Zurück   Trojaner-Board > Malware entfernen > Plagegeister aller Art und deren Bekämpfung

Plagegeister aller Art und deren Bekämpfung: Windows 7 - Malware? - Fenster öffnen sich automatisch

Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen.

Antwort
Alt 17.02.2014, 17:12   #1
Shirry
 
Windows 7 - Malware? - Fenster öffnen sich automatisch - Standard

Windows 7 - Malware? - Fenster öffnen sich automatisch



Hallo!

Mein Vater hat vor ca. einem Monat einen gebrauchten Laptop gekauft mit Windows 7. Bis jetzt war auch alles in Ordnung. Heute Nacht hat er sich bei Ebay Kleinanzeigen aufgehalten. Seitdem öffnet sich laufend eine komplett neue Seite, wenn er auf "weiter" klickt. Zum Anfang kam eine Seite, wo nur englischer Text stand. Als ich es dann heute ausprobiert habe, hat sich wieder eine neue Seite geöffnet, die sich aber nicht geladen hat (nur weißer Schirm). Bei Google ist mir unten rechts aufgefallen, dass sich ein Werbefenster öffnet. Dies kommt immer, wenn man "sucht" und runter scrollt. Dieses Problem habe ich mit einem AddBlocker beheben können, welchen ich heruntergeladen habe.
Bei Ebay Kleinanzeigen ist uns dann aufgefallen, dass das Wort "kostenlos" (siehe Screen) und manchmal auch das Wort "Einfach" blau hinterlegt ist - wie ein Link. Wenn ich mit der Maus über das Wort gefahren bin, hat sich ein Fenster geöffnet. Dieses Phänomen (blau hinterlegte Wörter / öffnen dieses einen Fensters) habe ich jetzt auch hier im Forum feststellen können (der gleiche Screen).
Ich habe alle Add-Ons entfernt. Den Laptop mehrfach neu gestartet. Und das Antivir habe ich auch durchlaufen lassen und 3 Viren gelöscht.
Der Laptop ist entweder über W-Lan oder über einen Telekom Internet-Stick online.

Das Problem besteht leider immer noch. Vielleicht weiß jemand von euch, was für ein Problem das ist und was wir machen können, damit der Laptop wieder normal funktioniert.

Ich bedanke mich schon einmal im Voraus.

Mit freundlichen Grüßen
Shirry
Miniaturansicht angehängter Grafiken
-malware.jpg  

Alt 17.02.2014, 17:17   #2
schrauber
/// the machine
/// TB-Ausbilder
 

Windows 7 - Malware? - Fenster öffnen sich automatisch - Standard

Windows 7 - Malware? - Fenster öffnen sich automatisch



hi,

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST Download FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
  • Starte jetzt FRST.
  • Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
  • Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
  • Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

__________________

__________________

Alt 17.02.2014, 17:46   #3
Shirry
 
Windows 7 - Malware? - Fenster öffnen sich automatisch - Standard

Windows 7 - Malware? - Fenster öffnen sich automatisch



Hallo schrauber,
danke für deine schnelle Antwort!
Ich habe den Scan durchlaufen lassen und versucht die .txt's hier via CODE einzufügen.
Wenn ich allerdings den Code einfügen möchte, schreibt mir "das Forum", dass ich über 2000 Zeichen zuviel habe und die Antwort deswegen nicht gepostet werden kann... was soll ich machen? Als Word-Datei vielleicht anhängen?
__________________

Geändert von Shirry (17.02.2014 um 18:39 Uhr)

Alt 18.02.2014, 12:02   #4
schrauber
/// the machine
/// TB-Ausbilder
 

Windows 7 - Malware? - Fenster öffnen sich automatisch - Standard

Windows 7 - Malware? - Fenster öffnen sich automatisch



Log einfach in Stücke teilen und mehrere Antworten benutzen
__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Alt 18.02.2014, 14:04   #5
Shirry
 
Windows 7 - Malware? - Fenster öffnen sich automatisch - Standard

Windows 7 - Malware? - Fenster öffnen sich automatisch



Ok ... FRST Teil 1:

Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 16-02-2014
Ran by Andreas (administrator) on ANDREAS-HP on 17-02-2014 18:23:05
Running from C:\Users\Andreas\Downloads
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal



==================== Processes (Whitelisted) =================

(AMD) C:\Windows\system32\atiesrxx.exe
(AMD) C:\Windows\system32\atieclxx.exe
(Microsoft Corporation) C:\Windows\system32\WLANExt.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Andrea Electronics Corporation) C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe
(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(APN LLC.) C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe
(Highlightly) C:\Program Files (x86)\Highlightly\Service\hlsvc.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe
() C:\ProgramData\DatacardService\HWDeviceService64.exe
(Huawei Technologies Co., Ltd.) C:\ProgramData\DatacardService\DCSHelper.exe
() C:\ProgramData\Internet Manager\OnlineUpdate\ouc.exe
() C:\Program Files\Level Quality Watcher\v1.01\levelqualitywatcher64.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE
(CyberLink) C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Synaptics Incorporated) C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(APN) C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_44.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_44.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Microsoft Corporation) C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [6548112 2014-01-31] (Realtek Semiconductor)
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2885904 2012-02-24] (Synaptics Incorporated)
HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [636032 2012-02-14] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [HP Quick Launch] - C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe [578944 2012-03-05] (Hewlett-Packard Development Company, L.P.)
HKLM-x32\...\Run: [HPOSD] - C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe [379960 2011-08-19] (Hewlett-Packard Development Company, L.P.)
HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [684600 2013-12-09] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [ApnTBMon] - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe [1778640 2013-12-20] (APN)
HKLM\...\RunOnce: [NCPluginUpdater] - "C:\Program Files (x86)\Hewlett-Packard\HP Health Check\ActiveCheck\product_line\NCPluginUpdater.exe" Update [21720 2014-01-28] (Hewlett-Packard)
HKU\S-1-5-21-263240945-1247611552-2027154437-1002\...\MountPoints2: F - F:\AutoRun.exe
HKU\S-1-5-21-263240945-1247611552-2027154437-1002\...\MountPoints2: {180aab81-8bc7-11e3-a101-446d573d4e28} - F:\AutoRun.exe
HKU\S-1-5-21-263240945-1247611552-2027154437-1002\...\MountPoints2: {4185e5f5-85c0-11e3-b3c3-446d573d4e28} - F:\AutoRun.exe
HKU\S-1-5-21-263240945-1247611552-2027154437-1002\...\MountPoints2: {4185e62b-85c0-11e3-b3c3-446d573d4e28} - F:\AutoRun.exe
AppInit_DLLs: C:\PROGRA~2\SUPPOR~1\SUPPOR~2.DLL => C:\Program Files (x86)\Supporter\Supporter_x64.dll [4229120 2014-01-25] ()
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.awesomehp.com/?type=hp&ts=1392523418&from=tugs&uid=TOSHIBAXMK3276GSX_52DMP4XUTXX52DMP4XUT
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.awesomehp.com/?type=hp&ts=1392523418&from=tugs&uid=TOSHIBAXMK3276GSX_52DMP4XUTXX52DMP4XUT
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xFCB3BC89141ACF01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.awesomehp.com/web/?type=ds&ts=1392523418&from=tugs&uid=TOSHIBAXMK3276GSX_52DMP4XUTXX52DMP4XUT&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.awesomehp.com/?type=hp&ts=1392523418&from=tugs&uid=TOSHIBAXMK3276GSX_52DMP4XUTXX52DMP4XUT
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.awesomehp.com/?type=hp&ts=1392523418&from=tugs&uid=TOSHIBAXMK3276GSX_52DMP4XUTXX52DMP4XUT
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.awesomehp.com/web/?type=ds&ts=1392523418&from=tugs&uid=TOSHIBAXMK3276GSX_52DMP4XUTXX52DMP4XUT&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.awesomehp.com/web/?type=ds&ts=1392523418&from=tugs&uid=TOSHIBAXMK3276GSX_52DMP4XUTXX52DMP4XUT&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.awesomehp.com/?type=hp&ts=1392523418&from=tugs&uid=TOSHIBAXMK3276GSX_52DMP4XUTXX52DMP4XUT
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.awesomehp.com/?type=hp&ts=1392523418&from=tugs&uid=TOSHIBAXMK3276GSX_52DMP4XUTXX52DMP4XUT
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.awesomehp.com/web/?type=ds&ts=1392523418&from=tugs&uid=TOSHIBAXMK3276GSX_52DMP4XUTXX52DMP4XUT&q={searchTerms}
URLSearchHook: HKCU - (No Name) - {84FF7BD6-B47F-46F8-9130-01B2696B36CB} - No File
StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe hxxp://www.awesomehp.com/?type=sc&ts=1392523418&from=tugs&uid=TOSHIBAXMK3276GSX_52DMP4XUTXX52DMP4XUT
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.awesomehp.com/web/?type=ds&ts=1392523418&from=tugs&uid=TOSHIBAXMK3276GSX_52DMP4XUTXX52DMP4XUT&q={searchTerms}
SearchScopes: HKLM - {2fa28606-de77-4029-af96-b231e3b8f827} URL = hxxp://eu.ask.com/web?q={searchterms}&l=dis&o=CMNTDF
SearchScopes: HKLM - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.awesomehp.com/web/?type=ds&ts=1392523418&from=tugs&uid=TOSHIBAXMK3276GSX_52DMP4XUTXX52DMP4XUT&q={searchTerms}
SearchScopes: HKLM - {b7fca997-d0fb-4fe0-8afd-255e89cf9671} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=chr-hp-psg&type=CMNTDF
SearchScopes: HKLM - {d43b3890-80c7-4010-a95d-1e77b5924dc3} URL = hxxp://de.wikipedia.org/wiki/Special:Search?search={searchTerms}
SearchScopes: HKLM - {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/707-111076-19270-4/4?satitle={searchTerms}
SearchScopes: HKLM-x32 - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.awesomehp.com/web/?type=ds&ts=1392523418&from=tugs&uid=TOSHIBAXMK3276GSX_52DMP4XUTXX52DMP4XUT&q={searchTerms}
SearchScopes: HKLM-x32 - {2fa28606-de77-4029-af96-b231e3b8f827} URL = hxxp://eu.ask.com/web?q={searchterms}&l=dis&o=CMNTDF
SearchScopes: HKLM-x32 - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.awesomehp.com/web/?type=ds&ts=1392523418&from=tugs&uid=TOSHIBAXMK3276GSX_52DMP4XUTXX52DMP4XUT&q={searchTerms}
SearchScopes: HKLM-x32 - {b7fca997-d0fb-4fe0-8afd-255e89cf9671} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=chr-hp-psg&type=CMNTDF
SearchScopes: HKLM-x32 - {d43b3890-80c7-4010-a95d-1e77b5924dc3} URL = hxxp://de.wikipedia.org/wiki/Special:Search?search={searchTerms}
SearchScopes: HKLM-x32 - {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/707-111076-19270-4/4?satitle={searchTerms}
SearchScopes: HKCU - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.awesomehp.com/web/?type=ds&ts=1392523418&from=tugs&uid=TOSHIBAXMK3276GSX_52DMP4XUTXX52DMP4XUT&q={searchTerms}
SearchScopes: HKCU - {2fa28606-de77-4029-af96-b231e3b8f827} URL = hxxp://eu.ask.com/web?q={searchterms}&l=dis&o=CMNTDF
SearchScopes: HKCU - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.awesomehp.com/web/?type=ds&ts=1392523418&from=tugs&uid=TOSHIBAXMK3276GSX_52DMP4XUTXX52DMP4XUT&q={searchTerms}
SearchScopes: HKCU - {460C3D19-B3D4-4964-A550-77D263B0CCCB} URL = hxxp://www.google.com/search?q={searchTerms}
SearchScopes: HKCU - {996317D0-90D7-4835-8E9B-AA46C8B1CD50} URL = hxxp://www.google.com/search?q={searchTerms}
SearchScopes: HKCU - {b7fca997-d0fb-4fe0-8afd-255e89cf9671} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=chr-hp-psg&type=CMNTDF
SearchScopes: HKCU - {d43b3890-80c7-4010-a95d-1e77b5924dc3} URL = hxxp://de.wikipedia.org/wiki/Special:Search?search={searchTerms}
SearchScopes: HKCU - {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/707-111076-19270-4/4?satitle={searchTerms}
BHO: Feven Pro - {11111111-1111-1111-1111-110511161178} - C:\Program Files (x86)\Feven Pro\Feven Pro-bho64.dll (Feven)
BHO: ShoppingChip - {15913038-0EF1-583B-129C-342D218DBC4C} - C:\Program Files (x86)\ShoppingChip\_5H747NV.x64.dll ()
BHO: Avira SearchFree Toolbar - {41564952-412D-5637-4300-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7C\Passport_x64.dll (APN LLC.)
BHO: TauBeItAdBlockFrr - {5E50B8AA-7158-4229-3E4B-327FA83238DF} - C:\ProgramData\TauBeItAdBlockFrr\Fg9U.x64.dll ()
BHO: SteadyVideoBHO Class - {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} - C:\Program Files\AMD\SteadyVideo\SteadyVideo.dll (Advanced Micro Devices)
BHO: Highlightly - {83F2328D-0D6A-42B4-B0C4-02A929EDD4BE} - C:\Program Files\Highlightly\IE\HighlightlyClientIE.dll (Highlightly)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: HP Network Check Helper - {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll (Hewlett-Packard)
BHO-x32: Feven Pro - {11111111-1111-1111-1111-110511161178} - C:\Program Files (x86)\Feven Pro\Feven Pro-bho.dll (Feven)
BHO-x32: Avira SearchFree Toolbar - {41564952-412D-5637-4300-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7C\Passport.dll (APN LLC.)
BHO-x32: SteadyVideoBHO Class - {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} - C:\Program Files (x86)\amd\SteadyVideo\SteadyVideo.dll (Advanced Micro Devices)
BHO-x32: Highlightly - {83F2328D-0D6A-42B4-B0C4-02A929EDD4BE} - C:\Program Files (x86)\Highlightly\IE\HighlightlyClientIE.dll (Highlightly)
BHO-x32: No Name - {84FF7BD6-B47F-46F8-9130-01B2696B36CB} -  No File
BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: HP Network Check Helper - {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll (Hewlett-Packard)
Toolbar: HKLM - Avira SearchFree Toolbar - {41564952-412D-5637-4300-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7C\Passport_x64.dll (APN LLC.)
Toolbar: HKLM-x32 - Avira SearchFree Toolbar - {41564952-412D-5637-4300-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7C\Passport.dll (APN LLC.)
Toolbar: HKCU - No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} -  No File
Toolbar: HKCU - Avira SearchFree Toolbar - {41564952-412D-5637-4300-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7C\Passport_x64.dll (APN LLC.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Filter: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
Filter: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
Filter-x32: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
Filter-x32: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{7D8FB911-34C2-41CC-A67F-C5B9FFD16891}: [NameServer] 
Tcpip\..\Interfaces\{F9DA5CDE-A652-4B4B-9F9B-536B53A607BF}: [NameServer] 

