Phishing-Mail von Amazon geöffnet

Stevensen · 06.03.2014, 11:15

Hallo,

leider ist mir gerade der Fehler unterlaufen das ich ausversehen auf eine Phishing Mail von Amazon geklickt hab. Dies ist durch GMX passiert.

Da stand zwar "Sie öffnen gerade eine Internetseite außerhalb Ihres GMX Postfachs. Wenn Sie nicht in 3 Sekunden weitergeleitet werden, klicken Sie hier" darauf hab ich das Fenster noch schliessen können, jedoch weiß man ja nie ob es schon zu spät ist.

Ich weiß gerade nicht ganz wie ich hier nun vorgehen soll und bitte um Hilfe.

schrauber · 06.03.2014, 11:48

hi,

normal ist da noch nichts passiert.

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:

FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

Starte jetzt FRST.
Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

Stevensen · 06.03.2014, 11:53

Danke für die schnelle Antwort

FRST:

FRST Logfile:

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 06-03-2014
Ran by Richter (administrator) on RICHTER-PC on 06-03-2014 11:45:26
Running from C:\Users\Richter\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal



==================== Processes (Whitelisted) =================

(Microsoft Corporation) c:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe
(AMD) C:\Windows\system32\atiesrxx.exe
(Creative Technology Ltd) C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(AMD) C:\Windows\system32\atieclxx.exe
(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Microsoft Corporation) c:\Program Files\Microsoft Security Client\Antimalware\NisSrv.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Logitech Inc.) C:\Program Files\Logitech Gaming Software\LCore.exe
(Samsung) C:\Program Files (x86)\Samsung\Kies\Kies.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe
(OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin
(Creative Technology Ltd) C:\Windows\SysWOW64\Ctxfihlp.exe
(Nullsoft, Inc.) C:\Program Files (x86)\Winamp\winampa.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Elaborate Bytes AG) C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Geek Software GmbH) C:\Program Files (x86)\PDF24\pdf24.exe
(Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Creative Technology Ltd) C:\Windows\SysWOW64\CTXFISPI.EXE
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Logitech Inc.) C:\Program Files\Logitech Gaming Software\Applets\LCDMedia.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbam.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [MSC] - c:\Program Files\Microsoft Security Client\msseces.exe [1436224 2011-03-08] (Microsoft Corporation)
HKLM\...\Run: [Launch LCore] - C:\Program Files\Logitech Gaming Software\LCore.exe [7468784 2013-02-28] (Logitech Inc.)
HKLM-x32\...\Run: [CTxfiHlp] - CTXFIHLP.EXE
HKLM-x32\...\Run: [WinampAgent] - C:\Program Files (x86)\Winamp\winampa.exe [74752 2012-06-28] (Nullsoft, Inc.)
HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [689744 2014-02-18] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [642656 2013-03-28] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-05-31] (Apple Inc.)
HKLM-x32\...\Run: [VirtualCloneDrive] - C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe [88984 2013-03-10] (Elaborate Bytes AG)
HKLM-x32\...\Run: [PDFPrint] - C:\Program Files (x86)\PDF24\pdf24.exe [162856 2013-07-22] (Geek Software GmbH)
HKLM-x32\...\Run: [KiesTrayAgent] - C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe [311152 2013-12-11] (Samsung Electronics Co., Ltd.)
HKU\S-1-5-21-2279166452-3213683741-173537564-1000\...\Run: [KiesPreload] - C:\Program Files (x86)\Samsung\Kies\Kies.exe [1564528 2013-12-11] (Samsung)
HKU\S-1-5-21-2279166452-3213683741-173537564-1000\...\Run: [KiesAirMessage] - C:\Program Files (x86)\Samsung\Kies\KiesAirMessage.exe -startup
HKU\S-1-5-21-2279166452-3213683741-173537564-1000\...\MountPoints2: {8162e06e-e23c-11e2-8817-50465d6a700c} - K:\Autorun.exe
Startup: C:\Users\Richter\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.4.1.lnk
ShortcutTarget: OpenOffice.org 3.4.1.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe ()

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x8CAE95E5774ACE01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de/
SearchScopes: HKLM - DefaultScope value is missing.
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll (Microsoft Corporation)
DPF: HKLM {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\Richter\AppData\Roaming\Mozilla\Firefox\Profiles\j30dwqnz.default
FF Homepage: www.google.de
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_70.dll ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_70.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Element Hiding Helper for Adblock Plus - C:\Users\Richter\AppData\Roaming\Mozilla\Firefox\Profiles\j30dwqnz.default\Extensions\elemhidehelper@adblockplus.org.xpi [2013-10-15]
FF Extension: Simple New Tab - C:\Users\Richter\AppData\Roaming\Mozilla\Firefox\Profiles\j30dwqnz.default\Extensions\snt@dotlabs.co.xpi [2013-11-13]
FF Extension: Adblock Plus - C:\Users\Richter\AppData\Roaming\Mozilla\Firefox\Profiles\j30dwqnz.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2013-07-25]

Chrome: 
=======
CHR HomePage: hxxp://www.google.com
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.146\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.146\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.146\pdf.dll ()
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll No File
CHR Plugin: (Windows Live™ Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (iTunes Application Detector) - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_224.dll No File
CHR Plugin: (Silverlight Plug-In) - c:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll No File
CHR Extension: (AdBlock) - C:\Users\Richter\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2013-10-31]
CHR Extension: (Google Wallet) - C:\Users\Richter\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-22]

==================== Services (Whitelisted) =================

R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [361984 2013-03-28] (Advanced Micro Devices, Inc.)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440400 2014-02-18] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440400 2014-02-18] (Avira Operations GmbH & Co. KG)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
R2 MsMpSvc; c:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe [12784 2010-11-11] (Microsoft Corporation)
R3 NisSrv; c:\Program Files\Microsoft Security Client\Antimalware\NisSrv.exe [282616 2010-11-11] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

