| |
| |||||||
Plagegeister aller Art und deren Bekämpfung: Antivir: Warnung swapfile.sys konnte nicht geöffnet werdenWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
 |
13.11.2013, 08:12
| #1 |
| |  Antivir: Warnung swapfile.sys konnte nicht geöffnet werden Hallo, leider dauert es seit einigen Tagen ewig, bis die Seiten meines Computers im Internet geladen sind. Antivir meldet mir folgende Warnung: c:swapfile.sys konnte nicht geöffnet werdet. Könnte hier ein Zusammenhang bestehen? Wenn nicht, was kann ich machen, um dieses Problem zu beheben? Danke! Ich kenne mich nicht so gut aus mit diesem Thema. LG Griselle |
|
13.11.2013, 08:49
| #2 |
| /// the machine /// TB-Ausbilder    | Antivir: Warnung swapfile.sys konnte nicht geöffnet werden hi,
__________________Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:  FRST 32-Bit | FRST 64-Bit(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
__________________ |
|
14.11.2013, 08:53
| #3 |
| | Antivir: Warnung swapfile.sys konnte nicht geöffnet werden Hallo schrauber,
__________________LG Griselle FRST Logfile: FRST Logfile: FRST Logfile: FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 13-11-2013
Ran by Saturn (administrator) on SAMSUNG on 13-11-2013 18:11:39
Running from C:\Users\Saturn\Downloads
Windows 8.1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(AMD) C:\WINDOWS\system32\atiesrxx.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
() C:\Program Files (x86)\ALDITALKVerbindungsassistent\ALDITALKVerbindungsassistent_Service.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(APN LLC.) C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe
(Qualcomm Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\adminservice.exe
(Samsung Electronics CO., LTD.) C:\Program Files (x86)\Samsung\Settings\CmdServer\EasyLauncher.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\PSIA.exe
(Atheros) C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe
(AMD) C:\WINDOWS\system32\atieclxx.exe
() C:\Program Files (x86)\Samsung\Settings\CmdServer\EasySettingsCmdServer.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Samsung Electronics CO., LTD.) C:\Program Files (x86)\Samsung\Settings\sSettings.exe
(Intel Corporation) C:\WINDOWS\system32\igfxext.exe
(Synaptics Incorporated) C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Qualcomm Atheros) C:\Program Files (x86)\Bluetooth Suite\BtTray.exe
(Atheros Communications) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe
() C:\Program Files (x86)\ALDITALKVerbindungsassistent\ALDITALKVerbindungsassistent_Launcher.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\psi_tray.exe
() C:\Program Files (x86)\Bluetooth Suite\ActivateDesktop.exe
(CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe
(CyberLink) C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe
(Intel Corporation) C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe
(Samsung Electronics CO., LTD.) C:\Program Files\Samsung\S Agent\CommonAgent.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(APN) C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Samsung Electronics CO., LTD.) C:\ProgramData\Samsung\SW Update Service\SWMAgent.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Opera Software) C:\Program Files (x86)\Opera\17.0.1241.53\opera.exe
() C:\Program Files (x86)\Opera\17.0.1241.53\opera_crashreporter.exe
(Opera Software) C:\Program Files (x86)\Opera\17.0.1241.53\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\17.0.1241.53\opera.exe
(Samsung Electronics CO., LTD.) C:\Program Files\Samsung\Support Center\GuaranaAgent.exe
() C:\Program Files (x86)\ALDITALKVerbindungsassistent\ALDITALKVerbindungsassistent.exe
(Microsoft Corporation) C:\WINDOWS\splwow64.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\OFFICE11\WINWORD.EXE
(Opera Software) C:\Program Files (x86)\Opera\17.0.1241.53\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\17.0.1241.53\opera.exe
() C:\Program Files (x86)\OpenIt\Open It!\openit.exe
(Opera Software) C:\Program Files (x86)\Opera\17.0.1241.53\opera.exe
(Systweak Inc) C:\Program Files (x86)\RegClean Pro\RegCleanPro.exe
(Opera Software) C:\Program Files (x86)\Opera\17.0.1241.53\opera.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.4.9600.16384_x64__8wekyb3d8bbwe\LiveComm.exe
(Microsoft Corporation) C:\WINDOWS\system32\wwahost.exe
(Microsoft Corporation) C:\WINDOWS\syswow64\wwahost.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [HotKeysCmds] - C:\WINDOWS\system32\hkcmd.exe [ ] ()
HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13191824 2012-08-10] (Realtek Semiconductor)
HKLM\...\Run: [BtTray] - C:\Program Files (x86)\Bluetooth Suite\BtTray.exe [766080 2012-12-05] (Qualcomm Atheros)
HKLM\...\Run: [BtvStack] - C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [128640 2012-12-05] (Atheros Communications)
HKLM\...\Run: [Bitcasa] - C:\Program Files\Bitcasa\Bitcasa.exe [3952128 2012-11-27] (Bitcasa, Inc)
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2917688 2012-10-16] (Synaptics Incorporated)
HKLM-x32\...\Runonce: [Del28036656] - cmd.exe /Q /D /c del "C:\Users\Saturn\AppData\Local\Temp\0.del" [x]
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKCU\...\Runonce: [Del28036656] - cmd.exe /Q /D /c del "C:\Users\Saturn\AppData\Local\Temp\0.del"
HKCU\...\Policies\system: [DisableLockWorkstation] 0
MountPoints2: {4b6315e7-4863-11e3-824f-806e6f6e6963} - "F:\.\Setup.exe" AUTORUN=1
HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [642216 2012-08-06] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [IAStorIcon] - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [285240 2012-09-01] (Intel Corporation)
HKLM-x32\...\Run: [Adobe Reader Speed Launcher] - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\reader_sl.exe [40312 2013-09-03] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [RemoteControl10] - C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [97392 2012-08-15] (CyberLink Corp.)
HKLM-x32\...\Run: [CLMLServer_For_P2G8] - C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe [111120 2012-06-08] (CyberLink)
HKLM-x32\...\Run: [CLVirtualDrive] - C:\Program Files (x86)\CyberLink\Power2Go8\VirtualDrive.exe [491120 2012-07-12] (CyberLink Corp.)
HKLM-x32\...\Run: [Intel AppUp(SM) center] - C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe [155488 2012-07-13] (Intel Corporation)
HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [347192 2013-09-04] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [ApnTBMon] - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe [1673680 2013-10-23] (APN)
SSODL: EldosMountNotificator - {5FF49FE8-B332-4CB9-B102-FB6951629E55} - C:\windows\system32\CbFsMntNtf3.dll (EldoS Corporation)
SSODL-x32: EldosMountNotificator - {5FF49FE8-B332-4CB9-B102-FB6951629E55} - C:\windows\SysWow64\CbFsMntNtf3.dll (EldoS Corporation)
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://search.zonealarm.com/?src=hp&tbid=goughGA&Lan=de&gu=99a6beb3d4854a81ae0daf86b86d8d80&tu=10G9y00Az1C01g0&sku=&tstsId=&ver=&
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://samsung13.msn.com
SearchScopes: HKLM - DefaultScope {38B7222B-4B2A-4275-BD2A-70DC0BE165A6} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MASMJS
SearchScopes: HKLM - {38B7222B-4B2A-4275-BD2A-70DC0BE165A6} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MASMJS
SearchScopes: HKLM-x32 - DefaultScope {38B7222B-4B2A-4275-BD2A-70DC0BE165A6} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MASMJS
SearchScopes: HKLM-x32 - {38B7222B-4B2A-4275-BD2A-70DC0BE165A6} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MASMJS
SearchScopes: HKCU - DefaultScope {F1A12AE8-3E1C-4DFC-B7F3-EF4D85106328} URL = hxxp://search.zonealarm.com/search?src=sp&tbid=goughGA&Lan=de&q={searchTerms}&gu=99a6beb3d4854a81ae0daf86b86d8d80&tu=10G9y00Az1C01g0&sku=&tstsId=&ver=&&r=546
SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = hxxp://www2.delta-search.com/?q={searchTerms}&babsrc=SP_ss&mntrId=C62F001E101F560B&affID=119357&tsp=5006
SearchScopes: HKCU - {38B7222B-4B2A-4275-BD2A-70DC0BE165A6} URL =
SearchScopes: HKCU - {F1A12AE8-3E1C-4DFC-B7F3-EF4D85106328} URL = hxxp://search.zonealarm.com/search?src=sp&tbid=goughGA&Lan=de&q={searchTerms}&gu=99a6beb3d4854a81ae0daf86b86d8d80&tu=10G9y00Az1C01g0&sku=&tstsId=&ver=&&r=546
BHO: Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport_x64.dll (APN LLC.)
BHO: CIESpeechBHO Class - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll (Qualcomm Atheros Commnucations)
BHO: No Name - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - No File
BHO-x32: Zonealarm Helper Object - {2A841F7A-A014-4DA5-B6D9-8B913DFB7A8C} - C:\Program Files (x86)\Check Point Software Technologies LTD\zonealarm\1.8.22.0\bh\zonealarm.dll (Check Point Software Technologies LTD)
BHO-x32: Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport.dll (APN LLC.)
Toolbar: HKLM - Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport_x64.dll (APN LLC.)
Toolbar: HKLM-x32 - Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport.dll (APN LLC.)
Toolbar: HKLM-x32 - ZoneAlarm Security Toolbar - {438FAE3E-BDEF-44D3-AB8B-0C7C8350DF59} - C:\Program Files (x86)\Check Point Software Technologies LTD\zonealarm\1.8.22.0\zonealarmTlbr.dll (Check Point Software Technologies LTD)
Toolbar: HKCU - Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport_x64.dll (APN LLC.)
Handler-x32: http\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: http\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: https\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: https\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: msdaipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: msdaipp\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Filter: text/xml - {807553E5-5146-11D5-A672-00B0D022E945} - No File
Tcpip\..\Interfaces\{78F61D77-89FA-400B-AEE8-08AAABD8B551}: [NameServer]212.23.115.150 212.23.115.132
FireFox:
========
FF ProfilePath: C:\Users\Saturn\AppData\Roaming\Mozilla\Firefox\Profiles\axxb4zd0.default
FF user.js: detected! => C:\Users\Saturn\AppData\Roaming\Mozilla\Firefox\Profiles\axxb4zd0.default\user.js
FF DefaultSearchEngine: Amazon.de
FF Homepage: hxxp://search.zonealarm.com/?src=hp&tbid=goughGA&Lan=de&gu=99a6beb3d4854a81ae0daf86b86d8d80&tu=10G9y00Az1C01g0&sku=&tstsId=&ver=&
FF SelectedSearchEngine: Search By ZoneAlarm
FF SearchEngineOrder.1: Search By ZoneAlarm
FF Keyword.URL: hxxp://search.zonealarm.com/search?src=sp&tbid=goughGA&Lan=de&gu=99a6beb3d4854a81ae0daf86b86d8d80&tu=10G9y00Az1C01g0&sku=&tstsId=&ver=&&q=
FF Plugin: @adobe.com/FlashPlayer - C:\windows\system32\Macromed\Flash\NPSWF64_11_9_900_117.dll ()
FF Plugin-x32: @adobe.com/FlashPlayer - C:\windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_117.dll ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3503.0728 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @videolan.org/vlc,version=2.0.8 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.0 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Users\Saturn\AppData\Roaming\Mozilla\Firefox\Profiles\axxb4zd0.default\searchplugins\zonealarm.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: No Name - C:\Users\Saturn\AppData\Roaming\Mozilla\Firefox\Profiles\axxb4zd0.default\Extensions\staged
FF Extension: toolbar_AVIRA-V7 - C:\Users\Saturn\AppData\Roaming\Mozilla\Firefox\Profiles\axxb4zd0.default\Extensions\toolbar_AVIRA-V7@apn.ask.com.xpi
FF Extension: No Name - C:\Program Files (x86)\Mozilla Firefox\extensions\ffxtlbr@babylon.com
FF HKLM-x32\...\Firefox\Extensions: [{ACAA314B-EEBA-48e4-AD47-84E31C44796C}] - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff\
Chrome:
=======
Error reading preferences. Please check "preferences" file for possible corruption. <======= ATTENTION
CHR HKLM-x32\...\Chrome\Extension: [aaaaacalgebmfelllfiaoknifldpngjh] - C:\ProgramData\AskPartnerNetwork\Toolbar\AVIRA-V7\CRX\ToolbarCR.crx
==================== Services (Whitelisted) =================
R2 ALDITALKVerbindungsassistent_Service; C:\Program Files (x86)\ALDITALKVerbindungsassistent\ALDITALKVerbindungsassistent_Service.exe [358968 2013-09-03] ()
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [84024 2013-09-04] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [108088 2013-09-04] (Avira Operations GmbH & Co. KG)
R2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [815160 2013-09-04] (Avira Operations GmbH & Co. KG)
R2 APNMCP; C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe [166352 2013-10-23] (APN LLC.)
R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [231552 2012-12-05] (Qualcomm Atheros Commnucations)
R2 Easy Launcher; C:\Program Files (x86)\Samsung\Settings\CmdServer\EasyLauncher.exe [1591176 2012-11-30] (Samsung Electronics CO., LTD.)
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [128896 2012-07-18] (Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [165760 2012-07-18] (Intel Corporation)
R2 Secunia PSI Agent; C:\Program Files (x86)\Secunia\PSI\PSIA.exe [1228504 2013-10-14] (Secunia)
S2 Secunia Update Agent; C:\Program Files (x86)\Secunia\PSI\sua.exe [660184 2013-10-14] (Secunia)
R2 SWUpdateService; C:\ProgramData\Samsung\SW Update Service\SWMAgent.exe [3018800 2013-10-21] (Samsung Electronics CO., LTD.)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [346872 2013-08-22] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23840 2013-08-22] (Microsoft Corporation)
R2 ZAtheros Bt and Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [323584 2012-12-05] (Atheros)
==================== Drivers (Whitelisted) ====================
S0 ADP80XX; C:\Windows\System32\drivers\ADP80XX.SYS [782176 2013-08-22] (PMC-Sierra)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [105344 2013-09-04] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [132088 2013-09-04] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [28600 2013-09-04] (Avira Operations GmbH & Co. KG)
R2 avnetflt; C:\Windows\system32\DRIVERS\avnetflt.sys [82136 2013-09-04] (Avira Operations GmbH & Co. KG)
S3 bcmfn2; C:\Windows\System32\drivers\bcmfn2.sys [17624 2013-08-13] (Windows (R) Win 7 DDK provider)
S3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [224768 2013-08-22] (Microsoft Corporation)
R1 cbfs3; C:\windows\system32\drivers\cbfs3.sys [352456 2012-08-06] (EldoS Corporation)
R1 CLVirtualDrive; C:\Windows\system32\DRIVERS\CLVirtualDrive.sys [92536 2012-06-25] (CyberLink)
S3 ewsercd; C:\Windows\system32\DRIVERS\ewsercd.sys [112896 2013-06-11] (Huawei Technologies Co., Ltd.)
R3 ewusbnet; C:\Windows\system32\DRIVERS\ewusbnet.sys [138752 2013-07-31] (Huawei Technologies Co., Ltd.)
R3 ewusbnet; C:\Windows\SysWow64\DRIVERS\ewusbnet.sys [138752 2013-07-31] (Huawei Technologies Co., Ltd.)
S3 ew_hwusbdev; C:\Windows\SysWow64\DRIVERS\ew_hwusbdev.sys [117248 2013-07-31] (Huawei Technologies Co., Ltd.)
R3 hwdatacard; C:\Windows\SysWow64\DRIVERS\ewusbmdm.sys [121600 2013-07-31] (Huawei Technologies Co., Ltd.)
S3 iaLPSSi_GPIO; C:\Windows\System32\drivers\iaLPSSi_GPIO.sys [24568 2013-07-30] (Intel Corporation)
S3 iaLPSSi_I2C; C:\Windows\System32\drivers\iaLPSSi_I2C.sys [99320 2013-07-25] (Intel Corporation)
S0 iaStorAV; C:\Windows\System32\drivers\iaStorAV.sys [651248 2013-08-10] (Intel Corporation)
R0 intelpep; C:\Windows\System32\drivers\intelpep.sys [39768 2013-09-30] (Microsoft Corporation)
S0 LSI_SAS3; C:\Windows\System32\drivers\lsi_sas3.sys [81760 2013-08-22] (LSI Corporation)
R3 NdisVirtualBus; C:\Windows\System32\drivers\NdisVirtualBus.sys [16384 2013-08-22] (Microsoft Corporation)
S3 netvsc; C:\Windows\system32\DRIVERS\netvsc63.sys [87040 2013-08-22] (Microsoft Corporation)
R3 PSI; C:\Windows\System32\DRIVERS\psi_mf_amd64.sys [18456 2013-10-14] (Secunia)
R3 RadioHIDMini; C:\Windows\System32\drivers\RadioHIDMini.sys [23408 2012-07-27] (Windows (R) Win 7 DDK provider)
S3 ReFS; C:\Windows\System32\Drivers\ReFS.sys [924512 2013-08-22] (Microsoft Corporation)
S3 SerCx2; C:\Windows\System32\drivers\SerCx2.sys [146272 2013-08-22] (Microsoft Corporation)
S0 stornvme; C:\Windows\System32\drivers\stornvme.sys [56672 2013-08-22] (Microsoft Corporation)
S3 UEFI; C:\Windows\System32\drivers\UEFI.sys [26976 2013-08-22] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [124256 2013-08-22] (Microsoft Corporation)
S3 BTATH_LWFLT; \SystemRoot\system32\DRIVERS\btath_lwflt.sys [x]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-11-13 18:11 - 2013-11-13 18:12 - 00019991 _____ C:\Users\Saturn\Downloads\FRST.txt
2013-11-13 18:11 - 2013-11-13 18:11 - 00000000 ____D C:\FRST
2013-11-13 18:02 - 2013-11-13 18:10 - 01957610 _____ (Farbar) C:\Users\Saturn\Downloads\FRST64.exe
2013-11-13 17:53 - 2013-11-13 17:53 - 00000000 _____ C:\Users\Saturn\Downloads\rcpafterdownloadcp_ntb_ad_13271_cpntb1 (1).exe.opdownload
2013-11-13 17:48 - 2013-11-13 17:48 - 00003322 _____ C:\WINDOWS\System32\Tasks\Advanced System Protector
2013-11-13 17:48 - 2013-11-13 17:48 - 00003108 _____ C:\WINDOWS\System32\Tasks\RegClean Pro
2013-11-13 17:48 - 2013-11-13 17:48 - 00003024 _____ C:\WINDOWS\System32\Tasks\RegClean Pro_UPDATES
2013-11-13 17:48 - 2013-11-13 17:48 - 00002868 _____ C:\WINDOWS\System32\Tasks\RegClean Pro_DEFAULT
2013-11-13 17:48 - 2013-11-13 17:48 - 00001062 _____ C:\Users\Public\Desktop\RegClean Pro.lnk
2013-11-13 17:48 - 2013-11-13 17:48 - 00000302 _____ C:\WINDOWS\Tasks\RegClean Pro_UPDATES.job
2013-11-13 17:48 - 2013-11-13 17:48 - 00000294 _____ C:\WINDOWS\Tasks\RegClean Pro_DEFAULT.job
2013-11-13 17:48 - 2013-11-13 17:48 - 00000000 ____D C:\Users\Saturn\AppData\Roaming\Systweak
2013-11-13 17:48 - 2013-11-13 17:48 - 00000000 ____D C:\Users\Saturn\AppData\Roaming\Advanced System Protector
2013-11-13 17:48 - 2013-11-13 17:48 - 00000000 ____D C:\Program Files (x86)\RegClean Pro
2013-11-13 17:48 - 2013-09-16 16:06 - 00020312 _____ (Systweak Inc., (www.systweak.com)) C:\WINDOWS\system32\roboot64.exe
2013-11-13 17:32 - 2013-11-13 17:46 - 05610360 _____ (Systweak Inc ) C:\Users\Saturn\Downloads\rcpafterdownloadcp_ntb_ad_13271_cpntb1.exe
2013-11-13 17:01 - 2013-11-13 17:01 - 00000000 ____D C:\Users\Saturn\AppData\Local\Babylon
2013-11-13 16:15 - 2013-11-13 17:17 - 00001126 _____ C:\Users\Public\Desktop\Open It!.lnk
2013-11-13 16:15 - 2013-11-13 16:15 - 00000000 ____D C:\Program Files (x86)\OpenIt
2013-11-13 16:02 - 2013-11-13 17:25 - 00002650 _____ C:\WINDOWS\System32\Tasks\DigitalSite
2013-11-13 16:02 - 2013-11-13 17:25 - 00000312 _____ C:\WINDOWS\Tasks\DigitalSite.job
2013-11-13 16:02 - 2013-11-13 16:02 - 00000000 ____D C:\Users\Saturn\AppData\Roaming\DigitalSite
2013-11-13 15:55 - 2013-11-13 15:57 - 00702696 _____ C:\Users\Saturn\Downloads\ZipExtractorSetup (1).exe
2013-11-13 15:53 - 2013-11-13 15:55 - 00053788 _____ C:\Users\Saturn\Downloads\ZipExtractorSetup.exe
2013-11-13 12:59 - 2013-11-13 12:59 - 104010312 _____ C:\WINDOWS\SysWOW64\䣵ഌLč
2013-11-13 07:33 - 2013-10-13 03:48 - 00136536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wfplwfs.sys
2013-11-13 07:33 - 2013-10-12 22:48 - 00828416 _____ (Microsoft Corporation) C:\WINDOWS\system32\BFE.DLL
2013-11-13 07:33 - 2013-10-12 22:34 - 01104384 _____ (Microsoft Corporation) C:\WINDOWS\system32\IKEEXT.DLL
2013-11-13 07:31 - 2013-10-05 15:21 - 01341288 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll
2013-11-13 07:31 - 2013-10-05 09:39 - 01067008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32.dll
2013-11-13 07:21 - 2013-10-16 16:58 - 01943536 _____ (Microsoft Corporation) C:\WINDOWS\system32\crypt32.dll
2013-11-13 07:21 - 2013-10-16 14:54 - 01581968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\crypt32.dll
2013-11-12 15:24 - 2013-11-12 15:24 - 00000362 _____ C:\WINDOWS\PFRO.log
2013-11-12 11:27 - 2013-11-12 11:27 - 00000000 ____D C:\Program Files (x86)\Check Point Software Technologies LTD
2013-11-12 11:19 - 2013-11-12 11:19 - 00000000 ____D C:\Program Files (x86)\CheckPoint
2013-11-12 11:16 - 2013-11-12 11:16 - 00000000 ____D C:\ProgramData\CheckPoint
2013-11-12 11:07 - 2013-11-12 11:13 - 02462696 _____ (Check Point Software Technologies LTD) C:\Users\Saturn\Downloads\zafwSetupWeb_120_104_000.exe
2013-11-12 06:37 - 2013-11-13 10:26 - 00000680 _____ C:\WINDOWS\setupact.log
2013-11-12 06:37 - 2013-11-12 06:37 - 00000000 _____ C:\WINDOWS\setuperr.log
2013-11-12 06:32 - 2013-11-12 06:32 - 753001719 _____ C:\WINDOWS\MEMORY.DMP
2013-11-12 06:32 - 2013-11-12 06:32 - 00743480 _____ C:\WINDOWS\Minidump\111213-27078-01.dmp
2013-11-12 06:32 - 2013-11-12 06:32 - 00000000 ____D C:\WINDOWS\Minidump
2013-11-11 17:41 - 2013-11-11 17:41 - 103792856 _____ C:\WINDOWS\SysWOW64\䔠旵Lÿ
2013-11-10 11:02 - 2013-11-13 07:44 - 00000000 ___RD C:\WINDOWS\BrowserChoice
2013-11-08 20:45 - 2013-11-08 20:45 - 00004096 ____H C:\Users\Saturn\AppData\Local\keyfile3.drm
2013-11-08 12:23 - 2013-11-08 12:23 - 00001450 _____ C:\Users\Saturn\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2013-11-08 12:22 - 2013-11-08 12:22 - 00000020 ___SH C:\Users\Saturn\ntuser.ini
2013-11-08 12:20 - 2013-11-08 12:20 - 00000000 _SHDL C:\Users\Default\Vorlagen
2013-11-08 12:20 - 2013-11-08 12:20 - 00000000 _SHDL C:\Users\Default\Startmenü
2013-11-08 12:20 - 2013-11-08 12:20 - 00000000 _SHDL C:\Users\Default\Netzwerkumgebung
2013-11-08 12:20 - 2013-11-08 12:20 - 00000000 _SHDL C:\Users\Default\Lokale Einstellungen
2013-11-08 12:20 - 2013-11-08 12:20 - 00000000 _SHDL C:\Users\Default\Eigene Dateien
2013-11-08 12:20 - 2013-11-08 12:20 - 00000000 _SHDL C:\Users\Default\Druckumgebung
2013-11-08 12:20 - 2013-11-08 12:20 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Musik
2013-11-08 12:20 - 2013-11-08 12:20 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Bilder
2013-11-08 12:20 - 2013-11-08 12:20 - 00000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2013-11-08 12:20 - 2013-11-08 12:20 - 00000000 _SHDL C:\Users\Default\AppData\Local\Verlauf
2013-11-08 12:20 - 2013-11-08 12:20 - 00000000 _SHDL C:\Users\Default\AppData\Local\Anwendungsdaten
2013-11-08 12:20 - 2013-11-08 12:20 - 00000000 _SHDL C:\Users\Default\Anwendungsdaten
2013-11-08 12:20 - 2013-11-08 12:20 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Musik
2013-11-08 12:20 - 2013-11-08 12:20 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Bilder
2013-11-08 12:20 - 2013-11-08 12:20 - 00000000 _SHDL C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2013-11-08 12:20 - 2013-11-08 12:20 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Verlauf
2013-11-08 12:20 - 2013-11-08 12:20 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Anwendungsdaten
2013-11-08 12:19 - 2013-11-13 17:56 - 01605353 _____ C:\WINDOWS\WindowsUpdate.log
2013-11-08 12:18 - 2013-11-08 12:18 - 00022960 _____ C:\WINDOWS\system32\emptyregdb.dat
2013-11-08 11:57 - 2013-11-08 11:57 - 00000000 ____D C:\WINDOWS\system32\config\bbimigrate
2013-11-08 11:56 - 2013-11-11 06:46 - 00000000 ____D C:\Users\Saturn
2013-11-08 11:56 - 2013-11-11 06:44 - 00000000 ___RD C:\Users\Saturn\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2013-11-08 11:56 - 2013-11-11 06:44 - 00000000 ___RD C:\Users\Saturn\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2013-11-08 11:56 - 2013-11-11 06:44 - 00000000 ___RD C:\Users\Saturn\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2013-11-08 11:56 - 2013-11-08 12:19 - 00020958 _____ C:\WINDOWS\diagwrn.xml
2013-11-08 11:56 - 2013-11-08 12:19 - 00020958 _____ C:\WINDOWS\diagerr.xml
2013-11-08 11:56 - 2013-11-08 11:56 - 00000000 _SHDL C:\Users\Saturn\Vorlagen
2013-11-08 11:56 - 2013-11-08 11:56 - 00000000 _SHDL C:\Users\Saturn\Startmenü
2013-11-08 11:56 - 2013-11-08 11:56 - 00000000 _SHDL C:\Users\Saturn\Netzwerkumgebung
2013-11-08 11:56 - 2013-11-08 11:56 - 00000000 _SHDL C:\Users\Saturn\Lokale Einstellungen
2013-11-08 11:56 - 2013-11-08 11:56 - 00000000 _SHDL C:\Users\Saturn\Eigene Dateien
2013-11-08 11:56 - 2013-11-08 11:56 - 00000000 _SHDL C:\Users\Saturn\Druckumgebung
2013-11-08 11:56 - 2013-11-08 11:56 - 00000000 _SHDL C:\Users\Saturn\Documents\Eigene Musik
2013-11-08 11:56 - 2013-11-08 11:56 - 00000000 _SHDL C:\Users\Saturn\Documents\Eigene Bilder
2013-11-08 11:56 - 2013-11-08 11:56 - 00000000 _SHDL C:\Users\Saturn\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2013-11-08 11:56 - 2013-11-08 11:56 - 00000000 _SHDL C:\Users\Saturn\AppData\Local\Verlauf
2013-11-08 11:56 - 2013-11-08 11:56 - 00000000 _SHDL C:\Users\Saturn\AppData\Local\Anwendungsdaten
2013-11-08 11:56 - 2013-11-08 11:56 - 00000000 _SHDL C:\Users\Saturn\Anwendungsdaten
2013-11-08 11:56 - 2013-08-22 16:36 - 00000000 ____D C:\Users\Saturn\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2013-11-08 11:51 - 2013-11-08 11:51 - 00000000 ____D C:\WINDOWS\SysWOW64\RTCOM
