Zurück   Trojaner-Board > Malware entfernen > Log-Analyse und Auswertung

Log-Analyse und Auswertung: Windows 7 - "Startfenster"

Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML

Antwort
Alt 15.02.2014, 17:57   #1
Tim0
 
Windows 7 - "Startfenster" - Standard

Windows 7 - "Startfenster"



Hallo alle zusammen,
ich habe mir über eine gefälschte Seite den VLC-Player heruntergeladen und habe nun ein "Startfenster" Icon auf dem Desktop und eine "Startfenster" Startseite bei Firefox.

Schritt 1 - Defogger
Code:
ATTFilter
defogger_disable by jpshortstuff (23.02.10.1)
Log created at 17:35 on 15/02/2014 (Benutzername)

Checking for autostart values...
HKCU\~\Run values retrieved.
HKLM\~\Run values retrieved.

Checking for services/drivers...


-=E.O.F=-
         
Schritt 2 - FRST / Addition

FRST
Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 13-02-2014 01
Ran by Benutzername (administrator) on BENUTZERNAME-PC on 15-02-2014 17:37:14
Running from C:\Users\Benutzername\Desktop
Windows 7 Ultimate Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 8
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ 
Download link for 64-Bit Version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ 
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe
(Microsoft Corporation) C:\Windows\SYSTEM32\WISPTIS.EXE
(Microsoft Corporation) C:\Windows\SYSTEM32\WISPTIS.EXE
(Logitech Inc.) C:\Program Files\Logitech Gaming Software\LCore.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [Nvtmru] - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe [1028384 2013-11-14] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] - C:\Windows\system32\nvspcap64.dll [1064224 2013-11-14] (NVIDIA Corporation)
HKLM\...\Run: [Launch LCore] - C:\Program Files\Logitech Gaming Software\LCore.exe [8292120 2013-11-14] (Logitech Inc.)
HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7506136 2013-12-06] (Realtek Semiconductor)
HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [684600 2013-12-18] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.startfenster.de
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x4DE7ED12622ACF01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - DefaultScope {B8E7C34F-5F46-435F-A23F-4957F26DFC04} URL = hxxp://www.sm.de/?q={searchTerms}
SearchScopes: HKLM - {B8E7C34F-5F46-435F-A23F-4957F26DFC04} URL = hxxp://www.sm.de/?q={searchTerms}
SearchScopes: HKCU - DefaultScope {B8E7C34F-5F46-435F-A23F-4957F26DFC04} URL = hxxp://www.sm.de/?q={searchTerms}
SearchScopes: HKCU - {B8E7C34F-5F46-435F-A23F-4957F26DFC04} URL = hxxp://www.sm.de/?q={searchTerms}
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

FireFox:
========
FF ProfilePath: C:\Users\Benutzername\AppData\Roaming\Mozilla\Firefox\Profiles\8tttt9dg.default
FF DefaultSearchEngine: SuchMaschine
FF SearchEngineOrder.1: SuchMaschine
FF SelectedSearchEngine: SuchMaschine
FF Homepage: hxxp://www.startfenster.de
FF Keyword.URL: hxxp://www.sm.de/?q=
FF NetworkProxy: "autoconfig_url", "data:text/javascript,function%20FindProxyForURL(url%2C%20host)%20%7Bif%20(shExpMatch(url%2C%20'http%3A%2F%2Fgrooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fretro.grooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fhtml5.grooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Flisten.grooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.grooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fpreview.grooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.mtv.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fmedia.mtvnservices.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fpiki.fm*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fpiki.fm*')%20%7C%7C%20host%20%3D%3D%20's.hulu.com'%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.funimation.com*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fsecure.funimation.com*')%20%7C%7C%20(url.indexOf('proxmate%3Dactive')%20!%3D%20-1%20%26%26%20url.indexOf('amazonaws.com')%20%3D%3D%20-1)%20%7C%7C%20(url.indexOf('proxmate%3Dus')%20!%3D%20-1)%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.crunchyroll.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fsongza.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.rdio.com*')%20%7C%7C%20url.indexOf('discoverymedia.com')%20!%3D%20-1%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fdsc.discovery.com%2F*')%20%7C%7C%20url.indexOf('vevo.com')%20!%3D%20-1%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fplay.spotify.com*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fplay.spotify.com*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fwww.spotify.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.spotify.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.last.fm*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fext.last.fm*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.iheart.com*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Faccount.beatsmusic.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.beatsmusic.com*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fwww.daisuki.net*')%20%7C%7C%20url.indexOf('southparkstudios.com')%20!%3D%20-1%20%7C%7C%20host%20%3D%3D%20'www.pandora.com'%20%7C%7C%20url.indexOf('play.google.com')%20!%3D%20-1%20%7C%7C%20(url.indexOf('youtube.com%2Fvideoplayback')%20!%3D%20-1%20%26%26%20url.indexOf('%26gcr%3Dus')%20!%3D%20-1%20%26%26%20url.indexOf('%26ptchn')%20!%3D%20-1))%20%7B%20return%20'PROXY%20nq-us08.personalitycores.com%3A8000%3B%20PROXY%20nq-us10.personalitycores.com%3A8000%3B%20PROXY%20nq-us04.personalitycores.com%3A8000%3B%20PROXY%20nq-us05.personalitycores.com%3A8000%3B%20PROXY%20nq-us12.personalitycores.com%3A8000%3B%20PROXY%20nq-us06.personalitycores.com%3A8000%3B%20PROXY%20nq-us11.personalitycores.com%3A8000%3B%20PROXY%20nq-us07.personalitycores.com%3A8000%3B%20PROXY%20nq-us09.personalitycores.com%3A8000'%3B%7D%20%20else%20%7B%20return%20'DIRECT'%3B%20%7D%7D"
FF NetworkProxy: "type", 2
FF Plugin-x32: @java.com/DTPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin HKCU: pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF SearchPlugin: C:\Users\Benutzername\AppData\Roaming\Mozilla\Firefox\Profiles\8tttt9dg.default\searchplugins\searchplugins-backup
FF SearchPlugin: C:\Users\Benutzername\AppData\Roaming\Mozilla\Firefox\Profiles\8tttt9dg.default\searchplugins\search_engine.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: ProxTube - Unblock YouTube - C:\Users\Benutzername\AppData\Roaming\Mozilla\Firefox\Profiles\8tttt9dg.default\Extensions\ich@maltegoetz.de [2014-02-15]
FF Extension: FT DeepDark - C:\Users\Benutzername\AppData\Roaming\Mozilla\Firefox\Profiles\8tttt9dg.default\Extensions\{77d2ed30-4cd2-11e0-b8af-0800200c9a66} [2014-02-15]
FF Extension: WOT - C:\Users\Benutzername\AppData\Roaming\Mozilla\Firefox\Profiles\8tttt9dg.default\Extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7} [2014-02-15]
FF Extension: DownloadHelper - C:\Users\Benutzername\AppData\Roaming\Mozilla\Firefox\Profiles\8tttt9dg.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} [2014-02-15]
FF Extension: Dictionary (EN/DE) - C:\Users\Benutzername\AppData\Roaming\Mozilla\Firefox\Profiles\8tttt9dg.default\Extensions\dictlookup@arnhold.com.xpi [2014-02-15]
FF Extension: Element Hiding Helper for Adblock Plus - C:\Users\Benutzername\AppData\Roaming\Mozilla\Firefox\Profiles\8tttt9dg.default\Extensions\elemhidehelper@adblockplus.org.xpi [2014-02-15]
FF Extension: Firebug - C:\Users\Benutzername\AppData\Roaming\Mozilla\Firefox\Profiles\8tttt9dg.default\Extensions\firebug@software.joehewitt.com.xpi [2014-02-15]
FF Extension: Ghostery - C:\Users\Benutzername\AppData\Roaming\Mozilla\Firefox\Profiles\8tttt9dg.default\Extensions\firefox@ghostery.com.xpi [2014-02-15]
FF Extension: ProxMate - Proxy on steroids! - C:\Users\Benutzername\AppData\Roaming\Mozilla\Firefox\Profiles\8tttt9dg.default\Extensions\jid1-QpHD8URtZWJC2A@jetpack.xpi [2014-02-15]
FF Extension: Personas Plus - C:\Users\Benutzername\AppData\Roaming\Mozilla\Firefox\Profiles\8tttt9dg.default\Extensions\personas@christopher.beard.xpi [2014-02-15]
FF Extension: Private Tab - C:\Users\Benutzername\AppData\Roaming\Mozilla\Firefox\Profiles\8tttt9dg.default\Extensions\privateTab@infocatcher.xpi [2014-02-15]
FF Extension: FlashGot - C:\Users\Benutzername\AppData\Roaming\Mozilla\Firefox\Profiles\8tttt9dg.default\Extensions\{19503e42-ca3c-4c27-b1e2-9cdb2170ee34}.xpi [2014-02-15]
FF Extension: NoScript - C:\Users\Benutzername\AppData\Roaming\Mozilla\Firefox\Profiles\8tttt9dg.default\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi [2014-02-15]
FF Extension: ReloadEvery - C:\Users\Benutzername\AppData\Roaming\Mozilla\Firefox\Profiles\8tttt9dg.default\Extensions\{888d99e7-e8b5-46a3-851e-1ec45da1e644}.xpi [2014-02-15]
FF Extension: Leo Search - C:\Users\Benutzername\AppData\Roaming\Mozilla\Firefox\Profiles\8tttt9dg.default\Extensions\{c666c018-6409-4479-afa3-68e4129e7eff}.xpi [2014-02-15]
FF Extension: Adblock Plus - C:\Users\Benutzername\AppData\Roaming\Mozilla\Firefox\Profiles\8tttt9dg.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-02-15]
FF Extension: BetterPrivacy - C:\Users\Benutzername\AppData\Roaming\Mozilla\Firefox\Profiles\8tttt9dg.default\Extensions\{d40f5e7b-d2cf-4856-b441-cc613eeffbe3}.xpi [2014-02-15]
FF Extension: Tab Mix Plus - C:\Users\Benutzername\AppData\Roaming\Mozilla\Firefox\Profiles\8tttt9dg.default\Extensions\{dc572301-7619-498c-a57d-39143191b318}.xpi [2014-02-15]
FF Extension: Greasemonkey - C:\Users\Benutzername\AppData\Roaming\Mozilla\Firefox\Profiles\8tttt9dg.default\Extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}.xpi [2014-02-15]

==================== Services (Whitelisted) =================

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440376 2013-12-18] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440376 2013-12-18] (Avira Operations GmbH & Co. KG)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [15125280 2013-11-14] (NVIDIA Corporation)

