| |
| |||||||
Log-Analyse und Auswertung: Nach Download von "MyphoneExplorer" von chip.de - Spyware, Adware - jetzt Trojaner! (Win32/Injected.F Trojaner)Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML |
 |
24.03.2014, 09:47
| #1 |
 |  Nach Download von "MyphoneExplorer" von chip.de - Spyware, Adware - jetzt Trojaner! (Win32/Injected.F Trojaner) Hallo liebe Leute, ich benutze Windows7 64 bit. total enttäuscht über chip.de habe ich nun den Salat. Habe mir den "MyPhoneExplorer" von chip.de runtergeladen. ( hxxp://www.chip.de/downloads/MyPhoneExplorer_16402327.html ) Leider wurden sehr viele Dinge mitinstalliert, für die es kein Abwahlhäckchen gab. Ich würde mich als sehr umsichtigen User bezeichnen der sonst nie Viren, Trojaner oder ähnliches auf dem Rechner hat da ich eigentlich sehr umsichtig umgehe. Doch diesmal musste ich ein Programm installieren da mein Smartphone gerade bischen spinnt. Dazu kommt dass ich mir die Mediathek runtergeladen habe, die Java benötigt. Java z.B. hätte ich mir nie drauf installiert. Ich wollte aber unbedingt eine Dokumentation von 3Sat runterladen die hoch interesannt war. Kurz um gesagt: trotz meiner eigentlich umsichten Nutzungsweise - ich mein chip.de und die Mediathek (also Java) sollten eigentlich nicht wirklich virenfänger sein - waren genau diese Sachen es die mir nun die Trojaner eingefangen haben. Ablauf: - nach dem ich MyPhoneexplorer installiert hatte wurden Seiten in meinen Browser als Startseiten festgelegt wie z.B.: hxxp://www.awesomehp.com/?type=hp&ts=1395236542&from=amt&uid=HGSTXHTS725050A7E630_TF655AWHGLV31LGLV31LX - ich wurde zu Seiten verlinkt wie "download-servers.com" die RemoteService anbieten - in der Softwareliste (also wo man Programme deinstalliert) befanden sich Einträge wie - Software Update - Software Check Ich habe lange alles deinstalliert, entfernt und gelöscht. Aber ganz verschwand es wohl nie. Ich glaube über das installierte Java haben diese Seiten die Tür und Tore zu wirklich gefährlichen Dinge geöffnet wie Trojaner, den ich jetzt drauf habe oder andere Sachen. - ESET Smart Security hat die ganze Zeit wie verrückt Alarm geschlagen Merkmale jetzt: - Unglaublich viele Einträge in der Programmliste (dort wo ich Software deinstalliere) sind verschwunden!! (Kommen die wieder??) - meine AutostartEinträge sind verschwunden (viele Programme starten nicht mehr) - der "AutostartOrdner" hat sich in der Startleiste in "Startup" umgenannt (ist das normal?) - Malewarebytes Anti-Maleware hat über 140 Einträge gefunden(!) Ich poste jetzt mal sämtliche LogDateien und hoffe dass ich nichts vergessen habe. Wenn doch bitte einfach sagen, dann erstelle ich die anderen Log-Dateien auch noch. Habe mich an die Hilfesuchethread orientiert. defogger Code:
ATTFilter defogger_disable by jpshortstuff (23.02.10.1)
Log created at 23:09 on 23/03/2014 (Robert)
Checking for autostart values...
HKCU\~\Run values retrieved.
HKLM\~\Run values retrieved.
HKCU:DAEMON Tools Lite -> Removed
Checking for services/drivers...
-=E.O.F=-
FRST FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 13-03-2014
Ran by --- (administrator) on ----PC on 23-03-2014 23:10:59
Running from C:\Users\---\Desktop\virus
Windows 7 Ultimate Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(Lenovo.) C:\Windows\system32\ibmpmsvc.exe
(ESET) C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Nitro PDF Software) C:\Program Files\Common Files\Nitro\Reader\3.0\NitroPDFReaderDriverService3x64.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.22.5\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.22.5\GoogleCrashHandler64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(ESET) C:\Program Files\ESET\ESET Smart Security\egui.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Synaptics Incorporated) C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE
(Intel Corporation) C:\Windows\system32\igfxsrvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
(Vimicro) C:\Program Files (x86)\USB Camera\VM331STI.EXE
(Dolby Laboratories Inc.) C:\Program Files (x86)\Dolby Advanced Audio v2\pcee4.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
() C:\Program Files\Rainmeter\Rainmeter.exe
(Realsil Microelectronics Inc.) C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Mozilla Corporation) C:\Programme (x64)\firefox.exe
(Mozilla Corporation) C:\Programme (x64)\plugin-container.exe
() C:\Portable Programme\quiethdd_v1.5-build250\quietHDD.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13538376 2013-05-13] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_Dolby] - C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1307720 2013-04-24] (Realtek Semiconductor)
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2985712 2013-06-04] (Synaptics Incorporated)
HKLM\...\Run: [egui] - C:\Program Files\ESET\ESET Smart Security\egui.exe [5618456 2013-09-12] (ESET)
HKLM-x32\...\Run: [USB3MON] - C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application
\iusb3mon.exe [291608 2012-03-27] (Intel Corporation)
HKLM-x32\...\Run: [IMSS] - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe [134616
2013-03-12] (Intel Corporation)
HKLM-x32\...\Run: [331BigDog] - C:\Program Files (x86)\USB Camera\VM331STI.EXE [548864 2013-03-12] (Vimicro)
HKLM-x32\...\Run: [Dolby Advanced Audio v2] - C:\Program Files (x86)\Dolby Advanced Audio v2\pcee4.exe [508656 2012-08-31]
(Dolby Laboratories Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02]
(Oracle Corporation)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
AppInit_DLLs: C:\PROGRA~2\SupTab\SEARCH~2.DLL => C:\Program Files (x86)\SupTab\SearchProtect64.dll [96768 2014-03-05] (Skytech
Co., Ltd.)
AppInit_DLLs-x32: C:\PROGRA~2\SupTab\SEARCH~1.DLL => C:\Program Files (x86)\SupTab\SearchProtect32.dll [85504 2014-03-05]
(Skytech Co., Ltd.)
Startup: C:\Users\---\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\quietHDD.lnk
ShortcutTarget: quietHDD.lnk -> C:\Portable Programme\quiethdd_v1.5-build250\quietHDD.exe ()
Startup: C:\Users\---\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Rainmeter.lnk
ShortcutTarget: Rainmeter.lnk -> C:\Program Files\Rainmeter\Rainmeter.exe ()
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.awesomehp.com/?
type=hp&ts=1395236542&from=amt&uid=HGSTXHTS725050A7E630_TF655AWHGLV31LGLV31LX
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x93C303C87C09CF01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.awesomehp.com/?
type=hp&ts=1395236542&from=amt&uid=HGSTXHTS725050A7E630_TF655AWHGLV31LGLV31LX
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.awesomehp.com/web/?
type=ds&ts=1395236542&from=amt&uid=HGSTXHTS725050A7E630_TF655AWHGLV31LGLV31LX&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.awesomehp.com/?
type=hp&ts=1395236542&from=amt&uid=HGSTXHTS725050A7E630_TF655AWHGLV31LGLV31LX
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.awesomehp.com/?
type=hp&ts=1395236542&from=amt&uid=HGSTXHTS725050A7E630_TF655AWHGLV31LGLV31LX
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.awesomehp.com/web/?
type=ds&ts=1395236542&from=amt&uid=HGSTXHTS725050A7E630_TF655AWHGLV31LGLV31LX&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.awesomehp.com/web/?
type=ds&ts=1395236542&from=amt&uid=HGSTXHTS725050A7E630_TF655AWHGLV31LGLV31LX&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.awesomehp.com/?
type=hp&ts=1395236542&from=amt&uid=HGSTXHTS725050A7E630_TF655AWHGLV31LGLV31LX
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.awesomehp.com/?
type=hp&ts=1395236542&from=amt&uid=HGSTXHTS725050A7E630_TF655AWHGLV31LGLV31LX
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.awesomehp.com/web/?
type=ds&ts=1395236542&from=amt&uid=HGSTXHTS725050A7E630_TF655AWHGLV31LGLV31LX&q={searchTerms}
StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe hxxp://www.awesomehp.com/?
type=sc&ts=1395236542&from=amt&uid=HGSTXHTS725050A7E630_TF655AWHGLV31LGLV31LX
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.awesomehp.com/web/?
type=ds&ts=1395236542&from=amt&uid=HGSTXHTS725050A7E630_TF655AWHGLV31LGLV31LX&q={searchTerms}
SearchScopes: HKLM - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.awesomehp.com/web/?
type=ds&ts=1395236542&from=amt&uid=HGSTXHTS725050A7E630_TF655AWHGLV31LGLV31LX&q={searchTerms}
SearchScopes: HKLM-x32 - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.awesomehp.com/web/?
type=ds&ts=1395236542&from=amt&uid=HGSTXHTS725050A7E630_TF655AWHGLV31LGLV31LX&q={searchTerms}
SearchScopes: HKLM-x32 - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.awesomehp.com/web/?
type=ds&ts=1395236542&from=amt&uid=HGSTXHTS725050A7E630_TF655AWHGLV31LGLV31LX&q={searchTerms}
SearchScopes: HKCU - {30F6A740-DFA4-4171-BE96-77F7121CAAF3} URL = hxxp://go.web.de/tb/ie_searchplugin/?q={searchTerms}&enc=UTF-8
SearchScopes: HKCU - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.awesomehp.com/web/?
type=ds&ts=1395236542&from=amt&uid=HGSTXHTS725050A7E630_TF655AWHGLV31LGLV31LX&q={searchTerms}
SearchScopes: HKCU - {4A42B8FA-6641-4E7C-8EF3-1ECA946196BC} URL = hxxp://go.1und1.de/tb/ie_searchplugin/?q={searchTerms}
&enc=UTF-8
SearchScopes: HKCU - {60BD6C21-C55E-46A5-91E4-F1FC6CF7C937} URL = hxxp://go.mail.com/tb/en-us/ie_searchplugin/?q={searchTerms}
&enc=UTF-8
SearchScopes: HKCU - {C313B64E-9B2D-4820-AD58-17921C642E8B} URL = hxxp://go.gmx.de/tb/ie_searchplugin/?q={searchTerms}&enc=UTF-8
BHO-x32: IETabPage Class - {3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C} - C:\Program Files (x86)\SupTab\SupTab.dll (Thinknice Co.
Limited)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
(Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin
\jp2ssv.dll (Oracle Corporation)
Toolbar: HKCU - No Name - {C424171E-592A-415A-9EB1-DFD6D95D3530} - No File
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
FireFox:
========
FF ProfilePath: C:\Users\---\AppData\Roaming\Mozilla\Firefox\Profiles\bda2rjt1.default
FF NewTab: chrome://quick_start/content/index.html
FF DefaultSearchEngine: awesomehp
FF SelectedSearchEngine: awesomehp
FF Homepage: about:superstart
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_77.dll ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft
Corporation)
FF Plugin: @videolan.org/vlc,version=2.1.1 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_77.dll ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=3.0.72 - C:\Program Files (x86)\Intel\Intel(R) Management Engine
Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine
Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle
Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle
Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll (
Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin-x32: @nitropdf.com/NitroPDF - C:\Program Files (x86)\Nitro\Reader 3\npnitromozilla.dll (Nitro PDF)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.5\npGoogleUpdate3.dll
(Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.5\npGoogleUpdate3.dll
(Google Inc.)
FF SearchPlugin: C:\Users\---\AppData\Roaming\Mozilla\Firefox\Profiles\bda2rjt1.default\searchplugins\11-suche.xml
FF SearchPlugin: C:\Users\---\AppData\Roaming\Mozilla\Firefox\Profiles\bda2rjt1.default\searchplugins\englische-ergebnisse.xml
FF SearchPlugin: C:\Users\---\AppData\Roaming\Mozilla\Firefox\Profiles\bda2rjt1.default\searchplugins\gmx-suche.xml
FF SearchPlugin: C:\Users\---\AppData\Roaming\Mozilla\Firefox\Profiles\bda2rjt1.default\searchplugins\lastminute.xml
FF SearchPlugin: C:\Users\---\AppData\Roaming\Mozilla\Firefox\Profiles\bda2rjt1.default\searchplugins\webde-suche.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\awesomehp.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Battlefield Heroes Updater - C:\Users\---\AppData\Roaming\Mozilla\Firefox\Profiles\bda2rjt1.default\Extensions
\battlefieldheroespatcher@ea.com [2014-03-16]
FF Extension: BYTubeD - Bulk YouTube video Downloader - C:\Users\---\AppData\Roaming\Mozilla\Firefox\Profiles\bda2rjt1.default
\Extensions\bytubed@cs213.cse.iitk.ac.in [2014-01-10]
FF Extension: Super Start - C:\Users\---\AppData\Roaming\Mozilla\Firefox\Profiles\bda2rjt1.default\Extensions
\superstart@enjoyfreeware.org [2014-03-02]
FF Extension: YouTube Unblocker - C:\Users\---\AppData\Roaming\Mozilla\Firefox\Profiles\bda2rjt1.default\Extensions
\youtubeunblocker@unblocker.yt [2014-02-27]
FF Extension: DownloadHelper - C:\Users\---\AppData\Roaming\Mozilla\Firefox\Profiles\bda2rjt1.default\Extensions\{b9db16a4-
6edc-47ec-a1f4-b86292ed211d} [2014-01-10]
FF Extension: facepaste - C:\Users\---\AppData\Roaming\Mozilla\Firefox\Profiles\bda2rjt1.default\Extensions
\facepaste.firefox.addon@azabani.com.xpi [2014-01-31]
FF Extension: WEB.DE MailCheck - C:\Users\---\AppData\Roaming\Mozilla\Firefox\Profiles\bda2rjt1.default\Extensions
\toolbar@web.de.xpi [2014-01-11]
FF Extension: Session Manager - C:\Users\---\AppData\Roaming\Mozilla\Firefox\Profiles\bda2rjt1.default\Extensions\{1280606b-
2510-4fe0-97ef-9b5a22eafe30}.xpi [2014-02-15]
FF Extension: DownThemAll! - C:\Users\---\AppData\Roaming\Mozilla\Firefox\Profiles\bda2rjt1.default\Extensions\{DDC359D1-844A-
42a7-9AA1-88A850A938A8}.xpi [2014-01-14]
FF HKLM\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird
FF Extension: ESET Smart Security Extension - C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird [2014-01-09]
FF HKLM-x32\...\Firefox\Extensions: [quick_start@gmail.com] - C:\Users\---\AppData\Roaming\Mozilla\Firefox\Profiles
\bda2rjt1.default\extensions\quick_start@gmail.com
FF HKLM-x32\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird
FF Extension: ESET Smart Security Extension - C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird [2014-01-09]
==================== Services (Whitelisted) =================
S3 Adobe LM Service; C:\Program Files (x86)\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [72704 2014-01-18] (Adobe
Systems)
R2 ekrn; C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe [1337752 2013-09-12] (ESET)
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [820184 2013
-02-13] (Intel(R) Corporation)
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
[131544 2013-03-12] (Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-03-12]
(Intel Corporation)
R2 NitroReaderDriverReadSpool3; C:\Program Files\Common Files\Nitro\Reader\3.0\NitroPDFReaderDriverService3x64.exe [230416 2013
-07-26] (Nitro PDF Software)
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76888 2014-03-17] ()
S2 IePluginService; C:\ProgramData\IePluginService\PluginService.exe -service [X]
S2 Wpm; C:\ProgramData\WPM\wprotectmanager.exe -service [X]
==================== Drivers (Whitelisted) ====================
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283064 2014-01-09] (Disc Soft Ltd)
R1 eamonm; C:\Windows\System32\DRIVERS\eamonm.sys [239320 2013-09-17] (ESET)
U5 edevmon; C:\Windows\System32\Drivers\edevmon.sys [239296 2013-09-17] (ESET)
R1 ehdrv; C:\Windows\System32\DRIVERS\ehdrv.sys [168256 2013-09-17] (ESET)
R2 epfw; C:\Windows\System32\DRIVERS\epfw.sys [220232 2013-09-17] (ESET)
R1 EpfwLWF; C:\Windows\System32\DRIVERS\EpfwLWF.sys [44120 2013-09-17] (ESET)
R0 epfwwfp; C:\Windows\System32\DRIVERS\epfwwfp.sys [62136 2013-09-17] (ESET)
R1 HWiNFO32; C:\Windows\system32\drivers\HWiNFO64A.SYS [31648 2014-03-02] (REALiX(tm))
R3 SmbDrvI; C:\Windows\System32\DRIVERS\Smb_driver_Intel.sys [33008 2013-06-04] (Synaptics Incorporated)
R1 UimBus; C:\Windows\System32\DRIVERS\uimx64.sys [90960 2013-03-15] (Windows (R) 2000 DDK provider)
R1 Uim_IM; C:\Windows\System32\Drivers\Uim_IMx64.sys [633680 2013-03-15] (Paragon)
R1 Uim_VIM; C:\Windows\System32\Drivers\uim_vimx64.sys [390352 2013-03-15] (Paragon)
R3 vm331avs; C:\Windows\System32\Drivers\vm331avs.sys [1045248 2013-03-01] (Vimicro Corporation)
S3 cpuz136; \??\C:\Windows\TEMP\cpuz136\cpuz136_x64.sys [X]
S3 GPUZ; \??\C:\Windows\TEMP\GPUZ.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2014-03-23 23:10 - 2014-03-23 23:10 - 00000000 ____D () C:\FRST
2014-03-23 23:09 - 2014-03-23 23:09 - 00000168 _____ () C:\Users\---\defogger_reenable
2014-03-23 23:08 - 2014-03-23 23:10 - 00000000 ____D () C:\Users\---\Desktop\virus
2014-03-23 22:58 - 2014-03-23 22:58 - 00030381 _____ () C:\Users\---\Desktop\quiethdd_v1.5-build250.zip
2014-03-23 21:01 - 2014-03-23 22:59 - 00000000 ____D () C:\Users\---\AppData\Roaming\Microsoft\Windows\Start Menu\Programs
\Startup
2014-03-22 20:49 - 2014-03-23 22:56 - 00000000 ____D () C:\Programme (x64)
2014-03-20 20:37 - 2014-03-23 22:19 - 00000209 _____ () C:\Users\---\Desktop\cd_conny koppers und anti-viren informationen.txt
2014-03-19 15:23 - 2014-03-19 15:24 - 26437344 _____ (Microsoft Corporation) C:\Users\---\Desktop\Windows-KB890830-x64-
V5.10_2.exe
2014-03-19 15:23 - 2014-03-19 15:23 - 63320784 _____ (Microsoft Corporation) C:\Users\---\Desktop\IE11-Windows6.1-x64-de-de.exe
2014-03-19 15:21 - 2014-03-19 15:22 - 26437344 _____ (Microsoft Corporation) C:\Users\---\Desktop\Windows-KB890830-x64-V5.10.exe
2014-03-19 14:43 - 2014-03-23 22:56 - 00000470 _____ () C:\Windows\Tasks\AmiUpdXp.job
2014-03-19 14:43 - 2014-03-19 14:43 - 01172664 _____ (AnyProtect.com) C:\Users\---\AppData\Local\nsq3D63.tmp
2014-03-19 14:43 - 2014-03-19 14:43 - 00003492 _____ () C:\Windows\System32\Tasks\AmiUpdXp
2014-03-19 14:43 - 2014-03-19 14:43 - 00000000 ____D () C:\Program Files (x86)\AnyProtectEx
2014-03-19 14:42 - 2014-03-19 14:59 - 00000000 ____D () C:\Users\---\AppData\Roaming\awesomehp
2014-03-19 14:42 - 2014-03-19 14:42 - 00000000 ____D () C:\Users\---\AppData\Roaming\SupTab
2014-03-19 14:42 - 2014-03-19 14:42 - 00000000 ____D () C:\Program Files (x86)\SupTab
2014-03-19 14:41 - 2014-03-19 14:41 - 00002066 _____ () C:\Users\Public\Desktop\MyPhoneExplorer.lnk
2014-03-19 14:41 - 2014-03-19 14:41 - 00000000 ____D () C:\Users\---\AppData\Roaming\MyPhoneExplorer
2014-03-19 14:41 - 2014-03-19 14:41 - 00000000 ____D () C:\Program Files (x86)\MyPhoneExplorer
2014-03-16 23:57 - 2014-03-17 00:09 - 00282296 _____ () C:\Windows\SysWOW64\PnkBstrB.xtr
2014-03-16 23:57 - 2014-03-16 23:57 - 00000000 ____D () C:\Users\---\AppData\Local\PunkBuster
2014-03-16 23:53 - 2014-03-17 00:18 - 00000000 ____D () C:\Users\---\Documents\Battlefield Heroes
2014-03-16 23:51 - 2014-03-17 00:09 - 00282296 _____ () C:\Windows\SysWOW64\PnkBstrB.exe
2014-03-16 23:51 - 2014-03-17 00:09 - 00076888 _____ () C:\Windows\SysWOW64\PnkBstrA.exe
2014-03-16 23:51 - 2014-03-16 23:57 - 00270240 _____ () C:\Windows\SysWOW64\PnkBstrB.ex0
2014-03-16 19:12 - 2014-03-16 19:12 - 00000000 ____D () C:\Users\---\AppData\Local\Warframe
2014-03-16 18:39 - 2014-03-16 18:39 - 00000766 _____ () C:\Users\---\Desktop\MediathekView.lnk
2014-03-16 18:22 - 2014-03-16 18:22 - 00000000 ____D () C:\Users\---\AppData\Roaming\TheBannerSagaFactions
2014-03-16 13:01 - 2014-03-16 18:36 - 00000000 ____D () C:\Users\---\Documents\My Games
2014-03-16 12:47 - 2014-03-16 12:47 - 00000000 ____D () C:\Crash
2014-03-16 11:22 - 2014-03-16 11:22 - 00000000 ____D () C:\Users\---\AppData\Local\SCE
2014-03-16 09:39 - 2014-03-16 09:42 - 00000000 ____D () C:\Users\---\MediathekView
2014-03-16 09:33 - 2014-03-16 09:34 - 00000000 ____D () C:\Users\---\.mediathek3
2014-03-16 09:33 - 2014-03-16 09:33 - 00312744 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2014-03-16 09:33 - 2014-03-16 09:33 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2014-03-16 09:33 - 2014-03-16 09:33 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2014-03-16 09:33 - 2014-03-16 09:33 - 00108968 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2014-03-16 09:32 - 2014-03-16 09:32 - 00000000 ____D () C:\ProgramData\Sun
2014-03-16 09:32 - 2014-03-16 09:32 - 00000000 ____D () C:\ProgramData\Oracle
2014-03-16 09:32 - 2014-03-16 09:32 - 00000000 ____D () C:\Program Files\Java
2014-03-16 09:30 - 2014-03-16 09:30 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-03-16 09:30 - 2014-03-16 09:30 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-03-16 09:30 - 2014-03-16 09:30 - 00174504 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-03-16 09:30 - 2014-03-16 09:30 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-03-16 09:30 - 2014-03-16 09:30 - 00000000 ____D () C:\Program Files (x86)\Java
2014-03-15 21:19 - 2014-03-16 19:09 - 00000000 ___RD () C:\Users\---\Desktop\zeitvertreib
2014-03-15 15:42 - 2014-03-15 15:42 - 00000000 ____D () C:\Users\---\AppData\Roaming\Carbon
2014-03-14 19:28 - 2014-03-23 21:04 - 00000000 ____D () C:\Program Files (x86)\Steam
2014-03-14 19:28 - 2014-03-14 19:28 - 00000972 _____ () C:\Users\Public\Desktop\Steam.lnk
2014-03-13 13:44 - 2014-03-01 07:05 - 23133696 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-03-13 13:44 - 2014-03-01 06:17 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-03-13 13:44 - 2014-03-01 06:16 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-03-13 13:44 - 2014-03-01 05:58 - 02765824 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-03-13 13:44 - 2014-03-01 05:52 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-03-13 13:44 - 2014-03-01 05:51 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-03-13 13:44 - 2014-03-01 05:42 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-03-13 13:44 - 2014-03-01 05:40 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-03-13 13:44 - 2014-03-01 05:37 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-03-13 13:44 - 2014-03-01 05:33 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-03-13 13:44 - 2014-03-01 05:33 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-03-13 13:44 - 2014-03-01 05:32 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-03-13 13:44 - 2014-03-01 05:30 - 17074688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-03-13 13:44 - 2014-03-01 05:23 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-03-13 13:44 - 2014-03-01 05:17 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-03-13 13:44 - 2014-03-01 05:11 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-03-13 13:44 - 2014-03-01 05:02 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-03-13 13:44 - 2014-03-01 04:54 - 05768704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-03-13 13:44 - 2014-03-01 04:52 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-03-13 13:44 - 2014-03-01 04:51 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-03-13 13:44 - 2014-03-01 04:47 - 02168320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-03-13 13:44 - 2014-03-01 04:43 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-03-13 13:44 - 2014-03-01 04:43 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-03-13 13:44 - 2014-03-01 04:42 - 00627200 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-03-13 13:44 - 2014-03-01 04:40 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-03-13 13:44 - 2014-03-01 04:38 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-03-13 13:44 - 2014-03-01 04:37 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-03-13 13:44 - 2014-03-01 04:35 - 02041856 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-03-13 13:44 - 2014-03-01 04:18 - 13051904 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-03-13 13:44 - 2014-03-01 04:16 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-03-13 13:44 - 2014-03-01 04:14 - 04244480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-03-13 13:44 - 2014-03-01 04:10 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-03-13 13:44 - 2014-03-01 04:03 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-03-13 13:44 - 2014-03-01 04:00 - 01964032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-03-13 13:44 - 2014-03-01 03:57 - 11266048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-03-13 13:44 - 2014-03-01 03:38 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-03-13 13:44 - 2014-03-01 03:32 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-03-13 13:44 - 2014-03-01 03:27 - 01156096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-03-13 13:44 - 2014-03-01 03:25 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-03-13 13:44 - 2014-03-01 03:25 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-03-13 13:43 - 2014-02-07 02:23 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-03-13 13:43 - 2014-01-29 03:32 - 00484864 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll
2014-03-13 13:43 - 2014-01-29 03:06 - 00381440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wer.dll
2014-03-13 13:43 - 2014-01-28 03:32 - 00228864 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll
2014-03-13 13:39 - 2014-02-04 03:32 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2014-03-13 13:39 - 2014-02-04 03:32 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2014-03-13 13:39 - 2014-02-04 03:04 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2014-03-13 13:39 - 2014-02-04 03:04 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2014-03-07 09:51 - 2014-03-23 23:10 - 00942135 _____ () C:\Windows\WindowsUpdate.log
2014-03-04 03:30 - 2014-03-04 03:30 - 00000000 ____D () C:\Users\---\AppData\Local\EdgeOfReality
2014-03-04 03:30 - 2010-02-04 10:01 - 00530776 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_6.dll
2014-03-04 03:30 - 2010-02-04 10:01 - 00528216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_6.dll
2014-03-04 03:30 - 2010-02-04 10:01 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_6.dll
2014-03-04 03:30 - 2010-02-04 10:01 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_6.dll
2014-03-04 03:30 - 2010-02-04 10:01 - 00078680 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_4.dll
2014-03-04 03:30 - 2010-02-04 10:01 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_4.dll
2014-03-04 03:30 - 2010-02-04 10:01 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_7.dll
2014-03-04 03:30 - 2010-02-04 10:01 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_7.dll
2014-03-04 03:30 - 2009-09-04 17:44 - 00517960 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_5.dll
2014-03-04 03:30 - 2009-09-04 17:44 - 00515416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_5.dll
2014-03-04 03:30 - 2009-09-04 17:44 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_5.dll
2014-03-04 03:30 - 2009-09-04 17:44 - 00176968 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_5.dll
2014-03-04 03:30 - 2009-09-04 17:44 - 00073544 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_3.dll
2014-03-04 03:30 - 2009-09-04 17:44 - 00069464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_3.dll
2014-03-04 03:30 - 2009-09-04 17:29 - 05554512 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_42.dll
2014-03-04 03:30 - 2009-09-04 17:29 - 05501792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_42.dll
2014-03-04 03:30 - 2009-09-04 17:29 - 02582888 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_42.dll
2014-03-04 03:30 - 2009-09-04 17:29 - 02475352 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_42.dll
2014-03-04 03:30 - 2009-09-04 17:29 - 01974616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_42.dll
2014-03-04 03:30 - 2009-09-04 17:29 - 01892184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_42.dll
2014-03-04 03:30 - 2009-09-04 17:29 - 00523088 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_42.dll
2014-03-04 03:30 - 2009-09-04 17:29 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_42.dll
2014-03-04 03:30 - 2009-09-04 17:29 - 00285024 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_42.dll
2014-03-04 03:30 - 2009-09-04 17:29 - 00235344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_42.dll
2014-03-04 03:30 - 2009-03-16 14:18 - 00521560 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_4.dll
2014-03-04 03:30 - 2009-03-16 14:18 - 00517448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_4.dll
2014-03-04 03:30 - 2009-03-16 14:18 - 00235352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_4.dll
2014-03-04 03:30 - 2009-03-16 14:18 - 00174936 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_4.dll
2014-03-04 03:30 - 2009-03-16 14:18 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_6.dll
2014-03-04 03:30 - 2009-03-16 14:18 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_6.dll
2014-03-04 03:30 - 2009-03-09 15:27 - 05425496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_41.dll
2014-03-04 03:30 - 2009-03-09 15:27 - 04178264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_41.dll
2014-03-04 03:30 - 2009-03-09 15:27 - 02430312 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_41.dll
2014-03-04 03:30 - 2009-03-09 15:27 - 01846632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_41.dll
2014-03-04 03:30 - 2009-03-09 15:27 - 00520544 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_41.dll
2014-03-04 03:30 - 2009-03-09 15:27 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_41.dll
2014-03-04 03:30 - 2008-10-27 10:04 - 00518480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_3.dll
2014-03-04 03:30 - 2008-10-27 10:04 - 00514384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_3.dll
2014-03-04 03:30 - 2008-10-27 10:04 - 00235856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_3.dll
2014-03-04 03:30 - 2008-10-27 10:04 - 00175440 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_3.dll
2014-03-04 03:30 - 2008-10-27 10:04 - 00074576 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_2.dll
2014-03-04 03:30 - 2008-10-27 10:04 - 00070992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_2.dll
2014-03-04 03:30 - 2008-10-27 10:04 - 00025936 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_5.dll
2014-03-04 03:30 - 2008-10-27 10:04 - 00023376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_5.dll
2014-03-04 03:30 - 2008-10-15 06:22 - 05631312 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_40.dll
2014-03-04 03:30 - 2008-10-15 06:22 - 04379984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_40.dll
2014-03-04 03:30 - 2008-10-15 06:22 - 02605920 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_40.dll
2014-03-04 03:30 - 2008-10-15 06:22 - 02036576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_40.dll
2014-03-04 03:30 - 2008-10-15 06:22 - 00519000 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_40.dll
2014-03-04 03:30 - 2008-10-15 06:22 - 00452440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_40.dll
2014-03-04 03:30 - 2008-07-31 10:41 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_2.dll
2014-03-04 03:30 - 2008-07-31 10:41 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_2.dll
2014-03-04 03:30 - 2008-07-31 10:41 - 00072200 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_1.dll
2014-03-04 03:30 - 2008-07-31 10:41 - 00068616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_1.dll
2014-03-04 03:30 - 2008-07-31 10:40 - 00513544 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_2.dll
2014-03-04 03:30 - 2008-07-31 10:40 - 00509448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_2.dll
2014-03-04 03:30 - 2008-07-10 11:01 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_39.dll
2014-03-04 03:30 - 2008-07-10 11:00 - 04992520 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_39.dll
2014-03-04 03:30 - 2008-07-10 11:00 - 03851784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_39.dll
2014-03-04 03:30 - 2008-07-10 11:00 - 01942552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_39.dll
2014-03-04 03:30 - 2008-07-10 11:00 - 01493528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_39.dll
2014-03-04 03:30 - 2008-07-10 11:00 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_39.dll
2014-03-04 03:30 - 2008-05-30 14:19 - 00511496 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_1.dll
2014-03-04 03:30 - 2008-05-30 14:19 - 00507400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_1.dll