S3 ASPI; C:\Windows\SysWOW64\DRIVERS\ASPI32.sys [84832 2002-07-17] (Adaptec)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108440 2013-12-12] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131576 2013-12-12] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-10-01] (Avira Operations GmbH & Co. KG)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
R1 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [188928 2010-10-24] (Microsoft Corporation)
R3 MTsensor; C:\Windows\System32\DRIVERS\ASACPI.sys [15416 2009-07-17] ()
R3 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [72064 2010-10-24] (Microsoft Corporation)
S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [X]
S3 MSICDSetup; \??\D:\CDriver64.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-03-06 11:40 - 2014-03-06 11:45 - 00014282 _____ () C:\Users\Richter\Desktop\FRST.txt
2014-03-06 11:39 - 2014-03-06 11:45 - 00000000 ____D () C:\FRST
2014-03-06 11:36 - 2014-03-06 11:36 - 02156544 _____ (Farbar) C:\Users\Richter\Desktop\FRST64.exe
2014-03-06 10:52 - 2014-03-06 10:52 - 00058984 _____ () C:\Users\Richter\Desktop\Extras.Txt
2014-03-06 10:51 - 2014-03-06 10:51 - 00093838 _____ () C:\Users\Richter\Desktop\OTL.Txt
2014-03-06 10:36 - 2014-03-06 10:36 - 00602112 _____ (OldTimer Tools) C:\Users\Richter\Desktop\OTL.exe
2014-03-06 10:30 - 2014-03-06 10:30 - 00001109 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-03-06 10:30 - 2014-03-06 10:30 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-03-06 10:30 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-03-06 10:29 - 2014-03-06 10:29 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Richter\Desktop\mbam-setup-1.75.0.1300.exe
2014-03-06 10:14 - 2014-03-06 10:14 - 00000000 ____D () C:\Users\Richter\AppData\Local\{706CCF0F-CEFE-4A99-9A09-F1D03D7CB3EF}
2014-03-05 21:55 - 2014-03-05 21:55 - 00000000 ____D () C:\Users\Richter\AppData\Local\{03B5FF17-E3E2-4ACD-92A5-03544BC8CBC4}
2014-03-05 09:54 - 2014-03-05 09:55 - 00000000 ____D () C:\Users\Richter\AppData\Local\{103648CD-1687-43E1-96F3-65B14BD994DB}
2014-03-04 13:24 - 2014-03-04 13:24 - 00000000 ____D () C:\Users\Richter\AppData\Local\{03047B23-8BE3-4D50-8CAD-E25FB0F0B30E}
2014-03-03 21:56 - 2014-03-03 21:56 - 00000000 ____D () C:\Users\Richter\AppData\Local\{1A6617CC-B662-4A0B-9793-5B6AA146EF02}
2014-03-03 09:55 - 2014-03-03 09:56 - 00000000 ____D () C:\Users\Richter\AppData\Local\{5D433945-DE52-40C4-BABB-382E1A074ECF}
2014-03-01 23:26 - 2014-03-01 23:27 - 00000000 ____D () C:\Users\Richter\AppData\Local\{9803A45B-3635-45EE-9312-4009283CED0D}
2014-02-28 23:24 - 2014-02-28 23:24 - 00000000 ____D () C:\Users\Richter\AppData\Local\{F19984FB-49CB-48BE-BC02-4083C2B8C7A8}
2014-02-28 11:23 - 2014-02-28 11:24 - 00000000 ____D () C:\Users\Richter\AppData\Local\{62BAA866-72B7-46B0-B5CE-6542579D3E87}
2014-02-27 10:58 - 2014-02-27 10:58 - 00000000 ____D () C:\Users\Richter\AppData\Local\{47275B97-DF5A-4274-992B-EA87978AF5C0}
2014-02-26 13:01 - 2014-02-26 13:01 - 00000000 ____D () C:\Users\Richter\AppData\Local\{55FB3C24-EE71-465C-90DF-07A5C4B33511}
2014-02-25 23:20 - 2014-02-25 23:21 - 00000000 ____D () C:\Users\Richter\AppData\Local\{B4C095CE-4628-4D32-B104-483D4991DBC3}
2014-02-25 11:20 - 2014-02-25 11:20 - 00000000 ____D () C:\Users\Richter\AppData\Local\{134916A9-B917-4517-BA27-0C8258C14EA8}
2014-02-24 23:19 - 2014-02-24 23:20 - 00000000 ____D () C:\Users\Richter\AppData\Local\{B5006C6A-BE88-4A43-BBA1-68141E9226AA}
2014-02-24 11:19 - 2014-02-24 11:19 - 00000000 ____D () C:\Users\Richter\AppData\Local\{1B4DD076-259C-4CE4-816B-5C0E3334CD39}
2014-02-24 08:52 - 2014-02-27 10:55 - 00000105 _____ () C:\Users\Richter\Desktop\Neues Textdokument.txt
2014-02-23 23:18 - 2014-02-23 23:18 - 00000000 ____D () C:\Users\Richter\AppData\Local\{B6395A6F-E843-43F4-8F16-F843DD30B5E0}
2014-02-23 11:18 - 2014-02-23 11:18 - 00000000 ____D () C:\Users\Richter\AppData\Local\{830AE080-2EA1-45E7-A21A-259EB75BDD6F}
2014-02-22 23:17 - 2014-02-22 23:17 - 00000000 ____D () C:\Users\Richter\AppData\Local\{6E785CFD-00AB-4FC4-A156-2D12AB7E2A39}
2014-02-22 11:17 - 2014-02-24 11:46 - 00000000 ____D () C:\Users\Richter\AppData\Local\Windows Live
2014-02-22 11:16 - 2014-02-22 11:17 - 00000000 ____D () C:\Users\Richter\AppData\Local\{0390A357-BB3E-42F7-A1B5-6E26D9F0C99F}
2014-02-21 23:07 - 2014-02-21 23:07 - 00000000 ____D () C:\Users\Richter\AppData\Local\{EDF43D8F-1449-4928-AC6C-ACAF9B5FF2B7}
2014-02-21 11:06 - 2014-02-21 11:07 - 00000000 ____D () C:\Users\Richter\AppData\Local\{CB2E04A9-05E3-42DC-95FA-38401E8EC69B}
2014-02-20 12:13 - 2014-02-20 12:14 - 00000000 ____D () C:\Users\Richter\AppData\Local\{292731ED-934F-4230-8794-806F8543CFEE}
2014-02-20 00:13 - 2014-02-20 00:13 - 00000000 ____D () C:\Users\Richter\AppData\Local\{EBA1FA4F-E499-4E10-8139-4EC9376A1B46}
2014-02-19 12:13 - 2014-02-19 12:13 - 00000000 ____D () C:\Users\Richter\AppData\Local\{E8F5C800-A84D-432D-88D1-2B965136EEBD}
2014-02-18 23:32 - 2014-02-18 23:32 - 00000000 ____D () C:\Users\Richter\AppData\Local\{2F9191C8-DA08-4AC9-A0D1-89E97377F9AE}
2014-02-18 11:32 - 2014-02-18 11:32 - 00000000 ____D () C:\Users\Richter\AppData\Local\{BCEF9867-842E-4826-A0FE-68321683B4B9}
2014-02-17 23:31 - 2014-02-17 23:31 - 00000000 ____D () C:\Users\Richter\AppData\Local\{8EFB1132-61A4-4D44-88B7-F7DD612466E2}
2014-02-17 11:31 - 2014-02-17 11:31 - 00000000 ____D () C:\Users\Richter\AppData\Local\{7A907F90-FB42-4B50-89AE-2EAFA6960F00}
2014-02-16 23:30 - 2014-02-16 23:30 - 00000000 ____D () C:\Users\Richter\AppData\Local\{33D21F89-EDDA-4453-843F-43DECC8599E2}
2014-02-16 11:30 - 2014-02-16 11:30 - 00000000 ____D () C:\Users\Richter\AppData\Local\{93BFE750-E2CC-4E89-9FF8-E32D977F594F}
2014-02-15 23:28 - 2014-02-15 23:28 - 00000000 ____D () C:\Users\Richter\AppData\Local\{F20B960B-4CB3-4448-ADEA-62451962A2FC}
2014-02-15 11:27 - 2014-02-15 11:28 - 00000000 ____D () C:\Users\Richter\AppData\Local\{A0DB4349-0288-4963-AABE-DB589E1189D7}
2014-02-15 10:51 - 2014-02-15 10:51 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-02-14 23:27 - 2014-02-14 23:27 - 00000000 ____D () C:\Users\Richter\AppData\Local\{27B7D965-0D6C-4B14-AADE-2F83C9A0350E}
2014-02-14 11:26 - 2014-02-14 11:27 - 00000000 ____D () C:\Users\Richter\AppData\Local\{F6D0B7A3-DFD1-41C4-827A-A4EDF40743CA}
2014-02-13 23:26 - 2014-02-13 23:26 - 00000000 ____D () C:\Users\Richter\AppData\Local\{24092FEB-8BA3-448E-B152-C8A2091F130E}
2014-02-13 11:25 - 2014-02-13 11:26 - 00000000 ____D () C:\Users\Richter\AppData\Local\{4AB012E5-DE50-40D8-9DE1-2AF0D69F418C}