==================== Drivers (Whitelisted) ====================

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108440 2013-12-18] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131576 2013-12-18] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-12-18] (Avira Operations GmbH & Co. KG)
R3 LGSHidFilt; C:\Windows\System32\DRIVERS\LGSHidFilt.Sys [64280 2013-05-30] (Logitech Inc.)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [39200 2013-11-14] (NVIDIA Corporation)
S3 MSICDSetup; \??\D:\CDriver64.sys [X]
S3 NTIOLib_1_0_C; \??\D:\NTIOLib_X64.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-02-15 17:37 - 2014-02-15 17:37 - 00013594 _____ () C:\Users\Benutzername\Desktop\FRST.txt
2014-02-15 17:37 - 2014-02-15 17:37 - 00000000 ____D () C:\FRST
2014-02-15 17:36 - 2014-02-15 17:36 - 02152960 _____ (Farbar) C:\Users\Benutzername\Desktop\FRST64.exe
2014-02-15 17:35 - 2014-02-15 17:35 - 00000486 _____ () C:\Users\Benutzername\Desktop\defogger_disable.log
2014-02-15 17:35 - 2014-02-15 17:35 - 00000000 _____ () C:\Users\Benutzername\defogger_reenable
2014-02-15 17:34 - 2014-02-15 17:34 - 00050477 _____ () C:\Users\Benutzername\Desktop\Defogger.exe
2014-02-15 17:23 - 2014-02-15 17:31 - 00000000 ____D () C:\Program Files\VideoLAN
2014-02-15 17:22 - 2014-02-15 17:22 - 00001196 _____ () C:\Users\Benutzername\AppData\Roaming\Microsoft\Windows\Start Menu\Startfenster.lnk
2014-02-15 17:22 - 2014-02-15 17:22 - 00000000 ____D () C:\Users\Benutzername\AppData\Roaming\PingPlotter
2014-02-15 17:22 - 2014-02-15 17:22 - 00000000 ____D () C:\Users\Benutzername\AppData\Roaming\Downloaded Installations
2014-02-15 17:22 - 2014-02-15 17:22 - 00000000 ____D () C:\Program Files (x86)\PingPlotter Standard
2014-02-15 17:22 - 2014-02-14 05:22 - 00000044 ____H () C:\Program Files (x86)\18a3d330.tmp
2014-02-15 17:12 - 2014-02-15 17:12 - 00000000 ____D () C:\Users\Benutzername\AppData\Roaming\LolClient
2014-02-15 17:04 - 2014-02-15 13:39 - 00000667 _____ () C:\Users\Benutzername\Documents\indexfile.txt
2014-02-15 17:03 - 2014-02-15 17:03 - 00000000 ____D () C:\Users\Benutzername\AppData\Roaming\Thunderbird
2014-02-15 17:03 - 2014-02-15 17:03 - 00000000 ____D () C:\Users\Benutzername\AppData\Local\Thunderbird
2014-02-15 16:57 - 2014-02-15 16:57 - 00000000 ____D () C:\Program Files (x86)\Mozilla Thunderbird
2014-02-15 16:50 - 2014-02-15 16:50 - 00063568 _____ () C:\Users\Benutzername\AppData\Local\GDIPFONTCACHEV1.DAT
2014-02-15 16:49 - 2014-02-15 17:21 - 00000000 ____D () C:\Users\Benutzername\AppData\Roaming\TS3Client
2014-02-15 16:44 - 2014-02-15 16:44 - 00000000 ____D () C:\Program Files\TeamSpeak 3 Client
2014-02-15 16:42 - 2014-02-15 16:42 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-02-15 16:42 - 2014-02-15 16:42 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-02-15 16:42 - 2014-02-15 16:42 - 00174504 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-02-15 16:42 - 2014-02-15 16:42 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-02-15 16:42 - 2014-02-15 16:42 - 00000000 ____D () C:\Users\Benutzername\AppData\Roaming\Mozilla
2014-02-15 16:42 - 2014-02-15 16:42 - 00000000 ____D () C:\Users\Benutzername\AppData\Local\Mozilla
2014-02-15 16:42 - 2014-02-15 16:42 - 00000000 ____D () C:\ProgramData\Sun
2014-02-15 16:42 - 2014-02-15 16:42 - 00000000 ____D () C:\ProgramData\Oracle
2014-02-15 16:42 - 2014-02-15 16:42 - 00000000 ____D () C:\Program Files (x86)\MozBackup
2014-02-15 16:42 - 2014-02-15 16:42 - 00000000 ____D () C:\Program Files (x86)\Java
2014-02-15 16:40 - 2014-02-15 16:57 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-02-15 16:40 - 2014-02-15 16:40 - 00000000 ____D () C:\ProgramData\Mozilla
2014-02-15 16:40 - 2014-02-15 16:40 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-02-15 16:38 - 2014-02-15 16:38 - 00002786 _____ () C:\Windows\System32\Tasks\CCleanerSkipUAC
2014-02-15 16:38 - 2014-02-15 16:38 - 00000000 ____D () C:\Program Files\CCleaner
2014-02-15 16:37 - 2014-02-15 16:37 - 00000000 ____D () C:\Program Files (x86)\OpenOffice 4
2014-02-15 16:27 - 2014-02-15 16:27 - 00000000 ____D () C:\Users\Benutzername\AppData\Roaming\Macromedia
2014-02-15 16:27 - 2014-02-15 16:27 - 00000000 ____D () C:\Users\Benutzername\AppData\Roaming\Adobe
2014-02-15 16:26 - 2014-02-15 16:26 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-02-15 16:26 - 2014-02-15 16:26 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-02-15 16:26 - 2014-02-15 16:26 - 00000000 ____D () C:\Windows\SysWOW64\Macromed
2014-02-15 16:26 - 2014-02-15 16:26 - 00000000 ____D () C:\Windows\system32\Macromed
2014-02-15 16:25 - 2014-02-15 16:27 - 00000000 ____D () C:\Users\Benutzername\AppData\Local\Adobe
2014-02-15 16:23 - 2014-02-15 16:23 - 00010123 _____ () C:\Windows\DirectX.log
2014-02-15 16:23 - 2010-06-02 04:55 - 00527192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_7.dll
2014-02-15 16:23 - 2010-06-02 04:55 - 00518488 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_7.dll
2014-02-15 16:23 - 2010-06-02 04:55 - 00239960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_7.dll
2014-02-15 16:23 - 2010-06-02 04:55 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_7.dll
2014-02-15 16:23 - 2010-06-02 04:55 - 00077656 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_5.dll
2014-02-15 16:23 - 2010-06-02 04:55 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_5.dll
2014-02-15 16:23 - 2010-05-26 11:41 - 02526056 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_43.dll
2014-02-15 16:23 - 2010-05-26 11:41 - 02401112 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_43.dll
2014-02-15 16:23 - 2010-05-26 11:41 - 02106216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_43.dll
2014-02-15 16:23 - 2010-05-26 11:41 - 01998168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_43.dll
2014-02-15 16:23 - 2010-05-26 11:41 - 01907552 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_43.dll
2014-02-15 16:23 - 2010-05-26 11:41 - 01868128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_43.dll
2014-02-15 16:23 - 2010-05-26 11:41 - 00511328 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_43.dll
2014-02-15 16:23 - 2010-05-26 11:41 - 00470880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_43.dll
2014-02-15 16:23 - 2010-05-26 11:41 - 00276832 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_43.dll
2014-02-15 16:23 - 2010-05-26 11:41 - 00248672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_43.dll
2014-02-15 16:23 - 2010-02-04 10:01 - 00530776 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_6.dll
2014-02-15 16:23 - 2010-02-04 10:01 - 00528216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_6.dll
2014-02-15 16:23 - 2010-02-04 10:01 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_6.dll
2014-02-15 16:23 - 2010-02-04 10:01 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_6.dll
2014-02-15 16:23 - 2010-02-04 10:01 - 00078680 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_4.dll
2014-02-15 16:23 - 2010-02-04 10:01 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_4.dll
2014-02-15 16:23 - 2010-02-04 10:01 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_7.dll
2014-02-15 16:23 - 2010-02-04 10:01 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_7.dll
2014-02-15 16:23 - 2009-09-04 17:44 - 00517960 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_5.dll
2014-02-15 16:23 - 2009-09-04 17:44 - 00515416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_5.dll
2014-02-15 16:23 - 2009-09-04 17:44 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_5.dll
2014-02-15 16:23 - 2009-09-04 17:44 - 00176968 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_5.dll
2014-02-15 16:23 - 2009-09-04 17:44 - 00073544 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_3.dll
2014-02-15 16:23 - 2009-09-04 17:44 - 00069464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_3.dll
2014-02-15 16:23 - 2009-09-04 17:29 - 05554512 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_42.dll
2014-02-15 16:23 - 2009-09-04 17:29 - 05501792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_42.dll
2014-02-15 16:23 - 2009-09-04 17:29 - 02582888 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_42.dll
2014-02-15 16:23 - 2009-09-04 17:29 - 02475352 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_42.dll
2014-02-15 16:23 - 2009-09-04 17:29 - 01974616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_42.dll
2014-02-15 16:23 - 2009-09-04 17:29 - 01892184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_42.dll
2014-02-15 16:23 - 2009-09-04 17:29 - 00523088 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_42.dll
2014-02-15 16:23 - 2009-09-04 17:29 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_42.dll
2014-02-15 16:23 - 2009-09-04 17:29 - 00285024 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_42.dll
2014-02-15 16:23 - 2009-09-04 17:29 - 00235344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_42.dll
2014-02-15 16:23 - 2009-03-16 14:18 - 00521560 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_4.dll
2014-02-15 16:23 - 2009-03-16 14:18 - 00517448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_4.dll
2014-02-15 16:23 - 2009-03-16 14:18 - 00235352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_4.dll
2014-02-15 16:23 - 2009-03-16 14:18 - 00174936 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_4.dll
2014-02-15 16:23 - 2009-03-16 14:18 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_6.dll
2014-02-15 16:23 - 2009-03-16 14:18 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_6.dll
2014-02-15 16:23 - 2009-03-09 15:27 - 05425496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_41.dll
2014-02-15 16:23 - 2009-03-09 15:27 - 04178264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_41.dll
2014-02-15 16:23 - 2009-03-09 15:27 - 02430312 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_41.dll
2014-02-15 16:23 - 2009-03-09 15:27 - 01846632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_41.dll
2014-02-15 16:23 - 2009-03-09 15:27 - 00520544 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_41.dll
2014-02-15 16:23 - 2009-03-09 15:27 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_41.dll
2014-02-15 16:23 - 2008-10-27 10:04 - 00518480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_3.dll
2014-02-15 16:23 - 2008-10-27 10:04 - 00514384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_3.dll
2014-02-15 16:23 - 2008-10-27 10:04 - 00235856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_3.dll
2014-02-15 16:23 - 2008-10-27 10:04 - 00175440 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_3.dll
2014-02-15 16:23 - 2008-10-27 10:04 - 00074576 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_2.dll
2014-02-15 16:23 - 2008-10-27 10:04 - 00070992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_2.dll
2014-02-15 16:23 - 2008-10-27 10:04 - 00025936 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_5.dll
2014-02-15 16:23 - 2008-10-27 10:04 - 00023376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_5.dll
2014-02-15 16:23 - 2008-10-10 04:52 - 05631312 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_40.dll
2014-02-15 16:23 - 2008-10-10 04:52 - 04379984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_40.dll
2014-02-15 16:23 - 2008-10-10 04:52 - 02605920 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_40.dll
2014-02-15 16:23 - 2008-10-10 04:52 - 02036576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_40.dll
2014-02-15 16:23 - 2008-10-10 04:52 - 00519000 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_40.dll
2014-02-15 16:23 - 2008-10-10 04:52 - 00452440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_40.dll
2014-02-15 16:23 - 2008-07-31 10:41 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_2.dll
2014-02-15 16:23 - 2008-07-31 10:41 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_2.dll
2014-02-15 16:23 - 2008-07-31 10:41 - 00072200 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_1.dll
2014-02-15 16:23 - 2008-07-31 10:40 - 00513544 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_2.dll
2014-02-15 16:23 - 2008-07-10 11:00 - 04992520 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_39.dll
2014-02-15 16:23 - 2008-07-10 11:00 - 01942552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_39.dll
2014-02-15 16:23 - 2008-07-10 11:00 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_39.dll
2014-02-15 16:23 - 2008-05-30 14:19 - 00511496 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_1.dll
2014-02-15 16:23 - 2008-05-30 14:19 - 00507400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_1.dll
2014-02-15 16:23 - 2008-05-30 14:18 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_1.dll
2014-02-15 16:23 - 2008-05-30 14:18 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_1.dll
2014-02-15 16:23 - 2008-05-30 14:17 - 00068104 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_0.dll
2014-02-15 16:23 - 2008-05-30 14:17 - 00065032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_0.dll
2014-02-15 16:23 - 2008-05-30 14:17 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_4.dll
2014-02-15 16:23 - 2008-05-30 14:16 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_4.dll
2014-02-15 16:23 - 2008-05-30 14:11 - 04991496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_38.dll
2014-02-15 16:23 - 2008-05-30 14:11 - 03850760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_38.dll
2014-02-15 16:23 - 2008-05-30 14:11 - 01941528 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_38.dll
2014-02-15 16:23 - 2008-05-30 14:11 - 01491992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_38.dll
2014-02-15 16:23 - 2008-05-30 14:11 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_38.dll
2014-02-15 16:23 - 2008-05-30 14:11 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_38.dll
2014-02-15 16:23 - 2008-03-05 16:04 - 00489480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_0.dll
2014-02-15 16:23 - 2008-03-05 16:03 - 00479752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_0.dll
2014-02-15 16:23 - 2008-03-05 16:03 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_0.dll
2014-02-15 16:23 - 2008-03-05 16:03 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_0.dll
2014-02-15 16:23 - 2008-03-05 16:00 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_3.dll
2014-02-15 16:23 - 2008-03-05 16:00 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_3.dll
2014-02-15 16:23 - 2008-03-05 15:56 - 04910088 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_37.dll
2014-02-15 16:23 - 2008-03-05 15:56 - 03786760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_37.dll
2014-02-15 16:23 - 2008-03-05 15:56 - 01860120 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_37.dll
2014-02-15 16:23 - 2008-03-05 15:56 - 01420824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_37.dll
2014-02-15 16:23 - 2008-02-05 23:07 - 00529424 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_37.dll
2014-02-15 16:23 - 2008-02-05 23:07 - 00462864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_37.dll
2014-02-15 16:23 - 2007-10-22 03:40 - 00411656 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_10.dll
2014-02-15 16:23 - 2007-10-22 03:39 - 00267272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_10.dll
2014-02-15 16:23 - 2007-10-22 03:37 - 00021000 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_2.dll
2014-02-15 16:23 - 2007-10-22 03:37 - 00017928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_2.dll
2014-02-15 16:23 - 2007-10-12 15:14 - 05081608 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_36.dll
2014-02-15 16:23 - 2007-10-12 15:14 - 03734536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_36.dll
2014-02-15 16:23 - 2007-10-12 15:14 - 02006552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_36.dll
2014-02-15 16:23 - 2007-10-12 15:14 - 01374232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_36.dll
2014-02-15 16:23 - 2007-10-02 09:56 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_36.dll
2014-02-15 16:23 - 2007-10-02 09:56 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_36.dll
2014-02-15 16:23 - 2007-07-20 00:57 - 00411496 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_9.dll
2014-02-15 16:23 - 2007-07-20 00:57 - 00267112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_9.dll
2014-02-15 16:23 - 2007-07-19 18:14 - 05073256 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_35.dll
2014-02-15 16:23 - 2007-07-19 18:14 - 03727720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_35.dll
2014-02-15 16:23 - 2007-07-19 18:14 - 01985904 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_35.dll
2014-02-15 16:23 - 2007-07-19 18:14 - 01358192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_35.dll
2014-02-15 16:23 - 2007-07-19 18:14 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_35.dll
2014-02-15 16:23 - 2007-07-19 18:14 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_35.dll
2014-02-15 16:23 - 2007-06-20 20:49 - 00409960 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_8.dll
2014-02-15 16:23 - 2007-06-20 20:46 - 00266088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_8.dll
2014-02-15 16:23 - 2007-05-16 16:45 - 04496232 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_34.dll
2014-02-15 16:23 - 2007-05-16 16:45 - 03497832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_34.dll
2014-02-15 16:23 - 2007-05-16 16:45 - 01401200 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_34.dll
2014-02-15 16:23 - 2007-05-16 16:45 - 01124720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_34.dll
2014-02-15 16:23 - 2007-05-16 16:45 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_34.dll
2014-02-15 16:23 - 2007-05-16 16:45 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_34.dll
2014-02-15 16:23 - 2007-04-04 18:55 - 00403304 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_7.dll
2014-02-15 16:23 - 2007-04-04 18:55 - 00261480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_7.dll
2014-02-15 16:23 - 2007-04-04 18:54 - 00107368 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_3.dll
2014-02-15 16:23 - 2007-04-04 18:53 - 00081768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_3.dll
2014-02-15 16:23 - 2007-03-15 16:57 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_33.dll
2014-02-15 16:23 - 2007-03-15 16:57 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_33.dll
2014-02-15 16:23 - 2007-03-12 16:42 - 04494184 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_33.dll
2014-02-15 16:23 - 2007-03-12 16:42 - 03495784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_33.dll
2014-02-15 16:23 - 2007-03-12 16:42 - 01400176 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_33.dll
2014-02-15 16:23 - 2007-03-12 16:42 - 01123696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_33.dll
2014-02-15 16:23 - 2007-03-05 12:42 - 00017688 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_1.dll
2014-02-15 16:23 - 2007-03-05 12:42 - 00015128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_1.dll
2014-02-15 16:23 - 2007-01-24 15:27 - 00393576 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_6.dll
2014-02-15 16:23 - 2007-01-24 15:27 - 00255848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_6.dll
2014-02-15 16:23 - 2006-12-08 12:02 - 00251672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_5.dll
2014-02-15 16:23 - 2006-12-08 12:00 - 00390424 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_5.dll
2014-02-15 16:23 - 2006-11-29 13:06 - 04398360 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_32.dll
2014-02-15 16:23 - 2006-11-29 13:06 - 03426072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_32.dll
2014-02-15 16:23 - 2006-11-29 13:06 - 00469264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10.dll
2014-02-15 16:23 - 2006-11-29 13:06 - 00440080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10.dll
2014-02-15 16:23 - 2006-09-28 16:05 - 03977496 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_31.dll
2014-02-15 16:23 - 2006-09-28 16:05 - 02414360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_31.dll
2014-02-15 16:23 - 2006-09-28 16:05 - 00237848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_4.dll
2014-02-15 16:23 - 2006-09-28 16:04 - 00364824 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_4.dll
2014-02-15 16:23 - 2006-07-28 09:31 - 00083736 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_2.dll
2014-02-15 16:23 - 2006-07-28 09:30 - 00363288 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_3.dll
2014-02-15 16:23 - 2006-07-28 09:30 - 00236824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_3.dll
2014-02-15 16:23 - 2006-07-28 09:30 - 00062744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_2.dll
2014-02-15 16:23 - 2006-05-31 07:24 - 00230168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_2.dll
2014-02-15 16:23 - 2006-05-31 07:22 - 00354072 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_2.dll
2014-02-15 16:23 - 2006-03-31 12:41 - 03927248 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_30.dll
2014-02-15 16:23 - 2006-03-31 12:40 - 02388176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_30.dll
2014-02-15 16:23 - 2006-03-31 12:40 - 00352464 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_1.dll
2014-02-15 16:23 - 2006-03-31 12:39 - 00229584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_1.dll
2014-02-15 16:23 - 2006-03-31 12:39 - 00083664 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_1.dll
2014-02-15 16:23 - 2006-03-31 12:39 - 00062672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_1.dll
2014-02-15 16:23 - 2006-02-03 08:43 - 03830992 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_29.dll
2014-02-15 16:23 - 2006-02-03 08:43 - 02332368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_29.dll
2014-02-15 16:23 - 2006-02-03 08:42 - 00355536 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_0.dll
2014-02-15 16:23 - 2006-02-03 08:42 - 00230096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_0.dll
2014-02-15 16:23 - 2006-02-03 08:41 - 00016592 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_0.dll
2014-02-15 16:23 - 2006-02-03 08:41 - 00014032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_0.dll
2014-02-15 16:23 - 2005-12-05 18:09 - 03815120 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_28.dll
2014-02-15 16:23 - 2005-12-05 18:09 - 02323664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_28.dll
2014-02-15 16:23 - 2005-07-22 19:59 - 03807440 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_27.dll
2014-02-15 16:23 - 2005-07-22 19:59 - 02319568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_27.dll
2014-02-15 16:23 - 2005-05-26 15:34 - 03767504 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_26.dll
2014-02-15 16:23 - 2005-05-26 15:34 - 02297552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_26.dll
2014-02-15 16:23 - 2005-03-18 17:19 - 03823312 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_25.dll
2014-02-15 16:23 - 2005-03-18 17:19 - 02337488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_25.dll
2014-02-15 16:23 - 2005-02-05 19:45 - 03544272 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_24.dll
2014-02-15 16:23 - 2005-02-05 19:45 - 02222800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_24.dll
2014-02-15 16:22 - 2014-02-15 16:22 - 00000000 ____D () C:\Users\Benutzername\AppData\Roaming\Avira
2014-02-15 16:20 - 2014-02-15 16:20 - 00000000 ____D () C:\ProgramData\Avira
2014-02-15 16:20 - 2014-02-15 16:20 - 00000000 ____D () C:\Program Files (x86)\Avira
2014-02-15 16:20 - 2013-12-18 09:32 - 00131576 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2014-02-15 16:20 - 2013-12-18 09:32 - 00108440 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2014-02-15 16:20 - 2013-12-18 09:32 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys
2014-02-15 16:19 - 2014-02-15 16:23 - 00000000 ____D () C:\Windows\SysWOW64\directx
2014-02-15 16:18 - 2014-02-15 16:18 - 00000000 ____D () C:\Windows\SysWOW64\RTCOM
2014-02-15 16:18 - 2014-02-15 16:18 - 00000000 ____D () C:\Program Files\Realtek
2014-02-15 16:17 - 2013-12-10 20:20 - 03771352 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RTKVHD64.sys
2014-02-15 16:17 - 2013-12-10 10:17 - 00693385 _____ () C:\Windows\system32\Drivers\RTAIODAT.DAT
2014-02-15 16:17 - 2013-12-06 17:29 - 00397592 _____ (Creative Technology Ltd.) C:\Windows\system32\MBWrp64.dll
2014-02-15 16:17 - 2013-12-05 20:21 - 00153304 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoInstII64.dll
2014-02-15 16:17 - 2013-12-04 16:27 - 01958616 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTSnMg64.cpl
2014-02-15 16:17 - 2013-11-26 17:26 - 00618200 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtDataProc64.dll
2014-02-15 16:17 - 2013-11-25 17:20 - 02080472 _____ (Realtek Semiconductor Corp.) C:\Windows\RtlExUpd.dll
2014-02-15 16:17 - 2013-11-25 15:59 - 02810072 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtPgEx64.dll
2014-02-15 16:17 - 2013-11-25 15:59 - 02588888 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkAPO64.dll
2014-02-15 16:17 - 2013-11-14 15:49 - 01286872 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTCOM64.dll
2014-02-15 16:17 - 2013-11-13 18:52 - 01013504 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPOShell64.dll
2014-02-15 16:17 - 2013-11-13 18:10 - 02103040 _____ (Waves Audio Ltd.) C:\Windows\system32\WavesGUILib64.dll
2014-02-15 16:17 - 2013-11-13 18:07 - 02036992 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioEQ64.dll
2014-02-15 16:17 - 2013-10-28 17:29 - 01021656 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkApi64.dll
2014-02-15 16:17 - 2013-10-16 03:43 - 00209096 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAC64.dll
2014-02-15 16:17 - 2013-10-11 12:47 - 00113576 _____ (Real Sound Lab SIA) C:\Windows\system32\CONEQMSAPOGUILibrary.dll
2014-02-15 16:17 - 2013-08-05 18:11 - 02743328 _____ (Fortemedia Corporation) C:\Windows\system32\FMAPO64.dll
2014-02-15 16:17 - 2013-01-11 16:27 - 00628504 _____ (Creative Technology Ltd.) C:\Windows\system32\MBTHX64.dll
2014-02-15 16:17 - 2013-01-11 16:27 - 00563992 _____ (Creative Technology Ltd.) C:\Windows\SysWOW64\MBTHX32.dll
2014-02-15 16:17 - 2012-03-08 11:47 - 00108640 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAR64.dll
2014-02-15 16:17 - 2011-12-20 15:32 - 00331880 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtlCPAPI64.dll
2014-02-15 16:17 - 2011-11-22 16:28 - 00014952 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCoLDR64.dll
2014-02-15 16:17 - 2010-11-08 07:31 - 00375128 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEP64A.dll
2014-02-15 16:17 - 2010-11-08 07:31 - 00310104 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DHT64.dll
2014-02-15 16:17 - 2010-11-08 07:31 - 00310104 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DAA64.dll
2014-02-15 16:17 - 2010-11-08 07:31 - 00204120 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEED64A.dll
2014-02-15 16:17 - 2010-11-08 07:31 - 00101208 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEL64A.dll
2014-02-15 16:17 - 2010-11-08 07:31 - 00078680 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEG64A.dll
2014-02-15 16:17 - 2010-11-03 18:30 - 00149608 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCfg64.dll
2014-02-15 16:17 - 2010-09-27 09:34 - 00318808 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO20.dll
2014-02-15 16:17 - 2009-11-24 09:55 - 00518896 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSX64.dll
2014-02-15 16:17 - 2009-11-24 09:55 - 00211184 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSH64.dll
2014-02-15 16:17 - 2009-11-24 09:55 - 00198896 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSHP64.dll
2014-02-15 16:17 - 2009-11-24 09:55 - 00155888 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSWOW64.dll
2014-02-15 16:17 - 2009-11-18 07:12 - 00032344 _____ (Creative Technology Ltd.) C:\Windows\system32\Drivers\MBfilt64.sys
2014-02-15 16:16 - 2014-02-15 16:17 - 00000000 ____D () C:\Users\Benutzername\Desktop\realtek_hd_audio
2014-02-15 16:09 - 2014-02-15 16:09 - 00000414 _____ () C:\Windows\G600DFUTool.log
2014-02-15 16:07 - 2014-02-15 16:07 - 00018960 _____ (Logitech, Inc.) C:\Windows\system32\Drivers\LNonPnP.sys
2014-02-15 16:07 - 2014-02-15 16:07 - 00000387 _____ () C:\Windows\LkmdfCoInst.log
2014-02-15 16:07 - 2014-02-15 16:07 - 00000000 ____D () C:\Users\Benutzername\AppData\Roaming\NVIDIA
2014-02-15 16:07 - 2014-02-15 16:07 - 00000000 ____D () C:\Users\Benutzername\AppData\Local\Logitech
2014-02-15 16:07 - 2014-02-15 16:07 - 00000000 ____D () C:\ProgramData\LogiShrd
2014-02-15 16:07 - 2014-02-15 16:07 - 00000000 ____D () C:\Program Files\Logitech Gaming Software
2014-02-15 16:06 - 2014-02-15 16:06 - 00000000 ____D () C:\Users\Benutzername\AppData\Roaming\Logitech
2014-02-15 16:06 - 2014-02-15 16:06 - 00000000 ____D () C:\Users\Benutzername\AppData\Roaming\Logishrd
2014-02-15 15:58 - 2008-07-31 10:41 - 00068616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_1.dll
2014-02-15 15:58 - 2008-07-31 10:40 - 00509448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_2.dll
2014-02-15 15:58 - 2008-07-12 08:18 - 03851784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_39.dll
2014-02-15 15:58 - 2008-07-12 08:18 - 01493528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_39.dll
2014-02-15 15:58 - 2008-07-12 08:18 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_39.dll
2014-02-15 15:57 - 2014-02-15 17:22 - 00000000 __SHD () C:\Windows\SysWOW64\AI_RecycleBin
2014-02-15 15:57 - 2014-02-15 17:02 - 00000000 ____D () C:\Users\Benutzername\AppData\Local\PMB Files
2014-02-15 15:57 - 2014-02-15 15:57 - 00000000 ____D () C:\Riot Games
2014-02-15 15:57 - 2014-02-15 15:57 - 00000000 ____D () C:\ProgramData\PMB Files
2014-02-15 15:57 - 2014-02-15 15:57 - 00000000 ____D () C:\Program Files (x86)\Pando Networks
2014-02-15 15:56 - 2014-02-15 15:57 - 00000000 ____D () C:\Users\Benutzername\AppData\Roaming\Riot Games
2014-02-15 15:53 - 2013-12-19 21:33 - 30372640 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2014-02-15 15:53 - 2013-12-19 21:33 - 25257248 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2014-02-15 15:53 - 2013-12-19 21:33 - 22960416 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2014-02-15 15:53 - 2013-12-19 21:33 - 18310112 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll
2014-02-15 15:53 - 2013-12-19 21:33 - 18222008 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2014-02-15 15:53 - 2013-12-19 21:33 - 17560352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2014-02-15 15:53 - 2013-12-19 21:33 - 15877216 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2014-02-15 15:53 - 2013-12-19 21:33 - 12645664 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2014-02-15 15:53 - 2013-12-19 21:33 - 11605752 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2014-02-15 15:53 - 2013-12-19 21:33 - 11554264 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2014-02-15 15:53 - 2013-12-19 21:33 - 09700224 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2014-02-15 15:53 - 2013-12-19 21:33 - 09657464 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2014-02-15 15:53 - 2013-12-19 21:33 - 03132704 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2014-02-15 15:53 - 2013-12-19 21:33 - 03125024 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll
2014-02-15 15:53 - 2013-12-19 21:33 - 02947872 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2014-02-15 15:53 - 2013-12-19 21:33 - 02747680 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll
2014-02-15 15:53 - 2013-12-19 21:33 - 01884448 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6433221.dll
2014-02-15 15:53 - 2013-12-19 21:33 - 01511712 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6433221.dll
2014-02-15 15:53 - 2013-12-19 21:33 - 01242400 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2014-02-15 15:53 - 2013-12-19 21:33 - 00882464 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2014-02-15 15:53 - 2013-12-19 21:33 - 00879392 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2014-02-15 15:53 - 2013-12-19 21:33 - 00852768 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2014-02-15 15:53 - 2013-12-19 21:33 - 00847648 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2014-02-15 15:53 - 2013-12-19 21:33 - 00317472 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2014-02-15 15:53 - 2013-12-19 21:33 - 00266984 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2014-02-15 15:53 - 2013-12-19 21:33 - 00168616 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2014-02-15 15:53 - 2013-12-19 21:33 - 00141336 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2014-02-15 15:46 - 2014-02-15 15:46 - 00000000 ____D () C:\Users\Benutzername\AppData\Local\NVIDIA
2014-02-15 15:41 - 2014-02-15 15:41 - 00001351 _____ () C:\Users\Public\Desktop\GeForce Experience.lnk
2014-02-15 15:40 - 2014-02-15 15:40 - 00000000 ____D () C:\Program Files (x86)\AGEIA Technologies
2014-02-15 15:40 - 2013-11-14 12:57 - 01064224 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll
2014-02-15 15:40 - 2013-11-14 12:57 - 00955168 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll
2014-02-15 15:39 - 2014-02-15 15:54 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-02-15 15:39 - 2014-02-15 15:41 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation
2014-02-15 15:39 - 2014-02-15 15:40 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation
2014-02-15 15:39 - 2014-02-15 15:39 - 01588294 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2014-02-15 15:39 - 2014-02-15 15:39 - 00000020 ___SH () C:\Users\UpdatusUser\ntuser.ini
2014-02-15 15:39 - 2014-02-15 15:39 - 00000000 _SHDL () C:\Users\UpdatusUser\Vorlagen
2014-02-15 15:39 - 2014-02-15 15:39 - 00000000 _SHDL () C:\Users\UpdatusUser\Startmenü
2014-02-15 15:39 - 2014-02-15 15:39 - 00000000 _SHDL () C:\Users\UpdatusUser\Netzwerkumgebung
2014-02-15 15:39 - 2014-02-15 15:39 - 00000000 _SHDL () C:\Users\UpdatusUser\Lokale Einstellungen
2014-02-15 15:39 - 2014-02-15 15:39 - 00000000 _SHDL () C:\Users\UpdatusUser\Eigene Dateien
2014-02-15 15:39 - 2014-02-15 15:39 - 00000000 _SHDL () C:\Users\UpdatusUser\Druckumgebung
2014-02-15 15:39 - 2014-02-15 15:39 - 00000000 _SHDL () C:\Users\UpdatusUser\Documents\Eigene Musik
2014-02-15 15:39 - 2014-02-15 15:39 - 00000000 _SHDL () C:\Users\UpdatusUser\Documents\Eigene Bilder
2014-02-15 15:39 - 2014-02-15 15:39 - 00000000 _SHDL () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-02-15 15:39 - 2014-02-15 15:39 - 00000000 _SHDL () C:\Users\UpdatusUser\AppData\Local\Verlauf
2014-02-15 15:39 - 2014-02-15 15:39 - 00000000 _SHDL () C:\Users\UpdatusUser\AppData\Local\Anwendungsdaten
2014-02-15 15:39 - 2014-02-15 15:39 - 00000000 _SHDL () C:\Users\UpdatusUser\Anwendungsdaten
2014-02-15 15:39 - 2013-12-19 21:33 - 00061216 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll
2014-02-15 15:39 - 2013-12-19 21:33 - 00053024 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll
2014-02-15 15:39 - 2013-12-19 19:53 - 06671648 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll
2014-02-15 15:39 - 2013-12-19 19:53 - 03490080 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll
2014-02-15 15:39 - 2013-12-19 19:53 - 02559776 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll
2014-02-15 15:39 - 2013-12-19 19:53 - 00922912 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
2014-02-15 15:39 - 2013-12-19 19:53 - 00386336 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll
2014-02-15 15:39 - 2013-12-19 19:53 - 00063776 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll
2014-02-15 15:39 - 2013-12-19 06:01 - 03539040 _____ () C:\Windows\system32\nvcoproc.bin
2014-02-15 15:39 - 2009-07-14 05:54 - 00000000 ___RD () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-02-15 15:39 - 2009-07-14 05:49 - 00000000 ___RD () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2014-02-15 15:37 - 2013-12-19 21:33 - 15230352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll
2014-02-15 15:37 - 2013-12-19 21:33 - 03071656 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
2014-02-15 15:37 - 2013-12-19 21:33 - 02698272 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
2014-02-15 15:37 - 2013-12-19 21:33 - 01436528 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll
2014-02-15 15:37 - 2013-12-19 21:33 - 00023754 _____ () C:\Windows\system32\nvinfo.pb
2014-02-15 15:37 - 2013-11-14 12:57 - 00039200 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys
2014-02-15 15:37 - 2013-11-14 12:57 - 00029984 _____ (NVIDIA Corporation) C:\Windows\system32\nvaudcap64v.dll
2014-02-15 15:37 - 2013-11-14 12:57 - 00028960 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll
2014-02-15 15:37 - 2013-11-14 12:56 - 01884448 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6433182.dll
2014-02-15 15:37 - 2013-11-14 12:56 - 01511712 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6433182.dll
2014-02-15 15:36 - 2014-02-15 15:40 - 00000000 ____D () C:\Program Files\NVIDIA Corporation
2014-02-15 15:36 - 2014-02-15 15:36 - 00000000 ____D () C:\NVIDIA
2014-02-15 15:36 - 2012-02-17 07:38 - 01112064 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2014-02-15 15:36 - 2012-02-17 07:38 - 01031680 _____ (Microsoft Corporation) C:\Windows\system32\rdpcore.dll
2014-02-15 15:36 - 2012-02-17 06:34 - 00826880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpcore.dll
2014-02-15 15:36 - 2012-02-17 05:58 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpwd.sys
2014-02-15 15:36 - 2012-02-17 05:57 - 00023552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdtcp.sys
2014-02-15 15:33 - 2012-06-02 23:19 - 02428952 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2014-02-15 15:33 - 2012-06-02 23:19 - 00701976 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2014-02-15 15:33 - 2012-06-02 23:19 - 00057880 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2014-02-15 15:33 - 2012-06-02 23:19 - 00044056 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2014-02-15 15:33 - 2012-06-02 23:19 - 00038424 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2014-02-15 15:33 - 2012-06-02 23:15 - 02622464 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2014-02-15 15:33 - 2012-06-02 23:15 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2014-02-15 15:33 - 2012-06-02 15:19 - 00186752 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2014-02-15 15:33 - 2012-06-02 15:15 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2014-02-15 15:32 - 2014-02-15 16:17 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-02-15 15:32 - 2014-02-15 16:17 - 00000000 ____D () C:\Program Files (x86)\Realtek
2014-02-15 15:32 - 2013-04-10 04:09 - 00849992 _____ (Realtek ) C:\Windows\system32\Drivers\Rt64win7.sys
2014-02-15 15:32 - 2013-04-10 04:09 - 00108104 _____ (Realtek Semiconductor Corporation) C:\Windows\system32\RTNUninst64.dll
2014-02-15 15:32 - 2013-04-10 04:09 - 00073800 _____ (Realtek Semiconductor Corporation) C:\Windows\system32\RtNicProp64.dll
2014-02-15 15:31 - 2014-02-15 15:31 - 00000000 ____D () C:\MSI
2014-02-15 15:27 - 2014-02-15 17:35 - 00000000 ____D () C:\Users\Benutzername
2014-02-15 15:27 - 2014-02-15 16:33 - 00486967 _____ () C:\Windows\WindowsUpdate.log
2014-02-15 15:27 - 2014-02-15 15:27 - 00001443 _____ () C:\Users\Benutzername\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-02-15 15:27 - 2014-02-15 15:27 - 00001409 _____ () C:\Users\Benutzername\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk
2014-02-15 15:27 - 2014-02-15 15:27 - 00000020 ___SH () C:\Users\Benutzername\ntuser.ini
2014-02-15 15:27 - 2014-02-15 15:27 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Musik
2014-02-15 15:27 - 2014-02-15 15:27 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Bilder
2014-02-15 15:27 - 2014-02-15 15:27 - 00000000 _SHDL () C:\Users\Default\Vorlagen
2014-02-15 15:27 - 2014-02-15 15:27 - 00000000 _SHDL () C:\Users\Default\Startmenü
2014-02-15 15:27 - 2014-02-15 15:27 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung
2014-02-15 15:27 - 2014-02-15 15:27 - 00000000 _SHDL () C:\Users\Default\Lokale Einstellungen
2014-02-15 15:27 - 2014-02-15 15:27 - 00000000 _SHDL () C:\Users\Default\Eigene Dateien
2014-02-15 15:27 - 2014-02-15 15:27 - 00000000 _SHDL () C:\Users\Default\Druckumgebung
2014-02-15 15:27 - 2014-02-15 15:27 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik
2014-02-15 15:27 - 2014-02-15 15:27 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder
2014-02-15 15:27 - 2014-02-15 15:27 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-02-15 15:27 - 2014-02-15 15:27 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf
2014-02-15 15:27 - 2014-02-15 15:27 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Anwendungsdaten
2014-02-15 15:27 - 2014-02-15 15:27 - 00000000 _SHDL () C:\Users\Default\Anwendungsdaten
2014-02-15 15:27 - 2014-02-15 15:27 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik
2014-02-15 15:27 - 2014-02-15 15:27 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder
2014-02-15 15:27 - 2014-02-15 15:27 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-02-15 15:27 - 2014-02-15 15:27 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf
2014-02-15 15:27 - 2014-02-15 15:27 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Anwendungsdaten
2014-02-15 15:27 - 2014-02-15 15:27 - 00000000 _SHDL () C:\Users\Benutzername\Vorlagen
2014-02-15 15:27 - 2014-02-15 15:27 - 00000000 _SHDL () C:\Users\Benutzername\Startmenü
2014-02-15 15:27 - 2014-02-15 15:27 - 00000000 _SHDL () C:\Users\Benutzername\Netzwerkumgebung
2014-02-15 15:27 - 2014-02-15 15:27 - 00000000 _SHDL () C:\Users\Benutzername\Lokale Einstellungen
2014-02-15 15:27 - 2014-02-15 15:27 - 00000000 _SHDL () C:\Users\Benutzername\Eigene Dateien
2014-02-15 15:27 - 2014-02-15 15:27 - 00000000 _SHDL () C:\Users\Benutzername\Druckumgebung
2014-02-15 15:27 - 2014-02-15 15:27 - 00000000 _SHDL () C:\Users\Benutzername\Documents\Eigene Musik
2014-02-15 15:27 - 2014-02-15 15:27 - 00000000 _SHDL () C:\Users\Benutzername\Documents\Eigene Bilder
2014-02-15 15:27 - 2014-02-15 15:27 - 00000000 _SHDL () C:\Users\Benutzername\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-02-15 15:27 - 2014-02-15 15:27 - 00000000 _SHDL () C:\Users\Benutzername\AppData\Local\Verlauf
2014-02-15 15:27 - 2014-02-15 15:27 - 00000000 _SHDL () C:\Users\Benutzername\AppData\Local\Anwendungsdaten
2014-02-15 15:27 - 2014-02-15 15:27 - 00000000 _SHDL () C:\Users\Benutzername\Anwendungsdaten
2014-02-15 15:27 - 2014-02-15 15:27 - 00000000 _SHDL () C:\Programme
2014-02-15 15:27 - 2014-02-15 15:27 - 00000000 _SHDL () C:\ProgramData\Vorlagen
2014-02-15 15:27 - 2014-02-15 15:27 - 00000000 _SHDL () C:\ProgramData\Startmenü
2014-02-15 15:27 - 2014-02-15 15:27 - 00000000 _SHDL () C:\ProgramData\Favoriten
2014-02-15 15:27 - 2014-02-15 15:27 - 00000000 _SHDL () C:\ProgramData\Dokumente
2014-02-15 15:27 - 2014-02-15 15:27 - 00000000 _SHDL () C:\ProgramData\Anwendungsdaten
2014-02-15 15:27 - 2014-02-15 15:27 - 00000000 _SHDL () C:\Program Files\Gemeinsame Dateien
2014-02-15 15:27 - 2014-02-15 15:27 - 00000000 _SHDL () C:\Dokumente und Einstellungen
2014-02-15 15:27 - 2014-02-15 15:27 - 00000000 __SHD () C:\Recovery
2014-02-15 15:27 - 2014-02-15 15:27 - 00000000 ___RD () C:\Users\Benutzername\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-02-15 15:27 - 2014-02-15 15:27 - 00000000 ___RD () C:\Users\Benutzername\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-02-15 15:27 - 2014-02-15 15:27 - 00000000 ____D () C:\Users\Benutzername\AppData\Local\VirtualStore
2014-02-15 15:27 - 2009-07-14 05:54 - 00000000 ___RD () C:\Users\Benutzername\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-02-15 15:27 - 2009-07-14 05:49 - 00000000 ___RD () C:\Users\Benutzername\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2014-02-15 15:23 - 2014-02-15 15:23 - 00001355 _____ () C:\Windows\TSSysprep.log
2014-02-15 15:21 - 2014-02-15 15:27 - 00000000 ____D () C:\Windows\Panther

