Gesellschaft zur Verfügung virus..

heady02 · 08.12.2013, 00:46

hallo leuteIch habe folgendes problem habe mir den oben genannten virus eingefangen krieg nix mehr auf meinem pc geöffnet er fährt normal hoch und sobald ich den browser öffnenwill kommt der tolle screen und ich kann nix mehr machen habe win 8 64bit system bitte um hilfe den virus zu löschen !

danke im vorraus

schrauber · 08.12.2013, 06:34

hi,

aber der Rechner bootet noch normal?

By the Way:

Es gibt so ne Erfindung die heißt Satzzeichen, und Groß/Kleinschreibung. Macht das Lesen viel einfacher

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:

FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

Starte jetzt FRST.
Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

heady02 · 08.12.2013, 08:22

Danke für die Schnelle Antwort. Ja der Rechner Bootet normal hoch bis zur Metro UI Danach geht nix mehr und es erscheint dieses Sperr bild !

schrauber · 08.12.2013, 08:36

Dann anders:

Scan mit Farbar's Recovery Scan Tool (Recovery Mode - Windows Vista, 7, 8)

Hinweise für Windows 8-Nutzer: Anleitung 1 (FRST-Variante) und Anleitung 2 (zweiter Teil)

Downloade dir bitte die passende Version des Tools (im Zweifel beide) und speichere diese auf einen USB Stick: FRST 32-Bit | FRST 64-Bit

Schließe den USB Stick an das infizierte System an und boote das System in die System Reparatur Option.

Scanne jetzt nach der bebilderten Anleitung oder verwende die folgende Kurzanleitung:

Über den Boot Manager:

Starte den Rechner neu.

Während dem Hochfahren drücke mehrmals die F8 Taste

Wähle nun Computer reparieren.

Wähle dein Betriebssystem und Benutzerkonto und klicke jeweils "Weiter".

Mit Windows CD/DVD (auch bei Windows 8 möglich):

Lege die Windows CD in dein Laufwerk.

Starte den Rechner neu und starte von der CD.

Wähle die Spracheinstellungen und klicke "Weiter".

Klicke auf Computerreparaturoptionen !

Wähle dein Betriebssystem und Benutzerkonto und klicke jeweils "Weiter".

Wähle in den Reparaturoptionen: Eingabeaufforderung

Gib nun bitte notepad ein und drücke Enter.

Im öffnenden Textdokument: Datei > Speichern unter... und wähle Computer.
Hier wird dir der Laufwerksbuchstabe deines USB Sticks angezeigt, merke ihn dir.

Schließe Notepad wieder

Gib nun bitte folgenden Befehl ein.
e:\frst.exe bzw. e:\frst64.exe
Hinweis: e steht für den Laufwerksbuchstaben deines USB Sticks, den du dir gemerkt hast. Gegebenfalls anpassen.

Akzeptiere den Disclaimer mit Ja und klicke Untersuchen

Das Tool erstellt eine FRST.txt auf deinem USB Stick. Poste den Inhalt bitte hier nach Möglichkeit in Code-Tags (Anleitung).

heady02 · 08.12.2013, 10:19

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 08-12-2013 01
Ran by SYSTEM on MININT-AC14QT8 on 08-12-2013 10:04:14
Running from E:\
Windows 8 (X64) OS Language: English(UK)
Internet Explorer Version 10
Boot Mode: Recovery

The current controlset is ControlSet001
ATTENTION!:=====> If the system is bootable FRST could be run from normal or Safe mode to create a complete log.

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13286472 2013-02-19] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_Dolby] - C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1277000 2013-02-18] (Realtek Semiconductor)
HKLM\...\Run: [HotKeysCmds] - C:\Windows\system32\hkcmd.exe [ ] ()
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKLM\...\Policies\Explorer: [ConfirmFileDelete] 1
HKLM-x32\...\Run: [IAStorIcon] - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [285240 2012-09-01] (Intel Corporation)
HKLM-x32\...\Run: [CLMLServer_For_P2G8] - C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe [111120 2012-06-08] (CyberLink)
HKLM-x32\...\Run: [CLVirtualDrive] - C:\Program Files (x86)\CyberLink\Power2Go8\VirtualDrive.exe [491120 2012-07-20] (CyberLink Corp.)
HKLM-x32\...\Run: [RemoteControl10] - C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [93296 2012-07-13] (CyberLink Corp.)
HKLM-x32\...\Run: [YouCam Service] - C:\Program Files (x86)\CyberLink\YouCam\YouCamService.exe [258592 2012-11-27] (CyberLink Corp.)
HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [683576 2013-11-14] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [ApnTBMon] - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe [1673680 2013-10-23] (APN)
HKU\Media\...\Run: [Browser Infrastructure Helper] - C:\Users\Media\AppData\Local\Smartbar\Application\QuickShare.exe [20248 2013-10-21] (Smartbar)
Startup: C:\Users\Media\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\avfrod2o.lnk
ShortcutTarget: avfrod2o.lnk -> C:\ProgramData\o2dorfva.jss (Microsoft Corporation)

==================== Services (Whitelisted) =================

S2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440376 2013-11-14] (Avira Operations GmbH & Co. KG)
S2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440376 2013-11-14] (Avira Operations GmbH & Co. KG)
S2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [1164360 2013-09-30] (Avira Operations GmbH & Co. KG)
S2 APNMCP; C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe [166352 2013-10-23] (APN LLC.)
S2 CyberLink PowerDVD 10 MS Monitor Service; C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSMonitorService.exe [70952 2011-04-13] (CyberLink)
S2 CyberLink PowerDVD 10 MS Service; C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSServer.exe [312616 2011-04-13] (CyberLink)
S2 IconMan_R; C:\Program Files (x86)\Realtek\Realtek USB 2.0 Card Reader\RIconMan.exe [2451456 2012-07-13] (Realsil Microelectronics Inc.)
S2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [164736 2012-11-16] (Intel Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [16048 2013-07-02] (Microsoft Corporation)
S2 Winmgmt; C:\ProgramData\avfrod2o.zvv [61556 2013-12-07] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

S2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [107416 2013-12-03] (Avira Operations GmbH & Co. KG)
S1 avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [132600 2013-11-14] (Avira Operations GmbH & Co. KG)
S1 avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [28600 2013-09-30] (Avira Operations GmbH & Co. KG)
S2 avnetflt; C:\Windows\system32\DRIVERS\avnetflt.sys [83160 2013-09-30] (Avira Operations GmbH & Co. KG)
S1 CLVirtualDrive; C:\Windows\system32\DRIVERS\CLVirtualDrive.sys [92536 2012-06-25] (CyberLink)
S3 FintekCIR; C:\Windows\system32\DRIVERS\FintekCIR.sys [33128 2012-06-07] (Fintek)
S3 IT9135BDA; C:\Windows\System32\Drivers\IT9135BDA.sys [178688 2013-05-02] (ITE                      )
S3 RTL8192cu; C:\Windows\system32\DRIVERS\rtwlanu.sys [1576080 2012-08-07] (Realtek Semiconductor Corporation                           )
S3 RtlWlanu; C:\Windows\system32\DRIVERS\rtwlanu.sys [1576080 2012-08-07] (Realtek Semiconductor Corporation                           )

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-12-08 10:04 - 2013-12-08 10:04 - 00000000 ____D C:\FRST
2013-12-08 08:20 - 2013-12-08 08:20 - 390193794 _____ C:\Windows\MEMORY.DMP
2013-12-08 08:20 - 2013-12-08 08:20 - 00262144 _____ C:\Windows\Minidump\120813-48625-01.dmp
2013-12-08 08:20 - 2013-12-08 08:20 - 00000000 ____D C:\Windows\Minidump
2013-12-07 22:11 - 2013-12-07 22:11 - 00000285 _____ C:\ProgramData\avfrod2o.reg
2013-12-07 22:10 - 2013-12-08 08:33 - 95025368 ____T C:\ProgramData\avfrod2o.fee
2013-12-07 22:10 - 2013-12-08 08:32 - 00000000 _____ C:\ProgramData\avfrod2o.odd
2013-12-07 22:10 - 2013-12-07 22:10 - 00208896 _____ (Microsoft Corporation) C:\ProgramData\o2dorfva.jss
2013-12-07 22:10 - 2013-12-07 22:10 - 00061556 ____T (Microsoft Corporation) C:\ProgramData\avfrod2o.zvv
2013-11-21 11:05 - 2013-11-05 22:58 - 00694232 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-11-21 11:05 - 2013-11-05 22:58 - 00078296 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-11-21 10:43 - 2013-10-02 23:25 - 01300992 _____ (Microsoft Corporation) C:\Windows\System32\gdi32.dll
2013-11-21 10:43 - 2013-10-01 23:37 - 01569280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2013-11-21 10:43 - 2013-10-01 23:26 - 01890816 _____ (Microsoft Corporation) C:\Windows\System32\crypt32.dll
2013-11-21 10:43 - 2013-10-01 22:22 - 01022976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2013-11-21 10:42 - 2013-10-12 08:45 - 02241536 _____ (Microsoft Corporation) C:\Windows\System32\wininet.dll
2013-11-21 10:42 - 2013-10-12 08:45 - 01364992 _____ (Microsoft Corporation) C:\Windows\System32\urlmon.dll
2013-11-21 10:42 - 2013-10-12 08:45 - 00051712 _____ (Microsoft Corporation) C:\Windows\System32\ie4uinit.exe
2013-11-21 10:42 - 2013-10-12 08:43 - 19269632 _____ (Microsoft Corporation) C:\Windows\System32\mshtml.dll
2013-11-21 10:42 - 2013-10-12 08:43 - 15404544 _____ (Microsoft Corporation) C:\Windows\System32\ieframe.dll
2013-11-21 10:42 - 2013-10-12 08:43 - 03959808 _____ (Microsoft Corporation) C:\Windows\System32\jscript9.dll
2013-11-21 10:42 - 2013-10-12 08:43 - 02648576 _____ (Microsoft Corporation) C:\Windows\System32\iertutil.dll
2013-11-21 10:42 - 2013-10-12 08:43 - 00855552 _____ (Microsoft Corporation) C:\Windows\System32\jscript.dll
2013-11-21 10:42 - 2013-10-12 08:43 - 00603136 _____ (Microsoft Corporation) C:\Windows\System32\msfeeds.dll
2013-11-21 10:42 - 2013-10-12 07:03 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-11-21 10:42 - 2013-10-12 07:03 - 01138176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-11-21 10:42 - 2013-10-12 07:02 - 14355968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-11-21 10:42 - 2013-10-12 07:02 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-11-21 10:42 - 2013-10-12 07:02 - 02877952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-11-21 10:42 - 2013-10-12 07:02 - 02049024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-11-21 10:42 - 2013-10-12 07:02 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-11-21 10:42 - 2013-10-12 07:02 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-11-21 10:42 - 2013-10-10 11:53 - 00096600 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\wfplwfs.sys
2013-11-21 10:42 - 2013-10-10 09:21 - 01160192 _____ (Microsoft Corporation) C:\Windows\System32\IKEEXT.DLL
2013-11-21 10:42 - 2013-10-10 09:20 - 00723968 _____ (Microsoft Corporation) C:\Windows\System32\BFE.DLL
2013-11-21 10:42 - 2013-10-01 23:37 - 02035712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2013-11-21 10:42 - 2013-10-01 23:26 - 02304512 _____ (Microsoft Corporation) C:\Windows\System32\authui.dll
2013-11-21 10:42 - 2013-09-23 22:30 - 00419328 _____ (Microsoft Corporation) C:\Windows\System32\schannel.dll
2013-11-21 10:42 - 2013-09-23 22:30 - 00323072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2013-11-21 10:42 - 2013-09-04 03:11 - 00576512 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\afd.sys
2013-11-21 10:42 - 2013-08-23 07:22 - 02062848 _____ (Microsoft Corporation) C:\Windows\System32\d3d11.dll
2013-11-21 10:42 - 2013-08-23 01:44 - 01711616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll
2013-11-14 07:03 - 2013-11-14 07:03 - 00434800 _____ C:\Windows\System32\FNTCACHE.DAT

==================== One Month Modified Files and Folders =======

2013-12-08 10:04 - 2013-12-08 10:04 - 00000000 ____D C:\FRST
2013-12-08 08:33 - 2013-12-07 22:10 - 95025368 ____T C:\ProgramData\avfrod2o.fee
2013-12-08 08:32 - 2013-12-07 22:10 - 00000000 _____ C:\ProgramData\avfrod2o.odd
2013-12-08 08:32 - 2013-11-03 21:51 - 00001118 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-12-08 08:32 - 2013-09-15 11:52 - 00001916 _____ C:\Windows\Tasks\LyricsSay-1-chromeinstaller.job
2013-12-08 08:32 - 2013-09-15 11:52 - 00001304 _____ C:\Windows\Tasks\LyricsSay-1-updater.job
2013-12-08 08:32 - 2013-09-15 11:52 - 00001208 _____ C:\Windows\Tasks\LyricsSay-1-codedownloader.job
2013-12-08 08:32 - 2013-09-15 11:52 - 00001108 _____ C:\Windows\Tasks\LyricsSay-1-enabler.job
2013-12-08 08:32 - 2012-07-26 07:22 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-12-08 08:20 - 2013-12-08 08:20 - 390193794 _____ C:\Windows\MEMORY.DMP
2013-12-08 08:20 - 2013-12-08 08:20 - 00262144 _____ C:\Windows\Minidump\120813-48625-01.dmp
2013-12-08 08:20 - 2013-12-08 08:20 - 00000000 ____D C:\Windows\Minidump
2013-12-08 00:05 - 2013-06-27 19:07 - 00003600 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-4178325993-1706142036-2666729720-1001
2013-12-07 23:52 - 2013-06-01 16:18 - 01260643 _____ C:\Windows\WindowsUpdate.log
2013-12-07 23:42 - 2013-10-17 09:21 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-12-07 23:00 - 2012-07-26 08:12 - 00000000 ____D C:\Windows\System32\sru
2013-12-07 22:11 - 2013-12-07 22:11 - 00000285 _____ C:\ProgramData\avfrod2o.reg
2013-12-07 22:10 - 2013-12-07 22:10 - 00208896 _____ (Microsoft Corporation) C:\ProgramData\o2dorfva.jss
2013-12-07 22:10 - 2013-12-07 22:10 - 00061556 ____T (Microsoft Corporation) C:\ProgramData\avfrod2o.zvv
2013-12-07 22:05 - 2013-11-03 21:51 - 00001122 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-12-07 17:23 - 2013-06-01 16:19 - 00000000 ____D C:\users\Media
2013-12-07 07:00 - 2013-11-03 21:51 - 00004094 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2013-12-07 07:00 - 2013-11-03 21:51 - 00003858 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2013-12-06 08:01 - 2013-11-03 21:51 - 00002179 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2013-12-04 06:00 - 2013-03-22 13:29 - 00786586 _____ C:\Windows\System32\perfh015.dat
2013-12-04 06:00 - 2013-03-22 13:29 - 00159734 _____ C:\Windows\System32\perfc015.dat
2013-12-04 06:00 - 2013-03-22 13:08 - 00752930 _____ C:\Windows\System32\perfh007.dat
2013-12-04 06:00 - 2013-03-22 13:08 - 00156156 _____ C:\Windows\System32\perfc007.dat
2013-12-04 06:00 - 2012-07-26 07:28 - 02695612 _____ C:\Windows\System32\PerfStringBackup.INI
2013-12-04 05:53 - 2013-03-22 12:23 - 00112810 _____ C:\Windows\PFRO.log
2013-12-04 05:52 - 2012-07-26 05:26 - 00262144 ___SH C:\Windows\System32\config\BBI
2013-12-03 13:22 - 2013-10-10 07:26 - 00107416 _____ (Avira Operations GmbH & Co. KG) C:\Windows\System32\Drivers\avgntflt.sys
2013-11-29 15:08 - 2013-07-15 18:03 - 00000000 ____D C:\Users\Media\Documents\Diablo III
2013-11-23 10:12 - 2012-07-26 08:12 - 00000000 ____D C:\Windows\AUInstallAgent
2013-11-22 17:44 - 2012-07-26 08:12 - 00000000 ____D C:\Windows\rescache
2013-11-21 11:03 - 2013-10-15 07:08 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-11-21 11:01 - 2012-07-26 08:12 - 00000000 ___RD C:\Windows\ToastData
2013-11-21 11:01 - 2012-07-26 08:12 - 00000000 ____D C:\Windows\SysWOW64\en-GB
2013-11-21 11:01 - 2012-07-26 08:12 - 00000000 ____D C:\Windows\System32\en-GB
2013-11-21 10:47 - 2013-07-30 09:04 - 00000000 ____D C:\Windows\System32\MRT
2013-11-21 10:46 - 2013-03-22 17:03 - 82896128 _____ (Microsoft Corporation) C:\Windows\System32\MRT.exe
2013-11-16 15:30 - 2013-09-15 11:52 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-11-16 06:46 - 2013-10-17 09:21 - 00003772 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-11-16 06:46 - 2013-10-17 09:21 - 00000000 ____D C:\Users\Media\AppData\Local\Adobe
2013-11-14 13:07 - 2013-10-10 07:26 - 00132600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\System32\Drivers\avipbb.sys
2013-11-14 07:03 - 2013-11-14 07:03 - 00434800 _____ C:\Windows\System32\FNTCACHE.DAT

Files to move or delete:
====================
C:\ProgramData\avfrod2o.reg


Some content of TEMP:
====================
C:\Users\Media\AppData\Local\Temp\0675.dll
C:\Users\Media\AppData\Local\Temp\avgnt.exe
C:\Users\Media\AppData\Local\Temp\BackupSetup.exe
C:\Users\Media\AppData\Local\Temp\COMAP.EXE
C:\Users\Media\AppData\Local\Temp\GameuxInstallHelper.dll
C:\Users\Media\AppData\Local\Temp\Installer.exe
C:\Users\Media\AppData\Local\Temp\OfficeSetup.exe
C:\Users\Media\AppData\Local\Temp\RegClean8.exe
C:\Users\Media\AppData\Local\Temp\Setup.X86.de-DE_O365HomePremRetail_e958d1bb-2090-467a-ae87-aac2cbecf2db_TX_DB_.exe
C:\Users\Media\AppData\Local\Temp\setup_fsu_cid.exe
C:\Users\Media\AppData\Local\Temp\uninst1.exe
C:\Users\Media\AppData\Local\Temp\vcredist_x64.exe


==================== Known DLLs (Whitelisted) ================


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit

==================== EXE ASSOCIATION =====================

HKLM\...\.exe: exefile => OK
HKLM\...\exefile\DefaultIcon: %1 => OK
HKLM\...\exefile\open\command: "%1" %* => OK

==================== Restore Points  =========================

5
Restore point made on: 2013-11-21 10:43:40
Restore point made on: 2013-11-25 09:45:51
Restore point made on: 2013-11-29 07:00:55
Restore point made on: 2013-12-03 07:51:10
Restore point made on: 2013-12-07 09:49:08

==================== Memory info =========================== 

Percentage of memory in use: 21%
Total physical RAM: 3960.38 MB
Available physical RAM: 3118.11 MB
Total Pagefile: 3960.38 MB
Available Pagefile: 3128.78 MB
Total Virtual: 8192 MB
Available Virtual: 8191.85 MB

==================== Drives ================================

Drive c: (Boot) (Fixed) (Total:404.05 GB) (Free:327.5 GB) NTFS
Drive d: (Recover) (Fixed) (Total:59.99 GB) (Free:42.75 GB) NTFS
Drive e: (KINGSTON) (Removable) (Total:3.75 GB) (Free:1.94 GB) FAT32
Drive g: (Win8_ML_20053070) (CDROM) (Total:4.21 GB) (Free:0 GB) UDF
Drive x: (Boot) (Fixed) (Total:0.03 GB) (Free:0.03 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 466 GB) (Disk ID: 00000000)

Partition: GPT Partition Type
========================================================
Disk: 2 (Size: 4 GB) (Disk ID: 04030201)
Partition 1: (Not Active) - (Size=4 GB) - (Type=0B)


LastRegBack: 2013-11-28 08:22

==================== End Of Log ============================

--- --- ---

schrauber · 08.12.2013, 16:29

Drücke bitte die

+ R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:

ATTFilter

Startup: C:\Users\Media\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\avfrod2o.lnk
ShortcutTarget: avfrod2o.lnk -> C:\ProgramData\o2dorfva.jss (Microsoft Corporation)
S2 Winmgmt; C:\ProgramData\avfrod2o.zvv [61556 2013-12-07] (Microsoft Corporation)
2013-12-07 22:11 - 2013-12-07 22:11 - 00000285 _____ C:\ProgramData\avfrod2o.reg
2013-12-07 22:10 - 2013-12-08 08:33 - 95025368 ____T C:\ProgramData\avfrod2o.fee
2013-12-07 22:10 - 2013-12-08 08:32 - 00000000 _____ C:\ProgramData\avfrod2o.odd
2013-12-07 22:10 - 2013-12-07 22:10 - 00208896 _____ (Microsoft Corporation) C:\ProgramData\o2dorfva.jss
2013-12-07 22:10 - 2013-12-07 22:10 - 00061556 ____T (Microsoft Corporation) C:\ProgramData\avfrod2o.zvv

Speichere diese bitte als Fixlist.txt auf deinem USB Stick.

Starte deinen Rechner erneut in die Reparaturoptionen
Starte nun die FRST.exe erneut und klicke den Entfernen Button.

Das Tool erstellt eine Fixlog.txt auf deinem USB Stick. Poste den Inhalt bitte hier.

Rechner normal starten.

heady02 · 08.12.2013, 19:52

nach langem warten hier die Fix log

Code:

ATTFilter

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 08-12-2013 01
Ran by SYSTEM at 2013-12-08 19:50:15 Run:1
Running from E:\
Boot Mode: Recovery
==============================================

Content of fixlist:
*****************
Startup: C:\Users\Media\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\avfrod2o.lnk
ShortcutTarget: avfrod2o.lnk -> C:\ProgramData\o2dorfva.jss (Microsoft Corporation)
S2 Winmgmt; C:\ProgramData\avfrod2o.zvv [61556 2013-12-07] (Microsoft Corporation)
2013-12-07 22:11 - 2013-12-07 22:11 - 00000285 _____ C:\ProgramData\avfrod2o.reg
2013-12-07 22:10 - 2013-12-08 08:33 - 95025368 ____T C:\ProgramData\avfrod2o.fee
2013-12-07 22:10 - 2013-12-08 08:32 - 00000000 _____ C:\ProgramData\avfrod2o.odd
2013-12-07 22:10 - 2013-12-07 22:10 - 00208896 _____ (Microsoft Corporation) C:\ProgramData\o2dorfva.jss
2013-12-07 22:10 - 2013-12-07 22:10 - 00061556 ____T (Microsoft Corporation) C:\ProgramData\avfrod2o.zvv
*****************

C:\Users\Media\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\avfrod2o.lnk => Moved successfully.
C:\ProgramData\o2dorfva.jss => Moved successfully.
Winmgmt => Service restored successfully.
C:\ProgramData\avfrod2o.reg => Moved successfully.
C:\ProgramData\avfrod2o.fee => Moved successfully.
C:\ProgramData\avfrod2o.odd => Moved successfully.
"C:\ProgramData\o2dorfva.jss" => File/Directory not found.
C:\ProgramData\avfrod2o.zvv => Moved successfully.

==== End of Fixlog ====

schrauber · 09.12.2013, 10:02

Startet der Rechner normal?

heady02 · 10.12.2013, 08:26

Sry für die Späte Antwort. Er startet ganz normal Sperr bild ist weg und alles funktioniert wieder ! ich Danke dir vielmals für deine schnelle hilfe du bist der Beste !

schrauber · 10.12.2013, 12:21

>Kontrollscans im normalen Modus

Downloade Dir bitte

Malwarebytes Anti-Malware

Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
Starte Malwarebytes' Anti-Malware (MBAM).
Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.

Downloade Dir bitte

AdwCleaner auf deinen Desktop.

Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
Starte die AdwCleaner.exe mit einem Doppelklick.
Stimme den Nutzungsbedingungen zu.
Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
- "Tracing" Schlüssel löschen
- Winsock Einstellungen zurücksetzen
- Proxy Einstellungen zurücksetzen
- Internet Explorer Richtlinien zurücksetzen
- Chrome Richtlinien zurücksetzen
- Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
Drücke eine beliebige Taste, um das Tool zu starten.
Je nach System kann der Scan eine Weile dauern.
Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:

FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

Starte jetzt FRST.
Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

heady02 · 10.12.2013, 16:01

Malewarebytes Anti Malware Log

Code:

ATTFilter

 Malwarebytes Anti-Malware  (Test) 1.75.0.1300
www.malwarebytes.org

Datenbank Version: v2013.12.10.05

Windows 8 x64 NTFS
Internet Explorer 11.0.9600.16438
Media :: HEADY05 [Administrator]

Schutz: Aktiviert

10.12.2013 15:29:19
mbam-log-2013-12-10 (15-29-19).txt

Art des Suchlaufs: Quick-Scan
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 234336
Laufzeit: 2 Minute(n), 45 Sekunde(n)

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 5
HKCR\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3} (PUP.Optional.Delta.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCU\SOFTWARE\DataMngr_Toolbar (PUP.Optional.DataMngr.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCU\Software\DataMngr (PUP.Optional.DataMngr.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCU\Software\BabSolution\Updater (PUP.Optional.Babylon.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKLM\SOFTWARE\IMINENT (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.