FireFox:
========
FF ProfilePath: C:\Users\Andreas\AppData\Roaming\Mozilla\Firefox\Profiles\5qxwlrma.default
FF DefaultSearchEngine: awesomehp
FF SelectedSearchEngine: awesomehp
FF Homepage: hxxp://www.awesomehp.com/?type=hp&ts=1392523418&from=tugs&uid=TOSHIBAXMK3276GSX_52DMP4XUTXX52DMP4XUT
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_43.dll ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_44.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\SysWOW64\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 - C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll ()
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\awesomehp.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: No Name - C:\Users\Andreas\AppData\Roaming\Mozilla\Firefox\Profiles\5qxwlrma.default\Extensions\1392523442_xpi [2014-02-16]
FF Extension: Adblock Plus - C:\Users\Andreas\AppData\Roaming\Mozilla\Firefox\Profiles\5qxwlrma.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-02-17]
FF HKLM-x32\...\Firefox\Extensions: [lightningnewtab@gmail.com] - C:\Users\Andreas\AppData\Roaming\Mozilla\Firefox\Profiles\5qxwlrma.default\extensions\lightningnewtab@gmail.com.xpi

Chrome: 
=======
CHR Extension: (ShoppingChip) - C:\Users\Andreas\AppData\Local\Google\Chrome\User Data\Default\Extensions\ccpcekipdcclnacodndielbepiopbjgb [2014-01-25]
CHR Extension: (ShoppingChip) - C:\Users\Andreas\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhkagomhnnpbhpimohcjknfcbgehfkfn [2014-01-25]
CHR Extension: (Scorpion Saver) - C:\Users\Andreas\AppData\Local\Google\Chrome\User Data\Default\Extensions\oclgomenfkljhfkfflghppidonpkljjg [2014-01-25]
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Services (Whitelisted) =================

R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [361984 2012-02-14] (Advanced Micro Devices, Inc.)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440376 2013-12-09] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440376 2013-12-09] (Avira Operations GmbH & Co. KG)
R2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [1011768 2013-12-09] (Avira Operations GmbH & Co. KG)
R2 APNMCP; C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe [166352 2013-12-20] (APN LLC.)
R2 be0fb33b; C:\Program Files (x86)\Supporter\SupporterSvc.dll [183632 2014-01-25] ()
R2 hlsvc; C:\Program Files (x86)\Highlightly\Service\hlsvc.exe [273000 2013-12-04] (Highlightly)
R2 HWDeviceService64.exe; C:\ProgramData\DatacardService\HWDeviceService64.exe [346976 2011-03-14] ()
S2 Internet Manager. RunOuc; C:\Program Files (x86)\T-Mobile\InternetManager_H\UpdateDog\ouc.exe [224096 2011-06-17] ()
R2 Level Quality Watcher; C:\Program Files\Level Quality Watcher\v1.01\levelqualitywatcher64.exe [513528 2013-12-10] ()