==================== One Month Modified Files and Folders =======

2014-02-15 17:37 - 2014-02-15 17:37 - 00013594 _____ () C:\Users\Benutzername\Desktop\FRST.txt
2014-02-15 17:37 - 2014-02-15 17:37 - 00000000 ____D () C:\FRST
2014-02-15 17:36 - 2014-02-15 17:36 - 02152960 _____ (Farbar) C:\Users\Benutzername\Desktop\FRST64.exe
2014-02-15 17:35 - 2014-02-15 17:35 - 00000486 _____ () C:\Users\Benutzername\Desktop\defogger_disable.log
2014-02-15 17:35 - 2014-02-15 17:35 - 00000000 _____ () C:\Users\Benutzername\defogger_reenable
2014-02-15 17:35 - 2014-02-15 15:27 - 00000000 ____D () C:\Users\Benutzername
2014-02-15 17:34 - 2014-02-15 17:34 - 00050477 _____ () C:\Users\Benutzername\Desktop\Defogger.exe
2014-02-15 17:31 - 2014-02-15 17:23 - 00000000 ____D () C:\Program Files\VideoLAN
2014-02-15 17:22 - 2014-02-15 17:22 - 00001196 _____ () C:\Users\Benutzername\AppData\Roaming\Microsoft\Windows\Start Menu\Startfenster.lnk
2014-02-15 17:22 - 2014-02-15 17:22 - 00000000 ____D () C:\Users\Benutzername\AppData\Roaming\PingPlotter
2014-02-15 17:22 - 2014-02-15 17:22 - 00000000 ____D () C:\Users\Benutzername\AppData\Roaming\Downloaded Installations
2014-02-15 17:22 - 2014-02-15 17:22 - 00000000 ____D () C:\Program Files (x86)\PingPlotter Standard
2014-02-15 17:22 - 2014-02-15 15:57 - 00000000 __SHD () C:\Windows\SysWOW64\AI_RecycleBin
2014-02-15 17:21 - 2014-02-15 16:49 - 00000000 ____D () C:\Users\Benutzername\AppData\Roaming\TS3Client
2014-02-15 17:12 - 2014-02-15 17:12 - 00000000 ____D () C:\Users\Benutzername\AppData\Roaming\LolClient
2014-02-15 17:03 - 2014-02-15 17:03 - 00000000 ____D () C:\Users\Benutzername\AppData\Roaming\Thunderbird
2014-02-15 17:03 - 2014-02-15 17:03 - 00000000 ____D () C:\Users\Benutzername\AppData\Local\Thunderbird
2014-02-15 17:02 - 2014-02-15 15:57 - 00000000 ____D () C:\Users\Benutzername\AppData\Local\PMB Files
2014-02-15 16:57 - 2014-02-15 16:57 - 00000000 ____D () C:\Program Files (x86)\Mozilla Thunderbird
2014-02-15 16:57 - 2014-02-15 16:40 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-02-15 16:50 - 2014-02-15 16:50 - 00063568 _____ () C:\Users\Benutzername\AppData\Local\GDIPFONTCACHEV1.DAT
2014-02-15 16:44 - 2014-02-15 16:44 - 00000000 ____D () C:\Program Files\TeamSpeak 3 Client
2014-02-15 16:42 - 2014-02-15 16:42 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-02-15 16:42 - 2014-02-15 16:42 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-02-15 16:42 - 2014-02-15 16:42 - 00174504 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-02-15 16:42 - 2014-02-15 16:42 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-02-15 16:42 - 2014-02-15 16:42 - 00000000 ____D () C:\Users\Benutzername\AppData\Roaming\Mozilla
2014-02-15 16:42 - 2014-02-15 16:42 - 00000000 ____D () C:\Users\Benutzername\AppData\Local\Mozilla
2014-02-15 16:42 - 2014-02-15 16:42 - 00000000 ____D () C:\ProgramData\Sun
2014-02-15 16:42 - 2014-02-15 16:42 - 00000000 ____D () C:\ProgramData\Oracle
2014-02-15 16:42 - 2014-02-15 16:42 - 00000000 ____D () C:\Program Files (x86)\MozBackup
2014-02-15 16:42 - 2014-02-15 16:42 - 00000000 ____D () C:\Program Files (x86)\Java
2014-02-15 16:40 - 2014-02-15 16:40 - 00000000 ____D () C:\ProgramData\Mozilla
2014-02-15 16:40 - 2014-02-15 16:40 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-02-15 16:40 - 2009-07-14 05:45 - 00026352 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-02-15 16:40 - 2009-07-14 05:45 - 00026352 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-02-15 16:38 - 2014-02-15 16:38 - 00002786 _____ () C:\Windows\System32\Tasks\CCleanerSkipUAC
2014-02-15 16:38 - 2014-02-15 16:38 - 00000000 ____D () C:\Program Files\CCleaner
2014-02-15 16:37 - 2014-02-15 16:37 - 00000000 ____D () C:\Program Files (x86)\OpenOffice 4
2014-02-15 16:36 - 2010-11-21 07:50 - 00696132 _____ () C:\Windows\system32\perfh007.dat
2014-02-15 16:36 - 2010-11-21 07:50 - 00147428 _____ () C:\Windows\system32\perfc007.dat
2014-02-15 16:36 - 2009-07-14 06:13 - 01611160 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-02-15 16:36 - 2009-07-14 04:20 - 00000000 ____D () C:\Program Files\Common Files\Microsoft Shared
2014-02-15 16:33 - 2014-02-15 15:27 - 00486967 _____ () C:\Windows\WindowsUpdate.log
2014-02-15 16:29 - 2010-11-21 04:47 - 00103652 _____ () C:\Windows\PFRO.log
2014-02-15 16:29 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-02-15 16:29 - 2009-07-14 05:51 - 00023647 _____ () C:\Windows\setupact.log
2014-02-15 16:27 - 2014-02-15 16:27 - 00000000 ____D () C:\Users\Benutzername\AppData\Roaming\Macromedia
2014-02-15 16:27 - 2014-02-15 16:27 - 00000000 ____D () C:\Users\Benutzername\AppData\Roaming\Adobe
2014-02-15 16:27 - 2014-02-15 16:25 - 00000000 ____D () C:\Users\Benutzername\AppData\Local\Adobe
2014-02-15 16:26 - 2014-02-15 16:26 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-02-15 16:26 - 2014-02-15 16:26 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-02-15 16:26 - 2014-02-15 16:26 - 00000000 ____D () C:\Windows\SysWOW64\Macromed
2014-02-15 16:26 - 2014-02-15 16:26 - 00000000 ____D () C:\Windows\system32\Macromed
2014-02-15 16:23 - 2014-02-15 16:23 - 00010123 _____ () C:\Windows\DirectX.log
2014-02-15 16:23 - 2014-02-15 16:19 - 00000000 ____D () C:\Windows\SysWOW64\directx
2014-02-15 16:22 - 2014-02-15 16:22 - 00000000 ____D () C:\Users\Benutzername\AppData\Roaming\Avira
2014-02-15 16:20 - 2014-02-15 16:20 - 00000000 ____D () C:\ProgramData\Avira
2014-02-15 16:20 - 2014-02-15 16:20 - 00000000 ____D () C:\Program Files (x86)\Avira
2014-02-15 16:18 - 2014-02-15 16:18 - 00000000 ____D () C:\Windows\SysWOW64\RTCOM
2014-02-15 16:18 - 2014-02-15 16:18 - 00000000 ____D () C:\Program Files\Realtek
2014-02-15 16:17 - 2014-02-15 16:16 - 00000000 ____D () C:\Users\Benutzername\Desktop\realtek_hd_audio
2014-02-15 16:17 - 2014-02-15 15:32 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-02-15 16:17 - 2014-02-15 15:32 - 00000000 ____D () C:\Program Files (x86)\Realtek
2014-02-15 16:09 - 2014-02-15 16:09 - 00000414 _____ () C:\Windows\G600DFUTool.log
2014-02-15 16:07 - 2014-02-15 16:07 - 00018960 _____ (Logitech, Inc.) C:\Windows\system32\Drivers\LNonPnP.sys
2014-02-15 16:07 - 2014-02-15 16:07 - 00000387 _____ () C:\Windows\LkmdfCoInst.log
2014-02-15 16:07 - 2014-02-15 16:07 - 00000000 ____D () C:\Users\Benutzername\AppData\Roaming\NVIDIA
2014-02-15 16:07 - 2014-02-15 16:07 - 00000000 ____D () C:\Users\Benutzername\AppData\Local\Logitech
2014-02-15 16:07 - 2014-02-15 16:07 - 00000000 ____D () C:\ProgramData\LogiShrd
2014-02-15 16:07 - 2014-02-15 16:07 - 00000000 ____D () C:\Program Files\Logitech Gaming Software
2014-02-15 16:06 - 2014-02-15 16:06 - 00000000 ____D () C:\Users\Benutzername\AppData\Roaming\Logitech
2014-02-15 16:06 - 2014-02-15 16:06 - 00000000 ____D () C:\Users\Benutzername\AppData\Roaming\Logishrd
2014-02-15 15:57 - 2014-02-15 15:57 - 00000000 ____D () C:\Riot Games
2014-02-15 15:57 - 2014-02-15 15:57 - 00000000 ____D () C:\ProgramData\PMB Files
2014-02-15 15:57 - 2014-02-15 15:57 - 00000000 ____D () C:\Program Files (x86)\Pando Networks
2014-02-15 15:57 - 2014-02-15 15:56 - 00000000 ____D () C:\Users\Benutzername\AppData\Roaming\Riot Games
2014-02-15 15:54 - 2014-02-15 15:39 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-02-15 15:46 - 2014-02-15 15:46 - 00000000 ____D () C:\Users\Benutzername\AppData\Local\NVIDIA
2014-02-15 15:41 - 2014-02-15 15:41 - 00001351 _____ () C:\Users\Public\Desktop\GeForce Experience.lnk
2014-02-15 15:41 - 2014-02-15 15:39 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation
2014-02-15 15:40 - 2014-02-15 15:40 - 00000000 ____D () C:\Program Files (x86)\AGEIA Technologies
2014-02-15 15:40 - 2014-02-15 15:39 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation
2014-02-15 15:40 - 2014-02-15 15:36 - 00000000 ____D () C:\Program Files\NVIDIA Corporation
2014-02-15 15:39 - 2014-02-15 15:39 - 01588294 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2014-02-15 15:39 - 2014-02-15 15:39 - 00000020 ___SH () C:\Users\UpdatusUser\ntuser.ini
2014-02-15 15:39 - 2014-02-15 15:39 - 00000000 _SHDL () C:\Users\UpdatusUser\Vorlagen
2014-02-15 15:39 - 2014-02-15 15:39 - 00000000 _SHDL () C:\Users\UpdatusUser\Startmenü
2014-02-15 15:39 - 2014-02-15 15:39 - 00000000 _SHDL () C:\Users\UpdatusUser\Netzwerkumgebung
2014-02-15 15:39 - 2014-02-15 15:39 - 00000000 _SHDL () C:\Users\UpdatusUser\Lokale Einstellungen
2014-02-15 15:39 - 2014-02-15 15:39 - 00000000 _SHDL () C:\Users\UpdatusUser\Eigene Dateien
2014-02-15 15:39 - 2014-02-15 15:39 - 00000000 _SHDL () C:\Users\UpdatusUser\Druckumgebung
2014-02-15 15:39 - 2014-02-15 15:39 - 00000000 _SHDL () C:\Users\UpdatusUser\Documents\Eigene Musik
2014-02-15 15:39 - 2014-02-15 15:39 - 00000000 _SHDL () C:\Users\UpdatusUser\Documents\Eigene Bilder
2014-02-15 15:39 - 2014-02-15 15:39 - 00000000 _SHDL () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-02-15 15:39 - 2014-02-15 15:39 - 00000000 _SHDL () C:\Users\UpdatusUser\AppData\Local\Verlauf
2014-02-15 15:39 - 2014-02-15 15:39 - 00000000 _SHDL () C:\Users\UpdatusUser\AppData\Local\Anwendungsdaten
2014-02-15 15:39 - 2014-02-15 15:39 - 00000000 _SHDL () C:\Users\UpdatusUser\Anwendungsdaten
2014-02-15 15:39 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\Help
2014-02-15 15:36 - 2014-02-15 15:36 - 00000000 ____D () C:\NVIDIA
2014-02-15 15:32 - 2009-07-14 06:32 - 00000000 ____D () C:\Windows\system32\restore
2014-02-15 15:31 - 2014-02-15 15:31 - 00000000 ____D () C:\MSI
2014-02-15 15:28 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-02-15 15:27 - 2014-02-15 15:27 - 00001443 _____ () C:\Users\Benutzername\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-02-15 15:27 - 2014-02-15 15:27 - 00001409 _____ () C:\Users\Benutzername\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk
2014-02-15 15:27 - 2014-02-15 15:27 - 00000020 ___SH () C:\Users\Benutzername\ntuser.ini
2014-02-15 15:27 - 2014-02-15 15:27 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Musik
2014-02-15 15:27 - 2014-02-15 15:27 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Bilder
2014-02-15 15:27 - 2014-02-15 15:27 - 00000000 _SHDL () C:\Users\Default\Vorlagen
2014-02-15 15:27 - 2014-02-15 15:27 - 00000000 _SHDL () C:\Users\Default\Startmenü
2014-02-15 15:27 - 2014-02-15 15:27 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung
2014-02-15 15:27 - 2014-02-15 15:27 - 00000000 _SHDL () C:\Users\Default\Lokale Einstellungen
2014-02-15 15:27 - 2014-02-15 15:27 - 00000000 _SHDL () C:\Users\Default\Eigene Dateien
2014-02-15 15:27 - 2014-02-15 15:27 - 00000000 _SHDL () C:\Users\Default\Druckumgebung
2014-02-15 15:27 - 2014-02-15 15:27 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik
2014-02-15 15:27 - 2014-02-15 15:27 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder
2014-02-15 15:27 - 2014-02-15 15:27 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-02-15 15:27 - 2014-02-15 15:27 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf
2014-02-15 15:27 - 2014-02-15 15:27 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Anwendungsdaten
2014-02-15 15:27 - 2014-02-15 15:27 - 00000000 _SHDL () C:\Users\Default\Anwendungsdaten
2014-02-15 15:27 - 2014-02-15 15:27 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik
2014-02-15 15:27 - 2014-02-15 15:27 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder
2014-02-15 15:27 - 2014-02-15 15:27 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-02-15 15:27 - 2014-02-15 15:27 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf
2014-02-15 15:27 - 2014-02-15 15:27 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Anwendungsdaten
2014-02-15 15:27 - 2014-02-15 15:27 - 00000000 _SHDL () C:\Users\Benutzername\Vorlagen
2014-02-15 15:27 - 2014-02-15 15:27 - 00000000 _SHDL () C:\Users\Benutzername\Startmenü
2014-02-15 15:27 - 2014-02-15 15:27 - 00000000 _SHDL () C:\Users\Benutzername\Netzwerkumgebung
2014-02-15 15:27 - 2014-02-15 15:27 - 00000000 _SHDL () C:\Users\Benutzername\Lokale Einstellungen
2014-02-15 15:27 - 2014-02-15 15:27 - 00000000 _SHDL () C:\Users\Benutzername\Eigene Dateien
2014-02-15 15:27 - 2014-02-15 15:27 - 00000000 _SHDL () C:\Users\Benutzername\Druckumgebung
2014-02-15 15:27 - 2014-02-15 15:27 - 00000000 _SHDL () C:\Users\Benutzername\Documents\Eigene Musik
2014-02-15 15:27 - 2014-02-15 15:27 - 00000000 _SHDL () C:\Users\Benutzername\Documents\Eigene Bilder
2014-02-15 15:27 - 2014-02-15 15:27 - 00000000 _SHDL () C:\Users\Benutzername\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-02-15 15:27 - 2014-02-15 15:27 - 00000000 _SHDL () C:\Users\Benutzername\AppData\Local\Verlauf
2014-02-15 15:27 - 2014-02-15 15:27 - 00000000 _SHDL () C:\Users\Benutzername\AppData\Local\Anwendungsdaten
2014-02-15 15:27 - 2014-02-15 15:27 - 00000000 _SHDL () C:\Users\Benutzername\Anwendungsdaten
2014-02-15 15:27 - 2014-02-15 15:27 - 00000000 _SHDL () C:\Programme
2014-02-15 15:27 - 2014-02-15 15:27 - 00000000 _SHDL () C:\ProgramData\Vorlagen
2014-02-15 15:27 - 2014-02-15 15:27 - 00000000 _SHDL () C:\ProgramData\Startmenü
2014-02-15 15:27 - 2014-02-15 15:27 - 00000000 _SHDL () C:\ProgramData\Favoriten
2014-02-15 15:27 - 2014-02-15 15:27 - 00000000 _SHDL () C:\ProgramData\Dokumente
2014-02-15 15:27 - 2014-02-15 15:27 - 00000000 _SHDL () C:\ProgramData\Anwendungsdaten
2014-02-15 15:27 - 2014-02-15 15:27 - 00000000 _SHDL () C:\Program Files\Gemeinsame Dateien
2014-02-15 15:27 - 2014-02-15 15:27 - 00000000 _SHDL () C:\Dokumente und Einstellungen
2014-02-15 15:27 - 2014-02-15 15:27 - 00000000 __SHD () C:\Recovery
2014-02-15 15:27 - 2014-02-15 15:27 - 00000000 ___RD () C:\Users\Benutzername\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-02-15 15:27 - 2014-02-15 15:27 - 00000000 ___RD () C:\Users\Benutzername\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-02-15 15:27 - 2014-02-15 15:27 - 00000000 ____D () C:\Users\Benutzername\AppData\Local\VirtualStore
2014-02-15 15:27 - 2014-02-15 15:21 - 00000000 ____D () C:\Windows\Panther
2014-02-15 15:27 - 2009-07-14 04:20 - 00000000 __RHD () C:\Users\Default
2014-02-15 15:27 - 2009-07-14 04:20 - 00000000 ____D () C:\Program Files\Windows NT
2014-02-15 15:26 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\rescache
2014-02-15 15:24 - 2009-07-14 05:45 - 00274464 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-02-15 15:23 - 2014-02-15 15:23 - 00001355 _____ () C:\Windows\TSSysprep.log
2014-02-15 15:23 - 2009-07-14 05:46 - 00002790 _____ () C:\Windows\DtcInstall.log
2014-02-15 15:23 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\sysprep
2014-02-15 15:22 - 2010-11-21 08:00 - 00000000 ____D () C:\Windows\CSC
2014-02-15 15:21 - 2009-07-14 06:38 - 00025600 ___SH () C:\Windows\system32\config\BCD-Template.LOG
2014-02-15 15:21 - 2009-07-14 06:32 - 00028672 _____ () C:\Windows\system32\config\BCD-Template
2014-02-15 13:39 - 2014-02-15 17:04 - 00000667 _____ () C:\Users\Benutzername\Documents\indexfile.txt
2014-02-14 05:22 - 2014-02-15 17:22 - 00000044 ____H () C:\Program Files (x86)\18a3d330.tmp

