![]() |
|
Plagegeister aller Art und deren Bekämpfung: Windows 7: Anwendungen funktionieren nicht mehr - Programmordner leer, Verknüpfungen noch daWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
![]() |
|
![]() | #1 |
/// the machine /// TB-Ausbilder ![]() ![]() ![]() ![]() ![]() ![]() ![]() ![]() | ![]() Windows 7: Anwendungen funktionieren nicht mehr - Programmordner leer, Verknüpfungen noch daESET Online Scanner
Downloade Dir bitte ![]()
und ein frisches FRST log bitte. Noch Probleme? ![]()
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
![]() | #2 |
![]() | ![]() Windows 7: Anwendungen funktionieren nicht mehr - Programmordner leer, Verknüpfungen noch da Hi,
__________________kannst du mir sagen, ob ich das Windows-Update (in meinem letzten Post beschrieben) ohne Bedenken durchführen kann? Ich werde dann die nächsten Tage alle Programme, die nicht mehr funktionieren neu installieren und schauen was passiert. Die Symbole aus dem "Infobereichsysmbole" (also unten rechts auf dem Bildschirm) sind übrigens wieder da. Ich möchte mich auf jeden Fall schonmal recht herzlich für die Hilfe bedanken und melde mich in ein paar Tagen ob alles OK ist. ![]() ![]() Kannst du mir noch mitteilen was das Problem ausgelöst hat? Hier die Log-files Eset Code:
ATTFilter ESETSmartInstaller@High as downloader log: all ok # version=8 # OnlineScannerApp.exe=1.0.0.1 # OnlineScanner.ocx=1.0.0.6920 # api_version=3.0.2 # EOSSerial=65c7317f530e2740adc60d42018a5a07 # engine=15775 # end=finished # remove_checked=false # archives_checked=true # unwanted_checked=false # unsafe_checked=false # antistealth_checked=true # utc_time=2013-11-06 01:26:44 # local_time=2013-11-06 02:26:44 (+0100, Mitteleuropäische Zeit) # country="Germany" # lang=1033 # osver=6.1.7601 NT Service Pack 1 # compatibility_mode=1032 16777213 100 89 18962 126915748 0 0 # compatibility_mode=5893 16776574 100 94 10220604 135374254 0 0 # scanned=220320 # found=0 # cleaned=0 # scan_time=13712 Code:
ATTFilter Results of screen317's Security Check version 0.99.74 Windows 7 Service Pack 1 x64 (UAC is enabled) Internet Explorer 10 ``````````````Antivirus/Firewall Check:`````````````` AVG Anti-Virus Business Edition 2011 Antivirus up to date! `````````Anti-malware/Other Utilities Check:````````` Malwarebytes Anti-Malware Version 1.75.0.1300 Java 7 Update 45 Java version out of Date! Adobe Flash Player 11.9.900.117 Adobe Reader XI Mozilla Firefox (25.0) ````````Process Check: objlist.exe by Laurent```````` AVG avgwdsvc.exe AVG avgtray.exe AVG avgemc.exe Internet Manager OnlineUpdate ouc.exe `````````````````System Health check````````````````` Total Fragmentation on Drive C: ````````````````````End of Log`````````````````````` FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 31-10-2013 Ran by Student (administrator) on ICH on 06-11-2013 17:27:47 Running from C:\Users\Student\Desktop Windows 7 Professional Service Pack 1 (X64) OS Language: German Standard Internet Explorer Version 10 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (AuthenTec, Inc.) C:\Program Files\Fingerprint Sensor\ATService.exe (Microsoft Corporation) C:\Windows\system32\WLANExt.exe (Microsoft Corporation) C:\Windows\SYSTEM32\WISPTIS.EXE (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG10\avgwdsvc.exe (Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe () C:\ProgramData\DatacardService\HWDeviceService64.exe () C:\ProgramData\Internet Manager\OnlineUpdate\ouc.exe (Microsoft Corporation) C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe (O2Micro International) C:\Windows\system32\DRIVERS\o2flash.exe (FUJITSU LIMITED) C:\Program Files\Fujitsu\Plugfree NETWORK\PFNService.exe (FUJITSU LIMITED) C:\Program Files\Fujitsu\PSUtility\PSUService.exe () C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe (Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe (Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe (Wacom Technology, Corp.) C:\Program Files\Tablet\ISD\ISD_Tablet.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe (Microsoft Corporation) C:\Windows\SYSTEM32\WISPTIS.EXE () C:\Program Files (x86)\CoreTemp\Core Temp.exe (Wacom Technology, Corp.) C:\Program Files\Tablet\ISD\ISD_TabletUser.exe (Huawei Technologies Co., Ltd.) C:\ProgramData\DatacardService\DCSHelper.exe (Wacom Technology, Corp.) C:\Program Files\Tablet\ISD\ISD_Tablet.exe (Wacom Technology, Inc) C:\Program Files\Tablet\CalibrationAssistant.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (FUJITSU LIMITED) C:\Program Files\Fujitsu\FUJ02E3\FUJ02E3.exe (FUJITSU LIMITED) C:\Program Files\Fujitsu\FDM7\FdmDaemon.exe (FUJITSU LIMITED) C:\Program Files\Fujitsu\PSUtility\TrayManager.exe (FUJITSU LIMITED) C:\Program Files\Fujitsu\BatteryAid2\BatteryDaemon.exe (Intel Corporation) C:\Windows\System32\igfxtray.exe (Intel Corporation) C:\Windows\System32\hkcmd.exe (Intel Corporation) C:\Windows\System32\igfxpers.exe (Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe (AuthenTec, Inc.) C:\Program Files\Fingerprint Sensor\ATSwpNav.exe (FUJITSU LIMITED) C:\Program Files\Fujitsu\SSUtility\FJSSDMN.exe (FUJITSU LIMITED) C:\Program Files\Fujitsu\AutoRotation\AutoRotation.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office14\MSOSYNC.EXE (Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe (Dropbox, Inc.) C:\Users\Student\AppData\Roaming\Dropbox\bin\Dropbox.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE (Fujitsu Computer Systems Corporation) C:\Program Files\Fujitsu\Utils\FjDspMon.exe (Fujitsu Computer Systems Corporation) C:\Program Files\Fujitsu\Utils\fjevents.exe (Fujitsu Computer Systems) C:\Program Files\Fujitsu\Utils\FjLidMon.exe (Fujitsu America, Inc.) C:\Program Files\Fujitsu\Utils\FjMnuIco.exe (Intel Corporation) C:\Windows\system32\igfxext.exe (FUJITSU LIMITED) C:\Program Files (x86)\Fujitsu\Fujitsu Hotkey Utility\IndicatorUty.exe (FUJITSU LIMITED) C:\Program Files (x86)\Fujitsu\PointingDeviceUtility\FJPDAutoSet.exe (Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe (Fujitsu Technology Solutions) C:\Fujitsu\Programs\DeskUpdate\DeskUpdateNotifier.exe (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG10\avgtray.exe (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe () C:\Program Files (x86)\AVG\AVG10\Identity Protection\agent\bin\avgidsmonitor.exe (FUJITSU LIMITED) C:\Program Files\Fujitsu\Plugfree NETWORK\PFNetDm.EXE (FUJITSU LIMITED) C:\Program Files\Fujitsu\Plugfree NETWORK\PFNTray.EXE (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PrivacyIconClient.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Ink\InputPersonalization.exe (SAP AG) C:\Program Files (x86)\SAP\SAPsetup\Setup\Updater\NwSapAutoWorkstationUpdateService.exe (Microsoft Corporation) C:\Windows\system32\StikyNot.exe (Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG10\Identity Protection\Agent\Bin\AVGIDSAgent.exe (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG10\avgemca.exe (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG10\avgnsa.exe (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG10\avgchsva.exe (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG10\avgrsa.exe (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG10\avgcsrva.exe (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG10\avgam.exe (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG10\avgcsrvx.exe (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG10\avgcsrva.exe (RealNetworks, Inc.) D:\Programme\update\realsched.exe (Intel Corporation) C:\Windows\system32\igfxsrvc.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11663464 2010-12-07] (Realtek Semiconductor) HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2679592 2011-02-03] (Synaptics Incorporated) HKLM\...\Run: [LoadFUJ02E3] - C:\Program Files\Fujitsu\FUJ02E3\FUJ02E3.exe [45680 2010-06-08] (FUJITSU LIMITED) HKLM\...\Run: [FDM7] - C:\Program Files\Fujitsu\FDM7\FdmDaemon.exe [164200 2009-10-19] (FUJITSU LIMITED) HKLM\...\Run: [PSUTility] - C:\Program Files\Fujitsu\PSUtility\TrayManager.exe [199528 2010-11-13] (FUJITSU LIMITED) HKLM\...\Run: [PfNet] - C:\Program Files\Fujitsu\Plugfree NETWORK\PfNet.exe [6311424 2010-10-07] (FUJITSU LIMITED) HKLM\...\Run: [FJBATAID2] - C:\Program Files\Fujitsu\BatteryAid2\BatteryDaemon.exe [124776 2010-10-30] (FUJITSU LIMITED) HKLM\...\Run: [FjStrtAp] - C:\Program Files\Fujitsu\Utils\FjStrtAp.exe [19800 2010-12-01] (Fujitsu America, Inc..) HKLM\...