () C:\Users\Henning\Desktop\AdwCleaner[S0].txt
2014-02-06 18:30 - 2014-02-06 18:31 - 00000000 ____D () C:\AdwCleaner
2014-02-06 18:29 - 2014-02-06 18:29 - 01037530 _____ (Thisisu) C:\Users\Henning\Desktop\JRT.exe
2014-02-06 18:29 - 2014-02-06 18:28 - 01166132 _____ () C:\Users\Henning\Desktop\adwcleaner.exe
2014-02-06 17:06 - 2014-02-06 17:06 - 00001848 _____ () C:\Users\Henning\Desktop\GMER.log
2014-02-06 16:57 - 2014-02-06 18:38 - 00008256 _____ () C:\Users\Henning\Desktop\FRST.txt
2014-02-06 16:57 - 2014-02-06 16:51 - 02082304 _____ (Farbar) C:\Users\Henning\Desktop\FRST64.exe
2014-02-06 16:57 - 2014-02-06 16:51 - 00380416 _____ () C:\Users\Henning\Desktop\4woorksk.exe
2014-02-06 16:57 - 2014-02-06 16:50 - 00050477 _____ () C:\Users\Henning\Desktop\Defogger.exe
2014-02-06 16:56 - 2014-02-06 18:38 - 00000000 ____D () C:\FRST
2014-02-06 16:55 - 2014-02-06 16:55 - 00000000 _____ () C:\Users\Henning\defogger_reenable
2014-02-04 06:55 - 2014-02-04 06:55 - 00000000 _____ () C:\Users\Henning\Desktop\MBAM .txt
2014-02-01 16:37 - 2014-02-01 16:37 - 00000000 ____D () C:\Windows\SysWOW64\RTCOM
2014-02-01 16:37 - 2014-02-01 16:37 - 00000000 ____D () C:\Program Files\Realtek
2014-02-01 16:37 - 2013-11-05 19:47 - 03707864 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RTKVHD64.sys
2014-02-01 16:37 - 2013-11-05 15:48 - 00681905 _____ () C:\Windows\system32\Drivers\RTAIODAT.DAT
2014-02-01 16:37 - 2013-11-04 19:26 - 00153304 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoInstII64.dll
2014-02-01 16:37 - 2013-11-04 11:11 - 02587864 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkAPO64.dll
2014-02-01 16:37 - 2013-10-28 17:29 - 01021656 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkApi64.dll
2014-02-01 16:37 - 2013-10-18 16:41 - 01286360 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTCOM64.dll
2014-02-01 16:37 - 2013-10-16 03:43 - 00209096 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAC64.dll
2014-02-01 16:37 - 2013-10-11 12:47 - 00113576 _____ (Real Sound Lab SIA) C:\Windows\system32\CONEQMSAPOGUILibrary.dll
2014-02-01 16:37 - 2013-10-09 20:12 - 02103040 _____ (Waves Audio Ltd.) C:\Windows\system32\WavesGUILib64.dll
2014-02-01 16:37 - 2013-10-09 20:12 - 02036992 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioEQ64.dll
2014-02-01 16:37 - 2013-10-09 20:12 - 01012992 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPOShell64.dll
2014-02-01 16:37 - 2013-10-07 11:05 - 02810072 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtPgEx64.dll
2014-02-01 16:37 - 2013-10-02 17:10 - 00617176 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtDataProc64.dll
2014-02-01 16:37 - 2013-09-13 18:44 - 02080472 _____ (Realtek Semiconductor Corp.) C:\Windows\RtlExUpd.dll
2014-02-01 16:37 - 2013-08-05 18:11 - 02743328 _____ (Fortemedia Corporation) C:\Windows\system32\FMAPO64.dll
2014-02-01 16:37 - 2013-07-30 14:04 - 00397080 _____ (Creative Technology Ltd.) C:\Windows\system32\MBWrp64.dll
2014-02-01 16:37 - 2013-04-24 17:16 - 01662024 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTSnMg64.cpl
2014-02-01 16:37 - 2013-01-11 16:27 - 00628504 _____ (Creative Technology Ltd.) C:\Windows\system32\MBTHX64.dll
2014-02-01 16:37 - 2013-01-11 16:27 - 00563992 _____ (Creative Technology Ltd.) C:\Windows\SysWOW64\MBTHX32.dll
2014-02-01 16:37 - 2012-03-08 11:47 - 00108640 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAR64.dll
2014-02-01 16:37 - 2011-12-20 15:32 - 00331880 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtlCPAPI64.dll
2014-02-01 16:37 - 2011-11-22 16:28 - 00014952 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCoLDR64.dll
2014-02-01 16:37 - 2010-11-08 07:31 - 00375128 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEP64A.dll
2014-02-01 16:37 - 2010-11-08 07:31 - 00310104 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DHT64.dll
2014-02-01 16:37 - 2010-11-08 07:31 - 00310104 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DAA64.dll
2014-02-01 16:37 - 2010-11-08 07:31 - 00204120 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEED64A.dll
2014-02-01 16:37 - 2010-11-08 07:31 - 00101208 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEL64A.dll
2014-02-01 16:37 - 2010-11-08 07:31 - 00078680 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEG64A.dll
2014-02-01 16:37 - 2010-11-03 18:30 - 00149608 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCfg64.dll
2014-02-01 16:37 - 2010-09-27 09:34 - 00318808 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO20.dll
2014-02-01 16:37 - 2009-11-24 09:55 - 00518896 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSX64.dll
2014-02-01 16:37 - 2009-11-24 09:55 - 00211184 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSH64.dll
2014-02-01 16:37 - 2009-11-24 09:55 - 00198896 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSHP64.dll
2014-02-01 16:37 - 2009-11-24 09:55 - 00155888 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSWOW64.dll
2014-02-01 16:37 - 2009-11-18 07:12 - 00032344 _____ (Creative Technology Ltd.) C:\Windows\system32\Drivers\MBfilt64.sys
2014-02-01 16:27 - 2014-02-01 16:27 - 00000146 _____ () C:\Users\Henning\Desktop\Sound.lnk
2014-01-30 12:51 - 2014-01-30 12:51 - 00000000 ____D () C:\Program Files (x86)\AGEIA Technologies
2014-01-30 12:51 - 2014-01-15 23:35 - 00599840 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe
2014-01-30 12:46 - 2014-01-16 00:13 - 31421216 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2014-01-30 12:46 - 2014-01-16 00:13 - 25255200 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2014-01-30 12:46 - 2014-01-16 00:13 - 23672096 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2014-01-30 12:46 - 2014-01-16 00:13 - 17714760 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2014-01-30 12:46 - 2014-01-16 00:13 - 17560352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2014-01-30 12:46 - 2014-01-16 00:13 - 12668192 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2014-01-30 12:46 - 2014-01-16 00:13 - 11631544 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2014-01-30 12:46 - 2014-01-16 00:13 - 11583616 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2014-01-30 12:46 - 2014-01-16 00:13 - 09723944 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2014-01-30 12:46 - 2014-01-16 00:13 - 09686304 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2014-01-30 12:46 - 2014-01-16 00:13 - 03142432 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2014-01-30 12:46 - 2014-01-16 00:13 - 02956576 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2014-01-30 12:46 - 2014-01-16 00:13 - 02782496 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll
2014-01-30 12:46 - 2014-01-16 00:13 - 02410784 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll
2014-01-30 12:46 - 2014-01-16 00:13 - 01885472 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6433467.dll
2014-01-30 12:46 - 2014-01-16 00:13 - 01515296 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6433467.dll
2014-01-30 12:46 - 2014-01-16 00:13 - 00892704 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2014-01-30 12:46 - 2014-01-16 00:13 - 00892192 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2014-01-30 12:46 - 2014-01-16 00:13 - 00863520 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2014-01-30 12:46 - 2014-01-16 00:13 - 00859936 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2014-01-30 12:46 - 2014-01-16 00:13 - 00832424 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2014-01-30 12:46 - 2014-01-16 00:13 - 00483104 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll
2014-01-30 12:46 - 2014-01-16 00:13 - 00408352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll
2014-01-30 12:46 - 2014-01-16 00:13 - 00378656 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFROpenGL.dll
2014-01-30 12:46 - 2014-01-16 00:13 - 00353504 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2014-01-30 12:46 - 2014-01-16 00:13 - 00333600 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFROpenGL.dll
2014-01-30 12:46 - 2014-01-16 00:13 - 00305600 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2014-01-30 12:46 - 2014-01-16 00:13 - 00174296 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2014-01-30 12:46 - 2014-01-16 00:13 - 00148016 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2014-01-30 12:45 - 2014-01-30 12:45 - 00000000 ____D () C:\NVIDIA
2014-01-30 12:32 - 2013-12-27 19:42 - 00039200 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys
2014-01-30 12:32 - 2013-12-27 19:42 - 00033056 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll
2014-01-30 10:41 - 2014-02-06 18:35 - 00007645 _____ () C:\Windows\setupact.log
2014-01-30 10:41 - 2014-01-30 10:41 - 00000000 _____ () C:\Windows\setuperr.log
2014-01-29 14:12 - 2014-01-29 14:12 - 00000085 _____ () C:\Windows\wininit.ini
2014-01-29 14:07 - 2014-02-06 17:47 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-01-29 14:07 - 2014-02-05 21:47 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-01-29 13:55 - 2014-01-29 14:12 - 00000000 ____D () C:\ProgramData\Spybot - Search & Destroy
2014-01-29 13:55 - 2014-01-29 13:55 - 00000000 ____D () C:\Windows\System32\Tasks\Safer-Networking
2014-01-29 06:47 - 2014-01-29 06:47 - 00000000 ____D () C:\Users\Henning\AppData\Roaming\Mozilla
2014-01-29 06:47 - 2014-01-29 06:47 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-01-29 06:46 - 2014-01-29 06:47 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-01-28 23:06 - 2014-01-28 23:06 - 00000000 ____D () C:\Windows\ERUNT
2014-01-28 22:50 - 2014-01-28 22:50 - 00005298 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_51-b13.log
2014-01-28 22:50 - 2014-01-28 22:50 - 00000000 ____D () C:\ProgramData\Oracle
2014-01-28 21:49 - 2014-01-28 22:50 - 00000000 ____D () C:\Program Files (x86)\Java
2014-01-28 21:49 - 2014-01-28 21:49 - 00000000 ____D () C:\ProgramData\Sun
2014-01-28 21:49 - 2013-12-18 21:09 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-01-28 21:49 - 2013-12-18 21:04 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-01-28 21:49 - 2013-12-18 21:04 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-01-28 21:49 - 2013-12-18 21:03 - 00174504 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-01-28 21:48 - 2014-01-28 21:52 - 00000000 ____D () C:\ProgramData\WPM
2014-01-27 18:11 - 2014-01-27 18:11 - 00002776 _____ () C:\Windows\System32\Tasks\CCleanerSkipUAC
2014-01-27 18:11 - 2014-01-27 18:11 - 00000000 ____D () C:\Program Files\CCleaner
2014-01-26 20:05 - 2014-02-06 18:34 - 00413118 _____ () C:\Windows\WindowsUpdate.log
2014-01-24 19:28 - 2010-10-22 02:00 - 00480632 ____N (AVM Berlin) C:\Windows\instwcli.dex
2014-01-17 21:56 - 2014-01-17 21:56 - 00000000 ____D () C:\Users\Henning\AppData\Local\Blizzard
2014-01-17 21:29 - 2014-01-27 10:36 - 00000000 ____D () C:\Users\Henning\AppData\Local\Battle.net
2014-01-17 21:29 - 2014-01-17 21:37 - 00000000 ____D () C:\Users\Henning\AppData\Roaming\Battle.net
2014-01-17 21:29 - 2014-01-17 21:29 - 00000000 ____D () C:\Users\Henning\AppData\Local\Blizzard Entertainment
2014-01-17 21:29 - 2014-01-17 21:29 - 00000000 ____D () C:\ProgramData\Blizzard Entertainment
2014-01-17 21:27 - 2014-01-17 21:27 - 00000000 ____D () C:\ProgramData\Battle.net
2014-01-16 22:14 - 2014-01-16 22:14 - 00000000 ____D () C:\Users\Henning\AppData\Roaming\Mp3tag
2014-01-16 22:02 - 2014-01-16 22:02 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdFs_01_09_00.Wdf
2014-01-15 15:34 - 2013-11-26 12:40 - 00376768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2014-01-15 15:32 - 2013-11-27 02:41 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2014-01-15 15:32 - 2013-11-27 02:41 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2014-01-15 15:32 - 2013-11-27 02:41 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2014-01-15 15:32 - 2013-11-27 02:41 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2014-01-15 15:32 - 2013-11-27 02:41 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2014-01-15 15:32 - 2013-11-27 02:41 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys
2014-01-15 15:32 - 2013-11-27 02:41 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2014-01-15 15:32 - 2013-11-26 11:32 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-01-15 06:41 - 2014-01-15 06:41 - 00000000 ____D () C:\Windows\pss
2014-01-13 00:58 - 2014-01-13 00:58 - 00000000 ____D () C:\Windows\SysWOW64\directx
2014-01-13 00:58 - 2014-01-13 00:58 - 00000000 ____D () C:\Program Files (x86)\Microsoft XNA
2014-01-11 22:27 - 2014-01-11 22:27 - 00000000 ____D () C:\Windows\46ED2B6485C74E1F920CA555B21F2E4C.TMP
2014-01-10 22:15 - 2014-01-10 22:15 - 00000000 ____D () C:\Users\Henning\AppData\Roaming\SumatraPDF
2014-01-10 01:56 - 2014-01-10 01:59 - 00000000 ____D () C:\Users\Henning\AppData\Local\GOG.com
2014-01-09 16:34 - 2012-08-22 10:19 - 00011832 _____ (Windows (R) Codename Longhorn DDK provider) C:\Windows\acpimof.dll
2014-01-09 00:39 - 2014-01-09 00:39 - 00000049 _____ () C:\Windows\11993802
2014-01-09 00:39 - 2014-01-09 00:39 - 00000000 ____D () C:\Users\Henning\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\EVE
2014-01-08 23:36 - 2014-02-05 17:44 - 00000000 ____D () C:\Users\Henning\AppData\Roaming\EVEMon
2014-01-08 23:36 - 2014-01-08 23:36 - 00000000 ____D () C:\Users\Henning\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\EVEMon
2014-01-08 23:35 - 2014-01-08 23:35 - 00000000 ____D () C:\Users\Henning\AppData\Local\CCP
2014-01-08 17:27 - 2010-07-21 23:08 - 01864192 _____ (Microsoft Corporation) C:\Windows\system32\ExplorerFrame.dll
2014-01-08 17:09 - 2010-11-20 14:27 - 02851840 _____ (Microsoft Corporation) C:\Windows\system32\themeui.dll.backup
2014-01-08 17:09 - 2009-07-14 02:41 - 00332288 _____ (Microsoft Corporation) C:\Windows\system32\uxtheme.dll.backup
2014-01-08 17:09 - 2009-07-14 02:41 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\themeservice.dll.backup
2014-01-07 23:12 - 2014-01-07 23:15 - 00001164 _____ () C:\Users\Henning\Desktop\Transaktionen.lnk
2014-01-07 23:12 - 2014-01-07 23:14 - 00001102 _____ () C:\Users\Henning\Desktop\*.lnk
2014-01-07 22:45 - 2014-01-07 22:45 - 00001382 _____ () C:\Users\Henning\Desktop\GeForce Experience.lnk
2014-01-07 20:10 - 2014-01-07 20:10 - 00000000 ____D () C:\Users\Henning\AppData\Local\PunkBuster
2014-01-07 18:54 - 2014-01-07 18:54 - 00000000 ____D () C:\Users\Henning\AppData\Local\ESN
2014-01-07 18:43 - 2014-01-07 18:43 - 00000000 ____D () C:\Users\Henning\AppData\Roaming\WinRAR
2014-01-07 18:24 - 2014-01-16 00:13 - 15690744 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2014-01-07 18:24 - 2013-12-19 21:33 - 01884448 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6433221.dll
2014-01-07 18:24 - 2013-12-19 21:33 - 01511712 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6433221.dll
2014-01-07 18:24 - 2013-11-28 14:38 - 00197408 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvhda64v.sys
2014-01-07 18:24 - 2013-11-28 14:38 - 00031520 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdap64.dll
2014-01-07 18:24 - 2013-11-22 09:36 - 01515296 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdagenco6420103.dll
2014-01-07 17:45 - 2014-01-07 17:45 - 00000000 ___SD () C:\Users\Henning\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OpenOffice 4.0.1
2014-01-07 17:45 - 2014-01-07 17:45 - 00000000 ____D () C:\Users\Henning\AppData\Roaming\OpenOffice
2014-01-07 17:35 - 2014-01-07 17:35 - 00000000 ____D () C:\Users\Henning\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2014-01-07 17:34 - 2014-01-07 17:34 - 00000000 ____D () C:\Program Files\WinRAR
2014-01-07 17:25 - 2014-01-07 17:25 - 00000000 ____D () C:\Program Files\Microsoft Security Client
2014-01-07 17:25 - 2014-01-07 17:25 - 00000000 ____D () C:\Program Files (x86)\Microsoft Security Client
2014-01-07 17:06 - 2014-01-07 17:25 - 00001912 _____ () C:\Windows\epplauncher.mif
2014-01-07 11:37 - 2014-01-08 06:34 - 00000000 ____D () C:\Program Files (x86)\Battlelog Web Plugins
2014-01-07 11:36 - 2014-01-11 01:57 - 00214392 _____ () C:\Windows\SysWOW64\PnkBstrB.exe
2014-01-07 11:36 - 2014-01-10 22:31 - 00214392 _____ () C:\Windows\SysWOW64\PnkBstrB.ex0
2014-01-07 11:36 - 2014-01-07 11:36 - 00076888 _____ () C:\Windows\SysWOW64\PnkBstrA.exe
2014-01-07 11:36 - 2014-01-07 11:36 - 00000000 ____D () C:\ProgramData\Package Cache
2014-01-07 11:36 - 2010-06-02 04:55 - 00527192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_7.dll
2014-01-07 11:36 - 2010-06-02 04:55 - 00518488 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_7.dll
2014-01-07 11:36 - 2010-06-02 04:55 - 00239960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_7.dll
2014-01-07 11:36 - 2010-06-02 04:55 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_7.dll
2014-01-07 11:36 - 2010-06-02 04:55 - 00077656 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_5.dll
2014-01-07 11:36 - 2010-06-02 04:55 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_5.dll
2014-01-07 11:36 - 2010-05-26 11:41 - 02526056 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_43.dll
2014-01-07 11:36 - 2010-05-26 11:41 - 02106216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_43.dll
2014-01-07 11:36 - 2010-05-26 11:41 - 01907552 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_43.dll
2014-01-07 11:36 - 2010-05-26 11:41 - 01868128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_43.dll
2014-01-07 11:36 - 2010-02-04 10:01 - 00530776 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_6.dll
2014-01-07 11:36 - 2010-02-04 10:01 - 00528216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_6.dll
2014-01-07 11:36 - 2010-02-04 10:01 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_6.dll
2014-01-07 11:36 - 2010-02-04 10:01 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_6.dll
2014-01-07 11:36 - 2010-02-04 10:01 - 00078680 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_4.dll
2014-01-07 11:36 - 2010-02-04 10:01 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_4.dll
2014-01-07 11:36 - 2010-02-04 10:01 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_7.dll
2014-01-07 11:36 - 2010-02-04 10:01 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_7.dll
2014-01-07 11:36 - 2009-09-04 17:44 - 00517960 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_5.dll
2014-01-07 11:36 - 2009-09-04 17:44 - 00515416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_5.dll
2014-01-07 11:36 - 2009-09-04 17:44 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_5.dll
2014-01-07 11:36 - 2009-09-04 17:44 - 00176968 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_5.dll
2014-01-07 11:36 - 2009-09-04 17:44 - 00073544 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_3.dll
2014-01-07 11:36 - 2009-09-04 17:44 - 00069464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_3.dll
2014-01-07 11:36 - 2009-09-04 17:29 - 05554512 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_42.dll
2014-01-07 11:36 - 2009-09-04 17:29 - 05501792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_42.dll
2014-01-07 11:36 - 2009-09-04 17:29 - 02582888 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_42.dll
2014-01-07 11:36 - 2009-09-04 17:29 - 02475352 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_42.dll
2014-01-07 11:36 - 2009-09-04 17:29 - 01974616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_42.dll
2014-01-07 11:36 - 2009-09-04 17:29 - 00523088 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_42.dll
2014-01-07 11:36 - 2009-09-04 17:29 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_42.dll
2014-01-07 11:36 - 2009-09-04 17:29 - 00285024 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_42.dll
2014-01-07 11:36 - 2009-09-04 17:29 - 00235344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_42.dll
2014-01-07 11:36 - 2009-03-16 14:18 - 00521560 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_4.dll
2014-01-07 11:36 - 2009-03-16 14:18 - 00517448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_4.dll
2014-01-07 11:36 - 2009-03-16 14:18 - 00235352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_4.dll
2014-01-07 11:36 - 2009-03-16 14:18 - 00174936 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_4.dll
2014-01-07 11:36 - 2009-03-16 14:18 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_6.dll
2014-01-07 11:36 - 2009-03-16 14:18 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_6.dll
2014-01-07 11:36 - 2009-03-09 15:27 - 05425496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_41.dll
2014-01-07 11:36 - 2009-03-09 15:27 - 04178264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_41.dll
2014-01-07 11:36 - 2009-03-09 15:27 - 02430312 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_41.dll
2014-01-07 11:36 - 2009-03-09 15:27 - 01846632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_41.dll
2014-01-07 11:36 - 2009-03-09 15:27 - 00520544 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_41.dll
2014-01-07 11:36 - 2009-03-09 15:27 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_41.dll
2014-01-07 11:36 - 2008-10-27 10:04 - 00518480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_3.dll
2014-01-07 11:36 - 2008-10-27 10:04 - 00514384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_3.dll
2014-01-07 11:36 - 2008-10-27 10:04 - 00235856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_3.dll
2014-01-07 11:36 - 2008-10-27 10:04 - 00175440 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_3.dll
2014-01-07 11:36 - 2008-10-27 10:04 - 00074576 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_2.dll
2014-01-07 11:36 - 2008-10-27 10:04 - 00070992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_2.dll
2014-01-07 11:36 - 2008-10-27 10:04 - 00025936 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_5.dll
2014-01-07 11:36 - 2008-10-27 10:04 - 00023376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_5.dll
2014-01-07 11:36 - 2008-10-15 06:22 - 05631312 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_40.dll
2014-01-07 11:36 - 2008-10-15 06:22 - 04379984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_40.dll
2014-01-07 11:36 - 2008-10-15 06:22 - 02605920 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_40.dll
2014-01-07 11:36 - 2008-10-15 06:22 - 02036576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_40.dll
2014-01-07 11:36 - 2008-10-15 06:22 - 00519000 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_40.dll
2014-01-07 11:36 - 2008-10-15 06:22 - 00452440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_40.dll
2014-01-07 11:36 - 2008-07-31 10:41 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_2.dll
2014-01-07 11:36 - 2008-07-31 10:41 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_2.dll
2014-01-07 11:36 - 2008-07-31 10:41 - 00072200 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_1.dll
2014-01-07 11:36 - 2008-07-31 10:41 - 00068616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_1.dll
2014-01-07 11:36 - 2008-07-31 10:40 - 00513544 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_2.dll
2014-01-07 11:36 - 2008-07-31 10:40 - 00509448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_2.dll
2014-01-07 11:36 - 2008-07-10 11:01 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_39.dll
2014-01-07 11:36 - 2008-07-10 11:00 - 04992520 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_39.dll
2014-01-07 11:36 - 2008-07-10 11:00 - 03851784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_39.dll
2014-01-07 11:36 - 2008-07-10 11:00 - 01942552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_39.dll
2014-01-07 11:36 - 2008-07-10 11:00 - 01493528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_39.dll
2014-01-07 11:36 - 2008-07-10 11:00 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_39.dll