Some content of TEMP:
====================
C:\Users\Benutzername\AppData\Local\Temp\avgnt.exe
C:\Users\Benutzername\AppData\Local\Temp\devcon64.exe
C:\Users\Benutzername\AppData\Local\Temp\DJAPI.dll
C:\Users\Benutzername\AppData\Local\Temp\PrefJsonCpp.exe
C:\Users\Benutzername\AppData\Local\Temp\sqlite3.exe
C:\Users\Benutzername\AppData\Local\Temp\swt-win32-3349.dll


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-02-15 15:21

==================== End Of Log ============================
         
Addition
Code:
ATTFilter
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 13-02-2014 01
Ran by Benutzername at 2014-02-15 17:37:31
Running from C:\Users\Benutzername\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Avira Desktop (Enabled - Up to date) {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}
AS: Avira Desktop (Enabled - Up to date) {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

Adobe Flash Player 12 ActiveX (x32 Version: 12.0.0.44 - Adobe Systems Incorporated)
Avira Free Antivirus (x32 Version: 14.0.2.344 - Avira)
CCleaner (Version: 4.10 - Piriform)
GeForce Experience NvStream Client Components (Version: 1.6.28 - NVIDIA Corporation) Hidden
Java 7 Update 51 (x32 Version: 7.0.510 - Oracle)
Java Auto Updater (x32 Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden
League of Legends (x32 Version: 3.0.1 - Riot Games )
League of Legends (x32 Version: 3.0.1 - Riot Games ) Hidden
Logitech Gaming Software (Version: 8.45.88 - Logitech Inc.) Hidden
Logitech Gaming Software 8.51 (Version: 8.51.5 - Logitech Inc.)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4 Extended (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Extended (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4 Extended DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Extended DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219 - Microsoft Corporation)
MozBackup 1.5.1 (x32 Version:  - Pavel Cvrcek)
Mozilla Firefox 27.0.1 (x86 de) (x32 Version: 27.0.1 - Mozilla)
Mozilla Maintenance Service (x32 Version: 24.3.0 - Mozilla)
Mozilla Thunderbird 24.3.0 (x86 de) (x32 Version: 24.3.0 - Mozilla)
NVIDIA GeForce Experience 1.7.1 (Version: 1.7.1 - NVIDIA Corporation)
NVIDIA Grafiktreiber 332.21 (Version: 332.21 - NVIDIA Corporation)
NVIDIA Install Application (Version: 2.1002.142.992 - NVIDIA Corporation) Hidden
NVIDIA LED Visualizer 1.0 (Version: 1.0 - NVIDIA Corporation) Hidden
NVIDIA PhysX (x32 Version: 9.13.0725 - NVIDIA Corporation) Hidden
NVIDIA PhysX-Systemsoftware 9.13.0725 (Version: 9.13.0725 - NVIDIA Corporation)
NVIDIA ShadowPlay 9.3.21 (Version: 9.3.21 - NVIDIA Corporation) Hidden
NVIDIA Systemsteuerung 332.21 (Version: 332.21 - NVIDIA Corporation) Hidden
NVIDIA Update 9.3.21 (Version: 9.3.21 - NVIDIA Corporation) Hidden
NVIDIA Update Components (Version: 9.3.21 - NVIDIA Corporation) Hidden
NVIDIA Virtual Audio 1.2.9 (Version: 1.2.9 - NVIDIA Corporation)
OpenOffice 4.0.1 (x32 Version: 4.01.9714 - Apache Software Foundation)
Pando Media Booster (x32 Version: 2.6.0.7 - Pando Networks Inc.)
PingPlotter Standard 3.41.0s (x32 Version: 3.41.0.4 - Nessoft, LLC)
Realtek Ethernet Controller Driver (x32 Version: 7.72.410.2013 - Realtek)
Realtek High Definition Audio Driver (x32 Version: 6.0.1.7111 - Realtek Semiconductor Corp.)
SHIELD Streaming (Version: 1.6.53 - NVIDIA Corporation) Hidden
TeamSpeak 3 Client (Version: 3.0.13 - TeamSpeak Systems GmbH)

==================== Restore Points  =========================

15-02-2014 14:32:27 Installiert Realtek Ethernet Controller Driver
15-02-2014 14:33:12 Windows Update
15-02-2014 14:36:03 Windows Update
15-02-2014 14:37:26 Windows Update
15-02-2014 14:57:39 Microsoft Visual C++ 2005 Redistributable (x64) wird installiert
15-02-2014 14:57:47 Microsoft Visual C++ 2005 Redistributable wird installiert
15-02-2014 14:57:53 Installed League of Legends
15-02-2014 14:57:58 DirectX wurde installiert
15-02-2014 15:23:33 DirectX wurde installiert
15-02-2014 15:36:09 Installed Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161
15-02-2014 15:36:17 Installed Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
15-02-2014 15:37:07 OpenOffice 4.0.1 wird installiert
15-02-2014 15:42:04 Installed Java 7 Update 51
15-02-2014 16:22:20 Installed PingPlotter Standard 3.41.0s

==================== Hosts content: ==========================

2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {CA50A1F5-6E12-4DB2-B93A-84271C452852} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-01-21] (Piriform Ltd)

==================== Loaded Modules (whitelisted) =============

2014-02-15 16:57 - 2014-01-31 23:35 - 03019376 _____ () C:\Program Files (x86)\Mozilla Thunderbird\mozjs.dll
2014-02-15 16:57 - 2014-01-31 23:36 - 00158832 _____ () C:\Program Files (x86)\Mozilla Thunderbird\NSLDAP32V60.dll
2014-02-15 16:57 - 2014-01-31 23:36 - 00023152 _____ () C:\Program Files (x86)\Mozilla Thunderbird\NSLDAPPR32V60.dll
2014-02-15 16:40 - 2014-02-13 01:36 - 03578992 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll

==================== Alternate Data Streams (whitelisted) =========


==================== Safe Mode (whitelisted) ===================


==================== Disabled items from MSCONFIG ==============


==================== Faulty Device Manager Devices =============

Name: Unknown Device
Description: Unknown Device
Class Guid: {36fc9e60-c465-11cf-8056-444553540000}
Manufacturer: (Standard-USB-Hostcontroller)
Service: 
Problem: : Windows has stopped this device because it has reported problems. (Code 43)
Resolution: One of the drivers controlling the device notified the operating system that the device failed in some manner. For more information about how to diagnose the problem, see the hardware documentation. 

Name: 
Description: 
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: SM-Bus-Controller
Description: SM-Bus-Controller
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: USB (Universal Serial Bus)-Controller
Description: USB (Universal Serial Bus)-Controller
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: PCI-Kommunikationscontroller (einfach)
Description: PCI-Kommunikationscontroller (einfach)
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.


==================== Event log errors: =========================

Application errors:
==================
Error: (02/15/2014 04:31:35 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (02/15/2014 04:20:44 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (02/15/2014 03:44:11 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (02/15/2014 03:42:19 PM) (Source: NvStreamSvc) (User: )
Description: NvStreamSvcNvVAD initialization failed [6]

Error: (02/15/2014 03:42:19 PM) (Source: NvStreamSvc) (User: )
Description: NvStreamSvcFailed to set NvVAD endpoint as default Audio endpoint [0]

Error: (02/15/2014 03:42:19 PM) (Source: NvStreamSvc) (User: )
Description: NvStreamSvcNvVAD endpoint registration failed [0]

Error: (02/15/2014 03:26:14 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003


System errors:
=============

Microsoft Office Sessions:
=========================
Error: (02/15/2014 04:31:35 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (02/15/2014 04:20:44 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (02/15/2014 03:44:11 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (02/15/2014 03:42:19 PM) (Source: NvStreamSvc)(User: )
Description: NvStreamSvcNvVAD initialization failed [6]

Error: (02/15/2014 03:42:19 PM) (Source: NvStreamSvc)(User: )
Description: NvStreamSvcFailed to set NvVAD endpoint as default Audio endpoint [0]

Error: (02/15/2014 03:42:19 PM) (Source: NvStreamSvc)(User: )
Description: NvStreamSvcNvVAD endpoint registration failed [0]

Error: (02/15/2014 03:26:14 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003


==================== Memory info =========================== 

Percentage of memory in use: 24%
Total physical RAM: 8140.43 MB
Available physical RAM: 6129.45 MB
Total Pagefile: 16279.06 MB
Available Pagefile: 13986.8 MB
Total Virtual: 8192 MB
Available Virtual: 8191.81 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:111.69 GB) (Free:76.32 GB) NTFS
Drive e: (Externe Festplatte) (Fixed) (Total:1397.26 GB) (Free:445.24 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 112 GB) (Disk ID: 5187EEBE)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=112 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (MBR Code: Windows XP) (Size: 1397 GB) (Disk ID: 0008B592)
Partition 1: (Not Active) - (Size=-698724909056) - (Type=07 NTFS)

==================== End Of Log ============================
         
Schritt 3 - GMER
Code:
ATTFilter
GMER 2.1.19357 - hxxp://www.gmer.net
Rootkit scan 2014-02-15 17:45:21
Windows 6.1.7601 Service Pack 1 x64 \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-0 Corsair_Force_GT rev.1.3.3 111,79GB
Running: Gmer-19357.exe; Driver: C:\Users\BENUTZ~1\AppData\Local\Temp\agtdakog.sys


---- Threads - GMER 2.1 ----

Thread  C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [3956:3972]  00000000760b7587
Thread  C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [3956:3976]  0000000072f40cb3
Thread  C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [3956:3980]  00000000770141f3
Thread  C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [3956:2624]  0000000077016679
Thread  C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [3956:3864]  0000000077016679
Thread  C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [3956:3552]  0000000077016679
Thread  C:\Windows\System32\svchost.exe [4064:3172]                             000007fef78d9688

---- EOF - GMER 2.1 ----
         
Ich hoffe ich habe alles nötige gepostet

Viele Grüße
Tim0

Alt 15.02.2014, 18:15   #2
schrauber
/// the machine
/// TB-Ausbilder
 

Windows 7 - "Startfenster" - Standard

Windows 7 - "Startfenster"



hi,

Downloade Dir bitte Malwarebytes Anti-Malware
  • Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
  • Starte Malwarebytes' Anti-Malware (MBAM).
  • Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
  • Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
  • Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
  • Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
  • Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
  • Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.


Downloade Dir bitte AdwCleaner Logo Icon AdwCleaner auf deinen Desktop.
  • Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
  • Starte die AdwCleaner.exe mit einem Doppelklick.
  • Stimme den Nutzungsbedingungen zu.
  • Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
    • "Tracing" Schlüssel löschen
    • Winsock Einstellungen zurücksetzen
    • Proxy Einstellungen zurücksetzen
    • Internet Explorer Richtlinien zurücksetzen
    • Chrome Richtlinien zurücksetzen
    • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
  • Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
  • Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
  • Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
  • Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

  • Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
  • Drücke eine beliebige Taste, um das Tool zu starten.
  • Je nach System kann der Scan eine Weile dauern.
  • Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
  • Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.


und ein frisches FRST log bitte.
__________________

__________________

Alt 15.02.2014, 18:46   #3
Tim0
 
Windows 7 - "Startfenster" - Standard

Windows 7 - "Startfenster"



Danke für die schnelle Antwort, [Firefox funktioniert wieder wie gewohnt.] (siehe Edit)

Malwarebytes Anti-Malware
Code:
ATTFilter
 Malwarebytes Anti-Malware  (Test) 1.75.0.1300
www.malwarebytes.org

Datenbank Version: v2014.02.15.05

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 8.0.7601.17514
Benutzername :: BENUTZERNAME-PC [Administrator]

Schutz: Aktiviert

15.02.2014 18:27:34
mbam-log-2014-02-15 (18-27-34).txt

Art des Suchlaufs: Quick-Scan
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 229605
Laufzeit: 1 Minute(n), 27 Sekunde(n)

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung: 0
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateien: 0
(Keine bösartigen Objekte gefunden)

(Ende)
         
AdwCleaner
Code:
ATTFilter
# AdwCleaner v3.018 - Bericht erstellt am 15/02/2014 um 18:33:58
# Updated 28/01/2014 von Xplode
# Betriebssystem : Windows 7 Ultimate Service Pack 1 (64 bits)
# Benutzername : Benutzername - BENUTZERNAME-PC
# Gestartet von : C:\Users\Benutzername\Desktop\adwcleaner.exe
# Option : Löschen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****

Ordner Gelöscht : C:\Users\Benutzername\AppData\Roaming\Mozilla\Firefox\Profiles\8tttt9dg.default\ICQToolbarData
Datei Gelöscht : C:\Users\Benutzername\AppData\Roaming\Microsoft\Windows\Start Menu\Startfenster.lnk
Datei Gelöscht : C:\Users\Benutzername\AppData\Roaming\Mozilla\Firefox\Profiles\8tttt9dg.default\foxydeal.sqlite

***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****


***** [ Browser ] *****

-\\ Internet Explorer v8.0.7601.17514

Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Main [Start Page]

-\\ Mozilla Firefox v27.0.1 (de)

[ Datei : C:\Users\Benutzername\AppData\Roaming\Mozilla\Firefox\Profiles\8tttt9dg.default\prefs.js ]

Zeile gelöscht : user_pref("browser.startup.homepage", "hxxp://www.startfenster.de");

*************************

AdwCleaner[R0].txt - [1353 octets] - [15/02/2014 18:31:26]
AdwCleaner[S0].txt - [1256 octets] - [15/02/2014 18:33:58]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [1316 octets] ##########
         
JRT
Code:
ATTFilter
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.1 (02.04.2014:1)
OS: Windows 7 Ultimate x64
Ran by Benutzername on 15.02.2014 at 18:39:07,77
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys



~~~ Files

Successfully deleted: [File] "C:\Users\Benutzername\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\user pinned\taskbar\startfenster.lnk"



~~~ Folders

Successfully deleted: [Folder] "C:\Windows\syswow64\ai_recyclebin"



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 15.02.2014 at 18:40:33,47
Computer was rebooted
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
         
Viele Grüße
Troxan

Edit:
Es funktioniert doch nicht wie gewohnt, die Startseite sieht aus wie gewohnt aber wenn ich über Google etwas eintippe werde ich auf eine andere Suchmaschiene weitergeleitet. hxxp://www.sm.de/index.php?q=test&s=Search
__________________

Geändert von Tim0 (15.02.2014 um 19:12 Uhr)

Alt 16.02.2014, 07:55   #4
schrauber
/// the machine
/// TB-Ausbilder
 

Windows 7 - "Startfenster" - Standard

Windows 7 - "Startfenster"



frisches FRST log fehlt
__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Alt 16.02.2014, 10:34   #5
Tim0
 
Windows 7 - "Startfenster" - Standard

Windows 7 - "Startfenster"



Glatt vergessen ^^'
Kann man in den Logs sehen ob die Schadsoftware neben der Manipulation meiner Startseite und Suchmaschiene sonst noch etwas macht?
Normalerweise mache ich über diesen PC auch Onlinebanking daher frage ich.
Die Daten kann er bisher noch nicht haben weil ich mir das Programm erst draufgezogen habe kurz nachdem ich mein System gestern neu aufgesetzt habe :/

Und noch etwas , ich habe mir zur erleichterten installation voher alle Programme und Treiber die ich brauche, auf eine externe Festplatte gezogen, unter anderem auch die Schadsoftware.
Die Datei habe ich nun durch die originale VLC installationsdatei ersetzt, besteht die Möglichkeit das die Festplatte trotzdem infiziert ist?