2013-11-08 11:51 - 2013-11-08 11:51 - 00000000 ____D C:\WINDOWS\system32\SRSLabs
2013-11-08 11:51 - 2013-11-08 11:51 - 00000000 ____D C:\Program Files\Realtek
2013-11-08 11:50 - 2013-11-08 11:50 - 00000264 _____ C:\WINDOWS\Tasks\Synaptics TouchPad Enhancements.job
2013-11-08 11:50 - 2013-11-08 11:50 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf
2013-11-08 11:50 - 2013-11-08 11:50 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_SynTP_01009.Wdf
2013-11-08 11:50 - 2013-11-08 11:50 - 00000000 ____D C:\Program Files\Synaptics
2013-11-08 11:50 - 2013-11-08 11:50 - 00000000 ____D C:\Program Files\Common Files\ATI Technologies
2013-11-08 11:50 - 2013-11-08 11:50 - 00000000 ____D C:\Program Files\AMD
2013-11-08 11:48 - 2013-11-11 07:01 - 00000000 ___DC C:\WINDOWS\Panther
2013-11-08 11:48 - 2013-11-08 11:48 - 00000000 __SHD C:\Recovery
2013-11-08 11:46 - 2013-11-08 11:46 - 23213056 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2013-11-08 11:46 - 2013-11-08 11:46 - 17143808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2013-11-08 11:46 - 2013-11-08 11:46 - 12995072 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2013-11-08 11:46 - 2013-11-08 11:46 - 11222016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2013-11-08 11:46 - 2013-11-08 11:46 - 02763776 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2013-11-08 11:46 - 2013-11-08 11:46 - 02724864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb
2013-11-08 11:46 - 2013-11-08 11:46 - 02724864 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb
2013-11-08 11:46 - 2013-11-08 11:46 - 02166272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2013-11-08 11:46 - 2013-11-08 11:46 - 02144768 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2013-11-08 11:46 - 2013-11-08 11:46 - 02140888 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll
2013-11-08 11:46 - 2013-11-08 11:46 - 01765384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11.dll
2013-11-08 11:46 - 2013-11-08 11:46 - 01765376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll
2013-11-08 11:46 - 2013-11-08 11:46 - 01537880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2013-11-08 11:46 - 2013-11-08 11:46 - 01286552 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll
2013-11-08 11:46 - 2013-11-08 11:46 - 01217024 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Streaming.dll
2013-11-08 11:46 - 2013-11-08 11:46 - 01018960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll
2013-11-08 11:46 - 2013-11-08 11:46 - 00977408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Streaming.dll
2013-11-08 11:46 - 2013-11-08 11:46 - 00909312 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmCoreR.dll
2013-11-08 11:46 - 2013-11-08 11:46 - 00872840 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfplat.dll
2013-11-08 11:46 - 2013-11-08 11:46 - 00837120 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSShared.dll
2013-11-08 11:46 - 2013-11-08 11:46 - 00698880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSShared.dll
2013-11-08 11:46 - 2013-11-08 11:46 - 00698232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfplat.dll
2013-11-08 11:46 - 2013-11-08 11:46 - 00621056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MrmCoreR.dll
2013-11-08 11:46 - 2013-11-08 11:46 - 00516496 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll
2013-11-08 11:46 - 2013-11-08 11:46 - 00406400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxgi.dll
2013-11-08 11:46 - 2013-11-08 11:46 - 00382808 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2013-11-08 11:46 - 2013-11-08 11:46 - 00294400 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Sensors.dll
2013-11-08 11:46 - 2013-11-08 11:46 - 00249856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2013-11-08 11:46 - 2013-11-08 11:46 - 00225792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Sensors.dll
2013-11-08 11:46 - 2013-11-08 11:46 - 00189952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2013-11-08 11:45 - 2013-11-08 11:45 - 00262144 _____ C:\WINDOWS\system32\config\userdiff
2013-11-08 11:42 - 2013-11-08 11:42 - 00000000 ____D C:\WINDOWS\SysWOW64\XPSViewer
2013-11-08 11:42 - 2013-11-08 11:42 - 00000000 ____D C:\Program Files\Reference Assemblies
2013-11-08 11:42 - 2013-11-08 11:42 - 00000000 ____D C:\Program Files\MSBuild
2013-11-08 11:42 - 2013-11-08 11:42 - 00000000 ____D C:\Program Files (x86)\Reference Assemblies
2013-11-08 11:42 - 2013-11-08 11:42 - 00000000 ____D C:\Program Files (x86)\MSBuild
2013-11-08 11:41 - 2013-08-03 05:48 - 01166520 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationNative_v0300.dll
2013-11-08 11:41 - 2013-08-03 05:48 - 00124112 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2013-11-08 11:41 - 2013-08-03 05:48 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe
2013-11-08 11:41 - 2013-08-03 05:41 - 00778936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationNative_v0300.dll
2013-11-08 11:41 - 2013-08-03 05:41 - 00102608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2013-11-08 11:41 - 2013-08-03 05:41 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TsWpfWrp.exe
2013-11-08 10:18 - 2013-11-08 10:18 - 04954736 _____ (Microsoft Corporation) C:\Users\Saturn\Downloads\WindowsUpgradeAssistant.exe
2013-11-08 06:47 - 2013-11-08 06:47 - 00001956 _____ C:\Users\Public\Desktop\SW Update.lnk
2013-11-08 06:36 - 2013-11-08 06:36 - 00001582 _____ C:\Users\Public\Desktop\Free YouTube to MP3 Converter.lnk
2013-11-08 06:35 - 2013-11-08 06:36 - 00000000 ____D C:\Program Files (x86)\DVDVideoSoft
2013-11-08 06:31 - 2013-11-08 06:33 - 32206488 _____ (DVDVideoSoft Ltd. ) C:\Users\Saturn\Downloads\FreeYouTubeToMP3Converter.exe
2013-11-07 16:20 - 2013-11-07 16:32 - 03864904 _____ (Secunia) C:\Users\Saturn\Downloads\PSISetup_30b8013.exe
2013-11-07 09:04 - 2013-11-11 14:00 - 00000000 ____D C:\Users\Saturn\Documents\Familie
2013-10-23 13:48 - 2013-11-04 10:59 - 00000000 ____D C:\Users\Saturn\Documents\Müller-Künnemann
2013-10-18 08:32 - 2013-10-18 08:32 - 00000000 ____D C:\ProgramData\DriverGenius
2013-10-18 07:59 - 2013-10-18 08:29 - 11360472 _____ (Driver-Soft Inc. ) C:\Users\Saturn\Downloads\Driver_Genius_Professional_DE_PPC_Content.exe
2013-10-16 13:15 - 2013-10-16 13:43 - 00000000 ____D C:\Users\Saturn\Downloads\Jojo_Moyes-Ein_Ganzes_Halbes_Jahr-Abook-DE-2013-NoGroup-CannaPower
2013-10-16 13:11 - 2013-10-16 13:11 - 00000000 ____D C:\Users\Saturn\Downloads\Jojo_Moyes-Ein_Ganzes_Halbes_Jahr-Abook-DE-2013-NoGroup-CannaPower (1)
2013-10-16 09:26 - 2013-10-16 09:26 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_User_WpdMtpDr_01_11_00.Wdf
2013-10-15 09:08 - 2013-11-04 11:30 - 00000000 ___RD C:\Users\Saturn\SkyDrive
2013-10-15 09:08 - 2013-10-15 09:08 - 00000000 ____D C:\Program Files (x86)\Microsoft SkyDrive
2013-10-15 09:08 - 2013-10-15 09:07 - 06040688 _____ (Microsoft Corporation) C:\Users\Saturn\Downloads\SkyDrive15Setup.exe
2013-10-15 09:07 - 2013-10-15 09:07 - 00000000 ____D C:\ProgramData\Microsoft SkyDrive
2013-10-14 23:05 - 2013-10-14 23:05 - 00000000 ____D C:\Users\Saturn\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2013-10-14 21:35 - 2013-10-14 21:35 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_User_LocationProvider_01_11_00.Wdf
2013-10-14 11:04 - 2013-10-14 11:04 - 00018456 _____ (Secunia) C:\WINDOWS\system32\Drivers\psi_mf_amd64.sys
==================== One Month Modified Files and Folders =======
2013-11-13 18:12 - 2013-11-13 18:11 - 00019991 _____ C:\Users\Saturn\Downloads\FRST.txt
2013-11-13 18:11 - 2013-11-13 18:11 - 00000000 ____D C:\FRST
2013-11-13 18:10 - 2013-11-13 18:02 - 01957610 _____ (Farbar) C:\Users\Saturn\Downloads\FRST64.exe
2013-11-13 18:00 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\sru
2013-11-13 17:56 - 2013-11-08 12:19 - 01605353 _____ C:\WINDOWS\WindowsUpdate.log
2013-11-13 17:53 - 2013-11-13 17:53 - 00000000 _____ C:\Users\Saturn\Downloads\rcpafterdownloadcp_ntb_ad_13271_cpntb1 (1).exe.opdownload
2013-11-13 17:48 - 2013-11-13 17:48 - 00003322 _____ C:\WINDOWS\System32\Tasks\Advanced System Protector
2013-11-13 17:48 - 2013-11-13 17:48 - 00003108 _____ C:\WINDOWS\System32\Tasks\RegClean Pro
2013-11-13 17:48 - 2013-11-13 17:48 - 00003024 _____ C:\WINDOWS\System32\Tasks\RegClean Pro_UPDATES
2013-11-13 17:48 - 2013-11-13 17:48 - 00002868 _____ C:\WINDOWS\System32\Tasks\RegClean Pro_DEFAULT
2013-11-13 17:48 - 2013-11-13 17:48 - 00001062 _____ C:\Users\Public\Desktop\RegClean Pro.lnk
2013-11-13 17:48 - 2013-11-13 17:48 - 00000302 _____ C:\WINDOWS\Tasks\RegClean Pro_UPDATES.job
2013-11-13 17:48 - 2013-11-13 17:48 - 00000294 _____ C:\WINDOWS\Tasks\RegClean Pro_DEFAULT.job
2013-11-13 17:48 - 2013-11-13 17:48 - 00000000 ____D C:\Users\Saturn\AppData\Roaming\Systweak
2013-11-13 17:48 - 2013-11-13 17:48 - 00000000 ____D C:\Users\Saturn\AppData\Roaming\Advanced System Protector
2013-11-13 17:48 - 2013-11-13 17:48 - 00000000 ____D C:\Program Files (x86)\RegClean Pro
2013-11-13 17:46 - 2013-11-13 17:32 - 05610360 _____ (Systweak Inc ) C:\Users\Saturn\Downloads\rcpafterdownloadcp_ntb_ad_13271_cpntb1.exe
2013-11-13 17:36 - 2013-05-14 01:56 - 00003596 _____ C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-2669165515-361187302-876288576-1001
2013-11-13 17:25 - 2013-11-13 16:02 - 00002650 _____ C:\WINDOWS\System32\Tasks\DigitalSite
2013-11-13 17:25 - 2013-11-13 16:02 - 00000312 _____ C:\WINDOWS\Tasks\DigitalSite.job
2013-11-13 17:17 - 2013-11-13 16:15 - 00001126 _____ C:\Users\Public\Desktop\Open It!.lnk
2013-11-13 17:17 - 2013-09-03 16:13 - 00000884 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2013-11-13 17:15 - 2013-01-25 04:10 - 00000360 _____ C:\WINDOWS\Tasks\Xerox PhotoCafe Communicator.job
2013-11-13 17:01 - 2013-11-13 17:01 - 00000000 ____D C:\Users\Saturn\AppData\Local\Babylon
2013-11-13 16:15 - 2013-11-13 16:15 - 00000000 ____D C:\Program Files (x86)\OpenIt
2013-11-13 16:02 - 2013-11-13 16:02 - 00000000 ____D C:\Users\Saturn\AppData\Roaming\DigitalSite
2013-11-13 15:57 - 2013-11-13 15:55 - 00702696 _____ C:\Users\Saturn\Downloads\ZipExtractorSetup (1).exe
2013-11-13 15:55 - 2013-11-13 15:53 - 00053788 _____ C:\Users\Saturn\Downloads\ZipExtractorSetup.exe
2013-11-13 12:59 - 2013-11-13 12:59 - 104010312 _____ C:\WINDOWS\SysWOW64\䣵ഌLč
2013-11-13 12:50 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\AppReadiness
2013-11-13 11:51 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\rescache
2013-11-13 11:00 - 2013-09-02 17:32 - 00000000 ____D C:\WINDOWS\system32\MRT
2013-11-13 10:58 - 2013-06-11 10:48 - 82896128 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2013-11-13 10:26 - 2013-11-12 06:37 - 00000680 _____ C:\WINDOWS\setupact.log
2013-11-13 10:18 - 2013-09-30 05:14 - 01780340 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2013-11-13 10:18 - 2013-09-30 04:56 - 00766620 _____ C:\WINDOWS\system32\perfh007.dat
2013-11-13 10:18 - 2013-09-30 04:56 - 00159902 _____ C:\WINDOWS\system32\perfc007.dat
2013-11-13 08:19 - 2013-01-25 03:58 - 00000000 ____D C:\ProgramData\WinClon
2013-11-13 08:16 - 2013-01-25 03:48 - 00000868 _____ C:\WINDOWS\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon.job
2013-11-13 08:15 - 2013-08-22 15:45 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2013-11-13 08:14 - 2013-08-22 14:25 - 00524288 ___SH C:\WINDOWS\system32\config\BBI
2013-11-13 07:44 - 2013-11-10 11:02 - 00000000 ___RD C:\WINDOWS\BrowserChoice
2013-11-13 07:44 - 2013-05-14 01:46 - 00000000 ____D C:\Users\Saturn\AppData\Local\Packages
2013-11-12 15:24 - 2013-11-12 15:24 - 00000362 _____ C:\WINDOWS\PFRO.log
2013-11-12 11:27 - 2013-11-12 11:27 - 00000000 ____D C:\Program Files (x86)\Check Point Software Technologies LTD
2013-11-12 11:19 - 2013-11-12 11:19 - 00000000 ____D C:\Program Files (x86)\CheckPoint
2013-11-12 11:16 - 2013-11-12 11:16 - 00000000 ____D C:\ProgramData\CheckPoint
2013-11-12 11:13 - 2013-11-12 11:07 - 02462696 _____ (Check Point Software Technologies LTD) C:\Users\Saturn\Downloads\zafwSetupWeb_120_104_000.exe
2013-11-12 10:00 - 2013-01-25 03:48 - 00000870 _____ C:\WINDOWS\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d.job
2013-11-12 06:37 - 2013-11-12 06:37 - 00000000 _____ C:\WINDOWS\setuperr.log
2013-11-12 06:32 - 2013-11-12 06:32 - 753001719 _____ C:\WINDOWS\MEMORY.DMP
2013-11-12 06:32 - 2013-11-12 06:32 - 00743480 _____ C:\WINDOWS\Minidump\111213-27078-01.dmp
2013-11-12 06:32 - 2013-11-12 06:32 - 00000000 ____D C:\WINDOWS\Minidump
2013-11-11 22:04 - 2013-10-11 09:25 - 00000000 ____D C:\Users\Saturn\Documents\Innere Stärke
2013-11-11 17:41 - 2013-11-11 17:41 - 103792856 _____ C:\WINDOWS\SysWOW64\䔠旵Lÿ
2013-11-11 14:00 - 2013-11-07 09:04 - 00000000 ____D C:\Users\Saturn\Documents\Familie
2013-11-11 07:01 - 2013-11-08 11:48 - 00000000 ___DC C:\WINDOWS\Panther
2013-11-11 06:46 - 2013-11-08 11:56 - 00000000 ____D C:\Users\Saturn
2013-11-11 06:44 - 2013-11-08 11:56 - 00000000 ___RD C:\Users\Saturn\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2013-11-11 06:44 - 2013-11-08 11:56 - 00000000 ___RD C:\Users\Saturn\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2013-11-11 06:44 - 2013-11-08 11:56 - 00000000 ___RD C:\Users\Saturn\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2013-11-11 06:44 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\WinMetadata
2013-11-11 06:26 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\registration
2013-11-11 06:26 - 2013-08-22 14:36 - 00000000 ____D C:\WINDOWS\system32\Sysprep
2013-11-10 09:11 - 2013-06-11 03:22 - 00000000 ____D C:\Users\Saturn\AppData\Local\CrashDumps
2013-11-08 20:45 - 2013-11-08 20:45 - 00004096 ____H C:\Users\Saturn\AppData\Local\keyfile3.drm
2013-11-08 19:06 - 2013-09-02 15:23 - 00000000 ____D C:\Users\Saturn\AppData\Local\Mozilla
2013-11-08 13:20 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\restore
2013-11-08 12:47 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\tracing
2013-11-08 12:23 - 2013-11-08 12:23 - 00001450 _____ C:\Users\Saturn\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2013-11-08 12:23 - 2013-05-14 01:49 - 00000000 ___RD C:\Users\Saturn\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-11-08 12:23 - 2013-05-14 01:49 - 00000000 ___RD C:\Users\Saturn\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2013-11-08 12:22 - 2013-11-08 12:22 - 00000020 ___SH C:\Users\Saturn\ntuser.ini
2013-11-08 12:20 - 2013-11-08 12:20 - 00000000 _SHDL C:\Users\Default\Vorlagen
2013-11-08 12:20 - 2013-11-08 12:20 - 00000000 _SHDL C:\Users\Default\Startmenü
2013-11-08 12:20 - 2013-11-08 12:20 - 00000000 _SHDL C:\Users\Default\Netzwerkumgebung
2013-11-08 12:20 - 2013-11-08 12:20 - 00000000 _SHDL C:\Users\Default\Lokale Einstellungen
2013-11-08 12:20 - 2013-11-08 12:20 - 00000000 _SHDL C:\Users\Default\Eigene Dateien
2013-11-08 12:20 - 2013-11-08 12:20 - 00000000 _SHDL C:\Users\Default\Druckumgebung
2013-11-08 12:20 - 2013-11-08 12:20 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Musik
2013-11-08 12:20 - 2013-11-08 12:20 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Bilder
2013-11-08 12:20 - 2013-11-08 12:20 - 00000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2013-11-08 12:20 - 2013-11-08 12:20 - 00000000 _SHDL C:\Users\Default\AppData\Local\Verlauf
2013-11-08 12:20 - 2013-11-08 12:20 - 00000000 _SHDL C:\Users\Default\AppData\Local\Anwendungsdaten
2013-11-08 12:20 - 2013-11-08 12:20 - 00000000 _SHDL C:\Users\Default\Anwendungsdaten
2013-11-08 12:20 - 2013-11-08 12:20 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Musik
2013-11-08 12:20 - 2013-11-08 12:20 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Bilder
2013-11-08 12:20 - 2013-11-08 12:20 - 00000000 _SHDL C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2013-11-08 12:20 - 2013-11-08 12:20 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Verlauf
2013-11-08 12:20 - 2013-11-08 12:20 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Anwendungsdaten
2013-11-08 12:20 - 2013-08-22 16:36 - 00000000 ____D C:\Program Files\Windows NT
2013-11-08 12:20 - 2013-08-22 14:36 - 00000000 __RHD C:\Users\Default
2013-11-08 12:19 - 2013-11-08 11:56 - 00020958 _____ C:\WINDOWS\diagwrn.xml
2013-11-08 12:19 - 2013-11-08 11:56 - 00020958 _____ C:\WINDOWS\diagerr.xml
2013-11-08 12:18 - 2013-11-08 12:18 - 00022960 _____ C:\WINDOWS\system32\emptyregdb.dat
2013-11-08 12:08 - 2013-08-22 16:36 - 00000000 __RSD C:\WINDOWS\Media
2013-11-08 12:08 - 2013-01-25 03:58 - 01804472 _____ C:\WINDOWS\SysWOW64\PerfStringBackup.INI
2013-11-08 12:07 - 2013-08-22 16:36 - 00000000 __RHD C:\Users\Public\Libraries
2013-11-08 12:03 - 2013-08-22 15:44 - 02194128 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2013-11-08 12:02 - 2013-08-22 14:25 - 00008192 ___SH C:\WINDOWS\system32\config\ELAM
2013-11-08 12:01 - 2012-07-26 06:37 - 00000000 ____D C:\Users\Default.migrated
2013-11-08 12:00 - 2013-09-30 04:56 - 00000000 ____D C:\WINDOWS\SysWOW64\WCN
2013-11-08 12:00 - 2013-09-30 04:56 - 00000000 ____D C:\WINDOWS\SysWOW64\sysprep
2013-11-08 12:00 - 2013-09-30 04:56 - 00000000 ____D C:\WINDOWS\system32\WCN
2013-11-08 12:00 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\SysWOW64\migwiz
2013-11-08 12:00 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\SysWOW64\IME
2013-11-08 12:00 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2013-11-08 12:00 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\spool
2013-11-08 12:00 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\NDF
2013-11-08 12:00 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\MUI
2013-11-08 12:00 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\IME
2013-11-08 12:00 - 2013-08-22 14:36 - 00000000 ____D C:\WINDOWS\SysWOW64\SMI
2013-11-08 12:00 - 2013-08-22 14:36 - 00000000 ____D C:\WINDOWS\system32\oobe
2013-11-08 12:00 - 2013-01-25 03:46 - 00000000 ____D C:\WINDOWS\SysWOW64\sda
2013-11-08 11:59 - 2013-09-30 04:59 - 00000000 ____D C:\WINDOWS\ShellNew
2013-11-08 11:59 - 2013-08-22 16:43 - 00000000 ____D C:\WINDOWS\DigitalLocker
2013-11-08 11:59 - 2013-08-22 16:36 - 00000000 __SHD C:\Program Files\Windows Sidebar
2013-11-08 11:59 - 2013-08-22 16:36 - 00000000 __SHD C:\Program Files (x86)\Windows Sidebar
2013-11-08 11:59 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\PolicyDefinitions
2013-11-08 11:59 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\IME
2013-11-08 11:59 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\Help
2013-11-08 11:59 - 2013-08-22 16:36 - 00000000 ____D C:\Program Files\Common Files\System
2013-11-08 11:59 - 2013-08-22 16:36 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
2013-11-08 11:59 - 2013-01-25 20:09 - 00000000 ____D C:\WINDOWS\en-GB
2013-11-08 11:59 - 2013-01-25 04:10 - 00000000 ____D C:\WINDOWS\de
2013-11-08 11:59 - 2013-01-25 04:09 - 00000000 ____D C:\WINDOWS\it
2013-11-08 11:59 - 2013-01-25 04:09 - 00000000 ____D C:\WINDOWS\fr
2013-11-08 11:59 - 2012-08-05 22:11 - 00000000 ____D C:\ProgramData\PRICache
2013-11-08 11:57 - 2013-11-08 11:57 - 00000000 ____D C:\WINDOWS\system32\config\bbimigrate
2013-11-08 11:57 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\Recovery
2013-11-08 11:56 - 2013-11-08 11:56 - 00000000 _SHDL C:\Users\Saturn\Vorlagen
2013-11-08 11:56 - 2013-11-08 11:56 - 00000000 _SHDL C:\Users\Saturn\Startmenü
2013-11-08 11:56 - 2013-11-08 11:56 - 00000000 _SHDL C:\Users\Saturn\Netzwerkumgebung
2013-11-08 11:56 - 2013-11-08 11:56 - 00000000 _SHDL C:\Users\Saturn\Lokale Einstellungen
2013-11-08 11:56 - 2013-11-08 11:56 - 00000000 _SHDL C:\Users\Saturn\Eigene Dateien
2013-11-08 11:56 - 2013-11-08 11:56 - 00000000 _SHDL C:\Users\Saturn\Druckumgebung
2013-11-08 11:56 - 2013-11-08 11:56 - 00000000 _SHDL C:\Users\Saturn\Documents\Eigene Musik
2013-11-08 11:56 - 2013-11-08 11:56 - 00000000 _SHDL C:\Users\Saturn\Documents\Eigene Bilder
2013-11-08 11:56 - 2013-11-08 11:56 - 00000000 _SHDL C:\Users\Saturn\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2013-11-08 11:56 - 2013-11-08 11:56 - 00000000 _SHDL C:\Users\Saturn\AppData\Local\Verlauf
2013-11-08 11:56 - 2013-11-08 11:56 - 00000000 _SHDL C:\Users\Saturn\AppData\Local\Anwendungsdaten
2013-11-08 11:56 - 2013-11-08 11:56 - 00000000 _SHDL C:\Users\Saturn\Anwendungsdaten
2013-11-08 11:51 - 2013-11-08 11:51 - 00000000 ____D C:\WINDOWS\SysWOW64\RTCOM
2013-11-08 11:51 - 2013-11-08 11:51 - 00000000 ____D C:\WINDOWS\system32\SRSLabs
2013-11-08 11:51 - 2013-11-08 11:51 - 00000000 ____D C:\Program Files\Realtek
2013-11-08 11:50 - 2013-11-08 11:50 - 00000264 _____ C:\WINDOWS\Tasks\Synaptics TouchPad Enhancements.job
2013-11-08 11:50 - 2013-11-08 11:50 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf
2013-11-08 11:50 - 2013-11-08 11:50 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_SynTP_01009.Wdf
2013-11-08 11:50 - 2013-11-08 11:50 - 00000000 ____D C:\Program Files\Synaptics
2013-11-08 11:50 - 2013-11-08 11:50 - 00000000 ____D C:\Program Files\Common Files\ATI Technologies
2013-11-08 11:50 - 2013-11-08 11:50 - 00000000 ____D C:\Program Files\AMD
2013-11-08 11:48 - 2013-11-08 11:48 - 00000000 __SHD C:\Recovery
2013-11-08 11:47 - 2013-08-22 16:36 - 00262144 _____ C:\WINDOWS\system32\config\BCD-Template
2013-11-08 11:46 - 2013-11-08 11:46 - 23213056 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2013-11-08 11:46 - 2013-11-08 11:46 - 17143808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2013-11-08 11:46 - 2013-11-08 11:46 - 12995072 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2013-11-08 11:46 - 2013-11-08 11:46 - 11222016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2013-11-08 11:46 - 2013-11-08 11:46 - 02763776 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2013-11-08 11:46 - 2013-11-08 11:46 - 02724864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb
2013-11-08 11:46 - 2013-11-08 11:46 - 02724864 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb
2013-11-08 11:46 - 2013-11-08 11:46 - 02166272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2013-11-08 11:46 - 2013-11-08 11:46 - 02144768 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2013-11-08 11:46 - 2013-11-08 11:46 - 02140888 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll
2013-11-08 11:46 - 2013-11-08 11:46 - 01765384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11.dll
2013-11-08 11:46 - 2013-11-08 11:46 - 01765376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll
2013-11-08 11:46 - 2013-11-08 11:46 - 01537880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2013-11-08 11:46 - 2013-11-08 11:46 - 01286552 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll
2013-11-08 11:46 - 2013-11-08 11:46 - 01217024 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Streaming.dll
2013-11-08 11:46 - 2013-11-08 11:46 - 01018960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll
2013-11-08 11:46 - 2013-11-08 11:46 - 00977408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Streaming.dll
2013-11-08 11:46 - 2013-11-08 11:46 - 00909312 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmCoreR.dll
2013-11-08 11:46 - 2013-11-08 11:46 - 00872840 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfplat.dll
2013-11-08 11:46 - 2013-11-08 11:46 - 00837120 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSShared.dll
2013-11-08 11:46 - 2013-11-08 11:46 - 00698880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSShared.dll
2013-11-08 11:46 - 2013-11-08 11:46 - 00698232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfplat.dll
2013-11-08 11:46 - 2013-11-08 11:46 - 00621056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MrmCoreR.dll
2013-11-08 11:46 - 2013-11-08 11:46 - 00516496 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll
2013-11-08 11:46 - 2013-11-08 11:46 - 00406400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxgi.dll
2013-11-08 11:46 - 2013-11-08 11:46 - 00382808 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2013-11-08 11:46 - 2013-11-08 11:46 - 00294400 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Sensors.dll
2013-11-08 11:46 - 2013-11-08 11:46 - 00249856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2013-11-08 11:46 - 2013-11-08 11:46 - 00225792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Sensors.dll
2013-11-08 11:46 - 2013-11-08 11:46 - 00189952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2013-11-08 11:46 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\WinStore
2013-11-08 11:46 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\Camera