2014-01-07 11:36 - 2008-05-30 14:19 - 00511496 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_1.dll
2014-01-07 11:36 - 2008-05-30 14:19 - 00507400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_1.dll
2014-01-07 11:36 - 2008-05-30 14:18 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_1.dll
2014-01-07 11:36 - 2008-05-30 14:18 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_1.dll
2014-01-07 11:36 - 2008-05-30 14:17 - 00068104 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_0.dll
2014-01-07 11:36 - 2008-05-30 14:17 - 00065032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_0.dll
2014-01-07 11:36 - 2008-05-30 14:17 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_4.dll
2014-01-07 11:36 - 2008-05-30 14:16 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_4.dll
2014-01-07 11:36 - 2008-05-30 14:11 - 04991496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_38.dll
2014-01-07 11:36 - 2008-05-30 14:11 - 03850760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_38.dll
2014-01-07 11:36 - 2008-05-30 14:11 - 01941528 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_38.dll
2014-01-07 11:36 - 2008-05-30 14:11 - 01491992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_38.dll
2014-01-07 11:36 - 2008-05-30 14:11 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_38.dll
2014-01-07 11:36 - 2008-05-30 14:11 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_38.dll
2014-01-07 11:36 - 2008-03-05 16:04 - 00489480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_0.dll
2014-01-07 11:36 - 2008-03-05 16:03 - 00479752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_0.dll
2014-01-07 11:36 - 2008-03-05 16:03 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_0.dll
2014-01-07 11:36 - 2008-03-05 16:03 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_0.dll
2014-01-07 11:36 - 2008-03-05 16:00 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_3.dll
2014-01-07 11:36 - 2008-03-05 16:00 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_3.dll
2014-01-07 11:36 - 2008-03-05 15:56 - 04910088 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_37.dll
2014-01-07 11:36 - 2008-03-05 15:56 - 03786760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_37.dll
2014-01-07 11:36 - 2008-03-05 15:56 - 01860120 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_37.dll
2014-01-07 11:36 - 2008-03-05 15:56 - 01420824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_37.dll
2014-01-07 11:36 - 2008-02-05 23:07 - 00529424 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_37.dll
2014-01-07 11:36 - 2008-02-05 23:07 - 00462864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_37.dll
2014-01-07 11:36 - 2007-10-22 03:40 - 00411656 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_10.dll
2014-01-07 11:36 - 2007-10-22 03:39 - 00267272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_10.dll
2014-01-07 11:36 - 2007-10-22 03:37 - 00021000 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_2.dll
2014-01-07 11:36 - 2007-10-22 03:37 - 00017928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_2.dll
2014-01-07 11:36 - 2007-10-12 15:14 - 05081608 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_36.dll
2014-01-07 11:36 - 2007-10-12 15:14 - 03734536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_36.dll
2014-01-07 11:36 - 2007-10-12 15:14 - 02006552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_36.dll
2014-01-07 11:36 - 2007-10-12 15:14 - 01374232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_36.dll
2014-01-07 11:36 - 2007-10-02 09:56 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_36.dll
2014-01-07 11:36 - 2007-10-02 09:56 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_36.dll
2014-01-07 11:36 - 2007-07-20 00:57 - 00411496 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_9.dll
2014-01-07 11:36 - 2007-07-20 00:57 - 00267112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_9.dll
2014-01-07 11:36 - 2007-07-19 18:14 - 05073256 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_35.dll
2014-01-07 11:36 - 2007-07-19 18:14 - 03727720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_35.dll
2014-01-07 11:36 - 2007-07-19 18:14 - 01985904 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_35.dll
2014-01-07 11:36 - 2007-07-19 18:14 - 01358192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_35.dll
2014-01-07 11:36 - 2007-07-19 18:14 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_35.dll
2014-01-07 11:36 - 2007-07-19 18:14 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_35.dll
2014-01-07 11:36 - 2007-06-20 20:49 - 00409960 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_8.dll
2014-01-07 11:36 - 2007-06-20 20:46 - 00266088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_8.dll
2014-01-07 11:36 - 2007-05-16 16:45 - 04496232 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_34.dll
2014-01-07 11:36 - 2007-05-16 16:45 - 03497832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_34.dll
2014-01-07 11:36 - 2007-05-16 16:45 - 01401200 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_34.dll
2014-01-07 11:36 - 2007-05-16 16:45 - 01124720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_34.dll
2014-01-07 11:36 - 2007-05-16 16:45 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_34.dll
2014-01-07 11:36 - 2007-05-16 16:45 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_34.dll
2014-01-07 11:36 - 2007-04-04 18:55 - 00403304 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_7.dll
2014-01-07 11:36 - 2007-04-04 18:55 - 00261480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_7.dll
2014-01-07 11:36 - 2007-04-04 18:54 - 00107368 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_3.dll
2014-01-07 11:36 - 2007-04-04 18:53 - 00081768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_3.dll
2014-01-07 11:36 - 2007-03-15 16:57 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_33.dll
2014-01-07 11:36 - 2007-03-15 16:57 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_33.dll
2014-01-07 11:36 - 2007-03-12 16:42 - 04494184 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_33.dll
2014-01-07 11:36 - 2007-03-12 16:42 - 03495784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_33.dll
2014-01-07 11:36 - 2007-03-12 16:42 - 01400176 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_33.dll
2014-01-07 11:36 - 2007-03-12 16:42 - 01123696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_33.dll
2014-01-07 11:36 - 2007-03-05 12:42 - 00017688 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_1.dll
2014-01-07 11:36 - 2007-03-05 12:42 - 00015128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_1.dll
2014-01-07 11:36 - 2007-01-24 15:27 - 00393576 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_6.dll
2014-01-07 11:36 - 2007-01-24 15:27 - 00255848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_6.dll
2014-01-07 11:36 - 2006-12-08 12:02 - 00251672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_5.dll
2014-01-07 11:36 - 2006-12-08 12:00 - 00390424 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_5.dll
2014-01-07 11:36 - 2006-11-29 13:06 - 04398360 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_32.dll
2014-01-07 11:36 - 2006-11-29 13:06 - 03426072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_32.dll
2014-01-07 11:36 - 2006-11-29 13:06 - 00469264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10.dll
2014-01-07 11:36 - 2006-11-29 13:06 - 00440080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10.dll
2014-01-07 11:36 - 2006-09-28 16:05 - 03977496 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_31.dll
2014-01-07 11:36 - 2006-09-28 16:05 - 00237848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_4.dll
2014-01-07 11:36 - 2006-09-28 16:04 - 00364824 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_4.dll
2014-01-07 11:36 - 2006-07-28 09:31 - 00083736 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_2.dll
2014-01-07 11:36 - 2006-07-28 09:30 - 00363288 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_3.dll
2014-01-07 11:36 - 2006-07-28 09:30 - 00236824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_3.dll
2014-01-07 11:36 - 2006-07-28 09:30 - 00062744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_2.dll
2014-01-07 11:36 - 2006-05-31 07:24 - 00230168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_2.dll
2014-01-07 11:36 - 2006-05-31 07:22 - 00354072 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_2.dll
2014-01-07 11:36 - 2006-03-31 12:41 - 03927248 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_30.dll
2014-01-07 11:36 - 2006-03-31 12:40 - 02388176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_30.dll
2014-01-07 11:36 - 2006-03-31 12:40 - 00352464 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_1.dll
2014-01-07 11:36 - 2006-03-31 12:39 - 00229584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_1.dll
2014-01-07 11:36 - 2006-03-31 12:39 - 00083664 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_1.dll
2014-01-07 11:36 - 2006-03-31 12:39 - 00062672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_1.dll
2014-01-07 11:36 - 2006-02-03 08:43 - 03830992 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_29.dll
2014-01-07 11:36 - 2006-02-03 08:43 - 02332368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_29.dll
2014-01-07 11:36 - 2006-02-03 08:42 - 00355536 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_0.dll
2014-01-07 11:36 - 2006-02-03 08:42 - 00230096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_0.dll
2014-01-07 11:36 - 2006-02-03 08:41 - 00016592 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_0.dll
2014-01-07 11:36 - 2006-02-03 08:41 - 00014032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_0.dll
2014-01-07 11:36 - 2005-12-05 18:09 - 03815120 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_28.dll
2014-01-07 11:36 - 2005-12-05 18:09 - 02323664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_28.dll
2014-01-07 11:36 - 2005-07-22 19:59 - 03807440 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_27.dll
2014-01-07 11:36 - 2005-07-22 19:59 - 02319568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_27.dll
2014-01-07 11:36 - 2005-05-26 15:34 - 03767504 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_26.dll
2014-01-07 11:36 - 2005-05-26 15:34 - 02297552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_26.dll
2014-01-07 11:36 - 2005-03-18 17:19 - 03823312 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_25.dll
2014-01-07 11:36 - 2005-03-18 17:19 - 02337488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_25.dll
2014-01-07 11:36 - 2005-02-05 19:45 - 03544272 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_24.dll
2014-01-07 11:36 - 2005-02-05 19:45 - 02222800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_24.dll
2014-01-07 06:22 - 2014-02-05 20:40 - 00000873 _____ () C:\Users\Henning\Dokumente\Desktop.txt
2014-01-07 06:22 - 2014-02-01 22:04 - 00005804 _____ () C:\Users\Henning\Dokumente\Transaktionen.txt
2014-01-07 06:22 - 2014-01-18 15:05 - 00000000 ___RD () C:\Users\Henning\Dokumente
2014-01-07 06:22 - 2014-01-09 16:28 - 00000961 _____ () C:\Users\Henning\Dokumente\Rechner (2011).txt
2014-01-07 06:22 - 2014-01-07 23:13 - 00000346 _____ () C:\Users\Henning\Dokumente\formatC.txt
2014-01-07 06:22 - 2014-01-07 06:22 - 00000000 ____D () C:\Users\Henning\Dokumente\Witcher 2
2014-01-07 06:22 - 2014-01-07 06:22 - 00000000 ____D () C:\Users\Henning\Dokumente\My Games
2014-01-07 06:22 - 2014-01-07 06:22 - 00000000 ____D () C:\Users\Henning\Dokumente\GOG.com Downloads (alt)
2014-01-07 06:22 - 2014-01-07 06:22 - 00000000 ____D () C:\Users\Henning\Dokumente\EWS
2014-01-07 06:22 - 2014-01-07 06:22 - 00000000 ____D () C:\Users\Henning\Dokumente\EVE
2014-01-07 06:22 - 2014-01-07 06:22 - 00000000 ____D () C:\Users\Henning\Dokumente\BioWare
2014-01-07 06:22 - 2014-01-07 06:22 - 00000000 ____D () C:\Users\Henning\Dokumente\Battlefield 4