\Run: [HotKeysCmds] - C:\Windows\system32\hkcmd.exe [ ] () HKLM\...\Run: [IntelPAN] - C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe [1935120 2011-03-30] (Intel(R) Corporation) HKLM\...\Run: [ATSwpNav] - "C:\Program Files\Fingerprint Sensor\ATSwpNav" -run HKLM\...\Run: [SSUtility] - C:\Program Files\Fujitsu\SSUtility\FJSSDMN.exe [273256 2010-08-16] (FUJITSU LIMITED) HKLM\...\Run: [FJAutoR] - C:\Program Files\Fujitsu\AutoRotation\AutoRotation.exe [87912 2010-08-31] (FUJITSU LIMITED) Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation) HKCU\...\Run: [OfficeSyncProcess] - C:\Program Files (x86)\Microsoft Office\Office14\MSOSYNC.EXE [720064 2013-04-22] (Microsoft Corporation) HKCU\...\Run: [RESTART_STICKY_NOTES] - C:\Windows\System32\StikyNot.exe [427520 2009-07-14] (Microsoft Corporation) HKCU\...\Policies\Explorer: [NoDriveTypeAutoRun] 0x91000000 HKLM-x32\...\Run: [IndicatorUtility] - C:\Program Files (x86)\Fujitsu\Fujitsu Hotkey Utility\IndicatorUty.exe [48752 2010-09-30] (FUJITSU LIMITED) HKLM-x32\...\Run: [StartFujitsuPointingDeviceUtility] - C:\Program Files (x86)\Fujitsu\PointingDeviceUtility\FJPDAutoSet.exe [85104 2011-02-02] (FUJITSU LIMITED) HKLM-x32\...\Run: [IMSS] - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe [112152 2011-02-01] (Intel Corporation) HKLM-x32\...\Run: [NUSB3MON] - C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [113288 2010-11-17] (Renesas Electronics Corporation) HKLM-x32\...\Run: [DeskUpdateNotifier] - C:\Fujitsu\Programs\DeskUpdate\DeskUpdateNotifier.exe [102968 2013-02-26] (Fujitsu Technology Solutions) HKLM-x32\...\Run: [AVG_TRAY] - C:\Program Files (x86)\AVG\AVG10\avgtray.exe [2345592 2012-08-01] (AVG Technologies CZ, s.r.o.) HKLM-x32\...\Run: [EKStatusMonitor] - C:\Program Files (x86)\Kodak\AiO\StatusMonitor\EKStatusMonitor.exe [2844608 2012-10-15] (Eastman Kodak Company) HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated) HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation) HKLM-x32\...\Run: [TkBellExe] - D:\Programme\Update\realsched.exe [295512 2013-11-02] (RealNetworks, Inc.) HKLM-x32\...\Run: [BCSSync] - C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [91520 2010-03-13] (Microsoft Corporation) Startup: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\LaunchCenter.lnk ShortcutTarget: LaunchCenter.lnk -> C:\Program Files\Fujitsu\LaunchCenter\lcStarter.exe (Fujitsu Technology Solutions) Startup: C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\LaunchCenter.lnk ShortcutTarget: LaunchCenter.lnk -> C:\Program Files\Fujitsu\LaunchCenter\lcStarter.exe (Fujitsu Technology Solutions) Startup: C:\Users\Student\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk ShortcutTarget: Dropbox.lnk -> C:\Users\Student\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.) Startup: C:\Users\Student\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk ShortcutTarget: OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk -> C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE (Microsoft Corporation) BootExecute: autocheck autochk * C:\PROGRA~2\AVG\AVG10\avgchsva.exe /syncC:\PROGRA~2\AVG\AVG10\avgrsa.exe /sync /restart ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de/ig?brand=FTSG&bmod=FTSG&aig=0&reason=1 StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation) BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) BHO-x32: RealNetworks Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll (RealDownloader) BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation) BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) Toolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No File Handler: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files (x86)\AVG\AVG10\avgppa.dll (AVG Technologies CZ, s.r.o.) Handler: saphtmlp - {D1F8BD1E-7967-11D2-B43A-006094B9EADB} - No File Handler: sapr3 - {D1F8BD1E-7967-11D2-B43A-006094B9EADB} - No File Handler-x32: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files (x86)\AVG\AVG10\avgpp.dll (AVG Technologies CZ, s.r.o.) Handler-x32: saphtmlp - {D1F8BD1E-7967-11D2-B43A-006094B9EADB} - d:\programme\sap\sapgui\saphtmlp.dll No File Handler-x32: sapr3 - {D1F8BD1E-7967-11D2-B43A-006094B9EADB} - d:\programme\sap\sapgui\saphtmlp.dll No File Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies) Tcpip\Parameters: [DhcpNameServer] 192.168.178.1 Tcpip\..\Interfaces\{7E2A9C4C-6439-4D64-94D7-D1C70414D42F}: [NameServer]10.74.210.210 10.74.210.211 FireFox: ======== FF ProfilePath: C:\Users\Student\AppData\Roaming\Mozilla\Firefox\Profiles\gw3efxrx.default FF NewTab: www.google.de FF SelectedSearchEngine: Google FF Homepage: hxxp://www.google.de/ig?brand=FTSG&bmod=FTSG&aig=0&reason=1 FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_117.dll () FF Plugin: @java.com/DTPlugin,version=10.21.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=10.21.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation) FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_117.dll () FF Plugin-x32: @java.com/DTPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~3\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~3\Office14\NPSPWRAP.DLL (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3508.0205 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @real.com/nppl3260;version=16.0.3.51 - D:\Programme\Netscape6\nppl3260.dll No File FF Plugin-x32: @real.com/nprndlchromebrowserrecordext;version=1.3.3 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll (RealNetworks, Inc.) FF Plugin-x32: @real.com/nprndlhtml5videoshim;version=1.3.3 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll (RealNetworks, Inc.) FF Plugin-x32: @real.com/nprndlpepperflashvideoshim;version=1.3.3 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll (RealNetworks, Inc.) FF Plugin-x32: @real.com/nprpplugin;version=16.0.3.51 - D:\Programme\Netscape6\nprpplugin.dll No File FF Plugin-x32: @realnetworks.com/npdlplugin;version=1 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll (RealDownloader) FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml FF HKLM-x32\...\Firefox\Extensions: [ff-bmboc@bytemobile.com] - C:\Program Files\T-Mobile\InternetManager_H\OCx64\addon FF HKLM-x32\...\Firefox\Extensions: [{1E73965B-8B48-48be-9C8D-68B920ABC1C4}] - C:\Program Files (x86)\AVG\AVG10\Firefox4\ FF Extension: AVG Safe Search - C:\Program Files (x86)\AVG\AVG10\Firefox4\ FF HKLM-x32\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext FF Extension: RealDownloader - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext FF HKLM-x32\...\Firefox\Extensions: [fmconverter@gmail.com] - C:\Program Files (x86)\Freemake\Freemake Video Converter\BrowserPlugin\Firefox\ FF Extension: Freemake Video Converter Plugin - C:\Program Files (x86)\Freemake\Freemake Video Converter\BrowserPlugin\Firefox\ FF HKLM-x32\...\Firefox\Extensions: [{DF153AFF-6948-45d7-AC98-4FC4AF8A08E2}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext\ FF Extension: RealDownloader - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext\ ==================== Services (Whitelisted) ================= R2 AVGIDSAgent; C:\Program Files (x86)\AVG\AVG10\Identity Protection\Agent\Bin\AVGIDSAgent.exe [7391072 2012-01-31] (AVG Technologies CZ, s.r.o.) R2 avgwd; C:\Program Files (x86)\AVG\AVG10\avgwdsvc.exe [269520 2011-02-08] (AVG Technologies CZ, s.r.o.) R2 HWDeviceService64.exe; C:\ProgramData\DatacardService\HWDeviceService64.exe [346976 2011-03-14] () S2 Internet Manager. RunOuc; D:\Programme\UpdateDog\ouc.exe [224096 2013-11-03] () R2 MSSQL$SQLEXPRESS; C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe [58345832 2011-09-22] (Microsoft Corporation) S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [340240 2011-03-30] () R2 NWSAPAutoWorkstationUpdateSvc; C:\Program Files (x86)\SAP\SAPsetup\Setup\Updater\NwSapAutoWorkstationUpdateService.exe [180928 2012-11-21] (SAP AG) R2 PFNService; C:\Program Files\Fujitsu\Plugfree NETWORK\PFNService.exe [331776 2010-10-07] (FUJITSU LIMITED) R2 PowerSavingUtilityService; C:\Program Files\Fujitsu\PSUtility\PSUService.exe [63336 2010-06-17] (FUJITSU LIMITED) R2 RealNetworks Downloader Resolver Service; C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe [39056 2013-08-14] () S4 SQLAgent$SQLEXPRESS; C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\SQLAGENT.EXE [431464 2011-09-22] (Microsoft Corporation) R2 TabletServiceISD; C:\Program Files\Tablet\ISD\ISD_Tablet.exe [5640048 2011-02-23] (Wacom Technology, Corp.) ==================== Drivers (Whitelisted) ==================== S3 anvsnddrv; C:\Windows\System32\drivers\anvsnddrv.sys [33872 2011-11-28] (AnvSoft Inc.) R3 AVGIDSDriver; C:\Windows\System32\DRIVERS\AVGIDSDriver.Sys [118864 2011-05-27] (AVG Technologies CZ, s.r.o. ) R0 AVGIDSEH; C:\Windows\System32\DRIVERS\AVGIDSEH.Sys [26704 2011-02-22] (AVG Technologies CZ, s.r.o. ) R3 AVGIDSFilter; C:\Windows\System32\DRIVERS\AVGIDSFilter.Sys [29264 2011-02-10] (AVG Technologies CZ, s.r.o. ) R1 Avgldx64; C:\Windows\System32\DRIVERS\avgldx64.sys [312160 2012-11-12] (AVG Technologies CZ, s.r.o.) R1 Avgmfx64; C:\Windows\System32\DRIVERS\avgmfx64.sys [41552 2011-03-01] (AVG Technologies CZ, s.r.o.) R0 Avgrkx64; C:\Windows\System32\DRIVERS\avgrkx64.sys [37456 2011-03-16] (AVG Technologies CZ, s.r.o.) R1 Avgtdia; C:\Windows\System32\DRIVERS\avgtdia.sys [377936 2011-04-04] (AVG Technologies CZ, s.r.o.) S3 avmeject; C:\Windows\System32\drivers\avmeject.sys [14120 2010-10-22] (AVM Berlin) R0 BMLoad; C:\Windows\System32\drivers\BMLoad.sys [16512 2013-10-30] (Bytemobile, Inc.) R3 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2013-08-01] (DT Soft Ltd) R0 FBIOSDRV; C:\Windows\System32\Drivers\FBIOSDRV.sys [21104 2009-06-24] (FUJITSU LIMITED) R3 Fjbtndrv; C:\Windows\system32\drivers\FjBtnDrv.sys [23040 2009-08-27] (Fujitsu America, Inc.) R0 FJGSDisk; C:\Windows\System32\DRIVERS\FJGSDisk.sys [15208 2010-09-28] (FUJITSU LIMITED) R3 FUJ02B1; C:\Windows\system32\drivers\FUJ02B1.sys [7808 2006-11-01] (FUJITSU LIMITED) R3 FUJ02E3; C:\Windows\system32\drivers\FUJ02E3.sys [7296 2006-11-01] (FUJITSU LIMITED) S3 FWLANUSB; C:\Windows\System32\DRIVERS\fwlanusb.sys [460800 2010-10-22] (AVM GmbH) R3 guardian2; C:\Windows\System32\Drivers\oz776x64.sys [85736 2010-08-06] (O2Micro) S3 SaiKF620; C:\Windows\System32\DRIVERS\SaiKF620.sys [131584 2008-10-22] (Saitek) R1 tcpipBM; C:\Windows\System32\Drivers\tcpipBM.sys [39552 2013-10-30] (Bytemobile, Inc.) R3 ALSysIO; \??\C:\Users\Student\AppData\Local\Temp\ALSysIO64.sys [x] S3 catchme; \??\C:\ComboFix\catchme.sys [x] S3 LgBttPort; system32\DRIVERS\lgbtpt64.sys [x] S3 lgbusenum; system32\DRIVERS\lgbtbs64.sys [x] S3 LGVMODEM; system32\DRIVERS\lgvmdm64.sys [x] S3 usbbus; system32\DRIVERS\lgx64bus.sys [x] S3 UsbDiag; system32\DRIVERS\lgx64diag.sys [x] S3 USBModem; system32\DRIVERS\lgx64modem.sys [x] S3 VSPerfDrv100; \??\D:\Programme\Microsoft Visual Studio 10.0\Team Tools\Performance Tools\x64\VSPerfDrv100.sys [x] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2013-11-06 17:27 - 2013-11-06 17:27 - 00000894 _____ C:\Users\Student\Desktop\checkup.txt 2013-11-06 10:27 - 2013-11-06 10:27 - 00000000 ____D C:\Program Files (x86)\ESET 2013-11-05 13:49 - 2013-11-05 13:49 - 00891167 _____ C:\Users\Student\Desktop\SecurityCheck.exe 2013-11-05 13:48 - 2013-11-05 13:48 - 02347384 _____ (ESET) C:\Users\Student\Downloads\esetsmartinstaller_enu.exe 2013-11-05 13:29 - 2013-11-05 13:29 - 00001913 _____ C:\Users\Student\Desktop\JRT.txt 2013-11-05 13:20 - 2013-11-05 13:20 - 00000000 ____D C:\Windows\ERUNT 2013-11-05 13:19 - 2013-11-05 13:19 - 00024255 _____ C:\Users\Student\Desktop\AdwCleaner[S0].txt 2013-11-05 13:07 - 2013-11-05 13:14 - 00000000 ____D C:\AdwCleaner 2013-11-05 12:51 - 2013-11-05 12:51 - 01073258 _____ C:\Users\Student\Desktop\adwcleaner.exe 2013-11-05 12:51 - 2013-11-05 12:51 - 01033335 _____ (Thisisu) C:\Users\Student\Desktop\JRT.exe 2013-11-05 12:49 - 2013-11-05 12:49 - 00001075 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2013-11-05 12:49 - 2013-11-05 12:49 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware 2013-11-05 12:48 - 2013-11-05 12:48 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Student\Downloads\mbam-setup-1.75.0.1300(1).exe 2013-11-04 23:45 - 2013-11-05 13:20 - 00003356 _____ C:\Windows\System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-2031096137-3791022390-309066423-1000 2013-11-04 23:45 - 2013-11-05 13:20 - 00003226 _____ C:\Windows\System32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-2031096137-3791022390-309066423-1000 2013-11-04 22:09 - 2013-11-05 13:02 - 00000908 _____ C:\Windows\PFRO.log 2013-11-04 19:55 - 2013-11-05 12:26 - 00000600 _____ C:\Users\Student\AppData\Local\PUTTY.RND 2013-11-04 16:50 - 2013-11-04 16:50 - 00000000 ____D C:\Windows\Sun 2013-11-04 10:54 - 2013-11-04 10:54 - 00039956 _____ C:\ComboFix.txt 2013-11-04 10:46 - 2013-11-04 10:54 - 00000000 ____D C:\Qoobox 2013-11-04 10:46 - 2011-06-26 07:45 - 00256000 _____ C:\Windows\PEV.exe 2013-11-04 10:46 - 2010-11-07 18:20 - 00208896 _____ C:\Windows\MBR.exe 2013-11-04 10:46 - 2009-04-20 05:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe 2013-11-04 10:46 - 2000-08-31 01:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe 2013-11-04 10:46 - 2000-08-31 01:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe 2013-11-04 10:46 - 2000-08-31 01:00 - 00098816 _____ C:\Windows\sed.exe 2013-11-04 10:46 - 2000-08-31 01:00 - 00080412 _____ C:\Windows\grep.exe 2013-11-04 10:46 - 2000-08-31 01:00 - 00068096 _____ C:\Windows\zip.exe 2013-11-04 10:45 - 2013-11-04 10:53 - 00000000 ____D C:\Windows\erdnt 2013-11-04 10:43 - 2013-11-04 10:43 - 05143677 ____R (Swearware) C:\Users\Student\Desktop\ComboFix.exe 2013-11-04 09:41 - 2013-11-04 09:41 - 00262144 _____ C:\Windows\Minidump\110413-85207-01.dmp 2013-11-04 09:40 - 2013-11-04 09:40 - 646221585 ____N C:\Windows\MEMORY.DMP 2013-11-04 07:00 - 2013-11-04 07:01 - 00262144 _____ C:\Windows\Minidump\110413-182895-01.dmp 2013-11-03 23:37 - 2013-11-03 23:38 - 00377856 _____ C:\Users\Student\Desktop\GMER.exe 2013-11-03 23:03 - 2013-11-03 23:03 - 00000000 ____D C:\FRST 2013-11-03 22:58 - 2013-11-03 22:59 - 01957098 _____ (Farbar) C:\Users\Student\Desktop\FRST64.exe 2013-11-03 22:55 - 2013-11-03 22:55 - 00000000 _____ C:\Users\Student\defogger_reenable 2013-11-03 22:52 - 2013-11-03 22:53 - 00050477 _____ C:\Users\Student\Downloads\Defogger.exe 2013-11-03 22:16 - 2013-11-03 22:16 - 00000000 ____D C:\Users\Student\AppData\Local\Adobe 2013-11-03 21:42 - 2013-11-03 21:43 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Student\Downloads\mbam-setup-1.75.0.1300.exe 2013-11-03 21:32 - 2013-11-05 13:17 - 00002038 _____ C:\Windows\setupact.log 2013-11-03 21:32 - 2013-11-03 21:32 - 00000000 _____ C:\Windows\setuperr.log 2013-11-03 21:05 - 2013-11-03 21:05 - 00000000 ____D C:\ProgramData\TechSmith 2013-11-03 21:05 - 2013-11-03 21:05 - 00000000 ____D C:\ProgramData\regid.1995-08.com.techsmith 2013-11-03 21:05 - 2013-11-03 21:05 - 00000000 ____D C:\Program Files (x86)\QuickTime 2013-11-03 19:02 - 2013-11-03 19:02 - 00004615 _____ C:\Users\Student\AppData\Local\recently-used.xbel 2013-11-03 12:30 - 2013-11-03 12:30 - 00000017 _____ C:\Users\Student\AppData\Local\resmon.resmoncfg 2013-11-03 12:24 - 2011-09-22 21:07 - 00105832 _____ (Microsoft Corporation) C:\Windows\system32\SQSRVRES.DLL 2013-11-03 12:24 - 2011-09-22 21:06 - 00109416 _____ (Microsoft Corporation) C:\Windows\system32\perf-MSSQL$SQLEXPRESS-sqlctr10.3.5500.0.dll 2013-11-03 12:24 - 2011-09-22 17:18 - 00073064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\perf-MSSQL$SQLEXPRESS-sqlctr10.3.5500.0.dll 2013-11-03 12:12 - 2013-11-03 12:12 - 00002776 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC 2013-11-03 12:12 - 2013-11-03 12:12 - 00000000 ____D C:\Program Files\CCleaner 2013-11-03 11:18 - 2013-11-03 11:18 - 00000736 _____ C:\Users\Public\Desktop\SAP Logon.lnk 2013-11-03 11:18 - 2012-11-22 09:37 - 05225472 _____ (SAP AG) C:\Windows\SysWOW64\librfc32u.dll 2013-11-03 11:17 - 2012-11-22 09:37 - 04331520 _____ (SAP AG) C:\Windows\SysWOW64\librfc32.dll 2013-11-03 11:17 - 2012-06-20 10:27 - 08847360 _____ (IBM Corporation and others) C:\Windows\SysWOW64\icudt34.dll 2013-11-03 11:17 - 2012-06-20 10:27 - 00946176 _____ (IBM Corporation and others) C:\Windows\SysWOW64\icuuc34.dll 2013-11-03 11:17 - 2012-06-20 10:27 - 00843776 _____ (IBM Corporation and others) C:\Windows\SysWOW64\icuin34.dll 2013-11-03 11:17 - 2011-11-23 03:23 - 01064960 _____ C:\Windows\SysWOW64\h5krnl32.dll 2013-11-03 11:17 - 2011-11-23 03:23 - 00188928 _____ C:\Windows\SysWOW64\h5icon32.dll 2013-11-03 11:17 - 2011-11-23 03:23 - 00175616 _____ C:\Windows\SysWOW64\h5menu32.dll 2013-11-03 11:17 - 2011-11-23 03:23 - 00114688 _____ (heilerSoftware) C:\Windows\SysWOW64\h5dlg32.dll 2013-11-03 11:17 - 2011-11-23 03:23 - 00095744 _____ C:\Windows\SysWOW64\h5rtf32.dll 2013-11-03 11:17 - 2011-11-23 03:23 - 00051200 _____ C:\Windows\SysWOW64\h5tool32.dll 2013-11-03 11:17 - 2011-11-23 03:19 - 00001818 _____ C:\Windows\SysWOW64\icu_license.txt 2013-11-03 11:17 - 1995-05-19 08:15 - 00133904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfcans32.dll 2013-11-03 11:16 - 2012-06-20 10:30 - 01708168 _____ (SAP, Walldorf) C:\Windows\SysWOW64\SAPbtmp.dll 2013-11-03 11:15 - 2013-11-03 11:15 - 00000000 ____D C:\Program Files (x86)\SAP 2013-11-03 11:09 - 2013-11-03 11:17 - 00000000 ____D C:\Users\Student\AppData\Local\SAP 2013-11-03 10:45 - 2013-11-03 10:45 - 00000738 _____ C:\Users\Public\Desktop\GIMP 2.lnk 2013-11-03 01:18 - 2013-11-03 01:18 - 00000000 ____D C:\Users\Student\AppData\Local\webkit 2013-11-03 01:14 - 2013-11-03 21:29 - 00000000 ____D C:\Users\Student\AppData\Local\gtk-2.0 2013-11-02 16:04 - 2013-11-02 16:04 - 00000898 _____ C:\Users\Student\Desktop\GIMP 2.lnk 2013-11-02 16:03 - 2013-11-02 16:03 - 00000000 ____D C:\Users\Student\AppData\Local\gegl-0.2 2013-11-02 13:53 - 2013-11-02 13:54 - 00000000 ____D C:\Users\Student\Documents\Freemake 2013-11-02 13:53 - 2013-11-02 13:53 - 00001286 _____ C:\Users\Public\Desktop\Freemake Video Converter.lnk 2013-11-02 13:53 - 2013-11-02 13:53 - 00000000 ____D C:\Program Files (x86)\Freemake 2013-11-02 13:38 - 2013-11-03 12:14 - 00000000 ____D C:\Users\Student\AppData\Local\CrashDumps 2013-11-02 13:15 - 2013-11-02 13:15 - 00000839 _____ C:\Users\Public\Desktop\RealPlayer.lnk 2013-11-02 13:15 - 2013-11-02 13:15 - 00000000 ____D C:\Users\Student\AppData\Roaming\RealNetworks 2013-11-02 13:15 - 2013-11-02 13:15 - 00000000 ____D C:\ProgramData\RealNetworks 2013-11-02 13:15 - 2013-11-02 13:15 - 00000000 ____D C:\Program Files (x86)\RealNetworks 2013-11-02 13:14 - 2013-11-02 13:14 - 00499712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcp71.dll 2013-11-02 13:14 - 2013-11-02 13:14 - 00348160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcr71.dll 2013-11-02 13:14 - 2013-11-02 13:14 - 00272896 _____ (Progressive Networks) C:\Windows\SysWOW64\pncrt.dll 2013-11-02 13:14 - 2013-11-02 13:14 - 00201872 _____ (RealNetworks, Inc.) C:\Windows\SysWOW64\rmoc3260.dll 2013-11-02 13:14 - 2013-11-02 13:14 - 00006656 _____ (RealNetworks, Inc.) C:\Windows\SysWOW64\pndx5016.dll 2013-11-02 13:14 - 2013-11-02 13:14 - 00005632 _____ (RealNetworks, Inc.) C:\Windows\SysWOW64\pndx5032.dll 2013-11-02 13:06 - 2013-11-02 13:12 - 39382624 _____ (RealNetworks, Inc.) C:\Users\Student\Downloads\RealPlayer_de(1).exe 2013-11-02 12:38 - 2013-11-02 12:38 - 00000000 ____D C:\Users\Student\AppData\Local\Macromedia 2013-11-02 11:25 - 2013-11-02 15:07 - 00005120 _____ C:\Users\Student\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini 2013-11-02 11:08 - 2013-11-02 11:17 - 00000000 ____D C:\Program Files (x86)\Pinnacle 2013-11-02 11:05 - 2013-11-02 11:05 - 00001682 _____ C:\Users\Student\Desktop\putty_0.63.exe - Verknüpfung.lnk 2013-11-02 11:05 - 2013-11-02 11:05 - 00001089 _____ C:\Users\Student\Desktop\sqldeveloper.exe - Verknüpfung.lnk 2013-11-02 01:02 - 2013-11-02 01:02 - 00000000 ____D C:\Users\Student\AppData\Local\VirtualStore 2013-11-02 00:58 - 2013-11-03 11:51 - 00125768 _____ C:\Users\Student\AppData\Local\GDIPFONTCACHEV1.DAT 2013-11-01 21:13 - 2013-11-03 21:29 - 00000000 ____D C:\Users\Public\Documents\Pinnacle 2013-11-01 21:13 - 2013-11-01 21:14 - 00000000 ____D C:\ProgramData\Pinnacle VideoSpin 2013-11-01 21:13 - 2013-11-01 21:13 - 00000625 _____ C:\Users\Public\Desktop\Pinnacle VideoSpin.lnk 2013-11-01 21:12 - 2013-11-02 11:18 - 00000349 _____ C:\Users\Public\Documents\PCLECHAL.INI 2013-11-01 21:04 - 2013-11-01 21:11 - 170203312 _____ C:\Users\Student\Downloads\VideoSpin_2_0_Setup_2_.exe 2013-11-01 18:36 - 2013-11-01 18:36 - 00000000 ____D C:\Users\Student\AppData\Roaming\Windows Live Writer 2013-11-01 18:34 - 2013-11-03 12:15 - 00000000 ____D C:\Users\Student\Tracing 2013-11-01 17:56 - 2013-11-01 17:56 - 00000598 _____ C:\Users\Public\Desktop\Blender.lnk 2013-11-01 17:07 - 2013-11-03 21:41 - 00001113 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk 2013-10-30 22:44 - 2013-01-10 09:15 - 00000577 _____ C:\Users\Student\Desktop\Internet Manager.lnk 2013-10-30 22:18 - 2013-10-30 22:11 - 01001472 _____ (DiBcom SA) C:\Windows\system32\Drivers\mod7700.sys 2013-10-30 22:18 - 2013-10-30 22:11 - 00421376 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ewusbwwan.sys 2013-10-30 22:18 - 2013-10-30 22:11 - 00221312 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ewusbmdm.sys 2013-10-30 22:18 - 2013-10-30 22:11 - 00212992 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ew_juwwanecm.sys 2013-10-30 22:18 - 2013-10-30 22:11 - 00117248 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ew_hwusbdev.sys 2013-10-30 22:18 - 2013-10-30 22:11 - 00098816 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ew_jucdcacm.sys 2013-10-30 22:18 - 2013-10-30 22:11 - 00086016 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ew_jubusenum.sys 2013-10-30 22:18 - 2013-10-30 22:11 - 00069632 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ew_jucdcecm.sys 2013-10-30 22:18 - 2013-10-30 22:11 - 00032768 _____ (Huawei Tech. Co., Ltd.) C:\Windows\system32\Drivers\ewdcsc.sys 2013-10-30 22:18 - 2013-10-30 22:11 - 00028672 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ew_juextctrl.sys 2013-10-30 22:18 - 2013-10-30 22:11 - 00022016 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ew_hwupgrade.sys 2013-10-30 22:18 - 2013-10-30 22:11 - 00013952 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ew_usbenumfilter.sys 2013-10-30 22:15 - 2013-10-30 22:11 - 00724608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bmutil.dll 2013-10-30 22:15 - 2013-10-30 22:11 - 00308352 _____ (Bytemobile, Inc.) C:\Windows\SysWOW64\bminstall.dll 2013-10-30 22:15 - 2013-10-30 22:11 - 00039552 _____ (Bytemobile, Inc.) C:\Windows\system32\Drivers\tcpipBM.sys 2013-10-30 22:15 - 2013-10-30 22:11 - 00016512 _____ (Bytemobile, Inc.) C:\Windows\system32\Drivers\BMLoad.sys 2013-10-30 21:01 - 2013-10-30 21:02 - 01970848 _____ C:\Users\Student\Downloads\winrar-x64-500.exe 2013-10-30 20:56 - 2013-10-30 20:57 - 00642632 _____ (EFD Software ) C:\Users\Student\Downloads\hdtune_255.exe 2013-10-30 20:54 - 2013-10-30 20:54 - 00002926 _____ C:\Windows\System32\Tasks\{9DE6CCD9-9FA2-4108-B641-D01F3899F18F} 2013-10-30 20:53 - 2013-10-30 20:53 - 00002926 _____ C:\Windows\System32\Tasks\{EDCAE9E3-AD51-4AD0-9096-E5018A3154EC} 2013-10-30 20:48 - 2013-10-30 20:48 - 00000000 ____D C:\Users\Student\Documents\Add-in Express 2013-10-30 20:28 - 2013-10-30 20:46 - 51187712 _____ C:\Users\Student\Downloads\wz175-32gev.msi 2013-10-29 18:44 - 2013-11-02 13:54 - 00000000 ____D C:\ProgramData\Freemake 2013-10-29 18:44 - 2013-10-29 18:44 - 00000000 ____D C:\Users\Student\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Freemake 2013-10-27 23:35 - 2013-10-27 23:35 - 00000000 ____D C:\Windows\de 2013-10-27 23:33 - 2013-10-27 23:33 - 00000000 ____D C:\Windows\nl 2013-10-27 23:33 - 2013-10-27 23:33 - 00000000 ____D C:\Windows\it 2013-10-27 23:33 - 2013-10-27 23:33 - 00000000 ____D C:\Windows\fr 2013-10-27 23:33 - 2013-10-27 23:33 - 00000000 ____D C:\Windows\es 2013-10-27 23:33 - 2013-10-27 23:33 - 00000000 ____D C:\Windows\en 2013-10-27 23:31 - 2013-11-01 18:29 - 00000000 ____D C:\Program Files\Windows Live 2013-10-27 23:31 - 2013-02-05 22:06 - 00057840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fssfltr.sys 2013-10-27 17:23 - 2013-10-27 19:42 - 142602520 _____ (Microsoft Corporation) C:\Users\Student\Downloads\wlsetup-all_16.4.3508.0205(1).exe 2013-10-26 19:22 - 2013-11-01 17:57 - 00000669 _____ C:\Users\Public\Desktop\BrainYoo2.lnk 2013-10-26 19:22 - 2013-10-26 19:23 - 00000000 ____D C:\Users\Student\.BrainYoo2 2013-10-26 19:22 - 2013-10-26 19:22 - 00000000 ____D C:\ProgramData\Brainyoo2 2013-10-26 19:16 - 2013-10-26 19:21 - 24810584 _____ C:\Users\Student\Downloads\BrainYoo-Setup.exe 2013-10-25 00:26 - 2013-10-25 00:35 - 00000000 ____D C:\Users\Student\AppData\Roaming\SAP 2013-10-25 00:26 - 2013-10-25 00:26 - 00000000 ____D C:\Users\Student\Documents\SAP 2013-10-22 21:51 - 2013-10-22 21:51 - 04369632 _____ (Piriform Ltd) C:\Users\Student\Downloads\ccsetup406.exe 2013-10-22 14:04 - 2013-10-22 14:06 - 39161079 _____ (SAP AG) C:\Users\Student\Downloads\SAP-BI_730SP02P_201-10011800.EXE 2013-10-22 