Zurück   Trojaner-Board > Malware entfernen > Plagegeister aller Art und deren Bekämpfung

Plagegeister aller Art und deren Bekämpfung: Windows 7: Anwendungen funktionieren nicht mehr - Programmordner leer, Verknüpfungen noch da

Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen.

Antwort
Alt 06.11.2013, 10:18   #1
schrauber
/// the machine
/// TB-Ausbilder
 

Windows 7: Anwendungen funktionieren nicht mehr - Programmordner leer, Verknüpfungen noch da - Standard

Windows 7: Anwendungen funktionieren nicht mehr - Programmordner leer, Verknüpfungen noch da




ESET Online Scanner

  • Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
  • Lade und starte Eset Online Scanner
  • Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
  • Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
  • Klicke auf Starten.
  • Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
  • Klicke am Ende des Suchlaufs auf Fertig stellen.
  • Schließe das Fenster von ESET.
  • Explorer öffnen.
  • C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
  • Logfile hier posten.
  • Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
  • Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset


Downloade Dir bitte SecurityCheck und:

  • Speichere es auf dem Desktop.
  • Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
  • Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.
Poste den Inhalt bitte hier.

und ein frisches FRST log bitte. Noch Probleme?
__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Alt 06.11.2013, 19:15   #2
Danchen
 
Windows 7: Anwendungen funktionieren nicht mehr - Programmordner leer, Verknüpfungen noch da - Standard

Windows 7: Anwendungen funktionieren nicht mehr - Programmordner leer, Verknüpfungen noch da



Hi,

kannst du mir sagen, ob ich das Windows-Update (in meinem letzten Post beschrieben) ohne Bedenken durchführen kann?

Ich werde dann die nächsten Tage alle Programme, die nicht mehr funktionieren neu installieren und schauen was passiert.
Die Symbole aus dem "Infobereichsysmbole" (also unten rechts auf dem Bildschirm) sind übrigens wieder da.

Ich möchte mich auf jeden Fall schonmal recht herzlich für die Hilfe bedanken und melde mich in ein paar Tagen ob alles OK ist.



Kannst du mir noch mitteilen was das Problem ausgelöst hat?

Hier die Log-files

Eset
Code:
ATTFilter
ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=65c7317f530e2740adc60d42018a5a07
# engine=15775
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2013-11-06 01:26:44
# local_time=2013-11-06 02:26:44 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# lang=1033
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=1032 16777213 100 89 18962 126915748 0 0
# compatibility_mode=5893 16776574 100 94 10220604 135374254 0 0
# scanned=220320
# found=0
# cleaned=0
# scan_time=13712
         