Infizierte Registrierungswerte: 1
HKLM\Software\Iminent|RefererId (PUP.Optional.Iminent.A) -> Daten: 677 -> Erfolgreich gelöscht und in Quarantäne gestellt.

Infizierte Dateiobjekte der Registrierung: 4
HKCU\SOFTWARE\Microsoft\Internet Explorer\Main|Search Page (PUP.Optional.Snapdo) -> Bösartig: (hxxp://feed.snapdo.com/?publisher=SnapdoGOblidooYB&dpid=GOB1&co=DE&userid=0bbee16a-5ba7-44f2-6d00-0ff8422aef01&searchtype=ds&q={searchTerms}&installDate={installDate}) Gut: (hxxp://www.google.com) -> Erfolgreich ersetzt und in Quarantäne gestellt.
HKCU\SOFTWARE\Microsoft\Internet Explorer\Main|Start Page (PUP.Optional.Snapdo) -> Bösartig: (hxxp://feed.snapdo.com/?publisher=SnapdoGOblidooYB&dpid=GOB1&co=DE&userid=0bbee16a-5ba7-44f2-6d00-0ff8422aef01&searchtype=hp&installDate={installDate}) Gut: (hxxp://www.google.com) -> Erfolgreich ersetzt und in Quarantäne gestellt.
HKCU\SOFTWARE\Microsoft\Internet Explorer\Search|Default_Search_URL (PUP.Optional.Snapdo) -> Bösartig: (hxxp://feed.snapdo.com/?publisher=SnapdoGOblidooYB&dpid=GOB1&co=DE&userid=0bbee16a-5ba7-44f2-6d00-0ff8422aef01&searchtype=ds&q={searchTerms}&installDate={installDate}) Gut: (hxxp://www.google.com) -> Erfolgreich ersetzt und in Quarantäne gestellt.
HKCU\SOFTWARE\Microsoft\Internet Explorer\Search|SearchAssistant (PUP.Optional.Snapdo) -> Bösartig: (hxxp://feed.snapdo.com/?publisher=SnapdoGOblidooYB&dpid=GOB1&co=DE&userid=0bbee16a-5ba7-44f2-6d00-0ff8422aef01&searchtype=ds&q={searchTerms}&installDate={installDate}) Gut: (hxxp://www.google.com) -> Erfolgreich ersetzt und in Quarantäne gestellt.

Infizierte Verzeichnisse: 6
C:\Users\Media\AppData\Local\Lollipop (Adware.LolliPop.IT) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Media\AppData\Roaming\Babylon (PUP.Optional.Babylon.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Media\AppData\Roaming\OpenCandy (PUP.Optional.OpenCandy) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Media\AppData\Roaming\OpenCandy\779387C8E4284550A1BE91F4A93C70E5 (PUP.Optional.OpenCandy) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Media\AppData\Roaming\OpenCandy\OpenCandy_779387C8E4284550A1BE91F4A93C70E5 (PUP.Optional.OpenCandy) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Media\AppData\Roaming\File Scout (PUP.Optional.FileScout.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.

Infizierte Dateien: 19
C:\ProgramData\DSearchLink\DSearchLink.exe (PUP.Optional.Delta.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Media\Downloads\Setup (1).exe (PUP.Optional.Firseria) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Media\Downloads\Setup (2).exe (PUP.OptionalBundleInstaller.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Media\Downloads\Setup (3).exe (PUP.OptionalBundleInstaller.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Media\Downloads\Setup (4).exe (PUP.OptionalBundleInstaller.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Media\Downloads\Setup (5).exe (PUP.OptionalBundleInstaller.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Media\Downloads\Setup (6).exe (PUP.Optional.Firseria) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Media\Downloads\Setup (7).exe (PUP.Optional.Firseria) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Media\Downloads\setup.exe (PUP.Optional.Bundlore) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Media\Downloads\winamp564_full_emusic-7plus_de-de.exe (PUP.Optional.OpenCandy) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Media\Downloads\Zune%20software(1).exe (PUP.Optional.Firseria) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Media\Downloads\Zune%20software(2).exe (PUP.Optional.Firseria) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Media\Downloads\Zune%20software.exe (PUP.Optional.Firseria) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Windows\Installer\3019f12.msi (PUP.Optional.SmartBar.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Windows\Installer\MSIBA5A.tmp (PUP.Optional.SmartBar) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Media\AppData\Local\Lollipop\lollipop.bat (Adware.LolliPop.IT) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Media\AppData\Roaming\Babylon\log_file.txt (PUP.Optional.Babylon.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Media\AppData\Roaming\OpenCandy\779387C8E4284550A1BE91F4A93C70E5\TuneUpUtilities2013-2200217_de-DE.exe (PUP.Optional.OpenCandy) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Media\AppData\Roaming\File Scout\uninst.exe (PUP.Optional.FileScout.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.

(Ende)

Adwcleaner :

Code:

ATTFilter

# AdwCleaner v3.014 - Bericht erstellt am 10/12/2013 um 15:40:01
# Updated 01/12/2013 von Xplode
# Betriebssystem : Windows 8.1  (64 bits)
# Benutzername : Media - HEADY05
# Gestartet von : C:\Users\Media\Desktop\adwcleaner.exe
# Option : Löschen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****

Ordner Gelöscht : C:\ProgramData\apn
Ordner Gelöscht : C:\ProgramData\Babylon
Ordner Gelöscht : C:\ProgramData\DSearchLink
Ordner Gelöscht : C:\Program Files (x86)\Advanced System Protector
Ordner Gelöscht : C:\Program Files (x86)\MyPC Backup
Ordner Gelöscht : C:\Program Files (x86)\pc speed up
Ordner Gelöscht : C:\Program Files (x86)\RegClean Pro
Ordner Gelöscht : C:\Users\Media\AppData\Local\PackageAware
Ordner Gelöscht : C:\Users\Media\AppData\Local\Temp\apn
Ordner Gelöscht : C:\Users\Media\AppData\LocalLow\Delta
Ordner Gelöscht : C:\Users\Media\AppData\Roaming\Advanced System Protector
Ordner Gelöscht : C:\Users\Media\AppData\Roaming\Systweak
Ordner Gelöscht : C:\Users\Heady05\AppData\Local\Temp\apn
Datei Gelöscht : C:\Users\Public\Desktop\eBay.lnk
Datei Gelöscht : C:\WINDOWS\System32\roboot64.exe
Datei Gelöscht : C:\Users\Media\AppData\Roaming\Mozilla\Firefox\Profiles\qr6wrshk.default\searchplugins\Web Search.xml
Datei Gelöscht : C:\Users\Media\AppData\Roaming\Mozilla\Firefox\Profiles\qr6wrshk.default\user.js

***** [ Verknüpfungen ] *****

Verknüpfung Desinfiziert : C:\Users\Media\Desktop\Search.lnk

***** [ Registrierungsdatenbank ] *****

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\*\shell\filescout
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Prod.cap
Schlüssel Gelöscht : HKCU\Software\5e55dfdce73bba45
Schlüssel Gelöscht : HKLM\SOFTWARE\5e55dfdce73bba45
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{0A18A436-2A7A-49F3-A488-30538A2F6323}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{007EFBDF-8A5D-4930-97CC-A4B437CBA777}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{41564952-412D-5637-00A7-7A786E7484D7}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{41564952-412D-5637-00A7-7A786E7484D7}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{006EE092-9658-4FD6-BD8E-A21A348E59F5}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{AE07101B-46D4-4A98-AF68-0333EA26E113}]
Wert Gelöscht : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{41564952-412D-5637-00A7-7A786E7484D7}]
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Wert Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{AE07101B-46D4-4A98-AF68-0333EA26E113}]
Schlüssel Gelöscht : HKCU\Software\BabSolution
Schlüssel Gelöscht : HKCU\Software\Delta
Schlüssel Gelöscht : HKCU\Software\InstalledThirdPartyPrograms
Schlüssel Gelöscht : HKCU\Software\lollipop
Schlüssel Gelöscht : HKCU\Software\SmartBar
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\Crossrider
Schlüssel Gelöscht : HKLM\Software\DataMngr
Schlüssel Gelöscht : HKLM\Software\Delta
Schlüssel Gelöscht : HKLM\Software\systweak
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\InstalledThirdPartyPrograms

***** [ Browser ] *****

-\\ Internet Explorer v11.0.9600.16384

Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\SearchUrl [Default]

-\\ Mozilla Firefox v25.0.1 (de)

[ Datei : C:\Users\Media\AppData\Roaming\Mozilla\Firefox\Profiles\qr6wrshk.default\prefs.js ]

Zeile gelöscht : user_pref("extensions.helperbar.DockingPositionDown", false);
Zeile gelöscht : user_pref("extensions.helperbar.SmartbarDisabled", false);
Zeile gelöscht : user_pref("extensions.helperbar.SmartbarStateMinimaized", false);
Zeile gelöscht : user_pref("extensions.helperbar.Visibility", false);
Zeile gelöscht : user_pref("extensions.helperbar.countryiso", "de");
Zeile gelöscht : user_pref("extensions.helperbar.downloadprovider", "quickobrw");
Zeile gelöscht : user_pref("extensions.helperbar.installationid", "0bbee16a-5ba7-44f2-6d00-0ff8422aef01");
Zeile gelöscht : user_pref("extensions.helperbar.installdate", "03/11/2013");
Zeile gelöscht : user_pref("extensions.helperbar.publisher", "quickobrw");

-\\ Google Chrome v31.0.1650.63

[ Datei : C:\Users\Media\AppData\Local\Google\Chrome\User Data\Default\preferences ]


*************************

AdwCleaner[R0].txt - [5583 octets] - [10/12/2013 15:38:03]
AdwCleaner[S0].txt - [4739 octets] - [10/12/2013 15:40:01]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [4799 octets] ##########

JRT :

Code:

ATTFilter

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.0.8 (11.05.2013:1)
OS: Windows 8.1 x64
Ran by Media on 10.12.2013 at 15:44:48,50
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-4178325993-1706142036-2666729720-1001\Software\sweetim



~~~ Files