2014-02-13 00:42 - 2014-02-06 12:30 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-02-13 00:42 - 2014-02-06 12:30 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-02-13 00:42 - 2014-02-06 11:56 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-02-13 00:42 - 2014-02-06 11:52 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-02-13 00:42 - 2014-02-06 11:32 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-02-13 00:42 - 2014-02-06 11:20 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-02-13 00:42 - 2014-02-06 11:17 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-02-13 00:42 - 2014-02-06 10:49 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-02-13 00:42 - 2014-02-06 10:25 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-02-13 00:42 - 2013-12-21 10:53 - 00548864 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-02-13 00:42 - 2013-12-21 09:56 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-02-13 00:41 - 2014-02-06 13:16 - 23170048 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-02-13 00:41 - 2014-02-06 12:12 - 02765824 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-02-13 00:41 - 2014-02-06 12:07 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-02-13 00:41 - 2014-02-06 12:06 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-02-13 00:41 - 2014-02-06 11:57 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-02-13 00:41 - 2014-02-06 11:49 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-02-13 00:41 - 2014-02-06 11:48 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-02-13 00:41 - 2014-02-06 11:48 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-02-13 00:41 - 2014-02-06 11:38 - 17103872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-02-13 00:41 - 2014-02-06 11:11 - 05768704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-02-13 00:41 - 2014-02-06 11:01 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-02-13 00:41 - 2014-02-06 11:00 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-02-13 00:41 - 2014-02-06 10:57 - 02168320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-02-13 00:41 - 2014-02-06 10:57 - 00627200 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-02-13 00:41 - 2014-02-06 10:52 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-02-13 00:41 - 2014-02-06 10:52 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-02-13 00:41 - 2014-02-06 10:50 - 02041856 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-02-13 00:41 - 2014-02-06 10:47 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-02-13 00:41 - 2014-02-06 10:46 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-02-13 00:41 - 2014-02-06 10:25 - 04244480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-02-13 00:41 - 2014-02-06 10:24 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-02-13 00:41 - 2014-02-06 10:22 - 13051392 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-02-13 00:41 - 2014-02-06 10:13 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-02-13 00:41 - 2014-02-06 10:09 - 01964032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-02-13 00:41 - 2014-02-06 10:03 - 11266048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-02-13 00:41 - 2014-02-06 09:55 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-02-13 00:41 - 2014-02-06 09:41 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-02-13 00:41 - 2014-02-06 09:40 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-02-13 00:41 - 2014-02-06 09:36 - 01156096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-02-13 00:41 - 2014-02-06 09:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-02-12 23:25 - 2014-02-12 23:25 - 00000000 ____D () C:\Users\Richter\AppData\Local\{B6644538-C664-42D0-A36B-8B07054C4958}
2014-02-12 19:20 - 2013-12-25 00:09 - 01987584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2014-02-12 19:20 - 2013-12-24 23:48 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2014-02-12 19:20 - 2013-11-26 09:16 - 03419136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll
2014-02-12 19:20 - 2013-11-22 23:48 - 03928064 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll
2014-02-12 19:16 - 2014-01-01 00:05 - 00420008 _____ () C:\Windows\SysWOW64\locale.nls
2014-02-12 19:16 - 2014-01-01 00:04 - 00420008 _____ () C:\Windows\system32\locale.nls
2014-02-12 19:16 - 2013-12-06 03:30 - 01882112 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2014-02-12 19:16 - 2013-12-06 03:30 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2014-02-12 19:16 - 2013-12-06 03:02 - 01237504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2014-02-12 19:16 - 2013-12-06 03:02 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll
2014-02-12 19:16 - 2013-12-04 03:27 - 00488448 _____ (Microsoft Corporation) C:\Windows\system32\secproc.dll
2014-02-12 19:16 - 2013-12-04 03:27 - 00485888 _____ (Microsoft Corporation) C:\Windows\system32\secproc_isv.dll
2014-02-12 19:16 - 2013-12-04 03:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp_isv.dll
2014-02-12 19:16 - 2013-12-04 03:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp.dll
2014-02-12 19:16 - 2013-12-04 03:26 - 00528384 _____ (Microsoft Corporation) C:\Windows\system32\msdrm.dll
2014-02-12 19:16 - 2013-12-04 03:16 - 00658432 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_isv.exe
2014-02-12 19:16 - 2013-12-04 03:16 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate.exe
2014-02-12 19:16 - 2013-12-04 03:16 - 00553984 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp.exe
2014-02-12 19:16 - 2013-12-04 03:16 - 00552960 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp_isv.exe
2014-02-12 19:16 - 2013-12-04 03:03 - 00428032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc.dll
2014-02-12 19:16 - 2013-12-04 03:03 - 00423936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_isv.dll
2014-02-12 19:16 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp_isv.dll
2014-02-12 19:16 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp.dll
2014-02-12 19:16 - 2013-12-04 03:02 - 00390144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdrm.dll
2014-02-12 19:16 - 2013-12-04 02:54 - 00594944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_isv.exe
2014-02-12 19:16 - 2013-12-04 02:54 - 00572416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate.exe
2014-02-12 19:16 - 2013-12-04 02:54 - 00510976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp.exe
2014-02-12 19:16 - 2013-12-04 02:54 - 00508928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp_isv.exe
2014-02-12 11:24 - 2014-02-12 11:25 - 00000000 ____D () C:\Users\Richter\AppData\Local\{FCD0A9AE-C912-4EF7-9F49-0FF4D650DB09}
2014-02-11 23:24 - 2014-02-11 23:24 - 00000000 ____D () C:\Users\Richter\AppData\Local\{2ADF6FBB-FF58-46B5-8D6D-05083E97F22B}
2014-02-11 11:24 - 2014-02-11 11:24 - 00000000 ____D () C:\Users\Richter\AppData\Local\{CC7E0ED2-C36A-456B-AB2E-963A972E5341}
2014-02-10 20:20 - 2014-02-10 20:20 - 00000000 ____D () C:\Users\Richter\AppData\Local\{9841FD32-E739-442B-9184-1FE9FC7FB705}
2014-02-10 08:20 - 2014-02-10 08:20 - 00000000 ____D () C:\Users\Richter\AppData\Local\{67E008BC-E7EA-41E9-B31E-38D650BF9E0E}
2014-02-09 12:36 - 2014-02-09 12:36 - 00000000 ____D () C:\Users\Richter\AppData\Local\{1B108A07-3E45-47D6-8CA2-52453201BEDC}
2014-02-08 15:14 - 2014-02-08 15:14 - 00015817 _____ () C:\Users\Richter\Documents\Mappe1.xlsx
2014-02-08 12:37 - 2014-02-08 12:38 - 00000000 ____D () C:\Users\Richter\AppData\Local\{5AE9312B-C5CA-41D2-9EBC-B3050A0B96FD}
2014-02-08 00:37 - 2014-02-08 00:37 - 00000000 ____D () C:\Users\Richter\AppData\Local\{2A46BD93-445F-40CA-8911-3F010610E591}
2014-02-07 11:14 - 2014-02-07 11:14 - 00000000 ____D () C:\Users\Richter\AppData\Local\{C1E036AA-24A9-489B-BAC9-DD233726A801}
2014-02-06 12:17 - 2014-02-06 12:17 - 00000000 ____D () C:\Users\Richter\AppData\Local\{A0727B61-753B-4E86-9745-856D15640C18}
2014-02-06 00:16 - 2014-02-06 00:17 - 00000000 ____D () C:\Users\Richter\AppData\Local\{DD9E43A7-8AE5-498B-ACBE-55948C400697}
2014-02-05 12:16 - 2014-02-05 12:16 - 00000000 ____D () C:\Users\Richter\AppData\Local\{D6CAC75A-CD33-4AE8-833A-9416DB397C88}
2014-02-05 00:15 - 2014-02-05 00:15 - 00000000 ____D () C:\Users\Richter\AppData\Local\{E7E66B38-928D-403B-97D9-A7A731F9C77D}
2014-02-04 12:14 - 2014-02-04 12:15 - 00000000 ____D () C:\Users\Richter\AppData\Local\{51A301E7-C71B-4F7C-8EA8-DED9EF183C60}
2014-02-04 00:14 - 2014-02-04 00:14 - 00000000 ____D () C:\Users\Richter\AppData\Local\{481D8090-DEE2-4F0B-8394-CD297C480F30}