SecurityCheck
Code:
ATTFilter
 Results of screen317's Security Check version 0.99.74  
 Windows 7 Service Pack 1 x64 (UAC is enabled)  
 Internet Explorer 10  
``````````````Antivirus/Firewall Check:`````````````` 
AVG Anti-Virus Business Edition 2011   
 Antivirus up to date!   
`````````Anti-malware/Other Utilities Check:````````` 
 Malwarebytes Anti-Malware Version 1.75.0.1300  
 Java 7 Update 45  
 Java version out of Date! 
 Adobe Flash Player 11.9.900.117  
 Adobe Reader XI  
 Mozilla Firefox (25.0) 
````````Process Check: objlist.exe by Laurent````````  
 AVG avgwdsvc.exe 
 AVG avgtray.exe 
 AVG avgemc.exe 
 Internet Manager OnlineUpdate ouc.exe  
`````````````````System Health check````````````````` 
 Total Fragmentation on Drive C:  
````````````````````End of Log``````````````````````
         
FRST

FRST Logfile:

FRST Logfile:
Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 31-10-2013
Ran by Student (administrator) on ICH on 06-11-2013 17:27:47
Running from C:\Users\Student\Desktop
Windows 7 Professional Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(AuthenTec, Inc.) C:\Program Files\Fingerprint Sensor\ATService.exe
(Microsoft Corporation) C:\Windows\system32\WLANExt.exe
(Microsoft Corporation) C:\Windows\SYSTEM32\WISPTIS.EXE
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG10\avgwdsvc.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
() C:\ProgramData\DatacardService\HWDeviceService64.exe
() C:\ProgramData\Internet Manager\OnlineUpdate\ouc.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe
(O2Micro International) C:\Windows\system32\DRIVERS\o2flash.exe
(FUJITSU LIMITED) C:\Program Files\Fujitsu\Plugfree NETWORK\PFNService.exe
(FUJITSU LIMITED) C:\Program Files\Fujitsu\PSUtility\PSUService.exe
() C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\ISD\ISD_Tablet.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Microsoft Corporation) C:\Windows\SYSTEM32\WISPTIS.EXE
() C:\Program Files (x86)\CoreTemp\Core Temp.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\ISD\ISD_TabletUser.exe
(Huawei Technologies Co., Ltd.) C:\ProgramData\DatacardService\DCSHelper.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\ISD\ISD_Tablet.exe
(Wacom Technology, Inc) C:\Program Files\Tablet\CalibrationAssistant.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(FUJITSU LIMITED) C:\Program Files\Fujitsu\FUJ02E3\FUJ02E3.exe
(FUJITSU LIMITED) C:\Program Files\Fujitsu\FDM7\FdmDaemon.exe
(FUJITSU LIMITED) C:\Program Files\Fujitsu\PSUtility\TrayManager.exe
(FUJITSU LIMITED) C:\Program Files\Fujitsu\BatteryAid2\BatteryDaemon.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe
(AuthenTec, Inc.) C:\Program Files\Fingerprint Sensor\ATSwpNav.exe
(FUJITSU LIMITED) C:\Program Files\Fujitsu\SSUtility\FJSSDMN.exe
(FUJITSU LIMITED) C:\Program Files\Fujitsu\AutoRotation\AutoRotation.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office14\MSOSYNC.EXE
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Dropbox, Inc.) C:\Users\Student\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE
(Fujitsu Computer Systems Corporation) C:\Program Files\Fujitsu\Utils\FjDspMon.exe
(Fujitsu Computer Systems Corporation) C:\Program Files\Fujitsu\Utils\fjevents.exe
(Fujitsu Computer Systems) C:\Program Files\Fujitsu\Utils\FjLidMon.exe
(Fujitsu America, Inc.) C:\Program Files\Fujitsu\Utils\FjMnuIco.exe
(Intel Corporation) C:\Windows\system32\igfxext.exe
(FUJITSU LIMITED) C:\Program Files (x86)\Fujitsu\Fujitsu Hotkey Utility\IndicatorUty.exe
(FUJITSU LIMITED) C:\Program Files (x86)\Fujitsu\PointingDeviceUtility\FJPDAutoSet.exe
(Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
(Fujitsu Technology Solutions) C:\Fujitsu\Programs\DeskUpdate\DeskUpdateNotifier.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG10\avgtray.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
() C:\Program Files (x86)\AVG\AVG10\Identity Protection\agent\bin\avgidsmonitor.exe
(FUJITSU LIMITED) C:\Program Files\Fujitsu\Plugfree NETWORK\PFNetDm.EXE
(FUJITSU LIMITED) C:\Program Files\Fujitsu\Plugfree NETWORK\PFNTray.EXE
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PrivacyIconClient.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Ink\InputPersonalization.exe
(SAP AG) C:\Program Files (x86)\SAP\SAPsetup\Setup\Updater\NwSapAutoWorkstationUpdateService.exe
(Microsoft Corporation) C:\Windows\system32\StikyNot.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG10\Identity Protection\Agent\Bin\AVGIDSAgent.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG10\avgemca.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG10\avgnsa.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG10\avgchsva.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG10\avgrsa.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG10\avgcsrva.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG10\avgam.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG10\avgcsrvx.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG10\avgcsrva.exe
(RealNetworks, Inc.) D:\Programme\update\realsched.exe
(Intel Corporation) C:\Windows\system32\igfxsrvc.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11663464 2010-12-07] (Realtek Semiconductor)
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2679592 2011-02-03] (Synaptics Incorporated)
HKLM\...\Run: [LoadFUJ02E3] - C:\Program Files\Fujitsu\FUJ02E3\FUJ02E3.exe [45680 2010-06-08] (FUJITSU LIMITED)
HKLM\...\Run: [FDM7] - C:\Program Files\Fujitsu\FDM7\FdmDaemon.exe [164200 2009-10-19] (FUJITSU LIMITED)
HKLM\...\Run: [PSUTility] - C:\Program Files\Fujitsu\PSUtility\TrayManager.exe [199528 2010-11-13] (FUJITSU LIMITED)
HKLM\...\Run: [PfNet] - C:\Program Files\Fujitsu\Plugfree NETWORK\PfNet.exe [6311424 2010-10-07] (FUJITSU LIMITED)
HKLM\...\Run: [FJBATAID2] - C:\Program Files\Fujitsu\BatteryAid2\BatteryDaemon.exe [124776 2010-10-30] (FUJITSU LIMITED)
HKLM\...\Run: [FjStrtAp] - C:\Program Files\Fujitsu\Utils\FjStrtAp.exe [19800 2010-12-01] (Fujitsu America, Inc..)
HKLM\...\Run: [HotKeysCmds] - C:\Windows\system32\hkcmd.exe [ ] ()
HKLM\...\Run: [IntelPAN] - C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe [1935120 2011-03-30] (Intel(R) Corporation)
HKLM\...\Run: [ATSwpNav] - "C:\Program Files\Fingerprint Sensor\ATSwpNav" -run
HKLM\...\Run: [SSUtility] - C:\Program Files\Fujitsu\SSUtility\FJSSDMN.exe [273256 2010-08-16] (FUJITSU LIMITED)
HKLM\...\Run: [FJAutoR] - C:\Program Files\Fujitsu\AutoRotation\AutoRotation.exe [87912 2010-08-31] (FUJITSU LIMITED)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKCU\...\Run: [OfficeSyncProcess] - C:\Program Files (x86)\Microsoft Office\Office14\MSOSYNC.EXE [720064 2013-04-22] (Microsoft Corporation)
HKCU\...\Run: [RESTART_STICKY_NOTES] - C:\Windows\System32\StikyNot.exe [427520 2009-07-14] (Microsoft Corporation)
HKCU\...\Policies\Explorer: [NoDriveTypeAutoRun] 0x91000000
HKLM-x32\...\Run: [IndicatorUtility] - C:\Program Files (x86)\Fujitsu\Fujitsu Hotkey Utility\IndicatorUty.exe [48752 2010-09-30] (FUJITSU LIMITED)
HKLM-x32\...\Run: [StartFujitsuPointingDeviceUtility] - C:\Program Files (x86)\Fujitsu\PointingDeviceUtility\FJPDAutoSet.exe [85104 2011-02-02] (FUJITSU LIMITED)
HKLM-x32\...\Run: [IMSS] - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe [112152 2011-02-01] (Intel Corporation)
HKLM-x32\...\Run: [NUSB3MON] - C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [113288 2010-11-17] (Renesas Electronics Corporation)
HKLM-x32\...\Run: [DeskUpdateNotifier] - C:\Fujitsu\Programs\DeskUpdate\DeskUpdateNotifier.exe [102968 2013-02-26] (Fujitsu Technology Solutions)
HKLM-x32\...\Run: [AVG_TRAY] - C:\Program Files (x86)\AVG\AVG10\avgtray.exe [2345592 2012-08-01] (AVG Technologies CZ, s.r.o.)
HKLM-x32\...\Run: [EKStatusMonitor] - C:\Program Files (x86)\Kodak\AiO\StatusMonitor\EKStatusMonitor.exe [2844608 2012-10-15] (Eastman Kodak Company)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM-x32\...\Run: [TkBellExe] - D:\Programme\Update\realsched.exe [295512 2013-11-02] (RealNetworks, Inc.)
HKLM-x32\...\Run: [BCSSync] - C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [91520 2010-03-13] (Microsoft Corporation)
Startup: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\LaunchCenter.lnk
ShortcutTarget: LaunchCenter.lnk -> C:\Program Files\Fujitsu\LaunchCenter\lcStarter.exe (Fujitsu Technology Solutions)
Startup: C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\LaunchCenter.lnk
ShortcutTarget: LaunchCenter.lnk -> C:\Program Files\Fujitsu\LaunchCenter\lcStarter.exe (Fujitsu Technology Solutions)
Startup: C:\Users\Student\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Student\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
Startup: C:\Users\Student\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk
ShortcutTarget: OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk -> C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE (Microsoft Corporation)
BootExecute: autocheck autochk * C:\PROGRA~2\AVG\AVG10\avgchsva.exe /syncC:\PROGRA~2\AVG\AVG10\avgrsa.exe /sync /restart

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de/ig?brand=FTSG&bmod=FTSG&aig=0&reason=1
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: RealNetworks Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll (RealDownloader)
BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  No File
Handler: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files (x86)\AVG\AVG10\avgppa.dll (AVG Technologies CZ, s.r.o.)
Handler: saphtmlp - {D1F8BD1E-7967-11D2-B43A-006094B9EADB} -  No File