2013-11-08 11:45 - 2013-11-08 11:45 - 00262144 _____ C:\WINDOWS\system32\config\userdiff
2013-11-08 11:42 - 2013-11-08 11:42 - 00000000 ____D C:\WINDOWS\SysWOW64\XPSViewer
2013-11-08 11:42 - 2013-11-08 11:42 - 00000000 ____D C:\Program Files\Reference Assemblies
2013-11-08 11:42 - 2013-11-08 11:42 - 00000000 ____D C:\Program Files\MSBuild
2013-11-08 11:42 - 2013-11-08 11:42 - 00000000 ____D C:\Program Files (x86)\Reference Assemblies
2013-11-08 11:42 - 2013-11-08 11:42 - 00000000 ____D C:\Program Files (x86)\MSBuild
2013-11-08 11:42 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\SysWOW64\MUI
2013-11-08 10:18 - 2013-11-08 10:18 - 04954736 _____ (Microsoft Corporation) C:\Users\Saturn\Downloads\WindowsUpgradeAssistant.exe
2013-11-08 09:29 - 2012-07-26 09:12 - 00000000 ____D C:\WINDOWS\AUInstallAgent
2013-11-08 06:47 - 2013-11-08 06:47 - 00001956 _____ C:\Users\Public\Desktop\SW Update.lnk
2013-11-08 06:36 - 2013-11-08 06:36 - 00001582 _____ C:\Users\Public\Desktop\Free YouTube to MP3 Converter.lnk
2013-11-08 06:36 - 2013-11-08 06:35 - 00000000 ____D C:\Program Files (x86)\DVDVideoSoft
2013-11-08 06:35 - 2013-10-08 18:11 - 00000000 ___RD C:\Users\Public\Desktop\DVDVideoSoft
2013-11-08 06:35 - 2013-10-08 18:11 - 00000000 ____D C:\Users\Saturn\AppData\Roaming\OpenCandy
2013-11-08 06:35 - 2013-10-08 18:11 - 00000000 ____D C:\Users\Saturn\AppData\Roaming\DVDVideoSoft
2013-11-08 06:33 - 2013-11-08 06:31 - 32206488 _____ (DVDVideoSoft Ltd. ) C:\Users\Saturn\Downloads\FreeYouTubeToMP3Converter.exe
2013-11-08 05:38 - 2013-09-03 15:52 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-11-08 05:38 - 2013-09-02 15:23 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-11-08 05:37 - 2013-09-15 19:24 - 00001004 _____ C:\Users\Public\Desktop\VLC media player.lnk
2013-11-08 05:26 - 2013-09-03 18:02 - 00000000 ____D C:\Program Files (x86)\Opera
2013-11-08 05:21 - 2013-09-03 13:32 - 00000000 ____D C:\Users\Saturn\AppData\Roaming\ALDITALKVerbindungsassistent
2013-11-07 18:33 - 2013-10-11 09:24 - 00000000 ____D C:\Users\Saturn\Documents\Übungsordner
2013-11-07 16:32 - 2013-11-07 16:20 - 03864904 _____ (Secunia) C:\Users\Saturn\Downloads\PSISetup_30b8013.exe
2013-11-06 00:31 - 2013-08-22 16:38 - 00693240 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2013-11-06 00:31 - 2013-08-22 16:38 - 00105464 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2013-11-04 11:30 - 2013-10-15 09:08 - 00000000 ___RD C:\Users\Saturn\SkyDrive
2013-11-04 10:59 - 2013-10-23 13:48 - 00000000 ____D C:\Users\Saturn\Documents\Müller-Künnemann
2013-10-19 07:58 - 2013-09-15 19:24 - 00000000 ____D C:\Users\Saturn\AppData\Roaming\vlc
2013-10-18 08:32 - 2013-10-18 08:32 - 00000000 ____D C:\ProgramData\DriverGenius
2013-10-18 08:29 - 2013-10-18 07:59 - 11360472 _____ (Driver-Soft Inc. ) C:\Users\Saturn\Downloads\Driver_Genius_Professional_DE_PPC_Content.exe
2013-10-16 16:58 - 2013-11-13 07:21 - 01943536 _____ (Microsoft Corporation) C:\WINDOWS\system32\crypt32.dll
2013-10-16 14:54 - 2013-11-13 07:21 - 01581968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\crypt32.dll
2013-10-16 13:43 - 2013-10-16 13:15 - 00000000 ____D C:\Users\Saturn\Downloads\Jojo_Moyes-Ein_Ganzes_Halbes_Jahr-Abook-DE-2013-NoGroup-CannaPower
2013-10-16 13:11 - 2013-10-16 13:11 - 00000000 ____D C:\Users\Saturn\Downloads\Jojo_Moyes-Ein_Ganzes_Halbes_Jahr-Abook-DE-2013-NoGroup-CannaPower (1)
2013-10-16 09:26 - 2013-10-16 09:26 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_User_WpdMtpDr_01_11_00.Wdf
2013-10-15 09:08 - 2013-10-15 09:08 - 00000000 ____D C:\Program Files (x86)\Microsoft SkyDrive
2013-10-15 09:07 - 2013-10-15 09:08 - 06040688 _____ (Microsoft Corporation) C:\Users\Saturn\Downloads\SkyDrive15Setup.exe
2013-10-15 09:07 - 2013-10-15 09:07 - 00000000 ____D C:\ProgramData\Microsoft SkyDrive
2013-10-14 23:05 - 2013-10-14 23:05 - 00000000 ____D C:\Users\Saturn\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2013-10-14 21:35 - 2013-10-14 21:35 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_User_LocationProvider_01_11_00.Wdf
2013-10-14 11:04 - 2013-10-14 11:04 - 00018456 _____ (Secunia) C:\WINDOWS\system32\Drivers\psi_mf_amd64.sys
Files to move or delete:
====================
C:\ProgramData\MakeMarkerFile.exe
C:\Users\EasySurvey\EasySurvey.exe
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2013-11-08 11:48
==================== End Of Log ============================
--- --- --- --- --- --- --- --- --- --- --- --- FRST Additions Logfile: Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 13-11-2013
Ran by Saturn at 2013-11-13 18:13:44
Running from C:\Users\Saturn\Downloads
Boot Mode: Normal
==========================================================
==================== Security Center ========================
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: Avira Desktop (Enabled - Up to date) {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}
AS: Avira Desktop (Enabled - Up to date) {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installed Programs ======================
123 Free Solitaire v10.0 (x32)
7-Zip 9.20 (x32)
Adobe Digital Editions 2.0 (x32 Version: 2.0)
Adobe Flash Player 11 Plugin (x32 Version: 11.9.900.117)
Adobe Reader X (10.1.8) MUI (x32 Version: 10.1.8)
ALDI TALK Verbindungsassistent (x32 Version: ALDI TALK 4.0)
AllSharePlayLink (x32 Version: 1.0.0)
AMD APP SDK Runtime (Version: 10.0.938.2)
AMD Catalyst Install Manager (Version: 8.0.881.0)
Avira Free Antivirus (x32 Version: 13.0.0.4052)
Avira SearchFree Toolbar (x32 Version: 12.6.0.1900)
Bitcasa version 0.9.20.4133 (Version: 0.9.20.4133)
Catalyst Control Center - Branding (x32 Version: 1.00.0000)
Catalyst Control Center (x32 Version: 2012.0806.1156.19437)
Catalyst Control Center Graphics Previews Common (x32 Version: 2012.0806.1156.19437)
Catalyst Control Center InstallProxy (x32 Version: 2012.0806.1156.19437)
Catalyst Control Center Localization All (x32 Version: 2012.0806.1156.19437)
Catalyst Control Center Profiles Mobile (x32 Version: 2012.0806.1156.19437)
CCC Help Chinese Standard (x32 Version: 2012.0806.1155.19437)
CCC Help Chinese Traditional (x32 Version: 2012.0806.1155.19437)
CCC Help Czech (x32 Version: 2012.0806.1155.19437)
CCC Help Danish (x32 Version: 2012.0806.1155.19437)
CCC Help Dutch (x32 Version: 2012.0806.1155.19437)
CCC Help English (x32 Version: 2012.0806.1155.19437)
CCC Help Finnish (x32 Version: 2012.0806.1155.19437)
CCC Help French (x32 Version: 2012.0806.1155.19437)
CCC Help German (x32 Version: 2012.0806.1155.19437)
CCC Help Greek (x32 Version: 2012.0806.1155.19437)
CCC Help Hungarian (x32 Version: 2012.0806.1155.19437)
CCC Help Italian (x32 Version: 2012.0806.1155.19437)
CCC Help Japanese (x32 Version: 2012.0806.1155.19437)
CCC Help Korean (x32 Version: 2012.0806.1155.19437)
CCC Help Norwegian (x32 Version: 2012.0806.1155.19437)
CCC Help Polish (x32 Version: 2012.0806.1155.19437)
CCC Help Portuguese (x32 Version: 2012.0806.1155.19437)
CCC Help Russian (x32 Version: 2012.0806.1155.19437)
CCC Help Spanish (x32 Version: 2012.0806.1155.19437)
CCC Help Swedish (x32 Version: 2012.0806.1155.19437)
CCC Help Thai (x32 Version: 2012.0806.1155.19437)
CCC Help Turkish (x32 Version: 2012.0806.1155.19437)
ccc-utility64 (Version: 2012.0806.1156.19437)
CCleaner (Version: 4.06)
CyberLink Power2Go 8 (x32 Version: 8.0.0.1912)
CyberLink PowerDVD 10 (x32 Version: 10.0.4421.02)
D3DX10 (x32 Version: 15.4.2368.0902)
Easy File Share (x32 Version: 1.3.6)
E-POP (x32 Version: 1.0.1)
Fotogalerie (x32 Version: 16.4.3503.0728)
Free YouTube to MP3 Converter version 3.12.16.1030 (x32 Version: 3.12.16.1030)
Galerie de photos (x32 Version: 16.4.3503.0728)
Help Desk (Version: 1.0.96)
HUAWEI 3G Data Card Management (x32 Version: HOST01.11.17.01.04.03)
Intel AppUp(SM) center (x32 Version: 3.6.1.33070.11)
Intel(R) Control Center (x32 Version: 1.2.1.1008)
Intel(R) Manageability Engine Firmware Recovery Agent (x32 Version: 1.0.0.36354)
Intel(R) Management Engine Components (x32 Version: 8.1.0.1252)
Intel(R) Processor Graphics (x32 Version: 9.17.10.2932)
Intel(R) Rapid Storage Technology (x32 Version: 11.6.0.1030)
Intel® Trusted Connect Service Client (Version: 1.24.388.1)
Microsoft Application Error Reporting (Version: 12.0.6015.5000)
Microsoft Office Professional Edition 2003 (x32 Version: 11.0.5614.0)
Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.59193)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (Version: 10.0.40219)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219)
Movie Maker (x32 Version: 16.4.3503.0728)
Mozilla Firefox 25.0 (x86 de) (x32 Version: 25.0)
Mozilla Maintenance Service (x32 Version: 25.0)
MSVCRT (x32 Version: 15.4.2862.0708)
MSVCRT110 (x32 Version: 16.4.1108.0727)
MSVCRT110_amd64 (Version: 16.4.1108.0727)
Open It! (x32 Version: 1.1.1)
Opera Stable 17.0.1241.53 (x32 Version: 17.0.1241.53)
Photo Common (x32 Version: 16.4.3503.0728)
Photo Gallery (x32 Version: 16.4.3503.0728)
Plants vs. Zombies (x32)
PX Profile Update (x32 Version: 1.00.1.)
Qualcomm Atheros Bluetooth Suite (64) (Version: 8.0.0.216)
Qualcomm Atheros Client Installation Program (x32 Version: 10.0)
Quick Starter (Version: 1.0.2)
Raccolta foto (x32 Version: 16.4.3503.0728)
Realtek Ethernet Controller Driver (x32 Version: 8.3.730.2012)
Realtek High Definition Audio Driver (x32 Version: 6.0.1.6702)
Realtek USB 2.0 Card Reader (x32 Version: 6.1.8400.39030)
Recovery (x32 Version: 6.0.10.0)
RegClean Pro (x32 Version: 6.21)
S Agent (Version: 1.1.45)
Secunia PSI (3.0.0.8013) (x32 Version: 3.0.0.8013)
Settings (x32 Version: 2.0.1)
Support Center (Version: 2.1.1106)
Support Center FAQ (x32 Version: 1.0.11)
SW Update (x32 Version: 2.1.21)
Synaptics Pointing Device Driver (Version: 16.2.14.2)
Update for Zip Extractor (HKCU)
User Guide (x32 Version: 1.4.00)
VLC media player 2.1.0 (x32 Version: 2.1.0)
Windows Live (x32 Version: 16.4.3503.0728)
Windows Live Communications Platform (x32 Version: 16.4.3503.0728)
Windows Live Essentials (x32 Version: 16.4.3503.0728)
Windows Live Installer (x32 Version: 16.4.3503.0728)
Windows Live Photo Common (x32 Version: 16.4.3503.0728)
Windows Live PIMT Platform (x32 Version: 16.4.3503.0728)
Windows Live SOXE (x32 Version: 16.4.3503.0728)
Windows Live SOXE Definitions (x32 Version: 16.4.3503.0728)
Windows Live UX Platform (x32 Version: 16.4.3503.0728)
Windows Live UX Platform Language Pack (x32 Version: 16.4.3503.0728)
Xerox PhotoCafe (x32 Version: 1.0.0.6162)
ZoneAlarm Free Firewall (x32 Version: 12.0.104.000)
ZoneAlarm Security Toolbar (x32 Version: 1.8.22.0)
==================== Restore Points =========================
08-11-2013 12:20:31 Windows Update
11-11-2013 05:20:52 Wiederherstellungsvorgang
12-11-2013 09:04:45 TuneUp Utilities 2014 wird installiert
13-11-2013 16:50:58 RegClean Pro Mi, Nov 13, 13 17:50
==================== Hosts content: ==========================
2013-08-22 14:25 - 2013-08-22 14:25 - 00000824 ____A C:\WINDOWS\system32\Drivers\etc\hosts
==================== Scheduled Tasks (whitelisted) =============
Task: {05293577-D647-4185-B859-C94839A0B2E3} - System32\Tasks\Microsoft\Windows\SettingSync\NetworkStateChangeTask
Task: {06A4AD44-E164-481C-97E7-4FD0C13BE49F} - System32\Tasks\Settings => C:\Program Files (x86)\Samsung\Settings\sSettings.exe [2012-11-30] (Samsung Electronics CO., LTD.)
Task: {0DA2DDC3-AED4-43F0-813B-336E6095A551} - System32\Tasks\Advanced System Protector => C:\Program Files (x86)\RegClean Pro\systweakasp.exe [2013-08-23] (Systweak Inc )
Task: {19E7604D-5F98-4CF1-9297-0ECF24D8C9CF} - System32\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe [2012-04-16] (Intel Corporation)
Task: {1FE02D20-AF71-41AB-AB40-3ABEA06FACE2} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-10-09] (Adobe Systems Incorporated)
Task: {2488357A-706D-416A-92FD-4692DAB85E0B} - System32\Tasks\RegClean Pro => C:\Program Files (x86)\RegClean Pro\RegCleanPro.exe [2013-09-16] (Systweak Inc)
Task: {2909D4F3-FC86-414F-8DBB-1490A07B5514} - System32\Tasks\DealPly => C:\Users\Saturn\AppData\Roaming\DealPly\UpdateProc\UpdateTask.exe [2013-02-27] ()
Task: {2A2ABC58-1986-4185-B388-1E9B5FE509FB} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\Windows\System32\MRT.exe [2013-11-13] (Microsoft Corporation)
Task: {2C9C0C6C-2A74-46F2-858A-4389D253EAD0} - System32\Tasks\Microsoft\Windows\Sysmain\HybridDriveCachePrepopulate
Task: {352E6CA0-7314-4DF4-89C4-682368D80D57} - System32\Tasks\Microsoft\Windows\Workplace Join\Automatic-Workplace-Join => C:\Windows\System32\AutoWorkplace.exe [2013-08-22] (Microsoft Corporation)
Task: {36057DFE-E13F-4025-90F1-D5CF7BA5C0E4} - System32\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe [2012-04-16] (Intel Corporation)
Task: {3B6D8A73-F20B-4C93-B8FB-56A154F172D2} - System32\Tasks\Microsoft\Windows\Time Zone\SynchronizeTimeZone => C:\Windows\System32\tzsync.exe [2013-08-22] (Microsoft Corporation)
Task: {45625A16-C097-416E-B662-BC29BDAED361} - System32\Tasks\Microsoft\Windows\MUI\Lpksetup => C:\Windows\System32\lpksetup.exe [2013-08-22] (Microsoft Corporation)
Task: {456DF6D3-31E4-4AF9-9A19-045DA4D9A86C} - System32\Tasks\DigitalSite => C:\Users\Saturn\AppData\Roaming\DigitalSite\UpdateProc\UpdateTask.exe [2013-04-12] ()
Task: {4753C4F9-7634-443A-8838-C3E563D0923C} - System32\Tasks\Norton Internet Security\Norton Error Analyzer => C:\Program Files (x86)\Norton Internet Security\Engine\20.1.0.24\SymErr.exe
Task: {49754026-21E1-41FC-94FD-727AFE414FE7} - System32\Tasks\Microsoft\Windows\Sysmain\HybridDriveCacheRebalance
Task: {4AA7E9A4-D73C-4C6B-B81F-A2852332C3C1} - System32\Tasks\Synaptics TouchPad Enhancements => \Program Files\Synaptics\SynTP\SynTPEnh.exe [2012-10-16] (Synaptics Incorporated)
Task: {51CCFCA7-34E1-492B-978C-AB9B64D19138} - System32\Tasks\Norton Internet Security\Norton Error Processor => C:\Program Files (x86)\Norton Internet Security\Engine\20.1.0.24\SymErr.exe
Task: {59ED68AC-CE6F-4B61-BE58-F596EDEDC4DE} - System32\Tasks\SAgent => C:\Program Files\Samsung\S Agent\CommonAgent.exe [2013-10-16] (Samsung Electronics CO., LTD.)
Task: {6AA91E8C-DDBD-4979-8464-4062F7681A19} - System32\Tasks\Microsoft\Windows\Plug and Play\Plug and Play Cleanup
Task: {6DFCB649-0769-4F83-BB10-F60F235F6D3D} - System32\Tasks\Microsoft\Windows\SkyDrive\Idle Sync Maintenance Task
Task: {6E48F844-22D1-44F3-8857-7D0452415727} - System32\Tasks\Xerox PhotoCafe Communicator => C:\ProgramData\Xerox PhotoCafe\MessageCheck.exe [2011-10-26] ()
Task: {7AC29909-404D-4D6E-8649-16186BE4AE28} - System32\Tasks\advRecovery => C:\Program Files\Samsung\Recovery\WCScheduler.exe [2013-08-23] (SEC)
Task: {872D0E53-FD2E-41E3-B431-698AF82882CE} - System32\Tasks\Microsoft\Windows\SkyDrive\Routine Maintenance Task
Task: {8CC813C9-712A-41EF-9512-B233444FC669} - System32\Tasks\Microsoft\Windows\AppxDeploymentClient\Pre-staged app cleanup => C:\Windows\System32\AppXDeploymentClient.dll [2013-09-30] (Microsoft Corporation)
Task: {9FF4C139-5234-410C-B7FA-23EE2FD2AB53} - System32\Tasks\Microsoft\Windows\Work Folders\Work Folders Maintenance Work
Task: {A9753529-469F-4B34-BB12-25F9234AF2C8} - System32\Tasks\Norton WSC Integration => C:\Program Files (x86)\Norton Internet Security\Engine\20.1.0.24\WSCStub.exe
Task: {CF1AE50E-BEE5-4A67-8AF1-22777361D595} - System32\Tasks\DSite => C:\Users\Saturn\AppData\Roaming\DSite\UpdateProc\UpdateTask.exe
Task: {CFD7C21A-808B-487B-A6EC-8A10E44E8360} - System32\Tasks\Microsoft\Windows\SettingSync\BackupTask
Task: {D3B09362-77E6-4C56-A2BB-025904C8DB3C} - System32\Tasks\RegClean Pro_DEFAULT => C:\Program Files (x86)\RegClean Pro\RegCleanPro.exe [2013-09-16] (Systweak Inc)
Task: {DA46820F-FF8A-4B5E-A6B2-B12185DCFFFB} - System32\Tasks\Microsoft\Windows\Work Folders\Work Folders Logon Synchronization
Task: {E6D378FA-E068-4BCB-80DE-56D43A249507} - System32\Tasks\Microsoft\Windows\RecoveryEnvironment\VerifyWinRE
Task: {FCFDC63E-D202-4EE4-841D-F4365E97362F} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-09-19] (Piriform Ltd)
Task: {FFB71EB0-2378-4C5C-A6B5-0211F03A32C8} - System32\Tasks\RegClean Pro_UPDATES => C:\Program Files (x86)\RegClean Pro\RegCleanPro.exe [2013-09-16] (Systweak Inc)
Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\WINDOWS\Tasks\DigitalSite.job => C:\Users\Saturn\AppData\Roaming\DIGITA~1\UPDATE~1\UPDATE~1.EXE
Task: C:\WINDOWS\Tasks\DSite.job => C:\Users\Saturn\AppData\Roaming\DSite\UpdateProc\UpdateTask.exe
Task: C:\WINDOWS\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon.job => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe
Task: C:\WINDOWS\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d.job => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe
Task: C:\WINDOWS\Tasks\RegClean Pro_DEFAULT.job => C:\Program Files (x86)\RegClean Pro\RegCleanPro.exe
Task: C:\WINDOWS\Tasks\RegClean Pro_UPDATES.job => C:\Program Files (x86)\RegClean Pro\RegCleanPro.exe
Task: C:\WINDOWS\Tasks\Synaptics TouchPad Enhancements.job => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
Task: C:\WINDOWS\Tasks\Xerox PhotoCafe Communicator.job => C:\ProgramData\Xerox PhotoCafe\MessageCheck.exe
==================== Loaded Modules (whitelisted) =============
2012-12-14 02:42 - 2012-12-14 02:42 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll
2012-12-05 12:44 - 2012-12-05 12:44 - 00384128 _____ () C:\Program Files (x86)\Bluetooth Suite\ContactsApi.dll
2012-12-05 12:39 - 2012-12-05 12:39 - 00020992 _____ () C:\Program Files (x86)\Bluetooth Suite\L10n\de-DE\BtTray.de-DE.dll
2012-12-05 12:41 - 2012-12-05 12:41 - 00011264 _____ () C:\Program Files (x86)\Bluetooth Suite\Modules\ActivateDesktopDebugger\ActivateDesktopDebugger.dll
2013-10-16 19:15 - 2013-10-16 19:15 - 00088624 _____ () C:\Program Files\Samsung\S Agent\ToastX64.dll
2013-09-04 11:42 - 2013-09-04 11:40 - 00394824 _____ () C:\Program Files (x86)\Avira\AntiVir Desktop\sqlite3.dll
2012-11-30 08:26 - 2012-11-30 08:26 - 00028792 _____ () C:\Program Files (x86)\Samsung\Settings\CmdServer\EasySettingsCmdWrapper.dll
2012-11-30 08:26 - 2012-11-30 08:26 - 01068664 _____ () C:\Program Files (x86)\Samsung\Settings\CmdServer\EasySettingsCmd.dll
2012-11-30 08:26 - 2012-11-30 08:26 - 00110712 _____ () C:\Program Files (x86)\Samsung\Settings\CmdServer\EasySettingsBase.dll
2012-11-30 08:26 - 2012-11-30 08:26 - 00056440 _____ () C:\Program Files (x86)\Samsung\Settings\CmdServer\HookDllPS2.dll
2012-11-30 08:26 - 2012-11-30 08:26 - 00211064 _____ () C:\Program Files (x86)\Samsung\Settings\CmdServer\WinCRT.dll
2012-11-30 08:26 - 2012-11-30 08:26 - 00026744 _____ () C:\Program Files (x86)\Samsung\Settings\EasySettingsAPI.dll
2012-11-30 08:26 - 2012-11-30 08:26 - 00110712 _____ () C:\Program Files (x86)\Samsung\Settings\EasySettingsBase.dll
2012-11-30 08:26 - 2012-11-30 08:26 - 00060536 _____ () C:\Program Files (x86)\Samsung\Settings\EasyMovieEnhancer.dll
2012-11-30 08:26 - 2012-11-30 08:26 - 00103032 _____ () C:\Program Files (x86)\Samsung\Settings\EasySettingsCmdClient.dll
2013-01-25 04:07 - 2012-06-08 04:34 - 00627216 _____ () C:\Program Files (x86)\CyberLink\Power2Go8\CLMediaLibrary.dll
2012-06-08 03:34 - 2012-06-08 03:34 - 00016400 _____ () C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvcPS.dll
2013-01-25 04:11 - 2012-07-13 16:30 - 00891392 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\QtNetwork4.dll
2013-01-25 04:11 - 2012-07-13 16:30 - 02281984 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\QtCore4.dll
2013-01-25 04:11 - 2012-07-13 16:30 - 00016896 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\featureController.dll
2013-01-25 04:11 - 2012-07-13 16:30 - 00062976 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\osEvents.dll
2013-01-25 04:11 - 2012-07-13 16:30 - 00322048 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\log4cplus.dll
2013-01-25 04:11 - 2012-07-13 16:30 - 00339456 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\QtXml4.dll
2013-01-25 04:11 - 2012-07-13 16:30 - 00400384 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\sqlite3.dll
2013-01-25 04:11 - 2012-07-13 16:30 - 00195584 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\libgsoap.dll
2013-01-25 04:11 - 2012-07-13 16:30 - 00062464 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\zlib1.dll
2013-01-25 04:11 - 2012-07-13 16:30 - 00446976 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\deviceProfile.dll
2013-01-25 04:11 - 2012-07-13 16:30 - 00019456 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\eventsSender.dll
2013-01-25 04:11 - 2012-07-13 16:30 - 00062976 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\serviceManagerStarter.dll
2013-11-12 09:16 - 2013-11-12 09:16 - 00016384 _____ () C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\PSIClient\f97cf15f658c4ee5e0be06dbf62ac4b1\PSIClient.ni.dll
2013-01-25 03:47 - 2012-06-25 18:41 - 01198912 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll
2013-11-08 05:26 - 2013-10-21 07:41 - 00868704 _____ () C:\Program Files (x86)\Opera\17.0.1241.53\ffmpegsumo.dll
2013-11-08 05:26 - 2013-10-21 07:42 - 00881504 _____ () C:\Program Files (x86)\Opera\17.0.1241.53\libglesv2.dll
2013-11-08 05:26 - 2013-10-21 07:42 - 00109408 _____ () C:\Program Files (x86)\Opera\17.0.1241.53\libegl.dll
2013-07-31 08:25 - 2013-09-03 15:15 - 00102400 _____ () C:\Program Files (x86)\ALDITALKVerbindungsassistent\WtgDatabase.dll
2013-07-31 08:25 - 2013-09-03 15:15 - 00200704 _____ () C:\Program Files (x86)\ALDITALKVerbindungsassistent\WtgDetection.dll
2013-07-31 08:25 - 2013-09-03 15:15 - 00086016 _____ () C:\Program Files (x86)\ALDITALKVerbindungsassistent\WtgDialup.dll
2013-07-31 08:25 - 2013-09-03 15:15 - 00090112 _____ () C:\Program Files (x86)\ALDITALKVerbindungsassistent\WtgPorts.dll
2013-07-31 08:25 - 2013-09-03 15:15 - 00106496 _____ () C:\Program Files (x86)\ALDITALKVerbindungsassistent\WtgUtil.dll
2013-07-31 08:25 - 2013-09-03 15:15 - 00012288 _____ () C:\Program Files (x86)\ALDITALKVerbindungsassistent\WTGDebugs.dll
2013-07-31 08:25 - 2013-09-03 15:15 - 00073728 _____ () C:\Program Files (x86)\ALDITALKVerbindungsassistent\WtgDriverInstall.dll
2013-07-31 08:25 - 2013-09-03 15:15 - 00569344 _____ () C:\Program Files (x86)\ALDITALKVerbindungsassistent\WtgCore.dll
2013-07-31 08:25 - 2013-09-03 15:15 - 00204800 _____ () C:\Program Files (x86)\ALDITALKVerbindungsassistent\LiveBoxCM.dll
2013-07-31 08:25 - 2013-09-03 15:15 - 00139264 _____ () C:\Program Files (x86)\ALDITALKVerbindungsassistent\WtgBluetooth.dll
2013-07-31 08:25 - 2007-02-27 18:44 - 00823296 ____N () C:\Program Files (x86)\ALDITALKVerbindungsassistent\LIBEAY32.dll
2013-07-31 08:25 - 2013-09-03 15:15 - 00126976 _____ () C:\Program Files (x86)\ALDITALKVerbindungsassistent\WtgWiFi.dll
2013-07-31 08:25 - 2010-12-02 07:33 - 01097728 ____N () C:\Program Files (x86)\ALDITALKVerbindungsassistent\NDISAPI.dll
2013-07-31 08:25 - 2013-09-03 15:15 - 00614400 _____ () C:\Program Files (x86)\ALDITALKVerbindungsassistent\WTGXMLUtil.dll
2013-07-31 08:25 - 2013-09-03 15:15 - 00303104 _____ () C:\Program Files (x86)\ALDITALKVerbindungsassistent\WTGSMSPCClient.Dll
2013-03-27 22:50 - 2013-03-27 22:50 - 00020480 _____ () C:\Program Files (x86)\OpenIt\Open It!\libgcc_s_dw2-1.dll
2011-12-02 01:30 - 2011-12-02 01:30 - 00979982 _____ () C:\Program Files (x86)\OpenIt\Open It!\libstdc++-6.dll
2013-03-27 22:50 - 2013-03-27 22:50 - 00009826 _____ () C:\Program Files (x86)\OpenIt\Open It!\mingwm10.dll
==================== Alternate Data Streams (whitelisted) =========
==================== Safe Mode (whitelisted) ===================
==================== Faulty Device Manager Devices =============
==================== Event log errors: =========================
Application errors:
==================
Error: (11/13/2013 07:25:16 AM) (Source: Customer Experience Improvement Program) (User: )
Description: 80070005
Error: (11/12/2013 06:37:59 AM) (Source: Application Hang) (User: )
Description: Programm wwahost.exe, Version 6.3.9600.16384 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
Prozess-ID: 1178
Startzeit: 01cedf68ecfe326f
Endzeit: 4294967295
Anwendungspfad: C:\WINDOWS\system32\wwahost.exe
Berichts-ID: 34dfef6a-4b5c-11e3-beb5-50b7c3f22820
Vollständiger Name des fehlerhaften Pakets: microsoft.windowscommunicationsapps_17.4.9600.16384_x64__8wekyb3d8bbwe
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: Microsoft.WindowsLive.Calendar
Error: (11/12/2013 06:35:17 AM) (Source: Microsoft-Windows-Immersive-Shell) (User: Samsung)
Description: Bei der Aktivierung der App „microsoft.windowscommunicationsapps_8wekyb3d8bbwe!Microsoft.WindowsLive.Calendar“ ist folgender Fehler aufgetreten: -2144927142. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.