==================== One Month Modified Files and Folders =======

2014-03-06 11:45 - 2014-03-06 11:40 - 00014282 _____ () C:\Users\Richter\Desktop\FRST.txt
2014-03-06 11:45 - 2014-03-06 11:39 - 00000000 ____D () C:\FRST
2014-03-06 11:36 - 2014-03-06 11:36 - 02156544 _____ (Farbar) C:\Users\Richter\Desktop\FRST64.exe
2014-03-06 11:35 - 2009-07-14 05:45 - 00021856 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-03-06 11:35 - 2009-07-14 05:45 - 00021856 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-03-06 11:31 - 2013-04-19 10:09 - 01253274 _____ () C:\Windows\WindowsUpdate.log
2014-03-06 11:27 - 2013-04-19 15:23 - 00001108 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-03-06 11:27 - 2010-11-21 04:47 - 00109842 _____ () C:\Windows\PFRO.log
2014-03-06 11:27 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-03-06 11:27 - 2009-07-14 05:51 - 00075403 _____ () C:\Windows\setupact.log
2014-03-06 11:02 - 2013-04-20 09:52 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-03-06 11:00 - 2013-04-19 15:23 - 00001112 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-03-06 10:52 - 2014-03-06 10:52 - 00058984 _____ () C:\Users\Richter\Desktop\Extras.Txt
2014-03-06 10:51 - 2014-03-06 10:51 - 00093838 _____ () C:\Users\Richter\Desktop\OTL.Txt
2014-03-06 10:36 - 2014-03-06 10:36 - 00602112 _____ (OldTimer Tools) C:\Users\Richter\Desktop\OTL.exe
2014-03-06 10:30 - 2014-03-06 10:30 - 00001109 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-03-06 10:30 - 2014-03-06 10:30 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-03-06 10:29 - 2014-03-06 10:29 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Richter\Desktop\mbam-setup-1.75.0.1300.exe
2014-03-06 10:14 - 2014-03-06 10:14 - 00000000 ____D () C:\Users\Richter\AppData\Local\{706CCF0F-CEFE-4A99-9A09-F1D03D7CB3EF}
2014-03-06 09:14 - 2013-04-19 10:18 - 00064024 _____ () C:\Users\Richter\AppData\Local\GDIPFONTCACHEV1.DAT
2014-03-05 23:51 - 2013-07-26 14:58 - 00000000 ____D () C:\Users\Richter\AppData\Roaming\SoftGrid Client
2014-03-05 21:55 - 2014-03-05 21:55 - 00000000 ____D () C:\Users\Richter\AppData\Local\{03B5FF17-E3E2-4ACD-92A5-03544BC8CBC4}
2014-03-05 17:55 - 2013-04-19 15:51 - 00000000 ____D () C:\Users\Richter\AppData\Roaming\Winamp
2014-03-05 12:44 - 2013-08-11 10:58 - 00000879 _____ () C:\Users\Richter\Desktop\Comunio.txt
2014-03-05 10:34 - 2013-01-30 12:42 - 00018070 _____ () C:\Users\Richter\Documents\Kontakte.txt
2014-03-05 09:55 - 2014-03-05 09:54 - 00000000 ____D () C:\Users\Richter\AppData\Local\{103648CD-1687-43E1-96F3-65B14BD994DB}
2014-03-04 13:24 - 2014-03-04 13:24 - 00000000 ____D () C:\Users\Richter\AppData\Local\{03047B23-8BE3-4D50-8CAD-E25FB0F0B30E}
2014-03-03 21:56 - 2014-03-03 21:56 - 00000000 ____D () C:\Users\Richter\AppData\Local\{1A6617CC-B662-4A0B-9793-5B6AA146EF02}
2014-03-03 09:56 - 2014-03-03 09:55 - 00000000 ____D () C:\Users\Richter\AppData\Local\{5D433945-DE52-40C4-BABB-382E1A074ECF}
2014-03-01 23:27 - 2014-03-01 23:26 - 00000000 ____D () C:\Users\Richter\AppData\Local\{9803A45B-3635-45EE-9312-4009283CED0D}
2014-02-28 23:24 - 2014-02-28 23:24 - 00000000 ____D () C:\Users\Richter\AppData\Local\{F19984FB-49CB-48BE-BC02-4083C2B8C7A8}
2014-02-28 11:24 - 2014-02-28 11:23 - 00000000 ____D () C:\Users\Richter\AppData\Local\{62BAA866-72B7-46B0-B5CE-6542579D3E87}
2014-02-27 10:58 - 2014-02-27 10:58 - 00000000 ____D () C:\Users\Richter\AppData\Local\{47275B97-DF5A-4274-992B-EA87978AF5C0}
2014-02-27 10:55 - 2014-02-24 08:52 - 00000105 _____ () C:\Users\Richter\Desktop\Neues Textdokument.txt
2014-02-26 17:13 - 2014-01-13 17:14 - 00002875 _____ () C:\Users\Richter\Desktop\Lieder.txt
2014-02-26 13:01 - 2014-02-26 13:01 - 00000000 ____D () C:\Users\Richter\AppData\Local\{55FB3C24-EE71-465C-90DF-07A5C4B33511}
2014-02-25 23:21 - 2014-02-25 23:20 - 00000000 ____D () C:\Users\Richter\AppData\Local\{B4C095CE-4628-4D32-B104-483D4991DBC3}
2014-02-25 13:47 - 2013-04-19 10:11 - 01602068 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2014-02-25 13:47 - 2011-04-12 08:43 - 00701976 _____ () C:\Windows\system32\perfh007.dat
2014-02-25 13:47 - 2011-04-12 08:43 - 00150758 _____ () C:\Windows\system32\perfc007.dat
2014-02-25 13:47 - 2009-07-14 06:13 - 01602068 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-02-25 11:20 - 2014-02-25 11:20 - 00000000 ____D () C:\Users\Richter\AppData\Local\{134916A9-B917-4517-BA27-0C8258C14EA8}
2014-02-24 23:20 - 2014-02-24 23:19 - 00000000 ____D () C:\Users\Richter\AppData\Local\{B5006C6A-BE88-4A43-BBA1-68141E9226AA}
2014-02-24 19:12 - 2014-01-17 11:22 - 00000000 ____D () C:\Users\Richter\AppData\Roaming\Samsung
2014-02-24 11:46 - 2014-02-22 11:17 - 00000000 ____D () C:\Users\Richter\AppData\Local\Windows Live
2014-02-24 11:19 - 2014-02-24 11:19 - 00000000 ____D () C:\Users\Richter\AppData\Local\{1B4DD076-259C-4CE4-816B-5C0E3334CD39}
2014-02-23 23:18 - 2014-02-23 23:18 - 00000000 ____D () C:\Users\Richter\AppData\Local\{B6395A6F-E843-43F4-8F16-F843DD30B5E0}
2014-02-23 11:18 - 2014-02-23 11:18 - 00000000 ____D () C:\Users\Richter\AppData\Local\{830AE080-2EA1-45E7-A21A-259EB75BDD6F}
2014-02-22 23:17 - 2014-02-22 23:17 - 00000000 ____D () C:\Users\Richter\AppData\Local\{6E785CFD-00AB-4FC4-A156-2D12AB7E2A39}
2014-02-22 11:17 - 2014-02-22 11:16 - 00000000 ____D () C:\Users\Richter\AppData\Local\{0390A357-BB3E-42F7-A1B5-6E26D9F0C99F}
2014-02-21 23:07 - 2014-02-21 23:07 - 00000000 ____D () C:\Users\Richter\AppData\Local\{EDF43D8F-1449-4928-AC6C-ACAF9B5FF2B7}
2014-02-21 11:07 - 2014-02-21 11:06 - 00000000 ____D () C:\Users\Richter\AppData\Local\{CB2E04A9-05E3-42DC-95FA-38401E8EC69B}
2014-02-21 11:02 - 2013-04-20 09:52 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-02-21 11:02 - 2013-04-20 09:27 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-02-21 11:02 - 2013-04-20 09:27 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-02-20 12:14 - 2014-02-20 12:13 - 00000000 ____D () C:\Users\Richter\AppData\Local\{292731ED-934F-4230-8794-806F8543CFEE}
2014-02-20 00:13 - 2014-02-20 00:13 - 00000000 ____D () C:\Users\Richter\AppData\Local\{EBA1FA4F-E499-4E10-8139-4EC9376A1B46}
2014-02-19 12:13 - 2014-02-19 12:13 - 00000000 ____D () C:\Users\Richter\AppData\Local\{E8F5C800-A84D-432D-88D1-2B965136EEBD}
2014-02-18 23:32 - 2014-02-18 23:32 - 00000000 ____D () C:\Users\Richter\AppData\Local\{2F9191C8-DA08-4AC9-A0D1-89E97377F9AE}
2014-02-18 17:22 - 2013-07-06 22:22 - 00000000 ____D () C:\Users\Richter\Desktop\Bullshit
2014-02-18 11:32 - 2014-02-18 11:32 - 00000000 ____D () C:\Users\Richter\AppData\Local\{BCEF9867-842E-4826-A0FE-68321683B4B9}
2014-02-17 23:31 - 2014-02-17 23:31 - 00000000 ____D () C:\Users\Richter\AppData\Local\{8EFB1132-61A4-4D44-88B7-F7DD612466E2}
2014-02-17 15:27 - 2014-01-17 13:33 - 00000539 _____ () C:\Users\Richter\Desktop\Wetten.txt
2014-02-17 11:31 - 2014-02-17 11:31 - 00000000 ____D () C:\Users\Richter\AppData\Local\{7A907F90-FB42-4B50-89AE-2EAFA6960F00}
2014-02-16 23:30 - 2014-02-16 23:30 - 00000000 ____D () C:\Users\Richter\AppData\Local\{33D21F89-EDDA-4453-843F-43DECC8599E2}