Handler: sapr3 - {D1F8BD1E-7967-11D2-B43A-006094B9EADB} -  No File
Handler-x32: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files (x86)\AVG\AVG10\avgpp.dll (AVG Technologies CZ, s.r.o.)
Handler-x32: saphtmlp - {D1F8BD1E-7967-11D2-B43A-006094B9EADB} - d:\programme\sap\sapgui\saphtmlp.dll No File
Handler-x32: sapr3 - {D1F8BD1E-7967-11D2-B43A-006094B9EADB} - d:\programme\sap\sapgui\saphtmlp.dll No File
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{7E2A9C4C-6439-4D64-94D7-D1C70414D42F}: [NameServer]10.74.210.210 10.74.210.211

FireFox:
========
FF ProfilePath: C:\Users\Student\AppData\Roaming\Mozilla\Firefox\Profiles\gw3efxrx.default
FF NewTab: www.google.de
FF SelectedSearchEngine: Google
FF Homepage: hxxp://www.google.de/ig?brand=FTSG&bmod=FTSG&aig=0&reason=1
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_117.dll ()
FF Plugin: @java.com/DTPlugin,version=10.21.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.21.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_117.dll ()
FF Plugin-x32: @java.com/DTPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~3\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~3\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3508.0205 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @real.com/nppl3260;version=16.0.3.51 - D:\Programme\Netscape6\nppl3260.dll No File
FF Plugin-x32: @real.com/nprndlchromebrowserrecordext;version=1.3.3 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlhtml5videoshim;version=1.3.3 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlpepperflashvideoshim;version=1.3.3 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprpplugin;version=16.0.3.51 - D:\Programme\Netscape6\nprpplugin.dll No File
FF Plugin-x32: @realnetworks.com/npdlplugin;version=1 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll (RealDownloader)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF HKLM-x32\...\Firefox\Extensions: [ff-bmboc@bytemobile.com] - C:\Program Files\T-Mobile\InternetManager_H\OCx64\addon
FF HKLM-x32\...\Firefox\Extensions: [{1E73965B-8B48-48be-9C8D-68B920ABC1C4}] - C:\Program Files (x86)\AVG\AVG10\Firefox4\
FF Extension: AVG Safe Search - C:\Program Files (x86)\AVG\AVG10\Firefox4\
FF HKLM-x32\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext
FF Extension: RealDownloader - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext
FF HKLM-x32\...\Firefox\Extensions: [fmconverter@gmail.com] - C:\Program Files (x86)\Freemake\Freemake Video Converter\BrowserPlugin\Firefox\
FF Extension: Freemake Video Converter Plugin - C:\Program Files (x86)\Freemake\Freemake Video Converter\BrowserPlugin\Firefox\
FF HKLM-x32\...\Firefox\Extensions: [{DF153AFF-6948-45d7-AC98-4FC4AF8A08E2}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext\
FF Extension: RealDownloader - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext\

==================== Services (Whitelisted) =================

R2 AVGIDSAgent; C:\Program Files (x86)\AVG\AVG10\Identity Protection\Agent\Bin\AVGIDSAgent.exe [7391072 2012-01-31] (AVG Technologies CZ, s.r.o.)
R2 avgwd; C:\Program Files (x86)\AVG\AVG10\avgwdsvc.exe [269520 2011-02-08] (AVG Technologies CZ, s.r.o.)
R2 HWDeviceService64.exe; C:\ProgramData\DatacardService\HWDeviceService64.exe [346976 2011-03-14] ()
S2 Internet Manager. RunOuc; D:\Programme\UpdateDog\ouc.exe [224096 2013-11-03] ()
R2 MSSQL$SQLEXPRESS; C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe [58345832 2011-09-22] (Microsoft Corporation)
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [340240 2011-03-30] ()
R2 NWSAPAutoWorkstationUpdateSvc; C:\Program Files (x86)\SAP\SAPsetup\Setup\Updater\NwSapAutoWorkstationUpdateService.exe [180928 2012-11-21] (SAP AG)
R2 PFNService; C:\Program Files\Fujitsu\Plugfree NETWORK\PFNService.exe [331776 2010-10-07] (FUJITSU LIMITED)
R2 PowerSavingUtilityService; C:\Program Files\Fujitsu\PSUtility\PSUService.exe [63336 2010-06-17] (FUJITSU LIMITED)
R2 RealNetworks Downloader Resolver Service; C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe [39056 2013-08-14] ()
S4 SQLAgent$SQLEXPRESS; C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\SQLAGENT.EXE [431464 2011-09-22] (Microsoft Corporation)
R2 TabletServiceISD; C:\Program Files\Tablet\ISD\ISD_Tablet.exe [5640048 2011-02-23] (Wacom Technology, Corp.)

==================== Drivers (Whitelisted) ====================

S3 anvsnddrv; C:\Windows\System32\drivers\anvsnddrv.sys [33872 2011-11-28] (AnvSoft Inc.)
R3 AVGIDSDriver; C:\Windows\System32\DRIVERS\AVGIDSDriver.Sys [118864 2011-05-27] (AVG Technologies CZ, s.r.o. )
R0 AVGIDSEH; C:\Windows\System32\DRIVERS\AVGIDSEH.Sys [26704 2011-02-22] (AVG Technologies CZ, s.r.o. )
R3 AVGIDSFilter; C:\Windows\System32\DRIVERS\AVGIDSFilter.Sys [29264 2011-02-10] (AVG Technologies CZ, s.r.o. )
R1 Avgldx64; C:\Windows\System32\DRIVERS\avgldx64.sys [312160 2012-11-12] (AVG Technologies CZ, s.r.o.)
R1 Avgmfx64; C:\Windows\System32\DRIVERS\avgmfx64.sys [41552 2011-03-01] (AVG Technologies CZ, s.r.o.)
R0 Avgrkx64; C:\Windows\System32\DRIVERS\avgrkx64.sys [37456 2011-03-16] (AVG Technologies CZ, s.r.o.)
R1 Avgtdia; C:\Windows\System32\DRIVERS\avgtdia.sys [377936 2011-04-04] (AVG Technologies CZ, s.r.o.)
S3 avmeject; C:\Windows\System32\drivers\avmeject.sys [14120 2010-10-22] (AVM Berlin)
R0 BMLoad; C:\Windows\System32\drivers\BMLoad.sys [16512 2013-10-30] (Bytemobile, Inc.)
R3 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2013-08-01] (DT Soft Ltd)
R0 FBIOSDRV; C:\Windows\System32\Drivers\FBIOSDRV.sys [21104 2009-06-24] (FUJITSU LIMITED)
R3 Fjbtndrv; C:\Windows\system32\drivers\FjBtnDrv.sys [23040 2009-08-27] (Fujitsu America, Inc.)
R0 FJGSDisk; C:\Windows\System32\DRIVERS\FJGSDisk.sys [15208 2010-09-28] (FUJITSU LIMITED)
R3 FUJ02B1; C:\Windows\system32\drivers\FUJ02B1.sys [7808 2006-11-01] (FUJITSU LIMITED)
R3 FUJ02E3; C:\Windows\system32\drivers\FUJ02E3.sys [7296 2006-11-01] (FUJITSU LIMITED)
S3 FWLANUSB; C:\Windows\System32\DRIVERS\fwlanusb.sys [460800 2010-10-22] (AVM GmbH)
R3 guardian2; C:\Windows\System32\Drivers\oz776x64.sys [85736 2010-08-06] (O2Micro)
S3 SaiKF620; C:\Windows\System32\DRIVERS\SaiKF620.sys [131584 2008-10-22] (Saitek)
R1 tcpipBM; C:\Windows\System32\Drivers\tcpipBM.sys [39552 2013-10-30] (Bytemobile, Inc.)
R3 ALSysIO; \??\C:\Users\Student\AppData\Local\Temp\ALSysIO64.sys [x]
S3 catchme; \??\C:\ComboFix\catchme.sys [x]
S3 LgBttPort; system32\DRIVERS\lgbtpt64.sys [x]
S3 lgbusenum; system32\DRIVERS\lgbtbs64.sys [x]
S3 LGVMODEM; system32\DRIVERS\lgvmdm64.sys [x]
S3 usbbus; system32\DRIVERS\lgx64bus.sys [x]
S3 UsbDiag; system32\DRIVERS\lgx64diag.sys [x]
S3 USBModem; system32\DRIVERS\lgx64modem.sys [x]
S3 VSPerfDrv100; \??\D:\Programme\Microsoft Visual Studio 10.0\Team Tools\Performance Tools\x64\VSPerfDrv100.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-11-06 17:27 - 2013-11-06 17:27 - 00000894 _____ C:\Users\Student\Desktop\checkup.txt
2013-11-06 10:27 - 2013-11-06 10:27 - 00000000 ____D C:\Program Files (x86)\ESET
2013-11-05 13:49 - 2013-11-05 13:49 - 00891167 _____ C:\Users\Student\Desktop\SecurityCheck.exe
2013-11-05 13:48 - 2013-11-05 13:48 - 02347384 _____ (ESET) C:\Users\Student\Downloads\esetsmartinstaller_enu.exe
2013-11-05 13:29 - 2013-11-05 13:29 - 00001913 _____ C:\Users\Student\Desktop\JRT.txt
2013-11-05 13:20 - 2013-11-05 13:20 - 00000000 ____D C:\Windows\ERUNT
2013-11-05 13:19 - 2013-11-05 13:19 - 00024255 _____ C:\Users\Student\Desktop\AdwCleaner[S0].txt
2013-11-05 13:07 - 2013-11-05 13:14 - 00000000 ____D C:\AdwCleaner
2013-11-05 12:51 - 2013-11-05 12:51 - 01073258 _____ C:\Users\Student\Desktop\adwcleaner.exe
2013-11-05 12:51 - 2013-11-05 12:51 - 01033335 _____ (Thisisu) C:\Users\Student\Desktop\JRT.exe
2013-11-05 12:49 - 2013-11-05 12:49 - 00001075 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-11-05 12:49 - 2013-11-05 12:49 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-11-05 12:48 - 2013-11-05 12:48 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Student\Downloads\mbam-setup-1.75.0.1300(1).exe
2013-11-04 23:45 - 2013-11-05 13:20 - 00003356 _____ C:\Windows\System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-2031096137-3791022390-309066423-1000
2013-11-04 23:45 - 2013-11-05 13:20 - 00003226 _____ C:\Windows\System32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-2031096137-3791022390-309066423-1000
2013-11-04 22:09 - 2013-11-05 13:02 - 00000908 _____ C:\Windows\PFRO.log
2013-11-04 19:55 - 2013-11-05 12:26 - 00000600 _____ C:\Users\Student\AppData\Local\PUTTY.RND
2013-11-04 16:50 - 2013-11-04 16:50 - 00000000 ____D C:\Windows\Sun
2013-11-04 10:54 - 2013-11-04 10:54 - 00039956 _____ C:\ComboFix.txt
2013-11-04 10:46 - 2013-11-04 10:54 - 00000000 ____D C:\Qoobox
2013-11-04 10:46 - 2011-06-26 07:45 - 00256000 _____ C:\Windows\PEV.exe
2013-11-04 10:46 - 2010-11-07 18:20 - 00208896 _____ C:\Windows\MBR.exe
2013-11-04 10:46 - 2009-04-20 05:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2013-11-04 10:46 - 2000-08-31 01:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2013-11-04 10:46 - 2000-08-31 01:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2013-11-04 10:46 - 2000-08-31 01:00 - 00098816 _____ C:\Windows\sed.exe
2013-11-04 10:46 - 2000-08-31 01:00 - 00080412 _____ C:\Windows\grep.exe
2013-11-04 10:46 - 2000-08-31 01:00 - 00068096 _____ C:\Windows\zip.exe
2013-11-04 10:45 - 2013-11-04 10:53 - 00000000 ____D C:\Windows\erdnt
2013-11-04 10:43 - 2013-11-04 10:43 - 05143677 ____R (Swearware) C:\Users\Student\Desktop\ComboFix.exe
2013-11-04 09:41 - 2013-11-04 09:41 - 00262144 _____ C:\Windows\Minidump\110413-85207-01.dmp