2014-03-04 03:30 - 2008-05-30 14:18 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_1.dll
2014-03-04 03:30 - 2008-05-30 14:18 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_1.dll
2014-03-04 03:30 - 2008-05-30 14:17 - 00068104 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_0.dll
2014-03-04 03:30 - 2008-05-30 14:17 - 00065032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_0.dll
2014-03-04 03:30 - 2008-05-30 14:17 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_4.dll
2014-03-04 03:30 - 2008-05-30 14:16 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_4.dll
2014-03-04 03:30 - 2008-05-30 14:11 - 04991496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_38.dll
2014-03-04 03:30 - 2008-05-30 14:11 - 03850760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_38.dll
2014-03-04 03:30 - 2008-05-30 14:11 - 01941528 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_38.dll
2014-03-04 03:30 - 2008-05-30 14:11 - 01491992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_38.dll
2014-03-04 03:30 - 2008-05-30 14:11 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_38.dll
2014-03-04 03:30 - 2008-05-30 14:11 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_38.dll
2014-03-04 03:30 - 2008-03-05 16:04 - 00489480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_0.dll
2014-03-04 03:30 - 2008-03-05 16:03 - 00479752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_0.dll
2014-03-04 03:30 - 2008-03-05 16:03 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_0.dll
2014-03-04 03:30 - 2008-03-05 16:03 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_0.dll
2014-03-04 03:30 - 2008-03-05 16:00 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_3.dll
2014-03-04 03:30 - 2008-03-05 16:00 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_3.dll
2014-03-04 03:30 - 2008-03-05 15:56 - 04910088 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_37.dll
2014-03-04 03:30 - 2008-03-05 15:56 - 03786760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_37.dll
2014-03-04 03:30 - 2008-03-05 15:56 - 01860120 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_37.dll
2014-03-04 03:30 - 2008-03-05 15:56 - 01420824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_37.dll
2014-03-04 03:30 - 2008-02-05 23:07 - 00529424 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_37.dll
2014-03-04 03:30 - 2008-02-05 23:07 - 00462864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_37.dll
2014-03-04 03:30 - 2007-10-22 03:40 - 00411656 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_10.dll
2014-03-04 03:30 - 2007-10-22 03:39 - 00267272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_10.dll
2014-03-04 03:30 - 2007-10-22 03:37 - 00021000 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_2.dll
2014-03-04 03:30 - 2007-10-22 03:37 - 00017928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_2.dll
2014-03-04 03:30 - 2007-10-12 15:14 - 05081608 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_36.dll
2014-03-04 03:30 - 2007-10-12 15:14 - 03734536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_36.dll
2014-03-04 03:30 - 2007-10-12 15:14 - 02006552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_36.dll
2014-03-04 03:30 - 2007-10-12 15:14 - 01374232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_36.dll
2014-03-04 03:30 - 2007-10-02 09:56 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_36.dll
2014-03-04 03:30 - 2007-10-02 09:56 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_36.dll
2014-03-04 03:30 - 2007-07-20 00:57 - 00411496 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_9.dll
2014-03-04 03:30 - 2007-07-20 00:57 - 00267112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_9.dll
2014-03-04 03:30 - 2007-07-19 18:14 - 05073256 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_35.dll
2014-03-04 03:30 - 2007-07-19 18:14 - 03727720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_35.dll
2014-03-04 03:30 - 2007-07-19 18:14 - 01985904 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_35.dll
2014-03-04 03:30 - 2007-07-19 18:14 - 01358192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_35.dll
2014-03-04 03:30 - 2007-07-19 18:14 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_35.dll
2014-03-04 03:30 - 2007-07-19 18:14 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_35.dll
2014-03-04 03:30 - 2007-06-20 20:49 - 00409960 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_8.dll
2014-03-04 03:30 - 2007-06-20 20:46 - 00266088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_8.dll
2014-03-04 03:30 - 2007-05-16 16:45 - 04496232 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_34.dll
2014-03-04 03:30 - 2007-05-16 16:45 - 03497832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_34.dll
2014-03-04 03:30 - 2007-05-16 16:45 - 01401200 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_34.dll
2014-03-04 03:30 - 2007-05-16 16:45 - 01124720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_34.dll
2014-03-04 03:30 - 2007-05-16 16:45 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_34.dll
2014-03-04 03:30 - 2007-05-16 16:45 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_34.dll
2014-03-04 03:30 - 2007-04-04 18:55 - 00403304 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_7.dll
2014-03-04 03:30 - 2007-04-04 18:55 - 00261480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_7.dll
2014-03-04 03:30 - 2007-04-04 18:54 - 00107368 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_3.dll
2014-03-04 03:30 - 2007-04-04 18:53 - 00081768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_3.dll
2014-03-04 03:30 - 2007-03-15 16:57 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_33.dll
2014-03-04 03:30 - 2007-03-15 16:57 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_33.dll
2014-03-04 03:30 - 2007-03-12 16:42 - 04494184 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_33.dll
2014-03-04 03:30 - 2007-03-12 16:42 - 03495784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_33.dll
2014-03-04 03:30 - 2007-03-12 16:42 - 01400176 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_33.dll
2014-03-04 03:30 - 2007-03-12 16:42 - 01123696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_33.dll
2014-03-04 03:30 - 2007-03-05 12:42 - 00017688 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_1.dll
2014-03-04 03:30 - 2007-03-05 12:42 - 00015128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_1.dll
2014-03-04 03:30 - 2007-01-24 15:27 - 00393576 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_6.dll
2014-03-04 03:30 - 2007-01-24 15:27 - 00255848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_6.dll
2014-03-04 03:30 - 2006-12-08 12:02 - 00251672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_5.dll
2014-03-04 03:30 - 2006-12-08 12:00 - 00390424 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_5.dll
2014-03-04 03:30 - 2006-11-29 13:06 - 04398360 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_32.dll
2014-03-04 03:30 - 2006-11-29 13:06 - 03426072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_32.dll
2014-03-04 03:30 - 2006-11-29 13:06 - 00469264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10.dll
2014-03-04 03:30 - 2006-11-29 13:06 - 00440080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10.dll
2014-03-04 03:30 - 2006-09-28 16:05 - 00237848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_4.dll
2014-03-04 03:30 - 2006-09-28 16:04 - 00364824 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_4.dll
2014-03-04 03:30 - 2006-07-28 09:31 - 00083736 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_2.dll
2014-03-04 03:30 - 2006-07-28 09:30 - 00363288 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_3.dll
2014-03-04 03:30 - 2006-07-28 09:30 - 00236824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_3.dll
2014-03-04 03:30 - 2006-07-28 09:30 - 00062744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_2.dll
2014-03-04 03:30 - 2006-05-31 07:24 - 00230168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_2.dll
2014-03-04 03:30 - 2006-05-31 07:22 - 00354072 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_2.dll
2014-03-04 03:30 - 2006-03-31 12:40 - 00352464 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_1.dll
2014-03-04 03:30 - 2006-03-31 12:39 - 00229584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_1.dll
2014-03-04 03:30 - 2006-03-31 12:39 - 00083664 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_1.dll
2014-03-04 03:30 - 2006-03-31 12:39 - 00062672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_1.dll
2014-03-04 03:29 - 2006-03-31 12:41 - 03927248 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_30.dll
2014-03-04 03:29 - 2006-03-31 12:40 - 02388176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_30.dll
2014-03-04 03:29 - 2006-02-03 08:43 - 03830992 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_29.dll
2014-03-04 03:29 - 2006-02-03 08:43 - 02332368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_29.dll
2014-03-04 03:29 - 2006-02-03 08:42 - 00355536 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_0.dll
2014-03-04 03:29 - 2006-02-03 08:42 - 00230096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_0.dll
2014-03-04 03:29 - 2006-02-03 08:41 - 00016592 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_0.dll
2014-03-04 03:29 - 2006-02-03 08:41 - 00014032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_0.dll
2014-03-04 03:29 - 2005-12-05 18:09 - 03815120 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_28.dll
2014-03-04 03:29 - 2005-12-05 18:09 - 02323664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_28.dll
2014-03-04 03:29 - 2005-07-22 19:59 - 03807440 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_27.dll
2014-03-04 03:29 - 2005-07-22 19:59 - 02319568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_27.dll
2014-03-04 03:29 - 2005-05-26 15:34 - 03767504 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_26.dll
2014-03-04 03:29 - 2005-05-26 15:34 - 02297552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_26.dll
2014-03-04 03:29 - 2005-03-18 17:19 - 03823312 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_25.dll
2014-03-04 03:29 - 2005-03-18 17:19 - 02337488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_25.dll
2014-03-04 03:29 - 2005-02-05 19:45 - 03544272 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_24.dll
2014-03-04 03:29 - 2005-02-05 19:45 - 02222800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_24.dll
2014-03-03 23:44 - 2014-03-03 23:49 - 00000000 ____D () C:\Program Files (x86)\dumps
2014-03-03 17:02 - 2014-03-03 17:02 - 00000861 _____ () C:\Users\---\Desktop\µTorrent.lnk
2014-03-03 17:02 - 2014-03-03 17:02 - 00000841 _____ () C:\Users\---\AppData\Roaming\Microsoft\Windows\Start Menu\µTorrent.lnk
2014-03-02 15:31 - 2014-03-02 15:31 - 00000000 ____D () C:\ProgramData\Futuremark
2014-03-02 15:06 - 2014-03-02 15:07 - 00000000 ____D () C:\Users\---\Documents\3DMark 11
2014-03-02 15:04 - 2014-03-02 15:04 - 00000000 ____D () C:\Users\---\AppData\Roaming\QuickScan
2014-03-02 14:19 - 2014-03-02 21:02 - 00000000 ____D () C:\Program Files (x86)\Futuremark
2014-03-02 13:36 - 2014-03-02 13:36 - 00000000 ____D () C:\Users\---\Documents\PCMark 8
2014-03-02 13:35 - 2014-03-02 15:31 - 00000022 _____ () C:\Windows\GPU-Z.INI
2014-03-02 13:29 - 2014-03-02 15:06 - 00000000 ____D () C:\Users\---\AppData\Local\Futuremark
2014-03-02 13:29 - 2014-03-02 13:35 - 00000000 ____D () C:\Users\---\Documents\3DMark
2014-03-02 13:29 - 2014-03-02 13:29 - 00000000 ____D () C:\Users\---\AppData\Local\IsolatedStorage
2014-03-02 13:27 - 2010-06-02 04:55 - 00527192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_7.dll
2014-03-02 13:27 - 2010-06-02 04:55 - 00518488 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_7.dll
2014-03-02 13:27 - 2010-06-02 04:55 - 00239960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_7.dll
2014-03-02 13:27 - 2010-06-02 04:55 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_7.dll
2014-03-02 13:27 - 2010-06-02 04:55 - 00077656 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_5.dll
2014-03-02 13:27 - 2010-06-02 04:55 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_5.dll
2014-03-02 13:27 - 2010-05-26 11:41 - 02526056 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_43.dll
2014-03-02 13:27 - 2010-05-26 11:41 - 02401112 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_43.dll
2014-03-02 13:27 - 2010-05-26 11:41 - 02106216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_43.dll
2014-03-02 13:27 - 2010-05-26 11:41 - 01998168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_43.dll
2014-03-02 13:27 - 2010-05-26 11:41 - 01907552 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_43.dll
2014-03-02 13:27 - 2010-05-26 11:41 - 01868128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_43.dll
2014-03-02 13:27 - 2010-05-26 11:41 - 00511328 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_43.dll
2014-03-02 13:27 - 2010-05-26 11:41 - 00470880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_43.dll
2014-03-02 13:27 - 2010-05-26 11:41 - 00276832 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_43.dll
2014-03-02 13:27 - 2010-05-26 11:41 - 00248672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_43.dll
2014-03-02 13:27 - 2006-09-28 16:05 - 03977496 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_31.dll
2014-03-02 13:27 - 2006-09-28 16:05 - 02414360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_31.dll
2014-03-02 10:20 - 2014-03-02 10:22 - 00000000 ____D () C:\Program Files\HWiNFO64
2014-03-02 10:20 - 2014-03-02 10:20 - 00031648 _____ (REALiX(tm)) C:\Windows\system32\Drivers\HWiNFO64A.SYS
2014-03-01 19:49 - 2014-03-01 19:52 - 00000000 ____D () C:\Users\---\Desktop\fahrt
2014-02-27 16:36 - 2014-01-09 03:22 - 05694464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2014-02-27 16:36 - 2014-01-03 23:44 - 06574592 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2014-02-27 02:52 - 2014-02-27 02:52 - 00068440 _____ (Lenovo.) C:\Windows\system32\ibmpmsvc.exe
2014-02-27 02:52 - 2014-02-27 02:52 - 00060760 _____ (Lenovo.) C:\Windows\system32\ibmpmctl.exe
2014-02-27 02:52 - 2014-02-27 02:52 - 00057144 _____ (Lenovo.) C:\Windows\system32\Drivers\ibmpmdrv.sys
2014-02-27 02:52 - 2014-02-27 02:52 - 00040280 _____ (Lenovo.) C:\Windows\system32\tpinspm.dll
2014-02-22 20:09 - 2014-02-22 20:11 - 16204160 _____ (Geek Software GmbH ) C:\Users\---\Desktop\pdf24-creator-6.3.2.exe
==================== One Month Modified Files and Folders =======
2014-03-23 23:10 - 2014-03-23 23:10 - 00000000 ____D () C:\FRST
2014-03-23 23:10 - 2014-03-23 23:08 - 00000000 ____D () C:\Users\---\Desktop\virus
2014-03-23 23:10 - 2014-03-07 09:51 - 00942135 _____ () C:\Windows\WindowsUpdate.log
2014-03-23 23:09 - 2014-03-23 23:09 - 00000168 _____ () C:\Users\---\defogger_reenable
2014-03-23 23:09 - 2014-01-04 00:47 - 00000000 ____D () C:\Users\---
2014-03-23 22:59 - 2014-03-23 21:01 - 00000000 ____D () C:\Users\---\AppData\Roaming\Microsoft\Windows\Start Menu\Programs
\Startup
2014-03-23 22:59 - 2014-01-14 14:31 - 00000000 ____D () C:\Portable Programme
2014-03-23 22:58 - 2014-03-23 22:58 - 00030381 _____ () C:\Users\---\Desktop\quiethdd_v1.5-build250.zip
2014-03-23 22:57 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-03-23 22:56 - 2014-03-22 20:49 - 00000000 ____D () C:\Programme (x64)
2014-03-23 22:56 - 2014-03-19 14:43 - 00000470 _____ () C:\Windows\Tasks\AmiUpdXp.job
2014-03-23 22:22 - 2014-02-11 12:17 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA1cf271adaaa5c5f.job
2014-03-23 22:19 - 2014-03-20 20:37 - 00000209 _____ () C:\Users\---\Desktop\cd_conny koppers und anti-viren informationen.txt
2014-03-23 21:04 - 2014-03-14 19:28 - 00000000 ____D () C:\Program Files (x86)\Steam
2014-03-23 21:04 - 2009-07-14 05:45 - 00026544 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-
A289-439d-8115-601632D005A0
2014-03-23 21:04 - 2009-07-14 05:45 - 00026544 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-
A289-439d-8115-601632D005A0
2014-03-23 21:01 - 2014-01-24 15:24 - 00000000 ____D () C:\Program Files\Rainmeter
2014-03-23 21:01 - 2011-04-12 08:43 - 00702436 _____ () C:\Windows\system32\perfh007.dat
2014-03-23 21:01 - 2011-04-12 08:43 - 00150044 _____ () C:\Windows\system32\perfc007.dat
2014-03-23 21:01 - 2009-07-14 06:13 - 01626920 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-03-23 20:57 - 2014-01-12 09:22 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-03-23 20:57 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-03-19 15:24 - 2014-03-19 15:23 - 26437344 _____ (Microsoft Corporation) C:\Users\---\Desktop\Windows-KB890830-x64-
V5.10_2.exe
2014-03-19 15:23 - 2014-03-19 15:23 - 63320784 _____ (Microsoft Corporation) C:\Users\---\Desktop\IE11-Windows6.1-x64-de-de.exe
2014-03-19 15:22 - 2014-03-19 15:21 - 26437344 _____ (Microsoft Corporation) C:\Users\---\Desktop\Windows-KB890830-x64-V5.10.exe
2014-03-19 14:59 - 2014-03-19 14:42 - 00000000 ____D () C:\Users\---\AppData\Roaming\awesomehp
2014-03-19 14:59 - 2014-01-10 21:58 - 00001156 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-03-19 14:59 - 2014-01-05 13:36 - 00000727 _____ () C:\Users\---\Desktop\Nightly.lnk
2014-03-19 14:43 - 2014-03-19 14:43 - 01172664 _____ (AnyProtect.com) C:\Users\---\AppData\Local\nsq3D63.tmp
2014-03-19 14:43 - 2014-03-19 14:43 - 00003492 _____ () C:\Windows\System32\Tasks\AmiUpdXp
2014-03-19 14:43 - 2014-03-19 14:43 - 00000000 ____D () C:\Program Files (x86)\AnyProtectEx
2014-03-19 14:42 - 2014-03-19 14:42 - 00000000 ____D () C:\Users\---\AppData\Roaming\SupTab
2014-03-19 14:42 - 2014-03-19 14:42 - 00000000 ____D () C:\Program Files (x86)\SupTab
2014-03-19 14:41 - 2014-03-19 14:41 - 00002066 _____ () C:\Users\Public\Desktop\MyPhoneExplorer.lnk
2014-03-19 14:41 - 2014-03-19 14:41 - 00000000 ____D () C:\Users\---\AppData\Roaming\MyPhoneExplorer
2014-03-19 14:41 - 2014-03-19 14:41 - 00000000 ____D () C:\Program Files (x86)\MyPhoneExplorer
2014-03-19 13:48 - 2014-01-10 21:53 - 00000000 ____D () C:\Users\---\AppData\Roaming\Nitro PDF
2014-03-17 00:18 - 2014-03-16 23:53 - 00000000 ____D () C:\Users\---\Documents\Battlefield Heroes
2014-03-17 00:09 - 2014-03-16 23:57 - 00282296 _____ () C:\Windows\SysWOW64\PnkBstrB.xtr
2014-03-17 00:09 - 2014-03-16 23:51 - 00282296 _____ () C:\Windows\SysWOW64\PnkBstrB.exe
2014-03-17 00:09 - 2014-03-16 23:51 - 00076888 _____ () C:\Windows\SysWOW64\PnkBstrA.exe
2014-03-16 23:57 - 2014-03-16 23:57 - 00000000 ____D () C:\Users\---\AppData\Local\PunkBuster
2014-03-16 23:57 - 2014-03-16 23:51 - 00270240 _____ () C:\Windows\SysWOW64\PnkBstrB.ex0
2014-03-16 19:12 - 2014-03-16 19:12 - 00000000 ____D () C:\Users\---\AppData\Local\Warframe
2014-03-16 19:09 - 2014-03-15 21:19 - 00000000 ___RD () C:\Users\---\Desktop\zeitvertreib
2014-03-16 18:39 - 2014-03-16 18:39 - 00000766 _____ () C:\Users\---\Desktop\MediathekView.lnk
2014-03-16 18:36 - 2014-03-16 13:01 - 00000000 ____D () C:\Users\---\Documents\My Games
2014-03-16 18:22 - 2014-03-16 18:22 - 00000000 ____D () C:\Users\---\AppData\Roaming\TheBannerSagaFactions
2014-03-16 16:16 - 2014-01-06 20:52 - 00000000 ____D () C:\Users\---\AppData\Roaming\vlc
2014-03-16 12:47 - 2014-03-16 12:47 - 00000000 ____D () C:\Crash
2014-03-16 11:22 - 2014-03-16 11:22 - 00000000 ____D () C:\Users\---\AppData\Local\SCE
2014-03-16 09:42 - 2014-03-16 09:39 - 00000000 ____D () C:\Users\---\MediathekView
2014-03-16 09:34 - 2014-03-16 09:33 - 00000000 ____D () C:\Users\---\.mediathek3
2014-03-16 09:33 - 2014-03-16 09:33 - 00312744 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2014-03-16 09:33 - 2014-03-16 09:33 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2014-03-16 09:33 - 2014-03-16 09:33 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2014-03-16 09:33 - 2014-03-16 09:33 - 00108968 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2014-03-16 09:32 - 2014-03-16 09:32 - 00000000 ____D () C:\ProgramData\Sun
2014-03-16 09:32 - 2014-03-16 09:32 - 00000000 ____D () C:\ProgramData\Oracle
2014-03-16 09:32 - 2014-03-16 09:32 - 00000000 ____D () C:\Program Files\Java
2014-03-16 09:30 - 2014-03-16 09:30 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-03-16 09:30 - 2014-03-16 09:30 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-03-16 09:30 - 2014-03-16 09:30 - 00174504 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-03-16 09:30 - 2014-03-16 09:30 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-03-16 09:30 - 2014-03-16 09:30 - 00000000 ____D () C:\Program Files (x86)\Java
2014-03-15 15:42 - 2014-03-15 15:42 - 00000000 ____D () C:\Users\---\AppData\Roaming\Carbon
2014-03-14 19:28 - 2014-03-14 19:28 - 00000972 _____ () C:\Users\Public\Desktop\Steam.lnk
2014-03-14 15:39 - 2014-01-06 16:02 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-03-14 15:39 - 2014-01-06 16:02 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-03-14 13:00 - 2014-02-15 12:37 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-03-14 13:00 - 2014-02-15 12:37 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
2014-03-13 14:23 - 2014-02-14 14:06 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-03-07 15:09 - 2014-01-10 22:03 - 00000000 ____D () C:\Users\---\dwhelper
2014-03-07 13:59 - 2009-07-14 06:08 - 00032632 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-03-04 17:27 - 2014-01-09 16:04 - 00000000 ____D () C:\Users\---\AppData\Roaming\uTorrent
2014-03-04 03:30 - 2014-03-04 03:30 - 00000000 ____D () C:\Users\---\AppData\Local\EdgeOfReality
2014-03-03 23:49 - 2014-03-03 23:44 - 00000000 ____D () C:\Program Files (x86)\dumps
2014-03-03 17:02 - 2014-03-03 17:02 - 00000861 _____ () C:\Users\---\Desktop\µTorrent.lnk
2014-03-03 17:02 - 2014-03-03 17:02 - 00000841 _____ () C:\Users\---\AppData\Roaming\Microsoft\Windows\Start Menu\µTorrent.lnk
2014-03-02 21:02 - 2014-03-02 14:19 - 00000000 ____D () C:\Program Files (x86)\Futuremark
2014-03-02 15:44 - 2014-01-05 23:58 - 00007620 _____ () C:\Users\---\AppData\Local\Resmon.ResmonCfg
2014-03-02 15:31 - 2014-03-02 15:31 - 00000000 ____D () C:\ProgramData\Futuremark
2014-03-02 15:31 - 2014-03-02 13:35 - 00000022 _____ () C:\Windows\GPU-Z.INI
2014-03-02 15:25 - 2014-01-06 16:43 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-03-02 15:07 - 2014-03-02 15:06 - 00000000 ____D () C:\Users\---\Documents\3DMark 11
2014-03-02 15:06 - 2014-03-02 13:29 - 00000000 ____D () C:\Users\---\AppData\Local\Futuremark
2014-03-02 15:04 - 2014-03-02 15:04 - 00000000 ____D () C:\Users\---\AppData\Roaming\QuickScan
2014-03-02 14:34 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\LiveKernelReports
2014-03-02 14:05 - 2014-01-04 20:02 - 90015360 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-03-02 13:36 - 2014-03-02 13:36 - 00000000 ____D () C:\Users\---\Documents\PCMark 8
2014-03-02 13:35 - 2014-03-02 13:29 - 00000000 ____D () C:\Users\---\Documents\3DMark
2014-03-02 13:29 - 2014-03-02 13:29 - 00000000 ____D () C:\Users\---\AppData\Local\IsolatedStorage
2014-03-02 10:22 - 2014-03-02 10:20 - 00000000 ____D () C:\Program Files\HWiNFO64
2014-03-02 10:20 - 2014-03-02 10:20 - 00031648 _____ (REALiX(tm)) C:\Windows\system32\Drivers\HWiNFO64A.SYS
2014-03-01 19:52 - 2014-03-01 19:49 - 00000000 ____D () C:\Users\---\Desktop\fahrt
2014-03-01 07:05 - 2014-03-13 13:44 - 23133696 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-03-01 06:17 - 2014-03-13 13:44 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-03-01 06:16 - 2014-03-13 13:44 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-03-01 05:58 - 2014-03-13 13:44 - 02765824 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-03-01 05:52 - 2014-03-13 13:44 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-03-01 05:51 - 2014-03-13 13:44 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-03-01 05:42 - 2014-03-13 13:44 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-03-01 05:40 - 2014-03-13 13:44 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-03-01 05:37 - 2014-03-13 13:44 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-03-01 05:33 - 2014-03-13 13:44 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-03-01 05:33 - 2014-03-13 13:44 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-03-01 05:32 - 2014-03-13 13:44 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-03-01 05:30 - 2014-03-13 13:44 - 17074688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-03-01 05:23 - 2014-03-13 13:44 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-03-01 05:17 - 2014-03-13 13:44 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-03-01 05:11 - 2014-03-13 13:44 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-03-01 05:02 - 2014-03-13 13:44 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-03-01 04:54 - 2014-03-13 13:44 - 05768704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-03-01 04:52 - 2014-03-13 13:44 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-03-01 04:51 - 2014-03-13 13:44 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-03-01 04:47 - 2014-03-13 13:44 - 02168320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-03-01 04:43 - 2014-03-13 13:44 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-03-01 04:43 - 2014-03-13 13:44 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-03-01 04:42 - 2014-03-13 13:44 - 00627200 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-03-01 04:40 - 2014-03-13 13:44 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-03-01 04:38 - 2014-03-13 13:44 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-03-01 04:37 - 2014-03-13 13:44 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-03-01 04:35 - 2014-03-13 13:44 - 02041856 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-03-01 04:18 - 2014-03-13 13:44 - 13051904 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-03-01 04:16 - 2014-03-13 13:44 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-03-01 04:14 - 2014-03-13 13:44 - 04244480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-03-01 04:10 - 2014-03-13 13:44 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-03-01 04:03 - 2014-03-13 13:44 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-03-01 04:00 - 2014-03-13 13:44 - 01964032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-03-01 03:57 - 2014-03-13 13:44 - 11266048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-03-01 03:38 - 2014-03-13 13:44 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-03-01 03:32 - 2014-03-13 13:44 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-03-01 03:27 - 2014-03-13 13:44 - 01156096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-03-01 03:25 - 2014-03-13 13:44 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-03-01 03:25 - 2014-03-13 13:44 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-02-27 21:13 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\rescache
2014-02-27 02:52 - 2014-02-27 02:52 - 00068440 _____ (Lenovo.) C:\Windows\system32\ibmpmsvc.exe
2014-02-27 02:52 - 2014-02-27 02:52 - 00060760 _____ (Lenovo.) C:\Windows\system32\ibmpmctl.exe
2014-02-27 02:52 - 2014-02-27 02:52 - 00057144 _____ (Lenovo.) C:\Windows\system32\Drivers\ibmpmdrv.sys
2014-02-27 02:52 - 2014-02-27 02:52 - 00040280 _____ (Lenovo.) C:\Windows\system32\tpinspm.dll
2014-02-23 00:05 - 2014-01-06 20:50 - 00000000 ____D () C:\Users\---\AppData\Roaming\Nitro
2014-02-22 20:11 - 2014-02-22 20:09 - 16204160 _____ (Geek Software GmbH ) C:\Users\---\Desktop\pdf24-creator-6.3.2.exe
Files to move or delete:
====================
C:\ProgramData\PKP_DLes.DAT
C:\ProgramData\PKP_DLet.DAT
C:\ProgramData\PKP_DLev.DAT
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2014-03-10 12:42
==================== End Of Log ============================
--- --- --- Addition.txt Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 13-03-2014
Ran by --- at 2014-03-23 23:11:28
Running from C:\Users\---\Desktop\virus
Boot Mode: Normal
==========================================================
==================== Security Center ========================
AV: ESET Smart Security 7.0 (Enabled - Up to date) {19259FAE-8396-A113-46DB-15B0E7DFA289}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: ESET Smart Security 7.0 (Enabled - Up to date) {A2447E4A-A5AC-AE9D-7C6B-2EC29C58E834}
FW: ESET Personal Firewall (Enabled) {211E1E8B-C9F9-A04B-6D84-BC85190CE5F2}
==================== Installed Programs ======================
µTorrent (HKCU\...\uTorrent) (Version: 3.4.0.30620 - BitTorrent Inc.)
7-Zip 9.20 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0920-000001000000}) (Version: 9.20.00.0 - Igor Pavlov)
CCleaner (HKLM\...\CCleaner) (Version: 4.09 - Piriform)
ESET Smart Security (HKLM\...\{F5A3E880-A737-48F2-A124-6F5D4CEA6AB4}) (Version: 7.0.302.26 - ESET, spol s r. o.)
HWiNFO64 Version 4.34 (HKLM\...\HWiNFO64_is1) (Version: 4.34 - Martin Malík - REALiX)
Intel® Trusted Connect Service Client (Version: 1.27.798.1 - Intel Corporation) Hidden
Java 7 Update 51 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86417051FF}) (Version: 7.0.510 - Oracle)
Lenovo Power Management Driver (HKLM\...\Power Management Driver) (Version: 1.67.04.05 - )
Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 -
Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft
Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Network Monitor 3.4 (HKLM\...\{8C5B5A11-CBF8-451B-B201-77FAB0D0B77D}) (Version: 3.4.2350.0 - Microsoft Corporation)
Microsoft Network Monitor: NetworkMonitor Parsers 3.4 (HKLM\...\{963E5FEB-1367-46B9-851D-A957F1A3747F}) (Version: 3.4.2350.0 -
Microsoft Corporation)
Microsoft Office Office 64-bit Components 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared 64-bit MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30214.0 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version:
10.0.40219 - Microsoft Corporation)
Nightly 31.0a1 (x64 en-US) (HKLM\...\Nightly 31.0a1 (x64 en-US)) (Version: 31.0a1 - Mozilla)
Nitro Reader 3 (HKLM\...\{4756C731-B54E-451A-9AF1-86E8AB1BEBBB}) (Version: 3.5.6.5 - Nitro)
TeraCopy 2.3 (HKLM\...\TeraCopy_is1) (Version: - Code Sector)
ThinkPad UltraNav Driver (HKLM\...\SynTPDeinstKey) (Version: 16.6.4.13 - )
VLC media player 2.1.1 (HKLM\...\VLC media player) (Version: 2.1.1 - VideoLAN)
==================== Restore Points =========================
06-03-2014 21:18:40 Geplanter Prüfpunkt
07-03-2014 15:08:20 Windows Update
11-03-2014 13:44:00 Windows Update
13-03-2014 13:22:22 Windows Update
16-03-2014 08:30:26 Installed Java 7 Update 51
16-03-2014 08:32:49 Installed Java 7 Update 51 (64-bit)
16-03-2014 10:21:56 DirectX wurde installiert
19-03-2014 16:50:40 Windows Update
==================== Hosts content: ==========================
2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
==================== Scheduled Tasks (whitelisted) =============
Task: {19AB1A39-A67C-42CA-94CD-D349CF3B2487} - System32\Tasks\AmiUpdXp => C:\Users\---\AppData\Local\85383e5b-8c24-4550-0ff3-
00bdb8626297\85383e5b-8c24-4550-0ff3-00bdb8626297.exe <==== ATTENTION
Task: {311AF48F-4A3B-4433-9F44-52ADFA5F9541} - System32\Tasks\GoogleUpdateTaskMachineUA1cf271adaaa5c5f => C:\Program Files
(x86)\Google\Update\GoogleUpdate.exe [2014-01-12] (Google Inc.)
Task: {39292144-04CE-44E0-B3D1-3A924A54EA24} - System32\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon =>
C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe [2012-06-14] (Intel Corporation)
Task: {84AC2C24-6C2A-4C63-B702-25B02E1C2DE6} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google
\Update\GoogleUpdate.exe [2014-01-12] (Google Inc.)
