Zurück   Trojaner-Board > Malware entfernen > Log-Analyse und Auswertung
Skype Virus

Skype Virus


Log-Analyse und Auswertung: Skype Virus

Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML

Antwort
Alt 29.12.2013, 00:01   #1
Liongamer1
 
Skype Virus - Standard

Skype Virus


Hallo,

als ich mich heute in Skype angemeldet habe, habe ich gesehen, dass ich vor kurzem eine Nachricht von einem Freund bekommen habe. Es stand dort: "wann war das letzte Mal sah, dieses Foto?". Danach kam ein Link zu einer Datei auf 4shared. Mein Freund hat mir geschrieben, dass er das nicht geschrieben hat und er wusste auch nichts von dieser Nachricht.
Ich habe auf diesen Link geklickt und die Dateien heruntergeladen. Es wurde zweimal die .exe mit dem Namen Foto.exe und einmal eine .zip datei heruntergeladen. Ich habe keine von diesen Datein geöffnet oder ausgeführt und habe die drei Sachen direkt gelöscht. Jetzt bin ich mir nicht sicher, ob dadurch ein Virus auf meinen Computer gelangt ist. Ich habe folgende Logs nach eurer Anleitung erstellt.

deffoger_disable.log
Code:
ATTFilter
defogger_disable by jpshortstuff (23.02.10.1)
Log created at 23:34 on 28/12/2013 (Leon)

Checking for autostart values...
HKCU\~\Run values retrieved.
HKLM\~\Run values retrieved.

Checking for services/drivers...


-=E.O.F=-
FRST.txt
Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 28-12-2013 01
Ran by Leon (administrator) on LEON-PC on 28-12-2013 23:39:42
Running from C:\Users\Leon\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(AMD) C:\Windows\System32\atiesrxx.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe
(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\Registration\GregHSRW.exe
(Nero AG) C:\Program Files (x86)\HTC\HTC Sync Manager\HSMServiceEntry.exe
() C:\Program Files\ShrewSoft\VPN Client\iked.exe
() C:\Program Files\ShrewSoft\VPN Client\ipsecd.exe
(McAfee, Inc.) C:\Program Files (x86)\McAfee\SiteAdvisor\mcsacore.exe
() C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe
() C:\Program Files (x86)\Cyberlink\Shared files\RichVideo.exe
(Razer Inc.) C:\Program Files (x86)\Razer\Razer Game Booster\RzKLService.exe
(TomTom) C:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe
(Acer Group) C:\Program Files\Acer\Acer Updater\UpdaterService.exe
() C:\OEM\USBDECTION\USBS3S4Detection.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Egis Technology Inc.) C:\Program Files (x86)\EgisTec MyWinLocker\x86\mwlDaemon.exe
(Microsoft Corporation) C:\Program Files\Microsoft IntelliPoint\ipoint.exe
(Spotify Ltd) C:\Users\Leon\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
(TomTom) C:\Program Files (x86)\TomTom HOME 2\TomTomHOMERunner.exe
(Egis Technology Inc.) C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Egis Technology Inc.) C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe
(Microsoft Corporation) C:\Program Files\Microsoft IntelliPoint\dpupdchk.exe
() C:\Program Files (x86)\HTC\HTC Sync Manager\HTC Sync\adb.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [9642528 2010-02-24] (Realtek Semiconductor)
HKLM\...\Run: [mwlDaemon] - C:\Program Files (x86)\EgisTec MyWinLocker\x86\mwlDaemon.exe [349552 2010-02-01] (Egis Technology Inc.)
HKLM\...\Run: [IntelTBRunOnce] - C:\Program Files\Intel\TurboBoost\RunTBGadgetOnce.vbs [4123 2012-05-30] ()
HKLM\...\Run: [IntelliPoint] - C:\Program Files\Microsoft IntelliPoint\ipoint.exe [2417032 2011-08-01] (Microsoft Corporation)
HKLM-x32\...\Run: [MDS_Menu] - C:\Program Files (x86)\Acer Arcade Deluxe\MediaShow Espresso\MUITransfer\MUIStartMenu.exe [222504 2009-05-19] (CyberLink Corp.)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [EgisUpdate] - C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe [201512 2009-12-25] (Egis Technology Inc.)
HKLM-x32\...\Run: [EgisTecPMMUpdate] - C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe [401192 2009-12-25] (Egis Technology Inc.)
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-05-15] (Apple Inc.)
HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [684600 2013-12-17] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [766208 2013-11-07] (Advanced Micro Devices, Inc.)
HKCU\...\Run: [Spotify Web Helper] - C:\Users\Leon\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1168896 2013-12-07] (Spotify Ltd)
HKCU\...\Run: [TomTomHOME.exe] - C:\Program Files (x86)\TomTom HOME 2\TomTomHOMERunner.exe [248208 2013-07-02] (TomTom)
MountPoints2: L - L:\HTC_Sync_Manager_PC.exe
MountPoints2: {65480a97-b7d1-11e2-bfa4-4487fcd117e3} - K:\cdstart.exe
MountPoints2: {e29c26d0-db5a-11e2-85b2-4487fcd117e3} - K:\cdstart.exe
HKU\Default User\...\RunOnce: [ScrSav] - C:\Program Files (x86)\Acer\Screensaver\run_Acer.exe [154144 2010-01-15] ()
Startup: C:\Users\Leon\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Taskbar Eliminator.lnk
ShortcutTarget: Taskbar Eliminator.lnk -> C:\Users\Leon\AppData\Local\Temp\Rar$EXa0.316\Taskbar Eliminator\Taskbar Eliminator.exe (No File)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://feed.helperbar.com/?publisher=YahooOC&dpid=YahooOC&co=DE&userid=836743ac-2a73-484c-9a82-2d349f20a027&searchtype=hp&fr=linkury-tb&installDate=22/06/2013&type=hp1000
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0407&m=aspire_m5910&r=17360413c806pe435v165w5761u87s
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://feed.helperbar.com/?publisher=YahooOC&dpid=YahooOC&co=DE&userid=836743ac-2a73-484c-9a82-2d349f20a027&searchtype=ds&p={searchTerms}&fr=linkury-tb&installDate=22/06/2013&type=hp1000
HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://feed.helperbar.com/?publisher=YahooOC&dpid=YahooOC&co=DE&userid=836743ac-2a73-484c-9a82-2d349f20a027&searchtype=ds&p={searchTerms}&fr=linkury-tb&installDate=22/06/2013&type=hp1000
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKLM-x32 - DefaultScope {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.helperbar.com/?publisher=YahooOC&dpid=YahooOC&co=DE&userid=836743ac-2a73-484c-9a82-2d349f20a027&searchtype=ds&p={searchTerms}&fr=linkury-tb&installDate=22/06/2013&type=hp1000
SearchScopes: HKLM-x32 - {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.helperbar.com/?publisher=YahooOC&dpid=YahooOC&co=DE&userid=836743ac-2a73-484c-9a82-2d349f20a027&searchtype=ds&p={searchTerms}&fr=linkury-tb&installDate=22/06/2013&type=hp1000
SearchScopes: HKCU - DefaultScope {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.helperbar.com/?publisher=YahooOC&dpid=YahooOC&co=DE&userid=836743ac-2a73-484c-9a82-2d349f20a027&searchtype=ds&p={searchTerms}&fr=linkury-tb&installDate=22/06/2013&type=hp1000
SearchScopes: HKCU - {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.helperbar.com/?publisher=YahooOC&dpid=YahooOC&co=DE&userid=836743ac-2a73-484c-9a82-2d349f20a027&searchtype=ds&p={searchTerms}&fr=linkury-tb&installDate=22/06/2013&type=hp1000
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = 
SearchScopes: HKCU - {DCD31D43-590A-4012-83ED-8432C6D6DBD5} URL = hxxp://de.search.yahoo.com/search?fr=mcafee&p={SearchTerms}
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: McAfee SiteAdvisor BHO - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - C:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: McAfee SiteAdvisor BHO - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - C:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - C:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
Toolbar: HKLM - No Name - {ae07101b-46d4-4a98-af68-0333ea26e113} -  No File
Toolbar: HKLM-x32 - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - C:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
Toolbar: HKLM-x32 - No Name - {ae07101b-46d4-4a98-af68-0333ea26e113} -  No File
Toolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  No File
Handler: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
Handler-x32: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
Handler-x32: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{9155BD02-8D91-4AC4-A33F-FD4BE0F6B02D}: [NameServer]146.140.221.1,192.44.32.31

FireFox:
========
FF ProfilePath: C:\Users\Leon\AppData\Roaming\Mozilla\Firefox\Profiles\ri8t50b8.default
FF NewTab: about:blank
FF DefaultSearchEngine: Sichere Suche
FF SearchEngineOrder.1: Sichere Suche
FF Homepage: hxxp://feed.helperbar.com/?publisher=YahooOC&dpid=YahooOC&co=DE&userid=836743ac-2a73-484c-9a82-2d349f20a027&searchtype=hp&fr=linkury-tb&installDate=22/06/2013&type=hp1000
FF Keyword.URL: hxxp://de.search.yahoo.com/search?fr=mcafee&p=
FF SelectedSearchEngine: Sichere Suche
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.0.6 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @java.com/DTPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @mcafee.com/SAFFPlugin - C:\Program Files (x86)\McAfee\SiteAdvisor\npmcffplg32.dll (McAfee, Inc.)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3508.0205 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Users\Leon\AppData\Roaming\Mozilla\Firefox\Profiles\ri8t50b8.default\searchplugins\Web Search.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\McSiteAdvisor.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF HKLM-x32\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files (x86)\McAfee\SiteAdvisor
FF Extension: McAfee SiteAdvisor - C:\Program Files (x86)\McAfee\SiteAdvisor

Chrome: 
=======
CHR HomePage: hxxp://feed.helperbar.com/?publisher=YahooOC&dpid=YahooOC&co=DE&userid=836743ac-2a73-484c-9a82-2d349f20a027&searchtype=hp&fr=linkury-tb&installDate=22/06/2013&type=hp1000
CHR RestoreOnStartup: "hxxp://www.youtube.com/?hl=de&gl=DE"
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\pdf.dll ()
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll No File
CHR Plugin: (Java(TM) Platform SE 7 U21) - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
CHR Plugin: (McAfee SiteAdvisor) - C:\Program Files (x86)\McAfee\SiteAdvisor\npmcffplg32.dll (McAfee, Inc.)
CHR Plugin: (Silverlight Plug-In) - C:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrl.dll No File
CHR Plugin: (Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (iTunes Application Detector) - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_202.dll No File
CHR Plugin: (Java Deployment Toolkit 7.0.210.11) - C:\Windows\SysWOW64\npDeployJava1.dll No File
CHR Extension: (GeoGebra) - C:\Users\Leon\AppData\Local\Google\Chrome\User Data\Default\Extensions\bnbaboaihhkjoaolfnfoablhllahjnee\4.4.0.1_0
CHR Extension: (SiteAdvisor) - C:\Users\Leon\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho\3.6.4.1311_0
CHR Extension: (Google Wallet) - C:\Users\Leon\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_0
CHR HKLM-x32\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - C:\Program Files (x86)\McAfee\SiteAdvisor\McChPlg.crx
CHR HKLM-x32\...\Chrome\Extension: [hbcennhacfaagdopikcegfcobcadeocj] - C:\Program Files (x86)\Common Files\Spigot\GC\saebay_1.0.crx
CHR HKLM-x32\...\Chrome\Extension: [icdlfehblmklkikfigmjhbmmpmkmpooj] - C:\Program Files (x86)\Common Files\Spigot\GC\errorassistant_1.1.crx
CHR HKLM-x32\...\Chrome\Extension: [mhkaekfpcppmmioggniknbnbdbcigpkk] - C:\Program Files (x86)\Common Files\Spigot\GC\coupons_2.3.crx
CHR HKLM-x32\...\Chrome\Extension: [pfndaklgolladniicklehhancnlgocpp] - C:\Program Files (x86)\Common Files\Spigot\GC\saamazon_1.0.crx

==================== Services (Whitelisted) =================

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440376 2013-12-17] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440376 2013-11-19] (Avira Operations GmbH & Co. KG)
R2 HTCMonitorService; C:\Program Files (x86)\HTC\HTC Sync Manager\HSMServiceEntry.exe [87368 2013-01-29] (Nero AG)
R2 iked; C:\Program Files\ShrewSoft\VPN Client\iked.exe [1127736 2013-07-01] ()
R2 ipsecd; C:\Program Files\ShrewSoft\VPN Client\ipsecd.exe [810808 2013-07-01] ()
R2 McAfee SiteAdvisor Service; C:\Program Files (x86)\McAfee\SiteAdvisor\mcsacore.exe [121616 2013-11-07] (McAfee, Inc.)
S3 MWLService; C:\Program Files (x86)\EgisTec MyWinLocker\x86\MWLService.exe [305520 2010-02-01] (Egis Technology Inc.)
R2 PassThru Service; C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe [167424 2012-12-07] ()
R2 RichVideo; C:\Program Files (x86)\Cyberlink\Shared files\RichVideo.exe [244904 2010-02-03] ()
R2 RzKLService; C:\Program Files (x86)\Razer\Razer Game Booster\RzKLService.exe [105448 2013-11-22] (Razer Inc.)
R2 USBS3S4Detection; C:\OEM\USBDECTION\USBS3S4Detection.exe [76320 2009-12-09] ()

==================== Drivers (Whitelisted) ====================

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108440 2013-12-17] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131576 2013-12-17] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-10-01] (Avira Operations GmbH & Co. KG)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-12-28 23:38 - 2013-12-28 23:39 - 00017959 _____ C:\Users\Leon\Desktop\FRST.txt
2013-12-28 23:37 - 2013-12-28 23:37 - 01931176 _____ (Farbar) C:\Users\Leon\Desktop\FRST64.exe
2013-12-28 23:34 - 2013-12-28 23:34 - 00000470 _____ C:\Users\Leon\Desktop\defogger_disable.log
2013-12-28 23:33 - 2013-12-28 23:33 - 00000748 _____ C:\Users\Leon\Desktop\Neues Textdokument.txt
2013-12-28 22:58 - 2013-12-28 23:20 - 00000168 _____ C:\Windows\setupact.log
2013-12-28 22:58 - 2013-12-28 22:58 - 00274840 _____ C:\Windows\Minidump\122813-23821-01.dmp
2013-12-28 22:58 - 2013-12-28 22:58 - 00000000 _____ C:\Windows\setuperr.log
2013-12-28 22:48 - 2013-12-28 22:48 - 00377856 _____ C:\Users\Leon\Desktop\gmer_2.1.19163.exe
2013-12-28 22:47 - 2013-12-28 22:47 - 00000000 ____D C:\FRST
2013-12-28 22:45 - 2013-12-28 22:45 - 00050477 _____ C:\Users\Leon\Desktop\Defogger.exe
2013-12-28 22:45 - 2013-12-28 22:45 - 00000000 ____D C:\Users\Leon\Desktop\Virus
2013-12-28 22:45 - 2013-12-28 22:45 - 00000000 _____ C:\Users\Leon\defogger_reenable
2013-12-28 21:50 - 2013-12-28 21:50 - 00000000 ____D C:\ProgramData\Firefly Studios
2013-12-28 21:36 - 2013-12-28 21:54 - 00000000 ____D C:\Users\Leon\Documents\Stronghold 2
2013-12-28 21:36 - 2013-12-28 21:51 - 00002158 _____ C:\Users\Public\Desktop\Stronghold 2 spielen.lnk
2013-12-28 21:36 - 2013-12-28 21:36 - 00098304 _____ (Sony DADC Austria AG.) C:\Windows\SysWOW64\CmdLineExt.dll
2013-12-28 21:36 - 2013-12-28 21:36 - 00000000 ____D C:\Users\Leon\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2013-12-28 21:31 - 2013-12-28 21:31 - 00000000 ____D C:\Program Files (x86)\Firefly Studios
2013-12-27 22:53 - 2013-12-27 22:53 - 02344450 _____ C:\Users\Leon\Downloads\omsi_2_docs (1).zip
2013-12-27 22:30 - 2013-12-27 22:30 - 00114549 _____ C:\Users\Leon\AppData\Local\recently-used.xbel
2013-12-27 13:32 - 2013-12-27 13:32 - 00000222 _____ C:\Users\Leon\Desktop\OMSI 2.url
2013-12-27 12:43 - 2013-12-27 12:43 - 00000000 ____D C:\Users\Leon\AppData\Local\Razer_Inc
2013-12-27 12:42 - 2013-12-27 12:42 - 00000000 ____D C:\Users\Leon\Documents\Razer
2013-12-27 12:41 - 2013-12-27 12:41 - 00000000 ____D C:\Users\Leon\AppData\Local\Razer
2013-12-27 12:40 - 2013-12-27 12:40 - 00002129 _____ C:\Users\Public\Desktop\Razer Game Booster.lnk
2013-12-27 12:40 - 2013-12-27 12:40 - 00000000 ____D C:\ProgramData\Razer
2013-12-27 12:40 - 2013-12-27 12:40 - 00000000 ____D C:\Program Files (x86)\Razer
2013-12-27 12:39 - 2013-12-27 12:39 - 41363400 _____ (Razer Inc.                                                  ) C:\Users\Leon\Downloads\RazerGameBoosterSetup_4.1.59.0_1.exe
2013-12-27 12:33 - 2013-12-27 12:34 - 82548634 _____ C:\Users\Leon\Downloads\MAN_Lions_City_DD.pl1.rar
2013-12-26 21:50 - 2013-12-26 21:50 - 00000000 ____D C:\Program Files (x86)\Aerosoft
2013-12-26 21:46 - 2013-12-26 21:50 - 00000954 _____ C:\Users\Public\Desktop\Aerosoft Launcher.lnk
2013-12-25 12:47 - 2013-12-25 12:47 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_point64_01009.Wdf
2013-12-25 12:46 - 2013-12-25 12:46 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_dc3d_01009.Wdf
2013-12-25 12:46 - 2013-12-25 12:46 - 00000000 ____D C:\Program Files\Microsoft IntelliPoint
2013-12-25 12:43 - 2013-12-25 12:47 - 00003040 _____ C:\Windows\System32\Tasks\Microsoft_Hardware_Launch_IPoint_exe
2013-12-25 12:43 - 2013-12-25 12:43 - 00003118 _____ C:\Windows\System32\Tasks\Microsoft_Hardware_Launch_mousekeyboardcenter_exe
2013-12-25 12:43 - 2013-12-25 12:43 - 00003090 _____ C:\Windows\System32\Tasks\Microsoft_Hardware_Launch_itype_exe
2013-12-25 12:43 - 2013-12-25 12:43 - 00003062 _____ C:\Windows\System32\Tasks\Microsoft_MKC_Logon_Task_ipoint.exe
2013-12-25 12:43 - 2013-12-25 12:43 - 00003060 _____ C:\Windows\System32\Tasks\Microsoft_MKC_Logon_Task_itype.exe
2013-12-25 12:43 - 2013-12-25 12:43 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_point64_01011.Wdf
2013-12-25 12:43 - 2013-12-25 12:43 - 00000000 ____D C:\Program Files\Microsoft Mouse and Keyboard Center
2013-12-25 12:41 - 2013-12-25 12:41 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_dc3d_01011.Wdf
2013-12-25 12:40 - 2013-12-25 12:40 - 22361472 _____ (Microsoft Corporation) C:\Users\Leon\Downloads\IPx64_1031_8.20.468.0.exe
2013-12-25 12:40 - 2013-12-25 12:40 - 16249216 _____ (Microsoft Corporation) C:\Users\Leon\Downloads\ITPx64_1031_8.20.469.0.exe
2013-12-24 15:26 - 2013-12-24 15:26 - 00000000 ____D C:\Users\Leon\Downloads\Mercedes-Benz-O530-Citaro
2013-12-24 15:16 - 2013-12-24 15:17 - 132605071 _____ C:\Users\Leon\Downloads\Mercedes-Benz-O530-Citaro.zip
2013-12-24 15:12 - 2013-12-24 15:13 - 73578015 _____ C:\Users\Leon\Downloads\Omsi2.ru_Mercedes_o530G.7z
2013-12-23 22:14 - 2013-12-23 22:15 - 00000000 ____D C:\Users\Leon\Downloads\Santasleigh
2013-12-23 22:13 - 2013-12-23 22:13 - 05923085 _____ C:\Users\Leon\Downloads\Santasleigh.zip
2013-12-23 22:08 - 2013-12-23 22:08 - 09339325 _____ C:\Users\Leon\Downloads\b738ber-christmas2012.zip
2013-12-23 22:08 - 2013-12-23 22:08 - 06914915 _____ C:\Users\Leon\Downloads\texture_ber_d_abmc_christmas__special.zip
2013-12-23 22:08 - 2013-12-23 22:08 - 00000000 ____D C:\Users\Leon\Downloads\texture_ber_d_abmc_christmas__special
2013-12-23 22:03 - 2013-12-23 22:03 - 00000000 ____D C:\Users\Leon\Downloads\b738xber-christmas2012
2013-12-23 22:02 - 2013-12-23 22:02 - 08612078 _____ C:\Users\Leon\Downloads\b738xber-christmas2012.zip
2013-12-23 21:47 - 2013-12-23 21:47 - 00000000 ____D C:\Users\Leon\Downloads\b7378abflyinghomeforchristmasd-abmcx
2013-12-23 21:46 - 2013-12-23 21:46 - 10739193 _____ C:\Users\Leon\Downloads\b7378abflyinghomeforchristmasd-abmcx.zip
2013-12-23 21:44 - 2013-12-23 21:44 - 14799019 _____ C:\Users\Leon\Downloads\airberlin2013.zip
2013-12-23 21:41 - 2013-12-23 21:41 - 13024069 _____ C:\Users\Leon\Downloads\FSX Air Air Berlin Xmas2013.zip
2013-12-23 21:28 - 2013-12-23 21:28 - 00000000 ____D C:\Users\Leon\Downloads\AS_AIRBUS-X-EXTENDED_FSX_PREPAR3D_PAINTKITS
2013-12-23 21:27 - 2013-12-23 21:27 - 20938885 _____ C:\Users\Leon\Downloads\airberlin_B737-800_D-ABMS_Flying_home_for_Christmas_cs_2013.rar
2013-12-23 21:23 - 2013-12-23 21:27 - 935309240 _____ C:\Users\Leon\Downloads\AS_AIRBUS-X-EXTENDED_FSX_PREPAR3D (2).zip
2013-12-23 21:22 - 2013-12-23 21:26 - 607528186 _____ C:\Users\Leon\Downloads\AS_AIRBUS-X-EXTENDED_FSX_PREPAR3D_PAINTKITS.zip
2013-12-23 19:31 - 2013-12-23 19:34 - 525640200 _____ C:\Users\Leon\Downloads\EuroTruckSimulator2_1_8_2_3_patch (1).exe
2013-12-23 18:58 - 2013-12-23 18:58 - 07992081 _____ C:\Users\Leon\Downloads\machinimasound_com_fire_within (1).zip
2013-12-23 18:58 - 2013-12-23 18:58 - 06757926 _____ C:\Users\Leon\Downloads\machinimasound_com_infected_euphoria (1).zip
2013-12-23 18:55 - 2013-12-23 18:55 - 00000000 ____D C:\Users\Leon\Downloads\machinimasound_com_the_arcade
2013-12-23 18:53 - 2013-12-23 18:54 - 08341944 _____ C:\Users\Leon\Downloads\machinimasound_com_the_arcade.zip
2013-12-23 18:45 - 2013-12-23 18:45 - 00000000 ____D C:\Users\Leon\Downloads\machinimasound_com_olympos
2013-12-23 18:45 - 2013-12-23 18:45 - 00000000 ____D C:\Users\Leon\Downloads\machinimasound_com_incursion (1)
2013-12-23 18:45 - 2013-12-23 18:45 - 00000000 ____D C:\Users\Leon\Downloads\machinimasound_com_escape_from_the_temple
2013-12-23 18:44 - 2013-12-23 18:44 - 07851783 _____ C:\Users\Leon\Downloads\machinimasound_com_incursion (1).zip
2013-12-23 18:44 - 2013-12-23 18:44 - 06933318 _____ C:\Users\Leon\Downloads\machinimasound_com_olympos.zip
2013-12-23 18:43 - 2013-12-23 18:44 - 09742583 _____ C:\Users\Leon\Downloads\machinimasound_com_escape_from_the_temple.zip
2013-12-23 10:48 - 2013-12-23 10:48 - 00000000 ____D C:\Windows\F5C9BE9A04C34A728CD0BB67C722D608.TMP
2013-12-23 10:47 - 2013-12-23 10:48 - 251738472 _____ C:\Users\Leon\Downloads\camtasia.exe
2013-12-23 10:39 - 2013-12-23 10:39 - 02209528 _____ C:\Users\Leon\Downloads\VirtualDub-1.10.4-AMD64.zip
2013-12-23 10:39 - 2013-12-23 10:39 - 02209528 _____ C:\Users\Leon\Downloads\VirtualDub-1.10.4-AMD64 (1).zip
2013-12-22 17:29 - 2013-12-22 17:29 - 05655084 _____ C:\Users\Leon\Downloads\Boeing 757-200 American Airlines.zip
2013-12-22 17:17 - 2013-12-22 17:17 - 23167859 _____ C:\Users\Leon\Downloads\Airbus A340-300 Basepack.zip
2013-12-22 17:17 - 2013-12-22 17:17 - 02767209 _____ C:\Users\Leon\Downloads\Airbus A340-300 Air France.zip
2013-12-22 17:16 - 2013-12-22 17:16 - 02215563 _____ (Xudeva Irribarra                                            ) C:\Users\Leon\Downloads\Boeing 747-8i KLM v1.00.exe
2013-12-22 17:05 - 2013-12-22 17:05 - 00000000 ____D C:\Users\Leon\Downloads\AS_CARENADO-PA32-SARATOGA-SP_FSX
2013-12-22 17:04 - 2013-12-22 17:04 - 93903080 _____ C:\Users\Leon\Downloads\AS_CARENADO-PA32-SARATOGA-SP_FSX.zip
2013-12-21 22:39 - 2013-12-21 22:40 - 131000436 _____ C:\Users\Leon\Downloads\AS_MEGA-AIRPORT-VIENNA-X_FSX.zip
2013-12-21 22:39 - 2013-12-21 22:40 - 131000436 _____ C:\Users\Leon\Downloads\AS_MEGA-AIRPORT-VIENNA-X_FSX (1).zip
2013-12-21 22:34 - 2013-12-21 22:37 - 00000000 ____D C:\Users\Leon\Downloads\AS_TWIN-OTTER-X-EXTENDED_FSX_P3D (2)
2013-12-21 22:25 - 2013-12-21 22:28 - 567687781 _____ C:\Users\Leon\Downloads\AS_TWIN-OTTER-X-EXTENDED_FSX_P3D (2).zip
2013-12-21 22:23 - 2013-12-21 22:25 - 494532720 _____ C:\Users\Leon\Downloads\mjc8-400-Pilot-1_008-inst.exe
2013-12-21 22:19 - 2013-12-21 22:21 - 343828771 _____ C:\Users\Leon\Downloads\FlyTampa_Vienna_FSX_Update_25.exe
2013-12-20 19:39 - 2013-12-27 23:13 - 00000000 ___RD C:\Users\Leon\Documents\MAGIX
2013-12-20 16:25 - 2013-12-20 16:25 - 02849144 _____ (MAGIX AG) C:\Users\Leon\Downloads\trial_videodeluxe2014_dlm.exe
2013-12-18 16:59 - 2013-12-18 17:09 - 28341646 _____ C:\Users\Leon\Downloads\JAGUAR_V2_ENTPACKEN.rar
2013-12-17 16:46 - 2013-12-17 16:54 - 00026022 _____ C:\Users\Leon\Documents\Lesetagebuch.odt
2013-12-17 14:08 - 2013-12-17 16:56 - 00018270 _____ C:\Users\Leon\Documents\Inhaltsverzeichniss Deutsch.odt
2013-12-17 13:40 - 2013-12-17 13:40 - 03624249 _____ C:\Users\Leon\Downloads\Global_ATC_demo.zip
2013-12-12 18:11 - 2013-12-13 15:54 - 00000000 ____D C:\Program Files (x86)\Mozilla Thunderbird
2013-12-11 18:19 - 2010-06-02 04:55 - 00239960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_7.dll
2013-12-11 18:19 - 2010-06-02 04:55 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_7.dll
2013-12-11 18:19 - 2010-05-26 11:41 - 01907552 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_43.dll
2013-12-11 18:19 - 2010-05-26 11:41 - 01868128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_43.dll
2013-12-11 18:19 - 2010-05-26 11:41 - 00511328 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_43.dll
2013-12-11 18:19 - 2010-05-26 11:41 - 00470880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_43.dll
2013-12-11 18:19 - 2010-05-26 11:41 - 00276832 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_43.dll
2013-12-11 18:19 - 2010-05-26 11:41 - 00248672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_43.dll
2013-12-11 18:19 - 2010-02-04 10:01 - 00530776 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_6.dll
2013-12-11 18:19 - 2010-02-04 10:01 - 00528216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_6.dll
2013-12-11 18:19 - 2010-02-04 10:01 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_6.dll
2013-12-11 18:19 - 2010-02-04 10:01 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_6.dll
2013-12-11 18:19 - 2010-02-04 10:01 - 00078680 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_4.dll
2013-12-11 18:19 - 2010-02-04 10:01 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_4.dll
2013-12-11 18:19 - 2009-09-04 17:44 - 00517960 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_5.dll
2013-12-11 18:19 - 2009-09-04 17:44 - 00515416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_5.dll
2013-12-11 18:19 - 2009-09-04 17:44 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_5.dll
2013-12-11 18:19 - 2009-09-04 17:44 - 00176968 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_5.dll
2013-12-11 18:19 - 2009-09-04 17:29 - 05554512 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_42.dll
2013-12-11 18:19 - 2009-09-04 17:29 - 05501792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_42.dll
2013-12-11 18:19 - 2009-09-04 17:29 - 02582888 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_42.dll
2013-12-11 18:19 - 2009-09-04 17:29 - 01974616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_42.dll
2013-12-11 18:19 - 2009-09-04 17:29 - 00285024 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_42.dll
2013-12-11 18:19 - 2009-09-04 17:29 - 00235344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_42.dll
2013-12-11 18:18 - 2009-09-04 17:44 - 00073544 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_3.dll
2013-12-11 18:18 - 2009-09-04 17:44 - 00069464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_3.dll
2013-12-11 18:18 - 2009-09-04 17:29 - 02475352 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_42.dll
2013-12-11 18:18 - 2009-09-04 17:29 - 01892184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_42.dll
2013-12-11 18:18 - 2009-09-04 17:29 - 00523088 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_42.dll
2013-12-11 18:18 - 2009-09-04 17:29 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_42.dll
2013-12-11 18:18 - 2009-03-16 14:18 - 00521560 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_4.dll
2013-12-11 18:18 - 2009-03-16 14:18 - 00517448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_4.dll
2013-12-11 18:18 - 2009-03-16 14:18 - 00235352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_4.dll
2013-12-11 18:18 - 2009-03-16 14:18 - 00174936 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_4.dll
2013-12-11 18:18 - 2009-03-16 14:18 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_6.dll
2013-12-11 18:18 - 2009-03-16 14:18 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_6.dll
2013-12-11 18:18 - 2009-03-09 15:27 - 05425496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_41.dll
2013-12-11 18:18 - 2009-03-09 15:27 - 04178264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_41.dll
2013-12-11 18:18 - 2009-03-09 15:27 - 02430312 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_41.dll
2013-12-11 18:18 - 2009-03-09 15:27 - 00520544 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_41.dll
2013-12-11 18:18 - 2008-10-27 10:04 - 00518480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_3.dll
2013-12-11 18:18 - 2008-10-27 10:04 - 00514384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_3.dll
2013-12-11 18:18 - 2008-10-27 10:04 - 00235856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_3.dll
2013-12-11 18:18 - 2008-10-27 10:04 - 00175440 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_3.dll
2013-12-11 18:18 - 2008-10-27 10:04 - 00074576 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_2.dll
2013-12-11 18:18 - 2008-10-27 10:04 - 00070992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_2.dll
2013-12-11 18:18 - 2008-10-27 10:04 - 00025936 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_5.dll
2013-12-11 18:18 - 2008-10-27 10:04 - 00023376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_5.dll
2013-12-11 18:18 - 2008-10-15 06:22 - 05631312 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_40.dll
2013-12-11 18:18 - 2008-10-15 06:22 - 04379984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_40.dll
2013-12-11 18:18 - 2008-10-15 06:22 - 02605920 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_40.dll
2013-12-11 18:18 - 2008-10-15 06:22 - 02036576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_40.dll
2013-12-11 18:18 - 2008-10-15 06:22 - 00519000 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_40.dll
2013-12-11 18:18 - 2008-10-15 06:22 - 00452440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_40.dll
2013-12-11 18:18 - 2008-07-31 10:41 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_2.dll
2013-12-11 18:18 - 2008-07-31 10:41 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_2.dll
2013-12-11 18:18 - 2008-07-31 10:41 - 00072200 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_1.dll
2013-12-11 18:18 - 2008-07-31 10:41 - 00068616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_1.dll
2013-12-11 18:18 - 2008-07-31 10:40 - 00513544 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_2.dll
2013-12-11 18:18 - 2008-07-31 10:40 - 00509448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_2.dll
2013-12-11 18:18 - 2008-07-10 11:01 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_39.dll
2013-12-11 18:18 - 2008-07-10 11:00 - 04992520 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_39.dll
2013-12-11 18:18 - 2008-07-10 11:00 - 03851784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_39.dll
2013-12-11 18:18 - 2008-07-10 11:00 - 01942552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_39.dll
2013-12-11 18:18 - 2008-07-10 11:00 - 01493528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_39.dll
2013-12-11 18:18 - 2008-07-10 11:00 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_39.dll
2013-12-11 18:18 - 2008-05-30 14:19 - 00511496 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_1.dll
2013-12-11 18:18 - 2008-05-30 14:19 - 00507400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_1.dll
2013-12-11 18:18 - 2008-05-30 14:18 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_1.dll
2013-12-11 18:18 - 2008-05-30 14:18 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_1.dll
2013-12-11 18:18 - 2008-05-30 14:17 - 00068104 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_0.dll
2013-12-11 18:18 - 2008-05-30 14:17 - 00065032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_0.dll
2013-12-11 18:18 - 2008-05-30 14:17 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_4.dll
2013-12-11 18:18 - 2008-05-30 14:16 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_4.dll
2013-12-11 18:18 - 2008-05-30 14:11 - 04991496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_38.dll
2013-12-11 18:18 - 2008-05-30 14:11 - 03850760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_38.dll
2013-12-11 18:18 - 2008-05-30 14:11 - 01941528 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_38.dll
2013-12-11 18:18 - 2008-05-30 14:11 - 01491992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_38.dll
2013-12-11 18:18 - 2008-05-30 14:11 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_38.dll
2013-12-11 18:18 - 2008-05-30 14:11 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_38.dll
2013-12-11 18:18 - 2008-03-05 16:04 - 00489480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_0.dll
2013-12-11 18:18 - 2008-03-05 16:03 - 00479752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_0.dll
2013-12-11 18:18 - 2008-03-05 16:03 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_0.dll
2013-12-11 18:18 - 2008-03-05 16:03 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_0.dll
2013-12-11 18:18 - 2008-03-05 16:00 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_3.dll
2013-12-11 18:18 - 2008-03-05 16:00 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_3.dll
2013-12-11 18:18 - 2008-03-05 15:56 - 04910088 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_37.dll
2013-12-11 18:18 - 2008-03-05 15:56 - 03786760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_37.dll
2013-12-11 18:18 - 2008-03-05 15:56 - 01860120 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_37.dll
2013-12-11 18:18 - 2008-03-05 15:56 - 01420824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_37.dll
2013-12-11 18:18 - 2008-02-05 23:07 - 00529424 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_37.dll
2013-12-11 18:18 - 2008-02-05 23:07 - 00462864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_37.dll
2013-12-11 18:18 - 2007-10-22 03:40 - 00411656 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_10.dll
2013-12-11 18:18 - 2007-10-22 03:39 - 00267272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_10.dll
2013-12-11 18:18 - 2007-10-22 03:37 - 00021000 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_2.dll
2013-12-11 18:18 - 2007-10-22 03:37 - 00017928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_2.dll
2013-12-11 18:18 - 2007-10-12 15:14 - 05081608 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_36.dll
2013-12-11 18:18 - 2007-10-12 15:14 - 03734536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_36.dll
2013-12-11 18:18 - 2007-10-12 15:14 - 02006552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_36.dll
2013-12-11 18:18 - 2007-10-12 15:14 - 01374232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_36.dll
2013-12-11 18:18 - 2007-10-02 09:56 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_36.dll
2013-12-11 18:18 - 2007-10-02 09:56 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_36.dll
2013-12-11 18:18 - 2007-07-20 00:57 - 00411496 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_9.dll
2013-12-11 18:18 - 2007-07-20 00:57 - 00267112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_9.dll
2013-12-11 18:18 - 2007-07-19 18:14 - 05073256 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_35.dll
2013-12-11 18:18 - 2007-07-19 18:14 - 03727720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_35.dll
2013-12-11 18:18 - 2007-07-19 18:14 - 01985904 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_35.dll
2013-12-11 18:18 - 2007-07-19 18:14 - 01358192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_35.dll
2013-12-11 18:18 - 2007-07-19 18:14 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_35.dll
2013-12-11 18:18 - 2007-07-19 18:14 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_35.dll
2013-12-11 18:18 - 2007-06-20 20:49 - 00409960 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_8.dll
2013-12-11 18:18 - 2007-06-20 20:46 - 00266088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_8.dll
2013-12-11 18:18 - 2007-05-16 16:45 - 04496232 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_34.dll
2013-12-11 18:18 - 2007-05-16 16:45 - 03497832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_34.dll
2013-12-11 18:18 - 2007-05-16 16:45 - 01401200 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_34.dll
2013-12-11 18:18 - 2007-05-16 16:45 - 01124720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_34.dll
2013-12-11 18:18 - 2007-05-16 16:45 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_34.dll
2013-12-11 18:18 - 2007-05-16 16:45 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_34.dll
2013-12-11 18:18 - 2007-04-04 18:55 - 00403304 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_7.dll
2013-12-11 18:18 - 2007-04-04 18:55 - 00261480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_7.dll
2013-12-11 18:18 - 2007-03-15 16:57 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_33.dll
2013-12-11 18:18 - 2007-03-15 16:57 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_33.dll
2013-12-11 18:18 - 2007-03-12 16:42 - 04494184 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_33.dll
2013-12-11 18:18 - 2007-03-12 16:42 - 03495784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_33.dll
2013-12-11 18:18 - 2007-03-12 16:42 - 01400176 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_33.dll
2013-12-11 18:18 - 2007-03-12 16:42 - 01123696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_33.dll
2013-12-11 18:18 - 2007-03-05 12:42 - 00017688 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_1.dll
2013-12-11 18:18 - 2007-03-05 12:42 - 00015128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_1.dll
2013-12-11 18:18 - 2007-01-24 15:27 - 00393576 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_6.dll
2013-12-11 18:18 - 2007-01-24 15:27 - 00255848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_6.dll
2013-12-11 18:18 - 2006-12-08 12:02 - 00251672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_5.dll
2013-12-11 18:18 - 2006-12-08 12:00 - 00390424 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_5.dll
2013-12-11 18:18 - 2006-11-29 13:06 - 04398360 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_32.dll
2013-12-11 18:18 - 2006-11-29 13:06 - 03426072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_32.dll
2013-12-11 18:18 - 2006-11-29 13:06 - 00469264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10.dll
2013-12-11 18:18 - 2006-11-29 13:06 - 00440080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10.dll
2013-12-11 18:18 - 2006-09-28 16:05 - 03977496 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_31.dll
2013-12-11 18:18 - 2006-09-28 16:05 - 02414360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_31.dll
2013-12-11 18:18 - 2006-09-28 16:05 - 00237848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_4.dll
2013-12-11 18:18 - 2006-09-28 16:04 - 00364824 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_4.dll
2013-12-11 18:18 - 2006-07-28 09:31 - 00083736 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_2.dll
2013-12-11 18:18 - 2006-07-28 09:30 - 00363288 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_3.dll
2013-12-11 18:18 - 2006-07-28 09:30 - 00236824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_3.dll
2013-12-11 18:18 - 2006-07-28 09:30 - 00062744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_2.dll
2013-12-11 18:18 - 2006-05-31 07:24 - 00230168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_2.dll
2013-12-11 18:18 - 2006-05-31 07:22 - 00354072 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_2.dll
2013-12-11 18:18 - 2006-03-31 12:41 - 03927248 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_30.dll
2013-12-11 18:18 - 2006-03-31 12:40 - 02388176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_30.dll
2013-12-11 18:18 - 2006-03-31 12:40 - 00352464 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_1.dll
2013-12-11 18:18 - 2006-03-31 12:39 - 00229584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_1.dll
2013-12-11 18:18 - 2006-03-31 12:39 - 00083664 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_1.dll
2013-12-11 18:18 - 2006-03-31 12:39 - 00062672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_1.dll
2013-12-11 18:18 - 2006-02-03 08:43 - 03830992 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_29.dll
2013-12-11 18:18 - 2006-02-03 08:43 - 02332368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_29.dll
2013-12-11 18:18 - 2006-02-03 08:42 - 00355536 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_0.dll
2013-12-11 18:18 - 2006-02-03 08:42 - 00230096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_0.dll
2013-12-11 18:18 - 2006-02-03 08:41 - 00016592 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_0.dll
2013-12-11 18:18 - 2006-02-03 08:41 - 00014032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_0.dll
2013-12-11 18:17 - 2005-12-05 18:09 - 03815120 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_28.dll
2013-12-11 18:17 - 2005-12-05 18:09 - 02323664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_28.dll
2013-12-11 18:17 - 2005-07-22 19:59 - 03807440 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_27.dll
2013-12-11 18:17 - 2005-07-22 19:59 - 02319568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_27.dll
2013-12-11 18:17 - 2005-05-26 15:34 - 03767504 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_26.dll
2013-12-11 18:17 - 2005-05-26 15:34 - 02297552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_26.dll
2013-12-11 18:17 - 2005-03-18 17:19 - 03823312 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_25.dll
2013-12-11 18:17 - 2005-03-18 17:19 - 02337488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_25.dll
2013-12-11 18:17 - 2005-02-05 19:45 - 03544272 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_24.dll
2013-12-11 18:17 - 2005-02-05 19:45 - 02222800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_24.dll
2013-12-11 15:31 - 2013-05-10 06:56 - 14631424 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2013-12-11 15:31 - 2013-05-10 06:56 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2013-12-11 15:31 - 2013-05-10 05:56 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL
2013-12-11 15:31 - 2013-05-10 05:56 - 11410432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
2013-12-11 15:30 - 2013-11-26 12:54 - 23183360 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-12-11 15:30 - 2013-11-26 11:19 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-12-11 15:30 - 2013-11-26 11:18 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2013-12-11 15:30 - 2013-11-26 11:11 - 17112576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-12-11 15:30 - 2013-11-26 10:48 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-12-11 15:30 - 2013-11-26 10:46 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2013-12-11 15:30 - 2013-11-26 10:41 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-12-11 15:30 - 2013-11-26 10:29 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-12-11 15:30 - 2013-11-26 10:27 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-12-11 15:30 - 2013-11-26 10:23 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-12-11 15:30 - 2013-11-26 10:21 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-12-11 15:30 - 2013-11-26 10:18 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-12-11 15:30 - 2013-11-26 10:18 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2013-12-11 15:30 - 2013-11-26 10:16 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2013-12-11 15:30 - 2013-11-26 09:57 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-12-11 15:30 - 2013-11-26 09:38 - 02166784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-12-11 15:30 - 2013-11-26 09:38 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-12-11 15:30 - 2013-11-26 09:35 - 05769216 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-12-11 15:30 - 2013-11-26 09:32 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-12-11 15:30 - 2013-11-26 09:28 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2013-12-11 15:30 - 2013-11-26 09:16 - 04243968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-12-11 15:30 - 2013-11-26 09:02 - 01995264 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-12-11 15:30 - 2013-11-26 08:48 - 12996608 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-12-11 15:30 - 2013-11-26 08:32 - 01928192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-12-11 15:30 - 2013-11-26 08:26 - 11221504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-12-11 15:30 - 2013-11-26 08:07 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-12-11 15:30 - 2013-11-26 07:40 - 01395200 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-12-11 15:30 - 2013-11-26 07:34 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2013-12-11 15:30 - 2013-11-26 07:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-12-11 15:30 - 2013-11-26 07:33 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-12-11 15:30 - 2013-11-26 07:27 - 01157632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-12-11 14:56 - 2013-12-11 14:56 - 02344450 _____ C:\Users\Leon\Downloads\omsi_2_docs.zip
2013-12-11 14:21 - 2013-11-23 19:26 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2013-12-11 14:21 - 2013-11-23 18:47 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2013-12-11 14:21 - 2013-11-12 03:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2013-12-11 14:21 - 2013-11-12 03:07 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2013-12-11 14:21 - 2013-10-30 03:32 - 00335360 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll
2013-12-11 14:21 - 2013-10-30 03:19 - 00301568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msieftp.dll
2013-12-11 14:21 - 2013-10-30 02:24 - 03155968 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-12-11 14:21 - 2013-10-19 03:18 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll
2013-12-11 14:21 - 2013-10-19 02:36 - 00159232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll
2013-12-11 14:21 - 2013-10-12 03:32 - 00150016 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx
2013-12-11 14:21 - 2013-10-12 03:31 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll
2013-12-11 14:21 - 2013-10-12 03:04 - 00121856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshom.ocx
2013-12-11 14:21 - 2013-10-12 03:03 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scrrun.dll
2013-12-11 14:21 - 2013-10-12 02:33 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe
2013-12-11 14:21 - 2013-10-12 02:33 - 00156160 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe
2013-12-11 14:21 - 2013-10-12 02:15 - 00141824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscript.exe
2013-12-11 14:21 - 2013-10-12 02:15 - 00126976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cscript.exe
2013-12-11 14:21 - 2013-10-04 03:16 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys
2013-12-11 14:21 - 2013-10-04 02:36 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys
2013-12-10 14:08 - 2013-12-10 14:15 - 525640200 _____ C:\Users\Leon\Downloads\EuroTruckSimulator2_1_8_2_3_patch.exe
2013-12-09 17:43 - 2013-12-09 17:43 - 02552323 _____ C:\Users\Leon\Downloads\validator.tar.gz
2013-12-09 17:43 - 2013-12-09 17:43 - 00557605 _____ C:\Users\Leon\Downloads\sgml-lib.tar.gz
2013-12-08 16:08 - 2013-12-08 16:08 - 00000000 ____D C:\Users\Leon\Downloads\Kenworth_W900aRC_dmitry68-Stas556
2013-12-08 15:52 - 2013-12-08 16:02 - 31436553 _____ C:\Users\Leon\Downloads\Kenworth_W900aRC_dmitry68-Stas556.rar
2013-12-08 13:27 - 2013-12-08 13:27 - 00000000 ____D C:\Users\Leon\Downloads\ultrafastlvlmax
2013-12-08 13:15 - 2013-12-08 13:15 - 00002116 _____ C:\Users\Leon\Downloads\ultrafastlvlmax.rar
2013-12-08 13:15 - 2013-12-08 13:15 - 00000000 ____D C:\Users\Leon\Downloads\superreich_mod
2013-12-08 13:14 - 2013-12-08 13:14 - 00004656 _____ C:\Users\Leon\Downloads\superreich_mod.rar
2013-12-08 12:47 - 2013-12-08 12:48 - 00000000 ____D C:\Users\Leon\Downloads\hardecosim
2013-12-08 12:47 - 2013-12-08 12:47 - 00107156 _____ C:\Users\Leon\Downloads\hardecosim.zip
2013-12-08 11:46 - 2013-12-08 11:46 - 00000000 ____D C:\Users\Leon\AppData\Roaming\simplitec
2013-12-08 11:31 - 2013-12-08 11:31 - 00000000 ____D C:\Users\Leon\AppData\Local\Logitech® Webcam-Software
2013-12-08 11:28 - 2013-12-08 11:28 - 00000000 ____D C:\ProgramData\LogiShrd
2013-12-08 11:27 - 2013-12-27 23:16 - 00010687 _____ C:\Windows\system32\lvcoinst.log
2013-12-08 11:27 - 2013-12-27 23:16 - 00000000 ____D C:\Program Files\Common Files\logishrd
2013-12-08 11:27 - 2013-12-27 23:15 - 00000000 ____D C:\Program Files (x86)\Logitech
2013-12-08 11:27 - 2013-12-08 11:27 - 00000000 ____D C:\Users\Leon\AppData\Roaming\Leadertech
2013-12-08 11:25 - 2013-12-08 11:25 - 74637872 _____ (Logitech, Inc.) C:\Users\Leon\Downloads\lws251.exe
2013-12-08 11:24 - 2013-12-08 11:24 - 00000000 ____D C:\Users\Leon\AppData\Roaming\Seeing Machines
2013-12-08 11:24 - 2013-12-08 11:24 - 00000000 ____D C:\ProgramData\Seeing Machines
2013-12-08 11:19 - 2013-12-08 11:19 - 00000000 ____D C:\Program Files (x86)\VJoy Virtual Joystick Driver
2013-12-08 11:13 - 2013-12-08 11:13 - 00002217 _____ C:\Users\Public\Desktop\FaceTrackNoIR.lnk
2013-12-08 11:12 - 2013-12-08 11:12 - 00000000 ____D C:\Program Files (x86)\Abbequerque Inc
2013-12-08 11:10 - 2013-12-08 11:10 - 78352371 _____ (FaceTrackNoIR Team                                          ) C:\Users\Leon\Downloads\SetupFaceTrackNoIR_Full_v170.exe
2013-12-08 11:02 - 2013-12-08 11:22 - 00000000 ____D C:\Users\Leon\Downloads\FaceTrack
2013-12-08 10:29 - 2013-12-27 23:13 - 00000000 ____D C:\ProgramData\MAGIX
2013-12-08 10:29 - 2013-12-27 23:13 - 00000000 ____D C:\Program Files (x86)\MAGIX
2013-12-08 10:29 - 2013-12-20 19:43 - 00000000 ____D C:\Users\Leon\AppData\Roaming\MAGIX
2013-12-08 10:29 - 2013-12-18 17:04 - 00000000 ____D C:\ProgramData\simplitec
2013-12-08 10:29 - 2013-12-08 10:29 - 00001226 _____ C:\Users\Public\Desktop\MAGIX Foto & Grafik Designer 7 SE.lnk
2013-12-08 10:29 - 2013-12-08 10:29 - 00000000 ____D C:\Users\Leon\AppData\Local\Xara
2013-12-08 10:28 - 2013-12-08 10:58 - 91182039 _____ C:\Users\Leon\Downloads\FaceTrack.rar
2013-12-08 10:27 - 2013-12-08 10:27 - 155998448 _____ (MAGIX AG) C:\Users\Leon\Downloads\Foto_Grafik_Designer_7_SE_DE_CHIP_DE_131029_15-06.exe
2013-12-07 20:00 - 2013-12-07 20:01 - 00000000 ____D C:\Users\Leon\Downloads\Scania Busscar 1.5.2-1.6.x
2013-12-07 19:59 - 2013-12-07 19:59 - 28399366 _____ C:\Users\Leon\Downloads\Scania Busscar 1.5.2-1.6.x.rar
2013-12-07 18:39 - 2013-12-07 18:39 - 00000000 ____D C:\Users\Leon\Downloads\NeoplanStarliner_BusModPackFurkanSevke_ (1)
2013-12-07 18:38 - 2013-12-07 18:38 - 40591368 _____ C:\Users\Leon\Downloads\EuroTruckSimulator2_1_6_1_to_1_7_0_patch.exe
2013-12-07 18:37 - 2013-12-07 18:37 - 52619900 _____ C:\Users\Leon\Downloads\NeoplanStarliner_BusModPackFurkanSevke_ (1).rar
2013-12-07 18:34 - 2013-12-07 18:35 - 00000000 ____D C:\Users\Leon\Downloads\zzTSM_Schwerlast_Trailerpacket_1.7.5_Packet_1-3
2013-12-07 17:33 - 2013-12-07 17:37 - 00000000 ____D C:\Users\Leon\Downloads\zzzzzzzzzzzReal_Environment2_v175_AEgos_Edition
2013-12-07 17:30 - 2013-12-07 17:33 - 162534209 _____ C:\Users\Leon\Downloads\zzzzzzzzzzzReal_Environment2_v175_AEgos_Edition.7z
2013-12-07 17:26 - 2013-12-07 17:39 - 39663402 _____ C:\Users\Leon\Downloads\zzTSM_Schwerlast_Trailerpacket_1.7.5_Packet_1-3.rar
2013-12-07 17:26 - 2013-12-07 17:26 - 00000000 ____D C:\Users\Leon\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\LatinVFR
2013-12-07 17:17 - 2013-12-07 17:22 - 553483869 _____ C:\Users\Leon\Downloads\LatinVFR_TXKF_FsX_v1.0.exe
2013-12-07 17:16 - 2013-12-07 17:20 - 315511460 _____ () C:\Users\Leon\Downloads\Budapest_LHBP_v101_FSX.exe
2013-12-06 14:57 - 2013-12-06 14:57 - 00001011 _____ C:\Users\Public\Desktop\Audacity.lnk
2013-12-06 14:54 - 2013-12-06 14:54 - 00614784 _____ C:\Users\Leon\Downloads\Audacity - CHIP-Downloader.exe
2013-12-06 13:02 - 2013-12-06 13:52 - 00000000 ____D C:\Users\Leon\Downloads\machinimasound_com_beyond_the_stars
2013-12-06 13:02 - 2013-12-06 13:09 - 00000000 ____D C:\Users\Leon\Downloads\machinimasound_com_morning_cruise (2)
2013-12-06 13:02 - 2013-12-06 13:06 - 00000000 ____D C:\Users\Leon\Downloads\machinimasound_com_ecstatic_wave (1)
2013-12-06 13:02 - 2013-12-06 13:04 - 00000000 ____D C:\Users\Leon\Downloads\machinimasound_com_afterlife_city
2013-12-06 12:59 - 2013-12-06 13:01 - 08818299 _____ C:\Users\Leon\Downloads\machinimasound_com_beyond_the_stars.zip
2013-12-06 12:59 - 2013-12-06 13:01 - 07952572 _____ C:\Users\Leon\Downloads\machinimasound_com_afterlife_city.zip
2013-12-06 12:59 - 2013-12-06 13:01 - 07897030 _____ C:\Users\Leon\Downloads\machinimasound_com_morning_cruise (2).zip
2013-12-06 12:59 - 2013-12-06 12:59 - 09957201 _____ C:\Users\Leon\Downloads\machinimasound_com_ecstatic_wave (1).zip
2013-12-05 20:18 - 2013-12-05 20:18 - 52619900 _____ C:\Users\Leon\Downloads\NeoplanStarliner_BusModPackFurkanSevke_.rar
2013-12-02 20:27 - 2013-12-02 20:28 - 154763637 _____ C:\Users\Leon\Downloads\Bau-Simulator2012_Update01.rar
2013-12-01 10:29 - 2013-12-01 10:36 - 20560641 _____ C:\Users\Leon\Downloads\ClaasXerion5000TracVC_TTM_V2FIX_N.zip
2013-11-30 17:29 - 2010-06-02 04:55 - 00527192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_7.dll
2013-11-30 17:29 - 2010-06-02 04:55 - 00518488 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_7.dll
2013-11-30 17:29 - 2010-06-02 04:55 - 00077656 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_5.dll
2013-11-30 17:29 - 2010-06-02 04:55 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_5.dll
2013-11-30 17:29 - 2010-05-26 11:41 - 02526056 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_43.dll
2013-11-30 17:29 - 2010-05-26 11:41 - 02401112 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_43.dll
2013-11-30 17:29 - 2010-05-26 11:41 - 02106216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_43.dll
2013-11-30 17:29 - 2010-05-26 11:41 - 01998168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_43.dll
2013-11-30 17:29 - 2010-02-04 10:01 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_7.dll
2013-11-30 17:29 - 2010-02-04 10:01 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_7.dll
2013-11-30 17:29 - 2007-04-04 18:54 - 00107368 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_3.dll
2013-11-30 17:22 - 2013-12-27 13:32 - 00000000 ____D C:\Users\Leon\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2013-11-30 17:22 - 2013-11-30 17:22 - 00000222 _____ C:\Users\Leon\Desktop\Farming Simulator 2013.url
2013-11-30 17:13 - 2013-12-28 21:49 - 00000000 ____D C:\Program Files (x86)\Steam
2013-11-30 17:13 - 2013-11-30 17:13 - 01133552 _____ C:\Users\Leon\Downloads\SteamSetup.exe
2013-11-30 17:13 - 2013-11-30 17:13 - 00000967 _____ C:\Users\Public\Desktop\Steam.lnk
2013-11-30 11:12 - 2013-11-30 11:12 - 00003059 _____ C:\Users\Leon\Downloads\geogebra.jnlp
2013-11-30 10:47 - 2013-11-30 10:47 - 00243728 _____ (GIANTS Software GmbH) C:\Users\Leon\Downloads\HirableTools (1).exe
2013-11-29 19:09 - 2013-11-29 19:16 - 00015519 _____ C:\Users\Leon\Documents\Apply FCE.odt