~~~ Folders



~~~ FireFox

Emptied folder: C:\Users\Media\AppData\Roaming\mozilla\firefox\profiles\qr6wrshk.default\minidumps [5 files]



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 10.12.2013 at 15:49:52,17
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

FRST :
FRST Logfile:

FRST Logfile:

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 09-12-2013
Ran by Media (administrator) on HEADY05 on 10-12-2013 15:58:06
Running from C:\Users\Media\Downloads
Windows 8.1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(CyberLink) C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSMonitorService.exe
(CyberLink) C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSServer.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Microsoft Corporation) C:\Windows\System32\WWAHost.exe
(Microsoft Corporation) C:\Windows\WinStore\WSHost.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Realsil Microelectronics Inc.) C:\Program Files (x86)\Realtek\Realtek USB 2.0 Card Reader\RIconMan.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20315_x64__8wekyb3d8bbwe\livecomm.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [HotKeysCmds] - "C:\WINDOWS\system32\hkcmd.exe"
HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13286472 2013-02-19] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_Dolby] - C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1277000 2013-02-18] (Realtek Semiconductor)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKLM\...\Policies\Explorer: [ConfirmFileDelete] 1
HKLM-x32\...\Run: [IAStorIcon] - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [285240 2012-09-01] (Intel Corporation)
HKLM-x32\...\Run: [CLMLServer_For_P2G8] - C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe [111120 2012-06-08] (CyberLink)
HKLM-x32\...\Run: [CLVirtualDrive] - C:\Program Files (x86)\CyberLink\Power2Go8\VirtualDrive.exe [491120 2012-07-20] (CyberLink Corp.)
HKLM-x32\...\Run: [RemoteControl10] - C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [93296 2012-07-13] (CyberLink Corp.)
HKLM-x32\...\Run: [YouCam Service] - C:\Program Files (x86)\CyberLink\YouCam\YouCamService.exe [258592 2012-11-27] (CyberLink Corp.)
HKLM-x32\...\Run: [avgnt] - "C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe" /min
HKLM-x32\...\Run: [AvastUI.exe] - C:\Program Files\AVAST Software\Avast\AvastUI.exe [3568312 2013-12-10] (AVAST Software)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://lenovo13.msn.com
SearchScopes: HKCU - {EED3B87F-2293-4B0E-BF9F-71EF29E20F60} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MALNJS
BHO: avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO-x32: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
Toolbar: HKLM-x32 - avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF ProfilePath: C:\Users\Media\AppData\Roaming\Mozilla\Firefox\Profiles\qr6wrshk.default
FF NewTab: about:blank
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_152.dll ()
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_152.dll ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\4.1.10329.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3505.0912 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.169\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.169\npGoogleUpdate3.dll (Google Inc.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Adblock Plus - C:\Users\Media\AppData\Roaming\Mozilla\Firefox\Profiles\qr6wrshk.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF

Chrome: 
=======
CHR RestoreOnStartup: "hxxp://www.google.com/"
CHR DefaultSearchKeyword: google.de
CHR DefaultSearchProvider: Google
CHR DefaultSearchURL: {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:bookmarkBarPinned}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}{google:omniboxStartMarginParameter}ie={inputEncoding}
CHR DefaultSuggestURL: {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&q={searchTerms}&{google:cursorPosition}{google:zeroPrefixUrl}{google:pageClassification}sugkey={google:suggestAPIKeyParameter}
CHR Extension: (Google Docs) - C:\Users\Media\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0
CHR Extension: (Google Drive) - C:\Users\Media\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0
CHR Extension: (YouTube) - C:\Users\Media\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0
CHR Extension: (Google Search) - C:\Users\Media\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0
CHR Extension: (AdBlock) - C:\Users\Media\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.6.16_0
CHR Extension: (avast! Online Security) - C:\Users\Media\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\9.0.2005.45_0
CHR Extension: (BetterJTV) - C:\Users\Media\AppData\Local\Google\Chrome\User Data\Default\Extensions\njnnheckmeppnahikljofploeeodidhj\1.1.2_0
CHR Extension: (Google Wallet) - C:\Users\Media\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.5.0_0
CHR Extension: (Gmail) - C:\Users\Media\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx

==================== Services (Whitelisted) =================

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2013-12-10] (AVAST Software)
R2 CyberLink PowerDVD 10 MS Monitor Service; C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSMonitorService.exe [70952 2011-04-13] (CyberLink)
R2 CyberLink PowerDVD 10 MS Service; C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSServer.exe [312616 2011-04-13] (CyberLink)
R2 IconMan_R; C:\Program Files (x86)\Realtek\Realtek USB 2.0 Card Reader\RIconMan.exe [2451456 2012-07-13] (Realsil Microelectronics Inc.)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [164736 2012-11-16] (Intel Corporation)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [346872 2013-08-22] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23840 2013-08-22] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

S0 ADP80XX; C:\Windows\System32\drivers\ADP80XX.SYS [782176 2013-08-22] (PMC-Sierra)
R2 aswFsBlk; C:\WINDOWS\system32\drivers\aswFsBlk.sys [38984 2013-12-10] (AVAST Software)
R2 aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [84328 2013-12-10] (AVAST Software)
R1 aswRdr; C:\WINDOWS\system32\drivers\aswRdr2.sys [92544 2013-12-10] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2013-12-10] ()
R1 aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [1032416 2013-12-10] (AVAST Software)
R1 aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [409832 2013-12-10] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [205320 2013-12-10] ()
S3 bcmfn2; C:\Windows\System32\drivers\bcmfn2.sys [17624 2013-08-13] (Windows (R) Win 7 DDK provider)
R1 CLVirtualDrive; C:\Windows\system32\DRIVERS\CLVirtualDrive.sys [92536 2012-06-25] (CyberLink)
R3 FintekCIR; C:\Windows\system32\DRIVERS\FintekCIR.sys [33128 2012-06-07] (Fintek)
S3 iaLPSSi_GPIO; C:\Windows\System32\drivers\iaLPSSi_GPIO.sys [24568 2013-07-30] (Intel Corporation)
S3 iaLPSSi_I2C; C:\Windows\System32\drivers\iaLPSSi_I2C.sys [99320 2013-07-25] (Intel Corporation)
S0 iaStorAV; C:\Windows\System32\drivers\iaStorAV.sys [651248 2013-08-10] (Intel Corporation)
R0 intelpep; C:\Windows\System32\drivers\intelpep.sys [39768 2013-12-08] (Microsoft Corporation)
S3 IT9135BDA; C:\Windows\System32\Drivers\IT9135BDA.sys [178688 2013-05-02] (ITE                      )
S0 LSI_SAS3; C:\Windows\System32\drivers\lsi_sas3.sys [81760 2013-08-22] (LSI Corporation)
R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
R3 NdisVirtualBus; C:\Windows\System32\drivers\NdisVirtualBus.sys [16384 2013-08-22] (Microsoft Corporation)
S3 netvsc; C:\Windows\system32\DRIVERS\netvsc63.sys [87040 2013-08-22] (Microsoft Corporation)
S3 ReFS; C:\Windows\System32\Drivers\ReFS.sys [924512 2013-08-22] (Microsoft Corporation)
S3 SerCx2; C:\Windows\System32\drivers\SerCx2.sys [146272 2013-08-22] (Microsoft Corporation)
S0 stornvme; C:\Windows\System32\drivers\stornvme.sys [57176 2013-12-08] (Microsoft Corporation)
S3 UEFI; C:\Windows\System32\drivers\UEFI.sys [26976 2013-08-22] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [124256 2013-08-22] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-12-10 15:58 - 2013-12-10 15:58 - 00013154 _____ C:\Users\Media\Downloads\FRST.txt
2013-12-10 15:57 - 2013-12-10 15:57 - 01927982 _____ (Farbar) C:\Users\Media\Downloads\FRST64.exe
2013-12-10 15:49 - 2013-12-10 15:49 - 00000935 _____ C:\Users\Media\Desktop\JRT.txt
2013-12-10 15:44 - 2013-12-10 15:44 - 00000000 ____D C:\WINDOWS\ERUNT
2013-12-10 15:28 - 2013-12-10 15:28 - 01034531 _____ (Thisisu) C:\Users\Media\Desktop\JRT.exe
2013-12-10 15:26 - 2013-12-10 15:40 - 00000000 ____D C:\AdwCleaner
2013-12-10 15:26 - 2013-12-10 15:26 - 01110034 _____ C:\Users\Media\Desktop\adwcleaner.exe
2013-12-10 15:25 - 2013-12-10 15:25 - 00000000 ____D C:\Users\Media\AppData\Roaming\Malwarebytes
2013-12-10 15:24 - 2013-12-10 15:24 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Media\Downloads\mbam-setup-1.75.0.1300.exe
2013-12-10 15:24 - 2013-12-10 15:24 - 00001129 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-12-10 15:24 - 2013-12-10 15:24 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-12-10 15:24 - 2013-12-10 15:24 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-12-10 15:24 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbam.sys
2013-12-10 07:56 - 2013-12-10 07:56 - 00000000 ____D C:\Users\Media\AppData\Roaming\AVAST Software
2013-12-10 07:55 - 2013-12-10 15:43 - 00002199 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2013-12-10 07:55 - 2013-12-10 15:41 - 00001120 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2013-12-10 07:55 - 2013-12-10 15:00 - 00001124 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2013-12-10 07:55 - 2013-12-10 07:55 - 01032416 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSnx.sys
2013-12-10 07:55 - 2013-12-10 07:55 - 00409832 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSP.sys
2013-12-10 07:55 - 2013-12-10 07:55 - 00334648 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe
2013-12-10 07:55 - 2013-12-10 07:55 - 00205320 _____ C:\WINDOWS\system32\Drivers\aswVmm.sys
2013-12-10 07:55 - 2013-12-10 07:55 - 00092544 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr2.sys
2013-12-10 07:55 - 2013-12-10 07:55 - 00084328 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswMonFlt.sys
2013-12-10 07:55 - 2013-12-10 07:55 - 00065776 _____ C:\WINDOWS\system32\Drivers\aswRvrt.sys
2013-12-10 07:55 - 2013-12-10 07:55 - 00043152 _____ (AVAST Software) C:\WINDOWS\avastSS.scr
2013-12-10 07:55 - 2013-12-10 07:55 - 00038984 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswFsBlk.sys
2013-12-10 07:55 - 2013-12-10 07:55 - 00004096 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2013-12-10 07:55 - 2013-12-10 07:55 - 00003924 _____ C:\WINDOWS\System32\Tasks\avast! Emergency Update
2013-12-10 07:55 - 2013-12-10 07:55 - 00003860 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2013-12-10 07:55 - 2013-12-10 07:55 - 00001986 _____ C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2013-12-10 07:54 - 2013-12-10 07:54 - 00000000 ____D C:\ProgramData\AVAST Software
2013-12-10 07:54 - 2013-12-10 07:54 - 00000000 ____D C:\Program Files\AVAST Software
2013-12-10 07:53 - 2013-12-10 07:53 - 87529432 _____ (AVAST Software) C:\Users\Media\Downloads\avast_free_antivirus_setup2008.exe
2013-12-10 07:38 - 2013-12-10 07:38 - 00000000 ___RD C:\WINDOWS\BrowserChoice
2013-12-08 23:12 - 2013-12-08 23:19 - 00003600 _____ C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-4178325993-1706142036-2666729720-1004
2013-12-08 23:06 - 2013-12-08 23:06 - 00000000 ____D C:\Users\Heady05\AppData\Local\Intel_Corporation
2013-12-08 23:04 - 2013-12-08 23:04 - 00000000 ____D C:\Users\Heady05\AppData\Roaming\Intel Corporation
2013-12-08 23:03 - 2013-12-08 23:03 - 00000000 ___RD C:\Users\Heady05\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-12-08 23:03 - 2013-12-08 23:03 - 00000000 ___RD C:\Users\Heady05\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2013-12-08 23:02 - 2013-12-08 23:03 - 00000000 ____D C:\Users\Heady05\AppData\Local\Packages
2013-12-08 23:02 - 2013-12-08 23:03 - 00000000 ____D C:\Users\Heady05
2013-12-08 23:02 - 2013-12-08 23:02 - 00001458 _____ C:\Users\Heady05\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2013-12-08 23:02 - 2013-12-08 23:02 - 00000020 ___SH C:\Users\Heady05\ntuser.ini
2013-12-08 23:02 - 2013-12-08 23:02 - 00000000 _SHDL C:\Users\Heady05\Vorlagen
2013-12-08 23:02 - 2013-12-08 23:02 - 00000000 _SHDL C:\Users\Heady05\Startmenü
2013-12-08 23:02 - 2013-12-08 23:02 - 00000000 _SHDL C:\Users\Heady05\Netzwerkumgebung
2013-12-08 23:02 - 2013-12-08 23:02 - 00000000 _SHDL C:\Users\Heady05\Lokale Einstellungen
2013-12-08 23:02 - 2013-12-08 23:02 - 00000000 _SHDL C:\Users\Heady05\Eigene Dateien
2013-12-08 23:02 - 2013-12-08 23:02 - 00000000 _SHDL C:\Users\Heady05\Druckumgebung
2013-12-08 23:02 - 2013-12-08 23:02 - 00000000 _SHDL C:\Users\Heady05\Documents\Eigene Musik
2013-12-08 23:02 - 2013-12-08 23:02 - 00000000 _SHDL C:\Users\Heady05\Documents\Eigene Bilder
2013-12-08 23:02 - 2013-12-08 23:02 - 00000000 _SHDL C:\Users\Heady05\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2013-12-08 23:02 - 2013-12-08 23:02 - 00000000 _SHDL C:\Users\Heady05\AppData\Local\Verlauf
2013-12-08 23:02 - 2013-12-08 23:02 - 00000000 _SHDL C:\Users\Heady05\AppData\Local\Anwendungsdaten
2013-12-08 23:02 - 2013-12-08 23:02 - 00000000 _SHDL C:\Users\Heady05\Anwendungsdaten
2013-12-08 23:02 - 2013-12-08 23:02 - 00000000 ____D C:\Users\Heady05\AppData\Roaming\Adobe
2013-12-08 23:02 - 2013-12-08 23:02 - 00000000 ____D C:\Users\Heady05\AppData\Local\VirtualStore
2013-12-08 23:02 - 2013-08-22 16:36 - 00000000 ___RD C:\Users\Heady05\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2013-12-08 23:02 - 2013-08-22 16:36 - 00000000 ___RD C:\Users\Heady05\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2013-12-08 23:02 - 2013-08-22 16:36 - 00000000 ___RD C:\Users\Heady05\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2013-12-08 23:02 - 2013-08-22 16:36 - 00000000 ____D C:\Users\Heady05\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2013-12-08 23:02 - 2012-09-15 19:55 - 00002786 _____ C:\Users\Heady05\Desktop\MEDIONmail.lnk
2013-12-08 23:02 - 2012-09-15 19:55 - 00001779 _____ C:\Users\Heady05\Desktop\MEDION Serviceportal.lnk
2013-12-08 23:02 - 2012-08-30 14:56 - 00000977 _____ C:\Users\Heady05\Desktop\Windows 8 Info.lnk
2013-12-08 22:45 - 2013-12-08 22:45 - 00097280 ___SH C:\Users\Media\Desktop\Thumbs.db
2013-12-08 22:39 - 2013-12-10 15:42 - 00000000 __RDO C:\Users\Media\SkyDrive
2013-12-08 22:37 - 2013-12-08 22:37 - 00001458 _____ C:\Users\Media\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2013-12-08 22:36 - 2013-12-08 22:36 - 00000020 ___SH C:\Users\Media\ntuser.ini
2013-12-08 22:28 - 2013-12-08 22:28 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Musik
2013-12-08 22:28 - 2013-12-08 22:28 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Bilder
2013-12-08 22:28 - 2013-12-08 22:28 - 00000000 _SHDL C:\Users\Default\Vorlagen
2013-12-08 22:28 - 2013-12-08 22:28 - 00000000 _SHDL C:\Users\Default\Startmenü
2013-12-08 22:28 - 2013-12-08 22:28 - 00000000 _SHDL C:\Users\Default\Netzwerkumgebung
2013-12-08 22:28 - 2013-12-08 22:28 - 00000000 _SHDL C:\Users\Default\Lokale Einstellungen
2013-12-08 22:28 - 2013-12-08 22:28 - 00000000 _SHDL C:\Users\Default\Eigene Dateien
2013-12-08 22:28 - 2013-12-08 22:28 - 00000000 _SHDL C:\Users\Default\Druckumgebung
2013-12-08 22:28 - 2013-12-08 22:28 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Musik
2013-12-08 22:28 - 2013-12-08 22:28 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Bilder
2013-12-08 22:28 - 2013-12-08 22:28 - 00000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2013-12-08 22:28 - 2013-12-08 22:28 - 00000000 _SHDL C:\Users\Default\AppData\Local\Verlauf
2013-12-08 22:28 - 2013-12-08 22:28 - 00000000 _SHDL C:\Users\Default\AppData\Local\Anwendungsdaten
2013-12-08 22:28 - 2013-12-08 22:28 - 00000000 _SHDL C:\Users\Default\Anwendungsdaten
2013-12-08 22:28 - 2013-12-08 22:28 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Musik
2013-12-08 22:28 - 2013-12-08 22:28 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Bilder
2013-12-08 22:28 - 2013-12-08 22:28 - 00000000 _SHDL C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2013-12-08 22:28 - 2013-12-08 22:28 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Verlauf
2013-12-08 22:28 - 2013-12-08 22:28 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Anwendungsdaten
2013-12-08 22:28 - 2013-12-08 22:28 - 00000000 _SHDL C:\Programme
2013-12-08 22:28 - 2013-12-08 22:28 - 00000000 _SHDL C:\ProgramData\Vorlagen
2013-12-08 22:28 - 2013-12-08 22:28 - 00000000 _SHDL C:\ProgramData\Startmenü
2013-12-08 22:28 - 2013-12-08 22:28 - 00000000 _SHDL C:\ProgramData\Dokumente
2013-12-08 22:28 - 2013-12-08 22:28 - 00000000 _SHDL C:\ProgramData\Anwendungsdaten
2013-12-08 22:28 - 2013-12-08 22:28 - 00000000 _SHDL C:\Program Files\Gemeinsame Dateien
2013-12-08 22:28 - 2013-12-08 22:28 - 00000000 _SHDL C:\Dokumente und Einstellungen
2013-12-08 22:27 - 2013-12-10 15:55 - 01374884 _____ C:\WINDOWS\WindowsUpdate.log
2013-12-08 22:27 - 2013-12-08 22:27 - 00022960 _____ C:\WINDOWS\system32\emptyregdb.dat
2013-12-08 22:10 - 2013-12-08 22:10 - 00000000 ____D C:\WINDOWS\system32\config\bbimigrate
2013-12-08 22:09 - 2013-12-08 22:39 - 00000000 ____D C:\Users\Media
2013-12-08 22:09 - 2013-12-08 22:27 - 00020958 _____ C:\WINDOWS\diagwrn.xml
2013-12-08 22:09 - 2013-12-08 22:27 - 00020958 _____ C:\WINDOWS\diagerr.xml
2013-12-08 22:09 - 2013-12-08 22:10 - 00000000 ___RD C:\Users\Media\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2013-12-08 22:09 - 2013-12-08 22:09 - 00000000 _SHDL C:\Users\Media\Vorlagen
2013-12-08 22:09 - 2013-12-08 22:09 - 00000000 _SHDL C:\Users\Media\Startmenü
2013-12-08 22:09 - 2013-12-08 22:09 - 00000000 _SHDL C:\Users\Media\Netzwerkumgebung
2013-12-08 22:09 - 2013-12-08 22:09 - 00000000 _SHDL C:\Users\Media\Lokale Einstellungen
2013-12-08 22:09 - 2013-12-08 22:09 - 00000000 _SHDL C:\Users\Media\Eigene Dateien
2013-12-08 22:09 - 2013-12-08 22:09 - 00000000 _SHDL C:\Users\Media\Druckumgebung
2013-12-08 22:09 - 2013-12-08 22:09 - 00000000 _SHDL C:\Users\Media\Documents\Eigene Musik
2013-12-08 22:09 - 2013-12-08 22:09 - 00000000 _SHDL C:\Users\Media\Documents\Eigene Bilder
2013-12-08 22:09 - 2013-12-08 22:09 - 00000000 _SHDL C:\Users\Media\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2013-12-08 22:09 - 2013-12-08 22:09 - 00000000 _SHDL C:\Users\Media\AppData\Local\Verlauf
2013-12-08 22:09 - 2013-12-08 22:09 - 00000000 _SHDL C:\Users\Media\AppData\Local\Anwendungsdaten
2013-12-08 22:09 - 2013-12-08 22:09 - 00000000 _SHDL C:\Users\Media\Anwendungsdaten
2013-12-08 22:09 - 2013-08-22 16:36 - 00000000 ___RD C:\Users\Media\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2013-12-08 22:09 - 2013-08-22 16:36 - 00000000 ___RD C:\Users\Media\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2013-12-08 22:09 - 2013-08-22 16:36 - 00000000 ____D C:\Users\Media\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2013-12-08 22:05 - 2013-12-08 22:11 - 00000000 ____D C:\Program Files (x86)\Intel
2013-12-08 22:05 - 2013-12-08 22:05 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf
2013-12-08 22:05 - 2013-12-08 22:05 - 00000000 ____D C:\WINDOWS\SysWOW64\RTCOM
2013-12-08 22:05 - 2013-12-08 22:05 - 00000000 ____D C:\Program Files\Realtek
2013-12-08 22:05 - 2013-10-03 23:43 - 00064000 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.DLL
2013-12-08 22:05 - 2013-10-03 23:43 - 00060416 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.DLL
2013-12-08 22:03 - 2013-12-09 09:30 - 00000000 ___DC C:\WINDOWS\Panther
2013-12-08 22:03 - 2013-12-08 22:03 - 00000000 __SHD C:\Recovery
2013-12-08 22:02 - 2013-12-08 22:02 - 01341288 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll
2013-12-08 22:02 - 2013-12-08 22:02 - 01067008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32.dll
2013-12-08 22:01 - 2013-12-08 22:01 - 01286552 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll
2013-12-08 22:01 - 2013-12-08 22:01 - 01217024 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Streaming.dll
2013-12-08 22:01 - 2013-12-08 22:01 - 01018960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll
2013-12-08 22:01 - 2013-12-08 22:01 - 00977408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Streaming.dll
2013-12-08 22:01 - 2013-12-08 22:01 - 00872840 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfplat.dll
2013-12-08 22:01 - 2013-12-08 22:01 - 00698232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfplat.dll
2013-12-08 22:01 - 2013-12-08 22:01 - 00294400 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Sensors.dll
2013-12-08 22:01 - 2013-12-08 22:01 - 00225792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Sensors.dll
2013-12-08 22:00 - 2013-12-08 22:00 - 21196664 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2013-12-08 22:00 - 2013-12-08 22:00 - 18642504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2013-12-08 22:00 - 2013-12-08 22:00 - 18577408 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2013-12-08 22:00 - 2013-12-08 22:00 - 13925888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2013-12-08 22:00 - 2013-12-08 22:00 - 13176320 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2013-12-08 22:00 - 2013-12-08 22:00 - 11674112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2013-12-08 22:00 - 2013-12-08 22:00 - 02801664 _____ (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll
2013-12-08 22:00 - 2013-12-08 22:00 - 01085952 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.appcore.dll
2013-12-08 22:00 - 2013-12-08 22:00 - 01019392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\actxprxy.dll
2013-12-08 22:00 - 2013-12-08 22:00 - 00869888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.appcore.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 23212544 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 17142784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 12995584 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 11220992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 07399256 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2013-12-08 21:59 - 2013-12-08 21:59 - 06639616 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 05769728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 05765120 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 04599808 _____ (Microsoft Corporation) C:\WINDOWS\system32\d2d1.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 04240384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 04190720 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2013-12-08 21:59 - 2013-12-08 21:59 - 04104704 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncEngine.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 03934208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d2d1.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 03532288 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 03395920 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSService.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 02764288 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 02617344 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 02570240 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 02551640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2013-12-08 21:59 - 2013-12-08 21:59 - 02332160 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 02328872 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe
2013-12-08 21:59 - 2013-12-08 21:59 - 02295808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 02166272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 02143744 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 02140888 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 02134120 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d9.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 02065448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe
2013-12-08 21:59 - 2013-12-08 21:59 - 01993728 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2013-12-08 21:59 - 2013-12-08 21:59 - 01926656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2013-12-08 21:59 - 2013-12-08 21:59 - 01843712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Display.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 01818112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 01816576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Display.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 01799944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d9.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 01765384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 01765376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 01704448 _____ (Microsoft Corporation) C:\WINDOWS\system32\wucltux.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 01584128 _____ (Microsoft Corporation) C:\WINDOWS\system32\workfolderssvc.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 01530200 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2013-12-08 21:59 - 2013-12-08 21:59 - 01399176 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmde.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 01394176 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 01373872 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpmde.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 01362944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user32.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 01302528 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 01287064 _____ (Microsoft Corporation) C:\WINDOWS\system32\kernel32.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 01231360 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 01204968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winmde.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 01160704 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Web.Http.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 01156608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 01147904 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIAutomationCore.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 01067080 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfasfsrcsnk.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 01036288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kernel32.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 01011712 _____ (Microsoft Corporation) C:\WINDOWS\system32\TSWorkspace.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00922624 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00920064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIAutomationCore.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00909312 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmCoreR.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00903168 _____ (Microsoft Corporation) C:\WINDOWS\system32\iphlpsvc.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00888832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00883184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfasfsrcsnk.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00839680 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSShared.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00830464 _____ (Microsoft Corporation) C:\WINDOWS\system32\samsrv.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00795648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TSWorkspace.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00762368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Web.Http.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00761856 _____ (Microsoft Corporation) C:\WINDOWS\system32\WorkfoldersControl.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00708616 _____ (Microsoft Corporation) C:\WINDOWS\system32\iuilp.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00700928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSShared.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00699840 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d10level9.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00656384 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsapi.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00631296 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWAHost.exe
2013-12-08 21:59 - 2013-12-08 21:59 - 00621056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MrmCoreR.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00618496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\apphelp.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00607744 _____ (Microsoft Corporation) C:\WINDOWS\system32\comdlg32.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00578952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d10level9.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00578560 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.BackgroundTransfer.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00558080 _____ (Microsoft Corporation) C:\WINDOWS\system32\apphelp.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00533504 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppReadiness.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00531968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comdlg32.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00523096 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\acpi.sys
2013-12-08 21:59 - 2013-12-08 21:59 - 00518656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWAHost.exe
2013-12-08 21:59 - 2013-12-08 21:59 - 00516496 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00492544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dnsapi.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00481392 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00465960 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00454656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv.sys
2013-12-08 21:59 - 2013-12-08 21:59 - 00433664 _____ (Microsoft Corporation) C:\WINDOWS\system32\ipnathlp.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00411648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.BackgroundTransfer.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00406400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxgi.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00391512 _____ (Microsoft Corporation) C:\WINDOWS\system32\tsmf.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00385528 _____ C:\WINDOWS\system32\ApnDatabase.xml
2013-12-08 21:59 - 2013-12-08 21:59 - 00382808 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2013-12-08 21:59 - 2013-12-08 21:59 - 00381952 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUSettingsProvider.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00380656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00371032 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\spaceport.sys
2013-12-08 21:59 - 2013-12-08 21:59 - 00345552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tsmf.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00338944 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpclip.exe
2013-12-08 21:59 - 2013-12-08 21:59 - 00335360 _____ (Microsoft Corporation) C:\WINDOWS\system32\eappcfg.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00331776 _____ (Microsoft Corporation) C:\WINDOWS\system32\eapphost.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00326024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00325464 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBXHCI.SYS