Error: (11/12/2013 06:35:14 AM) (Source: Microsoft-Windows-Immersive-Shell) (User: Samsung)
Description: Die App „microsoft.windowscommunicationsapps_17.4.9600.16384_x64__8wekyb3d8bbwe+Microsoft.WindowsLive.Calendar“ wurde nicht innerhalb der vorgesehenen Zeit gestartet.
Error: (11/12/2013 06:34:09 AM) (Source: Windows Search Service) (User: )
Description: Der Index kann nicht initialisiert werden.
Details:
Das angegebene Objekt wurde nicht gefunden. Geben Sie den Namen eines vorhandenen Objekts an. (HRESULT : 0x80040d06) (0x80040d06)
Error: (11/12/2013 06:34:09 AM) (Source: Windows Search Service) (User: )
Description: Die Anwendung kann nicht initialisiert werden.
Kontext: Windows Anwendung
Details:
Das angegebene Objekt wurde nicht gefunden. Geben Sie den Namen eines vorhandenen Objekts an. (HRESULT : 0x80040d06) (0x80040d06)
Error: (11/12/2013 06:34:09 AM) (Source: Windows Search Service) (User: )
Description: Das Gatherer-Objekt kann nicht initialisiert werden.
Kontext: Windows Anwendung, SystemIndex Katalog
Details:
Das angegebene Objekt wurde nicht gefunden. Geben Sie den Namen eines vorhandenen Objekts an. (HRESULT : 0x80040d06) (0x80040d06)
Error: (11/12/2013 06:34:09 AM) (Source: Windows Search Service) (User: )
Description: Plug-In in <Search.TripoliIndexer> kann nicht initialisiert werden.
Kontext: Windows Anwendung, SystemIndex Katalog
Details:
Das angegebene Objekt wurde nicht gefunden. Geben Sie den Namen eines vorhandenen Objekts an. (HRESULT : 0x80040d06) (0x80040d06)
Error: (11/12/2013 06:34:09 AM) (Source: Windows Search Service) (User: )
Description: Der Plug-In-Manager <Search.TripoliIndexer> kann nicht initialisiert werden.
Kontext: Windows Anwendung
Details:
(HRESULT : 0x8e5e0210) (0x8e5e0210)
Error: (11/12/2013 06:34:09 AM) (Source: Windows Search Service) (User: )
Description: Windows Search wird aufgrund eines Problems bei der Indizierung The catalog is corrupt beendet.
Details:
Der Inhaltsindexkatalog ist fehlerhaft. 0xc0041801 (0xc0041801)
System errors:
=============
Error: (11/13/2013 11:47:24 AM) (Source: DCOM) (User: Samsung)
Description: {BF6C1E47-86EC-4194-9CE5-13C15DCB2001}
Error: (11/13/2013 10:58:54 AM) (Source: DCOM) (User: Samsung)
Description: {BF6C1E47-86EC-4194-9CE5-13C15DCB2001}
Error: (11/13/2013 10:20:10 AM) (Source: DCOM) (User: NT-AUTORITÄT)
Description: ComputerstandardLokalAktivierung{C2F03A33-21F5-47FA-B4BB-156362A2F239}{316CDED5-E4AE-4B15-9113-7055D84DCC97}NT-AUTORITÄTLokaler DienstS-1-5-19LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar
Error: (11/13/2013 08:21:34 AM) (Source: Microsoft-Windows-Kernel-Power) (User: )
Description: 4
Error: (11/13/2013 08:18:17 AM) (Source: DCOM) (User: NT-AUTORITÄT)
Description: ComputerstandardLokalAktivierung{C2F03A33-21F5-47FA-B4BB-156362A2F239}{316CDED5-E4AE-4B15-9113-7055D84DCC97}NT-AUTORITÄTLokaler DienstS-1-5-19LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar
Error: (11/13/2013 08:15:22 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Routing und RAS" wurde mit dem folgenden dienstspezifischen Fehler beendet:
%%11004
Error: (11/13/2013 08:15:20 AM) (Source: RemoteAccess) (User: )
Description: Der momentan konfigurierte Authentifizierungsanbieter konnte nicht geladen und initialisiert werden. Der angeforderte Name ist gültig, es wurden jedoch keine Daten des angeforderten Typs gefunden.
Error: (11/13/2013 08:13:47 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst Windows Update konnte nach dem Empfang eines Preshutdown-Steuerelements nicht richtig heruntergefahren werden.
Error: (11/12/2013 03:27:45 PM) (Source: DCOM) (User: NT-AUTORITÄT)
Description: ComputerstandardLokalAktivierung{C2F03A33-21F5-47FA-B4BB-156362A2F239}{316CDED5-E4AE-4B15-9113-7055D84DCC97}NT-AUTORITÄTLokaler DienstS-1-5-19LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar
Error: (11/12/2013 03:25:04 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Routing und RAS" wurde mit dem folgenden dienstspezifischen Fehler beendet:
%%11004
Microsoft Office Sessions:
=========================
Error: (11/13/2013 07:25:16 AM) (Source: Customer Experience Improvement Program)(User: )
Description: 80070005
Error: (11/12/2013 06:37:59 AM) (Source: Application Hang)(User: )
Description: wwahost.exe6.3.9600.16384117801cedf68ecfe326f4294967295C:\WINDOWS\system32\wwahost.exe34dfef6a-4b5c-11e3-beb5-50b7c3f22820microsoft.windowscommunicationsapps_17.4.9600.16384_x64__8wekyb3d8bbweMicrosoft.WindowsLive.Calendar
Error: (11/12/2013 06:35:17 AM) (Source: Microsoft-Windows-Immersive-Shell)(User: Samsung)
Description: microsoft.windowscommunicationsapps_8wekyb3d8bbwe!Microsoft.WindowsLive.Calendar-2144927142
Error: (11/12/2013 06:35:14 AM) (Source: Microsoft-Windows-Immersive-Shell)(User: Samsung)
Description: microsoft.windowscommunicationsapps_17.4.9600.16384_x64__8wekyb3d8bbwe+Microsoft.WindowsLive.Calendar
Error: (11/12/2013 06:34:09 AM) (Source: Windows Search Service)(User: )
Description:
Details:
Das angegebene Objekt wurde nicht gefunden. Geben Sie den Namen eines vorhandenen Objekts an. (HRESULT : 0x80040d06) (0x80040d06)
Error: (11/12/2013 06:34:09 AM) (Source: Windows Search Service)(User: )
Description: Kontext: Windows Anwendung
Details:
Das angegebene Objekt wurde nicht gefunden. Geben Sie den Namen eines vorhandenen Objekts an. (HRESULT : 0x80040d06) (0x80040d06)
Error: (11/12/2013 06:34:09 AM) (Source: Windows Search Service)(User: )
Description: Kontext: Windows Anwendung, SystemIndex Katalog
Details:
Das angegebene Objekt wurde nicht gefunden. Geben Sie den Namen eines vorhandenen Objekts an. (HRESULT : 0x80040d06) (0x80040d06)
Error: (11/12/2013 06:34:09 AM) (Source: Windows Search Service)(User: )
Description: Kontext: Windows Anwendung, SystemIndex Katalog
Details:
Das angegebene Objekt wurde nicht gefunden. Geben Sie den Namen eines vorhandenen Objekts an. (HRESULT : 0x80040d06) (0x80040d06)
Search.TripoliIndexer
Error: (11/12/2013 06:34:09 AM) (Source: Windows Search Service)(User: )
Description: Kontext: Windows Anwendung
Details:
(HRESULT : 0x8e5e0210) (0x8e5e0210)
Search.TripoliIndexer
Error: (11/12/2013 06:34:09 AM) (Source: Windows Search Service)(User: )
Description:
Details:
Der Inhaltsindexkatalog ist fehlerhaft. 0xc0041801 (0xc0041801)
The catalog is corrupt
CodeIntegrity Errors:
===================================
Date: 2013-09-05 21:40:43.045
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\WindowsApps\Evernote.Evernote_1.0.0.62_x86__q4d96b2w5wcc2\EvernoteMetro.exe) attempted to load \Device\HarddiskVolume4\Program Files\WindowsApps\Evernote.Evernote_1.0.0.62_x86__q4d96b2w5wcc2\LibSQLite.dll that did not meet the Store signing level requirements.
Date: 2013-07-28 23:02:39.787
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\Drivers\ewusbfake.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2013-07-28 19:33:29.083
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\Drivers\ewusbfake.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2013-07-28 19:32:13.887
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\Drivers\ewusbfake.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2013-07-28 19:05:51.048
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\Drivers\ewusbfake.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2013-07-28 19:05:05.921
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\Drivers\ewusbfake.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2013-07-28 19:03:18.976
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\Drivers\ewusbfake.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
==================== Memory info ===========================
Percentage of memory in use: 45%
Total physical RAM: 3984.65 MB
Available physical RAM: 2152.61 MB
Total Pagefile: 8080.65 MB
Available Pagefile: 5114.45 MB
Total Virtual: 131072 MB
Available Virtual: 131071.79 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:436.16 GB) (Free:399.47 GB) NTFS
Drive f: (Disk) (CDROM) (Total:0.02 GB) (Free:0 GB) CDFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (Size: 466 GB) (Disk ID: C774ED6C)
Partition: GPT Partition Type
==================== End Of Log ============================
|
|
14.11.2013, 13:51
| #4 |
| /// the machine /// TB-Ausbilder | Antivir: Warnung swapfile.sys konnte nicht geöffnet werden Downloade Dir bitte  Malwarebytes Anti-Malware
Downloade Dir bitte  AdwCleaner auf deinen Desktop.
Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
und ein frisches FRST log bitte.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
15.11.2013, 12:04
| #5 |
| | Antivir: Warnung swapfile.sys konnte nicht geöffnet werden Malwarebytes Anti-Malware (Test) 1.75.0.1300 Malwarebytes : Free Anti-Malware download Datenbank Version: v2013.11.14.07 Windows 8 x64 NTFS Internet Explorer 11.0.9600.16438 Saturn :: SAMSUNG [Administrator] Schutz: Aktiviert 14.11.2013 20:59:14 mbam-log-2013-11-14 (20-59-14).txt Art des Suchlaufs: Quick-Scan Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM Deaktivierte Suchlaufeinstellungen: P2P Durchsuchte Objekte: 222453 Laufzeit: 9 Minute(n), 7 Sekunde(n) Infizierte Speicherprozesse: 0 (Keine bösartigen Objekte gefunden) Infizierte Speichermodule: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungsschlüssel: 4 HKCR\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3} (PUP.Optional.Delta.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\DigitalSite (PUP.Optional.DigitalSites.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCU\Software\BabSolution\Updater (PUP.Optional.Babylon.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCU\SOFTWARE\INSTALLCORE (PUP.Optional.InstallCore.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. Infizierte Registrierungswerte: 1 HKCU\Software\InstallCore|tb (PUP.Optional.InstallCore.A) -> Daten: 0L1N1H2O1S -> Erfolgreich gelöscht und in Quarantäne gestellt. Infizierte Dateiobjekte der Registrierung: 0 (Keine bösartigen Objekte gefunden) Infizierte Verzeichnisse: 7 C:\Users\Saturn\AppData\Roaming\DigitalSite\UpdateProc (PUP.Optional.DigitalSite.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Saturn\AppData\Roaming\Babylon (PUP.Optional.Babylon.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Saturn\AppData\Roaming\DealPly (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Saturn\AppData\Roaming\DealPly\UpdateProc (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Saturn\AppData\Roaming\OPENCANDY (PUP.Optional.OpenCandy) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Saturn\AppData\Roaming\OPENCANDY\2150236BFC7E49AFA08776D6AA76964A (PUP.Optional.OpenCandy) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Saturn\AppData\Roaming\OPENCANDY\A4DEFE1971D448DB80E29196067481ED (PUP.Optional.OpenCandy) -> Erfolgreich gelöscht und in Quarantäne gestellt. Infizierte Dateien: 15 C:\Users\Saturn\AppData\Roaming\DigitalSite\UpdateProc\UpdateTask.exe (PUP.Optional.DigitalSites.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Saturn\AppData\Roaming\OpenCandy\2150236BFC7E49AFA08776D6AA76964A\LatestDLMgr.exe (PUP.Optional.OpenCandy.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Saturn\Downloads\Free31213YouTubeToMP3Converter.exe (PUP.Optional.OpenCandy) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Saturn\Downloads\rcpafterdownloadcp_ntb_ad_13271_cpntb1.exe (PUP.Optional.RegCleanerPro) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Saturn\Downloads\ZipExtractorSetup (1).exe (PUP.Optional.InstallCore.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Saturn\AppData\Roaming\DigitalSite\UpdateProc\config.dat (PUP.Optional.DigitalSite.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Saturn\AppData\Roaming\DigitalSite\UpdateProc\prod.dat (PUP.Optional.DigitalSite.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Saturn\AppData\Roaming\DigitalSite\UpdateProc\STTL.DAT (PUP.Optional.DigitalSite.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Saturn\AppData\Roaming\DigitalSite\UpdateProc\TTL.DAT (PUP.Optional.DigitalSite.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Saturn\AppData\Roaming\Babylon\log_file.txt (PUP.Optional.Babylon.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Saturn\AppData\Roaming\DealPly\UPDATEPROC\config.dat (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Saturn\AppData\Roaming\DealPly\UPDATEPROC\UpdateTask.exe (PUP.Optional.DealPly.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Saturn\AppData\Roaming\OPENCANDY\2150236BFC7E49AFA08776D6AA76964A\Setup1004732_DE-1.exe (PUP.Optional.OpenCandy) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Saturn\AppData\Roaming\OPENCANDY\2150236BFC7E49AFA08776D6AA76964A\Trial-14.0.1000.89_de-DE_1004732_DE-1.exe (PUP.Optional.OpenCandy) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Saturn\AppData\Roaming\OPENCANDY\A4DEFE1971D448DB80E29196067481ED\Trial-14.0.1000.89_de-DE_1004732_DE-1.exe (PUP.Optional.OpenCandy) -> Erfolgreich gelöscht und in Quarantäne gestellt. (Ende)AdwCleaner Logfile: Code:
ATTFilter # AdwCleaner v3.012 - Bericht erstellt am 14/11/2013 um 22:51:58
# Updated 11/11/2013 von Xplode
# Betriebssystem : Windows 8.1 (64 bits)
# Benutzername : Saturn - SAMSUNG
# Gestartet von : C:\Users\Saturn\Downloads\adwcleaner.exe
# Option : Löschen
***** [ Dienste ] *****
***** [ Dateien / Ordner ] *****
Ordner Gelöscht : C:\ProgramData\Babylon
Ordner Gelöscht : C:\ProgramData\boost_interprocess
Ordner Gelöscht : C:\Users\Saturn\AppData\Local\Babylon
Ordner Gelöscht : C:\Users\Saturn\AppData\Roaming\Advanced System Protector
Ordner Gelöscht : C:\Users\Saturn\AppData\Roaming\digitalsite
Ordner Gelöscht : C:\Users\Saturn\AppData\Roaming\DSite
Ordner Gelöscht : C:\Users\Saturn\AppData\Roaming\dvdvideosoftiehelpers
Ordner Gelöscht : C:\Users\Saturn\AppData\Roaming\Systweak
Ordner Gelöscht : C:\Program Files (x86)\Mozilla Firefox\Extensions\ffxtlbr@babylon.com
Datei Gelöscht : C:\WINDOWS\System32\roboot64.exe
Datei Gelöscht : C:\Users\Saturn\AppData\Roaming\Mozilla\Firefox\Profiles\axxb4zd0.default\searchplugins\zonealarm.xml
Datei Gelöscht : C:\Users\Saturn\AppData\Roaming\Mozilla\Firefox\Profiles\axxb4zd0.default\user.js
Datei Gelöscht : C:\WINDOWS\System32\Tasks\Advanced System Protector
Datei Gelöscht : C:\WINDOWS\System32\Tasks\Dealply
Datei Gelöscht : C:\WINDOWS\Tasks\digitalsite.job
Datei Gelöscht : C:\WINDOWS\System32\Tasks\digitalsite
Datei Gelöscht : C:\WINDOWS\Tasks\DSite.job
Datei Gelöscht : C:\WINDOWS\System32\Tasks\DSite
***** [ Verknüpfungen ] *****
***** [ Registrierungsdatenbank ] *****
Wert Gelöscht : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [{ACAA314B-EEBA-48E4-AD47-84E31C44796C}]
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\escort.DLL
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\escortApp.DLL
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\escortEng.DLL
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\escorTlbr.DLL
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\esrv.EXE
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\escort.escortIEPane
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\escort.escortIEPane.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Prod.cap
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\ScriptHost.Tool
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\ScriptHost.Tool.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{09C554C3-109B-483C-A06B-F14172F1A947}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{0A18A436-2A7A-49F3-A488-30538A2F6323}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{B12E99ED-69BD-437C-86BE-C862B9E5444D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{007EFBDF-8A5D-4930-97CC-A4B437CBA777}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{19D2F415-D58B-46BC-9390-C03DCBC21EB2}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{6E45F3E8-2683-4824-A6BE-08108022FB36}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{9F0F16DD-4E76-4049-A9B1-7A91E48F0323}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{F4288797-CB12-49CE-9DF8-7CDFA1143BEA}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{212C2C4F-C845-4FBC-9561-C833A13D8DCE}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{3C5D1D57-16C8-473C-A552-37B8D88596FE}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{4A115D8A-6A7B-4C72-92B1-2E2D01F36979}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{99DF8440-814E-497F-BDDD-FB93E9E9DF96}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{83CAD530-387D-40FD-82EA-B9E863D92A9B}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gelöscht : HKCU\Software\BabSolution
Schlüssel Gelöscht : HKCU\Software\dsiteproducts
Schlüssel Gelöscht : HKCU\Software\InstalledThirdPartyPrograms
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\Crossrider
Schlüssel Gelöscht : HKLM\Software\systweak
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\InstalledThirdPartyPrograms
***** [ Browser ] *****
-\\ Internet Explorer v11.0.9600.16384
-\\ Mozilla Firefox v25.0 (de)
[ Datei : C:\Users\Saturn\AppData\Roaming\Mozilla\Firefox\Profiles\axxb4zd0.default\prefs.js ]
Zeile gelöscht : user_pref("extensions.delta.admin", false);
Zeile gelöscht : user_pref("extensions.delta.aflt", "babsst");
Zeile gelöscht : user_pref("extensions.delta.appId", "{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}");
Zeile gelöscht : user_pref("extensions.delta.autoRvrt", "false");
Zeile gelöscht : user_pref("extensions.delta.dfltLng", "de");
Zeile gelöscht : user_pref("extensions.delta.excTlbr", false);
Zeile gelöscht : user_pref("extensions.delta.ffxUnstlRst", true);
Zeile gelöscht : user_pref("extensions.delta.id", "c62f3709000000000000000000000000");
Zeile gelöscht : user_pref("extensions.delta.instlDay", "15963");
Zeile gelöscht : user_pref("extensions.delta.instlRef", "sst");
Zeile gelöscht : user_pref("extensions.delta.newTab", false);
Zeile gelöscht : user_pref("extensions.delta.prdct", "delta");
Zeile gelöscht : user_pref("extensions.delta.prtnrId", "delta");
Zeile gelöscht : user_pref("extensions.delta.rvrt", "false");
Zeile gelöscht : user_pref("extensions.delta.smplGrp", "none");
Zeile gelöscht : user_pref("extensions.delta.tlbrId", "base");
Zeile gelöscht : user_pref("extensions.delta.tlbrSrchUrl", "");
Zeile gelöscht : user_pref("extensions.delta.vrsn", "1.8.24.6");
Zeile gelöscht : user_pref("extensions.delta.vrsnTs", "1.8.24.619:47:34");
Zeile gelöscht : user_pref("extensions.delta.vrsni", "1.8.24.6");
Zeile gelöscht : user_pref("extensions.delta_i.babExt", "");
Zeile gelöscht : user_pref("extensions.delta_i.babTrack", "affID=119357&tsp=5006");
Zeile gelöscht : user_pref("extensions.delta_i.srcExt", "ss");
*************************
AdwCleaner[R0].txt - [7046 octets] - [14/11/2013 21:48:52]
AdwCleaner[S0].txt - [6673 octets] - [14/11/2013 22:51:58]
########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [6733 octets] ##########
Junkware Removal Tool (JRT) by Thisisu Version: 6.0.8 (11.05.2013:1) OS: Windows 8.1 x64 Ran by Saturn on 15.11.2013 at 10:51:03,09 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~ Services ~~~ Registry Values Failed to delete: [Registry Value] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\apntbmon Failed to delete: [Registry Value] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\\apntbmon ~~~ Registry Keys Failed to delete: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{41564952-412D-5637-00A7-7A786E7484D7} Failed to delete: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{41564952-412D-5637-00A7-7A786E7484D7} Failed to delete: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{41564952-412D-5637-00A7-7A786E7484D7} Failed to delete: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Wow6432Node\CLSID\{41564952-412D-5637-00A7-7A786E7484D7} ~~~ Files ~~~ Folders Failed to delete: [Folder] "C:\ProgramData\apn" ~~~ FireFox Successfully deleted: [File] C:\Users\Saturn\AppData\Roaming\mozilla\firefox\profiles\axxb4zd0.default\extensions\toolbar_avira-v7@apn.ask.com.xpi Successfully deleted: [Folder] C:\Users\Saturn\AppData\Roaming\mozilla\firefox\profiles\axxb4zd0.default\extensions\staged ~~~ Event Viewer Logs wereJRT Logfile: Code:
ATTFilter ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.0.8 (11.05.2013:1)
OS: Windows 8.1 x64
Ran by Saturn on 15.11.2013 at 10:51:03,09
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~ Services
~~~ Registry Values
Failed to delete: [Registry Value] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\apntbmon
Failed to delete: [Registry Value] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\\apntbmon
~~~ Registry Keys
Failed to delete: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{41564952-412D-5637-00A7-7A786E7484D7}
Failed to delete: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{41564952-412D-5637-00A7-7A786E7484D7}
Failed to delete: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{41564952-412D-5637-00A7-7A786E7484D7}
Failed to delete: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Wow6432Node\CLSID\{41564952-412D-5637-00A7-7A786E7484D7}
~~~ Files
~~~ Folders
Failed to delete: [Folder] "C:\ProgramData\apn"
~~~ FireFox
Successfully deleted: [File] C:\Users\Saturn\AppData\Roaming\mozilla\firefox\profiles\axxb4zd0.default\extensions\toolbar_avira-v7@apn.ask.com.xpi
Successfully deleted: [Folder] C:\Users\Saturn\AppData\Roaming\mozilla\firefox\profiles\axxb4zd0.default\extensions\staged
~~~ Event Viewer Logs were cleared
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 15.11.2013 at 11:01:09,43
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 13-11-2013
Ran by Saturn (administrator) on SAMSUNG on 15-11-2013 11:32:11
Running from C:\Users\Saturn\Downloads
Windows 8.1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(AMD) C:\WINDOWS\system32\atiesrxx.exe
(AMD) C:\WINDOWS\system32\atieclxx.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
() C:\Program Files (x86)\ALDITALKVerbindungsassistent\ALDITALKVerbindungsassistent_Service.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(APN LLC.) C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe
(Qualcomm Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\adminservice.exe
(Samsung Electronics CO., LTD.) C:\Program Files (x86)\Samsung\Settings\CmdServer\EasyLauncher.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
() C:\Program Files (x86)\Samsung\Settings\CmdServer\EasySettingsCmdServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
(Samsung Electronics CO., LTD.) C:\Program Files (x86)\Samsung\Settings\sSettings.exe
(Atheros) C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe
(Intel Corporation) C:\WINDOWS\system32\igfxext.exe
(Samsung Electronics CO., LTD.) C:\Program Files\Samsung\S Agent\CommonAgent.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
() C:\Program Files (x86)\ALDITALKVerbindungsassistent\ALDITALKVerbindungsassistent.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe
() C:\Program Files (x86)\ALDITALKVerbindungsassistent\ALDITALKVerbindungsassistent_Launcher.exe
(Synaptics Incorporated) C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Qualcomm Atheros) C:\Program Files (x86)\Bluetooth Suite\BtTray.exe
(Atheros Communications) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe
(CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe
(CyberLink) C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe
(Intel Corporation) C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(APN) C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe
() C:\Program Files (x86)\Bluetooth Suite\ActivateDesktop.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Samsung Electronics CO., LTD.) C:\ProgramData\Samsung\SW Update Service\SWMAgent.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Samsung Electronics CO., LTD.) C:\Program Files\Samsung\Support Center\GuaranaAgent.exe
(Opera Software) C:\Program Files (x86)\Opera\17.0.1241.53\opera.exe
() C:\Program Files (x86)\Opera\17.0.1241.53\opera_crashreporter.exe
(Opera Software) C:\Program Files (x86)\Opera\17.0.1241.53\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\17.0.1241.53\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\17.0.1241.53\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\17.0.1241.53\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\17.0.1241.53\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\17.0.1241.53\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\17.0.1241.53\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\17.0.1241.53\opera.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\OFFICE11\WINWORD.EXE
(Microsoft Corporation) C:\WINDOWS\splwow64.exe
(Opera Software) C:\Program Files (x86)\Opera\17.0.1241.53\opera.exe
(Microsoft Corporation) C:\WINDOWS\SysWOW64\notepad.exe
(Samsung Electronics CO., LTD.) C:\Program Files (x86)\Samsung\Quick Starter\Quick Starter.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [HotKeysCmds] - C:\WINDOWS\system32\hkcmd.exe [ ] ()
HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13191824 2012-08-10] (Realtek Semiconductor)
HKLM\...\Run: [BtTray] - C:\Program Files (x86)\Bluetooth Suite\BtTray.exe [766080 2012-12-05] (Qualcomm Atheros)
HKLM\...\Run: [BtvStack] - C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [128640 2012-12-05] (Atheros Communications)
HKLM\...\Run: [Bitcasa] - C:\Program Files\Bitcasa\Bitcasa.exe [3952128 2012-11-27] (Bitcasa, Inc)
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2917688 2012-10-16] (Synaptics Incorporated)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKCU\...\Policies\system: [DisableLockWorkstation] 0
MountPoints2: {4b6315e7-4863-11e3-824f-806e6f6e6963} - "F:\.\Setup.exe" AUTORUN=1
HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [642216 2012-08-06] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [IAStorIcon] - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [285240 2012-09-01] (Intel Corporation)
HKLM-x32\...\Run: [Adobe Reader Speed Launcher] - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\reader_sl.exe [40312 2013-09-03] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [RemoteControl10] - C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [97392 2012-08-15] (CyberLink Corp.)