==================== One Month Modified Files and Folders =======

2013-12-28 23:39 - 2013-12-28 23:38 - 00017959 _____ C:\Users\Leon\Desktop\FRST.txt
2013-12-28 23:37 - 2013-12-28 23:37 - 01931176 _____ (Farbar) C:\Users\Leon\Desktop\FRST64.exe
2013-12-28 23:34 - 2013-12-28 23:34 - 00000470 _____ C:\Users\Leon\Desktop\defogger_disable.log
2013-12-28 23:33 - 2013-12-28 23:33 - 00000748 _____ C:\Users\Leon\Desktop\Neues Textdokument.txt
2013-12-28 23:28 - 2013-04-23 14:51 - 00000000 ____D C:\Users\Leon\AppData\Roaming\Skype
2013-12-28 23:28 - 2009-07-14 05:45 - 00009696 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-12-28 23:28 - 2009-07-14 05:45 - 00009696 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-12-28 23:24 - 2013-05-06 14:44 - 01274931 _____ C:\Windows\WindowsUpdate.log
2013-12-28 23:20 - 2013-12-28 22:58 - 00000168 _____ C:\Windows\setupact.log
2013-12-28 23:20 - 2013-07-05 17:20 - 00000000 ____D C:\Users\Leon\AppData\Local\HTC MediaHub
2013-12-28 23:20 - 2013-04-12 19:17 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-12-28 23:20 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-12-28 23:12 - 2013-04-12 19:54 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-12-28 22:58 - 2013-12-28 22:58 - 00274840 _____ C:\Windows\Minidump\122813-23821-01.dmp
2013-12-28 22:58 - 2013-12-28 22:58 - 00000000 _____ C:\Windows\setuperr.log
2013-12-28 22:58 - 2013-06-01 12:45 - 00000000 ____D C:\Windows\Minidump
2013-12-28 22:48 - 2013-12-28 22:48 - 00377856 _____ C:\Users\Leon\Desktop\gmer_2.1.19163.exe
2013-12-28 22:48 - 2013-04-12 19:17 - 00001110 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-12-28 22:47 - 2013-12-28 22:47 - 00000000 ____D C:\FRST
2013-12-28 22:45 - 2013-12-28 22:45 - 00050477 _____ C:\Users\Leon\Desktop\Defogger.exe
2013-12-28 22:45 - 2013-12-28 22:45 - 00000000 ____D C:\Users\Leon\Desktop\Virus
2013-12-28 22:45 - 2013-12-28 22:45 - 00000000 _____ C:\Users\Leon\defogger_reenable
2013-12-28 22:45 - 2013-04-12 19:11 - 00000000 ____D C:\Users\Leon
2013-12-28 21:54 - 2013-12-28 21:36 - 00000000 ____D C:\Users\Leon\Documents\Stronghold 2
2013-12-28 21:51 - 2013-12-28 21:36 - 00002158 _____ C:\Users\Public\Desktop\Stronghold 2 spielen.lnk
2013-12-28 21:50 - 2013-12-28 21:50 - 00000000 ____D C:\ProgramData\Firefly Studios
2013-12-28 21:49 - 2013-11-30 17:13 - 00000000 ____D C:\Program Files (x86)\Steam
2013-12-28 21:49 - 2010-05-12 13:46 - 00000000 ____D C:\Windows\Panther
2013-12-28 21:48 - 2013-08-20 17:21 - 00000000 ____D C:\Program Files (x86)\FS Recorder for FSX
2013-12-28 21:36 - 2013-12-28 21:36 - 00098304 _____ (Sony DADC Austria AG.) C:\Windows\SysWOW64\CmdLineExt.dll
2013-12-28 21:36 - 2013-12-28 21:36 - 00000000 ____D C:\Users\Leon\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2013-12-28 21:31 - 2013-12-28 21:31 - 00000000 ____D C:\Program Files (x86)\Firefly Studios
2013-12-28 21:31 - 2010-05-12 13:01 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2013-12-27 23:16 - 2013-12-08 11:27 - 00010687 _____ C:\Windows\system32\lvcoinst.log
2013-12-27 23:16 - 2013-12-08 11:27 - 00000000 ____D C:\Program Files\Common Files\logishrd
2013-12-27 23:15 - 2013-12-08 11:27 - 00000000 ____D C:\Program Files (x86)\Logitech
2013-12-27 23:13 - 2013-12-20 19:39 - 00000000 ___RD C:\Users\Leon\Documents\MAGIX
2013-12-27 23:13 - 2013-12-08 10:29 - 00000000 ____D C:\ProgramData\MAGIX
2013-12-27 23:13 - 2013-12-08 10:29 - 00000000 ____D C:\Program Files (x86)\MAGIX
2013-12-27 22:53 - 2013-12-27 22:53 - 02344450 _____ C:\Users\Leon\Downloads\omsi_2_docs (1).zip
2013-12-27 22:42 - 2013-05-29 15:33 - 00000000 ____D C:\Users\Leon\AppData\Roaming\Spotify
2013-12-27 22:31 - 2013-04-20 17:55 - 00000000 ____D C:\Users\Leon\.gimp-2.8
2013-12-27 22:30 - 2013-12-27 22:30 - 00114549 _____ C:\Users\Leon\AppData\Local\recently-used.xbel
2013-12-27 13:32 - 2013-12-27 13:32 - 00000222 _____ C:\Users\Leon\Desktop\OMSI 2.url
2013-12-27 13:32 - 2013-11-30 17:22 - 00000000 ____D C:\Users\Leon\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2013-12-27 12:43 - 2013-12-27 12:43 - 00000000 ____D C:\Users\Leon\AppData\Local\Razer_Inc
2013-12-27 12:42 - 2013-12-27 12:42 - 00000000 ____D C:\Users\Leon\Documents\Razer
2013-12-27 12:41 - 2013-12-27 12:41 - 00000000 ____D C:\Users\Leon\AppData\Local\Razer
2013-12-27 12:40 - 2013-12-27 12:40 - 00002129 _____ C:\Users\Public\Desktop\Razer Game Booster.lnk
2013-12-27 12:40 - 2013-12-27 12:40 - 00000000 ____D C:\ProgramData\Razer
2013-12-27 12:40 - 2013-12-27 12:40 - 00000000 ____D C:\Program Files (x86)\Razer
2013-12-27 12:39 - 2013-12-27 12:39 - 41363400 _____ (Razer Inc.                                                  ) C:\Users\Leon\Downloads\RazerGameBoosterSetup_4.1.59.0_1.exe
2013-12-27 12:34 - 2013-12-27 12:33 - 82548634 _____ C:\Users\Leon\Downloads\MAN_Lions_City_DD.pl1.rar
2013-12-26 21:50 - 2013-12-26 21:50 - 00000000 ____D C:\Program Files (x86)\Aerosoft
2013-12-26 21:50 - 2013-12-26 21:46 - 00000954 _____ C:\Users\Public\Desktop\Aerosoft Launcher.lnk
2013-12-25 12:52 - 2013-04-12 19:11 - 00121136 _____ C:\Users\Leon\AppData\Local\GDIPFONTCACHEV1.DAT
2013-12-25 12:50 - 2009-07-14 05:45 - 00426552 _____ C:\Windows\system32\FNTCACHE.DAT
2013-12-25 12:47 - 2013-12-25 12:47 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_point64_01009.Wdf
2013-12-25 12:47 - 2013-12-25 12:43 - 00003040 _____ C:\Windows\System32\Tasks\Microsoft_Hardware_Launch_IPoint_exe
2013-12-25 12:46 - 2013-12-25 12:46 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_dc3d_01009.Wdf
2013-12-25 12:46 - 2013-12-25 12:46 - 00000000 ____D C:\Program Files\Microsoft IntelliPoint
2013-12-25 12:43 - 2013-12-25 12:43 - 00003118 _____ C:\Windows\System32\Tasks\Microsoft_Hardware_Launch_mousekeyboardcenter_exe
2013-12-25 12:43 - 2013-12-25 12:43 - 00003090 _____ C:\Windows\System32\Tasks\Microsoft_Hardware_Launch_itype_exe
2013-12-25 12:43 - 2013-12-25 12:43 - 00003062 _____ C:\Windows\System32\Tasks\Microsoft_MKC_Logon_Task_ipoint.exe
2013-12-25 12:43 - 2013-12-25 12:43 - 00003060 _____ C:\Windows\System32\Tasks\Microsoft_MKC_Logon_Task_itype.exe
2013-12-25 12:43 - 2013-12-25 12:43 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_point64_01011.Wdf
2013-12-25 12:43 - 2013-12-25 12:43 - 00000000 ____D C:\Program Files\Microsoft Mouse and Keyboard Center
2013-12-25 12:41 - 2013-12-25 12:41 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_dc3d_01011.Wdf
2013-12-25 12:40 - 2013-12-25 12:40 - 22361472 _____ (Microsoft Corporation) C:\Users\Leon\Downloads\IPx64_1031_8.20.468.0.exe
2013-12-25 12:40 - 2013-12-25 12:40 - 16249216 _____ (Microsoft Corporation) C:\Users\Leon\Downloads\ITPx64_1031_8.20.469.0.exe
2013-12-24 15:26 - 2013-12-24 15:26 - 00000000 ____D C:\Users\Leon\Downloads\Mercedes-Benz-O530-Citaro
2013-12-24 15:17 - 2013-12-24 15:16 - 132605071 _____ C:\Users\Leon\Downloads\Mercedes-Benz-O530-Citaro.zip
2013-12-24 15:13 - 2013-12-24 15:12 - 73578015 _____ C:\Users\Leon\Downloads\Omsi2.ru_Mercedes_o530G.7z
2013-12-24 14:00 - 2013-04-12 19:13 - 00000000 ___RD C:\Users\Leon\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-12-23 22:15 - 2013-12-23 22:14 - 00000000 ____D C:\Users\Leon\Downloads\Santasleigh
2013-12-23 22:13 - 2013-12-23 22:13 - 05923085 _____ C:\Users\Leon\Downloads\Santasleigh.zip
2013-12-23 22:08 - 2013-12-23 22:08 - 09339325 _____ C:\Users\Leon\Downloads\b738ber-christmas2012.zip
2013-12-23 22:08 - 2013-12-23 22:08 - 06914915 _____ C:\Users\Leon\Downloads\texture_ber_d_abmc_christmas__special.zip
2013-12-23 22:08 - 2013-12-23 22:08 - 00000000 ____D C:\Users\Leon\Downloads\texture_ber_d_abmc_christmas__special
2013-12-23 22:03 - 2013-12-23 22:03 - 00000000 ____D C:\Users\Leon\Downloads\b738xber-christmas2012
2013-12-23 22:02 - 2013-12-23 22:02 - 08612078 _____ C:\Users\Leon\Downloads\b738xber-christmas2012.zip
2013-12-23 21:47 - 2013-12-23 21:47 - 00000000 ____D C:\Users\Leon\Downloads\b7378abflyinghomeforchristmasd-abmcx
2013-12-23 21:46 - 2013-12-23 21:46 - 10739193 _____ C:\Users\Leon\Downloads\b7378abflyinghomeforchristmasd-abmcx.zip
2013-12-23 21:44 - 2013-12-23 21:44 - 14799019 _____ C:\Users\Leon\Downloads\airberlin2013.zip
2013-12-23 21:41 - 2013-12-23 21:41 - 13024069 _____ C:\Users\Leon\Downloads\FSX Air Air Berlin Xmas2013.zip
2013-12-23 21:28 - 2013-12-23 21:28 - 00000000 ____D C:\Users\Leon\Downloads\AS_AIRBUS-X-EXTENDED_FSX_PREPAR3D_PAINTKITS
2013-12-23 21:27 - 2013-12-23 21:27 - 20938885 _____ C:\Users\Leon\Downloads\airberlin_B737-800_D-ABMS_Flying_home_for_Christmas_cs_2013.rar
2013-12-23 21:27 - 2013-12-23 21:23 - 935309240 _____ C:\Users\Leon\Downloads\AS_AIRBUS-X-EXTENDED_FSX_PREPAR3D (2).zip
2013-12-23 21:26 - 2013-12-23 21:22 - 607528186 _____ C:\Users\Leon\Downloads\AS_AIRBUS-X-EXTENDED_FSX_PREPAR3D_PAINTKITS.zip
2013-12-23 19:35 - 2013-04-12 19:49 - 00000000 ____D C:\Program Files (x86)\Euro Truck Simulator 2
2013-12-23 19:34 - 2013-12-23 19:31 - 525640200 _____ C:\Users\Leon\Downloads\EuroTruckSimulator2_1_8_2_3_patch (1).exe
2013-12-23 18:58 - 2013-12-23 18:58 - 07992081 _____ C:\Users\Leon\Downloads\machinimasound_com_fire_within (1).zip
2013-12-23 18:58 - 2013-12-23 18:58 - 06757926 _____ C:\Users\Leon\Downloads\machinimasound_com_infected_euphoria (1).zip
2013-12-23 18:55 - 2013-12-23 18:55 - 00000000 ____D C:\Users\Leon\Downloads\machinimasound_com_the_arcade
2013-12-23 18:54 - 2013-12-23 18:53 - 08341944 _____ C:\Users\Leon\Downloads\machinimasound_com_the_arcade.zip
2013-12-23 18:45 - 2013-12-23 18:45 - 00000000 ____D C:\Users\Leon\Downloads\machinimasound_com_olympos
2013-12-23 18:45 - 2013-12-23 18:45 - 00000000 ____D C:\Users\Leon\Downloads\machinimasound_com_incursion (1)
2013-12-23 18:45 - 2013-12-23 18:45 - 00000000 ____D C:\Users\Leon\Downloads\machinimasound_com_escape_from_the_temple
2013-12-23 18:44 - 2013-12-23 18:44 - 07851783 _____ C:\Users\Leon\Downloads\machinimasound_com_incursion (1).zip
2013-12-23 18:44 - 2013-12-23 18:44 - 06933318 _____ C:\Users\Leon\Downloads\machinimasound_com_olympos.zip
2013-12-23 18:44 - 2013-12-23 18:43 - 09742583 _____ C:\Users\Leon\Downloads\machinimasound_com_escape_from_the_temple.zip
2013-12-23 10:48 - 2013-12-23 10:48 - 00000000 ____D C:\Windows\F5C9BE9A04C34A728CD0BB67C722D608.TMP
2013-12-23 10:48 - 2013-12-23 10:47 - 251738472 _____ C:\Users\Leon\Downloads\camtasia.exe
2013-12-23 10:39 - 2013-12-23 10:39 - 02209528 _____ C:\Users\Leon\Downloads\VirtualDub-1.10.4-AMD64.zip
2013-12-23 10:39 - 2013-12-23 10:39 - 02209528 _____ C:\Users\Leon\Downloads\VirtualDub-1.10.4-AMD64 (1).zip
2013-12-23 10:14 - 2013-04-12 19:50 - 00000000 ____D C:\Users\Leon\Documents\Euro Truck Simulator 2
2013-12-22 19:46 - 2013-07-08 15:29 - 00000000 ____D C:\Users\Leon\Documents\Flight Simulator X-Dateien
2013-12-22 17:29 - 2013-12-22 17:29 - 05655084 _____ C:\Users\Leon\Downloads\Boeing 757-200 American Airlines.zip
2013-12-22 17:17 - 2013-12-22 17:17 - 23167859 _____ C:\Users\Leon\Downloads\Airbus A340-300 Basepack.zip
2013-12-22 17:17 - 2013-12-22 17:17 - 02767209 _____ C:\Users\Leon\Downloads\Airbus A340-300 Air France.zip
2013-12-22 17:16 - 2013-12-22 17:16 - 02215563 _____ (Xudeva Irribarra                                            ) C:\Users\Leon\Downloads\Boeing 747-8i KLM v1.00.exe
2013-12-22 17:05 - 2013-12-22 17:05 - 00000000 ____D C:\Users\Leon\Downloads\AS_CARENADO-PA32-SARATOGA-SP_FSX
2013-12-22 17:04 - 2013-12-22 17:04 - 93903080 _____ C:\Users\Leon\Downloads\AS_CARENADO-PA32-SARATOGA-SP_FSX.zip
2013-12-21 22:41 - 2013-04-12 19:17 - 00000000 ___RD C:\Users\Leon\Desktop\Dienstprogramme
2013-12-21 22:40 - 2013-12-21 22:39 - 131000436 _____ C:\Users\Leon\Downloads\AS_MEGA-AIRPORT-VIENNA-X_FSX.zip
2013-12-21 22:40 - 2013-12-21 22:39 - 131000436 _____ C:\Users\Leon\Downloads\AS_MEGA-AIRPORT-VIENNA-X_FSX (1).zip
2013-12-21 22:37 - 2013-12-21 22:34 - 00000000 ____D C:\Users\Leon\Downloads\AS_TWIN-OTTER-X-EXTENDED_FSX_P3D (2)
2013-12-21 22:34 - 2013-10-30 16:56 - 00000000 ____D C:\Users\Leon\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Majestic Software
2013-12-21 22:28 - 2013-12-21 22:25 - 567687781 _____ C:\Users\Leon\Downloads\AS_TWIN-OTTER-X-EXTENDED_FSX_P3D (2).zip
2013-12-21 22:25 - 2013-12-21 22:23 - 494532720 _____ C:\Users\Leon\Downloads\mjc8-400-Pilot-1_008-inst.exe
2013-12-21 22:21 - 2013-12-21 22:19 - 343828771 _____ C:\Users\Leon\Downloads\FlyTampa_Vienna_FSX_Update_25.exe
2013-12-21 20:24 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache
2013-12-20 19:43 - 2013-12-08 10:29 - 00000000 ____D C:\Users\Leon\AppData\Roaming\MAGIX
2013-12-20 16:25 - 2013-12-20 16:25 - 02849144 _____ (MAGIX AG) C:\Users\Leon\Downloads\trial_videodeluxe2014_dlm.exe
2013-12-20 12:04 - 2013-11-02 19:15 - 00000000 ____D C:\REX Essential Plus Overdrive
2013-12-20 10:15 - 2013-05-29 15:33 - 00000000 ____D C:\Users\Leon\AppData\Local\Spotify
2013-12-18 17:09 - 2013-12-18 16:59 - 28341646 _____ C:\Users\Leon\Downloads\JAGUAR_V2_ENTPACKEN.rar
2013-12-18 17:04 - 2013-12-08 10:29 - 00000000 ____D C:\ProgramData\simplitec
2013-12-17 17:22 - 2013-04-13 04:46 - 00699416 _____ C:\Windows\system32\perfh007.dat
2013-12-17 17:22 - 2013-04-13 04:46 - 00149556 _____ C:\Windows\system32\perfc007.dat
2013-12-17 17:22 - 2009-07-14 06:13 - 01620612 _____ C:\Windows\system32\PerfStringBackup.INI
2013-12-17 16:56 - 2013-12-17 14:08 - 00018270 _____ C:\Users\Leon\Documents\Inhaltsverzeichniss Deutsch.odt
2013-12-17 16:54 - 2013-12-17 16:46 - 00026022 _____ C:\Users\Leon\Documents\Lesetagebuch.odt
2013-12-17 13:40 - 2013-12-17 13:40 - 03624249 _____ C:\Users\Leon\Downloads\Global_ATC_demo.zip
2013-12-17 13:39 - 2013-06-02 10:51 - 00084720 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2013-12-17 13:39 - 2013-06-02 10:47 - 00131576 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2013-12-17 13:39 - 2013-06-02 10:47 - 00108440 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2013-12-16 17:33 - 2013-09-07 12:30 - 00304515 _____ C:\Users\Leon\Documents\Titelbild Kommunikation.odt
2013-12-15 21:04 - 2013-07-12 21:54 - 00000000 ____D C:\Windows\system32\MRT
2013-12-15 21:02 - 2013-04-13 18:45 - 90708896 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-12-13 18:40 - 2013-04-12 19:51 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-12-13 15:54 - 2013-12-12 18:11 - 00000000 ____D C:\Program Files (x86)\Mozilla Thunderbird
2013-12-11 19:11 - 2009-07-14 06:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD
2013-12-11 15:12 - 2013-04-12 19:54 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-12-11 15:12 - 2013-04-12 19:54 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-12-11 15:12 - 2013-04-12 19:54 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-12-11 14:56 - 2013-12-11 14:56 - 02344450 _____ C:\Users\Leon\Downloads\omsi_2_docs.zip
2013-12-10 14:15 - 2013-12-10 14:08 - 525640200 _____ C:\Users\Leon\Downloads\EuroTruckSimulator2_1_8_2_3_patch.exe
2013-12-09 17:43 - 2013-12-09 17:43 - 02552323 _____ C:\Users\Leon\Downloads\validator.tar.gz
2013-12-09 17:43 - 2013-12-09 17:43 - 00557605 _____ C:\Users\Leon\Downloads\sgml-lib.tar.gz
2013-12-08 16:08 - 2013-12-08 16:08 - 00000000 ____D C:\Users\Leon\Downloads\Kenworth_W900aRC_dmitry68-Stas556
2013-12-08 16:02 - 2013-12-08 15:52 - 31436553 _____ C:\Users\Leon\Downloads\Kenworth_W900aRC_dmitry68-Stas556.rar
2013-12-08 13:27 - 2013-12-08 13:27 - 00000000 ____D C:\Users\Leon\Downloads\ultrafastlvlmax
2013-12-08 13:15 - 2013-12-08 13:15 - 00002116 _____ C:\Users\Leon\Downloads\ultrafastlvlmax.rar
2013-12-08 13:15 - 2013-12-08 13:15 - 00000000 ____D C:\Users\Leon\Downloads\superreich_mod
2013-12-08 13:14 - 2013-12-08 13:14 - 00004656 _____ C:\Users\Leon\Downloads\superreich_mod.rar
2013-12-08 12:48 - 2013-12-08 12:47 - 00000000 ____D C:\Users\Leon\Downloads\hardecosim
2013-12-08 12:47 - 2013-12-08 12:47 - 00107156 _____ C:\Users\Leon\Downloads\hardecosim.zip
2013-12-08 11:46 - 2013-12-08 11:46 - 00000000 ____D C:\Users\Leon\AppData\Roaming\simplitec
2013-12-08 11:31 - 2013-12-08 11:31 - 00000000 ____D C:\Users\Leon\AppData\Local\Logitech® Webcam-Software
2013-12-08 11:28 - 2013-12-08 11:28 - 00000000 ____D C:\ProgramData\LogiShrd
2013-12-08 11:27 - 2013-12-08 11:27 - 00000000 ____D C:\Users\Leon\AppData\Roaming\Leadertech
2013-12-08 11:25 - 2013-12-08 11:25 - 74637872 _____ (Logitech, Inc.) C:\Users\Leon\Downloads\lws251.exe
2013-12-08 11:24 - 2013-12-08 11:24 - 00000000 ____D C:\Users\Leon\AppData\Roaming\Seeing Machines
2013-12-08 11:24 - 2013-12-08 11:24 - 00000000 ____D C:\ProgramData\Seeing Machines
2013-12-08 11:22 - 2013-12-08 11:02 - 00000000 ____D C:\Users\Leon\Downloads\FaceTrack
2013-12-08 11:19 - 2013-12-08 11:19 - 00000000 ____D C:\Program Files (x86)\VJoy Virtual Joystick Driver
2013-12-08 11:13 - 2013-12-08 11:13 - 00002217 _____ C:\Users\Public\Desktop\FaceTrackNoIR.lnk
2013-12-08 11:12 - 2013-12-08 11:12 - 00000000 ____D C:\Program Files (x86)\Abbequerque Inc
2013-12-08 11:10 - 2013-12-08 11:10 - 78352371 _____ (FaceTrackNoIR Team                                          ) C:\Users\Leon\Downloads\SetupFaceTrackNoIR_Full_v170.exe
2013-12-08 10:58 - 2013-12-08 10:28 - 91182039 _____ C:\Users\Leon\Downloads\FaceTrack.rar
2013-12-08 10:29 - 2013-12-08 10:29 - 00001226 _____ C:\Users\Public\Desktop\MAGIX Foto & Grafik Designer 7 SE.lnk
2013-12-08 10:29 - 2013-12-08 10:29 - 00000000 ____D C:\Users\Leon\AppData\Local\Xara
2013-12-08 10:28 - 2013-04-14 19:48 - 00000000 ____D C:\Program Files (x86)\MSXML 4.0
2013-12-08 10:27 - 2013-12-08 10:27 - 155998448 _____ (MAGIX AG) C:\Users\Leon\Downloads\Foto_Grafik_Designer_7_SE_DE_CHIP_DE_131029_15-06.exe
2013-12-07 20:01 - 2013-12-07 20:00 - 00000000 ____D C:\Users\Leon\Downloads\Scania Busscar 1.5.2-1.6.x
2013-12-07 19:59 - 2013-12-07 19:59 - 28399366 _____ C:\Users\Leon\Downloads\Scania Busscar 1.5.2-1.6.x.rar
2013-12-07 18:39 - 2013-12-07 18:39 - 00000000 ____D C:\Users\Leon\Downloads\NeoplanStarliner_BusModPackFurkanSevke_ (1)
2013-12-07 18:38 - 2013-12-07 18:38 - 40591368 _____ C:\Users\Leon\Downloads\EuroTruckSimulator2_1_6_1_to_1_7_0_patch.exe
2013-12-07 18:37 - 2013-12-07 18:37 - 52619900 _____ C:\Users\Leon\Downloads\NeoplanStarliner_BusModPackFurkanSevke_ (1).rar
2013-12-07 18:35 - 2013-12-07 18:34 - 00000000 ____D C:\Users\Leon\Downloads\zzTSM_Schwerlast_Trailerpacket_1.7.5_Packet_1-3
2013-12-07 17:39 - 2013-12-07 17:26 - 39663402 _____ C:\Users\Leon\Downloads\zzTSM_Schwerlast_Trailerpacket_1.7.5_Packet_1-3.rar
2013-12-07 17:37 - 2013-12-07 17:33 - 00000000 ____D C:\Users\Leon\Downloads\zzzzzzzzzzzReal_Environment2_v175_AEgos_Edition
2013-12-07 17:33 - 2013-12-07 17:30 - 162534209 _____ C:\Users\Leon\Downloads\zzzzzzzzzzzReal_Environment2_v175_AEgos_Edition.7z
2013-12-07 17:26 - 2013-12-07 17:26 - 00000000 ____D C:\Users\Leon\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\LatinVFR
2013-12-07 17:22 - 2013-12-07 17:17 - 553483869 _____ C:\Users\Leon\Downloads\LatinVFR_TXKF_FsX_v1.0.exe
2013-12-07 17:20 - 2013-12-07 17:16 - 315511460 _____ () C:\Users\Leon\Downloads\Budapest_LHBP_v101_FSX.exe
2013-12-06 15:57 - 2013-07-25 11:56 - 00000000 ____D C:\Users\Leon\AppData\Roaming\Audacity
2013-12-06 14:57 - 2013-12-06 14:57 - 00001011 _____ C:\Users\Public\Desktop\Audacity.lnk
2013-12-06 14:57 - 2013-07-25 11:55 - 00000000 ____D C:\Program Files (x86)\Audacity
2013-12-06 14:54 - 2013-12-06 14:54 - 00614784 _____ C:\Users\Leon\Downloads\Audacity - CHIP-Downloader.exe
2013-12-06 13:52 - 2013-12-06 13:02 - 00000000 ____D C:\Users\Leon\Downloads\machinimasound_com_beyond_the_stars
2013-12-06 13:09 - 2013-12-06 13:02 - 00000000 ____D C:\Users\Leon\Downloads\machinimasound_com_morning_cruise (2)
2013-12-06 13:06 - 2013-12-06 13:02 - 00000000 ____D C:\Users\Leon\Downloads\machinimasound_com_ecstatic_wave (1)
2013-12-06 13:04 - 2013-12-06 13:02 - 00000000 ____D C:\Users\Leon\Downloads\machinimasound_com_afterlife_city
2013-12-06 13:01 - 2013-12-06 12:59 - 08818299 _____ C:\Users\Leon\Downloads\machinimasound_com_beyond_the_stars.zip
2013-12-06 13:01 - 2013-12-06 12:59 - 07952572 _____ C:\Users\Leon\Downloads\machinimasound_com_afterlife_city.zip
2013-12-06 13:01 - 2013-12-06 12:59 - 07897030 _____ C:\Users\Leon\Downloads\machinimasound_com_morning_cruise (2).zip
2013-12-06 12:59 - 2013-12-06 12:59 - 09957201 _____ C:\Users\Leon\Downloads\machinimasound_com_ecstatic_wave (1).zip
2013-12-05 20:18 - 2013-12-05 20:18 - 52619900 _____ C:\Users\Leon\Downloads\NeoplanStarliner_BusModPackFurkanSevke_.rar
2013-12-05 16:57 - 2013-04-12 20:54 - 00002179 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2013-12-02 20:28 - 2013-12-02 20:27 - 154763637 _____ C:\Users\Leon\Downloads\Bau-Simulator2012_Update01.rar
2013-12-02 19:43 - 2013-04-12 19:17 - 00004106 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2013-12-02 19:43 - 2013-04-12 19:17 - 00003854 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2013-12-01 11:12 - 2013-04-12 21:30 - 00000000 ____D C:\Users\Leon\AppData\Local\Windows Live
2013-12-01 10:36 - 2013-12-01 10:29 - 20560641 _____ C:\Users\Leon\Downloads\ClaasXerion5000TracVC_TTM_V2FIX_N.zip
2013-11-30 17:29 - 2013-08-07 20:45 - 00000000 ____D C:\Users\Leon\Documents\My Games
2013-11-30 17:22 - 2013-11-30 17:22 - 00000222 _____ C:\Users\Leon\Desktop\Farming Simulator 2013.url
2013-11-30 17:13 - 2013-11-30 17:13 - 01133552 _____ C:\Users\Leon\Downloads\SteamSetup.exe
2013-11-30 17:13 - 2013-11-30 17:13 - 00000967 _____ C:\Users\Public\Desktop\Steam.lnk
2013-11-30 11:12 - 2013-11-30 11:12 - 00003059 _____ C:\Users\Leon\Downloads\geogebra.jnlp
2013-11-30 10:47 - 2013-11-30 10:47 - 00243728 _____ (GIANTS Software GmbH) C:\Users\Leon\Downloads\HirableTools (1).exe
2013-11-29 19:16 - 2013-11-29 19:09 - 00015519 _____ C:\Users\Leon\Documents\Apply FCE.odt

Files to move or delete:
====================
C:\Users\Leon\AppData\Roaming\CamLayout.ini
C:\Users\Leon\AppData\Roaming\CamShapes.ini


Some content of TEMP:
====================
C:\Users\Leon\AppData\Local\Temp\avgnt.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-12-21 20:16

==================== End Of Log ============================
Das Addition.txt wurde bei mir bei dem Scan von FRST nicht erstellt. Deswegen habe ich bei FRST bei Optional Scans einen Hacken bei Addition.txt gesetzt. Diese Addition.txt Datei ist dabei herausgekommen.