2014-02-16 11:30 - 2014-02-16 11:30 - 00000000 ____D () C:\Users\Richter\AppData\Local\{93BFE750-E2CC-4E89-9FF8-E32D977F594F}
2014-02-16 11:27 - 2013-07-25 11:58 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-02-16 02:08 - 2013-08-14 23:35 - 00000000 ____D () C:\Windows\system32\MRT
2014-02-16 02:07 - 2013-04-20 12:22 - 88567024 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-02-15 23:28 - 2014-02-15 23:28 - 00000000 ____D () C:\Users\Richter\AppData\Local\{F20B960B-4CB3-4448-ADEA-62451962A2FC}
2014-02-15 11:28 - 2014-02-15 11:27 - 00000000 ____D () C:\Users\Richter\AppData\Local\{A0DB4349-0288-4963-AABE-DB589E1189D7}
2014-02-15 10:51 - 2014-02-15 10:51 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-02-14 23:27 - 2014-02-14 23:27 - 00000000 ____D () C:\Users\Richter\AppData\Local\{27B7D965-0D6C-4B14-AADE-2F83C9A0350E}
2014-02-14 11:27 - 2014-02-14 11:26 - 00000000 ____D () C:\Users\Richter\AppData\Local\{F6D0B7A3-DFD1-41C4-827A-A4EDF40743CA}
2014-02-13 23:26 - 2014-02-13 23:26 - 00000000 ____D () C:\Users\Richter\AppData\Local\{24092FEB-8BA3-448E-B152-C8A2091F130E}
2014-02-13 15:51 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\rescache
2014-02-13 11:26 - 2014-02-13 11:25 - 00000000 ____D () C:\Users\Richter\AppData\Local\{4AB012E5-DE50-40D8-9DE1-2AF0D69F418C}
2014-02-12 23:25 - 2014-02-12 23:25 - 00000000 ____D () C:\Users\Richter\AppData\Local\{B6644538-C664-42D0-A36B-8B07054C4958}
2014-02-12 11:25 - 2014-02-12 11:24 - 00000000 ____D () C:\Users\Richter\AppData\Local\{FCD0A9AE-C912-4EF7-9F49-0FF4D650DB09}
2014-02-11 23:24 - 2014-02-11 23:24 - 00000000 ____D () C:\Users\Richter\AppData\Local\{2ADF6FBB-FF58-46B5-8D6D-05083E97F22B}
2014-02-11 11:24 - 2014-02-11 11:24 - 00000000 ____D () C:\Users\Richter\AppData\Local\{CC7E0ED2-C36A-456B-AB2E-963A972E5341}
2014-02-10 20:20 - 2014-02-10 20:20 - 00000000 ____D () C:\Users\Richter\AppData\Local\{9841FD32-E739-442B-9184-1FE9FC7FB705}
2014-02-10 18:55 - 2013-04-19 15:23 - 00004108 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-02-10 18:54 - 2013-04-19 15:23 - 00003856 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-02-10 08:20 - 2014-02-10 08:20 - 00000000 ____D () C:\Users\Richter\AppData\Local\{67E008BC-E7EA-41E9-B31E-38D650BF9E0E}
2014-02-09 12:36 - 2014-02-09 12:36 - 00000000 ____D () C:\Users\Richter\AppData\Local\{1B108A07-3E45-47D6-8CA2-52453201BEDC}
2014-02-08 15:14 - 2014-02-08 15:14 - 00015817 _____ () C:\Users\Richter\Documents\Mappe1.xlsx
2014-02-08 12:38 - 2014-02-08 12:37 - 00000000 ____D () C:\Users\Richter\AppData\Local\{5AE9312B-C5CA-41D2-9EBC-B3050A0B96FD}
2014-02-08 00:37 - 2014-02-08 00:37 - 00000000 ____D () C:\Users\Richter\AppData\Local\{2A46BD93-445F-40CA-8911-3F010610E591}
2014-02-07 11:14 - 2014-02-07 11:14 - 00000000 ____D () C:\Users\Richter\AppData\Local\{C1E036AA-24A9-489B-BAC9-DD233726A801}
2014-02-06 13:16 - 2014-02-13 00:41 - 23170048 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-02-06 12:30 - 2014-02-13 00:42 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-02-06 12:30 - 2014-02-13 00:42 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-02-06 12:17 - 2014-02-06 12:17 - 00000000 ____D () C:\Users\Richter\AppData\Local\{A0727B61-753B-4E86-9745-856D15640C18}
2014-02-06 12:12 - 2014-02-13 00:41 - 02765824 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-02-06 12:07 - 2014-02-13 00:41 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-02-06 12:06 - 2014-02-13 00:41 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-02-06 11:57 - 2014-02-13 00:41 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-02-06 11:56 - 2014-02-13 00:42 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-02-06 11:52 - 2014-02-13 00:42 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-02-06 11:49 - 2014-02-13 00:41 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-02-06 11:48 - 2014-02-13 00:41 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-02-06 11:48 - 2014-02-13 00:41 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-02-06 11:38 - 2014-02-13 00:41 - 17103872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-02-06 11:32 - 2014-02-13 00:42 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-02-06 11:20 - 2014-02-13 00:42 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-02-06 11:17 - 2014-02-13 00:42 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-02-06 11:11 - 2014-02-13 00:41 - 05768704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-02-06 11:01 - 2014-02-13 00:41 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-02-06 11:00 - 2014-02-13 00:41 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-02-06 10:57 - 2014-02-13 00:41 - 02168320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-02-06 10:57 - 2014-02-13 00:41 - 00627200 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-02-06 10:52 - 2014-02-13 00:41 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-02-06 10:52 - 2014-02-13 00:41 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-02-06 10:50 - 2014-02-13 00:41 - 02041856 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-02-06 10:49 - 2014-02-13 00:42 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-02-06 10:47 - 2014-02-13 00:41 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-02-06 10:46 - 2014-02-13 00:41 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-02-06 10:25 - 2014-02-13 00:42 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-02-06 10:25 - 2014-02-13 00:41 - 04244480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-02-06 10:24 - 2014-02-13 00:41 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-02-06 10:22 - 2014-02-13 00:41 - 13051392 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-02-06 10:13 - 2014-02-13 00:41 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-02-06 10:09 - 2014-02-13 00:41 - 01964032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-02-06 10:03 - 2014-02-13 00:41 - 11266048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-02-06 09:55 - 2014-02-13 00:41 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-02-06 09:41 - 2014-02-13 00:41 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-02-06 09:40 - 2014-02-13 00:41 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-02-06 09:36 - 2014-02-13 00:41 - 01156096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-02-06 09:34 - 2014-02-13 00:41 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-02-06 00:17 - 2014-02-06 00:16 - 00000000 ____D () C:\Users\Richter\AppData\Local\{DD9E43A7-8AE5-498B-ACBE-55948C400697}
2014-02-05 12:16 - 2014-02-05 12:16 - 00000000 ____D () C:\Users\Richter\AppData\Local\{D6CAC75A-CD33-4AE8-833A-9416DB397C88}
2014-02-05 00:15 - 2014-02-05 00:15 - 00000000 ____D () C:\Users\Richter\AppData\Local\{E7E66B38-928D-403B-97D9-A7A731F9C77D}
2014-02-04 12:15 - 2014-02-04 12:14 - 00000000 ____D () C:\Users\Richter\AppData\Local\{51A301E7-C71B-4F7C-8EA8-DED9EF183C60}
2014-02-04 00:14 - 2014-02-04 00:14 - 00000000 ____D () C:\Users\Richter\AppData\Local\{481D8090-DEE2-4F0B-8394-CD297C480F30}