2013-12-08 21:59 - 2013-12-08 21:59 - 00325120 _____ (Microsoft Corporation) C:\WINDOWS\system32\eapp3hst.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00317616 _____ (Microsoft Corporation) C:\WINDOWS\system32\wintrust.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00286208 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcsvDevice.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00272896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eappcfg.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00270848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\portcls.sys
2013-12-08 21:59 - 2013-12-08 21:59 - 00262144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eapphost.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00258904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdyboost.sys
2013-12-08 21:59 - 2013-12-08 21:59 - 00255488 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsrslvr.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00249856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00245248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eapp3hst.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00235960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wintrust.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00226304 _____ (Microsoft Corporation) C:\WINDOWS\system32\miutils.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00221184 _____ (Microsoft Corporation) C:\WINDOWS\system32\profsvc.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00218624 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2013-12-08 21:59 - 2013-12-08 21:59 - 00189952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00186880 _____ (Microsoft Corporation) C:\WINDOWS\system32\WorkFoldersShell.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00184832 _____ (Microsoft Corporation) C:\WINDOWS\system32\dafWfdProvider.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00180224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\miutils.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00171864 _____ (Microsoft Corporation) C:\WINDOWS\system32\kd_02_8086.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00160768 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxAllUserStore.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00139776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxAllUserStore.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00134656 _____ (Microsoft Corporation) C:\WINDOWS\system32\psmsrv.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00132608 _____ (Microsoft Corporation) C:\WINDOWS\system32\msched.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00113152 _____ (Microsoft Corporation) C:\WINDOWS\system32\shsetup.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00111616 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwcollector.exe
2013-12-08 21:59 - 2013-12-08 21:59 - 00104320 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncryptsslp.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00103424 _____ (Microsoft Corporation) C:\WINDOWS\system32\WiFiDisplay.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00101888 _____ (Microsoft Corporation) C:\WINDOWS\system32\eappgnui.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00094208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shsetup.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00093184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eappgnui.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00092672 _____ (Microsoft Corporation) C:\WINDOWS\system32\dafBth.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00088272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ncryptsslp.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\TSWbPrxy.exe
2013-12-08 21:59 - 2013-12-08 21:59 - 00057176 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\stornvme.sys
2013-12-08 21:59 - 2013-12-08 21:59 - 00054776 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
2013-12-08 21:59 - 2013-12-08 21:59 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\system32\ftp.exe
2013-12-08 21:59 - 2013-12-08 21:59 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ftp.exe
2013-12-08 21:59 - 2013-12-08 21:59 - 00044936 _____ (Microsoft Corporation) C:\WINDOWS\system32\wldp.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00039768 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\intelpep.sys
2013-12-08 21:59 - 2013-12-08 21:59 - 00031064 _____ (Microsoft Corporation) C:\WINDOWS\system32\ploptin.dll
2013-12-08 21:58 - 2013-12-08 21:58 - 01943536 _____ (Microsoft Corporation) C:\WINDOWS\system32\crypt32.dll
2013-12-08 21:58 - 2013-12-08 21:58 - 01581968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\crypt32.dll
2013-12-08 21:58 - 2013-12-08 21:58 - 01104384 _____ (Microsoft Corporation) C:\WINDOWS\system32\IKEEXT.DLL
2013-12-08 21:58 - 2013-12-08 21:58 - 00828416 _____ (Microsoft Corporation) C:\WINDOWS\system32\BFE.DLL
2013-12-08 21:58 - 2013-12-08 21:58 - 00262144 _____ C:\WINDOWS\system32\config\userdiff
2013-12-08 21:58 - 2013-12-08 21:58 - 00136536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wfplwfs.sys
2013-12-08 21:56 - 2013-12-08 22:13 - 00000000 ____D C:\WINDOWS\SysWOW64\XPSViewer
2013-12-08 21:56 - 2013-12-08 21:56 - 00000000 ____D C:\Program Files\Reference Assemblies
2013-12-08 21:56 - 2013-12-08 21:56 - 00000000 ____D C:\Program Files\MSBuild
2013-12-08 21:56 - 2013-12-08 21:56 - 00000000 ____D C:\Program Files (x86)\Reference Assemblies
2013-12-08 21:56 - 2013-12-08 21:56 - 00000000 ____D C:\Program Files (x86)\MSBuild
2013-12-08 21:55 - 2013-12-08 21:55 - 00155480 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbccgp.sys
2013-12-08 21:55 - 2013-08-03 05:48 - 01166520 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationNative_v0300.dll
2013-12-08 21:55 - 2013-08-03 05:48 - 00124112 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2013-12-08 21:55 - 2013-08-03 05:48 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe
2013-12-08 21:55 - 2013-08-03 05:41 - 00778936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationNative_v0300.dll
2013-12-08 21:55 - 2013-08-03 05:41 - 00102608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2013-12-08 21:55 - 2013-08-03 05:41 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TsWpfWrp.exe
2013-12-08 21:40 - 2013-12-08 22:27 - 00006639 _____ C:\WINDOWS\comsetup.log
2013-12-08 11:04 - 2013-12-08 11:04 - 00000000 ____D C:\FRST
2013-12-08 09:20 - 2013-12-08 09:20 - 390193794 _____ C:\WINDOWS\MEMORY.DMP

==================== One Month Modified Files and Folders =======

2013-12-10 15:58 - 2013-12-10 15:58 - 00013154 _____ C:\Users\Media\Downloads\FRST.txt
2013-12-10 15:57 - 2013-12-10 15:57 - 01927982 _____ (Farbar) C:\Users\Media\Downloads\FRST64.exe
2013-12-10 15:55 - 2013-12-08 22:27 - 01374884 _____ C:\WINDOWS\WindowsUpdate.log
2013-12-10 15:53 - 2013-06-27 20:07 - 00003600 _____ C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-4178325993-1706142036-2666729720-1001
2013-12-10 15:49 - 2013-12-10 15:49 - 00000935 _____ C:\Users\Media\Desktop\JRT.txt
2013-12-10 15:46 - 2013-09-30 05:14 - 01780340 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2013-12-10 15:46 - 2013-09-30 04:56 - 00765378 _____ C:\WINDOWS\system32\perfh007.dat
2013-12-10 15:46 - 2013-09-30 04:56 - 00159696 _____ C:\WINDOWS\system32\perfc007.dat
2013-12-10 15:45 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\AppReadiness
2013-12-10 15:44 - 2013-12-10 15:44 - 00000000 ____D C:\WINDOWS\ERUNT
2013-12-10 15:43 - 2013-12-10 07:55 - 00002199 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2013-12-10 15:42 - 2013-12-08 22:39 - 00000000 __RDO C:\Users\Media\SkyDrive
2013-12-10 15:42 - 2013-10-17 10:21 - 00000884 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2013-12-10 15:41 - 2013-12-10 07:55 - 00001120 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2013-12-10 15:40 - 2013-12-10 15:26 - 00000000 ____D C:\AdwCleaner
2013-12-10 15:40 - 2013-09-15 12:52 - 00000613 _____ C:\Users\Media\Desktop\Search.lnk
2013-12-10 15:40 - 2013-08-22 15:45 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2013-12-10 15:40 - 2013-08-22 14:25 - 00262144 ___SH C:\WINDOWS\system32\config\BBI
2013-12-10 15:33 - 2013-09-29 20:04 - 00007740 _____ C:\WINDOWS\PFRO.log
2013-12-10 15:28 - 2013-12-10 15:28 - 01034531 _____ (Thisisu) C:\Users\Media\Desktop\JRT.exe
2013-12-10 15:26 - 2013-12-10 15:26 - 01110034 _____ C:\Users\Media\Desktop\adwcleaner.exe
2013-12-10 15:25 - 2013-12-10 15:25 - 00000000 ____D C:\Users\Media\AppData\Roaming\Malwarebytes
2013-12-10 15:24 - 2013-12-10 15:24 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Media\Downloads\mbam-setup-1.75.0.1300.exe
2013-12-10 15:24 - 2013-12-10 15:24 - 00001129 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-12-10 15:24 - 2013-12-10 15:24 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-12-10 15:24 - 2013-12-10 15:24 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-12-10 15:00 - 2013-12-10 07:55 - 00001124 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2013-12-10 15:00 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\sru
2013-12-10 08:48 - 2013-06-01 17:19 - 00000000 ____D C:\Users\Media\AppData\Local\Packages
2013-12-10 07:56 - 2013-12-10 07:56 - 00000000 ____D C:\Users\Media\AppData\Roaming\AVAST Software
2013-12-10 07:55 - 2013-12-10 07:55 - 01032416 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSnx.sys
2013-12-10 07:55 - 2013-12-10 07:55 - 00409832 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSP.sys
2013-12-10 07:55 - 2013-12-10 07:55 - 00334648 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe
2013-12-10 07:55 - 2013-12-10 07:55 - 00205320 _____ C:\WINDOWS\system32\Drivers\aswVmm.sys
2013-12-10 07:55 - 2013-12-10 07:55 - 00092544 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr2.sys
2013-12-10 07:55 - 2013-12-10 07:55 - 00084328 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswMonFlt.sys
2013-12-10 07:55 - 2013-12-10 07:55 - 00065776 _____ C:\WINDOWS\system32\Drivers\aswRvrt.sys
2013-12-10 07:55 - 2013-12-10 07:55 - 00043152 _____ (AVAST Software) C:\WINDOWS\avastSS.scr
2013-12-10 07:55 - 2013-12-10 07:55 - 00038984 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswFsBlk.sys
2013-12-10 07:55 - 2013-12-10 07:55 - 00004096 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2013-12-10 07:55 - 2013-12-10 07:55 - 00003924 _____ C:\WINDOWS\System32\Tasks\avast! Emergency Update
2013-12-10 07:55 - 2013-12-10 07:55 - 00003860 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2013-12-10 07:55 - 2013-12-10 07:55 - 00001986 _____ C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2013-12-10 07:55 - 2013-06-28 05:25 - 00000000 ____D C:\Program Files (x86)\Google
2013-12-10 07:54 - 2013-12-10 07:54 - 00000000 ____D C:\ProgramData\AVAST Software
2013-12-10 07:54 - 2013-12-10 07:54 - 00000000 ____D C:\Program Files\AVAST Software
2013-12-10 07:53 - 2013-12-10 07:53 - 87529432 _____ (AVAST Software) C:\Users\Media\Downloads\avast_free_antivirus_setup2008.exe
2013-12-10 07:38 - 2013-12-10 07:38 - 00000000 ___RD C:\WINDOWS\BrowserChoice
2013-12-10 07:36 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\restore
2013-12-09 09:30 - 2013-12-08 22:03 - 00000000 ___DC C:\WINDOWS\Panther
2013-12-08 23:19 - 2013-12-08 23:12 - 00003600 _____ C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-4178325993-1706142036-2666729720-1004
2013-12-08 23:10 - 2013-07-11 08:04 - 00000000 ____D C:\Users\Media\Desktop\Summerjam 2013
2013-12-08 23:06 - 2013-12-08 23:06 - 00000000 ____D C:\Users\Heady05\AppData\Local\Intel_Corporation
2013-12-08 23:04 - 2013-12-08 23:04 - 00000000 ____D C:\Users\Heady05\AppData\Roaming\Intel Corporation
2013-12-08 23:03 - 2013-12-08 23:03 - 00000000 ___RD C:\Users\Heady05\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-12-08 23:03 - 2013-12-08 23:03 - 00000000 ___RD C:\Users\Heady05\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2013-12-08 23:03 - 2013-12-08 23:02 - 00000000 ____D C:\Users\Heady05\AppData\Local\Packages
2013-12-08 23:03 - 2013-12-08 23:02 - 00000000 ____D C:\Users\Heady05
2013-12-08 23:03 - 2013-06-01 17:21 - 00000000 ____D C:\WINDOWS\System32\Tasks\WPD
2013-12-08 23:02 - 2013-12-08 23:02 - 00001458 _____ C:\Users\Heady05\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2013-12-08 23:02 - 2013-12-08 23:02 - 00000020 ___SH C:\Users\Heady05\ntuser.ini
2013-12-08 23:02 - 2013-12-08 23:02 - 00000000 _SHDL C:\Users\Heady05\Vorlagen
2013-12-08 23:02 - 2013-12-08 23:02 - 00000000 _SHDL C:\Users\Heady05\Startmenü
2013-12-08 23:02 - 2013-12-08 23:02 - 00000000 _SHDL C:\Users\Heady05\Netzwerkumgebung
2013-12-08 23:02 - 2013-12-08 23:02 - 00000000 _SHDL C:\Users\Heady05\Lokale Einstellungen
2013-12-08 23:02 - 2013-12-08 23:02 - 00000000 _SHDL C:\Users\Heady05\Eigene Dateien
2013-12-08 23:02 - 2013-12-08 23:02 - 00000000 _SHDL C:\Users\Heady05\Druckumgebung
2013-12-08 23:02 - 2013-12-08 23:02 - 00000000 _SHDL C:\Users\Heady05\Documents\Eigene Musik
2013-12-08 23:02 - 2013-12-08 23:02 - 00000000 _SHDL C:\Users\Heady05\Documents\Eigene Bilder
2013-12-08 23:02 - 2013-12-08 23:02 - 00000000 _SHDL C:\Users\Heady05\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2013-12-08 23:02 - 2013-12-08 23:02 - 00000000 _SHDL C:\Users\Heady05\AppData\Local\Verlauf
2013-12-08 23:02 - 2013-12-08 23:02 - 00000000 _SHDL C:\Users\Heady05\AppData\Local\Anwendungsdaten
2013-12-08 23:02 - 2013-12-08 23:02 - 00000000 _SHDL C:\Users\Heady05\Anwendungsdaten
2013-12-08 23:02 - 2013-12-08 23:02 - 00000000 ____D C:\Users\Heady05\AppData\Roaming\Adobe
2013-12-08 23:02 - 2013-12-08 23:02 - 00000000 ____D C:\Users\Heady05\AppData\Local\VirtualStore
2013-12-08 22:45 - 2013-12-08 22:45 - 00097280 ___SH C:\Users\Media\Desktop\Thumbs.db
2013-12-08 22:39 - 2013-12-08 22:09 - 00000000 ____D C:\Users\Media
2013-12-08 22:39 - 2013-07-12 16:38 - 00000000 ___RD C:\Users\Media\SkyDrive.old
2013-12-08 22:37 - 2013-12-08 22:37 - 00001458 _____ C:\Users\Media\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2013-12-08 22:37 - 2013-06-01 17:20 - 00000000 ___RD C:\Users\Media\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-12-08 22:37 - 2013-06-01 17:20 - 00000000 ___RD C:\Users\Media\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2013-12-08 22:36 - 2013-12-08 22:36 - 00000020 ___SH C:\Users\Media\ntuser.ini
2013-12-08 22:29 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\rescache
2013-12-08 22:28 - 2013-12-08 22:28 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Musik
2013-12-08 22:28 - 2013-12-08 22:28 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Bilder
2013-12-08 22:28 - 2013-12-08 22:28 - 00000000 _SHDL C:\Users\Default\Vorlagen
2013-12-08 22:28 - 2013-12-08 22:28 - 00000000 _SHDL C:\Users\Default\Startmenü
2013-12-08 22:28 - 2013-12-08 22:28 - 00000000 _SHDL C:\Users\Default\Netzwerkumgebung
2013-12-08 22:28 - 2013-12-08 22:28 - 00000000 _SHDL C:\Users\Default\Lokale Einstellungen
2013-12-08 22:28 - 2013-12-08 22:28 - 00000000 _SHDL C:\Users\Default\Eigene Dateien
2013-12-08 22:28 - 2013-12-08 22:28 - 00000000 _SHDL C:\Users\Default\Druckumgebung
2013-12-08 22:28 - 2013-12-08 22:28 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Musik
2013-12-08 22:28 - 2013-12-08 22:28 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Bilder
2013-12-08 22:28 - 2013-12-08 22:28 - 00000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2013-12-08 22:28 - 2013-12-08 22:28 - 00000000 _SHDL C:\Users\Default\AppData\Local\Verlauf
2013-12-08 22:28 - 2013-12-08 22:28 - 00000000 _SHDL C:\Users\Default\AppData\Local\Anwendungsdaten
2013-12-08 22:28 - 2013-12-08 22:28 - 00000000 _SHDL C:\Users\Default\Anwendungsdaten
2013-12-08 22:28 - 2013-12-08 22:28 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Musik
2013-12-08 22:28 - 2013-12-08 22:28 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Bilder
2013-12-08 22:28 - 2013-12-08 22:28 - 00000000 _SHDL C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2013-12-08 22:28 - 2013-12-08 22:28 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Verlauf
2013-12-08 22:28 - 2013-12-08 22:28 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Anwendungsdaten
2013-12-08 22:28 - 2013-12-08 22:28 - 00000000 _SHDL C:\Programme
2013-12-08 22:28 - 2013-12-08 22:28 - 00000000 _SHDL C:\ProgramData\Vorlagen
2013-12-08 22:28 - 2013-12-08 22:28 - 00000000 _SHDL C:\ProgramData\Startmenü
2013-12-08 22:28 - 2013-12-08 22:28 - 00000000 _SHDL C:\ProgramData\Dokumente
2013-12-08 22:28 - 2013-12-08 22:28 - 00000000 _SHDL C:\ProgramData\Anwendungsdaten
2013-12-08 22:28 - 2013-12-08 22:28 - 00000000 _SHDL C:\Program Files\Gemeinsame Dateien
2013-12-08 22:28 - 2013-12-08 22:28 - 00000000 _SHDL C:\Dokumente und Einstellungen
2013-12-08 22:28 - 2013-08-22 16:36 - 00000000 ____D C:\Program Files\Windows NT
2013-12-08 22:28 - 2013-08-22 14:36 - 00000000 __RHD C:\Users\Default
2013-12-08 22:27 - 2013-12-08 22:27 - 00022960 _____ C:\WINDOWS\system32\emptyregdb.dat
2013-12-08 22:27 - 2013-12-08 22:09 - 00020958 _____ C:\WINDOWS\diagwrn.xml
2013-12-08 22:27 - 2013-12-08 22:09 - 00020958 _____ C:\WINDOWS\diagerr.xml
2013-12-08 22:27 - 2013-12-08 21:40 - 00006639 _____ C:\WINDOWS\comsetup.log
2013-12-08 22:27 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\Registration
2013-12-08 22:27 - 2013-08-22 15:46 - 00285902 _____ C:\WINDOWS\setupact.log
2013-12-08 22:21 - 2013-05-02 15:58 - 01804472 _____ C:\WINDOWS\SysWOW64\PerfStringBackup.INI
2013-12-08 22:20 - 2013-08-22 16:36 - 00000000 __RSD C:\WINDOWS\Media
2013-12-08 22:20 - 2013-08-22 16:36 - 00000000 __RHD C:\Users\Public\Libraries
2013-12-08 22:16 - 2013-08-22 15:44 - 00493880 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2013-12-08 22:15 - 2013-08-22 14:36 - 00000000 ____D C:\WINDOWS\system32\Sysprep
2013-12-08 22:15 - 2013-08-22 14:25 - 00008192 ___SH C:\WINDOWS\system32\config\ELAM
2013-12-08 22:15 - 2013-07-10 12:34 - 00000000 ____D C:\Users\Media\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Winamp Erkennungs-Plug-in
2013-12-08 22:15 - 2013-03-25 09:25 - 00000000 ____D C:\WINDOWS\da
2013-12-08 22:15 - 2013-03-25 09:24 - 00000000 ____D C:\WINDOWS\tr
2013-12-08 22:15 - 2013-03-25 09:24 - 00000000 ____D C:\WINDOWS\sv
2013-12-08 22:15 - 2013-03-25 09:24 - 00000000 ____D C:\WINDOWS\sl
2013-12-08 22:15 - 2013-03-25 09:24 - 00000000 ____D C:\WINDOWS\pl
2013-12-08 22:15 - 2013-03-25 09:24 - 00000000 ____D C:\WINDOWS\nl
2013-12-08 22:15 - 2013-03-25 09:24 - 00000000 ____D C:\WINDOWS\it
2013-12-08 22:15 - 2013-03-25 09:24 - 00000000 ____D C:\WINDOWS\hu
2013-12-08 22:15 - 2013-03-25 09:24 - 00000000 ____D C:\WINDOWS\fr
2013-12-08 22:15 - 2013-03-25 09:24 - 00000000 ____D C:\WINDOWS\fi
2013-12-08 22:15 - 2013-03-25 09:24 - 00000000 ____D C:\WINDOWS\es
2013-12-08 22:15 - 2013-03-25 09:24 - 00000000 ____D C:\WINDOWS\el
2013-12-08 22:15 - 2013-03-25 09:24 - 00000000 ____D C:\WINDOWS\de
2013-12-08 22:15 - 2012-07-26 10:43 - 00000000 ____D C:\WINDOWS\en-GB
2013-12-08 22:14 - 2013-08-22 16:37 - 00004893 _____ C:\WINDOWS\DtcInstall.log
2013-12-08 22:14 - 2012-07-26 06:37 - 00000000 ____D C:\Users\Default.migrated
2013-12-08 22:13 - 2013-12-08 21:56 - 00000000 ____D C:\WINDOWS\SysWOW64\XPSViewer
2013-12-08 22:13 - 2013-09-30 04:56 - 00000000 ____D C:\WINDOWS\SysWOW64\winrm
2013-12-08 22:13 - 2013-09-30 04:56 - 00000000 ____D C:\WINDOWS\SysWOW64\WCN
2013-12-08 22:13 - 2013-09-30 04:56 - 00000000 ____D C:\WINDOWS\SysWOW64\sysprep
2013-12-08 22:13 - 2013-09-30 04:56 - 00000000 ____D C:\WINDOWS\SysWOW64\slmgr
2013-12-08 22:13 - 2013-09-30 04:56 - 00000000 ____D C:\WINDOWS\SysWOW64\Printing_Admin_Scripts
2013-12-08 22:13 - 2013-09-30 04:56 - 00000000 ____D C:\WINDOWS\system32\winrm
2013-12-08 22:13 - 2013-09-30 04:56 - 00000000 ____D C:\WINDOWS\system32\WCN
2013-12-08 22:13 - 2013-09-30 04:56 - 00000000 ____D C:\WINDOWS\system32\slmgr
2013-12-08 22:13 - 2013-09-30 04:56 - 00000000 ____D C:\WINDOWS\system32\Printing_Admin_Scripts
2013-12-08 22:13 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\WinStore
2013-12-08 22:13 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\SysWOW64\MUI
2013-12-08 22:13 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\SysWOW64\migwiz
2013-12-08 22:13 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\SysWOW64\IME
2013-12-08 22:13 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\SysWOW64\en-GB
2013-12-08 22:13 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2013-12-08 22:13 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\SystemResetPlatform
2013-12-08 22:13 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\spool
2013-12-08 22:13 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\NDF
2013-12-08 22:13 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\MUI
2013-12-08 22:13 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\IME
2013-12-08 22:13 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\en-GB
2013-12-08 22:13 - 2013-08-22 14:36 - 00000000 ____D C:\WINDOWS\SysWOW64\SMI
2013-12-08 22:13 - 2013-08-22 14:36 - 00000000 ____D C:\WINDOWS\SysWOW64\oobe
2013-12-08 22:13 - 2013-08-22 14:36 - 00000000 ____D C:\WINDOWS\SysWOW64\Dism
2013-12-08 22:13 - 2013-08-22 14:36 - 00000000 ____D C:\WINDOWS\system32\oobe
2013-12-08 22:13 - 2013-08-22 14:36 - 00000000 ____D C:\WINDOWS\system32\Dism
2013-12-08 22:13 - 2013-05-02 16:09 - 00000000 ____D C:\WINDOWS\SysWOW64\sda
2013-12-08 22:11 - 2013-12-08 22:05 - 00000000 ____D C:\Program Files (x86)\Intel
2013-12-08 22:11 - 2013-09-30 04:59 - 00000000 ____D C:\Program Files\Windows Journal
2013-12-08 22:11 - 2013-08-22 16:43 - 00000000 ____D C:\WINDOWS\DigitalLocker
2013-12-08 22:11 - 2013-08-22 16:36 - 00000000 __SHD C:\Program Files\Windows Sidebar
2013-12-08 22:11 - 2013-08-22 16:36 - 00000000 __SHD C:\Program Files (x86)\Windows Sidebar
2013-12-08 22:11 - 2013-08-22 16:36 - 00000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2013-12-08 22:11 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\PolicyDefinitions
2013-12-08 22:11 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\IME
2013-12-08 22:11 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\Help
2013-12-08 22:11 - 2013-08-22 16:36 - 00000000 ____D C:\Program Files\Windows Photo Viewer
2013-12-08 22:11 - 2013-08-22 16:36 - 00000000 ____D C:\Program Files\Common Files\System
2013-12-08 22:11 - 2013-08-22 16:36 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
2013-12-08 22:11 - 2013-08-22 16:36 - 00000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2013-12-08 22:11 - 2013-03-22 13:27 - 00000000 ____D C:\ProgramData\PRICache
2013-12-08 22:10 - 2013-12-08 22:10 - 00000000 ____D C:\WINDOWS\system32\config\bbimigrate
2013-12-08 22:10 - 2013-12-08 22:09 - 00000000 ___RD C:\Users\Media\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2013-12-08 22:10 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\Recovery
2013-12-08 22:10 - 2013-06-27 19:58 - 00000000 ____D C:\Users\Media\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Electronic Arts
2013-12-08 22:09 - 2013-12-08 22:09 - 00000000 _SHDL C:\Users\Media\Vorlagen
2013-12-08 22:09 - 2013-12-08 22:09 - 00000000 _SHDL C:\Users\Media\Startmenü
2013-12-08 22:09 - 2013-12-08 22:09 - 00000000 _SHDL C:\Users\Media\Netzwerkumgebung
2013-12-08 22:09 - 2013-12-08 22:09 - 00000000 _SHDL C:\Users\Media\Lokale Einstellungen
2013-12-08 22:09 - 2013-12-08 22:09 - 00000000 _SHDL C:\Users\Media\Eigene Dateien
2013-12-08 22:09 - 2013-12-08 22:09 - 00000000 _SHDL C:\Users\Media\Druckumgebung
2013-12-08 22:09 - 2013-12-08 22:09 - 00000000 _SHDL C:\Users\Media\Documents\Eigene Musik
2013-12-08 22:09 - 2013-12-08 22:09 - 00000000 _SHDL C:\Users\Media\Documents\Eigene Bilder
2013-12-08 22:09 - 2013-12-08 22:09 - 00000000 _SHDL C:\Users\Media\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2013-12-08 22:09 - 2013-12-08 22:09 - 00000000 _SHDL C:\Users\Media\AppData\Local\Verlauf
2013-12-08 22:09 - 2013-12-08 22:09 - 00000000 _SHDL C:\Users\Media\AppData\Local\Anwendungsdaten
2013-12-08 22:09 - 2013-12-08 22:09 - 00000000 _SHDL C:\Users\Media\Anwendungsdaten
2013-12-08 22:05 - 2013-12-08 22:05 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf
2013-12-08 22:05 - 2013-12-08 22:05 - 00000000 ____D C:\WINDOWS\SysWOW64\RTCOM
2013-12-08 22:05 - 2013-12-08 22:05 - 00000000 ____D C:\Program Files\Realtek
2013-12-08 22:03 - 2013-12-08 22:03 - 00000000 __SHD C:\Recovery
2013-12-08 22:02 - 2013-12-08 22:02 - 01341288 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll
2013-12-08 22:02 - 2013-12-08 22:02 - 01067008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32.dll
2013-12-08 22:02 - 2013-08-22 16:36 - 00262144 _____ C:\WINDOWS\system32\config\BCD-Template
2013-12-08 22:01 - 2013-12-08 22:01 - 01286552 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll
2013-12-08 22:01 - 2013-12-08 22:01 - 01217024 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Streaming.dll
2013-12-08 22:01 - 2013-12-08 22:01 - 01018960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll
2013-12-08 22:01 - 2013-12-08 22:01 - 00977408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Streaming.dll
2013-12-08 22:01 - 2013-12-08 22:01 - 00872840 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfplat.dll
2013-12-08 22:01 - 2013-12-08 22:01 - 00698232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfplat.dll
2013-12-08 22:01 - 2013-12-08 22:01 - 00294400 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Sensors.dll
2013-12-08 22:01 - 2013-12-08 22:01 - 00225792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Sensors.dll
2013-12-08 22:01 - 2013-08-22 16:36 - 00000000 ___RD C:\WINDOWS\ToastData
2013-12-08 22:01 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\Camera
2013-12-08 22:00 - 2013-12-08 22:00 - 21196664 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2013-12-08 22:00 - 2013-12-08 22:00 - 18642504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2013-12-08 22:00 - 2013-12-08 22:00 - 18577408 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2013-12-08 22:00 - 2013-12-08 22:00 - 13925888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2013-12-08 22:00 - 2013-12-08 22:00 - 13176320 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2013-12-08 22:00 - 2013-12-08 22:00 - 11674112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2013-12-08 22:00 - 2013-12-08 22:00 - 02801664 _____ (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll
2013-12-08 22:00 - 2013-12-08 22:00 - 01085952 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.appcore.dll
2013-12-08 22:00 - 2013-12-08 22:00 - 01019392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\actxprxy.dll
2013-12-08 22:00 - 2013-12-08 22:00 - 00869888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.appcore.dll
2013-12-08 22:00 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\migwiz
2013-12-08 21:59 - 2013-12-08 21:59 - 23212544 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 17142784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 12995584 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 11220992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 07399256 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2013-12-08 21:59 - 2013-12-08 21:59 - 06639616 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 05769728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 05765120 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 04599808 _____ (Microsoft Corporation) C:\WINDOWS\system32\d2d1.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 04240384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 04190720 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2013-12-08 21:59 - 2013-12-08 21:59 - 04104704 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncEngine.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 03934208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d2d1.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 03532288 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 03395920 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSService.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 02764288 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 02617344 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 02570240 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 02551640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2013-12-08 21:59 - 2013-12-08 21:59 - 02332160 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 02328872 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe
2013-12-08 21:59 - 2013-12-08 21:59 - 02295808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 02166272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 02143744 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 02140888 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 02134120 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d9.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 02065448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe
2013-12-08 21:59 - 2013-12-08 21:59 - 01993728 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2013-12-08 21:59 - 2013-12-08 21:59 - 01926656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2013-12-08 21:59 - 2013-12-08 21:59 - 01843712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Display.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 01818112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 01816576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Display.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 01799944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d9.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 01765384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 01765376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 01704448 _____ (Microsoft Corporation) C:\WINDOWS\system32\wucltux.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 01584128 _____ (Microsoft Corporation) C:\WINDOWS\system32\workfolderssvc.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 01530200 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2013-12-08 21:59 - 2013-12-08 21:59 - 01399176 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmde.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 01394176 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 01373872 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpmde.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 01362944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user32.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 01302528 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 01287064 _____ (Microsoft Corporation) C:\WINDOWS\system32\kernel32.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 01231360 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 01204968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winmde.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 01160704 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Web.Http.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 01156608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 01147904 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIAutomationCore.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 01067080 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfasfsrcsnk.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 01036288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kernel32.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 01011712 _____ (Microsoft Corporation) C:\WINDOWS\system32\TSWorkspace.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00922624 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00920064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIAutomationCore.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00909312 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmCoreR.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00903168 _____ (Microsoft Corporation) C:\WINDOWS\system32\iphlpsvc.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00888832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00883184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfasfsrcsnk.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00839680 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSShared.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00830464 _____ (Microsoft Corporation) C:\WINDOWS\system32\samsrv.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00795648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TSWorkspace.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00762368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Web.Http.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00761856 _____ (Microsoft Corporation) C:\WINDOWS\system32\WorkfoldersControl.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00708616 _____ (Microsoft Corporation) C:\WINDOWS\system32\iuilp.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00700928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSShared.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00699840 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d10level9.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00656384 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsapi.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00631296 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWAHost.exe