Task: {8D023C32-34F1-4ADC-B1B3-9BA48B8C7265} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-
12-17] (Piriform Ltd)
Task: {AB4AA363-3C5E-4B77-997D-5AE98C2BA053} - System32\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d => C:
\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe [2012-06-14] (Intel Corporation)
Task: C:\Windows\Tasks\AmiUpdXp.job => C:\Users\---\AppData\Local\85383e5b-8c24-4550-0ff3-00bdb8626297\85383e5b-8c24-4550-0ff3-
00bdb8626297.exe <==== ATTENTION
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA1cf271adaaa5c5f.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
==================== Loaded Modules (whitelisted) =============
2014-03-16 23:51 - 2014-03-17 00:09 - 00076888 _____ () C:\Windows\SysWOW64\PnkBstrA.exe
2014-01-17 20:38 - 2012-01-20 14:55 - 00678400 _____ () C:\Program Files\TeraCopy\TeraCopyExt64.dll
2013-10-07 14:52 - 2013-10-07 14:52 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll
2013-10-29 21:45 - 2013-10-29 21:45 - 00036536 _____ () C:\Program Files\Rainmeter\Rainmeter.exe
2013-10-29 21:45 - 2013-10-29 21:45 - 00798392 _____ () C:\Program Files\Rainmeter\Rainmeter.dll
2013-10-29 21:41 - 2013-10-29 21:41 - 00058880 _____ () C:\Program Files\Rainmeter\Plugins\WebParser.dll
2014-03-22 20:49 - 2014-03-22 20:49 - 04751360 _____ () C:\Programme (x64)\mozjs.dll
2014-03-14 15:39 - 2014-03-14 15:39 - 22438792 _____ () C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_77.dll
2009-01-12 20:01 - 2014-03-23 22:59 - 00061440 _____ () C:\Portable Programme\quiethdd_v1.5-build250\quietHDD.exe
2014-01-06 16:29 - 2013-03-12 13:20 - 01199576 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS
\ACE.dll
==================== Alternate Data Streams (whitelisted) =========
==================== Safe Mode (whitelisted) ===================
==================== Disabled items from MSCONFIG ==============
==================== Faulty Device Manager Devices =============
==================== Event log errors: =========================
Application errors:
==================
System errors:
=============
Microsoft Office Sessions:
=========================
CodeIntegrity Errors:
===================================
Date: 2014-01-10 21:49:38.989
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\dsound.dll" konnte nicht überprüft
werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2014-01-10 21:49:32.151
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\dsound.dll" konnte nicht überprüft
werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2014-01-10 20:34:10.727
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\dsound.dll" konnte nicht überprüft
werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2014-01-10 20:34:07.525
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\dsound.dll" konnte nicht überprüft
werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2014-01-10 20:34:01.554
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\dsound.dll" konnte nicht überprüft
werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2014-01-10 20:34:00.471
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\dsound.dll" konnte nicht überprüft
werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2014-01-10 19:21:17.719
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\dsound.dll" konnte nicht überprüft
werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2014-01-10 19:19:11.918
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\dsound.dll" konnte nicht überprüft
werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2014-01-10 19:19:09.896
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\dsound.dll" konnte nicht überprüft
werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2014-01-10 19:19:08.878
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\dsound.dll" konnte nicht überprüft
werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
==================== Memory info ===========================
Percentage of memory in use: 46%
Total physical RAM: 7782.78 MB
Available physical RAM: 4130.97 MB
Total Pagefile: 15563.74 MB
Available Pagefile: 11954.41 MB
Total Virtual: 8192 MB
Available Virtual: 8191.8 MB
==================== Drives ================================
Drive c: (Windows 7) (Fixed) (Total:100.59 GB) (Free:57.04 GB) NTFS ==>[System with boot components (obtained from reading
drive)]
Drive d: (Daten) (Fixed) (Total:330.46 GB) (Free:74.46 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: 0004D3D1)
Partition 1: (Not Active) - (Size=101 GB) - (Type=07 NTFS)
Partition 2: (Active) - (Size=31 GB) - (Type=83)
Partition 3: (Not Active) - (Size=4 GB) - (Type=82)
Partition 4: (Not Active) - (Size=330 GB) - (Type=07 NTFS)
==================== End Of Log ============================
GMER Code:
ATTFilter GMER 2.1.19357 - hxxp://www.gmer.net
Rootkit scan 2014-03-23 23:25:00
Windows 6.1.7601 Service Pack 1 x64 \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-0 HGST_HTS725050A7E630 rev.GH2ZB550
465,76GB
Running: moz7h9er.exe; Driver: C:\Users\---\AppData\Local\Temp\pwliqpow.sys
---- User code sections - GMER 2.1 ----
.text C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe[1740] C:\Windows\syswow64\kernel32.dll!SetUnhandledExceptionFilter
0000000074e88769 4 bytes [C2, 04, 00, 00]
.text C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe[1740] C:\Windows\syswow64\psapi.dll!GetModuleInformation + 69
0000000076711465 2 bytes [71, 76]
.text C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe[1740] C:\Windows\syswow64\psapi.dll!GetModuleInformation + 155
00000000767114bb 2 bytes [71, 76]
.text ...
* 2
.text C:\Windows\SysWOW64\PnkBstrA.exe[1932] C:\Windows\SysWOW64\WSOCK32.dll!setsockopt + 322
0000000072351a22 2 bytes [35, 72]
.text C:\Windows\SysWOW64\PnkBstrA.exe[1932] C:\Windows\SysWOW64\WSOCK32.dll!setsockopt + 496
0000000072351ad0 2 bytes [35, 72]
.text C:\Windows\SysWOW64\PnkBstrA.exe[1932] C:\Windows\SysWOW64\WSOCK32.dll!setsockopt + 552
0000000072351b08 2 bytes [35, 72]
.text C:\Windows\SysWOW64\PnkBstrA.exe[1932] C:\Windows\SysWOW64\WSOCK32.dll!setsockopt + 730
0000000072351bba 2 bytes [35, 72]
.text C:\Windows\SysWOW64\PnkBstrA.exe[1932] C:\Windows\SysWOW64\WSOCK32.dll!setsockopt + 762
0000000072351bda 2 bytes [35, 72]
.text C:\Windows\SysWOW64\PnkBstrA.exe[1932] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69
0000000076711465 2 bytes [71, 76]
.text C:\Windows\SysWOW64\PnkBstrA.exe[1932] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155
00000000767114bb 2 bytes [71, 76]
.text ...
* 2
.text C:\Programme (x64)\firefox.exe[2024] C:\Windows\SYSTEM32\ntdll.dll!LdrLoadDll
00000000770f7ac0 13 bytes {MOV R11, 0x7fee66a253c; JMP R11}
.text C:\Programme (x64)\firefox.exe[2024] C:\Windows\SYSTEM32\ntdll.dll!NtReadFile
0000000077121310 13 bytes {MOV R11, 0x7fee2a9a1cc; JMP R11}
.text C:\Programme (x64)\firefox.exe[2024] C:\Windows\SYSTEM32\ntdll.dll!NtWriteFile
0000000077121330 13 bytes {MOV R11, 0x7fee2a9a37c; JMP R11}
.text C:\Programme (x64)\firefox.exe[2024] C:\Windows\SYSTEM32\ntdll.dll!NtWriteFileGather
0000000077121460 13 bytes {MOV R11, 0x7fee2a9a454; JMP R11}
.text C:\Programme (x64)\firefox.exe[2024] C:\Windows\SYSTEM32\ntdll.dll!NtReadFileScatter
0000000077121590 13 bytes {MOV R11, 0x7fee2a9a2a4; JMP R11}
.text C:\Programme (x64)\firefox.exe[2024] C:\Windows\SYSTEM32\ntdll.dll!NtFlushBuffersFile
0000000077121760 13 bytes {MOV R11, 0x7fee2a9a52c; JMP R11}
.text C:\Programme (x64)\firefox.exe[2024] C:\Windows\SYSTEM32\ntdll.dll!NtCreateFile
0000000077121800 13 bytes {MOV R11, 0x7fee2a9ad8c; JMP R11}
.text C:\Programme (x64)\firefox.exe[2024] C:\Windows\SYSTEM32\ntdll.dll!NtQueryFullAttributesFile
0000000077122410 13 bytes {MOV R11, 0x7fee2a9aea0; JMP R11}
.text C:\Programme (x64)\firefox.exe[2024] C:\Windows\system32\kernel32.dll!SetUnhandledExceptionFilter
0000000076ec9b80 13 bytes {MOV R11, 0x7fee3dc2620; JMP R11}
---- Registry - GMER 2.1 ----
Reg HKLM\SYSTEM\CurrentControlSet\services\BTHPORT\Parameters\Keys\6817292adbc6
Reg HKLM\SYSTEM\ControlSet002\services\BTHPORT\Parameters\Keys\6817292adbc6 (not active ControlSet)
---- EOF - GMER 2.1 ----
MBAM-log-2014-03-23 (23-37-15) Code:
ATTFilter Malwarebytes Anti-Malware 1.75.0.1300 www.malwarebytes.org Datenbank Version: v2014.03.23.10 Windows 7 Service Pack 1 x64 NTFS Internet Explorer 11.0.9600.16521 --- :: ----PC [Administrator] 23.03.2014 23:34:28 MBAM-log-2014-03-23 (23-37-15).txt Art des Suchlaufs: Quick-Scan Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM Deaktivierte Suchlaufeinstellungen: P2P Durchsuchte Objekte: 215211 Laufzeit: 2 Minute(n), 7 Sekunde(n) Infizierte Speicherprozesse: 0 (Keine bösartigen Objekte gefunden) Infizierte Speichermodule: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungsschlüssel: 16 HKCR\CLSID\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C} (PUP.Optional.SupTab.A) -> Keine Aktion durchgeführt. HKCR\TypeLib\{968EDCE0-C10A-47BB-B3B6-FDF09F2A417D} (PUP.Optional.SupTab.A) -> Keine Aktion durchgeführt. HKCR\Interface\{917CAAE9-DD47-4025-936E-1414F07DF5B8} (PUP.Optional.SupTab.A) -> Keine Aktion durchgeführt. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C} (PUP.Optional.SupTab.A) -> Keine Aktion durchgeführt. HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C} (PUP.Optional.SupTab.A) -> Keine Aktion durchgeführt. HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C} (PUP.Optional.SupTab.A) -> Keine Aktion durchgeführt. HKCR\CLSID\{67BD9EEB-AA06-4329-A940-D250019300C9} (PUP.Optional.SoftwareUpdater) -> Keine Aktion durchgeführt. HKCR\TypeLib\{A0EE0278-2986-4E5A-884E-A3BF0357E476} (PUP.Optional.SoftwareUpdater) -> Keine Aktion durchgeführt. HKCR\Interface\{9EDC0C90-2B5B-4512-953E-35767BAD5C67} (PUP.Optional.SoftwareUpdater) -> Keine Aktion durchgeführt. HKCR\Updater.AmiUpd.1 (PUP.Optional.SoftwareUpdater) -> Keine Aktion durchgeführt. HKCR\Updater.AmiUpd (PUP.Optional.SoftwareUpdater) -> Keine Aktion durchgeführt. HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86} (PUP.Optional.Qone8) -> Keine Aktion durchgeführt. HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86} (PUP.Optional.Qone8) -> Keine Aktion durchgeführt. HKLM\SYSTEM\CurrentControlSet\Services\IePluginService (PUP.Optional.IePluginService.A) -> Keine Aktion durchgeführt. HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\WPM (PUP.Optional.WpManager.A) -> Keine Aktion durchgeführt. HKLM\Software\awesomehpSoftware (PUP.Optional.Awesomehp.A) -> Keine Aktion durchgeführt. Infizierte Registrierungswerte: 2 HKLM\SOFTWARE\Mozilla\Firefox\Extensions|quick_start@gmail.com (PUP.Optional.QuickStart.A) -> Daten: C:\Users\---\AppData \Roaming\Mozilla\Firefox\Profiles\bda2rjt1.default\extensions\quick_start@gmail.com -> Keine Aktion durchgeführt. HKLM\SYSTEM\CurrentControlSet\Services\Wpm|ImagePath (PUP.Optional.WpManager.A) -> Daten: C:\ProgramData\WPM\wprotectmanager.exe -service -> Keine Aktion durchgeführt. Infizierte Dateiobjekte der Registrierung: 8 HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows|AppInit_DLLs (PUP.Optional.SupTab.A) -> Bösartig: (C:\PROGRA~2\SupTab \SEARCH~1.DLL) Gut: () -> Keine Aktion durchgeführt. HKCU\SOFTWARE\Microsoft\Internet Explorer\Main|Default_Page_URL (PUP.Optional.Awesomehp.A) -> Bösartig: (hxxp://www.awesomehp.com/?type=hp&ts=1395236542&from=amt&uid=HGSTXHTS725050A7E630_TF655AWHGLV31LGLV31LX) Gut: (hxxp://www.google.com) -> Keine Aktion durchgeführt. HKCU\Software\Microsoft\Internet Explorer\Main|Start Page (PUP.Optional.Awesomehp.A) -> Bösartig: (hxxp://www.awesomehp.com/? type=hp&ts=1395236542&from=amt&uid=HGSTXHTS725050A7E630_TF655AWHGLV31LGLV31LX) Gut: (hxxp://www.google.com) -> Keine Aktion durchgeführt. HKLM\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command| (PUP.Optional.Awesomehp.A) -> Bösartig: (C:\Program Files\Internet Explorer\iexplore.exe hxxp://www.awesomehp.com/? type=sc&ts=1395236542&from=amt&uid=HGSTXHTS725050A7E630_TF655AWHGLV31LGLV31LX) Gut: (iexplore.exe) -> Keine Aktion durchgeführt. HKLM\SOFTWARE\Microsoft\Internet Explorer\Main|Default_Search_URL (PUP.Optional.Awesomehp.A) -> Bösartig: (hxxp://www.awesomehp.com/web/?type=ds&ts=1395236542&from=amt&uid=HGSTXHTS725050A7E630_TF655AWHGLV31LGLV31LX&q={searchTerms}) Gut: (hxxp://www.google.com) -> Keine Aktion durchgeführt. HKLM\SOFTWARE\Microsoft\Internet Explorer\Main|Start Page (PUP.Optional.Awesomehp.A) -> Bösartig: (hxxp://www.awesomehp.com/? type=hp&ts=1395236542&from=amt&uid=HGSTXHTS725050A7E630_TF655AWHGLV31LGLV31LX) Gut: (hxxp://www.google.com) -> Keine Aktion durchgeführt. HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes|DefaultScope (PUP.Optional.Qone8) -> Bösartig: ({33BB0A4E-99AF-4226-BDF6 -49120163DE86}) Gut: ({0633EE93-D776-472f-A0FF-E1416B8B2E3A}) -> Keine Aktion durchgeführt. HKLM\Software\Microsoft\Internet Explorer\Main|Default_Page_URL (PUP.Optional.Awesomehp.A) -> Bösartig: (hxxp://www.awesomehp.com/?type=hp&ts=1395236542&from=amt&uid=HGSTXHTS725050A7E630_TF655AWHGLV31LGLV31LX) Gut: (hxxp://www.google.com) -> Keine Aktion durchgeführt. Infizierte Verzeichnisse: 24 C:\Program Files (x86)\SupTab (PUP.Optional.SupTab.A) -> Keine Aktion durchgeführt. C:\Program Files (x86)\SupTab\web (PUP.Optional.SupTab.A) -> Keine Aktion durchgeführt. C:\Program Files (x86)\SupTab\web\img (PUP.Optional.SupTab.A) -> Keine Aktion durchgeführt. C:\Program Files (x86)\SupTab\web\img\weather (PUP.Optional.SupTab.A) -> Keine Aktion durchgeführt. C:\Program Files (x86)\SupTab\web\js (PUP.Optional.SupTab.A) -> Keine Aktion durchgeführt. C:\Program Files (x86)\SupTab\web\_locales (PUP.Optional.SupTab.A) -> Keine Aktion durchgeführt. C:\Program Files (x86)\SupTab\web\_locales\en-US (PUP.Optional.SupTab.A) -> Keine Aktion durchgeführt. C:\Program Files (x86)\SupTab\web\_locales\es-419 (PUP.Optional.SupTab.A) -> Keine Aktion durchgeführt. C:\Program Files (x86)\SupTab\web\_locales\es-ES (PUP.Optional.SupTab.A) -> Keine Aktion durchgeführt. C:\Program Files (x86)\SupTab\web\_locales\fr-BE (PUP.Optional.SupTab.A) -> Keine Aktion durchgeführt. C:\Program Files (x86)\SupTab\web\_locales\fr-CA (PUP.Optional.SupTab.A) -> Keine Aktion durchgeführt. C:\Program Files (x86)\SupTab\web\_locales\fr-CH (PUP.Optional.SupTab.A) -> Keine Aktion durchgeführt. C:\Program Files (x86)\SupTab\web\_locales\fr-FR (PUP.Optional.SupTab.A) -> Keine Aktion durchgeführt. C:\Program Files (x86)\SupTab\web\_locales\fr-LU (PUP.Optional.SupTab.A) -> Keine Aktion durchgeführt. C:\Program Files (x86)\SupTab\web\_locales\it-CH (PUP.Optional.SupTab.A) -> Keine Aktion durchgeführt. C:\Program Files (x86)\SupTab\web\_locales\it-IT (PUP.Optional.SupTab.A) -> Keine Aktion durchgeführt. C:\Program Files (x86)\SupTab\web\_locales\pl (PUP.Optional.SupTab.A) -> Keine Aktion durchgeführt. C:\Program Files (x86)\SupTab\web\_locales\pt-BR (PUP.Optional.SupTab.A) -> Keine Aktion durchgeführt. C:\Program Files (x86)\SupTab\web\_locales\ru (PUP.Optional.SupTab.A) -> Keine Aktion durchgeführt. C:\Program Files (x86)\SupTab\web\_locales\ru-MO (PUP.Optional.SupTab.A) -> Keine Aktion durchgeführt. C:\Program Files (x86)\SupTab\web\_locales\tr-TR (PUP.Optional.SupTab.A) -> Keine Aktion durchgeführt. C:\Program Files (x86)\SupTab\web\_locales\vi-VI (PUP.Optional.SupTab.A) -> Keine Aktion durchgeführt. C:\Program Files (x86)\SupTab\web\_locales\zh-CN (PUP.Optional.SupTab.A) -> Keine Aktion durchgeführt. C:\Program Files (x86)\SupTab\web\_locales\zh-TW (PUP.Optional.SupTab.A) -> Keine Aktion durchgeführt. Infizierte Dateien: 96 C:\Program Files (x86)\SupTab\SupTab.dll (PUP.Optional.SupTab.A) -> Keine Aktion durchgeführt. C:\Users\---\AppData\Roaming\SupTab\SupTab.dll (PUP.Optional.SupTab.A) -> Keine Aktion durchgeführt. C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\awesomehp.xml (PUP.Optional.Awesomehp.A) -> Keine Aktion durchgeführt. C:\Program Files (x86)\SupTab\install.data (PUP.Optional.SupTab.A) -> Keine Aktion durchgeführt. C:\Program Files (x86)\SupTab\DpInterface32.dll (PUP.Optional.SupTab.A) -> Keine Aktion durchgeführt. C:\Program Files (x86)\SupTab\DpInterface64.dll (PUP.Optional.SupTab.A) -> Keine Aktion durchgeführt. C:\Program Files (x86)\SupTab\DpInterfacef32.dll (PUP.Optional.SupTab.A) -> Keine Aktion durchgeführt. C:\Program Files (x86)\SupTab\ient.json (PUP.Optional.SupTab.A) -> Keine Aktion durchgeführt. C:\Program Files (x86)\SupTab\RSHP.exe (PUP.Optional.SupTab.A) -> Keine Aktion durchgeführt. C:\Program Files (x86)\SupTab\SearchProtect32.dll (PUP.Optional.SupTab.A) -> Keine Aktion durchgeführt. C:\Program Files (x86)\SupTab\SearchProtect64.dll (PUP.Optional.SupTab.A) -> Keine Aktion durchgeführt. C:\Program Files (x86)\SupTab\SpAPPSv32.dll (PUP.Optional.SupTab.A) -> Keine Aktion durchgeführt. C:\Program Files (x86)\SupTab\SpAPPSv64.dll (PUP.Optional.SupTab.A) -> Keine Aktion durchgeführt. C:\Program Files (x86)\SupTab\uninstall.exe (PUP.Optional.SupTab.A) -> Keine Aktion durchgeführt. C:\Program Files (x86)\SupTab\web\indexIE.html (PUP.Optional.SupTab.A) -> Keine Aktion durchgeführt. C:\Program Files (x86)\SupTab\web\indexIE8.html (PUP.Optional.SupTab.A) -> Keine Aktion durchgeführt. C:\Program Files (x86)\SupTab\web\style.css (PUP.Optional.SupTab.A) -> Keine Aktion durchgeführt. C:\Program Files (x86)\SupTab\web\ver.txt (PUP.Optional.SupTab.A) -> Keine Aktion durchgeführt. C:\Program Files (x86)\SupTab\web\img\default_logo.png (PUP.Optional.SupTab.A) -> Keine Aktion durchgeführt. C:\Program Files (x86)\SupTab\web\img\icon128.png (PUP.Optional.SupTab.A) -> Keine Aktion durchgeführt. C:\Program Files (x86)\SupTab\web\img\icon16.png (PUP.Optional.SupTab.A) -> Keine Aktion durchgeführt. C:\Program Files (x86)\SupTab\web\img\icon48.png (PUP.Optional.SupTab.A) -> Keine Aktion durchgeführt. C:\Program Files (x86)\SupTab\web\img\loading.gif (PUP.Optional.SupTab.A) -> Keine Aktion durchgeführt. C:\Program Files (x86)\SupTab\web\img\weather\0.png (PUP.Optional.SupTab.A) -> Keine Aktion durchgeführt. C:\Program Files (x86)\SupTab\web\img\weather\1.png (PUP.Optional.SupTab.A) -> Keine Aktion durchgeführt. C:\Program Files (x86)\SupTab\web\img\weather\10.png (PUP.Optional.SupTab.A) -> Keine Aktion durchgeführt. C:\Program Files (x86)\SupTab\web\img\weather\11.png (PUP.Optional.SupTab.A) -> Keine Aktion durchgeführt. C:\Program Files (x86)\SupTab\web\img\weather\12.png (PUP.Optional.SupTab.A) -> Keine Aktion durchgeführt. C:\Program Files (x86)\SupTab\web\img\weather\13.png (PUP.Optional.SupTab.A) -> Keine Aktion durchgeführt. C:\Program Files (x86)\SupTab\web\img\weather\14.png (PUP.Optional.SupTab.A) -> Keine Aktion durchgeführt. C:\Program Files (x86)\SupTab\web\img\weather\15.png (PUP.Optional.SupTab.A) -> Keine Aktion durchgeführt. C:\Program Files (x86)\SupTab\web\img\weather\16.png (PUP.Optional.SupTab.A) -> Keine Aktion durchgeführt. C:\Program Files (x86)\SupTab\web\img\weather\17.png (PUP.Optional.SupTab.A) -> Keine Aktion durchgeführt. C:\Program Files (x86)\SupTab\web\img\weather\18.png (PUP.Optional.SupTab.A) -> Keine Aktion durchgeführt. C:\Program Files (x86)\SupTab\web\img\weather\19.png (PUP.Optional.SupTab.A) -> Keine Aktion durchgeführt. C:\Program Files (x86)\SupTab\web\img\weather\2.png (PUP.Optional.SupTab.A) -> Keine Aktion durchgeführt. C:\Program Files (x86)\SupTab\web\img\weather\20.png (PUP.Optional.SupTab.A) -> Keine Aktion durchgeführt. C:\Program Files (x86)\SupTab\web\img\weather\21.png (PUP.Optional.SupTab.A) -> Keine Aktion durchgeführt. C:\Program Files (x86)\SupTab\web\img\weather\22.png (PUP.Optional.SupTab.A) -> Keine Aktion durchgeführt. C:\Program Files (x86)\SupTab\web\img\weather\23.png (PUP.Optional.SupTab.A) -> Keine Aktion durchgeführt. C:\Program Files (x86)\SupTab\web\img\weather\24.png (PUP.Optional.SupTab.A) -> Keine Aktion durchgeführt. C:\Program Files (x86)\SupTab\web\img\weather\25.png (PUP.Optional.SupTab.A) -> Keine Aktion durchgeführt. C:\Program Files (x86)\SupTab\web\img\weather\26.png (PUP.Optional.SupTab.A) -> Keine Aktion durchgeführt. C:\Program Files (x86)\SupTab\web\img\weather\27.png (PUP.Optional.SupTab.A) -> Keine Aktion durchgeführt. C:\Program Files (x86)\SupTab\web\img\weather\28.png (PUP.Optional.SupTab.A) -> Keine Aktion durchgeführt. C:\Program Files (x86)\SupTab\web\img\weather\29.png (PUP.Optional.SupTab.A) -> Keine Aktion durchgeführt. C:\Program Files (x86)\SupTab\web\img\weather\3.png (PUP.Optional.SupTab.A) -> Keine Aktion durchgeführt. C:\Program Files (x86)\SupTab\web\img\weather\30.png (PUP.Optional.SupTab.A) -> Keine Aktion durchgeführt. C:\Program Files (x86)\SupTab\web\img\weather\31.png (PUP.Optional.SupTab.A) -> Keine Aktion durchgeführt. C:\Program Files (x86)\SupTab\web\img\weather\32.png (PUP.Optional.SupTab.A) -> Keine Aktion durchgeführt. C:\Program Files (x86)\SupTab\web\img\weather\33.png (PUP.Optional.SupTab.A) -> Keine Aktion durchgeführt. C:\Program Files (x86)\SupTab\web\img\weather\34.png (PUP.Optional.SupTab.A) -> Keine Aktion durchgeführt. C:\Program Files (x86)\SupTab\web\img\weather\35.png (PUP.Optional.SupTab.A) -> Keine Aktion durchgeführt. C:\Program Files (x86)\SupTab\web\img\weather\36.png (PUP.Optional.SupTab.A) -> Keine Aktion durchgeführt. C:\Program Files (x86)\SupTab\web\img\weather\37.png (PUP.Optional.SupTab.A) -> Keine Aktion durchgeführt. C:\Program Files (x86)\SupTab\web\img\weather\38.png (PUP.Optional.SupTab.A) -> Keine Aktion durchgeführt. C:\Program Files (x86)\SupTab\web\img\weather\39.png (PUP.Optional.SupTab.A) -> Keine Aktion durchgeführt. C:\Program Files (x86)\SupTab\web\img\weather\4.png (PUP.Optional.SupTab.A) -> Keine Aktion durchgeführt. C:\Program Files (x86)\SupTab\web\img\weather\40.png (PUP.Optional.SupTab.A) -> Keine Aktion durchgeführt. C:\Program Files (x86)\SupTab\web\img\weather\41.png (PUP.Optional.SupTab.A) -> Keine Aktion durchgeführt. C:\Program Files (x86)\SupTab\web\img\weather\42.png (PUP.Optional.SupTab.A) -> Keine Aktion durchgeführt. C:\Program Files (x86)\SupTab\web\img\weather\43.png (PUP.Optional.SupTab.A) -> Keine Aktion durchgeführt. C:\Program Files (x86)\SupTab\web\img\weather\44.png (PUP.Optional.SupTab.A) -> Keine Aktion durchgeführt. C:\Program Files (x86)\SupTab\web\img\weather\45.png (PUP.Optional.SupTab.A) -> Keine Aktion durchgeführt. C:\Program Files (x86)\SupTab\web\img\weather\46.png (PUP.Optional.SupTab.A) -> Keine Aktion durchgeführt. C:\Program Files (x86)\SupTab\web\img\weather\47.png (PUP.Optional.SupTab.A) -> Keine Aktion durchgeführt. C:\Program Files (x86)\SupTab\web\img\weather\5.png (PUP.Optional.SupTab.A) -> Keine Aktion durchgeführt. C:\Program Files (x86)\SupTab\web\img\weather\6.png (PUP.Optional.SupTab.A) -> Keine Aktion durchgeführt. C:\Program Files (x86)\SupTab\web\img\weather\7.png (PUP.Optional.SupTab.A) -> Keine Aktion durchgeführt. C:\Program Files (x86)\SupTab\web\img\weather\8.png (PUP.Optional.SupTab.A) -> Keine Aktion durchgeführt. C:\Program Files (x86)\SupTab\web\img\weather\9.png (PUP.Optional.SupTab.A) -> Keine Aktion durchgeführt. C:\Program Files (x86)\SupTab\web\js\background.js (PUP.Optional.SupTab.A) -> Keine Aktion durchgeführt. C:\Program Files (x86)\SupTab\web\js\ga.js (PUP.Optional.SupTab.A) -> Keine Aktion durchgeführt. C:\Program Files (x86)\SupTab\web\js\jquery-base.js (PUP.Optional.SupTab.A) -> Keine Aktion durchgeführt. C:\Program Files (x86)\SupTab\web\js\jquery.autocomplete.js (PUP.Optional.SupTab.A) -> Keine Aktion durchgeführt. C:\Program Files (x86)\SupTab\web\js\js.js (PUP.Optional.SupTab.A) -> Keine Aktion durchgeführt. C:\Program Files (x86)\SupTab\web\js\xagainit.js (PUP.Optional.SupTab.A) -> Keine Aktion durchgeführt. C:\Program Files (x86)\SupTab\web\_locales\en-US\messages.json (PUP.Optional.SupTab.A) -> Keine Aktion durchgeführt. C:\Program Files (x86)\SupTab\web\_locales\es-419\messages.json (PUP.Optional.SupTab.A) -> Keine Aktion durchgeführt. C:\Program Files (x86)\SupTab\web\_locales\es-ES\messages.json (PUP.Optional.SupTab.A) -> Keine Aktion durchgeführt. C:\Program Files (x86)\SupTab\web\_locales\fr-BE\messages.json (PUP.Optional.SupTab.A) -> Keine Aktion durchgeführt. C:\Program Files (x86)\SupTab\web\_locales\fr-CA\messages.json (PUP.Optional.SupTab.A) -> Keine Aktion durchgeführt. C:\Program Files (x86)\SupTab\web\_locales\fr-CH\messages.json (PUP.Optional.SupTab.A) -> Keine Aktion durchgeführt. C:\Program Files (x86)\SupTab\web\_locales\fr-FR\messages.json (PUP.Optional.SupTab.A) -> Keine Aktion durchgeführt. C:\Program Files (x86)\SupTab\web\_locales\fr-LU\messages.json (PUP.Optional.SupTab.A) -> Keine Aktion durchgeführt. C:\Program Files (x86)\SupTab\web\_locales\it-CH\messages.json (PUP.Optional.SupTab.A) -> Keine Aktion durchgeführt. C:\Program Files (x86)\SupTab\web\_locales\it-IT\messages.json (PUP.Optional.SupTab.A) -> Keine Aktion durchgeführt. C:\Program Files (x86)\SupTab\web\_locales\pl\messages.json (PUP.Optional.SupTab.A) -> Keine Aktion durchgeführt. C:\Program Files (x86)\SupTab\web\_locales\pt-BR\messages.json (PUP.Optional.SupTab.A) -> Keine Aktion durchgeführt. C:\Program Files (x86)\SupTab\web\_locales\ru\messages.json (PUP.Optional.SupTab.A) -> Keine Aktion durchgeführt. C:\Program Files (x86)\SupTab\web\_locales\ru-MO\messages.json (PUP.Optional.SupTab.A) -> Keine Aktion durchgeführt. C:\Program Files (x86)\SupTab\web\_locales\tr-TR\messages.json (PUP.Optional.SupTab.A) -> Keine Aktion durchgeführt. C:\Program Files (x86)\SupTab\web\_locales\vi-VI\messages.json (PUP.Optional.SupTab.A) -> Keine Aktion durchgeführt. C:\Program Files (x86)\SupTab\web\_locales\zh-CN\messages.json (PUP.Optional.SupTab.A) -> Keine Aktion durchgeführt. C:\Program Files (x86)\SupTab\web\_locales\zh-TW\messages.json (PUP.Optional.SupTab.A) -> Keine Aktion durchgeführt. C:\Windows\Tasks\AmiUpdXp.job (PUP.Software.Updater) -> Keine Aktion durchgeführt. (Ende) hxxp://pichoster.net/images/2014/03/24/ESET%20Smart%20Security.jpg Ich freu mich auf Eure Hilfe, bin sehr gespannt auf Eure Einschätzung und was noch übrig ist auf meinem System. Viele Grüße Walther |
|
24.03.2014, 09:52
| #2 |
| /// the machine /// TB-Ausbilder    | Nach Download von "MyphoneExplorer" von chip.de - Spyware, Adware - jetzt Trojaner! (Win32/Injected.F Trojaner) Hi,
__________________Funde von MBAM löschen lassen. Downloade Dir bitte  AdwCleaner auf deinen Desktop.
Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
und ein frisches FRST log bitte.