==================== Drivers (Whitelisted) ====================

R2 AODDriver4.1; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [55936 2012-01-03] (Advanced Micro Devices)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108440 2013-12-09] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131576 2013-12-09] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-12-09] (Avira Operations GmbH & Co. KG)
R2 avnetflt; C:\Windows\System32\DRIVERS\avnetflt.sys [84720 2013-12-09] (Avira Operations GmbH & Co. KG)
R1 hlnfd; C:\Windows\System32\drivers\hlnfd.sys [58256 2013-12-04] (Highlightly)
S3 huawei_wwanecm; C:\Windows\System32\DRIVERS\ew_juwwanecm.sys [238080 2012-04-23] (Huawei Technologies Co., Ltd.)
R3 RSP2STOR; C:\Windows\System32\DRIVERS\RtsP2Stor.sys [259688 2011-10-27] (Realtek Semiconductor Corp.)
S3 SmbDrv; C:\Windows\system32\drivers\Smb_driver.sys [21264 2012-02-24] (Synaptics Incorporated)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-02-17 18:23 - 2014-02-17 18:24 - 00020591 _____ () C:\Users\Andreas\Downloads\FRST.txt
2014-02-17 18:22 - 2014-02-17 18:23 - 00000000 ____D () C:\FRST
2014-02-17 18:22 - 2014-02-17 18:22 - 02152448 _____ (Farbar) C:\Users\Andreas\Downloads\FRST64.exe
2014-02-17 13:11 - 2014-02-17 13:11 - 00000000 _____ () C:\Windows\SysWOW64\shoF972.tmp
2014-02-16 22:21 - 2014-02-17 17:36 - 00001075 _____ () C:\Windows\setupact.log
2014-02-16 22:21 - 2014-02-17 13:13 - 00006246 _____ () C:\Windows\PFRO.log
2014-02-16 22:21 - 2014-02-16 22:21 - 00000000 _____ () C:\Windows\setuperr.log
2014-02-16 05:04 - 2014-02-17 13:13 - 00003088 _____ () C:\Windows\Tasks\Feven Pro-chromeinstaller.job
2014-02-16 05:04 - 2014-02-17 13:13 - 00002256 _____ () C:\Windows\Tasks\Feven Pro-firefoxinstaller.job
2014-02-16 05:04 - 2014-02-17 13:13 - 00001500 _____ () C:\Windows\Tasks\Feven Pro-updater.job
2014-02-16 05:04 - 2014-02-17 13:13 - 00001456 _____ () C:\Windows\Tasks\Feven Pro-codedownloader.job
2014-02-16 05:04 - 2014-02-17 13:13 - 00001354 _____ () C:\Windows\Tasks\Feven Pro-enabler.job
2014-02-16 05:04 - 2014-02-17 10:10 - 00004542 _____ () C:\Windows\System32\Tasks\Feven Pro-updater
2014-02-16 05:04 - 2014-02-17 10:10 - 00004498 _____ () C:\Windows\System32\Tasks\Feven Pro-codedownloader
2014-02-16 05:04 - 2014-02-17 10:10 - 00004396 _____ () C:\Windows\System32\Tasks\Feven Pro-enabler
2014-02-16 05:04 - 2014-02-16 05:10 - 00000000 ____D () C:\Users\Andreas\AppData\Roaming\awesomehp
2014-02-16 05:04 - 2014-02-16 05:10 - 00000000 ____D () C:\ProgramData\IePluginService
2014-02-16 05:04 - 2014-02-16 05:08 - 00000000 ____D () C:\Program Files (x86)\SupTab
2014-02-16 05:04 - 2014-02-16 05:07 - 00000000 ____D () C:\ProgramData\WPM
2014-02-16 05:04 - 2014-02-16 05:04 - 00000000 ____D () C:\Program Files (x86)\Feven Pro
2014-02-15 03:03 - 2013-12-21 10:53 - 00548864 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-02-15 03:03 - 2013-12-21 09:56 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-02-15 03:01 - 2014-02-06 13:16 - 23170048 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-02-15 03:01 - 2014-02-06 12:30 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-02-15 03:01 - 2014-02-06 12:30 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-02-15 03:01 - 2014-02-06 12:12 - 02765824 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-02-15 03:01 - 2014-02-06 12:07 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-02-15 03:01 - 2014-02-06 12:06 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-02-15 03:01 - 2014-02-06 11:57 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-02-15 03:01 - 2014-02-06 11:56 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-02-15 03:01 - 2014-02-06 11:52 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-02-15 03:01 - 2014-02-06 11:49 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-02-15 03:01 - 2014-02-06 11:48 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-02-15 03:01 - 2014-02-06 11:48 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-02-15 03:01 - 2014-02-06 11:38 - 17103872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-02-15 03:01 - 2014-02-06 11:32 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-02-15 03:01 - 2014-02-06 11:20 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-02-15 03:01 - 2014-02-06 11:17 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-02-15 03:01 - 2014-02-06 11:11 - 05768704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-02-15 03:01 - 2014-02-06 11:01 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-02-15 03:01 - 2014-02-06 11:00 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-02-15 03:01 - 2014-02-06 10:57 - 02168320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-02-15 03:01 - 2014-02-06 10:57 - 00627200 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-02-15 03:01 - 2014-02-06 10:52 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-02-15 03:01 - 2014-02-06 10:52 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-02-15 03:01 - 2014-02-06 10:50 - 02041856 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-02-15 03:01 - 2014-02-06 10:49 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-02-15 03:01 - 2014-02-06 10:47 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-02-15 03:01 - 2014-02-06 10:46 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-02-15 03:01 - 2014-02-06 10:25 - 04244480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-02-15 03:01 - 2014-02-06 10:25 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-02-15 03:01 - 2014-02-06 10:24 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-02-15 03:01 - 2014-02-06 10:22 - 13051392 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-02-15 03:01 - 2014-02-06 10:13 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-02-15 03:01 - 2014-02-06 10:09 - 01964032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-02-15 03:01 - 2014-02-06 10:03 - 11266048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-02-15 03:01 - 2014-02-06 09:55 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-02-15 03:01 - 2014-02-06 09:41 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-02-15 03:01 - 2014-02-06 09:40 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-02-15 03:01 - 2014-02-06 09:36 - 01156096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-02-15 03:01 - 2014-02-06 09:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-02-15 02:26 - 2014-02-15 02:26 - 00000000 __RHD () C:\MSOCache
2014-02-15 00:31 - 2014-02-15 00:32 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-02-14 23:59 - 2014-02-14 23:57 - 00083292 _____ () C:\Users\Andreas\Downloads\flashblock-1.5.14.2-fx (1).xpi
2014-02-14 23:57 - 2014-02-14 23:57 - 00083292 _____ () C:\Users\Andreas\Downloads\flashblock-1.5.14.2-fx.xpi
2014-02-14 23:51 - 2014-02-14 23:51 - 00000000 ____D () C:\Users\Andreas\AppData\Local\WinZip
2014-02-14 22:56 - 2014-02-14 22:56 - 00002177 _____ () C:\Users\Andreas\Desktop\HP Support Assistant.lnk
2014-02-14 22:47 - 2014-02-14 22:47 - 00000000 ____D () C:\ProgramData\{18165758-115C-4DC0-9EC2-FF89F725767F}
2014-02-14 22:26 - 2014-01-01 00:05 - 00420008 _____ () C:\Windows\SysWOW64\locale.nls
2014-02-14 22:26 - 2014-01-01 00:04 - 00420008 _____ () C:\Windows\system32\locale.nls
2014-02-14 22:26 - 2013-12-25 00:09 - 01987584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2014-02-14 22:26 - 2013-12-24 23:48 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2014-02-14 22:26 - 2013-12-06 03:30 - 01882112 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2014-02-14 22:26 - 2013-12-06 03:30 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2014-02-14 22:26 - 2013-12-06 03:02 - 01237504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2014-02-14 22:26 - 2013-12-06 03:02 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll
2014-02-14 22:26 - 2013-12-04 03:27 - 00488448 _____ (Microsoft Corporation) C:\Windows\system32\secproc.dll
2014-02-14 22:26 - 2013-12-04 03:27 - 00485888 _____ (Microsoft Corporation) C:\Windows\system32\secproc_isv.dll
2014-02-14 22:26 - 2013-12-04 03:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp_isv.dll
2014-02-14 22:26 - 2013-12-04 03:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp.dll
2014-02-14 22:26 - 2013-12-04 03:26 - 00528384 _____ (Microsoft Corporation) C:\Windows\system32\msdrm.dll
2014-02-14 22:26 - 2013-12-04 03:16 - 00658432 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_isv.exe
2014-02-14 22:26 - 2013-12-04 03:16 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate.exe
2014-02-14 22:26 - 2013-12-04 03:16 - 00553984 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp.exe
2014-02-14 22:26 - 2013-12-04 03:16 - 00552960 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp_isv.exe
2014-02-14 22:26 - 2013-12-04 03:03 - 00428032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc.dll
2014-02-14 22:26 - 2013-12-04 03:03 - 00423936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_isv.dll
2014-02-14 22:26 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp_isv.dll
2014-02-14 22:26 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp.dll
2014-02-14 22:26 - 2013-12-04 03:02 - 00390144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdrm.dll
2014-02-14 22:26 - 2013-12-04 02:54 - 00594944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_isv.exe
2014-02-14 22:26 - 2013-12-04 02:54 - 00572416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate.exe
2014-02-14 22:26 - 2013-12-04 02:54 - 00510976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp.exe
2014-02-14 22:26 - 2013-12-04 02:54 - 00508928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp_isv.exe
2014-02-14 22:26 - 2013-11-26 09:16 - 03419136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll
2014-02-14 22:26 - 2013-11-22 23:48 - 03928064 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll
2014-02-07 09:22 - 2014-02-07 09:22 - 00000000 _____ () C:\Windows\SysWOW64\sho5FBE.tmp
2014-02-06 01:01 - 2014-02-06 21:55 - 00000000 ____D () C:\Program Files (x86)\Mozilla Thunderbird
2014-02-02 12:01 - 2014-02-17 10:10 - 00003136 _____ () C:\Windows\System32\Tasks\{61FD8FB3-4839-4C3C-AFAF-0AE21A7BD340}
2014-02-02 11:59 - 2014-02-16 05:02 - 00000000 _____ () C:\END
2014-02-02 11:59 - 2014-02-02 11:59 - 00000000 ____D () C:\Users\Andreas\AppData\Local\SearchProtect
2014-02-02 11:58 - 2014-02-02 11:58 - 00319904 _____ () C:\Users\Andreas\Downloads\Setup.exe
2014-02-02 06:52 - 2014-02-02 06:52 - 00000000 ____D () C:\Users\Andreas\AppData\Local\Macromedia
2014-02-02 06:48 - 2014-02-02 06:49 - 00000000 ____D () C:\Users\Andreas\AppData\Local\Adobe
2014-02-02 06:37 - 2014-02-02 06:37 - 00000000 ____D () C:\ProgramData\PDFC
2014-02-01 11:10 - 2014-02-01 11:10 - 00002699 _____ () C:\Users\Public\Desktop\Skype.lnk
2014-02-01 11:10 - 2014-02-01 11:10 - 00000000 ___RD () C:\Program Files (x86)\Skype
2014-02-01 11:07 - 2014-02-01 11:08 - 01659552 _____ (Skype Technologies S.A.) C:\Users\Andreas\Downloads\SkypeSetup.exe
2014-01-31 21:48 - 2014-01-31 21:48 - 00000306 __RSH () C:\ProgramData\ntuser.pol
2014-01-31 21:48 - 2014-01-31 21:48 - 00000000 ____D () C:\ProgramData\TauBeItAdBlockFrr
2014-01-31 21:48 - 2014-01-31 21:48 - 00000000 ____D () C:\ProgramData\jhippldmkdolhnikfcbcgjihailghcpl
2014-01-31 21:41 - 2014-01-31 21:41 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-01-31 21:40 - 2014-01-31 21:40 - 00000000 ____D () C:\Program Files (x86)\Microsoft Analysis Services
2014-01-31 21:27 - 2014-02-16 05:10 - 00001147 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-01-31 21:27 - 2014-01-31 21:27 - 00000000 ____D () C:\Users\Andreas\AppData\Local\Mozilla
2014-01-31 21:19 - 2014-02-17 13:13 - 00000340 _____ () C:\Windows\Tasks\HPCeeScheduleForAndreas.job
2014-01-31 21:19 - 2014-02-17 10:10 - 00003200 _____ () C:\Windows\System32\Tasks\HPCeeScheduleForAndreas
2014-01-31 21:15 - 2014-01-31 21:12 - 00000008 _____ () C:\Windows\system32\Drivers\rtkhdaud.dat
2014-01-31 21:14 - 2014-01-31 21:16 - 00002400 _____ () C:\RHDSetup.log
2014-01-31 21:14 - 2014-01-31 21:12 - 04064784 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RTKVHD64.sys
2014-01-31 21:14 - 2014-01-31 21:12 - 03611752 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkAPO64.dll
2014-01-31 21:14 - 2014-01-31 21:12 - 02674320 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtPgEx64.dll
2014-01-31 21:14 - 2014-01-31 21:12 - 01262696 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTCOM64.dll
2014-01-31 21:14 - 2014-01-31 21:12 - 00854672 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkApi64.dll
2014-01-31 21:14 - 2014-01-31 21:12 - 00283125 _____ () C:\Windows\system32\Drivers\RTAIODAT.DAT
2014-01-31 21:14 - 2014-01-31 21:12 - 00202336 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAC64.dll
2014-01-31 21:14 - 2014-01-31 21:12 - 00108640 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAR64.dll
2014-01-31 21:14 - 2014-01-31 21:12 - 00105616 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoInstII64.dll
2014-01-31 18:56 - 2014-01-31 18:56 - 00000000 ____D () C:\Users\Andreas\AppData\Local\AskPartnerNetwork
2014-01-31 18:55 - 2014-01-31 18:55 - 00000000 ____D () C:\ProgramData\AskPartnerNetwork
2014-01-31 18:55 - 2014-01-31 18:55 - 00000000 ____D () C:\Program Files (x86)\AskPartnerNetwork
2014-01-31 18:54 - 2014-01-31 18:54 - 00000000 ____D () C:\Users\Andreas\AppData\Roaming\Avira
2014-01-31 18:53 - 2014-01-31 18:53 - 00002066 _____ () C:\Users\Public\Desktop\Avira Control Center.lnk
2014-01-31 18:52 - 2014-01-31 18:52 - 00000000 ____D () C:\ProgramData\Avira
2014-01-31 18:52 - 2014-01-31 18:52 - 00000000 ____D () C:\Program Files (x86)\Avira
2014-01-31 18:52 - 2013-12-09 11:37 - 00131576 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2014-01-31 18:52 - 2013-12-09 11:37 - 00108440 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2014-01-31 18:52 - 2013-12-09 11:37 - 00084720 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2014-01-31 18:52 - 2013-12-09 11:37 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys
2014-01-31 18:29 - 2014-01-31 18:50 - 129598176 _____ () C:\Users\Andreas\Downloads\avira_free344_antivirus_de.exe
2014-01-31 17:38 - 2014-02-16 22:40 - 00000052 _____ () C:\Windows\SysWOW64\DOErrors.log
2014-01-26 11:24 - 2013-11-23 19:26 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2014-01-26 11:24 - 2013-11-23 18:47 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2014-01-26 11:24 - 2013-04-17 08:02 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2014-01-26 11:24 - 2013-04-17 07:24 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2014-01-26 03:08 - 2013-10-14 18:00 - 00028368 _____ (Microsoft Corporation) C:\Windows\system32\IEUDINIT.EXE
2014-01-26 03:01 - 2014-01-26 03:01 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-01-26 03:01 - 2014-01-26 03:01 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2014-01-26 03:00 - 2014-01-26 03:00 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-01-26 03:00 - 2014-01-26 03:00 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-01-26 03:00 - 2014-01-26 03:00 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2014-01-26 03:00 - 2014-01-26 03:00 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2014-01-26 03:00 - 2014-01-26 03:00 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll
2014-01-26 03:00 - 2014-01-26 03:00 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2014-01-26 03:00 - 2014-01-26 03:00 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2014-01-26 03:00 - 2014-01-26 03:00 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2014-01-26 03:00 - 2014-01-26 03:00 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-01-26 03:00 - 2014-01-26 03:00 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2014-01-26 03:00 - 2014-01-26 03:00 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-01-26 03:00 - 2014-01-26 03:00 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2014-01-26 03:00 - 2014-01-26 03:00 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-01-26 03:00 - 2014-01-26 03:00 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-01-26 03:00 - 2014-01-26 03:00 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2014-01-26 03:00 - 2014-01-26 03:00 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-01-26 03:00 - 2014-01-26 03:00 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2014-01-26 03:00 - 2014-01-26 03:00 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-01-26 03:00 - 2014-01-26 03:00 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2014-01-26 03:00 - 2014-01-26 03:00 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2014-01-26 03:00 - 2014-01-26 03:00 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2014-01-26 03:00 - 2014-01-26 03:00 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2014-01-26 03:00 - 2014-01-26 03:00 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2014-01-26 03:00 - 2014-01-26 03:00 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2014-01-26 03:00 - 2014-01-26 03:00 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2014-01-26 03:00 - 2014-01-26 03:00 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2014-01-26 03:00 - 2014-01-26 03:00 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2014-01-26 03:00 - 2014-01-26 03:00 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2014-01-26 03:00 - 2014-01-26 03:00 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2014-01-26 03:00 - 2014-01-26 03:00 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2014-01-26 03:00 - 2014-01-26 03:00 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2014-01-26 03:00 - 2014-01-26 03:00 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2014-01-26 03:00 - 2014-01-26 03:00 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2014-01-26 03:00 - 2014-01-26 03:00 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2014-01-26 03:00 - 2014-01-26 03:00 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2014-01-26 03:00 - 2014-01-26 03:00 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2014-01-26 03:00 - 2014-01-26 03:00 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2014-01-26 03:00 - 2014-01-26 03:00 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2014-01-26 03:00 - 2014-01-26 03:00 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-01-26 03:00 - 2014-01-26 03:00 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-01-26 03:00 - 2014-01-26 03:00 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2014-01-26 03:00 - 2014-01-26 03:00 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2014-01-26 03:00 - 2014-01-26 03:00 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2014-01-26 03:00 - 2014-01-26 03:00 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2014-01-26 03:00 - 2014-01-26 03:00 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2014-01-26 03:00 - 2014-01-26 03:00 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-01-26 03:00 - 2014-01-26 03:00 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2014-01-26 03:00 - 2014-01-26 03:00 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2014-01-26 03:00 - 2014-01-26 03:00 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2014-01-26 03:00 - 2014-01-26 03:00 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2014-01-26 03:00 - 2014-01-26 03:00 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2014-01-26 03:00 - 2014-01-26 03:00 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2014-01-26 03:00 - 2014-01-26 03:00 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2014-01-26 03:00 - 2014-01-26 03:00 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2014-01-26 03:00 - 2014-01-26 03:00 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2014-01-26 03:00 - 2014-01-26 03:00 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2014-01-26 03:00 - 2014-01-26 03:00 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-01-26 03:00 - 2014-01-26 03:00 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2014-01-26 03:00 - 2014-01-26 03:00 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-01-26 03:00 - 2014-01-26 03:00 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2014-01-26 03:00 - 2014-01-26 03:00 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2014-01-26 03:00 - 2014-01-26 03:00 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2014-01-26 03:00 - 2014-01-26 03:00 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2014-01-26 03:00 - 2014-01-26 03:00 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2014-01-26 03:00 - 2014-01-26 03:00 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2014-01-26 02:08 - 2014-01-26 02:08 - 00000000 _____ () C:\Windows\SysWOW64\shoABAD.tmp