HKLM-x32\...\Run: [CLMLServer_For_P2G8] - C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe [111120 2012-06-08] (CyberLink)
HKLM-x32\...\Run: [CLVirtualDrive] - C:\Program Files (x86)\CyberLink\Power2Go8\VirtualDrive.exe [491120 2012-07-12] (CyberLink Corp.)
HKLM-x32\...\Run: [Intel AppUp(SM) center] - C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe [155488 2012-07-13] (Intel Corporation)
HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [347192 2013-09-04] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [ApnTBMon] - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe [1673680 2013-10-23] (APN)
SSODL: EldosMountNotificator - {5FF49FE8-B332-4CB9-B102-FB6951629E55} - C:\windows\system32\CbFsMntNtf3.dll (EldoS Corporation)
SSODL-x32: EldosMountNotificator - {5FF49FE8-B332-4CB9-B102-FB6951629E55} - C:\windows\SysWow64\CbFsMntNtf3.dll (EldoS Corporation)
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Search
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN Deutschland: Aktuelle Nachrichten, Outlook.com Email und Skype Login.
SearchScopes: HKLM - DefaultScope {38B7222B-4B2A-4275-BD2A-70DC0BE165A6} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MASMJS
SearchScopes: HKLM - {38B7222B-4B2A-4275-BD2A-70DC0BE165A6} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MASMJS
SearchScopes: HKLM-x32 - {38B7222B-4B2A-4275-BD2A-70DC0BE165A6} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MASMJS
SearchScopes: HKCU - {38B7222B-4B2A-4275-BD2A-70DC0BE165A6} URL =
SearchScopes: HKCU - {F1A12AE8-3E1C-4DFC-B7F3-EF4D85106328} URL = hxxp://search.zonealarm.com/search?src=sp&tbid=goughGA&Lan=de&q={searchTerms}&gu=99a6beb3d4854a81ae0daf86b86d8d80&tu=10G9y00Az1C01g0&sku=&tstsId=&ver=&&r=546
BHO: Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport_x64.dll (APN LLC.)
BHO: CIESpeechBHO Class - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll (Qualcomm Atheros Commnucations)
BHO-x32: Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport.dll (APN LLC.)
Toolbar: HKLM - Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport_x64.dll (APN LLC.)
Toolbar: HKLM-x32 - Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport.dll (APN LLC.)
Toolbar: HKCU - Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport_x64.dll (APN LLC.)
Handler-x32: http\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: http\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: https\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: https\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: msdaipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: msdaipp\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Filter: text/xml - {807553E5-5146-11D5-A672-00B0D022E945} - No File
Tcpip\..\Interfaces\{48454AFF-049F-41D2-908F-8728E1BBCBA5}: [NameServer]212.23.115.150 212.23.115.132
FireFox:
========
FF ProfilePath: C:\Users\Saturn\AppData\Roaming\Mozilla\Firefox\Profiles\axxb4zd0.default
FF Homepage: hxxp://search.zonealarm.com/?src=hp&tbid=goughGA&Lan=de&gu=99a6beb3d4854a81ae0daf86b86d8d80&tu=10G9y00Az1C01g0&sku=&tstsId=&ver=&
FF SelectedSearchEngine: Search By ZoneAlarm
FF Plugin: @adobe.com/FlashPlayer - C:\windows\system32\Macromed\Flash\NPSWF64_11_9_900_117.dll ()
FF Plugin-x32: @adobe.com/FlashPlayer - C:\windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_117.dll ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3503.0728 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @videolan.org/vlc,version=2.0.8 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.0 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
Chrome:
=======
Error reading preferences. Please check "preferences" file for possible corruption. <======= ATTENTION
CHR HKLM-x32\...\Chrome\Extension: [aaaaacalgebmfelllfiaoknifldpngjh] - C:\ProgramData\AskPartnerNetwork\Toolbar\AVIRA-V7\CRX\ToolbarCR.crx
==================== Services (Whitelisted) =================
R2 ALDITALKVerbindungsassistent_Service; C:\Program Files (x86)\ALDITALKVerbindungsassistent\ALDITALKVerbindungsassistent_Service.exe [358968 2013-09-03] ()
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [84024 2013-09-04] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [108088 2013-09-04] (Avira Operations GmbH & Co. KG)
R2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [815160 2013-09-04] (Avira Operations GmbH & Co. KG)
R2 APNMCP; C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe [166352 2013-10-23] (APN LLC.)
R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [231552 2012-12-05] (Qualcomm Atheros Commnucations)
R2 Easy Launcher; C:\Program Files (x86)\Samsung\Settings\CmdServer\EasyLauncher.exe [1591176 2012-11-30] (Samsung Electronics CO., LTD.)
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [128896 2012-07-18] (Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [165760 2012-07-18] (Intel Corporation)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
R2 SWUpdateService; C:\ProgramData\Samsung\SW Update Service\SWMAgent.exe [3018800 2013-10-21] (Samsung Electronics CO., LTD.)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [346872 2013-08-22] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23840 2013-08-22] (Microsoft Corporation)
R2 ZAtheros Bt and Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [323584 2012-12-05] (Atheros)
==================== Drivers (Whitelisted) ====================
S0 ADP80XX; C:\Windows\System32\drivers\ADP80XX.SYS [782176 2013-08-22] (PMC-Sierra)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [105344 2013-09-04] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [132088 2013-09-04] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [28600 2013-09-04] (Avira Operations GmbH & Co. KG)
R2 avnetflt; C:\Windows\system32\DRIVERS\avnetflt.sys [82136 2013-09-04] (Avira Operations GmbH & Co. KG)
S3 bcmfn2; C:\Windows\System32\drivers\bcmfn2.sys [17624 2013-08-13] (Windows (R) Win 7 DDK provider)
S3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [224768 2013-08-22] (Microsoft Corporation)
R1 cbfs3; C:\windows\system32\drivers\cbfs3.sys [352456 2012-08-06] (EldoS Corporation)
R1 CLVirtualDrive; C:\Windows\system32\DRIVERS\CLVirtualDrive.sys [92536 2012-06-25] (CyberLink)
S3 ewsercd; C:\Windows\system32\DRIVERS\ewsercd.sys [112896 2013-06-11] (Huawei Technologies Co., Ltd.)
R3 ewusbnet; C:\Windows\system32\DRIVERS\ewusbnet.sys [138752 2013-07-31] (Huawei Technologies Co., Ltd.)
R3 ewusbnet; C:\Windows\SysWow64\DRIVERS\ewusbnet.sys [138752 2013-07-31] (Huawei Technologies Co., Ltd.)
S3 ew_hwusbdev; C:\Windows\SysWow64\DRIVERS\ew_hwusbdev.sys [117248 2013-07-31] (Huawei Technologies Co., Ltd.)
R3 hwdatacard; C:\Windows\SysWow64\DRIVERS\ewusbmdm.sys [121600 2013-07-31] (Huawei Technologies Co., Ltd.)
S3 iaLPSSi_GPIO; C:\Windows\System32\drivers\iaLPSSi_GPIO.sys [24568 2013-07-30] (Intel Corporation)
S3 iaLPSSi_I2C; C:\Windows\System32\drivers\iaLPSSi_I2C.sys [99320 2013-07-25] (Intel Corporation)
S0 iaStorAV; C:\Windows\System32\drivers\iaStorAV.sys [651248 2013-08-10] (Intel Corporation)
R0 intelpep; C:\Windows\System32\drivers\intelpep.sys [39768 2013-09-30] (Microsoft Corporation)
S0 LSI_SAS3; C:\Windows\System32\drivers\lsi_sas3.sys [81760 2013-08-22] (LSI Corporation)
R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
R3 NdisVirtualBus; C:\Windows\System32\drivers\NdisVirtualBus.sys [16384 2013-08-22] (Microsoft Corporation)
S3 netvsc; C:\Windows\system32\DRIVERS\netvsc63.sys [87040 2013-08-22] (Microsoft Corporation)
R3 RadioHIDMini; C:\Windows\System32\drivers\RadioHIDMini.sys [23408 2012-07-27] (Windows (R) Win 7 DDK provider)
S3 ReFS; C:\Windows\System32\Drivers\ReFS.sys [924512 2013-08-22] (Microsoft Corporation)
S3 SerCx2; C:\Windows\System32\drivers\SerCx2.sys [146272 2013-08-22] (Microsoft Corporation)
S0 stornvme; C:\Windows\System32\drivers\stornvme.sys [56672 2013-08-22] (Microsoft Corporation)
S3 UEFI; C:\Windows\System32\drivers\UEFI.sys [26976 2013-08-22] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [124256 2013-08-22] (Microsoft Corporation)
S3 BTATH_LWFLT; \SystemRoot\system32\DRIVERS\btath_lwflt.sys [x]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-11-15 11:01 - 2013-11-15 11:01 - 00001645 _____ C:\Users\Saturn\Desktop\JRT.txt
2013-11-15 10:51 - 2013-11-15 10:51 - 00000000 ____D C:\WINDOWS\ERUNT
2013-11-15 10:47 - 2013-11-15 10:50 - 01034531 _____ (Thisisu) C:\Users\Saturn\Downloads\JRT.exe
2013-11-15 08:32 - 2013-11-15 09:38 - 05744657 _____ (pdfforge GmbH) C:\Users\Saturn\Downloads\PDFCreator-1_7_1_setup.exe
2013-11-14 21:48 - 2013-11-14 22:52 - 00000000 ____D C:\AdwCleaner
2013-11-14 21:30 - 2013-11-14 21:42 - 01085542 _____ C:\Users\Saturn\Downloads\adwcleaner.exe
2013-11-14 20:40 - 2013-11-14 20:40 - 00000000 ____D C:\Users\Saturn\AppData\Roaming\Malwarebytes
2013-11-14 20:39 - 2013-11-14 20:39 - 00001121 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-11-14 20:39 - 2013-11-14 20:39 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-11-14 20:39 - 2013-11-14 20:39 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-11-14 20:39 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbam.sys
2013-11-14 20:12 - 2013-11-14 20:38 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Saturn\Downloads\mbam-setup-1.75.0.1300 (1).exe
2013-11-14 19:44 - 2013-11-14 19:52 - 02594124 _____ (Malwarebytes Corporation ) C:\Users\Saturn\Downloads\mbam-setup-1.75.0.1300.exe
2013-11-13 19:37 - 2013-11-13 19:37 - 00000000 ____D C:\Users\Saturn\Desktop\How to spot a dangerous man
2013-11-13 18:25 - 2013-11-14 07:25 - 00000097 _____ C:\Users\Saturn\AppData\Roaming\WB.CFG
2013-11-13 18:25 - 2013-11-14 07:25 - 00000006 _____ C:\Users\Saturn\AppData\Roaming\WBPU-TTL.DAT
2013-11-13 18:13 - 2013-11-13 18:15 - 00031780 _____ C:\Users\Saturn\Downloads\Addition.txt
2013-11-13 18:11 - 2013-11-15 11:32 - 00017978 _____ C:\Users\Saturn\Downloads\FRST.txt
2013-11-13 18:11 - 2013-11-13 18:11 - 00000000 ____D C:\FRST
2013-11-13 18:02 - 2013-11-13 18:10 - 01957610 _____ (Farbar) C:\Users\Saturn\Downloads\FRST64.exe
2013-11-13 15:53 - 2013-11-13 15:55 - 00053788 _____ C:\Users\Saturn\Downloads\ZipExtractorSetup.exe
2013-11-13 10:52 - 2013-10-19 09:08 - 23212544 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2013-11-13 10:52 - 2013-10-19 07:37 - 17142784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2013-11-13 10:52 - 2013-10-19 07:02 - 02764288 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2013-11-13 10:52 - 2013-10-19 05:37 - 12995584 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2013-11-13 10:52 - 2013-10-19 04:56 - 11220992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2013-11-13 10:52 - 2013-10-19 04:23 - 01394176 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2013-11-13 10:51 - 2013-10-19 06:37 - 00111616 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwcollector.exe
2013-11-13 10:51 - 2013-10-19 06:19 - 00218624 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2013-11-13 10:51 - 2013-10-19 06:10 - 05765120 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2013-11-13 10:51 - 2013-10-19 05:52 - 02166272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2013-11-13 10:51 - 2013-10-19 05:44 - 04240384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2013-11-13 10:51 - 2013-10-19 05:31 - 01993728 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2013-11-13 10:51 - 2013-10-19 04:55 - 01926656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2013-11-13 10:51 - 2013-10-19 04:53 - 02332160 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2013-11-13 10:51 - 2013-10-19 04:09 - 01818112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2013-11-13 10:51 - 2013-10-19 04:02 - 01156608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2013-11-13 07:33 - 2013-10-13 03:48 - 00136536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wfplwfs.sys
2013-11-13 07:33 - 2013-10-12 22:48 - 00828416 _____ (Microsoft Corporation) C:\WINDOWS\system32\BFE.DLL
2013-11-13 07:33 - 2013-10-12 22:34 - 01104384 _____ (Microsoft Corporation) C:\WINDOWS\system32\IKEEXT.DLL
2013-11-13 07:31 - 2013-10-05 15:21 - 01341288 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll
2013-11-13 07:31 - 2013-10-05 09:39 - 01067008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32.dll
2013-11-13 07:21 - 2013-10-16 16:58 - 01943536 _____ (Microsoft Corporation) C:\WINDOWS\system32\crypt32.dll
2013-11-13 07:21 - 2013-10-16 14:54 - 01581968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\crypt32.dll
2013-11-12 15:24 - 2013-11-15 09:50 - 00015344 _____ C:\WINDOWS\PFRO.log
2013-11-12 11:16 - 2013-11-12 11:16 - 00000000 ____D C:\ProgramData\CheckPoint
2013-11-12 11:07 - 2013-11-12 11:13 - 02462696 _____ (Check Point Software Technologies LTD) C:\Users\Saturn\Downloads\zafwSetupWeb_120_104_000.exe
2013-11-12 06:37 - 2013-11-13 10:26 - 00000680 _____ C:\WINDOWS\setupact.log
2013-11-12 06:37 - 2013-11-12 06:37 - 00000000 _____ C:\WINDOWS\setuperr.log
2013-11-12 06:32 - 2013-11-12 06:32 - 753001719 _____ C:\WINDOWS\MEMORY.DMP
2013-11-12 06:32 - 2013-11-12 06:32 - 00743480 _____ C:\WINDOWS\Minidump\111213-27078-01.dmp
2013-11-12 06:32 - 2013-11-12 06:32 - 00000000 ____D C:\WINDOWS\Minidump
2013-11-11 17:41 - 2013-11-11 17:41 - 103792856 _____ C:\WINDOWS\SysWOW64\䔠旵Lÿ
2013-11-10 11:02 - 2013-11-13 07:44 - 00000000 ___RD C:\WINDOWS\BrowserChoice
2013-11-08 20:45 - 2013-11-08 20:45 - 00004096 ____H C:\Users\Saturn\AppData\Local\keyfile3.drm
2013-11-08 12:23 - 2013-11-08 12:23 - 00001450 _____ C:\Users\Saturn\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2013-11-08 12:22 - 2013-11-08 12:22 - 00000020 ___SH C:\Users\Saturn\ntuser.ini
2013-11-08 12:20 - 2013-11-08 12:20 - 00000000 _SHDL C:\Users\Default\Vorlagen
2013-11-08 12:20 - 2013-11-08 12:20 - 00000000 _SHDL C:\Users\Default\Startmenü
2013-11-08 12:20 - 2013-11-08 12:20 - 00000000 _SHDL C:\Users\Default\Netzwerkumgebung
2013-11-08 12:20 - 2013-11-08 12:20 - 00000000 _SHDL C:\Users\Default\Lokale Einstellungen
2013-11-08 12:20 - 2013-11-08 12:20 - 00000000 _SHDL C:\Users\Default\Eigene Dateien
2013-11-08 12:20 - 2013-11-08 12:20 - 00000000 _SHDL C:\Users\Default\Druckumgebung
2013-11-08 12:20 - 2013-11-08 12:20 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Musik
2013-11-08 12:20 - 2013-11-08 12:20 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Bilder
2013-11-08 12:20 - 2013-11-08 12:20 - 00000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2013-11-08 12:20 - 2013-11-08 12:20 - 00000000 _SHDL C:\Users\Default\AppData\Local\Verlauf
2013-11-08 12:20 - 2013-11-08 12:20 - 00000000 _SHDL C:\Users\Default\AppData\Local\Anwendungsdaten
2013-11-08 12:20 - 2013-11-08 12:20 - 00000000 _SHDL C:\Users\Default\Anwendungsdaten
2013-11-08 12:20 - 2013-11-08 12:20 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Musik
2013-11-08 12:20 - 2013-11-08 12:20 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Bilder
2013-11-08 12:20 - 2013-11-08 12:20 - 00000000 _SHDL C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2013-11-08 12:20 - 2013-11-08 12:20 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Verlauf
2013-11-08 12:20 - 2013-11-08 12:20 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Anwendungsdaten
2013-11-08 12:19 - 2013-11-15 11:12 - 01554239 _____ C:\WINDOWS\WindowsUpdate.log
2013-11-08 12:18 - 2013-11-08 12:18 - 00022960 _____ C:\WINDOWS\system32\emptyregdb.dat
2013-11-08 11:57 - 2013-11-08 11:57 - 00000000 ____D C:\WINDOWS\system32\config\bbimigrate
2013-11-08 11:56 - 2013-11-11 06:46 - 00000000 ____D C:\Users\Saturn
2013-11-08 11:56 - 2013-11-11 06:44 - 00000000 ___RD C:\Users\Saturn\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2013-11-08 11:56 - 2013-11-11 06:44 - 00000000 ___RD C:\Users\Saturn\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2013-11-08 11:56 - 2013-11-11 06:44 - 00000000 ___RD C:\Users\Saturn\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2013-11-08 11:56 - 2013-11-08 12:19 - 00020958 _____ C:\WINDOWS\diagwrn.xml
2013-11-08 11:56 - 2013-11-08 12:19 - 00020958 _____ C:\WINDOWS\diagerr.xml
2013-11-08 11:56 - 2013-11-08 11:56 - 00000000 _SHDL C:\Users\Saturn\Vorlagen
2013-11-08 11:56 - 2013-11-08 11:56 - 00000000 _SHDL C:\Users\Saturn\Startmenü
2013-11-08 11:56 - 2013-11-08 11:56 - 00000000 _SHDL C:\Users\Saturn\Netzwerkumgebung
2013-11-08 11:56 - 2013-11-08 11:56 - 00000000 _SHDL C:\Users\Saturn\Lokale Einstellungen
2013-11-08 11:56 - 2013-11-08 11:56 - 00000000 _SHDL C:\Users\Saturn\Eigene Dateien
2013-11-08 11:56 - 2013-11-08 11:56 - 00000000 _SHDL C:\Users\Saturn\Druckumgebung
2013-11-08 11:56 - 2013-11-08 11:56 - 00000000 _SHDL C:\Users\Saturn\Documents\Eigene Musik
2013-11-08 11:56 - 2013-11-08 11:56 - 00000000 _SHDL C:\Users\Saturn\Documents\Eigene Bilder
2013-11-08 11:56 - 2013-11-08 11:56 - 00000000 _SHDL C:\Users\Saturn\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2013-11-08 11:56 - 2013-11-08 11:56 - 00000000 _SHDL C:\Users\Saturn\AppData\Local\Verlauf
2013-11-08 11:56 - 2013-11-08 11:56 - 00000000 _SHDL C:\Users\Saturn\AppData\Local\Anwendungsdaten
2013-11-08 11:56 - 2013-11-08 11:56 - 00000000 _SHDL C:\Users\Saturn\Anwendungsdaten
2013-11-08 11:56 - 2013-08-22 16:36 - 00000000 ____D C:\Users\Saturn\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2013-11-08 11:51 - 2013-11-08 11:51 - 00000000 ____D C:\WINDOWS\SysWOW64\RTCOM
2013-11-08 11:51 - 2013-11-08 11:51 - 00000000 ____D C:\WINDOWS\system32\SRSLabs
2013-11-08 11:51 - 2013-11-08 11:51 - 00000000 ____D C:\Program Files\Realtek
2013-11-08 11:50 - 2013-11-08 11:50 - 00000264 _____ C:\WINDOWS\Tasks\Synaptics TouchPad Enhancements.job
2013-11-08 11:50 - 2013-11-08 11:50 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf
2013-11-08 11:50 - 2013-11-08 11:50 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_SynTP_01009.Wdf
2013-11-08 11:50 - 2013-11-08 11:50 - 00000000 ____D C:\Program Files\Synaptics
2013-11-08 11:50 - 2013-11-08 11:50 - 00000000 ____D C:\Program Files\Common Files\ATI Technologies
2013-11-08 11:50 - 2013-11-08 11:50 - 00000000 ____D C:\Program Files\AMD
2013-11-08 11:48 - 2013-11-11 07:01 - 00000000 ___DC C:\WINDOWS\Panther
2013-11-08 11:48 - 2013-11-08 11:48 - 00000000 __SHD C:\Recovery
2013-11-08 11:46 - 2013-11-08 11:46 - 02144768 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2013-11-08 11:46 - 2013-11-08 11:46 - 02140888 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll
2013-11-08 11:46 - 2013-11-08 11:46 - 01765384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11.dll
2013-11-08 11:46 - 2013-11-08 11:46 - 01765376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll
2013-11-08 11:46 - 2013-11-08 11:46 - 01537880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2013-11-08 11:46 - 2013-11-08 11:46 - 01286552 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll
2013-11-08 11:46 - 2013-11-08 11:46 - 01217024 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Streaming.dll
2013-11-08 11:46 - 2013-11-08 11:46 - 01018960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll
2013-11-08 11:46 - 2013-11-08 11:46 - 00977408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Streaming.dll
2013-11-08 11:46 - 2013-11-08 11:46 - 00909312 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmCoreR.dll
2013-11-08 11:46 - 2013-11-08 11:46 - 00872840 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfplat.dll
2013-11-08 11:46 - 2013-11-08 11:46 - 00837120 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSShared.dll
2013-11-08 11:46 - 2013-11-08 11:46 - 00698880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSShared.dll
2013-11-08 11:46 - 2013-11-08 11:46 - 00698232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfplat.dll
2013-11-08 11:46 - 2013-11-08 11:46 - 00621056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MrmCoreR.dll
2013-11-08 11:46 - 2013-11-08 11:46 - 00516496 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll
2013-11-08 11:46 - 2013-11-08 11:46 - 00406400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxgi.dll
2013-11-08 11:46 - 2013-11-08 11:46 - 00382808 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2013-11-08 11:46 - 2013-11-08 11:46 - 00294400 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Sensors.dll
2013-11-08 11:46 - 2013-11-08 11:46 - 00249856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2013-11-08 11:46 - 2013-11-08 11:46 - 00225792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Sensors.dll
2013-11-08 11:46 - 2013-11-08 11:46 - 00189952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2013-11-08 11:45 - 2013-11-08 11:45 - 00262144 _____ C:\WINDOWS\system32\config\userdiff
2013-11-08 11:42 - 2013-11-08 11:42 - 00000000 ____D C:\WINDOWS\SysWOW64\XPSViewer
2013-11-08 11:42 - 2013-11-08 11:42 - 00000000 ____D C:\Program Files\Reference Assemblies
2013-11-08 11:42 - 2013-11-08 11:42 - 00000000 ____D C:\Program Files\MSBuild
2013-11-08 11:42 - 2013-11-08 11:42 - 00000000 ____D C:\Program Files (x86)\Reference Assemblies
2013-11-08 11:42 - 2013-11-08 11:42 - 00000000 ____D C:\Program Files (x86)\MSBuild
2013-11-08 11:41 - 2013-08-03 05:48 - 01166520 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationNative_v0300.dll
2013-11-08 11:41 - 2013-08-03 05:48 - 00124112 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2013-11-08 11:41 - 2013-08-03 05:48 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe
2013-11-08 11:41 - 2013-08-03 05:41 - 00778936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationNative_v0300.dll
2013-11-08 11:41 - 2013-08-03 05:41 - 00102608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2013-11-08 11:41 - 2013-08-03 05:41 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TsWpfWrp.exe
2013-11-08 10:18 - 2013-11-08 10:18 - 04954736 _____ (Microsoft Corporation) C:\Users\Saturn\Downloads\WindowsUpgradeAssistant.exe
2013-11-08 06:47 - 2013-11-08 06:47 - 00001956 _____ C:\Users\Public\Desktop\SW Update.lnk
2013-11-08 06:36 - 2013-11-08 06:36 - 00001582 _____ C:\Users\Public\Desktop\Free YouTube to MP3 Converter.lnk
2013-11-08 06:35 - 2013-11-08 06:36 - 00000000 ____D C:\Program Files (x86)\DVDVideoSoft
2013-11-08 06:31 - 2013-11-08 06:33 - 32206488 _____ (DVDVideoSoft Ltd. ) C:\Users\Saturn\Downloads\FreeYouTubeToMP3Converter.exe
2013-11-07 16:20 - 2013-11-07 16:32 - 03864904 _____ (Secunia) C:\Users\Saturn\Downloads\PSISetup_30b8013.exe
2013-11-07 09:04 - 2013-11-11 14:00 - 00000000 ____D C:\Users\Saturn\Documents\Familie
2013-10-23 13:48 - 2013-11-04 10:59 - 00000000 ____D C:\Users\Saturn\Documents\Müller-Künnemann
2013-10-18 08:32 - 2013-10-18 08:32 - 00000000 ____D C:\ProgramData\DriverGenius
2013-10-18 07:59 - 2013-10-18 08:29 - 11360472 _____ (Driver-Soft Inc. ) C:\Users\Saturn\Downloads\Driver_Genius_Professional_DE_PPC_Content.exe
2013-10-16 13:15 - 2013-10-16 13:43 - 00000000 ____D C:\Users\Saturn\Downloads\Jojo_Moyes-Ein_Ganzes_Halbes_Jahr-Abook-DE-2013-NoGroup-CannaPower
2013-10-16 13:11 - 2013-10-16 13:11 - 00000000 ____D C:\Users\Saturn\Downloads\Jojo_Moyes-Ein_Ganzes_Halbes_Jahr-Abook-DE-2013-NoGroup-CannaPower (1)
2013-10-16 09:26 - 2013-10-16 09:26 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_User_WpdMtpDr_01_11_00.Wdf
==================== One Month Modified Files and Folders =======
2013-11-15 11:32 - 2013-11-13 18:11 - 00017978 _____ C:\Users\Saturn\Downloads\FRST.txt
2013-11-15 11:17 - 2013-09-03 16:13 - 00000884 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2013-11-15 11:15 - 2013-01-25 04:10 - 00000360 _____ C:\WINDOWS\Tasks\Xerox PhotoCafe Communicator.job
2013-11-15 11:12 - 2013-11-08 12:19 - 01554239 _____ C:\WINDOWS\WindowsUpdate.log
2013-11-15 11:06 - 2013-05-14 01:56 - 00003594 _____ C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-2669165515-361187302-876288576-1001
2013-11-15 11:01 - 2013-11-15 11:01 - 00001645 _____ C:\Users\Saturn\Desktop\JRT.txt
2013-11-15 11:01 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\AppReadiness
2013-11-15 11:00 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\sru
2013-11-15 10:51 - 2013-11-15 10:51 - 00000000 ____D C:\WINDOWS\ERUNT
2013-11-15 10:50 - 2013-11-15 10:47 - 01034531 _____ (Thisisu) C:\Users\Saturn\Downloads\JRT.exe
2013-11-15 10:02 - 2013-05-14 01:46 - 00000000 ____D C:\Users\Saturn\AppData\Local\Packages
2013-11-15 10:00 - 2013-01-25 03:48 - 00000870 _____ C:\WINDOWS\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d.job
2013-11-15 09:54 - 2013-01-25 03:58 - 00000000 ____D C:\ProgramData\WinClon
2013-11-15 09:50 - 2013-11-12 15:24 - 00015344 _____ C:\WINDOWS\PFRO.log
2013-11-15 09:50 - 2013-08-22 15:45 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2013-11-15 09:50 - 2013-08-22 14:25 - 00524288 ___SH C:\WINDOWS\system32\config\BBI
2013-11-15 09:50 - 2013-01-25 03:48 - 00000868 _____ C:\WINDOWS\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon.job
2013-11-15 09:48 - 2013-11-12 11:16 - 00000000 ____D C:\ProgramData\CheckPoint
2013-11-15 09:38 - 2013-11-15 08:32 - 05744657 _____ (pdfforge GmbH) C:\Users\Saturn\Downloads\PDFCreator-1_7_1_setup.exe
2013-11-14 22:52 - 2013-11-14 21:48 - 00000000 ____D C:\AdwCleaner
2013-11-14 21:42 - 2013-11-14 21:30 - 01085542 _____ C:\Users\Saturn\Downloads\adwcleaner.exe
2013-11-14 20:40 - 2013-11-14 20:40 - 00000000 ____D C:\Users\Saturn\AppData\Roaming\Malwarebytes