14:01 - 2009-03-24 11:52 - 00614992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comctl32.ocx 2013-10-22 14:01 - 2009-03-24 11:52 - 00443488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshflxgd.ocx 2013-10-22 14:01 - 2009-03-24 11:52 - 00415552 _____ (Microsoft Corporation ) C:\Windows\SysWOW64\comct332.ocx 2013-10-22 14:01 - 2009-03-24 11:52 - 00278352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdatgrd.ocx 2013-10-22 14:01 - 2009-03-24 11:52 - 00258880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msflxgrd.ocx 2013-10-22 14:01 - 2009-03-24 11:52 - 00221504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tabctl32.ocx 2013-10-22 14:01 - 2009-03-24 11:52 - 00218432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\richtx32.ocx 2013-10-22 14:01 - 2009-03-24 11:52 - 00170080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comct232.ocx 2013-10-22 14:01 - 2009-03-24 11:52 - 00155984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comdlg32.ocx 2013-10-22 14:01 - 2009-03-24 11:52 - 00129872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msstdfmt.dll 2013-10-22 14:01 - 2004-02-23 15:31 - 00150528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tlbinf32.dll 2013-10-22 14:01 - 1999-04-29 11:04 - 01355776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvbvm50.dll 2013-10-22 14:01 - 1998-06-26 19:22 - 00094744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\grid32.ocx 2013-10-22 14:01 - 1998-06-24 09:57 - 00067376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sysinfo.ocx 2013-10-22 14:01 - 1998-06-18 10:58 - 00094208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msstkprp.dll 2013-10-22 10:07 - 2013-10-22 10:07 - 00000516 _____ C:\Windows\ODBCINST.INI 2013-10-22 10:07 - 2013-10-22 10:07 - 00000311 _____ C:\Windows\ODBC.INI 2013-10-22 10:06 - 1995-03-02 23:00 - 00092576 _____ (Microsoft Corporation) C:\Windows\system\Odbcinst.dll 2013-10-22 10:06 - 1995-03-02 23:00 - 00056240 _____ (Microsoft Corporation) C:\Windows\system\Odbc.dll 2013-10-22 10:06 - 1995-03-02 23:00 - 00026832 _____ (Microsoft Corporation) C:\Windows\system\Ctl3dv2.dll 2013-10-22 10:06 - 1995-03-02 23:00 - 00017412 _____ C:\Windows\system\Odbcinst.hlp 2013-10-22 10:06 - 1995-03-02 23:00 - 00006464 _____ (Microsoft Corporation) C:\Windows\system\Odbcadm.exe 2013-10-22 10:05 - 1999-01-10 23:00 - 00026224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Odbc16gt.dll 2013-10-22 10:05 - 1999-01-10 23:00 - 00007952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Odbccp32.cpl 2013-10-22 10:05 - 1999-01-10 23:00 - 00004656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Ds16gt.dll 2013-10-22 10:05 - 1998-10-18 23:00 - 00037062 _____ C:\Windows\SysWOW64\Odbcinst.hlp 2013-10-22 10:05 - 1998-10-18 23:00 - 00000324 _____ C:\Windows\SysWOW64\Odbcinst.cnt 2013-10-22 10:04 - 1998-07-30 12:51 - 00305152 _____ (InstallShield Software Corporation) C:\Windows\IsUninst.exe 2013-10-22 09:48 - 2013-10-22 09:50 - 114307560 _____ (SAP AG) C:\Users\Student\Downloads\SAP-GUI-PATCH_2-10010496.exe 2013-10-21 16:13 - 2013-10-22 09:20 - 00000000 ____D C:\Users\Student\AppData\Roaming\SQL Developer 2013-10-19 07:08 - 2013-10-19 07:08 - 00000000 ____D C:\ProgramData\Oracle 2013-10-19 07:08 - 2013-10-08 06:50 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll 2013-10-19 07:08 - 2013-10-08 06:46 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe 2013-10-19 07:08 - 2013-10-08 06:46 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe 2013-10-19 07:08 - 2013-10-08 06:46 - 00174504 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe 2013-10-19 07:07 - 2013-10-19 07:08 - 00004886 _____ C:\Windows\SysWOW64\jupdate-1.7.0_45-b18.log 2013-10-18 22:08 - 2013-10-19 07:04 - 30694824 _____ (Oracle Corporation) C:\Users\Student\Downloads\jre-7u45-windows-x64.exe 2013-10-18 14:55 - 2013-10-18 14:55 - 00000000 ____D C:\ProgramData\McAfee 2013-10-18 14:41 - 2013-11-04 22:12 - 00003334 _____ C:\Windows\System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-2031096137-3791022390-309066423-1000 2013-10-18 14:41 - 2013-11-04 22:12 - 00003204 _____ C:\Windows\System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-2031096137-3791022390-309066423-1000 2013-10-18 14:32 - 2013-10-18 14:32 - 00000666 _____ C:\Users\Student\Desktop\Bibliotheken.lnk 2013-10-15 20:54 - 2013-10-21 20:55 - 00000000 ____D C:\Users\Student\Documents\Blender Dateien 2013-10-15 16:05 - 2013-11-01 17:41 - 00000000 ____D C:\tmp 2013-10-15 15:23 - 2013-10-15 15:23 - 00000000 ____D C:\Users\Student\AppData\Roaming\Blender Foundation 2013-10-15 15:01 - 2013-10-15 15:14 - 50488341 _____ C:\Users\Student\Downloads\blender-2.68a-windows64.exe 2013-10-14 08:21 - 2013-10-18 14:32 - 00000000 ____D C:\Users\Student\Documents\Danny Schule 2013-10-13 13:15 - 2013-10-13 13:15 - 00000000 ____D C:\Users\Student\AppData\Roaming\TuneUp Software 2013-10-13 13:14 - 2013-10-13 13:15 - 00000000 ____D C:\ProgramData\TuneUp Software 2013-10-13 13:14 - 2013-10-13 13:14 - 00000000 __SHD C:\ProgramData\{FE8D473A-6F06-4F99-B5F4-BED72B2A038C} 2013-10-11 06:43 - 2013-09-04 02:37 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys 2013-10-11 06:43 - 2013-09-04 02:37 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys 2013-10-11 06:43 - 2013-09-04 02:37 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys 2013-10-11 06:43 - 2013-09-04 02:37 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys 2013-10-11 06:43 - 2013-09-04 02:37 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys 2013-10-11 06:43 - 2013-09-04 02:37 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys 2013-10-11 06:43 - 2013-09-04 02:37 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys 2013-10-11 02:39 - 2013-09-23 00:28 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2013-10-11 02:39 - 2013-09-23 00:28 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2013-10-11 02:39 - 2013-09-23 00:27 - 14335488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2013-10-11 02:39 - 2013-09-23 00:27 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2013-10-11 02:39 - 2013-09-23 00:27 - 02876928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2013-10-11 02:39 - 2013-09-23 00:27 - 02048512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2013-10-11 02:39 - 2013-09-23 00:27 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2013-10-11 02:39 - 2013-09-23 00:27 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2013-10-11 02:39 - 2013-09-23 00:27 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2013-10-11 02:39 - 2013-09-23 00:27 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2013-10-11 02:39 - 2013-09-23 00:27 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2013-10-11 02:39 - 2013-09-23 00:27 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2013-10-11 02:39 - 2013-09-23 00:27 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2013-10-11 02:39 - 2013-09-22 23:55 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2013-10-11 02:39 - 2013-09-22 23:55 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2013-10-11 02:39 - 2013-09-22 23:55 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2013-10-11 02:39 - 2013-09-22 23:54 - 19252224 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2013-10-11 02:39 - 2013-09-22 23:54 - 15404544 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2013-10-11 02:39 - 2013-09-22 23:54 - 03959296 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2013-10-11 02:39 - 2013-09-22 23:54 - 02647552 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2013-10-11 02:39 - 2013-09-22 23:54 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2013-10-11 02:39 - 2013-09-22 23:54 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2013-10-11 02:39 - 2013-09-22 23:54 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2013-10-11 02:39 - 2013-09-22 23:54 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2013-10-11 02:39 - 2013-09-22 23:54 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2013-10-11 02:39 - 2013-09-22 23:54 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2013-10-11 02:39 - 2013-09-22 23:54 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2013-10-11 02:39 - 2013-09-21 04:38 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2013-10-11 02:39 - 2013-09-21 04:30 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2013-10-11 02:39 - 2013-09-21 