2013-11-04 09:40 - 2013-11-04 09:40 - 646221585 ____N C:\Windows\MEMORY.DMP
2013-11-04 07:00 - 2013-11-04 07:01 - 00262144 _____ C:\Windows\Minidump\110413-182895-01.dmp
2013-11-03 23:37 - 2013-11-03 23:38 - 00377856 _____ C:\Users\Student\Desktop\GMER.exe
2013-11-03 23:03 - 2013-11-03 23:03 - 00000000 ____D C:\FRST
2013-11-03 22:58 - 2013-11-03 22:59 - 01957098 _____ (Farbar) C:\Users\Student\Desktop\FRST64.exe
2013-11-03 22:55 - 2013-11-03 22:55 - 00000000 _____ C:\Users\Student\defogger_reenable
2013-11-03 22:52 - 2013-11-03 22:53 - 00050477 _____ C:\Users\Student\Downloads\Defogger.exe
2013-11-03 22:16 - 2013-11-03 22:16 - 00000000 ____D C:\Users\Student\AppData\Local\Adobe
2013-11-03 21:42 - 2013-11-03 21:43 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Student\Downloads\mbam-setup-1.75.0.1300.exe
2013-11-03 21:32 - 2013-11-05 13:17 - 00002038 _____ C:\Windows\setupact.log
2013-11-03 21:32 - 2013-11-03 21:32 - 00000000 _____ C:\Windows\setuperr.log
2013-11-03 21:05 - 2013-11-03 21:05 - 00000000 ____D C:\ProgramData\TechSmith
2013-11-03 21:05 - 2013-11-03 21:05 - 00000000 ____D C:\ProgramData\regid.1995-08.com.techsmith
2013-11-03 21:05 - 2013-11-03 21:05 - 00000000 ____D C:\Program Files (x86)\QuickTime
2013-11-03 19:02 - 2013-11-03 19:02 - 00004615 _____ C:\Users\Student\AppData\Local\recently-used.xbel
2013-11-03 12:30 - 2013-11-03 12:30 - 00000017 _____ C:\Users\Student\AppData\Local\resmon.resmoncfg
2013-11-03 12:24 - 2011-09-22 21:07 - 00105832 _____ (Microsoft Corporation) C:\Windows\system32\SQSRVRES.DLL
2013-11-03 12:24 - 2011-09-22 21:06 - 00109416 _____ (Microsoft Corporation) C:\Windows\system32\perf-MSSQL$SQLEXPRESS-sqlctr10.3.5500.0.dll
2013-11-03 12:24 - 2011-09-22 17:18 - 00073064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\perf-MSSQL$SQLEXPRESS-sqlctr10.3.5500.0.dll
2013-11-03 12:12 - 2013-11-03 12:12 - 00002776 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC
2013-11-03 12:12 - 2013-11-03 12:12 - 00000000 ____D C:\Program Files\CCleaner
2013-11-03 11:18 - 2013-11-03 11:18 - 00000736 _____ C:\Users\Public\Desktop\SAP Logon.lnk
2013-11-03 11:18 - 2012-11-22 09:37 - 05225472 _____ (SAP AG) C:\Windows\SysWOW64\librfc32u.dll
2013-11-03 11:17 - 2012-11-22 09:37 - 04331520 _____ (SAP AG) C:\Windows\SysWOW64\librfc32.dll
2013-11-03 11:17 - 2012-06-20 10:27 - 08847360 _____ (IBM Corporation and others) C:\Windows\SysWOW64\icudt34.dll
2013-11-03 11:17 - 2012-06-20 10:27 - 00946176 _____ (IBM Corporation and others) C:\Windows\SysWOW64\icuuc34.dll
2013-11-03 11:17 - 2012-06-20 10:27 - 00843776 _____ (IBM Corporation and others) C:\Windows\SysWOW64\icuin34.dll
2013-11-03 11:17 - 2011-11-23 03:23 - 01064960 _____ C:\Windows\SysWOW64\h5krnl32.dll
2013-11-03 11:17 - 2011-11-23 03:23 - 00188928 _____ C:\Windows\SysWOW64\h5icon32.dll
2013-11-03 11:17 - 2011-11-23 03:23 - 00175616 _____ C:\Windows\SysWOW64\h5menu32.dll
2013-11-03 11:17 - 2011-11-23 03:23 - 00114688 _____ (heilerSoftware) C:\Windows\SysWOW64\h5dlg32.dll
2013-11-03 11:17 - 2011-11-23 03:23 - 00095744 _____ C:\Windows\SysWOW64\h5rtf32.dll
2013-11-03 11:17 - 2011-11-23 03:23 - 00051200 _____ C:\Windows\SysWOW64\h5tool32.dll
2013-11-03 11:17 - 2011-11-23 03:19 - 00001818 _____ C:\Windows\SysWOW64\icu_license.txt
2013-11-03 11:17 - 1995-05-19 08:15 - 00133904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfcans32.dll
2013-11-03 11:16 - 2012-06-20 10:30 - 01708168 _____ (SAP, Walldorf) C:\Windows\SysWOW64\SAPbtmp.dll
2013-11-03 11:15 - 2013-11-03 11:15 - 00000000 ____D C:\Program Files (x86)\SAP
2013-11-03 11:09 - 2013-11-03 11:17 - 00000000 ____D C:\Users\Student\AppData\Local\SAP
2013-11-03 10:45 - 2013-11-03 10:45 - 00000738 _____ C:\Users\Public\Desktop\GIMP 2.lnk
2013-11-03 01:18 - 2013-11-03 01:18 - 00000000 ____D C:\Users\Student\AppData\Local\webkit
2013-11-03 01:14 - 2013-11-03 21:29 - 00000000 ____D C:\Users\Student\AppData\Local\gtk-2.0
2013-11-02 16:04 - 2013-11-02 16:04 - 00000898 _____ C:\Users\Student\Desktop\GIMP 2.lnk
2013-11-02 16:03 - 2013-11-02 16:03 - 00000000 ____D C:\Users\Student\AppData\Local\gegl-0.2
2013-11-02 13:53 - 2013-11-02 13:54 - 00000000 ____D C:\Users\Student\Documents\Freemake
2013-11-02 13:53 - 2013-11-02 13:53 - 00001286 _____ C:\Users\Public\Desktop\Freemake Video Converter.lnk
2013-11-02 13:53 - 2013-11-02 13:53 - 00000000 ____D C:\Program Files (x86)\Freemake
2013-11-02 13:38 - 2013-11-03 12:14 - 00000000 ____D C:\Users\Student\AppData\Local\CrashDumps
2013-11-02 13:15 - 2013-11-02 13:15 - 00000839 _____ C:\Users\Public\Desktop\RealPlayer.lnk
2013-11-02 13:15 - 2013-11-02 13:15 - 00000000 ____D C:\Users\Student\AppData\Roaming\RealNetworks
2013-11-02 13:15 - 2013-11-02 13:15 - 00000000 ____D C:\ProgramData\RealNetworks
2013-11-02 13:15 - 2013-11-02 13:15 - 00000000 ____D C:\Program Files (x86)\RealNetworks
2013-11-02 13:14 - 2013-11-02 13:14 - 00499712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcp71.dll
2013-11-02 13:14 - 2013-11-02 13:14 - 00348160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcr71.dll
2013-11-02 13:14 - 2013-11-02 13:14 - 00272896 _____ (Progressive Networks) C:\Windows\SysWOW64\pncrt.dll
2013-11-02 13:14 - 2013-11-02 13:14 - 00201872 _____ (RealNetworks, Inc.) C:\Windows\SysWOW64\rmoc3260.dll
2013-11-02 13:14 - 2013-11-02 13:14 - 00006656 _____ (RealNetworks, Inc.) C:\Windows\SysWOW64\pndx5016.dll
2013-11-02 13:14 - 2013-11-02 13:14 - 00005632 _____ (RealNetworks, Inc.) C:\Windows\SysWOW64\pndx5032.dll
2013-11-02 13:06 - 2013-11-02 13:12 - 39382624 _____ (RealNetworks, Inc.) C:\Users\Student\Downloads\RealPlayer_de(1).exe
2013-11-02 12:38 - 2013-11-02 12:38 - 00000000 ____D C:\Users\Student\AppData\Local\Macromedia
2013-11-02 11:25 - 2013-11-02 15:07 - 00005120 _____ C:\Users\Student\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2013-11-02 11:08 - 2013-11-02 11:17 - 00000000 ____D C:\Program Files (x86)\Pinnacle
2013-11-02 11:05 - 2013-11-02 11:05 - 00001682 _____ C:\Users\Student\Desktop\putty_0.63.exe - Verknüpfung.lnk
2013-11-02 11:05 - 2013-11-02 11:05 - 00001089 _____ C:\Users\Student\Desktop\sqldeveloper.exe - Verknüpfung.lnk
2013-11-02 01:02 - 2013-11-02 01:02 - 00000000 ____D C:\Users\Student\AppData\Local\VirtualStore
2013-11-02 00:58 - 2013-11-03 11:51 - 00125768 _____ C:\Users\Student\AppData\Local\GDIPFONTCACHEV1.DAT
2013-11-01 21:13 - 2013-11-03 21:29 - 00000000 ____D C:\Users\Public\Documents\Pinnacle
2013-11-01 21:13 - 2013-11-01 21:14 - 00000000 ____D C:\ProgramData\Pinnacle VideoSpin
2013-11-01 21:13 - 2013-11-01 21:13 - 00000625 _____ C:\Users\Public\Desktop\Pinnacle VideoSpin.lnk
2013-11-01 21:12 - 2013-11-02 11:18 - 00000349 _____ C:\Users\Public\Documents\PCLECHAL.INI
2013-11-01 21:04 - 2013-11-01 21:11 - 170203312 _____ C:\Users\Student\Downloads\VideoSpin_2_0_Setup_2_.exe
2013-11-01 18:36 - 2013-11-01 18:36 - 00000000 ____D C:\Users\Student\AppData\Roaming\Windows Live Writer
2013-11-01 18:34 - 2013-11-03 12:15 - 00000000 ____D C:\Users\Student\Tracing
2013-11-01 17:56 - 2013-11-01 17:56 - 00000598 _____ C:\Users\Public\Desktop\Blender.lnk
2013-11-01 17:07 - 2013-11-03 21:41 - 00001113 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2013-10-30 22:44 - 2013-01-10 09:15 - 00000577 _____ C:\Users\Student\Desktop\Internet Manager.lnk
2013-10-30 22:18 - 2013-10-30 22:11 - 01001472 _____ (DiBcom SA) C:\Windows\system32\Drivers\mod7700.sys
2013-10-30 22:18 - 2013-10-30 22:11 - 00421376 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ewusbwwan.sys
2013-10-30 22:18 - 2013-10-30 22:11 - 00221312 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ewusbmdm.sys
2013-10-30 22:18 - 2013-10-30 22:11 - 00212992 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ew_juwwanecm.sys
2013-10-30 22:18 - 2013-10-30 22:11 - 00117248 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ew_hwusbdev.sys
2013-10-30 22:18 - 2013-10-30 22:11 - 00098816 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ew_jucdcacm.sys
2013-10-30 22:18 - 2013-10-30 22:11 - 00086016 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ew_jubusenum.sys
2013-10-30 22:18 - 2013-10-30 22:11 - 00069632 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ew_jucdcecm.sys
2013-10-30 22:18 - 2013-10-30 22:11 - 00032768 _____ (Huawei Tech. Co., Ltd.) C:\Windows\system32\Drivers\ewdcsc.sys
2013-10-30 22:18 - 2013-10-30 22:11 - 00028672 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ew_juextctrl.sys
2013-10-30 22:18 - 2013-10-30 22:11 - 00022016 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ew_hwupgrade.sys
2013-10-30 22:18 - 2013-10-30 22:11 - 00013952 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ew_usbenumfilter.sys
2013-10-30 22:15 - 2013-10-30 22:11 - 00724608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bmutil.dll
2013-10-30 22:15 - 2013-10-30 22:11 - 00308352 _____ (Bytemobile, Inc.) C:\Windows\SysWOW64\bminstall.dll
2013-10-30 22:15 - 2013-10-30 22:11 - 00039552 _____ (Bytemobile, Inc.) C:\Windows\system32\Drivers\tcpipBM.sys
2013-10-30 22:15 - 2013-10-30 22:11 - 00016512 _____ (Bytemobile, Inc.) C:\Windows\system32\Drivers\BMLoad.sys
2013-10-30 21:01 - 2013-10-30 21:02 - 01970848 _____ C:\Users\Student\Downloads\winrar-x64-500.exe
2013-10-30 20:56 - 2013-10-30 20:57 - 00642632 _____ (EFD Software                                                ) C:\Users\Student\Downloads\hdtune_255.exe
2013-10-30 20:54 - 2013-10-30 20:54 - 00002926 _____ C:\Windows\System32\Tasks\{9DE6CCD9-9FA2-4108-B641-D01F3899F18F}