2014-01-26 01:53 - 2014-02-16 05:05 - 00000000 ____D () C:\Users\Andreas\Desktop\nicht verwendete Symbole
2014-01-26 01:27 - 2014-01-26 01:27 - 00000000 ____D () C:\Users\Andreas\AppData\Local\Skype
2014-01-26 00:55 - 2014-02-16 22:21 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-01-26 00:55 - 2014-01-31 21:27 - 00000000 ____D () C:\Users\Andreas\AppData\Roaming\Mozilla
2014-01-26 00:55 - 2014-01-26 01:06 - 00000000 ____D () C:\Users\Andreas\AppData\Local\Thunderbird
2014-01-26 00:55 - 2014-01-26 00:55 - 00002086 _____ () C:\Users\Public\Desktop\Mein Postfach.lnk
2014-01-26 00:55 - 2014-01-26 00:55 - 00000000 ____D () C:\Users\Andreas\AppData\Roaming\Thunderbird
2014-01-26 00:55 - 2014-01-26 00:55 - 00000000 ____D () C:\ProgramData\Mozilla
2014-01-25 22:47 - 2014-01-25 22:47 - 00000000 ____D () C:\ProgramData\APN
2014-01-25 20:10 - 2014-01-25 20:10 - 00000000 _____ () C:\Windows\SysWOW64\shoAFB5.tmp
2014-01-25 20:05 - 2013-05-10 06:56 - 14631424 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2014-01-25 20:05 - 2013-05-10 06:56 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2014-01-25 20:05 - 2013-05-10 05:56 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL
2014-01-25 20:05 - 2013-05-10 05:56 - 11410432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
2014-01-25 18:20 - 2014-01-25 18:20 - 02776576 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll
2014-01-25 18:20 - 2014-01-25 18:20 - 02284544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll
2014-01-25 18:20 - 2014-01-25 18:20 - 01682432 _____ (Microsoft Corporation) C:\Windows\system32\XpsPrint.dll
2014-01-25 18:20 - 2014-01-25 18:20 - 01643520 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2014-01-25 18:20 - 2014-01-25 18:20 - 01247744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2014-01-25 18:20 - 2014-01-25 18:20 - 01238528 _____ (Microsoft Corporation) C:\Windows\system32\d3d10.dll
2014-01-25 18:20 - 2014-01-25 18:20 - 01175552 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2014-01-25 18:20 - 2014-01-25 18:20 - 01158144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsPrint.dll
2014-01-25 18:20 - 2014-01-25 18:20 - 01080832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10.dll
2014-01-25 18:20 - 2014-01-25 18:20 - 00648192 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll
2014-01-25 18:20 - 2014-01-25 18:20 - 00604160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll
2014-01-25 18:20 - 2014-01-25 18:20 - 00522752 _____ (Microsoft Corporation) C:\Windows\system32\XpsGdiConverter.dll
2014-01-25 18:20 - 2014-01-25 18:20 - 00364544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsGdiConverter.dll
2014-01-25 18:20 - 2014-01-25 18:20 - 00363008 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll
2014-01-25 18:20 - 2014-01-25 18:20 - 00333312 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1core.dll
2014-01-25 18:20 - 2014-01-25 18:20 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\d3d10core.dll
2014-01-25 18:20 - 2014-01-25 18:20 - 00293376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll
2014-01-25 18:20 - 2014-01-25 18:20 - 00249856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1core.dll
2014-01-25 18:20 - 2014-01-25 18:20 - 00245248 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecsExt.dll
2014-01-25 18:20 - 2014-01-25 18:20 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\UIAnimation.dll
2014-01-25 18:20 - 2014-01-25 18:20 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10core.dll
2014-01-25 18:20 - 2014-01-25 18:20 - 00207872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecsExt.dll
2014-01-25 18:20 - 2014-01-25 18:20 - 00194560 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1.dll
2014-01-25 18:20 - 2014-01-25 18:20 - 00187392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIAnimation.dll
2014-01-25 18:20 - 2014-01-25 18:20 - 00161792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1.dll
2014-01-25 18:20 - 2014-01-25 18:20 - 00010752 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll
2014-01-25 18:20 - 2014-01-25 18:20 - 00010752 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll
2014-01-25 18:20 - 2014-01-25 18:20 - 00009728 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2014-01-25 18:20 - 2014-01-25 18:20 - 00009728 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2014-01-25 18:20 - 2014-01-25 18:20 - 00005632 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2014-01-25 18:20 - 2014-01-25 18:20 - 00005632 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll
2014-01-25 18:20 - 2014-01-25 18:20 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2014-01-25 18:20 - 2014-01-25 18:20 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll
2014-01-25 18:20 - 2014-01-25 18:20 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-user32-l1-1-0.dll
2014-01-25 18:20 - 2014-01-25 18:20 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll
2014-01-25 18:20 - 2014-01-25 18:20 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll
2014-01-25 18:20 - 2014-01-25 18:20 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll
2014-01-25 18:20 - 2014-01-25 18:20 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-version-l1-1-0.dll
2014-01-25 18:20 - 2014-01-25 18:20 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll
2014-01-25 18:20 - 2014-01-25 18:20 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-version-l1-1-0.dll
2014-01-25 18:20 - 2014-01-25 18:20 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll
2014-01-25 18:20 - 2014-01-25 18:20 - 00002560 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll
2014-01-25 18:20 - 2014-01-25 18:20 - 00002560 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll
2014-01-25 17:51 - 2014-01-25 17:51 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-01-25 17:51 - 2014-01-25 17:51 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
2014-01-25 17:15 - 2014-02-17 03:06 - 00000000 ____D () C:\Windows\system32\MRT
2014-01-25 15:15 - 2014-02-01 18:47 - 00000000 ____D () C:\Users\Andreas\AppData\Local\CrashDumps
2014-01-25 15:14 - 2013-10-30 03:32 - 00335360 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll
2014-01-25 15:14 - 2013-10-30 03:19 - 00301568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msieftp.dll
2014-01-25 15:14 - 2013-07-09 06:52 - 00224256 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2014-01-25 15:14 - 2013-07-09 05:52 - 00175104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2014-01-25 15:14 - 2013-07-04 13:50 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll
2014-01-25 15:14 - 2013-07-04 12:50 - 00530432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comctl32.dll
2014-01-25 15:14 - 2013-02-15 07:08 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll
2014-01-25 15:14 - 2013-02-15 07:06 - 03717632 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2014-01-25 15:14 - 2013-02-15 07:02 - 00158720 _____ (Microsoft Corporation) C:\Windows\system32\aaclient.dll
2014-01-25 15:14 - 2013-02-15 05:37 - 03217408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2014-01-25 15:14 - 2013-02-15 05:34 - 00131584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aaclient.dll
2014-01-25 15:14 - 2013-02-15 04:25 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll
2014-01-25 15:13 - 2013-11-12 03:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2014-01-25 15:13 - 2013-11-12 03:07 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2014-01-25 15:13 - 2013-10-19 03:18 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll
2014-01-25 15:13 - 2013-10-19 02:36 - 00159232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll
2014-01-25 15:13 - 2013-10-05 21:25 - 01474048 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2014-01-25 15:13 - 2013-10-05 20:57 - 01168384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2014-01-25 15:13 - 2013-07-09 06:46 - 00184320 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2014-01-25 15:13 - 2013-07-09 06:46 - 00139776 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2014-01-25 15:13 - 2013-07-09 05:46 - 00140288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2014-01-25 15:13 - 2013-07-09 05:46 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2014-01-25 15:13 - 2013-04-12 15:45 - 01656680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2014-01-25 15:13 - 2013-03-19 06:53 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll
2014-01-25 15:13 - 2013-03-19 06:53 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\wwanprotdim.dll
2014-01-25 15:13 - 2013-02-27 07:02 - 00111448 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2014-01-25 15:13 - 2013-02-27 06:47 - 00070144 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll
2014-01-25 15:12 - 2013-11-27 02:41 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2014-01-25 15:12 - 2013-11-27 02:41 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2014-01-25 15:12 - 2013-11-27 02:41 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2014-01-25 15:12 - 2013-11-27 02:41 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2014-01-25 15:12 - 2013-11-27 02:41 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2014-01-25 15:12 - 2013-11-27 02:41 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys
2014-01-25 15:12 - 2013-11-27 02:41 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2014-01-25 15:12 - 2013-10-04 03:28 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\SmartcardCredentialProvider.dll
2014-01-25 15:12 - 2013-10-04 03:25 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\credui.dll
2014-01-25 15:12 - 2013-10-04 03:24 - 01930752 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2014-01-25 15:12 - 2013-10-04 03:16 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys
2014-01-25 15:12 - 2013-10-04 02:58 - 00152576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SmartcardCredentialProvider.dll
2014-01-25 15:12 - 2013-10-04 02:56 - 01796096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2014-01-25 15:12 - 2013-10-04 02:56 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credui.dll
2014-01-25 15:12 - 2013-10-04 02:36 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys
2014-01-25 15:12 - 2013-09-28 02:09 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2014-01-25 15:12 - 2013-09-25 03:26 - 00154560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2014-01-25 15:12 - 2013-09-25 03:26 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2014-01-25 15:12 - 2013-09-25 03:23 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2014-01-25 15:12 - 2013-09-25 03:23 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2014-01-25 15:12 - 2013-09-25 03:23 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2014-01-25 15:12 - 2013-09-25 03:22 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2014-01-25 15:12 - 2013-09-25 03:21 - 01447936 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-01-25 15:12 - 2013-09-25 03:21 - 00307200 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2014-01-25 15:12 - 2013-09-25 02:58 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2014-01-25 15:12 - 2013-09-25 02:57 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2014-01-25 15:12 - 2013-09-25 02:57 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2014-01-25 15:12 - 2013-09-25 02:56 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2014-01-25 15:12 - 2013-09-25 02:03 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2014-01-25 15:12 - 2013-08-05 03:25 - 00155584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ataport.sys
2014-01-25 15:12 - 2013-08-02 03:14 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2014-01-25 15:12 - 2013-08-02 03:13 - 01161216 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2014-01-25 15:12 - 2013-08-02 03:13 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2014-01-25 15:12 - 2013-08-02 03:12 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2014-01-25 15:12 - 2013-08-02 03:12 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2014-01-25 15:12 - 2013-08-02 03:12 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2014-01-25 15:12 - 2013-08-02 03:12 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2014-01-25 15:12 - 2013-08-02 03:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2014-01-25 15:12 - 2013-08-02 03:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2014-01-25 15:12 - 2013-08-02 03:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2014-01-25 15:12 - 2013-08-02 03:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2014-01-25 15:12 - 2013-08-02 03:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2014-01-25 15:12 - 2013-08-02 03:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2014-01-25 15:12 - 2013-08-02 03:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2014-01-25 15:12 - 2013-08-02 03:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2014-01-25 15:12 - 2013-08-02 03:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2014-01-25 15:12 - 2013-08-02 03:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2014-01-25 15:12 - 2013-08-02 03:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2014-01-25 15:12 - 2013-08-02 03:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2014-01-25 15:12 - 2013-08-02 03:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2014-01-25 15:12 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2014-01-25 15:12 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2014-01-25 15:12 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2014-01-25 15:12 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2014-01-25 15:12 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2014-01-25 15:12 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2014-01-25 15:12 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2014-01-25 15:12 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2014-01-25 15:12 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2014-01-25 15:12 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2014-01-25 15:12 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2014-01-25 15:12 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2014-01-25 15:12 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2014-01-25 15:12 - 2013-08-02 02:50 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2014-01-25 15:12 - 2013-08-02 02:50 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2014-01-25 15:12 - 2013-08-02 02:48 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2014-01-25 15:12 - 2013-08-02 02:48 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2014-01-25 15:12 - 2013-08-02 02:48 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2014-01-25 15:12 - 2013-08-02 02:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2014-01-25 15:12 - 2013-08-02 02:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2014-01-25 15:12 - 2013-08-02 02:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2014-01-25 15:12 - 2013-08-02 02:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2014-01-25 15:12 - 2013-08-02 02:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2014-01-25 15:12 - 2013-08-02 02:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2014-01-25 15:12 - 2013-08-02 02:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2014-01-25 15:12 - 2013-08-02 02:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2014-01-25 15:12 - 2013-08-02 02:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2014-01-25 15:12 - 2013-08-02 02:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2014-01-25 15:12 - 2013-08-02 02:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2014-01-25 15:12 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2014-01-25 15:12 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2014-01-25 15:12 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2014-01-25 15:12 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2014-01-25 15:12 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2014-01-25 15:12 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2014-01-25 15:12 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2014-01-25 15:12 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2014-01-25 15:12 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2014-01-25 15:12 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2014-01-25 15:12 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2014-01-25 15:12 - 2013-08-02 02:09 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2014-01-25 15:12 - 2013-08-02 01:59 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2014-01-25 15:12 - 2013-08-02 01:43 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2014-01-25 15:12 - 2013-08-02 01:43 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2014-01-25 15:12 - 2013-08-02 01:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2014-01-25 15:12 - 2013-08-02 01:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2014-01-25 15:12 - 2013-07-04 13:18 - 00458712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2014-01-25 15:12 - 2013-06-06 06:50 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2014-01-25 15:12 - 2013-06-06 06:49 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2014-01-25 15:12 - 2013-06-06 06:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2014-01-25 15:12 - 2013-06-06 06:47 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2014-01-25 15:12 - 2013-06-06 05:57 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll
2014-01-25 15:12 - 2013-06-06 05:51 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2014-01-25 15:12 - 2013-06-06 05:50 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll
2014-01-25 15:12 - 2013-06-06 04:30 - 00368128 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2014-01-25 15:12 - 2013-06-06 04:01 - 00295424 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2014-01-25 15:12 - 2013-06-06 04:01 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2014-01-25 15:12 - 2013-04-26 00:30 - 01505280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll
2014-01-25 15:12 - 2013-04-01 07:03 - 00078680 _____ (Microsoft Corporation) C:\Windows\system32\mcupdate_AuthenticAMD.dll
2014-01-25 15:12 - 2013-03-31 23:52 - 01887232 _____ (Microsoft Corporation) C:\Windows\system32\d3d11.dll
2014-01-25 15:11 - 2013-09-08 03:27 - 00327168 _____ (Microsoft Corporation) C:\Windows\system32\mswsock.dll
2014-01-25 15:11 - 2013-09-08 03:03 - 00231424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mswsock.dll
2014-01-25 15:11 - 2013-07-25 10:25 - 01888768 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
2014-01-25 15:11 - 2013-07-25 09:57 - 01620992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL
2014-01-25 15:11 - 2013-07-12 11:41 - 00185344 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbvideo.sys
2014-01-25 15:11 - 2013-07-12 11:41 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbcir.sys
2014-01-25 15:11 - 2013-07-09 06:51 - 01217024 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2014-01-25 15:11 - 2013-07-09 05:52 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2014-01-25 15:11 - 2013-07-04 13:57 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll
2014-01-25 15:11 - 2013-07-04 13:50 - 00102400 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll
2014-01-25 15:11 - 2013-07-04 12:57 - 00205824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WebClnt.dll
2014-01-25 15:11 - 2013-07-04 12:51 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\davclnt.dll
2014-01-25 15:11 - 2013-07-04 11:11 - 00140800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys
2014-01-25 15:11 - 2013-07-03 05:05 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidclass.sys
2014-01-25 15:11 - 2013-07-03 05:05 - 00032896 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidparse.sys
2014-01-25 15:11 - 2013-06-25 23:55 - 00785624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys
2014-01-25 15:11 - 2013-06-15 05:32 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys
2014-01-25 15:11 - 2013-06-04 07:00 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2014-01-25 15:11 - 2013-06-04 05:53 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2014-01-25 15:11 - 2013-02-12 05:12 - 00019968 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usb8023.sys
2014-01-25 15:11 - 2012-12-07 14:20 - 00441856 _____ (Microsoft Corporation) C:\Windows\system32\Wpc.dll
2014-01-25 15:11 - 2012-12-07 14:15 - 02746368 _____ (Microsoft Corporation) C:\Windows\system32\gameux.dll
2014-01-25 15:11 - 2012-12-07 13:26 - 00308736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Wpc.dll
2014-01-25 15:11 - 2012-12-07 13:20 - 02576384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gameux.dll
2014-01-25 15:11 - 2012-12-07 12:20 - 00045568 _____ (Microsoft) C:\Windows\system32\oflc-nz.rs
2014-01-25 15:11 - 2012-12-07 12:20 - 00044544 _____ (Microsoft) C:\Windows\system32\pegibbfc.rs
2014-01-25 15:11 - 2012-12-07 12:20 - 00043520 _____ (Microsoft) C:\Windows\system32\csrr.rs
2014-01-25 15:11 - 2012-12-07 12:20 - 00030720 _____ (Microsoft) C:\Windows\system32\usk.rs
2014-01-25 15:11 - 2012-12-07 12:20 - 00023552 _____ (Microsoft) C:\Windows\system32\oflc.rs
2014-01-25 15:11 - 2012-12-07 12:20 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi-pt.rs
2014-01-25 15:11 - 2012-12-07 12:20 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi-fi.rs
2014-01-25 15:11 - 2012-12-07 12:19 - 00055296 _____ (Microsoft) C:\Windows\system32\cero.rs
2014-01-25 15:11 - 2012-12-07 12:19 - 00051712 _____ (Microsoft) C:\Windows\system32\esrb.rs
2014-01-25 15:11 - 2012-12-07 12:19 - 00046592 _____ (Microsoft) C:\Windows\system32\fpb.rs
2014-01-25 15:11 - 2012-12-07 12:19 - 00040960 _____ (Microsoft) C:\Windows\system32\cob-au.rs
2014-01-25 15:11 - 2012-12-07 12:19 - 00021504 _____ (Microsoft) C:\Windows\system32\grb.rs
2014-01-25 15:11 - 2012-12-07 12:19 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi.rs
2014-01-25 15:11 - 2012-12-07 12:19 - 00015360 _____ (Microsoft) C:\Windows\system32\djctq.rs
2014-01-25 15:11 - 2012-12-07 11:46 - 00055296 _____ (Microsoft) C:\Windows\SysWOW64\cero.rs
2014-01-25 15:11 - 2012-12-07 11:46 - 00051712 _____ (Microsoft) C:\Windows\SysWOW64\esrb.rs
2014-01-25 15:11 - 2012-12-07 11:46 - 00046592 _____ (Microsoft) C:\Windows\SysWOW64\fpb.rs
2014-01-25 15:11 - 2012-12-07 11:46 - 00045568 _____ (Microsoft) C:\Windows\SysWOW64\oflc-nz.rs
2014-01-25 15:11 - 2012-12-07 11:46 - 00044544 _____ (Microsoft) C:\Windows\SysWOW64\pegibbfc.rs
2014-01-25 15:11 - 2012-12-07 11:46 - 00043520 _____ (Microsoft) C:\Windows\SysWOW64\csrr.rs
2014-01-25 15:11 - 2012-12-07 11:46 - 00040960 _____ (Microsoft) C:\Windows\SysWOW64\cob-au.rs
2014-01-25 15:11 - 2012-12-07 11:46 - 00030720 _____ (Microsoft) C:\Windows\SysWOW64\usk.rs
2014-01-25 15:11 - 2012-12-07 11:46 - 00023552 _____ (Microsoft) C:\Windows\SysWOW64\oflc.rs
2014-01-25 15:11 - 2012-12-07 11:46 - 00021504 _____ (Microsoft) C:\Windows\SysWOW64\grb.rs
2014-01-25 15:11 - 2012-12-07 11:46 - 00020480 _____ (Microsoft) C:\Windows\SysWOW64\pegi-pt.rs
2014-01-25 15:11 - 2012-12-07 11:46 - 00020480 _____ (Microsoft) C:\Windows\SysWOW64\pegi-fi.rs
2014-01-25 15:11 - 2012-12-07 11:46 - 00020480 _____ (Microsoft) C:\Windows\SysWOW64\pegi.rs
2014-01-25 15:11 - 2012-12-07 11:46 - 00015360 _____ (Microsoft) C:\Windows\SysWOW64\djctq.rs
2014-01-25 15:11 - 2012-11-22 06:44 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll
2014-01-25 15:11 - 2012-11-22 05:45 - 00626688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usp10.dll
2014-01-25 15:11 - 2012-11-01 06:43 - 02002432 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
2014-01-25 15:11 - 2012-11-01 05:47 - 01389568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll
2014-01-25 15:01 - 2013-11-26 12:40 - 00376768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2014-01-25 15:01 - 2013-11-26 11:32 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-01-25 15:01 - 2013-09-08 03:30 - 01903552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2014-01-25 15:01 - 2013-08-29 03:17 - 05549504 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2014-01-25 15:01 - 2013-08-29 03:16 - 01732032 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2014-01-25 15:01 - 2013-08-29 03:16 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll
2014-01-25 15:01 - 2013-08-29 03:16 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2014-01-25 15:01 - 2013-08-29 03:13 - 00878080 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2014-01-25 15:01 - 2013-08-29 02:51 - 03969472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2014-01-25 15:01 - 2013-08-29 02:51 - 03914176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2014-01-25 15:01 - 2013-08-29 02:50 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2014-01-25 15:01 - 2013-08-29 02:50 - 00619520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdh.dll
2014-01-25 15:01 - 2013-08-29 02:50 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2014-01-25 15:01 - 2013-08-29 02:48 - 00640512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2014-01-25 15:01 - 2013-08-29 01:49 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2014-01-25 15:01 - 2013-08-29 01:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2014-01-25 15:01 - 2013-08-29 01:49 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2014-01-25 15:01 - 2013-08-29 01:49 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2014-01-25 15:00 - 2012-11-30 06:45 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2014-01-25 15:00 - 2012-11-30 06:45 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2014-01-25 15:00 - 2012-11-30 06:43 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2014-01-25 14:59 - 2013-10-03 03:23 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2014-01-25 14:59 - 2013-10-03 03:00 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2014-01-25 14:59 - 2013-07-26 03:24 - 14172672 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2014-01-25 14:59 - 2013-07-26 03:24 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\shdocvw.dll
2014-01-25 14:59 - 2013-07-26 02:55 - 12872704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2014-01-25 14:59 - 2013-07-26 02:55 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shdocvw.dll
2014-01-25 14:59 - 2013-04-26 06:51 - 00751104 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll
2014-01-25 14:59 - 2013-04-26 05:55 - 00492544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32spl.dll
2014-01-25 14:58 - 2013-07-20 11:33 - 00124112 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2014-01-25 14:58 - 2013-07-20 11:33 - 00102608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2014-01-25 14:58 - 2013-05-13 06:50 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\certenc.dll
2014-01-25 14:58 - 2013-05-13 04:43 - 01192448 _____ (Microsoft Corporation) C:\Windows\system32\certutil.exe
2014-01-25 14:58 - 2013-05-13 04:08 - 00903168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certutil.exe
2014-01-25 14:58 - 2013-05-13 04:08 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certenc.dll
2014-01-25 14:58 - 2013-05-10 06:49 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\cryptdlg.dll
2014-01-25 14:58 - 2013-05-10 04:20 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptdlg.dll
2014-01-25 14:58 - 2013-01-24 07:01 - 00223752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fvevol.sys
2014-01-25 14:58 - 2013-01-03 07:00 - 00288088 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
2014-01-25 14:58 - 2012-11-23 04:13 - 00068608 _____ (Microsoft Corporation) C:\Windows\system32\taskhost.exe
2014-01-25 14:57 - 2013-10-12 03:32 - 00150016 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx
2014-01-25 14:57 - 2013-10-12 03:31 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll
2014-01-25 14:57 - 2013-10-12 03:30 - 00830464 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll
2014-01-25 14:57 - 2013-10-12 03:29 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL
2014-01-25 14:57 - 2013-10-12 03:29 - 00324096 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL
2014-01-25 14:57 - 2013-10-12 03:04 - 00121856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshom.ocx
2014-01-25 14:57 - 2013-10-12 03:03 - 00656896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nshwfp.dll
2014-01-25 14:57 - 2013-10-12 03:03 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scrrun.dll
2014-01-25 14:57 - 2013-10-12 03:01 - 00216576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FWPUCLNT.DLL
2014-01-25 14:57 - 2013-10-12 02:33 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe
2014-01-25 14:57 - 2013-10-12 02:33 - 00156160 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe
2014-01-25 14:57 - 2013-10-12 02:15 - 00141824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscript.exe
2014-01-25 14:57 - 2013-10-12 02:15 - 00126976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cscript.exe
2014-01-25 14:57 - 2013-08-01 10:19 - 00984512 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2014-01-25 14:57 - 2013-08-01 10:19 - 00265152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys
2014-01-25 14:55 - 2012-11-02 06:59 - 00478208 _____ (Microsoft Corporation) C:\Windows\system32\dpnet.dll
2014-01-25 14:55 - 2012-11-02 06:11 - 00376832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpnet.dll
2014-01-25 14:53 - 2014-01-25 14:53 - 00000000 ____D () C:\Users\Andreas\Documents\Optimizer Pro
2014-01-25 14:49 - 2014-01-25 14:49 - 00000000 ____D () C:\Program Files\Highlightly
2014-01-25 14:49 - 2014-01-25 14:49 - 00000000 ____D () C:\Program Files (x86)\Highlightly
2014-01-25 14:48 - 2014-01-25 15:17 - 00000000 ____D () C:\Users\Andreas\AppData\Roaming\Systweak
2014-01-25 14:48 - 2014-01-25 14:48 - 00000000 ____D () C:\Program Files (x86)\Supporter
2014-01-25 14:48 - 2013-07-11 13:49 - 00020312 _____ (Systweak Inc., (www.systweak.com)) C:\Windows\system32\roboot64.exe
2014-01-25 14:47 - 2014-01-31 21:48 - 00000000 ____D () C:\ProgramData\a0372ee8eaab2b88
2014-01-25 14:47 - 2014-01-26 00:39 - 00000000 ____D () C:\Program Files (x86)\ScorpionSaver
2014-01-25 14:47 - 2014-01-25 22:49 - 00000000 ____D () C:\Program Files (x86)\ShoppingChip
2014-01-25 14:47 - 2014-01-25 15:30 - 00000000 ____D () C:\Program Files (x86)\IminentToolbar
2014-01-25 14:47 - 2014-01-25 14:47 - 00000000 ____D () C:\Users\HomeGroupUser$\AppData\Local\Torch
2014-01-25 14:47 - 2014-01-25 14:47 - 00000000 ____D () C:\Users\HomeGroupUser$\AppData\Local\Google
2014-01-25 14:47 - 2014-01-25 14:47 - 00000000 ____D () C:\Users\HomeGroupUser$\AppData\Local\Comodo
2014-01-25 14:47 - 2014-01-25 14:47 - 00000000 ____D () C:\Users\HomeGroupUser$
2014-01-25 14:47 - 2014-01-25 14:47 - 00000000 ____D () C:\Users\Gast\AppData\Local\Torch
2014-01-25 14:47 - 2014-01-25 14:47 - 00000000 ____D () C:\Users\Gast\AppData\Local\Google
2014-01-25 14:47 - 2014-01-25 14:47 - 00000000 ____D () C:\Users\Gast\AppData\Local\Comodo
2014-01-25 14:47 - 2014-01-25 14:47 - 00000000 ____D () C:\Users\Gast
2014-01-25 14:47 - 2014-01-25 14:47 - 00000000 ____D () C:\Users\Andreas\AppData\Local\Torch
2014-01-25 14:47 - 2014-01-25 14:47 - 00000000 ____D () C:\Users\Andreas\AppData\Local\Packages
2014-01-25 14:47 - 2014-01-25 14:47 - 00000000 ____D () C:\Users\Andreas\AppData\Local\Google
2014-01-25 14:47 - 2014-01-25 14:47 - 00000000 ____D () C:\Users\Andreas\AppData\Local\Comodo
2014-01-25 14:47 - 2014-01-25 14:47 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Torch
2014-01-25 14:47 - 2014-01-25 14:47 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Google
2014-01-25 14:47 - 2014-01-25 14:47 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Comodo
2014-01-25 14:47 - 2014-01-25 14:47 - 00000000 ____D () C:\Users\Administrator
2014-01-25 14:47 - 2014-01-25 14:47 - 00000000 ____D () C:\ProgramData\ShoppingChip
2014-01-25 14:45 - 2014-01-25 14:45 - 00000000 ____D () C:\Program Files\Level Quality Watcher
2014-01-25 14:37 - 2014-01-25 14:37 - 00000000 _____ () C:\Windows\SysWOW64\sho3746.tmp
2014-01-25 14:34 - 2013-08-28 02:12 - 00461312 _____ (Microsoft Corporation) C:\Windows\system32\scavengeui.dll
2014-01-25 14:24 - 2014-02-17 10:10 - 00002778 _____ () C:\Windows\System32\Tasks\CCleanerSkipUAC
2014-01-25 14:24 - 2014-01-25 14:24 - 00000822 _____ () C:\Users\Public\Desktop\CCleaner.lnk
2014-01-25 14:24 - 2014-01-25 14:24 - 00000000 ____D () C:\Program Files\CCleaner
2014-01-25 14:09 - 2014-01-25 14:09 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_ew_juextctrl_01007.Wdf
2014-01-25 14:09 - 2014-01-25 14:09 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_ew_jucdcacm_01007.Wdf
2014-01-25 14:08 - 2014-01-25 14:08 - 00001241 _____ () C:\Users\Public\Desktop\Internet Stick.lnk
2014-01-25 14:08 - 2014-01-25 14:08 - 00000000 ____D () C:\ProgramData\Internet Manager
2014-01-25 14:07 - 2014-01-25 14:07 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_ew_jubusenum_01007.Wdf
2014-01-25 14:07 - 2012-04-26 04:04 - 00450048 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ewusbwwan.sys
2014-01-25 14:07 - 2012-04-23 02:58 - 00238080 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ew_juwwanecm.sys
2014-01-25 14:07 - 2012-04-23 02:57 - 00104448 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ew_jucdcacm.sys
2014-01-25 14:07 - 2012-04-23 02:57 - 00090112 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ew_jubusenum.sys
2014-01-25 14:07 - 2012-04-23 02:57 - 00076800 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ew_jucdcecm.sys
2014-01-25 14:07 - 2012-04-23 02:57 - 00030720 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ew_juextctrl.sys
2014-01-25 14:07 - 2011-12-31 02:20 - 00225920 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ewusbmdm.sys
2014-01-25 14:07 - 2011-08-16 09:40 - 01490656 _____ (Microsoft Corporation) C:\Windows\system32\WdfCoInstaller01007.dll
2014-01-25 14:07 - 2011-08-16 09:40 - 01490656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdfCoInstaller01007.dll
2014-01-25 14:07 - 2010-10-08 09:59 - 00032768 _____ (Huawei Tech. Co., Ltd.) C:\Windows\system32\Drivers\ewdcsc.sys
2014-01-25 14:07 - 2010-09-26 11:09 - 00022016 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ew_hwupgrade.sys
2014-01-25 14:07 - 2010-08-06 00:43 - 01001472 _____ (DiBcom SA) C:\Windows\system32\Drivers\mod7700.sys
2014-01-25 14:07 - 2010-07-27 02:52 - 00117248 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ew_hwusbdev.sys
2014-01-25 14:07 - 2010-03-20 05:06 - 00013952 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ew_usbenumfilter.sys
2014-01-25 14:06 - 2014-01-25 14:06 - 00000000 ____D () C:\Program Files (x86)\T-Mobile
2014-01-25 14:05 - 2014-01-25 14:08 - 00000000 ____D () C:\ProgramData\DatacardService
2014-01-25 14:05 - 2014-01-25 14:05 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdFs_01_09_00.Wdf
         