2013-11-14 20:39 - 2013-11-14 20:39 - 00001121 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-11-14 20:39 - 2013-11-14 20:39 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-11-14 20:39 - 2013-11-14 20:39 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-11-14 20:38 - 2013-11-14 20:12 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Saturn\Downloads\mbam-setup-1.75.0.1300 (1).exe
2013-11-14 19:52 - 2013-11-14 19:44 - 02594124 _____ (Malwarebytes Corporation ) C:\Users\Saturn\Downloads\mbam-setup-1.75.0.1300.exe
2013-11-14 07:25 - 2013-11-13 18:25 - 00000097 _____ C:\Users\Saturn\AppData\Roaming\WB.CFG
2013-11-14 07:25 - 2013-11-13 18:25 - 00000006 _____ C:\Users\Saturn\AppData\Roaming\WBPU-TTL.DAT
2013-11-13 23:15 - 2013-09-30 05:14 - 01780340 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2013-11-13 23:15 - 2013-09-30 04:56 - 00766620 _____ C:\WINDOWS\system32\perfh007.dat
2013-11-13 23:15 - 2013-09-30 04:56 - 00159902 _____ C:\WINDOWS\system32\perfc007.dat
2013-11-13 19:37 - 2013-11-13 19:37 - 00000000 ____D C:\Users\Saturn\Desktop\How to spot a dangerous man
2013-11-13 18:15 - 2013-11-13 18:13 - 00031780 _____ C:\Users\Saturn\Downloads\Addition.txt
2013-11-13 18:11 - 2013-11-13 18:11 - 00000000 ____D C:\FRST
2013-11-13 18:10 - 2013-11-13 18:02 - 01957610 _____ (Farbar) C:\Users\Saturn\Downloads\FRST64.exe
2013-11-13 15:55 - 2013-11-13 15:53 - 00053788 _____ C:\Users\Saturn\Downloads\ZipExtractorSetup.exe
2013-11-13 11:51 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\rescache
2013-11-13 11:00 - 2013-09-02 17:32 - 00000000 ____D C:\WINDOWS\system32\MRT
2013-11-13 10:58 - 2013-06-11 10:48 - 82896128 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2013-11-13 10:26 - 2013-11-12 06:37 - 00000680 _____ C:\WINDOWS\setupact.log
2013-11-13 07:44 - 2013-11-10 11:02 - 00000000 ___RD C:\WINDOWS\BrowserChoice
2013-11-12 11:13 - 2013-11-12 11:07 - 02462696 _____ (Check Point Software Technologies LTD) C:\Users\Saturn\Downloads\zafwSetupWeb_120_104_000.exe
2013-11-12 06:37 - 2013-11-12 06:37 - 00000000 _____ C:\WINDOWS\setuperr.log
2013-11-12 06:32 - 2013-11-12 06:32 - 753001719 _____ C:\WINDOWS\MEMORY.DMP
2013-11-12 06:32 - 2013-11-12 06:32 - 00743480 _____ C:\WINDOWS\Minidump\111213-27078-01.dmp
2013-11-12 06:32 - 2013-11-12 06:32 - 00000000 ____D C:\WINDOWS\Minidump
2013-11-11 22:04 - 2013-10-11 09:25 - 00000000 ____D C:\Users\Saturn\Documents\Innere Stärke
2013-11-11 17:41 - 2013-11-11 17:41 - 103792856 _____ C:\WINDOWS\SysWOW64\䔠旵Lÿ
2013-11-11 14:00 - 2013-11-07 09:04 - 00000000 ____D C:\Users\Saturn\Documents\Familie
2013-11-11 07:01 - 2013-11-08 11:48 - 00000000 ___DC C:\WINDOWS\Panther
2013-11-11 06:46 - 2013-11-08 11:56 - 00000000 ____D C:\Users\Saturn
2013-11-11 06:44 - 2013-11-08 11:56 - 00000000 ___RD C:\Users\Saturn\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2013-11-11 06:44 - 2013-11-08 11:56 - 00000000 ___RD C:\Users\Saturn\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2013-11-11 06:44 - 2013-11-08 11:56 - 00000000 ___RD C:\Users\Saturn\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2013-11-11 06:44 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\WinMetadata
2013-11-11 06:26 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\registration
2013-11-11 06:26 - 2013-08-22 14:36 - 00000000 ____D C:\WINDOWS\system32\Sysprep
2013-11-10 09:11 - 2013-06-11 03:22 - 00000000 ____D C:\Users\Saturn\AppData\Local\CrashDumps
2013-11-08 20:45 - 2013-11-08 20:45 - 00004096 ____H C:\Users\Saturn\AppData\Local\keyfile3.drm
2013-11-08 19:06 - 2013-09-02 15:23 - 00000000 ____D C:\Users\Saturn\AppData\Local\Mozilla
2013-11-08 13:20 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\restore
2013-11-08 12:47 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\tracing
2013-11-08 12:23 - 2013-11-08 12:23 - 00001450 _____ C:\Users\Saturn\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2013-11-08 12:23 - 2013-05-14 01:49 - 00000000 ___RD C:\Users\Saturn\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-11-08 12:23 - 2013-05-14 01:49 - 00000000 ___RD C:\Users\Saturn\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2013-11-08 12:22 - 2013-11-08 12:22 - 00000020 ___SH C:\Users\Saturn\ntuser.ini
2013-11-08 12:20 - 2013-11-08 12:20 - 00000000 _SHDL C:\Users\Default\Vorlagen
2013-11-08 12:20 - 2013-11-08 12:20 - 00000000 _SHDL C:\Users\Default\Startmenü
2013-11-08 12:20 - 2013-11-08 12:20 - 00000000 _SHDL C:\Users\Default\Netzwerkumgebung
2013-11-08 12:20 - 2013-11-08 12:20 - 00000000 _SHDL C:\Users\Default\Lokale Einstellungen
2013-11-08 12:20 - 2013-11-08 12:20 - 00000000 _SHDL C:\Users\Default\Eigene Dateien
2013-11-08 12:20 - 2013-11-08 12:20 - 00000000 _SHDL C:\Users\Default\Druckumgebung
2013-11-08 12:20 - 2013-11-08 12:20 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Musik
2013-11-08 12:20 - 2013-11-08 12:20 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Bilder
2013-11-08 12:20 - 2013-11-08 12:20 - 00000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2013-11-08 12:20 - 2013-11-08 12:20 - 00000000 _SHDL C:\Users\Default\AppData\Local\Verlauf
2013-11-08 12:20 - 2013-11-08 12:20 - 00000000 _SHDL C:\Users\Default\AppData\Local\Anwendungsdaten
2013-11-08 12:20 - 2013-11-08 12:20 - 00000000 _SHDL C:\Users\Default\Anwendungsdaten
2013-11-08 12:20 - 2013-11-08 12:20 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Musik
2013-11-08 12:20 - 2013-11-08 12:20 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Bilder
2013-11-08 12:20 - 2013-11-08 12:20 - 00000000 _SHDL C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2013-11-08 12:20 - 2013-11-08 12:20 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Verlauf
2013-11-08 12:20 - 2013-11-08 12:20 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Anwendungsdaten
2013-11-08 12:20 - 2013-08-22 16:36 - 00000000 ____D C:\Program Files\Windows NT
2013-11-08 12:20 - 2013-08-22 14:36 - 00000000 __RHD C:\Users\Default
2013-11-08 12:19 - 2013-11-08 11:56 - 00020958 _____ C:\WINDOWS\diagwrn.xml
2013-11-08 12:19 - 2013-11-08 11:56 - 00020958 _____ C:\WINDOWS\diagerr.xml
2013-11-08 12:18 - 2013-11-08 12:18 - 00022960 _____ C:\WINDOWS\system32\emptyregdb.dat
2013-11-08 12:08 - 2013-08-22 16:36 - 00000000 __RSD C:\WINDOWS\Media
2013-11-08 12:08 - 2013-01-25 03:58 - 01804472 _____ C:\WINDOWS\SysWOW64\PerfStringBackup.INI
2013-11-08 12:07 - 2013-08-22 16:36 - 00000000 __RHD C:\Users\Public\Libraries
2013-11-08 12:03 - 2013-08-22 15:44 - 02194128 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2013-11-08 12:02 - 2013-08-22 14:25 - 00008192 ___SH C:\WINDOWS\system32\config\ELAM
2013-11-08 12:01 - 2012-07-26 06:37 - 00000000 ____D C:\Users\Default.migrated
2013-11-08 12:00 - 2013-09-30 04:56 - 00000000 ____D C:\WINDOWS\SysWOW64\WCN
2013-11-08 12:00 - 2013-09-30 04:56 - 00000000 ____D C:\WINDOWS\SysWOW64\sysprep
2013-11-08 12:00 - 2013-09-30 04:56 - 00000000 ____D C:\WINDOWS\system32\WCN
2013-11-08 12:00 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\SysWOW64\migwiz
2013-11-08 12:00 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\SysWOW64\IME
2013-11-08 12:00 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2013-11-08 12:00 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\spool
2013-11-08 12:00 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\NDF
2013-11-08 12:00 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\MUI
2013-11-08 12:00 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\IME
2013-11-08 12:00 - 2013-08-22 14:36 - 00000000 ____D C:\WINDOWS\SysWOW64\SMI
2013-11-08 12:00 - 2013-08-22 14:36 - 00000000 ____D C:\WINDOWS\system32\oobe
2013-11-08 12:00 - 2013-01-25 03:46 - 00000000 ____D C:\WINDOWS\SysWOW64\sda
2013-11-08 11:59 - 2013-09-30 04:59 - 00000000 ____D C:\WINDOWS\ShellNew
2013-11-08 11:59 - 2013-08-22 16:43 - 00000000 ____D C:\WINDOWS\DigitalLocker
2013-11-08 11:59 - 2013-08-22 16:36 - 00000000 __SHD C:\Program Files\Windows Sidebar
2013-11-08 11:59 - 2013-08-22 16:36 - 00000000 __SHD C:\Program Files (x86)\Windows Sidebar
2013-11-08 11:59 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\PolicyDefinitions
2013-11-08 11:59 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\IME
2013-11-08 11:59 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\Help
2013-11-08 11:59 - 2013-08-22 16:36 - 00000000 ____D C:\Program Files\Common Files\System
2013-11-08 11:59 - 2013-08-22 16:36 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
2013-11-08 11:59 - 2013-01-25 20:09 - 00000000 ____D C:\WINDOWS\en-GB
2013-11-08 11:59 - 2013-01-25 04:10 - 00000000 ____D C:\WINDOWS\de
2013-11-08 11:59 - 2013-01-25 04:09 - 00000000 ____D C:\WINDOWS\it
2013-11-08 11:59 - 2013-01-25 04:09 - 00000000 ____D C:\WINDOWS\fr
2013-11-08 11:59 - 2012-08-05 22:11 - 00000000 ____D C:\ProgramData\PRICache
2013-11-08 11:57 - 2013-11-08 11:57 - 00000000 ____D C:\WINDOWS\system32\config\bbimigrate
2013-11-08 11:57 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\Recovery
2013-11-08 11:56 - 2013-11-08 11:56 - 00000000 _SHDL C:\Users\Saturn\Vorlagen
2013-11-08 11:56 - 2013-11-08 11:56 - 00000000 _SHDL C:\Users\Saturn\Startmenü
2013-11-08 11:56 - 2013-11-08 11:56 - 00000000 _SHDL C:\Users\Saturn\Netzwerkumgebung
2013-11-08 11:56 - 2013-11-08 11:56 - 00000000 _SHDL C:\Users\Saturn\Lokale Einstellungen
2013-11-08 11:56 - 2013-11-08 11:56 - 00000000 _SHDL C:\Users\Saturn\Eigene Dateien
2013-11-08 11:56 - 2013-11-08 11:56 - 00000000 _SHDL C:\Users\Saturn\Druckumgebung
2013-11-08 11:56 - 2013-11-08 11:56 - 00000000 _SHDL C:\Users\Saturn\Documents\Eigene Musik
2013-11-08 11:56 - 2013-11-08 11:56 - 00000000 _SHDL C:\Users\Saturn\Documents\Eigene Bilder
2013-11-08 11:56 - 2013-11-08 11:56 - 00000000 _SHDL C:\Users\Saturn\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2013-11-08 11:56 - 2013-11-08 11:56 - 00000000 _SHDL C:\Users\Saturn\AppData\Local\Verlauf
2013-11-08 11:56 - 2013-11-08 11:56 - 00000000 _SHDL C:\Users\Saturn\AppData\Local\Anwendungsdaten
2013-11-08 11:56 - 2013-11-08 11:56 - 00000000 _SHDL C:\Users\Saturn\Anwendungsdaten
2013-11-08 11:51 - 2013-11-08 11:51 - 00000000 ____D C:\WINDOWS\SysWOW64\RTCOM
2013-11-08 11:51 - 2013-11-08 11:51 - 00000000 ____D C:\WINDOWS\system32\SRSLabs
2013-11-08 11:51 - 2013-11-08 11:51 - 00000000 ____D C:\Program Files\Realtek
2013-11-08 11:50 - 2013-11-08 11:50 - 00000264 _____ C:\WINDOWS\Tasks\Synaptics TouchPad Enhancements.job
2013-11-08 11:50 - 2013-11-08 11:50 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf
2013-11-08 11:50 - 2013-11-08 11:50 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_SynTP_01009.Wdf
2013-11-08 11:50 - 2013-11-08 11:50 - 00000000 ____D C:\Program Files\Synaptics
2013-11-08 11:50 - 2013-11-08 11:50 - 00000000 ____D C:\Program Files\Common Files\ATI Technologies
2013-11-08 11:50 - 2013-11-08 11:50 - 00000000 ____D C:\Program Files\AMD
2013-11-08 11:48 - 2013-11-08 11:48 - 00000000 __SHD C:\Recovery
2013-11-08 11:47 - 2013-08-22 16:36 - 00262144 _____ C:\WINDOWS\system32\config\BCD-Template
2013-11-08 11:46 - 2013-11-08 11:46 - 02144768 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2013-11-08 11:46 - 2013-11-08 11:46 - 02140888 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll
2013-11-08 11:46 - 2013-11-08 11:46 - 01765384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11.dll
2013-11-08 11:46 - 2013-11-08 11:46 - 01765376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll
2013-11-08 11:46 - 2013-11-08 11:46 - 01537880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2013-11-08 11:46 - 2013-11-08 11:46 - 01286552 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll
2013-11-08 11:46 - 2013-11-08 11:46 - 01217024 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Streaming.dll
2013-11-08 11:46 - 2013-11-08 11:46 - 01018960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll
2013-11-08 11:46 - 2013-11-08 11:46 - 00977408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Streaming.dll
2013-11-08 11:46 - 2013-11-08 11:46 - 00909312 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmCoreR.dll
2013-11-08 11:46 - 2013-11-08 11:46 - 00872840 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfplat.dll
2013-11-08 11:46 - 2013-11-08 11:46 - 00837120 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSShared.dll
2013-11-08 11:46 - 2013-11-08 11:46 - 00698880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSShared.dll
2013-11-08 11:46 - 2013-11-08 11:46 - 00698232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfplat.dll
2013-11-08 11:46 - 2013-11-08 11:46 - 00621056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MrmCoreR.dll
2013-11-08 11:46 - 2013-11-08 11:46 - 00516496 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll
2013-11-08 11:46 - 2013-11-08 11:46 - 00406400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxgi.dll
2013-11-08 11:46 - 2013-11-08 11:46 - 00382808 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2013-11-08 11:46 - 2013-11-08 11:46 - 00294400 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Sensors.dll
2013-11-08 11:46 - 2013-11-08 11:46 - 00249856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2013-11-08 11:46 - 2013-11-08 11:46 - 00225792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Sensors.dll
2013-11-08 11:46 - 2013-11-08 11:46 - 00189952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2013-11-08 11:46 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\WinStore
2013-11-08 11:46 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\Camera
2013-11-08 11:45 - 2013-11-08 11:45 - 00262144 _____ C:\WINDOWS\system32\config\userdiff
2013-11-08 11:42 - 2013-11-08 11:42 - 00000000 ____D C:\WINDOWS\SysWOW64\XPSViewer
2013-11-08 11:42 - 2013-11-08 11:42 - 00000000 ____D C:\Program Files\Reference Assemblies
2013-11-08 11:42 - 2013-11-08 11:42 - 00000000 ____D C:\Program Files\MSBuild
2013-11-08 11:42 - 2013-11-08 11:42 - 00000000 ____D C:\Program Files (x86)\Reference Assemblies
2013-11-08 11:42 - 2013-11-08 11:42 - 00000000 ____D C:\Program Files (x86)\MSBuild
2013-11-08 11:42 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\SysWOW64\MUI
2013-11-08 10:18 - 2013-11-08 10:18 - 04954736 _____ (Microsoft Corporation) C:\Users\Saturn\Downloads\WindowsUpgradeAssistant.exe
2013-11-08 09:29 - 2012-07-26 09:12 - 00000000 ____D C:\WINDOWS\AUInstallAgent
2013-11-08 06:47 - 2013-11-08 06:47 - 00001956 _____ C:\Users\Public\Desktop\SW Update.lnk
2013-11-08 06:36 - 2013-11-08 06:36 - 00001582 _____ C:\Users\Public\Desktop\Free YouTube to MP3 Converter.lnk
2013-11-08 06:36 - 2013-11-08 06:35 - 00000000 ____D C:\Program Files (x86)\DVDVideoSoft
2013-11-08 06:35 - 2013-10-08 18:11 - 00000000 ___RD C:\Users\Public\Desktop\DVDVideoSoft
2013-11-08 06:35 - 2013-10-08 18:11 - 00000000 ____D C:\Users\Saturn\AppData\Roaming\DVDVideoSoft
2013-11-08 06:33 - 2013-11-08 06:31 - 32206488 _____ (DVDVideoSoft Ltd. ) C:\Users\Saturn\Downloads\FreeYouTubeToMP3Converter.exe
2013-11-08 05:38 - 2013-09-03 15:52 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-11-08 05:38 - 2013-09-02 15:23 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-11-08 05:37 - 2013-09-15 19:24 - 00001004 _____ C:\Users\Public\Desktop\VLC media player.lnk
2013-11-08 05:26 - 2013-09-03 18:02 - 00000000 ____D C:\Program Files (x86)\Opera
2013-11-08 05:21 - 2013-09-03 13:32 - 00000000 ____D C:\Users\Saturn\AppData\Roaming\ALDITALKVerbindungsassistent
2013-11-07 18:33 - 2013-10-11 09:24 - 00000000 ____D C:\Users\Saturn\Documents\Übungsordner
2013-11-07 16:32 - 2013-11-07 16:20 - 03864904 _____ (Secunia) C:\Users\Saturn\Downloads\PSISetup_30b8013.exe
2013-11-06 00:31 - 2013-08-22 16:38 - 00693240 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2013-11-06 00:31 - 2013-08-22 16:38 - 00105464 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2013-11-04 11:30 - 2013-10-15 09:08 - 00000000 ___RD C:\Users\Saturn\SkyDrive
2013-11-04 10:59 - 2013-10-23 13:48 - 00000000 ____D C:\Users\Saturn\Documents\Müller-Künnemann
2013-10-19 09:08 - 2013-11-13 10:52 - 23212544 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2013-10-19 07:58 - 2013-09-15 19:24 - 00000000 ____D C:\Users\Saturn\AppData\Roaming\vlc
2013-10-19 07:37 - 2013-11-13 10:52 - 17142784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2013-10-19 07:02 - 2013-11-13 10:52 - 02764288 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2013-10-19 06:37 - 2013-11-13 10:51 - 00111616 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwcollector.exe
2013-10-19 06:19 - 2013-11-13 10:51 - 00218624 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2013-10-19 06:10 - 2013-11-13 10:51 - 05765120 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2013-10-19 05:52 - 2013-11-13 10:51 - 02166272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2013-10-19 05:44 - 2013-11-13 10:51 - 04240384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2013-10-19 05:37 - 2013-11-13 10:52 - 12995584 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2013-10-19 05:31 - 2013-11-13 10:51 - 01993728 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2013-10-19 04:56 - 2013-11-13 10:52 - 11220992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2013-10-19 04:55 - 2013-11-13 10:51 - 01926656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2013-10-19 04:53 - 2013-11-13 10:51 - 02332160 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2013-10-19 04:23 - 2013-11-13 10:52 - 01394176 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2013-10-19 04:09 - 2013-11-13 10:51 - 01818112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2013-10-19 04:02 - 2013-11-13 10:51 - 01156608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2013-10-18 08:32 - 2013-10-18 08:32 - 00000000 ____D C:\ProgramData\DriverGenius
2013-10-18 08:29 - 2013-10-18 07:59 - 11360472 _____ (Driver-Soft Inc. ) C:\Users\Saturn\Downloads\Driver_Genius_Professional_DE_PPC_Content.exe
2013-10-16 16:58 - 2013-11-13 07:21 - 01943536 _____ (Microsoft Corporation) C:\WINDOWS\system32\crypt32.dll
2013-10-16 14:54 - 2013-11-13 07:21 - 01581968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\crypt32.dll
2013-10-16 13:43 - 2013-10-16 13:15 - 00000000 ____D C:\Users\Saturn\Downloads\Jojo_Moyes-Ein_Ganzes_Halbes_Jahr-Abook-DE-2013-NoGroup-CannaPower
2013-10-16 13:11 - 2013-10-16 13:11 - 00000000 ____D C:\Users\Saturn\Downloads\Jojo_Moyes-Ein_Ganzes_Halbes_Jahr-Abook-DE-2013-NoGroup-CannaPower (1)
2013-10-16 09:26 - 2013-10-16 09:26 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_User_WpdMtpDr_01_11_00.Wdf
Files to move or delete:
====================
C:\ProgramData\MakeMarkerFile.exe
C:\Users\EasySurvey\EasySurvey.exe
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2013-11-08 11:48
==================== End Of Log ============================
|
|
16.11.2013, 11:55
| #6 |
| /// the machine /// TB-Ausbilder | Antivir: Warnung swapfile.sys konnte nicht geöffnet werdenESET Online Scanner
Downloade Dir bitte  SecurityCheck und:
und ein frisches FRST log bitte. Noch Probleme? 
__________________ --> Antivir: Warnung swapfile.sys konnte nicht geöffnet werden |
|
16.11.2013, 13:31
| #7 |
| | Antivir: Warnung swapfile.sys konnte nicht geöffnet werden Hallo schrauber, erst einmal vielen Dank für deine ganze Mühe. Leider habe ich nun ein Problem: Beim Eset-Smartinstaller bekomme ich die Nachricht: Can not get update. Is proxy configured? Ich habe nur einen Stick von Aldi mit dem ich surfe. Mein E-Mail-Account läuft über T-online.de, der Anschluss ist aber in einer anderen Wohnung. Keine Ahnung….. Kann das Problem damit zusammenhängen? LG Griselle |
|
17.11.2013, 06:47
| #8 |
| /// the machine /// TB-Ausbilder | Antivir: Warnung swapfile.sys konnte nicht geöffnet werden Nee ESET hat nen Macken. Weglassen, dafür Vollscan mit deinem AV Programm machen, dann den Rest
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
18.11.2013, 15:20
| #9 |
| | Antivir: Warnung swapfile.sys konnte nicht geöffnet werden Results of screen317's Security Check version 0.99.76 x64 (UAC is enabled) Internet Explorer 10 ``````````````Antivirus/Firewall Check:`````````````` Windows Defender Avira Desktop Antivirus up to date! `````````Anti-malware/Other Utilities Check:````````` Malwarebytes Anti-Malware Version 1.75.0.1300 Adobe Flash Player 11.9.900.117 Adobe Reader 10.1.8 Adobe Reader out of Date! Mozilla Firefox (25.0) ````````Process Check: objlist.exe by Laurent```````` Malwarebytes Anti-Malware mbamservice.exe Malwarebytes Anti-Malware mbamgui.exe Avira Antivir avgnt.exe Avira Antivir avguard.exe Malwarebytes' Anti-Malware mbamscheduler.exe `````````````````System Health check````````````````` Total Fragmentation on Drive C: % ````````````````````End of Log`````````````````````` FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 17-11-2013
Ran by Saturn (administrator) on SAMSUNG on 17-11-2013 14:52:31
Running from C:\Users\Saturn\Downloads
Windows 8.1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(AMD) C:\WINDOWS\system32\atiesrxx.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
() C:\Program Files (x86)\ALDITALKVerbindungsassistent\ALDITALKVerbindungsassistent_Service.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(APN LLC.) C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe
(Qualcomm Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\adminservice.exe
(Samsung Electronics CO., LTD.) C:\Program Files (x86)\Samsung\Settings\CmdServer\EasyLauncher.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
(Atheros) C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Samsung Electronics CO., LTD.) C:\ProgramData\Samsung\SW Update Service\SWMAgent.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(AMD) C:\WINDOWS\system32\atieclxx.exe
() C:\Program Files (x86)\Samsung\Settings\CmdServer\EasySettingsCmdServer.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Samsung Electronics CO., LTD.) C:\Program Files (x86)\Samsung\Settings\sSettings.exe
(Intel Corporation) C:\WINDOWS\system32\igfxext.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Qualcomm Atheros) C:\Program Files (x86)\Bluetooth Suite\BtTray.exe
(Atheros Communications) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe
() C:\Program Files (x86)\ALDITALKVerbindungsassistent\ALDITALKVerbindungsassistent_Launcher.exe
(CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe
(CyberLink) C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe
(Intel Corporation) C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(APN) C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe
(Geek Software GmbH) C:\Program Files (x86)\PDF24\pdf24.exe
() C:\Program Files (x86)\Bluetooth Suite\ActivateDesktop.exe
(Samsung Electronics CO., LTD.) C:\Program Files\Samsung\S Agent\CommonAgent.exe
() C:\Program Files (x86)\ALDITALKVerbindungsassistent\ALDITALKVerbindungsassistent.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Synaptics Incorporated) C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Opera Software) C:\Program Files (x86)\Opera\17.0.1241.53\opera.exe
() C:\Program Files (x86)\Opera\17.0.1241.53\opera_crashreporter.exe
(Opera Software) C:\Program Files (x86)\Opera\17.0.1241.53\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\17.0.1241.53\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\17.0.1241.53\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\17.0.1241.53\opera.exe
(Samsung Electronics CO., LTD.) C:\Program Files\Samsung\Support Center\GuaranaAgent.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\OFFICE11\WINWORD.EXE
(Microsoft Corporation) C:\WINDOWS\splwow64.exe
(Opera Software) C:\Program Files (x86)\Opera\17.0.1241.53\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\17.0.1241.53\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\17.0.1241.53\opera.exe
() C:\Users\Saturn\Downloads\SecurityCheck.exe
(Microsoft Corporation) C:\WINDOWS\SysWOW64\cmd.exe
(Microsoft Corporation) C:\WINDOWS\SysWOW64\notepad.exe
(Opera Software) C:\Program Files (x86)\Opera\17.0.1241.53\opera.exe
(Microsoft Corporation) C:\WINDOWS\system32\wwahost.exe
(Farbar) C:\Users\Saturn\Downloads\FRST64 (1).exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [HotKeysCmds] - C:\WINDOWS\system32\hkcmd.exe [ ] ()
HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13191824 2012-08-10] (Realtek Semiconductor)
HKLM\...\Run: [BtTray] - C:\Program Files (x86)\Bluetooth Suite\BtTray.exe [766080 2012-12-05] (Qualcomm Atheros)
HKLM\...\Run: [BtvStack] - C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [128640 2012-12-05] (Atheros Communications)
HKLM\...\Run: [Bitcasa] - C:\Program Files\Bitcasa\Bitcasa.exe [3952128 2012-11-27] (Bitcasa, Inc)
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2917688 2012-10-16] (Synaptics Incorporated)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKCU\...\Policies\system: [DisableLockWorkstation] 0
MountPoints2: {4b6315e7-4863-11e3-824f-806e6f6e6963} - "F:\.\Setup.exe" AUTORUN=1
HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [642216 2012-08-06] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [IAStorIcon] - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [285240 2012-09-01] (Intel Corporation)
HKLM-x32\...\Run: [Adobe Reader Speed Launcher] - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\reader_sl.exe [40312 2013-09-03] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [RemoteControl10] - C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [97392 2012-08-15] (CyberLink Corp.)