Code:
ATTFilter
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 28-12-2013 01
Ran by Leon at 2013-12-28 23:40:04
Running from C:\Users\Leon\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Avira Desktop (Disabled - Up to date) {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}
AS: Avira Desktop (Disabled - Up to date) {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

Acer Arcade Deluxe (x32 Version: 4.1.7405)
Acer Arcade Movie (x32 Version: 9.0.6205)
Acer eRecovery Management (x32 Version: 4.05.3007)
Acer GameZone Console (x32 Version: 6.1.0.2)
Acer Registration (x32 Version: 1.02.3006)
Acer ScreenSaver (x32 Version: 1.1.0318.2010)
Acer Updater (x32 Version: 1.02.3001)
Acrobat.com (x32 Version: 1.6.65)
Adobe AIR (x32 Version: 3.7.0.1860)
Adobe Flash Player 11 ActiveX (x32 Version: 11.9.900.170)
Adobe Flash Player 11 Plugin (x32 Version: 11.9.900.170)
Adobe Reader XI (11.0.05) - Deutsch (x32 Version: 11.0.05)
Advertising Center (x32 Version: 0.0.0.2)
Aerosoft's - Aerosoft Launcher (x32 Version: 1.2.0.3)
Aerosoft's - Airbus X Extended - FSX (x32 Version: 1.15)
Aerosoft's - Catalina Island Demo - FSX (x32 Version: 1.00)
aerosoft's - Dutch Airports (x32 Version: 1.00)
Aerosoft's - German Airfields FREE - Wasserkuppe (x32 Version: 1.00)
Aerosoft's - German Regional Airports X - FSX (x32 Version: 1.01)
aerosoft's - Mega Airport Amsterdam FSX (x32 Version: 1.03)
aerosoft's - Mega Airport Barcelona X (x32 Version: 1.01)
aerosoft's - Mega Airport Frankfurt X (x32 Version: 1.04)
aerosoft's - Mega Airport London Heathrow X (x32 Version: 1.10)
aerosoft's - Mega Airport Oslo-Gardermoen X (x32 Version: 1.01)
Aerosoft's - Skiathos X - FSX (x32 Version: 1.00)
Aerosoft's - Twin Otter X Extended - FSX (x32 Version: 1.11)
Alarm für Cobra 11 - Undercover (x32)
Amazon Music Importer (x32 Version: 2.1.0)
Amazonia (x32)
AMD Accelerated Video Transcoding (Version: 13.20.100.31107)
AMD Catalyst Control Center (x32 Version: 2013.1107.1129.20543)
AMD Catalyst Install Manager (Version: 8.0.915.0)
AMD Drag and Drop Transcoding (Version: 2.00.0000)
AMD Media Foundation Decoders (Version: 1.0.81107.1147)
AMD Wireless Display v3.0 (Version: 1.0.0.12)
AMD Wireless Display v3.0 (Version: 1.0.0.14)
Apple Application Support (x32 Version: 2.3.4)
Apple Mobile Device Support (Version: 6.1.0.13)
Apple Software Update (x32 Version: 2.1.3.127)
ATI AVIVO64 Codecs (Version: 10.12.0.00113)
Audacity 2.0.5 (x32 Version: 2.0.5)
Avira Free Antivirus (x32 Version: 14.0.2.286)
Bonjour (Version: 3.0.0.10)
Cake Mania (x32)
CamStudio version 2.7 (x32 Version: 2.7)
Carenado-PA32 SARATOGA SP FSX (x32 Version: 1.00)
Catalyst Control Center - Branding (x32 Version: 1.00.0000)
Catalyst Control Center Graphics Previews Common (x32 Version: 2013.1107.1129.20543)
Catalyst Control Center InstallProxy (x32 Version: 2010.0113.2208.39662)
Catalyst Control Center InstallProxy (x32 Version: 2013.1107.1129.20543)
Catalyst Control Center Localization All (x32 Version: 2013.1107.1129.20543)
CCC Help Chinese Standard (x32 Version: 2013.1107.1128.20543)
CCC Help Chinese Traditional (x32 Version: 2013.1107.1128.20543)
CCC Help Czech (x32 Version: 2013.1107.1128.20543)
CCC Help Danish (x32 Version: 2013.1107.1128.20543)
CCC Help Dutch (x32 Version: 2013.1107.1128.20543)
CCC Help English (x32 Version: 2013.1107.1128.20543)
CCC Help Finnish (x32 Version: 2013.1107.1128.20543)
CCC Help French (x32 Version: 2013.1107.1128.20543)
CCC Help German (x32 Version: 2013.1107.1128.20543)
CCC Help Greek (x32 Version: 2013.1107.1128.20543)
CCC Help Hungarian (x32 Version: 2013.1107.1128.20543)
CCC Help Italian (x32 Version: 2013.1107.1128.20543)
CCC Help Japanese (x32 Version: 2013.1107.1128.20543)
CCC Help Korean (x32 Version: 2013.1107.1128.20543)
CCC Help Norwegian (x32 Version: 2013.1107.1128.20543)
CCC Help Polish (x32 Version: 2013.1107.1128.20543)
CCC Help Portuguese (x32 Version: 2013.1107.1128.20543)
CCC Help Russian (x32 Version: 2013.1107.1128.20543)
CCC Help Spanish (x32 Version: 2013.1107.1128.20543)
CCC Help Swedish (x32 Version: 2013.1107.1128.20543)
CCC Help Thai (x32 Version: 2013.1107.1128.20543)
CCC Help Turkish (x32 Version: 2013.1107.1128.20543)
ccc-utility64 (Version: 2013.1107.1129.20543)
CCleaner (Version: 4.00)
D3DX10 (x32 Version: 15.4.2368.0902)
Dairy Dash (x32)
DIE SIEDLER - Das Erbe der Könige - Gold Edition (x32 Version: 1.00.0000)
Dream Day First Home (x32)
eBay Worldwide (x32 Version: 2.1.0901)
eSobi v2 (x32 Version: 2.0.4.000274)
Euro Truck Simulator 2 (x32 Version: 1.1.1)
FaceTrackNoIR version 1.7 (x32 Version: 1.7)
Farm Frenzy 2 (x32)
Farming Simulator 2013 (x32)
FlyTampa's - Mega Airport Vienna X - FSX (x32 Version: 1.00)
FormatFactory 3.0.1 (x32 Version: 3.0.1)
Fotogalerie (x32 Version: 16.4.3508.0205)
Fraps (remove only) (x32)
Free Studio version 2013 (x32 Version: 6.1.1.430)
FS Recorder 2.1  for FSX (x32 Version: 2.1.0.0)
FS2Crew: iFly737NG Button Control Edition (x32)
FSDreamTeam OHareX 2.2 (x32)
FSND FSX Boeing 747-400 upgraded cockpit (x32)
FSX - Airbus A319-100 Air Berlin NC (x32)
FSX - Airbus A319-100 Basepack v2 (x32)
FSX - Airbus A319-100 Swiss (x32)
FSX - Airbus A330-200F Basepack (x32)
FSX - Airbus A330-200F DHL (x32)
FSX - Airbus A340-300 Air France (x32)
FSX - Airbus A340-300 Basepack (x32)
FSX - Airbus A340-600 Airbus House Colour (x32)
FSX - Airbus A340-600 Basepack (x32)
FSX - Airbus A340-600 EgyptAir (x32)
FSX - Airbus A340-600 FedEx (x32)
FSX - Airbus A340-600 Iberia (x32)
FSX - Antonov AN-124 (x32)
FSX - Antonov AN-225 (x32)
FSX - Boeing 737-800 Basepack (x32)
FSX - Boeing 737-800 Ryanair (x32)
FSX - Boeing 737-900 Basepack (x32)
FSX - Boeing 737-900 Continental Airlines (x32)
FSX - Boeing 747-400LCF Dreamlifter (x32)
FSX - Boeing 747-8i Basepack v1.40 (x32 Version: v1.40)
FSX - Boeing 747-8i British Airways v1.00 (x32 Version: v1.00)
FSX - Boeing 747-8i KLM v1.00 (x32 Version: v1.00)
FSX - Boeing 747-8i Qantas v1.00 (x32 Version: v1.00)
FSX - Boeing 747-8i VARIG v1.00 (x32 Version: v1.00)
FSX - Boeing 757-200 American Airlines (x32)
FSX - Boeing 757-200 Basepack (x32)
FSX - Boeing 757-200 Thomson Airways (x32)
FSX - Boeing 757-300 Basepack (x32)
FSX - Boeing 757-300 Delta Airlines (x32)
FSX - Boeing 767-200 Basepack (x32)
FSX - Boeing 767-200 US Airways (x32)
FSX - Boeing 777-300 Basepack (x32)
FSX - Boeing 777-300 Singapore Airlines (x32)
FSX - Boeing 777-300 TAM (x32)
FSX - British Aerospace BAe 146-200 Basepack (x32)
FSX - British Aerospace BAe 146-200 Lufthansa Regional (x32)
FSX - British Aerospace BAe 146-200 South African AirLink (x32)
FSX - Concorde (x32)
FSX - de Havilland Dash 8-Q300 Basepack (x32)
FSX - de Havilland Dash 8-Q300 Lufthansa Regional (x32)
FSX - Embraer ERJ-190 Basepack (x32)
FSX - Embraer ERJ-190 KLM (x32)
FSX - McDonnell Douglas MD-11 Basepack (x32)
FSX - McDonnell Douglas MD-11 KLM (x32)
FSX - McDonnell Douglas MD-11F Basepack (x32)
FSX - McDonnell Douglas MD-11F EVA Air Cargo (x32)
FSX - McDonnell Douglas MD-11F UPS (x32)
Galapago (x32)
GIMP 2.8.4 (Version: 2.8.4)
Google Chrome (x32 Version: 31.0.1650.63)
Google Toolbar for Internet Explorer (x32 Version: 1.0.0)
Google Update Helper (x32 Version: 1.3.22.3)
Granny In Paradise (x32)
Heroes of Hellas (x32)
Hotkey Utility (x32 Version: 2.05.3009)
HTC Driver Installer (x32 Version: 4.2.0.001)
HTC Sync Manager (x32 Version: 2.0.61.0)
Identity Card (x32 Version: 1.00.3003)
iFly Jets - The 737NG for FSX (x32)
ImagXpress (x32 Version: 7.0.74.0)
Intel(R) IPP Run-Time Installer 5.3 Update 4 for Windows* on IA-32 (x32 Version: 5.3.4.087)
IPTInstaller (x32 Version: 4.0.8)
iTunes (Version: 11.0.3.42)
Java 7 Update 45 (x32 Version: 7.0.450)
Java Auto Updater (x32 Version: 2.1.9.8)
Junk Mail filter update (x32 Version: 16.4.3508.0205)
MAGIX Foto & Grafik Designer 7 SE (Version: 7.1.2.26041)
MAGIX Foto & Grafik Designer 7 SE (x32 Version: 7.1.2.26041)
Majestic MJC8Q400 Version 1.008 (x32)
McAfee SiteAdvisor (Version: 3.6.0.187)
McAfee SiteAdvisor (x32 Version: 3.6.160)
MediaShow Espresso (x32 Version: 5.5.1403_23691)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319)
Microsoft .NET Framework 4.5 (Version: 4.5.50709)
Microsoft Application Error Reporting (Version: 12.0.6015.5000)
Microsoft Flight Simulator X (x32 Version: 10.0.61355.0)
Microsoft Flight Simulator X Service Pack 1 (x32 Version: 10.0.61355.0)
Microsoft Flight Simulator X Service Pack 2 (x32 Version: 10.0.61472.0)
Microsoft IntelliPoint 8.2 (Version: 8.20.468.0)
Microsoft Office 2010 (x32 Version: 14.0.4763.1000)
Microsoft Silverlight (Version: 5.1.20913.0)
Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.56336)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.59193)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.30319 (Version: 10.0.30319)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727 (x32 Version: 11.0.50727.1)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (x32 Version: 11.0.50727.1)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.50727 (Version: 11.0.50727)
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.50727 (Version: 11.0.50727)
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.50727 (x32 Version: 11.0.50727)
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.50727 (x32 Version: 11.0.50727)
Microsoft-Maus- und Tastatur-Center (Version: 2.2.173.0)
Movie Maker (x32 Version: 16.4.3508.0205)
Mozilla Firefox 22.0 (x86 de) (x32 Version: 22.0)
Mozilla Maintenance Service (x32 Version: 24.2.0)
Mozilla Thunderbird 24.2.0 (x86 de) (x32 Version: 24.2.0)
MSVCRT (x32 Version: 15.4.2862.0708)
MSVCRT_amd64 (x32 Version: 15.4.2862.0708)
MSVCRT110 (x32 Version: 16.4.1108.0727)
MSVCRT110_amd64 (Version: 16.4.1109.0912)
MSXML 4.0 SP2 (KB954430) (x32 Version: 4.20.9870.0)
MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0)
MSXML 4.0 SP2 Parser und SDK (x32 Version: 4.20.9818.0)
MSXML 4.0 SP3 Parser (KB2758694) (x32 Version: 4.30.2117.0)
MSXML 4.0 SP3 Parser (x32 Version: 4.30.2100.0)
MyWinLocker (x32 Version: 3.1.206.0)
MyWinLocker Suite (x32 Version: 3.1.206.0)
Nero 9 Essentials (x32)
Nero ControlCenter (x32 Version: 9.0.0.1)
Nero DiscSpeed (x32 Version: 5.4.13.100)
Nero DiscSpeed Help (x32 Version: 5.4.4.100)
Nero DriveSpeed (x32 Version: 4.4.12.100)
Nero DriveSpeed Help (x32 Version: 4.4.4.100)
Nero Express Help (x32 Version: 9.6.2.101)
Nero InfoTool (x32 Version: 6.4.12.100)
Nero InfoTool Help (x32 Version: 6.4.4.100)
Nero Installer (x32 Version: 4.4.9.0)
Nero Online Upgrade (x32 Version: 1.3.0.0)
Nero StartSmart (x32 Version: 9.4.37.100)
Nero StartSmart Help (x32 Version: 9.4.27.100)
Nero StartSmart OEM (x32 Version: 9.16.0.100)
NeroExpress (x32 Version: 9.4.33.100)
neroxml (x32 Version: 1.0.0)
Notepad++ (x32 Version: 6.4.5)
OMSI 2 (x32)
OpenOffice.org 3.4.1 (x32 Version: 3.41.9593)
Photo Common (x32 Version: 16.4.3508.0205)
Photo Gallery (x32 Version: 16.4.3508.0205)
RAAS Professional by FS2Crew (LOCKED) (x32)
Razer Game Booster (x32 Version: 4.1.59.0)
Realtek Ethernet Controller Driver For Windows 7 (x32 Version: 7.17.304.2010)
Realtek High Definition Audio Driver (x32 Version: 6.0.1.5995)
REALTEK Wireless LAN Driver (x32 Version: 1.01.0094)
REX Essential Plus Overdrive (x32 Version: 3.6.2013.0415)
REX Essential Plus Overdrive SP2 (Patch Only) (x32 Version: 3.7.2013.0715)
SearchMe Toolbar v7.0 (x32 Version: 7.0) <==== ATTENTION
Shredder (Version: 2.0.5.0)
Shredder (x32 Version: 2.0.5.0)
Shrew Soft VPN Client
Skype™ 6.3 (x32 Version: 6.3.107)
Spin & Win (x32)
SpinTires Tech Demo (June 060613) (x32 Version: 1.3)
Spotify (HKCU Version: 0.9.6.81.gd359a796)
Steam (x32)
Stronghold 2 Deluxe (x32 Version: 1.40.100)
TomTom HOME (x32 Version: 2.9.6)
TomTom HOME Visual Studio Merge Modules (x32 Version: 1.0.2)
Überwachungstool für die Intel® Turbo-Boost-Technik 2.6 (Version: 2.6.2.0)
Update for Microsoft .NET Framework 4.5 (KB2750147) (x32 Version: 1)
Update for Microsoft .NET Framework 4.5 (KB2805221) (x32 Version: 1)
Update for Microsoft .NET Framework 4.5 (KB2805226) (x32 Version: 1)
VirtualCloneDrive (x32)
VJoy Virtual Joystick Driver 1.2 (x32)
VLC media player 2.0.6 (Version: 2.0.6)
Welcome Center (x32 Version: 1.00.3013)
Werkfeuerwehr-Simulator 2014 Version 1.0 (x32)
Windows Live Communications Platform (x32 Version: 16.4.3508.0205)
Windows Live Essentials (x32 Version: 16.4.3508.0205)
Windows Live Family Safety (Version: 16.4.3508.0205)
Windows Live Family Safety (x32 Version: 16.4.3508.0205)
Windows Live ID Sign-in Assistant (Version: 7.250.4311.0)
Windows Live Installer (x32 Version: 16.4.3508.0205)
Windows Live Mail (x32 Version: 16.4.3508.0205)
Windows Live Messenger (x32 Version: 16.4.3508.0205)
Windows Live MIME IFilter (Version: 16.4.3508.0205)
Windows Live Photo Common (x32 Version: 16.4.3508.0205)
Windows Live PIMT Platform (x32 Version: 16.4.3508.0205)
Windows Live SOXE (x32 Version: 16.4.3508.0205)
Windows Live SOXE Definitions (x32 Version: 16.4.3508.0205)
Windows Live Sync (x32 Version: 14.0.8089.726)
Windows Live UX Platform (x32 Version: 16.4.3508.0205)
Windows Live UX Platform Language Pack (x32 Version: 16.4.3508.0205)
Windows Live Writer (x32 Version: 16.4.3508.0205)
Windows Live Writer Resources (x32 Version: 16.4.3508.0205)
WinRAR 4.20 (64-Bit) (Version: 4.20.0)
Wise Auto Shutdown 1.13 (x32)

==================== Restore Points  =========================

28-12-2013 12:40:37 Installiert Mega Airport Amsterdam FSX
28-12-2013 12:41:44 Installiert Mega Airport Amsterdam FSX
28-12-2013 20:30:37 Installiert Stronghold 2
28-12-2013 20:47:31 Konfiguriert Stronghold 2 Deluxe
28-12-2013 20:51:49 Konfiguriert Stronghold 2 Deluxe

==================== Hosts content: ==========================

2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {28A9BC9F-0169-4CF7-9D84-0374C133BD10} - System32\Tasks\{8382FFE0-9D7E-4D44-80C1-009B5D9EDBEE} => Chrome.exe hxxp://ui.skype.com/ui/0/4.1.0.179.367/de/abandoninstall?source=lightinstaller&amp;page=tsProblems&amp;LastError=404&amp;installinfo=google-toolbar:notoffered;notincluded,google-chrome:notoffered;notincluded
Task: {2FDD5A5A-7239-44BA-9E89-1CB6C7061AD2} - System32\Tasks\Microsoft_MKC_Logon_Task_itype.exe => C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [2013-05-13] (Microsoft Corporation)
Task: {3B228FBE-1D58-451B-A960-DBA7F871E0F9} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-04-12] (Google Inc.)
Task: {5F0EC532-E52C-4AF8-86A1-33B8F065B6D8} - System32\Tasks\Microsoft_Hardware_Launch_itype_exe => C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [2013-05-13] (Microsoft Corporation)
Task: {64E040A6-65F5-4244-A0CE-02DC5E7EBB4E} - System32\Tasks\{84B630A8-9C64-47B4-9636-EF96107194B3} => Chrome.exe hxxp://www.skype.com/go/downloading?source=lightinstaller&amp;ver=4.1.0.179.367&amp;LastError=404
Task: {9C3286B9-F8F2-488E-8739-0EE6A15F01EB} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-03-25] (Piriform Ltd)
Task: {AE0D7523-8401-4D02-A035-BEBF84FB7A63} - System32\Tasks\Microsoft_Hardware_Launch_mousekeyboardcenter_exe => C:\Program Files\Microsoft Mouse and Keyboard Center\MouseKeyboardCenter.exe [2013-05-13] (Microsoft)
Task: {B091D4F5-B383-4911-A604-4C2E91D3A509} - System32\Tasks\{4158B42C-B804-4988-9529-600483EA78A9} => C:\Users\Leon\Downloads\st-barth_fsx\St-Barth_Fsx.exe [2011-06-22] ()
Task: {C009A0DD-7DC6-4BD2-8FEF-ACB8F9924A16} - System32\Tasks\Microsoft_MKC_Logon_Task_ipoint.exe => C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2013-05-13] (Microsoft Corporation)
Task: {C95ED78A-993C-4103-89AD-12FBBBC76582} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-04-12] (Google Inc.)
Task: {DFDEA828-D547-4A83-A6EB-224174D0EA21} - System32\Tasks\Microsoft_Hardware_Launch_IPoint_exe => C:\Program Files\Microsoft IntelliPoint\ipoint.exe [2011-08-01] (Microsoft Corporation)
Task: {DFFED053-31EE-4271-9473-29FC03C39694} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {FA70E5B9-A41D-40E0-85F1-E51280D74FFF} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-12-11] (Adobe Systems Incorporated)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2012-06-18 16:24 - 2012-06-18 16:24 - 00222720 _____ () C:\Program Files (x86)\Notepad++\NppShell_05.dll
2013-06-02 10:47 - 2013-06-02 10:46 - 00397704 _____ () C:\Program Files (x86)\Avira\AntiVir Desktop\sqlite3.dll
2013-01-28 12:08 - 2013-01-28 12:08 - 00087952 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2013-01-28 12:08 - 2013-01-28 12:08 - 01242512 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2013-05-17 11:42 - 2013-05-17 11:42 - 00030056 _____ () C:\Program Files (x86)\HTC\HTC Sync Manager\DbAccess.dll
2013-05-17 11:42 - 2013-05-17 11:42 - 00607376 _____ () C:\Program Files (x86)\HTC\HTC Sync Manager\sqlite3.dll
2013-05-17 11:42 - 2013-05-17 11:42 - 00044392 _____ () C:\Program Files (x86)\HTC\HTC Sync Manager\NAdvLog.dll
2013-05-17 11:42 - 2013-05-17 11:42 - 00036216 _____ () C:\Program Files (x86)\HTC\HTC Sync Manager\NFileCacheDBAccess.dll
2013-05-17 11:43 - 2013-05-17 11:43 - 00080248 _____ () C:\Program Files (x86)\HTC\HTC Sync Manager\ninstallerhelper.dll
2013-05-17 11:47 - 2013-05-17 11:47 - 00223592 _____ () C:\Program Files (x86)\HTC\HTC Sync Manager\DevConnMon.dll

==================== Alternate Data Streams (whitelisted) =========

AlternateDataStreams: C:\ProgramData\Temp:74603393

==================== Safe Mode (whitelisted) ===================


==================== Faulty Device Manager Devices =============

Name: 
Description: 
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: 
Description: 
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: Shrew Soft Virtual Adapter
Description: Shrew Soft Virtual Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Shrew Soft
Service: vnet
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.

Name: Microsoft PS/2-Maus
Description: Microsoft PS/2-Maus
Class Guid: {4d36e96f-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: i8042prt
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.


==================== Event log errors: =========================

Application errors:
==================
Error: (12/28/2013 11:01:00 PM) (Source: Application Hang) (User: )
Description: Programm gmer_2.1.19163.exe, Version 2.1.19163.0 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: e70

Startzeit: 01cf04183cf42b65

Endzeit: 0

Anwendungspfad: C:\Users\Leon\Desktop\gmer_2.1.19163.exe

Berichts-ID: 85c19819-700b-11e3-98cf-4487fcd117e3

Error: (12/28/2013 09:51:42 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: Stronghold2.exe, Version: 1.4.0.0, Zeitstempel: 0x46279283
Name des fehlerhaften Moduls: Stronghold2.exe, Version: 1.4.0.0, Zeitstempel: 0x46279283
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0032e216
ID des fehlerhaften Prozesses: 0x16f8
Startzeit der fehlerhaften Anwendung: 0xStronghold2.exe0
Pfad der fehlerhaften Anwendung: Stronghold2.exe1
Pfad des fehlerhaften Moduls: Stronghold2.exe2
Berichtskennung: Stronghold2.exe3

Error: (12/27/2013 10:24:29 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: Omsi.exe, Version: 2.0.4.0, Zeitstempel: 0x52a8733d
Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.18247, Zeitstempel: 0x521ea8e7
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0005b343
ID des fehlerhaften Prozesses: 0x77c
Startzeit der fehlerhaften Anwendung: 0xOmsi.exe0
Pfad der fehlerhaften Anwendung: Omsi.exe1
Pfad des fehlerhaften Moduls: Omsi.exe2
Berichtskennung: Omsi.exe3

Error: (12/27/2013 10:24:25 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: Omsi.exe, Version: 2.0.4.0, Zeitstempel: 0x52a8733d
Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 6.1.7601.18229, Zeitstempel: 0x51fb1116
Ausnahmecode: 0x0eedfade
Fehleroffset: 0x0000c41f
ID des fehlerhaften Prozesses: 0x77c
Startzeit der fehlerhaften Anwendung: 0xOmsi.exe0
Pfad der fehlerhaften Anwendung: Omsi.exe1
Pfad des fehlerhaften Moduls: Omsi.exe2
Berichtskennung: Omsi.exe3

Error: (12/27/2013 06:33:14 PM) (Source: Application Hang) (User: )
Description: Programm Omsi.exe, Version 2.0.4.0 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 155c

Startzeit: 01cf0329632a6a48

Endzeit: 17

Anwendungspfad: C:\Program Files (x86)\Steam\steamapps\common\OMSI 2\Omsi.exe

Berichts-ID: efcaea34-6f1c-11e3-b9fc-4487fcd117e3

Error: (12/27/2013 01:18:45 PM) (Source: Customer Experience Improvement Program) (User: )
Description: 80004005

Error: (12/27/2013 00:51:15 PM) (Source: Application Hang) (User: )
Description: Programm Omsi.exe, Version 2.0.4.0 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 9dc

Startzeit: 01cf02f9202d094b

Endzeit: 22

Anwendungspfad: C:\Program Files (x86)\Steam\steamapps\common\OMSI 2\Omsi.exe

Berichts-ID: 2ce01fcb-6eed-11e3-bbfe-4487fcd117e3

Error: (12/26/2013 09:21:24 PM) (Source: Customer Experience Improvement Program) (User: )
Description: 80004005

Error: (12/25/2013 01:44:36 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: Omsi.exe, Version: 2.0.4.0, Zeitstempel: 0x52a8733d
Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 6.1.7601.18229, Zeitstempel: 0x51fb1116
Ausnahmecode: 0x0eedfade
Fehleroffset: 0x0000c41f
ID des fehlerhaften Prozesses: 0xe60
Startzeit der fehlerhaften Anwendung: 0xOmsi.exe0
Pfad der fehlerhaften Anwendung: Omsi.exe1
Pfad des fehlerhaften Moduls: Omsi.exe2
Berichtskennung: Omsi.exe3

Error: (12/25/2013 01:14:54 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: Omsi.exe, Version: 2.0.4.0, Zeitstempel: 0x52a8733d
Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.18247, Zeitstempel: 0x521ea8e7
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0005b343
ID des fehlerhaften Prozesses: 0x10ec
Startzeit der fehlerhaften Anwendung: 0xOmsi.exe0
Pfad der fehlerhaften Anwendung: Omsi.exe1
Pfad des fehlerhaften Moduls: Omsi.exe2
Berichtskennung: Omsi.exe3


System errors:
=============
Error: (12/28/2013 11:21:31 PM) (Source: DCOM) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)

Error: (12/28/2013 11:19:28 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1068

Error: (12/28/2013 11:19:28 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1068

Error: (12/28/2013 11:19:28 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1068

Error: (12/28/2013 11:19:28 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1068

Error: (12/28/2013 11:19:28 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1068

Error: (12/28/2013 11:19:28 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1068

Error: (12/28/2013 11:19:28 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1068

Error: (12/28/2013 11:19:28 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1068

Error: (12/28/2013 11:19:28 PM) (Source: DCOM) (User: )
Description: 1068netprofm{A47979D2-C419-11D9-A5B4-001185AD2B89}


Microsoft Office Sessions:
=========================
Error: (12/28/2013 11:01:00 PM) (Source: Application Hang)(User: )
Description: gmer_2.1.19163.exe2.1.19163.0e7001cf04183cf42b650C:\Users\Leon\Desktop\gmer_2.1.19163.exe85c19819-700b-11e3-98cf-4487fcd117e3

Error: (12/28/2013 09:51:42 PM) (Source: Application Error)(User: )
Description: Stronghold2.exe1.4.0.046279283Stronghold2.exe1.4.0.046279283c00000050032e21616f801cf040e540df21eC:\Program Files (x86)\Firefly Studios\Stronghold 2\Stronghold2.exeC:\Program Files (x86)\Firefly Studios\Stronghold 2\Stronghold2.exedab8b4e2-7001-11e3-b659-4487fcd117e3

Error: (12/27/2013 10:24:29 PM) (Source: Application Error)(User: )
Description: Omsi.exe2.0.4.052a8733dntdll.dll6.1.7601.18247521ea8e7c00000050005b34377c01cf034025d09705C:\Program Files (x86)\Steam\steamapps\common\OMSI 2\Omsi.exeC:\Windows\SysWOW64\ntdll.dll44cdc0a7-6f3d-11e3-b9fc-4487fcd117e3

Error: (12/27/2013 10:24:25 PM) (Source: Application Error)(User: )
Description: Omsi.exe2.0.4.052a8733dKERNELBASE.dll6.1.7601.1822951fb11160eedfade0000c41f77c01cf034025d09705C:\Program Files (x86)\Steam\steamapps\common\OMSI 2\Omsi.exeC:\Windows\syswow64\KERNELBASE.dll426ced0f-6f3d-11e3-b9fc-4487fcd117e3

Error: (12/27/2013 06:33:14 PM) (Source: Application Hang)(User: )
Description: Omsi.exe2.0.4.0155c01cf0329632a6a4817C:\Program Files (x86)\Steam\steamapps\common\OMSI 2\Omsi.exeefcaea34-6f1c-11e3-b9fc-4487fcd117e3

Error: (12/27/2013 01:18:45 PM) (Source: Customer Experience Improvement Program)(User: )
Description: 80004005

Error: (12/27/2013 00:51:15 PM) (Source: Application Hang)(User: )
Description: Omsi.exe2.0.4.09dc01cf02f9202d094b22C:\Program Files (x86)\Steam\steamapps\common\OMSI 2\Omsi.exe2ce01fcb-6eed-11e3-bbfe-4487fcd117e3

Error: (12/26/2013 09:21:24 PM) (Source: Customer Experience Improvement Program)(User: )
Description: 80004005

Error: (12/25/2013 01:44:36 PM) (Source: Application Error)(User: )
Description: Omsi.exe2.0.4.052a8733dKERNELBASE.dll6.1.7601.1822951fb11160eedfade0000c41fe6001cf016e44a0cb55C:\Program Files (x86)\Steam\steamapps\common\OMSI 2\Omsi.exeC:\Windows\syswow64\KERNELBASE.dll4efc8675-6d62-11e3-b725-4487fcd117e3

Error: (12/25/2013 01:14:54 PM) (Source: Application Error)(User: )
Description: Omsi.exe2.0.4.052a8733dntdll.dll6.1.7601.18247521ea8e7c00000050005b34310ec01cf0168f7a375d7C:\Program Files (x86)\Steam\steamapps\common\OMSI 2\Omsi.exeC:\Windows\SysWOW64\ntdll.dll2947c8cd-6d5e-11e3-b61d-4487fcd117e3


==================== Memory info =========================== 

Percentage of memory in use: 37%
Total physical RAM: 4087.07 MB
Available physical RAM: 2542.16 MB
Total Pagefile: 8172.33 MB
Available Pagefile: 6042.05 MB
Total Virtual: 8192 MB
Available Virtual: 8191.81 MB

==================== Drives ================================

Drive c: (Acer) (Fixed) (Total:456.45 GB) (Free:15.25 GB) NTFS
Drive d: (DATA) (Fixed) (Total:456.96 GB) (Free:280.28 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 932 GB) (Disk ID: A34DF892)
Partition 1: (Not Active) - (Size=18 GB) - (Type=27)
Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=456 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=457 GB) - (Type=07 NTFS)

==================== End Of Log ============================
Gmer.txt

Code:
ATTFilter
GMER 2.1.19163 - hxxp://www.gmer.net
Rootkit scan 2013-12-28 23:48:39
Windows 6.1.7601 Service Pack 1 x64 \Device\Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-1 Hitachi_ rev.ST6O 931,51GB
Running: gmer_2.1.19163.exe; Driver: C:\Users\Leon\AppData\Local\Temp\kwldapog.sys


---- Kernel code sections - GMER 2.1 ----

INITKDBG  C:\Windows\system32\ntoskrnl.exe!ExDeleteNPagedLookasideList + 528  fffff800033f2000 16 bytes [8B, E3, 41, 5F, 41, 5E, 41, ...]
INITKDBG  C:\Windows\system32\ntoskrnl.exe!ExDeleteNPagedLookasideList + 545  fffff800033f2011 35 bytes {LEA ECX, [RSP+0x70]; CALL 0x3d64f}

---- EOF - GMER 2.1 ----

Ich hoffe ihr könnt mir helfen.
Vielen Dank im Vorraus.

Viele Grüße
Leon

Alt 29.12.2013, 10:40   #2
schrauber
/// the machine
/// TB-Ausbilder
 
Skype Virus - Standard

Skype Virus


hi,
Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!
Downloade dir bitte Combofix vom folgenden Downloadspiegel

Link 1


WICHTIG - Speichere Combofix auf deinem Desktop
  • Deaktiviere bitte all deine Anti Viren sowie Anti Malware/Spyware Scanner. Diese können Combofix bei der Arbeit stören.
Starte die Combofix.exe und folge den Anweisungen auf dem Bildschirm.

Wenn Combofix fertig ist, wird es eine Logfile erstellen. Bitte poste die C:\Combofix.txt in deiner nächsten Antwort.


Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten
Zitat:
Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.
starte den Rechner einfach neu. Dies sollte das Problem beheben.
__________________