Alt 18.02.2014, 14:07   #6
Shirry
 
Windows 7 - Malware? - Fenster öffnen sich automatisch - Standard

Windows 7 - Malware? - Fenster öffnen sich automatisch



FRST Teil 2:

Code:
ATTFilter
==================== One Month Modified Files and Folders =======

2014-02-17 18:24 - 2014-02-17 18:23 - 00020591 _____ () C:\Users\Andreas\Downloads\FRST.txt
2014-02-17 18:23 - 2014-02-17 18:22 - 00000000 ____D () C:\FRST
2014-02-17 18:22 - 2014-02-17 18:22 - 02152448 _____ (Farbar) C:\Users\Andreas\Downloads\FRST64.exe
2014-02-17 17:46 - 2012-04-05 17:35 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-02-17 17:45 - 2009-07-14 05:45 - 00031248 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-02-17 17:45 - 2009-07-14 05:45 - 00031248 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-02-17 17:41 - 2012-12-01 12:16 - 02083596 _____ () C:\Windows\WindowsUpdate.log
2014-02-17 17:36 - 2014-02-16 22:21 - 00001075 _____ () C:\Windows\setupact.log
2014-02-17 17:36 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-02-17 13:22 - 2012-02-24 02:22 - 00000000 ____D () C:\Program Files\Hewlett-Packard
2014-02-17 13:13 - 2014-02-16 22:21 - 00006246 _____ () C:\Windows\PFRO.log
2014-02-17 13:13 - 2014-02-16 05:04 - 00003088 _____ () C:\Windows\Tasks\Feven Pro-chromeinstaller.job
2014-02-17 13:13 - 2014-02-16 05:04 - 00002256 _____ () C:\Windows\Tasks\Feven Pro-firefoxinstaller.job
2014-02-17 13:13 - 2014-02-16 05:04 - 00001500 _____ () C:\Windows\Tasks\Feven Pro-updater.job
2014-02-17 13:13 - 2014-02-16 05:04 - 00001456 _____ () C:\Windows\Tasks\Feven Pro-codedownloader.job
2014-02-17 13:13 - 2014-02-16 05:04 - 00001354 _____ () C:\Windows\Tasks\Feven Pro-enabler.job
2014-02-17 13:13 - 2014-01-31 21:19 - 00000340 _____ () C:\Windows\Tasks\HPCeeScheduleForAndreas.job
2014-02-17 13:11 - 2014-02-17 13:11 - 00000000 _____ () C:\Windows\SysWOW64\shoF972.tmp
2014-02-17 10:10 - 2014-02-16 05:04 - 00004542 _____ () C:\Windows\System32\Tasks\Feven Pro-updater
2014-02-17 10:10 - 2014-02-16 05:04 - 00004498 _____ () C:\Windows\System32\Tasks\Feven Pro-codedownloader
2014-02-17 10:10 - 2014-02-16 05:04 - 00004396 _____ () C:\Windows\System32\Tasks\Feven Pro-enabler
2014-02-17 10:10 - 2014-02-02 12:01 - 00003136 _____ () C:\Windows\System32\Tasks\{61FD8FB3-4839-4C3C-AFAF-0AE21A7BD340}
2014-02-17 10:10 - 2014-01-31 21:19 - 00003200 _____ () C:\Windows\System32\Tasks\HPCeeScheduleForAndreas
2014-02-17 10:10 - 2014-01-25 14:24 - 00002778 _____ () C:\Windows\System32\Tasks\CCleanerSkipUAC
2014-02-17 10:10 - 2012-12-01 17:11 - 00003546 _____ () C:\Windows\System32\Tasks\CreateChoiceProcessTask
2014-02-17 10:10 - 2012-12-01 14:17 - 00003770 _____ () C:\Windows\System32\Tasks\Registration
2014-02-17 10:04 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\rescache
2014-02-17 04:15 - 2012-12-01 17:41 - 00000000 ____D () C:\Users\Andreas\AppData\Roaming\SoftGrid Client
2014-02-17 03:06 - 2014-01-25 17:15 - 00000000 ____D () C:\Windows\system32\MRT
2014-02-17 03:01 - 2012-12-07 18:38 - 88567024 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-02-16 23:43 - 2012-12-01 14:20 - 00003946 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{2B17A51A-F578-4FA4-B1A1-080F9A0ECE95}
2014-02-16 22:40 - 2014-01-31 17:38 - 00000052 _____ () C:\Windows\SysWOW64\DOErrors.log
2014-02-16 22:32 - 2012-04-06 02:24 - 00654610 _____ () C:\Windows\system32\perfh007.dat
2014-02-16 22:32 - 2012-04-06 02:24 - 00130192 _____ () C:\Windows\system32\perfc007.dat
2014-02-16 22:32 - 2009-07-14 06:13 - 01500018 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-02-16 22:21 - 2014-02-16 22:21 - 00000000 _____ () C:\Windows\setuperr.log
2014-02-16 22:21 - 2014-01-26 00:55 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-02-16 05:10 - 2014-02-16 05:04 - 00000000 ____D () C:\Users\Andreas\AppData\Roaming\awesomehp
2014-02-16 05:10 - 2014-02-16 05:04 - 00000000 ____D () C:\ProgramData\IePluginService
2014-02-16 05:10 - 2014-01-31 21:27 - 00001147 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-02-16 05:10 - 2012-12-01 14:20 - 00001421 _____ () C:\Users\Andreas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-02-16 05:09 - 2012-12-01 14:20 - 00000000 ___RD () C:\Users\Andreas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-02-16 05:08 - 2014-02-16 05:04 - 00000000 ____D () C:\Program Files (x86)\SupTab
2014-02-16 05:07 - 2014-02-16 05:04 - 00000000 ____D () C:\ProgramData\WPM
2014-02-16 05:05 - 2014-01-26 01:53 - 00000000 ____D () C:\Users\Andreas\Desktop\nicht verwendete Symbole
2014-02-16 05:04 - 2014-02-16 05:04 - 00000000 ____D () C:\Program Files (x86)\Feven Pro
2014-02-16 05:02 - 2014-02-02 11:59 - 00000000 _____ () C:\END
2014-02-15 22:55 - 2012-12-01 17:24 - 00000000 ____D () C:\Users\Andreas\AppData\Roaming\Skype
2014-02-15 02:26 - 2014-02-15 02:26 - 00000000 __RHD () C:\MSOCache
2014-02-15 00:32 - 2014-02-15 00:31 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-02-14 23:57 - 2014-02-14 23:59 - 00083292 _____ () C:\Users\Andreas\Downloads\flashblock-1.5.14.2-fx (1).xpi
2014-02-14 23:57 - 2014-02-14 23:57 - 00083292 _____ () C:\Users\Andreas\Downloads\flashblock-1.5.14.2-fx.xpi
2014-02-14 23:51 - 2014-02-14 23:51 - 00000000 ____D () C:\Users\Andreas\AppData\Local\WinZip
2014-02-14 23:51 - 2012-04-05 17:57 - 00000000 ____D () C:\ProgramData\WinZip
2014-02-14 22:57 - 2012-04-05 18:02 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-02-14 22:56 - 2014-02-14 22:56 - 00002177 _____ () C:\Users\Andreas\Desktop\HP Support Assistant.lnk
2014-02-14 22:56 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\Help
2014-02-14 22:52 - 2012-04-05 18:03 - 00000000 ____D () C:\Windows\System32\Tasks\Hewlett-Packard
2014-02-14 22:50 - 2012-04-05 17:29 - 00000000 ____D () C:\Program Files (x86)\Hewlett-Packard
2014-02-14 22:47 - 2014-02-14 22:47 - 00000000 ____D () C:\ProgramData\{18165758-115C-4DC0-9EC2-FF89F725767F}
2014-02-14 22:46 - 2012-04-05 17:51 - 00000000 ____D () C:\ProgramData\Hewlett-Packard
2014-02-14 22:45 - 2011-02-10 20:23 - 00000000 ____D () C:\SWSetup
2014-02-07 09:22 - 2014-02-07 09:22 - 00000000 _____ () C:\Windows\SysWOW64\sho5FBE.tmp
2014-02-06 21:55 - 2014-02-06 01:01 - 00000000 ____D () C:\Program Files (x86)\Mozilla Thunderbird
2014-02-06 13:16 - 2014-02-15 03:01 - 23170048 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-02-06 12:30 - 2014-02-15 03:01 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-02-06 12:30 - 2014-02-15 03:01 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-02-06 12:12 - 2014-02-15 03:01 - 02765824 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-02-06 12:07 - 2014-02-15 03:01 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-02-06 12:06 - 2014-02-15 03:01 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-02-06 11:57 - 2014-02-15 03:01 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-02-06 11:56 - 2014-02-15 03:01 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-02-06 11:52 - 2014-02-15 03:01 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-02-06 11:49 - 2014-02-15 03:01 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-02-06 11:48 - 2014-02-15 03:01 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-02-06 11:48 - 2014-02-15 03:01 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-02-06 11:38 - 2014-02-15 03:01 - 17103872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-02-06 11:32 - 2014-02-15 03:01 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-02-06 11:20 - 2014-02-15 03:01 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-02-06 11:17 - 2014-02-15 03:01 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-02-06 11:11 - 2014-02-15 03:01 - 05768704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-02-06 11:01 - 2014-02-15 03:01 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-02-06 11:00 - 2014-02-15 03:01 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-02-06 10:57 - 2014-02-15 03:01 - 02168320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-02-06 10:57 - 2014-02-15 03:01 - 00627200 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-02-06 10:52 - 2014-02-15 03:01 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-02-06 10:52 - 2014-02-15 03:01 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-02-06 10:50 - 2014-02-15 03:01 - 02041856 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-02-06 10:49 - 2014-02-15 03:01 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-02-06 10:47 - 2014-02-15 03:01 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-02-06 10:46 - 2014-02-15 03:01 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-02-06 10:25 - 2014-02-15 03:01 - 04244480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-02-06 10:25 - 2014-02-15 03:01 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-02-06 10:24 - 2014-02-15 03:01 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-02-06 10:22 - 2014-02-15 03:01 - 13051392 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-02-06 10:13 - 2014-02-15 03:01 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-02-06 10:09 - 2014-02-15 03:01 - 01964032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-02-06 10:03 - 2014-02-15 03:01 - 11266048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-02-06 09:55 - 2014-02-15 03:01 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-02-06 09:41 - 2014-02-15 03:01 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-02-06 09:40 - 2014-02-15 03:01 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-02-06 09:36 - 2014-02-15 03:01 - 01156096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-02-06 09:34 - 2014-02-15 03:01 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-02-06 01:46 - 2012-04-05 17:35 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-02-06 01:46 - 2012-04-05 17:35 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-02-06 01:46 - 2012-04-05 17:35 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-02-02 12:28 - 2010-11-21 08:06 - 00000000 ____D () C:\Windows\SysWOW64\winrm
2014-02-02 12:28 - 2010-11-21 08:06 - 00000000 ____D () C:\Windows\SysWOW64\WCN
2014-02-02 12:28 - 2010-11-21 08:06 - 00000000 ____D () C:\Windows\SysWOW64\sysprep
2014-02-02 12:28 - 2010-11-21 08:06 - 00000000 ____D () C:\Windows\SysWOW64\slmgr
2014-02-02 12:28 - 2010-11-21 08:06 - 00000000 ____D () C:\Windows\SysWOW64\Printing_Admin_Scripts
2014-02-02 12:28 - 2010-11-21 08:06 - 00000000 ____D () C:\Windows\system32\winrm
2014-02-02 12:28 - 2010-11-21 08:06 - 00000000 ____D () C:\Windows\system32\slmgr
2014-02-02 12:28 - 2009-07-14 06:32 - 00000000 ____D () C:\Program Files\Windows Sidebar
2014-02-02 12:28 - 2009-07-14 06:32 - 00000000 ____D () C:\Program Files\Windows Photo Viewer
2014-02-02 12:28 - 2009-07-14 06:32 - 00000000 ____D () C:\Program Files\Windows Defender
2014-02-02 12:28 - 2009-07-14 06:32 - 00000000 ____D () C:\Program Files\DVD Maker
2014-02-02 12:28 - 2009-07-14 06:32 - 00000000 ____D () C:\Program Files (x86)\Windows Sidebar
2014-02-02 12:28 - 2009-07-14 06:32 - 00000000 ____D () C:\Program Files (x86)\Windows Photo Viewer
2014-02-02 12:28 - 2009-07-14 06:32 - 00000000 ____D () C:\Program Files (x86)\Windows Defender
2014-02-02 12:28 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\SysWOW64\Setup
2014-02-02 12:28 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\SysWOW64\oobe
2014-02-02 12:28 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\SysWOW64\MUI
2014-02-02 12:28 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\SysWOW64\migwiz
2014-02-02 12:28 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\SysWOW64\Dism
2014-02-02 12:28 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\SysWOW64\com
2014-02-02 12:28 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\sysprep
2014-02-02 12:28 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\Setup
2014-02-02 12:28 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\oobe
2014-02-02 12:28 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\migwiz
2014-02-02 12:28 - 2009-07-14 04:20 - 00000000 ____D () C:\Program Files\Common Files\System
2014-02-02 12:27 - 2010-11-21 08:06 - 00000000 ____D () C:\Windows\system32\WCN
2014-02-02 12:27 - 2010-11-21 08:06 - 00000000 ____D () C:\Windows\system32\Printing_Admin_Scripts
2014-02-02 12:27 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\MUI
2014-02-02 12:27 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\Dism
2014-02-02 12:27 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\com
2014-02-02 11:59 - 2014-02-02 11:59 - 00000000 ____D () C:\Users\Andreas\AppData\Local\SearchProtect
2014-02-02 11:58 - 2014-02-02 11:58 - 00319904 _____ () C:\Users\Andreas\Downloads\Setup.exe
2014-02-02 06:52 - 2014-02-02 06:52 - 00000000 ____D () C:\Users\Andreas\AppData\Local\Macromedia
2014-02-02 06:49 - 2014-02-02 06:48 - 00000000 ____D () C:\Users\Andreas\AppData\Local\Adobe
2014-02-02 06:37 - 2014-02-02 06:37 - 00000000 ____D () C:\ProgramData\PDFC
2014-02-01 18:47 - 2014-01-25 15:15 - 00000000 ____D () C:\Users\Andreas\AppData\Local\CrashDumps
2014-02-01 11:10 - 2014-02-01 11:10 - 00002699 _____ () C:\Users\Public\Desktop\Skype.lnk
2014-02-01 11:10 - 2014-02-01 11:10 - 00000000 ___RD () C:\Program Files (x86)\Skype
2014-02-01 11:10 - 2012-04-05 17:51 - 00000000 ____D () C:\ProgramData\Skype
2014-02-01 11:08 - 2014-02-01 11:07 - 01659552 _____ (Skype Technologies S.A.) C:\Users\Andreas\Downloads\SkypeSetup.exe
2014-01-31 21:48 - 2014-01-31 21:48 - 00000306 __RSH () C:\ProgramData\ntuser.pol
2014-01-31 21:48 - 2014-01-31 21:48 - 00000000 ____D () C:\ProgramData\TauBeItAdBlockFrr
2014-01-31 21:48 - 2014-01-31 21:48 - 00000000 ____D () C:\ProgramData\jhippldmkdolhnikfcbcgjihailghcpl
2014-01-31 21:48 - 2014-01-25 14:47 - 00000000 ____D () C:\ProgramData\a0372ee8eaab2b88
2014-01-31 21:48 - 2009-07-14 04:20 - 00000000 ___HD () C:\Windows\system32\GroupPolicy
2014-01-31 21:48 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\SysWOW64\GroupPolicy
2014-01-31 21:41 - 2014-01-31 21:41 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-01-31 21:40 - 2014-01-31 21:40 - 00000000 ____D () C:\Program Files (x86)\Microsoft Analysis Services
2014-01-31 21:27 - 2014-01-31 21:27 - 00000000 ____D () C:\Users\Andreas\AppData\Local\Mozilla
2014-01-31 21:27 - 2014-01-26 00:55 - 00000000 ____D () C:\Users\Andreas\AppData\Roaming\Mozilla
2014-01-31 21:19 - 2012-12-01 14:18 - 00000000 ____D () C:\Users\Andreas\AppData\Local\Hewlett-Packard
2014-01-31 21:16 - 2014-01-31 21:14 - 00002400 _____ () C:\RHDSetup.log
2014-01-31 21:15 - 2012-06-02 05:42 - 00000000 ____D () C:\Windows\SysWOW64\RTCOM
2014-01-31 21:12 - 2014-01-31 21:15 - 00000008 _____ () C:\Windows\system32\Drivers\rtkhdaud.dat
2014-01-31 21:12 - 2014-01-31 21:14 - 04064784 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RTKVHD64.sys
2014-01-31 21:12 - 2014-01-31 21:14 - 03611752 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkAPO64.dll
2014-01-31 21:12 - 2014-01-31 21:14 - 02674320 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtPgEx64.dll
2014-01-31 21:12 - 2014-01-31 21:14 - 01262696 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTCOM64.dll
2014-01-31 21:12 - 2014-01-31 21:14 - 00854672 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkApi64.dll
2014-01-31 21:12 - 2014-01-31 21:14 - 00283125 _____ () C:\Windows\system32\Drivers\RTAIODAT.DAT
2014-01-31 21:12 - 2014-01-31 21:14 - 00202336 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAC64.dll
2014-01-31 21:12 - 2014-01-31 21:14 - 00108640 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAR64.dll
2014-01-31 21:12 - 2014-01-31 21:14 - 00105616 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoInstII64.dll
2014-01-31 21:12 - 2012-06-02 05:42 - 01706640 _____ (Realtek Semiconductor Corp.) C:\Windows\RtlExUpd.dll
2014-01-31 21:12 - 2012-06-02 05:42 - 00000712 _____ () C:\Windows\system32\Drivers\RTEQEX0.dat
2014-01-31 18:56 - 2014-01-31 18:56 - 00000000 ____D () C:\Users\Andreas\AppData\Local\AskPartnerNetwork
2014-01-31 18:55 - 2014-01-31 18:55 - 00000000 ____D () C:\ProgramData\AskPartnerNetwork
2014-01-31 18:55 - 2014-01-31 18:55 - 00000000 ____D () C:\Program Files (x86)\AskPartnerNetwork
2014-01-31 18:54 - 2014-01-31 18:54 - 00000000 ____D () C:\Users\Andreas\AppData\Roaming\Avira