FRST Logfile:
Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 13-02-2014 01
Ran by Benutzername (administrator) on BENUTZERNAME-PC on 16-02-2014 10:33:45
Running from C:\Users\Benutzername\Desktop
Windows 7 Ultimate Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 8
Boot Mode: Normal


==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Microsoft Corporation) C:\Windows\SYSTEM32\WISPTIS.EXE
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Microsoft Corporation) C:\Windows\SYSTEM32\WISPTIS.EXE
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe
(Logitech Inc.) C:\Program Files\Logitech Gaming Software\LCore.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_44.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_44.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
() C:\Riot Games\League of Legends\RADS\system\rads_user_kernel.exe
() C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe
() C:\Riot Games\League of Legends\RADS\projects\lol_launcher\releases\0.0.0.199\deploy\LoLLauncher.exe
() C:\Riot Games\League of Legends\RADS\projects\lol_air_client\releases\0.0.1.71\deploy\LolClient.exe
(TeamSpeak Systems GmbH) C:\Program Files\TeamSpeak 3 Client\ts3client_win64.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [Nvtmru] - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe [1028384 2013-11-14] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] - C:\Windows\system32\nvspcap64.dll [1064224 2013-11-14] (NVIDIA Corporation)
HKLM\...\Run: [Launch LCore] - C:\Program Files\Logitech Gaming Software\LCore.exe [8292120 2013-11-14] (Logitech Inc.)
HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7506136 2013-12-06] (Realtek Semiconductor)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [684600 2013-12-18] (Avira Operations GmbH & Co. KG)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x4DE7ED12622ACF01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - DefaultScope {B8E7C34F-5F46-435F-A23F-4957F26DFC04} URL = hxxp://www.sm.de/?q={searchTerms}
SearchScopes: HKLM - {B8E7C34F-5F46-435F-A23F-4957F26DFC04} URL = hxxp://www.sm.de/?q={searchTerms}
SearchScopes: HKCU - {B8E7C34F-5F46-435F-A23F-4957F26DFC04} URL = hxxp://www.sm.de/?q={searchTerms}
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

FireFox:
========
FF ProfilePath: C:\Users\Benutzername\AppData\Roaming\Mozilla\Firefox\Profiles\8tttt9dg.default
FF DefaultSearchEngine: SuchMaschine
FF SearchEngineOrder.1: SuchMaschine
FF SelectedSearchEngine: SuchMaschine
FF Keyword.URL: hxxp://www.sm.de/?q=
FF NetworkProxy: "autoconfig_url", "data:text/javascript,function%20FindProxyForURL(url%2C%20host)%20%7Bif%20(shExpMatch(url%2C%20'http%3A%2F%2Fgrooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fretro.grooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fhtml5.grooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Flisten.grooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.grooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fpreview.grooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.mtv.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fmedia.mtvnservices.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fpiki.fm*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fpiki.fm*')%20%7C%7C%20host%20%3D%3D%20's.hulu.com'%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.funimation.com*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fsecure.funimation.com*')%20%7C%7C%20(url.indexOf('proxmate%3Dactive')%20!%3D%20-1%20%26%26%20url.indexOf('amazonaws.com')%20%3D%3D%20-1)%20%7C%7C%20(url.indexOf('proxmate%3Dus')%20!%3D%20-1)%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.crunchyroll.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fsongza.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.rdio.com*')%20%7C%7C%20url.indexOf('discoverymedia.com')%20!%3D%20-1%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fdsc.discovery.com%2F*')%20%7C%7C%20url.indexOf('vevo.com')%20!%3D%20-1%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fplay.spotify.com*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fplay.spotify.com*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fwww.spotify.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.spotify.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.last.fm*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fext.last.fm*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.iheart.com*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Faccount.beatsmusic.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.beatsmusic.com*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fwww.daisuki.net*')%20%7C%7C%20url.indexOf('southparkstudios.com')%20!%3D%20-1%20%7C%7C%20host%20%3D%3D%20'www.pandora.com'%20%7C%7C%20url.indexOf('play.google.com')%20!%3D%20-1%20%7C%7C%20(url.indexOf('youtube.com%2Fvideoplayback')%20!%3D%20-1%20%26%26%20url.indexOf('%26gcr%3Dus')%20!%3D%20-1%20%26%26%20url.indexOf('%26ptchn')%20!%3D%20-1))%20%7B%20return%20'PROXY%20nq-us06.personalitycores.com%3A8000%3B%20PROXY%20nq-us12.personalitycores.com%3A8000%3B%20PROXY%20nq-us09.personalitycores.com%3A8000%3B%20PROXY%20nq-us04.personalitycores.com%3A8000%3B%20PROXY%20nq-us07.personalitycores.com%3A8000%3B%20PROXY%20nq-us08.personalitycores.com%3A8000%3B%20PROXY%20nq-us11.personalitycores.com%3A8000%3B%20PROXY%20nq-us05.personalitycores.com%3A8000%3B%20PROXY%20nq-us10.personalitycores.com%3A8000'%3B%7D%20%20else%20%7B%20return%20'DIRECT'%3B%20%7D%7D"
FF NetworkProxy: "type", 2
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_44.dll ()
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_44.dll ()
FF Plugin-x32: @java.com/DTPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin HKCU: pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF SearchPlugin: C:\Users\Benutzername\AppData\Roaming\Mozilla\Firefox\Profiles\8tttt9dg.default\searchplugins\searchplugins-backup
FF SearchPlugin: C:\Users\Benutzername\AppData\Roaming\Mozilla\Firefox\Profiles\8tttt9dg.default\searchplugins\search_engine.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: ProxTube - Unblock YouTube - C:\Users\Benutzername\AppData\Roaming\Mozilla\Firefox\Profiles\8tttt9dg.default\Extensions\ich@maltegoetz.de [2014-02-15]
FF Extension: FT DeepDark - C:\Users\Benutzername\AppData\Roaming\Mozilla\Firefox\Profiles\8tttt9dg.default\Extensions\{77d2ed30-4cd2-11e0-b8af-0800200c9a66} [2014-02-15]
FF Extension: WOT - C:\Users\Benutzername\AppData\Roaming\Mozilla\Firefox\Profiles\8tttt9dg.default\Extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7} [2014-02-15]
FF Extension: DownloadHelper - C:\Users\Benutzername\AppData\Roaming\Mozilla\Firefox\Profiles\8tttt9dg.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} [2014-02-15]
FF Extension: Dictionary (EN/DE) - C:\Users\Benutzername\AppData\Roaming\Mozilla\Firefox\Profiles\8tttt9dg.default\Extensions\dictlookup@arnhold.com.xpi [2014-02-15]
FF Extension: Element Hiding Helper for Adblock Plus - C:\Users\Benutzername\AppData\Roaming\Mozilla\Firefox\Profiles\8tttt9dg.default\Extensions\elemhidehelper@adblockplus.org.xpi [2014-02-15]
FF Extension: Firebug - C:\Users\Benutzername\AppData\Roaming\Mozilla\Firefox\Profiles\8tttt9dg.default\Extensions\firebug@software.joehewitt.com.xpi [2014-02-15]
FF Extension: Ghostery - C:\Users\Benutzername\AppData\Roaming\Mozilla\Firefox\Profiles\8tttt9dg.default\Extensions\firefox@ghostery.com.xpi [2014-02-15]
FF Extension: ProxMate - Proxy on steroids! - C:\Users\Benutzername\AppData\Roaming\Mozilla\Firefox\Profiles\8tttt9dg.default\Extensions\jid1-QpHD8URtZWJC2A@jetpack.xpi [2014-02-15]
FF Extension: Personas Plus - C:\Users\Benutzername\AppData\Roaming\Mozilla\Firefox\Profiles\8tttt9dg.default\Extensions\personas@christopher.beard.xpi [2014-02-15]
FF Extension: Private Tab - C:\Users\Benutzername\AppData\Roaming\Mozilla\Firefox\Profiles\8tttt9dg.default\Extensions\privateTab@infocatcher.xpi [2014-02-15]
FF Extension: FlashGot - C:\Users\Benutzername\AppData\Roaming\Mozilla\Firefox\Profiles\8tttt9dg.default\Extensions\{19503e42-ca3c-4c27-b1e2-9cdb2170ee34}.xpi [2014-02-15]
FF Extension: NoScript - C:\Users\Benutzername\AppData\Roaming\Mozilla\Firefox\Profiles\8tttt9dg.default\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi [2014-02-15]
FF Extension: ReloadEvery - C:\Users\Benutzername\AppData\Roaming\Mozilla\Firefox\Profiles\8tttt9dg.default\Extensions\{888d99e7-e8b5-46a3-851e-1ec45da1e644}.xpi [2014-02-15]
FF Extension: Leo Search - C:\Users\Benutzername\AppData\Roaming\Mozilla\Firefox\Profiles\8tttt9dg.default\Extensions\{c666c018-6409-4479-afa3-68e4129e7eff}.xpi [2014-02-15]
FF Extension: Adblock Plus - C:\Users\Benutzername\AppData\Roaming\Mozilla\Firefox\Profiles\8tttt9dg.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-02-15]
FF Extension: BetterPrivacy - C:\Users\Benutzername\AppData\Roaming\Mozilla\Firefox\Profiles\8tttt9dg.default\Extensions\{d40f5e7b-d2cf-4856-b441-cc613eeffbe3}.xpi [2014-02-15]
FF Extension: Tab Mix Plus - C:\Users\Benutzername\AppData\Roaming\Mozilla\Firefox\Profiles\8tttt9dg.default\Extensions\{dc572301-7619-498c-a57d-39143191b318}.xpi [2014-02-15]
FF Extension: Greasemonkey - C:\Users\Benutzername\AppData\Roaming\Mozilla\Firefox\Profiles\8tttt9dg.default\Extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}.xpi [2014-02-15]

==================== Services (Whitelisted) =================

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440376 2013-12-18] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440376 2013-12-18] (Avira Operations GmbH & Co. KG)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [15125280 2013-11-14] (NVIDIA Corporation)