__________________
Alt 29.12.2013, 11:03   #3
Liongamer1
 
Skype Virus - Standard

Skype Virus


Hi,
vielen Dank für die schnelle Antwort.
Hier ist das erstellte Logfile.
Code:
ATTFilter
ComboFix 13-12-26.01 - Leon 29.12.2013  10:49:04.1.4 - x64
Microsoft Windows 7 Home Premium   6.1.7601.1.1252.49.1031.18.4087.2881 [GMT 1:00]
ausgeführt von:: c:\users\Leon\Desktop\ComboFix.exe
AV: Avira Desktop *Disabled/Updated* {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}
SP: Avira Desktop *Disabled/Updated* {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((   Weitere Löschungen   ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\windows\SysWow64\frapsvid.dll
c:\windows\wininit.ini
.
.
(((((((((((((((((((((((   Dateien erstellt von 2013-11-28 bis 2013-12-29  ))))))))))))))))))))))))))))))
.
.
2013-12-29 09:55 . 2013-12-29 09:55	--------	d-----w-	c:\users\Default\AppData\Local\temp
2013-12-28 21:47 . 2013-12-28 21:47	--------	d-----w-	C:\FRST
2013-12-28 20:50 . 2013-12-28 20:50	--------	d-----w-	c:\programdata\Firefly Studios
2013-12-28 20:36 . 2013-12-28 20:36	98304	----a-w-	c:\windows\SysWow64\CmdLineExt.dll
2013-12-28 20:31 . 2013-12-28 20:31	--------	d-----w-	c:\program files (x86)\Firefly Studios
2013-12-28 20:30 . 2004-10-22 01:17	69715	----a-w-	c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\10\50\Intel32\ctor.dll
2013-12-28 20:30 . 2004-10-22 01:17	274432	----a-w-	c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\10\50\Intel32\iscript.dll
2013-12-28 20:30 . 2004-10-22 01:16	180224	----a-w-	c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\10\50\Intel32\iuser.dll
2013-12-28 20:30 . 2004-10-22 01:16	5632	----a-w-	c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\10\50\Intel32\DotNetInstaller.exe
2013-12-28 20:30 . 2004-10-22 01:18	749568	----a-w-	c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\10\50\Intel32\iKernel.dll
2013-12-28 20:30 . 2013-12-28 20:30	192644	----a-w-	c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\10\50\Intel32\iGdi.dll
2013-12-28 20:30 . 2013-12-28 20:30	323716	----a-w-	c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\10\50\Intel32\setup.dll
2013-12-28 12:40 . 2010-06-02 15:11	855040	----a-w-	c:\program files (x86)\Microsoft Games\Microsoft Flight Simulator X\aerosoft\Amsterdam Schiphol X\afcad_amsterdam.exe
2013-12-28 12:40 . 2010-02-07 18:17	319488	----a-w-	c:\program files (x86)\Microsoft Games\Microsoft Flight Simulator X\aerosoft\Amsterdam Schiphol X\EHAMTraffic.exe
2013-12-27 11:41 . 2013-12-27 11:41	--------	d-----w-	c:\users\Leon\AppData\Local\Razer
2013-12-27 11:40 . 2013-12-27 11:40	--------	d-----w-	c:\program files (x86)\Razer
2013-12-27 11:40 . 2013-12-27 11:40	--------	d-----w-	c:\programdata\Razer
2013-12-26 20:50 . 2013-12-26 20:50	--------	d-----w-	c:\program files (x86)\Aerosoft
2013-12-26 20:50 . 2010-08-27 09:41	282624	----a-w-	c:\program files (x86)\Microsoft Games\Microsoft Flight Simulator X\aerosoft\Mega Airport Barcelona X\LEBLTraffic.exe
2013-12-25 11:46 . 2013-12-25 11:46	--------	d-----w-	c:\program files\Microsoft IntelliPoint
2013-12-25 11:43 . 2013-12-25 11:43	--------	d-----w-	c:\program files\Microsoft Mouse and Keyboard Center
2013-12-23 09:48 . 2013-12-23 09:48	--------	d-----w-	c:\windows\F5C9BE9A04C34A728CD0BB67C722D608.TMP
2013-12-22 16:29 . 2013-12-22 16:29	716810	----a-w-	c:\program files (x86)\Microsoft Games\Microsoft Flight Simulator X\unins048.exe
2013-12-22 16:18 . 2013-12-22 16:18	725002	----a-w-	c:\program files (x86)\Microsoft Games\Microsoft Flight Simulator X\unins047.exe
2013-12-22 16:18 . 2013-12-22 16:18	725002	----a-w-	c:\program files (x86)\Microsoft Games\Microsoft Flight Simulator X\unins046.exe
2013-12-22 16:16 . 2013-12-22 16:16	740400	----a-w-	c:\program files (x86)\Microsoft Games\Microsoft Flight Simulator X\unins045.exe
2013-12-21 21:47 . 2013-11-20 13:00	109056	----a-w-	c:\program files (x86)\Microsoft Games\Microsoft Flight Simulator X\SimObjects\Airplanes\Aerosoft_DHC6_300_TUNDRA\Panel\ASC.dll
2013-12-21 21:46 . 2013-11-20 13:00	109056	----a-w-	c:\program files (x86)\Microsoft Games\Microsoft Flight Simulator X\SimObjects\Airplanes\Aerosoft_DHC6_300_SKIWHEEL\Panel\ASC.dll
2013-12-21 21:45 . 2013-11-20 13:00	109056	----a-w-	c:\program files (x86)\Microsoft Games\Microsoft Flight Simulator X\SimObjects\Airplanes\Aerosoft_DHC6_300_AMPHIB\Panel\ASC.dll
2013-12-21 21:45 . 2013-11-20 13:00	109056	----a-w-	c:\program files (x86)\Microsoft Games\Microsoft Flight Simulator X\SimObjects\Airplanes\Aerosoft_DHC6_100_WHEEL\Panel\ASC.dll
2013-12-21 21:45 . 2013-11-20 13:00	109056	----a-w-	c:\program files (x86)\Microsoft Games\Microsoft Flight Simulator X\SimObjects\Airplanes\Aerosoft_DHC6_300_WHEEL\Panel\ASC.dll
2013-12-21 21:45 . 2013-11-20 13:00	109056	----a-w-	c:\program files (x86)\Microsoft Games\Microsoft Flight Simulator X\SimObjects\Airplanes\Aerosoft_DHC6_100_FLOAT\Panel\ASC.dll
2013-12-21 21:45 . 2013-11-20 13:00	167936	----a-w-	c:\program files (x86)\Microsoft Games\Microsoft Flight Simulator X\aerosoft\Twin Otter Extended\Livery Manager\unzip.exe
2013-12-21 21:45 . 2013-11-20 13:00	135168	----a-w-	c:\program files (x86)\Microsoft Games\Microsoft Flight Simulator X\aerosoft\Twin Otter Extended\Livery Manager\zip.exe
2013-12-21 21:45 . 2013-11-20 13:00	954552	----a-w-	c:\program files (x86)\Microsoft Games\Microsoft Flight Simulator X\aerosoft\Uninstall_TwinOtter.exe
2013-12-21 21:45 . 2013-11-20 13:00	560128	----a-w-	c:\program files (x86)\Microsoft Games\Microsoft Flight Simulator X\aerosoft\Twin Otter Extended\Aerosoft.TwinOtterX.FuelPlanner.exe
2013-12-21 21:45 . 2013-11-20 13:00	2695168	----a-w-	c:\program files (x86)\Microsoft Games\Microsoft Flight Simulator X\aerosoft\Twin Otter Extended\Livery Manager\TwinOtter_Livery_Manager.exe
2013-12-21 21:34 . 2013-12-21 21:34	59583	----a-w-	c:\program files (x86)\Microsoft Games\Microsoft Flight Simulator X\Uninstl-mjc8q4.exe
2013-12-20 18:42 . 2013-12-20 18:42	--------	d-----w-	c:\program files (x86)\Common Files\MAGIX Shared
2013-12-12 17:11 . 2013-12-13 14:54	--------	d-----w-	c:\program files (x86)\Mozilla Thunderbird
2013-12-11 17:18 . 2009-09-04 16:29	453456	----a-w-	c:\windows\SysWow64\d3dx10_42.dll
2013-12-11 17:17 . 2005-12-05 17:09	3815120	----a-w-	c:\windows\system32\d3dx9_28.dll
2013-12-11 17:17 . 2005-07-22 18:59	3807440	----a-w-	c:\windows\system32\d3dx9_27.dll
2013-12-11 17:17 . 2005-05-26 14:34	3767504	----a-w-	c:\windows\system32\d3dx9_26.dll
2013-12-11 17:17 . 2005-05-26 14:34	2297552	----a-w-	c:\windows\SysWow64\d3dx9_26.dll
2013-12-11 17:17 . 2005-03-18 16:19	3823312	----a-w-	c:\windows\system32\d3dx9_25.dll
2013-12-11 17:17 . 2005-02-05 18:45	3544272	----a-w-	c:\windows\system32\d3dx9_24.dll
2013-12-11 14:31 . 2013-05-10 05:56	12625920	----a-w-	c:\windows\system32\wmploc.DLL
2013-12-11 14:31 . 2013-05-10 04:30	167424	----a-w-	c:\program files\Windows Media Player\wmplayer.exe
2013-12-11 14:31 . 2013-05-10 03:48	164864	----a-w-	c:\program files (x86)\Windows Media Player\wmplayer.exe
2013-12-11 14:31 . 2013-05-10 04:56	12625408	----a-w-	c:\windows\SysWow64\wmploc.DLL
2013-12-11 14:31 . 2013-05-10 05:56	14631424	----a-w-	c:\windows\system32\wmp.dll
2013-12-11 13:21 . 2013-11-23 18:26	417792	----a-w-	c:\windows\SysWow64\WMPhoto.dll
2013-12-08 10:46 . 2013-12-08 10:46	--------	d-----w-	c:\users\Leon\AppData\Roaming\simplitec
2013-12-08 10:31 . 2013-12-08 10:31	--------	d-----w-	c:\users\Leon\AppData\Local\Logitech® Webcam-Software
2013-12-08 10:28 . 2013-12-08 10:28	--------	d-----w-	c:\programdata\LogiShrd
2013-12-08 10:27 . 2013-12-08 10:27	--------	d-----w-	c:\users\Leon\AppData\Roaming\Leadertech
2013-12-08 10:27 . 2013-12-27 22:16	--------	d-----w-	c:\program files\Common Files\logishrd
2013-12-08 10:27 . 2013-12-27 22:16	--------	d-----w-	c:\program files (x86)\Common Files\LogiShrd
2013-12-08 10:27 . 2013-12-27 22:15	--------	d-----w-	c:\program files (x86)\Logitech
2013-12-08 10:24 . 2013-12-08 10:24	--------	d-----w-	c:\programdata\Seeing Machines
2013-12-08 10:24 . 2013-12-08 10:24	--------	d-----w-	c:\users\Leon\AppData\Roaming\Seeing Machines
2013-12-08 10:19 . 2013-12-08 10:19	--------	d-----w-	c:\program files (x86)\VJoy Virtual Joystick Driver
2013-12-08 10:12 . 2013-12-08 10:12	--------	d-----w-	c:\program files (x86)\Abbequerque Inc
2013-12-08 09:29 . 2013-12-20 18:43	--------	d-----w-	c:\users\Leon\AppData\Roaming\MAGIX
2013-12-08 09:29 . 2013-12-08 09:29	--------	d-----w-	c:\users\Leon\AppData\Local\Xara
2013-12-08 09:29 . 2013-12-27 22:13	--------	d-----w-	c:\programdata\MAGIX
2013-12-08 09:29 . 2013-12-27 22:13	--------	d-----w-	c:\program files (x86)\MAGIX
2013-12-08 09:29 . 2013-12-27 22:12	--------	d-----w-	c:\program files (x86)\Common Files\MAGIX Services
2013-12-08 09:29 . 2013-12-18 16:04	--------	d-----w-	c:\programdata\simplitec
2013-12-07 16:28 . 2013-12-07 16:28	92672	----a-w-	c:\program files (x86)\Microsoft Games\Microsoft Flight Simulator X\Modules\LHBP_objectPlacer.dll
2013-12-07 16:27 . 2013-12-07 16:28	109147	----a-w-	c:\program files (x86)\Microsoft Games\Microsoft Flight Simulator X\Uninstal_LHBP_v1_FSX.exe
2013-12-06 23:29 . 2013-12-06 23:29	33480704	----a-w-	c:\program files (x86)\Microsoft Games\Microsoft Flight Simulator X\SimObjects\Airplanes\mjc8q400\panel\mjc84_main.dll
2013-12-06 21:16 . 2013-12-06 21:16	301568	----a-w-	c:\program files (x86)\Microsoft Games\Microsoft Flight Simulator X\SimObjects\Airplanes\mjc8q400\cpan\mjc84cpan.exe
2013-11-30 16:29 . 2010-06-02 03:55	77656	----a-w-	c:\windows\system32\XAPOFX1_5.dll
2013-11-30 16:29 . 2010-06-02 03:55	74072	----a-w-	c:\windows\SysWow64\XAPOFX1_5.dll
2013-11-30 16:29 . 2010-06-02 03:55	527192	----a-w-	c:\windows\SysWow64\XAudio2_7.dll
2013-11-30 16:29 . 2010-06-02 03:55	518488	----a-w-	c:\windows\system32\XAudio2_7.dll
2013-11-30 16:29 . 2010-05-26 10:41	2526056	----a-w-	c:\windows\system32\D3DCompiler_43.dll
2013-11-30 16:29 . 2010-05-26 10:41	2106216	----a-w-	c:\windows\SysWow64\D3DCompiler_43.dll
2013-11-30 16:29 . 2010-05-26 10:41	1998168	----a-w-	c:\windows\SysWow64\D3DX9_43.dll
2013-11-30 16:29 . 2010-05-26 10:41	2401112	----a-w-	c:\windows\system32\D3DX9_43.dll
2013-11-30 16:29 . 2010-02-04 09:01	24920	----a-w-	c:\windows\system32\X3DAudio1_7.dll
2013-11-30 16:29 . 2010-02-04 09:01	22360	----a-w-	c:\windows\SysWow64\X3DAudio1_7.dll
2013-11-30 16:29 . 2007-04-04 17:54	107368	----a-w-	c:\windows\system32\xinput1_3.dll
2013-11-30 16:13 . 2013-12-28 20:49	--------	d-----w-	c:\program files (x86)\Steam
.
.
.
((((((((((((((((((((((((((((((((((((   Find3M Bericht   ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-12-17 12:39 . 2013-06-02 09:51	84720	----a-w-	c:\windows\system32\drivers\avnetflt.sys
2013-12-17 12:39 . 2013-06-02 09:47	131576	----a-w-	c:\windows\system32\drivers\avipbb.sys
2013-12-17 12:39 . 2013-06-02 09:47	108440	----a-w-	c:\windows\system32\drivers\avgntflt.sys
2013-12-15 20:02 . 2013-04-13 17:45	90708896	----a-w-	c:\windows\system32\MRT.exe
2013-12-11 14:12 . 2013-04-12 18:54	71048	----a-w-	c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2013-12-11 14:12 . 2013-04-12 18:54	692616	----a-w-	c:\windows\SysWow64\FlashPlayerApp.exe
2013-11-21 16:06 . 2013-11-21 16:06	940032	----a-w-	c:\windows\system32\MsSpellCheckingFacility.exe
2013-11-21 16:06 . 2013-11-21 16:06	194048	----a-w-	c:\windows\SysWow64\elshyph.dll
2013-11-21 16:06 . 2013-11-21 16:06	71680	----a-w-	c:\windows\SysWow64\RegisterIEPKEYs.exe
2013-11-21 16:06 . 2013-11-21 16:06	645120	----a-w-	c:\windows\SysWow64\jsIntl.dll
2013-11-21 16:06 . 2013-11-21 16:06	62464	----a-w-	c:\windows\SysWow64\tdc.ocx
2013-11-21 16:06 . 2013-11-21 16:06	61952	----a-w-	c:\windows\SysWow64\MshtmlDac.dll
2013-11-21 16:06 . 2013-11-21 16:06	61952	----a-w-	c:\windows\SysWow64\iesetup.dll
2013-11-21 16:06 . 2013-11-21 16:06	51200	----a-w-	c:\windows\SysWow64\ieetwproxystub.dll
2013-11-21 16:06 . 2013-11-21 16:06	454656	----a-w-	c:\windows\SysWow64\vbscript.dll
2013-11-21 16:06 . 2013-11-21 16:06	36352	----a-w-	c:\windows\SysWow64\imgutil.dll
2013-11-21 16:06 . 2013-11-21 16:06	34816	----a-w-	c:\windows\SysWow64\JavaScriptCollectionAgent.dll
2013-11-21 16:06 . 2013-11-21 16:06	337408	----a-w-	c:\windows\SysWow64\html.iec
2013-11-21 16:06 . 2013-11-21 16:06	24576	----a-w-	c:\windows\SysWow64\licmgr10.dll
2013-11-21 16:06 . 2013-11-21 16:06	235008	----a-w-	c:\windows\system32\elshyph.dll
2013-11-21 16:06 . 2013-11-21 16:06	182272	----a-w-	c:\windows\SysWow64\msls31.dll
2013-11-21 16:06 . 2013-11-21 16:06	151552	----a-w-	c:\windows\SysWow64\iexpress.exe
2013-11-21 16:06 . 2013-11-21 16:06	139264	----a-w-	c:\windows\SysWow64\wextract.exe
2013-11-21 16:06 . 2013-11-21 16:06	13312	----a-w-	c:\windows\SysWow64\mshta.exe
2013-11-21 16:06 . 2013-11-21 16:06	112128	----a-w-	c:\windows\SysWow64\ieUnatt.exe
2013-11-21 16:06 . 2013-11-21 16:06	1051136	----a-w-	c:\windows\SysWow64\mshtmlmedia.dll
2013-11-21 16:06 . 2013-11-21 16:06	942592	----a-w-	c:\windows\system32\jsIntl.dll
2013-11-21 16:06 . 2013-11-21 16:06	90112	----a-w-	c:\windows\system32\SetIEInstalledDate.exe
2013-11-21 16:06 . 2013-11-21 16:06	86016	----a-w-	c:\windows\SysWow64\iesysprep.dll
2013-11-21 16:06 . 2013-11-21 16:06	86016	----a-w-	c:\windows\system32\RegisterIEPKEYs.exe
2013-11-21 16:06 . 2013-11-21 16:06	84992	----a-w-	c:\windows\system32\mshtmled.dll
2013-11-21 16:06 . 2013-11-21 16:06	81408	----a-w-	c:\windows\system32\icardie.dll
2013-11-21 16:06 . 2013-11-21 16:06	77312	----a-w-	c:\windows\system32\tdc.ocx
2013-11-21 16:06 . 2013-11-21 16:06	74240	----a-w-	c:\windows\SysWow64\SetIEInstalledDate.exe
2013-11-21 16:06 . 2013-11-21 16:06	626176	----a-w-	c:\windows\system32\msfeeds.dll
2013-11-21 16:06 . 2013-11-21 16:06	62464	----a-w-	c:\windows\system32\pngfilt.dll
2013-11-21 16:06 . 2013-11-21 16:06	616104	----a-w-	c:\windows\system32\ieapfltr.dat
2013-11-21 16:06 . 2013-11-21 16:06	548352	----a-w-	c:\windows\system32\vbscript.dll
2013-11-21 16:06 . 2013-11-21 16:06	52224	----a-w-	c:\windows\system32\msfeedsbs.dll
2013-11-21 16:06 . 2013-11-21 16:06	48640	----a-w-	c:\windows\SysWow64\mshtmler.dll
2013-11-21 16:06 . 2013-11-21 16:06	48640	----a-w-	c:\windows\system32\mshtmler.dll
2013-11-21 16:06 . 2013-11-21 16:06	453120	----a-w-	c:\windows\system32\dxtmsft.dll
2013-11-21 16:06 . 2013-11-21 16:06	413696	----a-w-	c:\windows\system32\html.iec
2013-11-21 16:06 . 2013-11-21 16:06	40448	----a-w-	c:\windows\system32\JavaScriptCollectionAgent.dll
2013-11-21 16:06 . 2013-11-21 16:06	30208	----a-w-	c:\windows\system32\licmgr10.dll
2013-11-21 16:06 . 2013-11-21 16:06	296960	----a-w-	c:\windows\system32\dxtrans.dll
2013-11-21 16:06 . 2013-11-21 16:06	263376	----a-w-	c:\windows\system32\iedkcs32.dll
2013-11-21 16:06 . 2013-11-21 16:06	247808	----a-w-	c:\windows\system32\msls31.dll
2013-11-21 16:06 . 2013-11-21 16:06	243200	----a-w-	c:\windows\system32\webcheck.dll
2013-11-21 16:06 . 2013-11-21 16:06	235520	----a-w-	c:\windows\system32\url.dll
2013-11-21 16:06 . 2013-11-21 16:06	195584	----a-w-	c:\windows\system32\msrating.dll
2013-11-21 16:06 . 2013-11-21 16:06	167424	----a-w-	c:\windows\system32\iexpress.exe
2013-11-21 16:06 . 2013-11-21 16:06	147968	----a-w-	c:\windows\system32\occache.dll
2013-11-21 16:06 . 2013-11-21 16:06	143872	----a-w-	c:\windows\system32\wextract.exe
2013-11-21 16:06 . 2013-11-21 16:06	13312	----a-w-	c:\windows\system32\msfeedssync.exe
2013-11-21 16:06 . 2013-11-21 16:06	131072	----a-w-	c:\windows\system32\IEAdvpack.dll
2013-11-21 16:06 . 2013-11-21 16:06	1228800	----a-w-	c:\windows\system32\mshtmlmedia.dll
2013-11-21 16:06 . 2013-11-21 16:06	111616	----a-w-	c:\windows\SysWow64\IEAdvpack.dll
2013-11-21 16:06 . 2013-11-21 16:06	105984	----a-w-	c:\windows\system32\iesysprep.dll
2013-11-21 16:06 . 2013-11-21 16:06	101376	----a-w-	c:\windows\system32\inseng.dll
2013-11-21 16:06 . 2013-11-21 16:06	83968	----a-w-	c:\windows\system32\MshtmlDac.dll
2013-11-21 16:06 . 2013-11-21 16:06	774144	----a-w-	c:\windows\system32\jscript.dll
2013-11-21 16:06 . 2013-11-21 16:06	48128	----a-w-	c:\windows\system32\imgutil.dll
2013-11-21 16:06 . 2013-11-21 16:06	13824	----a-w-	c:\windows\system32\mshta.exe
2013-11-21 16:06 . 2013-11-21 16:06	135680	----a-w-	c:\windows\system32\iepeers.dll
2013-11-07 17:39 . 2013-11-07 17:39	157736	----a-w-	c:\windows\system32\amdhcp64.dll
2013-11-07 17:39 . 2013-11-07 17:39	142304	----a-w-	c:\windows\SysWow64\amdhcp32.dll
2013-11-07 17:39 . 2013-11-07 17:39	78432	----a-w-	c:\windows\system32\atimpc64.dll
2013-11-07 17:39 . 2013-11-07 17:39	78432	----a-w-	c:\windows\system32\amdpcom64.dll
2013-11-07 17:39 . 2013-11-07 17:39	71704	----a-w-	c:\windows\SysWow64\atimpc32.dll
2013-11-07 17:39 . 2013-11-07 17:39	71704	----a-w-	c:\windows\SysWow64\amdpcom32.dll
2013-11-07 17:39 . 2013-11-07 17:39	143304	----a-w-	c:\windows\system32\atiuxp64.dll
2013-11-07 17:39 . 2013-11-07 17:39	126336	----a-w-	c:\windows\SysWow64\atiuxpag.dll
2013-11-07 17:39 . 2013-11-07 17:39	115512	----a-w-	c:\windows\system32\atiu9p64.dll
2013-11-07 17:39 . 2013-11-07 17:39	98496	----a-w-	c:\windows\SysWow64\atiu9pag.dll
2013-11-07 17:39 . 2010-05-12 12:45	1318552	----a-w-	c:\windows\system32\aticfx64.dll
2013-11-07 17:39 . 2013-11-07 17:39	1100216	----a-w-	c:\windows\SysWow64\aticfx32.dll
2013-11-07 17:39 . 2010-05-12 12:45	9764088	----a-w-	c:\windows\system32\atidxx64.dll
2013-11-07 17:39 . 2013-11-07 17:39	8412680	----a-w-	c:\windows\SysWow64\atidxx32.dll
2013-11-07 17:39 . 2013-11-07 17:39	8287008	----a-w-	c:\windows\SysWow64\atiumdva.dll
2013-11-07 17:39 . 2013-11-07 17:39	6630232	----a-w-	c:\windows\SysWow64\atiumdag.dll
2013-11-07 17:39 . 2013-11-07 17:39	8927704	----a-w-	c:\windows\system32\atiumd6a.dll
2013-11-07 17:39 . 2013-11-07 17:39	7751920	----a-w-	c:\windows\system32\atiumd64.dll
2013-11-07 17:24 . 2013-11-07 17:24	13200896	----a-w-	c:\windows\system32\drivers\atikmdag.sys
2013-11-07 17:11 . 2013-11-07 17:11	230912	----a-w-	c:\windows\system32\clinfo.exe
2013-11-07 17:10 . 2013-11-07 17:10	1187342	----a-w-	c:\windows\system32\amdocl_as64.exe
2013-11-07 17:10 . 2013-11-07 17:10	1061902	----a-w-	c:\windows\system32\amdocl_ld64.exe
2013-11-07 17:10 . 2013-11-07 17:10	995342	----a-w-	c:\windows\SysWow64\amdocl_as32.exe
2013-11-07 17:10 . 2013-11-07 17:10	798734	----a-w-	c:\windows\SysWow64\amdocl_ld32.exe
2013-11-07 17:10 . 2013-11-07 17:10	100352	----a-w-	c:\windows\system32\OpenVideo64.dll
2013-11-07 17:10 . 2013-11-07 17:10	83968	----a-w-	c:\windows\SysWow64\OpenVideo.dll
2013-11-07 17:10 . 2013-11-07 17:10	86528	----a-w-	c:\windows\system32\OVDecode64.dll
2013-11-07 17:10 . 2013-11-07 17:10	73728	----a-w-	c:\windows\SysWow64\OVDecode.dll
2013-11-07 17:10 . 2013-11-07 17:10	29363712	----a-w-	c:\windows\system32\amdocl64.dll
2013-11-07 17:07 . 2013-11-07 17:07	24846848	----a-w-	c:\windows\SysWow64\amdocl.dll
2013-11-07 17:05 . 2013-11-07 17:05	63488	----a-w-	c:\windows\system32\OpenCL.dll
2013-11-07 17:05 . 2013-11-07 17:05	57344	----a-w-	c:\windows\SysWow64\OpenCL.dll
2013-11-07 17:02 . 2013-11-07 17:02	129536	----a-w-	c:\windows\system32\coinst_13.25.18.dll
2013-11-07 16:44 . 2013-11-07 16:44	26350592	----a-w-	c:\windows\system32\atio6axx.dll
2013-11-07 16:40 . 2013-11-07 16:40	368640	----a-w-	c:\windows\system32\atiapfxx.exe
.
.
((((((((((((((((((((((((((((   Autostartpunkte der Registrierung   ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. 
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\egisPSDP]
@="{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}"
[HKEY_CLASSES_ROOT\CLSID\{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}]
2010-02-01 18:03	120176	----a-w-	c:\program files (x86)\EgisTec MyWinLocker\x86\PSDProtect.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Spotify Web Helper"="c:\users\Leon\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe" [2013-12-07 1168896]
"TomTomHOME.exe"="c:\program files (x86)\TomTom HOME 2\TomTomHOMERunner.exe" [2013-07-02 248208]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"MDS_Menu"="c:\program files (x86)\Acer Arcade Deluxe\MediaShow Espresso\MUITransfer\MUIStartMenu.exe" [2009-05-19 222504]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2013-04-04 958576]
"EgisUpdate"="c:\program files (x86)\EgisTec IPS\EgisUpdate.exe" [2009-12-25 201512]
"EgisTecPMMUpdate"="c:\program files (x86)\EgisTec IPS\PmmUpdate.exe" [2009-12-25 401192]
"APSDaemon"="c:\program files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2013-04-21 59720]
"iTunesHelper"="c:\program files (x86)\iTunes\iTunesHelper.exe" [2013-05-15 152392]
"avgnt"="c:\program files (x86)\Avira\AntiVir Desktop\avgnt.exe" [2013-12-17 684600]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2013-07-02 254336]
"StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe" [2013-11-07 766208]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
"EnableSecureUIAPath"= 1 (0x1)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon]
"Userinit"="userinit.exe"
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"LoadAppInit_DLLs"=1 (0x1)
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]
@=""
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x]
R3 CompFilter64;UVCCompositeFilter;c:\windows\system32\DRIVERS\lvbflt64.sys;c:\windows\SYSNATIVE\DRIVERS\lvbflt64.sys [x]
R3 HTCAND64;HTC Device Driver;c:\windows\system32\Drivers\ANDROIDUSB.sys;c:\windows\SYSNATIVE\Drivers\ANDROIDUSB.sys [x]
R3 htcnprot;HTC NDIS Protocol Driver;c:\windows\system32\DRIVERS\htcnprot.sys;c:\windows\SYSNATIVE\DRIVERS\htcnprot.sys [x]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCollector.exe [x]
R3 LVRS64;Logitech RightSound Filter Driver;c:\windows\system32\DRIVERS\lvrs64.sys;c:\windows\SYSNATIVE\DRIVERS\lvrs64.sys [x]
R3 LVUVC64;Logitech HD Webcam C525(UVC);c:\windows\system32\DRIVERS\lvuvc64.sys;c:\windows\SYSNATIVE\DRIVERS\lvuvc64.sys [x]
R3 MWLService;MyWinLocker Service;c:\program files (x86)\EgisTec MyWinLocker\x86\MWLService.exe;c:\program files (x86)\EgisTec MyWinLocker\x86\MWLService.exe [x]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 TurboBoost;Intel(R) Turbo Boost Technology Monitor 2.6;c:\program files\Intel\TurboBoost\TurboBoost.exe;c:\program files\Intel\TurboBoost\TurboBoost.exe [x]
R3 vnet;Shrew Soft Virtual Adapter;c:\windows\system32\DRIVERS\virtualnet.sys;c:\windows\SYSNATIVE\DRIVERS\virtualnet.sys [x]
R3 WSDScan;WSD-Scanunterstützung durch UMB;c:\windows\system32\drivers\WSDScan.sys;c:\windows\SYSNATIVE\drivers\WSDScan.sys [x]
S1 avkmgr;avkmgr;c:\windows\system32\DRIVERS\avkmgr.sys;c:\windows\SYSNATIVE\DRIVERS\avkmgr.sys [x]
S1 mwlPSDFilter;mwlPSDFilter;c:\windows\system32\DRIVERS\mwlPSDFilter.sys;c:\windows\SYSNATIVE\DRIVERS\mwlPSDFilter.sys [x]
S1 mwlPSDNServ;mwlPSDNServ;c:\windows\system32\DRIVERS\mwlPSDNServ.sys;c:\windows\SYSNATIVE\DRIVERS\mwlPSDNServ.sys [x]
S1 mwlPSDVDisk;mwlPSDVDisk;c:\windows\system32\DRIVERS\mwlPSDVDisk.sys;c:\windows\SYSNATIVE\DRIVERS\mwlPSDVDisk.sys [x]
S1 vflt;Shrew Soft Lightweight Filter;c:\windows\system32\DRIVERS\vfilter.sys;c:\windows\SYSNATIVE\DRIVERS\vfilter.sys [x]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe;c:\windows\SYSNATIVE\atiesrxx.exe [x]
S2 AntiVirSchedulerService;Avira Planer;c:\program files (x86)\Avira\AntiVir Desktop\sched.exe;c:\program files (x86)\Avira\AntiVir Desktop\sched.exe [x]
S2 Greg_Service;GRegService;c:\program files (x86)\Acer\Registration\GregHSRW.exe;c:\program files (x86)\Acer\Registration\GregHSRW.exe [x]
S2 HTCMonitorService;HTCMonitorService;c:\program files (x86)\HTC\HTC Sync Manager\HSMServiceEntry.exe;c:\program files (x86)\HTC\HTC Sync Manager\HSMServiceEntry.exe [x]
S2 iked;ShrewSoft IKE Daemon;c:\program files\ShrewSoft\VPN Client\iked.exe;c:\program files\ShrewSoft\VPN Client\iked.exe [x]
S2 ipsecd;ShrewSoft IPSEC Daemon;c:\program files\ShrewSoft\VPN Client\ipsecd.exe;c:\program files\ShrewSoft\VPN Client\ipsecd.exe [x]
S2 McAfee SiteAdvisor Service;McAfee SiteAdvisor Service;c:\progra~2\mcafee\SITEAD~1\McSACore.exe;c:\progra~2\mcafee\SITEAD~1\McSACore.exe [x]
S2 PassThru Service;Internet Pass-Through Service;c:\program files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe;c:\program files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe [x]
S2 RzKLService;RzKLService;c:\program files (x86)\Razer\Razer Game Booster\RzKLService.exe;c:\program files (x86)\Razer\Razer Game Booster\RzKLService.exe [x]
S2 TomTomHOMEService;TomTomHOMEService;c:\program files (x86)\TomTom HOME 2\TomTomHOMEService.exe;c:\program files (x86)\TomTom HOME 2\TomTomHOMEService.exe [x]
S2 TurboB;Turbo Boost UI Monitor driver;c:\windows\system32\DRIVERS\TurboB.sys;c:\windows\SYSNATIVE\DRIVERS\TurboB.sys [x]
S2 Updater Service;Updater Service;c:\program files\Acer\Acer Updater\UpdaterService.exe;c:\program files\Acer\Acer Updater\UpdaterService.exe [x]
S2 USBS3S4Detection;USBS3S4Detection;c:\oem\USBDECTION\USBS3S4Detection.exe;c:\oem\USBDECTION\USBS3S4Detection.exe [x]
S3 AtiHDAudioService;AMD Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW76.sys;c:\windows\SYSNATIVE\drivers\AtihdW76.sys [x]
S3 dc3d;MS Hardware Device Detection Driver (USB);c:\windows\system32\DRIVERS\dc3d.sys;c:\windows\SYSNATIVE\DRIVERS\dc3d.sys [x]
S3 Point64;Microsoft IntelliPoint Filter Driver;c:\windows\system32\DRIVERS\point64.sys;c:\windows\SYSNATIVE\DRIVERS\point64.sys [x]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys [x]
.
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2013-12-05 15:55	1210320	----a-w-	c:\program files (x86)\Google\Chrome\Application\31.0.1650.63\Installer\chrmstp.exe
.
Inhalt des "geplante Tasks" Ordners
.
2013-12-28 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-04-12 14:12]
.
2013-12-29 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2013-04-12 18:17]
.
2013-12-29 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2013-04-12 18:17]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\egisPSDP]
@="{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}"
[HKEY_CLASSES_ROOT\CLSID\{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}]
2010-02-01 18:06	137584	----a-w-	c:\program files (x86)\EgisTec MyWinLocker\x64\PSDProtect.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2010-02-24 9642528]
"mwlDaemon"="c:\program files (x86)\EgisTec MyWinLocker\x86\mwlDaemon.exe" [2010-02-01 349552]
"IntelTBRunOnce"="wscript.exe" [2013-10-12 168960]
"IntelliPoint"="c:\program files\Microsoft IntelliPoint\ipoint.exe" [2011-08-01 2417032]
.
------- Zusätzlicher Suchlauf -------
.
uStart Page = hxxp://feed.helperbar.com/?publisher=YahooOC&dpid=YahooOC&co=DE&userid=836743ac-2a73-484c-9a82-2d349f20a027&searchtype=hp&fr=linkury-tb&installDate=22/06/2013&type=hp1000
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SysWOW64\blank.htm
uInternet Settings,ProxyOverride = *.local
uSearchAssistant = hxxp://feed.helperbar.com/?publisher=YahooOC&dpid=YahooOC&co=DE&userid=836743ac-2a73-484c-9a82-2d349f20a027&searchtype=ds&p={searchTerms}&fr=linkury-tb&installDate=22/06/2013&type=hp1000
TCP: DhcpNameServer = 192.168.2.1
TCP: Interfaces\{9155BD02-8D91-4AC4-A33F-FD4BE0F6B02D}: NameServer = 146.140.221.1,192.44.32.31
FF - ProfilePath - c:\users\Leon\AppData\Roaming\Mozilla\Firefox\Profiles\ri8t50b8.default\
FF - prefs.js: browser.startup.homepage - hxxp://feed.helperbar.com/?publisher=YahooOC&dpid=YahooOC&co=DE&userid=836743ac-2a73-484c-9a82-2d349f20a027&searchtype=hp&fr=linkury-tb&installDate=22/06/2013&type=hp1000
FF - prefs.js: keyword.URL - hxxp://de.search.yahoo.com/search?fr=mcafee&p=
FF - prefs.js: browser.search.selectedEngine - Sichere Suche
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
Toolbar-Locked - (no file)
Wow6432Node-HKU-Default-RunOnce-SPReview - c:\windows\System32\SPReview\SPReview.exe
c:\users\Leon\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Taskbar Eliminator.lnk - c:\users\Leon\AppData\Local\Temp\Rar$EXa0.316\Taskbar Eliminator\Taskbar Eliminator.exe "c:\users\Leon\AppData\Local\Temp\Rar$EXa0.316\Taskbar Eliminator\Taskbar Eliminator.exe"
HKLM_Wow6432Node-ActiveSetup-{2D46B6DC-2207-486B-B523-A557E6D54B47} - start
Toolbar-Locked - (no file)
.
.
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_9_900_170_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_9_900_170_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_9_900_170_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_9_900_170_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_9_900_170.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.11"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_9_900_170.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_9_900_170.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_9_900_170.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee]
"SymbolicLinkValue"=hex(6):5c,00,72,00,65,00,67,00,69,00,73,00,74,00,72,00,79,
   00,5c,00,6d,00,61,00,63,00,68,00,69,00,6e,00,65,00,5c,00,53,00,6f,00,66,00,\
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Zeit der Fertigstellung: 2013-12-29  10:57:05
ComboFix-quarantined-files.txt  2013-12-29 09:57
.
Vor Suchlauf: 15 Verzeichnis(se), 16.348.618.752 Bytes frei
Nach Suchlauf: 20 Verzeichnis(se), 16.185.851.904 Bytes frei
.
- - End Of File - - E32A61B8F7177AABD07CB2EED32EC9AF
Viele Grüße
__________________
Alt 30.12.2013, 04:07   #4
schrauber
/// the machine
/// TB-Ausbilder
 
Skype Virus - Standard

Skype Virus


Downloade Dir bitte Malwarebytes Anti-Malware
  • Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
  • Starte Malwarebytes' Anti-Malware (MBAM).
  • Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
  • Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
  • Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
  • Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
  • Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
  • Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.


Downloade Dir bitte AdwCleaner Logo Icon AdwCleaner auf deinen Desktop.
  • Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
  • Starte die AdwCleaner.exe mit einem Doppelklick.
  • Stimme den Nutzungsbedingungen zu.
  • Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
    • "Tracing" Schlüssel löschen
    • Winsock Einstellungen zurücksetzen
    • Proxy Einstellungen zurücksetzen
    • Internet Explorer Richtlinien zurücksetzen
    • Chrome Richtlinien zurücksetzen
    • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
  • Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
  • Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
  • Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
  • Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

  • Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
  • Drücke eine beliebige Taste, um das Tool zu starten.
  • Je nach System kann der Scan eine Weile dauern.
  • Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
  • Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.


und ein frisches FRST log bitte.
__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Alt 30.12.2013, 13:56   #5
Liongamer1
 
Skype Virus - Standard

Skype Virus


Hallo schrauber,

Bei Malwarebytes Anti-Malware habe ich Quick-Scan ausgewählt. Ich hoffe das war richtig.
Hier nun die Logs.

Malwarebytes Anti-Malware
Code:
ATTFilter
Malwarebytes Anti-Malware 1.75.0.1300
www.malwarebytes.org

Datenbank Version: v2013.12.30.02

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 11.0.9600.16476
Leon :: LEON-PC [Administrator]

30.12.2013 10:09:13
mbam-log-2013-12-30 (10-09-13).txt

Art des Suchlaufs: Quick-Scan
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 221196
Laufzeit: 6 Minute(n), 14 Sekunde(n)

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung: 3
HKCU\SOFTWARE\Microsoft\Internet Explorer\Main|Start Page (PUP.Optional.HelperBar.A) -> Bösartig: (hxxp://feed.helperbar.com/?publisher=YahooOC&dpid=YahooOC&co=DE&userid=836743ac-2a73-484c-9a82-2d349f20a027&searchtype=hp&fr=linkury-tb&installDate=22/06/2013&type=hp1000) Gut: (hxxp://www.google.com) -> Erfolgreich ersetzt und in Quarantäne gestellt.
HKCU\SOFTWARE\Microsoft\Internet Explorer\Search|Default_Search_URL (PUP.Optional.HelperBar.A) -> Bösartig: (hxxp://feed.helperbar.com/?publisher=YahooOC&dpid=YahooOC&co=DE&userid=836743ac-2a73-484c-9a82-2d349f20a027&searchtype=ds&p={searchTerms}&fr=linkury-tb&installDate=22/06/2013&type=hp1000) Gut: (hxxp://www.google.com) -> Erfolgreich ersetzt und in Quarantäne gestellt.
HKCU\SOFTWARE\Microsoft\Internet Explorer\Search|SearchAssistant (PUP.Optional.HelperBar.A) -> Bösartig: (hxxp://feed.helperbar.com/?publisher=YahooOC&dpid=YahooOC&co=DE&userid=836743ac-2a73-484c-9a82-2d349f20a027&searchtype=ds&p={searchTerms}&fr=linkury-tb&installDate=22/06/2013&type=hp1000) Gut: (hxxp://www.google.com) -> Erfolgreich ersetzt und in Quarantäne gestellt.

Infizierte Verzeichnisse: 2
C:\Users\Leon\AppData\Roaming\OpenCandy (PUP.Optional.OpenCandy) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Leon\AppData\Roaming\OpenCandy\95EEF0AF16C4442091304E6E267226E0 (PUP.Optional.OpenCandy) -> Erfolgreich gelöscht und in Quarantäne gestellt.

Infizierte Dateien: 6
C:\Users\Leon\Downloads\CPU Z - CHIP-Downloader.exe (PUP.Optional.ChipXonio) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Leon\Downloads\Notepad - CHIP-Downloader.exe (PUP.Optional.ChipXonio) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Leon\AppData\Roaming\OpenCandy\95EEF0AF16C4442091304E6E267226E0\4649.ico (PUP.Optional.OpenCandy) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Leon\AppData\Roaming\OpenCandy\95EEF0AF16C4442091304E6E267226E0\EBB77268-338F-4C6A-8590-AD88FED26F4A (PUP.Optional.OpenCandy) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Leon\AppData\Roaming\OpenCandy\95EEF0AF16C4442091304E6E267226E0\Installer.exe (PUP.Optional.OpenCandy) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Leon\AppData\Roaming\OpenCandy\95EEF0AF16C4442091304E6E267226E0\OCBrowserHelper_1.0.6.128.exe (PUP.Optional.OpenCandy) -> Erfolgreich gelöscht und in Quarantäne gestellt.

(Ende)
AdwCleaner

Code:
ATTFilter
# AdwCleaner v3.016 - Bericht erstellt am 30/12/2013 um 10:23:27
# Aktualisiert 23/12/2013 von Xplode
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)
# Benutzername : Leon - LEON-PC
# Gestartet von : C:\Users\Leon\Desktop\adwcleaner.exe
# Option : Löschen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****

Ordner Gelöscht : C:\ProgramData\simplitec
Ordner Gelöscht : C:\Users\Leon\AppData\Roaming\simplitec
Datei Gelöscht : C:\Users\Leon\AppData\Roaming\Mozilla\Firefox\Profiles\ri8t50b8.default\searchplugins\Web Search.xml

***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****

Schlüssel Gelöscht : HKLM\SOFTWARE\Google\Chrome\Extensions\hbcennhacfaagdopikcegfcobcadeocj
Schlüssel Gelöscht : HKLM\SOFTWARE\Google\Chrome\Extensions\icdlfehblmklkikfigmjhbmmpmkmpooj
Schlüssel Gelöscht : HKLM\SOFTWARE\Google\Chrome\Extensions\mhkaekfpcppmmioggniknbnbdbcigpkk
Schlüssel Gelöscht : HKLM\SOFTWARE\Google\Chrome\Extensions\pfndaklgolladniicklehhancnlgocpp
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\askpartnercobrandingtool_rasapi32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\askpartnercobrandingtool_rasmancs
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\AskPIP_FF__RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\AskPIP_FF__RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\AskSLib_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\AskSLib_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\au__rasapi32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\au__rasmancs
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\smartbar_rasapi32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\smartbar_rasmancs
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\TaskScheduler_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\TaskScheduler_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\FSX - McDonnell Douglas MD-11F UPS_is1
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_for_windows-live-movie-maker_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_for_windows-live-movie-maker_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{0A18A436-2A7A-49F3-A488-30538A2F6323}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{007EFBDF-8A5D-4930-97CC-A4B437CBA777}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{006EE092-9658-4FD6-BD8E-A21A348E59F5}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{006EE092-9658-4FD6-BD8E-A21A348E59F5}
Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{AE07101B-46D4-4A98-AF68-0333EA26E113}]
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Wert Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{AE07101B-46D4-4A98-AF68-0333EA26E113}]
Schlüssel Gelöscht : HKCU\Software\OCS

***** [ Browser ] *****

-\\ Internet Explorer v11.0.9600.16428

Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\SearchUrl [Default]
Einstellung Wiederhergestellt : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchUrl [Default]

-\\ Mozilla Firefox v22.0 (de)

[ Datei : C:\Users\Leon\AppData\Roaming\Mozilla\Firefox\Profiles\ri8t50b8.default\prefs.js ]

Zeile gelöscht : user_pref("browser.startup.homepage", "hxxp://feed.helperbar.com/?publisher=YahooOC&dpid=YahooOC&co=DE&userid=836743ac-2a73-484c-9a82-2d349f20a027&searchtype=hp&fr=linkury-tb&installDate=22/06/2013&ty[...]
Zeile gelöscht : user_pref("extensions.helperbar.Country", "Germany");
Zeile gelöscht : user_pref("extensions.helperbar.DockingPositionDown", false);
Zeile gelöscht : user_pref("extensions.helperbar.LastHiddenTime", 22865426);
Zeile gelöscht : user_pref("extensions.helperbar.SmartbarDisabled", true);
Zeile gelöscht : user_pref("extensions.helperbar.SmartbarStateMinimaized", false);
Zeile gelöscht : user_pref("extensions.helperbar.UserID", "ab5c490b-96fb-43af-b600-8a906f84188a");
Zeile gelöscht : user_pref("extensions.helperbar.Visibility", true);
Zeile gelöscht : user_pref("extensions.helperbar.countryiso", "de");
Zeile gelöscht : user_pref("extensions.helperbar.downloadprovider", "yahoooc");
Zeile gelöscht : user_pref("extensions.helperbar.installationid", "836743ac-2a73-484c-9a82-2d349f20a027");
Zeile gelöscht : user_pref("extensions.helperbar.installdate", "22/06/2013");
Zeile gelöscht : user_pref("extensions.helperbar.publisher", "yahoooc");
Zeile gelöscht : user_pref("extensions.helperbar.type", "hp1000");

-\\ Google Chrome v31.0.1650.63

[ Datei : C:\Users\Leon\AppData\Local\Google\Chrome\User Data\Default\preferences ]

Gelöscht : homepage

*************************

AdwCleaner[R0].txt - [5800 octets] - [30/12/2013 10:22:11]
AdwCleaner[S0].txt - [5147 octets] - [30/12/2013 10:23:27]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [5207 octets] ##########
Junkware Removal Tool

Code:
ATTFilter
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.0.8 (11.05.2013:1)
OS: Windows 7 Home Premium x64
Ran by Leon on 30.12.2013 at 10:26:14,82
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-4088192312-551125036-4071077776-1001\Software\sweetim



~~~ Files



~~~ Folders

Successfully deleted: [Folder] "C:\Users\Leon\appdata\local\apn"
Successfully deleted: [Folder] "C:\Windows\syswow64\ai_recyclebin"



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 30.12.2013 at 10:31:22,28
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
und hier das neue FRST log.