03:48 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe 2013-10-11 02:39 - 2013-09-21 03:39 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe 2013-10-10 17:06 - 2013-07-04 13:50 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll 2013-10-10 17:06 - 2013-07-04 12:50 - 00530432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comctl32.dll 2013-10-10 17:06 - 2013-06-06 06:50 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll 2013-10-10 17:06 - 2013-06-06 06:49 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll 2013-10-10 17:06 - 2013-06-06 06:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll 2013-10-10 17:06 - 2013-06-06 06:47 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll 2013-10-10 17:06 - 2013-06-06 05:57 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll 2013-10-10 17:06 - 2013-06-06 05:51 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll 2013-10-10 17:06 - 2013-06-06 05:50 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll 2013-10-10 17:06 - 2013-06-06 04:30 - 00368128 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll 2013-10-10 17:06 - 2013-06-06 04:01 - 00295424 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll 2013-10-10 17:06 - 2013-06-06 04:01 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll 2013-10-10 17:01 - 2013-07-12 11:41 - 00185344 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbvideo.sys 2013-10-10 17:01 - 2013-07-12 11:41 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbcir.sys 2013-10-10 17:01 - 2013-07-03 05:05 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidclass.sys 2013-10-10 17:01 - 2013-07-03 05:05 - 00032896 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidparse.sys 2013-10-10 17:01 - 2013-06-25 23:55 - 00785624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys 2013-10-10 17:00 - 2013-09-14 02:10 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys 2013-10-10 17:00 - 2013-09-08 03:30 - 01903552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys 2013-10-10 17:00 - 2013-09-08 03:27 - 00327168 _____ (Microsoft Corporation) C:\Windows\system32\mswsock.dll 2013-10-10 17:00 - 2013-09-08 03:03 - 00231424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mswsock.dll 2013-10-10 17:00 - 2013-08-29 03:17 - 05549504 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe 2013-10-10 17:00 - 2013-08-29 03:16 - 01732032 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll 2013-10-10 17:00 - 2013-08-29 03:16 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll 2013-10-10 17:00 - 2013-08-29 03:16 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll 2013-10-10 17:00 - 2013-08-29 03:13 - 00878080 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll 2013-10-10 17:00 - 2013-08-29 02:51 - 03969472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe 2013-10-10 17:00 - 2013-08-29 02:51 - 03914176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe 2013-10-10 17:00 - 2013-08-29 02:50 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll 2013-10-10 17:00 - 2013-08-29 02:50 - 00619520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdh.dll 2013-10-10 17:00 - 2013-08-29 02:50 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll 2013-10-10 17:00 - 2013-08-29 02:48 - 00640512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll 2013-10-10 17:00 - 2013-08-29 01:49 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe 2013-10-10 17:00 - 2013-08-29 01:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll 2013-10-10 17:00 - 2013-08-29 01:49 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe 2013-10-10 17:00 - 2013-08-29 01:49 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe 2013-10-10 17:00 - 2013-08-28 02:21 - 03155968 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2013-10-10 17:00 - 2013-07-04 13:57 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll 2013-10-10 17:00 - 2013-07-04 13:50 - 00102400 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll 2013-10-10 17:00 - 2013-07-04 12:57 - 00205824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WebClnt.dll 2013-10-10 17:00 - 2013-07-04 12:51 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\davclnt.dll 2013-10-10 17:00 - 2013-07-04 11:11 - 00140800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys 2013-10-10 16:59 - 2013-08-28 02:12 - 00461312 _____ (Microsoft Corporation) C:\Windows\system32\scavengeui.dll 2013-10-10 16:59 - 2013-08-01 13:09 - 00983488 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys 2013-10-10 16:59 - 2013-07-20 11:33 - 00124112 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll 2013-10-10 16:59 - 2013-07-20 11:33 - 00102608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll ==================== One Month Modified Files and Folders ======= 2013-11-06 17:27 - 2013-11-06 17:27 - 00000894 _____ C:\Users\Student\Desktop\checkup.txt 2013-11-06 17:01 - 2012-11-15 08:54 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job 2013-11-06 16:52 - 2012-10-14 21:12 - 00001112 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2013-11-06 16:38 - 2012-09-05 20:34 - 01819852 _____ C:\Windows\WindowsUpdate.log 2013-11-06 14:14 - 2012-09-05 13:05 - 00000000 ____D C:\Windows\system32\Drivers\AVG 2013-11-06 10:52 - 2012-10-14 21:12 - 00001108 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2013-11-06 10:27 - 2013-11-06 10:27 - 00000000 ____D C:\Program Files (x86)\ESET 2013-11-05 13:49 - 2013-11-05 13:49 - 00891167 _____ C:\Users\Student\Desktop\SecurityCheck.exe 2013-11-05 13:48 - 2013-11-05 13:48 - 02347384 _____ (ESET) C:\Users\Student\Downloads\esetsmartinstaller_enu.exe 2013-11-05 13:29 - 2013-11-05 13:29 - 00001913 _____ C:\Users\Student\Desktop\JRT.txt 2013-11-05 13:26 - 2009-07-14 05:45 - 00020720 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2013-11-05 13:26 - 2009-07-14 05:45 - 00020720 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2013-11-05 13:22 - 2011-04-11 18:26 - 00783662 _____ C:\Windows\system32\perfh007.dat 2013-11-05 13:22 - 2011-04-11 18:26 - 00179376 _____ C:\Windows\system32\perfc007.dat 2013-11-05 13:22 - 2009-07-14 06:13 - 01852928 _____ C:\Windows\system32\PerfStringBackup.INI 2013-11-05 13:20 - 2013-11-05 13:20 - 00000000 ____D C:\Windows\ERUNT 2013-11-05 13:20 - 2013-11-04 23:45 - 00003356 _____ C:\Windows\System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-2031096137-3791022390-309066423-1000 2013-11-05 13:20 - 2013-11-04 23:45 - 00003226 _____ C:\Windows\System32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-2031096137-3791022390-309066423-1000 2013-11-05 13:19 - 2013-11-05 13:19 - 00024255 _____ C:\Users\Student\Desktop\AdwCleaner[S0].txt 2013-11-05 13:19 - 2012-10-17 16:57 - 00000000 ____D C:\Users\Student\AppData\Roaming\Dropbox 2013-11-05 13:17 - 2013-11-03 21:32 - 00002038 _____ C:\Windows\setupact.log 2013-11-05 13:17 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2013-11-05 13:14 - 2013-11-05 13:07 - 00000000 ____D C:\AdwCleaner 2013-11-05 13:05 - 2013-07-28 22:06 - 00000000 ____D C:\ProgramData\Malwarebytes 2013-11-05 13:02 - 2013-11-04 22:09 - 00000908 _____ C:\Windows\PFRO.log 2013-11-05 12:51 - 2013-11-05 12:51 - 01073258 _____ C:\Users\Student\Desktop\adwcleaner.exe 2013-11-05 12:51 - 2013-11-05 12:51 - 01033335 _____ (Thisisu) C:\Users\Student\Desktop\JRT.exe 2013-11-05 12:49 - 2013-11-05 12:49 - 00001075 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2013-11-05 12:49 - 2013-11-05 12:49 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware 2013-11-05 12:48 - 2013-11-05 12:48 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Student\Downloads\mbam-setup-1.75.0.1300(1).exe 2013-11-05 12:26 - 2013-11-04 19:55 - 00000600 _____ C:\Users\Student\AppData\Local\PUTTY.RND 2013-11-04 22:12 - 2013-10-18 14:41 - 00003334 _____ C:\Windows\System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-2031096137-3791022390-309066423-1000 2013-11-04 22:12 - 2013-10-18 14:41 - 00003204 _____ C:\Windows\System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-2031096137-3791022390-309066423-1000 2013-11-04 18:10 - 2011-05-18 18:54 - 01873338 _____ C:\Windows\SysWOW64\PerfStringBackup.INI 2013-11-04 16:50 - 2013-11-04 16:50 - 00000000 ____D C:\Windows\Sun 2013-11-04 10:54 - 2013-11-04 10:54 - 00039956 _____ C:\ComboFix.txt 2013-11-04 10:54 - 2013-11-04 10:46 - 00000000 ____D C:\Qoobox 2013-11-04 10:54 - 2009-07-14 04:20 - 00000000 __RHD