2013-12-08 21:59 - 2013-12-08 21:59 - 00621056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MrmCoreR.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00618496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\apphelp.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00607744 _____ (Microsoft Corporation) C:\WINDOWS\system32\comdlg32.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00578952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d10level9.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00578560 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.BackgroundTransfer.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00558080 _____ (Microsoft Corporation) C:\WINDOWS\system32\apphelp.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00533504 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppReadiness.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00531968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comdlg32.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00523096 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\acpi.sys
2013-12-08 21:59 - 2013-12-08 21:59 - 00518656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWAHost.exe
2013-12-08 21:59 - 2013-12-08 21:59 - 00516496 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00492544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dnsapi.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00481392 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00465960 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00454656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv.sys
2013-12-08 21:59 - 2013-12-08 21:59 - 00433664 _____ (Microsoft Corporation) C:\WINDOWS\system32\ipnathlp.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00411648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.BackgroundTransfer.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00406400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxgi.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00391512 _____ (Microsoft Corporation) C:\WINDOWS\system32\tsmf.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00385528 _____ C:\WINDOWS\system32\ApnDatabase.xml
2013-12-08 21:59 - 2013-12-08 21:59 - 00382808 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2013-12-08 21:59 - 2013-12-08 21:59 - 00381952 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUSettingsProvider.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00380656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00371032 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\spaceport.sys
2013-12-08 21:59 - 2013-12-08 21:59 - 00345552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tsmf.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00338944 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpclip.exe
2013-12-08 21:59 - 2013-12-08 21:59 - 00335360 _____ (Microsoft Corporation) C:\WINDOWS\system32\eappcfg.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00331776 _____ (Microsoft Corporation) C:\WINDOWS\system32\eapphost.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00326024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00325464 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBXHCI.SYS
2013-12-08 21:59 - 2013-12-08 21:59 - 00325120 _____ (Microsoft Corporation) C:\WINDOWS\system32\eapp3hst.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00317616 _____ (Microsoft Corporation) C:\WINDOWS\system32\wintrust.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00286208 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcsvDevice.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00272896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eappcfg.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00270848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\portcls.sys
2013-12-08 21:59 - 2013-12-08 21:59 - 00262144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eapphost.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00258904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdyboost.sys
2013-12-08 21:59 - 2013-12-08 21:59 - 00255488 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsrslvr.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00249856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00245248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eapp3hst.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00235960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wintrust.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00226304 _____ (Microsoft Corporation) C:\WINDOWS\system32\miutils.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00221184 _____ (Microsoft Corporation) C:\WINDOWS\system32\profsvc.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00218624 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2013-12-08 21:59 - 2013-12-08 21:59 - 00189952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00186880 _____ (Microsoft Corporation) C:\WINDOWS\system32\WorkFoldersShell.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00184832 _____ (Microsoft Corporation) C:\WINDOWS\system32\dafWfdProvider.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00180224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\miutils.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00171864 _____ (Microsoft Corporation) C:\WINDOWS\system32\kd_02_8086.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00160768 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxAllUserStore.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00139776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxAllUserStore.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00134656 _____ (Microsoft Corporation) C:\WINDOWS\system32\psmsrv.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00132608 _____ (Microsoft Corporation) C:\WINDOWS\system32\msched.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00113152 _____ (Microsoft Corporation) C:\WINDOWS\system32\shsetup.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00111616 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwcollector.exe
2013-12-08 21:59 - 2013-12-08 21:59 - 00104320 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncryptsslp.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00103424 _____ (Microsoft Corporation) C:\WINDOWS\system32\WiFiDisplay.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00101888 _____ (Microsoft Corporation) C:\WINDOWS\system32\eappgnui.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00094208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shsetup.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00093184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eappgnui.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00092672 _____ (Microsoft Corporation) C:\WINDOWS\system32\dafBth.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00088272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ncryptsslp.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\TSWbPrxy.exe
2013-12-08 21:59 - 2013-12-08 21:59 - 00057176 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\stornvme.sys
2013-12-08 21:59 - 2013-12-08 21:59 - 00054776 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
2013-12-08 21:59 - 2013-12-08 21:59 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\system32\ftp.exe
2013-12-08 21:59 - 2013-12-08 21:59 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ftp.exe
2013-12-08 21:59 - 2013-12-08 21:59 - 00044936 _____ (Microsoft Corporation) C:\WINDOWS\system32\wldp.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00039768 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\intelpep.sys
2013-12-08 21:59 - 2013-12-08 21:59 - 00031064 _____ (Microsoft Corporation) C:\WINDOWS\system32\ploptin.dll
2013-12-08 21:58 - 2013-12-08 21:58 - 01943536 _____ (Microsoft Corporation) C:\WINDOWS\system32\crypt32.dll
2013-12-08 21:58 - 2013-12-08 21:58 - 01581968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\crypt32.dll
2013-12-08 21:58 - 2013-12-08 21:58 - 01104384 _____ (Microsoft Corporation) C:\WINDOWS\system32\IKEEXT.DLL
2013-12-08 21:58 - 2013-12-08 21:58 - 00828416 _____ (Microsoft Corporation) C:\WINDOWS\system32\BFE.DLL
2013-12-08 21:58 - 2013-12-08 21:58 - 00262144 _____ C:\WINDOWS\system32\config\userdiff
2013-12-08 21:58 - 2013-12-08 21:58 - 00136536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wfplwfs.sys
2013-12-08 21:56 - 2013-12-08 21:56 - 00000000 ____D C:\Program Files\Reference Assemblies
2013-12-08 21:56 - 2013-12-08 21:56 - 00000000 ____D C:\Program Files\MSBuild
2013-12-08 21:56 - 2013-12-08 21:56 - 00000000 ____D C:\Program Files (x86)\Reference Assemblies
2013-12-08 21:56 - 2013-12-08 21:56 - 00000000 ____D C:\Program Files (x86)\MSBuild
2013-12-08 21:55 - 2013-12-08 21:55 - 00155480 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbccgp.sys
2013-12-08 21:48 - 2013-06-01 17:18 - 01437722 _____ C:\WINDOWS\WindowsUpdate (1).log
2013-12-08 21:24 - 2012-07-26 09:12 - 00000000 ____D C:\WINDOWS\AUInstallAgent
2013-12-08 20:14 - 2013-03-22 14:29 - 00786586 _____ C:\WINDOWS\system32\perfh015.dat
2013-12-08 20:14 - 2013-03-22 14:29 - 00159734 _____ C:\WINDOWS\system32\perfc015.dat
2013-12-08 11:04 - 2013-12-08 11:04 - 00000000 ____D C:\FRST
2013-12-08 09:20 - 2013-12-08 09:20 - 390193794 _____ C:\WINDOWS\MEMORY.DMP
2013-11-29 16:08 - 2013-07-15 19:03 - 00000000 ____D C:\Users\Media\Documents\Diablo III
2013-11-21 12:03 - 2013-10-15 08:08 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-11-21 11:47 - 2013-07-30 10:04 - 00000000 ____D C:\WINDOWS\system32\MRT
2013-11-21 11:46 - 2013-03-22 18:03 - 82896128 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2013-11-16 16:30 - 2013-09-15 12:52 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-11-16 07:46 - 2013-10-17 10:21 - 00003772 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
2013-11-16 07:46 - 2013-10-17 10:21 - 00000000 ____D C:\Users\Media\AppData\Local\Adobe

Some content of TEMP:
====================
C:\Users\Heady05\AppData\Local\Temp\avgnt.exe
C:\Users\Media\AppData\Local\Temp\avgnt.exe
C:\Users\Media\AppData\Local\Temp\Quarantine.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-12-08 22:04

==================== End Of Log ============================

--- --- ---

--- --- ---

--- --- ---

und die Addition :

Code:

ATTFilter

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 09-12-2013
Ran by Media at 2013-12-10 15:58:40
Running from C:\Users\Media\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: avast! Antivirus (Disabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Disabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}

==================== Installed Programs ======================

Adobe Flash Player 11 Plugin (x32 Version: 11.9.900.152)
avast! Free Antivirus (x32 Version: 9.0.2008)
CyberLink LabelPrint 2.5 (x32 Version: 2.5.5415)
CyberLink MediaEspresso 6.5 (x32 Version: 6.5.3718_45957)
CyberLink Power2Go 8 (x32 Version: 8.0.0.1920)
CyberLink PowerDVD 10 (x32 Version: 10.0.4915.02)
CyberLink PowerDVD Copy 1.5 (x32 Version: 1.5.2715b)
CyberLink PowerRecover (Version: 5.7.0.0913)
CyberLink PowerRecover (x32 Version: 5.7.0.0913)
CyberLink YouCam 5 (x32 Version: 5.0.1930)
D3DX10 (x32 Version: 15.4.2368.0902)
Dark Age of Camelot (x32 Version: )
Diablo III (x32)
Dolby Advanced Audio v2 (x32 Version: 7.2.8000.17)
Fintek_CIR (x32 Version: 2.00.0000)
Fotogalerie (x32 Version: 16.4.3505.0912)
Fotogalerija (x32 Version: 16.4.3505.0912)
Fotogalleri (x32 Version: 16.4.3505.0912)
Fotogalleriet (x32 Version: 16.4.3505.0912)
Fotoğraf Galerisi (x32 Version: 16.4.3505.0912)
Fotótár (x32 Version: 16.4.3505.0912)
Free YouTube to MP3 Converter version 3.12.14.1022 (x32 Version: 3.12.14.1022)
Galeria de Fotografias (x32 Version: 16.4.3505.0912)
Galería de fotos (x32 Version: 16.4.3505.0912)
Galeria fotografii (x32 Version: 16.4.3505.0912)
Galerie de photos (x32 Version: 16.4.3505.0912)
Google Chrome (x32 Version: 31.0.1650.63)
Google Update Helper (x32 Version: 1.3.21.169)
Intel(R) Management Engine Components (x32 Version: 8.1.20.1337)
Intel(R) Processor Graphics (x32 Version: 10.18.10.3316)
Intel(R) Rapid Storage Technology (x32 Version: 11.6.0.1030)
Intel(R) SDK for OpenCL - CPU Only Runtime Package (x32 Version: 2.0.0.37149)
Intel® Trusted Connect Service Client (Version: 1.26.242.3)
IT9130 Driver v12.10.4.2 (x32)
Malwarebytes Anti-Malware Version 1.75.0.1300 (x32 Version: 1.75.0.1300)
Mediathek (x32 Version: 1.4.0)
Medion Home Cinema 10 (x32 Version: 10.0)
Medion Home Cinema 10 (x32 Version: 10.1924)
Microsoft Application Error Reporting (Version: 12.0.6015.5000)
Microsoft Silverlight (x32 Version: 4.1.10329.0)
Microsoft SkyDrive (HKCU Version: 16.4.6013.0910)
Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.59193)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (Version: 10.0.40219)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219)
Movie Maker (x32 Version: 16.4.3505.0912)
Mozilla Firefox 25.0.1 (x86 de) (x32 Version: 25.0.1)
Mozilla Maintenance Service (x32 Version: 25.0.1)
MSVCRT (x32 Version: 15.4.2862.0708)
MSVCRT110 (x32 Version: 16.4.1108.0727)
MSVCRT110_amd64 (Version: 16.4.1109.0912)
MSXML 4.0 SP3 Parser (KB2758694) (x32 Version: 4.30.2117.0)
Photo Common (x32 Version: 16.4.3505.0912)
Photo Gallery (x32 Version: 16.4.3505.0912)
Podstawowe programy Windows Live (x32 Version: 16.4.3505.0912)
Raccolta foto (x32 Version: 16.4.3505.0912)
Ralink RT2860 Wireless LAN Card (x32 Version: 1.2.0.40)
Realtek Ethernet Controller Driver (x32 Version: 8.3.730.2012)
Realtek High Definition Audio Driver (x32 Version: 6.0.1.6844)
Realtek USB 2.0 Card Reader (x32 Version: 6.2.8400.30137)
StarCraft II (x32 Version: 2.0.11.26825)
Valokuvavalikoima (x32 Version: 16.4.3505.0912)
Winamp (x32 Version: 5.64 )
Winamp Erkennungs-Plug-in (HKCU Version: 1.0.0.1)
Windows Live (x32 Version: 16.4.3505.0912)
Windows Live Communications Platform (x32 Version: 16.4.3505.0912)
Windows Live Essentials (x32 Version: 16.4.3505.0912)
Windows Live Installer (x32 Version: 16.4.3505.0912)
Windows Live Photo Common (x32 Version: 16.4.3505.0912)
Windows Live PIMT Platform (x32 Version: 16.4.3505.0912)
Windows Live SOXE (x32 Version: 16.4.3505.0912)
Windows Live SOXE Definitions (x32 Version: 16.4.3505.0912)
Windows Live Temel Parçalar (x32 Version: 16.4.3505.0912)
Windows Live UX Platform (x32 Version: 16.4.3505.0912)
Windows Live UX Platform Language Pack (x32 Version: 16.4.3505.0912)
Windows Liven peruspaketti (x32 Version: 16.4.3505.0912)
Συλλογή φωτογραφιών (x32 Version: 16.4.3505.0912)

==================== Restore Points  =========================

10-12-2013 06:36:06 Windows Update

==================== Hosts content: ==========================

2013-08-22 14:25 - 2013-08-22 14:25 - 00000824 ____A C:\WINDOWS\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {05293577-D647-4185-B859-C94839A0B2E3} - System32\Tasks\Microsoft\Windows\SettingSync\NetworkStateChangeTask
Task: {1CC5218F-317D-477F-9A0F-48681C4B6ED7} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-11-16] (Adobe Systems Incorporated)
Task: {2C9C0C6C-2A74-46F2-858A-4389D253EAD0} - System32\Tasks\Microsoft\Windows\Sysmain\HybridDriveCachePrepopulate
Task: {320A0DEC-F9E3-4690-AB52-10B515D7C024} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-12-10] (Google Inc.)
Task: {352E6CA0-7314-4DF4-89C4-682368D80D57} - System32\Tasks\Microsoft\Windows\Workplace Join\Automatic-Workplace-Join => C:\Windows\System32\AutoWorkplace.exe [2013-08-22] (Microsoft Corporation)
Task: {3B6D8A73-F20B-4C93-B8FB-56A154F172D2} - System32\Tasks\Microsoft\Windows\Time Zone\SynchronizeTimeZone => C:\Windows\System32\tzsync.exe [2013-08-22] (Microsoft Corporation)
Task: {3C40CE01-3FDA-4CB1-AEBF-3A8B4CEC9C55} - System32\Tasks\Dolby Selector => C:\Program Files (x86)\Dolby Advanced Audio v2\pcee4.exe [2012-08-31] (Dolby Laboratories Inc.)
Task: {3C5056AF-27D5-4A2D-90CF-AE5FD54A9CA9} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-12-10] (Google Inc.)
Task: {49754026-21E1-41FC-94FD-727AFE414FE7} - System32\Tasks\Microsoft\Windows\Sysmain\HybridDriveCacheRebalance
Task: {6AA91E8C-DDBD-4979-8464-4062F7681A19} - System32\Tasks\Microsoft\Windows\Plug and Play\Plug and Play Cleanup
Task: {6DFCB649-0769-4F83-BB10-F60F235F6D3D} - System32\Tasks\Microsoft\Windows\SkyDrive\Idle Sync Maintenance Task
Task: {6FBEBD92-330F-4330-9D05-AE9C8D020659} - System32\Tasks\Update DNS => C:\Windows\SysWOW64\dnscsh.exe
Task: {77F1D869-6E65-4079-A2A0-E2023408EF97} - System32\Tasks\Microsoft\Windows\ApplicationData\CleanupTemporaryState => Rundll32.exe Windows.Storage.ApplicationData.dll,CleanupTemporaryState
Task: {872D0E53-FD2E-41E3-B431-698AF82882CE} - System32\Tasks\Microsoft\Windows\SkyDrive\Routine Maintenance Task
Task: {8CC813C9-712A-41EF-9512-B233444FC669} - System32\Tasks\Microsoft\Windows\AppxDeploymentClient\Pre-staged app cleanup => C:\Windows\System32\AppXDeploymentClient.dll [2013-09-30] (Microsoft Corporation)
Task: {9FF4C139-5234-410C-B7FA-23EE2FD2AB53} - System32\Tasks\Microsoft\Windows\Work Folders\Work Folders Maintenance Work
Task: {CEB406A1-4D00-4FD0-88BD-8EDB3B311933} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2013-12-10] (AVAST Software)
Task: {CFD7C21A-808B-487B-A6EC-8A10E44E8360} - System32\Tasks\Microsoft\Windows\SettingSync\BackupTask
Task: {DA46820F-FF8A-4B5E-A6B2-B12185DCFFFB} - System32\Tasks\Microsoft\Windows\Work Folders\Work Folders Logon Synchronization
Task: {E6D378FA-E068-4BCB-80DE-56D43A249507} - System32\Tasks\Microsoft\Windows\RecoveryEnvironment\VerifyWinRE
Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2013-10-03 23:42 - 2013-10-03 23:42 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll
2013-12-10 15:34 - 2013-12-10 13:08 - 02152448 _____ () C:\Program Files\AVAST Software\Avast\defs\13121000\algo.dll
2013-12-10 07:55 - 2013-12-10 07:55 - 19336120 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2013-12-10 07:50 - 2013-12-10 07:50 - 00016384 _____ () C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\PSIClient\51e8ad01f95536e724df502bba0057b6\PSIClient.ni.dll
2013-05-02 15:57 - 2012-11-16 03:32 - 01199648 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll
2013-12-10 07:55 - 2013-12-04 03:47 - 00702416 _____ () C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\libglesv2.dll
2013-12-10 07:55 - 2013-12-04 03:47 - 00099792 _____ () C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\libegl.dll
2013-12-10 07:55 - 2013-12-04 03:48 - 04055504 _____ () C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\pdf.dll
2013-12-10 07:55 - 2013-12-04 03:48 - 00399312 _____ () C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\ppGoogleNaClPluginChrome.dll
2013-12-10 07:55 - 2013-12-04 03:47 - 01619408 _____ () C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\ffmpegsumo.dll

==================== Alternate Data Streams (whitelisted) =========

AlternateDataStreams: C:\Users\Media\SkyDrive:ms-properties

==================== Safe Mode (whitelisted) ===================


==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (12/10/2013 09:56:27 AM) (Source: Application Hang) (User: )
Description: Programm UnoWindows8.exe, Version 0.0.0.0 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 1304

Startzeit: 01cef57df9e75109

Endzeit: 4294967295

Anwendungspfad: C:\Program Files\WindowsApps\GAMELOFTSA.UNOFriends_1.0.0.2_x86__0pp20fcewvvtj\UnoWindows8.exe

Berichts-ID: b600b274-6178-11e3-bef5-7427ea08b134

Vollständiger Name des fehlerhaften Pakets: GAMELOFTSA.UNOFriends_1.0.0.2_x86__0pp20fcewvvtj

Anwendungs-ID, die relativ zum fehlerhaften Paket ist: App

Error: (12/10/2013 09:55:50 AM) (Source: Microsoft-Windows-Immersive-Shell) (User: HEADY05)
Description: Bei der Aktivierung der App „Microsoft.XboxLIVEGames_8wekyb3d8bbwe!Microsoft.XboxLIVEGames“ ist folgender Fehler aufgetreten: -2144927142. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.

Error: (12/10/2013 09:55:50 AM) (Source: Microsoft-Windows-Immersive-Shell) (User: HEADY05)
Description: Die App „Microsoft.XboxLIVEGames_2.0.139.0_x64__8wekyb3d8bbwe+Microsoft.XboxLIVEGames“ wurde nicht innerhalb der vorgesehenen Zeit gestartet.

Error: (12/10/2013 09:55:50 AM) (Source: Application Hang) (User: )
Description: Programm wwahost.exe, Version 6.3.9600.16431 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: eb0

Startzeit: 01cef585888d9dee

Endzeit: 4294967295

Anwendungspfad: C:\WINDOWS\system32\wwahost.exe

Berichts-ID: 

Vollständiger Name des fehlerhaften Pakets: Microsoft.XboxLIVEGames_2.0.139.0_x64__8wekyb3d8bbwe

Anwendungs-ID, die relativ zum fehlerhaften Paket ist: Microsoft.XboxLIVEGames

Error: (12/10/2013 09:55:20 AM) (Source: Microsoft-Windows-Immersive-Shell) (User: HEADY05)
Description: Die App „Microsoft.MicrosoftSolitaireCollection_2.0.1.31107_x86__8wekyb3d8bbwe+App“ wurde nicht innerhalb der vorgesehenen Zeit gestartet.

Error: (12/10/2013 09:55:20 AM) (Source: Application Hang) (User: )
Description: Programm Solitaire.exe, Version 1.0.0.0 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 1240

Startzeit: 01cef5858474855e

Endzeit: 4294967295

Anwendungspfad: C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_2.0.1.31107_x86__8wekyb3d8bbwe\Solitaire.exe

Berichts-ID: 

Vollständiger Name des fehlerhaften Pakets: Microsoft.MicrosoftSolitaireCollection_2.0.1.31107_x86__8wekyb3d8bbwe

Anwendungs-ID, die relativ zum fehlerhaften Paket ist: App

Error: (12/10/2013 09:54:58 AM) (Source: Microsoft-Windows-Immersive-Shell) (User: HEADY05)
Description: Die App „Microsoft.MicrosoftSolitaireCollection_2.0.1.31107_x86__8wekyb3d8bbwe+App“ wurde nicht innerhalb der vorgesehenen Zeit gestartet.

Error: (12/10/2013 09:54:59 AM) (Source: Application Hang) (User: )
Description: Programm Solitaire.exe, Version 1.0.0.0 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 8b4

Startzeit: 01cef58576cf8226

Endzeit: 4294967295

Anwendungspfad: C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_2.0.1.31107_x86__8wekyb3d8bbwe\Solitaire.exe

Berichts-ID: 

Vollständiger Name des fehlerhaften Pakets: Microsoft.MicrosoftSolitaireCollection_2.0.1.31107_x86__8wekyb3d8bbwe

Anwendungs-ID, die relativ zum fehlerhaften Paket ist: App

Error: (12/10/2013 09:54:33 AM) (Source: Microsoft-Windows-Immersive-Shell) (User: HEADY05)
Description: Das Paket „GAMELOFTSA.UNOFriends_1.0.0.2_x86__0pp20fcewvvtj+App“ wurde beendet, da das Anhalten zu lange dauerte.

Error: (12/08/2013 10:27:24 PM) (Source: Microsoft-Windows-WMI) (User: NT-AUTORITÄT)
Description: Vom Ereignisanbieter "AVWMIEVTProv" wurde versucht, die Abfrage "select * from Event_Notification" zu registrieren, deren Zielklasse "Event_Notification" im Namespace "//./ROOT/CIMV2/Applications/Avira_AntiVir" nicht vorhanden ist. Die Abfrage wird ignoriert.


System errors:
=============
Error: (12/10/2013 03:45:00 PM) (Source: DCOM) (User: NT-AUTORITÄT)
Description: ComputerstandardLokalAktivierung{C2F03A33-21F5-47FA-B4BB-156362A2F239}{316CDED5-E4AE-4B15-9113-7055D84DCC97}NT-AUTORITÄTLokaler DienstS-1-5-19LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar

Error: (12/10/2013 03:37:13 PM) (Source: DCOM) (User: NT-AUTORITÄT)
Description: ComputerstandardLokalAktivierung{C2F03A33-21F5-47FA-B4BB-156362A2F239}{316CDED5-E4AE-4B15-9113-7055D84DCC97}NT-AUTORITÄTLokaler DienstS-1-5-19LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar

Error: (12/10/2013 10:01:41 AM) (Source: DCOM) (User: NT-AUTORITÄT)
Description: ComputerstandardLokalAktivierung{C2F03A33-21F5-47FA-B4BB-156362A2F239}{316CDED5-E4AE-4B15-9113-7055D84DCC97}NT-AUTORITÄTLokaler DienstS-1-5-19LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar

Error: (12/10/2013 09:03:25 AM) (Source: disk) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk1\DR1 gefunden.

Error: (12/10/2013 08:09:50 AM) (Source: DCOM) (User: NT-AUTORITÄT)
Description: ComputerstandardLokalAktivierung{C2F03A33-21F5-47FA-B4BB-156362A2F239}{316CDED5-E4AE-4B15-9113-7055D84DCC97}NT-AUTORITÄTLokaler DienstS-1-5-19LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar

Error: (12/10/2013 08:04:02 AM) (Source: DCOM) (User: HEADY05)
Description: {03E64E17-B220-4052-9B9B-155F9CB8E016}

Error: (12/10/2013 08:04:02 AM) (Source: DCOM) (User: HEADY05)
Description: {03E64E17-B220-4052-9B9B-155F9CB8E016}

Error: (12/10/2013 08:04:02 AM) (Source: DCOM) (User: HEADY05)
Description: {03E64E17-B220-4052-9B9B-155F9CB8E016}

Error: (12/10/2013 08:04:02 AM) (Source: DCOM) (User: HEADY05)
Description: {03E64E17-B220-4052-9B9B-155F9CB8E016}

Error: (12/10/2013 08:04:02 AM) (Source: DCOM) (User: HEADY05)
Description: {03E64E17-B220-4052-9B9B-155F9CB8E016}


Microsoft Office Sessions:
=========================
Error: (12/10/2013 09:56:27 AM) (Source: Application Hang)(User: )
Description: UnoWindows8.exe0.0.0.0130401cef57df9e751094294967295C:\Program Files\WindowsApps\GAMELOFTSA.UNOFriends_1.0.0.2_x86__0pp20fcewvvtj\UnoWindows8.exeb600b274-6178-11e3-bef5-7427ea08b134GAMELOFTSA.UNOFriends_1.0.0.2_x86__0pp20fcewvvtjApp

Error: (12/10/2013 09:55:50 AM) (Source: Microsoft-Windows-Immersive-Shell)(User: HEADY05)
Description: Microsoft.XboxLIVEGames_8wekyb3d8bbwe!Microsoft.XboxLIVEGames-2144927142

Error: (12/10/2013 09:55:50 AM) (Source: Microsoft-Windows-Immersive-Shell)(User: HEADY05)
Description: Microsoft.XboxLIVEGames_2.0.139.0_x64__8wekyb3d8bbwe+Microsoft.XboxLIVEGames

Error: (12/10/2013 09:55:50 AM) (Source: Application Hang)(User: )
Description: wwahost.exe6.3.9600.16431eb001cef585888d9dee4294967295C:\WINDOWS\system32\wwahost.exeMicrosoft.XboxLIVEGames_2.0.139.0_x64__8wekyb3d8bbweMicrosoft.XboxLIVEGames

Error: (12/10/2013 09:55:20 AM) (Source: Microsoft-Windows-Immersive-Shell)(User: HEADY05)
Description: Microsoft.MicrosoftSolitaireCollection_2.0.1.31107_x86__8wekyb3d8bbwe+App

Error: (12/10/2013 09:55:20 AM) (Source: Application Hang)(User: )
Description: Solitaire.exe1.0.0.0124001cef5858474855e4294967295C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_2.0.1.31107_x86__8wekyb3d8bbwe\Solitaire.exeMicrosoft.MicrosoftSolitaireCollection_2.0.1.31107_x86__8wekyb3d8bbweApp

Error: (12/10/2013 09:54:58 AM) (Source: Microsoft-Windows-Immersive-Shell)(User: HEADY05)
Description: Microsoft.MicrosoftSolitaireCollection_2.0.1.31107_x86__8wekyb3d8bbwe+App

Error: (12/10/2013 09:54:59 AM) (Source: Application Hang)(User: )
Description: Solitaire.exe1.0.0.08b401cef58576cf82264294967295C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_2.0.1.31107_x86__8wekyb3d8bbwe\Solitaire.exeMicrosoft.MicrosoftSolitaireCollection_2.0.1.31107_x86__8wekyb3d8bbweApp

Error: (12/10/2013 09:54:33 AM) (Source: Microsoft-Windows-Immersive-Shell)(User: HEADY05)
Description: GAMELOFTSA.UNOFriends_1.0.0.2_x86__0pp20fcewvvtj+App

Error: (12/08/2013 10:27:24 PM) (Source: Microsoft-Windows-WMI)(User: NT-AUTORITÄT)
Description: AVWMIEVTProvselect * from Event_NotificationEvent_Notification//./ROOT/CIMV2/Applications/Avira_AntiVir


==================== Memory info =========================== 

Percentage of memory in use: 39%
Total physical RAM: 3960.38 MB
Available physical RAM: 2395.94 MB
Total Pagefile: 7928.38 MB
Available Pagefile: 6166.38 MB
Total Virtual: 131072 MB
Available Virtual: 131071.84 MB

==================== Drives ================================

Drive c: (Boot) (Fixed) (Total:403.71 GB) (Free:339.07 GB) NTFS
Drive d: (Recover) (Fixed) (Total:59.99 GB) (Free:42.68 GB) NTFS
Drive e: (KINGSTON) (Removable) (Total:3.75 GB) (Free:1.94 GB) FAT32

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 466 GB) (Disk ID: 00000000)

Partition: GPT Partition Type
========================================================
Disk: 1 (Size: 4 GB) (Disk ID: 04030201)
Partition 1: (Not Active) - (Size=4 GB) - (Type=0B)

==================== End Of Log ============================

schrauber · 11.12.2013, 09:26

ESET Online Scanner

Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
Lade und starte Eset Online Scanner
Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
Klicke auf Starten.
Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
Klicke am Ende des Suchlaufs auf Fertig stellen.
Schließe das Fenster von ESET.
Explorer öffnen.
C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
Logfile hier posten.
Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

Downloade Dir bitte

SecurityCheck und:

Speichere es auf dem Desktop.
Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.

Poste den Inhalt bitte hier.

und ein frisches FRST log bitte. Noch Probleme?

heady02 · 11.12.2013, 14:20

Bisher keine Probleme ! läuft irgendwie runder wie vorher ! hier die Eset Log :

Code:

ATTFilter

ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=6bc53ff55532a24f9f1ae53ff9d86a73
# engine=16229
# end=finished
# remove_checked=false
# archives_checked=false
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2013-12-11 01:09:24
# local_time=2013-12-11 02:09:24 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# lang=1033
# osver=6.2.9200 NT 
# compatibility_mode=774 16777213 71 77 112450 112461 0 0
# compatibility_mode=5893 16776574 100 94 5377245 9601066 0 0
# scanned=206124
# found=0
# cleaned=0
# scan_time=2283

Code:

ATTFilter

 Results of screen317's Security Check version 0.99.77  
   x64 (UAC is enabled)  
 Internet Explorer 11  
``````````````Antivirus/Firewall Check:`````````````` 
Windows Defender   
avast! Antivirus   
 Antivirus out of date!  
`````````Anti-malware/Other Utilities Check:````````` 
 Malwarebytes Anti-Malware Version 1.75.0.1300  
 Adobe Flash Player 	11.9.900.170  
 Mozilla Firefox (25.0.1) 
 Google Chrome 31.0.1650.63  
````````Process Check: objlist.exe by Laurent````````  
 Malwarebytes Anti-Malware mbamservice.exe  
 Malwarebytes Anti-Malware mbamgui.exe  
 Malwarebytes' Anti-Malware mbamscheduler.exe   
 AVAST Software Avast AvastSvc.exe  
 AVAST Software Avast AvastUI.exe  
`````````````````System Health check````````````````` 
 Total Fragmentation on Drive C:  % 
````````````````````End of Log``````````````````````