FRST Logfile:

FRST Logfile:
Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 28-12-2013 01
Ran by Leon (administrator) on LEON-PC on 30-12-2013 10:49:56
Running from C:\Users\Leon\Desktop\Virus
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(AMD) C:\Windows\System32\atiesrxx.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\Registration\GregHSRW.exe
(Nero AG) C:\Program Files (x86)\HTC\HTC Sync Manager\HSMServiceEntry.exe
() C:\Program Files (x86)\HTC\HTC Sync Manager\HTC Sync\adb.exe
() C:\Program Files\ShrewSoft\VPN Client\iked.exe
() C:\Program Files\ShrewSoft\VPN Client\ipsecd.exe
(McAfee, Inc.) C:\Program Files (x86)\McAfee\SiteAdvisor\mcsacore.exe
() C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe
() C:\Program Files (x86)\Cyberlink\Shared files\RichVideo.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Egis Technology Inc.) C:\Program Files (x86)\EgisTec MyWinLocker\x86\mwlDaemon.exe
(Microsoft Corporation) C:\Program Files\Microsoft IntelliPoint\ipoint.exe
(Spotify Ltd) C:\Users\Leon\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
(TomTom) C:\Program Files (x86)\TomTom HOME 2\TomTomHOMERunner.exe
(Egis Technology Inc.) C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Razer Inc.) C:\Program Files (x86)\Razer\Razer Game Booster\RzKLService.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Skype Technologies) C:\Program Files (x86)\Skype\Updater\Updater.exe
(TomTom) C:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe
(Acer Group) C:\Program Files\Acer\Acer Updater\UpdaterService.exe
() C:\OEM\USBDECTION\USBS3S4Detection.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Microsoft Corporation) C:\Program Files\Microsoft IntelliPoint\dpupdchk.exe
(Egis Technology Inc.) C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [9642528 2010-02-24] (Realtek Semiconductor)
HKLM\...\Run: [mwlDaemon] - C:\Program Files (x86)\EgisTec MyWinLocker\x86\mwlDaemon.exe [349552 2010-02-01] (Egis Technology Inc.)
HKLM\...\Run: [IntelTBRunOnce] - C:\Program Files\Intel\TurboBoost\RunTBGadgetOnce.vbs [4123 2012-05-30] ()
HKLM\...\Run: [IntelliPoint] - C:\Program Files\Microsoft IntelliPoint\ipoint.exe [2417032 2011-08-01] (Microsoft Corporation)
HKLM-x32\...\Run: [MDS_Menu] - C:\Program Files (x86)\Acer Arcade Deluxe\MediaShow Espresso\MUITransfer\MUIStartMenu.exe [222504 2009-05-19] (CyberLink Corp.)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [EgisUpdate] - C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe [201512 2009-12-25] (Egis Technology Inc.)
HKLM-x32\...\Run: [EgisTecPMMUpdate] - C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe [401192 2009-12-25] (Egis Technology Inc.)
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-05-15] (Apple Inc.)
HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [684600 2013-12-17] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [766208 2013-11-07] (Advanced Micro Devices, Inc.)
HKCU\...\Run: [Spotify Web Helper] - C:\Users\Leon\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1168896 2013-12-07] (Spotify Ltd)
HKCU\...\Run: [TomTomHOME.exe] - C:\Program Files (x86)\TomTom HOME 2\TomTomHOMERunner.exe [248208 2013-07-02] (TomTom)
HKU\Default\...\RunOnce: [ScrSav] - C:\Program Files (x86)\Acer\Screensaver\run_Acer.exe [154144 2010-01-15] ()

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = 
SearchScopes: HKCU - {DCD31D43-590A-4012-83ED-8432C6D6DBD5} URL = hxxp://de.search.yahoo.com/search?fr=mcafee&p={SearchTerms}
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: McAfee SiteAdvisor BHO - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - C:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: McAfee SiteAdvisor BHO - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - C:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - C:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
Toolbar: HKLM-x32 - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - C:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
Toolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  No File
Handler: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
Handler-x32: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
Handler-x32: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{9155BD02-8D91-4AC4-A33F-FD4BE0F6B02D}: [NameServer]146.140.221.1,192.44.32.31

FireFox:
========
FF ProfilePath: C:\Users\Leon\AppData\Roaming\Mozilla\Firefox\Profiles\ri8t50b8.default
FF NewTab: about:blank
FF DefaultSearchEngine: Sichere Suche
FF SearchEngineOrder.1: Sichere Suche
FF Keyword.URL: hxxp://de.search.yahoo.com/search?fr=mcafee&p=
FF SelectedSearchEngine: Sichere Suche
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.0.6 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @java.com/DTPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @mcafee.com/SAFFPlugin - C:\Program Files (x86)\McAfee\SiteAdvisor\npmcffplg32.dll (McAfee, Inc.)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3508.0205 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\McSiteAdvisor.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF HKLM-x32\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files (x86)\McAfee\SiteAdvisor
FF Extension: McAfee SiteAdvisor - C:\Program Files (x86)\McAfee\SiteAdvisor

Chrome: 
=======
CHR HomePage: hxxp://www.google.com
CHR RestoreOnStartup: "hxxp://www.youtube.com/?hl=de&gl=DE"
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\pdf.dll ()
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll No File
CHR Plugin: (Java(TM) Platform SE 7 U21) - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
CHR Plugin: (McAfee SiteAdvisor) - C:\Program Files (x86)\McAfee\SiteAdvisor\npmcffplg32.dll (McAfee, Inc.)
CHR Plugin: (Silverlight Plug-In) - C:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrl.dll No File
CHR Plugin: (Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (iTunes Application Detector) - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_202.dll No File
CHR Plugin: (Java Deployment Toolkit 7.0.210.11) - C:\Windows\SysWOW64\npDeployJava1.dll No File
CHR Extension: (GeoGebra) - C:\Users\Leon\AppData\Local\Google\Chrome\User Data\Default\Extensions\bnbaboaihhkjoaolfnfoablhllahjnee\4.4.0.1_0
CHR Extension: (SiteAdvisor) - C:\Users\Leon\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho\3.6.4.1311_0
CHR Extension: (Google Wallet) - C:\Users\Leon\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_0
CHR HKLM-x32\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - C:\Program Files (x86)\McAfee\SiteAdvisor\McChPlg.crx

==================== Services (Whitelisted) =================

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440376 2013-12-17] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440376 2013-11-19] (Avira Operations GmbH & Co. KG)
R2 HTCMonitorService; C:\Program Files (x86)\HTC\HTC Sync Manager\HSMServiceEntry.exe [87368 2013-01-29] (Nero AG)
R2 iked; C:\Program Files\ShrewSoft\VPN Client\iked.exe [1127736 2013-07-01] ()
R2 ipsecd; C:\Program Files\ShrewSoft\VPN Client\ipsecd.exe [810808 2013-07-01] ()
R2 McAfee SiteAdvisor Service; C:\Program Files (x86)\McAfee\SiteAdvisor\mcsacore.exe [121616 2013-11-07] (McAfee, Inc.)
S3 MWLService; C:\Program Files (x86)\EgisTec MyWinLocker\x86\MWLService.exe [305520 2010-02-01] (Egis Technology Inc.)
R2 PassThru Service; C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe [167424 2012-12-07] ()
R2 RichVideo; C:\Program Files (x86)\Cyberlink\Shared files\RichVideo.exe [244904 2010-02-03] ()
R2 RzKLService; C:\Program Files (x86)\Razer\Razer Game Booster\RzKLService.exe [105448 2013-11-22] (Razer Inc.)
R2 USBS3S4Detection; C:\OEM\USBDECTION\USBS3S4Detection.exe [76320 2009-12-09] ()

==================== Drivers (Whitelisted) ====================

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108440 2013-12-17] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131576 2013-12-17] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-10-01] (Avira Operations GmbH & Co. KG)
U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
S3 catchme; \??\C:\ComboFix\catchme.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-12-30 10:31 - 2013-12-30 10:31 - 00000949 _____ C:\Users\Leon\Desktop\JRT.txt
2013-12-30 10:21 - 2013-12-30 10:23 - 00000000 ____D C:\AdwCleaner
2013-12-30 10:20 - 2013-12-30 10:20 - 01233962 _____ C:\Users\Leon\Desktop\adwcleaner.exe
2013-12-30 10:20 - 2013-12-30 10:20 - 01034531 _____ (Thisisu) C:\Users\Leon\Desktop\JRT.exe
2013-12-30 10:07 - 2013-12-30 10:07 - 00000000 ____D C:\Users\Leon\AppData\Roaming\Malwarebytes
2013-12-30 10:06 - 2013-12-30 10:06 - 00001113 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-12-30 10:06 - 2013-12-30 10:06 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-12-30 10:06 - 2013-12-30 10:06 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-12-30 10:06 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2013-12-30 10:01 - 2013-12-30 10:01 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Leon\Desktop\mbam-setup-1.75.0.1300.exe
2013-12-29 20:46 - 2013-12-29 20:46 - 00116489 _____ C:\Users\Leon\AppData\Local\recently-used.xbel
2013-12-29 19:16 - 2013-12-29 19:16 - 02347384 _____ (ESET) C:\Users\Leon\Downloads\esetsmartinstaller_enu.exe
2013-12-29 11:00 - 2013-12-30 10:17 - 00002992 _____ C:\Windows\PFRO.log
2013-12-29 10:57 - 2013-12-29 10:57 - 00035352 _____ C:\ComboFix.txt
2013-12-29 10:47 - 2013-12-29 10:57 - 00000000 ____D C:\Qoobox
2013-12-29 10:47 - 2013-12-29 10:56 - 00000000 ____D C:\Windows\erdnt
2013-12-29 10:47 - 2011-06-26 07:45 - 00256000 _____ C:\Windows\PEV.exe
2013-12-29 10:47 - 2010-11-07 18:20 - 00208896 _____ C:\Windows\MBR.exe
2013-12-29 10:47 - 2009-04-20 05:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2013-12-29 10:47 - 2000-08-31 01:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2013-12-29 10:47 - 2000-08-31 01:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2013-12-29 10:47 - 2000-08-31 01:00 - 00098816 _____ C:\Windows\sed.exe
2013-12-29 10:47 - 2000-08-31 01:00 - 00080412 _____ C:\Windows\grep.exe
2013-12-29 10:47 - 2000-08-31 01:00 - 00068096 _____ C:\Windows\zip.exe
2013-12-28 22:58 - 2013-12-30 10:47 - 00001753 _____ C:\Windows\setupact.log
2013-12-28 22:58 - 2013-12-28 22:58 - 00274840 _____ C:\Windows\Minidump\122813-23821-01.dmp
2013-12-28 22:58 - 2013-12-28 22:58 - 00000000 _____ C:\Windows\setuperr.log
2013-12-28 22:47 - 2013-12-28 22:47 - 00000000 ____D C:\FRST
2013-12-28 22:45 - 2013-12-30 10:49 - 00000000 ____D C:\Users\Leon\Desktop\Virus
2013-12-28 22:45 - 2013-12-28 22:45 - 00000000 _____ C:\Users\Leon\defogger_reenable
2013-12-28 21:50 - 2013-12-28 21:50 - 00000000 ____D C:\ProgramData\Firefly Studios
2013-12-28 21:36 - 2013-12-28 21:54 - 00000000 ____D C:\Users\Leon\Documents\Stronghold 2
2013-12-28 21:36 - 2013-12-28 21:51 - 00002158 _____ C:\Users\Public\Desktop\Stronghold 2 spielen.lnk
2013-12-28 21:36 - 2013-12-28 21:36 - 00098304 _____ (Sony DADC Austria AG.) C:\Windows\SysWOW64\CmdLineExt.dll
2013-12-28 21:36 - 2013-12-28 21:36 - 00000000 ____D C:\Users\Leon\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2013-12-28 21:31 - 2013-12-28 21:31 - 00000000 ____D C:\Program Files (x86)\Firefly Studios
2013-12-27 22:53 - 2013-12-27 22:53 - 02344450 _____ C:\Users\Leon\Downloads\omsi_2_docs (1).zip
2013-12-27 13:32 - 2013-12-27 13:32 - 00000222 _____ C:\Users\Leon\Desktop\OMSI 2.url
2013-12-27 12:43 - 2013-12-27 12:43 - 00000000 ____D C:\Users\Leon\AppData\Local\Razer_Inc
2013-12-27 12:42 - 2013-12-27 12:42 - 00000000 ____D C:\Users\Leon\Documents\Razer
2013-12-27 12:41 - 2013-12-27 12:41 - 00000000 ____D C:\Users\Leon\AppData\Local\Razer
2013-12-27 12:40 - 2013-12-27 12:40 - 00002129 _____ C:\Users\Public\Desktop\Razer Game Booster.lnk
2013-12-27 12:40 - 2013-12-27 12:40 - 00000000 ____D C:\ProgramData\Razer
2013-12-27 12:40 - 2013-12-27 12:40 - 00000000 ____D C:\Program Files (x86)\Razer
2013-12-27 12:39 - 2013-12-27 12:39 - 41363400 _____ (Razer Inc.                                                  ) C:\Users\Leon\Downloads\RazerGameBoosterSetup_4.1.59.0_1.exe
2013-12-27 12:33 - 2013-12-27 12:34 - 82548634 _____ C:\Users\Leon\Downloads\MAN_Lions_City_DD.pl1.rar
2013-12-26 21:50 - 2013-12-26 21:50 - 00000000 ____D C:\Program Files (x86)\Aerosoft
2013-12-26 21:46 - 2013-12-26 21:50 - 00000954 _____ C:\Users\Public\Desktop\Aerosoft Launcher.lnk
2013-12-25 12:47 - 2013-12-25 12:47 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_point64_01009.Wdf
2013-12-25 12:46 - 2013-12-25 12:46 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_dc3d_01009.Wdf
2013-12-25 12:46 - 2013-12-25 12:46 - 00000000 ____D C:\Program Files\Microsoft IntelliPoint
2013-12-25 12:43 - 2013-12-25 12:47 - 00003040 _____ C:\Windows\System32\Tasks\Microsoft_Hardware_Launch_IPoint_exe
2013-12-25 12:43 - 2013-12-25 12:43 - 00003118 _____ C:\Windows\System32\Tasks\Microsoft_Hardware_Launch_mousekeyboardcenter_exe
2013-12-25 12:43 - 2013-12-25 12:43 - 00003090 _____ C:\Windows\System32\Tasks\Microsoft_Hardware_Launch_itype_exe
2013-12-25 12:43 - 2013-12-25 12:43 - 00003062 _____ C:\Windows\System32\Tasks\Microsoft_MKC_Logon_Task_ipoint.exe
2013-12-25 12:43 - 2013-12-25 12:43 - 00003060 _____ C:\Windows\System32\Tasks\Microsoft_MKC_Logon_Task_itype.exe
2013-12-25 12:43 - 2013-12-25 12:43 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_point64_01011.Wdf
2013-12-25 12:43 - 2013-12-25 12:43 - 00000000 ____D C:\Program Files\Microsoft Mouse and Keyboard Center
2013-12-25 12:41 - 2013-12-25 12:41 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_dc3d_01011.Wdf
2013-12-25 12:40 - 2013-12-25 12:40 - 22361472 _____ (Microsoft Corporation) C:\Users\Leon\Downloads\IPx64_1031_8.20.468.0.exe
2013-12-25 12:40 - 2013-12-25 12:40 - 16249216 _____ (Microsoft Corporation) C:\Users\Leon\Downloads\ITPx64_1031_8.20.469.0.exe
2013-12-24 15:26 - 2013-12-24 15:26 - 00000000 ____D C:\Users\Leon\Downloads\Mercedes-Benz-O530-Citaro
2013-12-24 15:16 - 2013-12-24 15:17 - 132605071 _____ C:\Users\Leon\Downloads\Mercedes-Benz-O530-Citaro.zip
2013-12-24 15:12 - 2013-12-24 15:13 - 73578015 _____ C:\Users\Leon\Downloads\Omsi2.ru_Mercedes_o530G.7z
2013-12-23 22:14 - 2013-12-23 22:15 - 00000000 ____D C:\Users\Leon\Downloads\Santasleigh
2013-12-23 22:13 - 2013-12-23 22:13 - 05923085 _____ C:\Users\Leon\Downloads\Santasleigh.zip
2013-12-23 22:08 - 2013-12-23 22:08 - 09339325 _____ C:\Users\Leon\Downloads\b738ber-christmas2012.zip
2013-12-23 22:08 - 2013-12-23 22:08 - 06914915 _____ C:\Users\Leon\Downloads\texture_ber_d_abmc_christmas__special.zip
2013-12-23 22:08 - 2013-12-23 22:08 - 00000000 ____D C:\Users\Leon\Downloads\texture_ber_d_abmc_christmas__special
2013-12-23 22:03 - 2013-12-23 22:03 - 00000000 ____D C:\Users\Leon\Downloads\b738xber-christmas2012
2013-12-23 22:02 - 2013-12-23 22:02 - 08612078 _____ C:\Users\Leon\Downloads\b738xber-christmas2012.zip
2013-12-23 21:47 - 2013-12-23 21:47 - 00000000 ____D C:\Users\Leon\Downloads\b7378abflyinghomeforchristmasd-abmcx
2013-12-23 21:46 - 2013-12-23 21:46 - 10739193 _____ C:\Users\Leon\Downloads\b7378abflyinghomeforchristmasd-abmcx.zip
2013-12-23 21:44 - 2013-12-23 21:44 - 14799019 _____ C:\Users\Leon\Downloads\airberlin2013.zip
2013-12-23 21:41 - 2013-12-23 21:41 - 13024069 _____ C:\Users\Leon\Downloads\FSX Air Air Berlin Xmas2013.zip
2013-12-23 21:28 - 2013-12-23 21:28 - 00000000 ____D C:\Users\Leon\Downloads\AS_AIRBUS-X-EXTENDED_FSX_PREPAR3D_PAINTKITS
2013-12-23 21:27 - 2013-12-23 21:27 - 20938885 _____ C:\Users\Leon\Downloads\airberlin_B737-800_D-ABMS_Flying_home_for_Christmas_cs_2013.rar
2013-12-23 21:23 - 2013-12-23 21:27 - 935309240 _____ C:\Users\Leon\Downloads\AS_AIRBUS-X-EXTENDED_FSX_PREPAR3D (2).zip
2013-12-23 21:22 - 2013-12-23 21:26 - 607528186 _____ C:\Users\Leon\Downloads\AS_AIRBUS-X-EXTENDED_FSX_PREPAR3D_PAINTKITS.zip
2013-12-23 19:31 - 2013-12-23 19:34 - 525640200 _____ C:\Users\Leon\Downloads\EuroTruckSimulator2_1_8_2_3_patch (1).exe
2013-12-23 18:58 - 2013-12-23 18:58 - 07992081 _____ C:\Users\Leon\Downloads\machinimasound_com_fire_within (1).zip
2013-12-23 18:58 - 2013-12-23 18:58 - 06757926 _____ C:\Users\Leon\Downloads\machinimasound_com_infected_euphoria (1).zip
2013-12-23 18:55 - 2013-12-23 18:55 - 00000000 ____D C:\Users\Leon\Downloads\machinimasound_com_the_arcade
2013-12-23 18:53 - 2013-12-23 18:54 - 08341944 _____ C:\Users\Leon\Downloads\machinimasound_com_the_arcade.zip
2013-12-23 18:45 - 2013-12-23 18:45 - 00000000 ____D C:\Users\Leon\Downloads\machinimasound_com_olympos
2013-12-23 18:45 - 2013-12-23 18:45 - 00000000 ____D C:\Users\Leon\Downloads\machinimasound_com_incursion (1)
2013-12-23 18:45 - 2013-12-23 18:45 - 00000000 ____D C:\Users\Leon\Downloads\machinimasound_com_escape_from_the_temple
2013-12-23 18:44 - 2013-12-23 18:44 - 07851783 _____ C:\Users\Leon\Downloads\machinimasound_com_incursion (1).zip
2013-12-23 18:44 - 2013-12-23 18:44 - 06933318 _____ C:\Users\Leon\Downloads\machinimasound_com_olympos.zip
2013-12-23 18:43 - 2013-12-23 18:44 - 09742583 _____ C:\Users\Leon\Downloads\machinimasound_com_escape_from_the_temple.zip
2013-12-23 10:48 - 2013-12-23 10:48 - 00000000 ____D C:\Windows\F5C9BE9A04C34A728CD0BB67C722D608.TMP
2013-12-23 10:47 - 2013-12-23 10:48 - 251738472 _____ C:\Users\Leon\Downloads\camtasia.exe
2013-12-23 10:39 - 2013-12-23 10:39 - 02209528 _____ C:\Users\Leon\Downloads\VirtualDub-1.10.4-AMD64.zip
2013-12-23 10:39 - 2013-12-23 10:39 - 02209528 _____ C:\Users\Leon\Downloads\VirtualDub-1.10.4-AMD64 (1).zip
2013-12-22 17:29 - 2013-12-22 17:29 - 05655084 _____ C:\Users\Leon\Downloads\Boeing 757-200 American Airlines.zip
2013-12-22 17:17 - 2013-12-22 17:17 - 23167859 _____ C:\Users\Leon\Downloads\Airbus A340-300 Basepack.zip
2013-12-22 17:17 - 2013-12-22 17:17 - 02767209 _____ C:\Users\Leon\Downloads\Airbus A340-300 Air France.zip
2013-12-22 17:16 - 2013-12-22 17:16 - 02215563 _____ (Xudeva Irribarra                                            ) C:\Users\Leon\Downloads\Boeing 747-8i KLM v1.00.exe
2013-12-22 17:05 - 2013-12-22 17:05 - 00000000 ____D C:\Users\Leon\Downloads\AS_CARENADO-PA32-SARATOGA-SP_FSX
2013-12-22 17:04 - 2013-12-22 17:04 - 93903080 _____ C:\Users\Leon\Downloads\AS_CARENADO-PA32-SARATOGA-SP_FSX.zip
2013-12-21 22:39 - 2013-12-21 22:40 - 131000436 _____ C:\Users\Leon\Downloads\AS_MEGA-AIRPORT-VIENNA-X_FSX.zip
2013-12-21 22:39 - 2013-12-21 22:40 - 131000436 _____ C:\Users\Leon\Downloads\AS_MEGA-AIRPORT-VIENNA-X_FSX (1).zip
2013-12-21 22:34 - 2013-12-21 22:37 - 00000000 ____D C:\Users\Leon\Downloads\AS_TWIN-OTTER-X-EXTENDED_FSX_P3D (2)
2013-12-21 22:25 - 2013-12-21 22:28 - 567687781 _____ C:\Users\Leon\Downloads\AS_TWIN-OTTER-X-EXTENDED_FSX_P3D (2).zip
2013-12-21 22:23 - 2013-12-21 22:25 - 494532720 _____ C:\Users\Leon\Downloads\mjc8-400-Pilot-1_008-inst.exe
2013-12-21 22:19 - 2013-12-21 22:21 - 343828771 _____ C:\Users\Leon\Downloads\FlyTampa_Vienna_FSX_Update_25.exe
2013-12-20 19:39 - 2013-12-27 23:13 - 00000000 ___RD C:\Users\Leon\Documents\MAGIX
2013-12-20 16:25 - 2013-12-20 16:25 - 02849144 _____ (MAGIX AG) C:\Users\Leon\Downloads\trial_videodeluxe2014_dlm.exe
2013-12-18 16:59 - 2013-12-18 17:09 - 28341646 _____ C:\Users\Leon\Downloads\JAGUAR_V2_ENTPACKEN.rar
2013-12-17 16:46 - 2013-12-17 16:54 - 00026022 _____ C:\Users\Leon\Documents\Lesetagebuch.odt
2013-12-17 14:08 - 2013-12-17 16:56 - 00018270 _____ C:\Users\Leon\Documents\Inhaltsverzeichniss Deutsch.odt
2013-12-17 13:40 - 2013-12-17 13:40 - 03624249 _____ C:\Users\Leon\Downloads\Global_ATC_demo.zip
2013-12-12 18:11 - 2013-12-13 15:54 - 00000000 ____D C:\Program Files (x86)\Mozilla Thunderbird
2013-12-11 18:19 - 2010-06-02 04:55 - 00239960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_7.dll
2013-12-11 18:19 - 2010-06-02 04:55 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_7.dll
2013-12-11 18:19 - 2010-05-26 11:41 - 01907552 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_43.dll
2013-12-11 18:19 - 2010-05-26 11:41 - 01868128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_43.dll
2013-12-11 18:19 - 2010-05-26 11:41 - 00511328 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_43.dll
2013-12-11 18:19 - 2010-05-26 11:41 - 00470880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_43.dll
2013-12-11 18:19 - 2010-05-26 11:41 - 00276832 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_43.dll
2013-12-11 18:19 - 2010-05-26 11:41 - 00248672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_43.dll
2013-12-11 18:19 - 2010-02-04 10:01 - 00530776 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_6.dll
2013-12-11 18:19 - 2010-02-04 10:01 - 00528216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_6.dll
2013-12-11 18:19 - 2010-02-04 10:01 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_6.dll
2013-12-11 18:19 - 2010-02-04 10:01 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_6.dll
2013-12-11 18:19 - 2010-02-04 10:01 - 00078680 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_4.dll
2013-12-11 18:19 - 2010-02-04 10:01 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_4.dll
2013-12-11 18:19 - 2009-09-04 17:44 - 00517960 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_5.dll
2013-12-11 18:19 - 2009-09-04 17:44 - 00515416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_5.dll
2013-12-11 18:19 - 2009-09-04 17:44 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_5.dll
2013-12-11 18:19 - 2009-09-04 17:44 - 00176968 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_5.dll
2013-12-11 18:19 - 2009-09-04 17:29 - 05554512 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_42.dll
2013-12-11 18:19 - 2009-09-04 17:29 - 05501792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_42.dll
2013-12-11 18:19 - 2009-09-04 17:29 - 02582888 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_42.dll
2013-12-11 18:19 - 2009-09-04 17:29 - 01974616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_42.dll
2013-12-11 18:19 - 2009-09-04 17:29 - 00285024 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_42.dll
2013-12-11 18:19 - 2009-09-04 17:29 - 00235344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_42.dll
2013-12-11 18:18 - 2009-09-04 17:44 - 00073544 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_3.dll
2013-12-11 18:18 - 2009-09-04 17:44 - 00069464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_3.dll
2013-12-11 18:18 - 2009-09-04 17:29 - 02475352 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_42.dll
2013-12-11 18:18 - 2009-09-04 17:29 - 01892184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_42.dll
2013-12-11 18:18 - 2009-09-04 17:29 - 00523088 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_42.dll
2013-12-11 18:18 - 2009-09-04 17:29 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_42.dll
2013-12-11 18:18 - 2009-03-16 14:18 - 00521560 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_4.dll
2013-12-11 18:18 - 2009-03-16 14:18 - 00517448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_4.dll
2013-12-11 18:18 - 2009-03-16 14:18 - 00235352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_4.dll
2013-12-11 18:18 - 2009-03-16 14:18 - 00174936 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_4.dll
2013-12-11 18:18 - 2009-03-16 14:18 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_6.dll
2013-12-11 18:18 - 2009-03-16 14:18 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_6.dll
2013-12-11 18:18 - 2009-03-09 15:27 - 05425496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_41.dll
2013-12-11 18:18 - 2009-03-09 15:27 - 04178264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_41.dll
2013-12-11 18:18 - 2009-03-09 15:27 - 02430312 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_41.dll
2013-12-11 18:18 - 2009-03-09 15:27 - 00520544 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_41.dll
2013-12-11 18:18 - 2008-10-27 10:04 - 00518480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_3.dll
2013-12-11 18:18 - 2008-10-27 10:04 - 00514384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_3.dll
2013-12-11 18:18 - 2008-10-27 10:04 - 00235856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_3.dll
2013-12-11 18:18 - 2008-10-27 10:04 - 00175440 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_3.dll
2013-12-11 18:18 - 2008-10-27 10:04 - 00074576 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_2.dll
2013-12-11 18:18 - 2008-10-27 10:04 - 00070992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_2.dll
2013-12-11 18:18 - 2008-10-27 10:04 - 00025936 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_5.dll
2013-12-11 18:18 - 2008-10-27 10:04 - 00023376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_5.dll
2013-12-11 18:18 - 2008-10-15 06:22 - 05631312 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_40.dll
2013-12-11 18:18 - 2008-10-15 06:22 - 04379984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_40.dll
2013-12-11 18:18 - 2008-10-15 06:22 - 02605920 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_40.dll
2013-12-11 18:18 - 2008-10-15 06:22 - 02036576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_40.dll
2013-12-11 18:18 - 2008-10-15 06:22 - 00519000 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_40.dll
2013-12-11 18:18 - 2008-10-15 06:22 - 00452440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_40.dll
2013-12-11 18:18 - 2008-07-31 10:41 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_2.dll
2013-12-11 18:18 - 2008-07-31 10:41 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_2.dll
2013-12-11 18:18 - 2008-07-31 10:41 - 00072200 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_1.dll
2013-12-11 18:18 - 2008-07-31 10:41 - 00068616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_1.dll
2013-12-11 18:18 - 2008-07-31 10:40 - 00513544 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_2.dll
2013-12-11 18:18 - 2008-07-31 10:40 - 00509448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_2.dll
2013-12-11 18:18 - 2008-07-10 11:01 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_39.dll
2013-12-11 18:18 - 2008-07-10 11:00 - 04992520 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_39.dll
2013-12-11 18:18 - 2008-07-10 11:00 - 03851784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_39.dll
2013-12-11 18:18 - 2008-07-10 11:00 - 01942552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_39.dll
2013-12-11 18:18 - 2008-07-10 11:00 - 01493528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_39.dll
2013-12-11 18:18 - 2008-07-10 11:00 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_39.dll
2013-12-11 18:18 - 2008-05-30 14:19 - 00511496 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_1.dll
2013-12-11 18:18 - 2008-05-30 14:19 - 00507400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_1.dll
2013-12-11 18:18 - 2008-05-30 14:18 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_1.dll
2013-12-11 18:18 - 2008-05-30 14:18 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_1.dll
2013-12-11 18:18 - 2008-05-30 14:17 - 00068104 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_0.dll
2013-12-11 18:18 - 2008-05-30 14:17 - 00065032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_0.dll
2013-12-11 18:18 - 2008-05-30 14:17 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_4.dll
2013-12-11 18:18 - 2008-05-30 14:16 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_4.dll
2013-12-11 18:18 - 2008-05-30 14:11 - 04991496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_38.dll
2013-12-11 18:18 - 2008-05-30 14:11 - 03850760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_38.dll
2013-12-11 18:18 - 2008-05-30 14:11 - 01941528 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_38.dll
2013-12-11 18:18 - 2008-05-30 14:11 - 01491992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_38.dll
2013-12-11 18:18 - 2008-05-30 14:11 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_38.dll
2013-12-11 18:18 - 2008-05-30 14:11 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_38.dll
2013-12-11 18:18 - 2008-03-05 16:04 - 00489480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_0.dll
2013-12-11 18:18 - 2008-03-05 16:03 - 00479752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_0.dll
2013-12-11 18:18 - 2008-03-05 16:03 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_0.dll
2013-12-11 18:18 - 2008-03-05 16:03 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_0.dll
2013-12-11 18:18 - 2008-03-05 16:00 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_3.dll
2013-12-11 18:18 - 2008-03-05 16:00 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_3.dll
2013-12-11 18:18 - 2008-03-05 15:56 - 04910088 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_37.dll
2013-12-11 18:18 - 2008-03-05 15:56 - 03786760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_37.dll
2013-12-11 18:18 - 2008-03-05 15:56 - 01860120 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_37.dll
2013-12-11 18:18 - 2008-03-05 15:56 - 01420824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_37.dll
2013-12-11 18:18 - 2008-02-05 23:07 - 00529424 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_37.dll
2013-12-11 18:18 - 2008-02-05 23:07 - 00462864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_37.dll
2013-12-11 18:18 - 2007-10-22 03:40 - 00411656 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_10.dll
2013-12-11 18:18 - 2007-10-22 03:39 - 00267272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_10.dll
2013-12-11 18:18 - 2007-10-22 03:37 - 00021000 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_2.dll
2013-12-11 18:18 - 2007-10-22 03:37 - 00017928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_2.dll
2013-12-11 18:18 - 2007-10-12 15:14 - 05081608 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_36.dll
2013-12-11 18:18 - 2007-10-12 15:14 - 03734536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_36.dll
2013-12-11 18:18 - 2007-10-12 15:14 - 02006552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_36.dll
2013-12-11 18:18 - 2007-10-12 15:14 - 01374232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_36.dll
2013-12-11 18:18 - 2007-10-02 09:56 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_36.dll
2013-12-11 18:18 - 2007-10-02 09:56 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_36.dll
2013-12-11 18:18 - 2007-07-20 00:57 - 00411496 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_9.dll
2013-12-11 18:18 - 2007-07-20 00:57 - 00267112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_9.dll
2013-12-11 18:18 - 2007-07-19 18:14 - 05073256 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_35.dll
2013-12-11 18:18 - 2007-07-19 18:14 - 03727720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_35.dll
2013-12-11 18:18 - 2007-07-19 18:14 - 01985904 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_35.dll
2013-12-11 18:18 - 2007-07-19 18:14 - 01358192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_35.dll
2013-12-11 18:18 - 2007-07-19 18:14 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_35.dll
2013-12-11 18:18 - 2007-07-19 18:14 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_35.dll
2013-12-11 18:18 - 2007-06-20 20:49 - 00409960 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_8.dll
2013-12-11 18:18 - 2007-06-20 20:46 - 00266088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_8.dll
2013-12-11 18:18 - 2007-05-16 16:45 - 04496232 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_34.dll
2013-12-11 18:18 - 2007-05-16 16:45 - 03497832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_34.dll
2013-12-11 18:18 - 2007-05-16 16:45 - 01401200 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_34.dll
2013-12-11 18:18 - 2007-05-16 16:45 - 01124720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_34.dll
2013-12-11 18:18 - 2007-05-16 16:45 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_34.dll
2013-12-11 18:18 - 2007-05-16 16:45 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_34.dll
2013-12-11 18:18 - 2007-04-04 18:55 - 00403304 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_7.dll
2013-12-11 18:18 - 2007-04-04 18:55 - 00261480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_7.dll
2013-12-11 18:18 - 2007-03-15 16:57 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_33.dll
2013-12-11 18:18 - 2007-03-15 16:57 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_33.dll
2013-12-11 18:18 - 2007-03-12 16:42 - 04494184 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_33.dll
2013-12-11 18:18 - 2007-03-12 16:42 - 03495784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_33.dll
2013-12-11 18:18 - 2007-03-12 16:42 - 01400176 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_33.dll
2013-12-11 18:18 - 2007-03-12 16:42 - 01123696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_33.dll
2013-12-11 18:18 - 2007-03-05 12:42 - 00017688 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_1.dll
2013-12-11 18:18 - 2007-03-05 12:42 - 00015128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_1.dll
2013-12-11 18:18 - 2007-01-24 15:27 - 00393576 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_6.dll
2013-12-11 18:18 - 2007-01-24 15:27 - 00255848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_6.dll
2013-12-11 18:18 - 2006-12-08 12:02 - 00251672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_5.dll
2013-12-11 18:18 - 2006-12-08 12:00 - 00390424 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_5.dll
2013-12-11 18:18 - 2006-11-29 13:06 - 04398360 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_32.dll
2013-12-11 18:18 - 2006-11-29 13:06 - 03426072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_32.dll
2013-12-11 18:18 - 2006-11-29 13:06 - 00469264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10.dll
2013-12-11 18:18 - 2006-11-29 13:06 - 00440080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10.dll
2013-12-11 18:18 - 2006-09-28 16:05 - 03977496 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_31.dll
2013-12-11 18:18 - 2006-09-28 16:05 - 02414360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_31.dll
2013-12-11 18:18 - 2006-09-28 16:05 - 00237848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_4.dll
2013-12-11 18:18 - 2006-09-28 16:04 - 00364824 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_4.dll
2013-12-11 18:18 - 2006-07-28 09:31 - 00083736 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_2.dll
2013-12-11 18:18 - 2006-07-28 09:30 - 00363288 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_3.dll
2013-12-11 18:18 - 2006-07-28 09:30 - 00236824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_3.dll
2013-12-11 18:18 - 2006-07-28 09:30 - 00062744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_2.dll
2013-12-11 18:18 - 2006-05-31 07:24 - 00230168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_2.dll
2013-12-11 18:18 - 2006-05-31 07:22 - 00354072 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_2.dll
2013-12-11 18:18 - 2006-03-31 12:41 - 03927248 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_30.dll
2013-12-11 18:18 - 2006-03-31 12:40 - 02388176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_30.dll
2013-12-11 18:18 - 2006-03-31 12:40 - 00352464 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_1.dll
2013-12-11 18:18 - 2006-03-31 12:39 - 00229584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_1.dll
2013-12-11 18:18 - 2006-03-31 12:39 - 00083664 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_1.dll
2013-12-11 18:18 - 2006-03-31 12:39 - 00062672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_1.dll
2013-12-11 18:18 - 2006-02-03 08:43 - 03830992 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_29.dll
2013-12-11 18:18 - 2006-02-03 08:43 - 02332368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_29.dll
2013-12-11 18:18 - 2006-02-03 08:42 - 00355536 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_0.dll
2013-12-11 18:18 - 2006-02-03 08:42 - 00230096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_0.dll
2013-12-11 18:18 - 2006-02-03 08:41 - 00016592 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_0.dll
2013-12-11 18:18 - 2006-02-03 08:41 - 00014032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_0.dll
2013-12-11 18:17 - 2005-12-05 18:09 - 03815120 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_28.dll
2013-12-11 18:17 - 2005-12-05 18:09 - 02323664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_28.dll
2013-12-11 18:17 - 2005-07-22 19:59 - 03807440 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_27.dll
2013-12-11 18:17 - 2005-07-22 19:59 - 02319568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_27.dll
2013-12-11 18:17 - 2005-05-26 15:34 - 03767504 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_26.dll
2013-12-11 18:17 - 2005-05-26 15:34 - 02297552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_26.dll
2013-12-11 18:17 - 2005-03-18 17:19 - 03823312 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_25.dll
2013-12-11 18:17 - 2005-03-18 17:19 - 02337488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_25.dll
2013-12-11 18:17 - 2005-02-05 19:45 - 03544272 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_24.dll
2013-12-11 18:17 - 2005-02-05 19:45 - 02222800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_24.dll
2013-12-11 15:31 - 2013-05-10 06:56 - 14631424 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2013-12-11 15:31 - 2013-05-10 06:56 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2013-12-11 15:31 - 2013-05-10 05:56 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL
2013-12-11 15:31 - 2013-05-10 05:56 - 11410432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
2013-12-11 15:30 - 2013-11-26 12:54 - 23183360 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-12-11 15:30 - 2013-11-26 11:19 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-12-11 15:30 - 2013-11-26 11:18 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2013-12-11 15:30 - 2013-11-26 11:11 - 17112576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-12-11 15:30 - 2013-11-26 10:48 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-12-11 15:30 - 2013-11-26 10:46 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2013-12-11 15:30 - 2013-11-26 10:41 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-12-11 15:30 - 2013-11-26 10:29 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-12-11 15:30 - 2013-11-26 10:27 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-12-11 15:30 - 2013-11-26 10:23 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-12-11 15:30 - 2013-11-26 10:21 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-12-11 15:30 - 2013-11-26 10:18 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-12-11 15:30 - 2013-11-26 10:18 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2013-12-11 15:30 - 2013-11-26 10:16 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2013-12-11 15:30 - 2013-11-26 09:57 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-12-11 15:30 - 2013-11-26 09:38 - 02166784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-12-11 15:30 - 2013-11-26 09:38 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-12-11 15:30 - 2013-11-26 09:35 - 05769216 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-12-11 15:30 - 2013-11-26 09:32 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-12-11 15:30 - 2013-11-26 09:28 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2013-12-11 15:30 - 2013-11-26 09:16 - 04243968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-12-11 15:30 - 2013-11-26 09:02 - 01995264 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-12-11 15:30 - 2013-11-26 08:48 - 12996608 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-12-11 15:30 - 2013-11-26 08:32 - 01928192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-12-11 15:30 - 2013-11-26 08:26 - 11221504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-12-11 15:30 - 2013-11-26 08:07 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-12-11 15:30 - 2013-11-26 07:40 - 01395200 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-12-11 15:30 - 2013-11-26 07:34 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2013-12-11 15:30 - 2013-11-26 07:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-12-11 15:30 - 2013-11-26 07:33 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-12-11 15:30 - 2013-11-26 07:27 - 01157632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-12-11 14:56 - 2013-12-11 14:56 - 02344450 _____ C:\Users\Leon\Downloads\omsi_2_docs.zip
2013-12-11 14:21 - 2013-11-23 19:26 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2013-12-11 14:21 - 2013-11-23 18:47 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2013-12-11 14:21 - 2013-11-12 03:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2013-12-11 14:21 - 2013-11-12 03:07 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2013-12-11 14:21 - 2013-10-30 03:32 - 00335360 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll
2013-12-11 14:21 - 2013-10-30 03:19 - 00301568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msieftp.dll
2013-12-11 14:21 - 2013-10-30 02:24 - 03155968 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-12-11 14:21 - 2013-10-19 03:18 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll
2013-12-11 14:21 - 2013-10-19 02:36 - 00159232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll
2013-12-11 14:21 - 2013-10-12 03:32 - 00150016 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx
2013-12-11 14:21 - 2013-10-12 03:31 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll
2013-12-11 14:21 - 2013-10-12 03:04 - 00121856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshom.ocx
2013-12-11 14:21 - 2013-10-12 03:03 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scrrun.dll
2013-12-11 14:21 - 2013-10-12 02:33 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe
2013-12-11 14:21 - 2013-10-12 02:33 - 00156160 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe
2013-12-11 14:21 - 2013-10-12 02:15 - 00141824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscript.exe
2013-12-11 14:21 - 2013-10-12 02:15 - 00126976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cscript.exe
2013-12-11 14:21 - 2013-10-04 03:16 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys
2013-12-11 14:21 - 2013-10-04 02:36 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys
2013-12-10 14:08 - 2013-12-10 14:15 - 525640200 _____ C:\Users\Leon\Downloads\EuroTruckSimulator2_1_8_2_3_patch.exe
2013-12-09 17:43 - 2013-12-09 17:43 - 02552323 _____ C:\Users\Leon\Downloads\validator.tar.gz
2013-12-09 17:43 - 2013-12-09 17:43 - 00557605 _____ C:\Users\Leon\Downloads\sgml-lib.tar.gz
2013-12-08 16:08 - 2013-12-08 16:08 - 00000000 ____D C:\Users\Leon\Downloads\Kenworth_W900aRC_dmitry68-Stas556
2013-12-08 15:52 - 2013-12-08 16:02 - 31436553 _____ C:\Users\Leon\Downloads\Kenworth_W900aRC_dmitry68-Stas556.rar
2013-12-08 13:27 - 2013-12-08 13:27 - 00000000 ____D C:\Users\Leon\Downloads\ultrafastlvlmax
2013-12-08 13:15 - 2013-12-08 13:15 - 00002116 _____ C:\Users\Leon\Downloads\ultrafastlvlmax.rar
2013-12-08 13:15 - 2013-12-08 13:15 - 00000000 ____D C:\Users\Leon\Downloads\superreich_mod
2013-12-08 13:14 - 2013-12-08 13:14 - 00004656 _____ C:\Users\Leon\Downloads\superreich_mod.rar
2013-12-08 12:47 - 2013-12-08 12:48 - 00000000 ____D C:\Users\Leon\Downloads\hardecosim
2013-12-08 12:47 - 2013-12-08 12:47 - 00107156 _____ C:\Users\Leon\Downloads\hardecosim.zip
2013-12-08 11:31 - 2013-12-08 11:31 - 00000000 ____D C:\Users\Leon\AppData\Local\Logitech® Webcam-Software
2013-12-08 11:28 - 2013-12-08 11:28 - 00000000 ____D C:\ProgramData\LogiShrd
2013-12-08 11:27 - 2013-12-27 23:16 - 00010687 _____ C:\Windows\system32\lvcoinst.log
2013-12-08 11:27 - 2013-12-27 23:16 - 00000000 ____D C:\Program Files\Common Files\logishrd
2013-12-08 11:27 - 2013-12-27 23:15 - 00000000 ____D C:\Program Files (x86)\Logitech
2013-12-08 11:27 - 2013-12-08 11:27 - 00000000 ____D C:\Users\Leon\AppData\Roaming\Leadertech
2013-12-08 11:25 - 2013-12-08 11:25 - 74637872 _____ (Logitech, Inc.) C:\Users\Leon\Downloads\lws251.exe
2013-12-08 11:24 - 2013-12-08 11:24 - 00000000 ____D C:\Users\Leon\AppData\Roaming\Seeing Machines
2013-12-08 11:24 - 2013-12-08 11:24 - 00000000 ____D C:\ProgramData\Seeing Machines
2013-12-08 11:19 - 2013-12-08 11:19 - 00000000 ____D C:\Program Files (x86)\VJoy Virtual Joystick Driver
2013-12-08 11:13 - 2013-12-08 11:13 - 00002217 _____ C:\Users\Public\Desktop\FaceTrackNoIR.lnk
2013-12-08 11:12 - 2013-12-08 11:12 - 00000000 ____D C:\Program Files (x86)\Abbequerque Inc
2013-12-08 11:10 - 2013-12-08 11:10 - 78352371 _____ (FaceTrackNoIR Team                                          ) C:\Users\Leon\Downloads\SetupFaceTrackNoIR_Full_v170.exe
2013-12-08 11:02 - 2013-12-08 11:22 - 00000000 ____D C:\Users\Leon\Downloads\FaceTrack
2013-12-08 10:29 - 2013-12-27 23:13 - 00000000 ____D C:\ProgramData\MAGIX
2013-12-08 10:29 - 2013-12-27 23:13 - 00000000 ____D C:\Program Files (x86)\MAGIX
2013-12-08 10:29 - 2013-12-20 19:43 - 00000000 ____D C:\Users\Leon\AppData\Roaming\MAGIX
2013-12-08 10:29 - 2013-12-08 10:29 - 00001226 _____ C:\Users\Public\Desktop\MAGIX Foto & Grafik Designer 7 SE.lnk
2013-12-08 10:29 - 2013-12-08 10:29 - 00000000 ____D C:\Users\Leon\AppData\Local\Xara
2013-12-08 10:28 - 2013-12-08 10:58 - 91182039 _____ C:\Users\Leon\Downloads\FaceTrack.rar
2013-12-08 10:27 - 2013-12-08 10:27 - 155998448 _____ (MAGIX AG) C:\Users\Leon\Downloads\Foto_Grafik_Designer_7_SE_DE_CHIP_DE_131029_15-06.exe
2013-12-07 20:00 - 2013-12-07 20:01 - 00000000 ____D C:\Users\Leon\Downloads\Scania Busscar 1.5.2-1.6.x
2013-12-07 19:59 - 2013-12-07 19:59 - 28399366 _____ C:\Users\Leon\Downloads\Scania Busscar 1.5.2-1.6.x.rar
2013-12-07 18:39 - 2013-12-07 18:39 - 00000000 ____D C:\Users\Leon\Downloads\NeoplanStarliner_BusModPackFurkanSevke_ (1)
2013-12-07 18:38 - 2013-12-07 18:38 - 40591368 _____ C:\Users\Leon\Downloads\EuroTruckSimulator2_1_6_1_to_1_7_0_patch.exe
2013-12-07 18:37 - 2013-12-07 18:37 - 52619900 _____ C:\Users\Leon\Downloads\NeoplanStarliner_BusModPackFurkanSevke_ (1).rar
2013-12-07 18:34 - 2013-12-07 18:35 - 00000000 ____D C:\Users\Leon\Downloads\zzTSM_Schwerlast_Trailerpacket_1.7.5_Packet_1-3
2013-12-07 17:33 - 2013-12-07 17:37 - 00000000 ____D C:\Users\Leon\Downloads\zzzzzzzzzzzReal_Environment2_v175_AEgos_Edition
2013-12-07 17:30 - 2013-12-07 17:33 - 162534209 _____ C:\Users\Leon\Downloads\zzzzzzzzzzzReal_Environment2_v175_AEgos_Edition.7z
2013-12-07 17:26 - 2013-12-07 17:39 - 39663402 _____ C:\Users\Leon\Downloads\zzTSM_Schwerlast_Trailerpacket_1.7.5_Packet_1-3.rar
2013-12-07 17:26 - 2013-12-07 17:26 - 00000000 ____D C:\Users\Leon\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\LatinVFR
2013-12-07 17:17 - 2013-12-07 17:22 - 553483869 _____ C:\Users\Leon\Downloads\LatinVFR_TXKF_FsX_v1.0.exe
2013-12-07 17:16 - 2013-12-07 17:20 - 315511460 _____ () C:\Users\Leon\Downloads\Budapest_LHBP_v101_FSX.exe
2013-12-06 14:57 - 2013-12-06 14:57 - 00001011 _____ C:\Users\Public\Desktop\Audacity.lnk
2013-12-06 14:54 - 2013-12-06 14:54 - 00614784 _____ C:\Users\Leon\Downloads\Audacity - CHIP-Downloader.exe
2013-12-06 13:02 - 2013-12-06 13:52 - 00000000 ____D C:\Users\Leon\Downloads\machinimasound_com_beyond_the_stars
2013-12-06 13:02 - 2013-12-06 13:09 - 00000000 ____D C:\Users\Leon\Downloads\machinimasound_com_morning_cruise (2)
2013-12-06 13:02 - 2013-12-06 13:06 - 00000000 ____D C:\Users\Leon\Downloads\machinimasound_com_ecstatic_wave (1)
2013-12-06 13:02 - 2013-12-06 13:04 - 00000000 ____D C:\Users\Leon\Downloads\machinimasound_com_afterlife_city
2013-12-06 12:59 - 2013-12-06 13:01 - 08818299 _____ C:\Users\Leon\Downloads\machinimasound_com_beyond_the_stars.zip
2013-12-06 12:59 - 2013-12-06 13:01 - 07952572 _____ C:\Users\Leon\Downloads\machinimasound_com_afterlife_city.zip
2013-12-06 12:59 - 2013-12-06 13:01 - 07897030 _____ C:\Users\Leon\Downloads\machinimasound_com_morning_cruise (2).zip
2013-12-06 12:59 - 2013-12-06 12:59 - 09957201 _____ C:\Users\Leon\Downloads\machinimasound_com_ecstatic_wave (1).zip
2013-12-05 20:18 - 2013-12-05 20:18 - 52619900 _____ C:\Users\Leon\Downloads\NeoplanStarliner_BusModPackFurkanSevke_.rar
2013-12-02 20:27 - 2013-12-02 20:28 - 154763637 _____ C:\Users\Leon\Downloads\Bau-Simulator2012_Update01.rar
2013-12-01 10:29 - 2013-12-01 10:36 - 20560641 _____ C:\Users\Leon\Downloads\ClaasXerion5000TracVC_TTM_V2FIX_N.zip
2013-11-30 17:29 - 2010-06-02 04:55 - 00527192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_7.dll
2013-11-30 17:29 - 2010-06-02 04:55 - 00518488 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_7.dll
2013-11-30 17:29 - 2010-06-02 04:55 - 00077656 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_5.dll
2013-11-30 17:29 - 2010-06-02 04:55 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_5.dll
2013-11-30 17:29 - 2010-05-26 11:41 - 02526056 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_43.dll
2013-11-30 17:29 - 2010-05-26 11:41 - 02401112 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_43.dll
2013-11-30 17:29 - 2010-05-26 11:41 - 02106216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_43.dll
2013-11-30 17:29 - 2010-05-26 11:41 - 01998168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_43.dll
2013-11-30 17:29 - 2010-02-04 10:01 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_7.dll
2013-11-30 17:29 - 2010-02-04 10:01 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_7.dll
2013-11-30 17:29 - 2007-04-04 18:54 - 00107368 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_3.dll
2013-11-30 17:22 - 2013-12-27 13:32 - 00000000 ____D C:\Users\Leon\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2013-11-30 17:22 - 2013-11-30 17:22 - 00000222 _____ C:\Users\Leon\Desktop\Farming Simulator 2013.url
2013-11-30 17:13 - 2013-12-29 20:24 - 00000000 ____D C:\Program Files (x86)\Steam
2013-11-30 17:13 - 2013-11-30 17:13 - 01133552 _____ C:\Users\Leon\Downloads\SteamSetup.exe
2013-11-30 17:13 - 2013-11-30 17:13 - 00000967 _____ C:\Users\Public\Desktop\Steam.lnk
2013-11-30 11:12 - 2013-11-30 11:12 - 00003059 _____ C:\Users\Leon\Downloads\geogebra.jnlp
2013-11-30 10:47 - 2013-11-30 10:47 - 00243728 _____ (GIANTS Software GmbH) C:\Users\Leon\Downloads\HirableTools (1).exe