__________________ |
|
24.03.2014, 21:04
| #3 |
| | Nach Download von "MyphoneExplorer" von chip.de - Spyware, Adware - jetzt Trojaner! (Win32/Injected.F Trojaner) Hallo
__________________AdwCleaner[S0].txt Code:
ATTFilter # AdwCleaner v3.022 - Bericht erstellt am 24/03/2014 um 20:22:36
# Aktualisiert 13/03/2014 von Xplode
# Betriebssystem : Windows 7 Ultimate Service Pack 1 (64 bits)
# Benutzername : --- - --- -PC
# Gestartet von : C:\Users\---\Desktop\virus\adwcleaner.exe
# Option : Löschen
***** [ Dienste ] *****
***** [ Dateien / Ordner ] *****
Ordner Gelöscht : C:\Program Files (x86)\AnyProtectEx
Ordner Gelöscht : C:\Users\---\AppData\Roaming\awesomehp
Ordner Gelöscht : C:\Users\---\AppData\Roaming\SupTab
Datei Gelöscht : C:\Users\---\AppData\Roaming\Mozilla\Firefox\Profiles\bda2rjt1.default\searchplugins\11-suche.xml
***** [ Verknüpfungen ] *****
***** [ Registrierungsdatenbank ] *****
Wert Gelöscht : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{C424171E-592A-415A-9EB1-DFD6D95D3530}]
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{9EDC0C90-2B5B-4512-953E-35767BAD5C67}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Schlüssel Gelöscht : HKCU\Software\Popajar
Schlüssel Gelöscht : HKLM\Software\supTab
Schlüssel Gelöscht : HKLM\Software\supWPM
Schlüssel Gelöscht : HKLM\Software\Wpm
***** [ Browser ] *****
-\\ Internet Explorer v11.0.9600.16521
Einstellung Wiederhergestellt : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page]
Einstellung Wiederhergestellt : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Search_URL]
Einstellung Wiederhergestellt : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Page_URL]
Einstellung Wiederhergestellt : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page]
Einstellung Wiederhergestellt : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page]
-\\ Mozilla Firefox v27.0.1 (de)
[ Datei : C:\Users\---\AppData\Roaming\Mozilla\Firefox\Profiles\bda2rjt1.default\prefs.js ]
Zeile gelöscht : user_pref("browser.search.defaultenginename", "awesomehp");
Zeile gelöscht : user_pref("browser.search.selectedEngine", "awesomehp");
*************************
AdwCleaner[R0].txt - [2863 octets] - [24/03/2014 20:18:12]
AdwCleaner[S0].txt - [2171 octets] - [24/03/2014 20:22:36]
########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [2231 octets] ##########
JRT.txt Code:
ATTFilter ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.3 (03.23.2014:1)
OS: Windows 7 Ultimate x64
Ran by --- on 24.03.2014 at 20:37:20,63
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~ Services
~~~ Registry Values
~~~ Registry Keys
~~~ Files
~~~ Folders
~~~ FireFox
Emptied folder: C:\Users\---\AppData\Roaming\mozilla\firefox\profiles\bda2rjt1.default\minidumps [7 files]
~~~ Event Viewer Logs were cleared
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 24.03.2014 at 20:42:32,04
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
FRST FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 13-03-2014
Ran by --- (administrator) on ----PC on 24-03-2014 20:44:35
Running from C:\Users\---\Desktop\virus
Windows 7 Ultimate Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(Lenovo.) C:\Windows\system32\ibmpmsvc.exe
(ESET) C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Nitro PDF Software) C:\Program Files\Common Files\Nitro\Reader\3.0\NitroPDFReaderDriverService3x64.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.22.5\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.22.5\GoogleCrashHandler64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(ESET) C:\Program Files\ESET\ESET Smart Security\egui.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Intel Corporation) C:\Windows\system32\igfxsrvc.exe
(Synaptics Incorporated) C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE
() C:\Portable Programme\quiethdd_v1.5-build250\quietHDD.exe
() C:\Program Files\Rainmeter\Rainmeter.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(Vimicro) C:\Program Files (x86)\USB Camera\VM331STI.EXE
(Dolby Laboratories Inc.) C:\Program Files (x86)\Dolby Advanced Audio v2\pcee4.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
(Realsil Microelectronics Inc.) C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13538376 2013-05-13] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_Dolby] - C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1307720 2013-04-24] (Realtek Semiconductor)
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2985712 2013-06-04] (Synaptics Incorporated)
HKLM\...\Run: [egui] - C:\Program Files\ESET\ESET Smart Security\egui.exe [5618456 2013-09-12] (ESET)
HKLM-x32\...\Run: [USB3MON] - C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [291608 2012-03-27] (Intel Corporation)
HKLM-x32\...\Run: [IMSS] - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe [134616 2013-03-12] (Intel Corporation)
HKLM-x32\...\Run: [331BigDog] - C:\Program Files (x86)\USB Camera\VM331STI.EXE [548864 2013-03-12] (Vimicro)
HKLM-x32\...\Run: [Dolby Advanced Audio v2] - C:\Program Files (x86)\Dolby Advanced Audio v2\pcee4.exe [508656 2012-08-31] (Dolby Laboratories Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
AppInit_DLLs: C:\PROGRA~2\SupTab\SEARCH~2.DLL => C:\PROGRA~2\SupTab\SEARCH~2.DLL File Not Found
Startup: C:\Users\---\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\quietHDD.lnk
ShortcutTarget: quietHDD.lnk -> C:\Portable Programme\quiethdd_v1.5-build250\quietHDD.exe ()
Startup: C:\Users\---\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Rainmeter.lnk
ShortcutTarget: Rainmeter.lnk -> C:\Program Files\Rainmeter\Rainmeter.exe ()
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x93C303C87C09CF01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
StartMenuInternet: IEXPLORE.EXE - iexplore.exe
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL =
SearchScopes: HKCU - {30F6A740-DFA4-4171-BE96-77F7121CAAF3} URL = hxxp://go.web.de/tb/ie_searchplugin/?q={searchTerms}&enc=UTF-8
SearchScopes: HKCU - {4A42B8FA-6641-4E7C-8EF3-1ECA946196BC} URL = hxxp://go.1und1.de/tb/ie_searchplugin/?q={searchTerms}&enc=UTF-8
SearchScopes: HKCU - {60BD6C21-C55E-46A5-91E4-F1FC6CF7C937} URL = hxxp://go.mail.com/tb/en-us/ie_searchplugin/?q={searchTerms}&enc=UTF-8
SearchScopes: HKCU - {C313B64E-9B2D-4820-AD58-17921C642E8B} URL = hxxp://go.gmx.de/tb/ie_searchplugin/?q={searchTerms}&enc=UTF-8
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
FireFox:
========
FF ProfilePath: C:\Users\---\AppData\Roaming\Mozilla\Firefox\Profiles\bda2rjt1.default
FF NewTab: chrome://quick_start/content/index.html
FF Homepage: about:superstart
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_77.dll ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.1.1 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_77.dll ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=3.0.72 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin-x32: @nitropdf.com/NitroPDF - C:\Program Files (x86)\Nitro\Reader 3\npnitromozilla.dll (Nitro PDF)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF SearchPlugin: C:\Users\---\AppData\Roaming\Mozilla\Firefox\Profiles\bda2rjt1.default\searchplugins\englische-ergebnisse.xml
FF SearchPlugin: C:\Users\---\AppData\Roaming\Mozilla\Firefox\Profiles\bda2rjt1.default\searchplugins\gmx-suche.xml
FF SearchPlugin: C:\Users\---\AppData\Roaming\Mozilla\Firefox\Profiles\bda2rjt1.default\searchplugins\lastminute.xml
FF SearchPlugin: C:\Users\---\AppData\Roaming\Mozilla\Firefox\Profiles\bda2rjt1.default\searchplugins\webde-suche.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Battlefield Heroes Updater - C:\Users\---\AppData\Roaming\Mozilla\Firefox\Profiles\bda2rjt1.default\Extensions\battlefieldheroespatcher@ea.com [2014-03-16]
FF Extension: BYTubeD - Bulk YouTube video Downloader - C:\Users\---\AppData\Roaming\Mozilla\Firefox\Profiles\bda2rjt1.default\Extensions\bytubed@cs213.cse.iitk.ac.in [2014-01-10]
FF Extension: Super Start - C:\Users\---\AppData\Roaming\Mozilla\Firefox\Profiles\bda2rjt1.default\Extensions\superstart@enjoyfreeware.org [2014-03-02]
FF Extension: YouTube Unblocker - C:\Users\---\AppData\Roaming\Mozilla\Firefox\Profiles\bda2rjt1.default\Extensions\youtubeunblocker@unblocker.yt [2014-02-27]
FF Extension: DownloadHelper - C:\Users\---\AppData\Roaming\Mozilla\Firefox\Profiles\bda2rjt1.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} [2014-01-10]
FF Extension: facepaste - C:\Users\---\AppData\Roaming\Mozilla\Firefox\Profiles\bda2rjt1.default\Extensions\facepaste.firefox.addon@azabani.com.xpi [2014-01-31]
FF Extension: WEB.DE MailCheck - C:\Users\---\AppData\Roaming\Mozilla\Firefox\Profiles\bda2rjt1.default\Extensions\toolbar@web.de.xpi [2014-01-11]
FF Extension: Session Manager - C:\Users\---\AppData\Roaming\Mozilla\Firefox\Profiles\bda2rjt1.default\Extensions\{1280606b-2510-4fe0-97ef-9b5a22eafe30}.xpi [2014-02-15]
FF Extension: DownThemAll! - C:\Users\---\AppData\Roaming\Mozilla\Firefox\Profiles\bda2rjt1.default\Extensions\{DDC359D1-844A-42a7-9AA1-88A850A938A8}.xpi [2014-01-14]
FF HKLM\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird
FF Extension: ESET Smart Security Extension - C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird [2014-01-09]
FF HKLM-x32\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird
FF Extension: ESET Smart Security Extension - C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird [2014-01-09]
==================== Services (Whitelisted) =================
S3 Adobe LM Service; C:\Program Files (x86)\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [72704 2014-01-18] (Adobe Systems)
R2 ekrn; C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe [1337752 2013-09-12] (ESET)
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [820184 2013-02-13] (Intel(R) Corporation)
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [131544 2013-03-12] (Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-03-12] (Intel Corporation)
R2 NitroReaderDriverReadSpool3; C:\Program Files\Common Files\Nitro\Reader\3.0\NitroPDFReaderDriverService3x64.exe [230416 2013-07-26] (Nitro PDF Software)
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76888 2014-03-17] ()
==================== Drivers (Whitelisted) ====================
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283064 2014-01-09] (Disc Soft Ltd)
R1 eamonm; C:\Windows\System32\DRIVERS\eamonm.sys [239320 2013-09-17] (ESET)
U5 edevmon; C:\Windows\System32\Drivers\edevmon.sys [239296 2013-09-17] (ESET)
R1 ehdrv; C:\Windows\System32\DRIVERS\ehdrv.sys [168256 2013-09-17] (ESET)
R2 epfw; C:\Windows\System32\DRIVERS\epfw.sys [220232 2013-09-17] (ESET)
R1 EpfwLWF; C:\Windows\System32\DRIVERS\EpfwLWF.sys [44120 2013-09-17] (ESET)
R0 epfwwfp; C:\Windows\System32\DRIVERS\epfwwfp.sys [62136 2013-09-17] (ESET)
R1 HWiNFO32; C:\Windows\system32\drivers\HWiNFO64A.SYS [31648 2014-03-02] (REALiX(tm))
R3 SmbDrvI; C:\Windows\System32\DRIVERS\Smb_driver_Intel.sys [33008 2013-06-04] (Synaptics Incorporated)
R1 UimBus; C:\Windows\System32\DRIVERS\uimx64.sys [90960 2013-03-15] (Windows (R) 2000 DDK provider)
R1 Uim_IM; C:\Windows\System32\Drivers\Uim_IMx64.sys [633680 2013-03-15] (Paragon)
R1 Uim_VIM; C:\Windows\System32\Drivers\uim_vimx64.sys [390352 2013-03-15] (Paragon)
R3 vm331avs; C:\Windows\System32\Drivers\vm331avs.sys [1045248 2013-03-01] (Vimicro Corporation)
S3 cpuz136; \??\C:\Windows\TEMP\cpuz136\cpuz136_x64.sys [X]
S3 GPUZ; \??\C:\Windows\TEMP\GPUZ.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2014-03-24 20:37 - 2014-03-24 20:37 - 00000000 ____D () C:\Windows\ERUNT
2014-03-24 20:18 - 2014-03-24 20:26 - 00000000 ____D () C:\AdwCleaner
2014-03-24 20:06 - 2014-03-24 20:31 - 00000000 ____D () C:\Programme (x64)
2014-03-24 09:44 - 2014-03-24 09:55 - 00102480 _____ () C:\Users\---\Desktop\Neues Textdokument.txt
2014-03-23 23:40 - 2014-03-24 20:24 - 00000224 _____ () C:\Windows\setupact.log
2014-03-23 23:40 - 2014-03-23 23:40 - 00415048 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-03-23 23:40 - 2014-03-23 23:40 - 00029054 _____ () C:\Windows\PFRO.log
2014-03-23 23:40 - 2014-03-23 23:40 - 00000000 _____ () C:\Windows\setuperr.log
2014-03-23 23:33 - 2014-03-23 23:33 - 00001118 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-03-23 23:33 - 2014-03-23 23:33 - 00000000 ____D () C:\Users\---\AppData\Roaming\Malwarebytes
2014-03-23 23:33 - 2014-03-23 23:33 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-03-23 23:33 - 2014-03-23 23:33 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-03-23 23:33 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-03-23 23:10 - 2014-03-24 20:44 - 00000000 ____D () C:\FRST
2014-03-23 23:09 - 2014-03-23 23:09 - 00000168 _____ () C:\Users\---\defogger_reenable
2014-03-23 23:08 - 2014-03-24 20:44 - 00000000 ____D () C:\Users\---\Desktop\virus
2014-03-23 22:58 - 2014-03-23 22:58 - 00030381 _____ () C:\Users\---\Desktop\quiethdd_v1.5-build250.zip
2014-03-23 21:01 - 2014-03-23 22:59 - 00000000 ____D () C:\Users\---\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-03-20 20:37 - 2014-03-23 22:19 - 00000209 _____ () C:\Users\---\Desktop\cd_conny koppers und anti-viren informationen.txt
2014-03-19 15:23 - 2014-03-19 15:24 - 26437344 _____ (Microsoft Corporation) C:\Users\---\Desktop\Windows-KB890830-x64-V5.10_2.exe
2014-03-19 15:23 - 2014-03-19 15:23 - 63320784 _____ (Microsoft Corporation) C:\Users\---\Desktop\IE11-Windows6.1-x64-de-de.exe
2014-03-19 15:21 - 2014-03-19 15:22 - 26437344 _____ (Microsoft Corporation) C:\Users\---\Desktop\Windows-KB890830-x64-V5.10.exe
2014-03-19 14:43 - 2014-03-19 14:43 - 01172664 _____ (AnyProtect.com) C:\Users\---\AppData\Local\nsq3D63.tmp
2014-03-19 14:41 - 2014-03-19 14:41 - 00002066 _____ () C:\Users\Public\Desktop\MyPhoneExplorer.lnk
2014-03-19 14:41 - 2014-03-19 14:41 - 00000000 ____D () C:\Users\---\AppData\Roaming\MyPhoneExplorer
2014-03-19 14:41 - 2014-03-19 14:41 - 00000000 ____D () C:\Program Files (x86)\MyPhoneExplorer
2014-03-16 23:57 - 2014-03-17 00:09 - 00282296 _____ () C:\Windows\SysWOW64\PnkBstrB.xtr
2014-03-16 23:57 - 2014-03-16 23:57 - 00000000 ____D () C:\Users\---\AppData\Local\PunkBuster
2014-03-16 23:53 - 2014-03-17 00:18 - 00000000 ____D () C:\Users\---\Documents\Battlefield Heroes
2014-03-16 23:51 - 2014-03-17 00:09 - 00282296 _____ () C:\Windows\SysWOW64\PnkBstrB.exe
2014-03-16 23:51 - 2014-03-17 00:09 - 00076888 _____ () C:\Windows\SysWOW64\PnkBstrA.exe
2014-03-16 23:51 - 2014-03-16 23:57 - 00270240 _____ () C:\Windows\SysWOW64\PnkBstrB.ex0
2014-03-16 19:12 - 2014-03-16 19:12 - 00000000 ____D () C:\Users\---\AppData\Local\Warframe
2014-03-16 18:39 - 2014-03-16 18:39 - 00000766 _____ () C:\Users\---\Desktop\MediathekView.lnk
2014-03-16 18:22 - 2014-03-16 18:22 - 00000000 ____D () C:\Users\---\AppData\Roaming\TheBannerSagaFactions
2014-03-16 13:01 - 2014-03-16 18:36 - 00000000 ____D () C:\Users\---\Documents\My Games
2014-03-16 12:47 - 2014-03-16 12:47 - 00000000 ____D () C:\Crash
2014-03-16 11:22 - 2014-03-16 11:22 - 00000000 ____D () C:\Users\---\AppData\Local\SCE
2014-03-16 09:39 - 2014-03-16 09:42 - 00000000 ____D () C:\Users\---\MediathekView
2014-03-16 09:33 - 2014-03-16 09:34 - 00000000 ____D () C:\Users\---\.mediathek3
2014-03-16 09:33 - 2014-03-16 09:33 - 00312744 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2014-03-16 09:33 - 2014-03-16 09:33 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2014-03-16 09:33 - 2014-03-16 09:33 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2014-03-16 09:33 - 2014-03-16 09:33 - 00108968 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2014-03-16 09:32 - 2014-03-16 09:32 - 00000000 ____D () C:\ProgramData\Sun
2014-03-16 09:32 - 2014-03-16 09:32 - 00000000 ____D () C:\ProgramData\Oracle
2014-03-16 09:32 - 2014-03-16 09:32 - 00000000 ____D () C:\Program Files\Java
2014-03-16 09:30 - 2014-03-16 09:30 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-03-16 09:30 - 2014-03-16 09:30 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-03-16 09:30 - 2014-03-16 09:30 - 00174504 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-03-16 09:30 - 2014-03-16 09:30 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-03-16 09:30 - 2014-03-16 09:30 - 00000000 ____D () C:\Program Files (x86)\Java
2014-03-15 21:19 - 2014-03-16 19:09 - 00000000 ___RD () C:\Users\---\Desktop\zeitvertreib
2014-03-15 15:42 - 2014-03-15 15:42 - 00000000 ____D () C:\Users\---\AppData\Roaming\Carbon
2014-03-14 19:28 - 2014-03-23 21:04 - 00000000 ____D () C:\Program Files (x86)\Steam
2014-03-14 19:28 - 2014-03-14 19:28 - 00000972 _____ () C:\Users\Public\Desktop\Steam.lnk
2014-03-13 13:44 - 2014-03-01 07:05 - 23133696 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-03-13 13:44 - 2014-03-01 06:17 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-03-13 13:44 - 2014-03-01 06:16 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-03-13 13:44 - 2014-03-01 05:58 - 02765824 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-03-13 13:44 - 2014-03-01 05:52 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-03-13 13:44 - 2014-03-01 05:51 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-03-13 13:44 - 2014-03-01 05:42 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-03-13 13:44 - 2014-03-01 05:40 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-03-13 13:44 - 2014-03-01 05:37 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-03-13 13:44 - 2014-03-01 05:33 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-03-13 13:44 - 2014-03-01 05:33 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-03-13 13:44 - 2014-03-01 05:32 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-03-13 13:44 - 2014-03-01 05:30 - 17074688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-03-13 13:44 - 2014-03-01 05:23 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-03-13 13:44 - 2014-03-01 05:17 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-03-13 13:44 - 2014-03-01 05:11 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-03-13 13:44 - 2014-03-01 05:02 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-03-13 13:44 - 2014-03-01 04:54 - 05768704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-03-13 13:44 - 2014-03-01 04:52 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-03-13 13:44 - 2014-03-01 04:51 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-03-13 13:44 - 2014-03-01 04:47 - 02168320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-03-13 13:44 - 2014-03-01 04:43 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-03-13 13:44 - 2014-03-01 04:43 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-03-13 13:44 - 2014-03-01 04:42 - 00627200 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-03-13 13:44 - 2014-03-01 04:40 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-03-13 13:44 - 2014-03-01 04:38 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-03-13 13:44 - 2014-03-01 04:37 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-03-13 13:44 - 2014-03-01 04:35 - 02041856 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-03-13 13:44 - 2014-03-01 04:18 - 13051904 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-03-13 13:44 - 2014-03-01 04:16 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-03-13 13:44 - 2014-03-01 04:14 - 04244480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-03-13 13:44 - 2014-03-01 04:10 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-03-13 13:44 - 2014-03-01 04:03 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-03-13 13:44 - 2014-03-01 04:00 - 01964032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-03-13 13:44 - 2014-03-01 03:57 - 11266048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-03-13 13:44 - 2014-03-01 03:38 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-03-13 13:44 - 2014-03-01 03:32 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-03-13 13:44 - 2014-03-01 03:27 - 01156096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-03-13 13:44 - 2014-03-01 03:25 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-03-13 13:44 - 2014-03-01 03:25 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-03-13 13:43 - 2014-02-07 02:23 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-03-13 13:43 - 2014-01-29 03:32 - 00484864 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll
2014-03-13 13:43 - 2014-01-29 03:06 - 00381440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wer.dll
2014-03-13 13:43 - 2014-01-28 03:32 - 00228864 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll
2014-03-13 13:39 - 2014-02-04 03:32 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2014-03-13 13:39 - 2014-02-04 03:32 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2014-03-13 13:39 - 2014-02-04 03:04 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2014-03-13 13:39 - 2014-02-04 03:04 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2014-03-07 09:51 - 2014-03-24 20:23 - 00994821 _____ () C:\Windows\WindowsUpdate.log
2014-03-04 03:30 - 2014-03-04 03:30 - 00000000 ____D () C:\Users\---\AppData\Local\EdgeOfReality
2014-03-04 03:30 - 2010-02-04 10:01 - 00530776 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_6.dll
2014-03-04 03:30 - 2010-02-04 10:01 - 00528216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_6.dll
2014-03-04 03:30 - 2010-02-04 10:01 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_6.dll
2014-03-04 03:30 - 2010-02-04 10:01 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_6.dll
2014-03-04 03:30 - 2010-02-04 10:01 - 00078680 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_4.dll
2014-03-04 03:30 - 2010-02-04 10:01 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_4.dll
2014-03-04 03:30 - 2010-02-04 10:01 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_7.dll
2014-03-04 03:30 - 2010-02-04 10:01 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_7.dll
2014-03-04 03:30 - 2009-09-04 17:44 - 00517960 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_5.dll
2014-03-04 03:30 - 2009-09-04 17:44 - 00515416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_5.dll
2014-03-04 03:30 - 2009-09-04 17:44 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_5.dll
2014-03-04 03:30 - 2009-09-04 17:44 - 00176968 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_5.dll
2014-03-04 03:30 - 2009-09-04 17:44 - 00073544 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_3.dll
2014-03-04 03:30 - 2009-09-04 17:44 - 00069464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_3.dll
2014-03-04 03:30 - 2009-09-04 17:29 - 05554512 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_42.dll
2014-03-04 03:30 - 2009-09-04 17:29 - 05501792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_42.dll
2014-03-04 03:30 - 2009-09-04 17:29 - 02582888 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_42.dll
2014-03-04 03:30 - 2009-09-04 17:29 - 02475352 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_42.dll
2014-03-04 03:30 - 2009-09-04 17:29 - 01974616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_42.dll
2014-03-04 03:30 - 2009-09-04 17:29 - 01892184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_42.dll
2014-03-04 03:30 - 2009-09-04 17:29 - 00523088 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_42.dll
2014-03-04 03:30 - 2009-09-04 17:29 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_42.dll
2014-03-04 03:30 - 2009-09-04 17:29 - 00285024 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_42.dll
2014-03-04 03:30 - 2009-09-04 17:29 - 00235344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_42.dll
2014-03-04 03:30 - 2009-03-16 14:18 - 00521560 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_4.dll
2014-03-04 03:30 - 2009-03-16 14:18 - 00517448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_4.dll
2014-03-04 03:30 - 2009-03-16 14:18 - 00235352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_4.dll
2014-03-04 03:30 - 2009-03-16 14:18 - 00174936 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_4.dll
2014-03-04 03:30 - 2009-03-16 14:18 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_6.dll
2014-03-04 03:30 - 2009-03-16 14:18 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_6.dll
2014-03-04 03:30 - 2009-03-09 15:27 - 05425496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_41.dll
2014-03-04 03:30 - 2009-03-09 15:27 - 04178264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_41.dll
2014-03-04 03:30 - 2009-03-09 15:27 - 02430312 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_41.dll
2014-03-04 03:30 - 2009-03-09 15:27 - 01846632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_41.dll
2014-03-04 03:30 - 2009-03-09 15:27 - 00520544 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_41.dll
2014-03-04 03:30 - 2009-03-09 15:27 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_41.dll
2014-03-04 03:30 - 2008-10-27 10:04 - 00518480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_3.dll
2014-03-04 03:30 - 2008-10-27 10:04 - 00514384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_3.dll
2014-03-04 03:30 - 2008-10-27 10:04 - 00235856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_3.dll
2014-03-04 03:30 - 2008-10-27 10:04 - 00175440 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_3.dll
2014-03-04 03:30 - 2008-10-27 10:04 - 00074576 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_2.dll
2014-03-04 03:30 - 2008-10-27 10:04 - 00070992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_2.dll
2014-03-04 03:30 - 2008-10-27 10:04 - 00025936 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_5.dll
2014-03-04 03:30 - 2008-10-27 10:04 - 00023376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_5.dll
2014-03-04 03:30 - 2008-10-15 06:22 - 05631312 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_40.dll
2014-03-04 03:30 - 2008-10-15 06:22 - 04379984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_40.dll
2014-03-04 03:30 - 2008-10-15 06:22 - 02605920 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_40.dll
2014-03-04 03:30 - 2008-10-15 06:22 - 02036576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_40.dll
2014-03-04 03:30 - 2008-10-15 06:22 - 00519000 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_40.dll
2014-03-04 03:30 - 2008-10-15 06:22 - 00452440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_40.dll
2014-03-04 03:30 - 2008-07-31 10:41 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_2.dll
2014-03-04 03:30 - 2008-07-31 10:41 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_2.dll
2014-03-04 03:30 - 2008-07-31 10:41 - 00072200 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_1.dll
2014-03-04 03:30 - 2008-07-31 10:41 - 00068616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_1.dll
2014-03-04 03:30 - 2008-07-31 10:40 - 00513544 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_2.dll
2014-03-04 03:30 - 2008-07-31 10:40 - 00509448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_2.dll
2014-03-04 03:30 - 2008-07-10 11:01 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_39.dll
2014-03-04 03:30 - 2008-07-10 11:00 - 04992520 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_39.dll
2014-03-04 03:30 - 2008-07-10 11:00 - 03851784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_39.dll
2014-03-04 03:30 - 2008-07-10 11:00 - 01942552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_39.dll
2014-03-04 03:30 - 2008-07-10 11:00 - 01493528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_39.dll
2014-03-04 03:30 - 2008-07-10 11:00 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_39.dll
2014-03-04 03:30 - 2008-05-30 14:19 - 00511496 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_1.dll
2014-03-04 03:30 - 2008-05-30 14:19 - 00507400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_1.dll
2014-03-04 03:30 - 2008-05-30 14:18 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_1.dll
2014-03-04 03:30 - 2008-05-30 14:18 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_1.dll
2014-03-04 03:30 - 2008-05-30 14:17 - 00068104 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_0.dll
2014-03-04 03:30 - 2008-05-30 14:17 - 00065032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_0.dll
2014-03-04 03:30 - 2008-05-30 14:17 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_4.dll
2014-03-04 03:30 - 2008-05-30 14:16 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_4.dll
2014-03-04 03:30 - 2008-05-30 14:11 - 04991496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_38.dll
2014-03-04 03:30 - 2008-05-30 14:11 - 03850760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_38.dll
2014-03-04 03:30 - 2008-05-30 14:11 - 01941528 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_38.dll