FRST :
FRST Logfile:

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 10-12-2013 01
Ran by Media (administrator) on HEADY05 on 11-12-2013 14:18:35
Running from C:\Users\Media\Desktop
Windows 8.1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(CyberLink) C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSMonitorService.exe
(CyberLink) C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSServer.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Realsil Microelectronics Inc.) C:\Program Files (x86)\Realtek\Realtek USB 2.0 Card Reader\RIconMan.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Microsoft Corporation) C:\Windows\System32\WWAHost.exe
(Microsoft Corporation) C:\Windows\WinStore\WSHost.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20315_x64__8wekyb3d8bbwe\livecomm.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [HotKeysCmds] - "C:\WINDOWS\system32\hkcmd.exe"
HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13286472 2013-02-19] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_Dolby] - C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1277000 2013-02-18] (Realtek Semiconductor)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKLM\...\Policies\Explorer: [ConfirmFileDelete] 1
HKLM-x32\...\Run: [IAStorIcon] - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [285240 2012-09-01] (Intel Corporation)
HKLM-x32\...\Run: [CLMLServer_For_P2G8] - C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe [111120 2012-06-08] (CyberLink)
HKLM-x32\...\Run: [CLVirtualDrive] - C:\Program Files (x86)\CyberLink\Power2Go8\VirtualDrive.exe [491120 2012-07-20] (CyberLink Corp.)
HKLM-x32\...\Run: [RemoteControl10] - C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [93296 2012-07-13] (CyberLink Corp.)
HKLM-x32\...\Run: [YouCam Service] - C:\Program Files (x86)\CyberLink\YouCam\YouCamService.exe [258592 2012-11-27] (CyberLink Corp.)
HKLM-x32\...\Run: [avgnt] - "C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe" /min
HKLM-x32\...\Run: [AvastUI.exe] - C:\Program Files\AVAST Software\Avast\AvastUI.exe [3568312 2013-12-10] (AVAST Software)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://lenovo13.msn.com
SearchScopes: HKCU - {EED3B87F-2293-4B0E-BF9F-71EF29E20F60} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MALNJS
BHO: avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO-x32: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
Toolbar: HKLM-x32 - avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF ProfilePath: C:\Users\Media\AppData\Roaming\Mozilla\Firefox\Profiles\qr6wrshk.default
FF NewTab: about:blank
FF Plugin: @adobe.com/FlashPlayer - C:\WINDOWS\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll ()
FF Plugin-x32: @adobe.com/FlashPlayer - C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\4.1.10329.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3505.0912 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Adblock Plus - C:\Users\Media\AppData\Roaming\Mozilla\Firefox\Profiles\qr6wrshk.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF

Chrome: 
=======
CHR RestoreOnStartup: "hxxp://www.google.com/"
CHR DefaultSearchKeyword: google.de
CHR DefaultSearchProvider: Google
CHR DefaultSearchURL: {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:bookmarkBarPinned}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}{google:omniboxStartMarginParameter}ie={inputEncoding}
CHR DefaultNewTabURL: {google:baseURL}_/chrome/newtab?{google:RLZ}{google:instantExtendedEnabledParameter}{google:ntpIsThemedParameter}ie={inputEncoding}
CHR Extension: (Google Docs) - C:\Users\Media\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0
CHR Extension: (Google Drive) - C:\Users\Media\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0
CHR Extension: (YouTube) - C:\Users\Media\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0
CHR Extension: (Google Search) - C:\Users\Media\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0
CHR Extension: (AdBlock) - C:\Users\Media\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.6.16_0
CHR Extension: (avast! Online Security) - C:\Users\Media\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\9.0.2005.45_0
CHR Extension: (Night Time In New York City) - C:\Users\Media\AppData\Local\Google\Chrome\User Data\Default\Extensions\jnimonidkipnhnpgkhgliocfnnpgkhek\1.2_0
CHR Extension: (BetterJTV) - C:\Users\Media\AppData\Local\Google\Chrome\User Data\Default\Extensions\njnnheckmeppnahikljofploeeodidhj\1.1.2_0
CHR Extension: (Google Wallet) - C:\Users\Media\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.5.0_0
CHR Extension: (Gmail) - C:\Users\Media\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx

==================== Services (Whitelisted) =================

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2013-12-10] (AVAST Software)
R2 CyberLink PowerDVD 10 MS Monitor Service; C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSMonitorService.exe [70952 2011-04-13] (CyberLink)
R2 CyberLink PowerDVD 10 MS Service; C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSServer.exe [312616 2011-04-13] (CyberLink)
R2 IconMan_R; C:\Program Files (x86)\Realtek\Realtek USB 2.0 Card Reader\RIconMan.exe [2451456 2012-07-13] (Realsil Microelectronics Inc.)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [164736 2012-11-16] (Intel Corporation)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [346872 2013-08-22] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23840 2013-08-22] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

S0 ADP80XX; C:\Windows\System32\drivers\ADP80XX.SYS [782176 2013-08-22] (PMC-Sierra)
R2 aswFsBlk; C:\WINDOWS\system32\drivers\aswFsBlk.sys [38984 2013-12-10] (AVAST Software)
R2 aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [84328 2013-12-10] (AVAST Software)
R1 aswRdr; C:\WINDOWS\system32\drivers\aswRdr2.sys [92544 2013-12-10] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2013-12-10] ()
R1 aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [1032416 2013-12-10] (AVAST Software)
R1 aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [409832 2013-12-10] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [205320 2013-12-10] ()
S3 bcmfn2; C:\Windows\System32\drivers\bcmfn2.sys [17624 2013-08-13] (Windows (R) Win 7 DDK provider)
R1 CLVirtualDrive; C:\Windows\system32\DRIVERS\CLVirtualDrive.sys [92536 2012-06-25] (CyberLink)
R3 FintekCIR; C:\Windows\system32\DRIVERS\FintekCIR.sys [33128 2012-06-07] (Fintek)
S3 iaLPSSi_GPIO; C:\Windows\System32\drivers\iaLPSSi_GPIO.sys [24568 2013-07-30] (Intel Corporation)
S3 iaLPSSi_I2C; C:\Windows\System32\drivers\iaLPSSi_I2C.sys [99320 2013-07-25] (Intel Corporation)
S0 iaStorAV; C:\Windows\System32\drivers\iaStorAV.sys [651248 2013-08-10] (Intel Corporation)
R0 intelpep; C:\Windows\System32\drivers\intelpep.sys [39768 2013-12-08] (Microsoft Corporation)
S3 IT9135BDA; C:\Windows\System32\Drivers\IT9135BDA.sys [178688 2013-05-02] (ITE                      )
S0 LSI_SAS3; C:\Windows\System32\drivers\lsi_sas3.sys [81760 2013-08-22] (LSI Corporation)
R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
R3 NdisVirtualBus; C:\Windows\System32\drivers\NdisVirtualBus.sys [16384 2013-08-22] (Microsoft Corporation)
S3 netvsc; C:\Windows\system32\DRIVERS\netvsc63.sys [87040 2013-08-22] (Microsoft Corporation)
S3 ReFS; C:\Windows\System32\Drivers\ReFS.sys [924512 2013-08-22] (Microsoft Corporation)
S3 SerCx2; C:\Windows\System32\drivers\SerCx2.sys [146272 2013-08-22] (Microsoft Corporation)
S0 stornvme; C:\Windows\System32\drivers\stornvme.sys [57176 2013-12-08] (Microsoft Corporation)
S3 UEFI; C:\Windows\System32\drivers\UEFI.sys [26976 2013-08-22] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [124256 2013-08-22] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-12-11 14:18 - 2013-12-11 14:18 - 01928212 _____ (Farbar) C:\Users\Media\Desktop\FRST64.exe
2013-12-11 14:18 - 2013-12-11 14:18 - 00013520 _____ C:\Users\Media\Desktop\FRST.txt
2013-12-11 14:18 - 2013-12-11 14:18 - 00000000 ____D C:\Users\Media\Desktop\FRST-OlderVersion
2013-12-11 13:32 - 2013-12-11 13:32 - 00891200 _____ C:\Users\Media\Downloads\SecurityCheck.exe
2013-12-11 13:32 - 2013-12-11 13:32 - 00891200 _____ C:\Users\Media\Desktop\SecurityCheck.exe
2013-12-11 13:29 - 2013-12-11 13:29 - 02347384 _____ (ESET) C:\Users\Media\Downloads\esetsmartinstaller_enu.exe
2013-12-10 15:58 - 2013-12-10 15:58 - 00085130 _____ C:\Users\Media\Downloads\FRST.txt
2013-12-10 15:58 - 2013-12-10 15:58 - 00020130 _____ C:\Users\Media\Downloads\Addition.txt
2013-12-10 15:57 - 2013-12-10 15:57 - 01927982 _____ (Farbar) C:\Users\Media\Downloads\FRST64.exe
2013-12-10 15:49 - 2013-12-10 15:49 - 00000935 _____ C:\Users\Media\Desktop\JRT.txt
2013-12-10 15:44 - 2013-12-10 15:44 - 00000000 ____D C:\WINDOWS\ERUNT
2013-12-10 15:28 - 2013-12-10 15:28 - 01034531 _____ (Thisisu) C:\Users\Media\Desktop\JRT.exe
2013-12-10 15:26 - 2013-12-10 15:40 - 00000000 ____D C:\AdwCleaner
2013-12-10 15:26 - 2013-12-10 15:26 - 01110034 _____ C:\Users\Media\Desktop\adwcleaner.exe
2013-12-10 15:25 - 2013-12-10 15:25 - 00000000 ____D C:\Users\Media\AppData\Roaming\Malwarebytes
2013-12-10 15:24 - 2013-12-10 15:24 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Media\Downloads\mbam-setup-1.75.0.1300.exe
2013-12-10 15:24 - 2013-12-10 15:24 - 00001129 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-12-10 15:24 - 2013-12-10 15:24 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-12-10 15:24 - 2013-12-10 15:24 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-12-10 15:24 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbam.sys
2013-12-10 07:56 - 2013-12-10 07:56 - 00000000 ____D C:\Users\Media\AppData\Roaming\AVAST Software
2013-12-10 07:55 - 2013-12-11 14:05 - 00001124 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2013-12-10 07:55 - 2013-12-11 13:05 - 00002199 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2013-12-10 07:55 - 2013-12-11 13:05 - 00001120 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2013-12-10 07:55 - 2013-12-11 13:00 - 00004096 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2013-12-10 07:55 - 2013-12-11 13:00 - 00003860 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2013-12-10 07:55 - 2013-12-10 07:55 - 01032416 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSnx.sys
2013-12-10 07:55 - 2013-12-10 07:55 - 00409832 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSP.sys
2013-12-10 07:55 - 2013-12-10 07:55 - 00334648 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe
2013-12-10 07:55 - 2013-12-10 07:55 - 00205320 _____ C:\WINDOWS\system32\Drivers\aswVmm.sys
2013-12-10 07:55 - 2013-12-10 07:55 - 00092544 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr2.sys
2013-12-10 07:55 - 2013-12-10 07:55 - 00084328 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswMonFlt.sys
2013-12-10 07:55 - 2013-12-10 07:55 - 00065776 _____ C:\WINDOWS\system32\Drivers\aswRvrt.sys
2013-12-10 07:55 - 2013-12-10 07:55 - 00043152 _____ (AVAST Software) C:\WINDOWS\avastSS.scr
2013-12-10 07:55 - 2013-12-10 07:55 - 00038984 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswFsBlk.sys
2013-12-10 07:55 - 2013-12-10 07:55 - 00003924 _____ C:\WINDOWS\System32\Tasks\avast! Emergency Update
2013-12-10 07:55 - 2013-12-10 07:55 - 00001986 _____ C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2013-12-10 07:54 - 2013-12-10 07:54 - 00000000 ____D C:\ProgramData\AVAST Software
2013-12-10 07:54 - 2013-12-10 07:54 - 00000000 ____D C:\Program Files\AVAST Software
2013-12-10 07:53 - 2013-12-10 07:53 - 87529432 _____ (AVAST Software) C:\Users\Media\Downloads\avast_free_antivirus_setup2008.exe
2013-12-10 07:38 - 2013-12-10 07:38 - 00000000 ___RD C:\WINDOWS\BrowserChoice
2013-12-08 23:12 - 2013-12-08 23:19 - 00003600 _____ C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-4178325993-1706142036-2666729720-1004
2013-12-08 23:06 - 2013-12-08 23:06 - 00000000 ____D C:\Users\Heady05\AppData\Local\Intel_Corporation
2013-12-08 23:04 - 2013-12-08 23:04 - 00000000 ____D C:\Users\Heady05\AppData\Roaming\Intel Corporation
2013-12-08 23:03 - 2013-12-08 23:03 - 00000000 ___RD C:\Users\Heady05\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-12-08 23:03 - 2013-12-08 23:03 - 00000000 ___RD C:\Users\Heady05\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2013-12-08 23:02 - 2013-12-08 23:03 - 00000000 ____D C:\Users\Heady05\AppData\Local\Packages
2013-12-08 23:02 - 2013-12-08 23:03 - 00000000 ____D C:\Users\Heady05
2013-12-08 23:02 - 2013-12-08 23:02 - 00001458 _____ C:\Users\Heady05\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2013-12-08 23:02 - 2013-12-08 23:02 - 00000020 ___SH C:\Users\Heady05\ntuser.ini
2013-12-08 23:02 - 2013-12-08 23:02 - 00000000 _SHDL C:\Users\Heady05\Vorlagen
2013-12-08 23:02 - 2013-12-08 23:02 - 00000000 _SHDL C:\Users\Heady05\Startmenü
2013-12-08 23:02 - 2013-12-08 23:02 - 00000000 _SHDL C:\Users\Heady05\Netzwerkumgebung
2013-12-08 23:02 - 2013-12-08 23:02 - 00000000 _SHDL C:\Users\Heady05\Lokale Einstellungen
2013-12-08 23:02 - 2013-12-08 23:02 - 00000000 _SHDL C:\Users\Heady05\Eigene Dateien
2013-12-08 23:02 - 2013-12-08 23:02 - 00000000 _SHDL C:\Users\Heady05\Druckumgebung
2013-12-08 23:02 - 2013-12-08 23:02 - 00000000 _SHDL C:\Users\Heady05\Documents\Eigene Musik
2013-12-08 23:02 - 2013-12-08 23:02 - 00000000 _SHDL C:\Users\Heady05\Documents\Eigene Bilder
2013-12-08 23:02 - 2013-12-08 23:02 - 00000000 _SHDL C:\Users\Heady05\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2013-12-08 23:02 - 2013-12-08 23:02 - 00000000 _SHDL C:\Users\Heady05\AppData\Local\Verlauf
2013-12-08 23:02 - 2013-12-08 23:02 - 00000000 _SHDL C:\Users\Heady05\AppData\Local\Anwendungsdaten
2013-12-08 23:02 - 2013-12-08 23:02 - 00000000 _SHDL C:\Users\Heady05\Anwendungsdaten
2013-12-08 23:02 - 2013-12-08 23:02 - 00000000 ____D C:\Users\Heady05\AppData\Roaming\Adobe
2013-12-08 23:02 - 2013-12-08 23:02 - 00000000 ____D C:\Users\Heady05\AppData\Local\VirtualStore
2013-12-08 23:02 - 2013-08-22 16:36 - 00000000 ___RD C:\Users\Heady05\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2013-12-08 23:02 - 2013-08-22 16:36 - 00000000 ___RD C:\Users\Heady05\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2013-12-08 23:02 - 2013-08-22 16:36 - 00000000 ___RD C:\Users\Heady05\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2013-12-08 23:02 - 2013-08-22 16:36 - 00000000 ____D C:\Users\Heady05\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2013-12-08 23:02 - 2012-09-15 19:55 - 00002786 _____ C:\Users\Heady05\Desktop\MEDIONmail.lnk
2013-12-08 23:02 - 2012-09-15 19:55 - 00001779 _____ C:\Users\Heady05\Desktop\MEDION Serviceportal.lnk
2013-12-08 23:02 - 2012-08-30 14:56 - 00000977 _____ C:\Users\Heady05\Desktop\Windows 8 Info.lnk
2013-12-08 22:45 - 2013-12-08 22:45 - 00097280 ___SH C:\Users\Media\Desktop\Thumbs.db
2013-12-08 22:39 - 2013-12-11 07:28 - 00000000 __RDO C:\Users\Media\SkyDrive
2013-12-08 22:37 - 2013-12-08 22:37 - 00001458 _____ C:\Users\Media\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2013-12-08 22:36 - 2013-12-08 22:36 - 00000020 ___SH C:\Users\Media\ntuser.ini
2013-12-08 22:28 - 2013-12-08 22:28 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Musik
2013-12-08 22:28 - 2013-12-08 22:28 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Bilder
2013-12-08 22:28 - 2013-12-08 22:28 - 00000000 _SHDL C:\Users\Default\Vorlagen
2013-12-08 22:28 - 2013-12-08 22:28 - 00000000 _SHDL C:\Users\Default\Startmenü
2013-12-08 22:28 - 2013-12-08 22:28 - 00000000 _SHDL C:\Users\Default\Netzwerkumgebung
2013-12-08 22:28 - 2013-12-08 22:28 - 00000000 _SHDL C:\Users\Default\Lokale Einstellungen
2013-12-08 22:28 - 2013-12-08 22:28 - 00000000 _SHDL C:\Users\Default\Eigene Dateien
2013-12-08 22:28 - 2013-12-08 22:28 - 00000000 _SHDL C:\Users\Default\Druckumgebung
2013-12-08 22:28 - 2013-12-08 22:28 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Musik
2013-12-08 22:28 - 2013-12-08 22:28 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Bilder
2013-12-08 22:28 - 2013-12-08 22:28 - 00000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2013-12-08 22:28 - 2013-12-08 22:28 - 00000000 _SHDL C:\Users\Default\AppData\Local\Verlauf
2013-12-08 22:28 - 2013-12-08 22:28 - 00000000 _SHDL C:\Users\Default\AppData\Local\Anwendungsdaten
2013-12-08 22:28 - 2013-12-08 22:28 - 00000000 _SHDL C:\Users\Default\Anwendungsdaten
2013-12-08 22:28 - 2013-12-08 22:28 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Musik
2013-12-08 22:28 - 2013-12-08 22:28 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Bilder
2013-12-08 22:28 - 2013-12-08 22:28 - 00000000 _SHDL C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2013-12-08 22:28 - 2013-12-08 22:28 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Verlauf
2013-12-08 22:28 - 2013-12-08 22:28 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Anwendungsdaten
2013-12-08 22:28 - 2013-12-08 22:28 - 00000000 _SHDL C:\Programme
2013-12-08 22:28 - 2013-12-08 22:28 - 00000000 _SHDL C:\ProgramData\Vorlagen
2013-12-08 22:28 - 2013-12-08 22:28 - 00000000 _SHDL C:\ProgramData\Startmenü
2013-12-08 22:28 - 2013-12-08 22:28 - 00000000 _SHDL C:\ProgramData\Dokumente
2013-12-08 22:28 - 2013-12-08 22:28 - 00000000 _SHDL C:\ProgramData\Anwendungsdaten
2013-12-08 22:28 - 2013-12-08 22:28 - 00000000 _SHDL C:\Program Files\Gemeinsame Dateien
2013-12-08 22:28 - 2013-12-08 22:28 - 00000000 _SHDL C:\Dokumente und Einstellungen
2013-12-08 22:27 - 2013-12-11 13:21 - 01780145 _____ C:\WINDOWS\WindowsUpdate.log
2013-12-08 22:27 - 2013-12-08 22:27 - 00022960 _____ C:\WINDOWS\system32\emptyregdb.dat
2013-12-08 22:10 - 2013-12-08 22:10 - 00000000 ____D C:\WINDOWS\system32\config\bbimigrate
2013-12-08 22:09 - 2013-12-11 07:28 - 00000000 ____D C:\Users\Media
2013-12-08 22:09 - 2013-12-08 22:27 - 00020958 _____ C:\WINDOWS\diagwrn.xml
2013-12-08 22:09 - 2013-12-08 22:27 - 00020958 _____ C:\WINDOWS\diagerr.xml
2013-12-08 22:09 - 2013-12-08 22:10 - 00000000 ___RD C:\Users\Media\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2013-12-08 22:09 - 2013-12-08 22:09 - 00000000 _SHDL C:\Users\Media\Vorlagen
2013-12-08 22:09 - 2013-12-08 22:09 - 00000000 _SHDL C:\Users\Media\Startmenü
2013-12-08 22:09 - 2013-12-08 22:09 - 00000000 _SHDL C:\Users\Media\Netzwerkumgebung
2013-12-08 22:09 - 2013-12-08 22:09 - 00000000 _SHDL C:\Users\Media\Lokale Einstellungen
2013-12-08 22:09 - 2013-12-08 22:09 - 00000000 _SHDL C:\Users\Media\Eigene Dateien
2013-12-08 22:09 - 2013-12-08 22:09 - 00000000 _SHDL C:\Users\Media\Druckumgebung
2013-12-08 22:09 - 2013-12-08 22:09 - 00000000 _SHDL C:\Users\Media\Documents\Eigene Musik
2013-12-08 22:09 - 2013-12-08 22:09 - 00000000 _SHDL C:\Users\Media\Documents\Eigene Bilder
2013-12-08 22:09 - 2013-12-08 22:09 - 00000000 _SHDL C:\Users\Media\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2013-12-08 22:09 - 2013-12-08 22:09 - 00000000 _SHDL C:\Users\Media\AppData\Local\Verlauf
2013-12-08 22:09 - 2013-12-08 22:09 - 00000000 _SHDL C:\Users\Media\AppData\Local\Anwendungsdaten
2013-12-08 22:09 - 2013-12-08 22:09 - 00000000 _SHDL C:\Users\Media\Anwendungsdaten
2013-12-08 22:09 - 2013-08-22 16:36 - 00000000 ___RD C:\Users\Media\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2013-12-08 22:09 - 2013-08-22 16:36 - 00000000 ___RD C:\Users\Media\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2013-12-08 22:09 - 2013-08-22 16:36 - 00000000 ____D C:\Users\Media\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2013-12-08 22:05 - 2013-12-08 22:11 - 00000000 ____D C:\Program Files (x86)\Intel
2013-12-08 22:05 - 2013-12-08 22:05 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf
2013-12-08 22:05 - 2013-12-08 22:05 - 00000000 ____D C:\WINDOWS\SysWOW64\RTCOM
2013-12-08 22:05 - 2013-12-08 22:05 - 00000000 ____D C:\Program Files\Realtek
2013-12-08 22:05 - 2013-10-03 23:43 - 00064000 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.DLL
2013-12-08 22:05 - 2013-10-03 23:43 - 00060416 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.DLL
2013-12-08 22:03 - 2013-12-09 09:30 - 00000000 ___DC C:\WINDOWS\Panther
2013-12-08 22:03 - 2013-12-08 22:03 - 00000000 __SHD C:\Recovery
2013-12-08 22:02 - 2013-12-08 22:02 - 01341288 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll
2013-12-08 22:02 - 2013-12-08 22:02 - 01067008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32.dll
2013-12-08 22:01 - 2013-12-08 22:01 - 01286552 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll
2013-12-08 22:01 - 2013-12-08 22:01 - 01217024 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Streaming.dll
2013-12-08 22:01 - 2013-12-08 22:01 - 01018960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll
2013-12-08 22:01 - 2013-12-08 22:01 - 00977408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Streaming.dll
2013-12-08 22:01 - 2013-12-08 22:01 - 00872840 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfplat.dll
2013-12-08 22:01 - 2013-12-08 22:01 - 00698232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfplat.dll
2013-12-08 22:01 - 2013-12-08 22:01 - 00294400 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Sensors.dll
2013-12-08 22:01 - 2013-12-08 22:01 - 00225792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Sensors.dll
2013-12-08 22:00 - 2013-12-08 22:00 - 21196664 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2013-12-08 22:00 - 2013-12-08 22:00 - 18642504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2013-12-08 22:00 - 2013-12-08 22:00 - 18577408 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2013-12-08 22:00 - 2013-12-08 22:00 - 13925888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2013-12-08 22:00 - 2013-12-08 22:00 - 13176320 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2013-12-08 22:00 - 2013-12-08 22:00 - 11674112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2013-12-08 22:00 - 2013-12-08 22:00 - 02801664 _____ (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll
2013-12-08 22:00 - 2013-12-08 22:00 - 01085952 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.appcore.dll
2013-12-08 22:00 - 2013-12-08 22:00 - 01019392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\actxprxy.dll
2013-12-08 22:00 - 2013-12-08 22:00 - 00869888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.appcore.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 23212544 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 17142784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 12995584 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 11220992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 07399256 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2013-12-08 21:59 - 2013-12-08 21:59 - 06639616 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 05769728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 05765120 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 04599808 _____ (Microsoft Corporation) C:\WINDOWS\system32\d2d1.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 04240384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 04190720 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2013-12-08 21:59 - 2013-12-08 21:59 - 04104704 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncEngine.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 03934208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d2d1.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 03532288 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 03395920 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSService.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 02764288 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 02617344 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 02570240 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 02551640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2013-12-08 21:59 - 2013-12-08 21:59 - 02332160 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 02328872 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe
2013-12-08 21:59 - 2013-12-08 21:59 - 02295808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 02166272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 02143744 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 02140888 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 02134120 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d9.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 02065448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe
2013-12-08 21:59 - 2013-12-08 21:59 - 01993728 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2013-12-08 21:59 - 2013-12-08 21:59 - 01926656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2013-12-08 21:59 - 2013-12-08 21:59 - 01843712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Display.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 01818112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 01816576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Display.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 01799944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d9.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 01765384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 01765376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 01704448 _____ (Microsoft Corporation) C:\WINDOWS\system32\wucltux.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 01584128 _____ (Microsoft Corporation) C:\WINDOWS\system32\workfolderssvc.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 01530200 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2013-12-08 21:59 - 2013-12-08 21:59 - 01399176 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmde.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 01394176 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 01373872 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpmde.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 01362944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user32.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 01302528 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 01287064 _____ (Microsoft Corporation) C:\WINDOWS\system32\kernel32.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 01231360 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 01204968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winmde.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 01160704 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Web.Http.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 01156608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 01147904 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIAutomationCore.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 01067080 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfasfsrcsnk.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 01036288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kernel32.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 01011712 _____ (Microsoft Corporation) C:\WINDOWS\system32\TSWorkspace.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00922624 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00920064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIAutomationCore.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00909312 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmCoreR.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00903168 _____ (Microsoft Corporation) C:\WINDOWS\system32\iphlpsvc.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00888832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00883184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfasfsrcsnk.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00839680 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSShared.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00830464 _____ (Microsoft Corporation) C:\WINDOWS\system32\samsrv.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00795648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TSWorkspace.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00762368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Web.Http.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00761856 _____ (Microsoft Corporation) C:\WINDOWS\system32\WorkfoldersControl.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00708616 _____ (Microsoft Corporation) C:\WINDOWS\system32\iuilp.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00700928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSShared.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00699840 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d10level9.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00656384 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsapi.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00631296 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWAHost.exe
2013-12-08 21:59 - 2013-12-08 21:59 - 00621056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MrmCoreR.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00618496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\apphelp.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00607744 _____ (Microsoft Corporation) C:\WINDOWS\system32\comdlg32.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00578952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d10level9.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00578560 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.BackgroundTransfer.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00558080 _____ (Microsoft Corporation) C:\WINDOWS\system32\apphelp.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00533504 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppReadiness.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00531968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comdlg32.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00523096 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\acpi.sys
2013-12-08 21:59 - 2013-12-08 21:59 - 00518656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWAHost.exe
2013-12-08 21:59 - 2013-12-08 21:59 - 00516496 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00492544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dnsapi.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00481392 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00465960 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00454656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv.sys
2013-12-08 21:59 - 2013-12-08 21:59 - 00433664 _____ (Microsoft Corporation) C:\WINDOWS\system32\ipnathlp.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00411648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.BackgroundTransfer.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00406400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxgi.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00391512 _____ (Microsoft Corporation) C:\WINDOWS\system32\tsmf.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00385528 _____ C:\WINDOWS\system32\ApnDatabase.xml
2013-12-08 21:59 - 2013-12-08 21:59 - 00382808 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2013-12-08 21:59 - 2013-12-08 21:59 - 00381952 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUSettingsProvider.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00380656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00371032 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\spaceport.sys
2013-12-08 21:59 - 2013-12-08 21:59 - 00345552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tsmf.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00338944 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpclip.exe
2013-12-08 21:59 - 2013-12-08 21:59 - 00335360 _____ (Microsoft Corporation) C:\WINDOWS\system32\eappcfg.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00331776 _____ (Microsoft Corporation) C:\WINDOWS\system32\eapphost.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00326024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00325464 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBXHCI.SYS
2013-12-08 21:59 - 2013-12-08 21:59 - 00325120 _____ (Microsoft Corporation) C:\WINDOWS\system32\eapp3hst.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00317616 _____ (Microsoft Corporation) C:\WINDOWS\system32\wintrust.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00286208 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcsvDevice.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00272896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eappcfg.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00270848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\portcls.sys
2013-12-08 21:59 - 2013-12-08 21:59 - 00262144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eapphost.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00258904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdyboost.sys
2013-12-08 21:59 - 2013-12-08 21:59 - 00255488 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsrslvr.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00249856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00245248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eapp3hst.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00235960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wintrust.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00226304 _____ (Microsoft Corporation) C:\WINDOWS\system32\miutils.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00221184 _____ (Microsoft Corporation) C:\WINDOWS\system32\profsvc.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00218624 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2013-12-08 21:59 - 2013-12-08 21:59 - 00189952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00186880 _____ (Microsoft Corporation) C:\WINDOWS\system32\WorkFoldersShell.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00184832 _____ (Microsoft Corporation) C:\WINDOWS\system32\dafWfdProvider.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00180224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\miutils.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00171864 _____ (Microsoft Corporation) C:\WINDOWS\system32\kd_02_8086.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00160768 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxAllUserStore.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00139776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxAllUserStore.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00134656 _____ (Microsoft Corporation) C:\WINDOWS\system32\psmsrv.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00132608 _____ (Microsoft Corporation) C:\WINDOWS\system32\msched.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00113152 _____ (Microsoft Corporation) C:\WINDOWS\system32\shsetup.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00111616 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwcollector.exe
2013-12-08 21:59 - 2013-12-08 21:59 - 00104320 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncryptsslp.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00103424 _____ (Microsoft Corporation) C:\WINDOWS\system32\WiFiDisplay.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00101888 _____ (Microsoft Corporation) C:\WINDOWS\system32\eappgnui.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00094208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shsetup.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00093184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eappgnui.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00092672 _____ (Microsoft Corporation) C:\WINDOWS\system32\dafBth.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00088272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ncryptsslp.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\TSWbPrxy.exe
2013-12-08 21:59 - 2013-12-08 21:59 - 00057176 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\stornvme.sys
2013-12-08 21:59 - 2013-12-08 21:59 - 00054776 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
2013-12-08 21:59 - 2013-12-08 21:59 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\system32\ftp.exe
2013-12-08 21:59 - 2013-12-08 21:59 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ftp.exe
2013-12-08 21:59 - 2013-12-08 21:59 - 00044936 _____ (Microsoft Corporation) C:\WINDOWS\system32\wldp.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00039768 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\intelpep.sys
2013-12-08 21:59 - 2013-12-08 21:59 - 00031064 _____ (Microsoft Corporation) C:\WINDOWS\system32\ploptin.dll
2013-12-08 21:58 - 2013-12-08 21:58 - 01943536 _____ (Microsoft Corporation) C:\WINDOWS\system32\crypt32.dll
2013-12-08 21:58 - 2013-12-08 21:58 - 01581968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\crypt32.dll
2013-12-08 21:58 - 2013-12-08 21:58 - 01104384 _____ (Microsoft Corporation) C:\WINDOWS\system32\IKEEXT.DLL
2013-12-08 21:58 - 2013-12-08 21:58 - 00828416 _____ (Microsoft Corporation) C:\WINDOWS\system32\BFE.DLL
2013-12-08 21:58 - 2013-12-08 21:58 - 00262144 _____ C:\WINDOWS\system32\config\userdiff
2013-12-08 21:58 - 2013-12-08 21:58 - 00136536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wfplwfs.sys
2013-12-08 21:56 - 2013-12-08 22:13 - 00000000 ____D C:\WINDOWS\SysWOW64\XPSViewer
2013-12-08 21:56 - 2013-12-08 21:56 - 00000000 ____D C:\Program Files\Reference Assemblies
2013-12-08 21:56 - 2013-12-08 21:56 - 00000000 ____D C:\Program Files\MSBuild
2013-12-08 21:56 - 2013-12-08 21:56 - 00000000 ____D C:\Program Files (x86)\Reference Assemblies
2013-12-08 21:56 - 2013-12-08 21:56 - 00000000 ____D C:\Program Files (x86)\MSBuild
2013-12-08 21:55 - 2013-12-08 21:55 - 00155480 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbccgp.sys
2013-12-08 21:55 - 2013-08-03 05:48 - 01166520 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationNative_v0300.dll
2013-12-08 21:55 - 2013-08-03 05:48 - 00124112 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2013-12-08 21:55 - 2013-08-03 05:48 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe
2013-12-08 21:55 - 2013-08-03 05:41 - 00778936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationNative_v0300.dll
2013-12-08 21:55 - 2013-08-03 05:41 - 00102608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2013-12-08 21:55 - 2013-08-03 05:41 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TsWpfWrp.exe
2013-12-08 21:40 - 2013-12-08 22:27 - 00006639 _____ C:\WINDOWS\comsetup.log
2013-12-08 11:04 - 2013-12-11 14:18 - 00000000 ____D C:\FRST
2013-12-08 09:20 - 2013-12-08 09:20 - 390193794 _____ C:\WINDOWS\MEMORY.DMP