2014-01-07 06:22 - 2013-12-08 15:57 - 00000506 _____ () C:\Users\Henning\Dokumente\Berechnung der Kapazität.txt
2014-01-07 06:22 - 2013-04-21 09:26 - 00001394 _____ () C:\Users\Henning\Dokumente\Planescape Torment.txt
2014-01-07 06:22 - 2012-07-13 17:44 - 00000101 _____ () C:\Users\Henning\Dokumente\Windows von einer Zeitspanne abhängig herunterfahren.txt
2014-01-07 06:22 - 2012-06-17 09:26 - 00000770 _____ () C:\Users\Henning\Dokumente\Win7 VirtualStore.txt
2014-01-07 06:22 - 2011-06-02 12:13 - 00000285 _____ () C:\Users\Henning\Dokumente\FTP und mail.txt
2014-01-07 06:22 - 2011-04-27 23:31 - 00000674 _____ () C:\Users\Henning\Dokumente\Rechner (2009).txt
2014-01-07 06:22 - 2011-02-17 14:24 - 00000843 _____ () C:\Users\Henning\Dokumente\Reconnect Speedport W 722V, W 504V, W 920V.txt
2014-01-07 06:22 - 2011-02-16 12:57 - 00000185 _____ () C:\Users\Henning\Dokumente\TS-IPs.txt
2014-01-07 06:22 - 2010-01-12 20:53 - 00000000 _____ () C:\Users\Henning\Dokumente\ptbtime1.ptb.de.txt
2014-01-07 06:22 - 2009-12-24 22:17 - 00000131 _____ () C:\Users\Henning\Dokumente\TCOM.txt
2014-01-07 06:22 - 2009-08-15 21:41 - 00000110 _____ () C:\Users\Henning\Dokumente\Charles M. Schulz.txt
==================== One Month Modified Files and Folders =======
2014-02-06 18:38 - 2014-02-06 16:57 - 00008256 _____ () C:\Users\Henning\Desktop\FRST.txt
2014-02-06 18:38 - 2014-02-06 16:56 - 00000000 ____D () C:\FRST
2014-02-06 18:38 - 2014-01-26 20:05 - 00413118 _____ () C:\Windows\WindowsUpdate.log
2014-02-06 18:36 - 2014-02-06 18:36 - 00000783 _____ () C:\Users\Henning\Desktop\JRT.txt
2014-02-06 18:35 - 2014-01-30 10:41 - 00007645 _____ () C:\Windows\setupact.log
2014-02-06 18:35 - 2014-01-06 20:56 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-02-06 18:35 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-02-06 18:34 - 2009-07-14 05:45 - 00013552 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-02-06 18:34 - 2009-07-14 05:45 - 00013552 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-02-06 18:32 - 2014-02-06 18:32 - 00000852 _____ () C:\Users\Henning\Desktop\AdwCleaner[S0].txt
2014-02-06 18:31 - 2014-02-06 18:30 - 00000000 ____D () C:\AdwCleaner
2014-02-06 18:30 - 2014-01-06 23:09 - 00000000 ____D () C:\Users\Henning\AppData\Roaming\vlc
2014-02-06 18:29 - 2014-02-06 18:29 - 01037530 _____ (Thisisu) C:\Users\Henning\Desktop\JRT.exe
2014-02-06 18:28 - 2014-02-06 18:29 - 01166132 _____ () C:\Users\Henning\Desktop\adwcleaner.exe
2014-02-06 17:47 - 2014-01-29 14:07 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-02-06 17:06 - 2014-02-06 17:06 - 00001848 _____ () C:\Users\Henning\Desktop\GMER.log
2014-02-06 16:55 - 2014-02-06 16:55 - 00000000 _____ () C:\Users\Henning\defogger_reenable
2014-02-06 16:55 - 2014-01-06 19:02 - 00000000 ____D () C:\Users\Henning
2014-02-06 16:51 - 2014-02-06 16:57 - 02082304 _____ (Farbar) C:\Users\Henning\Desktop\FRST64.exe
2014-02-06 16:51 - 2014-02-06 16:57 - 00380416 _____ () C:\Users\Henning\Desktop\4woorksk.exe
2014-02-06 16:50 - 2014-02-06 16:57 - 00050477 _____ () C:\Users\Henning\Desktop\Defogger.exe
2014-02-06 16:37 - 2014-01-06 21:39 - 00000000 ____D () C:\Program Files (x86)\Steam
2014-02-06 15:44 - 2009-07-14 18:58 - 00673882 _____ () C:\Windows\system32\perfh007.dat
2014-02-06 15:44 - 2009-07-14 18:58 - 00139022 _____ () C:\Windows\system32\perfc007.dat
2014-02-06 15:44 - 2009-07-14 06:13 - 01553918 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-02-05 21:47 - 2014-01-29 14:07 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-02-05 21:47 - 2014-01-06 22:28 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-02-05 21:47 - 2014-01-06 22:28 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-02-05 20:40 - 2014-01-07 06:22 - 00000873 _____ () C:\Users\Henning\Dokumente\Desktop.txt
2014-02-05 17:44 - 2014-01-08 23:36 - 00000000 ____D () C:\Users\Henning\AppData\Roaming\EVEMon
2014-02-04 06:55 - 2014-02-04 06:55 - 00000000 _____ () C:\Users\Henning\Desktop\MBAM .txt
2014-02-01 22:04 - 2014-01-07 06:22 - 00005804 _____ () C:\Users\Henning\Dokumente\Transaktionen.txt
2014-02-01 16:37 - 2014-02-01 16:37 - 00000000 ____D () C:\Windows\SysWOW64\RTCOM
2014-02-01 16:37 - 2014-02-01 16:37 - 00000000 ____D () C:\Program Files\Realtek
2014-02-01 16:37 - 2014-01-06 19:20 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-02-01 16:37 - 2014-01-06 19:20 - 00000000 ____D () C:\Program Files (x86)\Realtek
2014-02-01 16:27 - 2014-02-01 16:27 - 00000146 _____ () C:\Users\Henning\Desktop\Sound.lnk
2014-01-30 12:51 - 2014-01-30 12:51 - 00000000 ____D () C:\Program Files (x86)\AGEIA Technologies
2014-01-30 12:51 - 2014-01-06 20:56 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation
2014-01-30 12:45 - 2014-01-30 12:45 - 00000000 ____D () C:\NVIDIA
2014-01-30 10:41 - 2014-01-30 10:41 - 00000000 _____ () C:\Windows\setuperr.log
2014-01-29 14:12 - 2014-01-29 14:12 - 00000085 _____ () C:\Windows\wininit.ini
2014-01-29 14:12 - 2014-01-29 13:55 - 00000000 ____D () C:\ProgramData\Spybot - Search & Destroy
2014-01-29 13:55 - 2014-01-29 13:55 - 00000000 ____D () C:\Windows\System32\Tasks\Safer-Networking
2014-01-29 06:47 - 2014-01-29 06:47 - 00000000 ____D () C:\Users\Henning\AppData\Roaming\Mozilla
2014-01-29 06:47 - 2014-01-29 06:47 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-01-29 06:47 - 2014-01-29 06:46 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-01-28 23:06 - 2014-01-28 23:06 - 00000000 ____D () C:\Windows\ERUNT
2014-01-28 22:50 - 2014-01-28 22:50 - 00005298 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_51-b13.log
2014-01-28 22:50 - 2014-01-28 22:50 - 00000000 ____D () C:\ProgramData\Oracle
2014-01-28 22:50 - 2014-01-28 21:49 - 00000000 ____D () C:\Program Files (x86)\Java
2014-01-28 21:52 - 2014-01-28 21:48 - 00000000 ____D () C:\ProgramData\WPM
2014-01-28 21:49 - 2014-01-28 21:49 - 00000000 ____D () C:\ProgramData\Sun
2014-01-27 18:11 - 2014-01-27 18:11 - 00002776 _____ () C:\Windows\System32\Tasks\CCleanerSkipUAC
2014-01-27 18:11 - 2014-01-27 18:11 - 00000000 ____D () C:\Program Files\CCleaner
2014-01-27 10:36 - 2014-01-17 21:29 - 00000000 ____D () C:\Users\Henning\AppData\Local\Battle.net
2014-01-24 06:46 - 2014-01-06 19:03 - 00000000 ___RD () C:\Users\Henning\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-01-21 06:39 - 2014-01-06 22:28 - 00000000 ____D () C:\Users\Henning\AppData\Local\Adobe
2014-01-21 03:53 - 2014-01-06 20:57 - 01179576 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll
2014-01-21 03:53 - 2014-01-06 20:57 - 01048152 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll
2014-01-19 08:33 - 2014-01-06 20:04 - 00270496 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2014-01-18 15:05 - 2014-01-07 06:22 - 00000000 ___RD () C:\Users\Henning\Dokumente
2014-01-18 13:08 - 2014-01-06 21:56 - 00000000 ____D () C:\Spiele
2014-01-17 21:56 - 2014-01-17 21:56 - 00000000 ____D () C:\Users\Henning\AppData\Local\Blizzard
2014-01-17 21:37 - 2014-01-17 21:29 - 00000000 ____D () C:\Users\Henning\AppData\Roaming\Battle.net
2014-01-17 21:29 - 2014-01-17 21:29 - 00000000 ____D () C:\Users\Henning\AppData\Local\Blizzard Entertainment
2014-01-17 21:29 - 2014-01-17 21:29 - 00000000 ____D () C:\ProgramData\Blizzard Entertainment
2014-01-17 21:27 - 2014-01-17 21:27 - 00000000 ____D () C:\ProgramData\Battle.net
2014-01-16 22:14 - 2014-01-16 22:14 - 00000000 ____D () C:\Users\Henning\AppData\Roaming\Mp3tag
2014-01-16 22:02 - 2014-01-16 22:02 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdFs_01_09_00.Wdf
2014-01-16 00:13 - 2014-01-30 12:46 - 31421216 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2014-01-16 00:13 - 2014-01-30 12:46 - 25255200 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2014-01-16 00:13 - 2014-01-30 12:46 - 23672096 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2014-01-16 00:13 - 2014-01-30 12:46 - 17714760 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2014-01-16 00:13 - 2014-01-30 12:46 - 17560352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2014-01-16 00:13 - 2014-01-30 12:46 - 12668192 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2014-01-16 00:13 - 2014-01-30 12:46 - 11631544 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2014-01-16 00:13 - 2014-01-30 12:46 - 11583616 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2014-01-16 00:13 - 2014-01-30 12:46 - 09723944 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2014-01-16 00:13 - 2014-01-30 12:46 - 09686304 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2014-01-16 00:13 - 2014-01-30 12:46 - 03142432 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2014-01-16 00:13 - 2014-01-30 12:46 - 02956576 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2014-01-16 00:13 - 2014-01-30 12:46 - 02782496 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll
2014-01-16 00:13 - 2014-01-30 12:46 - 02410784 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll
2014-01-16 00:13 - 2014-01-30 12:46 - 01885472 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6433467.dll
2014-01-16 00:13 - 2014-01-30 12:46 - 01515296 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6433467.dll
2014-01-16 00:13 - 2014-01-30 12:46 - 00892704 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2014-01-16 00:13 - 2014-01-30 12:46 - 00892192 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2014-01-16 00:13 - 2014-01-30 12:46 - 00863520 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2014-01-16 00:13 - 2014-01-30 12:46 - 00859936 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2014-01-16 00:13 - 2014-01-30 12:46 - 00832424 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2014-01-16 00:13 - 2014-01-30 12:46 - 00483104 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll
2014-01-16 00:13 - 2014-01-30 12:46 - 00408352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll
2014-01-16 00:13 - 2014-01-30 12:46 - 00378656 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFROpenGL.dll
2014-01-16 00:13 - 2014-01-30 12:46 - 00353504 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2014-01-16 00:13 - 2014-01-30 12:46 - 00333600 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFROpenGL.dll
2014-01-16 00:13 - 2014-01-30 12:46 - 00305600 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2014-01-16 00:13 - 2014-01-30 12:46 - 00174296 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2014-01-16 00:13 - 2014-01-30 12:46 - 00148016 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2014-01-16 00:13 - 2014-01-07 18:24 - 15690744 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2014-01-16 00:13 - 2014-01-06 20:56 - 00061216 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll
2014-01-16 00:13 - 2014-01-06 20:56 - 00053024 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll
2014-01-16 00:13 - 2014-01-06 20:55 - 18184976 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll
2014-01-16 00:13 - 2014-01-06 20:55 - 14668008 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll
2014-01-16 00:13 - 2014-01-06 20:55 - 03087112 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
2014-01-16 00:13 - 2014-01-06 20:55 - 02711656 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
2014-01-16 00:13 - 2014-01-06 20:55 - 00947808 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll
2014-01-16 00:13 - 2014-01-06 20:55 - 00024544 _____ () C:\Windows\system32\nvinfo.pb
2014-01-15 23:35 - 2014-01-30 12:51 - 00599840 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe
2014-01-15 22:53 - 2014-01-06 20:56 - 06712608 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll
2014-01-15 22:53 - 2014-01-06 20:56 - 03498272 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll
2014-01-15 22:53 - 2014-01-06 20:56 - 02559776 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll
2014-01-15 22:53 - 2014-01-06 20:56 - 00923936 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