2014-03-04 03:30 - 2008-05-30 14:11 - 01491992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_38.dll
2014-03-04 03:30 - 2008-05-30 14:11 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_38.dll
2014-03-04 03:30 - 2008-05-30 14:11 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_38.dll
2014-03-04 03:30 - 2008-03-05 16:04 - 00489480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_0.dll
2014-03-04 03:30 - 2008-03-05 16:03 - 00479752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_0.dll
2014-03-04 03:30 - 2008-03-05 16:03 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_0.dll
2014-03-04 03:30 - 2008-03-05 16:03 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_0.dll
2014-03-04 03:30 - 2008-03-05 16:00 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_3.dll
2014-03-04 03:30 - 2008-03-05 16:00 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_3.dll
2014-03-04 03:30 - 2008-03-05 15:56 - 04910088 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_37.dll
2014-03-04 03:30 - 2008-03-05 15:56 - 03786760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_37.dll
2014-03-04 03:30 - 2008-03-05 15:56 - 01860120 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_37.dll
2014-03-04 03:30 - 2008-03-05 15:56 - 01420824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_37.dll
2014-03-04 03:30 - 2008-02-05 23:07 - 00529424 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_37.dll
2014-03-04 03:30 - 2008-02-05 23:07 - 00462864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_37.dll
2014-03-04 03:30 - 2007-10-22 03:40 - 00411656 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_10.dll
2014-03-04 03:30 - 2007-10-22 03:39 - 00267272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_10.dll
2014-03-04 03:30 - 2007-10-22 03:37 - 00021000 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_2.dll
2014-03-04 03:30 - 2007-10-22 03:37 - 00017928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_2.dll
2014-03-04 03:30 - 2007-10-12 15:14 - 05081608 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_36.dll
2014-03-04 03:30 - 2007-10-12 15:14 - 03734536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_36.dll
2014-03-04 03:30 - 2007-10-12 15:14 - 02006552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_36.dll
2014-03-04 03:30 - 2007-10-12 15:14 - 01374232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_36.dll
2014-03-04 03:30 - 2007-10-02 09:56 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_36.dll
2014-03-04 03:30 - 2007-10-02 09:56 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_36.dll
2014-03-04 03:30 - 2007-07-20 00:57 - 00411496 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_9.dll
2014-03-04 03:30 - 2007-07-20 00:57 - 00267112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_9.dll
2014-03-04 03:30 - 2007-07-19 18:14 - 05073256 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_35.dll
2014-03-04 03:30 - 2007-07-19 18:14 - 03727720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_35.dll
2014-03-04 03:30 - 2007-07-19 18:14 - 01985904 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_35.dll
2014-03-04 03:30 - 2007-07-19 18:14 - 01358192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_35.dll
2014-03-04 03:30 - 2007-07-19 18:14 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_35.dll
2014-03-04 03:30 - 2007-07-19 18:14 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_35.dll
2014-03-04 03:30 - 2007-06-20 20:49 - 00409960 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_8.dll
2014-03-04 03:30 - 2007-06-20 20:46 - 00266088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_8.dll
2014-03-04 03:30 - 2007-05-16 16:45 - 04496232 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_34.dll
2014-03-04 03:30 - 2007-05-16 16:45 - 03497832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_34.dll
2014-03-04 03:30 - 2007-05-16 16:45 - 01401200 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_34.dll
2014-03-04 03:30 - 2007-05-16 16:45 - 01124720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_34.dll
2014-03-04 03:30 - 2007-05-16 16:45 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_34.dll
2014-03-04 03:30 - 2007-05-16 16:45 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_34.dll
2014-03-04 03:30 - 2007-04-04 18:55 - 00403304 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_7.dll
2014-03-04 03:30 - 2007-04-04 18:55 - 00261480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_7.dll
2014-03-04 03:30 - 2007-04-04 18:54 - 00107368 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_3.dll
2014-03-04 03:30 - 2007-04-04 18:53 - 00081768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_3.dll
2014-03-04 03:30 - 2007-03-15 16:57 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_33.dll
2014-03-04 03:30 - 2007-03-15 16:57 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_33.dll
2014-03-04 03:30 - 2007-03-12 16:42 - 04494184 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_33.dll
2014-03-04 03:30 - 2007-03-12 16:42 - 03495784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_33.dll
2014-03-04 03:30 - 2007-03-12 16:42 - 01400176 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_33.dll
2014-03-04 03:30 - 2007-03-12 16:42 - 01123696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_33.dll
2014-03-04 03:30 - 2007-03-05 12:42 - 00017688 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_1.dll
2014-03-04 03:30 - 2007-03-05 12:42 - 00015128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_1.dll
2014-03-04 03:30 - 2007-01-24 15:27 - 00393576 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_6.dll
2014-03-04 03:30 - 2007-01-24 15:27 - 00255848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_6.dll
2014-03-04 03:30 - 2006-12-08 12:02 - 00251672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_5.dll
2014-03-04 03:30 - 2006-12-08 12:00 - 00390424 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_5.dll
2014-03-04 03:30 - 2006-11-29 13:06 - 04398360 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_32.dll
2014-03-04 03:30 - 2006-11-29 13:06 - 03426072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_32.dll
2014-03-04 03:30 - 2006-11-29 13:06 - 00469264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10.dll
2014-03-04 03:30 - 2006-11-29 13:06 - 00440080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10.dll
2014-03-04 03:30 - 2006-09-28 16:05 - 00237848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_4.dll
2014-03-04 03:30 - 2006-09-28 16:04 - 00364824 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_4.dll
2014-03-04 03:30 - 2006-07-28 09:31 - 00083736 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_2.dll
2014-03-04 03:30 - 2006-07-28 09:30 - 00363288 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_3.dll
2014-03-04 03:30 - 2006-07-28 09:30 - 00236824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_3.dll
2014-03-04 03:30 - 2006-07-28 09:30 - 00062744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_2.dll
2014-03-04 03:30 - 2006-05-31 07:24 - 00230168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_2.dll
2014-03-04 03:30 - 2006-05-31 07:22 - 00354072 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_2.dll
2014-03-04 03:30 - 2006-03-31 12:40 - 00352464 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_1.dll
2014-03-04 03:30 - 2006-03-31 12:39 - 00229584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_1.dll
2014-03-04 03:30 - 2006-03-31 12:39 - 00083664 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_1.dll
2014-03-04 03:30 - 2006-03-31 12:39 - 00062672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_1.dll
2014-03-04 03:29 - 2006-03-31 12:41 - 03927248 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_30.dll
2014-03-04 03:29 - 2006-03-31 12:40 - 02388176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_30.dll
2014-03-04 03:29 - 2006-02-03 08:43 - 03830992 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_29.dll
2014-03-04 03:29 - 2006-02-03 08:43 - 02332368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_29.dll
2014-03-04 03:29 - 2006-02-03 08:42 - 00355536 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_0.dll
2014-03-04 03:29 - 2006-02-03 08:42 - 00230096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_0.dll
2014-03-04 03:29 - 2006-02-03 08:41 - 00016592 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_0.dll
2014-03-04 03:29 - 2006-02-03 08:41 - 00014032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_0.dll
2014-03-04 03:29 - 2005-12-05 18:09 - 03815120 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_28.dll
2014-03-04 03:29 - 2005-12-05 18:09 - 02323664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_28.dll
2014-03-04 03:29 - 2005-07-22 19:59 - 03807440 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_27.dll
2014-03-04 03:29 - 2005-07-22 19:59 - 02319568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_27.dll
2014-03-04 03:29 - 2005-05-26 15:34 - 03767504 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_26.dll
2014-03-04 03:29 - 2005-05-26 15:34 - 02297552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_26.dll
2014-03-04 03:29 - 2005-03-18 17:19 - 03823312 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_25.dll
2014-03-04 03:29 - 2005-03-18 17:19 - 02337488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_25.dll
2014-03-04 03:29 - 2005-02-05 19:45 - 03544272 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_24.dll
2014-03-04 03:29 - 2005-02-05 19:45 - 02222800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_24.dll
2014-03-03 23:44 - 2014-03-03 23:49 - 00000000 ____D () C:\Program Files (x86)\dumps
2014-03-03 17:02 - 2014-03-03 17:02 - 00000861 _____ () C:\Users\---\Desktop\µTorrent.lnk
2014-03-03 17:02 - 2014-03-03 17:02 - 00000841 _____ () C:\Users\---\AppData\Roaming\Microsoft\Windows\Start Menu\µTorrent.lnk
2014-03-02 15:31 - 2014-03-02 15:31 - 00000000 ____D () C:\ProgramData\Futuremark
2014-03-02 15:06 - 2014-03-02 15:07 - 00000000 ____D () C:\Users\---\Documents\3DMark 11
2014-03-02 15:04 - 2014-03-02 15:04 - 00000000 ____D () C:\Users\---\AppData\Roaming\QuickScan
2014-03-02 14:19 - 2014-03-02 21:02 - 00000000 ____D () C:\Program Files (x86)\Futuremark
2014-03-02 13:36 - 2014-03-02 13:36 - 00000000 ____D () C:\Users\---\Documents\PCMark 8
2014-03-02 13:35 - 2014-03-02 15:31 - 00000022 _____ () C:\Windows\GPU-Z.INI
2014-03-02 13:29 - 2014-03-02 15:06 - 00000000 ____D () C:\Users\---\AppData\Local\Futuremark
2014-03-02 13:29 - 2014-03-02 13:35 - 00000000 ____D () C:\Users\---\Documents\3DMark
2014-03-02 13:29 - 2014-03-02 13:29 - 00000000 ____D () C:\Users\---\AppData\Local\IsolatedStorage
2014-03-02 13:27 - 2010-06-02 04:55 - 00527192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_7.dll
2014-03-02 13:27 - 2010-06-02 04:55 - 00518488 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_7.dll
2014-03-02 13:27 - 2010-06-02 04:55 - 00239960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_7.dll
2014-03-02 13:27 - 2010-06-02 04:55 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_7.dll
2014-03-02 13:27 - 2010-06-02 04:55 - 00077656 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_5.dll
2014-03-02 13:27 - 2010-06-02 04:55 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_5.dll
2014-03-02 13:27 - 2010-05-26 11:41 - 02526056 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_43.dll
2014-03-02 13:27 - 2010-05-26 11:41 - 02401112 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_43.dll
2014-03-02 13:27 - 2010-05-26 11:41 - 02106216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_43.dll
2014-03-02 13:27 - 2010-05-26 11:41 - 01998168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_43.dll
2014-03-02 13:27 - 2010-05-26 11:41 - 01907552 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_43.dll
2014-03-02 13:27 - 2010-05-26 11:41 - 01868128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_43.dll
2014-03-02 13:27 - 2010-05-26 11:41 - 00511328 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_43.dll
2014-03-02 13:27 - 2010-05-26 11:41 - 00470880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_43.dll
2014-03-02 13:27 - 2010-05-26 11:41 - 00276832 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_43.dll
2014-03-02 13:27 - 2010-05-26 11:41 - 00248672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_43.dll
2014-03-02 13:27 - 2006-09-28 16:05 - 03977496 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_31.dll
2014-03-02 13:27 - 2006-09-28 16:05 - 02414360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_31.dll
2014-03-02 10:20 - 2014-03-02 10:22 - 00000000 ____D () C:\Program Files\HWiNFO64
2014-03-02 10:20 - 2014-03-02 10:20 - 00031648 _____ (REALiX(tm)) C:\Windows\system32\Drivers\HWiNFO64A.SYS
2014-03-01 19:49 - 2014-03-01 19:52 - 00000000 ____D () C:\Users\---\Desktop\fahrt
2014-02-27 16:36 - 2014-01-09 03:22 - 05694464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2014-02-27 16:36 - 2014-01-03 23:44 - 06574592 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2014-02-27 02:52 - 2014-02-27 02:52 - 00068440 _____ (Lenovo.) C:\Windows\system32\ibmpmsvc.exe
2014-02-27 02:52 - 2014-02-27 02:52 - 00060760 _____ (Lenovo.) C:\Windows\system32\ibmpmctl.exe
2014-02-27 02:52 - 2014-02-27 02:52 - 00057144 _____ (Lenovo.) C:\Windows\system32\Drivers\ibmpmdrv.sys
2014-02-27 02:52 - 2014-02-27 02:52 - 00040280 _____ (Lenovo.) C:\Windows\system32\tpinspm.dll
2014-02-22 20:09 - 2014-02-22 20:11 - 16204160 _____ (Geek Software GmbH ) C:\Users\---\Desktop\pdf24-creator-6.3.2.exe
==================== One Month Modified Files and Folders =======
2014-03-24 20:44 - 2014-03-23 23:10 - 00000000 ____D () C:\FRST
2014-03-24 20:44 - 2014-03-23 23:08 - 00000000 ____D () C:\Users\---\Desktop\virus
2014-03-24 20:37 - 2014-03-24 20:37 - 00000000 ____D () C:\Windows\ERUNT
2014-03-24 20:31 - 2014-03-24 20:06 - 00000000 ____D () C:\Programme (x64)
2014-03-24 20:31 - 2009-07-14 05:45 - 00026544 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-03-24 20:31 - 2009-07-14 05:45 - 00026544 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-03-24 20:28 - 2011-04-12 08:43 - 00702436 _____ () C:\Windows\system32\perfh007.dat
2014-03-24 20:28 - 2011-04-12 08:43 - 00150044 _____ () C:\Windows\system32\perfc007.dat
2014-03-24 20:28 - 2009-07-14 06:13 - 01626920 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-03-24 20:26 - 2014-03-24 20:18 - 00000000 ____D () C:\AdwCleaner
2014-03-24 20:24 - 2014-03-23 23:40 - 00000224 _____ () C:\Windows\setupact.log
2014-03-24 20:24 - 2014-01-12 09:22 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-03-24 20:24 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-03-24 20:23 - 2014-03-07 09:51 - 00994821 _____ () C:\Windows\WindowsUpdate.log
2014-03-24 20:22 - 2014-02-11 12:17 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA1cf271adaaa5c5f.job
2014-03-24 09:55 - 2014-03-24 09:44 - 00102480 _____ () C:\Users\---\Desktop\Neues Textdokument.txt
2014-03-24 09:45 - 2014-01-10 21:53 - 00000000 ____D () C:\Users\---\AppData\Roaming\Nitro PDF
2014-03-23 23:40 - 2014-03-23 23:40 - 00415048 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-03-23 23:40 - 2014-03-23 23:40 - 00029054 _____ () C:\Windows\PFRO.log
2014-03-23 23:40 - 2014-03-23 23:40 - 00000000 _____ () C:\Windows\setuperr.log
2014-03-23 23:33 - 2014-03-23 23:33 - 00001118 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-03-23 23:33 - 2014-03-23 23:33 - 00000000 ____D () C:\Users\---\AppData\Roaming\Malwarebytes
2014-03-23 23:33 - 2014-03-23 23:33 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-03-23 23:33 - 2014-03-23 23:33 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-03-23 23:09 - 2014-03-23 23:09 - 00000168 _____ () C:\Users\---\defogger_reenable
2014-03-23 23:09 - 2014-01-04 00:47 - 00000000 ____D () C:\Users\---
2014-03-23 22:59 - 2014-03-23 21:01 - 00000000 ____D () C:\Users\---\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-03-23 22:59 - 2014-01-14 14:31 - 00000000 ____D () C:\Portable Programme
2014-03-23 22:58 - 2014-03-23 22:58 - 00030381 _____ () C:\Users\---\Desktop\quiethdd_v1.5-build250.zip
2014-03-23 22:57 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-03-23 22:19 - 2014-03-20 20:37 - 00000209 _____ () C:\Users\---\Desktop\cd_conny koppers und anti-viren informationen.txt
2014-03-23 21:04 - 2014-03-14 19:28 - 00000000 ____D () C:\Program Files (x86)\Steam
2014-03-23 21:01 - 2014-01-24 15:24 - 00000000 ____D () C:\Program Files\Rainmeter
2014-03-19 15:24 - 2014-03-19 15:23 - 26437344 _____ (Microsoft Corporation) C:\Users\---\Desktop\Windows-KB890830-x64-V5.10_2.exe
2014-03-19 15:23 - 2014-03-19 15:23 - 63320784 _____ (Microsoft Corporation) C:\Users\---\Desktop\IE11-Windows6.1-x64-de-de.exe
2014-03-19 15:22 - 2014-03-19 15:21 - 26437344 _____ (Microsoft Corporation) C:\Users\---\Desktop\Windows-KB890830-x64-V5.10.exe
2014-03-19 14:59 - 2014-01-10 21:58 - 00001156 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-03-19 14:59 - 2014-01-05 13:36 - 00000727 _____ () C:\Users\---\Desktop\Nightly.lnk
2014-03-19 14:43 - 2014-03-19 14:43 - 01172664 _____ (AnyProtect.com) C:\Users\---\AppData\Local\nsq3D63.tmp
2014-03-19 14:41 - 2014-03-19 14:41 - 00002066 _____ () C:\Users\Public\Desktop\MyPhoneExplorer.lnk
2014-03-19 14:41 - 2014-03-19 14:41 - 00000000 ____D () C:\Users\---\AppData\Roaming\MyPhoneExplorer
2014-03-19 14:41 - 2014-03-19 14:41 - 00000000 ____D () C:\Program Files (x86)\MyPhoneExplorer
2014-03-17 00:18 - 2014-03-16 23:53 - 00000000 ____D () C:\Users\---\Documents\Battlefield Heroes
2014-03-17 00:09 - 2014-03-16 23:57 - 00282296 _____ () C:\Windows\SysWOW64\PnkBstrB.xtr
2014-03-17 00:09 - 2014-03-16 23:51 - 00282296 _____ () C:\Windows\SysWOW64\PnkBstrB.exe
2014-03-17 00:09 - 2014-03-16 23:51 - 00076888 _____ () C:\Windows\SysWOW64\PnkBstrA.exe
2014-03-16 23:57 - 2014-03-16 23:57 - 00000000 ____D () C:\Users\---\AppData\Local\PunkBuster
2014-03-16 23:57 - 2014-03-16 23:51 - 00270240 _____ () C:\Windows\SysWOW64\PnkBstrB.ex0
2014-03-16 19:12 - 2014-03-16 19:12 - 00000000 ____D () C:\Users\---\AppData\Local\Warframe
2014-03-16 19:09 - 2014-03-15 21:19 - 00000000 ___RD () C:\Users\---\Desktop\zeitvertreib
2014-03-16 18:39 - 2014-03-16 18:39 - 00000766 _____ () C:\Users\---\Desktop\MediathekView.lnk
2014-03-16 18:36 - 2014-03-16 13:01 - 00000000 ____D () C:\Users\---\Documents\My Games
2014-03-16 18:22 - 2014-03-16 18:22 - 00000000 ____D () C:\Users\---\AppData\Roaming\TheBannerSagaFactions
2014-03-16 16:16 - 2014-01-06 20:52 - 00000000 ____D () C:\Users\---\AppData\Roaming\vlc
2014-03-16 12:47 - 2014-03-16 12:47 - 00000000 ____D () C:\Crash
2014-03-16 11:22 - 2014-03-16 11:22 - 00000000 ____D () C:\Users\---\AppData\Local\SCE
2014-03-16 09:42 - 2014-03-16 09:39 - 00000000 ____D () C:\Users\---\MediathekView
2014-03-16 09:34 - 2014-03-16 09:33 - 00000000 ____D () C:\Users\---\.mediathek3
2014-03-16 09:33 - 2014-03-16 09:33 - 00312744 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2014-03-16 09:33 - 2014-03-16 09:33 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2014-03-16 09:33 - 2014-03-16 09:33 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2014-03-16 09:33 - 2014-03-16 09:33 - 00108968 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2014-03-16 09:32 - 2014-03-16 09:32 - 00000000 ____D () C:\ProgramData\Sun
2014-03-16 09:32 - 2014-03-16 09:32 - 00000000 ____D () C:\ProgramData\Oracle
2014-03-16 09:32 - 2014-03-16 09:32 - 00000000 ____D () C:\Program Files\Java
2014-03-16 09:30 - 2014-03-16 09:30 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-03-16 09:30 - 2014-03-16 09:30 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-03-16 09:30 - 2014-03-16 09:30 - 00174504 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-03-16 09:30 - 2014-03-16 09:30 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-03-16 09:30 - 2014-03-16 09:30 - 00000000 ____D () C:\Program Files (x86)\Java
2014-03-15 15:42 - 2014-03-15 15:42 - 00000000 ____D () C:\Users\---\AppData\Roaming\Carbon
2014-03-14 19:28 - 2014-03-14 19:28 - 00000972 _____ () C:\Users\Public\Desktop\Steam.lnk
2014-03-14 15:39 - 2014-01-06 16:02 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-03-14 15:39 - 2014-01-06 16:02 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-03-14 13:00 - 2014-02-15 12:37 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-03-14 13:00 - 2014-02-15 12:37 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
2014-03-13 14:23 - 2014-02-14 14:06 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-03-07 15:09 - 2014-01-10 22:03 - 00000000 ____D () C:\Users\---\dwhelper
2014-03-07 13:59 - 2009-07-14 06:08 - 00032632 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-03-04 17:27 - 2014-01-09 16:04 - 00000000 ____D () C:\Users\---\AppData\Roaming\uTorrent
2014-03-04 03:30 - 2014-03-04 03:30 - 00000000 ____D () C:\Users\---\AppData\Local\EdgeOfReality
2014-03-03 23:49 - 2014-03-03 23:44 - 00000000 ____D () C:\Program Files (x86)\dumps
2014-03-03 17:02 - 2014-03-03 17:02 - 00000861 _____ () C:\Users\---\Desktop\µTorrent.lnk
2014-03-03 17:02 - 2014-03-03 17:02 - 00000841 _____ () C:\Users\---\AppData\Roaming\Microsoft\Windows\Start Menu\µTorrent.lnk
2014-03-02 21:02 - 2014-03-02 14:19 - 00000000 ____D () C:\Program Files (x86)\Futuremark
2014-03-02 15:44 - 2014-01-05 23:58 - 00007620 _____ () C:\Users\---\AppData\Local\Resmon.ResmonCfg
2014-03-02 15:31 - 2014-03-02 15:31 - 00000000 ____D () C:\ProgramData\Futuremark
2014-03-02 15:31 - 2014-03-02 13:35 - 00000022 _____ () C:\Windows\GPU-Z.INI
2014-03-02 15:25 - 2014-01-06 16:43 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-03-02 15:07 - 2014-03-02 15:06 - 00000000 ____D () C:\Users\---\Documents\3DMark 11
2014-03-02 15:06 - 2014-03-02 13:29 - 00000000 ____D () C:\Users\---\AppData\Local\Futuremark
2014-03-02 15:04 - 2014-03-02 15:04 - 00000000 ____D () C:\Users\---\AppData\Roaming\QuickScan
2014-03-02 14:34 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\LiveKernelReports
2014-03-02 14:05 - 2014-01-04 20:02 - 90015360 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-03-02 13:36 - 2014-03-02 13:36 - 00000000 ____D () C:\Users\---\Documents\PCMark 8
2014-03-02 13:35 - 2014-03-02 13:29 - 00000000 ____D () C:\Users\---\Documents\3DMark
2014-03-02 13:29 - 2014-03-02 13:29 - 00000000 ____D () C:\Users\---\AppData\Local\IsolatedStorage
2014-03-02 10:22 - 2014-03-02 10:20 - 00000000 ____D () C:\Program Files\HWiNFO64
2014-03-02 10:20 - 2014-03-02 10:20 - 00031648 _____ (REALiX(tm)) C:\Windows\system32\Drivers\HWiNFO64A.SYS
2014-03-01 19:52 - 2014-03-01 19:49 - 00000000 ____D () C:\Users\---\Desktop\fahrt
2014-03-01 07:05 - 2014-03-13 13:44 - 23133696 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-03-01 06:17 - 2014-03-13 13:44 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-03-01 06:16 - 2014-03-13 13:44 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-03-01 05:58 - 2014-03-13 13:44 - 02765824 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-03-01 05:52 - 2014-03-13 13:44 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-03-01 05:51 - 2014-03-13 13:44 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-03-01 05:42 - 2014-03-13 13:44 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-03-01 05:40 - 2014-03-13 13:44 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-03-01 05:37 - 2014-03-13 13:44 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-03-01 05:33 - 2014-03-13 13:44 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-03-01 05:33 - 2014-03-13 13:44 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-03-01 05:32 - 2014-03-13 13:44 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-03-01 05:30 - 2014-03-13 13:44 - 17074688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-03-01 05:23 - 2014-03-13 13:44 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-03-01 05:17 - 2014-03-13 13:44 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-03-01 05:11 - 2014-03-13 13:44 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-03-01 05:02 - 2014-03-13 13:44 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-03-01 04:54 - 2014-03-13 13:44 - 05768704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-03-01 04:52 - 2014-03-13 13:44 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-03-01 04:51 - 2014-03-13 13:44 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-03-01 04:47 - 2014-03-13 13:44 - 02168320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-03-01 04:43 - 2014-03-13 13:44 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-03-01 04:43 - 2014-03-13 13:44 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-03-01 04:42 - 2014-03-13 13:44 - 00627200 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-03-01 04:40 - 2014-03-13 13:44 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-03-01 04:38 - 2014-03-13 13:44 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-03-01 04:37 - 2014-03-13 13:44 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-03-01 04:35 - 2014-03-13 13:44 - 02041856 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-03-01 04:18 - 2014-03-13 13:44 - 13051904 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-03-01 04:16 - 2014-03-13 13:44 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-03-01 04:14 - 2014-03-13 13:44 - 04244480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-03-01 04:10 - 2014-03-13 13:44 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-03-01 04:03 - 2014-03-13 13:44 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-03-01 04:00 - 2014-03-13 13:44 - 01964032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-03-01 03:57 - 2014-03-13 13:44 - 11266048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-03-01 03:38 - 2014-03-13 13:44 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-03-01 03:32 - 2014-03-13 13:44 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-03-01 03:27 - 2014-03-13 13:44 - 01156096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-03-01 03:25 - 2014-03-13 13:44 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-03-01 03:25 - 2014-03-13 13:44 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-02-27 21:13 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\rescache
2014-02-27 02:52 - 2014-02-27 02:52 - 00068440 _____ (Lenovo.) C:\Windows\system32\ibmpmsvc.exe
2014-02-27 02:52 - 2014-02-27 02:52 - 00060760 _____ (Lenovo.) C:\Windows\system32\ibmpmctl.exe
2014-02-27 02:52 - 2014-02-27 02:52 - 00057144 _____ (Lenovo.) C:\Windows\system32\Drivers\ibmpmdrv.sys
2014-02-27 02:52 - 2014-02-27 02:52 - 00040280 _____ (Lenovo.) C:\Windows\system32\tpinspm.dll
2014-02-23 00:05 - 2014-01-06 20:50 - 00000000 ____D () C:\Users\---\AppData\Roaming\Nitro
2014-02-22 20:11 - 2014-02-22 20:09 - 16204160 _____ (Geek Software GmbH ) C:\Users\---\Desktop\pdf24-creator-6.3.2.exe
Files to move or delete:
====================
C:\ProgramData\PKP_DLes.DAT
C:\ProgramData\PKP_DLet.DAT
C:\ProgramData\PKP_DLev.DAT
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2014-03-10 12:42
==================== End Of Log ============================
--- --- --- mbam-log-2014-03-24 (21-00-40).txt Code:
ATTFilter Malwarebytes Anti-Malware 1.75.0.1300 www.malwarebytes.org Datenbank Version: v2014.03.23.10 Windows 7 Service Pack 1 x64 NTFS Internet Explorer 11.0.9600.16521 --- :: --- -PC [Administrator] 24.03.2014 21:00:40 mbam-log-2014-03-24 (21-00-40).txt Art des Suchlaufs: Quick-Scan Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM Deaktivierte Suchlaufeinstellungen: P2P Durchsuchte Objekte: 215385 Laufzeit: 2 Minute(n), 3 Sekunde(n) Infizierte Speicherprozesse: 0 (Keine bösartigen Objekte gefunden) Infizierte Speichermodule: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungsschlüssel: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungswerte: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateiobjekte der Registrierung: 0 (Keine bösartigen Objekte gefunden) Infizierte Verzeichnisse: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateien: 0 (Keine bösartigen Objekte gefunden) (Ende) Habe ich noch Trojaner und / oder ähnliches drauf? Nutzt der ESET Smart Security etwas? Meine vielen Programme beispielsweise in der Softwareliste werden nicht gelistet. Viele Grüße  Walther --- Geändert von Walther (24.03.2014 um 21:09 Uhr) |
|
25.03.2014, 12:40
| #4 |
| /// the machine /// TB-Ausbilder | Nach Download von "MyphoneExplorer" von chip.de - Spyware, Adware - jetzt Trojaner! (Win32/Injected.F Trojaner) ESET ist schon nicht schlecht. Bitte nen Vollscan mit ESET machen. Downloade Dir bitte  SecurityCheck und:
und ein frisches FRST log bitte. Noch Probleme?