HKLM-x32\...\Run: [CLMLServer_For_P2G8] - C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe [111120 2012-06-08] (CyberLink)
HKLM-x32\...\Run: [CLVirtualDrive] - C:\Program Files (x86)\CyberLink\Power2Go8\VirtualDrive.exe [491120 2012-07-12] (CyberLink Corp.)
HKLM-x32\...\Run: [Intel AppUp(SM) center] - C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe [155488 2012-07-13] (Intel Corporation)
HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [347192 2013-09-04] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [ApnTBMon] - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe [1673680 2013-10-23] (APN)
HKLM-x32\...\Run: [PDFPrint] - C:\Program Files (x86)\PDF24\pdf24.exe [185896 2013-10-28] (Geek Software GmbH)
SSODL: EldosMountNotificator - {5FF49FE8-B332-4CB9-B102-FB6951629E55} - C:\windows\system32\CbFsMntNtf3.dll (EldoS Corporation)
SSODL-x32: EldosMountNotificator - {5FF49FE8-B332-4CB9-B102-FB6951629E55} - C:\windows\SysWow64\CbFsMntNtf3.dll (EldoS Corporation)
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://search.zonealarm.com/?src=hp&tbid=goughGA&Lan=de&gu=99a6beb3d4854a81ae0daf86b86d8d80&tu=10G9y00Az1C01g0&sku=&tstsId=&ver=&
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://samsung13.msn.com
SearchScopes: HKLM - DefaultScope {38B7222B-4B2A-4275-BD2A-70DC0BE165A6} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MASMJS
SearchScopes: HKLM - {38B7222B-4B2A-4275-BD2A-70DC0BE165A6} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MASMJS
SearchScopes: HKLM-x32 - {38B7222B-4B2A-4275-BD2A-70DC0BE165A6} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MASMJS
SearchScopes: HKCU - {38B7222B-4B2A-4275-BD2A-70DC0BE165A6} URL =
SearchScopes: HKCU - {F1A12AE8-3E1C-4DFC-B7F3-EF4D85106328} URL = hxxp://search.zonealarm.com/search?src=sp&tbid=goughGA&Lan=de&q={searchTerms}&gu=99a6beb3d4854a81ae0daf86b86d8d80&tu=10G9y00Az1C01g0&sku=&tstsId=&ver=&&r=546
BHO: Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport_x64.dll (APN LLC.)
BHO: CIESpeechBHO Class - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll (Qualcomm Atheros Commnucations)
BHO-x32: Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport.dll (APN LLC.)
Toolbar: HKLM - Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport_x64.dll (APN LLC.)
Toolbar: HKLM-x32 - Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport.dll (APN LLC.)
Toolbar: HKCU - Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport_x64.dll (APN LLC.)
Handler-x32: http\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: http\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: https\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: https\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: msdaipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Handler-x32: msdaipp\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
Filter: text/xml - {807553E5-5146-11D5-A672-00B0D022E945} - No File
Tcpip\..\Interfaces\{2896F72B-319B-48E1-B5BB-2F7B07BFD6CC}: [NameServer]212.23.115.132 212.23.115.148
FireFox:
========
FF ProfilePath: C:\Users\Saturn\AppData\Roaming\Mozilla\Firefox\Profiles\axxb4zd0.default
FF SelectedSearchEngine: Search By ZoneAlarm
FF Homepage: hxxp://search.zonealarm.com/?src=hp&tbid=goughGA&Lan=de&gu=99a6beb3d4854a81ae0daf86b86d8d80&tu=10G9y00Az1C01g0&sku=&tstsId=&ver=&
FF Plugin: @adobe.com/FlashPlayer - C:\windows\system32\Macromed\Flash\NPSWF64_11_9_900_117.dll ()
FF Plugin-x32: @adobe.com/FlashPlayer - C:\windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_117.dll ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3503.0728 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @videolan.org/vlc,version=2.0.8 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.0 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
Chrome:
=======
Error reading preferences. Please check "preferences" file for possible corruption. <======= ATTENTION
CHR HKLM-x32\...\Chrome\Extension: [aaaaacalgebmfelllfiaoknifldpngjh] - C:\ProgramData\AskPartnerNetwork\Toolbar\AVIRA-V7\CRX\ToolbarCR.crx
==================== Services (Whitelisted) =================
R2 ALDITALKVerbindungsassistent_Service; C:\Program Files (x86)\ALDITALKVerbindungsassistent\ALDITALKVerbindungsassistent_Service.exe [358968 2013-09-03] ()
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [84024 2013-09-04] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [108088 2013-09-04] (Avira Operations GmbH & Co. KG)
R2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [815160 2013-09-04] (Avira Operations GmbH & Co. KG)
R2 APNMCP; C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe [166352 2013-10-23] (APN LLC.)
R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [231552 2012-12-05] (Qualcomm Atheros Commnucations)
R2 Easy Launcher; C:\Program Files (x86)\Samsung\Settings\CmdServer\EasyLauncher.exe [1591176 2012-11-30] (Samsung Electronics CO., LTD.)
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [128896 2012-07-18] (Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [165760 2012-07-18] (Intel Corporation)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
R2 SWUpdateService; C:\ProgramData\Samsung\SW Update Service\SWMAgent.exe [3018800 2013-10-21] (Samsung Electronics CO., LTD.)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [346872 2013-08-22] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23840 2013-08-22] (Microsoft Corporation)
R2 ZAtheros Bt and Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [323584 2012-12-05] (Atheros)
==================== Drivers (Whitelisted) ====================
S0 ADP80XX; C:\Windows\System32\drivers\ADP80XX.SYS [782176 2013-08-22] (PMC-Sierra)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [105344 2013-09-04] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [132088 2013-09-04] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [28600 2013-09-04] (Avira Operations GmbH & Co. KG)
R2 avnetflt; C:\Windows\system32\DRIVERS\avnetflt.sys [82136 2013-09-04] (Avira Operations GmbH & Co. KG)
S3 bcmfn2; C:\Windows\System32\drivers\bcmfn2.sys [17624 2013-08-13] (Windows (R) Win 7 DDK provider)
S3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [224768 2013-08-22] (Microsoft Corporation)
R1 cbfs3; C:\windows\system32\drivers\cbfs3.sys [352456 2012-08-06] (EldoS Corporation)
R1 CLVirtualDrive; C:\Windows\system32\DRIVERS\CLVirtualDrive.sys [92536 2012-06-25] (CyberLink)
S3 ewsercd; C:\Windows\system32\DRIVERS\ewsercd.sys [112896 2013-06-11] (Huawei Technologies Co., Ltd.)
R3 ewusbnet; C:\Windows\system32\DRIVERS\ewusbnet.sys [138752 2013-07-31] (Huawei Technologies Co., Ltd.)
R3 ewusbnet; C:\Windows\SysWow64\DRIVERS\ewusbnet.sys [138752 2013-07-31] (Huawei Technologies Co., Ltd.)
S3 ew_hwusbdev; C:\Windows\SysWow64\DRIVERS\ew_hwusbdev.sys [117248 2013-07-31] (Huawei Technologies Co., Ltd.)
R3 hwdatacard; C:\Windows\SysWow64\DRIVERS\ewusbmdm.sys [121600 2013-07-31] (Huawei Technologies Co., Ltd.)
S3 iaLPSSi_GPIO; C:\Windows\System32\drivers\iaLPSSi_GPIO.sys [24568 2013-07-30] (Intel Corporation)
S3 iaLPSSi_I2C; C:\Windows\System32\drivers\iaLPSSi_I2C.sys [99320 2013-07-25] (Intel Corporation)
S0 iaStorAV; C:\Windows\System32\drivers\iaStorAV.sys [651248 2013-08-10] (Intel Corporation)
R0 intelpep; C:\Windows\System32\drivers\intelpep.sys [39768 2013-09-30] (Microsoft Corporation)
S0 LSI_SAS3; C:\Windows\System32\drivers\lsi_sas3.sys [81760 2013-08-22] (LSI Corporation)
R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
R3 NdisVirtualBus; C:\Windows\System32\drivers\NdisVirtualBus.sys [16384 2013-08-22] (Microsoft Corporation)
S3 netvsc; C:\Windows\system32\DRIVERS\netvsc63.sys [87040 2013-08-22] (Microsoft Corporation)
R3 RadioHIDMini; C:\Windows\System32\drivers\RadioHIDMini.sys [23408 2012-07-27] (Windows (R) Win 7 DDK provider)
S3 ReFS; C:\Windows\System32\Drivers\ReFS.sys [924512 2013-08-22] (Microsoft Corporation)
S3 SerCx2; C:\Windows\System32\drivers\SerCx2.sys [146272 2013-08-22] (Microsoft Corporation)
S0 stornvme; C:\Windows\System32\drivers\stornvme.sys [56672 2013-08-22] (Microsoft Corporation)
S3 UEFI; C:\Windows\System32\drivers\UEFI.sys [26976 2013-08-22] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [124256 2013-08-22] (Microsoft Corporation)
S3 BTATH_LWFLT; \SystemRoot\system32\DRIVERS\btath_lwflt.sys [x]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-11-17 14:47 - 2013-11-17 14:51 - 01958236 _____ (Farbar) C:\Users\Saturn\Downloads\FRST64 (1).exe
2013-11-17 14:34 - 2013-11-17 14:37 - 00891184 _____ C:\Users\Saturn\Downloads\SecurityCheck.exe
2013-11-16 18:15 - 2013-11-16 18:15 - 104637397 _____ C:\WINDOWS\SysWOW64\茘堕䴀
2013-11-16 13:08 - 2013-11-16 13:08 - 00000000 ____D C:\Program Files (x86)\ESET
2013-11-16 12:52 - 2013-11-16 13:07 - 02347384 _____ (ESET) C:\Users\Saturn\Downloads\esetsmartinstaller_enu.exe
2013-11-15 17:28 - 2013-11-15 17:28 - 00000000 _____ C:\WINDOWS\setuperr.log
2013-11-15 17:28 - 2013-11-15 17:28 - 00000000 _____ C:\WINDOWS\setupact.log
2013-11-15 15:52 - 2013-11-17 14:51 - 01275625 _____ C:\WINDOWS\WindowsUpdate.log
2013-11-15 13:33 - 2013-11-15 13:35 - 00000000 ____D C:\Program Files (x86)\PDF24
2013-11-15 13:33 - 2013-11-15 13:33 - 00001091 _____ C:\Users\Public\Desktop\PDF24 Creator.lnk
2013-11-15 12:37 - 2013-11-15 13:32 - 16198832 _____ (Geek Software GmbH ) C:\Users\Saturn\Downloads\pdf24-creator-6.0.1.exe
2013-11-15 11:01 - 2013-11-15 11:36 - 00001647 _____ C:\Users\Saturn\Desktop\JRT.txt
2013-11-15 10:51 - 2013-11-15 10:51 - 00000000 ____D C:\WINDOWS\ERUNT
2013-11-15 10:47 - 2013-11-15 10:50 - 01034531 _____ (Thisisu) C:\Users\Saturn\Downloads\JRT.exe
2013-11-15 08:32 - 2013-11-15 09:38 - 05744657 _____ (pdfforge GmbH) C:\Users\Saturn\Downloads\PDFCreator-1_7_1_setup.exe
2013-11-14 21:48 - 2013-11-14 22:52 - 00000000 ____D C:\AdwCleaner
2013-11-14 21:30 - 2013-11-14 21:42 - 01085542 _____ C:\Users\Saturn\Downloads\adwcleaner.exe
2013-11-14 20:40 - 2013-11-14 20:40 - 00000000 ____D C:\Users\Saturn\AppData\Roaming\Malwarebytes
2013-11-14 20:39 - 2013-11-14 20:39 - 00001121 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-11-14 20:39 - 2013-11-14 20:39 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-11-14 20:39 - 2013-11-14 20:39 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-11-14 20:39 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbam.sys
2013-11-14 20:12 - 2013-11-14 20:38 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Saturn\Downloads\mbam-setup-1.75.0.1300 (1).exe
2013-11-14 19:44 - 2013-11-14 19:52 - 02594124 _____ (Malwarebytes Corporation ) C:\Users\Saturn\Downloads\mbam-setup-1.75.0.1300.exe
2013-11-13 19:37 - 2013-11-13 19:37 - 00000000 ____D C:\Users\Saturn\Desktop\How to spot a dangerous man
2013-11-13 18:25 - 2013-11-14 07:25 - 00000097 _____ C:\Users\Saturn\AppData\Roaming\WB.CFG
2013-11-13 18:25 - 2013-11-14 07:25 - 00000006 _____ C:\Users\Saturn\AppData\Roaming\WBPU-TTL.DAT
2013-11-13 18:13 - 2013-11-13 18:15 - 00031780 _____ C:\Users\Saturn\Downloads\Addition.txt
2013-11-13 18:11 - 2013-11-17 14:52 - 00018194 _____ C:\Users\Saturn\Downloads\FRST.txt
2013-11-13 18:11 - 2013-11-13 18:11 - 00000000 ____D C:\FRST
2013-11-13 18:02 - 2013-11-13 18:10 - 01957610 _____ (Farbar) C:\Users\Saturn\Downloads\FRST64.exe
2013-11-13 15:53 - 2013-11-13 15:55 - 00053788 _____ C:\Users\Saturn\Downloads\ZipExtractorSetup.exe
2013-11-13 10:52 - 2013-10-19 09:08 - 23212544 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2013-11-13 10:52 - 2013-10-19 07:37 - 17142784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2013-11-13 10:52 - 2013-10-19 07:02 - 02764288 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2013-11-13 10:52 - 2013-10-19 05:37 - 12995584 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2013-11-13 10:52 - 2013-10-19 04:56 - 11220992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2013-11-13 10:52 - 2013-10-19 04:23 - 01394176 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2013-11-13 10:51 - 2013-10-19 06:37 - 00111616 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwcollector.exe
2013-11-13 10:51 - 2013-10-19 06:19 - 00218624 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2013-11-13 10:51 - 2013-10-19 06:10 - 05765120 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2013-11-13 10:51 - 2013-10-19 05:52 - 02166272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2013-11-13 10:51 - 2013-10-19 05:44 - 04240384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2013-11-13 10:51 - 2013-10-19 05:31 - 01993728 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2013-11-13 10:51 - 2013-10-19 04:55 - 01926656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2013-11-13 10:51 - 2013-10-19 04:53 - 02332160 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2013-11-13 10:51 - 2013-10-19 04:09 - 01818112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2013-11-13 10:51 - 2013-10-19 04:02 - 01156608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2013-11-13 07:33 - 2013-10-13 03:48 - 00136536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wfplwfs.sys
2013-11-13 07:33 - 2013-10-12 22:48 - 00828416 _____ (Microsoft Corporation) C:\WINDOWS\system32\BFE.DLL
2013-11-13 07:33 - 2013-10-12 22:34 - 01104384 _____ (Microsoft Corporation) C:\WINDOWS\system32\IKEEXT.DLL
2013-11-13 07:31 - 2013-10-05 15:21 - 01341288 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll
2013-11-13 07:31 - 2013-10-05 09:39 - 01067008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32.dll
2013-11-13 07:21 - 2013-10-16 16:58 - 01943536 _____ (Microsoft Corporation) C:\WINDOWS\system32\crypt32.dll
2013-11-13 07:21 - 2013-10-16 14:54 - 01581968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\crypt32.dll
2013-11-12 11:16 - 2013-11-15 09:48 - 00000000 ____D C:\ProgramData\CheckPoint
2013-11-12 11:07 - 2013-11-12 11:13 - 02462696 _____ (Check Point Software Technologies LTD) C:\Users\Saturn\Downloads\zafwSetupWeb_120_104_000.exe
2013-11-12 06:32 - 2013-11-15 15:12 - 00000000 ____D C:\WINDOWS\Minidump
2013-11-11 17:41 - 2013-11-11 17:41 - 103792856 _____ C:\WINDOWS\SysWOW64\䔠旵Lÿ
2013-11-10 11:02 - 2013-11-13 07:44 - 00000000 ___RD C:\WINDOWS\BrowserChoice
2013-11-08 20:45 - 2013-11-08 20:45 - 00004096 ____H C:\Users\Saturn\AppData\Local\keyfile3.drm
2013-11-08 12:23 - 2013-11-08 12:23 - 00001450 _____ C:\Users\Saturn\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2013-11-08 12:22 - 2013-11-08 12:22 - 00000020 ___SH C:\Users\Saturn\ntuser.ini
2013-11-08 12:20 - 2013-11-08 12:20 - 00000000 _SHDL C:\Users\Default\Vorlagen
2013-11-08 12:20 - 2013-11-08 12:20 - 00000000 _SHDL C:\Users\Default\Startmenü
2013-11-08 12:20 - 2013-11-08 12:20 - 00000000 _SHDL C:\Users\Default\Netzwerkumgebung
2013-11-08 12:20 - 2013-11-08 12:20 - 00000000 _SHDL C:\Users\Default\Lokale Einstellungen
2013-11-08 12:20 - 2013-11-08 12:20 - 00000000 _SHDL C:\Users\Default\Eigene Dateien
2013-11-08 12:20 - 2013-11-08 12:20 - 00000000 _SHDL C:\Users\Default\Druckumgebung
2013-11-08 12:20 - 2013-11-08 12:20 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Musik
2013-11-08 12:20 - 2013-11-08 12:20 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Bilder
2013-11-08 12:20 - 2013-11-08 12:20 - 00000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2013-11-08 12:20 - 2013-11-08 12:20 - 00000000 _SHDL C:\Users\Default\AppData\Local\Verlauf
2013-11-08 12:20 - 2013-11-08 12:20 - 00000000 _SHDL C:\Users\Default\AppData\Local\Anwendungsdaten
2013-11-08 12:20 - 2013-11-08 12:20 - 00000000 _SHDL C:\Users\Default\Anwendungsdaten
2013-11-08 12:20 - 2013-11-08 12:20 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Musik
2013-11-08 12:20 - 2013-11-08 12:20 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Bilder
2013-11-08 12:20 - 2013-11-08 12:20 - 00000000 _SHDL C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2013-11-08 12:20 - 2013-11-08 12:20 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Verlauf
2013-11-08 12:20 - 2013-11-08 12:20 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Anwendungsdaten
2013-11-08 12:18 - 2013-11-08 12:18 - 00022960 _____ C:\WINDOWS\system32\emptyregdb.dat
2013-11-08 11:57 - 2013-11-08 11:57 - 00000000 ____D C:\WINDOWS\system32\config\bbimigrate
2013-11-08 11:56 - 2013-11-11 06:46 - 00000000 ____D C:\Users\Saturn
2013-11-08 11:56 - 2013-11-11 06:44 - 00000000 ___RD C:\Users\Saturn\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2013-11-08 11:56 - 2013-11-11 06:44 - 00000000 ___RD C:\Users\Saturn\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2013-11-08 11:56 - 2013-11-11 06:44 - 00000000 ___RD C:\Users\Saturn\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2013-11-08 11:56 - 2013-11-08 12:19 - 00020958 _____ C:\WINDOWS\diagwrn.xml
2013-11-08 11:56 - 2013-11-08 12:19 - 00020958 _____ C:\WINDOWS\diagerr.xml
2013-11-08 11:56 - 2013-11-08 11:56 - 00000000 _SHDL C:\Users\Saturn\Vorlagen
2013-11-08 11:56 - 2013-11-08 11:56 - 00000000 _SHDL C:\Users\Saturn\Startmenü
2013-11-08 11:56 - 2013-11-08 11:56 - 00000000 _SHDL C:\Users\Saturn\Netzwerkumgebung
2013-11-08 11:56 - 2013-11-08 11:56 - 00000000 _SHDL C:\Users\Saturn\Lokale Einstellungen
2013-11-08 11:56 - 2013-11-08 11:56 - 00000000 _SHDL C:\Users\Saturn\Eigene Dateien
2013-11-08 11:56 - 2013-11-08 11:56 - 00000000 _SHDL C:\Users\Saturn\Druckumgebung
2013-11-08 11:56 - 2013-11-08 11:56 - 00000000 _SHDL C:\Users\Saturn\Documents\Eigene Musik
2013-11-08 11:56 - 2013-11-08 11:56 - 00000000 _SHDL C:\Users\Saturn\Documents\Eigene Bilder
2013-11-08 11:56 - 2013-11-08 11:56 - 00000000 _SHDL C:\Users\Saturn\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2013-11-08 11:56 - 2013-11-08 11:56 - 00000000 _SHDL C:\Users\Saturn\AppData\Local\Verlauf
2013-11-08 11:56 - 2013-11-08 11:56 - 00000000 _SHDL C:\Users\Saturn\AppData\Local\Anwendungsdaten
2013-11-08 11:56 - 2013-11-08 11:56 - 00000000 _SHDL C:\Users\Saturn\Anwendungsdaten
2013-11-08 11:56 - 2013-08-22 16:36 - 00000000 ____D C:\Users\Saturn\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2013-11-08 11:51 - 2013-11-08 11:51 - 00000000 ____D C:\WINDOWS\SysWOW64\RTCOM
2013-11-08 11:51 - 2013-11-08 11:51 - 00000000 ____D C:\WINDOWS\system32\SRSLabs
2013-11-08 11:51 - 2013-11-08 11:51 - 00000000 ____D C:\Program Files\Realtek
2013-11-08 11:50 - 2013-11-08 11:50 - 00000264 _____ C:\WINDOWS\Tasks\Synaptics TouchPad Enhancements.job
2013-11-08 11:50 - 2013-11-08 11:50 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf
2013-11-08 11:50 - 2013-11-08 11:50 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_SynTP_01009.Wdf
2013-11-08 11:50 - 2013-11-08 11:50 - 00000000 ____D C:\Program Files\Synaptics
2013-11-08 11:50 - 2013-11-08 11:50 - 00000000 ____D C:\Program Files\Common Files\ATI Technologies
2013-11-08 11:50 - 2013-11-08 11:50 - 00000000 ____D C:\Program Files\AMD
2013-11-08 11:48 - 2013-11-11 07:01 - 00000000 ___DC C:\WINDOWS\Panther
2013-11-08 11:48 - 2013-11-08 11:48 - 00000000 __SHD C:\Recovery
2013-11-08 11:46 - 2013-11-08 11:46 - 02144768 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2013-11-08 11:46 - 2013-11-08 11:46 - 02140888 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll
2013-11-08 11:46 - 2013-11-08 11:46 - 01765384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11.dll
2013-11-08 11:46 - 2013-11-08 11:46 - 01765376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll
2013-11-08 11:46 - 2013-11-08 11:46 - 01537880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2013-11-08 11:46 - 2013-11-08 11:46 - 01286552 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll
2013-11-08 11:46 - 2013-11-08 11:46 - 01217024 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Streaming.dll
2013-11-08 11:46 - 2013-11-08 11:46 - 01018960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll
2013-11-08 11:46 - 2013-11-08 11:46 - 00977408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Streaming.dll
2013-11-08 11:46 - 2013-11-08 11:46 - 00909312 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmCoreR.dll
2013-11-08 11:46 - 2013-11-08 11:46 - 00872840 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfplat.dll
2013-11-08 11:46 - 2013-11-08 11:46 - 00837120 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSShared.dll
2013-11-08 11:46 - 2013-11-08 11:46 - 00698880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSShared.dll
2013-11-08 11:46 - 2013-11-08 11:46 - 00698232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfplat.dll
2013-11-08 11:46 - 2013-11-08 11:46 - 00621056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MrmCoreR.dll
2013-11-08 11:46 - 2013-11-08 11:46 - 00516496 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll
2013-11-08 11:46 - 2013-11-08 11:46 - 00406400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxgi.dll
2013-11-08 11:46 - 2013-11-08 11:46 - 00382808 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2013-11-08 11:46 - 2013-11-08 11:46 - 00294400 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Sensors.dll
2013-11-08 11:46 - 2013-11-08 11:46 - 00249856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2013-11-08 11:46 - 2013-11-08 11:46 - 00225792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Sensors.dll
2013-11-08 11:46 - 2013-11-08 11:46 - 00189952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2013-11-08 11:45 - 2013-11-08 11:45 - 00262144 _____ C:\WINDOWS\system32\config\userdiff
2013-11-08 11:42 - 2013-11-08 11:42 - 00000000 ____D C:\WINDOWS\SysWOW64\XPSViewer
2013-11-08 11:42 - 2013-11-08 11:42 - 00000000 ____D C:\Program Files\Reference Assemblies
2013-11-08 11:42 - 2013-11-08 11:42 - 00000000 ____D C:\Program Files\MSBuild
2013-11-08 11:42 - 2013-11-08 11:42 - 00000000 ____D C:\Program Files (x86)\Reference Assemblies
2013-11-08 11:42 - 2013-11-08 11:42 - 00000000 ____D C:\Program Files (x86)\MSBuild
2013-11-08 11:41 - 2013-08-03 05:48 - 01166520 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationNative_v0300.dll
2013-11-08 11:41 - 2013-08-03 05:48 - 00124112 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2013-11-08 11:41 - 2013-08-03 05:48 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe
2013-11-08 11:41 - 2013-08-03 05:41 - 00778936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationNative_v0300.dll
2013-11-08 11:41 - 2013-08-03 05:41 - 00102608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2013-11-08 11:41 - 2013-08-03 05:41 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TsWpfWrp.exe
2013-11-08 10:18 - 2013-11-08 10:18 - 04954736 _____ (Microsoft Corporation) C:\Users\Saturn\Downloads\WindowsUpgradeAssistant.exe
2013-11-08 06:47 - 2013-11-08 06:47 - 00001956 _____ C:\Users\Public\Desktop\SW Update.lnk
2013-11-08 06:36 - 2013-11-08 06:36 - 00001582 _____ C:\Users\Public\Desktop\Free YouTube to MP3 Converter.lnk
2013-11-08 06:35 - 2013-11-08 06:36 - 00000000 ____D C:\Program Files (x86)\DVDVideoSoft
2013-11-08 06:31 - 2013-11-08 06:33 - 32206488 _____ (DVDVideoSoft Ltd. ) C:\Users\Saturn\Downloads\FreeYouTubeToMP3Converter.exe
2013-11-07 16:20 - 2013-11-07 16:32 - 03864904 _____ (Secunia) C:\Users\Saturn\Downloads\PSISetup_30b8013.exe
2013-11-07 09:04 - 2013-11-11 14:00 - 00000000 ____D C:\Users\Saturn\Documents\Familie