C:\Users\Default 2013-11-04 10:53 - 2013-11-04 10:45 - 00000000 ____D C:\Windows\erdnt 2013-11-04 10:52 - 2009-07-14 03:34 - 00000215 _____ C:\Windows\system.ini 2013-11-04 10:43 - 2013-11-04 10:43 - 05143677 ____R (Swearware) C:\Users\Student\Desktop\ComboFix.exe 2013-11-04 09:41 - 2013-11-04 09:41 - 00262144 _____ C:\Windows\Minidump\110413-85207-01.dmp 2013-11-04 09:41 - 2013-09-15 12:27 - 00000000 ____D C:\Windows\Minidump 2013-11-04 09:40 - 2013-11-04 09:40 - 646221585 ____N C:\Windows\MEMORY.DMP 2013-11-04 07:01 - 2013-11-04 07:00 - 00262144 _____ C:\Windows\Minidump\110413-182895-01.dmp 2013-11-04 07:00 - 2013-02-06 17:03 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2013-11-03 23:38 - 2013-11-03 23:37 - 00377856 _____ C:\Users\Student\Desktop\GMER.exe 2013-11-03 23:03 - 2013-11-03 23:03 - 00000000 ____D C:\FRST 2013-11-03 22:59 - 2013-11-03 22:58 - 01957098 _____ (Farbar) C:\Users\Student\Desktop\FRST64.exe 2013-11-03 22:55 - 2013-11-03 22:55 - 00000000 _____ C:\Users\Student\defogger_reenable 2013-11-03 22:55 - 2012-09-05 12:47 - 00000000 ____D C:\Users\Student 2013-11-03 22:53 - 2013-11-03 22:52 - 00050477 _____ C:\Users\Student\Downloads\Defogger.exe 2013-11-03 22:16 - 2013-11-03 22:16 - 00000000 ____D C:\Users\Student\AppData\Local\Adobe 2013-11-03 21:43 - 2013-11-03 21:42 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Student\Downloads\mbam-setup-1.75.0.1300.exe 2013-11-03 21:41 - 2013-11-01 17:07 - 00001113 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk 2013-11-03 21:41 - 2013-10-01 14:19 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox 2013-11-03 21:34 - 2009-07-14 05:45 - 00463496 _____ C:\Windows\system32\FNTCACHE.DAT 2013-11-03 21:32 - 2013-11-03 21:32 - 00000000 _____ C:\Windows\setuperr.log 2013-11-03 21:31 - 2012-10-08 17:55 - 00000000 ____D C:\ProgramData\DatacardService 2013-11-03 21:29 - 2013-11-03 01:14 - 00000000 ____D C:\Users\Student\AppData\Local\gtk-2.0 2013-11-03 21:29 - 2013-11-01 21:13 - 00000000 ____D C:\Users\Public\Documents\Pinnacle 2013-11-03 21:29 - 2012-11-07 21:00 - 00000000 ____D C:\ProgramData\Real 2013-11-03 21:29 - 2012-10-08 17:57 - 00000000 ____D C:\ProgramData\Internet Manager 2013-11-03 21:29 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\registration 2013-11-03 21:29 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\AppCompat 2013-11-03 21:05 - 2013-11-03 21:05 - 00000000 ____D C:\ProgramData\TechSmith 2013-11-03 21:05 - 2013-11-03 21:05 - 00000000 ____D C:\ProgramData\regid.1995-08.com.techsmith 2013-11-03 21:05 - 2013-11-03 21:05 - 00000000 ____D C:\Program Files (x86)\QuickTime 2013-11-03 19:02 - 2013-11-03 19:02 - 00004615 _____ C:\Users\Student\AppData\Local\recently-used.xbel 2013-11-03 19:02 - 2013-09-27 07:46 - 00000000 ____D C:\Users\Student\.gimp-2.8 2013-11-03 12:37 - 2012-09-05 13:06 - 00000000 ____D C:\ProgramData\Microsoft Help 2013-11-03 12:30 - 2013-11-03 12:30 - 00000017 _____ C:\Users\Student\AppData\Local\resmon.resmoncfg 2013-11-03 12:21 - 2012-10-16 12:54 - 00000000 ____D C:\Program Files\Microsoft SQL Server 2013-11-03 12:21 - 2012-10-16 12:52 - 00000000 ____D C:\Program Files (x86)\Microsoft SQL Server 2013-11-03 12:15 - 2013-11-01 18:34 - 00000000 ____D C:\Users\Student\Tracing 2013-11-03 12:14 - 2013-11-02 13:38 - 00000000 ____D C:\Users\Student\AppData\Local\CrashDumps 2013-11-03 12:12 - 2013-11-03 12:12 - 00002776 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC 2013-11-03 12:12 - 2013-11-03 12:12 - 00000000 ____D C:\Program Files\CCleaner 2013-11-03 11:51 - 2013-11-02 00:58 - 00125768 _____ C:\Users\Student\AppData\Local\GDIPFONTCACHEV1.DAT 2013-11-03 11:18 - 2013-11-03 11:18 - 00000736 _____ C:\Users\Public\Desktop\SAP Logon.lnk 2013-11-03 11:17 - 2013-11-03 11:09 - 00000000 ____D C:\Users\Student\AppData\Local\SAP 2013-11-03 11:17 - 2009-07-14 03:34 - 00021259 _____ C:\Windows\system32\Drivers\etc\services 2013-11-03 11:15 - 2013-11-03 11:15 - 00000000 ____D C:\Program Files (x86)\SAP 2013-11-03 10:45 - 2013-11-03 10:45 - 00000738 _____ C:\Users\Public\Desktop\GIMP 2.lnk 2013-11-03 01:58 - 2012-12-16 23:33 - 00000000 ____D C:\ProgramData\Skype 2013-11-03 01:18 - 2013-11-03 01:18 - 00000000 ____D C:\Users\Student\AppData\Local\webkit 2013-11-02 21:24 - 2009-07-14 04:20 - 00000000 __RHD C:\Users\Public\Libraries 2013-11-02 21:24 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\spool 2013-11-02 16:04 - 2013-11-02 16:04 - 00000898 _____ C:\Users\Student\Desktop\GIMP 2.lnk 2013-11-02 16:03 - 2013-11-02 16:03 - 00000000 ____D C:\Users\Student\AppData\Local\gegl-0.2 2013-11-02 15:07 - 2013-11-02 11:25 - 00005120 _____ C:\Users\Student\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini 2013-11-02 13:54 - 2013-11-02 13:53 - 00000000 ____D C:\Users\Student\Documents\Freemake 2013-11-02 13:54 - 2013-10-29 18:44 - 00000000 ____D C:\ProgramData\Freemake 2013-11-02 13:53 - 2013-11-02 13:53 - 00001286 _____ C:\Users\Public\Desktop\Freemake Video Converter.lnk 2013-11-02 13:53 - 2013-11-02 13:53 - 00000000 ____D C:\Program Files (x86)\Freemake 2013-11-02 13:20 - 2012-11-07 21:22 - 00003376 _____ C:\Windows\System32\Tasks\RealDownloaderDownloaderScheduledTaskS-1-5-21-2031096137-3791022390-309066423-1000 2013-11-02 13:15 - 2013-11-02 13:15 - 00000839 _____ C:\Users\Public\Desktop\RealPlayer.lnk 2013-11-02 13:15 - 2013-11-02 13:15 - 00000000 ____D C:\Users\Student\AppData\Roaming\RealNetworks 2013-11-02 13:15 - 2013-11-02 13:15 - 00000000 ____D C:\ProgramData\RealNetworks 2013-11-02 13:15 - 2013-11-02 13:15 - 00000000 ____D C:\Program Files (x86)\RealNetworks 2013-11-02 13:15 - 2012-12-21 23:16 - 00000000 ____D C:\Program Files (x86)\Real 2013-11-02 13:15 - 2012-11-07 20:59 - 00000000 ____D C:\Users\Student\AppData\Roaming\Real 2013-11-02 13:14 - 2013-11-02 13:14 - 00499712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcp71.dll 2013-11-02 13:14 - 2013-11-02 13:14 - 00348160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcr71.dll 2013-11-02 13:14 - 2013-11-02 13:14 - 00272896 _____ (Progressive Networks) C:\Windows\SysWOW64\pncrt.dll 2013-11-02 13:14 - 2013-11-02 13:14 - 00201872 _____ (RealNetworks, Inc.) C:\Windows\SysWOW64\rmoc3260.dll 2013-11-02 13:14 - 2013-11-02 13:14 - 00006656 _____ (RealNetworks, Inc.) C:\Windows\SysWOW64\pndx5016.dll 2013-11-02 13:14 - 2013-11-02 13:14 - 00005632 _____ (RealNetworks, Inc.) C:\Windows\SysWOW64\pndx5032.dll 2013-11-02 13:14 - 2012-12-21 23:22 - 00000000 ____D C:\Program Files (x86)\PluginCodecs 2013-11-02 13:12 - 2013-11-02 13:06 - 39382624 _____ (RealNetworks, Inc.) C:\Users\Student\Downloads\RealPlayer_de(1).exe 2013-11-02 12:38 - 2013-11-02 12:38 - 00000000 ____D C:\Users\Student\AppData\Local\Macromedia 2013-11-02 11:18 - 2013-11-01 21:12 - 00000349 _____ C:\Users\Public\Documents\PCLECHAL.INI 2013-11-02 11:17 - 2013-11-02 11:08 - 00000000 ____D C:\Program Files (x86)\Pinnacle 2013-11-02 11:05 - 2013-11-02 11:05 - 00001682 _____ C:\Users\Student\Desktop\putty_0.63.exe - Verknüpfung.lnk 2013-11-02 11:05 - 2013-11-02 11:05 - 00001089 _____ C:\Users\Student\Desktop\sqldeveloper.exe - Verknüpfung.lnk 2013-11-02 01:02 - 2013-11-02 01:02 - 00000000 ____D C:\Users\Student\AppData\Local\VirtualStore 2013-11-01 21:14 - 2013-11-01 21:13 - 00000000 ____D C:\ProgramData\Pinnacle VideoSpin 2013-11-01 21:13 - 2013-11-01 21:13 - 00000625 _____ C:\Users\Public\Desktop\Pinnacle VideoSpin.lnk 2013-11-01 21:11 - 2013-11-01 21:04 - 170203312 _____ C:\Users\Student\Downloads\VideoSpin_2_0_Setup_2_.exe 2013-11-01 18:36 - 2013-11-01 18:36 - 00000000 ____D C:\Users\Student\AppData\Roaming\Windows Live Writer 2013-11-01 18:31 - 2011-05-18 19:11 - 00000000 ____D C:\Program Files (x86)\Windows Live 2013-11-01 18:29 - 2013-10-27 23:31 - 00000000 ____D C:\Program Files\Windows Live 2013-11-01 17:57 - 2013-10-26 19:22 - 00000669 _____ C:\Users\Public\Desktop\BrainYoo2.lnk 2013-11-01 17:56 - 2013-11-01 17:56 - 00000598 _____ C:\Users\Public\Desktop\Blender.lnk 2013-11-01 17:41 - 2013-10-15 16:05 - 00000000 ____D C:\tmp 2013-10-30 23:03 - 2013-01-03 07:52 - 00000000 ____D C:\Users\Student\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR 2013-10-30 22:11 - 2013-10-30 22:18 - 01001472 _____ (DiBcom SA) C:\Windows\system32\Drivers\mod7700.sys 2013-10-30 22:11 - 2013-10-30 22:18 - 00421376 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ewusbwwan.sys 2013-10-30 22:11 - 2013-10-30 22:18 - 00221312 