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
27.03.2014, 15:13
| #5 |
| | Nach Download von "MyphoneExplorer" von chip.de - Spyware, Adware - jetzt Trojaner! (Win32/Injected.F Trojaner) Hallo Danke für Deine Hilfe. Ja ich hab noch Probleme, z.B. sind nach wievor die Einträge der meisten meiner installierten Programme nicht in der Softwareliste (dort wo ich Programme deinstalliere in der Systemsteuerung) wieder aufgetaucht.. Ich wollte mal fragen was eigentlich mit diesen ganzen LOG-Datein passiert? Schaust Du Dir die wirklich alle an bzw. durch? Da steht ja im Prinzip mein ganzes Verhalten am PC drinn? Sind dass nicht sehr sensible Daten? Bin ich denn jetzt Viren - und vorallem Trojanerfrei? Hier die geforderten LOGS: chekup.txt Code:
ATTFilter Results of screen317's Security Check version 0.99.80 Windows 7 Service Pack 1 x64 (UAC is disabled!) Internet Explorer 11 ``````````````Antivirus/Firewall Check:`````````````` ESET Smart Security 7.0 Antivirus up to date! `````````Anti-malware/Other Utilities Check:````````` Malwarebytes Anti-Malware Version 1.75.0.1300 Adobe Flash Player 12.0.0.77 ````````Process Check: objlist.exe by Laurent```````` ESET NOD32 Antivirus egui.exe ESET NOD32 Antivirus ekrn.exe --- Desktop temp desktop workflow 24.03.2014\virus\SecurityCheck.exe `````````````````System Health check````````````````` Total Fragmentation on Drive C: ````````````````````End of Log`````````````````````` FRST.txt FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 13-03-2014
Ran by --- (administrator) on --- -PC on 27-03-2014 15:04:52
Running from C:\Users\---\Desktop\temp desktop workflow\24.03.2014\virus
Windows 7 Ultimate Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(Lenovo.) C:\Windows\system32\ibmpmsvc.exe
(ESET) C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Nitro PDF Software) C:\Program Files\Common Files\Nitro\Reader\3.0\NitroPDFReaderDriverService3x64.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.22.5\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.22.5\GoogleCrashHandler64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(ESET) C:\Program Files\ESET\ESET Smart Security\egui.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Intel Corporation) C:\Windows\system32\igfxsrvc.exe
() C:\Portable Programme\quiethdd_v1.5-build250\quietHDD.exe
(Synaptics Incorporated) C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
() C:\Program Files\Rainmeter\Rainmeter.exe
(Vimicro) C:\Program Files (x86)\USB Camera\VM331STI.EXE
(Dolby Laboratories Inc.) C:\Program Files (x86)\Dolby Advanced Audio v2\pcee4.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
(Realsil Microelectronics Inc.) C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13538376 2013-05-13] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_Dolby] - C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1307720 2013-04-24] (Realtek Semiconductor)
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2985712 2013-06-04] (Synaptics Incorporated)
HKLM\...\Run: [egui] - C:\Program Files\ESET\ESET Smart Security\egui.exe [5618456 2013-09-12] (ESET)
HKLM-x32\...\Run: [USB3MON] - C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [291608 2012-03-27] (Intel Corporation)
HKLM-x32\...\Run: [IMSS] - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe [134616 2013-03-12] (Intel Corporation)
HKLM-x32\...\Run: [331BigDog] - C:\Program Files (x86)\USB Camera\VM331STI.EXE [548864 2013-03-12] (Vimicro)
HKLM-x32\...\Run: [Dolby Advanced Audio v2] - C:\Program Files (x86)\Dolby Advanced Audio v2\pcee4.exe [508656 2012-08-31] (Dolby Laboratories Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
AppInit_DLLs: C:\PROGRA~2\SupTab\SEARCH~2.DLL => C:\PROGRA~2\SupTab\SEARCH~2.DLL File Not Found
Startup: C:\Users\---\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\quietHDD.lnk
ShortcutTarget: quietHDD.lnk -> C:\Portable Programme\quiethdd_v1.5-build250\quietHDD.exe ()
Startup: C:\Users\---\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Rainmeter.lnk
ShortcutTarget: Rainmeter.lnk -> C:\Program Files\Rainmeter\Rainmeter.exe ()
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x93C303C87C09CF01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
StartMenuInternet: IEXPLORE.EXE - iexplore.exe
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL =
SearchScopes: HKCU - {30F6A740-DFA4-4171-BE96-77F7121CAAF3} URL = hxxp://go.web.de/tb/ie_searchplugin/?q={searchTerms}&enc=UTF-8
SearchScopes: HKCU - {4A42B8FA-6641-4E7C-8EF3-1ECA946196BC} URL = hxxp://go.1und1.de/tb/ie_searchplugin/?q={searchTerms}&enc=UTF-8
SearchScopes: HKCU - {60BD6C21-C55E-46A5-91E4-F1FC6CF7C937} URL = hxxp://go.mail.com/tb/en-us/ie_searchplugin/?q={searchTerms}&enc=UTF-8
SearchScopes: HKCU - {C313B64E-9B2D-4820-AD58-17921C642E8B} URL = hxxp://go.gmx.de/tb/ie_searchplugin/?q={searchTerms}&enc=UTF-8
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
FireFox:
========
FF ProfilePath: C:\Users\---\AppData\Roaming\Mozilla\Firefox\Profiles\bda2rjt1.default
FF NewTab: chrome://quick_start/content/index.html
FF Homepage: about:superstart
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_77.dll ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.1.1 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_77.dll ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=3.0.72 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin-x32: @nitropdf.com/NitroPDF - C:\Program Files (x86)\Nitro\Reader 3\npnitromozilla.dll (Nitro PDF)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF SearchPlugin: C:\Users\---\AppData\Roaming\Mozilla\Firefox\Profiles\bda2rjt1.default\searchplugins\englische-ergebnisse.xml
FF SearchPlugin: C:\Users\---\AppData\Roaming\Mozilla\Firefox\Profiles\bda2rjt1.default\searchplugins\gmx-suche.xml
FF SearchPlugin: C:\Users\---\AppData\Roaming\Mozilla\Firefox\Profiles\bda2rjt1.default\searchplugins\lastminute.xml
FF SearchPlugin: C:\Users\---\AppData\Roaming\Mozilla\Firefox\Profiles\bda2rjt1.default\searchplugins\webde-suche.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Battlefield Heroes Updater - C:\Users\---\AppData\Roaming\Mozilla\Firefox\Profiles\bda2rjt1.default\Extensions\battlefieldheroespatcher@ea.com [2014-03-16]
FF Extension: BYTubeD - Bulk YouTube video Downloader - C:\Users\---\AppData\Roaming\Mozilla\Firefox\Profiles\bda2rjt1.default\Extensions\bytubed@cs213.cse.iitk.ac.in [2014-01-10]
FF Extension: Super Start - C:\Users\---\AppData\Roaming\Mozilla\Firefox\Profiles\bda2rjt1.default\Extensions\superstart@enjoyfreeware.org [2014-03-02]
FF Extension: YouTube Unblocker - C:\Users\---\AppData\Roaming\Mozilla\Firefox\Profiles\bda2rjt1.default\Extensions\youtubeunblocker@unblocker.yt [2014-02-27]
FF Extension: DownloadHelper - C:\Users\---\AppData\Roaming\Mozilla\Firefox\Profiles\bda2rjt1.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} [2014-03-25]
FF Extension: facepaste - C:\Users\---\AppData\Roaming\Mozilla\Firefox\Profiles\bda2rjt1.default\Extensions\facepaste.firefox.addon@azabani.com.xpi [2014-01-31]
FF Extension: WEB.DE MailCheck - C:\Users\---\AppData\Roaming\Mozilla\Firefox\Profiles\bda2rjt1.default\Extensions\toolbar@web.de.xpi [2014-01-11]
FF Extension: Session Manager - C:\Users\---\AppData\Roaming\Mozilla\Firefox\Profiles\bda2rjt1.default\Extensions\{1280606b-2510-4fe0-97ef-9b5a22eafe30}.xpi [2014-02-15]
FF Extension: DownThemAll! - C:\Users\---\AppData\Roaming\Mozilla\Firefox\Profiles\bda2rjt1.default\Extensions\{DDC359D1-844A-42a7-9AA1-88A850A938A8}.xpi [2014-01-14]
FF HKLM\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird
FF Extension: ESET Smart Security Extension - C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird [2014-01-09]
FF HKLM-x32\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird
FF Extension: ESET Smart Security Extension - C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird [2014-01-09]
==================== Services (Whitelisted) =================
S3 Adobe LM Service; C:\Program Files (x86)\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [72704 2014-01-18] (Adobe Systems)
R2 ekrn; C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe [1337752 2013-09-12] (ESET)
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [820184 2013-02-13] (Intel(R) Corporation)
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [131544 2013-03-12] (Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-03-12] (Intel Corporation)
R2 NitroReaderDriverReadSpool3; C:\Program Files\Common Files\Nitro\Reader\3.0\NitroPDFReaderDriverService3x64.exe [230416 2013-07-26] (Nitro PDF Software)
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76888 2014-03-17] ()
==================== Drivers (Whitelisted) ====================
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283064 2014-01-09] (Disc Soft Ltd)
R1 eamonm; C:\Windows\System32\DRIVERS\eamonm.sys [239320 2013-09-17] (ESET)
U5 edevmon; C:\Windows\System32\Drivers\edevmon.sys [239296 2013-09-17] (ESET)
R1 ehdrv; C:\Windows\System32\DRIVERS\ehdrv.sys [168256 2013-09-17] (ESET)
R2 epfw; C:\Windows\System32\DRIVERS\epfw.sys [220232 2013-09-17] (ESET)
R1 EpfwLWF; C:\Windows\System32\DRIVERS\EpfwLWF.sys [44120 2013-09-17] (ESET)
R0 epfwwfp; C:\Windows\System32\DRIVERS\epfwwfp.sys [62136 2013-09-17] (ESET)
R1 HWiNFO32; C:\Windows\system32\drivers\HWiNFO64A.SYS [31648 2014-03-02] (REALiX(tm))
R3 SmbDrvI; C:\Windows\System32\DRIVERS\Smb_driver_Intel.sys [33008 2013-06-04] (Synaptics Incorporated)
R1 UimBus; C:\Windows\System32\DRIVERS\uimx64.sys [90960 2013-03-15] (Windows (R) 2000 DDK provider)
R1 Uim_IM; C:\Windows\System32\Drivers\Uim_IMx64.sys [633680 2013-03-15] (Paragon)
R1 Uim_VIM; C:\Windows\System32\Drivers\uim_vimx64.sys [390352 2013-03-15] (Paragon)
R3 vm331avs; C:\Windows\System32\Drivers\vm331avs.sys [1045248 2013-03-01] (Vimicro Corporation)
S3 cpuz136; \??\C:\Windows\TEMP\cpuz136\cpuz136_x64.sys [X]
S3 GPUZ; \??\C:\Windows\TEMP\GPUZ.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2014-03-26 23:14 - 2014-03-27 14:54 - 00000000 ____D () C:\Programme (x64)
2014-03-26 22:52 - 2014-03-27 14:29 - 00000909 _____ () C:\Windows\setupact.log
2014-03-26 22:52 - 2014-03-26 22:52 - 00415048 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-03-26 22:52 - 2014-03-26 22:52 - 00000000 _____ () C:\Windows\setuperr.log
2014-03-25 13:46 - 2014-03-26 00:48 - 00000000 ____D () C:\Users\---\Documents\Diablo III
2014-03-25 11:50 - 2014-03-25 11:50 - 00000000 ____D () C:\Users\---\AppData\Roaming\WinRAR
2014-03-25 11:33 - 2014-03-25 11:33 - 00001187 _____ () C:\Users\---\Desktop\JDownloader.lnk
2014-03-25 02:35 - 2014-03-25 02:35 - 00000807 _____ () C:\Users\Public\Desktop\Diablo III.lnk
2014-03-25 02:21 - 2014-03-26 23:57 - 00000000 ____D () C:\Users\---\AppData\Local\Battle.net
2014-03-25 02:21 - 2014-03-25 02:26 - 00000000 ____D () C:\Users\---\AppData\Roaming\Battle.net
2014-03-25 02:21 - 2014-03-25 02:21 - 00000918 _____ () C:\Users\Public\Desktop\Battle.net.lnk
2014-03-25 02:21 - 2014-03-25 02:21 - 00000000 ____D () C:\Users\---\AppData\Local\Blizzard Entertainment
2014-03-25 02:21 - 2014-03-25 02:21 - 00000000 ____D () C:\ProgramData\Blizzard Entertainment
2014-03-25 02:12 - 2014-03-25 02:12 - 00000000 ____D () C:\ProgramData\Battle.net
2014-03-24 20:37 - 2014-03-24 20:37 - 00000000 ____D () C:\Windows\ERUNT
2014-03-24 20:18 - 2014-03-24 20:26 - 00000000 ____D () C:\AdwCleaner
2014-03-23 23:33 - 2014-03-23 23:33 - 00001118 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-03-23 23:33 - 2014-03-23 23:33 - 00000000 ____D () C:\Users\---\AppData\Roaming\Malwarebytes
2014-03-23 23:33 - 2014-03-23 23:33 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-03-23 23:33 - 2014-03-23 23:33 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-03-23 23:33 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-03-23 23:10 - 2014-03-27 15:04 - 00000000 ____D () C:\FRST
2014-03-23 23:09 - 2014-03-23 23:09 - 00000168 _____ () C:\Users\---\defogger_reenable
2014-03-23 21:01 - 2014-03-23 22:59 - 00000000 ____D () C:\Users\---\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-03-19 14:43 - 2014-03-19 14:43 - 01172664 _____ (AnyProtect.com) C:\Users\---\AppData\Local\nsq3D63.tmp
2014-03-19 14:41 - 2014-03-19 14:41 - 00000000 ____D () C:\Users\---\AppData\Roaming\MyPhoneExplorer
2014-03-19 14:41 - 2014-03-19 14:41 - 00000000 ____D () C:\Program Files (x86)\MyPhoneExplorer
2014-03-16 23:57 - 2014-03-17 00:09 - 00282296 _____ () C:\Windows\SysWOW64\PnkBstrB.xtr
2014-03-16 23:57 - 2014-03-16 23:57 - 00000000 ____D () C:\Users\---\AppData\Local\PunkBuster
2014-03-16 23:53 - 2014-03-17 00:18 - 00000000 ____D () C:\Users\---\Documents\Battlefield Heroes
2014-03-16 23:51 - 2014-03-17 00:09 - 00282296 _____ () C:\Windows\SysWOW64\PnkBstrB.exe
2014-03-16 23:51 - 2014-03-17 00:09 - 00076888 _____ () C:\Windows\SysWOW64\PnkBstrA.exe
2014-03-16 23:51 - 2014-03-16 23:57 - 00270240 _____ () C:\Windows\SysWOW64\PnkBstrB.ex0
2014-03-16 19:12 - 2014-03-16 19:12 - 00000000 ____D () C:\Users\---\AppData\Local\Warframe
2014-03-16 18:39 - 2014-03-16 18:39 - 00000766 _____ () C:\Users\---\Desktop\MediathekView.lnk
2014-03-16 18:22 - 2014-03-16 18:22 - 00000000 ____D () C:\Users\---\AppData\Roaming\TheBannerSagaFactions
2014-03-16 13:01 - 2014-03-16 18:36 - 00000000 ____D () C:\Users\---\Documents\My Games
2014-03-16 12:47 - 2014-03-16 12:47 - 00000000 ____D () C:\Crash
2014-03-16 11:22 - 2014-03-16 11:22 - 00000000 ____D () C:\Users\---\AppData\Local\SCE
2014-03-16 09:39 - 2014-03-25 20:29 - 00000000 ____D () C:\Users\---\MediathekView
2014-03-16 09:33 - 2014-03-16 09:34 - 00000000 ____D () C:\Users\---\.mediathek3
2014-03-16 09:33 - 2014-03-16 09:33 - 00312744 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2014-03-16 09:33 - 2014-03-16 09:33 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2014-03-16 09:33 - 2014-03-16 09:33 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2014-03-16 09:33 - 2014-03-16 09:33 - 00108968 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2014-03-16 09:32 - 2014-03-16 09:32 - 00000000 ____D () C:\ProgramData\Sun
2014-03-16 09:32 - 2014-03-16 09:32 - 00000000 ____D () C:\ProgramData\Oracle
2014-03-16 09:32 - 2014-03-16 09:32 - 00000000 ____D () C:\Program Files\Java
2014-03-16 09:30 - 2014-03-16 09:30 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-03-16 09:30 - 2014-03-16 09:30 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-03-16 09:30 - 2014-03-16 09:30 - 00174504 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-03-16 09:30 - 2014-03-16 09:30 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-03-16 09:30 - 2014-03-16 09:30 - 00000000 ____D () C:\Program Files (x86)\Java
2014-03-15 21:19 - 2014-03-16 19:09 - 00000000 ___RD () C:\Users\---\Desktop\zeitvertreib
2014-03-15 15:42 - 2014-03-15 15:42 - 00000000 ____D () C:\Users\---\AppData\Roaming\Carbon
2014-03-14 19:28 - 2014-03-26 12:58 - 00000000 ____D () C:\Program Files (x86)\Steam
2014-03-14 19:28 - 2014-03-14 19:28 - 00000972 _____ () C:\Users\Public\Desktop\Steam.lnk
2014-03-13 13:44 - 2014-03-01 07:05 - 23133696 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-03-13 13:44 - 2014-03-01 06:17 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-03-13 13:44 - 2014-03-01 06:16 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-03-13 13:44 - 2014-03-01 05:58 - 02765824 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-03-13 13:44 - 2014-03-01 05:52 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-03-13 13:44 - 2014-03-01 05:51 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-03-13 13:44 - 2014-03-01 05:42 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-03-13 13:44 - 2014-03-01 05:40 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-03-13 13:44 - 2014-03-01 05:37 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-03-13 13:44 - 2014-03-01 05:33 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-03-13 13:44 - 2014-03-01 05:33 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-03-13 13:44 - 2014-03-01 05:32 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-03-13 13:44 - 2014-03-01 05:30 - 17074688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-03-13 13:44 - 2014-03-01 05:23 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-03-13 13:44 - 2014-03-01 05:17 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-03-13 13:44 - 2014-03-01 05:11 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-03-13 13:44 - 2014-03-01 05:02 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-03-13 13:44 - 2014-03-01 04:54 - 05768704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-03-13 13:44 - 2014-03-01 04:52 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-03-13 13:44 - 2014-03-01 04:51 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-03-13 13:44 - 2014-03-01 04:47 - 02168320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-03-13 13:44 - 2014-03-01 04:43 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-03-13 13:44 - 2014-03-01 04:43 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-03-13 13:44 - 2014-03-01 04:42 - 00627200 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-03-13 13:44 - 2014-03-01 04:40 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-03-13 13:44 - 2014-03-01 04:38 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-03-13 13:44 - 2014-03-01 04:37 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-03-13 13:44 - 2014-03-01 04:35 - 02041856 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-03-13 13:44 - 2014-03-01 04:18 - 13051904 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-03-13 13:44 - 2014-03-01 04:16 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-03-13 13:44 - 2014-03-01 04:14 - 04244480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-03-13 13:44 - 2014-03-01 04:10 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-03-13 13:44 - 2014-03-01 04:03 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-03-13 13:44 - 2014-03-01 04:00 - 01964032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-03-13 13:44 - 2014-03-01 03:57 - 11266048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-03-13 13:44 - 2014-03-01 03:38 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-03-13 13:44 - 2014-03-01 03:32 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-03-13 13:44 - 2014-03-01 03:27 - 01156096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-03-13 13:44 - 2014-03-01 03:25 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-03-13 13:44 - 2014-03-01 03:25 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-03-13 13:43 - 2014-02-07 02:23 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-03-13 13:43 - 2014-01-29 03:32 - 00484864 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll
2014-03-13 13:43 - 2014-01-29 03:06 - 00381440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wer.dll
2014-03-13 13:43 - 2014-01-28 03:32 - 00228864 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll
2014-03-13 13:39 - 2014-02-04 03:32 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2014-03-13 13:39 - 2014-02-04 03:32 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2014-03-13 13:39 - 2014-02-04 03:04 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2014-03-13 13:39 - 2014-02-04 03:04 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2014-03-07 09:51 - 2014-03-27 14:30 - 01159275 _____ () C:\Windows\WindowsUpdate.log
2014-03-04 03:30 - 2014-03-04 03:30 - 00000000 ____D () C:\Users\---\AppData\Local\EdgeOfReality
2014-03-04 03:30 - 2010-02-04 10:01 - 00530776 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_6.dll
2014-03-04 03:30 - 2010-02-04 10:01 - 00528216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_6.dll
2014-03-04 03:30 - 2010-02-04 10:01 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_6.dll
2014-03-04 03:30 - 2010-02-04 10:01 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_6.dll
2014-03-04 03:30 - 2010-02-04 10:01 - 00078680 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_4.dll
2014-03-04 03:30 - 2010-02-04 10:01 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_4.dll
2014-03-04 03:30 - 2010-02-04 10:01 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_7.dll
2014-03-04 03:30 - 2010-02-04 10:01 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_7.dll
2014-03-04 03:30 - 2009-09-04 17:44 - 00517960 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_5.dll
2014-03-04 03:30 - 2009-09-04 17:44 - 00515416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_5.dll
2014-03-04 03:30 - 2009-09-04 17:44 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_5.dll
2014-03-04 03:30 - 2009-09-04 17:44 - 00176968 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_5.dll
2014-03-04 03:30 - 2009-09-04 17:44 - 00073544 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_3.dll
2014-03-04 03:30 - 2009-09-04 17:44 - 00069464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_3.dll
2014-03-04 03:30 - 2009-09-04 17:29 - 05554512 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_42.dll
2014-03-04 03:30 - 2009-09-04 17:29 - 05501792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_42.dll
2014-03-04 03:30 - 2009-09-04 17:29 - 02582888 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_42.dll
2014-03-04 03:30 - 2009-09-04 17:29 - 02475352 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_42.dll
2014-03-04 03:30 - 2009-09-04 17:29 - 01974616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_42.dll
2014-03-04 03:30 - 2009-09-04 17:29 - 01892184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_42.dll
2014-03-04 03:30 - 2009-09-04 17:29 - 00523088 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_42.dll
2014-03-04 03:30 - 2009-09-04 17:29 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_42.dll
2014-03-04 03:30 - 2009-09-04 17:29 - 00285024 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_42.dll
2014-03-04 03:30 - 2009-09-04 17:29 - 00235344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_42.dll
2014-03-04 03:30 - 2009-03-16 14:18 - 00521560 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_4.dll
2014-03-04 03:30 - 2009-03-16 14:18 - 00517448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_4.dll
2014-03-04 03:30 - 2009-03-16 14:18 - 00235352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_4.dll
2014-03-04 03:30 - 2009-03-16 14:18 - 00174936 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_4.dll
2014-03-04 03:30 - 2009-03-16 14:18 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_6.dll
2014-03-04 03:30 - 2009-03-16 14:18 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_6.dll
2014-03-04 03:30 - 2009-03-09 15:27 - 05425496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_41.dll
2014-03-04 03:30 - 2009-03-09 15:27 - 04178264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_41.dll
2014-03-04 03:30 - 2009-03-09 15:27 - 02430312 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_41.dll
2014-03-04 03:30 - 2009-03-09 15:27 - 01846632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_41.dll
2014-03-04 03:30 - 2009-03-09 15:27 - 00520544 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_41.dll
2014-03-04 03:30 - 2009-03-09 15:27 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_41.dll
2014-03-04 03:30 - 2008-10-27 10:04 - 00518480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_3.dll
2014-03-04 03:30 - 2008-10-27 10:04 - 00514384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_3.dll
2014-03-04 03:30 - 2008-10-27 10:04 - 00235856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_3.dll
2014-03-04 03:30 - 2008-10-27 10:04 - 00175440 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_3.dll
2014-03-04 03:30 - 2008-10-27 10:04 - 00074576 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_2.dll
2014-03-04 03:30 - 2008-10-27 10:04 - 00070992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_2.dll
2014-03-04 03:30 - 2008-10-27 10:04 - 00025936 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_5.dll
2014-03-04 03:30 - 2008-10-27 10:04 - 00023376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_5.dll
2014-03-04 03:30 - 2008-10-15 06:22 - 05631312 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_40.dll
2014-03-04 03:30 - 2008-10-15 06:22 - 04379984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_40.dll
2014-03-04 03:30 - 2008-10-15 06:22 - 02605920 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_40.dll
2014-03-04 03:30 - 2008-10-15 06:22 - 02036576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_40.dll
2014-03-04 03:30 - 2008-10-15 06:22 - 00519000 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_40.dll
2014-03-04 03:30 - 2008-10-15 06:22 - 00452440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_40.dll
2014-03-04 03:30 - 2008-07-31 10:41 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_2.dll
2014-03-04 03:30 - 2008-07-31 10:41 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_2.dll
2014-03-04 03:30 - 2008-07-31 10:41 - 00072200 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_1.dll
2014-03-04 03:30 - 2008-07-31 10:41 - 00068616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_1.dll
2014-03-04 03:30 - 2008-07-31 10:40 - 00513544 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_2.dll
2014-03-04 03:30 - 2008-07-31 10:40 - 00509448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_2.dll
2014-03-04 03:30 - 2008-07-10 11:01 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_39.dll
2014-03-04 03:30 - 2008-07-10 11:00 - 04992520 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_39.dll
2014-03-04 03:30 - 2008-07-10 11:00 - 03851784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_39.dll
2014-03-04 03:30 - 2008-07-10 11:00 - 01942552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_39.dll
2014-03-04 03:30 - 2008-07-10 11:00 - 01493528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_39.dll
2014-03-04 03:30 - 2008-07-10 11:00 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_39.dll
2014-03-04 03:30 - 2008-05-30 14:19 - 00511496 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_1.dll
2014-03-04 03:30 - 2008-05-30 14:19 - 00507400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_1.dll
2014-03-04 03:30 - 2008-05-30 14:18 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_1.dll
2014-03-04 03:30 - 2008-05-30 14:18 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_1.dll
2014-03-04 03:30 - 2008-05-30 14:17 - 00068104 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_0.dll
2014-03-04 03:30 - 2008-05-30 14:17 - 00065032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_0.dll
2014-03-04 03:30 - 2008-05-30 14:17 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_4.dll
2014-03-04 03:30 - 2008-05-30 14:16 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_4.dll
2014-03-04 03:30 - 2008-05-30 14:11 - 04991496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_38.dll
2014-03-04 03:30 - 2008-05-30 14:11 - 03850760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_38.dll
2014-03-04 03:30 - 2008-05-30 14:11 - 01941528 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_38.dll
2014-03-04 03:30 - 2008-05-30 14:11 - 01491992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_38.dll
2014-03-04 03:30 - 2008-05-30 14:11 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_38.dll
2014-03-04 03:30 - 2008-05-30 14:11 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_38.dll
2014-03-04 03:30 - 2008-03-05 16:04 - 00489480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_0.dll
2014-03-04 03:30 - 2008-03-05 16:03 - 00479752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_0.dll
2014-03-04 03:30 - 2008-03-05 16:03 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_0.dll
2014-03-04 03:30 - 2008-03-05 16:03 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_0.dll
2014-03-04 03:30 - 2008-03-05 16:00 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_3.dll
2014-03-04 03:30 - 2008-03-05 16:00 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_3.dll
2014-03-04 03:30 - 2008-03-05 15:56 - 04910088 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_37.dll
2014-03-04 03:30 - 2008-03-05 15:56 - 03786760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_37.dll
2014-03-04 03:30 - 2008-03-05 15:56 - 01860120 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_37.dll
2014-03-04 03:30 - 2008-03-05 15:56 - 01420824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_37.dll
2014-03-04 03:30 - 2008-02-05 23:07 - 00529424 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_37.dll
2014-03-04 03:30 - 2008-02-05 23:07 - 00462864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_37.dll
2014-03-04 03:30 - 2007-10-22 03:40 - 00411656 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_10.dll
2014-03-04 03:30 - 2007-10-22 03:39 - 00267272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_10.dll
2014-03-04 03:30 - 2007-10-22 03:37 - 00021000 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_2.dll
2014-03-04 03:30 - 2007-10-22 03:37 - 00017928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_2.dll
2014-03-04 03:30 - 2007-10-12 15:14 - 05081608 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_36.dll
2014-03-04 03:30 - 2007-10-12 15:14 - 03734536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_36.dll
2014-03-04 03:30 - 2007-10-12 15:14 - 02006552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_36.dll
2014-03-04 03:30 - 2007-10-12 15:14 - 01374232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_36.dll
2014-03-04 03:30 - 2007-10-02 09:56 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_36.dll
2014-03-04 03:30 - 2007-10-02 09:56 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_36.dll
2014-03-04 03:30 - 2007-07-20 00:57 - 00411496 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_9.dll
2014-03-04 03:30 - 2007-07-20 00:57 - 00267112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_9.dll
2014-03-04 03:30 - 2007-07-19 18:14 - 05073256 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_35.dll
2014-03-04 03:30 - 2007-07-19 18:14 - 03727720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_35.dll
2014-03-04 03:30 - 2007-07-19 18:14 - 01985904 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_35.dll
2014-03-04 03:30 - 2007-07-19 18:14 - 01358192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_35.dll
2014-03-04 03:30 - 2007-07-19 18:14 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_35.dll
2014-03-04 03:30 - 2007-07-19 18:14 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_35.dll
2014-03-04 03:30 - 2007-06-20 20:49 - 00409960 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_8.dll
2014-03-04 03:30 - 2007-06-20 20:46 - 00266088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_8.dll
2014-03-04 03:30 - 2007-05-16 16:45 - 04496232 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_34.dll
2014-03-04 03:30 - 2007-05-16 16:45 - 03497832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_34.dll
2014-03-04 03:30 - 2007-05-16 16:45 - 01401200 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_34.dll
2014-03-04 03:30 - 2007-05-16 16:45 - 01124720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_34.dll
2014-03-04 03:30 - 2007-05-16 16:45 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_34.dll
2014-03-04 03:30 - 2007-05-16 16:45 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_34.dll
2014-03-04 03:30 - 2007-04-04 18:55 - 00403304 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_7.dll
2014-03-04 03:30 - 2007-04-04 18:55 - 00261480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_7.dll
2014-03-04 03:30 - 2007-04-04 18:54 - 00107368 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_3.dll
2014-03-04 03:30 - 2007-04-04 18:53 - 00081768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_3.dll
2014-03-04 03:30 - 2007-03-15 16:57 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_33.dll
2014-03-04 03:30 - 2007-03-15 16:57 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_33.dll
2014-03-04 03:30 - 2007-03-12 16:42 - 04494184 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_33.dll
2014-03-04 03:30 - 2007-03-12 16:42 - 03495784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_33.dll
2014-03-04 03:30 - 2007-03-12 16:42 - 01400176 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_33.dll
2014-03-04 03:30 - 2007-03-12 16:42 - 01123696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_33.dll
2014-03-04 03:30 - 2007-03-05 12:42 - 00017688 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_1.dll
2014-03-04 03:30 - 2007-03-05 12:42 - 00015128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_1.dll
2014-03-04 03:30 - 2007-01-24 15:27 - 00393576 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_6.dll
2014-03-04 03:30 - 2007-01-24 15:27 - 00255848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_6.dll
2014-03-04 03:30 - 2006-12-08 12:02 - 00251672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_5.dll
2014-03-04 03:30 - 2006-12-08 12:00 - 00390424 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_5.dll
2014-03-04 03:30 - 2006-11-29 13:06 - 04398360 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_32.dll
2014-03-04 03:30 - 2006-11-29 13:06 - 03426072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_32.dll
2014-03-04 03:30 - 2006-11-29 13:06 - 00469264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10.dll
2014-03-04 03:30 - 2006-11-29 13:06 - 00440080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10.dll
2014-03-04 03:30 - 2006-09-28 16:05 - 00237848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_4.dll
2014-03-04 03:30 - 2006-09-28 16:04 - 00364824 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_4.dll
2014-03-04 03:30 - 2006-07-28 09:31 - 00083736 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_2.dll
2014-03-04 03:30 - 2006-07-28 09:30 - 00363288 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_3.dll
2014-03-04 03:30 - 2006-07-28 09:30 - 00236824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_3.dll
2014-03-04 03:30 - 2006-07-28 09:30 - 00062744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_2.dll
2014-03-04 03:30 - 2006-05-31 07:24 - 00230168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_2.dll
2014-03-04 03:30 - 2006-05-31 07:22 - 00354072 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_2.dll
2014-03-04 03:30 - 2006-03-31 12:40 - 00352464 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_1.dll
2014-03-04 03:30 - 2006-03-31 12:39 - 00229584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_1.dll