2014-01-15 22:53 - 2014-01-06 20:56 - 00386336 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll
2014-01-15 22:53 - 2014-01-06 20:56 - 00063776 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll
2014-01-15 17:57 - 2009-07-14 05:45 - 00287600 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-01-15 15:35 - 2014-01-06 19:52 - 86054176 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-01-15 15:35 - 2014-01-06 19:52 - 00000000 ____D () C:\Windows\system32\MRT
2014-01-15 06:41 - 2014-01-15 06:41 - 00000000 ____D () C:\Windows\pss
2014-01-13 23:31 - 2014-01-06 20:56 - 03559557 _____ () C:\Windows\system32\nvcoproc.bin
2014-01-13 00:58 - 2014-01-13 00:58 - 00000000 ____D () C:\Windows\SysWOW64\directx
2014-01-13 00:58 - 2014-01-13 00:58 - 00000000 ____D () C:\Program Files (x86)\Microsoft XNA
2014-01-11 22:27 - 2014-01-11 22:27 - 00000000 ____D () C:\Windows\46ED2B6485C74E1F920CA555B21F2E4C.TMP
2014-01-11 01:57 - 2014-01-07 11:36 - 00214392 _____ () C:\Windows\SysWOW64\PnkBstrB.exe
2014-01-11 01:55 - 2014-01-06 22:05 - 00000000 ____D () C:\Program Files (x86)\Origin
2014-01-10 22:31 - 2014-01-07 11:36 - 00214392 _____ () C:\Windows\SysWOW64\PnkBstrB.ex0
2014-01-10 22:15 - 2014-01-10 22:15 - 00000000 ____D () C:\Users\Henning\AppData\Roaming\SumatraPDF
2014-01-10 08:29 - 2014-01-06 20:09 - 00064840 _____ () C:\Users\Henning\AppData\Local\GDIPFONTCACHEV1.DAT
2014-01-10 01:59 - 2014-01-10 01:56 - 00000000 ____D () C:\Users\Henning\AppData\Local\GOG.com
2014-01-09 16:28 - 2014-01-07 06:22 - 00000961 _____ () C:\Users\Henning\Dokumente\Rechner (2011).txt
2014-01-09 00:39 - 2014-01-09 00:39 - 00000049 _____ () C:\Windows\11993802
2014-01-09 00:39 - 2014-01-09 00:39 - 00000000 ____D () C:\Users\Henning\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\EVE
2014-01-08 23:36 - 2014-01-08 23:36 - 00000000 ____D () C:\Users\Henning\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\EVEMon
2014-01-08 23:35 - 2014-01-08 23:35 - 00000000 ____D () C:\Users\Henning\AppData\Local\CCP
2014-01-08 19:22 - 2014-01-06 23:06 - 00000000 ____D () C:\Users\Henning\AppData\Roaming\Winamp
2014-01-08 19:17 - 2014-01-06 22:37 - 00000000 ____D () C:\Users\Henning\AppData\Roaming\NVIDIA
2014-01-08 17:09 - 2014-01-06 20:26 - 02851840 _____ (Microsoft Corporation) C:\Windows\system32\themeui.dll
2014-01-08 17:09 - 2009-07-14 00:55 - 00332288 _____ (Microsoft Corporation) C:\Windows\system32\uxtheme.dll
2014-01-08 17:09 - 2009-07-14 00:54 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\themeservice.dll
2014-01-08 06:34 - 2014-01-07 11:37 - 00000000 ____D () C:\Program Files (x86)\Battlelog Web Plugins
2014-01-07 23:15 - 2014-01-07 23:12 - 00001164 _____ () C:\Users\Henning\Desktop\Transaktionen.lnk
2014-01-07 23:14 - 2014-01-07 23:12 - 00001102 _____ () C:\Users\Henning\Desktop\*.lnk
2014-01-07 23:13 - 2014-01-07 06:22 - 00000346 _____ () C:\Users\Henning\Dokumente\formatC.txt
2014-01-07 22:45 - 2014-01-07 22:45 - 00001382 _____ () C:\Users\Henning\Desktop\GeForce Experience.lnk
2014-01-07 20:10 - 2014-01-07 20:10 - 00000000 ____D () C:\Users\Henning\AppData\Local\PunkBuster
2014-01-07 20:10 - 2014-01-06 22:06 - 00000000 ____D () C:\ProgramData\Origin
2014-01-07 20:10 - 2014-01-06 22:06 - 00000000 ____D () C:\ProgramData\Electronic Arts
2014-01-07 20:09 - 2014-01-06 22:06 - 00000000 ____D () C:\Users\Henning\AppData\Local\Origin
2014-01-07 18:54 - 2014-01-07 18:54 - 00000000 ____D () C:\Users\Henning\AppData\Local\ESN
2014-01-07 18:43 - 2014-01-07 18:43 - 00000000 ____D () C:\Users\Henning\AppData\Roaming\WinRAR
2014-01-07 17:45 - 2014-01-07 17:45 - 00000000 ___SD () C:\Users\Henning\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OpenOffice 4.0.1
2014-01-07 17:45 - 2014-01-07 17:45 - 00000000 ____D () C:\Users\Henning\AppData\Roaming\OpenOffice
2014-01-07 17:35 - 2014-01-07 17:35 - 00000000 ____D () C:\Users\Henning\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2014-01-07 17:34 - 2014-01-07 17:34 - 00000000 ____D () C:\Program Files\WinRAR
2014-01-07 17:25 - 2014-01-07 17:25 - 00000000 ____D () C:\Program Files\Microsoft Security Client
2014-01-07 17:25 - 2014-01-07 17:25 - 00000000 ____D () C:\Program Files (x86)\Microsoft Security Client
2014-01-07 17:25 - 2014-01-07 17:06 - 00001912 _____ () C:\Windows\epplauncher.mif
2014-01-07 11:36 - 2014-01-07 11:36 - 00076888 _____ () C:\Windows\SysWOW64\PnkBstrA.exe
2014-01-07 11:36 - 2014-01-07 11:36 - 00000000 ____D () C:\ProgramData\Package Cache
2014-01-07 07:05 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\rescache
2014-01-07 06:30 - 2014-01-06 22:06 - 00000000 ____D () C:\Users\Henning\AppData\Roaming\Origin
2014-01-07 06:22 - 2014-01-07 06:22 - 00000000 ____D () C:\Users\Henning\Dokumente\Witcher 2
2014-01-07 06:22 - 2014-01-07 06:22 - 00000000 ____D () C:\Users\Henning\Dokumente\My Games
2014-01-07 06:22 - 2014-01-07 06:22 - 00000000 ____D () C:\Users\Henning\Dokumente\GOG.com Downloads (alt)
2014-01-07 06:22 - 2014-01-07 06:22 - 00000000 ____D () C:\Users\Henning\Dokumente\EWS
2014-01-07 06:22 - 2014-01-07 06:22 - 00000000 ____D () C:\Users\Henning\Dokumente\EVE
2014-01-07 06:22 - 2014-01-07 06:22 - 00000000 ____D () C:\Users\Henning\Dokumente\BioWare
2014-01-07 06:22 - 2014-01-07 06:22 - 00000000 ____D () C:\Users\Henning\Dokumente\Battlefield 4
Some content of TEMP:
====================
C:\Users\Henning\AppData\Local\Temp\nv3DVStreaming.dll
C:\Users\Henning\AppData\Local\Temp\nvSCPAPI.dll
C:\Users\Henning\AppData\Local\Temp\nvStereoApiI.dll
C:\Users\Henning\AppData\Local\Temp\nvStInst.exe
C:\Users\Henning\AppData\Local\Temp\Quarantine.exe
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2014-01-30 11:11
==================== End Of Log ============================
--- --- --- Danke für die schnelle Antwort. |
|
07.02.2014, 16:55
| #4 |
| /// the machine /// TB-Ausbilder | Windows 7: Wiederholte Funde bösartiger Software durch MBAMESET Online Scanner
Downloade Dir bitte  SecurityCheck und:
und ein frisches FRST log bitte. Noch Probleme? 
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
07.02.2014, 18:34
| #5 |
| | Windows 7: Wiederholte Funde bösartiger Software durch MBAM Hi, Code:
ATTFilter ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=674ee09cf5a95e409d5c58e0a7bf8555
# engine=16985
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2014-02-07 05:14:27
# local_time=2014-02-07 06:14:27 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# lang=1033
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=5893 16776574 100 94 2682784 143423117 0 0
# scanned=231653
# found=0
# cleaned=0
# scan_time=2082
Code:
ATTFilter Results of screen317's Security Check version 0.99.79 Windows 7 Service Pack 1 x64 (UAC is enabled) Internet Explorer 11 ``````````````Antivirus/Firewall Check:`````````````` Microsoft Security Essentials (On Access scanning disabled!) Error obtaining update status for antivirus! `````````Anti-malware/Other Utilities Check:````````` Malwarebytes Anti-Malware Version 1.75.0.1300 Java 7 Update 51 Adobe Flash Player 12.0.0.43 Flash Player out of Date! Mozilla Firefox (26.0) ````````Process Check: objlist.exe by Laurent```````` Microsoft Security Essentials MSMpEng.exe Microsoft Security Essentials msseces.exe `````````````````System Health check````````````````` Total Fragmentation on Drive C: ````````````````````End of Log`````````````````````` FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 07-02-2014
Ran by Henning (administrator) on FURY on 07-02-2014 18:28:43
Running from C:\Users\Henning\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 9
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Logitech Inc.) C:\Program Files\Logitech Gaming Software\LCore.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [Nvtmru] - "C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe"
HKLM\...\Run: [ShadowPlay] - C:\Windows\system32\nvspcap64.dll [1179576 2014-01-21] (NVIDIA Corporation)
HKLM\...\Run: [NvBackend] - C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2234144 2014-01-21] (NVIDIA Corporation)
HKLM\...\Run: [Launch LCore] - C:\Program Files\Logitech Gaming Software\LCore.exe [8292120 2013-11-14] (Logitech Inc.)
HKLM\...\Run: [MSC] - C:\Program Files\Microsoft Security Client\msseces.exe [1266912 2013-10-23] (Microsoft Corporation)
HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7204568 2013-11-04] (Realtek Semiconductor)
HKLM-x32\...\Run: [NUSB3MON] - C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [113288 2010-11-17] (Renesas Electronics Corporation)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKU\.DEFAULT\...\RunOnce: [SPReview] - C:\Windows\System32\SPReview\SPReview.exe [301568 2014-01-06] (Microsoft Corporation)
HKU\S-1-5-19\...\Run: [Sidebar] - %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun
HKU\S-1-5-20\...\Run: [Sidebar] - %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun
HKU\S-1-5-21-2991333743-1983943878-3972192781-1000\...\MountPoints2: {45ea64d3-76fc-11e3-9fe1-e396b050e769} - G:\pushinst.exe
==================== Internet (Whitelisted) ====================
ProxyServer: localhost:8080
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xF6B0B7F00C0BCF01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL =
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
FireFox:
========
FF ProfilePath: C:\Users\Henning\AppData\Roaming\Mozilla\Firefox\Profiles\7h855vbo.default
FF NetworkProxy: "http", "109.73.68.233"
FF NetworkProxy: "http_port", 8089
FF NetworkProxy: "type", 4
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_43.dll ()
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_44.dll ()
FF Plugin-x32: @esn.me/esnsonar,version=0.70.4 - C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB)
FF Plugin-x32: @esn/npbattlelog,version=2.3.2 - C:\Program Files (x86)\Battlelog Web Plugins\2.3.2\npbattlelog.dll (EA Digital Illusions CE AB)
FF Plugin-x32: @java.com/DTPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: WOT - C:\Users\Henning\AppData\Roaming\Mozilla\Firefox\Profiles\7h855vbo.default\Extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7} [2014-01-29]
FF Extension: Ghostery - C:\Users\Henning\AppData\Roaming\Mozilla\Firefox\Profiles\7h855vbo.default\Extensions\firefox@ghostery.com.xpi [2014-01-29]
FF Extension: Toggle Proxy - C:\Users\Henning\AppData\Roaming\Mozilla\Firefox\Profiles\7h855vbo.default\Extensions\toggleproxy@quirkyquipu.co.uk.xpi [2014-01-30]
FF Extension: NoScript - C:\Users\Henning\AppData\Roaming\Mozilla\Firefox\Profiles\7h855vbo.default\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi [2014-01-29]
FF Extension: Adblock Plus - C:\Users\Henning\AppData\Roaming\Mozilla\Firefox\Profiles\7h855vbo.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-01-29]
==================== Services (Whitelisted) =================
R2 MsMpSvc; C:\Program Files\Microsoft Security Client\MsMpEng.exe [23808 2013-10-23] (Microsoft Corporation)
S3 NisSrv; C:\Program Files\Microsoft Security Client\NisSrv.exe [348376 2013-10-23] (Microsoft Corporation)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1593632 2014-01-21] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [16939296 2014-01-21] (NVIDIA Corporation)
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76888 2014-01-07] ()
==================== Drivers (Whitelisted) ====================
S3 avmeject; C:\Windows\System32\drivers\avmeject.sys [14120 2010-10-22] (AVM Berlin)
R3 FWLANUSB; C:\Windows\System32\DRIVERS\fwlanusb.sys [460800 2010-10-22] (AVM GmbH)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [248240 2013-09-27] (Microsoft Corporation)
S3 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [134944 2013-09-27] (Microsoft Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [39200 2013-12-27] (NVIDIA Corporation)
R1 Serial; C:\Windows\System32\DRIVERS\serial.sys [94208 2009-07-14] (Brother Industries Ltd.)