2013-10-30 20:53 - 2013-10-30 20:53 - 00002926 _____ C:\Windows\System32\Tasks\{EDCAE9E3-AD51-4AD0-9096-E5018A3154EC}
2013-10-30 20:48 - 2013-10-30 20:48 - 00000000 ____D C:\Users\Student\Documents\Add-in Express
2013-10-30 20:28 - 2013-10-30 20:46 - 51187712 _____ C:\Users\Student\Downloads\wz175-32gev.msi
2013-10-29 18:44 - 2013-11-02 13:54 - 00000000 ____D C:\ProgramData\Freemake
2013-10-29 18:44 - 2013-10-29 18:44 - 00000000 ____D C:\Users\Student\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Freemake
2013-10-27 23:35 - 2013-10-27 23:35 - 00000000 ____D C:\Windows\de
2013-10-27 23:33 - 2013-10-27 23:33 - 00000000 ____D C:\Windows\nl
2013-10-27 23:33 - 2013-10-27 23:33 - 00000000 ____D C:\Windows\it
2013-10-27 23:33 - 2013-10-27 23:33 - 00000000 ____D C:\Windows\fr
2013-10-27 23:33 - 2013-10-27 23:33 - 00000000 ____D C:\Windows\es
2013-10-27 23:33 - 2013-10-27 23:33 - 00000000 ____D C:\Windows\en
2013-10-27 23:31 - 2013-11-01 18:29 - 00000000 ____D C:\Program Files\Windows Live
2013-10-27 23:31 - 2013-02-05 22:06 - 00057840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fssfltr.sys
2013-10-27 17:23 - 2013-10-27 19:42 - 142602520 _____ (Microsoft Corporation) C:\Users\Student\Downloads\wlsetup-all_16.4.3508.0205(1).exe
2013-10-26 19:22 - 2013-11-01 17:57 - 00000669 _____ C:\Users\Public\Desktop\BrainYoo2.lnk
2013-10-26 19:22 - 2013-10-26 19:23 - 00000000 ____D C:\Users\Student\.BrainYoo2
2013-10-26 19:22 - 2013-10-26 19:22 - 00000000 ____D C:\ProgramData\Brainyoo2
2013-10-26 19:16 - 2013-10-26 19:21 - 24810584 _____ C:\Users\Student\Downloads\BrainYoo-Setup.exe
2013-10-25 00:26 - 2013-10-25 00:35 - 00000000 ____D C:\Users\Student\AppData\Roaming\SAP
2013-10-25 00:26 - 2013-10-25 00:26 - 00000000 ____D C:\Users\Student\Documents\SAP
2013-10-22 21:51 - 2013-10-22 21:51 - 04369632 _____ (Piriform Ltd) C:\Users\Student\Downloads\ccsetup406.exe
2013-10-22 14:04 - 2013-10-22 14:06 - 39161079 _____ (SAP AG) C:\Users\Student\Downloads\SAP-BI_730SP02P_201-10011800.EXE
2013-10-22 14:01 - 2009-03-24 11:52 - 00614992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comctl32.ocx
2013-10-22 14:01 - 2009-03-24 11:52 - 00443488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshflxgd.ocx
2013-10-22 14:01 - 2009-03-24 11:52 - 00415552 _____ (Microsoft Corporation ) C:\Windows\SysWOW64\comct332.ocx
2013-10-22 14:01 - 2009-03-24 11:52 - 00278352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdatgrd.ocx
2013-10-22 14:01 - 2009-03-24 11:52 - 00258880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msflxgrd.ocx
2013-10-22 14:01 - 2009-03-24 11:52 - 00221504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tabctl32.ocx
2013-10-22 14:01 - 2009-03-24 11:52 - 00218432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\richtx32.ocx
2013-10-22 14:01 - 2009-03-24 11:52 - 00170080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comct232.ocx
2013-10-22 14:01 - 2009-03-24 11:52 - 00155984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comdlg32.ocx
2013-10-22 14:01 - 2009-03-24 11:52 - 00129872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msstdfmt.dll
2013-10-22 14:01 - 2004-02-23 15:31 - 00150528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tlbinf32.dll
2013-10-22 14:01 - 1999-04-29 11:04 - 01355776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvbvm50.dll
2013-10-22 14:01 - 1998-06-26 19:22 - 00094744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\grid32.ocx
2013-10-22 14:01 - 1998-06-24 09:57 - 00067376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sysinfo.ocx
2013-10-22 14:01 - 1998-06-18 10:58 - 00094208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msstkprp.dll
2013-10-22 10:07 - 2013-10-22 10:07 - 00000516 _____ C:\Windows\ODBCINST.INI
2013-10-22 10:07 - 2013-10-22 10:07 - 00000311 _____ C:\Windows\ODBC.INI
2013-10-22 10:06 - 1995-03-02 23:00 - 00092576 _____ (Microsoft Corporation) C:\Windows\system\Odbcinst.dll
2013-10-22 10:06 - 1995-03-02 23:00 - 00056240 _____ (Microsoft Corporation) C:\Windows\system\Odbc.dll
2013-10-22 10:06 - 1995-03-02 23:00 - 00026832 _____ (Microsoft Corporation) C:\Windows\system\Ctl3dv2.dll
2013-10-22 10:06 - 1995-03-02 23:00 - 00017412 _____ C:\Windows\system\Odbcinst.hlp
2013-10-22 10:06 - 1995-03-02 23:00 - 00006464 _____ (Microsoft Corporation) C:\Windows\system\Odbcadm.exe
2013-10-22 10:05 - 1999-01-10 23:00 - 00026224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Odbc16gt.dll
2013-10-22 10:05 - 1999-01-10 23:00 - 00007952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Odbccp32.cpl
2013-10-22 10:05 - 1999-01-10 23:00 - 00004656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Ds16gt.dll
2013-10-22 10:05 - 1998-10-18 23:00 - 00037062 _____ C:\Windows\SysWOW64\Odbcinst.hlp
2013-10-22 10:05 - 1998-10-18 23:00 - 00000324 _____ C:\Windows\SysWOW64\Odbcinst.cnt
2013-10-22 10:04 - 1998-07-30 12:51 - 00305152 _____ (InstallShield Software Corporation) C:\Windows\IsUninst.exe
2013-10-22 09:48 - 2013-10-22 09:50 - 114307560 _____ (SAP AG) C:\Users\Student\Downloads\SAP-GUI-PATCH_2-10010496.exe
2013-10-21 16:13 - 2013-10-22 09:20 - 00000000 ____D C:\Users\Student\AppData\Roaming\SQL Developer
2013-10-19 07:08 - 2013-10-19 07:08 - 00000000 ____D C:\ProgramData\Oracle
2013-10-19 07:08 - 2013-10-08 06:50 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2013-10-19 07:08 - 2013-10-08 06:46 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2013-10-19 07:08 - 2013-10-08 06:46 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2013-10-19 07:08 - 2013-10-08 06:46 - 00174504 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2013-10-19 07:07 - 2013-10-19 07:08 - 00004886 _____ C:\Windows\SysWOW64\jupdate-1.7.0_45-b18.log
2013-10-18 22:08 - 2013-10-19 07:04 - 30694824 _____ (Oracle Corporation) C:\Users\Student\Downloads\jre-7u45-windows-x64.exe
2013-10-18 14:55 - 2013-10-18 14:55 - 00000000 ____D C:\ProgramData\McAfee
2013-10-18 14:41 - 2013-11-04 22:12 - 00003334 _____ C:\Windows\System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-2031096137-3791022390-309066423-1000
2013-10-18 14:41 - 2013-11-04 22:12 - 00003204 _____ C:\Windows\System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-2031096137-3791022390-309066423-1000
2013-10-18 14:32 - 2013-10-18 14:32 - 00000666 _____ C:\Users\Student\Desktop\Bibliotheken.lnk
2013-10-15 20:54 - 2013-10-21 20:55 - 00000000 ____D C:\Users\Student\Documents\Blender Dateien
2013-10-15 16:05 - 2013-11-01 17:41 - 00000000 ____D C:\tmp
2013-10-15 15:23 - 2013-10-15 15:23 - 00000000 ____D C:\Users\Student\AppData\Roaming\Blender Foundation
2013-10-15 15:01 - 2013-10-15 15:14 - 50488341 _____ C:\Users\Student\Downloads\blender-2.68a-windows64.exe
2013-10-14 08:21 - 2013-10-18 14:32 - 00000000 ____D C:\Users\Student\Documents\Danny Schule
2013-10-13 13:15 - 2013-10-13 13:15 - 00000000 ____D C:\Users\Student\AppData\Roaming\TuneUp Software
2013-10-13 13:14 - 2013-10-13 13:15 - 00000000 ____D C:\ProgramData\TuneUp Software
2013-10-13 13:14 - 2013-10-13 13:14 - 00000000 __SHD C:\ProgramData\{FE8D473A-6F06-4F99-B5F4-BED72B2A038C}
2013-10-11 06:43 - 2013-09-04 02:37 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2013-10-11 06:43 - 2013-09-04 02:37 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2013-10-11 06:43 - 2013-09-04 02:37 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2013-10-11 06:43 - 2013-09-04 02:37 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2013-10-11 06:43 - 2013-09-04 02:37 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2013-10-11 06:43 - 2013-09-04 02:37 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys
2013-10-11 06:43 - 2013-09-04 02:37 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2013-10-11 02:39 - 2013-09-23 00:28 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-10-11 02:39 - 2013-09-23 00:28 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-10-11 02:39 - 2013-09-23 00:27 - 14335488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-10-11 02:39 - 2013-09-23 00:27 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-10-11 02:39 - 2013-09-23 00:27 - 02876928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-10-11 02:39 - 2013-09-23 00:27 - 02048512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-10-11 02:39 - 2013-09-23 00:27 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-10-11 02:39 - 2013-09-23 00:27 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-10-11 02:39 - 2013-09-23 00:27 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-10-11 02:39 - 2013-09-23 00:27 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-10-11 02:39 - 2013-09-23 00:27 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-10-11 02:39 - 2013-09-23 00:27 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-10-11 02:39 - 2013-09-23 00:27 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-10-11 02:39 - 2013-09-22 23:55 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-10-11 02:39 - 2013-09-22 23:55 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-10-11 02:39 - 2013-09-22 23:55 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-10-11 02:39 - 2013-09-22 23:54 - 19252224 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-10-11 02:39 - 2013-09-22 23:54 - 15404544 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-10-11 02:39 - 2013-09-22 23:54 - 03959296 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-10-11 02:39 - 2013-09-22 23:54 - 02647552 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-10-11 02:39 - 2013-09-22 23:54 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-10-11 02:39 - 2013-09-22 23:54 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-10-11 02:39 - 2013-09-22 23:54 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-10-11 02:39 - 2013-09-22 23:54 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-10-11 02:39 - 2013-09-22 23:54 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-10-11 02:39 - 2013-09-22 23:54 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-10-11 02:39 - 2013-09-22 23:54 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-10-11 02:39 - 2013-09-21 04:38 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-10-11 02:39 - 2013-09-21 04:30 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-10-11 02:39 - 2013-09-21 03:48 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-10-11 02:39 - 2013-09-21 03:39 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-10-10 17:06 - 2013-07-04 13:50 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll
2013-10-10 17:06 - 2013-07-04 12:50 - 00530432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comctl32.dll
2013-10-10 17:06 - 2013-06-06 06:50 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2013-10-10 17:06 - 2013-06-06 06:49 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2013-10-10 17:06 - 2013-06-06 06:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2013-10-10 17:06 - 2013-06-06 06:47 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2013-10-10 17:06 - 2013-06-06 05:57 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll
2013-10-10 17:06 - 2013-06-06 05:51 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2013-10-10 17:06 - 2013-06-06 05:50 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll
2013-10-10 17:06 - 2013-06-06 04:30 - 00368128 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2013-10-10 17:06 - 2013-06-06 04:01 - 00295424 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2013-10-10 17:06 - 2013-06-06 04:01 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2013-10-10 17:01 - 2013-07-12 11:41 - 00185344 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbvideo.sys
2013-10-10 17:01 - 2013-07-12 11:41 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbcir.sys
2013-10-10 17:01 - 2013-07-03 05:05 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidclass.sys
2013-10-10 17:01 - 2013-07-03 05:05 - 00032896 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidparse.sys
2013-10-10 17:01 - 2013-06-25 23:55 - 00785624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys
2013-10-10 17:00 - 2013-09-14 02:10 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2013-10-10 17:00 - 2013-09-08 03:30 - 01903552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2013-10-10 17:00 - 2013-09-08 03:27 - 00327168 _____ (Microsoft Corporation) C:\Windows\system32\mswsock.dll
2013-10-10 17:00 - 2013-09-08 03:03 - 00231424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mswsock.dll
2013-10-10 17:00 - 2013-08-29 03:17 - 05549504 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2013-10-10 17:00 - 2013-08-29 03:16 - 01732032 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2013-10-10 17:00 - 2013-08-29 03:16 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll
2013-10-10 17:00 - 2013-08-29 03:16 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2013-10-10 17:00 - 2013-08-29 03:13 - 00878080 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2013-10-10 17:00 - 2013-08-29 02:51 - 03969472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2013-10-10 17:00 - 2013-08-29 02:51 - 03914176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2013-10-10 17:00 - 2013-08-29 02:50 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2013-10-10 17:00 - 2013-08-29 02:50 - 00619520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdh.dll
2013-10-10 17:00 - 2013-08-29 02:50 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2013-10-10 17:00 - 2013-08-29 02:48 - 00640512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2013-10-10 17:00 - 2013-08-29 01:49 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2013-10-10 17:00 - 2013-08-29 01:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2013-10-10 17:00 - 2013-08-29 01:49 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2013-10-10 17:00 - 2013-08-29 01:49 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2013-10-10 17:00 - 2013-08-28 02:21 - 03155968 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-10-10 17:00 - 2013-07-04 13:57 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll
2013-10-10 17:00 - 2013-07-04 13:50 - 00102400 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll
2013-10-10 17:00 - 2013-07-04 12:57 - 00205824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WebClnt.dll
2013-10-10 17:00 - 2013-07-04 12:51 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\davclnt.dll
2013-10-10 17:00 - 2013-07-04 11:11 - 00140800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys
2013-10-10 16:59 - 2013-08-28 02:12 - 00461312 _____ (Microsoft Corporation) C:\Windows\system32\scavengeui.dll
2013-10-10 16:59 - 2013-08-01 13:09 - 00983488 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2013-10-10 16:59 - 2013-07-20 11:33 - 00124112 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2013-10-10 16:59 - 2013-07-20 11:33 - 00102608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll

==================== One Month Modified Files and Folders =======

2013-11-06 17:27 - 2013-11-06 17:27 - 00000894 _____ C:\Users\Student\Desktop\checkup.txt
2013-11-06 17:01 - 2012-11-15 08:54 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-11-06 16:52 - 2012-10-14 21:12 - 00001112 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-11-06 16:38 - 2012-09-05 20:34 - 01819852 _____ C:\Windows\WindowsUpdate.log
2013-11-06 14:14 - 2012-09-05 13:05 - 00000000 ____D C:\Windows\system32\Drivers\AVG
2013-11-06 10:52 - 2012-10-14 21:12 - 00001108 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-11-06 10:27 - 2013-11-06 10:27 - 00000000 ____D C:\Program Files (x86)\ESET
2013-11-05 13:49 - 2013-11-05 13:49 - 00891167 _____ C:\Users\Student\Desktop\SecurityCheck.exe
2013-11-05 13:48 - 2013-11-05 13:48 - 02347384 _____ (ESET) C:\Users\Student\Downloads\esetsmartinstaller_enu.exe
2013-11-05 13:29 - 2013-11-05 13:29 - 00001913 _____ C:\Users\Student\Desktop\JRT.txt
2013-11-05 13:26 - 2009-07-14 05:45 - 00020720 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-11-05 13:26 - 2009-07-14 05:45 - 00020720 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-11-05 13:22 - 2011-04-11 18:26 - 00783662 _____ C:\Windows\system32\perfh007.dat
2013-11-05 13:22 - 2011-04-11 18:26 - 00179376 _____ C:\Windows\system32\perfc007.dat
2013-11-05 13:22 - 2009-07-14 06:13 - 01852928 _____ C:\Windows\system32\PerfStringBackup.INI
2013-11-05 13:20 - 2013-11-05 13:20 - 00000000 ____D C:\Windows\ERUNT
2013-11-05 13:20 - 2013-11-04 23:45 - 00003356 _____ C:\Windows\System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-2031096137-3791022390-309066423-1000
2013-11-05 13:20 - 2013-11-04 23:45 - 00003226 _____ C:\Windows\System32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-2031096137-3791022390-309066423-1000
2013-11-05 13:19 - 2013-11-05 13:19 - 00024255 _____ C:\Users\Student\Desktop\AdwCleaner[S0].txt
2013-11-05 13:19 - 2012-10-17 16:57 - 00000000 ____D C:\Users\Student\AppData\Roaming\Dropbox
2013-11-05 13:17 - 2013-11-03 21:32 - 00002038 _____ C:\Windows\setupact.log
2013-11-05 13:17 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-11-05 13:14 - 2013-11-05 13:07 - 00000000 ____D C:\AdwCleaner
2013-11-05 13:05 - 2013-07-28 22:06 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-11-05 13:02 - 2013-11-04 22:09 - 00000908 _____ C:\Windows\PFRO.log
2013-11-05 12:51 - 2013-11-05 12:51 - 01073258 _____ C:\Users\Student\Desktop\adwcleaner.exe
2013-11-05 12:51 - 2013-11-05 12:51 - 01033335 _____ (Thisisu) C:\Users\Student\Desktop\JRT.exe
2013-11-05 12:49 - 2013-11-05 12:49 - 00001075 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-11-05 12:49 - 2013-11-05 12:49 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-11-05 12:48 - 2013-11-05 12:48 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Student\Downloads\mbam-setup-1.75.0.1300(1).exe
2013-11-05 12:26 - 2013-11-04 19:55 - 00000600 _____ C:\Users\Student\AppData\Local\PUTTY.RND
2013-11-04 22:12 - 2013-10-18 14:41 - 00003334 _____ C:\Windows\System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-2031096137-3791022390-309066423-1000
2013-11-04 22:12 - 2013-10-18 14:41 - 00003204 _____ C:\Windows\System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-2031096137-3791022390-309066423-1000
2013-11-04 18:10 - 2011-05-18 18:54 - 01873338 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2013-11-04 16:50 - 2013-11-04 16:50 - 00000000 ____D C:\Windows\Sun
2013-11-04 10:54 - 2013-11-04 10:54 - 00039956 _____ C:\ComboFix.txt
2013-11-04 10:54 - 2013-11-04 10:46 - 00000000 ____D C:\Qoobox
2013-11-04 10:54 - 2009-07-14 04:20 - 00000000 __RHD C:\Users\Default
2013-11-04 10:53 - 2013-11-04 10:45 - 00000000 ____D C:\Windows\erdnt
2013-11-04 10:52 - 2009-07-14 03:34 - 00000215 _____ C:\Windows\system.ini
2013-11-04 10:43 - 2013-11-04 10:43 - 05143677 ____R (Swearware) C:\Users\Student\Desktop\ComboFix.exe
2013-11-04 09:41 - 2013-11-04 09:41 - 00262144 _____ C:\Windows\Minidump\110413-85207-01.dmp
2013-11-04 09:41 - 2013-09-15 12:27 - 00000000 ____D C:\Windows\Minidump
2013-11-04 09:40 - 2013-11-04 09:40 - 646221585 ____N C:\Windows\MEMORY.DMP