2014-03-04 03:30 - 2006-03-31 12:39 - 00083664 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_1.dll
2014-03-04 03:30 - 2006-03-31 12:39 - 00062672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_1.dll
2014-03-04 03:29 - 2006-03-31 12:41 - 03927248 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_30.dll
2014-03-04 03:29 - 2006-03-31 12:40 - 02388176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_30.dll
2014-03-04 03:29 - 2006-02-03 08:43 - 03830992 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_29.dll
2014-03-04 03:29 - 2006-02-03 08:43 - 02332368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_29.dll
2014-03-04 03:29 - 2006-02-03 08:42 - 00355536 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_0.dll
2014-03-04 03:29 - 2006-02-03 08:42 - 00230096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_0.dll
2014-03-04 03:29 - 2006-02-03 08:41 - 00016592 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_0.dll
2014-03-04 03:29 - 2006-02-03 08:41 - 00014032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_0.dll
2014-03-04 03:29 - 2005-12-05 18:09 - 03815120 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_28.dll
2014-03-04 03:29 - 2005-12-05 18:09 - 02323664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_28.dll
2014-03-04 03:29 - 2005-07-22 19:59 - 03807440 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_27.dll
2014-03-04 03:29 - 2005-07-22 19:59 - 02319568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_27.dll
2014-03-04 03:29 - 2005-05-26 15:34 - 03767504 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_26.dll
2014-03-04 03:29 - 2005-05-26 15:34 - 02297552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_26.dll
2014-03-04 03:29 - 2005-03-18 17:19 - 03823312 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_25.dll
2014-03-04 03:29 - 2005-03-18 17:19 - 02337488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_25.dll
2014-03-04 03:29 - 2005-02-05 19:45 - 03544272 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_24.dll
2014-03-04 03:29 - 2005-02-05 19:45 - 02222800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_24.dll
2014-03-03 23:44 - 2014-03-03 23:49 - 00000000 ____D () C:\Program Files (x86)\dumps
2014-03-03 17:02 - 2014-03-03 17:02 - 00000861 _____ () C:\Users\---\Desktop\µTorrent.lnk
2014-03-03 17:02 - 2014-03-03 17:02 - 00000841 _____ () C:\Users\---\AppData\Roaming\Microsoft\Windows\Start Menu\µTorrent.lnk
2014-03-02 15:31 - 2014-03-02 15:31 - 00000000 ____D () C:\ProgramData\Futuremark
2014-03-02 15:06 - 2014-03-02 15:07 - 00000000 ____D () C:\Users\---\Documents\3DMark 11
2014-03-02 15:04 - 2014-03-02 15:04 - 00000000 ____D () C:\Users\---\AppData\Roaming\QuickScan
2014-03-02 14:19 - 2014-03-02 21:02 - 00000000 ____D () C:\Program Files (x86)\Futuremark
2014-03-02 13:36 - 2014-03-02 13:36 - 00000000 ____D () C:\Users\---\Documents\PCMark 8
2014-03-02 13:35 - 2014-03-02 15:31 - 00000022 _____ () C:\Windows\GPU-Z.INI
2014-03-02 13:29 - 2014-03-02 15:06 - 00000000 ____D () C:\Users\---\AppData\Local\Futuremark
2014-03-02 13:29 - 2014-03-02 13:35 - 00000000 ____D () C:\Users\---\Documents\3DMark
2014-03-02 13:29 - 2014-03-02 13:29 - 00000000 ____D () C:\Users\---\AppData\Local\IsolatedStorage
2014-03-02 13:27 - 2010-06-02 04:55 - 00527192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_7.dll
2014-03-02 13:27 - 2010-06-02 04:55 - 00518488 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_7.dll
2014-03-02 13:27 - 2010-06-02 04:55 - 00239960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_7.dll
2014-03-02 13:27 - 2010-06-02 04:55 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_7.dll
2014-03-02 13:27 - 2010-06-02 04:55 - 00077656 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_5.dll
2014-03-02 13:27 - 2010-06-02 04:55 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_5.dll
2014-03-02 13:27 - 2010-05-26 11:41 - 02526056 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_43.dll
2014-03-02 13:27 - 2010-05-26 11:41 - 02401112 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_43.dll
2014-03-02 13:27 - 2010-05-26 11:41 - 02106216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_43.dll
2014-03-02 13:27 - 2010-05-26 11:41 - 01998168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_43.dll
2014-03-02 13:27 - 2010-05-26 11:41 - 01907552 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_43.dll
2014-03-02 13:27 - 2010-05-26 11:41 - 01868128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_43.dll
2014-03-02 13:27 - 2010-05-26 11:41 - 00511328 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_43.dll
2014-03-02 13:27 - 2010-05-26 11:41 - 00470880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_43.dll
2014-03-02 13:27 - 2010-05-26 11:41 - 00276832 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_43.dll
2014-03-02 13:27 - 2010-05-26 11:41 - 00248672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_43.dll
2014-03-02 13:27 - 2006-09-28 16:05 - 03977496 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_31.dll
2014-03-02 13:27 - 2006-09-28 16:05 - 02414360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_31.dll
2014-03-02 10:20 - 2014-03-02 10:22 - 00000000 ____D () C:\Program Files\HWiNFO64
2014-03-02 10:20 - 2014-03-02 10:20 - 00031648 _____ (REALiX(tm)) C:\Windows\system32\Drivers\HWiNFO64A.SYS
2014-03-01 19:49 - 2014-03-26 13:14 - 00000000 ____D () C:\Users\---\Desktop\fahrt
2014-02-27 16:36 - 2014-01-09 03:22 - 05694464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2014-02-27 16:36 - 2014-01-03 23:44 - 06574592 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2014-02-27 02:52 - 2014-02-27 02:52 - 00068440 _____ (Lenovo.) C:\Windows\system32\ibmpmsvc.exe
2014-02-27 02:52 - 2014-02-27 02:52 - 00060760 _____ (Lenovo.) C:\Windows\system32\ibmpmctl.exe
2014-02-27 02:52 - 2014-02-27 02:52 - 00057144 _____ (Lenovo.) C:\Windows\system32\Drivers\ibmpmdrv.sys
2014-02-27 02:52 - 2014-02-27 02:52 - 00040280 _____ (Lenovo.) C:\Windows\system32\tpinspm.dll
==================== One Month Modified Files and Folders =======
2014-03-27 15:04 - 2014-03-23 23:10 - 00000000 ____D () C:\FRST
2014-03-27 14:54 - 2014-03-26 23:14 - 00000000 ____D () C:\Programme (x64)
2014-03-27 14:36 - 2009-07-14 05:45 - 00026544 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-03-27 14:36 - 2009-07-14 05:45 - 00026544 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-03-27 14:33 - 2011-04-12 08:43 - 00702436 _____ () C:\Windows\system32\perfh007.dat
2014-03-27 14:33 - 2011-04-12 08:43 - 00150044 _____ () C:\Windows\system32\perfc007.dat
2014-03-27 14:33 - 2009-07-14 06:13 - 01626920 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-03-27 14:30 - 2014-03-07 09:51 - 01159275 _____ () C:\Windows\WindowsUpdate.log
2014-03-27 14:29 - 2014-03-26 22:52 - 00000909 _____ () C:\Windows\setupact.log
2014-03-27 14:29 - 2014-01-12 09:22 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-03-27 14:29 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-03-27 00:22 - 2014-02-11 12:17 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA1cf271adaaa5c5f.job
2014-03-27 00:16 - 2014-01-06 20:52 - 00000000 ____D () C:\Users\---\AppData\Roaming\vlc
2014-03-26 23:57 - 2014-03-25 02:21 - 00000000 ____D () C:\Users\---\AppData\Local\Battle.net
2014-03-26 22:52 - 2014-03-26 22:52 - 00415048 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-03-26 22:52 - 2014-03-26 22:52 - 00000000 _____ () C:\Windows\setuperr.log
2014-03-26 13:14 - 2014-03-01 19:49 - 00000000 ____D () C:\Users\---\Desktop\fahrt
2014-03-26 12:58 - 2014-03-14 19:28 - 00000000 ____D () C:\Program Files (x86)\Steam
2014-03-26 00:48 - 2014-03-25 13:46 - 00000000 ____D () C:\Users\---\Documents\Diablo III
2014-03-25 22:35 - 2014-01-05 23:58 - 00007620 _____ () C:\Users\---\AppData\Local\Resmon.ResmonCfg
2014-03-25 20:29 - 2014-03-16 09:39 - 00000000 ____D () C:\Users\---\MediathekView
2014-03-25 11:50 - 2014-03-25 11:50 - 00000000 ____D () C:\Users\---\AppData\Roaming\WinRAR
2014-03-25 11:33 - 2014-03-25 11:33 - 00001187 _____ () C:\Users\---\Desktop\JDownloader.lnk
2014-03-25 11:33 - 2014-01-14 14:31 - 00000000 ____D () C:\Portable Programme
2014-03-25 02:35 - 2014-03-25 02:35 - 00000807 _____ () C:\Users\Public\Desktop\Diablo III.lnk
2014-03-25 02:26 - 2014-03-25 02:21 - 00000000 ____D () C:\Users\---\AppData\Roaming\Battle.net
2014-03-25 02:21 - 2014-03-25 02:21 - 00000918 _____ () C:\Users\Public\Desktop\Battle.net.lnk
2014-03-25 02:21 - 2014-03-25 02:21 - 00000000 ____D () C:\Users\---\AppData\Local\Blizzard Entertainment
2014-03-25 02:21 - 2014-03-25 02:21 - 00000000 ____D () C:\ProgramData\Blizzard Entertainment
2014-03-25 02:12 - 2014-03-25 02:12 - 00000000 ____D () C:\ProgramData\Battle.net
2014-03-25 01:26 - 2014-01-14 16:07 - 00000000 ____D () C:\Users\---\Downloads\BYTube
2014-03-24 20:37 - 2014-03-24 20:37 - 00000000 ____D () C:\Windows\ERUNT
2014-03-24 20:26 - 2014-03-24 20:18 - 00000000 ____D () C:\AdwCleaner
2014-03-24 09:45 - 2014-01-10 21:53 - 00000000 ____D () C:\Users\---\AppData\Roaming\Nitro PDF
2014-03-23 23:33 - 2014-03-23 23:33 - 00001118 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-03-23 23:33 - 2014-03-23 23:33 - 00000000 ____D () C:\Users\---\AppData\Roaming\Malwarebytes
2014-03-23 23:33 - 2014-03-23 23:33 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-03-23 23:33 - 2014-03-23 23:33 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-03-23 23:09 - 2014-03-23 23:09 - 00000168 _____ () C:\Users\---\defogger_reenable
2014-03-23 23:09 - 2014-01-04 00:47 - 00000000 ____D () C:\Users\---
2014-03-23 22:59 - 2014-03-23 21:01 - 00000000 ____D () C:\Users\---\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-03-23 22:57 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-03-23 21:01 - 2014-01-24 15:24 - 00000000 ____D () C:\Program Files\Rainmeter
2014-03-19 14:59 - 2014-01-10 21:58 - 00001156 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-03-19 14:59 - 2014-01-05 13:36 - 00000727 _____ () C:\Users\---\Desktop\Nightly.lnk
2014-03-19 14:43 - 2014-03-19 14:43 - 01172664 _____ (AnyProtect.com) C:\Users\---\AppData\Local\nsq3D63.tmp
2014-03-19 14:41 - 2014-03-19 14:41 - 00000000 ____D () C:\Users\---\AppData\Roaming\MyPhoneExplorer
2014-03-19 14:41 - 2014-03-19 14:41 - 00000000 ____D () C:\Program Files (x86)\MyPhoneExplorer
2014-03-17 00:18 - 2014-03-16 23:53 - 00000000 ____D () C:\Users\---\Documents\Battlefield Heroes
2014-03-17 00:09 - 2014-03-16 23:57 - 00282296 _____ () C:\Windows\SysWOW64\PnkBstrB.xtr
2014-03-17 00:09 - 2014-03-16 23:51 - 00282296 _____ () C:\Windows\SysWOW64\PnkBstrB.exe
2014-03-17 00:09 - 2014-03-16 23:51 - 00076888 _____ () C:\Windows\SysWOW64\PnkBstrA.exe
2014-03-16 23:57 - 2014-03-16 23:57 - 00000000 ____D () C:\Users\---\AppData\Local\PunkBuster
2014-03-16 23:57 - 2014-03-16 23:51 - 00270240 _____ () C:\Windows\SysWOW64\PnkBstrB.ex0
2014-03-16 19:12 - 2014-03-16 19:12 - 00000000 ____D () C:\Users\---\AppData\Local\Warframe
2014-03-16 19:09 - 2014-03-15 21:19 - 00000000 ___RD () C:\Users\---\Desktop\zeitvertreib
2014-03-16 18:39 - 2014-03-16 18:39 - 00000766 _____ () C:\Users\---\Desktop\MediathekView.lnk
2014-03-16 18:36 - 2014-03-16 13:01 - 00000000 ____D () C:\Users\---\Documents\My Games
2014-03-16 18:22 - 2014-03-16 18:22 - 00000000 ____D () C:\Users\---\AppData\Roaming\TheBannerSagaFactions
2014-03-16 12:47 - 2014-03-16 12:47 - 00000000 ____D () C:\Crash
2014-03-16 11:22 - 2014-03-16 11:22 - 00000000 ____D () C:\Users\---\AppData\Local\SCE
2014-03-16 09:34 - 2014-03-16 09:33 - 00000000 ____D () C:\Users\---\.mediathek3
2014-03-16 09:33 - 2014-03-16 09:33 - 00312744 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2014-03-16 09:33 - 2014-03-16 09:33 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2014-03-16 09:33 - 2014-03-16 09:33 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2014-03-16 09:33 - 2014-03-16 09:33 - 00108968 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2014-03-16 09:32 - 2014-03-16 09:32 - 00000000 ____D () C:\ProgramData\Sun
2014-03-16 09:32 - 2014-03-16 09:32 - 00000000 ____D () C:\ProgramData\Oracle
2014-03-16 09:32 - 2014-03-16 09:32 - 00000000 ____D () C:\Program Files\Java
2014-03-16 09:30 - 2014-03-16 09:30 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-03-16 09:30 - 2014-03-16 09:30 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-03-16 09:30 - 2014-03-16 09:30 - 00174504 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-03-16 09:30 - 2014-03-16 09:30 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-03-16 09:30 - 2014-03-16 09:30 - 00000000 ____D () C:\Program Files (x86)\Java
2014-03-15 15:42 - 2014-03-15 15:42 - 00000000 ____D () C:\Users\---\AppData\Roaming\Carbon
2014-03-14 19:28 - 2014-03-14 19:28 - 00000972 _____ () C:\Users\Public\Desktop\Steam.lnk
2014-03-14 15:39 - 2014-01-06 16:02 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-03-14 15:39 - 2014-01-06 16:02 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-03-14 13:00 - 2014-02-15 12:37 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-03-14 13:00 - 2014-02-15 12:37 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
2014-03-13 14:23 - 2014-02-14 14:06 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-03-07 15:09 - 2014-01-10 22:03 - 00000000 ____D () C:\Users\---\dwhelper
2014-03-07 13:59 - 2009-07-14 06:08 - 00032632 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-03-04 17:27 - 2014-01-09 16:04 - 00000000 ____D () C:\Users\---\AppData\Roaming\uTorrent
2014-03-04 03:30 - 2014-03-04 03:30 - 00000000 ____D () C:\Users\---\AppData\Local\EdgeOfReality
2014-03-03 23:49 - 2014-03-03 23:44 - 00000000 ____D () C:\Program Files (x86)\dumps
2014-03-03 17:02 - 2014-03-03 17:02 - 00000861 _____ () C:\Users\---\Desktop\µTorrent.lnk
2014-03-03 17:02 - 2014-03-03 17:02 - 00000841 _____ () C:\Users\---\AppData\Roaming\Microsoft\Windows\Start Menu\µTorrent.lnk
2014-03-02 21:02 - 2014-03-02 14:19 - 00000000 ____D () C:\Program Files (x86)\Futuremark
2014-03-02 15:31 - 2014-03-02 15:31 - 00000000 ____D () C:\ProgramData\Futuremark
2014-03-02 15:31 - 2014-03-02 13:35 - 00000022 _____ () C:\Windows\GPU-Z.INI
2014-03-02 15:25 - 2014-01-06 16:43 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-03-02 15:07 - 2014-03-02 15:06 - 00000000 ____D () C:\Users\---\Documents\3DMark 11
2014-03-02 15:06 - 2014-03-02 13:29 - 00000000 ____D () C:\Users\---\AppData\Local\Futuremark
2014-03-02 15:04 - 2014-03-02 15:04 - 00000000 ____D () C:\Users\---\AppData\Roaming\QuickScan
2014-03-02 14:34 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\LiveKernelReports
2014-03-02 14:05 - 2014-01-04 20:02 - 90015360 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-03-02 13:36 - 2014-03-02 13:36 - 00000000 ____D () C:\Users\---\Documents\PCMark 8
2014-03-02 13:35 - 2014-03-02 13:29 - 00000000 ____D () C:\Users\---\Documents\3DMark
2014-03-02 13:29 - 2014-03-02 13:29 - 00000000 ____D () C:\Users\---\AppData\Local\IsolatedStorage
2014-03-02 10:22 - 2014-03-02 10:20 - 00000000 ____D () C:\Program Files\HWiNFO64
2014-03-02 10:20 - 2014-03-02 10:20 - 00031648 _____ (REALiX(tm)) C:\Windows\system32\Drivers\HWiNFO64A.SYS
2014-03-01 07:05 - 2014-03-13 13:44 - 23133696 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-03-01 06:17 - 2014-03-13 13:44 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-03-01 06:16 - 2014-03-13 13:44 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-03-01 05:58 - 2014-03-13 13:44 - 02765824 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-03-01 05:52 - 2014-03-13 13:44 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-03-01 05:51 - 2014-03-13 13:44 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-03-01 05:42 - 2014-03-13 13:44 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-03-01 05:40 - 2014-03-13 13:44 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-03-01 05:37 - 2014-03-13 13:44 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-03-01 05:33 - 2014-03-13 13:44 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-03-01 05:33 - 2014-03-13 13:44 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-03-01 05:32 - 2014-03-13 13:44 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-03-01 05:30 - 2014-03-13 13:44 - 17074688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-03-01 05:23 - 2014-03-13 13:44 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-03-01 05:17 - 2014-03-13 13:44 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-03-01 05:11 - 2014-03-13 13:44 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-03-01 05:02 - 2014-03-13 13:44 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-03-01 04:54 - 2014-03-13 13:44 - 05768704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-03-01 04:52 - 2014-03-13 13:44 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-03-01 04:51 - 2014-03-13 13:44 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-03-01 04:47 - 2014-03-13 13:44 - 02168320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-03-01 04:43 - 2014-03-13 13:44 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-03-01 04:43 - 2014-03-13 13:44 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-03-01 04:42 - 2014-03-13 13:44 - 00627200 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-03-01 04:40 - 2014-03-13 13:44 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-03-01 04:38 - 2014-03-13 13:44 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-03-01 04:37 - 2014-03-13 13:44 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-03-01 04:35 - 2014-03-13 13:44 - 02041856 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-03-01 04:18 - 2014-03-13 13:44 - 13051904 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-03-01 04:16 - 2014-03-13 13:44 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-03-01 04:14 - 2014-03-13 13:44 - 04244480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-03-01 04:10 - 2014-03-13 13:44 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-03-01 04:03 - 2014-03-13 13:44 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-03-01 04:00 - 2014-03-13 13:44 - 01964032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-03-01 03:57 - 2014-03-13 13:44 - 11266048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-03-01 03:38 - 2014-03-13 13:44 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-03-01 03:32 - 2014-03-13 13:44 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-03-01 03:27 - 2014-03-13 13:44 - 01156096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-03-01 03:25 - 2014-03-13 13:44 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-03-01 03:25 - 2014-03-13 13:44 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-02-27 21:13 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\rescache
2014-02-27 02:52 - 2014-02-27 02:52 - 00068440 _____ (Lenovo.) C:\Windows\system32\ibmpmsvc.exe
2014-02-27 02:52 - 2014-02-27 02:52 - 00060760 _____ (Lenovo.) C:\Windows\system32\ibmpmctl.exe
2014-02-27 02:52 - 2014-02-27 02:52 - 00057144 _____ (Lenovo.) C:\Windows\system32\Drivers\ibmpmdrv.sys
2014-02-27 02:52 - 2014-02-27 02:52 - 00040280 _____ (Lenovo.) C:\Windows\system32\tpinspm.dll
Files to move or delete:
====================
C:\ProgramData\PKP_DLes.DAT
C:\ProgramData\PKP_DLet.DAT
C:\ProgramData\PKP_DLev.DAT
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2014-03-25 16:52
==================== End Of Log ============================
Viele Grüße Walther |
|
28.03.2014, 09:28
| #6 | |
| /// the machine /// TB-Ausbilder | Nach Download von "MyphoneExplorer" von chip.de - Spyware, Adware - jetzt Trojaner! (Win32/Injected.F Trojaner) Logo, schau ich mir alle an, Zeile für zeile. da steht nix sensibles drin. Zitat:
Beispiele bitte. Öffne bitte FRST und setz nen Haken bei Additional und scanne, poste beide Logfiles.
__________________ --> Nach Download von "MyphoneExplorer" von chip.de - Spyware, Adware - jetzt Trojaner! (Win32/Injected.F Trojaner) |
|
16.04.2014, 09:00
| #7 |
| | Nach Download von "MyphoneExplorer" von chip.de - Spyware, Adware - jetzt Trojaner! (Win32/Injected.F Trojaner) Hallo Schrauber, ein Beispiel wäre, das der Eintrag "Battlefield Heroes" - ein PC Spiel, nicht mehr vorhanden ist, ich es aber gern deinstallieren möchte. Vor der ganzen Geschichte war der Eintrag vorhanden, sowie sehr viele anderen auch. Hier die Logs Addition.txt Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 14-04-2014
Ran by --- at 2014-04-16 09:07:38
Running from C:\Users\---\Desktop\temp desktop workflow\24.03.2014\virus
Boot Mode: Normal
==========================================================
==================== Security Center ========================
AV: ESET Smart Security 7.0 (Enabled - Up to date) {19259FAE-8396-A113-46DB-15B0E7DFA289}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: ESET Smart Security 7.0 (Enabled - Up to date) {A2447E4A-A5AC-AE9D-7C6B-2EC29C58E834}
FW: ESET Personal Firewall (Enabled) {211E1E8B-C9F9-A04B-6D84-BC85190CE5F2}
==================== Installed Programs ======================
µTorrent (HKCU\...\uTorrent) (Version: 3.4.1.30740 - BitTorrent Inc.)
2007 Microsoft Office Suite Service Pack 3 (SP3) (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version: - Microsoft)
2007 Microsoft Office Suite Service Pack 3 (SP3) (x32 Version: - Microsoft) Hidden
7-Zip 9.20 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0920-000001000000}) (Version: 9.20.00.0 - Igor Pavlov)
Adobe Flash Player 13 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 13.0.0.182 - Adobe Systems Incorporated)
Battle.net (HKLM-x32\...\Battle.net) (Version: - Blizzard Entertainment)
CCleaner (HKLM\...\CCleaner) (Version: 4.09 - Piriform)
Diablo III (HKLM-x32\...\Diablo III) (Version: - Blizzard Entertainment)
ESET Smart Security (HKLM\...\{F5A3E880-A737-48F2-A124-6F5D4CEA6AB4}) (Version: 7.0.302.26 - ESET, spol s r. o.)
Google Update Helper (x32 Version: 1.3.23.9 - Google Inc.) Hidden
HWiNFO64 Version 4.34 (HKLM\...\HWiNFO64_is1) (Version: 4.34 - Martin Malík - REALiX)
Intel® Trusted Connect Service Client (Version: 1.27.798.1 - Intel Corporation) Hidden
Java 7 Update 51 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86417051FF}) (Version: 7.0.510 - Oracle)
KeePass Password Safe 2.25 (HKLM-x32\...\KeePassPasswordSafe2_is1) (Version: 2.25 - Dominik Reichl)
KONICA MINOLTA bizhub C35 (HKLM\...\KONICA MINOLTA bizhub C35 Installer) (Version: - KONICA MINOLTA)
Lenovo Power Management Driver (HKLM\...\Power Management Driver) (Version: 1.67.04.05 - )
Malwarebytes Anti-Malware Version 1.75.0.1300 (HKLM-x32\...\Malwarebytes' Anti-Malware_is1) (Version: 1.75.0.1300 - Malwarebytes Corporation)
Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Games for Windows - LIVE Redistributable (HKLM-x32\...\{F2508213-9989-4E85-A078-72BE483917EF}) (Version: 3.5.88.0 - Microsoft Corporation)
Microsoft Network Monitor 3.4 (HKLM\...\{8C5B5A11-CBF8-451B-B201-77FAB0D0B77D}) (Version: 3.4.2350.0 - Microsoft Corporation)
Microsoft Network Monitor: NetworkMonitor Parsers 3.4 (HKLM\...\{963E5FEB-1367-46B9-851D-A957F1A3747F}) (Version: 3.4.2350.0 - Microsoft Corporation)
Microsoft Office Access MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Enterprise 2007 (HKLM-x32\...\ENTERPRISE) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office Enterprise 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Excel MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Groove MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office InfoPath MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Office 64-bit Components 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office OneNote MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Outlook MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (English) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (French) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Italian) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Publisher MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared 64-bit MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Word MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30214.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 24.4.0 - Mozilla)
Mozilla Thunderbird 24.4.0 (x86 de) (HKLM-x32\...\Mozilla Thunderbird 24.4.0 (x86 de)) (Version: 24.4.0 - Mozilla)
Nightly 31.0a1 (x64 en-US) (HKLM\...\Nightly 31.0a1 (x64 en-US)) (Version: 31.0a1 - Mozilla)
Nitro Reader 3 (HKLM\...\{4756C731-B54E-451A-9AF1-86E8AB1BEBBB}) (Version: 3.5.6.5 - Nitro)
NVIDIA PhysX (HKLM-x32\...\{3F5C371F-8EA2-4F25-9D3D-D0B4526E3AEA}) (Version: 9.10.0513 - NVIDIA Corporation)
TeraCopy 2.3 (HKLM\...\TeraCopy_is1) (Version: - Code Sector)
The Incredible Adventures of Van Helsing (c) NeocoreGames version 1 (HKLM-x32\...\VGhlIEluY3JlZGlibGUgQWR2ZW50dXJlcyBvZiBWYW4gSGVsc2luZw==_is1) (Version: 1 - )
ThinkPad UltraNav Driver (HKLM\...\SynTPDeinstKey) (Version: 16.6.4.13 - )
Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version: - Microsoft)
Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{A024FC7B-77DE-45DE-A058-1C049A17BFB3}) (Version: - Microsoft)
Update for Microsoft Office 2007 suites (KB2687493) 32-Bit Edition (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{6FAA03BD-2B51-4029-9AD9-64A3B8E3C84C}) (Version: - Microsoft)
Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (HKLM-x32\...\{90120000-002A-0000-1000-0000000FF1CE}_ENTERPRISE_{CB68A5B0-3508-4193-AEB9-AF636DAECE0F}) (Version: - Microsoft)
Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{CB68A5B0-3508-4193-AEB9-AF636DAECE0F}) (Version: - Microsoft)
Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{E9A82945-BA29-4EE8-8F2A-2F49545E9CF2}) (Version: - Microsoft)
Update for Microsoft Office Outlook 2007 (KB2687404) 32-Bit Edition (HKLM-x32\...\{90120000-001A-0407-0000-0000000FF1CE}_ENTERPRISE_{EA54F104-79D2-48CC-9ABC-91A63C43D353}) (Version: - Microsoft)
Update for Microsoft Office Outlook 2007 (KB2863811) 32-Bit Edition (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{53DEC068-4690-4F6B-9946-7D21EF02236B}) (Version: - Microsoft)
Update for Microsoft Office Outlook 2007 Junk Email Filter (KB2878297) 32-Bit Edition (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{9B1DEEA3-B4ED-49F0-9EF7-4A820EEEA7F1}) (Version: - Microsoft)
Update für Microsoft Office Excel 2007 Help (KB963678) (HKLM-x32\...\{90120000-0016-0407-0000-0000000FF1CE}_ENTERPRISE_{BEC163EC-7A83-48A1-BFB6-3BF47CC2F8CF}) (Version: - Microsoft)
Update für Microsoft Office Outlook 2007 Help (KB963677) (HKLM-x32\...\{90120000-001A-0407-0000-0000000FF1CE}_ENTERPRISE_{F6828576-6F79-470D-AB50-69D1BBADBD30}) (Version: - Microsoft)
Update für Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM-x32\...\{90120000-0018-0407-0000-0000000FF1CE}_ENTERPRISE_{EA160DA3-E9B5-4D03-A518-21D306665B96}) (Version: - Microsoft)
Update für Microsoft Office Word 2007 Help (KB963665) (HKLM-x32\...\{90120000-001B-0407-0000-0000000FF1CE}_ENTERPRISE_{38472199-D7B6-4833-A949-10E4EE6365A1}) (Version: - Microsoft)
VLC media player 2.1.1 (HKLM\...\VLC media player) (Version: 2.1.1 - VideoLAN)
Windows Live ID Sign-in Assistant (HKLM\...\{9B48B0AC-C813-4174-9042-476A887592C7}) (Version: 6.500.3165.0 - Microsoft Corporation)
==================== Restore Points =========================
15-04-2014 20:43:47 DirectX wurde installiert
15-04-2014 20:44:40 Microsoft Visual C++ 2005 Redistributable wird installiert
15-04-2014 20:45:14 Installed Fallout 3
15-04-2014 22:11:09 Windows Update
16-04-2014 06:49:30 Removed Fallout 3
==================== Hosts content: ==========================
2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
==================== Scheduled Tasks (whitelisted) =============
Task: {311AF48F-4A3B-4433-9F44-52ADFA5F9541} - System32\Tasks\GoogleUpdateTaskMachineUA1cf271adaaa5c5f => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-01-12] (Google Inc.)
Task: {39292144-04CE-44E0-B3D1-3A924A54EA24} - System32\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe [2012-06-14] (Intel Corporation)
Task: {84AC2C24-6C2A-4C63-B702-25B02E1C2DE6} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-01-12] (Google Inc.)
Task: {8D023C32-34F1-4ADC-B1B3-9BA48B8C7265} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-12-17] (Piriform Ltd)
Task: {AB4AA363-3C5E-4B77-997D-5AE98C2BA053} - System32\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe [2012-06-14] (Intel Corporation)
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA1cf271adaaa5c5f.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
==================== Loaded Modules (whitelisted) =============
2010-01-27 13:59 - 2010-01-27 13:59 - 00015360 _____ () C:\Windows\System32\KOBJUJ_L.dll
2007-11-15 13:57 - 2007-11-15 13:57 - 00017408 _____ () C:\Windows\System32\KOBJUA_L.dll
2010-01-27 13:59 - 2010-01-27 13:59 - 00648704 _____ () C:\Windows\system32\spool\DRIVERS\x64\3\KOBJUJ_O.DLL
2014-03-17 00:51 - 2014-03-17 01:09 - 00076888 _____ () C:\Windows\SysWOW64\PnkBstrA.exe
2014-01-17 21:38 - 2012-01-20 15:55 - 00678400 _____ () C:\Program Files\TeraCopy\TeraCopyExt64.dll
2014-01-17 21:38 - 2012-01-29 17:55 - 00657920 _____ () C:\Program Files\TeraCopy\TeraCopy64.dll
2013-10-07 15:52 - 2013-10-07 15:52 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll
2009-01-12 21:01 - 2014-03-23 23:59 - 00061440 _____ () C:\Portable Programme\quiethdd_v1.5-build250\quietHDD.exe
2013-10-29 22:45 - 2013-10-29 22:45 - 00036536 _____ () C:\Program Files\Rainmeter\Rainmeter.exe
2013-10-29 22:45 - 2013-10-29 22:45 - 00798392 _____ () C:\Program Files\Rainmeter\Rainmeter.dll
2013-10-29 22:41 - 2013-10-29 22:41 - 00058880 _____ () C:\Program Files\Rainmeter\Plugins\WebParser.dll
2014-01-06 17:29 - 2013-03-12 14:20 - 01199576 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll
==================== Alternate Data Streams (whitelisted) =========
==================== Safe Mode (whitelisted) ===================
==================== Disabled items from MSCONFIG ==============
==================== Faulty Device Manager Devices =============
==================== Event log errors: =========================
Application errors:
==================
Error: (04/15/2014 11:14:44 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: Fallout3.exe, Version: 1.7.0.3, Zeitstempel: 0x4a40f18b
Name des fehlerhaften Moduls: Fallout3.exe, Version: 1.7.0.3, Zeitstempel: 0x4a40f18b
Ausnahmecode: 0xc0000005
Fehleroffset: 0x006ddf7b
ID des fehlerhaften Prozesses: 0x1040
Startzeit der fehlerhaften Anwendung: 0xFallout3.exe0
Pfad der fehlerhaften Anwendung: Fallout3.exe1
Pfad des fehlerhaften Moduls: Fallout3.exe2
Berichtskennung: Fallout3.exe3
Error: (04/15/2014 11:06:13 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: Fallout3.exe, Version: 1.7.0.3, Zeitstempel: 0x4a40f18b
Name des fehlerhaften Moduls: Fallout3.exe, Version: 1.7.0.3, Zeitstempel: 0x4a40f18b
Ausnahmecode: 0xc0000005
Fehleroffset: 0x006ddf7b
ID des fehlerhaften Prozesses: 0x154c
Startzeit der fehlerhaften Anwendung: 0xFallout3.exe0
Pfad der fehlerhaften Anwendung: Fallout3.exe1
Pfad des fehlerhaften Moduls: Fallout3.exe2
Berichtskennung: Fallout3.exe3
Error: (04/15/2014 11:05:02 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: Fallout3.exe, Version: 1.7.0.3, Zeitstempel: 0x4a40f18b
Name des fehlerhaften Moduls: Fallout3.exe, Version: 1.7.0.3, Zeitstempel: 0x4a40f18b
Ausnahmecode: 0xc0000005
Fehleroffset: 0x006ddf7b
ID des fehlerhaften Prozesses: 0x11c0
Startzeit der fehlerhaften Anwendung: 0xFallout3.exe0
Pfad der fehlerhaften Anwendung: Fallout3.exe1
Pfad des fehlerhaften Moduls: Fallout3.exe2
Berichtskennung: Fallout3.exe3
Error: (04/15/2014 10:52:54 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: Fallout3.exe, Version: 1.7.0.3, Zeitstempel: 0x4a40f18b
Name des fehlerhaften Moduls: Fallout3.exe, Version: 1.7.0.3, Zeitstempel: 0x4a40f18b
Ausnahmecode: 0xc0000005
Fehleroffset: 0x006ddf7b
ID des fehlerhaften Prozesses: 0xf10
Startzeit der fehlerhaften Anwendung: 0xFallout3.exe0
Pfad der fehlerhaften Anwendung: Fallout3.exe1
Pfad des fehlerhaften Moduls: Fallout3.exe2
Berichtskennung: Fallout3.exe3
System errors:
=============
Microsoft Office Sessions:
=========================
CodeIntegrity Errors:
===================================
Date: 2014-01-10 21:49:38.989
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\dsound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2014-01-10 21:49:32.151
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\dsound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2014-01-10 20:34:10.727
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\dsound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2014-01-10 20:34:07.525
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\dsound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2014-01-10 20:34:01.554
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\dsound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2014-01-10 20:34:00.471
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\dsound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2014-01-10 19:21:17.719
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\dsound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2014-01-10 19:19:11.918
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\dsound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2014-01-10 19:19:09.896
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\dsound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2014-01-10 19:19:08.878
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\dsound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
==================== Memory info ===========================
Percentage of memory in use: 22%
Total physical RAM: 7782.78 MB
Available physical RAM: 6028.97 MB
Total Pagefile: 17950.77 MB
Available Pagefile: 16006.52 MB
Total Virtual: 8192 MB
Available Virtual: 8191.85 MB
==================== Drives ================================
Drive c: (Windows 7) (Fixed) (Total:100.59 GB) (Free:55.42 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive d: (Daten) (Fixed) (Total:330.46 GB) (Free:59.16 GB) NTFS
Drive f: (WD Black) (Fixed) (Total:698.64 GB) (Free:427.22 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: 0004D3D1)
Partition 1: (Not Active) - (Size=101 GB) - (Type=07 NTFS)
Partition 2: (Active) - (Size=31 GB) - (Type=83)
Partition 3: (Not Active) - (Size=4 GB) - (Type=82)
Partition 4: (Not Active) - (Size=330 GB) - (Type=07 NTFS)
========================================================
Disk: 1 (Size: 699 GB) (Disk ID: 0B36E66C)
Partition: GPT Partition Type.