S3 NTIOLib_1_0_4; \??\C:\Program Files (x86)\MSI\Live Update 5\NTIOLib_X64.sys [X]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2014-02-07 18:27 - 2014-02-07 18:27 - 00000936 _____ () C:\Users\Henning\Desktop\checkup.txt
2014-02-07 18:27 - 2014-02-07 18:27 - 00000000 ____D () C:\Users\Henning\Desktop\FRST-OlderVersion
2014-02-07 18:25 - 2014-02-07 18:25 - 00000668 _____ () C:\Users\Henning\Desktop\Neues Textdokument.txt
2014-02-07 18:24 - 2014-02-07 18:24 - 00987425 _____ () C:\Users\Henning\Desktop\SecurityCheck.exe
2014-02-07 17:35 - 2014-02-07 17:35 - 02347384 _____ (ESET) C:\Users\Henning\Desktop\esetsmartinstaller_enu.exe
2014-02-07 16:38 - 2014-02-07 17:20 - 00016251 _____ () C:\Users\Henning\Desktop\spa070214.odt
2014-02-06 18:36 - 2014-02-06 18:36 - 00000783 _____ () C:\Users\Henning\Desktop\JRT.txt
2014-02-06 18:32 - 2014-02-06 18:32 - 00000852 _____ () C:\Users\Henning\Desktop\AdwCleaner[S0].txt
2014-02-06 18:30 - 2014-02-06 18:31 - 00000000 ____D () C:\AdwCleaner
2014-02-06 18:29 - 2014-02-06 18:29 - 01037530 _____ (Thisisu) C:\Users\Henning\Desktop\JRT.exe
2014-02-06 18:29 - 2014-02-06 18:28 - 01166132 _____ () C:\Users\Henning\Desktop\adwcleaner.exe
2014-02-06 17:06 - 2014-02-06 17:06 - 00001848 _____ () C:\Users\Henning\Desktop\GMER.log
2014-02-06 16:57 - 2014-02-07 18:28 - 00008256 _____ () C:\Users\Henning\Desktop\FRST.txt
2014-02-06 16:57 - 2014-02-07 18:27 - 02079744 _____ (Farbar) C:\Users\Henning\Desktop\FRST64.exe
2014-02-06 16:57 - 2014-02-06 16:51 - 00380416 _____ () C:\Users\Henning\Desktop\4woorksk.exe
2014-02-06 16:57 - 2014-02-06 16:50 - 00050477 _____ () C:\Users\Henning\Desktop\Defogger.exe
2014-02-06 16:56 - 2014-02-07 18:28 - 00000000 ____D () C:\FRST
2014-02-06 16:55 - 2014-02-06 16:55 - 00000000 _____ () C:\Users\Henning\defogger_reenable
2014-02-04 06:55 - 2014-02-04 06:55 - 00000000 _____ () C:\Users\Henning\Desktop\MBAM .txt
2014-02-01 16:37 - 2014-02-01 16:37 - 00000000 ____D () C:\Windows\SysWOW64\RTCOM
2014-02-01 16:37 - 2014-02-01 16:37 - 00000000 ____D () C:\Program Files\Realtek
2014-02-01 16:37 - 2013-11-05 19:47 - 03707864 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RTKVHD64.sys
2014-02-01 16:37 - 2013-11-05 15:48 - 00681905 _____ () C:\Windows\system32\Drivers\RTAIODAT.DAT
2014-02-01 16:37 - 2013-11-04 19:26 - 00153304 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoInstII64.dll
2014-02-01 16:37 - 2013-11-04 11:11 - 02587864 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkAPO64.dll
2014-02-01 16:37 - 2013-10-28 17:29 - 01021656 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkApi64.dll
2014-02-01 16:37 - 2013-10-18 16:41 - 01286360 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTCOM64.dll
2014-02-01 16:37 - 2013-10-16 03:43 - 00209096 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAC64.dll
2014-02-01 16:37 - 2013-10-11 12:47 - 00113576 _____ (Real Sound Lab SIA) C:\Windows\system32\CONEQMSAPOGUILibrary.dll
2014-02-01 16:37 - 2013-10-09 20:12 - 02103040 _____ (Waves Audio Ltd.) C:\Windows\system32\WavesGUILib64.dll
2014-02-01 16:37 - 2013-10-09 20:12 - 02036992 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioEQ64.dll
2014-02-01 16:37 - 2013-10-09 20:12 - 01012992 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPOShell64.dll
2014-02-01 16:37 - 2013-10-07 11:05 - 02810072 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtPgEx64.dll
2014-02-01 16:37 - 2013-10-02 17:10 - 00617176 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtDataProc64.dll
2014-02-01 16:37 - 2013-09-13 18:44 - 02080472 _____ (Realtek Semiconductor Corp.) C:\Windows\RtlExUpd.dll
2014-02-01 16:37 - 2013-08-05 18:11 - 02743328 _____ (Fortemedia Corporation) C:\Windows\system32\FMAPO64.dll
2014-02-01 16:37 - 2013-07-30 14:04 - 00397080 _____ (Creative Technology Ltd.) C:\Windows\system32\MBWrp64.dll
2014-02-01 16:37 - 2013-04-24 17:16 - 01662024 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTSnMg64.cpl
2014-02-01 16:37 - 2013-01-11 16:27 - 00628504 _____ (Creative Technology Ltd.) C:\Windows\system32\MBTHX64.dll
2014-02-01 16:37 - 2013-01-11 16:27 - 00563992 _____ (Creative Technology Ltd.) C:\Windows\SysWOW64\MBTHX32.dll
2014-02-01 16:37 - 2012-03-08 11:47 - 00108640 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAR64.dll
2014-02-01 16:37 - 2011-12-20 15:32 - 00331880 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtlCPAPI64.dll
2014-02-01 16:37 - 2011-11-22 16:28 - 00014952 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCoLDR64.dll
2014-02-01 16:37 - 2010-11-08 07:31 - 00375128 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEP64A.dll
2014-02-01 16:37 - 2010-11-08 07:31 - 00310104 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DHT64.dll
2014-02-01 16:37 - 2010-11-08 07:31 - 00310104 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DAA64.dll
2014-02-01 16:37 - 2010-11-08 07:31 - 00204120 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEED64A.dll
2014-02-01 16:37 - 2010-11-08 07:31 - 00101208 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEL64A.dll
2014-02-01 16:37 - 2010-11-08 07:31 - 00078680 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEG64A.dll
2014-02-01 16:37 - 2010-11-03 18:30 - 00149608 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCfg64.dll
2014-02-01 16:37 - 2010-09-27 09:34 - 00318808 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO20.dll
2014-02-01 16:37 - 2009-11-24 09:55 - 00518896 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSX64.dll
2014-02-01 16:37 - 2009-11-24 09:55 - 00211184 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSH64.dll
2014-02-01 16:37 - 2009-11-24 09:55 - 00198896 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSHP64.dll
2014-02-01 16:37 - 2009-11-24 09:55 - 00155888 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSWOW64.dll
2014-02-01 16:37 - 2009-11-18 07:12 - 00032344 _____ (Creative Technology Ltd.) C:\Windows\system32\Drivers\MBfilt64.sys
2014-02-01 16:27 - 2014-02-01 16:27 - 00000146 _____ () C:\Users\Henning\Desktop\Sound.lnk
2014-01-30 12:51 - 2014-01-30 12:51 - 00000000 ____D () C:\Program Files (x86)\AGEIA Technologies
2014-01-30 12:51 - 2014-01-15 23:35 - 00599840 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe
2014-01-30 12:46 - 2014-01-16 00:13 - 31421216 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2014-01-30 12:46 - 2014-01-16 00:13 - 25255200 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2014-01-30 12:46 - 2014-01-16 00:13 - 23672096 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2014-01-30 12:46 - 2014-01-16 00:13 - 17714760 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2014-01-30 12:46 - 2014-01-16 00:13 - 17560352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2014-01-30 12:46 - 2014-01-16 00:13 - 12668192 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2014-01-30 12:46 - 2014-01-16 00:13 - 11631544 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2014-01-30 12:46 - 2014-01-16 00:13 - 11583616 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2014-01-30 12:46 - 2014-01-16 00:13 - 09723944 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2014-01-30 12:46 - 2014-01-16 00:13 - 09686304 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2014-01-30 12:46 - 2014-01-16 00:13 - 03142432 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2014-01-30 12:46 - 2014-01-16 00:13 - 02956576 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2014-01-30 12:46 - 2014-01-16 00:13 - 02782496 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll
2014-01-30 12:46 - 2014-01-16 00:13 - 02410784 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll
2014-01-30 12:46 - 2014-01-16 00:13 - 01885472 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6433467.dll
2014-01-30 12:46 - 2014-01-16 00:13 - 01515296 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6433467.dll
2014-01-30 12:46 - 2014-01-16 00:13 - 00892704 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2014-01-30 12:46 - 2014-01-16 00:13 - 00892192 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2014-01-30 12:46 - 2014-01-16 00:13 - 00863520 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2014-01-30 12:46 - 2014-01-16 00:13 - 00859936 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2014-01-30 12:46 - 2014-01-16 00:13 - 00832424 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2014-01-30 12:46 - 2014-01-16 00:13 - 00483104 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll
2014-01-30 12:46 - 2014-01-16 00:13 - 00408352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll
2014-01-30 12:46 - 2014-01-16 00:13 - 00378656 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFROpenGL.dll
2014-01-30 12:46 - 2014-01-16 00:13 - 00353504 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2014-01-30 12:46 - 2014-01-16 00:13 - 00333600 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFROpenGL.dll
2014-01-30 12:46 - 2014-01-16 00:13 - 00305600 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2014-01-30 12:46 - 2014-01-16 00:13 - 00174296 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2014-01-30 12:46 - 2014-01-16 00:13 - 00148016 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2014-01-30 12:45 - 2014-01-30 12:45 - 00000000 ____D () C:\NVIDIA
2014-01-30 12:32 - 2013-12-27 19:42 - 00039200 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys
2014-01-30 12:32 - 2013-12-27 19:42 - 00033056 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll
2014-01-30 10:41 - 2014-02-07 14:31 - 00008933 _____ () C:\Windows\setupact.log
2014-01-30 10:41 - 2014-01-30 10:41 - 00000000 _____ () C:\Windows\setuperr.log
2014-01-29 14:12 - 2014-01-29 14:12 - 00000085 _____ () C:\Windows\wininit.ini
2014-01-29 14:07 - 2014-02-07 17:47 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-01-29 14:07 - 2014-02-05 21:47 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-01-29 13:55 - 2014-01-29 14:12 - 00000000 ____D () C:\ProgramData\Spybot - Search & Destroy
2014-01-29 13:55 - 2014-01-29 13:55 - 00000000 ____D () C:\Windows\System32\Tasks\Safer-Networking
2014-01-29 06:47 - 2014-01-29 06:47 - 00000000 ____D () C:\Users\Henning\AppData\Roaming\Mozilla
2014-01-29 06:47 - 2014-01-29 06:47 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-01-29 06:46 - 2014-01-29 06:47 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-01-28 23:06 - 2014-01-28 23:06 - 00000000 ____D () C:\Windows\ERUNT
2014-01-28 22:50 - 2014-01-28 22:50 - 00005298 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_51-b13.log
2014-01-28 22:50 - 2014-01-28 22:50 - 00000000 ____D () C:\ProgramData\Oracle
2014-01-28 21:49 - 2014-01-28 22:50 - 00000000 ____D () C:\Program Files (x86)\Java
2014-01-28 21:49 - 2014-01-28 21:49 - 00000000 ____D () C:\ProgramData\Sun