Some content of TEMP:
====================
C:\Users\Richter\AppData\Local\Temp\AskSLib.dll
C:\Users\Richter\AppData\Local\Temp\avgnt.exe
C:\Users\Richter\AppData\Local\Temp\Execute2App.exe
C:\Users\Richter\AppData\Local\Temp\Kies2RemoveAll.exe
C:\Users\Richter\AppData\Local\Temp\MSIAFTERBURNERSETUP.EXE
C:\Users\Richter\AppData\Local\Temp\msvcp90.dll
C:\Users\Richter\AppData\Local\Temp\msvcr90.dll
C:\Users\Richter\AppData\Local\Temp\SETUP_AFTERBURNER.EXE
C:\Users\Richter\AppData\Local\Temp\SHSetup.exe
C:\Users\Richter\AppData\Local\Temp\tmpB1B2.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-02-28 13:23

==================== End Of Log ============================

--- --- ---

--- --- ---

Addition

Code:

ATTFilter

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 06-03-2014
Ran by Richter at 2014-03-06 11:41:21
Running from C:\Users\Richter\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Microsoft Security Essentials (Enabled - Up to date) {108DAC43-C256-20B7-BB05-914135DA5160}
AS: Microsoft Security Essentials (Enabled - Up to date) {ABEC4DA7-E46C-2F39-81B5-AA334E5D1BDD}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

64 Bit HP CIO Components Installer (Version: 6.2.2 - Hewlett-Packard) Hidden
Adobe Flash Player 12 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 12.0.0.70 - Adobe Systems Incorporated)
Adobe Flash Player 12 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 12.0.0.70 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.06) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.06 - Adobe Systems Incorporated)
AMD Accelerated Video Transcoding (Version: 12.10.100.30328 - Advanced Micro Devices, Inc.) Hidden
AMD APP SDK Runtime (Version: 10.0.1016.4 - Advanced Micro Devices Inc.) Hidden
AMD Catalyst Install Manager (HKLM\...\{9AB0D5B6-4779-8C4F-CA91-A1FEDB56D7EC}) (Version: 8.0.911.0 - Advanced Micro Devices, Inc.)
AMD Drag and Drop Transcoding (Version: 2.00.0000 - Advanced Micro Devices, Inc.) Hidden
AMD Fuel (Version: 2013.0328.2218.38225 - Ihr Firmenname) Hidden
AMD Media Foundation Decoders (Version: 1.0.80328.2204 - Advanced Micro Devices, Inc.) Hidden
AMD VISION Engine Control Center (x32 Version: 2013.0328.2218.38225 - Ihr Firmenname) Hidden
Apple Application Support (HKLM-x32\...\{5D09C772-ECB3-442B-9CC6-B4341C78FDC2}) (Version: 2.3.4 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{2F72F540-1F60-4266-9506-952B21D6640D}) (Version: 6.1.0.13 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Avira Free Antivirus (HKLM-x32\...\Avira AntiVir Desktop) (Version: 14.0.3.338 - Avira)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
CardRecovery 6.00 (HKLM-x32\...\{88D68A69-D247-466B-90DD-575F6BE16230}_is1) (Version:  - WinRecovery Software)
Catalyst Control Center - Branding (x32 Version: 1.00.0000 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Graphics Previews Common (x32 Version: 2013.0328.2218.38225 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center InstallProxy (x32 Version: 2013.0328.2218.38225 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Localization All (x32 Version: 2013.0328.2218.38225 - Advanced Micro Devices, Inc.) Hidden
CCC Help Chinese Standard (x32 Version: 2013.0328.2217.38225 - Advanced Micro Devices, Inc.) Hidden
CCC Help Chinese Traditional (x32 Version: 2013.0328.2217.38225 - Advanced Micro Devices, Inc.) Hidden
CCC Help Czech (x32 Version: 2013.0328.2217.38225 - Advanced Micro Devices, Inc.) Hidden
CCC Help Danish (x32 Version: 2013.0328.2217.38225 - Advanced Micro Devices, Inc.) Hidden
CCC Help Dutch (x32 Version: 2013.0328.2217.38225 - Advanced Micro Devices, Inc.) Hidden
CCC Help English (x32 Version: 2013.0328.2217.38225 - Advanced Micro Devices, Inc.) Hidden
CCC Help Finnish (x32 Version: 2013.0328.2217.38225 - Advanced Micro Devices, Inc.) Hidden
CCC Help French (x32 Version: 2013.0328.2217.38225 - Advanced Micro Devices, Inc.) Hidden
CCC Help German (x32 Version: 2013.0328.2217.38225 - Advanced Micro Devices, Inc.) Hidden
CCC Help Greek (x32 Version: 2013.0328.2217.38225 - Advanced Micro Devices, Inc.) Hidden
CCC Help Hungarian (x32 Version: 2013.0328.2217.38225 - Advanced Micro Devices, Inc.) Hidden
CCC Help Italian (x32 Version: 2013.0328.2217.38225 - Advanced Micro Devices, Inc.) Hidden
CCC Help Japanese (x32 Version: 2013.0328.2217.38225 - Advanced Micro Devices, Inc.) Hidden
CCC Help Korean (x32 Version: 2013.0328.2217.38225 - Advanced Micro Devices, Inc.) Hidden
CCC Help Norwegian (x32 Version: 2013.0328.2217.38225 - Advanced Micro Devices, Inc.) Hidden
CCC Help Polish (x32 Version: 2013.0328.2217.38225 - Advanced Micro Devices, Inc.) Hidden
CCC Help Portuguese (x32 Version: 2013.0328.2217.38225 - Advanced Micro Devices, Inc.) Hidden
CCC Help Russian (x32 Version: 2013.0328.2217.38225 - Advanced Micro Devices, Inc.) Hidden
CCC Help Spanish (x32 Version: 2013.0328.2217.38225 - Advanced Micro Devices, Inc.) Hidden
CCC Help Swedish (x32 Version: 2013.0328.2217.38225 - Advanced Micro Devices, Inc.) Hidden
CCC Help Thai (x32 Version: 2013.0328.2217.38225 - Advanced Micro Devices, Inc.) Hidden
CCC Help Turkish (x32 Version: 2013.0328.2217.38225 - Advanced Micro Devices, Inc.) Hidden
ccc-utility64 (Version: 2013.0328.2218.38225 - Advanced Micro Devices, Inc.) Hidden
CDBurnerXP (HKLM-x32\...\{7E265513-8CDA-4631-B696-F40D983F3B07}_is1) (Version: 4.5.1.4003 - CDBurnerXP)
Creative Audio Control Panel (HKLM-x32\...\AudioCS) (Version: 2.00 - Creative Technology Limited)
Creative Software AutoUpdate (HKLM-x32\...\Creative Software AutoUpdate) (Version: 1.40 - Creative Technology Limited)
Creative Sound Blaster Properties x64 Edition (HKLM-x32\...\Creative Sound Blaster Properties x64 Edition) (Version:  - )
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
DJ_SF_06_D1600_SW_Min (x32 Version: 140.0.690.000 - Hewlett-Packard) Hidden
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 33.0.1750.146 - Google Inc.)
Google Update Helper (x32 Version: 1.3.22.5 - Google Inc.) Hidden
HP Deskjet D1600 Printer Driver 14.0 Rel. 6 (HKLM\...\{96178C0A-BAF9-4E49-A2A5-CDE76722105B}) (Version: 14.0 - HP)
IrfanView (remove only) (HKLM-x32\...\IrfanView) (Version: 4.36 - Irfan Skiljan)
iTunes (HKLM\...\{76FF0F03-B707-4332-B5D1-A56C8303514E}) (Version: 11.0.4.4 - Apple Inc.)
Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Logitech Gaming Software (Version: 8.45.88 - Logitech Inc.) Hidden
Logitech Gaming Software 8.45 (HKLM\...\Logitech Gaming Software) (Version: 8.45.88 - Logitech Inc.)
Malwarebytes Anti-Malware Version 1.75.0.1300 (HKLM-x32\...\Malwarebytes' Anti-Malware_is1) (Version: 1.75.0.1300 - Malwarebytes Corporation)
Medieval CUE Splitter (HKLM-x32\...\{B96D2269-568B-4CBF-9332-12FAE8B158F7}) (Version: 1.2.0 - Medieval Software)
Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Messenger Companion (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Antimalware (Version: 3.0.8107.0 - Microsoft Corporation) Hidden
Microsoft Antimalware Service DE-DE Language Pack (Version: 3.0.8107.0 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden
Microsoft Office 2010 (HKLM-x32\...\{95140000-0070-0000-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office Klick-und-Los 2010 (HKLM-x32\...\Office14.Click2Run) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office Klick-und-Los 2010 (Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office Starter 2010 - Deutsch (HKLM-x32\...\{90140011-0066-0407-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Security Client (Version: 2.0.0719.0 - Microsoft Corporation) Hidden
Microsoft Security Client DE-DE Language Pack (Version: 2.0.0719.0 - Microsoft Corporation) Hidden
Microsoft Security Essentials (HKLM\...\Microsoft Security Client) (Version: 2.0.719.0 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.20913.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.30319 (HKLM\...\{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Mozilla Firefox 27.0.1 (x86 de) (HKLM-x32\...\Mozilla Firefox 27.0.1 (x86 de)) (Version: 27.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 27.0.1 - Mozilla)
MSI Afterburner 2.2.5 (HKLM-x32\...\Afterburner) (Version: 2.2.5 - MSI Co., LTD)
MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSVCRT_amd64 (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
OpenAL (HKLM-x32\...\OpenAL) (Version:  - )
OpenOffice.org 3.4.1 (HKLM-x32\...\{2303AEEA-0FA8-4AFD-80A9-8F86BA4B44D2}) (Version: 3.41.9593 - Apache Software Foundation)
PDF24 Creator 5.7.0 (HKLM-x32\...\{81A6F461-0DBA-4F12-B56F-0E977EC10576}_is1) (Version:  - PDF24.org)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.52.203.2012 - Realtek)
RollerCoaster Tycoon 3 Version 3.2 by Energizer (HKLM-x32\...\{1532222D-BE32-4B40-B32E-2096E5A8049F}_is1) (Version: 3.2 by Energizer - Atari)
Samsung Kies (HKLM-x32\...\InstallShield_{758C8301-2696-4855-AF45-534B1200980A}) (Version: 2.6.1.13105_7 - Samsung Electronics Co., Ltd.)
Samsung Kies (x32 Version: 2.6.1.13105_7 - Samsung Electronics Co., Ltd.) Hidden
SAMSUNG USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.29.0 - SAMSUNG Electronics Co., Ltd.)
Secure Download Manager (HKLM-x32\...\{AA57D6F1-6360-4397-B2D9-B21C69863D97}) (Version: 3.1.0 - Kivuto Solutions Inc.)
Theme Park World (HKLM-x32\...\Theme Park World) (Version:  - )
Toolbox (x32 Version: 140.0.428.000 - Hewlett-Packard) Hidden
UltraISO Premium V9.53 (HKLM-x32\...\UltraISO_is1) (Version:  - )
VirtualCloneDrive (HKLM-x32\...\VirtualCloneDrive) (Version:  - Elaborate Bytes)
Winamp (HKLM-x32\...\Winamp) (Version: 5.63  - Nullsoft, Inc)
Winamp Erkennungs-Plug-in (HKCU\...\Winamp Detect) (Version: 1.0.0.1 - Nullsoft, Inc)
Windows Live Communications Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3508.1109 - Microsoft Corporation)
Windows Live Essentials (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Family Safety (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Fotogalerie (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live ID Sign-in Assistant (Version: 7.250.4225.0 - Microsoft Corporation) Hidden
Windows Live Installer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Language Selector (Version: 15.4.3508.1109 - Microsoft Corporation) Hidden
Windows Live Mail (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Mesh (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Mesh ActiveX control for remote connections (HKLM-x32\...\{C5398A89-516C-4DAF-BA07-EE7949090E56}) (Version: 15.4.5722.2 - Microsoft Corporation)
Windows Live Messenger (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Messenger Companion Core (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live MIME IFilter (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Movie Maker (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Photo Common (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Photo Gallery (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live PIMT Platform (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden
Windows Live Remote Client (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Client Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Service (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Service Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live SOXE (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live UX Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden
Windows Live Writer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Writer Resources (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
WinRAR 4.20 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 4.20.0 - win.rar GmbH)