2013-11-04 07:01 - 2013-11-04 07:00 - 00262144 _____ C:\Windows\Minidump\110413-182895-01.dmp
2013-11-04 07:00 - 2013-02-06 17:03 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-11-03 23:38 - 2013-11-03 23:37 - 00377856 _____ C:\Users\Student\Desktop\GMER.exe
2013-11-03 23:03 - 2013-11-03 23:03 - 00000000 ____D C:\FRST
2013-11-03 22:59 - 2013-11-03 22:58 - 01957098 _____ (Farbar) C:\Users\Student\Desktop\FRST64.exe
2013-11-03 22:55 - 2013-11-03 22:55 - 00000000 _____ C:\Users\Student\defogger_reenable
2013-11-03 22:55 - 2012-09-05 12:47 - 00000000 ____D C:\Users\Student
2013-11-03 22:53 - 2013-11-03 22:52 - 00050477 _____ C:\Users\Student\Downloads\Defogger.exe
2013-11-03 22:16 - 2013-11-03 22:16 - 00000000 ____D C:\Users\Student\AppData\Local\Adobe
2013-11-03 21:43 - 2013-11-03 21:42 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Student\Downloads\mbam-setup-1.75.0.1300.exe
2013-11-03 21:41 - 2013-11-01 17:07 - 00001113 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2013-11-03 21:41 - 2013-10-01 14:19 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-11-03 21:34 - 2009-07-14 05:45 - 00463496 _____ C:\Windows\system32\FNTCACHE.DAT
2013-11-03 21:32 - 2013-11-03 21:32 - 00000000 _____ C:\Windows\setuperr.log
2013-11-03 21:31 - 2012-10-08 17:55 - 00000000 ____D C:\ProgramData\DatacardService
2013-11-03 21:29 - 2013-11-03 01:14 - 00000000 ____D C:\Users\Student\AppData\Local\gtk-2.0
2013-11-03 21:29 - 2013-11-01 21:13 - 00000000 ____D C:\Users\Public\Documents\Pinnacle
2013-11-03 21:29 - 2012-11-07 21:00 - 00000000 ____D C:\ProgramData\Real
2013-11-03 21:29 - 2012-10-08 17:57 - 00000000 ____D C:\ProgramData\Internet Manager
2013-11-03 21:29 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\registration
2013-11-03 21:29 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\AppCompat
2013-11-03 21:05 - 2013-11-03 21:05 - 00000000 ____D C:\ProgramData\TechSmith
2013-11-03 21:05 - 2013-11-03 21:05 - 00000000 ____D C:\ProgramData\regid.1995-08.com.techsmith
2013-11-03 21:05 - 2013-11-03 21:05 - 00000000 ____D C:\Program Files (x86)\QuickTime
2013-11-03 19:02 - 2013-11-03 19:02 - 00004615 _____ C:\Users\Student\AppData\Local\recently-used.xbel
2013-11-03 19:02 - 2013-09-27 07:46 - 00000000 ____D C:\Users\Student\.gimp-2.8
2013-11-03 12:37 - 2012-09-05 13:06 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-11-03 12:30 - 2013-11-03 12:30 - 00000017 _____ C:\Users\Student\AppData\Local\resmon.resmoncfg
2013-11-03 12:21 - 2012-10-16 12:54 - 00000000 ____D C:\Program Files\Microsoft SQL Server
2013-11-03 12:21 - 2012-10-16 12:52 - 00000000 ____D C:\Program Files (x86)\Microsoft SQL Server
2013-11-03 12:15 - 2013-11-01 18:34 - 00000000 ____D C:\Users\Student\Tracing
2013-11-03 12:14 - 2013-11-02 13:38 - 00000000 ____D C:\Users\Student\AppData\Local\CrashDumps
2013-11-03 12:12 - 2013-11-03 12:12 - 00002776 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC
2013-11-03 12:12 - 2013-11-03 12:12 - 00000000 ____D C:\Program Files\CCleaner
2013-11-03 11:51 - 2013-11-02 00:58 - 00125768 _____ C:\Users\Student\AppData\Local\GDIPFONTCACHEV1.DAT
2013-11-03 11:18 - 2013-11-03 11:18 - 00000736 _____ C:\Users\Public\Desktop\SAP Logon.lnk
2013-11-03 11:17 - 2013-11-03 11:09 - 00000000 ____D C:\Users\Student\AppData\Local\SAP
2013-11-03 11:17 - 2009-07-14 03:34 - 00021259 _____ C:\Windows\system32\Drivers\etc\services
2013-11-03 11:15 - 2013-11-03 11:15 - 00000000 ____D C:\Program Files (x86)\SAP
2013-11-03 10:45 - 2013-11-03 10:45 - 00000738 _____ C:\Users\Public\Desktop\GIMP 2.lnk
2013-11-03 01:58 - 2012-12-16 23:33 - 00000000 ____D C:\ProgramData\Skype
2013-11-03 01:18 - 2013-11-03 01:18 - 00000000 ____D C:\Users\Student\AppData\Local\webkit
2013-11-02 21:24 - 2009-07-14 04:20 - 00000000 __RHD C:\Users\Public\Libraries
2013-11-02 21:24 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\spool
2013-11-02 16:04 - 2013-11-02 16:04 - 00000898 _____ C:\Users\Student\Desktop\GIMP 2.lnk
2013-11-02 16:03 - 2013-11-02 16:03 - 00000000 ____D C:\Users\Student\AppData\Local\gegl-0.2
2013-11-02 15:07 - 2013-11-02 11:25 - 00005120 _____ C:\Users\Student\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2013-11-02 13:54 - 2013-11-02 13:53 - 00000000 ____D C:\Users\Student\Documents\Freemake
2013-11-02 13:54 - 2013-10-29 18:44 - 00000000 ____D C:\ProgramData\Freemake
2013-11-02 13:53 - 2013-11-02 13:53 - 00001286 _____ C:\Users\Public\Desktop\Freemake Video Converter.lnk
2013-11-02 13:53 - 2013-11-02 13:53 - 00000000 ____D C:\Program Files (x86)\Freemake
2013-11-02 13:20 - 2012-11-07 21:22 - 00003376 _____ C:\Windows\System32\Tasks\RealDownloaderDownloaderScheduledTaskS-1-5-21-2031096137-3791022390-309066423-1000
2013-11-02 13:15 - 2013-11-02 13:15 - 00000839 _____ C:\Users\Public\Desktop\RealPlayer.lnk
2013-11-02 13:15 - 2013-11-02 13:15 - 00000000 ____D C:\Users\Student\AppData\Roaming\RealNetworks
2013-11-02 13:15 - 2013-11-02 13:15 - 00000000 ____D C:\ProgramData\RealNetworks
2013-11-02 13:15 - 2013-11-02 13:15 - 00000000 ____D C:\Program Files (x86)\RealNetworks
2013-11-02 13:15 - 2012-12-21 23:16 - 00000000 ____D C:\Program Files (x86)\Real
2013-11-02 13:15 - 2012-11-07 20:59 - 00000000 ____D C:\Users\Student\AppData\Roaming\Real
2013-11-02 13:14 - 2013-11-02 13:14 - 00499712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcp71.dll
2013-11-02 13:14 - 2013-11-02 13:14 - 00348160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcr71.dll
2013-11-02 13:14 - 2013-11-02 13:14 - 00272896 _____ (Progressive Networks) C:\Windows\SysWOW64\pncrt.dll
2013-11-02 13:14 - 2013-11-02 13:14 - 00201872 _____ (RealNetworks, Inc.) C:\Windows\SysWOW64\rmoc3260.dll
2013-11-02 13:14 - 2013-11-02 13:14 - 00006656 _____ (RealNetworks, Inc.) C:\Windows\SysWOW64\pndx5016.dll
2013-11-02 13:14 - 2013-11-02 13:14 - 00005632 _____ (RealNetworks, Inc.) C:\Windows\SysWOW64\pndx5032.dll
2013-11-02 13:14 - 2012-12-21 23:22 - 00000000 ____D C:\Program Files (x86)\PluginCodecs
2013-11-02 13:12 - 2013-11-02 13:06 - 39382624 _____ (RealNetworks, Inc.) C:\Users\Student\Downloads\RealPlayer_de(1).exe
2013-11-02 12:38 - 2013-11-02 12:38 - 00000000 ____D C:\Users\Student\AppData\Local\Macromedia
2013-11-02 11:18 - 2013-11-01 21:12 - 00000349 _____ C:\Users\Public\Documents\PCLECHAL.INI
2013-11-02 11:17 - 2013-11-02 11:08 - 00000000 ____D C:\Program Files (x86)\Pinnacle
2013-11-02 11:05 - 2013-11-02 11:05 - 00001682 _____ C:\Users\Student\Desktop\putty_0.63.exe - Verknüpfung.lnk
2013-11-02 11:05 - 2013-11-02 11:05 - 00001089 _____ C:\Users\Student\Desktop\sqldeveloper.exe - Verknüpfung.lnk
2013-11-02 01:02 - 2013-11-02 01:02 - 00000000 ____D C:\Users\Student\AppData\Local\VirtualStore
2013-11-01 21:14 - 2013-11-01 21:13 - 00000000 ____D C:\ProgramData\Pinnacle VideoSpin
2013-11-01 21:13 - 2013-11-01 21:13 - 00000625 _____ C:\Users\Public\Desktop\Pinnacle VideoSpin.lnk
2013-11-01 21:11 - 2013-11-01 21:04 - 170203312 _____ C:\Users\Student\Downloads\VideoSpin_2_0_Setup_2_.exe
2013-11-01 18:36 - 2013-11-01 18:36 - 00000000 ____D C:\Users\Student\AppData\Roaming\Windows Live Writer
2013-11-01 18:31 - 2011-05-18 19:11 - 00000000 ____D C:\Program Files (x86)\Windows Live
2013-11-01 18:29 - 2013-10-27 23:31 - 00000000 ____D C:\Program Files\Windows Live
2013-11-01 17:57 - 2013-10-26 19:22 - 00000669 _____ C:\Users\Public\Desktop\BrainYoo2.lnk
2013-11-01 17:56 - 2013-11-01 17:56 - 00000598 _____ C:\Users\Public\Desktop\Blender.lnk
2013-11-01 17:41 - 2013-10-15 16:05 - 00000000 ____D C:\tmp
2013-10-30 23:03 - 2013-01-03 07:52 - 00000000 ____D C:\Users\Student\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2013-10-30 22:11 - 2013-10-30 22:18 - 01001472 _____ (DiBcom SA) C:\Windows\system32\Drivers\mod7700.sys
2013-10-30 22:11 - 2013-10-30 22:18 - 00421376 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ewusbwwan.sys
2013-10-30 22:11 - 2013-10-30 22:18 - 00221312 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ewusbmdm.sys
2013-10-30 22:11 - 2013-10-30 22:18 - 00212992 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ew_juwwanecm.sys
2013-10-30 22:11 - 2013-10-30 22:18 - 00117248 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ew_hwusbdev.sys
2013-10-30 22:11 - 2013-10-30 22:18 - 00098816 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ew_jucdcacm.sys
2013-10-30 22:11 - 2013-10-30 22:18 - 00086016 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ew_jubusenum.sys
2013-10-30 22:11 - 2013-10-30 22:18 - 00069632 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ew_jucdcecm.sys
2013-10-30 22:11 - 2013-10-30 22:18 - 00032768 _____ (Huawei Tech. Co., Ltd.) C:\Windows\system32\Drivers\ewdcsc.sys
2013-10-30 22:11 - 2013-10-30 22:18 - 00028672 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ew_juextctrl.sys
2013-10-30 22:11 - 2013-10-30 22:18 - 00022016 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ew_hwupgrade.sys
2013-10-30 22:11 - 2013-10-30 22:18 - 00013952 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ew_usbenumfilter.sys
2013-10-30 22:11 - 2013-10-30 22:15 - 00724608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bmutil.dll
2013-10-30 22:11 - 2013-10-30 22:15 - 00308352 _____ (Bytemobile, Inc.) C:\Windows\SysWOW64\bminstall.dll
2013-10-30 22:11 - 2013-10-30 22:15 - 00039552 _____ (Bytemobile, Inc.) C:\Windows\system32\Drivers\tcpipBM.sys
2013-10-30 22:11 - 2013-10-30 22:15 - 00016512 _____ (Bytemobile, Inc.) C:\Windows\system32\Drivers\BMLoad.sys
2013-10-30 22:11 - 2012-10-08 17:57 - 01486688 _____ (Microsoft Corporation) C:\Windows\system32\WdfCoInstaller01007.dll