2014-01-28 21:49 - 2013-12-18 21:09 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-01-28 21:49 - 2013-12-18 21:04 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-01-28 21:49 - 2013-12-18 21:04 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-01-28 21:49 - 2013-12-18 21:03 - 00174504 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-01-28 21:48 - 2014-01-28 21:52 - 00000000 ____D () C:\ProgramData\WPM
2014-01-27 18:11 - 2014-01-27 18:11 - 00002776 _____ () C:\Windows\System32\Tasks\CCleanerSkipUAC
2014-01-27 18:11 - 2014-01-27 18:11 - 00000000 ____D () C:\Program Files\CCleaner
2014-01-26 20:05 - 2014-02-07 14:34 - 00435028 _____ () C:\Windows\WindowsUpdate.log
2014-01-24 19:28 - 2010-10-22 02:00 - 00480632 ____N (AVM Berlin) C:\Windows\instwcli.dex
2014-01-17 21:56 - 2014-01-17 21:56 - 00000000 ____D () C:\Users\Henning\AppData\Local\Blizzard
2014-01-17 21:29 - 2014-01-27 10:36 - 00000000 ____D () C:\Users\Henning\AppData\Local\Battle.net
2014-01-17 21:29 - 2014-01-17 21:37 - 00000000 ____D () C:\Users\Henning\AppData\Roaming\Battle.net
2014-01-17 21:29 - 2014-01-17 21:29 - 00000000 ____D () C:\Users\Henning\AppData\Local\Blizzard Entertainment
2014-01-17 21:29 - 2014-01-17 21:29 - 00000000 ____D () C:\ProgramData\Blizzard Entertainment
2014-01-17 21:27 - 2014-01-17 21:27 - 00000000 ____D () C:\ProgramData\Battle.net
2014-01-16 22:14 - 2014-01-16 22:14 - 00000000 ____D () C:\Users\Henning\AppData\Roaming\Mp3tag
2014-01-16 22:02 - 2014-01-16 22:02 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdFs_01_09_00.Wdf
2014-01-15 15:34 - 2013-11-26 12:40 - 00376768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2014-01-15 15:32 - 2013-11-27 02:41 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2014-01-15 15:32 - 2013-11-27 02:41 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2014-01-15 15:32 - 2013-11-27 02:41 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2014-01-15 15:32 - 2013-11-27 02:41 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2014-01-15 15:32 - 2013-11-27 02:41 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2014-01-15 15:32 - 2013-11-27 02:41 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys
2014-01-15 15:32 - 2013-11-27 02:41 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2014-01-15 15:32 - 2013-11-26 11:32 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-01-15 06:41 - 2014-01-15 06:41 - 00000000 ____D () C:\Windows\pss
2014-01-13 00:58 - 2014-01-13 00:58 - 00000000 ____D () C:\Windows\SysWOW64\directx
2014-01-13 00:58 - 2014-01-13 00:58 - 00000000 ____D () C:\Program Files (x86)\Microsoft XNA
2014-01-11 22:27 - 2014-01-11 22:27 - 00000000 ____D () C:\Windows\46ED2B6485C74E1F920CA555B21F2E4C.TMP
2014-01-10 22:15 - 2014-01-10 22:15 - 00000000 ____D () C:\Users\Henning\AppData\Roaming\SumatraPDF
2014-01-10 01:56 - 2014-01-10 01:59 - 00000000 ____D () C:\Users\Henning\AppData\Local\GOG.com
2014-01-09 16:34 - 2012-08-22 10:19 - 00011832 _____ (Windows (R) Codename Longhorn DDK provider) C:\Windows\acpimof.dll
2014-01-09 00:39 - 2014-01-09 00:39 - 00000049 _____ () C:\Windows\11993802
2014-01-09 00:39 - 2014-01-09 00:39 - 00000000 ____D () C:\Users\Henning\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\EVE
2014-01-08 23:36 - 2014-02-05 17:44 - 00000000 ____D () C:\Users\Henning\AppData\Roaming\EVEMon
2014-01-08 23:36 - 2014-01-08 23:36 - 00000000 ____D () C:\Users\Henning\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\EVEMon
2014-01-08 23:35 - 2014-01-08 23:35 - 00000000 ____D () C:\Users\Henning\AppData\Local\CCP
2014-01-08 17:27 - 2010-07-21 23:08 - 01864192 _____ (Microsoft Corporation) C:\Windows\system32\ExplorerFrame.dll
2014-01-08 17:09 - 2010-11-20 14:27 - 02851840 _____ (Microsoft Corporation) C:\Windows\system32\themeui.dll.backup
2014-01-08 17:09 - 2009-07-14 02:41 - 00332288 _____ (Microsoft Corporation) C:\Windows\system32\uxtheme.dll.backup
2014-01-08 17:09 - 2009-07-14 02:41 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\themeservice.dll.backup
==================== One Month Modified Files and Folders =======
2014-02-07 18:28 - 2014-02-06 16:57 - 00008256 _____ () C:\Users\Henning\Desktop\FRST.txt
2014-02-07 18:28 - 2014-02-06 16:56 - 00000000 ____D () C:\FRST
2014-02-07 18:27 - 2014-02-07 18:27 - 00000936 _____ () C:\Users\Henning\Desktop\checkup.txt
2014-02-07 18:27 - 2014-02-07 18:27 - 00000000 ____D () C:\Users\Henning\Desktop\FRST-OlderVersion
2014-02-07 18:27 - 2014-02-06 16:57 - 02079744 _____ (Farbar) C:\Users\Henning\Desktop\FRST64.exe
2014-02-07 18:25 - 2014-02-07 18:25 - 00000668 _____ () C:\Users\Henning\Desktop\Neues Textdokument.txt
2014-02-07 18:24 - 2014-02-07 18:24 - 00987425 _____ () C:\Users\Henning\Desktop\SecurityCheck.exe
2014-02-07 17:47 - 2014-01-29 14:07 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-02-07 17:41 - 2009-07-14 05:45 - 00013552 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-02-07 17:41 - 2009-07-14 05:45 - 00013552 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-02-07 17:35 - 2014-02-07 17:35 - 02347384 _____ (ESET) C:\Users\Henning\Desktop\esetsmartinstaller_enu.exe
2014-02-07 17:35 - 2009-07-14 18:58 - 00673882 _____ () C:\Windows\system32\perfh007.dat
2014-02-07 17:35 - 2009-07-14 18:58 - 00139022 _____ () C:\Windows\system32\perfc007.dat
2014-02-07 17:35 - 2009-07-14 06:13 - 01553918 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-02-07 17:34 - 2014-01-06 21:39 - 00000000 ____D () C:\Program Files (x86)\Steam
2014-02-07 17:20 - 2014-02-07 16:38 - 00016251 _____ () C:\Users\Henning\Desktop\spa070214.odt
2014-02-07 16:10 - 2014-01-06 23:09 - 00000000 ____D () C:\Users\Henning\AppData\Roaming\vlc
2014-02-07 15:30 - 2014-01-07 06:22 - 00005802 _____ () C:\Users\Henning\Dokumente\Transaktionen.txt
2014-02-07 14:34 - 2014-01-26 20:05 - 00435028 _____ () C:\Windows\WindowsUpdate.log
2014-02-07 14:31 - 2014-01-30 10:41 - 00008933 _____ () C:\Windows\setupact.log
2014-02-07 14:31 - 2014-01-06 20:56 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-02-07 14:31 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-02-06 18:36 - 2014-02-06 18:36 - 00000783 _____ () C:\Users\Henning\Desktop\JRT.txt
2014-02-06 18:32 - 2014-02-06 18:32 - 00000852 _____ () C:\Users\Henning\Desktop\AdwCleaner[S0].txt
2014-02-06 18:31 - 2014-02-06 18:30 - 00000000 ____D () C:\AdwCleaner
2014-02-06 18:29 - 2014-02-06 18:29 - 01037530 _____ (Thisisu) C:\Users\Henning\Desktop\JRT.exe
2014-02-06 18:28 - 2014-02-06 18:29 - 01166132 _____ () C:\Users\Henning\Desktop\adwcleaner.exe
2014-02-06 17:06 - 2014-02-06 17:06 - 00001848 _____ () C:\Users\Henning\Desktop\GMER.log
2014-02-06 16:55 - 2014-02-06 16:55 - 00000000 _____ () C:\Users\Henning\defogger_reenable
2014-02-06 16:55 - 2014-01-06 19:02 - 00000000 ____D () C:\Users\Henning
2014-02-06 16:51 - 2014-02-06 16:57 - 00380416 _____ () C:\Users\Henning\Desktop\4woorksk.exe
2014-02-06 16:50 - 2014-02-06 16:57 - 00050477 _____ () C:\Users\Henning\Desktop\Defogger.exe
2014-02-05 21:47 - 2014-01-29 14:07 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-02-05 21:47 - 2014-01-06 22:28 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-02-05 21:47 - 2014-01-06 22:28 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-02-05 20:40 - 2014-01-07 06:22 - 00000873 _____ () C:\Users\Henning\Dokumente\Desktop.txt
2014-02-05 17:44 - 2014-01-08 23:36 - 00000000 ____D () C:\Users\Henning\AppData\Roaming\EVEMon
2014-02-04 06:55 - 2014-02-04 06:55 - 00000000 _____ () C:\Users\Henning\Desktop\MBAM .txt
2014-02-01 16:37 - 2014-02-01 16:37 - 00000000 ____D () C:\Windows\SysWOW64\RTCOM
2014-02-01 16:37 - 2014-02-01 16:37 - 00000000 ____D () C:\Program Files\Realtek
2014-02-01 16:37 - 2014-01-06 19:20 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-02-01 16:37 - 2014-01-06 19:20 - 00000000 ____D () C:\Program Files (x86)\Realtek
2014-02-01 16:27 - 2014-02-01 16:27 - 00000146 _____ () C:\Users\Henning\Desktop\Sound.lnk
2014-01-30 12:51 - 2014-01-30 12:51 - 00000000 ____D () C:\Program Files (x86)\AGEIA Technologies
2014-01-30 12:51 - 2014-01-06 20:56 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation
2014-01-30 12:45 - 2014-01-30 12:45 - 00000000 ____D () C:\NVIDIA
2014-01-30 10:41 - 2014-01-30 10:41 - 00000000 _____ () C:\Windows\setuperr.log
2014-01-29 14:12 - 2014-01-29 14:12 - 00000085 _____ () C:\Windows\wininit.ini
2014-01-29 14:12 - 2014-01-29 13:55 - 00000000 ____D () C:\ProgramData\Spybot - Search & Destroy
2014-01-29 13:55 - 2014-01-29 13:55 - 00000000 ____D () C:\Windows\System32\Tasks\Safer-Networking
2014-01-29 06:47 - 2014-01-29 06:47 - 00000000 ____D () C:\Users\Henning\AppData\Roaming\Mozilla
2014-01-29 06:47 - 2014-01-29 06:47 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-01-29 06:47 - 2014-01-29 06:46 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-01-28 23:06 - 2014-01-28 23:06 - 00000000 ____D () C:\Windows\ERUNT
2014-01-28 22:50 - 2014-01-28 22:50 - 00005298 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_51-b13.log
2014-01-28 22:50 - 2014-01-28 22:50 - 00000000 ____D () C:\ProgramData\Oracle
2014-01-28 22:50 - 2014-01-28 21:49 - 00000000 ____D () C:\Program Files (x86)\Java
2014-01-28 21:52 - 2014-01-28 21:48 - 00000000 ____D () C:\ProgramData\WPM
2014-01-28 21:49 - 2014-01-28 21:49 - 00000000 ____D () C:\ProgramData\Sun
2014-01-27 18:11 - 2014-01-27 18:11 - 00002776 _____ () C:\Windows\System32\Tasks\CCleanerSkipUAC
2014-01-27 18:11 - 2014-01-27 18:11 - 00000000 ____D () C:\Program Files\CCleaner
2014-01-27 10:36 - 2014-01-17 21:29 - 00000000 ____D () C:\Users\Henning\AppData\Local\Battle.net
2014-01-24 06:46 - 2014-01-06 19:03 - 00000000 ___RD () C:\Users\Henning\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-01-21 06:39 - 2014-01-06 22:28 - 00000000 ____D () C:\Users\Henning\AppData\Local\Adobe
2014-01-21 03:53 - 2014-01-06 20:57 - 01179576 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll
2014-01-21 03:53 - 2014-01-06 20:57 - 01048152 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll
2014-01-19 08:33 - 2014-01-06 20:04 - 00270496 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2014-01-18 15:05 - 2014-01-07 06:22 - 00000000 ___RD () C:\Users\Henning\Dokumente
2014-01-18 13:08 - 2014-01-06 21:56 - 00000000 ____D () C:\Spiele
2014-01-17 21:56 - 2014-01-17 21:56 - 00000000 ____D () C:\Users\Henning\AppData\Local\Blizzard
2014-01-17 21:37 - 2014-01-17 21:29 - 00000000 ____D () C:\Users\Henning\AppData\Roaming\Battle.net
2014-01-17 21:29 - 2014-01-17 21:29 - 00000000 ____D () C:\Users\Henning\AppData\Local\Blizzard Entertainment
2014-01-17 21:29 - 2014-01-17 21:29 - 00000000 ____D () C:\ProgramData\Blizzard Entertainment
2014-01-17 21:27 - 2014-01-17 21:27 - 00000000 ____D () C:\ProgramData\Battle.net
2014-01-16 22:14 - 2014-01-16 22:14 - 00000000 ____D () C:\Users\Henning\AppData\Roaming\Mp3tag
2014-01-16 22:02 - 2014-01-16 22:02 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdFs_01_09_00.Wdf