==================== Restore Points  =========================

23-02-2014 10:22:22 Windows Update
24-02-2014 23:54:24 Windows Update
25-02-2014 12:46:01 Windows Update
01-03-2014 20:33:20 Windows Update
06-03-2014 08:26:02 Windows Update

==================== Hosts content: ==========================

2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____N C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {177E08C6-CF97-4AB2-8AFB-33065508936E} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-04-19] (Google Inc.)
Task: {460913CA-1D14-4066-AF26-2E80A7FBC42D} - System32\Tasks\Microsoft\Microsoft Antimalware\MP Scheduled Scan => c:\Program Files\Microsoft Security Client\Antimalware\MpCmdRun.exe [2010-11-11] (Microsoft Corporation)
Task: {604D9D5E-BC6A-4FE4-B461-8B03BBA80232} - System32\Tasks\elbyExecuteWithUAC => C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\ExecuteWithUAC.exe [2013-03-21] ()
Task: {C9D7BB4E-C519-4717-B9C7-FFBE5840A3BD} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-04-19] (Google Inc.)
Task: {D860C40C-2D3A-4E62-A21D-630D67E0E094} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-02-21] (Adobe Systems Incorporated)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2013-03-28 21:31 - 2013-03-28 21:31 - 00210944 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Container.PerformanceTuning.dll
2012-09-23 12:53 - 2012-09-23 12:53 - 00748544 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Device.dll
2012-09-23 12:53 - 2012-09-23 12:53 - 03645952 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Platform.dll
2013-03-28 21:30 - 2013-03-28 21:30 - 00103424 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Proxy.Native.dll
2013-04-19 16:49 - 2013-04-19 16:48 - 00397704 _____ () C:\Program Files (x86)\Avira\AntiVir Desktop\sqlite3.dll
2013-01-28 12:08 - 2013-01-28 12:08 - 00087952 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2013-01-28 12:08 - 2013-01-28 12:08 - 01242512 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2012-08-10 15:51 - 2012-08-10 15:51 - 00985088 _____ () C:\Program Files (x86)\OpenOffice.org 3\program\libxml2.dll
2011-08-22 11:57 - 2011-08-22 11:57 - 00002560 _____ () C:\Windows\SysWOW64\CTXFIRES.DLL
2013-04-19 11:23 - 2009-03-26 13:46 - 00148480 _____ () C:\Windows\SysWOW64\APOMngr.DLL
2014-03-04 13:02 - 2014-03-02 03:35 - 00051016 _____ () C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.146\chrome_elf.dll
2014-03-04 13:02 - 2014-03-02 03:35 - 00716616 _____ () C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.146\libglesv2.dll
2014-03-04 13:02 - 2014-03-02 03:35 - 00100168 _____ () C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.146\libegl.dll
2014-03-04 13:02 - 2014-03-02 03:35 - 04061000 _____ () C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.146\pdf.dll
2014-03-04 13:02 - 2014-03-02 03:35 - 00394568 _____ () C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.146\ppGoogleNaClPluginChrome.dll
2014-03-04 13:02 - 2014-03-02 03:35 - 01647432 _____ () C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.146\ffmpegsumo.dll
2014-03-04 13:03 - 2014-03-02 03:35 - 13632840 _____ () C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.146\PepperFlash\pepflashplayer.dll