2014-01-31 18:53 - 2014-01-31 18:53 - 00002066 _____ () C:\Users\Public\Desktop\Avira Control Center.lnk
2014-01-31 18:52 - 2014-01-31 18:52 - 00000000 ____D () C:\ProgramData\Avira
2014-01-31 18:52 - 2014-01-31 18:52 - 00000000 ____D () C:\Program Files (x86)\Avira
2014-01-31 18:50 - 2014-01-31 18:29 - 129598176 _____ () C:\Users\Andreas\Downloads\avira_free344_antivirus_de.exe
2014-01-31 17:51 - 2012-12-01 14:19 - 00000000 ____D () C:\Users\Andreas\AppData\Roaming\hpqlog
2014-01-26 03:28 - 2007-01-02 02:25 - 00000000 ____D () C:\Windows\Panther
2014-01-26 03:12 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
2014-01-26 03:01 - 2014-01-26 03:01 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-01-26 03:01 - 2014-01-26 03:01 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2014-01-26 03:00 - 2014-01-26 03:00 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-01-26 03:00 - 2014-01-26 03:00 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-01-26 03:00 - 2014-01-26 03:00 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2014-01-26 03:00 - 2014-01-26 03:00 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2014-01-26 03:00 - 2014-01-26 03:00 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll
2014-01-26 03:00 - 2014-01-26 03:00 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2014-01-26 03:00 - 2014-01-26 03:00 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2014-01-26 03:00 - 2014-01-26 03:00 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2014-01-26 03:00 - 2014-01-26 03:00 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-01-26 03:00 - 2014-01-26 03:00 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2014-01-26 03:00 - 2014-01-26 03:00 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-01-26 03:00 - 2014-01-26 03:00 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2014-01-26 03:00 - 2014-01-26 03:00 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-01-26 03:00 - 2014-01-26 03:00 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-01-26 03:00 - 2014-01-26 03:00 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2014-01-26 03:00 - 2014-01-26 03:00 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-01-26 03:00 - 2014-01-26 03:00 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2014-01-26 03:00 - 2014-01-26 03:00 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-01-26 03:00 - 2014-01-26 03:00 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2014-01-26 03:00 - 2014-01-26 03:00 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2014-01-26 03:00 - 2014-01-26 03:00 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2014-01-26 03:00 - 2014-01-26 03:00 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2014-01-26 03:00 - 2014-01-26 03:00 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2014-01-26 03:00 - 2014-01-26 03:00 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2014-01-26 03:00 - 2014-01-26 03:00 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2014-01-26 03:00 - 2014-01-26 03:00 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2014-01-26 03:00 - 2014-01-26 03:00 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2014-01-26 03:00 - 2014-01-26 03:00 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2014-01-26 03:00 - 2014-01-26 03:00 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2014-01-26 03:00 - 2014-01-26 03:00 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2014-01-26 03:00 - 2014-01-26 03:00 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2014-01-26 03:00 - 2014-01-26 03:00 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2014-01-26 03:00 - 2014-01-26 03:00 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2014-01-26 03:00 - 2014-01-26 03:00 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2014-01-26 03:00 - 2014-01-26 03:00 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2014-01-26 03:00 - 2014-01-26 03:00 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2014-01-26 03:00 - 2014-01-26 03:00 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2014-01-26 03:00 - 2014-01-26 03:00 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2014-01-26 03:00 - 2014-01-26 03:00 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-01-26 03:00 - 2014-01-26 03:00 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-01-26 03:00 - 2014-01-26 03:00 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2014-01-26 03:00 - 2014-01-26 03:00 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2014-01-26 03:00 - 2014-01-26 03:00 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2014-01-26 03:00 - 2014-01-26 03:00 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2014-01-26 03:00 - 2014-01-26 03:00 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2014-01-26 03:00 - 2014-01-26 03:00 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-01-26 03:00 - 2014-01-26 03:00 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2014-01-26 03:00 - 2014-01-26 03:00 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2014-01-26 03:00 - 2014-01-26 03:00 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2014-01-26 03:00 - 2014-01-26 03:00 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2014-01-26 03:00 - 2014-01-26 03:00 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2014-01-26 03:00 - 2014-01-26 03:00 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2014-01-26 03:00 - 2014-01-26 03:00 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2014-01-26 03:00 - 2014-01-26 03:00 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2014-01-26 03:00 - 2014-01-26 03:00 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2014-01-26 03:00 - 2014-01-26 03:00 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2014-01-26 03:00 - 2014-01-26 03:00 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-01-26 03:00 - 2014-01-26 03:00 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2014-01-26 03:00 - 2014-01-26 03:00 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-01-26 03:00 - 2014-01-26 03:00 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2014-01-26 03:00 - 2014-01-26 03:00 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2014-01-26 03:00 - 2014-01-26 03:00 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2014-01-26 03:00 - 2014-01-26 03:00 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2014-01-26 03:00 - 2014-01-26 03:00 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2014-01-26 03:00 - 2014-01-26 03:00 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2014-01-26 02:08 - 2014-01-26 02:08 - 00000000 _____ () C:\Windows\SysWOW64\shoABAD.tmp
2014-01-26 01:27 - 2014-01-26 01:27 - 00000000 ____D () C:\Users\Andreas\AppData\Local\Skype
2014-01-26 01:06 - 2014-01-26 00:55 - 00000000 ____D () C:\Users\Andreas\AppData\Local\Thunderbird
2014-01-26 00:55 - 2014-01-26 00:55 - 00002086 _____ () C:\Users\Public\Desktop\Mein Postfach.lnk
2014-01-26 00:55 - 2014-01-26 00:55 - 00000000 ____D () C:\Users\Andreas\AppData\Roaming\Thunderbird
2014-01-26 00:55 - 2014-01-26 00:55 - 00000000 ____D () C:\ProgramData\Mozilla
2014-01-26 00:39 - 2014-01-25 14:47 - 00000000 ____D () C:\Program Files (x86)\ScorpionSaver
2014-01-25 22:54 - 2012-12-04 17:31 - 00000000 ____D () C:\ProgramData\VirtualizedApplications
2014-01-25 22:49 - 2014-01-25 14:47 - 00000000 ____D () C:\Program Files (x86)\ShoppingChip
2014-01-25 22:47 - 2014-01-25 22:47 - 00000000 ____D () C:\ProgramData\APN
2014-01-25 22:24 - 2012-12-01 14:20 - 00000000 ___RD () C:\Users\Andreas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-01-25 22:20 - 2009-07-14 05:45 - 00271096 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-01-25 22:16 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\SysWOW64\zh-HK
2014-01-25 22:16 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\SysWOW64\tr-TR
2014-01-25 22:16 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\zh-HK
2014-01-25 22:16 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\tr-TR
2014-01-25 20:10 - 2014-01-25 20:10 - 00000000 _____ () C:\Windows\SysWOW64\shoAFB5.tmp
2014-01-25 20:02 - 2012-12-01 17:40 - 01526948 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2014-01-25 20:02 - 2012-12-01 17:40 - 00000000 ____D () C:\Program Files (x86)\Microsoft Application Virtualization Client
2014-01-25 18:20 - 2014-01-25 18:20 - 02776576 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll
2014-01-25 18:20 - 2014-01-25 18:20 - 02284544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll
2014-01-25 18:20 - 2014-01-25 18:20 - 01682432 _____ (Microsoft Corporation) C:\Windows\system32\XpsPrint.dll
2014-01-25 18:20 - 2014-01-25 18:20 - 01643520 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2014-01-25 18:20 - 2014-01-25 18:20 - 01247744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2014-01-25 18:20 - 2014-01-25 18:20 - 01238528 _____ (Microsoft Corporation) C:\Windows\system32\d3d10.dll
2014-01-25 18:20 - 2014-01-25 18:20 - 01175552 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2014-01-25 18:20 - 2014-01-25 18:20 - 01158144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsPrint.dll
2014-01-25 18:20 - 2014-01-25 18:20 - 01080832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10.dll
2014-01-25 18:20 - 2014-01-25 18:20 - 00648192 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll
2014-01-25 18:20 - 2014-01-25 18:20 - 00604160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll
2014-01-25 18:20 - 2014-01-25 18:20 - 00522752 _____ (Microsoft Corporation) C:\Windows\system32\XpsGdiConverter.dll
2014-01-25 18:20 - 2014-01-25 18:20 - 00364544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsGdiConverter.dll
2014-01-25 18:20 - 2014-01-25 18:20 - 00363008 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll
2014-01-25 18:20 - 2014-01-25 18:20 - 00333312 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1core.dll
2014-01-25 18:20 - 2014-01-25 18:20 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\d3d10core.dll
2014-01-25 18:20 - 2014-01-25 18:20 - 00293376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll
2014-01-25 18:20 - 2014-01-25 18:20 - 00249856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1core.dll
2014-01-25 18:20 - 2014-01-25 18:20 - 00245248 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecsExt.dll
2014-01-25 18:20 - 2014-01-25 18:20 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\UIAnimation.dll
2014-01-25 18:20 - 2014-01-25 18:20 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10core.dll
2014-01-25 18:20 - 2014-01-25 18:20 - 00207872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecsExt.dll
2014-01-25 18:20 - 2014-01-25 18:20 - 00194560 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1.dll
2014-01-25 18:20 - 2014-01-25 18:20 - 00187392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIAnimation.dll
2014-01-25 18:20 - 2014-01-25 18:20 - 00161792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1.dll
2014-01-25 18:20 - 2014-01-25 18:20 - 00010752 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll
2014-01-25 18:20 - 2014-01-25 18:20 - 00010752 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll
2014-01-25 18:20 - 2014-01-25 18:20 - 00009728 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2014-01-25 18:20 - 2014-01-25 18:20 - 00009728 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2014-01-25 18:20 - 2014-01-25 18:20 - 00005632 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2014-01-25 18:20 - 2014-01-25 18:20 - 00005632 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll
2014-01-25 18:20 - 2014-01-25 18:20 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2014-01-25 18:20 - 2014-01-25 18:20 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll
2014-01-25 18:20 - 2014-01-25 18:20 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-user32-l1-1-0.dll
2014-01-25 18:20 - 2014-01-25 18:20 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll
2014-01-25 18:20 - 2014-01-25 18:20 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll
2014-01-25 18:20 - 2014-01-25 18:20 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll
2014-01-25 18:20 - 2014-01-25 18:20 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-version-l1-1-0.dll
2014-01-25 18:20 - 2014-01-25 18:20 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll
2014-01-25 18:20 - 2014-01-25 18:20 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-version-l1-1-0.dll
2014-01-25 18:20 - 2014-01-25 18:20 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll
2014-01-25 18:20 - 2014-01-25 18:20 - 00002560 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll
2014-01-25 18:20 - 2014-01-25 18:20 - 00002560 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll
2014-01-25 17:51 - 2014-01-25 17:51 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-01-25 17:51 - 2014-01-25 17:51 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
2014-01-25 16:17 - 2012-12-01 14:18 - 00000000 ____D () C:\Users\Andreas\AppData\Roaming\Hewlett-Packard
2014-01-25 15:30 - 2014-01-25 14:47 - 00000000 ____D () C:\Program Files (x86)\IminentToolbar
2014-01-25 15:17 - 2014-01-25 14:48 - 00000000 ____D () C:\Users\Andreas\AppData\Roaming\Systweak
2014-01-25 14:53 - 2014-01-25 14:53 - 00000000 ____D () C:\Users\Andreas\Documents\Optimizer Pro
2014-01-25 14:49 - 2014-01-25 14:49 - 00000000 ____D () C:\Program Files\Highlightly
2014-01-25 14:49 - 2014-01-25 14:49 - 00000000 ____D () C:\Program Files (x86)\Highlightly
2014-01-25 14:48 - 2014-01-25 14:48 - 00000000 ____D () C:\Program Files (x86)\Supporter
2014-01-25 14:47 - 2014-01-25 14:47 - 00000000 ____D () C:\Users\HomeGroupUser$\AppData\Local\Torch
2014-01-25 14:47 - 2014-01-25 14:47 - 00000000 ____D () C:\Users\HomeGroupUser$\AppData\Local\Google
2014-01-25 14:47 - 2014-01-25 14:47 - 00000000 ____D () C:\Users\HomeGroupUser$\AppData\Local\Comodo
2014-01-25 14:47 - 2014-01-25 14:47 - 00000000 ____D () C:\Users\HomeGroupUser$
2014-01-25 14:47 - 2014-01-25 14:47 - 00000000 ____D () C:\Users\Gast\AppData\Local\Torch
2014-01-25 14:47 - 2014-01-25 14:47 - 00000000 ____D () C:\Users\Gast\AppData\Local\Google
2014-01-25 14:47 - 2014-01-25 14:47 - 00000000 ____D () C:\Users\Gast\AppData\Local\Comodo
2014-01-25 14:47 - 2014-01-25 14:47 - 00000000 ____D () C:\Users\Gast
2014-01-25 14:47 - 2014-01-25 14:47 - 00000000 ____D () C:\Users\Andreas\AppData\Local\Torch
2014-01-25 14:47 - 2014-01-25 14:47 - 00000000 ____D () C:\Users\Andreas\AppData\Local\Packages
2014-01-25 14:47 - 2014-01-25 14:47 - 00000000 ____D () C:\Users\Andreas\AppData\Local\Google
2014-01-25 14:47 - 2014-01-25 14:47 - 00000000 ____D () C:\Users\Andreas\AppData\Local\Comodo
2014-01-25 14:47 - 2014-01-25 14:47 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Torch
2014-01-25 14:47 - 2014-01-25 14:47 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Google
2014-01-25 14:47 - 2014-01-25 14:47 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Comodo
2014-01-25 14:47 - 2014-01-25 14:47 - 00000000 ____D () C:\Users\Administrator
2014-01-25 14:47 - 2014-01-25 14:47 - 00000000 ____D () C:\ProgramData\ShoppingChip
2014-01-25 14:45 - 2014-01-25 14:45 - 00000000 ____D () C:\Program Files\Level Quality Watcher
2014-01-25 14:37 - 2014-01-25 14:37 - 00000000 _____ () C:\Windows\SysWOW64\sho3746.tmp
2014-01-25 14:37 - 2012-06-02 06:00 - 00000000 ____D () C:\ProgramData\Norton
2014-01-25 14:24 - 2014-01-25 14:24 - 00000822 _____ () C:\Users\Public\Desktop\CCleaner.lnk
2014-01-25 14:24 - 2014-01-25 14:24 - 00000000 ____D () C:\Program Files\CCleaner
2014-01-25 14:09 - 2014-01-25 14:09 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_ew_juextctrl_01007.Wdf
2014-01-25 14:09 - 2014-01-25 14:09 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_ew_jucdcacm_01007.Wdf
2014-01-25 14:08 - 2014-01-25 14:08 - 00001241 _____ () C:\Users\Public\Desktop\Internet Stick.lnk
2014-01-25 14:08 - 2014-01-25 14:08 - 00000000 ____D () C:\ProgramData\Internet Manager
2014-01-25 14:08 - 2014-01-25 14:05 - 00000000 ____D () C:\ProgramData\DatacardService
2014-01-25 14:07 - 2014-01-25 14:07 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_ew_jubusenum_01007.Wdf
2014-01-25 14:06 - 2014-01-25 14:06 - 00000000 ____D () C:\Program Files (x86)\T-Mobile
2014-01-25 14:05 - 2014-01-25 14:05 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdFs_01_09_00.Wdf