2013-10-23 13:48 - 2013-11-15 13:51 - 00000000 ____D C:\Users\Saturn\Documents\Müller-Künnemann
2013-10-18 08:32 - 2013-10-18 08:32 - 00000000 ____D C:\ProgramData\DriverGenius
2013-10-18 07:59 - 2013-10-18 08:29 - 11360472 _____ (Driver-Soft Inc. ) C:\Users\Saturn\Downloads\Driver_Genius_Professional_DE_PPC_Content.exe
==================== One Month Modified Files and Folders =======
2013-11-17 14:52 - 2013-11-13 18:11 - 00018194 _____ C:\Users\Saturn\Downloads\FRST.txt
2013-11-17 14:51 - 2013-11-17 14:47 - 01958236 _____ (Farbar) C:\Users\Saturn\Downloads\FRST64 (1).exe
2013-11-17 14:51 - 2013-11-15 15:52 - 01275625 _____ C:\WINDOWS\WindowsUpdate.log
2013-11-17 14:39 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\AppReadiness
2013-11-17 14:37 - 2013-11-17 14:34 - 00891184 _____ C:\Users\Saturn\Downloads\SecurityCheck.exe
2013-11-17 14:17 - 2013-09-03 16:13 - 00000884 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2013-11-17 14:15 - 2013-01-25 04:10 - 00000360 _____ C:\WINDOWS\Tasks\Xerox PhotoCafe Communicator.job
2013-11-17 13:02 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\sru
2013-11-17 10:00 - 2013-01-25 03:48 - 00000870 _____ C:\WINDOWS\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d.job
2013-11-17 04:41 - 2013-01-25 03:58 - 00000000 ____D C:\ProgramData\WinClon
2013-11-17 04:38 - 2013-01-25 03:48 - 00000868 _____ C:\WINDOWS\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon.job
2013-11-16 18:15 - 2013-11-16 18:15 - 104637397 _____ C:\WINDOWS\SysWOW64\茘堕䴀
2013-11-16 15:34 - 2012-07-26 09:12 - 00000000 ____D C:\WINDOWS\LiveKernelReports
2013-11-16 13:08 - 2013-11-16 13:08 - 00000000 ____D C:\Program Files (x86)\ESET
2013-11-16 13:07 - 2013-11-16 12:52 - 02347384 _____ (ESET) C:\Users\Saturn\Downloads\esetsmartinstaller_enu.exe
2013-11-16 13:00 - 2013-05-14 01:56 - 00003596 _____ C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-2669165515-361187302-876288576-1001
2013-11-16 08:02 - 2013-09-03 13:32 - 00000000 ____D C:\Users\Saturn\AppData\Roaming\ALDITALKVerbindungsassistent
2013-11-15 17:28 - 2013-11-15 17:28 - 00000000 _____ C:\WINDOWS\setuperr.log
2013-11-15 17:28 - 2013-11-15 17:28 - 00000000 _____ C:\WINDOWS\setupact.log
2013-11-15 16:42 - 2013-10-11 09:25 - 00000000 ____D C:\Users\Saturn\Documents\Innere Stärke
2013-11-15 15:12 - 2013-11-12 06:32 - 00000000 ____D C:\WINDOWS\Minidump
2013-11-15 13:51 - 2013-10-23 13:48 - 00000000 ____D C:\Users\Saturn\Documents\Müller-Künnemann
2013-11-15 13:35 - 2013-11-15 13:33 - 00000000 ____D C:\Program Files (x86)\PDF24
2013-11-15 13:33 - 2013-11-15 13:33 - 00001091 _____ C:\Users\Public\Desktop\PDF24 Creator.lnk
2013-11-15 13:32 - 2013-11-15 12:37 - 16198832 _____ (Geek Software GmbH ) C:\Users\Saturn\Downloads\pdf24-creator-6.0.1.exe
2013-11-15 11:36 - 2013-11-15 11:01 - 00001647 _____ C:\Users\Saturn\Desktop\JRT.txt
2013-11-15 10:51 - 2013-11-15 10:51 - 00000000 ____D C:\WINDOWS\ERUNT
2013-11-15 10:50 - 2013-11-15 10:47 - 01034531 _____ (Thisisu) C:\Users\Saturn\Downloads\JRT.exe
2013-11-15 10:02 - 2013-05-14 01:46 - 00000000 ____D C:\Users\Saturn\AppData\Local\Packages
2013-11-15 09:50 - 2013-08-22 15:45 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2013-11-15 09:50 - 2013-08-22 14:25 - 00524288 ___SH C:\WINDOWS\system32\config\BBI
2013-11-15 09:48 - 2013-11-12 11:16 - 00000000 ____D C:\ProgramData\CheckPoint
2013-11-15 09:38 - 2013-11-15 08:32 - 05744657 _____ (pdfforge GmbH) C:\Users\Saturn\Downloads\PDFCreator-1_7_1_setup.exe
2013-11-14 22:52 - 2013-11-14 21:48 - 00000000 ____D C:\AdwCleaner
2013-11-14 21:42 - 2013-11-14 21:30 - 01085542 _____ C:\Users\Saturn\Downloads\adwcleaner.exe
2013-11-14 20:40 - 2013-11-14 20:40 - 00000000 ____D C:\Users\Saturn\AppData\Roaming\Malwarebytes
2013-11-14 20:39 - 2013-11-14 20:39 - 00001121 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-11-14 20:39 - 2013-11-14 20:39 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-11-14 20:39 - 2013-11-14 20:39 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-11-14 20:38 - 2013-11-14 20:12 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Saturn\Downloads\mbam-setup-1.75.0.1300 (1).exe
2013-11-14 19:52 - 2013-11-14 19:44 - 02594124 _____ (Malwarebytes Corporation ) C:\Users\Saturn\Downloads\mbam-setup-1.75.0.1300.exe
2013-11-14 07:25 - 2013-11-13 18:25 - 00000097 _____ C:\Users\Saturn\AppData\Roaming\WB.CFG
2013-11-14 07:25 - 2013-11-13 18:25 - 00000006 _____ C:\Users\Saturn\AppData\Roaming\WBPU-TTL.DAT
2013-11-13 23:15 - 2013-09-30 05:14 - 01780340 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2013-11-13 23:15 - 2013-09-30 04:56 - 00766620 _____ C:\WINDOWS\system32\perfh007.dat
2013-11-13 23:15 - 2013-09-30 04:56 - 00159902 _____ C:\WINDOWS\system32\perfc007.dat
2013-11-13 19:37 - 2013-11-13 19:37 - 00000000 ____D C:\Users\Saturn\Desktop\How to spot a dangerous man
2013-11-13 18:15 - 2013-11-13 18:13 - 00031780 _____ C:\Users\Saturn\Downloads\Addition.txt
2013-11-13 18:11 - 2013-11-13 18:11 - 00000000 ____D C:\FRST
2013-11-13 18:10 - 2013-11-13 18:02 - 01957610 _____ (Farbar) C:\Users\Saturn\Downloads\FRST64.exe
2013-11-13 15:55 - 2013-11-13 15:53 - 00053788 _____ C:\Users\Saturn\Downloads\ZipExtractorSetup.exe
2013-11-13 11:51 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\rescache
2013-11-13 11:00 - 2013-09-02 17:32 - 00000000 ____D C:\WINDOWS\system32\MRT
2013-11-13 10:58 - 2013-06-11 10:48 - 82896128 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2013-11-13 07:44 - 2013-11-10 11:02 - 00000000 ___RD C:\WINDOWS\BrowserChoice
2013-11-12 11:13 - 2013-11-12 11:07 - 02462696 _____ (Check Point Software Technologies LTD) C:\Users\Saturn\Downloads\zafwSetupWeb_120_104_000.exe
2013-11-11 17:41 - 2013-11-11 17:41 - 103792856 _____ C:\WINDOWS\SysWOW64\䔠旵Lÿ
2013-11-11 14:00 - 2013-11-07 09:04 - 00000000 ____D C:\Users\Saturn\Documents\Familie
2013-11-11 07:01 - 2013-11-08 11:48 - 00000000 ___DC C:\WINDOWS\Panther
2013-11-11 06:46 - 2013-11-08 11:56 - 00000000 ____D C:\Users\Saturn
2013-11-11 06:44 - 2013-11-08 11:56 - 00000000 ___RD C:\Users\Saturn\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2013-11-11 06:44 - 2013-11-08 11:56 - 00000000 ___RD C:\Users\Saturn\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2013-11-11 06:44 - 2013-11-08 11:56 - 00000000 ___RD C:\Users\Saturn\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2013-11-11 06:44 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\WinMetadata
2013-11-11 06:26 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\registration
2013-11-11 06:26 - 2013-08-22 14:36 - 00000000 ____D C:\WINDOWS\system32\Sysprep
2013-11-10 09:11 - 2013-06-11 03:22 - 00000000 ____D C:\Users\Saturn\AppData\Local\CrashDumps
2013-11-08 20:45 - 2013-11-08 20:45 - 00004096 ____H C:\Users\Saturn\AppData\Local\keyfile3.drm
2013-11-08 19:06 - 2013-09-02 15:23 - 00000000 ____D C:\Users\Saturn\AppData\Local\Mozilla
2013-11-08 13:20 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\restore
2013-11-08 12:47 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\tracing
2013-11-08 12:23 - 2013-11-08 12:23 - 00001450 _____ C:\Users\Saturn\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2013-11-08 12:23 - 2013-05-14 01:49 - 00000000 ___RD C:\Users\Saturn\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-11-08 12:23 - 2013-05-14 01:49 - 00000000 ___RD C:\Users\Saturn\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2013-11-08 12:22 - 2013-11-08 12:22 - 00000020 ___SH C:\Users\Saturn\ntuser.ini
2013-11-08 12:20 - 2013-11-08 12:20 - 00000000 _SHDL C:\Users\Default\Vorlagen
2013-11-08 12:20 - 2013-11-08 12:20 - 00000000 _SHDL C:\Users\Default\Startmenü
2013-11-08 12:20 - 2013-11-08 12:20 - 00000000 _SHDL C:\Users\Default\Netzwerkumgebung
2013-11-08 12:20 - 2013-11-08 12:20 - 00000000 _SHDL C:\Users\Default\Lokale Einstellungen
2013-11-08 12:20 - 2013-11-08 12:20 - 00000000 _SHDL C:\Users\Default\Eigene Dateien
2013-11-08 12:20 - 2013-11-08 12:20 - 00000000 _SHDL C:\Users\Default\Druckumgebung
2013-11-08 12:20 - 2013-11-08 12:20 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Musik
2013-11-08 12:20 - 2013-11-08 12:20 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Bilder
2013-11-08 12:20 - 2013-11-08 12:20 - 00000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2013-11-08 12:20 - 2013-11-08 12:20 - 00000000 _SHDL C:\Users\Default\AppData\Local\Verlauf
2013-11-08 12:20 - 2013-11-08 12:20 - 00000000 _SHDL C:\Users\Default\AppData\Local\Anwendungsdaten
2013-11-08 12:20 - 2013-11-08 12:20 - 00000000 _SHDL C:\Users\Default\Anwendungsdaten
2013-11-08 12:20 - 2013-11-08 12:20 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Musik
2013-11-08 12:20 - 2013-11-08 12:20 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Bilder
2013-11-08 12:20 - 2013-11-08 12:20 - 00000000 _SHDL C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2013-11-08 12:20 - 2013-11-08 12:20 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Verlauf
2013-11-08 12:20 - 2013-11-08 12:20 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Anwendungsdaten
2013-11-08 12:20 - 2013-08-22 16:36 - 00000000 ____D C:\Program Files\Windows NT
2013-11-08 12:20 - 2013-08-22 14:36 - 00000000 __RHD C:\Users\Default
2013-11-08 12:19 - 2013-11-08 11:56 - 00020958 _____ C:\WINDOWS\diagwrn.xml
2013-11-08 12:19 - 2013-11-08 11:56 - 00020958 _____ C:\WINDOWS\diagerr.xml
2013-11-08 12:18 - 2013-11-08 12:18 - 00022960 _____ C:\WINDOWS\system32\emptyregdb.dat
2013-11-08 12:08 - 2013-08-22 16:36 - 00000000 __RSD C:\WINDOWS\Media
2013-11-08 12:08 - 2013-01-25 03:58 - 01804472 _____ C:\WINDOWS\SysWOW64\PerfStringBackup.INI
2013-11-08 12:07 - 2013-08-22 16:36 - 00000000 __RHD C:\Users\Public\Libraries
2013-11-08 12:03 - 2013-08-22 15:44 - 02194128 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2013-11-08 12:02 - 2013-08-22 14:25 - 00008192 ___SH C:\WINDOWS\system32\config\ELAM
2013-11-08 12:01 - 2012-07-26 06:37 - 00000000 ____D C:\Users\Default.migrated
2013-11-08 12:00 - 2013-09-30 04:56 - 00000000 ____D C:\WINDOWS\SysWOW64\WCN
2013-11-08 12:00 - 2013-09-30 04:56 - 00000000 ____D C:\WINDOWS\SysWOW64\sysprep
2013-11-08 12:00 - 2013-09-30 04:56 - 00000000 ____D C:\WINDOWS\system32\WCN
2013-11-08 12:00 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\SysWOW64\migwiz
2013-11-08 12:00 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\SysWOW64\IME
2013-11-08 12:00 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2013-11-08 12:00 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\spool
2013-11-08 12:00 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\NDF
2013-11-08 12:00 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\MUI
2013-11-08 12:00 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\IME
2013-11-08 12:00 - 2013-08-22 14:36 - 00000000 ____D C:\WINDOWS\SysWOW64\SMI
2013-11-08 12:00 - 2013-08-22 14:36 - 00000000 ____D C:\WINDOWS\system32\oobe
2013-11-08 12:00 - 2013-01-25 03:46 - 00000000 ____D C:\WINDOWS\SysWOW64\sda
2013-11-08 11:59 - 2013-09-30 04:59 - 00000000 ____D C:\WINDOWS\ShellNew
2013-11-08 11:59 - 2013-08-22 16:43 - 00000000 ____D C:\WINDOWS\DigitalLocker
2013-11-08 11:59 - 2013-08-22 16:36 - 00000000 __SHD C:\Program Files\Windows Sidebar
2013-11-08 11:59 - 2013-08-22 16:36 - 00000000 __SHD C:\Program Files (x86)\Windows Sidebar
2013-11-08 11:59 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\PolicyDefinitions
2013-11-08 11:59 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\IME
2013-11-08 11:59 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\Help
2013-11-08 11:59 - 2013-08-22 16:36 - 00000000 ____D C:\Program Files\Common Files\System
2013-11-08 11:59 - 2013-08-22 16:36 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
2013-11-08 11:59 - 2013-01-25 20:09 - 00000000 ____D C:\WINDOWS\en-GB
2013-11-08 11:59 - 2013-01-25 04:10 - 00000000 ____D C:\WINDOWS\de
2013-11-08 11:59 - 2013-01-25 04:09 - 00000000 ____D C:\WINDOWS\it
2013-11-08 11:59 - 2013-01-25 04:09 - 00000000 ____D C:\WINDOWS\fr
2013-11-08 11:59 - 2012-08-05 22:11 - 00000000 ____D C:\ProgramData\PRICache
2013-11-08 11:57 - 2013-11-08 11:57 - 00000000 ____D C:\WINDOWS\system32\config\bbimigrate
2013-11-08 11:57 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\Recovery
2013-11-08 11:56 - 2013-11-08 11:56 - 00000000 _SHDL C:\Users\Saturn\Vorlagen
2013-11-08 11:56 - 2013-11-08 11:56 - 00000000 _SHDL C:\Users\Saturn\Startmenü
2013-11-08 11:56 - 2013-11-08 11:56 - 00000000 _SHDL C:\Users\Saturn\Netzwerkumgebung
2013-11-08 11:56 - 2013-11-08 11:56 - 00000000 _SHDL C:\Users\Saturn\Lokale Einstellungen
2013-11-08 11:56 - 2013-11-08 11:56 - 00000000 _SHDL C:\Users\Saturn\Eigene Dateien
2013-11-08 11:56 - 2013-11-08 11:56 - 00000000 _SHDL C:\Users\Saturn\Druckumgebung
2013-11-08 11:56 - 2013-11-08 11:56 - 00000000 _SHDL C:\Users\Saturn\Documents\Eigene Musik
2013-11-08 11:56 - 2013-11-08 11:56 - 00000000 _SHDL C:\Users\Saturn\Documents\Eigene Bilder
2013-11-08 11:56 - 2013-11-08 11:56 - 00000000 _SHDL C:\Users\Saturn\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2013-11-08 11:56 - 2013-11-08 11:56 - 00000000 _SHDL C:\Users\Saturn\AppData\Local\Verlauf
2013-11-08 11:56 - 2013-11-08 11:56 - 00000000 _SHDL C:\Users\Saturn\AppData\Local\Anwendungsdaten
2013-11-08 11:56 - 2013-11-08 11:56 - 00000000 _SHDL C:\Users\Saturn\Anwendungsdaten
2013-11-08 11:51 - 2013-11-08 11:51 - 00000000 ____D C:\WINDOWS\SysWOW64\RTCOM
2013-11-08 11:51 - 2013-11-08 11:51 - 00000000 ____D C:\WINDOWS\system32\SRSLabs
2013-11-08 11:51 - 2013-11-08 11:51 - 00000000 ____D C:\Program Files\Realtek
2013-11-08 11:50 - 2013-11-08 11:50 - 00000264 _____ C:\WINDOWS\Tasks\Synaptics TouchPad Enhancements.job
2013-11-08 11:50 - 2013-11-08 11:50 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf
2013-11-08 11:50 - 2013-11-08 11:50 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_SynTP_01009.Wdf
2013-11-08 11:50 - 2013-11-08 11:50 - 00000000 ____D C:\Program Files\Synaptics
2013-11-08 11:50 - 2013-11-08 11:50 - 00000000 ____D C:\Program Files\Common Files\ATI Technologies
2013-11-08 11:50 - 2013-11-08 11:50 - 00000000 ____D C:\Program Files\AMD
2013-11-08 11:48 - 2013-11-08 11:48 - 00000000 __SHD C:\Recovery
2013-11-08 11:47 - 2013-08-22 16:36 - 00262144 _____ C:\WINDOWS\system32\config\BCD-Template
2013-11-08 11:46 - 2013-11-08 11:46 - 02144768 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2013-11-08 11:46 - 2013-11-08 11:46 - 02140888 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll
2013-11-08 11:46 - 2013-11-08 11:46 - 01765384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11.dll
2013-11-08 11:46 - 2013-11-08 11:46 - 01765376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll
2013-11-08 11:46 - 2013-11-08 11:46 - 01537880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2013-11-08 11:46 - 2013-11-08 11:46 - 01286552 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll
2013-11-08 11:46 - 2013-11-08 11:46 - 01217024 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Streaming.dll
2013-11-08 11:46 - 2013-11-08 11:46 - 01018960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll
2013-11-08 11:46 - 2013-11-08 11:46 - 00977408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Streaming.dll
2013-11-08 11:46 - 2013-11-08 11:46 - 00909312 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmCoreR.dll
2013-11-08 11:46 - 2013-11-08 11:46 - 00872840 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfplat.dll
2013-11-08 11:46 - 2013-11-08 11:46 - 00837120 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSShared.dll
2013-11-08 11:46 - 2013-11-08 11:46 - 00698880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSShared.dll
2013-11-08 11:46 - 2013-11-08 11:46 - 00698232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfplat.dll
2013-11-08 11:46 - 2013-11-08 11:46 - 00621056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MrmCoreR.dll
2013-11-08 11:46 - 2013-11-08 11:46 - 00516496 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll
2013-11-08 11:46 - 2013-11-08 11:46 - 00406400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxgi.dll
2013-11-08 11:46 - 2013-11-08 11:46 - 00382808 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2013-11-08 11:46 - 2013-11-08 11:46 - 00294400 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Sensors.dll
2013-11-08 11:46 - 2013-11-08 11:46 - 00249856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2013-11-08 11:46 - 2013-11-08 11:46 - 00225792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Sensors.dll
2013-11-08 11:46 - 2013-11-08 11:46 - 00189952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2013-11-08 11:46 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\WinStore
2013-11-08 11:46 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\Camera
2013-11-08 11:45 - 2013-11-08 11:45 - 00262144 _____ C:\WINDOWS\system32\config\userdiff
2013-11-08 11:42 - 2013-11-08 11:42 - 00000000 ____D C:\WINDOWS\SysWOW64\XPSViewer
2013-11-08 11:42 - 2013-11-08 11:42 - 00000000 ____D C:\Program Files\Reference Assemblies
2013-11-08 11:42 - 2013-11-08 11:42 - 00000000 ____D C:\Program Files\MSBuild
2013-11-08 11:42 - 2013-11-08 11:42 - 00000000 ____D C:\Program Files (x86)\Reference Assemblies
2013-11-08 11:42 - 2013-11-08 11:42 - 00000000 ____D C:\Program Files (x86)\MSBuild
2013-11-08 11:42 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\SysWOW64\MUI
2013-11-08 10:18 - 2013-11-08 10:18 - 04954736 _____ (Microsoft Corporation) C:\Users\Saturn\Downloads\WindowsUpgradeAssistant.exe
2013-11-08 09:29 - 2012-07-26 09:12 - 00000000 ____D C:\WINDOWS\AUInstallAgent
2013-11-08 06:47 - 2013-11-08 06:47 - 00001956 _____ C:\Users\Public\Desktop\SW Update.lnk
2013-11-08 06:36 - 2013-11-08 06:36 - 00001582 _____ C:\Users\Public\Desktop\Free YouTube to MP3 Converter.lnk
2013-11-08 06:36 - 2013-11-08 06:35 - 00000000 ____D C:\Program Files (x86)\DVDVideoSoft
2013-11-08 06:35 - 2013-10-08 18:11 - 00000000 ___RD C:\Users\Public\Desktop\DVDVideoSoft
2013-11-08 06:35 - 2013-10-08 18:11 - 00000000 ____D C:\Users\Saturn\AppData\Roaming\DVDVideoSoft
2013-11-08 06:33 - 2013-11-08 06:31 - 32206488 _____ (DVDVideoSoft Ltd. ) C:\Users\Saturn\Downloads\FreeYouTubeToMP3Converter.exe
2013-11-08 05:38 - 2013-09-03 15:52 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-11-08 05:38 - 2013-09-02 15:23 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-11-08 05:37 - 2013-09-15 19:24 - 00001004 _____ C:\Users\Public\Desktop\VLC media player.lnk
2013-11-08 05:26 - 2013-09-03 18:02 - 00000000 ____D C:\Program Files (x86)\Opera
2013-11-07 18:33 - 2013-10-11 09:24 - 00000000 ____D C:\Users\Saturn\Documents\Übungsordner
2013-11-07 16:32 - 2013-11-07 16:20 - 03864904 _____ (Secunia) C:\Users\Saturn\Downloads\PSISetup_30b8013.exe
2013-11-06 00:31 - 2013-08-22 16:38 - 00693240 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2013-11-06 00:31 - 2013-08-22 16:38 - 00105464 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2013-11-04 11:30 - 2013-10-15 09:08 - 00000000 ___RD C:\Users\Saturn\SkyDrive
2013-10-19 09:08 - 2013-11-13 10:52 - 23212544 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2013-10-19 07:58 - 2013-09-15 19:24 - 00000000 ____D C:\Users\Saturn\AppData\Roaming\vlc
2013-10-19 07:37 - 2013-11-13 10:52 - 17142784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2013-10-19 07:02 - 2013-11-13 10:52 - 02764288 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2013-10-19 06:37 - 2013-11-13 10:51 - 00111616 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwcollector.exe
2013-10-19 06:19 - 2013-11-13 10:51 - 00218624 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2013-10-19 06:10 - 2013-11-13 10:51 - 05765120 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2013-10-19 05:52 - 2013-11-13 10:51 - 02166272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2013-10-19 05:44 - 2013-11-13 10:51 - 04240384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2013-10-19 05:37 - 2013-11-13 10:52 - 12995584 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2013-10-19 05:31 - 2013-11-13 10:51 - 01993728 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2013-10-19 04:56 - 2013-11-13 10:52 - 11220992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2013-10-19 04:55 - 2013-11-13 10:51 - 01926656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2013-10-19 04:53 - 2013-11-13 10:51 - 02332160 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2013-10-19 04:23 - 2013-11-13 10:52 - 01394176 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2013-10-19 04:09 - 2013-11-13 10:51 - 01818112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2013-10-19 04:02 - 2013-11-13 10:51 - 01156608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2013-10-18 08:32 - 2013-10-18 08:32 - 00000000 ____D C:\ProgramData\DriverGenius
2013-10-18 08:29 - 2013-10-18 07:59 - 11360472 _____ (Driver-Soft Inc. ) C:\Users\Saturn\Downloads\Driver_Genius_Professional_DE_PPC_Content.exe
Files to move or delete:
====================
C:\ProgramData\MakeMarkerFile.exe
C:\Users\EasySurvey\EasySurvey.exe
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2013-11-08 11:48
==================== End Of Log ============================
Hallo Schrauber, alles funktioniert wunderbar! Danke!!!!!! Gruß Griselle |
|
19.11.2013, 10:02
| #10 |
| /// the machine /// TB-Ausbilder | Antivir: Warnung swapfile.sys konnte nicht geöffnet werden Fertig Die Reihenfolge ist hier entscheidend.
Hier noch ein paar Tipps zur Absicherung deines Systems. Ich kann garnicht zu oft erwähnen, wie wichtig es ist, dass dein System Up to Date ist.
Anti- Viren Software
Zusätzlicher Schutz
Sicheres Browsen
Alternative Browser Andere Browser tendieren zu etwas mehr Sicherheit als der IE, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden.
Performance Bereinige regelmäßig deine Temp Files. Ich empfehle hierzu TFC Halte dich fern von jedlichen Registry Cleanern. Diese Schaden deinem System mehr als sie helfen. Hier ein paar ( englishe ) Links Miekemoes Blogspot ( MVP ) Bill Castner ( MVP ) Don'ts
Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so das ich diesen Thread aus meinen Abos löschen kann.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
20.11.2013, 04:59
| #11 |
| | Antivir: Warnung swapfile.sys konnte nicht geöffnet werden Hallo Schrauber, sorry, aber ich kann weder Defogger noch Combofix auf meinem Computer finden. Wo muss ich denn nachsehen, was ich benutzt habe. Ich kann mich nicht erinnern. Die Ahnungslose Sofi |
|
20.11.2013, 13:14
| #12 |
| /// the machine /// TB-Ausbilder | Antivir: Warnung swapfile.sys konnte nicht geöffnet werden Haben wir nit benutzt, mach gleich Delfix
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
| Themen zu Antivir: Warnung swapfile.sys konnte nicht geöffnet werden |
| beheben, compu, computers, folgende, geladen, konnte, meldet, pup.optional.babylon.a, pup.optional.dealply.a, pup.optional.delta.a, pup.optional.digitalsite.a, pup.optional.digitalsites.a, pup.optional.installcore.a, pup.optional.opencandy, pup.optional.opencandy.a, pup.optional.regcleanerpro, seiten, swapfile.sys, warnung, zusammenhang |
Linear-Darstellung