==================== One Month Modified Files and Folders =======

2013-12-30 10:49 - 2013-12-28 22:45 - 00000000 ____D C:\Users\Leon\Desktop\Virus
2013-12-30 10:49 - 2013-04-12 19:17 - 00001110 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-12-30 10:48 - 2013-07-05 17:20 - 00000000 ____D C:\Users\Leon\AppData\Local\HTC MediaHub
2013-12-30 10:47 - 2013-12-28 22:58 - 00001753 _____ C:\Windows\setupact.log
2013-12-30 10:47 - 2013-05-06 14:44 - 01440451 _____ C:\Windows\WindowsUpdate.log
2013-12-30 10:47 - 2013-04-12 19:17 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-12-30 10:47 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-12-30 10:32 - 2009-07-14 05:45 - 00009696 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-12-30 10:32 - 2009-07-14 05:45 - 00009696 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-12-30 10:31 - 2013-12-30 10:31 - 00000949 _____ C:\Users\Leon\Desktop\JRT.txt
2013-12-30 10:23 - 2013-12-30 10:21 - 00000000 ____D C:\AdwCleaner
2013-12-30 10:20 - 2013-12-30 10:20 - 01233962 _____ C:\Users\Leon\Desktop\adwcleaner.exe
2013-12-30 10:20 - 2013-12-30 10:20 - 01034531 _____ (Thisisu) C:\Users\Leon\Desktop\JRT.exe
2013-12-30 10:17 - 2013-12-29 11:00 - 00002992 _____ C:\Windows\PFRO.log
2013-12-30 10:12 - 2013-04-12 19:54 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-12-30 10:07 - 2013-12-30 10:07 - 00000000 ____D C:\Users\Leon\AppData\Roaming\Malwarebytes
2013-12-30 10:06 - 2013-12-30 10:06 - 00001113 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-12-30 10:06 - 2013-12-30 10:06 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-12-30 10:06 - 2013-12-30 10:06 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-12-30 10:01 - 2013-12-30 10:01 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Leon\Desktop\mbam-setup-1.75.0.1300.exe
2013-12-29 20:46 - 2013-12-29 20:46 - 00116489 _____ C:\Users\Leon\AppData\Local\recently-used.xbel
2013-12-29 20:46 - 2013-04-20 17:55 - 00000000 ____D C:\Users\Leon\.gimp-2.8
2013-12-29 20:24 - 2013-11-30 17:13 - 00000000 ____D C:\Program Files (x86)\Steam
2013-12-29 19:34 - 2013-07-25 11:56 - 00000000 ____D C:\Users\Leon\AppData\Roaming\Audacity
2013-12-29 19:26 - 2013-04-23 14:51 - 00000000 ____D C:\Users\Leon\AppData\Roaming\Skype
2013-12-29 19:16 - 2013-12-29 19:16 - 02347384 _____ (ESET) C:\Users\Leon\Downloads\esetsmartinstaller_enu.exe
2013-12-29 18:55 - 2009-07-14 06:08 - 00032632 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2013-12-29 10:57 - 2013-12-29 10:57 - 00035352 _____ C:\ComboFix.txt
2013-12-29 10:57 - 2013-12-29 10:47 - 00000000 ____D C:\Qoobox
2013-12-29 10:56 - 2013-12-29 10:47 - 00000000 ____D C:\Windows\erdnt
2013-12-29 10:56 - 2013-04-12 19:13 - 00000000 ___RD C:\Users\Leon\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-12-29 10:55 - 2009-07-14 03:34 - 00000215 _____ C:\Windows\system.ini
2013-12-28 22:58 - 2013-12-28 22:58 - 00274840 _____ C:\Windows\Minidump\122813-23821-01.dmp
2013-12-28 22:58 - 2013-12-28 22:58 - 00000000 _____ C:\Windows\setuperr.log
2013-12-28 22:58 - 2013-06-01 12:45 - 00000000 ____D C:\Windows\Minidump
2013-12-28 22:47 - 2013-12-28 22:47 - 00000000 ____D C:\FRST
2013-12-28 22:45 - 2013-12-28 22:45 - 00000000 _____ C:\Users\Leon\defogger_reenable
2013-12-28 22:45 - 2013-04-12 19:11 - 00000000 ____D C:\Users\Leon
2013-12-28 21:54 - 2013-12-28 21:36 - 00000000 ____D C:\Users\Leon\Documents\Stronghold 2
2013-12-28 21:51 - 2013-12-28 21:36 - 00002158 _____ C:\Users\Public\Desktop\Stronghold 2 spielen.lnk
2013-12-28 21:50 - 2013-12-28 21:50 - 00000000 ____D C:\ProgramData\Firefly Studios
2013-12-28 21:49 - 2010-05-12 13:46 - 00000000 ____D C:\Windows\Panther
2013-12-28 21:48 - 2013-08-20 17:21 - 00000000 ____D C:\Program Files (x86)\FS Recorder for FSX
2013-12-28 21:36 - 2013-12-28 21:36 - 00098304 _____ (Sony DADC Austria AG.) C:\Windows\SysWOW64\CmdLineExt.dll
2013-12-28 21:36 - 2013-12-28 21:36 - 00000000 ____D C:\Users\Leon\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2013-12-28 21:31 - 2013-12-28 21:31 - 00000000 ____D C:\Program Files (x86)\Firefly Studios
2013-12-28 21:31 - 2010-05-12 13:01 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2013-12-27 23:16 - 2013-12-08 11:27 - 00010687 _____ C:\Windows\system32\lvcoinst.log
2013-12-27 23:16 - 2013-12-08 11:27 - 00000000 ____D C:\Program Files\Common Files\logishrd
2013-12-27 23:15 - 2013-12-08 11:27 - 00000000 ____D C:\Program Files (x86)\Logitech
2013-12-27 23:13 - 2013-12-20 19:39 - 00000000 ___RD C:\Users\Leon\Documents\MAGIX
2013-12-27 23:13 - 2013-12-08 10:29 - 00000000 ____D C:\ProgramData\MAGIX
2013-12-27 23:13 - 2013-12-08 10:29 - 00000000 ____D C:\Program Files (x86)\MAGIX
2013-12-27 22:53 - 2013-12-27 22:53 - 02344450 _____ C:\Users\Leon\Downloads\omsi_2_docs (1).zip
2013-12-27 22:42 - 2013-05-29 15:33 - 00000000 ____D C:\Users\Leon\AppData\Roaming\Spotify
2013-12-27 13:32 - 2013-12-27 13:32 - 00000222 _____ C:\Users\Leon\Desktop\OMSI 2.url
2013-12-27 13:32 - 2013-11-30 17:22 - 00000000 ____D C:\Users\Leon\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2013-12-27 12:43 - 2013-12-27 12:43 - 00000000 ____D C:\Users\Leon\AppData\Local\Razer_Inc
2013-12-27 12:42 - 2013-12-27 12:42 - 00000000 ____D C:\Users\Leon\Documents\Razer
2013-12-27 12:41 - 2013-12-27 12:41 - 00000000 ____D C:\Users\Leon\AppData\Local\Razer
2013-12-27 12:40 - 2013-12-27 12:40 - 00002129 _____ C:\Users\Public\Desktop\Razer Game Booster.lnk
2013-12-27 12:40 - 2013-12-27 12:40 - 00000000 ____D C:\ProgramData\Razer
2013-12-27 12:40 - 2013-12-27 12:40 - 00000000 ____D C:\Program Files (x86)\Razer
2013-12-27 12:39 - 2013-12-27 12:39 - 41363400 _____ (Razer Inc.                                                  ) C:\Users\Leon\Downloads\RazerGameBoosterSetup_4.1.59.0_1.exe
2013-12-27 12:34 - 2013-12-27 12:33 - 82548634 _____ C:\Users\Leon\Downloads\MAN_Lions_City_DD.pl1.rar
2013-12-26 21:50 - 2013-12-26 21:50 - 00000000 ____D C:\Program Files (x86)\Aerosoft
2013-12-26 21:50 - 2013-12-26 21:46 - 00000954 _____ C:\Users\Public\Desktop\Aerosoft Launcher.lnk
2013-12-25 12:52 - 2013-04-12 19:11 - 00121136 _____ C:\Users\Leon\AppData\Local\GDIPFONTCACHEV1.DAT
2013-12-25 12:50 - 2009-07-14 05:45 - 00426552 _____ C:\Windows\system32\FNTCACHE.DAT
2013-12-25 12:47 - 2013-12-25 12:47 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_point64_01009.Wdf
2013-12-25 12:47 - 2013-12-25 12:43 - 00003040 _____ C:\Windows\System32\Tasks\Microsoft_Hardware_Launch_IPoint_exe
2013-12-25 12:46 - 2013-12-25 12:46 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_dc3d_01009.Wdf
2013-12-25 12:46 - 2013-12-25 12:46 - 00000000 ____D C:\Program Files\Microsoft IntelliPoint
2013-12-25 12:43 - 2013-12-25 12:43 - 00003118 _____ C:\Windows\System32\Tasks\Microsoft_Hardware_Launch_mousekeyboardcenter_exe
2013-12-25 12:43 - 2013-12-25 12:43 - 00003090 _____ C:\Windows\System32\Tasks\Microsoft_Hardware_Launch_itype_exe
2013-12-25 12:43 - 2013-12-25 12:43 - 00003062 _____ C:\Windows\System32\Tasks\Microsoft_MKC_Logon_Task_ipoint.exe
2013-12-25 12:43 - 2013-12-25 12:43 - 00003060 _____ C:\Windows\System32\Tasks\Microsoft_MKC_Logon_Task_itype.exe
2013-12-25 12:43 - 2013-12-25 12:43 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_point64_01011.Wdf
2013-12-25 12:43 - 2013-12-25 12:43 - 00000000 ____D C:\Program Files\Microsoft Mouse and Keyboard Center
2013-12-25 12:41 - 2013-12-25 12:41 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_dc3d_01011.Wdf
2013-12-25 12:40 - 2013-12-25 12:40 - 22361472 _____ (Microsoft Corporation) C:\Users\Leon\Downloads\IPx64_1031_8.20.468.0.exe
2013-12-25 12:40 - 2013-12-25 12:40 - 16249216 _____ (Microsoft Corporation) C:\Users\Leon\Downloads\ITPx64_1031_8.20.469.0.exe
2013-12-24 15:26 - 2013-12-24 15:26 - 00000000 ____D C:\Users\Leon\Downloads\Mercedes-Benz-O530-Citaro
2013-12-24 15:17 - 2013-12-24 15:16 - 132605071 _____ C:\Users\Leon\Downloads\Mercedes-Benz-O530-Citaro.zip
2013-12-24 15:13 - 2013-12-24 15:12 - 73578015 _____ C:\Users\Leon\Downloads\Omsi2.ru_Mercedes_o530G.7z
2013-12-23 22:15 - 2013-12-23 22:14 - 00000000 ____D C:\Users\Leon\Downloads\Santasleigh
2013-12-23 22:13 - 2013-12-23 22:13 - 05923085 _____ C:\Users\Leon\Downloads\Santasleigh.zip
2013-12-23 22:08 - 2013-12-23 22:08 - 09339325 _____ C:\Users\Leon\Downloads\b738ber-christmas2012.zip
2013-12-23 22:08 - 2013-12-23 22:08 - 06914915 _____ C:\Users\Leon\Downloads\texture_ber_d_abmc_christmas__special.zip
2013-12-23 22:08 - 2013-12-23 22:08 - 00000000 ____D C:\Users\Leon\Downloads\texture_ber_d_abmc_christmas__special
2013-12-23 22:03 - 2013-12-23 22:03 - 00000000 ____D C:\Users\Leon\Downloads\b738xber-christmas2012
2013-12-23 22:02 - 2013-12-23 22:02 - 08612078 _____ C:\Users\Leon\Downloads\b738xber-christmas2012.zip
2013-12-23 21:47 - 2013-12-23 21:47 - 00000000 ____D C:\Users\Leon\Downloads\b7378abflyinghomeforchristmasd-abmcx
2013-12-23 21:46 - 2013-12-23 21:46 - 10739193 _____ C:\Users\Leon\Downloads\b7378abflyinghomeforchristmasd-abmcx.zip
2013-12-23 21:44 - 2013-12-23 21:44 - 14799019 _____ C:\Users\Leon\Downloads\airberlin2013.zip
2013-12-23 21:41 - 2013-12-23 21:41 - 13024069 _____ C:\Users\Leon\Downloads\FSX Air Air Berlin Xmas2013.zip
2013-12-23 21:28 - 2013-12-23 21:28 - 00000000 ____D C:\Users\Leon\Downloads\AS_AIRBUS-X-EXTENDED_FSX_PREPAR3D_PAINTKITS
2013-12-23 21:27 - 2013-12-23 21:27 - 20938885 _____ C:\Users\Leon\Downloads\airberlin_B737-800_D-ABMS_Flying_home_for_Christmas_cs_2013.rar
2013-12-23 21:27 - 2013-12-23 21:23 - 935309240 _____ C:\Users\Leon\Downloads\AS_AIRBUS-X-EXTENDED_FSX_PREPAR3D (2).zip
2013-12-23 21:26 - 2013-12-23 21:22 - 607528186 _____ C:\Users\Leon\Downloads\AS_AIRBUS-X-EXTENDED_FSX_PREPAR3D_PAINTKITS.zip
2013-12-23 19:35 - 2013-04-12 19:49 - 00000000 ____D C:\Program Files (x86)\Euro Truck Simulator 2
2013-12-23 19:34 - 2013-12-23 19:31 - 525640200 _____ C:\Users\Leon\Downloads\EuroTruckSimulator2_1_8_2_3_patch (1).exe
2013-12-23 18:58 - 2013-12-23 18:58 - 07992081 _____ C:\Users\Leon\Downloads\machinimasound_com_fire_within (1).zip
2013-12-23 18:58 - 2013-12-23 18:58 - 06757926 _____ C:\Users\Leon\Downloads\machinimasound_com_infected_euphoria (1).zip
2013-12-23 18:55 - 2013-12-23 18:55 - 00000000 ____D C:\Users\Leon\Downloads\machinimasound_com_the_arcade
2013-12-23 18:54 - 2013-12-23 18:53 - 08341944 _____ C:\Users\Leon\Downloads\machinimasound_com_the_arcade.zip
2013-12-23 18:45 - 2013-12-23 18:45 - 00000000 ____D C:\Users\Leon\Downloads\machinimasound_com_olympos
2013-12-23 18:45 - 2013-12-23 18:45 - 00000000 ____D C:\Users\Leon\Downloads\machinimasound_com_incursion (1)
2013-12-23 18:45 - 2013-12-23 18:45 - 00000000 ____D C:\Users\Leon\Downloads\machinimasound_com_escape_from_the_temple
2013-12-23 18:44 - 2013-12-23 18:44 - 07851783 _____ C:\Users\Leon\Downloads\machinimasound_com_incursion (1).zip
2013-12-23 18:44 - 2013-12-23 18:44 - 06933318 _____ C:\Users\Leon\Downloads\machinimasound_com_olympos.zip
2013-12-23 18:44 - 2013-12-23 18:43 - 09742583 _____ C:\Users\Leon\Downloads\machinimasound_com_escape_from_the_temple.zip
2013-12-23 10:48 - 2013-12-23 10:48 - 00000000 ____D C:\Windows\F5C9BE9A04C34A728CD0BB67C722D608.TMP
2013-12-23 10:48 - 2013-12-23 10:47 - 251738472 _____ C:\Users\Leon\Downloads\camtasia.exe
2013-12-23 10:39 - 2013-12-23 10:39 - 02209528 _____ C:\Users\Leon\Downloads\VirtualDub-1.10.4-AMD64.zip
2013-12-23 10:39 - 2013-12-23 10:39 - 02209528 _____ C:\Users\Leon\Downloads\VirtualDub-1.10.4-AMD64 (1).zip
2013-12-23 10:14 - 2013-04-12 19:50 - 00000000 ____D C:\Users\Leon\Documents\Euro Truck Simulator 2
2013-12-22 19:46 - 2013-07-08 15:29 - 00000000 ____D C:\Users\Leon\Documents\Flight Simulator X-Dateien
2013-12-22 17:29 - 2013-12-22 17:29 - 05655084 _____ C:\Users\Leon\Downloads\Boeing 757-200 American Airlines.zip
2013-12-22 17:17 - 2013-12-22 17:17 - 23167859 _____ C:\Users\Leon\Downloads\Airbus A340-300 Basepack.zip
2013-12-22 17:17 - 2013-12-22 17:17 - 02767209 _____ C:\Users\Leon\Downloads\Airbus A340-300 Air France.zip
2013-12-22 17:16 - 2013-12-22 17:16 - 02215563 _____ (Xudeva Irribarra                                            ) C:\Users\Leon\Downloads\Boeing 747-8i KLM v1.00.exe
2013-12-22 17:05 - 2013-12-22 17:05 - 00000000 ____D C:\Users\Leon\Downloads\AS_CARENADO-PA32-SARATOGA-SP_FSX
2013-12-22 17:04 - 2013-12-22 17:04 - 93903080 _____ C:\Users\Leon\Downloads\AS_CARENADO-PA32-SARATOGA-SP_FSX.zip
2013-12-21 22:41 - 2013-04-12 19:17 - 00000000 ___RD C:\Users\Leon\Desktop\Dienstprogramme
2013-12-21 22:40 - 2013-12-21 22:39 - 131000436 _____ C:\Users\Leon\Downloads\AS_MEGA-AIRPORT-VIENNA-X_FSX.zip
2013-12-21 22:40 - 2013-12-21 22:39 - 131000436 _____ C:\Users\Leon\Downloads\AS_MEGA-AIRPORT-VIENNA-X_FSX (1).zip
2013-12-21 22:37 - 2013-12-21 22:34 - 00000000 ____D C:\Users\Leon\Downloads\AS_TWIN-OTTER-X-EXTENDED_FSX_P3D (2)
2013-12-21 22:34 - 2013-10-30 16:56 - 00000000 ____D C:\Users\Leon\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Majestic Software
2013-12-21 22:28 - 2013-12-21 22:25 - 567687781 _____ C:\Users\Leon\Downloads\AS_TWIN-OTTER-X-EXTENDED_FSX_P3D (2).zip
2013-12-21 22:25 - 2013-12-21 22:23 - 494532720 _____ C:\Users\Leon\Downloads\mjc8-400-Pilot-1_008-inst.exe
2013-12-21 22:21 - 2013-12-21 22:19 - 343828771 _____ C:\Users\Leon\Downloads\FlyTampa_Vienna_FSX_Update_25.exe
2013-12-21 20:24 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache
2013-12-20 19:43 - 2013-12-08 10:29 - 00000000 ____D C:\Users\Leon\AppData\Roaming\MAGIX
2013-12-20 16:25 - 2013-12-20 16:25 - 02849144 _____ (MAGIX AG) C:\Users\Leon\Downloads\trial_videodeluxe2014_dlm.exe
2013-12-20 12:04 - 2013-11-02 19:15 - 00000000 ____D C:\REX Essential Plus Overdrive
2013-12-20 10:15 - 2013-05-29 15:33 - 00000000 ____D C:\Users\Leon\AppData\Local\Spotify
2013-12-18 17:09 - 2013-12-18 16:59 - 28341646 _____ C:\Users\Leon\Downloads\JAGUAR_V2_ENTPACKEN.rar
2013-12-17 17:22 - 2013-04-13 04:46 - 00699416 _____ C:\Windows\system32\perfh007.dat
2013-12-17 17:22 - 2013-04-13 04:46 - 00149556 _____ C:\Windows\system32\perfc007.dat
2013-12-17 17:22 - 2009-07-14 06:13 - 01620612 _____ C:\Windows\system32\PerfStringBackup.INI
2013-12-17 16:56 - 2013-12-17 14:08 - 00018270 _____ C:\Users\Leon\Documents\Inhaltsverzeichniss Deutsch.odt
2013-12-17 16:54 - 2013-12-17 16:46 - 00026022 _____ C:\Users\Leon\Documents\Lesetagebuch.odt
2013-12-17 13:40 - 2013-12-17 13:40 - 03624249 _____ C:\Users\Leon\Downloads\Global_ATC_demo.zip
2013-12-17 13:39 - 2013-06-02 10:51 - 00084720 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2013-12-17 13:39 - 2013-06-02 10:47 - 00131576 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2013-12-17 13:39 - 2013-06-02 10:47 - 00108440 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2013-12-16 17:33 - 2013-09-07 12:30 - 00304515 _____ C:\Users\Leon\Documents\Titelbild Kommunikation.odt
2013-12-15 21:04 - 2013-07-12 21:54 - 00000000 ____D C:\Windows\system32\MRT
2013-12-15 21:02 - 2013-04-13 18:45 - 90708896 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-12-13 18:40 - 2013-04-12 19:51 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-12-13 15:54 - 2013-12-12 18:11 - 00000000 ____D C:\Program Files (x86)\Mozilla Thunderbird
2013-12-11 19:11 - 2009-07-14 06:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD
2013-12-11 15:12 - 2013-04-12 19:54 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-12-11 15:12 - 2013-04-12 19:54 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-12-11 15:12 - 2013-04-12 19:54 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-12-11 14:56 - 2013-12-11 14:56 - 02344450 _____ C:\Users\Leon\Downloads\omsi_2_docs.zip
2013-12-10 14:15 - 2013-12-10 14:08 - 525640200 _____ C:\Users\Leon\Downloads\EuroTruckSimulator2_1_8_2_3_patch.exe
2013-12-09 17:43 - 2013-12-09 17:43 - 02552323 _____ C:\Users\Leon\Downloads\validator.tar.gz
2013-12-09 17:43 - 2013-12-09 17:43 - 00557605 _____ C:\Users\Leon\Downloads\sgml-lib.tar.gz
2013-12-08 16:08 - 2013-12-08 16:08 - 00000000 ____D C:\Users\Leon\Downloads\Kenworth_W900aRC_dmitry68-Stas556
2013-12-08 16:02 - 2013-12-08 15:52 - 31436553 _____ C:\Users\Leon\Downloads\Kenworth_W900aRC_dmitry68-Stas556.rar
2013-12-08 13:27 - 2013-12-08 13:27 - 00000000 ____D C:\Users\Leon\Downloads\ultrafastlvlmax
2013-12-08 13:15 - 2013-12-08 13:15 - 00002116 _____ C:\Users\Leon\Downloads\ultrafastlvlmax.rar
2013-12-08 13:15 - 2013-12-08 13:15 - 00000000 ____D C:\Users\Leon\Downloads\superreich_mod
2013-12-08 13:14 - 2013-12-08 13:14 - 00004656 _____ C:\Users\Leon\Downloads\superreich_mod.rar
2013-12-08 12:48 - 2013-12-08 12:47 - 00000000 ____D C:\Users\Leon\Downloads\hardecosim
2013-12-08 12:47 - 2013-12-08 12:47 - 00107156 _____ C:\Users\Leon\Downloads\hardecosim.zip
2013-12-08 11:31 - 2013-12-08 11:31 - 00000000 ____D C:\Users\Leon\AppData\Local\Logitech® Webcam-Software
2013-12-08 11:28 - 2013-12-08 11:28 - 00000000 ____D C:\ProgramData\LogiShrd
2013-12-08 11:27 - 2013-12-08 11:27 - 00000000 ____D C:\Users\Leon\AppData\Roaming\Leadertech
2013-12-08 11:25 - 2013-12-08 11:25 - 74637872 _____ (Logitech, Inc.) C:\Users\Leon\Downloads\lws251.exe
2013-12-08 11:24 - 2013-12-08 11:24 - 00000000 ____D C:\Users\Leon\AppData\Roaming\Seeing Machines
2013-12-08 11:24 - 2013-12-08 11:24 - 00000000 ____D C:\ProgramData\Seeing Machines
2013-12-08 11:22 - 2013-12-08 11:02 - 00000000 ____D C:\Users\Leon\Downloads\FaceTrack
2013-12-08 11:19 - 2013-12-08 11:19 - 00000000 ____D C:\Program Files (x86)\VJoy Virtual Joystick Driver
2013-12-08 11:13 - 2013-12-08 11:13 - 00002217 _____ C:\Users\Public\Desktop\FaceTrackNoIR.lnk
2013-12-08 11:12 - 2013-12-08 11:12 - 00000000 ____D C:\Program Files (x86)\Abbequerque Inc
2013-12-08 11:10 - 2013-12-08 11:10 - 78352371 _____ (FaceTrackNoIR Team                                          ) C:\Users\Leon\Downloads\SetupFaceTrackNoIR_Full_v170.exe
2013-12-08 10:58 - 2013-12-08 10:28 - 91182039 _____ C:\Users\Leon\Downloads\FaceTrack.rar
2013-12-08 10:29 - 2013-12-08 10:29 - 00001226 _____ C:\Users\Public\Desktop\MAGIX Foto & Grafik Designer 7 SE.lnk
2013-12-08 10:29 - 2013-12-08 10:29 - 00000000 ____D C:\Users\Leon\AppData\Local\Xara
2013-12-08 10:28 - 2013-04-14 19:48 - 00000000 ____D C:\Program Files (x86)\MSXML 4.0
2013-12-08 10:27 - 2013-12-08 10:27 - 155998448 _____ (MAGIX AG) C:\Users\Leon\Downloads\Foto_Grafik_Designer_7_SE_DE_CHIP_DE_131029_15-06.exe
2013-12-07 20:01 - 2013-12-07 20:00 - 00000000 ____D C:\Users\Leon\Downloads\Scania Busscar 1.5.2-1.6.x
2013-12-07 19:59 - 2013-12-07 19:59 - 28399366 _____ C:\Users\Leon\Downloads\Scania Busscar 1.5.2-1.6.x.rar
2013-12-07 18:39 - 2013-12-07 18:39 - 00000000 ____D C:\Users\Leon\Downloads\NeoplanStarliner_BusModPackFurkanSevke_ (1)
2013-12-07 18:38 - 2013-12-07 18:38 - 40591368 _____ C:\Users\Leon\Downloads\EuroTruckSimulator2_1_6_1_to_1_7_0_patch.exe
2013-12-07 18:37 - 2013-12-07 18:37 - 52619900 _____ C:\Users\Leon\Downloads\NeoplanStarliner_BusModPackFurkanSevke_ (1).rar
2013-12-07 18:35 - 2013-12-07 18:34 - 00000000 ____D C:\Users\Leon\Downloads\zzTSM_Schwerlast_Trailerpacket_1.7.5_Packet_1-3
2013-12-07 17:39 - 2013-12-07 17:26 - 39663402 _____ C:\Users\Leon\Downloads\zzTSM_Schwerlast_Trailerpacket_1.7.5_Packet_1-3.rar
2013-12-07 17:37 - 2013-12-07 17:33 - 00000000 ____D C:\Users\Leon\Downloads\zzzzzzzzzzzReal_Environment2_v175_AEgos_Edition
2013-12-07 17:33 - 2013-12-07 17:30 - 162534209 _____ C:\Users\Leon\Downloads\zzzzzzzzzzzReal_Environment2_v175_AEgos_Edition.7z
2013-12-07 17:26 - 2013-12-07 17:26 - 00000000 ____D C:\Users\Leon\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\LatinVFR
2013-12-07 17:22 - 2013-12-07 17:17 - 553483869 _____ C:\Users\Leon\Downloads\LatinVFR_TXKF_FsX_v1.0.exe
2013-12-07 17:20 - 2013-12-07 17:16 - 315511460 _____ () C:\Users\Leon\Downloads\Budapest_LHBP_v101_FSX.exe
2013-12-06 14:57 - 2013-12-06 14:57 - 00001011 _____ C:\Users\Public\Desktop\Audacity.lnk
2013-12-06 14:57 - 2013-07-25 11:55 - 00000000 ____D C:\Program Files (x86)\Audacity
2013-12-06 14:54 - 2013-12-06 14:54 - 00614784 _____ C:\Users\Leon\Downloads\Audacity - CHIP-Downloader.exe
2013-12-06 13:52 - 2013-12-06 13:02 - 00000000 ____D C:\Users\Leon\Downloads\machinimasound_com_beyond_the_stars
2013-12-06 13:09 - 2013-12-06 13:02 - 00000000 ____D C:\Users\Leon\Downloads\machinimasound_com_morning_cruise (2)
2013-12-06 13:06 - 2013-12-06 13:02 - 00000000 ____D C:\Users\Leon\Downloads\machinimasound_com_ecstatic_wave (1)
2013-12-06 13:04 - 2013-12-06 13:02 - 00000000 ____D C:\Users\Leon\Downloads\machinimasound_com_afterlife_city
2013-12-06 13:01 - 2013-12-06 12:59 - 08818299 _____ C:\Users\Leon\Downloads\machinimasound_com_beyond_the_stars.zip
2013-12-06 13:01 - 2013-12-06 12:59 - 07952572 _____ C:\Users\Leon\Downloads\machinimasound_com_afterlife_city.zip
2013-12-06 13:01 - 2013-12-06 12:59 - 07897030 _____ C:\Users\Leon\Downloads\machinimasound_com_morning_cruise (2).zip
2013-12-06 12:59 - 2013-12-06 12:59 - 09957201 _____ C:\Users\Leon\Downloads\machinimasound_com_ecstatic_wave (1).zip
2013-12-05 20:18 - 2013-12-05 20:18 - 52619900 _____ C:\Users\Leon\Downloads\NeoplanStarliner_BusModPackFurkanSevke_.rar
2013-12-05 16:57 - 2013-04-12 20:54 - 00002179 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2013-12-02 20:28 - 2013-12-02 20:27 - 154763637 _____ C:\Users\Leon\Downloads\Bau-Simulator2012_Update01.rar
2013-12-02 19:43 - 2013-04-12 19:17 - 00004106 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2013-12-02 19:43 - 2013-04-12 19:17 - 00003854 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2013-12-01 11:12 - 2013-04-12 21:30 - 00000000 ____D C:\Users\Leon\AppData\Local\Windows Live
2013-12-01 10:36 - 2013-12-01 10:29 - 20560641 _____ C:\Users\Leon\Downloads\ClaasXerion5000TracVC_TTM_V2FIX_N.zip
2013-11-30 17:29 - 2013-08-07 20:45 - 00000000 ____D C:\Users\Leon\Documents\My Games
2013-11-30 17:22 - 2013-11-30 17:22 - 00000222 _____ C:\Users\Leon\Desktop\Farming Simulator 2013.url
2013-11-30 17:13 - 2013-11-30 17:13 - 01133552 _____ C:\Users\Leon\Downloads\SteamSetup.exe
2013-11-30 17:13 - 2013-11-30 17:13 - 00000967 _____ C:\Users\Public\Desktop\Steam.lnk
2013-11-30 11:12 - 2013-11-30 11:12 - 00003059 _____ C:\Users\Leon\Downloads\geogebra.jnlp
2013-11-30 10:47 - 2013-11-30 10:47 - 00243728 _____ (GIANTS Software GmbH) C:\Users\Leon\Downloads\HirableTools (1).exe

Files to move or delete:
====================
C:\Users\Leon\AppData\Roaming\CamLayout.ini
C:\Users\Leon\AppData\Roaming\CamShapes.ini


Some content of TEMP:
====================
C:\Users\Leon\AppData\Local\Temp\avgnt.exe
C:\Users\Leon\AppData\Local\Temp\Quarantine.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-12-21 20:16

==================== End Of Log ============================
--- --- ---

--- --- ---


Viele Grüße
Leon

Hi,

ich habe nochmal eine vollständige Systemprüfung mit Malwarebytes Anti-Malware gemacht.
Das kam dabei raus:
Code:
ATTFilter
Malwarebytes Anti-Malware 1.75.0.1300
www.malwarebytes.org

Datenbank Version: v2013.12.30.02

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 11.0.9600.16476
Leon :: LEON-PC [Administrator]

30.12.2013 12:02:00
mbam-log-2013-12-30 (12-02-00).txt

Art des Suchlaufs: Vollständiger Suchlauf (C:\|D:\|)
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 561147
Laufzeit: 1 Stunde(n), 39 Minute(n), 57 Sekunde(n)

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung: 0
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateien: 3
C:\Users\Leon\Downloads\Downloads\DTLite4471-0333 (1).exe (PUP.Optional.OpenCandy) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Leon\Downloads\Downloads\DTLite4471-0333 (2).exe (PUP.Optional.OpenCandy) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Leon\Downloads\Downloads\DTLite4471-0333.exe (PUP.Optional.OpenCandy) -> Erfolgreich gelöscht und in Quarantäne gestellt.

(Ende)
Viele Grüße
Leon


Alt 31.12.2013, 08:29   #6
schrauber
/// the machine
/// TB-Ausbilder
 
Skype Virus - Standard

Skype Virus



ESET Online Scanner

  • Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
  • Lade und starte Eset Online Scanner
  • Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
  • Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
  • Klicke auf Starten.
  • Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
  • Klicke am Ende des Suchlaufs auf Fertig stellen.
  • Schließe das Fenster von ESET.
  • Explorer öffnen.
  • C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
  • Logfile hier posten.
  • Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
  • Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset


Downloade Dir bitte SecurityCheck und:

  • Speichere es auf dem Desktop.
  • Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
  • Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.
Poste den Inhalt bitte hier.

und ein frisches FRST log bitte. Noch Probleme?
__________________
--> Skype Virus

Alt 31.12.2013, 17:33   #7
Liongamer1
 
Skype Virus - Standard

Skype Virus


Hi,

hier sind die Ergebnisse.