==================== End Of Log ============================
FRST.txt FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 14-04-2014
Ran by --- (administrator) on --- -PC on 16-04-2014 09:07:11
Running from C:\Users\---\Desktop\temp desktop workflow\24.03.2014\virus
Windows 7 Ultimate Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(Lenovo.) C:\Windows\system32\ibmpmsvc.exe
(ESET) C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Nitro PDF Software) C:\Program Files\Common Files\Nitro\Reader\3.0\NitroPDFReaderDriverService3x64.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.23.9\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.23.9\GoogleCrashHandler64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(ESET) C:\Program Files\ESET\ESET Smart Security\egui.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Synaptics Incorporated) C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Intel Corporation) C:\Windows\system32\igfxsrvc.exe
() C:\Portable Programme\quiethdd_v1.5-build250\quietHDD.exe
() C:\Program Files\Rainmeter\Rainmeter.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
(Vimicro) C:\Program Files (x86)\USB Camera\VM331STI.EXE
(Dolby Laboratories Inc.) C:\Program Files (x86)\Dolby Advanced Audio v2\pcee4.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
(Realsil Microelectronics Inc.) C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Microsoft Corporation) C:\Windows\system32\taskmgr.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13538376 2013-05-13] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_Dolby] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1307720 2013-04-24] (Realtek Semiconductor)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2985712 2013-06-04] (Synaptics Incorporated)
HKLM\...\Run: [egui] => C:\Program Files\ESET\ESET Smart Security\egui.exe [5618456 2013-09-12] (ESET)
HKLM\...\Run: [IgfxTray] => C:\Windows\system32\igfxtray.exe [391128 2014-01-25] (Intel Corporation)
HKLM\...\Run: [HotKeysCmds] => C:\Windows\system32\hkcmd.exe [771544 2014-01-25] (Intel Corporation)
HKLM\...\Run: [Persistence] => C:\Windows\system32\igfxpers.exe [770520 2014-01-25] (Intel Corporation)
HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [291608 2012-03-27] (Intel Corporation)
HKLM-x32\...\Run: [IMSS] => C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe [134616 2013-03-12] (Intel Corporation)
HKLM-x32\...\Run: [331BigDog] => C:\Program Files (x86)\USB Camera\VM331STI.EXE [548864 2013-03-12] (Vimicro)
HKLM-x32\...\Run: [Dolby Advanced Audio v2] => C:\Program Files (x86)\Dolby Advanced Audio v2\pcee4.exe [508656 2012-08-31] (Dolby Laboratories Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM-x32\...\Run: [KeePass 2 PreLoad] => C:\Program Files (x86)\KeePass Password Safe 2\KeePass.exe [2092032 2014-02-03] (Dominik Reichl)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-19\...\Run: [Sidebar] => C:\Program Files\Windows Sidebar\Sidebar.exe [1475584 2010-11-21] (Microsoft Corporation)
HKU\S-1-5-20\...\Run: [Sidebar] => C:\Program Files\Windows Sidebar\Sidebar.exe [1475584 2010-11-21] (Microsoft Corporation)
HKU\S-1-5-21-520766433-2800240616-4077048008-1000\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3675352 2013-10-28] (Disc Soft Ltd)
HKU\S-1-5-21-520766433-2800240616-4077048008-1000\...\MountPoints2: {f80503ef-be31-11e3-b31e-6817292adbc6} - E:\setup.exe
AppInit_DLLs: C:\PROGRA~2\SupTab\SEARCH~2.DLL => C:\PROGRA~2\SupTab\SEARCH~2.DLL File Not Found
Startup: C:\Users\---\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\quietHDD.lnk
ShortcutTarget: quietHDD.lnk -> C:\Portable Programme\quiethdd_v1.5-build250\quietHDD.exe ()
Startup: C:\Users\---\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Rainmeter.lnk
ShortcutTarget: Rainmeter.lnk -> C:\Program Files\Rainmeter\Rainmeter.exe ()
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x93C303C87C09CF01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
StartMenuInternet: IEXPLORE.EXE - iexplore.exe
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL =
SearchScopes: HKCU - {30F6A740-DFA4-4171-BE96-77F7121CAAF3} URL = hxxp://go.web.de/tb/ie_searchplugin/?q={searchTerms}&enc=UTF-8
SearchScopes: HKCU - {4A42B8FA-6641-4E7C-8EF3-1ECA946196BC} URL = hxxp://go.1und1.de/tb/ie_searchplugin/?q={searchTerms}&enc=UTF-8
SearchScopes: HKCU - {60BD6C21-C55E-46A5-91E4-F1FC6CF7C937} URL = hxxp://go.mail.com/tb/en-us/ie_searchplugin/?q={searchTerms}&enc=UTF-8
SearchScopes: HKCU - {C313B64E-9B2D-4820-AD58-17921C642E8B} URL = hxxp://go.gmx.de/tb/ie_searchplugin/?q={searchTerms}&enc=UTF-8
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
FireFox:
========
FF ProfilePath: C:\Users\---\AppData\Roaming\Mozilla\Firefox\Profiles\bda2rjt1.default
FF NewTab: chrome://quick_start/content/index.html
FF Homepage: about:superstart
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_13_0_0_182.dll ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.1.1 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_182.dll ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=3.0.72 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin-x32: @nitropdf.com/NitroPDF - C:\Program Files (x86)\Nitro\Reader 3\npnitromozilla.dll (Nitro PDF)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)
FF SearchPlugin: C:\Users\---\AppData\Roaming\Mozilla\Firefox\Profiles\bda2rjt1.default\searchplugins\11-suche.xml
FF SearchPlugin: C:\Users\---\AppData\Roaming\Mozilla\Firefox\Profiles\bda2rjt1.default\searchplugins\englische-ergebnisse.xml
FF SearchPlugin: C:\Users\---\AppData\Roaming\Mozilla\Firefox\Profiles\bda2rjt1.default\searchplugins\gmx-suche.xml
FF SearchPlugin: C:\Users\---\AppData\Roaming\Mozilla\Firefox\Profiles\bda2rjt1.default\searchplugins\lastminute.xml
FF SearchPlugin: C:\Users\---\AppData\Roaming\Mozilla\Firefox\Profiles\bda2rjt1.default\searchplugins\webde-suche.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Battlefield Heroes Updater - C:\Users\---\AppData\Roaming\Mozilla\Firefox\Profiles\bda2rjt1.default\Extensions\battlefieldheroespatcher@ea.com [2014-03-16]
FF Extension: BYTubeD - Bulk YouTube video Downloader - C:\Users\---\AppData\Roaming\Mozilla\Firefox\Profiles\bda2rjt1.default\Extensions\bytubed@cs213.cse.iitk.ac.in [2014-01-10]
FF Extension: No Name - C:\Users\---\AppData\Roaming\Mozilla\Firefox\Profiles\bda2rjt1.default\Extensions\staged [2014-04-16]
FF Extension: Super Start - C:\Users\---\AppData\Roaming\Mozilla\Firefox\Profiles\bda2rjt1.default\Extensions\superstart@enjoyfreeware.org [2014-03-02]
FF Extension: YouTube Unblocker - C:\Users\---\AppData\Roaming\Mozilla\Firefox\Profiles\bda2rjt1.default\Extensions\youtubeunblocker@unblocker.yt [2014-02-27]
FF Extension: DownloadHelper - C:\Users\---\AppData\Roaming\Mozilla\Firefox\Profiles\bda2rjt1.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} [2014-03-25]
FF Extension: facepaste - C:\Users\---\AppData\Roaming\Mozilla\Firefox\Profiles\bda2rjt1.default\Extensions\facepaste.firefox.addon@azabani.com.xpi [2014-01-31]
FF Extension: WEB.DE MailCheck - C:\Users\---\AppData\Roaming\Mozilla\Firefox\Profiles\bda2rjt1.default\Extensions\toolbar@web.de.xpi [2014-01-11]
FF Extension: Session Manager - C:\Users\---\AppData\Roaming\Mozilla\Firefox\Profiles\bda2rjt1.default\Extensions\{1280606b-2510-4fe0-97ef-9b5a22eafe30}.xpi [2014-02-15]
FF Extension: DownThemAll! - C:\Users\---\AppData\Roaming\Mozilla\Firefox\Profiles\bda2rjt1.default\Extensions\{DDC359D1-844A-42a7-9AA1-88A850A938A8}.xpi [2014-01-14]
FF HKLM\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird
FF Extension: ESET Smart Security Extension - C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird [2014-01-09]
FF HKLM-x32\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird
FF Extension: ESET Smart Security Extension - C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird [2014-01-09]
==================== Services (Whitelisted) =================
S3 Adobe LM Service; C:\Program Files (x86)\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [72704 2014-01-18] (Adobe Systems)
R2 ekrn; C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe [1337752 2013-09-12] (ESET)
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [820184 2013-02-13] (Intel(R) Corporation)
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [131544 2013-03-12] (Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-03-12] (Intel Corporation)
R2 NitroReaderDriverReadSpool3; C:\Program Files\Common Files\Nitro\Reader\3.0\NitroPDFReaderDriverService3x64.exe [230416 2013-07-26] (Nitro PDF Software)
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76888 2014-03-17] ()
==================== Drivers (Whitelisted) ====================
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283064 2014-01-10] (Disc Soft Ltd)
R1 eamonm; C:\Windows\System32\DRIVERS\eamonm.sys [239320 2013-09-17] (ESET)
U5 edevmon; C:\Windows\System32\Drivers\edevmon.sys [239296 2013-09-17] (ESET)
R1 ehdrv; C:\Windows\System32\DRIVERS\ehdrv.sys [168256 2013-09-17] (ESET)
R2 epfw; C:\Windows\System32\DRIVERS\epfw.sys [220232 2013-09-17] (ESET)
R1 EpfwLWF; C:\Windows\System32\DRIVERS\EpfwLWF.sys [44120 2013-09-17] (ESET)
R0 epfwwfp; C:\Windows\System32\DRIVERS\epfwwfp.sys [62136 2013-09-17] (ESET)
R1 HWiNFO32; C:\Windows\system32\drivers\HWiNFO64A.SYS [31648 2014-03-02] (REALiX(tm))
R3 SmbDrvI; C:\Windows\System32\DRIVERS\Smb_driver_Intel.sys [33008 2013-06-04] (Synaptics Incorporated)
R1 UimBus; C:\Windows\System32\DRIVERS\uimx64.sys [90960 2013-03-15] (Windows (R) 2000 DDK provider)
R1 Uim_IM; C:\Windows\System32\Drivers\Uim_IMx64.sys [633680 2013-03-15] (Paragon)
R1 Uim_VIM; C:\Windows\System32\Drivers\uim_vimx64.sys [390352 2013-03-15] (Paragon)
R3 vm331avs; C:\Windows\System32\Drivers\vm331avs.sys [1045248 2013-03-01] (Vimicro Corporation)
S3 cpuz136; \??\C:\Windows\TEMP\cpuz136\cpuz136_x64.sys [X]
S3 GPUZ; \??\C:\Windows\TEMP\GPUZ.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2014-04-15 22:50 - 2014-04-15 22:51 - 00000000 ____D () C:\Users\---\AppData\Local\Fallout3
2014-04-15 22:44 - 2014-04-15 22:44 - 00018511 _____ () C:\Windows\DirectX.log
2014-04-15 17:39 - 2014-04-15 17:39 - 00109680 _____ () C:\Users\---\AppData\Local\GDIPFONTCACHEV1.DAT
2014-04-15 17:03 - 2014-04-15 22:16 - 00000000 ____D () C:\Programme (x64)
2014-04-14 14:46 - 2014-04-14 14:46 - 00002095 _____ () C:\Users\Public\Desktop\Mozilla Thunderbird.lnk
2014-04-14 14:46 - 2014-04-14 14:46 - 00000000 ____D () C:\Users\---\AppData\Roaming\Thunderbird
2014-04-14 14:46 - 2014-04-14 14:46 - 00000000 ____D () C:\Users\---\AppData\Local\Thunderbird
2014-04-14 14:46 - 2014-04-14 14:46 - 00000000 ____D () C:\Program Files (x86)\Mozilla Thunderbird
2014-04-13 23:05 - 2014-04-13 23:05 - 00000000 ____D () C:\Users\---\Documents\NeocoreGames
2014-04-13 22:57 - 2014-04-13 22:57 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation
2014-04-12 00:34 - 2014-04-12 00:34 - 00178800 _____ (Sony DADC Austria AG.) C:\Windows\SysWOW64\CmdLineExt_x64.dll
2014-04-11 16:26 - 2014-04-15 15:04 - 00000000 ____D () C:\Users\---\AppData\Local\SKIDROW
2014-04-11 15:01 - 2014-04-11 15:01 - 00000000 ____D () C:\ProgramData\Äîêóìåíòû
2014-04-10 20:23 - 2014-03-06 12:21 - 23549440 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-04-10 20:23 - 2014-03-06 11:32 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-04-10 20:23 - 2014-03-06 11:31 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-04-10 20:23 - 2014-03-06 11:19 - 17387008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-04-10 20:23 - 2014-03-06 10:59 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-04-10 20:23 - 2014-03-06 10:57 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-04-10 20:23 - 2014-03-06 10:57 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-04-10 20:23 - 2014-03-06 10:53 - 02767360 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-04-10 20:23 - 2014-03-06 10:40 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-04-10 20:23 - 2014-03-06 10:39 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-04-10 20:23 - 2014-03-06 10:32 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-04-10 20:23 - 2014-03-06 10:32 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-04-10 20:23 - 2014-03-06 10:29 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-04-10 20:23 - 2014-03-06 10:29 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-04-10 20:23 - 2014-03-06 10:28 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-04-10 20:23 - 2014-03-06 10:15 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-04-10 20:23 - 2014-03-06 10:11 - 05784064 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-04-10 20:23 - 2014-03-06 10:09 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-04-10 20:23 - 2014-03-06 10:03 - 00586240 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-04-10 20:23 - 2014-03-06 10:02 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-04-10 20:23 - 2014-03-06 10:02 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-04-10 20:23 - 2014-03-06 10:01 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-04-10 20:23 - 2014-03-06 09:56 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-04-10 20:23 - 2014-03-06 09:48 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-04-10 20:23 - 2014-03-06 09:47 - 02178048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-04-10 20:23 - 2014-03-06 09:46 - 04254720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-04-10 20:23 - 2014-03-06 09:46 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-04-10 20:23 - 2014-03-06 09:45 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-04-10 20:23 - 2014-03-06 09:42 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-04-10 20:23 - 2014-03-06 09:40 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-04-10 20:23 - 2014-03-06 09:38 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-04-10 20:23 - 2014-03-06 09:36 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-04-10 20:23 - 2014-03-06 09:22 - 00367616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-04-10 20:23 - 2014-03-06 09:21 - 00628736 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-04-10 20:23 - 2014-03-06 09:13 - 00032256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-04-10 20:23 - 2014-03-06 09:11 - 02043904 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-04-10 20:23 - 2014-03-06 09:07 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-04-10 20:23 - 2014-03-06 09:01 - 00244224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-04-10 20:23 - 2014-03-06 08:53 - 13551104 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-04-10 20:23 - 2014-03-06 08:46 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-04-10 20:23 - 2014-03-06 08:40 - 01967104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-04-10 20:23 - 2014-03-06 08:36 - 11745792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-04-10 20:23 - 2014-03-06 08:22 - 02260480 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-04-10 20:23 - 2014-03-06 07:58 - 01400832 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-04-10 20:23 - 2014-03-06 07:50 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-04-10 20:23 - 2014-03-06 07:43 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-04-10 20:23 - 2014-03-06 07:41 - 01789440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-04-10 20:23 - 2014-03-06 07:36 - 01143808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-04-09 12:26 - 2014-04-09 12:26 - 00000000 ____D () C:\Users\---\AppData\Local\CrashRpt
2014-04-09 02:05 - 2014-04-12 00:20 - 00000000 ____D () C:\Users\---\AppData\Local\id Software
2014-04-09 00:14 - 2014-04-09 00:14 - 00000000 ____D () C:\Windows\SysWOW64\xlive
2014-04-09 00:14 - 2014-04-09 00:14 - 00000000 ____D () C:\Program Files (x86)\Microsoft Games for Windows - LIVE
2014-04-08 23:40 - 2014-03-04 11:44 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2014-04-08 23:40 - 2014-03-04 11:44 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2014-04-08 23:40 - 2014-03-04 11:44 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2014-04-08 23:40 - 2014-03-04 11:44 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2014-04-08 23:40 - 2014-03-04 11:44 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2014-04-08 23:40 - 2014-03-04 11:17 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2014-04-08 23:40 - 2014-03-04 11:16 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2014-04-08 23:40 - 2014-03-04 11:16 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2014-04-08 23:40 - 2014-03-04 11:16 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2014-04-08 23:40 - 2014-03-04 10:09 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2014-04-08 23:40 - 2014-03-04 10:09 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2014-04-08 23:40 - 2014-02-04 04:35 - 00274880 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msiscsi.sys
2014-04-08 23:40 - 2014-02-04 04:35 - 00190912 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys
2014-04-08 23:40 - 2014-02-04 04:35 - 00027584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Diskdump.sys
2014-04-08 23:40 - 2014-02-04 04:28 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\iologmsg.dll
2014-04-08 23:40 - 2014-02-04 04:00 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iologmsg.dll
2014-04-08 23:40 - 2014-01-24 04:37 - 01684928 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2014-04-07 10:58 - 2014-04-07 10:58 - 00000000 ____D () C:\Program Files\KONICA MINOLTA
2014-04-06 23:15 - 2014-03-25 03:21 - 00000918 _____ () C:\Users\---\Desktop\Battle.net.lnk
2014-04-05 16:13 - 2014-04-05 16:16 - 00000000 ____D () C:\Users\---\AppData\Roaming\KeePass
2014-04-05 16:12 - 2014-04-05 16:13 - 00000000 ____D () C:\Program Files (x86)\KeePass Password Safe 2
2014-04-05 16:12 - 2014-04-05 16:12 - 00001114 _____ () C:\Users\---\Desktop\KeePass 2.lnk
2014-04-05 13:31 - 2014-04-05 13:31 - 00000000 _____ () C:\Neues Textdokument.txt
2014-04-04 12:04 - 2014-04-15 17:39 - 00000000 ____D () C:\Users\---\Desktop\Bewerbungen Neu!
2014-04-01 12:50 - 2014-04-01 12:40 - 00002697 _____ () C:\Users\---\Desktop\Microsoft Office Word 2007.lnk
2014-04-01 12:39 - 2014-04-01 12:41 - 00000000 ____D () C:\Program Files (x86)\Microsoft Works
2014-04-01 12:39 - 2014-04-01 12:39 - 00000000 ____D () C:\Windows\PCHEALTH
2014-04-01 12:39 - 2014-04-01 12:39 - 00000000 ____D () C:\Program Files (x86)\Microsoft Visual Studio
2014-04-01 12:37 - 2014-04-01 12:37 - 00000000 ____D () C:\Program Files\Microsoft Office
2014-04-01 12:36 - 2014-04-01 12:36 - 00000000 __RHD () C:\MSOCache
2014-03-29 22:43 - 2014-04-15 22:51 - 00000000 ____D () C:\Users\---\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2014-03-25 14:46 - 2014-03-26 01:48 - 00000000 ____D () C:\Users\---\Documents\Diablo III
2014-03-25 12:50 - 2014-03-25 12:50 - 00000000 ____D () C:\Users\---\AppData\Roaming\WinRAR
2014-03-25 12:33 - 2014-03-25 12:33 - 00001187 _____ () C:\Users\---\Desktop\JDownloader.lnk
2014-03-25 03:21 - 2014-04-16 08:59 - 00000000 ____D () C:\Users\---\AppData\Local\Battle.net
2014-03-25 03:21 - 2014-03-25 03:26 - 00000000 ____D () C:\Users\---\AppData\Roaming\Battle.net
2014-03-25 03:21 - 2014-03-25 03:21 - 00000000 ____D () C:\Users\---\AppData\Local\Blizzard Entertainment
2014-03-25 03:21 - 2014-03-25 03:21 - 00000000 ____D () C:\ProgramData\Blizzard Entertainment
2014-03-25 03:12 - 2014-03-25 03:12 - 00000000 ____D () C:\ProgramData\Battle.net
2014-03-24 21:37 - 2014-03-24 21:37 - 00000000 ____D () C:\Windows\ERUNT
2014-03-24 21:18 - 2014-03-24 21:26 - 00000000 ____D () C:\AdwCleaner
2014-03-24 00:33 - 2014-03-24 00:33 - 00001118 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-03-24 00:33 - 2014-03-24 00:33 - 00000000 ____D () C:\Users\---\AppData\Roaming\Malwarebytes
2014-03-24 00:33 - 2014-03-24 00:33 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-03-24 00:33 - 2014-03-24 00:33 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-03-24 00:33 - 2013-04-04 15:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-03-24 00:10 - 2014-04-16 09:07 - 00000000 ____D () C:\FRST
2014-03-23 22:01 - 2014-03-23 23:59 - 00000000 ____D () C:\Users\---\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-03-19 15:43 - 2014-03-19 15:43 - 01172664 _____ (AnyProtect.com) C:\Users\---\AppData\Local\nsq3D63.tmp
2014-03-19 15:41 - 2014-03-19 15:41 - 00000000 ____D () C:\Users\---\AppData\Roaming\MyPhoneExplorer
2014-03-19 15:41 - 2014-03-19 15:41 - 00000000 ____D () C:\Program Files (x86)\MyPhoneExplorer
2014-03-17 00:57 - 2014-03-17 01:09 - 00282296 _____ () C:\Windows\SysWOW64\PnkBstrB.xtr
2014-03-17 00:57 - 2014-03-17 00:57 - 00000000 ____D () C:\Users\---\AppData\Local\PunkBuster
2014-03-17 00:53 - 2014-03-17 01:18 - 00000000 ____D () C:\Users\---\Documents\Battlefield Heroes
2014-03-17 00:51 - 2014-03-17 01:09 - 00282296 _____ () C:\Windows\SysWOW64\PnkBstrB.exe
2014-03-17 00:51 - 2014-03-17 01:09 - 00076888 _____ () C:\Windows\SysWOW64\PnkBstrA.exe
2014-03-17 00:51 - 2014-03-17 00:57 - 00270240 _____ () C:\Windows\SysWOW64\PnkBstrB.ex0
==================== One Month Modified Files and Folders =======
2014-04-16 09:07 - 2014-03-24 00:10 - 00000000 ____D () C:\FRST
2014-04-16 09:02 - 2014-01-09 17:04 - 00000000 ____D () C:\Users\---\AppData\Roaming\uTorrent
2014-04-16 08:59 - 2014-03-25 03:21 - 00000000 ____D () C:\Users\---\AppData\Local\Battle.net
2014-04-16 08:50 - 2014-03-15 22:19 - 00000000 ___RD () C:\Users\---\Desktop\zeitvertreib
2014-04-16 08:49 - 2014-03-16 14:01 - 00000000 ____D () C:\Users\---\Documents\My Games
2014-04-16 08:49 - 2014-01-06 17:43 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-04-16 08:28 - 2014-02-11 13:17 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA1cf271adaaa5c5f.job
2014-04-16 00:13 - 2014-03-07 10:51 - 01778454 _____ () C:\Windows\WindowsUpdate.log
2014-04-15 22:51 - 2014-04-15 22:50 - 00000000 ____D () C:\Users\---\AppData\Local\Fallout3
2014-04-15 22:51 - 2014-03-29 22:43 - 00000000 ____D () C:\Users\---\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2014-04-15 22:44 - 2014-04-15 22:44 - 00018511 _____ () C:\Windows\DirectX.log
2014-04-15 22:16 - 2014-04-15 17:03 - 00000000 ____D () C:\Programme (x64)
2014-04-15 17:39 - 2014-04-15 17:39 - 00109680 _____ () C:\Users\---\AppData\Local\GDIPFONTCACHEV1.DAT
2014-04-15 17:39 - 2014-04-04 12:04 - 00000000 ____D () C:\Users\---\Desktop\Bewerbungen Neu!
2014-04-15 17:23 - 2011-04-12 09:43 - 00702436 _____ () C:\Windows\system32\perfh007.dat
2014-04-15 17:23 - 2011-04-12 09:43 - 00150044 _____ () C:\Windows\system32\perfc007.dat
2014-04-15 17:23 - 2009-07-14 07:13 - 01626920 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-04-15 15:52 - 2014-03-01 20:49 - 00000000 ____D () C:\Users\---\Desktop\fahrt
2014-04-15 15:04 - 2014-04-11 16:26 - 00000000 ____D () C:\Users\---\AppData\Local\SKIDROW
2014-04-15 13:37 - 2014-01-10 00:33 - 00000000 ____D () C:\Users\---\AppData\Roaming\DAEMON Tools Lite
2014-04-15 10:28 - 2014-01-12 10:22 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-04-15 09:36 - 2014-03-14 20:28 - 00000000 ____D () C:\Program Files (x86)\Steam
2014-04-14 14:46 - 2014-04-14 14:46 - 00002095 _____ () C:\Users\Public\Desktop\Mozilla Thunderbird.lnk
2014-04-14 14:46 - 2014-04-14 14:46 - 00000000 ____D () C:\Users\---\AppData\Roaming\Thunderbird
2014-04-14 14:46 - 2014-04-14 14:46 - 00000000 ____D () C:\Users\---\AppData\Local\Thunderbird
2014-04-14 14:46 - 2014-04-14 14:46 - 00000000 ____D () C:\Program Files (x86)\Mozilla Thunderbird
2014-04-14 14:46 - 2014-02-15 02:36 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-04-14 13:14 - 2009-07-14 06:45 - 00026544 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-04-14 13:14 - 2009-07-14 06:45 - 00026544 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-04-14 13:07 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-04-14 10:46 - 2014-01-06 17:01 - 00000000 ____D () C:\Users\---\AppData\Local\Adobe
2014-04-14 10:33 - 2014-01-06 17:02 - 00692400 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-04-14 10:33 - 2014-01-06 17:02 - 00070832 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-04-14 08:56 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache
2014-04-13 23:05 - 2014-04-13 23:05 - 00000000 ____D () C:\Users\---\Documents\NeocoreGames
2014-04-13 22:57 - 2014-04-13 22:57 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation
2014-04-12 00:34 - 2014-04-12 00:34 - 00178800 _____ (Sony DADC Austria AG.) C:\Windows\SysWOW64\CmdLineExt_x64.dll
2014-04-12 00:20 - 2014-04-09 02:05 - 00000000 ____D () C:\Users\---\AppData\Local\id Software
2014-04-11 15:01 - 2014-04-11 15:01 - 00000000 ____D () C:\ProgramData\Äîêóìåíòû
2014-04-10 20:31 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
2014-04-10 20:24 - 2014-02-14 15:06 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-04-10 20:23 - 2014-01-04 21:02 - 00000000 ____D () C:\Windows\system32\MRT
2014-04-10 20:22 - 2014-01-04 21:02 - 90655440 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-04-09 12:26 - 2014-04-09 12:26 - 00000000 ____D () C:\Users\---\AppData\Local\CrashRpt
2014-04-09 11:16 - 2014-01-10 22:53 - 00000000 ____D () C:\Users\---\AppData\Roaming\Nitro PDF
2014-04-09 00:14 - 2014-04-09 00:14 - 00000000 ____D () C:\Windows\SysWOW64\xlive
2014-04-09 00:14 - 2014-04-09 00:14 - 00000000 ____D () C:\Program Files (x86)\Microsoft Games for Windows - LIVE
2014-04-08 23:04 - 2009-07-14 05:20 - 00000000 ____D () C:\Program Files\Common Files\Microsoft Shared
2014-04-07 10:58 - 2014-04-07 10:58 - 00000000 ____D () C:\Program Files\KONICA MINOLTA
2014-04-07 00:51 - 2014-01-06 00:58 - 00007620 _____ () C:\Users\---\AppData\Local\Resmon.ResmonCfg
2014-04-05 16:16 - 2014-04-05 16:13 - 00000000 ____D () C:\Users\---\AppData\Roaming\KeePass
2014-04-05 16:13 - 2014-04-05 16:12 - 00000000 ____D () C:\Program Files (x86)\KeePass Password Safe 2
2014-04-05 16:12 - 2014-04-05 16:12 - 00001114 _____ () C:\Users\---\Desktop\KeePass 2.lnk
2014-04-05 13:31 - 2014-04-05 13:31 - 00000000 _____ () C:\Neues Textdokument.txt
2014-04-04 15:58 - 2014-01-06 21:52 - 00000000 ____D () C:\Users\---\AppData\Roaming\vlc
2014-04-01 12:41 - 2014-04-01 12:39 - 00000000 ____D () C:\Program Files (x86)\Microsoft Works
2014-04-01 12:40 - 2014-04-01 12:50 - 00002697 _____ () C:\Users\---\Desktop\Microsoft Office Word 2007.lnk
2014-04-01 12:39 - 2014-04-01 12:39 - 00000000 ____D () C:\Windows\PCHEALTH
2014-04-01 12:39 - 2014-04-01 12:39 - 00000000 ____D () C:\Program Files (x86)\Microsoft Visual Studio
2014-04-01 12:39 - 2014-02-14 15:06 - 00000000 ____D () C:\Program Files (x86)\Microsoft Office
2014-04-01 12:37 - 2014-04-01 12:37 - 00000000 ____D () C:\Program Files\Microsoft Office
2014-04-01 12:37 - 2011-04-12 09:54 - 00000000 ____D () C:\Windows\ShellNew
2014-04-01 12:36 - 2014-04-01 12:36 - 00000000 __RHD () C:\MSOCache
2014-04-01 11:58 - 2009-07-14 04:34 - 00000387 _____ () C:\Windows\win.ini
2014-03-30 10:23 - 2014-02-11 13:17 - 00004106 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA1cf271adaaa5c5f
2014-03-30 10:23 - 2014-01-12 10:22 - 00003854 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-03-29 21:22 - 2014-01-04 01:47 - 00000000 ____D () C:\Users\---
2014-03-29 15:31 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-03-26 01:48 - 2014-03-25 14:46 - 00000000 ____D () C:\Users\---\Documents\Diablo III
2014-03-25 21:29 - 2014-03-16 10:39 - 00000000 ____D () C:\Users\---\MediathekView
2014-03-25 12:50 - 2014-03-25 12:50 - 00000000 ____D () C:\Users\---\AppData\Roaming\WinRAR
2014-03-25 12:33 - 2014-03-25 12:33 - 00001187 _____ () C:\Users\---\Desktop\JDownloader.lnk
2014-03-25 12:33 - 2014-01-14 15:31 - 00000000 ____D () C:\Portable Programme
2014-03-25 03:26 - 2014-03-25 03:21 - 00000000 ____D () C:\Users\---\AppData\Roaming\Battle.net
2014-03-25 03:21 - 2014-04-06 23:15 - 00000918 _____ () C:\Users\---\Desktop\Battle.net.lnk
2014-03-25 03:21 - 2014-03-25 03:21 - 00000000 ____D () C:\Users\---\AppData\Local\Blizzard Entertainment
2014-03-25 03:21 - 2014-03-25 03:21 - 00000000 ____D () C:\ProgramData\Blizzard Entertainment
2014-03-25 03:12 - 2014-03-25 03:12 - 00000000 ____D () C:\ProgramData\Battle.net
2014-03-25 02:26 - 2014-01-14 17:07 - 00000000 ____D () C:\Users\---\Downloads\BYTube
2014-03-24 21:37 - 2014-03-24 21:37 - 00000000 ____D () C:\Windows\ERUNT
2014-03-24 21:26 - 2014-03-24 21:18 - 00000000 ____D () C:\AdwCleaner
2014-03-24 00:33 - 2014-03-24 00:33 - 00001118 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-03-24 00:33 - 2014-03-24 00:33 - 00000000 ____D () C:\Users\---\AppData\Roaming\Malwarebytes
2014-03-24 00:33 - 2014-03-24 00:33 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-03-24 00:33 - 2014-03-24 00:33 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-03-23 23:59 - 2014-03-23 22:01 - 00000000 ____D () C:\Users\---\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-03-23 22:01 - 2014-01-24 16:24 - 00000000 ____D () C:\Program Files\Rainmeter
2014-03-19 15:59 - 2014-01-10 22:58 - 00001156 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-03-19 15:59 - 2014-01-05 14:36 - 00000727 _____ () C:\Users\---\Desktop\Nightly.lnk
2014-03-19 15:43 - 2014-03-19 15:43 - 01172664 _____ (AnyProtect.com) C:\Users\---\AppData\Local\nsq3D63.tmp
2014-03-19 15:41 - 2014-03-19 15:41 - 00000000 ____D () C:\Users\---\AppData\Roaming\MyPhoneExplorer
2014-03-19 15:41 - 2014-03-19 15:41 - 00000000 ____D () C:\Program Files (x86)\MyPhoneExplorer
2014-03-17 01:18 - 2014-03-17 00:53 - 00000000 ____D () C:\Users\---\Documents\Battlefield Heroes
2014-03-17 01:09 - 2014-03-17 00:57 - 00282296 _____ () C:\Windows\SysWOW64\PnkBstrB.xtr
2014-03-17 01:09 - 2014-03-17 00:51 - 00282296 _____ () C:\Windows\SysWOW64\PnkBstrB.exe
2014-03-17 01:09 - 2014-03-17 00:51 - 00076888 _____ () C:\Windows\SysWOW64\PnkBstrA.exe
2014-03-17 00:57 - 2014-03-17 00:57 - 00000000 ____D () C:\Users\---\AppData\Local\PunkBuster
2014-03-17 00:57 - 2014-03-17 00:51 - 00270240 _____ () C:\Windows\SysWOW64\PnkBstrB.ex0
Files to move or delete:
====================
C:\ProgramData\PKP_DLes.DAT
C:\ProgramData\PKP_DLet.DAT
C:\ProgramData\PKP_DLev.DAT
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2014-04-09 03:49
==================== End Of Log ============================
Viele Grüße |
|
16.04.2014, 19:26
| #8 |
| /// the machine /// TB-Ausbilder | Nach Download von "MyphoneExplorer" von chip.de - Spyware, Adware - jetzt Trojaner! (Win32/Injected.F Trojaner) Installiere Ccleaner, damit solltest Du alle Programme sehen. Eine Adware hat die Uninstall Einträge beschädigt, nicht reparierbar.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
| Themen zu Nach Download von "MyphoneExplorer" von chip.de - Spyware, Adware - jetzt Trojaner! (Win32/Injected.F Trojaner) |
| adware, awesomehp, awesomehp entfernen, chip.de, desktop, downloader, homepage, iexplore.exe, install.exe, monitor, nach download, newtab, ntdll.dll, pup.optional.awesomehp.a, pup.optional.iepluginservice.a, pup.optional.qone8, pup.optional.quickstart.a, pup.optional.softwareupdater, pup.optional.suptab.a, pup.optional.wpmanager.a, pup.software.updater, realtek, services.exe, smartphone, starten nicht, svchost.exe, trojaner, windows |
Linear-Darstellung