2014-01-16 00:13 - 2014-01-30 12:46 - 31421216 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2014-01-16 00:13 - 2014-01-30 12:46 - 25255200 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2014-01-16 00:13 - 2014-01-30 12:46 - 23672096 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2014-01-16 00:13 - 2014-01-30 12:46 - 17714760 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2014-01-16 00:13 - 2014-01-30 12:46 - 17560352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2014-01-16 00:13 - 2014-01-30 12:46 - 12668192 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2014-01-16 00:13 - 2014-01-30 12:46 - 11631544 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2014-01-16 00:13 - 2014-01-30 12:46 - 11583616 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2014-01-16 00:13 - 2014-01-30 12:46 - 09723944 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2014-01-16 00:13 - 2014-01-30 12:46 - 09686304 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2014-01-16 00:13 - 2014-01-30 12:46 - 03142432 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2014-01-16 00:13 - 2014-01-30 12:46 - 02956576 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2014-01-16 00:13 - 2014-01-30 12:46 - 02782496 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll
2014-01-16 00:13 - 2014-01-30 12:46 - 02410784 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll
2014-01-16 00:13 - 2014-01-30 12:46 - 01885472 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6433467.dll
2014-01-16 00:13 - 2014-01-30 12:46 - 01515296 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6433467.dll
2014-01-16 00:13 - 2014-01-30 12:46 - 00892704 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2014-01-16 00:13 - 2014-01-30 12:46 - 00892192 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2014-01-16 00:13 - 2014-01-30 12:46 - 00863520 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2014-01-16 00:13 - 2014-01-30 12:46 - 00859936 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2014-01-16 00:13 - 2014-01-30 12:46 - 00832424 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2014-01-16 00:13 - 2014-01-30 12:46 - 00483104 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll
2014-01-16 00:13 - 2014-01-30 12:46 - 00408352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll
2014-01-16 00:13 - 2014-01-30 12:46 - 00378656 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFROpenGL.dll
2014-01-16 00:13 - 2014-01-30 12:46 - 00353504 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2014-01-16 00:13 - 2014-01-30 12:46 - 00333600 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFROpenGL.dll
2014-01-16 00:13 - 2014-01-30 12:46 - 00305600 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2014-01-16 00:13 - 2014-01-30 12:46 - 00174296 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2014-01-16 00:13 - 2014-01-30 12:46 - 00148016 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2014-01-16 00:13 - 2014-01-07 18:24 - 15690744 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2014-01-16 00:13 - 2014-01-06 20:56 - 00061216 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll
2014-01-16 00:13 - 2014-01-06 20:56 - 00053024 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll
2014-01-16 00:13 - 2014-01-06 20:55 - 18184976 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll
2014-01-16 00:13 - 2014-01-06 20:55 - 14668008 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll
2014-01-16 00:13 - 2014-01-06 20:55 - 03087112 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
2014-01-16 00:13 - 2014-01-06 20:55 - 02711656 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
2014-01-16 00:13 - 2014-01-06 20:55 - 00947808 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll
2014-01-16 00:13 - 2014-01-06 20:55 - 00024544 _____ () C:\Windows\system32\nvinfo.pb
2014-01-15 23:35 - 2014-01-30 12:51 - 00599840 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe
2014-01-15 22:53 - 2014-01-06 20:56 - 06712608 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll
2014-01-15 22:53 - 2014-01-06 20:56 - 03498272 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll
2014-01-15 22:53 - 2014-01-06 20:56 - 02559776 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll
2014-01-15 22:53 - 2014-01-06 20:56 - 00923936 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
2014-01-15 22:53 - 2014-01-06 20:56 - 00386336 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll
2014-01-15 22:53 - 2014-01-06 20:56 - 00063776 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll
2014-01-15 17:57 - 2009-07-14 05:45 - 00287600 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-01-15 15:35 - 2014-01-06 19:52 - 86054176 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-01-15 15:35 - 2014-01-06 19:52 - 00000000 ____D () C:\Windows\system32\MRT
2014-01-15 06:41 - 2014-01-15 06:41 - 00000000 ____D () C:\Windows\pss
2014-01-13 23:31 - 2014-01-06 20:56 - 03559557 _____ () C:\Windows\system32\nvcoproc.bin
2014-01-13 00:58 - 2014-01-13 00:58 - 00000000 ____D () C:\Windows\SysWOW64\directx
2014-01-13 00:58 - 2014-01-13 00:58 - 00000000 ____D () C:\Program Files (x86)\Microsoft XNA
2014-01-11 22:27 - 2014-01-11 22:27 - 00000000 ____D () C:\Windows\46ED2B6485C74E1F920CA555B21F2E4C.TMP
2014-01-11 01:57 - 2014-01-07 11:36 - 00214392 _____ () C:\Windows\SysWOW64\PnkBstrB.exe
2014-01-11 01:55 - 2014-01-06 22:05 - 00000000 ____D () C:\Program Files (x86)\Origin
2014-01-10 22:31 - 2014-01-07 11:36 - 00214392 _____ () C:\Windows\SysWOW64\PnkBstrB.ex0
2014-01-10 22:15 - 2014-01-10 22:15 - 00000000 ____D () C:\Users\Henning\AppData\Roaming\SumatraPDF
2014-01-10 08:29 - 2014-01-06 20:09 - 00064840 _____ () C:\Users\Henning\AppData\Local\GDIPFONTCACHEV1.DAT
2014-01-10 01:59 - 2014-01-10 01:56 - 00000000 ____D () C:\Users\Henning\AppData\Local\GOG.com
2014-01-09 16:28 - 2014-01-07 06:22 - 00000961 _____ () C:\Users\Henning\Dokumente\Rechner (2011).txt
2014-01-09 00:39 - 2014-01-09 00:39 - 00000049 _____ () C:\Windows\11993802
2014-01-09 00:39 - 2014-01-09 00:39 - 00000000 ____D () C:\Users\Henning\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\EVE
2014-01-08 23:36 - 2014-01-08 23:36 - 00000000 ____D () C:\Users\Henning\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\EVEMon
2014-01-08 23:35 - 2014-01-08 23:35 - 00000000 ____D () C:\Users\Henning\AppData\Local\CCP
2014-01-08 19:22 - 2014-01-06 23:06 - 00000000 ____D () C:\Users\Henning\AppData\Roaming\Winamp
2014-01-08 19:17 - 2014-01-06 22:37 - 00000000 ____D () C:\Users\Henning\AppData\Roaming\NVIDIA
2014-01-08 17:09 - 2014-01-06 20:26 - 02851840 _____ (Microsoft Corporation) C:\Windows\system32\themeui.dll
2014-01-08 17:09 - 2009-07-14 00:55 - 00332288 _____ (Microsoft Corporation) C:\Windows\system32\uxtheme.dll
2014-01-08 17:09 - 2009-07-14 00:54 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\themeservice.dll
2014-01-08 06:34 - 2014-01-07 11:37 - 00000000 ____D () C:\Program Files (x86)\Battlelog Web Plugins
Some content of TEMP:
====================
C:\Users\Henning\AppData\Local\Temp\nv3DVStreaming.dll
C:\Users\Henning\AppData\Local\Temp\nvSCPAPI.dll
C:\Users\Henning\AppData\Local\Temp\nvStereoApiI.dll
C:\Users\Henning\AppData\Local\Temp\nvStInst.exe
C:\Users\Henning\AppData\Local\Temp\Quarantine.exe
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2014-01-30 11:11
==================== End Of Log ============================
--- --- --- Bezüglich der Frage, ob alles in Ordnung sei: ich bin mir nun nicht sicher, wie ich das alles interpretieren soll .. wie bereits im Eingangspost erwähnt -- bei Benutzung des PCs kann ich sichtbar nichts feststellen, aber MBAMs wiederholte Funde in den letzten Tagen und JRTs "bad module detected" lassen mich daran zweifeln, dass ich tatsächlich clean bin. |
|
08.02.2014, 13:29
| #6 |
| /// the machine /// TB-Ausbilder | Windows 7: Wiederholte Funde bösartiger Software durch MBAM Downloade Dir bitte TFC ( von Oldtimer ) und speichere die Datei auf dem Desktop. Schließe nun alle offenen Programme und trenne Dich von dem Internet. Doppelklick auf die TFC.exe und drücke auf Start. Sollte TFC nicht alle Dateien löschen können wird es einen Neustart verlangen. Dies bitte zulassen. Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster. Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument Code:
ATTFilter ProxyServer: localhost:8080
FF NetworkProxy: "http", "109.73.68.233"
FF NetworkProxy: "http_port", 8089
FF NetworkProxy: "type", 4
Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
Fertig Die Reihenfolge ist hier entscheidend.
Falls Du Lob oder Kritik abgeben möchtest kannst Du das hier tun Hier noch ein paar Tipps zur Absicherung deines Systems. Ich kann garnicht zu oft erwähnen, wie wichtig es ist, dass dein System Up to Date ist.
Anti- Viren Software
Zusätzlicher Schutz
Sicheres Browsen
Alternative Browser Andere Browser tendieren zu etwas mehr Sicherheit als der IE, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden.
Performance Bereinige regelmäßig deine Temp Files. Ich empfehle hierzu TFC Halte dich fern von jedlichen Registry Cleanern. Diese Schaden deinem System mehr als sie helfen. Hier ein paar ( englishe ) Links Miekemoes Blogspot ( MVP ) Bill Castner ( MVP ) Don'ts
Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so das ich diesen Thread aus meinen Abos löschen kann.
__________________ --> Windows 7: Wiederholte Funde bösartiger Software durch MBAM |
|
08.02.2014, 14:33
| #7 |
| | Windows 7: Wiederholte Funde bösartiger Software durch MBAM Hey, TFC ausgeführt, FRST ausgeführt. Code:
ATTFilter Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 07-02-2014
Ran by Henning at 2014-02-08 14:26:25 Run:1
Running from C:\Users\Henning\Desktop
Boot Mode: Normal
==============================================
Content of fixlist:
*****************
ProxyServer: localhost:8080
FF NetworkProxy: "http", "109.73.68.233"
FF NetworkProxy: "http_port", 8089
FF NetworkProxy: "type", 4
*****************
HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyServer => Value not found.
Firefox Proxy settings were reset.
Firefox Proxy settings were reset.
Firefox Proxy settings were reset.
==== End of Fixlog ====
Wäre super, wenn ich noch eine letzte Bestätigung bekommen könnte, dass damit die Sache erledigt und der PC (im Rahmen des gesunden Menschenverstandes) wieder bedenkenlos nutzbar sein müsste. Ansonsten nochmals vielen Dank schrauber! |
|
09.02.2014, 09:10
| #8 |
| /// the machine /// TB-Ausbilder | Windows 7: Wiederholte Funde bösartiger Software durch MBAM fertig. Gern Geschehen
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
| Themen zu Windows 7: Wiederholte Funde bösartiger Software durch MBAM |
| browser, cpu-z, entfernen, flash player, home, launch, mp3, pup.optional.iepluginservice.a, pup.optional.installcore.a, pup.optional.lightning.a, pup.optional.qone8, pup.optional.skytech.a, pup.optional.suptab.a, pup.optional.sweetpage.a, realtek, services.exe, stick, svchost.exe, sweet-page, sweet-page entfernen, sweetpage, sweetpage entfernen, viren, windows |
Linear-Darstellung