ESET Online Scanner

Code:
ATTFilter
ESETSmartInstaller@High as downloader log:
Can not open internetESETSmartInstaller@High as downloader log:
all ok
esets_scanner_update returned -1 esets_gle=12
ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=213b5c74b7f3e24cb4b4be422fc92a9a
# engine=16460
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2013-12-31 01:33:29
# local_time=2013-12-31 02:33:29 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# lang=1033
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=1799 16775165 100 94 12583 1914971 8968 0
# compatibility_mode=5893 16776574 100 94 14856136 140126659 0 0
# scanned=354681
# found=0
# cleaned=0
# scan_time=12351
SecurityCheck

Code:
ATTFilter
 Results of screen317's Security Check version 0.99.77  
 Windows 7 Service Pack 1 x64 (UAC is enabled)  
 Internet Explorer 11  
``````````````Antivirus/Firewall Check:`````````````` 
Avira Desktop   
 Antivirus up to date!  (On Access scanning disabled!) 
`````````Anti-malware/Other Utilities Check:````````` 
 McAfee SiteAdvisor    
 Malwarebytes Anti-Malware Version 1.75.0.1300  
 Java 7 Update 45  
 Adobe Flash Player 11.9.900.170  
 Adobe Reader XI  
 Mozilla Firefox 22.0 Firefox out of Date!  
 Mozilla Thunderbird (24.2.0) 
 Google Chrome 31.0.1650.57  
 Google Chrome 31.0.1650.63  
````````Process Check: objlist.exe by Laurent````````  
 Avira Antivir avgnt.exe 
 Avira Antivir avguard.exe 
`````````````````System Health check````````````````` 
 Total Fragmentation on Drive C:  
````````````````````End of Log``````````````````````
Neues FRST log


FRST Logfile:
Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 28-12-2013 01
Ran by Leon (administrator) on LEON-PC on 31-12-2013 16:19:43
Running from C:\Users\Leon\Desktop\Virus
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe
(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\Registration\GregHSRW.exe
(Nero AG) C:\Program Files (x86)\HTC\HTC Sync Manager\HSMServiceEntry.exe
() C:\Program Files\ShrewSoft\VPN Client\iked.exe
() C:\Program Files\ShrewSoft\VPN Client\ipsecd.exe
(McAfee, Inc.) C:\Program Files (x86)\McAfee\SiteAdvisor\mcsacore.exe
() C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Egis Technology Inc.) C:\Program Files (x86)\EgisTec MyWinLocker\x86\mwlDaemon.exe
(Microsoft Corporation) C:\Program Files\Microsoft IntelliPoint\ipoint.exe
(Spotify Ltd) C:\Users\Leon\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
(TomTom) C:\Program Files (x86)\TomTom HOME 2\TomTomHOMERunner.exe
(Egis Technology Inc.) C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
() C:\Program Files (x86)\Cyberlink\Shared files\RichVideo.exe
(Razer Inc.) C:\Program Files (x86)\Razer\Razer Game Booster\RzKLService.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Microsoft Corporation) C:\Program Files\Microsoft IntelliPoint\dpupdchk.exe
(TomTom) C:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe
(Acer Group) C:\Program Files\Acer\Acer Updater\UpdaterService.exe
() C:\OEM\USBDECTION\USBS3S4Detection.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
() C:\Program Files (x86)\HTC\HTC Sync Manager\HTC Sync\adb.exe
(Egis Technology Inc.) C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Microsoft Corp.) C:\Program Files (x86)\Microsoft Games\Microsoft Flight Simulator X\fsx.exe
(Gamecentric) C:\Program Files (x86)\Microsoft Games\Microsoft Flight Simulator X\fsdreamteam\couatl\couatl.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [9642528 2010-02-24] (Realtek Semiconductor)
HKLM\...\Run: [mwlDaemon] - C:\Program Files (x86)\EgisTec MyWinLocker\x86\mwlDaemon.exe [349552 2010-02-01] (Egis Technology Inc.)
HKLM\...\Run: [IntelTBRunOnce] - C:\Program Files\Intel\TurboBoost\RunTBGadgetOnce.vbs [4123 2012-05-30] ()
HKLM\...\Run: [IntelliPoint] - C:\Program Files\Microsoft IntelliPoint\ipoint.exe [2417032 2011-08-01] (Microsoft Corporation)
HKLM-x32\...\Run: [MDS_Menu] - C:\Program Files (x86)\Acer Arcade Deluxe\MediaShow Espresso\MUITransfer\MUIStartMenu.exe [222504 2009-05-19] (CyberLink Corp.)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [EgisUpdate] - C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe [201512 2009-12-25] (Egis Technology Inc.)
HKLM-x32\...\Run: [EgisTecPMMUpdate] - C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe [401192 2009-12-25] (Egis Technology Inc.)
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-05-15] (Apple Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [766208 2013-11-07] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [684600 2013-12-09] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\RunOnce: [PIP] - C:\Users\Leon\AppData\Local\Temp\Offercast_AVIRAV7_.exe -pid AVIRAV7 -rebootRetry [1326512 2013-12-09] (Ask.com)
HKCU\...\Run: [Spotify Web Helper] - C:\Users\Leon\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1168896 2013-12-07] (Spotify Ltd)
HKCU\...\Run: [TomTomHOME.exe] - C:\Program Files (x86)\TomTom HOME 2\TomTomHOMERunner.exe [248208 2013-07-02] (TomTom)
HKU\Default\...\RunOnce: [ScrSav] - C:\Program Files (x86)\Acer\Screensaver\run_Acer.exe [154144 2010-01-15] ()
HKU\Default User\...\RunOnce: [ScrSav] - C:\Program Files (x86)\Acer\Screensaver\run_Acer.exe [154144 2010-01-15] ()

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = 
SearchScopes: HKCU - {DCD31D43-590A-4012-83ED-8432C6D6DBD5} URL = hxxp://de.search.yahoo.com/search?fr=mcafee&p={SearchTerms}
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: McAfee SiteAdvisor BHO - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - C:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: McAfee SiteAdvisor BHO - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - C:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - C:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
Toolbar: HKLM-x32 - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - C:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
Toolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  No File
Handler: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
Handler-x32: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
Handler-x32: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{9155BD02-8D91-4AC4-A33F-FD4BE0F6B02D}: [NameServer]146.140.221.1,192.44.32.31

FireFox:
========
FF ProfilePath: C:\Users\Leon\AppData\Roaming\Mozilla\Firefox\Profiles\ri8t50b8.default
FF NewTab: about:blank
FF DefaultSearchEngine: Sichere Suche
FF SearchEngineOrder.1: Sichere Suche
FF Keyword.URL: hxxp://de.search.yahoo.com/search?fr=mcafee&p=
FF SelectedSearchEngine: Sichere Suche
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.0.6 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @java.com/DTPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @mcafee.com/SAFFPlugin - C:\Program Files (x86)\McAfee\SiteAdvisor\npmcffplg32.dll (McAfee, Inc.)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3508.0205 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\McSiteAdvisor.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF HKLM-x32\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files (x86)\McAfee\SiteAdvisor
FF Extension: McAfee SiteAdvisor - C:\Program Files (x86)\McAfee\SiteAdvisor

Chrome: 
=======
CHR HomePage: hxxp://www.google.com
CHR RestoreOnStartup: "hxxp://www.youtube.com/?hl=de&gl=DE"
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\pdf.dll ()
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll No File
CHR Plugin: (Java(TM) Platform SE 7 U21) - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
CHR Plugin: (McAfee SiteAdvisor) - C:\Program Files (x86)\McAfee\SiteAdvisor\npmcffplg32.dll (McAfee, Inc.)
CHR Plugin: (Silverlight Plug-In) - C:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrl.dll No File
CHR Plugin: (Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (iTunes Application Detector) - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_202.dll No File
CHR Plugin: (Java Deployment Toolkit 7.0.210.11) - C:\Windows\SysWOW64\npDeployJava1.dll No File
CHR Extension: (GeoGebra) - C:\Users\Leon\AppData\Local\Google\Chrome\User Data\Default\Extensions\bnbaboaihhkjoaolfnfoablhllahjnee\4.4.0.1_0
CHR Extension: (SiteAdvisor) - C:\Users\Leon\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho\3.6.4.1311_0
CHR Extension: (Google Wallet) - C:\Users\Leon\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_0
CHR HKLM-x32\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - C:\Program Files (x86)\McAfee\SiteAdvisor\McChPlg.crx

==================== Services (Whitelisted) =================

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440376 2013-12-09] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440376 2013-12-09] (Avira Operations GmbH & Co. KG)
R2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [1011768 2013-12-09] (Avira Operations GmbH & Co. KG)
R2 HTCMonitorService; C:\Program Files (x86)\HTC\HTC Sync Manager\HSMServiceEntry.exe [87368 2013-01-29] (Nero AG)
R2 iked; C:\Program Files\ShrewSoft\VPN Client\iked.exe [1127736 2013-07-01] ()
R2 ipsecd; C:\Program Files\ShrewSoft\VPN Client\ipsecd.exe [810808 2013-07-01] ()
R2 McAfee SiteAdvisor Service; C:\Program Files (x86)\McAfee\SiteAdvisor\mcsacore.exe [121616 2013-11-07] (McAfee, Inc.)
S3 MWLService; C:\Program Files (x86)\EgisTec MyWinLocker\x86\MWLService.exe [305520 2010-02-01] (Egis Technology Inc.)
R2 PassThru Service; C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe [167424 2012-12-07] ()
R2 RichVideo; C:\Program Files (x86)\Cyberlink\Shared files\RichVideo.exe [244904 2010-02-03] ()
R2 RzKLService; C:\Program Files (x86)\Razer\Razer Game Booster\RzKLService.exe [105448 2013-11-22] (Razer Inc.)
R2 USBS3S4Detection; C:\OEM\USBDECTION\USBS3S4Detection.exe [76320 2009-12-09] ()

==================== Drivers (Whitelisted) ====================

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108440 2013-12-09] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131576 2013-12-09] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-12-09] (Avira Operations GmbH & Co. KG)
R2 avnetflt; C:\Windows\System32\DRIVERS\avnetflt.sys [84720 2013-12-09] (Avira Operations GmbH & Co. KG)
U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
S3 catchme; \??\C:\ComboFix\catchme.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-12-31 16:19 - 2013-12-31 16:19 - 00000975 _____ C:\Users\Leon\Desktop\checkup.txt
2013-12-31 11:01 - 2013-12-31 11:01 - 00000000 ____D C:\Users\Leon\AppData\Roaming\Avira
2013-12-31 11:00 - 2013-12-31 11:00 - 00002070 _____ C:\Users\Public\Desktop\Avira Control Center.lnk
2013-12-31 10:59 - 2013-12-31 10:59 - 00000000 ____D C:\Program Files (x86)\Avira
2013-12-31 10:59 - 2013-12-09 11:37 - 00131576 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2013-12-31 10:59 - 2013-12-09 11:37 - 00108440 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2013-12-31 10:59 - 2013-12-09 11:37 - 00084720 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2013-12-31 10:59 - 2013-12-09 11:37 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys
2013-12-31 10:53 - 2013-12-31 10:54 - 129598176 _____ C:\Users\Leon\Downloads\avira_free_antivirus_de.exe
2013-12-31 10:49 - 2013-12-31 10:49 - 00000000 ____D C:\Program Files (x86)\ESET
2013-12-31 10:47 - 2013-12-31 10:47 - 00891200 _____ C:\Users\Leon\Desktop\SecurityCheck.exe
2013-12-31 10:46 - 2013-12-31 10:46 - 02347384 _____ (ESET) C:\Users\Leon\Downloads\esetsmartinstaller_enu.exe
2013-12-30 21:49 - 2013-12-30 21:49 - 00119702 _____ C:\Users\Leon\AppData\Local\recently-used.xbel
2013-12-30 10:21 - 2013-12-30 10:23 - 00000000 ____D C:\AdwCleaner
2013-12-30 10:07 - 2013-12-30 10:07 - 00000000 ____D C:\Users\Leon\AppData\Roaming\Malwarebytes
2013-12-30 10:06 - 2013-12-30 10:06 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-12-30 10:06 - 2013-12-30 10:06 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-12-30 10:06 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2013-12-29 11:00 - 2013-12-31 10:57 - 00004208 _____ C:\Windows\PFRO.log
2013-12-29 10:57 - 2013-12-29 10:57 - 00035352 _____ C:\ComboFix.txt
2013-12-29 10:47 - 2013-12-29 10:57 - 00000000 ____D C:\Qoobox
2013-12-29 10:47 - 2013-12-29 10:56 - 00000000 ____D C:\Windows\erdnt
2013-12-29 10:47 - 2011-06-26 07:45 - 00256000 _____ C:\Windows\PEV.exe
2013-12-29 10:47 - 2010-11-07 18:20 - 00208896 _____ C:\Windows\MBR.exe
2013-12-29 10:47 - 2009-04-20 05:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2013-12-29 10:47 - 2000-08-31 01:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2013-12-29 10:47 - 2000-08-31 01:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2013-12-29 10:47 - 2000-08-31 01:00 - 00098816 _____ C:\Windows\sed.exe
2013-12-29 10:47 - 2000-08-31 01:00 - 00080412 _____ C:\Windows\grep.exe
2013-12-29 10:47 - 2000-08-31 01:00 - 00068096 _____ C:\Windows\zip.exe
2013-12-28 22:58 - 2013-12-31 11:55 - 00002425 _____ C:\Windows\setupact.log
2013-12-28 22:58 - 2013-12-28 22:58 - 00274840 _____ C:\Windows\Minidump\122813-23821-01.dmp
2013-12-28 22:58 - 2013-12-28 22:58 - 00000000 _____ C:\Windows\setuperr.log
2013-12-28 22:47 - 2013-12-28 22:47 - 00000000 ____D C:\FRST
2013-12-28 22:45 - 2013-12-31 16:19 - 00000000 ____D C:\Users\Leon\Desktop\Virus
2013-12-28 22:45 - 2013-12-28 22:45 - 00000000 _____ C:\Users\Leon\defogger_reenable
2013-12-28 21:50 - 2013-12-28 21:50 - 00000000 ____D C:\ProgramData\Firefly Studios
2013-12-28 21:36 - 2013-12-28 21:54 - 00000000 ____D C:\Users\Leon\Documents\Stronghold 2
2013-12-28 21:36 - 2013-12-28 21:51 - 00002158 _____ C:\Users\Public\Desktop\Stronghold 2 spielen.lnk
2013-12-28 21:36 - 2013-12-28 21:36 - 00098304 _____ (Sony DADC Austria AG.) C:\Windows\SysWOW64\CmdLineExt.dll
2013-12-28 21:36 - 2013-12-28 21:36 - 00000000 ____D C:\Users\Leon\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2013-12-28 21:31 - 2013-12-28 21:31 - 00000000 ____D C:\Program Files (x86)\Firefly Studios
2013-12-27 22:53 - 2013-12-27 22:53 - 02344450 _____ C:\Users\Leon\Downloads\omsi_2_docs (1).zip
2013-12-27 13:32 - 2013-12-27 13:32 - 00000222 _____ C:\Users\Leon\Desktop\OMSI 2.url
2013-12-27 12:43 - 2013-12-27 12:43 - 00000000 ____D C:\Users\Leon\AppData\Local\Razer_Inc
2013-12-27 12:42 - 2013-12-27 12:42 - 00000000 ____D C:\Users\Leon\Documents\Razer
2013-12-27 12:41 - 2013-12-27 12:41 - 00000000 ____D C:\Users\Leon\AppData\Local\Razer
2013-12-27 12:40 - 2013-12-27 12:40 - 00002129 _____ C:\Users\Public\Desktop\Razer Game Booster.lnk
2013-12-27 12:40 - 2013-12-27 12:40 - 00000000 ____D C:\ProgramData\Razer
2013-12-27 12:40 - 2013-12-27 12:40 - 00000000 ____D C:\Program Files (x86)\Razer
2013-12-27 12:39 - 2013-12-27 12:39 - 41363400 _____ (Razer Inc.                                                  ) C:\Users\Leon\Downloads\RazerGameBoosterSetup_4.1.59.0_1.exe
2013-12-27 12:33 - 2013-12-27 12:34 - 82548634 _____ C:\Users\Leon\Downloads\MAN_Lions_City_DD.pl1.rar
2013-12-26 21:50 - 2013-12-26 21:50 - 00000000 ____D C:\Program Files (x86)\Aerosoft
2013-12-26 21:46 - 2013-12-26 21:50 - 00000954 _____ C:\Users\Public\Desktop\Aerosoft Launcher.lnk
2013-12-25 12:47 - 2013-12-25 12:47 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_point64_01009.Wdf
2013-12-25 12:46 - 2013-12-25 12:46 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_dc3d_01009.Wdf
2013-12-25 12:46 - 2013-12-25 12:46 - 00000000 ____D C:\Program Files\Microsoft IntelliPoint
2013-12-25 12:43 - 2013-12-25 12:47 - 00003040 _____ C:\Windows\System32\Tasks\Microsoft_Hardware_Launch_IPoint_exe
2013-12-25 12:43 - 2013-12-25 12:43 - 00003118 _____ C:\Windows\System32\Tasks\Microsoft_Hardware_Launch_mousekeyboardcenter_exe
2013-12-25 12:43 - 2013-12-25 12:43 - 00003090 _____ C:\Windows\System32\Tasks\Microsoft_Hardware_Launch_itype_exe
2013-12-25 12:43 - 2013-12-25 12:43 - 00003062 _____ C:\Windows\System32\Tasks\Microsoft_MKC_Logon_Task_ipoint.exe
2013-12-25 12:43 - 2013-12-25 12:43 - 00003060 _____ C:\Windows\System32\Tasks\Microsoft_MKC_Logon_Task_itype.exe
2013-12-25 12:43 - 2013-12-25 12:43 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_point64_01011.Wdf
2013-12-25 12:43 - 2013-12-25 12:43 - 00000000 ____D C:\Program Files\Microsoft Mouse and Keyboard Center
2013-12-25 12:41 - 2013-12-25 12:41 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_dc3d_01011.Wdf
2013-12-25 12:40 - 2013-12-25 12:40 - 22361472 _____ (Microsoft Corporation) C:\Users\Leon\Downloads\IPx64_1031_8.20.468.0.exe
2013-12-25 12:40 - 2013-12-25 12:40 - 16249216 _____ (Microsoft Corporation) C:\Users\Leon\Downloads\ITPx64_1031_8.20.469.0.exe
2013-12-24 15:26 - 2013-12-24 15:26 - 00000000 ____D C:\Users\Leon\Downloads\Mercedes-Benz-O530-Citaro
2013-12-24 15:16 - 2013-12-24 15:17 - 132605071 _____ C:\Users\Leon\Downloads\Mercedes-Benz-O530-Citaro.zip
2013-12-24 15:12 - 2013-12-24 15:13 - 73578015 _____ C:\Users\Leon\Downloads\Omsi2.ru_Mercedes_o530G.7z
2013-12-23 22:14 - 2013-12-23 22:15 - 00000000 ____D C:\Users\Leon\Downloads\Santasleigh
2013-12-23 22:13 - 2013-12-23 22:13 - 05923085 _____ C:\Users\Leon\Downloads\Santasleigh.zip
2013-12-23 22:08 - 2013-12-23 22:08 - 09339325 _____ C:\Users\Leon\Downloads\b738ber-christmas2012.zip
2013-12-23 22:08 - 2013-12-23 22:08 - 06914915 _____ C:\Users\Leon\Downloads\texture_ber_d_abmc_christmas__special.zip
2013-12-23 22:08 - 2013-12-23 22:08 - 00000000 ____D C:\Users\Leon\Downloads\texture_ber_d_abmc_christmas__special
2013-12-23 22:03 - 2013-12-23 22:03 - 00000000 ____D C:\Users\Leon\Downloads\b738xber-christmas2012
2013-12-23 22:02 - 2013-12-23 22:02 - 08612078 _____ C:\Users\Leon\Downloads\b738xber-christmas2012.zip
2013-12-23 21:47 - 2013-12-23 21:47 - 00000000 ____D C:\Users\Leon\Downloads\b7378abflyinghomeforchristmasd-abmcx
2013-12-23 21:46 - 2013-12-23 21:46 - 10739193 _____ C:\Users\Leon\Downloads\b7378abflyinghomeforchristmasd-abmcx.zip
2013-12-23 21:44 - 2013-12-23 21:44 - 14799019 _____ C:\Users\Leon\Downloads\airberlin2013.zip
2013-12-23 21:41 - 2013-12-23 21:41 - 13024069 _____ C:\Users\Leon\Downloads\FSX Air Air Berlin Xmas2013.zip
2013-12-23 21:28 - 2013-12-23 21:28 - 00000000 ____D C:\Users\Leon\Downloads\AS_AIRBUS-X-EXTENDED_FSX_PREPAR3D_PAINTKITS
2013-12-23 21:27 - 2013-12-23 21:27 - 20938885 _____ C:\Users\Leon\Downloads\airberlin_B737-800_D-ABMS_Flying_home_for_Christmas_cs_2013.rar
2013-12-23 21:23 - 2013-12-23 21:27 - 935309240 _____ C:\Users\Leon\Downloads\AS_AIRBUS-X-EXTENDED_FSX_PREPAR3D (2).zip
2013-12-23 21:22 - 2013-12-23 21:26 - 607528186 _____ C:\Users\Leon\Downloads\AS_AIRBUS-X-EXTENDED_FSX_PREPAR3D_PAINTKITS.zip
2013-12-23 19:31 - 2013-12-23 19:34 - 525640200 _____ C:\Users\Leon\Downloads\EuroTruckSimulator2_1_8_2_3_patch (1).exe
2013-12-23 18:58 - 2013-12-23 18:58 - 07992081 _____ C:\Users\Leon\Downloads\machinimasound_com_fire_within (1).zip
2013-12-23 18:58 - 2013-12-23 18:58 - 06757926 _____ C:\Users\Leon\Downloads\machinimasound_com_infected_euphoria (1).zip
2013-12-23 18:55 - 2013-12-23 18:55 - 00000000 ____D C:\Users\Leon\Downloads\machinimasound_com_the_arcade
2013-12-23 18:53 - 2013-12-23 18:54 - 08341944 _____ C:\Users\Leon\Downloads\machinimasound_com_the_arcade.zip
2013-12-23 18:45 - 2013-12-23 18:45 - 00000000 ____D C:\Users\Leon\Downloads\machinimasound_com_olympos
2013-12-23 18:45 - 2013-12-23 18:45 - 00000000 ____D C:\Users\Leon\Downloads\machinimasound_com_incursion (1)
2013-12-23 18:45 - 2013-12-23 18:45 - 00000000 ____D C:\Users\Leon\Downloads\machinimasound_com_escape_from_the_temple
2013-12-23 18:44 - 2013-12-23 18:44 - 07851783 _____ C:\Users\Leon\Downloads\machinimasound_com_incursion (1).zip
2013-12-23 18:44 - 2013-12-23 18:44 - 06933318 _____ C:\Users\Leon\Downloads\machinimasound_com_olympos.zip
2013-12-23 18:43 - 2013-12-23 18:44 - 09742583 _____ C:\Users\Leon\Downloads\machinimasound_com_escape_from_the_temple.zip
2013-12-23 10:48 - 2013-12-23 10:48 - 00000000 ____D C:\Windows\F5C9BE9A04C34A728CD0BB67C722D608.TMP
2013-12-23 10:47 - 2013-12-23 10:48 - 251738472 _____ C:\Users\Leon\Downloads\camtasia.exe
2013-12-23 10:39 - 2013-12-23 10:39 - 02209528 _____ C:\Users\Leon\Downloads\VirtualDub-1.10.4-AMD64.zip
2013-12-23 10:39 - 2013-12-23 10:39 - 02209528 _____ C:\Users\Leon\Downloads\VirtualDub-1.10.4-AMD64 (1).zip
2013-12-22 17:29 - 2013-12-22 17:29 - 05655084 _____ C:\Users\Leon\Downloads\Boeing 757-200 American Airlines.zip
2013-12-22 17:17 - 2013-12-22 17:17 - 23167859 _____ C:\Users\Leon\Downloads\Airbus A340-300 Basepack.zip
2013-12-22 17:17 - 2013-12-22 17:17 - 02767209 _____ C:\Users\Leon\Downloads\Airbus A340-300 Air France.zip
2013-12-22 17:16 - 2013-12-22 17:16 - 02215563 _____ (Xudeva Irribarra                                            ) C:\Users\Leon\Downloads\Boeing 747-8i KLM v1.00.exe
2013-12-22 17:05 - 2013-12-22 17:05 - 00000000 ____D C:\Users\Leon\Downloads\AS_CARENADO-PA32-SARATOGA-SP_FSX
2013-12-22 17:04 - 2013-12-22 17:04 - 93903080 _____ C:\Users\Leon\Downloads\AS_CARENADO-PA32-SARATOGA-SP_FSX.zip
2013-12-21 22:39 - 2013-12-21 22:40 - 131000436 _____ C:\Users\Leon\Downloads\AS_MEGA-AIRPORT-VIENNA-X_FSX.zip
2013-12-21 22:39 - 2013-12-21 22:40 - 131000436 _____ C:\Users\Leon\Downloads\AS_MEGA-AIRPORT-VIENNA-X_FSX (1).zip
2013-12-21 22:34 - 2013-12-21 22:37 - 00000000 ____D C:\Users\Leon\Downloads\AS_TWIN-OTTER-X-EXTENDED_FSX_P3D (2)
2013-12-21 22:25 - 2013-12-21 22:28 - 567687781 _____ C:\Users\Leon\Downloads\AS_TWIN-OTTER-X-EXTENDED_FSX_P3D (2).zip
2013-12-21 22:23 - 2013-12-21 22:25 - 494532720 _____ C:\Users\Leon\Downloads\mjc8-400-Pilot-1_008-inst.exe
2013-12-21 22:19 - 2013-12-21 22:21 - 343828771 _____ C:\Users\Leon\Downloads\FlyTampa_Vienna_FSX_Update_25.exe
2013-12-20 19:39 - 2013-12-27 23:13 - 00000000 ___RD C:\Users\Leon\Documents\MAGIX
2013-12-20 16:25 - 2013-12-20 16:25 - 02849144 _____ (MAGIX AG) C:\Users\Leon\Downloads\trial_videodeluxe2014_dlm.exe
2013-12-18 16:59 - 2013-12-18 17:09 - 28341646 _____ C:\Users\Leon\Downloads\JAGUAR_V2_ENTPACKEN.rar
2013-12-17 16:46 - 2013-12-17 16:54 - 00026022 _____ C:\Users\Leon\Documents\Lesetagebuch.odt
2013-12-17 14:08 - 2013-12-17 16:56 - 00018270 _____ C:\Users\Leon\Documents\Inhaltsverzeichniss Deutsch.odt
2013-12-17 13:40 - 2013-12-17 13:40 - 03624249 _____ C:\Users\Leon\Downloads\Global_ATC_demo.zip
2013-12-12 18:11 - 2013-12-13 15:54 - 00000000 ____D C:\Program Files (x86)\Mozilla Thunderbird
2013-12-11 18:19 - 2010-06-02 04:55 - 00239960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_7.dll
2013-12-11 18:19 - 2010-06-02 04:55 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_7.dll
2013-12-11 18:19 - 2010-05-26 11:41 - 01907552 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_43.dll
2013-12-11 18:19 - 2010-05-26 11:41 - 01868128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_43.dll
2013-12-11 18:19 - 2010-05-26 11:41 - 00511328 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_43.dll
2013-12-11 18:19 - 2010-05-26 11:41 - 00470880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_43.dll
2013-12-11 18:19 - 2010-05-26 11:41 - 00276832 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_43.dll
2013-12-11 18:19 - 2010-05-26 11:41 - 00248672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_43.dll
2013-12-11 18:19 - 2010-02-04 10:01 - 00530776 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_6.dll
2013-12-11 18:19 - 2010-02-04 10:01 - 00528216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_6.dll
2013-12-11 18:19 - 2010-02-04 10:01 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_6.dll
2013-12-11 18:19 - 2010-02-04 10:01 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_6.dll
2013-12-11 18:19 - 2010-02-04 10:01 - 00078680 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_4.dll
2013-12-11 18:19 - 2010-02-04 10:01 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_4.dll
2013-12-11 18:19 - 2009-09-04 17:44 - 00517960 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_5.dll
2013-12-11 18:19 - 2009-09-04 17:44 - 00515416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_5.dll
2013-12-11 18:19 - 2009-09-04 17:44 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_5.dll
2013-12-11 18:19 - 2009-09-04 17:44 - 00176968 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_5.dll
2013-12-11 18:19 - 2009-09-04 17:29 - 05554512 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_42.dll
2013-12-11 18:19 - 2009-09-04 17:29 - 05501792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_42.dll
2013-12-11 18:19 - 2009-09-04 17:29 - 02582888 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_42.dll
2013-12-11 18:19 - 2009-09-04 17:29 - 01974616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_42.dll
2013-12-11 18:19 - 2009-09-04 17:29 - 00285024 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_42.dll
2013-12-11 18:19 - 2009-09-04 17:29 - 00235344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_42.dll
2013-12-11 18:18 - 2009-09-04 17:44 - 00073544 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_3.dll
2013-12-11 18:18 - 2009-09-04 17:44 - 00069464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_3.dll
2013-12-11 18:18 - 2009-09-04 17:29 - 02475352 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_42.dll
2013-12-11 18:18 - 2009-09-04 17:29 - 01892184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_42.dll
2013-12-11 18:18 - 2009-09-04 17:29 - 00523088 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_42.dll
2013-12-11 18:18 - 2009-09-04 17:29 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_42.dll
2013-12-11 18:18 - 2009-03-16 14:18 - 00521560 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_4.dll
2013-12-11 18:18 - 2009-03-16 14:18 - 00517448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_4.dll
2013-12-11 18:18 - 2009-03-16 14:18 - 00235352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_4.dll
2013-12-11 18:18 - 2009-03-16 14:18 - 00174936 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_4.dll
2013-12-11 18:18 - 2009-03-16 14:18 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_6.dll
2013-12-11 18:18 - 2009-03-16 14:18 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_6.dll
2013-12-11 18:18 - 2009-03-09 15:27 - 05425496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_41.dll
2013-12-11 18:18 - 2009-03-09 15:27 - 04178264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_41.dll
2013-12-11 18:18 - 2009-03-09 15:27 - 02430312 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_41.dll
2013-12-11 18:18 - 2009-03-09 15:27 - 00520544 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_41.dll
2013-12-11 18:18 - 2008-10-27 10:04 - 00518480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_3.dll
2013-12-11 18:18 - 2008-10-27 10:04 - 00514384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_3.dll
2013-12-11 18:18 - 2008-10-27 10:04 - 00235856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_3.dll
2013-12-11 18:18 - 2008-10-27 10:04 - 00175440 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_3.dll
2013-12-11 18:18 - 2008-10-27 10:04 - 00074576 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_2.dll
2013-12-11 18:18 - 2008-10-27 10:04 - 00070992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_2.dll
2013-12-11 18:18 - 2008-10-27 10:04 - 00025936 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_5.dll
2013-12-11 18:18 - 2008-10-27 10:04 - 00023376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_5.dll
2013-12-11 18:18 - 2008-10-15 06:22 - 05631312 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_40.dll
2013-12-11 18:18 - 2008-10-15 06:22 - 04379984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_40.dll
2013-12-11 18:18 - 2008-10-15 06:22 - 02605920 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_40.dll
2013-12-11 18:18 - 2008-10-15 06:22 - 02036576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_40.dll
2013-12-11 18:18 - 2008-10-15 06:22 - 00519000 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_40.dll
2013-12-11 18:18 - 2008-10-15 06:22 - 00452440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_40.dll
2013-12-11 18:18 - 2008-07-31 10:41 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_2.dll
2013-12-11 18:18 - 2008-07-31 10:41 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_2.dll
2013-12-11 18:18 - 2008-07-31 10:41 - 00072200 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_1.dll
2013-12-11 18:18 - 2008-07-31 10:41 - 00068616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_1.dll
2013-12-11 18:18 - 2008-07-31 10:40 - 00513544 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_2.dll
2013-12-11 18:18 - 2008-07-31 10:40 - 00509448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_2.dll
2013-12-11 18:18 - 2008-07-10 11:01 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_39.dll
2013-12-11 18:18 - 2008-07-10 11:00 - 04992520 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_39.dll
2013-12-11 18:18 - 2008-07-10 11:00 - 03851784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_39.dll
2013-12-11 18:18 - 2008-07-10 11:00 - 01942552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_39.dll
2013-12-11 18:18 - 2008-07-10 11:00 - 01493528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_39.dll
2013-12-11 18:18 - 2008-07-10 11:00 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_39.dll
2013-12-11 18:18 - 2008-05-30 14:19 - 00511496 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_1.dll
2013-12-11 18:18 - 2008-05-30 14:19 - 00507400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_1.dll
2013-12-11 18:18 - 2008-05-30 14:18 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_1.dll
2013-12-11 18:18 - 2008-05-30 14:18 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_1.dll
2013-12-11 18:18 - 2008-05-30 14:17 - 00068104 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_0.dll
2013-12-11 18:18 - 2008-05-30 14:17 - 00065032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_0.dll
2013-12-11 18:18 - 2008-05-30 14:17 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_4.dll
2013-12-11 18:18 - 2008-05-30 14:16 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_4.dll
2013-12-11 18:18 - 2008-05-30 14:11 - 04991496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_38.dll
2013-12-11 18:18 - 2008-05-30 14:11 - 03850760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_38.dll
2013-12-11 18:18 - 2008-05-30 14:11 - 01941528 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_38.dll
2013-12-11 18:18 - 2008-05-30 14:11 - 01491992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_38.dll
2013-12-11 18:18 - 2008-05-30 14:11 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_38.dll
2013-12-11 18:18 - 2008-05-30 14:11 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_38.dll
2013-12-11 18:18 - 2008-03-05 16:04 - 00489480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_0.dll
2013-12-11 18:18 - 2008-03-05 16:03 - 00479752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_0.dll
2013-12-11 18:18 - 2008-03-05 16:03 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_0.dll
2013-12-11 18:18 - 2008-03-05 16:03 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_0.dll
2013-12-11 18:18 - 2008-03-05 16:00 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_3.dll
2013-12-11 18:18 - 2008-03-05 16:00 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_3.dll
2013-12-11 18:18 - 2008-03-05 15:56 - 04910088 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_37.dll
2013-12-11 18:18 - 2008-03-05 15:56 - 03786760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_37.dll
2013-12-11 18:18 - 2008-03-05 15:56 - 01860120 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_37.dll
2013-12-11 18:18 - 2008-03-05 15:56 - 01420824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_37.dll
2013-12-11 18:18 - 2008-02-05 23:07 - 00529424 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_37.dll
2013-12-11 18:18 - 2008-02-05 23:07 - 00462864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_37.dll
2013-12-11 18:18 - 2007-10-22 03:40 - 00411656 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_10.dll
2013-12-11 18:18 - 2007-10-22 03:39 - 00267272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_10.dll
2013-12-11 18:18 - 2007-10-22 03:37 - 00021000 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_2.dll
2013-12-11 18:18 - 2007-10-22 03:37 - 00017928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_2.dll
2013-12-11 18:18 - 2007-10-12 15:14 - 05081608 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_36.dll
2013-12-11 18:18 - 2007-10-12 15:14 - 03734536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_36.dll
2013-12-11 18:18 - 2007-10-12 15:14 - 02006552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_36.dll
2013-12-11 18:18 - 2007-10-12 15:14 - 01374232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_36.dll
2013-12-11 18:18 - 2007-10-02 09:56 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_36.dll
2013-12-11 18:18 - 2007-10-02 09:56 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_36.dll
2013-12-11 18:18 - 2007-07-20 00:57 - 00411496 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_9.dll
2013-12-11 18:18 - 2007-07-20 00:57 - 00267112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_9.dll
2013-12-11 18:18 - 2007-07-19 18:14 - 05073256 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_35.dll
2013-12-11 18:18 - 2007-07-19 18:14 - 03727720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_35.dll
2013-12-11 18:18 - 2007-07-19 18:14 - 01985904 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_35.dll
2013-12-11 18:18 - 2007-07-19 18:14 - 01358192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_35.dll
2013-12-11 18:18 - 2007-07-19 18:14 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_35.dll
2013-12-11 18:18 - 2007-07-19 18:14 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_35.dll
2013-12-11 18:18 - 2007-06-20 20:49 - 00409960 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_8.dll
2013-12-11 18:18 - 2007-06-20 20:46 - 00266088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_8.dll
2013-12-11 18:18 - 2007-05-16 16:45 - 04496232 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_34.dll
2013-12-11 18:18 - 2007-05-16 16:45 - 03497832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_34.dll
2013-12-11 18:18 - 2007-05-16 16:45 - 01401200 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_34.dll
2013-12-11 18:18 - 2007-05-16 16:45 - 01124720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_34.dll
2013-12-11 18:18 - 2007-05-16 16:45 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_34.dll
2013-12-11 18:18 - 2007-05-16 16:45 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_34.dll
2013-12-11 18:18 - 2007-04-04 18:55 - 00403304 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_7.dll
2013-12-11 18:18 - 2007-04-04 18:55 - 00261480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_7.dll
2013-12-11 18:18 - 2007-03-15 16:57 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_33.dll
2013-12-11 18:18 - 2007-03-15 16:57 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_33.dll
2013-12-11 18:18 - 2007-03-12 16:42 - 04494184 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_33.dll
2013-12-11 18:18 - 2007-03-12 16:42 - 03495784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_33.dll
2013-12-11 18:18 - 2007-03-12 16:42 - 01400176 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_33.dll
2013-12-11 18:18 - 2007-03-12 16:42 - 01123696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_33.dll
2013-12-11 18:18 - 2007-03-05 12:42 - 00017688 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_1.dll
2013-12-11 18:18 - 2007-03-05 12:42 - 00015128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_1.dll
2013-12-11 18:18 - 2007-01-24 15:27 - 00393576 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_6.dll
2013-12-11 18:18 - 2007-01-24 15:27 - 00255848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_6.dll
2013-12-11 18:18 - 2006-12-08 12:02 - 00251672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_5.dll
2013-12-11 18:18 - 2006-12-08 12:00 - 00390424 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_5.dll
2013-12-11 18:18 - 2006-11-29 13:06 - 04398360 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_32.dll
2013-12-11 18:18 - 2006-11-29 13:06 - 03426072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_32.dll
2013-12-11 18:18 - 2006-11-29 13:06 - 00469264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10.dll
2013-12-11 18:18 - 2006-11-29 13:06 - 00440080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10.dll
2013-12-11 18:18 - 2006-09-28 16:05 - 03977496 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_31.dll
2013-12-11 18:18 - 2006-09-28 16:05 - 02414360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_31.dll
2013-12-11 18:18 - 2006-09-28 16:05 - 00237848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_4.dll
2013-12-11 18:18 - 2006-09-28 16:04 - 00364824 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_4.dll
2013-12-11 18:18 - 2006-07-28 09:31 - 00083736 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_2.dll
2013-12-11 18:18 - 2006-07-28 09:30 - 00363288 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_3.dll
2013-12-11 18:18 - 2006-07-28 09:30 - 00236824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_3.dll
2013-12-11 18:18 - 2006-07-28 09:30 - 00062744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_2.dll
2013-12-11 18:18 - 2006-05-31 07:24 - 00230168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_2.dll
2013-12-11 18:18 - 2006-05-31 07:22 - 00354072 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_2.dll
2013-12-11 18:18 - 2006-03-31 12:41 - 03927248 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_30.dll
2013-12-11 18:18 - 2006-03-31 12:40 - 02388176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_30.dll
2013-12-11 18:18 - 2006-03-31 12:40 - 00352464 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_1.dll
2013-12-11 18:18 - 2006-03-31 12:39 - 00229584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_1.dll
2013-12-11 18:18 - 2006-03-31 12:39 - 00083664 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_1.dll
2013-12-11 18:18 - 2006-03-31 12:39 - 00062672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_1.dll
2013-12-11 18:18 - 2006-02-03 08:43 - 03830992 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_29.dll
2013-12-11 18:18 - 2006-02-03 08:43 - 02332368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_29.dll
2013-12-11 18:18 - 2006-02-03 08:42 - 00355536 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_0.dll
2013-12-11 18:18 - 2006-02-03 08:42 - 00230096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_0.dll
2013-12-11 18:18 - 2006-02-03 08:41 - 00016592 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_0.dll
2013-12-11 18:18 - 2006-02-03 08:41 - 00014032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_0.dll
2013-12-11 18:17 - 2005-12-05 18:09 - 03815120 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_28.dll
2013-12-11 18:17 - 2005-12-05 18:09 - 02323664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_28.dll
2013-12-11 18:17 - 2005-07-22 19:59 - 03807440 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_27.dll
2013-12-11 18:17 - 2005-07-22 19:59 - 02319568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_27.dll
2013-12-11 18:17 - 2005-05-26 15:34 - 03767504 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_26.dll
2013-12-11 18:17 - 2005-05-26 15:34 - 02297552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_26.dll
2013-12-11 18:17 - 2005-03-18 17:19 - 03823312 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_25.dll
2013-12-11 18:17 - 2005-03-18 17:19 - 02337488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_25.dll
2013-12-11 18:17 - 2005-02-05 19:45 - 03544272 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_24.dll
2013-12-11 18:17 - 2005-02-05 19:45 - 02222800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_24.dll
2013-12-11 15:31 - 2013-05-10 06:56 - 14631424 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2013-12-11 15:31 - 2013-05-10 06:56 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2013-12-11 15:31 - 2013-05-10 05:56 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL
2013-12-11 15:31 - 2013-05-10 05:56 - 11410432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