==================== Drivers (Whitelisted) ====================

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108440 2013-12-18] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131576 2013-12-18] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-12-18] (Avira Operations GmbH & Co. KG)
R3 LGSHidFilt; C:\Windows\System32\DRIVERS\LGSHidFilt.Sys [64280 2013-05-30] (Logitech Inc.)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [39200 2013-11-14] (NVIDIA Corporation)
S3 MSICDSetup; \??\D:\CDriver64.sys [X]
S3 NTIOLib_1_0_C; \??\D:\NTIOLib_X64.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-02-16 10:33 - 2014-02-16 10:33 - 00000000 ____D () C:\Users\Benutzername\Desktop\Neuer Ordner
2014-02-16 10:32 - 2014-02-16 10:33 - 00014156 _____ () C:\Users\Benutzername\Desktop\FRST.txt
2014-02-15 23:39 - 2014-02-16 10:27 - 00000168 _____ () C:\Windows\setupact.log
2014-02-15 23:39 - 2014-02-15 23:39 - 00000000 _____ () C:\Windows\setuperr.log
2014-02-15 20:48 - 2014-02-15 20:48 - 00000000 ____D () C:\Users\Benutzername\AppData\Local\Macromedia
2014-02-15 19:31 - 2014-02-15 19:31 - 00000000 ____D () C:\Program Files (x86)\ESET
2014-02-15 19:30 - 2014-02-15 19:31 - 02347384 _____ (ESET) C:\Users\Benutzername\Desktop\esetsmartinstaller_enu.exe
2014-02-15 18:36 - 2014-02-15 18:36 - 01037530 _____ (Thisisu) C:\Users\Benutzername\Desktop\JRT.exe
2014-02-15 18:36 - 2014-02-15 18:36 - 00000000 ____D () C:\Windows\ERUNT
2014-02-15 18:30 - 2014-02-15 18:34 - 00000000 ____D () C:\AdwCleaner
2014-02-15 18:30 - 2014-02-15 18:30 - 01166132 _____ () C:\Users\Benutzername\Desktop\adwcleaner.exe
2014-02-15 18:25 - 2014-02-15 18:25 - 00000000 ____D () C:\Users\Benutzername\AppData\Roaming\Malwarebytes
2014-02-15 18:25 - 2014-02-15 18:25 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-02-15 18:08 - 2014-02-15 18:08 - 00000000 ____D () C:\Users\Benutzername\AppData\Roaming\Avira
2014-02-15 18:07 - 2014-02-15 18:07 - 00000000 ____D () C:\ProgramData\Avira
2014-02-15 18:07 - 2014-02-15 18:07 - 00000000 ____D () C:\Program Files (x86)\Avira
2014-02-15 18:07 - 2013-12-18 09:32 - 00131576 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2014-02-15 18:07 - 2013-12-18 09:32 - 00108440 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2014-02-15 18:07 - 2013-12-18 09:32 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys
2014-02-15 17:39 - 2014-02-15 17:39 - 00380416 _____ () C:\Users\Benutzername\Desktop\Gmer-19357.exe
2014-02-15 17:37 - 2014-02-16 10:33 - 00000000 ____D () C:\FRST
2014-02-15 17:36 - 2014-02-15 17:36 - 02152960 _____ (Farbar) C:\Users\Benutzername\Desktop\FRST64.exe
2014-02-15 17:35 - 2014-02-15 17:35 - 00000000 _____ () C:\Users\Benutzername\defogger_reenable
2014-02-15 17:34 - 2014-02-15 17:34 - 00050477 _____ () C:\Users\Benutzername\Desktop\Defogger.exe
2014-02-15 17:23 - 2014-02-15 17:31 - 00000000 ____D () C:\Program Files\VideoLAN
2014-02-15 17:22 - 2014-02-15 17:22 - 00000000 ____D () C:\Users\Benutzername\AppData\Roaming\PingPlotter
2014-02-15 17:22 - 2014-02-15 17:22 - 00000000 ____D () C:\Users\Benutzername\AppData\Roaming\Downloaded Installations
2014-02-15 17:22 - 2014-02-15 17:22 - 00000000 ____D () C:\Program Files (x86)\PingPlotter Standard
2014-02-15 17:22 - 2014-02-14 05:22 - 00000044 ____H () C:\Program Files (x86)\18a3d330.tmp
2014-02-15 17:12 - 2014-02-15 17:12 - 00000000 ____D () C:\Users\Benutzername\AppData\Roaming\LolClient
2014-02-15 17:04 - 2014-02-15 13:39 - 00000667 _____ () C:\Users\Benutzername\Documents\indexfile.txt
2014-02-15 17:03 - 2014-02-15 17:03 - 00000000 ____D () C:\Users\Benutzername\AppData\Roaming\Thunderbird
2014-02-15 17:03 - 2014-02-15 17:03 - 00000000 ____D () C:\Users\Benutzername\AppData\Local\Thunderbird
2014-02-15 16:57 - 2014-02-15 16:57 - 00000000 ____D () C:\Program Files (x86)\Mozilla Thunderbird
2014-02-15 16:50 - 2014-02-15 16:50 - 00063568 _____ () C:\Users\Benutzername\AppData\Local\GDIPFONTCACHEV1.DAT
2014-02-15 16:49 - 2014-02-16 10:31 - 00000000 ____D () C:\Users\Benutzername\AppData\Roaming\TS3Client
2014-02-15 16:44 - 2014-02-15 16:44 - 00000000 ____D () C:\Program Files\TeamSpeak 3 Client
2014-02-15 16:42 - 2014-02-15 16:42 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-02-15 16:42 - 2014-02-15 16:42 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-02-15 16:42 - 2014-02-15 16:42 - 00174504 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-02-15 16:42 - 2014-02-15 16:42 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-02-15 16:42 - 2014-02-15 16:42 - 00000000 ____D () C:\Users\Benutzername\AppData\Roaming\Mozilla
2014-02-15 16:42 - 2014-02-15 16:42 - 00000000 ____D () C:\Users\Benutzername\AppData\Local\Mozilla
2014-02-15 16:42 - 2014-02-15 16:42 - 00000000 ____D () C:\ProgramData\Sun
2014-02-15 16:42 - 2014-02-15 16:42 - 00000000 ____D () C:\ProgramData\Oracle
2014-02-15 16:42 - 2014-02-15 16:42 - 00000000 ____D () C:\Program Files (x86)\MozBackup
2014-02-15 16:42 - 2014-02-15 16:42 - 00000000 ____D () C:\Program Files (x86)\Java
2014-02-15 16:40 - 2014-02-15 18:02 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-02-15 16:40 - 2014-02-15 16:40 - 00000000 ____D () C:\ProgramData\Mozilla
2014-02-15 16:40 - 2014-02-15 16:40 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-02-15 16:38 - 2014-02-15 16:38 - 00002786 _____ () C:\Windows\System32\Tasks\CCleanerSkipUAC
2014-02-15 16:38 - 2014-02-15 16:38 - 00000000 ____D () C:\Program Files\CCleaner
2014-02-15 16:37 - 2014-02-15 16:37 - 00000000 ____D () C:\Program Files (x86)\OpenOffice 4
2014-02-15 16:27 - 2014-02-15 16:27 - 00000000 ____D () C:\Users\Benutzername\AppData\Roaming\Macromedia
2014-02-15 16:27 - 2014-02-15 16:27 - 00000000 ____D () C:\Users\Benutzername\AppData\Roaming\Adobe
2014-02-15 16:26 - 2014-02-15 20:48 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-02-15 16:26 - 2014-02-15 20:48 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-02-15 16:26 - 2014-02-15 16:26 - 00000000 ____D () C:\Windows\SysWOW64\Macromed
2014-02-15 16:26 - 2014-02-15 16:26 - 00000000 ____D () C:\Windows\system32\Macromed
2014-02-15 16:25 - 2014-02-15 20:48 - 00000000 ____D () C:\Users\Benutzername\AppData\Local\Adobe
2014-02-15 16:23 - 2010-06-02 04:55 - 00527192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_7.dll
2014-02-15 16:23 - 2010-06-02 04:55 - 00518488 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_7.dll
2014-02-15 16:23 - 2010-06-02 04:55 - 00239960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_7.dll
2014-02-15 16:23 - 2010-06-02 04:55 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_7.dll
2014-02-15 16:23 - 2010-06-02 04:55 - 00077656 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_5.dll
2014-02-15 16:23 - 2010-06-02 04:55 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_5.dll
2014-02-15 16:23 - 2010-05-26 11:41 - 02526056 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_43.dll
2014-02-15 16:23 - 2010-05-26 11:41 - 02401112 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_43.dll
2014-02-15 16:23 - 2010-05-26 11:41 - 02106216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_43.dll
2014-02-15 16:23 - 2010-05-26 11:41 - 01998168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_43.dll
2014-02-15 16:23 - 2010-05-26 11:41 - 01907552 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_43.dll
2014-02-15 16:23 - 2010-05-26 11:41 - 01868128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_43.dll
2014-02-15 16:23 - 2010-05-26 11:41 - 00511328 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_43.dll
2014-02-15 16:23 - 2010-05-26 11:41 - 00470880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_43.dll
2014-02-15 16:23 - 2010-05-26 11:41 - 00276832 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_43.dll
2014-02-15 16:23 - 2010-05-26 11:41 - 00248672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_43.dll
2014-02-15 16:23 - 2010-02-04 10:01 - 00530776 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_6.dll
2014-02-15 16:23 - 2010-02-04 10:01 - 00528216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_6.dll
2014-02-15 16:23 - 2010-02-04 10:01 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_6.dll
2014-02-15 16:23 - 2010-02-04 10:01 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_6.dll
2014-02-15 16:23 - 2010-02-04 10:01 - 00078680 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_4.dll
2014-02-15 16:23 - 2010-02-04 10:01 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_4.dll
2014-02-15 16:23 - 2010-02-04 10:01 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_7.dll
2014-02-15 16:23 - 2010-02-04 10:01 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_7.dll
2014-02-15 16:23 - 2009-09-04 17:44 - 00517960 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_5.dll
2014-02-15 16:23 - 2009-09-04 17:44 - 00515416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_5.dll
2014-02-15 16:23 - 2009-09-04 17:44 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_5.dll
2014-02-15 16:23 - 2009-09-04 17:44 - 00176968 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_5.dll
2014-02-15 16:23 - 2009-09-04 17:44 - 00073544 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_3.dll
2014-02-15 16:23 - 2009-09-04 17:44 - 00069464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_3.dll
2014-02-15 16:23 - 2009-09-04 17:29 - 05554512 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_42.dll
2014-02-15 16:23 - 2009-09-04 17:29 - 05501792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_42.dll
2014-02-15 16:23 - 2009-09-04 17:29 - 02582888 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_42.dll
2014-02-15 16:23 - 2009-09-04 17:29 - 02475352 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_42.dll
2014-02-15 16:23 - 2009-09-04 17:29 - 01974616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_42.dll
2014-02-15 16:23 - 2009-09-04 17:29 - 01892184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_42.dll
2014-02-15 16:23 - 2009-09-04 17:29 - 00523088 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_42.dll
2014-02-15 16:23 - 2009-09-04 17:29 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_42.dll
2014-02-15 16:23 - 2009-09-04 17:29 - 00285024 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_42.dll
2014-02-15 16:23 - 2009-09-04 17:29 - 00235344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_42.dll
2014-02-15 16:23 - 2009-03-16 14:18 - 00521560 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_4.dll
2014-02-15 16:23 - 2009-03-16 14:18 - 00517448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_4.dll
2014-02-15 16:23 - 2009-03-16 14:18 - 00235352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_4.dll
2014-02-15 16:23 - 2009-03-16 14:18 - 00174936 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_4.dll
2014-02-15 16:23 - 2009-03-16 14:18 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_6.dll
2014-02-15 16:23 - 2009-03-16 14:18 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_6.dll
2014-02-15 16:23 - 2009-03-09 15:27 - 05425496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_41.dll
2014-02-15 16:23 - 2009-03-09 15:27 - 04178264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_41.dll
2014-02-15 16:23 - 2009-03-09 15:27 - 02430312 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_41.dll
2014-02-15 16:23 - 2009-03-09 15:27 - 01846632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_41.dll
2014-02-15 16:23 - 2009-03-09 15:27 - 00520544 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_41.dll
2014-02-15 16:23 - 2009-03-09 15:27 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_41.dll
2014-02-15 16:23 - 2008-10-27 10:04 - 00518480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_3.dll
2014-02-15 16:23 - 2008-10-27 10:04 - 00514384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_3.dll
2014-02-15 16:23 - 2008-10-27 10:04 - 00235856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_3.dll
2014-02-15 16:23 - 2008-10-27 10:04 - 00175440 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_3.dll
2014-02-15 16:23 - 2008-10-27 10:04 - 00074576 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_2.dll
2014-02-15 16:23 - 2008-10-27 10:04 - 00070992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_2.dll
2014-02-15 16:23 - 2008-10-27 10:04 - 00025936 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_5.dll
2014-02-15 16:23 - 2008-10-27 10:04 - 00023376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_5.dll
2014-02-15 16:23 - 2008-10-10 04:52 - 05631312 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_40.dll
2014-02-15 16:23 - 2008-10-10 04:52 - 04379984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_40.dll
2014-02-15 16:23 - 2008-10-10 04:52 - 02605920 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_40.dll
2014-02-15 16:23 - 2008-10-10 04:52 - 02036576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_40.dll
2014-02-15 16:23 - 2008-10-10 04:52 - 00519000 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_40.dll
2014-02-15 16:23 - 2008-10-10 04:52 - 00452440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_40.dll
2014-02-15 16:23 - 2008-07-31 10:41 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_2.dll
2014-02-15 16:23 - 2008-07-31 10:41 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_2.dll
2014-02-15 16:23 - 2008-07-31 10:41 - 00072200 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_1.dll
2014-02-15 16:23 - 2008-07-31 10:40 - 00513544 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_2.dll
2014-02-15 16:23 - 2008-07-10 11:00 - 04992520 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_39.dll
2014-02-15 16:23 - 2008-07-10 11:00 - 01942552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_39.dll
2014-02-15 16:23 - 2008-07-10 11:00 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_39.dll
2014-02-15 16:23 - 2008-05-30 14:19 - 00511496 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_1.dll
2014-02-15 16:23 - 2008-05-30 14:19 - 00507400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_1.dll
2014-02-15 16:23 - 2008-05-30 14:18 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_1.dll
2014-02-15 16:23 - 2008-05-30 14:18 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_1.dll
2014-02-15 16:23 - 2008-05-30 14:17 - 00068104 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_0.dll
2014-02-15 16:23 - 2008-05-30 14:17 - 00065032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_0.dll
2014-02-15 16:23 - 2008-05-30 14:17 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_4.dll
2014-02-15 16:23 - 2008-05-30 14:16 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_4.dll
2014-02-15 16:23 - 2008-05-30 14:11 - 04991496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_38.dll
2014-02-15 16:23 - 2008-05-30 14:11 - 03850760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_38.dll
2014-02-15 16:23 - 2008-05-30 14:11 - 01941528 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_38.dll
2014-02-15 16:23 - 2008-05-30 14:11 - 01491992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_38.dll
2014-02-15 16:23 - 2008-05-30 14:11 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_38.dll
2014-02-15 16:23 - 2008-05-30 14:11 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_38.dll
2014-02-15 16:23 - 2008-03-05 16:04 - 00489480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_0.dll
2014-02-15 16:23 - 2008-03-05 16:03 - 00479752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_0.dll
2014-02-15 16:23 - 2008-03-05 16:03 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_0.dll
2014-02-15 16:23 - 2008-03-05 16:03 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_0.dll
2014-02-15 16:23 - 2008-03-05 16:00 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_3.dll
2014-02-15 16:23 - 2008-03-05 16:00 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_3.dll
2014-02-15 16:23 - 2008-03-05 15:56 - 04910088 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_37.dll
2014-02-15 16:23 - 2008-03-05 15:56 - 03786760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_37.dll
2014-02-15 16:23 - 2008-03-05 15:56 - 01860120 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_37.dll
2014-02-15 16:23 - 2008-03-05 15:56 - 01420824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_37.dll
2014-02-15 16:23 - 2008-02-05 23:07 - 00529424 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_37.dll
2014-02-15 16:23 - 2008-02-05 23:07 - 00462864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_37.dll
2014-02-15 16:23 - 2007-10-22 03:40 - 00411656 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_10.dll
2014-02-15 16:23 - 2007-10-22 03:39 - 00267272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_10.dll
2014-02-15 16:23 - 2007-10-22 03:37 - 00021000 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_2.dll
2014-02-15 16:23 - 2007-10-22 03:37 - 00017928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_2.dll
2014-02-15 16:23 - 2007-10-12 15:14 - 05081608 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_36.dll
2014-02-15 16:23 - 2007-10-12 15:14 - 03734536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_36.dll
2014-02-15 16:23 - 2007-10-12 15:14 - 02006552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_36.dll
2014-02-15 16:23 - 2007-10-12 15:14 - 01374232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_36.dll
2014-02-15 16:23 - 2007-10-02 09:56 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_36.dll
2014-02-15 16:23 - 2007-10-02 09:56 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_36.dll
2014-02-15 16:23 - 2007-07-20 00:57 - 00411496 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_9.dll
2014-02-15 16:23 - 2007-07-20 00:57 - 00267112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_9.dll
2014-02-15 16:23 - 2007-07-19 18:14 - 05073256 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_35.dll
2014-02-15 16:23 - 2007-07-19 18:14 - 03727720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_35.dll
2014-02-15 16:23 - 2007-07-19 18:14 - 01985904 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_35.dll
2014-02-15 16:23 - 2007-07-19 18:14 - 01358192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_35.dll
2014-02-15 16:23 - 2007-07-19 18:14 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_35.dll
2014-02-15 16:23 - 2007-07-19 18:14 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_35.dll
2014-02-15 16:23 - 2007-06-20 20:49 - 00409960 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_8.dll
2014-02-15 16:23 - 2007-06-20 20:46 - 00266088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_8.dll
2014-02-15 16:23 - 2007-05-16 16:45 - 04496232 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_34.dll
2014-02-15 16:23 - 2007-05-16 16:45 - 03497832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_34.dll
2014-02-15 16:23 - 2007-05-16 16:45 - 01401200 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_34.dll
2014-02-15 16:23 - 2007-05-16 16:45 - 01124720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_34.dll
2014-02-15 16:23 - 2007-05-16 16:45 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_34.dll
2014-02-15 16:23 - 2007-05-16 16:45 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_34.dll
2014-02-15 16:23 - 2007-04-04 18:55 - 00403304 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_7.dll
2014-02-15 16:23 - 2007-04-04 18:55 - 00261480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_7.dll
2014-02-15 16:23 - 2007-04-04 18:54 - 00107368 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_3.dll
2014-02-15 16:23 - 2007-04-04 18:53 - 00081768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_3.dll
2014-02-15 16:23 - 2007-03-15 16:57 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_33.dll
2014-02-15 16:23 - 2007-03-15 16:57 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_33.dll
2014-02-15 16:23 - 2007-03-12 16:42 - 04494184 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_33.dll
2014-02-15 16:23 - 2007-03-12 16:42 - 03495784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_33.dll
2014-02-15 16:23 - 2007-03-12 16:42 - 01400176 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_33.dll
2014-02-15 16:23 - 2007-03-12 16:42 - 01123696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_33.dll
2014-02-15 16:23 - 2007-03-05 12:42 - 00017688 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_1.dll
2014-02-15 16:23 - 2007-03-05 12:42 - 00015128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_1.dll
2014-02-15 16:23 - 2007-01-24 15:27 - 00393576 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_6.dll
2014-02-15 16:23 - 2007-01-24 15:27 - 00255848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_6.dll
2014-02-15 16:23 - 2006-12-08 12:02 - 00251672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_5.dll
2014-02-15 16:23 - 2006-12-08 12:00 - 00390424 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_5.dll
2014-02-15 16:23 - 2006-11-29 13:06 - 04398360 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_32.dll
2014-02-15 16:23 - 2006-11-29 13:06 - 03426072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_32.dll
2014-02-15 16:23 - 2006-11-29 13:06 - 00469264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10.dll
2014-02-15 16:23 - 2006-11-29 13:06 - 00440080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10.dll
2014-02-15 16:23 - 2006-09-28 16:05 - 03977496 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_31.dll
2014-02-15 16:23 - 2006-09-28 16:05 - 02414360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_31.dll
2014-02-15 16:23 - 2006-09-28 16:05 - 00237848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_4.dll
2014-02-15 16:23 - 2006-09-28 16:04 - 00364824 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_4.dll
2014-02-15 16:23 - 2006-07-28 09:31 - 00083736 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_2.dll
2014-02-15 16:23 - 2006-07-28 09:30 - 00363288 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_3.dll
2014-02-15 16:23 - 2006-07-28 09:30 - 00236824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_3.dll
2014-02-15 16:23 - 2006-07-28 09:30 - 00062744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_2.dll
2014-02-15 16:23 - 2006-05-31 07:24 - 00230168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_2.dll
2014-02-15 16:23 - 2006-05-31 07:22 - 00354072 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_2.dll
2014-02-15 16:23 - 2006-03-31 12:41 - 03927248 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_30.dll
2014-02-15 16:23 - 2006-03-31 12:40 - 02388176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_30.dll
2014-02-15 16:23 - 2006-03-31 12:40 - 00352464 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_1.dll
2014-02-15 16:23 - 2006-03-31 12:39 - 00229584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_1.dll
2014-02-15 16:23 - 2006-03-31 12:39 - 00083664 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_1.dll
2014-02-15 16:23 - 2006-03-31 12:39 - 00062672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_1.dll
2014-02-15 16:23 - 2006-02-03 08:43 - 03830992 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_29.dll
2014-02-15 16:23 - 2006-02-03 08:43 - 02332368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_29.dll
2014-02-15 16:23 - 2006-02-03 08:42 - 00355536 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_0.dll
2014-02-15 16:23 - 2006-02-03 08:42 - 00230096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_0.dll
2014-02-15 16:23 - 2006-02-03 08:41 - 00016592 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_0.dll
2014-02-15 16:23 - 2006-02-03 08:41 - 00014032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_0.dll
2014-02-15 16:23 - 2005-12-05 18:09 - 03815120 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_28.dll
2014-02-15 16:23 - 2005-12-05 18:09 - 02323664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_28.dll
2014-02-15 16:23 - 2005-07-22 19:59 - 03807440 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_27.dll
2014-02-15 16:23 - 2005-07-22 19:59 - 02319568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_27.dll
2014-02-15 16:23 - 2005-05-26 15:34 - 03767504 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_26.dll
2014-02-15 16:23 - 2005-05-26 15:34 - 02297552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_26.dll
2014-02-15 16:23 - 2005-03-18 17:19 - 03823312 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_25.dll
2014-02-15 16:23 - 2005-03-18 17:19 - 02337488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_25.dll
2014-02-15 16:23 - 2005-02-05 19:45 - 03544272 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_24.dll
2014-02-15 16:23 - 2005-02-05 19:45 - 02222800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_24.dll
2014-02-15 16:19 - 2014-02-15 16:23 - 00000000 ____D () C:\Windows\SysWOW64\directx
2014-02-15 16:18 - 2014-02-15 16:18 - 00000000 ____D () C:\Windows\SysWOW64\RTCOM
2014-02-15 16:18 - 2014-02-15 16:18 - 00000000 ____D () C:\Program Files\Realtek
2014-02-15 16:17 - 2013-12-10 20:20 - 03771352 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RTKVHD64.sys
2014-02-15 16:17 - 2013-12-10 10:17 - 00693385 _____ () C:\Windows\system32\Drivers\RTAIODAT.DAT
2014-02-15 16:17 - 2013-12-06 17:29 - 00397592 _____ (Creative Technology Ltd.) C:\Windows\system32\MBWrp64.dll
2014-02-15 16:17 - 2013-12-05 20:21 - 00153304 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoInstII64.dll
2014-02-15 16:17 - 2013-12-04 16:27 - 01958616 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTSnMg64.cpl
2014-02-15 16:17 - 2013-11-26 17:26 - 00618200 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtDataProc64.dll
2014-02-15 16:17 - 2013-11-25 17:20 - 02080472 _____ (Realtek Semiconductor Corp.) C:\Windows\RtlExUpd.dll
2014-02-15 16:17 - 2013-11-25 15:59 - 02810072 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtPgEx64.dll
2014-02-15 16:17 - 2013-11-25 15:59 - 02588888 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkAPO64.dll
2014-02-15 16:17 - 2013-11-14 15:49 - 01286872 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTCOM64.dll
2014-02-15 16:17 - 2013-11-13 18:52 - 01013504 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPOShell64.dll
2014-02-15 16:17 - 2013-11-13 18:10 - 02103040 _____ (Waves Audio Ltd.) C:\Windows\system32\WavesGUILib64.dll
2014-02-15 16:17 - 2013-11-13 18:07 - 02036992 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioEQ64.dll
2014-02-15 16:17 - 2013-10-28 17:29 - 01021656 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkApi64.dll
2014-02-15 16:17 - 2013-10-16 03:43 - 00209096 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAC64.dll
2014-02-15 16:17 - 2013-10-11 12:47 - 00113576 _____ (Real Sound Lab SIA) C:\Windows\system32\CONEQMSAPOGUILibrary.dll
2014-02-15 16:17 - 2013-08-05 18:11 - 02743328 _____ (Fortemedia Corporation) C:\Windows\system32\FMAPO64.dll
2014-02-15 16:17 - 2013-01-11 16:27 - 00628504 _____ (Creative Technology Ltd.) C:\Windows\system32\MBTHX64.dll
2014-02-15 16:17 - 2013-01-11 16:27 - 00563992 _____ (Creative Technology Ltd.) C:\Windows\SysWOW64\MBTHX32.dll
2014-02-15 16:17 - 2012-03-08 11:47 - 00108640 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAR64.dll
2014-02-15 16:17 - 2011-12-20 15:32 - 00331880 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtlCPAPI64.dll
2014-02-15 16:17 - 2011-11-22 16:28 - 00014952 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCoLDR64.dll
2014-02-15 16:17 - 2010-11-08 07:31 - 00375128 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEP64A.dll
2014-02-15 16:17 - 2010-11-08 07:31 - 00310104 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DHT64.dll
2014-02-15 16:17 - 2010-11-08 07:31 - 00310104 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DAA64.dll
2014-02-15 16:17 - 2010-11-08 07:31 - 00204120 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEED64A.dll
2014-02-15 16:17 - 2010-11-08 07:31 - 00101208 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEL64A.dll
2014-02-15 16:17 - 2010-11-08 07:31 - 00078680 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEG64A.dll
2014-02-15 16:17 - 2010-11-03 18:30 - 00149608 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCfg64.dll
2014-02-15 16:17 - 2010-09-27 09:34 - 00318808 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO20.dll
2014-02-15 16:17 - 2009-11-24 09:55 - 00518896 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSX64.dll
2014-02-15 16:17 - 2009-11-24 09:55 - 00211184 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSH64.dll
2014-02-15 16:17 - 2009-11-24 09:55 - 00198896 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSHP64.dll
2014-02-15 16:17 - 2009-11-24 09:55 - 00155888 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSWOW64.dll
2014-02-15 16:17 - 2009-11-18 07:12 - 00032344 _____ (Creative Technology Ltd.) C:\Windows\system32\Drivers\MBfilt64.sys
2014-02-15 16:07 - 2014-02-15 16:07 - 00018960 _____ (Logitech, Inc.) C:\Windows\system32\Drivers\LNonPnP.sys
2014-02-15 16:07 - 2014-02-15 16:07 - 00000000 ____D () C:\Users\Benutzername\AppData\Roaming\NVIDIA
2014-02-15 16:07 - 2014-02-15 16:07 - 00000000 ____D () C:\Users\Benutzername\AppData\Local\Logitech
2014-02-15 16:07 - 2014-02-15 16:07 - 00000000 ____D () C:\ProgramData\LogiShrd
2014-02-15 16:07 - 2014-02-15 16:07 - 00000000 ____D () C:\Program Files\Logitech Gaming Software
2014-02-15 16:06 - 2014-02-15 16:06 - 00000000 ____D () C:\Users\Benutzername\AppData\Roaming\Logitech
2014-02-15 16:06 - 2014-02-15 16:06 - 00000000 ____D () C:\Users\Benutzername\AppData\Roaming\Logishrd
2014-02-15 15:58 - 2008-07-31 10:41 - 00068616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_1.dll
2014-02-15 15:58 - 2008-07-31 10:40 - 00509448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_2.dll
2014-02-15 15:58 - 2008-07-12 08:18 - 03851784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_39.dll
2014-02-15 15:58 - 2008-07-12 08:18 - 01493528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_39.dll
2014-02-15 15:58 - 2008-07-12 08:18 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_39.dll
2014-02-15 15:57 - 2014-02-16 10:33 - 00000000 ____D () C:\Users\Benutzername\AppData\Local\PMB Files
2014-02-15 15:57 - 2014-02-15 23:40 - 00000000 ____D () C:\ProgramData\PMB Files
2014-02-15 15:57 - 2014-02-15 15:57 - 00000000 ____D () C:\Riot Games
2014-02-15 15:57 - 2014-02-15 15:57 - 00000000 ____D () C:\Program Files (x86)\Pando Networks
2014-02-15 15:56 - 2014-02-15 15:57 - 00000000 ____D () C:\Users\Benutzername\AppData\Roaming\Riot Games
2014-02-15 15:53 - 2013-12-19 21:33 - 30372640 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2014-02-15 15:53 - 2013-12-19 21:33 - 25257248 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2014-02-15 15:53 - 2013-12-19 21:33 - 22960416 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2014-02-15 15:53 - 2013-12-19 21:33 - 18310112 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll
2014-02-15 15:53 - 2013-12-19 21:33 - 18222008 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2014-02-15 15:53 - 2013-12-19 21:33 - 17560352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2014-02-15 15:53 - 2013-12-19 21:33 - 15877216 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2014-02-15 15:53 - 2013-12-19 21:33 - 12645664 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2014-02-15 15:53 - 2013-12-19 21:33 - 11605752 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2014-02-15 15:53 - 2013-12-19 21:33 - 11554264 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2014-02-15 15:53 - 2013-12-19 21:33 - 09700224 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2014-02-15 15:53 - 2013-12-19 21:33 - 09657464 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2014-02-15 15:53 - 2013-12-19 21:33 - 03132704 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2014-02-15 15:53 - 2013-12-19 21:33 - 03125024 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll
2014-02-15 15:53 - 2013-12-19 21:33 - 02947872 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2014-02-15 15:53 - 2013-12-19 21:33 - 02747680 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll
2014-02-15 15:53 - 2013-12-19 21:33 - 01884448 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6433221.dll
2014-02-15 15:53 - 2013-12-19 21:33 - 01511712 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6433221.dll
2014-02-15 15:53 - 2013-12-19 21:33 - 01242400 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2014-02-15 15:53 - 2013-12-19 21:33 - 00882464 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2014-02-15 15:53 - 2013-12-19 21:33 - 00879392 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2014-02-15 15:53 - 2013-12-19 21:33 - 00852768 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2014-02-15 15:53 - 2013-12-19 21:33 - 00847648 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2014-02-15 15:53 - 2013-12-19 21:33 - 00317472 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2014-02-15 15:53 - 2013-12-19 21:33 - 00266984 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2014-02-15 15:53 - 2013-12-19 21:33 - 00168616 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2014-02-15 15:53 - 2013-12-19 21:33 - 00141336 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2014-02-15 15:46 - 2014-02-15 15:46 - 00000000 ____D () C:\Users\Benutzername\AppData\Local\NVIDIA
2014-02-15 15:41 - 2014-02-15 15:41 - 00001351 _____ () C:\Users\Public\Desktop\GeForce Experience.lnk
2014-02-15 15:40 - 2014-02-15 15:40 - 00000000 ____D () C:\Program Files (x86)\AGEIA Technologies
2014-02-15 15:40 - 2013-11-14 12:57 - 01064224 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll
2014-02-15 15:40 - 2013-11-14 12:57 - 00955168 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll
2014-02-15 15:39 - 2014-02-15 15:54 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-02-15 15:39 - 2014-02-15 15:41 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation
2014-02-15 15:39 - 2014-02-15 15:40 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation
2014-02-15 15:39 - 2014-02-15 15:39 - 01588294 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2014-02-15 15:39 - 2014-02-15 15:39 - 00000020 ___SH () C:\Users\UpdatusUser\ntuser.ini
2014-02-15 15:39 - 2014-02-15 15:39 - 00000000 _SHDL () C:\Users\UpdatusUser\Vorlagen
2014-02-15 15:39 - 2014-02-15 15:39 - 00000000 _SHDL () C:\Users\UpdatusUser\Startmenü
2014-02-15 15:39 - 2014-02-15 15:39 - 00000000 _SHDL () C:\Users\UpdatusUser\Netzwerkumgebung
2014-02-15 15:39 - 2014-02-15 15:39 - 00000000 _SHDL () C:\Users\UpdatusUser\Lokale Einstellungen
2014-02-15 15:39 - 2014-02-15 15:39 - 00000000 _SHDL () C:\Users\UpdatusUser\Eigene Dateien
2014-02-15 15:39 - 2014-02-15 15:39 - 00000000 _SHDL () C:\Users\UpdatusUser\Druckumgebung
2014-02-15 15:39 - 2014-02-15 15:39 - 00000000 _SHDL () C:\Users\UpdatusUser\Documents\Eigene Musik
2014-02-15 15:39 - 2014-02-15 15:39 - 00000000 _SHDL () C:\Users\UpdatusUser\Documents\Eigene Bilder
2014-02-15 15:39 - 2014-02-15 15:39 - 00000000 _SHDL () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-02-15 15:39 - 2014-02-15 15:39 - 00000000 _SHDL () C:\Users\UpdatusUser\AppData\Local\Verlauf
2014-02-15 15:39 - 2014-02-15 15:39 - 00000000 _SHDL () C:\Users\UpdatusUser\AppData\Local\Anwendungsdaten
2014-02-15 15:39 - 2014-02-15 15:39 - 00000000 _SHDL () C:\Users\UpdatusUser\Anwendungsdaten
2014-02-15 15:39 - 2013-12-19 21:33 - 00061216 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll
2014-02-15 15:39 - 2013-12-19 21:33 - 00053024 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll
2014-02-15 15:39 - 2013-12-19 19:53 - 06671648 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll
2014-02-15 15:39 - 2013-12-19 19:53 - 03490080 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll
2014-02-15 15:39 - 2013-12-19 19:53 - 02559776 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll
2014-02-15 15:39 - 2013-12-19 19:53 - 00922912 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
2014-02-15 15:39 - 2013-12-19 19:53 - 00386336 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll
2014-02-15 15:39 - 2013-12-19 19:53 - 00063776 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll
2014-02-15 15:39 - 2013-12-19 06:01 - 03539040 _____ () C:\Windows\system32\nvcoproc.bin
2014-02-15 15:39 - 2009-07-14 05:54 - 00000000 ___RD () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-02-15 15:39 - 2009-07-14 05:49 - 00000000 ___RD () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2014-02-15 15:37 - 2013-12-19 21:33 - 15230352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll
2014-02-15 15:37 - 2013-12-19 21:33 - 03071656 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
2014-02-15 15:37 - 2013-12-19 21:33 - 02698272 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
2014-02-15 15:37 - 2013-12-19 21:33 - 01436528 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll
2014-02-15 15:37 - 2013-12-19 21:33 - 00023754 _____ () C:\Windows\system32\nvinfo.pb
2014-02-15 15:37 - 2013-11-14 12:57 - 00039200 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys
2014-02-15 15:37 - 2013-11-14 12:57 - 00029984 _____ (NVIDIA Corporation) C:\Windows\system32\nvaudcap64v.dll
2014-02-15 15:37 - 2013-11-14 12:57 - 00028960 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll
2014-02-15 15:37 - 2013-11-14 12:56 - 01884448 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6433182.dll
2014-02-15 15:37 - 2013-11-14 12:56 - 01511712 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6433182.dll
2014-02-15 15:36 - 2014-02-15 15:40 - 00000000 ____D () C:\Program Files\NVIDIA Corporation
2014-02-15 15:36 - 2012-02-17 07:38 - 01112064 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2014-02-15 15:36 - 2012-02-17 07:38 - 01031680 _____ (Microsoft Corporation) C:\Windows\system32\rdpcore.dll
2014-02-15 15:36 - 2012-02-17 06:34 - 00826880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpcore.dll
2014-02-15 15:36 - 2012-02-17 05:58 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpwd.sys
2014-02-15 15:36 - 2012-02-17 05:57 - 00023552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdtcp.sys
2014-02-15 15:33 - 2012-06-02 23:19 - 02428952 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2014-02-15 15:33 - 2012-06-02 23:19 - 00701976 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2014-02-15 15:33 - 2012-06-02 23:19 - 00057880 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2014-02-15 15:33 - 2012-06-02 23:19 - 00044056 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2014-02-15 15:33 - 2012-06-02 23:19 - 00038424 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2014-02-15 15:33 - 2012-06-02 23:15 - 02622464 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2014-02-15 15:33 - 2012-06-02 23:15 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2014-02-15 15:33 - 2012-06-02 15:19 - 00186752 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2014-02-15 15:33 - 2012-06-02 15:15 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2014-02-15 15:32 - 2014-02-15 16:17 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-02-15 15:32 - 2014-02-15 16:17 - 00000000 ____D () C:\Program Files (x86)\Realtek
2014-02-15 15:32 - 2013-04-10 04:09 - 00849992 _____ (Realtek ) C:\Windows\system32\Drivers\Rt64win7.sys
2014-02-15 15:32 - 2013-04-10 04:09 - 00108104 _____ (Realtek Semiconductor Corporation) C:\Windows\system32\RTNUninst64.dll
2014-02-15 15:32 - 2013-04-10 04:09 - 00073800 _____ (Realtek Semiconductor Corporation) C:\Windows\system32\RtNicProp64.dll
2014-02-15 15:31 - 2014-02-15 15:31 - 00000000 ____D () C:\MSI
2014-02-15 15:27 - 2014-02-16 10:32 - 01742898 _____ () C:\Windows\WindowsUpdate.log
2014-02-15 15:27 - 2014-02-15 17:35 - 00000000 ____D () C:\Users\Benutzername
2014-02-15 15:27 - 2014-02-15 15:27 - 00001443 _____ () C:\Users\Benutzername\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-02-15 15:27 - 2014-02-15 15:27 - 00001409 _____ () C:\Users\Benutzername\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk
2014-02-15 15:27 - 2014-02-15 15:27 - 00000020 ___SH () C:\Users\Benutzername\ntuser.ini
2014-02-15 15:27 - 2014-02-15 15:27 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Musik
2014-02-15 15:27 - 2014-02-15 15:27 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Bilder
2014-02-15 15:27 - 2014-02-15 15:27 - 00000000 _SHDL () C:\Users\Default\Vorlagen
2014-02-15 15:27 - 2014-02-15 15:27 - 00000000 _SHDL () C:\Users\Default\Startmenü
2014-02-15 15:27 - 2014-02-15 15:27 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung
2014-02-15 15:27 - 2014-02-15 15:27 - 00000000 _SHDL () C:\Users\Default\Lokale Einstellungen
2014-02-15 15:27 - 2014-02-15 15:27 - 00000000 _SHDL () C:\Users\Default\Eigene Dateien
2014-02-15 15:27 - 2014-02-15 15:27 - 00000000 _SHDL () C:\Users\Default\Druckumgebung
2014-02-15 15:27 - 2014-02-15 15:27 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik
2014-02-15 15:27 - 2014-02-15 15:27 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder
2014-02-15 15:27 - 2014-02-15 15:27 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-02-15 15:27 - 2014-02-15 15:27 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf
2014-02-15 15:27 - 2014-02-15 15:27 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Anwendungsdaten
2014-02-15 15:27 - 2014-02-15 15:27 - 00000000 _SHDL () C:\Users\Default\Anwendungsdaten
2014-02-15 15:27 - 2014-02-15 15:27 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik
2014-02-15 15:27 - 2014-02-15 15:27 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder
2014-02-15 15:27 - 2014-02-15 15:27 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-02-15 15:27 - 2014-02-15 15:27 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf
2014-02-15 15:27 - 2014-02-15 15:27 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Anwendungsdaten
2014-02-15 15:27 - 2014-02-15 15:27 - 00000000 _SHDL () C:\Users\Benutzername\Vorlagen
2014-02-15 15:27 - 2014-02-15 15:27 - 00000000 _SHDL () C:\Users\Benutzername\Startmenü
2014-02-15 15:27 - 2014-02-15 15:27 - 00000000 _SHDL () C:\Users\Benutzername\Netzwerkumgebung
2014-02-15 15:27 - 2014-02-15 15:27 - 00000000 _SHDL () C:\Users\Benutzername\Lokale Einstellungen
2014-02-15 15:27 - 2014-02-15 15:27 - 00000000 _SHDL () C:\Users\Benutzername\Eigene Dateien
2014-02-15 15:27 - 2014-02-15 15:27 - 00000000 _SHDL () C:\Users\Benutzername\Druckumgebung
2014-02-15 15:27 - 2014-02-15 15:27 - 00000000 _SHDL () C:\Users\Benutzername\Documents\Eigene Musik
2014-02-15 15:27 - 2014-02-15 15:27 - 00000000 _SHDL () C:\Users\Benutzername\Documents\Eigene Bilder
2014-02-15 15:27 - 2014-02-15 15:27 - 00000000 _SHDL () C:\Users\Benutzername\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-02-15 15:27 - 2014-02-15 15:27 - 00000000 _SHDL () C:\Users\Benutzername\AppData\Local\Verlauf
2014-02-15 15:27 - 2014-02-15 15:27 - 00000000 _SHDL () C:\Users\Benutzername\AppData\Local\Anwendungsdaten
2014-02-15 15:27 - 2014-02-15 15:27 - 00000000 _SHDL () C:\Users\Benutzername\Anwendungsdaten
2014-02-15 15:27 - 2014-02-15 15:27 - 00000000 _SHDL () C:\Programme
2014-02-15 15:27 - 2014-02-15 15:27 - 00000000 _SHDL () C:\ProgramData\Vorlagen
2014-02-15 15:27 - 2014-02-15 15:27 - 00000000 _SHDL () C:\ProgramData\Startmenü
2014-02-15 15:27 - 2014-02-15 15:27 - 00000000 _SHDL () C:\ProgramData\Favoriten
2014-02-15 15:27 - 2014-02-15 15:27 - 00000000 _SHDL () C:\ProgramData\Dokumente
2014-02-15 15:27 - 2014-02-15 15:27 - 00000000 _SHDL () C:\ProgramData\Anwendungsdaten
2014-02-15 15:27 - 2014-02-15 15:27 - 00000000 _SHDL () C:\Program Files\Gemeinsame Dateien
2014-02-15 15:27 - 2014-02-15 15:27 - 00000000 _SHDL () C:\Dokumente und Einstellungen
2014-02-15 15:27 - 2014-02-15 15:27 - 00000000 __SHD () C:\Recovery
2014-02-15 15:27 - 2014-02-15 15:27 - 00000000 ___RD () C:\Users\Benutzername\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-02-15 15:27 - 2014-02-15 15:27 - 00000000 ___RD () C:\Users\Benutzername\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-02-15 15:27 - 2014-02-15 15:27 - 00000000 ____D () C:\Users\Benutzername\AppData\Local\VirtualStore
2014-02-15 15:27 - 2009-07-14 05:54 - 00000000 ___RD () C:\Users\Benutzername\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-02-15 15:27 - 2009-07-14 05:49 - 00000000 ___RD () C:\Users\Benutzername\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2014-02-15 15:21 - 2014-02-15 18:53 - 00000000 ____D () C:\Windows\Panther