2013-10-30 22:11 - 2012-10-08 17:57 - 01486688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdfCoInstaller01007.dll
2013-10-30 21:02 - 2013-10-30 21:01 - 01970848 _____ C:\Users\Student\Downloads\winrar-x64-500.exe
2013-10-30 20:57 - 2013-10-30 20:56 - 00642632 _____ (EFD Software                                                ) C:\Users\Student\Downloads\hdtune_255.exe
2013-10-30 20:54 - 2013-10-30 20:54 - 00002926 _____ C:\Windows\System32\Tasks\{9DE6CCD9-9FA2-4108-B641-D01F3899F18F}
2013-10-30 20:53 - 2013-10-30 20:53 - 00002926 _____ C:\Windows\System32\Tasks\{EDCAE9E3-AD51-4AD0-9096-E5018A3154EC}
2013-10-30 20:48 - 2013-10-30 20:48 - 00000000 ____D C:\Users\Student\Documents\Add-in Express
2013-10-30 20:46 - 2013-10-30 20:28 - 51187712 _____ C:\Users\Student\Downloads\wz175-32gev.msi
2013-10-29 18:44 - 2013-10-29 18:44 - 00000000 ____D C:\Users\Student\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Freemake
2013-10-27 23:35 - 2013-10-27 23:35 - 00000000 ____D C:\Windows\de
2013-10-27 23:33 - 2013-10-27 23:33 - 00000000 ____D C:\Windows\nl
2013-10-27 23:33 - 2013-10-27 23:33 - 00000000 ____D C:\Windows\it
2013-10-27 23:33 - 2013-10-27 23:33 - 00000000 ____D C:\Windows\fr
2013-10-27 23:33 - 2013-10-27 23:33 - 00000000 ____D C:\Windows\es
2013-10-27 23:33 - 2013-10-27 23:33 - 00000000 ____D C:\Windows\en
2013-10-27 19:42 - 2013-10-27 17:23 - 142602520 _____ (Microsoft Corporation) C:\Users\Student\Downloads\wlsetup-all_16.4.3508.0205(1).exe
2013-10-27 17:16 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\NDF
2013-10-26 19:23 - 2013-10-26 19:22 - 00000000 ____D C:\Users\Student\.BrainYoo2
2013-10-26 19:22 - 2013-10-26 19:22 - 00000000 ____D C:\ProgramData\Brainyoo2
2013-10-26 19:21 - 2013-10-26 19:16 - 24810584 _____ C:\Users\Student\Downloads\BrainYoo-Setup.exe
2013-10-26 12:40 - 2013-09-19 13:50 - 00015570 _____ C:\Users\Student\Desktop\WOT.xlsx
2013-10-25 20:58 - 2013-07-22 11:41 - 00000000 ____D C:\Users\Student\.freemind
2013-10-25 00:35 - 2013-10-25 00:26 - 00000000 ____D C:\Users\Student\AppData\Roaming\SAP
2013-10-25 00:26 - 2013-10-25 00:26 - 00000000 ____D C:\Users\Student\Documents\SAP
2013-10-24 22:13 - 2012-12-16 23:34 - 00000000 ____D C:\Users\Student\AppData\Roaming\Skype
2013-10-22 21:51 - 2013-10-22 21:51 - 04369632 _____ (Piriform Ltd) C:\Users\Student\Downloads\ccsetup406.exe
2013-10-22 14:06 - 2013-10-22 14:04 - 39161079 _____ (SAP AG) C:\Users\Student\Downloads\SAP-BI_730SP02P_201-10011800.EXE
2013-10-22 10:08 - 2013-03-26 23:11 - 00000000 ____D C:\Users\Student\Documents\Visual Studio 2010
2013-10-22 10:07 - 2013-10-22 10:07 - 00000516 _____ C:\Windows\ODBCINST.INI
2013-10-22 10:07 - 2013-10-22 10:07 - 00000311 _____ C:\Windows\ODBC.INI
2013-10-22 10:06 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system
2013-10-22 09:50 - 2013-10-22 09:48 - 114307560 _____ (SAP AG) C:\Users\Student\Downloads\SAP-GUI-PATCH_2-10010496.exe
2013-10-22 09:20 - 2013-10-21 16:13 - 00000000 ____D C:\Users\Student\AppData\Roaming\SQL Developer
2013-10-21 20:55 - 2013-10-15 20:54 - 00000000 ____D C:\Users\Student\Documents\Blender Dateien
2013-10-19 07:08 - 2013-10-19 07:08 - 00000000 ____D C:\ProgramData\Oracle
2013-10-19 07:08 - 2013-10-19 07:07 - 00004886 _____ C:\Windows\SysWOW64\jupdate-1.7.0_45-b18.log
2013-10-19 07:08 - 2013-07-03 14:09 - 00000000 ____D C:\Program Files (x86)\Java
2013-10-19 07:04 - 2013-10-18 22:08 - 30694824 _____ (Oracle Corporation) C:\Users\Student\Downloads\jre-7u45-windows-x64.exe
2013-10-18 14:55 - 2013-10-18 14:55 - 00000000 ____D C:\ProgramData\McAfee
2013-10-18 14:55 - 2012-11-15 08:54 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-10-18 14:55 - 2012-10-08 18:02 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-10-18 14:55 - 2012-10-08 18:02 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-10-18 14:34 - 2011-04-11 02:10 - 00000000 ____D C:\Windows\Panther
2013-10-18 14:32 - 2013-10-18 14:32 - 00000666 _____ C:\Users\Student\Desktop\Bibliotheken.lnk
2013-10-18 14:32 - 2013-10-14 08:21 - 00000000 ____D C:\Users\Student\Documents\Danny Schule
2013-10-18 14:32 - 2013-09-29 14:42 - 00000000 ____D C:\Users\Student\Documents\Ebay
2013-10-15 15:23 - 2013-10-15 15:23 - 00000000 ____D C:\Users\Student\AppData\Roaming\Blender Foundation
2013-10-15 15:18 - 2013-09-27 07:59 - 00000000 ____D C:\Users\Student\.thumbnails
2013-10-15 15:14 - 2013-10-15 15:01 - 50488341 _____ C:\Users\Student\Downloads\blender-2.68a-windows64.exe
2013-10-13 13:15 - 2013-10-13 13:15 - 00000000 ____D C:\Users\Student\AppData\Roaming\TuneUp Software
2013-10-13 13:15 - 2013-10-13 13:14 - 00000000 ____D C:\ProgramData\TuneUp Software
2013-10-13 13:14 - 2013-10-13 13:14 - 00000000 __SHD C:\ProgramData\{FE8D473A-6F06-4F99-B5F4-BED72B2A038C}
2013-10-11 09:38 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache
2013-10-11 03:03 - 2013-01-27 21:47 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2013-10-11 03:03 - 2013-01-27 21:47 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2013-10-11 02:22 - 2013-07-22 02:00 - 00000000 ____D C:\Windows\system32\MRT
2013-10-11 02:14 - 2012-10-10 16:01 - 80541720 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-10-10 09:47 - 2012-10-14 21:12 - 00004108 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2013-10-10 09:47 - 2012-10-14 21:12 - 00003856 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2013-10-08 06:50 - 2013-10-19 07:08 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2013-10-08 06:46 - 2013-10-19 07:08 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2013-10-08 06:46 - 2013-10-19 07:08 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2013-10-08 06:46 - 2013-10-19 07:08 - 00174504 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe

Files to move or delete:
====================
C:\Users\Student\AppData\Roaming\CamLayout.ini
C:\Users\Student\AppData\Roaming\CamShapes.ini
C:\Users\Student\AppData\Roaming\CamStudio.Producer.Data.ini


Some content of TEMP:
====================
C:\Users\Student\AppData\Local\Temp\Quarantine.exe
C:\Users\Student\AppData\Local\Temp\SunWin32FunctionCalls_800168.dll


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-10-31 01:02

==================== End Of Log ============================
         
--- --- ---

--- --- ---
__________________


Geändert von Danchen (06.11.2013 um 19:43 Uhr)

Antwort

Themen zu Windows 7: Anwendungen funktionieren nicht mehr - Programmordner leer, Verknüpfungen noch da
bluescreen, browser, ccsetup, computer, cpu, desktop, device driver, error, excel, farbar, farbar recovery scan tool, firefox, flash player, homepage, hängen, mozilla, newtab, nicht möglich, plug-in, port, realtek, registry, security, server, sicherheit, software, starten, svchost.exe, system, tablet, usb, virus, windows




Ähnliche Themen: Windows 7: Anwendungen funktionieren nicht mehr - Programmordner leer, Verknüpfungen noch da


  1. Windows 7: Gewisse Tasten funktionieren nicht & Anwendungen starten nicht
    Plagegeister aller Art und deren Bekämpfung - 20.10.2014 (15)
  2. Startmenü Apps Windows 8 funktionieren nicht mehr
    Alles rund um Windows - 27.04.2014 (5)
  3. Wartungscenter und Windows Explorer funktionieren nicht mehr!
    Plagegeister aller Art und deren Bekämpfung - 26.02.2014 (5)
  4. Windows 7: Windows-Sicherheitscenter und Windows Defender funktionieren nicht mehr, Services.exe verseucht?
    Log-Analyse und Auswertung - 07.01.2014 (8)
  5. Windows 7: Programme funktionieren nicht mehr, Internet unsicher
    Plagegeister aller Art und deren Bekämpfung - 23.11.2013 (3)
  6. Windows 7 Meldung Win32/Small-CA Virus entfernen, AntiVir findet nichts, Windows Update und Defender funktionieren nicht mehr
    Log-Analyse und Auswertung - 20.11.2013 (15)
  7. Windows Firewall & Updater funktionieren nicht mehr
    Log-Analyse und Auswertung - 14.11.2013 (20)
  8. Minianwendungen, Skype, Anwendungen funktionieren nicht mehr (Windows 7)
    Log-Analyse und Auswertung - 01.06.2013 (46)
  9. Automatische Windows Updates funktionieren nicht mehr!
    Log-Analyse und Auswertung - 27.09.2012 (7)
  10. Virus löscht Verknüpfungen, Ordner leer/nicht vorhanden
    Plagegeister aller Art und deren Bekämpfung - 02.04.2012 (20)
  11. Nur noch Verknüpfungen und viele Programme lassen sich nicht mehr starten..
    Plagegeister aller Art und deren Bekämpfung - 09.01.2012 (3)
  12. die meissten anwendungen von windows aus lassen sich nicht mehr starten
    Log-Analyse und Auswertung - 02.09.2011 (3)
  13. Ordner sind leer, Startmenü auf der linken seite leer, festplatte leer, aber sind noch 70GB drauf
    Log-Analyse und Auswertung - 01.06.2011 (1)
  14. Windows 7 Einige Anwendungen funktionieren nicht mehr korrekt.
    Alles rund um Windows - 18.08.2010 (2)
  15. Hilfe...Anwendungen funktionieren nur noch im abgesicherten Modus
    Plagegeister aller Art und deren Bekämpfung - 16.07.2009 (0)
  16. Mit FITZ-FAX aus WINDOWS-Anwendungen faxen nicht mehr möglich
    Alles rund um Windows - 09.01.2006 (14)

Zum Thema Windows 7: Anwendungen funktionieren nicht mehr - Programmordner leer, Verknüpfungen noch da - ESET Online Scanner Hier findest du eine bebilderte Anleitung zu ESET Online Scanner Lade und starte Eset Online Scanner Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden - Windows 7: Anwendungen funktionieren nicht mehr - Programmordner leer, Verknüpfungen noch da...
Archiv
Du betrachtest: Windows 7: Anwendungen funktionieren nicht mehr - Programmordner leer, Verknüpfungen noch da auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.