==================== One Month Modified Files and Folders =======

2013-12-11 14:18 - 2013-12-11 14:18 - 01928212 _____ (Farbar) C:\Users\Media\Desktop\FRST64.exe
2013-12-11 14:18 - 2013-12-11 14:18 - 00013520 _____ C:\Users\Media\Desktop\FRST.txt
2013-12-11 14:18 - 2013-12-11 14:18 - 00000000 ____D C:\Users\Media\Desktop\FRST-OlderVersion
2013-12-11 14:18 - 2013-12-08 11:04 - 00000000 ____D C:\FRST
2013-12-11 14:05 - 2013-12-10 07:55 - 00001124 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2013-12-11 14:00 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\sru
2013-12-11 13:42 - 2013-10-17 10:21 - 00000884 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2013-12-11 13:32 - 2013-12-11 13:32 - 00891200 _____ C:\Users\Media\Downloads\SecurityCheck.exe
2013-12-11 13:32 - 2013-12-11 13:32 - 00891200 _____ C:\Users\Media\Desktop\SecurityCheck.exe
2013-12-11 13:29 - 2013-12-11 13:29 - 02347384 _____ (ESET) C:\Users\Media\Downloads\esetsmartinstaller_enu.exe
2013-12-11 13:21 - 2013-12-08 22:27 - 01780145 _____ C:\WINDOWS\WindowsUpdate.log
2013-12-11 13:10 - 2013-06-27 20:07 - 00003598 _____ C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-4178325993-1706142036-2666729720-1001
2013-12-11 13:05 - 2013-12-10 07:55 - 00002199 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2013-12-11 13:05 - 2013-12-10 07:55 - 00001120 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2013-12-11 13:00 - 2013-12-10 07:55 - 00004096 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2013-12-11 13:00 - 2013-12-10 07:55 - 00003860 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2013-12-11 11:32 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\AppReadiness
2013-12-11 07:41 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\rescache
2013-12-11 07:30 - 2013-09-30 05:14 - 01780340 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2013-12-11 07:30 - 2013-09-30 04:56 - 00765378 _____ C:\WINDOWS\system32\perfh007.dat
2013-12-11 07:30 - 2013-09-30 04:56 - 00159696 _____ C:\WINDOWS\system32\perfc007.dat
2013-12-11 07:28 - 2013-12-08 22:39 - 00000000 __RDO C:\Users\Media\SkyDrive
2013-12-11 07:28 - 2013-12-08 22:09 - 00000000 ____D C:\Users\Media
2013-12-10 19:42 - 2013-10-17 10:21 - 00003772 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
2013-12-10 16:03 - 2013-08-22 15:45 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2013-12-10 16:03 - 2013-08-22 14:25 - 00262144 ___SH C:\WINDOWS\system32\config\BBI
2013-12-10 15:58 - 2013-12-10 15:58 - 00085130 _____ C:\Users\Media\Downloads\FRST.txt
2013-12-10 15:58 - 2013-12-10 15:58 - 00020130 _____ C:\Users\Media\Downloads\Addition.txt
2013-12-10 15:57 - 2013-12-10 15:57 - 01927982 _____ (Farbar) C:\Users\Media\Downloads\FRST64.exe
2013-12-10 15:49 - 2013-12-10 15:49 - 00000935 _____ C:\Users\Media\Desktop\JRT.txt
2013-12-10 15:44 - 2013-12-10 15:44 - 00000000 ____D C:\WINDOWS\ERUNT
2013-12-10 15:40 - 2013-12-10 15:26 - 00000000 ____D C:\AdwCleaner
2013-12-10 15:40 - 2013-09-15 12:52 - 00000613 _____ C:\Users\Media\Desktop\Search.lnk
2013-12-10 15:33 - 2013-09-29 20:04 - 00007740 _____ C:\WINDOWS\PFRO.log
2013-12-10 15:28 - 2013-12-10 15:28 - 01034531 _____ (Thisisu) C:\Users\Media\Desktop\JRT.exe
2013-12-10 15:26 - 2013-12-10 15:26 - 01110034 _____ C:\Users\Media\Desktop\adwcleaner.exe
2013-12-10 15:25 - 2013-12-10 15:25 - 00000000 ____D C:\Users\Media\AppData\Roaming\Malwarebytes
2013-12-10 15:24 - 2013-12-10 15:24 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Media\Downloads\mbam-setup-1.75.0.1300.exe
2013-12-10 15:24 - 2013-12-10 15:24 - 00001129 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-12-10 15:24 - 2013-12-10 15:24 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-12-10 15:24 - 2013-12-10 15:24 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-12-10 08:48 - 2013-06-01 17:19 - 00000000 ____D C:\Users\Media\AppData\Local\Packages
2013-12-10 07:56 - 2013-12-10 07:56 - 00000000 ____D C:\Users\Media\AppData\Roaming\AVAST Software
2013-12-10 07:55 - 2013-12-10 07:55 - 01032416 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSnx.sys
2013-12-10 07:55 - 2013-12-10 07:55 - 00409832 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSP.sys
2013-12-10 07:55 - 2013-12-10 07:55 - 00334648 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe
2013-12-10 07:55 - 2013-12-10 07:55 - 00205320 _____ C:\WINDOWS\system32\Drivers\aswVmm.sys
2013-12-10 07:55 - 2013-12-10 07:55 - 00092544 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr2.sys
2013-12-10 07:55 - 2013-12-10 07:55 - 00084328 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswMonFlt.sys
2013-12-10 07:55 - 2013-12-10 07:55 - 00065776 _____ C:\WINDOWS\system32\Drivers\aswRvrt.sys
2013-12-10 07:55 - 2013-12-10 07:55 - 00043152 _____ (AVAST Software) C:\WINDOWS\avastSS.scr
2013-12-10 07:55 - 2013-12-10 07:55 - 00038984 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswFsBlk.sys
2013-12-10 07:55 - 2013-12-10 07:55 - 00003924 _____ C:\WINDOWS\System32\Tasks\avast! Emergency Update
2013-12-10 07:55 - 2013-12-10 07:55 - 00001986 _____ C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2013-12-10 07:55 - 2013-06-28 05:25 - 00000000 ____D C:\Program Files (x86)\Google
2013-12-10 07:54 - 2013-12-10 07:54 - 00000000 ____D C:\ProgramData\AVAST Software
2013-12-10 07:54 - 2013-12-10 07:54 - 00000000 ____D C:\Program Files\AVAST Software
2013-12-10 07:53 - 2013-12-10 07:53 - 87529432 _____ (AVAST Software) C:\Users\Media\Downloads\avast_free_antivirus_setup2008.exe
2013-12-10 07:38 - 2013-12-10 07:38 - 00000000 ___RD C:\WINDOWS\BrowserChoice
2013-12-10 07:36 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\restore
2013-12-09 09:30 - 2013-12-08 22:03 - 00000000 ___DC C:\WINDOWS\Panther
2013-12-08 23:19 - 2013-12-08 23:12 - 00003600 _____ C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-4178325993-1706142036-2666729720-1004
2013-12-08 23:10 - 2013-07-11 08:04 - 00000000 ____D C:\Users\Media\Desktop\Summerjam 2013
2013-12-08 23:06 - 2013-12-08 23:06 - 00000000 ____D C:\Users\Heady05\AppData\Local\Intel_Corporation
2013-12-08 23:04 - 2013-12-08 23:04 - 00000000 ____D C:\Users\Heady05\AppData\Roaming\Intel Corporation
2013-12-08 23:03 - 2013-12-08 23:03 - 00000000 ___RD C:\Users\Heady05\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-12-08 23:03 - 2013-12-08 23:03 - 00000000 ___RD C:\Users\Heady05\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2013-12-08 23:03 - 2013-12-08 23:02 - 00000000 ____D C:\Users\Heady05\AppData\Local\Packages
2013-12-08 23:03 - 2013-12-08 23:02 - 00000000 ____D C:\Users\Heady05
2013-12-08 23:03 - 2013-06-01 17:21 - 00000000 ____D C:\WINDOWS\System32\Tasks\WPD
2013-12-08 23:02 - 2013-12-08 23:02 - 00001458 _____ C:\Users\Heady05\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2013-12-08 23:02 - 2013-12-08 23:02 - 00000020 ___SH C:\Users\Heady05\ntuser.ini
2013-12-08 23:02 - 2013-12-08 23:02 - 00000000 _SHDL C:\Users\Heady05\Vorlagen
2013-12-08 23:02 - 2013-12-08 23:02 - 00000000 _SHDL C:\Users\Heady05\Startmenü
2013-12-08 23:02 - 2013-12-08 23:02 - 00000000 _SHDL C:\Users\Heady05\Netzwerkumgebung
2013-12-08 23:02 - 2013-12-08 23:02 - 00000000 _SHDL C:\Users\Heady05\Lokale Einstellungen
2013-12-08 23:02 - 2013-12-08 23:02 - 00000000 _SHDL C:\Users\Heady05\Eigene Dateien
2013-12-08 23:02 - 2013-12-08 23:02 - 00000000 _SHDL C:\Users\Heady05\Druckumgebung
2013-12-08 23:02 - 2013-12-08 23:02 - 00000000 _SHDL C:\Users\Heady05\Documents\Eigene Musik
2013-12-08 23:02 - 2013-12-08 23:02 - 00000000 _SHDL C:\Users\Heady05\Documents\Eigene Bilder
2013-12-08 23:02 - 2013-12-08 23:02 - 00000000 _SHDL C:\Users\Heady05\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2013-12-08 23:02 - 2013-12-08 23:02 - 00000000 _SHDL C:\Users\Heady05\AppData\Local\Verlauf
2013-12-08 23:02 - 2013-12-08 23:02 - 00000000 _SHDL C:\Users\Heady05\AppData\Local\Anwendungsdaten
2013-12-08 23:02 - 2013-12-08 23:02 - 00000000 _SHDL C:\Users\Heady05\Anwendungsdaten
2013-12-08 23:02 - 2013-12-08 23:02 - 00000000 ____D C:\Users\Heady05\AppData\Roaming\Adobe
2013-12-08 23:02 - 2013-12-08 23:02 - 00000000 ____D C:\Users\Heady05\AppData\Local\VirtualStore
2013-12-08 22:45 - 2013-12-08 22:45 - 00097280 ___SH C:\Users\Media\Desktop\Thumbs.db
2013-12-08 22:39 - 2013-07-12 16:38 - 00000000 ___RD C:\Users\Media\SkyDrive.old
2013-12-08 22:37 - 2013-12-08 22:37 - 00001458 _____ C:\Users\Media\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2013-12-08 22:37 - 2013-06-01 17:20 - 00000000 ___RD C:\Users\Media\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-12-08 22:37 - 2013-06-01 17:20 - 00000000 ___RD C:\Users\Media\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2013-12-08 22:36 - 2013-12-08 22:36 - 00000020 ___SH C:\Users\Media\ntuser.ini
2013-12-08 22:28 - 2013-12-08 22:28 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Musik
2013-12-08 22:28 - 2013-12-08 22:28 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Bilder
2013-12-08 22:28 - 2013-12-08 22:28 - 00000000 _SHDL C:\Users\Default\Vorlagen
2013-12-08 22:28 - 2013-12-08 22:28 - 00000000 _SHDL C:\Users\Default\Startmenü
2013-12-08 22:28 - 2013-12-08 22:28 - 00000000 _SHDL C:\Users\Default\Netzwerkumgebung
2013-12-08 22:28 - 2013-12-08 22:28 - 00000000 _SHDL C:\Users\Default\Lokale Einstellungen
2013-12-08 22:28 - 2013-12-08 22:28 - 00000000 _SHDL C:\Users\Default\Eigene Dateien
2013-12-08 22:28 - 2013-12-08 22:28 - 00000000 _SHDL C:\Users\Default\Druckumgebung
2013-12-08 22:28 - 2013-12-08 22:28 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Musik
2013-12-08 22:28 - 2013-12-08 22:28 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Bilder
2013-12-08 22:28 - 2013-12-08 22:28 - 00000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2013-12-08 22:28 - 2013-12-08 22:28 - 00000000 _SHDL C:\Users\Default\AppData\Local\Verlauf
2013-12-08 22:28 - 2013-12-08 22:28 - 00000000 _SHDL C:\Users\Default\AppData\Local\Anwendungsdaten
2013-12-08 22:28 - 2013-12-08 22:28 - 00000000 _SHDL C:\Users\Default\Anwendungsdaten
2013-12-08 22:28 - 2013-12-08 22:28 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Musik
2013-12-08 22:28 - 2013-12-08 22:28 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Bilder
2013-12-08 22:28 - 2013-12-08 22:28 - 00000000 _SHDL C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2013-12-08 22:28 - 2013-12-08 22:28 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Verlauf
2013-12-08 22:28 - 2013-12-08 22:28 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Anwendungsdaten
2013-12-08 22:28 - 2013-12-08 22:28 - 00000000 _SHDL C:\Programme
2013-12-08 22:28 - 2013-12-08 22:28 - 00000000 _SHDL C:\ProgramData\Vorlagen
2013-12-08 22:28 - 2013-12-08 22:28 - 00000000 _SHDL C:\ProgramData\Startmenü
2013-12-08 22:28 - 2013-12-08 22:28 - 00000000 _SHDL C:\ProgramData\Dokumente
2013-12-08 22:28 - 2013-12-08 22:28 - 00000000 _SHDL C:\ProgramData\Anwendungsdaten
2013-12-08 22:28 - 2013-12-08 22:28 - 00000000 _SHDL C:\Program Files\Gemeinsame Dateien
2013-12-08 22:28 - 2013-12-08 22:28 - 00000000 _SHDL C:\Dokumente und Einstellungen
2013-12-08 22:28 - 2013-08-22 16:36 - 00000000 ____D C:\Program Files\Windows NT
2013-12-08 22:28 - 2013-08-22 14:36 - 00000000 __RHD C:\Users\Default
2013-12-08 22:27 - 2013-12-08 22:27 - 00022960 _____ C:\WINDOWS\system32\emptyregdb.dat
2013-12-08 22:27 - 2013-12-08 22:09 - 00020958 _____ C:\WINDOWS\diagwrn.xml
2013-12-08 22:27 - 2013-12-08 22:09 - 00020958 _____ C:\WINDOWS\diagerr.xml
2013-12-08 22:27 - 2013-12-08 21:40 - 00006639 _____ C:\WINDOWS\comsetup.log
2013-12-08 22:27 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\Registration
2013-12-08 22:27 - 2013-08-22 15:46 - 00285902 _____ C:\WINDOWS\setupact.log
2013-12-08 22:21 - 2013-05-02 15:58 - 01804472 _____ C:\WINDOWS\SysWOW64\PerfStringBackup.INI
2013-12-08 22:20 - 2013-08-22 16:36 - 00000000 __RSD C:\WINDOWS\Media
2013-12-08 22:20 - 2013-08-22 16:36 - 00000000 __RHD C:\Users\Public\Libraries
2013-12-08 22:16 - 2013-08-22 15:44 - 00493880 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2013-12-08 22:15 - 2013-08-22 14:36 - 00000000 ____D C:\WINDOWS\system32\Sysprep
2013-12-08 22:15 - 2013-08-22 14:25 - 00008192 ___SH C:\WINDOWS\system32\config\ELAM
2013-12-08 22:15 - 2013-07-10 12:34 - 00000000 ____D C:\Users\Media\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Winamp Erkennungs-Plug-in
2013-12-08 22:15 - 2013-03-25 09:25 - 00000000 ____D C:\WINDOWS\da
2013-12-08 22:15 - 2013-03-25 09:24 - 00000000 ____D C:\WINDOWS\tr
2013-12-08 22:15 - 2013-03-25 09:24 - 00000000 ____D C:\WINDOWS\sv
2013-12-08 22:15 - 2013-03-25 09:24 - 00000000 ____D C:\WINDOWS\sl
2013-12-08 22:15 - 2013-03-25 09:24 - 00000000 ____D C:\WINDOWS\pl
2013-12-08 22:15 - 2013-03-25 09:24 - 00000000 ____D C:\WINDOWS\nl
2013-12-08 22:15 - 2013-03-25 09:24 - 00000000 ____D C:\WINDOWS\it
2013-12-08 22:15 - 2013-03-25 09:24 - 00000000 ____D C:\WINDOWS\hu
2013-12-08 22:15 - 2013-03-25 09:24 - 00000000 ____D C:\WINDOWS\fr
2013-12-08 22:15 - 2013-03-25 09:24 - 00000000 ____D C:\WINDOWS\fi
2013-12-08 22:15 - 2013-03-25 09:24 - 00000000 ____D C:\WINDOWS\es
2013-12-08 22:15 - 2013-03-25 09:24 - 00000000 ____D C:\WINDOWS\el
2013-12-08 22:15 - 2013-03-25 09:24 - 00000000 ____D C:\WINDOWS\de
2013-12-08 22:15 - 2012-07-26 10:43 - 00000000 ____D C:\WINDOWS\en-GB
2013-12-08 22:14 - 2013-08-22 16:37 - 00004893 _____ C:\WINDOWS\DtcInstall.log
2013-12-08 22:14 - 2012-07-26 06:37 - 00000000 ____D C:\Users\Default.migrated
2013-12-08 22:13 - 2013-12-08 21:56 - 00000000 ____D C:\WINDOWS\SysWOW64\XPSViewer
2013-12-08 22:13 - 2013-09-30 04:56 - 00000000 ____D C:\WINDOWS\SysWOW64\winrm
2013-12-08 22:13 - 2013-09-30 04:56 - 00000000 ____D C:\WINDOWS\SysWOW64\WCN
2013-12-08 22:13 - 2013-09-30 04:56 - 00000000 ____D C:\WINDOWS\SysWOW64\sysprep
2013-12-08 22:13 - 2013-09-30 04:56 - 00000000 ____D C:\WINDOWS\SysWOW64\slmgr
2013-12-08 22:13 - 2013-09-30 04:56 - 00000000 ____D C:\WINDOWS\SysWOW64\Printing_Admin_Scripts
2013-12-08 22:13 - 2013-09-30 04:56 - 00000000 ____D C:\WINDOWS\system32\winrm
2013-12-08 22:13 - 2013-09-30 04:56 - 00000000 ____D C:\WINDOWS\system32\WCN
2013-12-08 22:13 - 2013-09-30 04:56 - 00000000 ____D C:\WINDOWS\system32\slmgr
2013-12-08 22:13 - 2013-09-30 04:56 - 00000000 ____D C:\WINDOWS\system32\Printing_Admin_Scripts
2013-12-08 22:13 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\WinStore
2013-12-08 22:13 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\SysWOW64\MUI
2013-12-08 22:13 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\SysWOW64\migwiz
2013-12-08 22:13 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\SysWOW64\IME
2013-12-08 22:13 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\SysWOW64\en-GB
2013-12-08 22:13 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2013-12-08 22:13 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\SystemResetPlatform
2013-12-08 22:13 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\spool
2013-12-08 22:13 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\NDF
2013-12-08 22:13 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\MUI
2013-12-08 22:13 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\IME
2013-12-08 22:13 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\en-GB
2013-12-08 22:13 - 2013-08-22 14:36 - 00000000 ____D C:\WINDOWS\SysWOW64\SMI
2013-12-08 22:13 - 2013-08-22 14:36 - 00000000 ____D C:\WINDOWS\SysWOW64\oobe
2013-12-08 22:13 - 2013-08-22 14:36 - 00000000 ____D C:\WINDOWS\SysWOW64\Dism
2013-12-08 22:13 - 2013-08-22 14:36 - 00000000 ____D C:\WINDOWS\system32\oobe
2013-12-08 22:13 - 2013-08-22 14:36 - 00000000 ____D C:\WINDOWS\system32\Dism
2013-12-08 22:13 - 2013-05-02 16:09 - 00000000 ____D C:\WINDOWS\SysWOW64\sda
2013-12-08 22:11 - 2013-12-08 22:05 - 00000000 ____D C:\Program Files (x86)\Intel
2013-12-08 22:11 - 2013-09-30 04:59 - 00000000 ____D C:\Program Files\Windows Journal
2013-12-08 22:11 - 2013-08-22 16:43 - 00000000 ____D C:\WINDOWS\DigitalLocker
2013-12-08 22:11 - 2013-08-22 16:36 - 00000000 __SHD C:\Program Files\Windows Sidebar
2013-12-08 22:11 - 2013-08-22 16:36 - 00000000 __SHD C:\Program Files (x86)\Windows Sidebar
2013-12-08 22:11 - 2013-08-22 16:36 - 00000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2013-12-08 22:11 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\PolicyDefinitions
2013-12-08 22:11 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\IME
2013-12-08 22:11 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\Help
2013-12-08 22:11 - 2013-08-22 16:36 - 00000000 ____D C:\Program Files\Windows Photo Viewer
2013-12-08 22:11 - 2013-08-22 16:36 - 00000000 ____D C:\Program Files\Common Files\System
2013-12-08 22:11 - 2013-08-22 16:36 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
2013-12-08 22:11 - 2013-08-22 16:36 - 00000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2013-12-08 22:11 - 2013-03-22 13:27 - 00000000 ____D C:\ProgramData\PRICache
2013-12-08 22:10 - 2013-12-08 22:10 - 00000000 ____D C:\WINDOWS\system32\config\bbimigrate
2013-12-08 22:10 - 2013-12-08 22:09 - 00000000 ___RD C:\Users\Media\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2013-12-08 22:10 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\Recovery
2013-12-08 22:10 - 2013-06-27 19:58 - 00000000 ____D C:\Users\Media\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Electronic Arts
2013-12-08 22:09 - 2013-12-08 22:09 - 00000000 _SHDL C:\Users\Media\Vorlagen
2013-12-08 22:09 - 2013-12-08 22:09 - 00000000 _SHDL C:\Users\Media\Startmenü
2013-12-08 22:09 - 2013-12-08 22:09 - 00000000 _SHDL C:\Users\Media\Netzwerkumgebung
2013-12-08 22:09 - 2013-12-08 22:09 - 00000000 _SHDL C:\Users\Media\Lokale Einstellungen
2013-12-08 22:09 - 2013-12-08 22:09 - 00000000 _SHDL C:\Users\Media\Eigene Dateien
2013-12-08 22:09 - 2013-12-08 22:09 - 00000000 _SHDL C:\Users\Media\Druckumgebung
2013-12-08 22:09 - 2013-12-08 22:09 - 00000000 _SHDL C:\Users\Media\Documents\Eigene Musik
2013-12-08 22:09 - 2013-12-08 22:09 - 00000000 _SHDL C:\Users\Media\Documents\Eigene Bilder
2013-12-08 22:09 - 2013-12-08 22:09 - 00000000 _SHDL C:\Users\Media\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2013-12-08 22:09 - 2013-12-08 22:09 - 00000000 _SHDL C:\Users\Media\AppData\Local\Verlauf
2013-12-08 22:09 - 2013-12-08 22:09 - 00000000 _SHDL C:\Users\Media\AppData\Local\Anwendungsdaten
2013-12-08 22:09 - 2013-12-08 22:09 - 00000000 _SHDL C:\Users\Media\Anwendungsdaten
2013-12-08 22:05 - 2013-12-08 22:05 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf
2013-12-08 22:05 - 2013-12-08 22:05 - 00000000 ____D C:\WINDOWS\SysWOW64\RTCOM
2013-12-08 22:05 - 2013-12-08 22:05 - 00000000 ____D C:\Program Files\Realtek
2013-12-08 22:03 - 2013-12-08 22:03 - 00000000 __SHD C:\Recovery
2013-12-08 22:02 - 2013-12-08 22:02 - 01341288 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll
2013-12-08 22:02 - 2013-12-08 22:02 - 01067008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32.dll
2013-12-08 22:02 - 2013-08-22 16:36 - 00262144 _____ C:\WINDOWS\system32\config\BCD-Template
2013-12-08 22:01 - 2013-12-08 22:01 - 01286552 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll
2013-12-08 22:01 - 2013-12-08 22:01 - 01217024 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Streaming.dll
2013-12-08 22:01 - 2013-12-08 22:01 - 01018960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll
2013-12-08 22:01 - 2013-12-08 22:01 - 00977408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Streaming.dll
2013-12-08 22:01 - 2013-12-08 22:01 - 00872840 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfplat.dll
2013-12-08 22:01 - 2013-12-08 22:01 - 00698232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfplat.dll
2013-12-08 22:01 - 2013-12-08 22:01 - 00294400 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Sensors.dll
2013-12-08 22:01 - 2013-12-08 22:01 - 00225792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Sensors.dll
2013-12-08 22:01 - 2013-08-22 16:36 - 00000000 ___RD C:\WINDOWS\ToastData
2013-12-08 22:01 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\Camera
2013-12-08 22:00 - 2013-12-08 22:00 - 21196664 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2013-12-08 22:00 - 2013-12-08 22:00 - 18642504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2013-12-08 22:00 - 2013-12-08 22:00 - 18577408 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2013-12-08 22:00 - 2013-12-08 22:00 - 13925888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2013-12-08 22:00 - 2013-12-08 22:00 - 13176320 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2013-12-08 22:00 - 2013-12-08 22:00 - 11674112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2013-12-08 22:00 - 2013-12-08 22:00 - 02801664 _____ (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll
2013-12-08 22:00 - 2013-12-08 22:00 - 01085952 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.appcore.dll
2013-12-08 22:00 - 2013-12-08 22:00 - 01019392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\actxprxy.dll
2013-12-08 22:00 - 2013-12-08 22:00 - 00869888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.appcore.dll
2013-12-08 22:00 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\migwiz
2013-12-08 21:59 - 2013-12-08 21:59 - 23212544 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 17142784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 12995584 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 11220992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 07399256 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2013-12-08 21:59 - 2013-12-08 21:59 - 06639616 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 05769728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 05765120 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 04599808 _____ (Microsoft Corporation) C:\WINDOWS\system32\d2d1.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 04240384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 04190720 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2013-12-08 21:59 - 2013-12-08 21:59 - 04104704 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncEngine.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 03934208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d2d1.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 03532288 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 03395920 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSService.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 02764288 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 02617344 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 02570240 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 02551640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2013-12-08 21:59 - 2013-12-08 21:59 - 02332160 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 02328872 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe
2013-12-08 21:59 - 2013-12-08 21:59 - 02295808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 02166272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 02143744 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 02140888 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 02134120 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d9.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 02065448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe
2013-12-08 21:59 - 2013-12-08 21:59 - 01993728 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2013-12-08 21:59 - 2013-12-08 21:59 - 01926656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2013-12-08 21:59 - 2013-12-08 21:59 - 01843712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Display.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 01818112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 01816576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Display.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 01799944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d9.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 01765384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 01765376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 01704448 _____ (Microsoft Corporation) C:\WINDOWS\system32\wucltux.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 01584128 _____ (Microsoft Corporation) C:\WINDOWS\system32\workfolderssvc.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 01530200 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2013-12-08 21:59 - 2013-12-08 21:59 - 01399176 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmde.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 01394176 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 01373872 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpmde.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 01362944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user32.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 01302528 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 01287064 _____ (Microsoft Corporation) C:\WINDOWS\system32\kernel32.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 01231360 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 01204968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winmde.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 01160704 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Web.Http.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 01156608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 01147904 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIAutomationCore.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 01067080 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfasfsrcsnk.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 01036288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kernel32.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 01011712 _____ (Microsoft Corporation) C:\WINDOWS\system32\TSWorkspace.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00922624 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00920064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIAutomationCore.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00909312 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmCoreR.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00903168 _____ (Microsoft Corporation) C:\WINDOWS\system32\iphlpsvc.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00888832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00883184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfasfsrcsnk.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00839680 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSShared.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00830464 _____ (Microsoft Corporation) C:\WINDOWS\system32\samsrv.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00795648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TSWorkspace.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00762368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Web.Http.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00761856 _____ (Microsoft Corporation) C:\WINDOWS\system32\WorkfoldersControl.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00708616 _____ (Microsoft Corporation) C:\WINDOWS\system32\iuilp.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00700928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSShared.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00699840 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d10level9.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00656384 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsapi.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00631296 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWAHost.exe
2013-12-08 21:59 - 2013-12-08 21:59 - 00621056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MrmCoreR.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00618496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\apphelp.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00607744 _____ (Microsoft Corporation) C:\WINDOWS\system32\comdlg32.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00578952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d10level9.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00578560 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.BackgroundTransfer.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00558080 _____ (Microsoft Corporation) C:\WINDOWS\system32\apphelp.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00533504 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppReadiness.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00531968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comdlg32.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00523096 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\acpi.sys
2013-12-08 21:59 - 2013-12-08 21:59 - 00518656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWAHost.exe
2013-12-08 21:59 - 2013-12-08 21:59 - 00516496 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00492544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dnsapi.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00481392 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00465960 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00454656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv.sys
2013-12-08 21:59 - 2013-12-08 21:59 - 00433664 _____ (Microsoft Corporation) C:\WINDOWS\system32\ipnathlp.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00411648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.BackgroundTransfer.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00406400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxgi.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00391512 _____ (Microsoft Corporation) C:\WINDOWS\system32\tsmf.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00385528 _____ C:\WINDOWS\system32\ApnDatabase.xml
2013-12-08 21:59 - 2013-12-08 21:59 - 00382808 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2013-12-08 21:59 - 2013-12-08 21:59 - 00381952 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUSettingsProvider.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00380656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00371032 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\spaceport.sys
2013-12-08 21:59 - 2013-12-08 21:59 - 00345552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tsmf.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00338944 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpclip.exe
2013-12-08 21:59 - 2013-12-08 21:59 - 00335360 _____ (Microsoft Corporation) C:\WINDOWS\system32\eappcfg.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00331776 _____ (Microsoft Corporation) C:\WINDOWS\system32\eapphost.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00326024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00325464 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBXHCI.SYS
2013-12-08 21:59 - 2013-12-08 21:59 - 00325120 _____ (Microsoft Corporation) C:\WINDOWS\system32\eapp3hst.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00317616 _____ (Microsoft Corporation) C:\WINDOWS\system32\wintrust.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00286208 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcsvDevice.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00272896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eappcfg.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00270848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\portcls.sys
2013-12-08 21:59 - 2013-12-08 21:59 - 00262144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eapphost.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00258904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdyboost.sys
2013-12-08 21:59 - 2013-12-08 21:59 - 00255488 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsrslvr.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00249856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00245248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eapp3hst.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00235960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wintrust.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00226304 _____ (Microsoft Corporation) C:\WINDOWS\system32\miutils.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00221184 _____ (Microsoft Corporation) C:\WINDOWS\system32\profsvc.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00218624 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2013-12-08 21:59 - 2013-12-08 21:59 - 00189952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00186880 _____ (Microsoft Corporation) C:\WINDOWS\system32\WorkFoldersShell.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00184832 _____ (Microsoft Corporation) C:\WINDOWS\system32\dafWfdProvider.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00180224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\miutils.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00171864 _____ (Microsoft Corporation) C:\WINDOWS\system32\kd_02_8086.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00160768 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxAllUserStore.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00139776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxAllUserStore.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00134656 _____ (Microsoft Corporation) C:\WINDOWS\system32\psmsrv.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00132608 _____ (Microsoft Corporation) C:\WINDOWS\system32\msched.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00113152 _____ (Microsoft Corporation) C:\WINDOWS\system32\shsetup.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00111616 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwcollector.exe
2013-12-08 21:59 - 2013-12-08 21:59 - 00104320 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncryptsslp.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00103424 _____ (Microsoft Corporation) C:\WINDOWS\system32\WiFiDisplay.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00101888 _____ (Microsoft Corporation) C:\WINDOWS\system32\eappgnui.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00094208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shsetup.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00093184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eappgnui.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00092672 _____ (Microsoft Corporation) C:\WINDOWS\system32\dafBth.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00088272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ncryptsslp.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\TSWbPrxy.exe
2013-12-08 21:59 - 2013-12-08 21:59 - 00057176 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\stornvme.sys
2013-12-08 21:59 - 2013-12-08 21:59 - 00054776 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
2013-12-08 21:59 - 2013-12-08 21:59 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\system32\ftp.exe
2013-12-08 21:59 - 2013-12-08 21:59 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ftp.exe
2013-12-08 21:59 - 2013-12-08 21:59 - 00044936 _____ (Microsoft Corporation) C:\WINDOWS\system32\wldp.dll
2013-12-08 21:59 - 2013-12-08 21:59 - 00039768 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\intelpep.sys
2013-12-08 21:59 - 2013-12-08 21:59 - 00031064 _____ (Microsoft Corporation) C:\WINDOWS\system32\ploptin.dll
2013-12-08 21:58 - 2013-12-08 21:58 - 01943536 _____ (Microsoft Corporation) C:\WINDOWS\system32\crypt32.dll
2013-12-08 21:58 - 2013-12-08 21:58 - 01581968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\crypt32.dll
2013-12-08 21:58 - 2013-12-08 21:58 - 01104384 _____ (Microsoft Corporation) C:\WINDOWS\system32\IKEEXT.DLL
2013-12-08 21:58 - 2013-12-08 21:58 - 00828416 _____ (Microsoft Corporation) C:\WINDOWS\system32\BFE.DLL
2013-12-08 21:58 - 2013-12-08 21:58 - 00262144 _____ C:\WINDOWS\system32\config\userdiff
2013-12-08 21:58 - 2013-12-08 21:58 - 00136536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wfplwfs.sys
2013-12-08 21:56 - 2013-12-08 21:56 - 00000000 ____D C:\Program Files\Reference Assemblies
2013-12-08 21:56 - 2013-12-08 21:56 - 00000000 ____D C:\Program Files\MSBuild
2013-12-08 21:56 - 2013-12-08 21:56 - 00000000 ____D C:\Program Files (x86)\Reference Assemblies
2013-12-08 21:56 - 2013-12-08 21:56 - 00000000 ____D C:\Program Files (x86)\MSBuild
2013-12-08 21:55 - 2013-12-08 21:55 - 00155480 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbccgp.sys
2013-12-08 21:48 - 2013-06-01 17:18 - 01437722 _____ C:\WINDOWS\WindowsUpdate (1).log
2013-12-08 21:24 - 2012-07-26 09:12 - 00000000 ____D C:\WINDOWS\AUInstallAgent
2013-12-08 20:14 - 2013-03-22 14:29 - 00786586 _____ C:\WINDOWS\system32\perfh015.dat
2013-12-08 20:14 - 2013-03-22 14:29 - 00159734 _____ C:\WINDOWS\system32\perfc015.dat
2013-12-08 09:20 - 2013-12-08 09:20 - 390193794 _____ C:\WINDOWS\MEMORY.DMP
2013-11-29 16:08 - 2013-07-15 19:03 - 00000000 ____D C:\Users\Media\Documents\Diablo III
2013-11-21 12:03 - 2013-10-15 08:08 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-11-21 11:47 - 2013-07-30 10:04 - 00000000 ____D C:\WINDOWS\system32\MRT
2013-11-21 11:46 - 2013-03-22 18:03 - 82896128 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2013-11-16 16:30 - 2013-09-15 12:52 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-11-16 07:46 - 2013-10-17 10:21 - 00000000 ____D C:\Users\Media\AppData\Local\Adobe

Some content of TEMP:
====================
C:\Users\Heady05\AppData\Local\Temp\avgnt.exe
C:\Users\Media\AppData\Local\Temp\avgnt.exe
C:\Users\Media\AppData\Local\Temp\Quarantine.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-12-08 22:04

==================== End Of Log ============================

--- --- ---

--- --- ---

schrauber · 12.12.2013, 09:33

Antivir deinstallieren, Du hast schon Avast drauf.

Fertig

Die Reihenfolge ist hier entscheidend.

Falls Defogger benutzt wurde: Defogger nochmal starten und auf re-enable klicken.
Falls Combofix benutzt wurde: (Alternativ in uninstall.exe umbenennen und starten)
- Windowstaste + R > Combofix /Uninstall (eingeben) > OK
- Alternative: Combofix.exe in uninstall.exe umbenennen und starten
- Combofix wird jetzt starten, sich evtl updaten und dann alle Reste von sich selbst entfernen.
Downloade Dir bitte auf jeden Fall DelFix auf deinen Desktop:
- Schließe alle offenen Programme.
- Starte die delfix.exe mit einem Doppelklick.
- Setze vor jede Funktion ein Häkchen.
- Klicke auf Start.
- Hinweis: DelFix entfernt u. a. alle verwendeten Programme, die Quarantäne unserer Scanner, den Java-Cache und löscht sich abschließend selbst.
- Starte deinen Rechner abschließend neu.
Sollten jetzt noch Programme aus unserer Bereinigung übrig sein kannst du sie bedenkenlos löschen.

Falls Du Lob oder Kritik abgeben möchtest kannst Du das hier tun

Hier noch ein paar Tipps zur Absicherung deines Systems.

Ich kann garnicht zu oft erwähnen, wie wichtig es ist, dass dein System Up to Date ist.

Bitte überprüfe ob dein System Windows Updates automatisch herunter lädt
Windows Updates
- Windows XP: Start --> Systemsteuerung --> Doppelklick auf Automatische Updates
- Windows Vista / 7: Start --> Systemsteuerung --> System und Sicherheit --> Automatische Updates aktivieren oder deaktivieren
Gehe sicher das die automatischen Updates aktiviert sind.
Software Updates
Installierte Software kann ebenfalls Sicherheitslücken haben, welche Malware nutzen kann, um dein System zu infizieren.
Um deine Installierte Software up to date zu halten, empfehle ich dir Secunia Online Software.

Anti- Viren Software

Gehe sicher immer eine Anti Viren Software installiert zu haben und das diese auch up to date ist. Es ist nämlich nutzlos wenn diese out of date sind.

Zusätzlicher Schutz

MalwareBytes Anti Malware
Dies ist eines der besten Anti-Malware Tools auf dem Markt. Es ist ein On- Demond Scan Tool welches viele aktuelle Malware erkennt und auch entfernt.
Update das Tool und lass es einmal in der Woche laufen. Die Kaufversion biete zudem noch einen Hintergrundwächter.
Ein Tutorial zur Verwendung findest Du hier.
WinPatrol
Diese Software macht einen Snapshot deines Systems und warnt dich vor eventuellen Änderungen. Downloade dir die Freeware Version von hier.

Sicheres Browsen

SpywareBlaster
Eine kurze Einführung findest du Hier
MVPs hosts file
Ein Tutorial findest Du hier. Leider habe ich bis jetzt kein deutschsprachiges gefunden.
WOT (Web of trust)
Dieses AddOn warnt Dich bevor Du eine als schädlich gemeldete Seite besuchst.

Alternative Browser

Andere Browser tendieren zu etwas mehr Sicherheit als der IE, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden.

Opera
Mozilla Firefox.
- Hinweis: Für diesen Browser habe ich hier ein paar nützliche Add Ons
- NoScript
  Dieses AddOn blockt JavaScript, Java and Flash und andere Plugins. Sie werden nur dann ausgeführt wenn Du es bestätigst.
- AdblockPlus
  Dieses AddOn blockt die meisten Werbung von selbst. Ein Rechtsklick auf den Banner um diesen zu AdBlockPlus hinzu zu fügen reicht und dieser wird nicht mehr geladen.
  Es spart ausserdem Downloadkapazität.

Performance
Bereinige regelmäßig deine Temp Files. Ich empfehle hierzu TFC
Halte dich fern von jedlichen Registry Cleanern.
Diese Schaden deinem System mehr als sie helfen. Hier ein paar ( englishe ) Links
Miekemoes Blogspot ( MVP )
Bill Castner ( MVP )

Don'ts

Klicke nicht auf alles nur weil es Dich dazu auffordert und schön bunt ist.
verwende keine peer to peer oder Filesharing Software (Emule, uTorrent,..)
Lass die Finger von Cracks, Keygens, Serials oder anderer illegaler Software.
Öffne keine Anhänge von Dir nicht bekannten Emails. Achte vor allem auf die Dateiendung wie zb deinFoto.jpg.exe

Nun bleibt mir nur noch dir viel Spass beim sicheren Surfen zu wünschen.

Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so das ich diesen Thread aus meinen Abos löschen kann.

heady02 · 13.12.2013, 08:24

Hi schrauber habe alles erledigt läuft alles super vielen lieben dank für dein schnelle und Wirksame Hilfe !

09.12.2013, 10:02	#8
schrauber /// the machine /// TB-Ausbilder	Gesellschaft zur Verfügung virus.. Startet der Rechner normal? __________________ gruß, schrauber *Proud Member of UNITE and ASAP since 2009* Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM!

Gesellschaft zur Verfügung virus..

Plagegeister aller Art und deren Bekämpfung: Gesellschaft zur Verfügung virus..