==================== One Month Modified Files and Folders =======

2014-02-16 10:33 - 2014-02-16 10:33 - 00000000 ____D () C:\Users\Benutzername\Desktop\Neuer Ordner
2014-02-16 10:33 - 2014-02-16 10:32 - 00014156 _____ () C:\Users\Benutzername\Desktop\FRST.txt
2014-02-16 10:33 - 2014-02-15 17:37 - 00000000 ____D () C:\FRST
2014-02-16 10:33 - 2014-02-15 15:57 - 00000000 ____D () C:\Users\Benutzername\AppData\Local\PMB Files
2014-02-16 10:33 - 2014-02-15 15:27 - 01742898 _____ () C:\Windows\WindowsUpdate.log
2014-02-16 10:32 - 2010-11-21 07:50 - 00696132 _____ () C:\Windows\system32\perfh007.dat
2014-02-16 10:32 - 2010-11-21 07:50 - 00147428 _____ () C:\Windows\system32\perfc007.dat
2014-02-16 10:32 - 2009-07-14 06:13 - 01611160 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-02-16 10:31 - 2014-02-15 16:49 - 00000000 ____D () C:\Users\Benutzername\AppData\Roaming\TS3Client
2014-02-16 10:27 - 2014-02-15 23:39 - 00000168 _____ () C:\Windows\setupact.log
2014-02-16 10:27 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-02-15 23:40 - 2014-02-15 15:57 - 00000000 ____D () C:\ProgramData\PMB Files
2014-02-15 23:39 - 2014-02-15 23:39 - 00000000 _____ () C:\Windows\setuperr.log
2014-02-15 20:48 - 2014-02-15 20:48 - 00000000 ____D () C:\Users\Benutzername\AppData\Local\Macromedia
2014-02-15 20:48 - 2014-02-15 16:26 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-02-15 20:48 - 2014-02-15 16:26 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-02-15 20:48 - 2014-02-15 16:25 - 00000000 ____D () C:\Users\Benutzername\AppData\Local\Adobe
2014-02-15 19:31 - 2014-02-15 19:31 - 00000000 ____D () C:\Program Files (x86)\ESET
2014-02-15 19:31 - 2014-02-15 19:30 - 02347384 _____ (ESET) C:\Users\Benutzername\Desktop\esetsmartinstaller_enu.exe
2014-02-15 18:58 - 2009-07-14 05:45 - 00026352 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-02-15 18:58 - 2009-07-14 05:45 - 00026352 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-02-15 18:53 - 2014-02-15 15:21 - 00000000 ____D () C:\Windows\Panther
2014-02-15 18:36 - 2014-02-15 18:36 - 01037530 _____ (Thisisu) C:\Users\Benutzername\Desktop\JRT.exe
2014-02-15 18:36 - 2014-02-15 18:36 - 00000000 ____D () C:\Windows\ERUNT
2014-02-15 18:34 - 2014-02-15 18:30 - 00000000 ____D () C:\AdwCleaner
2014-02-15 18:30 - 2014-02-15 18:30 - 01166132 _____ () C:\Users\Benutzername\Desktop\adwcleaner.exe
2014-02-15 18:25 - 2014-02-15 18:25 - 00000000 ____D () C:\Users\Benutzername\AppData\Roaming\Malwarebytes
2014-02-15 18:25 - 2014-02-15 18:25 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-02-15 18:08 - 2014-02-15 18:08 - 00000000 ____D () C:\Users\Benutzername\AppData\Roaming\Avira
2014-02-15 18:07 - 2014-02-15 18:07 - 00000000 ____D () C:\ProgramData\Avira
2014-02-15 18:07 - 2014-02-15 18:07 - 00000000 ____D () C:\Program Files (x86)\Avira
2014-02-15 18:02 - 2014-02-15 16:40 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-02-15 18:02 - 2009-07-14 05:45 - 00293320 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-02-15 17:39 - 2014-02-15 17:39 - 00380416 _____ () C:\Users\Benutzername\Desktop\Gmer-19357.exe
2014-02-15 17:36 - 2014-02-15 17:36 - 02152960 _____ (Farbar) C:\Users\Benutzername\Desktop\FRST64.exe
2014-02-15 17:35 - 2014-02-15 17:35 - 00000000 _____ () C:\Users\Benutzername\defogger_reenable
2014-02-15 17:35 - 2014-02-15 15:27 - 00000000 ____D () C:\Users\Benutzername
2014-02-15 17:34 - 2014-02-15 17:34 - 00050477 _____ () C:\Users\Benutzername\Desktop\Defogger.exe
2014-02-15 17:31 - 2014-02-15 17:23 - 00000000 ____D () C:\Program Files\VideoLAN
2014-02-15 17:22 - 2014-02-15 17:22 - 00000000 ____D () C:\Users\Benutzername\AppData\Roaming\PingPlotter
2014-02-15 17:22 - 2014-02-15 17:22 - 00000000 ____D () C:\Users\Benutzername\AppData\Roaming\Downloaded Installations
2014-02-15 17:22 - 2014-02-15 17:22 - 00000000 ____D () C:\Program Files (x86)\PingPlotter Standard
2014-02-15 17:12 - 2014-02-15 17:12 - 00000000 ____D () C:\Users\Benutzername\AppData\Roaming\LolClient
2014-02-15 17:03 - 2014-02-15 17:03 - 00000000 ____D () C:\Users\Benutzername\AppData\Roaming\Thunderbird
2014-02-15 17:03 - 2014-02-15 17:03 - 00000000 ____D () C:\Users\Benutzername\AppData\Local\Thunderbird
2014-02-15 16:57 - 2014-02-15 16:57 - 00000000 ____D () C:\Program Files (x86)\Mozilla Thunderbird
2014-02-15 16:50 - 2014-02-15 16:50 - 00063568 _____ () C:\Users\Benutzername\AppData\Local\GDIPFONTCACHEV1.DAT
2014-02-15 16:44 - 2014-02-15 16:44 - 00000000 ____D () C:\Program Files\TeamSpeak 3 Client
2014-02-15 16:42 - 2014-02-15 16:42 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-02-15 16:42 - 2014-02-15 16:42 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-02-15 16:42 - 2014-02-15 16:42 - 00174504 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-02-15 16:42 - 2014-02-15 16:42 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-02-15 16:42 - 2014-02-15 16:42 - 00000000 ____D () C:\Users\Benutzername\AppData\Roaming\Mozilla
2014-02-15 16:42 - 2014-02-15 16:42 - 00000000 ____D () C:\Users\Benutzername\AppData\Local\Mozilla
2014-02-15 16:42 - 2014-02-15 16:42 - 00000000 ____D () C:\ProgramData\Sun
2014-02-15 16:42 - 2014-02-15 16:42 - 00000000 ____D () C:\ProgramData\Oracle
2014-02-15 16:42 - 2014-02-15 16:42 - 00000000 ____D () C:\Program Files (x86)\MozBackup
2014-02-15 16:42 - 2014-02-15 16:42 - 00000000 ____D () C:\Program Files (x86)\Java
2014-02-15 16:40 - 2014-02-15 16:40 - 00000000 ____D () C:\ProgramData\Mozilla
2014-02-15 16:40 - 2014-02-15 16:40 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-02-15 16:38 - 2014-02-15 16:38 - 00002786 _____ () C:\Windows\System32\Tasks\CCleanerSkipUAC
2014-02-15 16:38 - 2014-02-15 16:38 - 00000000 ____D () C:\Program Files\CCleaner
2014-02-15 16:37 - 2014-02-15 16:37 - 00000000 ____D () C:\Program Files (x86)\OpenOffice 4
2014-02-15 16:36 - 2009-07-14 04:20 - 00000000 ____D () C:\Program Files\Common Files\Microsoft Shared
2014-02-15 16:27 - 2014-02-15 16:27 - 00000000 ____D () C:\Users\Benutzername\AppData\Roaming\Macromedia
2014-02-15 16:27 - 2014-02-15 16:27 - 00000000 ____D () C:\Users\Benutzername\AppData\Roaming\Adobe
2014-02-15 16:26 - 2014-02-15 16:26 - 00000000 ____D () C:\Windows\SysWOW64\Macromed
2014-02-15 16:26 - 2014-02-15 16:26 - 00000000 ____D () C:\Windows\system32\Macromed
2014-02-15 16:23 - 2014-02-15 16:19 - 00000000 ____D () C:\Windows\SysWOW64\directx
2014-02-15 16:18 - 2014-02-15 16:18 - 00000000 ____D () C:\Windows\SysWOW64\RTCOM
2014-02-15 16:18 - 2014-02-15 16:18 - 00000000 ____D () C:\Program Files\Realtek
2014-02-15 16:17 - 2014-02-15 15:32 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-02-15 16:17 - 2014-02-15 15:32 - 00000000 ____D () C:\Program Files (x86)\Realtek
2014-02-15 16:07 - 2014-02-15 16:07 - 00018960 _____ (Logitech, Inc.) C:\Windows\system32\Drivers\LNonPnP.sys
2014-02-15 16:07 - 2014-02-15 16:07 - 00000000 ____D () C:\Users\Benutzername\AppData\Roaming\NVIDIA
2014-02-15 16:07 - 2014-02-15 16:07 - 00000000 ____D () C:\Users\Benutzername\AppData\Local\Logitech
2014-02-15 16:07 - 2014-02-15 16:07 - 00000000 ____D () C:\ProgramData\LogiShrd
2014-02-15 16:07 - 2014-02-15 16:07 - 00000000 ____D () C:\Program Files\Logitech Gaming Software
2014-02-15 16:06 - 2014-02-15 16:06 - 00000000 ____D () C:\Users\Benutzername\AppData\Roaming\Logitech
2014-02-15 16:06 - 2014-02-15 16:06 - 00000000 ____D () C:\Users\Benutzername\AppData\Roaming\Logishrd
2014-02-15 15:57 - 2014-02-15 15:57 - 00000000 ____D () C:\Riot Games
2014-02-15 15:57 - 2014-02-15 15:57 - 00000000 ____D () C:\Program Files (x86)\Pando Networks
2014-02-15 15:57 - 2014-02-15 15:56 - 00000000 ____D () C:\Users\Benutzername\AppData\Roaming\Riot Games
2014-02-15 15:54 - 2014-02-15 15:39 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-02-15 15:46 - 2014-02-15 15:46 - 00000000 ____D () C:\Users\Benutzername\AppData\Local\NVIDIA
2014-02-15 15:41 - 2014-02-15 15:41 - 00001351 _____ () C:\Users\Public\Desktop\GeForce Experience.lnk
2014-02-15 15:41 - 2014-02-15 15:39 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation
2014-02-15 15:40 - 2014-02-15 15:40 - 00000000 ____D () C:\Program Files (x86)\AGEIA Technologies
2014-02-15 15:40 - 2014-02-15 15:39 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation
2014-02-15 15:40 - 2014-02-15 15:36 - 00000000 ____D () C:\Program Files\NVIDIA Corporation
2014-02-15 15:39 - 2014-02-15 15:39 - 01588294 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2014-02-15 15:39 - 2014-02-15 15:39 - 00000020 ___SH () C:\Users\UpdatusUser\ntuser.ini
2014-02-15 15:39 - 2014-02-15 15:39 - 00000000 _SHDL () C:\Users\UpdatusUser\Vorlagen
2014-02-15 15:39 - 2014-02-15 15:39 - 00000000 _SHDL () C:\Users\UpdatusUser\Startmenü
2014-02-15 15:39 - 2014-02-15 15:39 - 00000000 _SHDL () C:\Users\UpdatusUser\Netzwerkumgebung
2014-02-15 15:39 - 2014-02-15 15:39 - 00000000 _SHDL () C:\Users\UpdatusUser\Lokale Einstellungen
2014-02-15 15:39 - 2014-02-15 15:39 - 00000000 _SHDL () C:\Users\UpdatusUser\Eigene Dateien
2014-02-15 15:39 - 2014-02-15 15:39 - 00000000 _SHDL () C:\Users\UpdatusUser\Druckumgebung
2014-02-15 15:39 - 2014-02-15 15:39 - 00000000 _SHDL () C:\Users\UpdatusUser\Documents\Eigene Musik
2014-02-15 15:39 - 2014-02-15 15:39 - 00000000 _SHDL () C:\Users\UpdatusUser\Documents\Eigene Bilder
2014-02-15 15:39 - 2014-02-15 15:39 - 00000000 _SHDL () C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-02-15 15:39 - 2014-02-15 15:39 - 00000000 _SHDL () C:\Users\UpdatusUser\AppData\Local\Verlauf
2014-02-15 15:39 - 2014-02-15 15:39 - 00000000 _SHDL () C:\Users\UpdatusUser\AppData\Local\Anwendungsdaten
2014-02-15 15:39 - 2014-02-15 15:39 - 00000000 _SHDL () C:\Users\UpdatusUser\Anwendungsdaten
2014-02-15 15:39 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\Help
2014-02-15 15:32 - 2009-07-14 06:32 - 00000000 ____D () C:\Windows\system32\restore
2014-02-15 15:31 - 2014-02-15 15:31 - 00000000 ____D () C:\MSI
2014-02-15 15:28 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-02-15 15:27 - 2014-02-15 15:27 - 00001443 _____ () C:\Users\Benutzername\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-02-15 15:27 - 2014-02-15 15:27 - 00001409 _____ () C:\Users\Benutzername\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk
2014-02-15 15:27 - 2014-02-15 15:27 - 00000020 ___SH () C:\Users\Benutzername\ntuser.ini
2014-02-15 15:27 - 2014-02-15 15:27 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Musik
2014-02-15 15:27 - 2014-02-15 15:27 - 00000000 _SHDL () C:\Users\Public\Documents\Eigene Bilder
2014-02-15 15:27 - 2014-02-15 15:27 - 00000000 _SHDL () C:\Users\Default\Vorlagen
2014-02-15 15:27 - 2014-02-15 15:27 - 00000000 _SHDL () C:\Users\Default\Startmenü
2014-02-15 15:27 - 2014-02-15 15:27 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung
2014-02-15 15:27 - 2014-02-15 15:27 - 00000000 _SHDL () C:\Users\Default\Lokale Einstellungen
2014-02-15 15:27 - 2014-02-15 15:27 - 00000000 _SHDL () C:\Users\Default\Eigene Dateien
2014-02-15 15:27 - 2014-02-15 15:27 - 00000000 _SHDL () C:\Users\Default\Druckumgebung
2014-02-15 15:27 - 2014-02-15 15:27 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik
2014-02-15 15:27 - 2014-02-15 15:27 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder
2014-02-15 15:27 - 2014-02-15 15:27 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-02-15 15:27 - 2014-02-15 15:27 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf
2014-02-15 15:27 - 2014-02-15 15:27 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Anwendungsdaten
2014-02-15 15:27 - 2014-02-15 15:27 - 00000000 _SHDL () C:\Users\Default\Anwendungsdaten
2014-02-15 15:27 - 2014-02-15 15:27 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Musik
2014-02-15 15:27 - 2014-02-15 15:27 - 00000000 _SHDL () C:\Users\Default User\Documents\Eigene Bilder
2014-02-15 15:27 - 2014-02-15 15:27 - 00000000 _SHDL () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-02-15 15:27 - 2014-02-15 15:27 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Verlauf
2014-02-15 15:27 - 2014-02-15 15:27 - 00000000 _SHDL () C:\Users\Default User\AppData\Local\Anwendungsdaten
2014-02-15 15:27 - 2014-02-15 15:27 - 00000000 _SHDL () C:\Users\Benutzername\Vorlagen
2014-02-15 15:27 - 2014-02-15 15:27 - 00000000 _SHDL () C:\Users\Benutzername\Startmenü
2014-02-15 15:27 - 2014-02-15 15:27 - 00000000 _SHDL () C:\Users\Benutzername\Netzwerkumgebung
2014-02-15 15:27 - 2014-02-15 15:27 - 00000000 _SHDL () C:\Users\Benutzername\Lokale Einstellungen
2014-02-15 15:27 - 2014-02-15 15:27 - 00000000 _SHDL () C:\Users\Benutzername\Eigene Dateien
2014-02-15 15:27 - 2014-02-15 15:27 - 00000000 _SHDL () C:\Users\Benutzername\Druckumgebung
2014-02-15 15:27 - 2014-02-15 15:27 - 00000000 _SHDL () C:\Users\Benutzername\Documents\Eigene Musik
2014-02-15 15:27 - 2014-02-15 15:27 - 00000000 _SHDL () C:\Users\Benutzername\Documents\Eigene Bilder
2014-02-15 15:27 - 2014-02-15 15:27 - 00000000 _SHDL () C:\Users\Benutzername\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-02-15 15:27 - 2014-02-15 15:27 - 00000000 _SHDL () C:\Users\Benutzername\AppData\Local\Verlauf
2014-02-15 15:27 - 2014-02-15 15:27 - 00000000 _SHDL () C:\Users\Benutzername\AppData\Local\Anwendungsdaten
2014-02-15 15:27 - 2014-02-15 15:27 - 00000000 _SHDL () C:\Users\Benutzername\Anwendungsdaten
2014-02-15 15:27 - 2014-02-15 15:27 - 00000000 _SHDL () C:\Programme
2014-02-15 15:27 - 2014-02-15 15:27 - 00000000 _SHDL () C:\ProgramData\Vorlagen
2014-02-15 15:27 - 2014-02-15 15:27 - 00000000 _SHDL () C:\ProgramData\Startmenü
2014-02-15 15:27 - 2014-02-15 15:27 - 00000000 _SHDL () C:\ProgramData\Favoriten
2014-02-15 15:27 - 2014-02-15 15:27 - 00000000 _SHDL () C:\ProgramData\Dokumente
2014-02-15 15:27 - 2014-02-15 15:27 - 00000000 _SHDL () C:\ProgramData\Anwendungsdaten
2014-02-15 15:27 - 2014-02-15 15:27 - 00000000 _SHDL () C:\Program Files\Gemeinsame Dateien
2014-02-15 15:27 - 2014-02-15 15:27 - 00000000 _SHDL () C:\Dokumente und Einstellungen
2014-02-15 15:27 - 2014-02-15 15:27 - 00000000 __SHD () C:\Recovery
2014-02-15 15:27 - 2014-02-15 15:27 - 00000000 ___RD () C:\Users\Benutzername\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-02-15 15:27 - 2014-02-15 15:27 - 00000000 ___RD () C:\Users\Benutzername\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-02-15 15:27 - 2014-02-15 15:27 - 00000000 ____D () C:\Users\Benutzername\AppData\Local\VirtualStore
2014-02-15 15:27 - 2009-07-14 04:20 - 00000000 __RHD () C:\Users\Default
2014-02-15 15:27 - 2009-07-14 04:20 - 00000000 ____D () C:\Program Files\Windows NT
2014-02-15 15:26 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\rescache
2014-02-15 15:23 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\sysprep
2014-02-15 15:22 - 2010-11-21 08:00 - 00000000 ____D () C:\Windows\CSC
2014-02-15 15:21 - 2009-07-14 06:38 - 00025600 ___SH () C:\Windows\system32\config\BCD-Template.LOG
2014-02-15 15:21 - 2009-07-14 06:32 - 00028672 _____ () C:\Windows\system32\config\BCD-Template
2014-02-15 13:39 - 2014-02-15 17:04 - 00000667 _____ () C:\Users\Benutzername\Documents\indexfile.txt
2014-02-14 05:22 - 2014-02-15 17:22 - 00000044 ____H () C:\Program Files (x86)\18a3d330.tmp