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ewusbmdm.sys 2013-10-30 22:11 - 2013-10-30 22:18 - 00212992 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ew_juwwanecm.sys 2013-10-30 22:11 - 2013-10-30 22:18 - 00117248 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ew_hwusbdev.sys 2013-10-30 22:11 - 2013-10-30 22:18 - 00098816 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ew_jucdcacm.sys 2013-10-30 22:11 - 2013-10-30 22:18 - 00086016 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ew_jubusenum.sys 2013-10-30 22:11 - 2013-10-30 22:18 - 00069632 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ew_jucdcecm.sys 2013-10-30 22:11 - 2013-10-30 22:18 - 00032768 _____ (Huawei Tech. Co., Ltd.) C:\Windows\system32\Drivers\ewdcsc.sys 2013-10-30 22:11 - 2013-10-30 22:18 - 00028672 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ew_juextctrl.sys 2013-10-30 22:11 - 2013-10-30 22:18 - 00022016 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ew_hwupgrade.sys 2013-10-30 22:11 - 2013-10-30 22:18 - 00013952 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ew_usbenumfilter.sys 2013-10-30 22:11 - 2013-10-30 22:15 - 00724608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bmutil.dll 2013-10-30 22:11 - 2013-10-30 22:15 - 00308352 _____ (Bytemobile, Inc.) C:\Windows\SysWOW64\bminstall.dll 2013-10-30 22:11 - 2013-10-30 22:15 - 00039552 _____ (Bytemobile, Inc.) C:\Windows\system32\Drivers\tcpipBM.sys 2013-10-30 22:11 - 2013-10-30 22:15 - 00016512 _____ (Bytemobile, Inc.) C:\Windows\system32\Drivers\BMLoad.sys 2013-10-30 22:11 - 2012-10-08 17:57 - 01486688 _____ (Microsoft Corporation) C:\Windows\system32\WdfCoInstaller01007.dll 2013-10-30 22:11 - 2012-10-08 17:57 - 01486688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdfCoInstaller01007.dll 2013-10-30 21:02 - 2013-10-30 21:01 - 01970848 _____ C:\Users\Student\Downloads\winrar-x64-500.exe 2013-10-30 20:57 - 2013-10-30 20:56 - 00642632 _____ (EFD Software ) C:\Users\Student\Downloads\hdtune_255.exe 2013-10-30 20:54 - 2013-10-30 20:54 - 00002926 _____ C:\Windows\System32\Tasks\{9DE6CCD9-9FA2-4108-B641-D01F3899F18F} 2013-10-30 20:53 - 2013-10-30 20:53 - 00002926 _____ C:\Windows\System32\Tasks\{EDCAE9E3-AD51-4AD0-9096-E5018A3154EC} 2013-10-30 20:48 - 2013-10-30 20:48 - 00000000 ____D C:\Users\Student\Documents\Add-in Express 2013-10-30 20:46 - 2013-10-30 20:28 - 51187712 _____ C:\Users\Student\Downloads\wz175-32gev.msi 2013-10-29 18:44 - 2013-10-29 18:44 - 00000000 ____D C:\Users\Student\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Freemake 2013-10-27 23:35 - 2013-10-27 23:35 - 00000000 ____D C:\Windows\de 2013-10-27 23:33 - 2013-10-27 23:33 - 00000000 ____D C:\Windows\nl 2013-10-27 23:33 - 2013-10-27 23:33 - 00000000 ____D C:\Windows\it 2013-10-27 23:33 - 2013-10-27 23:33 - 00000000 ____D C:\Windows\fr 2013-10-27 23:33 - 2013-10-27 23:33 - 00000000 ____D C:\Windows\es 2013-10-27 23:33 - 2013-10-27 23:33 - 00000000 ____D C:\Windows\en 2013-10-27 19:42 - 2013-10-27 17:23 - 142602520 _____ (Microsoft Corporation) C:\Users\Student\Downloads\wlsetup-all_16.4.3508.0205(1).exe 2013-10-27 17:16 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\NDF 2013-10-26 19:23 - 2013-10-26 19:22 - 00000000 ____D C:\Users\Student\.BrainYoo2 2013-10-26 19:22 - 2013-10-26 19:22 - 00000000 ____D C:\ProgramData\Brainyoo2 2013-10-26 19:21 - 2013-10-26 19:16 - 24810584 _____ C:\Users\Student\Downloads\BrainYoo-Setup.exe 2013-10-26 12:40 - 2013-09-19 13:50 - 00015570 _____ C:\Users\Student\Desktop\WOT.xlsx 2013-10-25 20:58 - 2013-07-22 11:41 - 00000000 ____D C:\Users\Student\.freemind 2013-10-25 00:35 - 2013-10-25 00:26 - 00000000 ____D C:\Users\Student\AppData\Roaming\SAP 2013-10-25 00:26 - 2013-10-25 00:26 - 00000000 ____D C:\Users\Student\Documents\SAP 2013-10-24 22:13 - 2012-12-16 23:34 - 00000000 ____D C:\Users\Student\AppData\Roaming\Skype 2013-10-22 21:51 - 2013-10-22 21:51 - 04369632 _____ (Piriform Ltd) C:\Users\Student\Downloads\ccsetup406.exe 2013-10-22 14:06 - 2013-10-22 14:04 - 39161079 _____ (SAP AG) C:\Users\Student\Downloads\SAP-BI_730SP02P_201-10011800.EXE 2013-10-22 10:08 - 2013-03-26 23:11 - 00000000 ____D C:\Users\Student\Documents\Visual Studio 2010 2013-10-22 10:07 - 2013-10-22 10:07 - 00000516 _____ C:\Windows\ODBCINST.INI 2013-10-22 10:07 - 2013-10-22 10:07 - 00000311 _____ C:\Windows\ODBC.INI 2013-10-22 10:06 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system 2013-10-22 09:50 - 2013-10-22 09:48 - 114307560 _____ (SAP AG) C:\Users\Student\Downloads\SAP-GUI-PATCH_2-10010496.exe 2013-10-22 09:20 - 2013-10-21 16:13 - 00000000 ____D C:\Users\Student\AppData\Roaming\SQL Developer 2013-10-21 20:55 - 2013-10-15 20:54 - 00000000 ____D C:\Users\Student\Documents\Blender Dateien 2013-10-19 07:08 - 2013-10-19 07:08 - 00000000 ____D C:\ProgramData\Oracle 2013-10-19 07:08 - 2013-10-19 07:07 - 00004886 _____ C:\Windows\SysWOW64\jupdate-1.7.0_45-b18.log 2013-10-19 07:08 - 2013-07-03 14:09 - 00000000 ____D C:\Program Files (x86)\Java 2013-10-19 07:04 - 2013-10-18 22:08 - 30694824 _____ (Oracle Corporation) C:\Users\Student\Downloads\jre-7u45-windows-x64.exe 2013-10-18 14:55 - 2013-10-18 14:55 - 00000000 ____D C:\ProgramData\McAfee 2013-10-18 14:55 - 2012-11-15 08:54 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater 2013-10-18 14:55 - 2012-10-08 18:02 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2013-10-18 14:55 - 2012-10-08 18:02 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2013-10-18 14:34 - 2011-04-11 02:10 - 00000000 ____D C:\Windows\Panther 2013-10-18 14:32 - 2013-10-18 14:32 - 00000666 _____ C:\Users\Student\Desktop\Bibliotheken.lnk 2013-10-18 14:32 - 2013-10-14 08:21 - 00000000 ____D C:\Users\Student\Documents\Danny Schule 2013-10-18 14:32 - 2013-09-29 14:42 - 00000000 ____D C:\Users\Student\Documents\Ebay 2013-10-15 15:23 - 2013-10-15 15:23 - 00000000 ____D C:\Users\Student\AppData\Roaming\Blender Foundation 2013-10-15 15:18 - 2013-09-27 07:59 - 00000000 ____D C:\Users\Student\.thumbnails 2013-10-15 15:14 - 2013-10-15 15:01 - 50488341 _____ C:\Users\Student\Downloads\blender-2.68a-windows64.exe 2013-10-13 13:15 - 2013-10-13 13:15 - 00000000 ____D C:\Users\Student\AppData\Roaming\TuneUp Software 2013-10-13 13:15 - 2013-10-13 13:14 - 00000000 ____D C:\ProgramData\TuneUp Software 2013-10-13 13:14 - 2013-10-13 13:14 - 00000000 __SHD C:\ProgramData\{FE8D473A-6F06-4F99-B5F4-BED72B2A038C} 2013-10-11 09:38 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache 2013-10-11 03:03 - 2013-01-27 21:47 - 00000000 ____D C:\Program Files\Microsoft Silverlight 2013-10-11 03:03 - 2013-01-27 21:47 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight 2013-10-11 02:22 - 2013-07-22 02:00 - 00000000 ____D C:\Windows\system32\MRT 2013-10-11 02:14 - 2012-10-10 16:01 - 80541720 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2013-10-10 09:47 - 2012-10-14 21:12 - 00004108 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA 2013-10-10 09:47 - 2012-10-14 21:12 - 00003856 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore 2013-10-08 06:50 - 2013-10-19 07:08 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll 2013-10-08 06:46 - 2013-10-19 07:08 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe 2013-10-08 06:46 - 2013-10-19 07:08 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe 2013-10-08 06:46 - 2013-10-19 07:08 - 00174504 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe Files to move or delete: ==================== C:\Users\Student\AppData\Roaming\CamLayout.ini C:\Users\Student\AppData\Roaming\CamShapes.ini C:\Users\Student\AppData\Roaming\CamStudio.Producer.Data.ini Some content of TEMP: ==================== C:\Users\Student\AppData\Local\Temp\Quarantine.exe C:\Users\Student\AppData\Local\Temp\SunWin32FunctionCalls_800168.dll ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2013-10-31 01:02 ==================== End Of Log ============================ --- --- --- Geändert von Danchen (06.11.2013 um 19:43 Uhr) |
![]() |
Themen zu Windows 7: Anwendungen funktionieren nicht mehr - Programmordner leer, Verknüpfungen noch da |
bluescreen, browser, ccsetup, computer, cpu, desktop, device driver, error, excel, farbar, farbar recovery scan tool, firefox, flash player, homepage, hängen, mozilla, newtab, nicht möglich, plug-in, port, realtek, registry, security, server, sicherheit, software, starten, svchost.exe, system, tablet, usb, virus, windows |