2013-12-11 15:30 - 2013-11-26 12:54 - 23183360 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-12-11 15:30 - 2013-11-26 11:19 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-12-11 15:30 - 2013-11-26 11:18 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2013-12-11 15:30 - 2013-11-26 11:11 - 17112576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-12-11 15:30 - 2013-11-26 10:48 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-12-11 15:30 - 2013-11-26 10:46 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2013-12-11 15:30 - 2013-11-26 10:41 - 02764288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-12-11 15:30 - 2013-11-26 10:29 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-12-11 15:30 - 2013-11-26 10:27 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-12-11 15:30 - 2013-11-26 10:23 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-12-11 15:30 - 2013-11-26 10:21 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-12-11 15:30 - 2013-11-26 10:18 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-12-11 15:30 - 2013-11-26 10:18 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2013-12-11 15:30 - 2013-11-26 10:16 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2013-12-11 15:30 - 2013-11-26 09:57 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-12-11 15:30 - 2013-11-26 09:38 - 02166784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-12-11 15:30 - 2013-11-26 09:38 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-12-11 15:30 - 2013-11-26 09:35 - 05769216 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-12-11 15:30 - 2013-11-26 09:32 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-12-11 15:30 - 2013-11-26 09:28 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2013-12-11 15:30 - 2013-11-26 09:16 - 04243968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-12-11 15:30 - 2013-11-26 09:02 - 01995264 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-12-11 15:30 - 2013-11-26 08:48 - 12996608 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-12-11 15:30 - 2013-11-26 08:32 - 01928192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-12-11 15:30 - 2013-11-26 08:26 - 11221504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-12-11 15:30 - 2013-11-26 08:07 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-12-11 15:30 - 2013-11-26 07:40 - 01395200 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-12-11 15:30 - 2013-11-26 07:34 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2013-12-11 15:30 - 2013-11-26 07:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-12-11 15:30 - 2013-11-26 07:33 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-12-11 15:30 - 2013-11-26 07:27 - 01157632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-12-11 14:56 - 2013-12-11 14:56 - 02344450 _____ C:\Users\Leon\Downloads\omsi_2_docs.zip
2013-12-11 14:21 - 2013-11-23 19:26 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2013-12-11 14:21 - 2013-11-23 18:47 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2013-12-11 14:21 - 2013-11-12 03:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2013-12-11 14:21 - 2013-11-12 03:07 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2013-12-11 14:21 - 2013-10-30 03:32 - 00335360 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll
2013-12-11 14:21 - 2013-10-30 03:19 - 00301568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msieftp.dll
2013-12-11 14:21 - 2013-10-30 02:24 - 03155968 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-12-11 14:21 - 2013-10-19 03:18 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll
2013-12-11 14:21 - 2013-10-19 02:36 - 00159232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll
2013-12-11 14:21 - 2013-10-12 03:32 - 00150016 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx
2013-12-11 14:21 - 2013-10-12 03:31 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll
2013-12-11 14:21 - 2013-10-12 03:04 - 00121856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshom.ocx
2013-12-11 14:21 - 2013-10-12 03:03 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scrrun.dll
2013-12-11 14:21 - 2013-10-12 02:33 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe
2013-12-11 14:21 - 2013-10-12 02:33 - 00156160 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe
2013-12-11 14:21 - 2013-10-12 02:15 - 00141824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscript.exe
2013-12-11 14:21 - 2013-10-12 02:15 - 00126976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cscript.exe
2013-12-11 14:21 - 2013-10-04 03:16 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys
2013-12-11 14:21 - 2013-10-04 02:36 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys
2013-12-10 14:08 - 2013-12-10 14:15 - 525640200 _____ C:\Users\Leon\Downloads\EuroTruckSimulator2_1_8_2_3_patch.exe
2013-12-09 17:43 - 2013-12-09 17:43 - 02552323 _____ C:\Users\Leon\Downloads\validator.tar.gz
2013-12-09 17:43 - 2013-12-09 17:43 - 00557605 _____ C:\Users\Leon\Downloads\sgml-lib.tar.gz
2013-12-08 16:08 - 2013-12-08 16:08 - 00000000 ____D C:\Users\Leon\Downloads\Kenworth_W900aRC_dmitry68-Stas556
2013-12-08 15:52 - 2013-12-08 16:02 - 31436553 _____ C:\Users\Leon\Downloads\Kenworth_W900aRC_dmitry68-Stas556.rar
2013-12-08 13:27 - 2013-12-08 13:27 - 00000000 ____D C:\Users\Leon\Downloads\ultrafastlvlmax
2013-12-08 13:15 - 2013-12-08 13:15 - 00002116 _____ C:\Users\Leon\Downloads\ultrafastlvlmax.rar
2013-12-08 13:15 - 2013-12-08 13:15 - 00000000 ____D C:\Users\Leon\Downloads\superreich_mod
2013-12-08 13:14 - 2013-12-08 13:14 - 00004656 _____ C:\Users\Leon\Downloads\superreich_mod.rar
2013-12-08 12:47 - 2013-12-08 12:48 - 00000000 ____D C:\Users\Leon\Downloads\hardecosim
2013-12-08 12:47 - 2013-12-08 12:47 - 00107156 _____ C:\Users\Leon\Downloads\hardecosim.zip
2013-12-08 11:31 - 2013-12-08 11:31 - 00000000 ____D C:\Users\Leon\AppData\Local\Logitech® Webcam-Software
2013-12-08 11:28 - 2013-12-08 11:28 - 00000000 ____D C:\ProgramData\LogiShrd
2013-12-08 11:27 - 2013-12-27 23:16 - 00010687 _____ C:\Windows\system32\lvcoinst.log
2013-12-08 11:27 - 2013-12-27 23:16 - 00000000 ____D C:\Program Files\Common Files\logishrd
2013-12-08 11:27 - 2013-12-27 23:15 - 00000000 ____D C:\Program Files (x86)\Logitech
2013-12-08 11:27 - 2013-12-08 11:27 - 00000000 ____D C:\Users\Leon\AppData\Roaming\Leadertech
2013-12-08 11:25 - 2013-12-08 11:25 - 74637872 _____ (Logitech, Inc.) C:\Users\Leon\Downloads\lws251.exe
2013-12-08 11:24 - 2013-12-08 11:24 - 00000000 ____D C:\Users\Leon\AppData\Roaming\Seeing Machines
2013-12-08 11:24 - 2013-12-08 11:24 - 00000000 ____D C:\ProgramData\Seeing Machines
2013-12-08 11:19 - 2013-12-08 11:19 - 00000000 ____D C:\Program Files (x86)\VJoy Virtual Joystick Driver
2013-12-08 11:13 - 2013-12-08 11:13 - 00002217 _____ C:\Users\Public\Desktop\FaceTrackNoIR.lnk
2013-12-08 11:12 - 2013-12-08 11:12 - 00000000 ____D C:\Program Files (x86)\Abbequerque Inc
2013-12-08 11:10 - 2013-12-08 11:10 - 78352371 _____ (FaceTrackNoIR Team                                          ) C:\Users\Leon\Downloads\SetupFaceTrackNoIR_Full_v170.exe
2013-12-08 11:02 - 2013-12-08 11:22 - 00000000 ____D C:\Users\Leon\Downloads\FaceTrack
2013-12-08 10:29 - 2013-12-27 23:13 - 00000000 ____D C:\ProgramData\MAGIX
2013-12-08 10:29 - 2013-12-27 23:13 - 00000000 ____D C:\Program Files (x86)\MAGIX
2013-12-08 10:29 - 2013-12-20 19:43 - 00000000 ____D C:\Users\Leon\AppData\Roaming\MAGIX
2013-12-08 10:29 - 2013-12-08 10:29 - 00001226 _____ C:\Users\Public\Desktop\MAGIX Foto & Grafik Designer 7 SE.lnk
2013-12-08 10:29 - 2013-12-08 10:29 - 00000000 ____D C:\Users\Leon\AppData\Local\Xara
2013-12-08 10:28 - 2013-12-08 10:58 - 91182039 _____ C:\Users\Leon\Downloads\FaceTrack.rar
2013-12-08 10:27 - 2013-12-08 10:27 - 155998448 _____ (MAGIX AG) C:\Users\Leon\Downloads\Foto_Grafik_Designer_7_SE_DE_CHIP_DE_131029_15-06.exe
2013-12-07 20:00 - 2013-12-07 20:01 - 00000000 ____D C:\Users\Leon\Downloads\Scania Busscar 1.5.2-1.6.x
2013-12-07 19:59 - 2013-12-07 19:59 - 28399366 _____ C:\Users\Leon\Downloads\Scania Busscar 1.5.2-1.6.x.rar
2013-12-07 18:39 - 2013-12-07 18:39 - 00000000 ____D C:\Users\Leon\Downloads\NeoplanStarliner_BusModPackFurkanSevke_ (1)
2013-12-07 18:38 - 2013-12-07 18:38 - 40591368 _____ C:\Users\Leon\Downloads\EuroTruckSimulator2_1_6_1_to_1_7_0_patch.exe
2013-12-07 18:37 - 2013-12-07 18:37 - 52619900 _____ C:\Users\Leon\Downloads\NeoplanStarliner_BusModPackFurkanSevke_ (1).rar
2013-12-07 18:34 - 2013-12-07 18:35 - 00000000 ____D C:\Users\Leon\Downloads\zzTSM_Schwerlast_Trailerpacket_1.7.5_Packet_1-3
2013-12-07 17:33 - 2013-12-07 17:37 - 00000000 ____D C:\Users\Leon\Downloads\zzzzzzzzzzzReal_Environment2_v175_AEgos_Edition
2013-12-07 17:30 - 2013-12-07 17:33 - 162534209 _____ C:\Users\Leon\Downloads\zzzzzzzzzzzReal_Environment2_v175_AEgos_Edition.7z
2013-12-07 17:26 - 2013-12-07 17:39 - 39663402 _____ C:\Users\Leon\Downloads\zzTSM_Schwerlast_Trailerpacket_1.7.5_Packet_1-3.rar
2013-12-07 17:26 - 2013-12-07 17:26 - 00000000 ____D C:\Users\Leon\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\LatinVFR
2013-12-07 17:17 - 2013-12-07 17:22 - 553483869 _____ C:\Users\Leon\Downloads\LatinVFR_TXKF_FsX_v1.0.exe
2013-12-07 17:16 - 2013-12-07 17:20 - 315511460 _____ () C:\Users\Leon\Downloads\Budapest_LHBP_v101_FSX.exe
2013-12-06 14:57 - 2013-12-06 14:57 - 00001011 _____ C:\Users\Public\Desktop\Audacity.lnk
2013-12-06 14:54 - 2013-12-06 14:54 - 00614784 _____ C:\Users\Leon\Downloads\Audacity - CHIP-Downloader.exe
2013-12-06 13:02 - 2013-12-06 13:52 - 00000000 ____D C:\Users\Leon\Downloads\machinimasound_com_beyond_the_stars
2013-12-06 13:02 - 2013-12-06 13:09 - 00000000 ____D C:\Users\Leon\Downloads\machinimasound_com_morning_cruise (2)
2013-12-06 13:02 - 2013-12-06 13:06 - 00000000 ____D C:\Users\Leon\Downloads\machinimasound_com_ecstatic_wave (1)
2013-12-06 13:02 - 2013-12-06 13:04 - 00000000 ____D C:\Users\Leon\Downloads\machinimasound_com_afterlife_city
2013-12-06 12:59 - 2013-12-06 13:01 - 08818299 _____ C:\Users\Leon\Downloads\machinimasound_com_beyond_the_stars.zip
2013-12-06 12:59 - 2013-12-06 13:01 - 07952572 _____ C:\Users\Leon\Downloads\machinimasound_com_afterlife_city.zip
2013-12-06 12:59 - 2013-12-06 13:01 - 07897030 _____ C:\Users\Leon\Downloads\machinimasound_com_morning_cruise (2).zip
2013-12-06 12:59 - 2013-12-06 12:59 - 09957201 _____ C:\Users\Leon\Downloads\machinimasound_com_ecstatic_wave (1).zip
2013-12-05 20:18 - 2013-12-05 20:18 - 52619900 _____ C:\Users\Leon\Downloads\NeoplanStarliner_BusModPackFurkanSevke_.rar
2013-12-02 20:27 - 2013-12-02 20:28 - 154763637 _____ C:\Users\Leon\Downloads\Bau-Simulator2012_Update01.rar
2013-12-01 10:29 - 2013-12-01 10:36 - 20560641 _____ C:\Users\Leon\Downloads\ClaasXerion5000TracVC_TTM_V2FIX_N.zip

==================== One Month Modified Files and Folders =======

2013-12-31 16:19 - 2013-12-31 16:19 - 00000975 _____ C:\Users\Leon\Desktop\checkup.txt
2013-12-31 16:19 - 2013-12-28 22:45 - 00000000 ____D C:\Users\Leon\Desktop\Virus
2013-12-31 16:12 - 2013-04-12 19:54 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-12-31 15:48 - 2013-04-12 19:17 - 00001110 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-12-31 14:31 - 2013-05-06 14:44 - 01536728 _____ C:\Windows\WindowsUpdate.log
2013-12-31 14:04 - 2013-08-20 17:21 - 00000000 ____D C:\Program Files (x86)\FS Recorder for FSX
2013-12-31 11:55 - 2013-12-28 22:58 - 00002425 _____ C:\Windows\setupact.log
2013-12-31 11:05 - 2009-07-14 05:45 - 00009696 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-12-31 11:05 - 2009-07-14 05:45 - 00009696 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-12-31 11:01 - 2013-12-31 11:01 - 00000000 ____D C:\Users\Leon\AppData\Roaming\Avira
2013-12-31 11:00 - 2013-12-31 11:00 - 00002070 _____ C:\Users\Public\Desktop\Avira Control Center.lnk
2013-12-31 10:59 - 2013-12-31 10:59 - 00000000 ____D C:\Program Files (x86)\Avira
2013-12-31 10:59 - 2013-04-12 19:19 - 00000000 ____D C:\ProgramData\Avira
2013-12-31 10:58 - 2013-07-05 17:20 - 00000000 ____D C:\Users\Leon\AppData\Local\HTC MediaHub
2013-12-31 10:57 - 2013-12-29 11:00 - 00004208 _____ C:\Windows\PFRO.log
2013-12-31 10:57 - 2013-04-12 19:17 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-12-31 10:57 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-12-31 10:54 - 2013-12-31 10:53 - 129598176 _____ C:\Users\Leon\Downloads\avira_free_antivirus_de.exe
2013-12-31 10:49 - 2013-12-31 10:49 - 00000000 ____D C:\Program Files (x86)\ESET
2013-12-31 10:47 - 2013-12-31 10:47 - 00891200 _____ C:\Users\Leon\Desktop\SecurityCheck.exe
2013-12-31 10:46 - 2013-12-31 10:46 - 02347384 _____ (ESET) C:\Users\Leon\Downloads\esetsmartinstaller_enu.exe
2013-12-30 21:49 - 2013-12-30 21:49 - 00119702 _____ C:\Users\Leon\AppData\Local\recently-used.xbel
2013-12-30 21:49 - 2013-04-20 17:55 - 00000000 ____D C:\Users\Leon\.gimp-2.8
2013-12-30 14:01 - 2013-11-30 17:13 - 00000000 ____D C:\Program Files (x86)\Steam
2013-12-30 13:30 - 2013-05-29 15:33 - 00000000 ____D C:\Users\Leon\AppData\Roaming\Spotify
2013-12-30 10:23 - 2013-12-30 10:21 - 00000000 ____D C:\AdwCleaner
2013-12-30 10:07 - 2013-12-30 10:07 - 00000000 ____D C:\Users\Leon\AppData\Roaming\Malwarebytes
2013-12-30 10:06 - 2013-12-30 10:06 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-12-30 10:06 - 2013-12-30 10:06 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-12-29 19:34 - 2013-07-25 11:56 - 00000000 ____D C:\Users\Leon\AppData\Roaming\Audacity
2013-12-29 19:26 - 2013-04-23 14:51 - 00000000 ____D C:\Users\Leon\AppData\Roaming\Skype
2013-12-29 18:55 - 2009-07-14 06:08 - 00032632 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2013-12-29 10:57 - 2013-12-29 10:57 - 00035352 _____ C:\ComboFix.txt
2013-12-29 10:57 - 2013-12-29 10:47 - 00000000 ____D C:\Qoobox
2013-12-29 10:56 - 2013-12-29 10:47 - 00000000 ____D C:\Windows\erdnt
2013-12-29 10:56 - 2013-04-12 19:13 - 00000000 ___RD C:\Users\Leon\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-12-29 10:55 - 2009-07-14 03:34 - 00000215 _____ C:\Windows\system.ini
2013-12-28 22:58 - 2013-12-28 22:58 - 00274840 _____ C:\Windows\Minidump\122813-23821-01.dmp
2013-12-28 22:58 - 2013-12-28 22:58 - 00000000 _____ C:\Windows\setuperr.log
2013-12-28 22:58 - 2013-06-01 12:45 - 00000000 ____D C:\Windows\Minidump
2013-12-28 22:47 - 2013-12-28 22:47 - 00000000 ____D C:\FRST
2013-12-28 22:45 - 2013-12-28 22:45 - 00000000 _____ C:\Users\Leon\defogger_reenable
2013-12-28 22:45 - 2013-04-12 19:11 - 00000000 ____D C:\Users\Leon
2013-12-28 21:54 - 2013-12-28 21:36 - 00000000 ____D C:\Users\Leon\Documents\Stronghold 2
2013-12-28 21:51 - 2013-12-28 21:36 - 00002158 _____ C:\Users\Public\Desktop\Stronghold 2 spielen.lnk
2013-12-28 21:50 - 2013-12-28 21:50 - 00000000 ____D C:\ProgramData\Firefly Studios
2013-12-28 21:49 - 2010-05-12 13:46 - 00000000 ____D C:\Windows\Panther
2013-12-28 21:36 - 2013-12-28 21:36 - 00098304 _____ (Sony DADC Austria AG.) C:\Windows\SysWOW64\CmdLineExt.dll
2013-12-28 21:36 - 2013-12-28 21:36 - 00000000 ____D C:\Users\Leon\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2013-12-28 21:31 - 2013-12-28 21:31 - 00000000 ____D C:\Program Files (x86)\Firefly Studios
2013-12-28 21:31 - 2010-05-12 13:01 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2013-12-27 23:16 - 2013-12-08 11:27 - 00010687 _____ C:\Windows\system32\lvcoinst.log
2013-12-27 23:16 - 2013-12-08 11:27 - 00000000 ____D C:\Program Files\Common Files\logishrd
2013-12-27 23:15 - 2013-12-08 11:27 - 00000000 ____D C:\Program Files (x86)\Logitech
2013-12-27 23:13 - 2013-12-20 19:39 - 00000000 ___RD C:\Users\Leon\Documents\MAGIX
2013-12-27 23:13 - 2013-12-08 10:29 - 00000000 ____D C:\ProgramData\MAGIX
2013-12-27 23:13 - 2013-12-08 10:29 - 00000000 ____D C:\Program Files (x86)\MAGIX
2013-12-27 22:53 - 2013-12-27 22:53 - 02344450 _____ C:\Users\Leon\Downloads\omsi_2_docs (1).zip
2013-12-27 13:32 - 2013-12-27 13:32 - 00000222 _____ C:\Users\Leon\Desktop\OMSI 2.url
2013-12-27 13:32 - 2013-11-30 17:22 - 00000000 ____D C:\Users\Leon\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2013-12-27 12:43 - 2013-12-27 12:43 - 00000000 ____D C:\Users\Leon\AppData\Local\Razer_Inc
2013-12-27 12:42 - 2013-12-27 12:42 - 00000000 ____D C:\Users\Leon\Documents\Razer
2013-12-27 12:41 - 2013-12-27 12:41 - 00000000 ____D C:\Users\Leon\AppData\Local\Razer
2013-12-27 12:40 - 2013-12-27 12:40 - 00002129 _____ C:\Users\Public\Desktop\Razer Game Booster.lnk
2013-12-27 12:40 - 2013-12-27 12:40 - 00000000 ____D C:\ProgramData\Razer
2013-12-27 12:40 - 2013-12-27 12:40 - 00000000 ____D C:\Program Files (x86)\Razer
2013-12-27 12:39 - 2013-12-27 12:39 - 41363400 _____ (Razer Inc.                                                  ) C:\Users\Leon\Downloads\RazerGameBoosterSetup_4.1.59.0_1.exe
2013-12-27 12:34 - 2013-12-27 12:33 - 82548634 _____ C:\Users\Leon\Downloads\MAN_Lions_City_DD.pl1.rar
2013-12-26 21:50 - 2013-12-26 21:50 - 00000000 ____D C:\Program Files (x86)\Aerosoft
2013-12-26 21:50 - 2013-12-26 21:46 - 00000954 _____ C:\Users\Public\Desktop\Aerosoft Launcher.lnk
2013-12-25 12:52 - 2013-04-12 19:11 - 00121136 _____ C:\Users\Leon\AppData\Local\GDIPFONTCACHEV1.DAT
2013-12-25 12:50 - 2009-07-14 05:45 - 00426552 _____ C:\Windows\system32\FNTCACHE.DAT
2013-12-25 12:47 - 2013-12-25 12:47 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_point64_01009.Wdf
2013-12-25 12:47 - 2013-12-25 12:43 - 00003040 _____ C:\Windows\System32\Tasks\Microsoft_Hardware_Launch_IPoint_exe
2013-12-25 12:46 - 2013-12-25 12:46 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_dc3d_01009.Wdf
2013-12-25 12:46 - 2013-12-25 12:46 - 00000000 ____D C:\Program Files\Microsoft IntelliPoint
2013-12-25 12:43 - 2013-12-25 12:43 - 00003118 _____ C:\Windows\System32\Tasks\Microsoft_Hardware_Launch_mousekeyboardcenter_exe
2013-12-25 12:43 - 2013-12-25 12:43 - 00003090 _____ C:\Windows\System32\Tasks\Microsoft_Hardware_Launch_itype_exe
2013-12-25 12:43 - 2013-12-25 12:43 - 00003062 _____ C:\Windows\System32\Tasks\Microsoft_MKC_Logon_Task_ipoint.exe
2013-12-25 12:43 - 2013-12-25 12:43 - 00003060 _____ C:\Windows\System32\Tasks\Microsoft_MKC_Logon_Task_itype.exe
2013-12-25 12:43 - 2013-12-25 12:43 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_point64_01011.Wdf
2013-12-25 12:43 - 2013-12-25 12:43 - 00000000 ____D C:\Program Files\Microsoft Mouse and Keyboard Center
2013-12-25 12:41 - 2013-12-25 12:41 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_dc3d_01011.Wdf
2013-12-25 12:40 - 2013-12-25 12:40 - 22361472 _____ (Microsoft Corporation) C:\Users\Leon\Downloads\IPx64_1031_8.20.468.0.exe
2013-12-25 12:40 - 2013-12-25 12:40 - 16249216 _____ (Microsoft Corporation) C:\Users\Leon\Downloads\ITPx64_1031_8.20.469.0.exe
2013-12-24 15:26 - 2013-12-24 15:26 - 00000000 ____D C:\Users\Leon\Downloads\Mercedes-Benz-O530-Citaro
2013-12-24 15:17 - 2013-12-24 15:16 - 132605071 _____ C:\Users\Leon\Downloads\Mercedes-Benz-O530-Citaro.zip
2013-12-24 15:13 - 2013-12-24 15:12 - 73578015 _____ C:\Users\Leon\Downloads\Omsi2.ru_Mercedes_o530G.7z
2013-12-23 22:15 - 2013-12-23 22:14 - 00000000 ____D C:\Users\Leon\Downloads\Santasleigh
2013-12-23 22:13 - 2013-12-23 22:13 - 05923085 _____ C:\Users\Leon\Downloads\Santasleigh.zip
2013-12-23 22:08 - 2013-12-23 22:08 - 09339325 _____ C:\Users\Leon\Downloads\b738ber-christmas2012.zip
2013-12-23 22:08 - 2013-12-23 22:08 - 06914915 _____ C:\Users\Leon\Downloads\texture_ber_d_abmc_christmas__special.zip
2013-12-23 22:08 - 2013-12-23 22:08 - 00000000 ____D C:\Users\Leon\Downloads\texture_ber_d_abmc_christmas__special
2013-12-23 22:03 - 2013-12-23 22:03 - 00000000 ____D C:\Users\Leon\Downloads\b738xber-christmas2012
2013-12-23 22:02 - 2013-12-23 22:02 - 08612078 _____ C:\Users\Leon\Downloads\b738xber-christmas2012.zip
2013-12-23 21:47 - 2013-12-23 21:47 - 00000000 ____D C:\Users\Leon\Downloads\b7378abflyinghomeforchristmasd-abmcx
2013-12-23 21:46 - 2013-12-23 21:46 - 10739193 _____ C:\Users\Leon\Downloads\b7378abflyinghomeforchristmasd-abmcx.zip
2013-12-23 21:44 - 2013-12-23 21:44 - 14799019 _____ C:\Users\Leon\Downloads\airberlin2013.zip
2013-12-23 21:41 - 2013-12-23 21:41 - 13024069 _____ C:\Users\Leon\Downloads\FSX Air Air Berlin Xmas2013.zip
2013-12-23 21:28 - 2013-12-23 21:28 - 00000000 ____D C:\Users\Leon\Downloads\AS_AIRBUS-X-EXTENDED_FSX_PREPAR3D_PAINTKITS
2013-12-23 21:27 - 2013-12-23 21:27 - 20938885 _____ C:\Users\Leon\Downloads\airberlin_B737-800_D-ABMS_Flying_home_for_Christmas_cs_2013.rar
2013-12-23 21:27 - 2013-12-23 21:23 - 935309240 _____ C:\Users\Leon\Downloads\AS_AIRBUS-X-EXTENDED_FSX_PREPAR3D (2).zip
2013-12-23 21:26 - 2013-12-23 21:22 - 607528186 _____ C:\Users\Leon\Downloads\AS_AIRBUS-X-EXTENDED_FSX_PREPAR3D_PAINTKITS.zip
2013-12-23 19:35 - 2013-04-12 19:49 - 00000000 ____D C:\Program Files (x86)\Euro Truck Simulator 2
2013-12-23 19:34 - 2013-12-23 19:31 - 525640200 _____ C:\Users\Leon\Downloads\EuroTruckSimulator2_1_8_2_3_patch (1).exe
2013-12-23 18:58 - 2013-12-23 18:58 - 07992081 _____ C:\Users\Leon\Downloads\machinimasound_com_fire_within (1).zip
2013-12-23 18:58 - 2013-12-23 18:58 - 06757926 _____ C:\Users\Leon\Downloads\machinimasound_com_infected_euphoria (1).zip
2013-12-23 18:55 - 2013-12-23 18:55 - 00000000 ____D C:\Users\Leon\Downloads\machinimasound_com_the_arcade
2013-12-23 18:54 - 2013-12-23 18:53 - 08341944 _____ C:\Users\Leon\Downloads\machinimasound_com_the_arcade.zip
2013-12-23 18:45 - 2013-12-23 18:45 - 00000000 ____D C:\Users\Leon\Downloads\machinimasound_com_olympos
2013-12-23 18:45 - 2013-12-23 18:45 - 00000000 ____D C:\Users\Leon\Downloads\machinimasound_com_incursion (1)
2013-12-23 18:45 - 2013-12-23 18:45 - 00000000 ____D C:\Users\Leon\Downloads\machinimasound_com_escape_from_the_temple
2013-12-23 18:44 - 2013-12-23 18:44 - 07851783 _____ C:\Users\Leon\Downloads\machinimasound_com_incursion (1).zip
2013-12-23 18:44 - 2013-12-23 18:44 - 06933318 _____ C:\Users\Leon\Downloads\machinimasound_com_olympos.zip
2013-12-23 18:44 - 2013-12-23 18:43 - 09742583 _____ C:\Users\Leon\Downloads\machinimasound_com_escape_from_the_temple.zip
2013-12-23 10:48 - 2013-12-23 10:48 - 00000000 ____D C:\Windows\F5C9BE9A04C34A728CD0BB67C722D608.TMP
2013-12-23 10:48 - 2013-12-23 10:47 - 251738472 _____ C:\Users\Leon\Downloads\camtasia.exe
2013-12-23 10:39 - 2013-12-23 10:39 - 02209528 _____ C:\Users\Leon\Downloads\VirtualDub-1.10.4-AMD64.zip
2013-12-23 10:39 - 2013-12-23 10:39 - 02209528 _____ C:\Users\Leon\Downloads\VirtualDub-1.10.4-AMD64 (1).zip
2013-12-23 10:14 - 2013-04-12 19:50 - 00000000 ____D C:\Users\Leon\Documents\Euro Truck Simulator 2
2013-12-22 19:46 - 2013-07-08 15:29 - 00000000 ____D C:\Users\Leon\Documents\Flight Simulator X-Dateien
2013-12-22 17:29 - 2013-12-22 17:29 - 05655084 _____ C:\Users\Leon\Downloads\Boeing 757-200 American Airlines.zip
2013-12-22 17:17 - 2013-12-22 17:17 - 23167859 _____ C:\Users\Leon\Downloads\Airbus A340-300 Basepack.zip
2013-12-22 17:17 - 2013-12-22 17:17 - 02767209 _____ C:\Users\Leon\Downloads\Airbus A340-300 Air France.zip
2013-12-22 17:16 - 2013-12-22 17:16 - 02215563 _____ (Xudeva Irribarra                                            ) C:\Users\Leon\Downloads\Boeing 747-8i KLM v1.00.exe
2013-12-22 17:05 - 2013-12-22 17:05 - 00000000 ____D C:\Users\Leon\Downloads\AS_CARENADO-PA32-SARATOGA-SP_FSX
2013-12-22 17:04 - 2013-12-22 17:04 - 93903080 _____ C:\Users\Leon\Downloads\AS_CARENADO-PA32-SARATOGA-SP_FSX.zip
2013-12-21 22:41 - 2013-04-12 19:17 - 00000000 ___RD C:\Users\Leon\Desktop\Dienstprogramme
2013-12-21 22:40 - 2013-12-21 22:39 - 131000436 _____ C:\Users\Leon\Downloads\AS_MEGA-AIRPORT-VIENNA-X_FSX.zip
2013-12-21 22:40 - 2013-12-21 22:39 - 131000436 _____ C:\Users\Leon\Downloads\AS_MEGA-AIRPORT-VIENNA-X_FSX (1).zip
2013-12-21 22:37 - 2013-12-21 22:34 - 00000000 ____D C:\Users\Leon\Downloads\AS_TWIN-OTTER-X-EXTENDED_FSX_P3D (2)
2013-12-21 22:34 - 2013-10-30 16:56 - 00000000 ____D C:\Users\Leon\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Majestic Software
2013-12-21 22:28 - 2013-12-21 22:25 - 567687781 _____ C:\Users\Leon\Downloads\AS_TWIN-OTTER-X-EXTENDED_FSX_P3D (2).zip
2013-12-21 22:25 - 2013-12-21 22:23 - 494532720 _____ C:\Users\Leon\Downloads\mjc8-400-Pilot-1_008-inst.exe
2013-12-21 22:21 - 2013-12-21 22:19 - 343828771 _____ C:\Users\Leon\Downloads\FlyTampa_Vienna_FSX_Update_25.exe
2013-12-21 20:24 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache
2013-12-20 19:43 - 2013-12-08 10:29 - 00000000 ____D C:\Users\Leon\AppData\Roaming\MAGIX
2013-12-20 16:25 - 2013-12-20 16:25 - 02849144 _____ (MAGIX AG) C:\Users\Leon\Downloads\trial_videodeluxe2014_dlm.exe
2013-12-20 12:04 - 2013-11-02 19:15 - 00000000 ____D C:\REX Essential Plus Overdrive
2013-12-20 10:15 - 2013-05-29 15:33 - 00000000 ____D C:\Users\Leon\AppData\Local\Spotify
2013-12-18 17:09 - 2013-12-18 16:59 - 28341646 _____ C:\Users\Leon\Downloads\JAGUAR_V2_ENTPACKEN.rar
2013-12-17 17:22 - 2013-04-13 04:46 - 00699416 _____ C:\Windows\system32\perfh007.dat
2013-12-17 17:22 - 2013-04-13 04:46 - 00149556 _____ C:\Windows\system32\perfc007.dat
2013-12-17 17:22 - 2009-07-14 06:13 - 01620612 _____ C:\Windows\system32\PerfStringBackup.INI
2013-12-17 16:56 - 2013-12-17 14:08 - 00018270 _____ C:\Users\Leon\Documents\Inhaltsverzeichniss Deutsch.odt
2013-12-17 16:54 - 2013-12-17 16:46 - 00026022 _____ C:\Users\Leon\Documents\Lesetagebuch.odt
2013-12-17 13:40 - 2013-12-17 13:40 - 03624249 _____ C:\Users\Leon\Downloads\Global_ATC_demo.zip
2013-12-16 17:33 - 2013-09-07 12:30 - 00304515 _____ C:\Users\Leon\Documents\Titelbild Kommunikation.odt
2013-12-15 21:04 - 2013-07-12 21:54 - 00000000 ____D C:\Windows\system32\MRT
2013-12-15 21:02 - 2013-04-13 18:45 - 90708896 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-12-13 18:40 - 2013-04-12 19:51 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-12-13 15:54 - 2013-12-12 18:11 - 00000000 ____D C:\Program Files (x86)\Mozilla Thunderbird
2013-12-11 19:11 - 2009-07-14 06:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD
2013-12-11 15:12 - 2013-04-12 19:54 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-12-11 15:12 - 2013-04-12 19:54 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-12-11 15:12 - 2013-04-12 19:54 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-12-11 14:56 - 2013-12-11 14:56 - 02344450 _____ C:\Users\Leon\Downloads\omsi_2_docs.zip
2013-12-10 14:15 - 2013-12-10 14:08 - 525640200 _____ C:\Users\Leon\Downloads\EuroTruckSimulator2_1_8_2_3_patch.exe
2013-12-09 17:43 - 2013-12-09 17:43 - 02552323 _____ C:\Users\Leon\Downloads\validator.tar.gz
2013-12-09 17:43 - 2013-12-09 17:43 - 00557605 _____ C:\Users\Leon\Downloads\sgml-lib.tar.gz
2013-12-09 11:37 - 2013-12-31 10:59 - 00131576 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2013-12-09 11:37 - 2013-12-31 10:59 - 00108440 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2013-12-09 11:37 - 2013-12-31 10:59 - 00084720 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2013-12-09 11:37 - 2013-12-31 10:59 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys
2013-12-08 16:08 - 2013-12-08 16:08 - 00000000 ____D C:\Users\Leon\Downloads\Kenworth_W900aRC_dmitry68-Stas556
2013-12-08 16:02 - 2013-12-08 15:52 - 31436553 _____ C:\Users\Leon\Downloads\Kenworth_W900aRC_dmitry68-Stas556.rar
2013-12-08 13:27 - 2013-12-08 13:27 - 00000000 ____D C:\Users\Leon\Downloads\ultrafastlvlmax
2013-12-08 13:15 - 2013-12-08 13:15 - 00002116 _____ C:\Users\Leon\Downloads\ultrafastlvlmax.rar
2013-12-08 13:15 - 2013-12-08 13:15 - 00000000 ____D C:\Users\Leon\Downloads\superreich_mod
2013-12-08 13:14 - 2013-12-08 13:14 - 00004656 _____ C:\Users\Leon\Downloads\superreich_mod.rar
2013-12-08 12:48 - 2013-12-08 12:47 - 00000000 ____D C:\Users\Leon\Downloads\hardecosim
2013-12-08 12:47 - 2013-12-08 12:47 - 00107156 _____ C:\Users\Leon\Downloads\hardecosim.zip
2013-12-08 11:31 - 2013-12-08 11:31 - 00000000 ____D C:\Users\Leon\AppData\Local\Logitech® Webcam-Software
2013-12-08 11:28 - 2013-12-08 11:28 - 00000000 ____D C:\ProgramData\LogiShrd
2013-12-08 11:27 - 2013-12-08 11:27 - 00000000 ____D C:\Users\Leon\AppData\Roaming\Leadertech
2013-12-08 11:25 - 2013-12-08 11:25 - 74637872 _____ (Logitech, Inc.) C:\Users\Leon\Downloads\lws251.exe
2013-12-08 11:24 - 2013-12-08 11:24 - 00000000 ____D C:\Users\Leon\AppData\Roaming\Seeing Machines
2013-12-08 11:24 - 2013-12-08 11:24 - 00000000 ____D C:\ProgramData\Seeing Machines
2013-12-08 11:22 - 2013-12-08 11:02 - 00000000 ____D C:\Users\Leon\Downloads\FaceTrack
2013-12-08 11:19 - 2013-12-08 11:19 - 00000000 ____D C:\Program Files (x86)\VJoy Virtual Joystick Driver
2013-12-08 11:13 - 2013-12-08 11:13 - 00002217 _____ C:\Users\Public\Desktop\FaceTrackNoIR.lnk
2013-12-08 11:12 - 2013-12-08 11:12 - 00000000 ____D C:\Program Files (x86)\Abbequerque Inc
2013-12-08 11:10 - 2013-12-08 11:10 - 78352371 _____ (FaceTrackNoIR Team                                          ) C:\Users\Leon\Downloads\SetupFaceTrackNoIR_Full_v170.exe
2013-12-08 10:58 - 2013-12-08 10:28 - 91182039 _____ C:\Users\Leon\Downloads\FaceTrack.rar
2013-12-08 10:29 - 2013-12-08 10:29 - 00001226 _____ C:\Users\Public\Desktop\MAGIX Foto & Grafik Designer 7 SE.lnk
2013-12-08 10:29 - 2013-12-08 10:29 - 00000000 ____D C:\Users\Leon\AppData\Local\Xara
2013-12-08 10:28 - 2013-04-14 19:48 - 00000000 ____D C:\Program Files (x86)\MSXML 4.0
2013-12-08 10:27 - 2013-12-08 10:27 - 155998448 _____ (MAGIX AG) C:\Users\Leon\Downloads\Foto_Grafik_Designer_7_SE_DE_CHIP_DE_131029_15-06.exe
2013-12-07 20:01 - 2013-12-07 20:00 - 00000000 ____D C:\Users\Leon\Downloads\Scania Busscar 1.5.2-1.6.x
2013-12-07 19:59 - 2013-12-07 19:59 - 28399366 _____ C:\Users\Leon\Downloads\Scania Busscar 1.5.2-1.6.x.rar
2013-12-07 18:39 - 2013-12-07 18:39 - 00000000 ____D C:\Users\Leon\Downloads\NeoplanStarliner_BusModPackFurkanSevke_ (1)
2013-12-07 18:38 - 2013-12-07 18:38 - 40591368 _____ C:\Users\Leon\Downloads\EuroTruckSimulator2_1_6_1_to_1_7_0_patch.exe
2013-12-07 18:37 - 2013-12-07 18:37 - 52619900 _____ C:\Users\Leon\Downloads\NeoplanStarliner_BusModPackFurkanSevke_ (1).rar
2013-12-07 18:35 - 2013-12-07 18:34 - 00000000 ____D C:\Users\Leon\Downloads\zzTSM_Schwerlast_Trailerpacket_1.7.5_Packet_1-3
2013-12-07 17:39 - 2013-12-07 17:26 - 39663402 _____ C:\Users\Leon\Downloads\zzTSM_Schwerlast_Trailerpacket_1.7.5_Packet_1-3.rar
2013-12-07 17:37 - 2013-12-07 17:33 - 00000000 ____D C:\Users\Leon\Downloads\zzzzzzzzzzzReal_Environment2_v175_AEgos_Edition
2013-12-07 17:33 - 2013-12-07 17:30 - 162534209 _____ C:\Users\Leon\Downloads\zzzzzzzzzzzReal_Environment2_v175_AEgos_Edition.7z
2013-12-07 17:26 - 2013-12-07 17:26 - 00000000 ____D C:\Users\Leon\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\LatinVFR
2013-12-07 17:22 - 2013-12-07 17:17 - 553483869 _____ C:\Users\Leon\Downloads\LatinVFR_TXKF_FsX_v1.0.exe
2013-12-07 17:20 - 2013-12-07 17:16 - 315511460 _____ () C:\Users\Leon\Downloads\Budapest_LHBP_v101_FSX.exe
2013-12-06 14:57 - 2013-12-06 14:57 - 00001011 _____ C:\Users\Public\Desktop\Audacity.lnk
2013-12-06 14:57 - 2013-07-25 11:55 - 00000000 ____D C:\Program Files (x86)\Audacity
2013-12-06 14:54 - 2013-12-06 14:54 - 00614784 _____ C:\Users\Leon\Downloads\Audacity - CHIP-Downloader.exe
2013-12-06 13:52 - 2013-12-06 13:02 - 00000000 ____D C:\Users\Leon\Downloads\machinimasound_com_beyond_the_stars
2013-12-06 13:09 - 2013-12-06 13:02 - 00000000 ____D C:\Users\Leon\Downloads\machinimasound_com_morning_cruise (2)
2013-12-06 13:06 - 2013-12-06 13:02 - 00000000 ____D C:\Users\Leon\Downloads\machinimasound_com_ecstatic_wave (1)
2013-12-06 13:04 - 2013-12-06 13:02 - 00000000 ____D C:\Users\Leon\Downloads\machinimasound_com_afterlife_city
2013-12-06 13:01 - 2013-12-06 12:59 - 08818299 _____ C:\Users\Leon\Downloads\machinimasound_com_beyond_the_stars.zip
2013-12-06 13:01 - 2013-12-06 12:59 - 07952572 _____ C:\Users\Leon\Downloads\machinimasound_com_afterlife_city.zip
2013-12-06 13:01 - 2013-12-06 12:59 - 07897030 _____ C:\Users\Leon\Downloads\machinimasound_com_morning_cruise (2).zip
2013-12-06 12:59 - 2013-12-06 12:59 - 09957201 _____ C:\Users\Leon\Downloads\machinimasound_com_ecstatic_wave (1).zip
2013-12-05 20:18 - 2013-12-05 20:18 - 52619900 _____ C:\Users\Leon\Downloads\NeoplanStarliner_BusModPackFurkanSevke_.rar
2013-12-05 16:57 - 2013-04-12 20:54 - 00002179 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2013-12-02 20:28 - 2013-12-02 20:27 - 154763637 _____ C:\Users\Leon\Downloads\Bau-Simulator2012_Update01.rar
2013-12-02 19:43 - 2013-04-12 19:17 - 00004106 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2013-12-02 19:43 - 2013-04-12 19:17 - 00003854 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2013-12-01 11:12 - 2013-04-12 21:30 - 00000000 ____D C:\Users\Leon\AppData\Local\Windows Live
2013-12-01 10:36 - 2013-12-01 10:29 - 20560641 _____ C:\Users\Leon\Downloads\ClaasXerion5000TracVC_TTM_V2FIX_N.zip

Files to move or delete:
====================
C:\Users\Leon\AppData\Roaming\CamLayout.ini
C:\Users\Leon\AppData\Roaming\CamShapes.ini


Some content of TEMP:
====================
C:\Users\Leon\AppData\Local\Temp\avgnt.exe
C:\Users\Leon\AppData\Local\Temp\Offercast_AVIRAV7_.exe
C:\Users\Leon\AppData\Local\Temp\Quarantine.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-12-30 11:43

==================== End Of Log ============================
--- --- ---


Der Eset Online Scanner hat nichts gefunden, wenn ich das richtig erkenne. Ist somit mein PC wieder Viren frei?

Viele Grüße und einen guten Rutsch

Alt 01.01.2014, 13:29   #8
schrauber
/// the machine
/// TB-Ausbilder
 
Skype Virus - Standard

Skype Virus


Fertig

Falls Du Lob oder Kritik loswerden möchtest kannst Du das hier tun


Die Reihenfolge ist hier entscheidend.
  1. Falls Defogger benutzt wurde: Defogger nochmal starten und auf re-enable klicken.
  2. Falls Combofix benutzt wurde: (Alternativ in uninstall.exe umbenennen und starten)
    • Windowstaste + R > Combofix /Uninstall (eingeben) > OK
    • Alternative: Combofix.exe in uninstall.exe umbenennen und starten
    • Combofix wird jetzt starten, sich evtl updaten und dann alle Reste von sich selbst entfernen.
  3. Downloade Dir bitte auf jeden Fall DelFix Download DelFix auf deinen Desktop:
    • Schließe alle offenen Programme.
    • Starte die delfix.exe mit einem Doppelklick.
    • Setze vor jede Funktion ein Häkchen.
    • Klicke auf Start.
    • Hinweis: DelFix entfernt u. a. alle verwendeten Programme, die Quarantäne unserer Scanner, den Java-Cache und löscht sich abschließend selbst.
    • Starte deinen Rechner abschließend neu.
  4. Sollten jetzt noch Programme aus unserer Bereinigung übrig sein kannst du sie bedenkenlos löschen.


Hier noch ein paar Tipps zur Absicherung deines Systems.


Ich kann garnicht zu oft erwähnen, wie wichtig es ist, dass dein System Up to Date ist.
  • Bitte überprüfe ob dein System Windows Updates automatisch herunter lädt
  • Windows Updates
    • Windows XP: Start --> Systemsteuerung --> Doppelklick auf Automatische Updates
    • Windows Vista / 7: Start --> Systemsteuerung --> System und Sicherheit --> Automatische Updates aktivieren oder deaktivieren
  • Gehe sicher das die automatischen Updates aktiviert sind.
  • Software Updates
    Installierte Software kann ebenfalls Sicherheitslücken haben, welche Malware nutzen kann, um dein System zu infizieren.
    Um deine Installierte Software up to date zu halten, empfehle ich dir Secunia Online Software.


Anti- Viren Software
  • Gehe sicher immer eine Anti Viren Software installiert zu haben und das diese auch up to date ist. Es ist nämlich nutzlos wenn diese out of date sind.


Zusätzlicher Schutz
  • MalwareBytes Anti Malware
    Dies ist eines der besten Anti-Malware Tools auf dem Markt. Es ist ein On- Demond Scan Tool welches viele aktuelle Malware erkennt und auch entfernt.
    Update das Tool und lass es einmal in der Woche laufen. Die Kaufversion biete zudem noch einen Hintergrundwächter.
    Ein Tutorial zur Verwendung findest Du hier.
  • WinPatrol
    Diese Software macht einen Snapshot deines Systems und warnt dich vor eventuellen Änderungen. Downloade dir die Freeware Version von hier.


Sicheres Browsen
  • SpywareBlaster
    Eine kurze Einführung findest du Hier
  • MVPs hosts file
    Ein Tutorial findest Du hier. Leider habe ich bis jetzt kein deutschsprachiges gefunden.
  • WOT (Web of trust)
    Dieses AddOn warnt Dich bevor Du eine als schädlich gemeldete Seite besuchst.


Alternative Browser

Andere Browser tendieren zu etwas mehr Sicherheit als der IE, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden.
  • Opera
  • Mozilla Firefox.
    • Hinweis: Für diesen Browser habe ich hier ein paar nützliche Add Ons
    • NoScript
      Dieses AddOn blockt JavaScript, Java and Flash und andere Plugins. Sie werden nur dann ausgeführt wenn Du es bestätigst.
    • AdblockPlus
      Dieses AddOn blockt die meisten Werbung von selbst. Ein Rechtsklick auf den Banner um diesen zu AdBlockPlus hinzu zu fügen reicht und dieser wird nicht mehr geladen.
      Es spart ausserdem Downloadkapazität.

Performance
Bereinige regelmäßig deine Temp Files. Ich empfehle hierzu TFC
Halte dich fern von jedlichen Registry Cleanern.
Diese Schaden deinem System mehr als sie helfen. Hier ein paar ( englishe ) Links
Miekemoes Blogspot ( MVP )
Bill Castner ( MVP )



Don'ts
  • Klicke nicht auf alles nur weil es Dich dazu auffordert und schön bunt ist.
  • verwende keine peer to peer oder Filesharing Software (Emule, uTorrent,..)
  • Lass die Finger von Cracks, Keygens, Serials oder anderer illegaler Software.
  • Öffne keine Anhänge von Dir nicht bekannten Emails. Achte vor allem auf die Dateiendung wie zb deinFoto.jpg.exe
Nun bleibt mir nur noch dir viel Spass beim sicheren Surfen zu wünschen.

Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so das ich diesen Thread aus meinen Abos löschen kann.
__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Alt 05.01.2014, 22:55   #9
Liongamer1
 
Skype Virus - Standard

Skype Virus


Hallo schrauber,

es hat sich alles erledigt. Vielen Dank für deine Hilfe.

Viele Grüße
Leon

Alt 06.01.2014, 16:48   #10
schrauber
/// the machine
/// TB-Ausbilder
 
Skype Virus - Standard

Skype Virus


Gern Geschehen
__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Antwort

Themen zu Skype Virus
.zip datei, 4d36e972-e325-11ce-bfc1-08002be10318, adobe, antivirus, askbar, avira, branding, browser, computer, coupons, euro, fedex, flash player, home, installation, link geklickt, minidump, newtab, ntdll.dll, plug-in, pup.optional.chipxonio, pup.optional.helperbar.a, pup.optional.opencandy, realtek, registry, security, services.exe, siteadvisor, software, spotify web helper, svchost.exe, temp, virus


« zeroaccess durch recovery cd beseitigen? | Ständig wird in Chrome bei geöffneten Seiten Werbung angezeigt ? »


Ähnliche Themen: Skype Virus


  1. Skype Virus "Your skype does not support extended icons"
    Log-Analyse und Auswertung - 10.10.2014 (15)
  2. Skype Zertifikat Problem a248.e.akamai.net wegen Werbung in Skype?
    Plagegeister aller Art und deren Bekämpfung - 05.03.2014 (3)
  3. Skype.exe wird ausgeführt obwohl Skype gar nicht installiert ist
    Plagegeister aller Art und deren Bekämpfung - 28.01.2014 (4)
  4. Skype Virus
    Alles rund um Mac OSX & Linux - 27.06.2013 (8)
  5. Skype Virus
    Plagegeister aller Art und deren Bekämpfung - 07.06.2013 (69)
  6. Skype virus
    Log-Analyse und Auswertung - 23.05.2013 (61)
  7. Skype Virus
    Plagegeister aller Art und deren Bekämpfung - 22.05.2013 (11)
  8. Skype Virus
    Plagegeister aller Art und deren Bekämpfung - 22.04.2013 (3)
  9. Probleme mit Skype, Dev-C ++ und Internet, z.B. friert der Bildschirm während der Benutzung von Skype ein
    Plagegeister aller Art und deren Bekämpfung - 21.03.2013 (17)
  10. TR/Crypt.ZPACK.Gen2 Virus in Program Files (x86)/Skype/Phone/Skype.exe
    Plagegeister aller Art und deren Bekämpfung - 10.03.2013 (1)
  11. TR/Crypt.ZPACK.Gen 2 in C:\Programm Files (x86)\Skype\Phone\Skype.exe
    Log-Analyse und Auswertung - 27.02.2013 (15)
  12. Avira meldet: 'TR/Crypt.ZPACK.Gen2' [trojan] in der Datei 'C:\Program Files\Skype\Phone\Skype.exe'
    Plagegeister aller Art und deren Bekämpfung - 08.12.2012 (2)
  13. Skype Virus
    Plagegeister aller Art und deren Bekämpfung - 04.12.2012 (8)
  14. Virus in Skype
    Plagegeister aller Art und deren Bekämpfung - 18.10.2012 (4)
  15. TR/Crypt.ZPACK.Gen2 in C:\Program Files\Skype\Phone\Skype.exe
    Plagegeister aller Art und deren Bekämpfung - 27.07.2012 (2)
  16. TR/Crypt.ZPACK.Gen2 - in Programme/Skype/Phone/Skype.exe
    Plagegeister aller Art und deren Bekämpfung - 12.10.2011 (9)
  17. TR/Crypt.XPACK.Gen in C:\Programme\Skype\Phone\Skype.exe
    Plagegeister aller Art und deren Bekämpfung - 24.10.2010 (2)
Anleitungen und Tipps

- Für alle Hilfesuchenden! Was beachten?

- Anleitung: MyStartSearch.com entfernen

- Anleitung: WebSearches löschen

- Hilfe: iStartSurf entfernen – so gehts!

- Anleitung: Omiga Plus richtig entfernen

- Browser Viren entfernen


Zum Thema Skype Virus - Hallo, als ich mich heute in Skype angemeldet habe, habe ich gesehen, dass ich vor kurzem eine Nachricht von einem Freund bekommen habe. Es stand dort: "wann war das letzte - Skype Virus...
Archiv
Du betrachtest: Skype Virus auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54