Some content of TEMP:
====================
C:\Users\Benutzername\AppData\Local\Temp\avgnt.exe
C:\Users\Benutzername\AppData\Local\Temp\devcon64.exe
C:\Users\Benutzername\AppData\Local\Temp\DJAPI.dll
C:\Users\Benutzername\AppData\Local\Temp\PrefJsonCpp.exe
C:\Users\Benutzername\AppData\Local\Temp\Quarantine.exe
C:\Users\Benutzername\AppData\Local\Temp\sqlite3.exe
C:\Users\Benutzername\AppData\Local\Temp\swt-win32-3349.dll


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-02-15 15:21

==================== End Of Log ============================
         
--- --- ---

--- --- ---

--- --- ---

--- --- ---


Geändert von Tim0 (16.02.2014 um 10:51 Uhr)

Alt 17.02.2014, 10:11   #6
schrauber
/// the machine
/// TB-Ausbilder
 

Windows 7 - "Startfenster" - Standard

Windows 7 - "Startfenster"



in welchem Browser besteht das Problem?
__________________
--> Windows 7 - "Startfenster"

Alt 17.02.2014, 16:36   #7
Tim0
 
Windows 7 - "Startfenster" - Standard

Windows 7 - "Startfenster"



In Firefox, als ich testweise mal den Internetexplorer geöffnet habe, ist folgendes Fenster erschienen

Jedoch hat sich im IE nichts geändert.

Alt 18.02.2014, 12:24   #8
schrauber
/// the machine
/// TB-Ausbilder
 

Windows 7 - "Startfenster" - Standard

Windows 7 - "Startfenster"



Revo Uninstaller - Download - Filepony
damit Firefox deinstallieren, keine DAten behalten, Reste entfernen lassen, neu installieren.

Dann:
https://support.mozilla.org/de/kb/fi...einfach-loesen


Setze folgendermassen den Internet Explorer zurück:
  • Öffne den Internet Explorer und gehe zu Extras -> Internetoptionen.
  • Klicke in der Registerkarte Erweitert unter "Internet Explorer-Einstellungen zurücksetzen" auf Zurücksetzen...
  • Klicke im Dialogfeld "Internet Explorer-Einstellungen zurücksetzen" zum Bestätigen auf Zurücksetzen.
(Hier findest du die bebilderte Anleitung.)




ESET Online Scanner

  • Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
  • Lade und starte Eset Online Scanner
  • Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
  • Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
  • Klicke auf Starten.
  • Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
  • Klicke am Ende des Suchlaufs auf Fertig stellen.
  • Schließe das Fenster von ESET.
  • Explorer öffnen.
  • C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
  • Logfile hier posten.
  • Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
  • Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset


Downloade Dir bitte SecurityCheck und:

  • Speichere es auf dem Desktop.
  • Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
  • Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.
Poste den Inhalt bitte hier.

und ein frisches FRST log bitte. Noch Probleme?
__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Alt 18.02.2014, 17:19   #9
Tim0
 
Windows 7 - "Startfenster" - Standard

Windows 7 - "Startfenster"



ESET
Code:
ATTFilter
ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=bc5239f7a659864689ab7666aced219b
# engine=17087
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2014-02-15 07:35:19
# local_time=2014-02-15 08:35:19 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# lang=1033
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=1799 16775165 100 94 7234 5140944 5160 0
# compatibility_mode=5893 16776574 100 94 102170719 144122769 0 0
# scanned=87357
# found=0
# cleaned=0
# scan_time=3021
ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=bc5239f7a659864689ab7666aced219b
# engine=17123
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2014-02-18 04:03:20
# local_time=2014-02-18 05:03:20 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# lang=1033
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=5893 16776573 100 94 190371 144369250 0 0
# scanned=122123
# found=2
# cleaned=0
# scan_time=2054
sh=273A2A936AEC8B68DE2329EF69996F616B0D757E ft=1 fh=6e75ff11b16007d4 vn="NSIS/StartPage.CC trojan" ac=I fn="C:\Users\Benutzername\Desktop\vlc-2.1.3-win64.exe"
sh=273A2A936AEC8B68DE2329EF69996F616B0D757E ft=1 fh=6e75ff11b16007d4 vn="NSIS/StartPage.CC trojan" ac=I fn="F:\$RECYCLE.BIN\S-1-5-21-2064796682-4115196864-2428625586-1000\$R0KQV7H.exe"
         
Ich hatte die Installationsdatei noch auf dem Desktop da ich sie testweise mal mit Avira scannen wollte (hat nicht angeschlagen :/ )
Bei meiner Externen habe ich irgendwann abgebrochen da er ab einer gewissen Stelle pro Prozen fast 10min gebraucht hat.

Security Check
Code:
ATTFilter
 Results of screen317's  version 0.99.79  
 Windows 7 Service Pack 1 x64 (UAC is enabled)  
 Internet Explorer 11  
``````````````Antivirus/Firewall Check:`````````````` 
 WMI entry may not exist for antivirus; attempting automatic update. 
`````````Anti-malware/Other Utilities Check:````````` 
 Java 7 Update 51  
  Adobe Flash Player 12.0.0.44 Flash Player out of Date!  
 Mozilla Firefox (27.0.1) 
 Mozilla Thunderbird (24.3.0) 
````````Process Check: objlist.exe by Laurent````````  
 ESET ESET Online Scanner OnlineScannerApp.exe  
`````````````````System Health check````````````````` 
 Total Fragmentation on Drive C:  
````````````````````End of Log``````````````````````
         
Der FRST Log war leider zu groß deshalb habe ich ihn gezippt


Viele Grüße
Tim0

Alt 19.02.2014, 15:34   #10
schrauber
/// the machine
/// TB-Ausbilder
 

Windows 7 - "Startfenster" - Standard

Windows 7 - "Startfenster"



Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:
ATTFilter
F:\$RECYCLE.BIN
         

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
  • Starte nun FRST erneut und klicke den Entfernen Button.
  • Das Tool erstellt eine Fixlog.txt.
  • Poste mir deren Inhalt.



Noch Probleme?
__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Alt 19.02.2014, 16:57   #11
Tim0
 
Windows 7 - "Startfenster" - Standard

Windows 7 - "Startfenster"



Habe die Datei wieder gezippt.

Haben die beiden Einträge aus dem letzten FRST Log eigentlich noch etwas zu bedeuten?
SearchScopes: HKLM - DefaultScope {B8E7C34F-5F46-435F-A23F-4957F26DFC04} URL = hxxp://www.sm.de/?q={searchTerms}
SearchScopes: HKLM - {B8E7C34F-5F46-435F-A23F-4957F26DFC04} URL = hxxp://www.sm.de/?q={searchTerms}

Viele Grüße
Tim0

Alt 20.02.2014, 14:13   #12
schrauber
/// the machine
/// TB-Ausbilder
 

Windows 7 - "Startfenster" - Standard

Windows 7 - "Startfenster"



Das sind Reste, nehmen wir jetzt raus.

Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:
ATTFilter
SearchScopes: HKLM - DefaultScope {B8E7C34F-5F46-435F-A23F-4957F26DFC04} URL = hxxp://www.sm.de/?q={searchTerms}
SearchScopes: HKLM - {B8E7C34F-5F46-435F-A23F-4957F26DFC04} URL = hxxp://www.sm.de/?q={searchTerms}
         

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
  • Starte nun FRST erneut und klicke den Entfernen Button.
  • Das Tool erstellt eine Fixlog.txt.
  • Poste mir deren Inhalt.



Logs bitte nicht zippen sondern in den Thread posten.
__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Alt 20.02.2014, 16:56   #13
Tim0
 
Windows 7 - "Startfenster" - Standard

Windows 7 - "Startfenster"



Ich hatte die beiden Dateien gezippt weil ich die 230.000 Zeichen überschritten hatte

Code:
ATTFilter
Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 18-02-2014
Ran by Benutzername at 2014-02-20 16:52:33 Run:1
Running from C:\Users\Benutzername\Desktop
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
SearchScopes: HKLM - DefaultScope {B8E7C34F-5F46-435F-A23F-4957F26DFC04} URL = hxxp://www.sm.de/?q={searchTerms}
SearchScopes: HKLM - {B8E7C34F-5F46-435F-A23F-4957F26DFC04} URL = hxxp://www.sm.de/?q={searchTerms}
         
*****************

HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value was restored successfully.
HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{B8E7C34F-5F46-435F-A23F-4957F26DFC04} => Key deleted successfully.
HKCR\CLSID\{B8E7C34F-5F46-435F-A23F-4957F26DFC04} => Key not found.

==== End of Fixlog ====
         

Alt 21.02.2014, 11:17   #14
schrauber
/// the machine
/// TB-Ausbilder
 

Windows 7 - "Startfenster" - Standard

Windows 7 - "Startfenster"



Noch Probleme?
__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Alt 21.02.2014, 14:26   #15
Tim0
 
Windows 7 - "Startfenster" - Standard

Windows 7 - "Startfenster"



Nein, es läuft wieder alles so wie es soll
Vielen Dank für deine Hilfe.

Viele Grüße
Tim0

Antwort

Themen zu Windows 7 - "Startfenster"
antivir, antivirus, avira, browser, defender, desktop, explorer, failed, festplatte, flash player, helper, homepage, iexplore.exe, launch, mozilla, realtek, registry, scan, security, services.exe, software, svchost.exe, system, teamspeak, vlc-player, windows, windows xp



Ähnliche Themen: Windows 7 - "Startfenster"


  1. Möglicherweise "Startfenster"-Trojaner entdeckt - bisher keine Auffälligkeiten - Entfernung?
    Log-Analyse und Auswertung - 16.02.2015 (7)
  2. Beim Herunterladen vom VLC Player "Startfenster" eingefangen
    Log-Analyse und Auswertung - 12.01.2015 (15)
  3. Diverse Malware ("CoolSaleCoupon", "ddownlloaditkeep", "omiga-plus", "SaveSense", "SaleItCoupon"); lahmer PC & viel Werbung!
    Plagegeister aller Art und deren Bekämpfung - 11.01.2015 (16)
  4. Fehlermeldung bei Systemstart von WINDOWS 7 64-bit: RegSvr32 "Fehler beim Laden des Moduls ""."
    Log-Analyse und Auswertung - 17.08.2014 (10)
  5. Windows 7: Fehlermeldung bei Systemstart- RegSvr32 "Fehler beim Laden des Moduls ""."
    Alles rund um Windows - 12.08.2014 (18)
  6. Windows 8.1: Avira findet "TR/Swrort.A.10259" in "C:\Program Files (x86)\Google\Chrome\Application\old_chrome.exe"
    Plagegeister aller Art und deren Bekämpfung - 23.07.2014 (3)
  7. Avira: (Win7) Trojaner "TR/Rogue.11186992" in "C:\Windows\Temp\44158_updater.exe" gefunden
    Plagegeister aller Art und deren Bekämpfung - 25.04.2014 (77)
  8. Windows 7 / IE10: "Startfenster" lässt sich nicht entfernen.
    Log-Analyse und Auswertung - 06.01.2014 (11)
  9. "monstermarketplace.com" Infektion und ihre Folgen; "Anti-Virus-Blocker"," unsichtbare Toolbars" + "Browser-Hijacker" von selbst installiert
    Log-Analyse und Auswertung - 16.11.2013 (21)
  10. Nach "BKA" Virus Rechner neu aufgestzt jetzt Startfenster.de Problem
    Plagegeister aller Art und deren Bekämpfung - 13.08.2013 (6)
  11. Notebook bootet nicht, Fehlermeldung "windows\system 32\drivers\aswRvrt.sys" "status: 0Xc0000221"
    Plagegeister aller Art und deren Bekämpfung - 18.06.2013 (17)
  12. Wieder einmal mehr: "Startfenster.com" entfernen
    Plagegeister aller Art und deren Bekämpfung - 22.01.2013 (19)
  13. "Startfenster.de Virus" bei VLC Player Installation
    Plagegeister aller Art und deren Bekämpfung - 03.09.2012 (8)
  14. "Malware Protection" entfernt und nun "Windows Vista Restore" und diverse Festplattenwarnungen
    Plagegeister aller Art und deren Bekämpfung - 17.06.2011 (28)
  15. "Stutter.X,"Windows XP recovery"-Aufforderung, "Festplatte beschädigt"-Meldung, Bildschrim schwarz,
    Log-Analyse und Auswertung - 28.05.2011 (20)
  16. "Trojan.Vundo-Variant/F" in Datei "C:\Windows\Syswow64\avsredirect.dll" + vorher weitere Schädlinge
    Plagegeister aller Art und deren Bekämpfung - 19.12.2010 (15)
  17. "Adware.Virtumonde"/"Downloader.MisleadApp"/"TR/VB.agt.4"/"NewDotNet.A.1350"/"Fakerec
    Plagegeister aller Art und deren Bekämpfung - 22.08.2008 (6)

Zum Thema Windows 7 - "Startfenster" - Hallo alle zusammen, ich habe mir über eine gefälschte Seite den VLC-Player heruntergeladen und habe nun ein "Startfenster" Icon auf dem Desktop und eine "Startfenster" Startseite bei Firefox. Schritt 1 - Windows 7 - "Startfenster"...
Archiv
Du betrachtest: Windows 7 - "Startfenster" auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.