==================== Alternate Data Streams (whitelisted) =========


==================== Safe Mode (whitelisted) ===================


==================== Disabled items from MSCONFIG ==============


==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (03/06/2014 11:29:16 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (03/06/2014 10:42:19 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (03/06/2014 09:54:23 AM) (Source: Customer Experience Improvement Program) (User: )
Description: 80004005

Error: (03/06/2014 09:16:30 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (03/05/2014 01:06:11 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "imaging1". Fehler in Manifest- oder Richtliniendatei "imaging2" in Zeile imaging3.
Das imaging-Element wird als untergeordnetes Element des urn:schemas-microsoft-com:asm.v1^assembly-Elements angezeigt, das von dieser Windows-Version nicht unterstützt wird.

Error: (03/05/2014 00:19:28 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: pdf24-Editor.exe, Version: 5.7.0.0, Zeitstempel: 0x51ecf63e
Name des fehlerhaften Moduls: pdf24-Editor.exe, Version: 5.7.0.0, Zeitstempel: 0x51ecf63e
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00026b6e
ID des fehlerhaften Prozesses: 0x1b38
Startzeit der fehlerhaften Anwendung: 0xpdf24-Editor.exe0
Pfad der fehlerhaften Anwendung: pdf24-Editor.exe1
Pfad des fehlerhaften Moduls: pdf24-Editor.exe2
Berichtskennung: pdf24-Editor.exe3

Error: (03/05/2014 11:04:16 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "imaging1". Fehler in Manifest- oder Richtliniendatei "imaging2" in Zeile imaging3.
Das imaging-Element wird als untergeordnetes Element des urn:schemas-microsoft-com:asm.v1^assembly-Elements angezeigt, das von dieser Windows-Version nicht unterstützt wird.

Error: (03/05/2014 10:41:10 AM) (Source: Customer Experience Improvement Program) (User: )
Description: 80004005

Error: (03/05/2014 09:53:51 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (03/04/2014 01:13:16 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "imaging1". Fehler in Manifest- oder Richtliniendatei "imaging2" in Zeile imaging3.
Das imaging-Element wird als untergeordnetes Element des urn:schemas-microsoft-com:asm.v1^assembly-Elements angezeigt, das von dieser Windows-Version nicht unterstützt wird.


System errors:
=============
Error: (03/06/2014 09:15:38 AM) (Source: Microsoft Antimalware) (User: )
Description: Fehler in %%860-Echtzeitschutzfunktion.

	Funktion: %%835

	Fehlercode: 0x80004005

	Fehlerbeschreibung: Unbekannter Fehler 

	Ursache: %%842

Error: (03/04/2014 08:31:47 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Windows Search" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1053

Error: (03/04/2014 08:31:48 AM) (Source: DCOM) (User: )
Description: 1053WSearch{9E175B6D-F52A-11D8-B9A5-505054503030}

Error: (03/04/2014 08:31:45 AM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Windows Search erreicht.

Error: (03/03/2014 09:55:33 AM) (Source: Microsoft Antimalware) (User: )
Description: Fehler in %%860-Echtzeitschutzfunktion.

	Funktion: %%835

	Fehlercode: 0x80004005

	Fehlerbeschreibung: Unbekannter Fehler 

	Ursache: %%842

Error: (03/03/2014 09:54:53 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Windows Search" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1053

Error: (03/03/2014 09:54:53 AM) (Source: DCOM) (User: )
Description: 1053WSearch{9E175B6D-F52A-11D8-B9A5-505054503030}

Error: (03/03/2014 09:54:53 AM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Windows Search erreicht.

Error: (03/01/2014 07:42:13 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Windows Search" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1053

Error: (03/01/2014 07:42:13 AM) (Source: DCOM) (User: )
Description: 1053WSearch{7D096C5F-AC08-4F1F-BEB7-5C22C517CE39}


Microsoft Office Sessions:
=========================
Error: (03/06/2014 11:29:16 AM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (03/06/2014 10:42:19 AM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (03/06/2014 09:54:23 AM) (Source: Customer Experience Improvement Program)(User: )
Description: 80004005

Error: (03/06/2014 09:16:30 AM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (03/05/2014 01:06:11 PM) (Source: SideBySide)(User: )
Description: imagingurn:schemas-microsoft-com:asm.v1^assemblyc:\program files\microsoft security client\MSESysprep.dllc:\program files\microsoft security client\MSESysprep.dll10

Error: (03/05/2014 00:19:28 PM) (Source: Application Error)(User: )
Description: pdf24-Editor.exe5.7.0.051ecf63epdf24-Editor.exe5.7.0.051ecf63ec000000500026b6e1b3801cf3864c1883d40C:\Program Files (x86)\PDF24\pdf24-Editor.exeC:\Program Files (x86)\PDF24\pdf24-Editor.exe03af7433-a458-11e3-9dc5-50465d6a700c

Error: (03/05/2014 11:04:16 AM) (Source: SideBySide)(User: )
Description: imagingurn:schemas-microsoft-com:asm.v1^assemblyc:\program files\microsoft security client\MSESysprep.dllc:\program files\microsoft security client\MSESysprep.dll10

Error: (03/05/2014 10:41:10 AM) (Source: Customer Experience Improvement Program)(User: )
Description: 80004005

Error: (03/05/2014 09:53:51 AM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (03/04/2014 01:13:16 PM) (Source: SideBySide)(User: )
Description: imagingurn:schemas-microsoft-com:asm.v1^assemblyc:\program files\microsoft security client\MSESysprep.dllc:\program files\microsoft security client\MSESysprep.dll10


==================== Memory info =========================== 

Percentage of memory in use: 33%
Total physical RAM: 8174.12 MB
Available physical RAM: 5402.47 MB
Total Pagefile: 16346.41 MB
Available Pagefile: 12779.54 MB
Total Virtual: 8192 MB
Available Virtual: 8191.81 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:465.66 GB) (Free:386.85 GB) NTFS
Drive e: () (Fixed) (Total:298.09 GB) (Free:90.31 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive f: () (Fixed) (Total:298.09 GB) (Free:1.02 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: CF7ADA8B)

Partition: GPT Partition Type.

========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 298 GB) (Disk ID: 5EF098BD)
Partition 1: (Active) - (Size=298 GB) - (Type=07 NTFS)

========================================================
Disk: 2 (MBR Code: Windows XP) (Size: 298 GB) (Disk ID: 72BDD989)
Partition 1: (Not Active) - (Size=298 GB) - (Type=07 NTFS)

==================== End Of Log ============================

schrauber · 07.03.2014, 13:14

Alles gut

Stevensen · 07.03.2014, 13:21

Das freut mich, vielen Dank!

schrauber · 08.03.2014, 13:21

Gern Geschehen

07.03.2014, 13:14	#4
schrauber /// the machine /// TB-Ausbilder	Phishing-Mail von Amazon geöffnet Alles gut __________________ gruß, schrauber *Proud Member of UNITE and ASAP since 2009* Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM!

08.03.2014, 13:21	#6
schrauber /// the machine /// TB-Ausbilder	Phishing-Mail von Amazon geöffnet Gern Geschehen __________________ --> Phishing-Mail von Amazon geöffnet

Phishing-Mail von Amazon geöffnet

Plagegeister aller Art und deren Bekämpfung: Phishing-Mail von Amazon geöffnet