Some content of TEMP:
====================
C:\Users\Andreas\AppData\Local\Temp\avgnt.exe
C:\Users\Andreas\AppData\Local\Temp\BackupSetup.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-02-17 00:37

==================== End Of Log ============================
         
Addition:

Code:
ATTFilter
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 16-02-2014
Ran by Andreas at 2014-02-17 18:26:15
Running from C:\Users\Andreas\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Avira Desktop (Enabled - Up to date) {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}
AS: Avira Desktop (Enabled - Up to date) {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

Adobe Flash Player 12 ActiveX (x32 Version: 12.0.0.44 - Adobe Systems Incorporated)
Adobe Flash Player 12 Plugin (x32 Version: 12.0.0.44 - Adobe Systems Incorporated)
Adobe Shockwave Player 11.6 (x32 Version: 11.6.3.633 - Adobe Systems, Inc.)
AMD APP SDK Runtime (Version: 10.0.898.1 - Advanced Micro Devices Inc.) Hidden
AMD Catalyst Install Manager (Version: 3.0.868.0 - Advanced Micro Devices, Inc.)
AMD Fuel (Version: 2012.0214.2218.39913 - Ihr Firmenname) Hidden
AMD Media Foundation Decoders (Version: 1.0.70214.2220 - Advanced Micro Devices, Inc.) Hidden
AMD Steady Video Plug-In  (Version: 2.04.0000 - AMD) Hidden
AMD VISION Engine Control Center (x32 Version: 2012.0214.2218.39913 - Ihr Firmenname) Hidden
Atheros Driver Installation Program (x32 Version: 9.2 - Atheros)
Avira Free Antivirus (x32 Version: 14.0.2.286 - Avira)
Avira SearchFree Toolbar (x32 Version: 12.10.0.2951 - APN, LLC)
Bejeweled 3 (x32 Version: 2.2.0.97 - WildTangent) Hidden
Cake Mania (x32 Version: 2.2.0.98 - WildTangent) Hidden
Catalyst Control Center - Branding (x32 Version: 1.00.0000 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Graphics Previews Common (x32 Version: 2012.0214.2218.39913 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center InstallProxy (x32 Version: 2012.0214.2218.39913 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Localization All (x32 Version: 2012.0214.2218.39913 - Advanced Micro Devices, Inc.) Hidden
CCC Help Chinese Standard (x32 Version: 2012.0214.2217.39913 - Advanced Micro Devices, Inc.) Hidden
CCC Help Chinese Traditional (x32 Version: 2012.0214.2217.39913 - Advanced Micro Devices, Inc.) Hidden
CCC Help Czech (x32 Version: 2012.0214.2217.39913 - Advanced Micro Devices, Inc.) Hidden
CCC Help Danish (x32 Version: 2012.0214.2217.39913 - Advanced Micro Devices, Inc.) Hidden
CCC Help Dutch (x32 Version: 2012.0214.2217.39913 - Advanced Micro Devices, Inc.) Hidden
CCC Help English (x32 Version: 2012.0214.2217.39913 - Advanced Micro Devices, Inc.) Hidden
CCC Help Finnish (x32 Version: 2012.0214.2217.39913 - Advanced Micro Devices, Inc.) Hidden
CCC Help French (x32 Version: 2012.0214.2217.39913 - Advanced Micro Devices, Inc.) Hidden
CCC Help German (x32 Version: 2012.0214.2217.39913 - Advanced Micro Devices, Inc.) Hidden
CCC Help Greek (x32 Version: 2012.0214.2217.39913 - Advanced Micro Devices, Inc.) Hidden
CCC Help Hungarian (x32 Version: 2012.0214.2217.39913 - Advanced Micro Devices, Inc.) Hidden
CCC Help Italian (x32 Version: 2012.0214.2217.39913 - Advanced Micro Devices, Inc.) Hidden
CCC Help Japanese (x32 Version: 2012.0214.2217.39913 - Advanced Micro Devices, Inc.) Hidden
CCC Help Korean (x32 Version: 2012.0214.2217.39913 - Advanced Micro Devices, Inc.) Hidden
CCC Help Norwegian (x32 Version: 2012.0214.2217.39913 - Advanced Micro Devices, Inc.) Hidden
CCC Help Polish (x32 Version: 2012.0214.2217.39913 - Advanced Micro Devices, Inc.) Hidden
CCC Help Portuguese (x32 Version: 2012.0214.2217.39913 - Advanced Micro Devices, Inc.) Hidden
CCC Help Russian (x32 Version: 2012.0214.2217.39913 - Advanced Micro Devices, Inc.) Hidden
CCC Help Spanish (x32 Version: 2012.0214.2217.39913 - Advanced Micro Devices, Inc.) Hidden
CCC Help Swedish (x32 Version: 2012.0214.2217.39913 - Advanced Micro Devices, Inc.) Hidden
CCC Help Thai (x32 Version: 2012.0214.2217.39913 - Advanced Micro Devices, Inc.) Hidden
CCC Help Turkish (x32 Version: 2012.0214.2217.39913 - Advanced Micro Devices, Inc.) Hidden
ccc-utility64 (Version: 2012.0214.2218.39913 - Advanced Micro Devices, Inc.) Hidden
CCleaner (Version: 4.09 - Piriform)
Chuzzle Deluxe (x32 Version: 2.2.0.95 - WildTangent) Hidden
Cisco EAP-FAST Module (x32 Version: 2.2.14 - Cisco Systems, Inc.)
Cisco LEAP Module (x32 Version: 1.0.19 - Cisco Systems, Inc.)
Cisco PEAP Module (x32 Version: 1.1.6 - Cisco Systems, Inc.)
Cradle of Rome 2 (x32 Version: 2.2.0.98 - WildTangent) Hidden
CyberLink YouCam (x32 Version: 3.5.3.5010 - CyberLink Corp.)
CyberLink YouCam (x32 Version: 3.5.3.5010 - CyberLink Corp.) Hidden
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
ESU for Microsoft Windows 7 SP1 (x32 Version: 5.1.4 - Hewlett-Packard)
Evernote v. 4.5.2 (x32 Version: 4.5.2.5904 - Evernote Corp.)
Farm Frenzy (x32 Version: 2.2.0.98 - WildTangent) Hidden
Farmscapes (x32 Version: 2.2.0.98 - WildTangent) Hidden
Final Drive Fury (x32 Version: 2.2.0.95 - WildTangent) Hidden
Fishdom (TM) 2 (x32 Version: 2.2.0.98 - WildTangent) Hidden
Hewlett-Packard ACLM.NET v1.2.2.3 (x32 Version: 1.00.0000 - Hewlett-Packard Company) Hidden
Highlightly (x32 Version: 1.9.0.0 - Highlightly)
HP Auto (Version: 1.0.12935.3667 - Hewlett-Packard Company) Hidden
HP Customer Experience Enhancements (x32 Version: 6.0.1.8 - Hewlett-Packard) Hidden
HP Documentation (x32 Version: 1.1.0.0 - Hewlett-Packard)
HP Games (x32 Version: 1.0.2.5 - WildTangent)
HP On Screen Display (x32 Version: 1.3.5 - Hewlett-Packard Company)
HP Power Manager (x32 Version: 1.4.8 - Hewlett-Packard Company)
HP Quick Launch (x32 Version: 2.7.2 - Hewlett-Packard Company)
HP Recovery Manager (x32 Version: 2.0.0 - Hewlett-Packard) Hidden
HP Security Assistant (Version: 3.0.2 - Hewlett-Packard Company)
HP Setup (x32 Version: 9.1.15430.4033 - Hewlett-Packard Company)
HP Software Framework (x32 Version: 4.6.10.1 - Hewlett-Packard Company)
HP Support Assistant (x32 Version: 7.4.45.4 - Hewlett-Packard Company)
Insaniquarium Deluxe (x32 Version: 2.2.0.97 - WildTangent) Hidden
Internet Manager (x32 Version: 22.001.18.68.55 - Huawei Technologies Co.,Ltd)
Jewel Match 3 (x32 Version: 2.2.0.98 - WildTangent) Hidden
Jewel Quest II (x32 Version: 2.2.0.97 - WildTangent) Hidden
Jewel Quest Solitaire 2 (x32 Version: 2.2.0.98 - WildTangent) Hidden
Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Mahjongg Artifacts (x32 Version: 2.2.0.95 - WildTangent) Hidden
Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden
Microsoft Office 2010 (x32 Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office Access 2003 Runtime (x32 Version: 11.0.8173.0 - Microsoft Corporation)
Microsoft Office Klick-und-Los 2010 (Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office Klick-und-Los 2010 (x32 Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office Starter 2010 - Deutsch (x32 Version: 14.0.5139.5005 - Microsoft Corporation)
Microsoft Silverlight (Version: 5.1.20913.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.30319 (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219 - Microsoft Corporation)
Mozilla Firefox 27.0.1 (x86 de) (x32 Version: 27.0.1 - Mozilla)
Mozilla Maintenance Service (x32 Version: 27.0.1 - Mozilla)
Mozilla Thunderbird 24.3.0 (x86 de) (x32 Version: 24.3.0 - Mozilla)
MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSVCRT_amd64 (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
Mystery of Mortlake Mansion (x32 Version: 2.2.0.98 - WildTangent) Hidden
opensource (x32 Version: 1.0.14960.3876 - Your Company Name) Hidden
Plants vs. Zombies - Game of the Year (x32 Version: 2.2.0.98 - WildTangent) Hidden
Polar Bowler (x32 Version: 2.2.0.97 - WildTangent) Hidden
Ranch Rush 2 - Premium Edition (x32 Version: 2.2.0.98 - WildTangent) Hidden
Realtek Ethernet Controller Driver (x32 Version: 7.51.116.2012 - Realtek)
Realtek High Definition Audio Driver (x32 Version: 6.0.1.6652 - Realtek Semiconductor Corp.)
Realtek PCIE Card Reader (x32 Version: 6.1.7601.29005 - Realtek Semiconductor Corp.)
ScorpionSaver (x32 Version: 1.0.0.0 - Adpeak, Inc.) <==== ATTENTION
ShoppingChip (x32 Version: 4.3.0.1548 - ShoppingChip) <==== ATTENTION
Skype™ 6.13 (x32 Version: 6.13.104 - Skype Technologies S.A.)
Supporter 1.80 (x32 Version:  - ShoppingChip) <==== ATTENTION
swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
Synaptics Pointing Device Driver (Version: 16.0.1.0 - Synaptics Incorporated)
TauBeItAdBlockFrr (x32 Version:  - TTubEIttAddBlockFr) <==== ATTENTION
Torchlight (x32 Version: 2.2.0.98 - WildTangent) Hidden
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939v3) (x32 Version: 3 - Microsoft Corporation)
Update Installer for WildTangent Games App (x32 Version:  - WildTangent) Hidden
Virtual Families (x32 Version: 2.2.0.98 - WildTangent) Hidden
Virtual Villagers 4 - The Tree of Life (x32 Version: 2.2.0.98 - WildTangent) Hidden
Wedding Dash (x32 Version: 2.2.0.95 - WildTangent) Hidden
WildTangent Games App (HP Games) (x32 Version: 4.0.5.36 - WildTangent) Hidden
Windows Live Communications Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Essentials (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Essentials (x32 Version: 15.4.3538.0513 - Microsoft Corporation)
Windows Live Fotogalerie (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live ID Sign-in Assistant (Version: 7.250.4232.0 - Microsoft Corporation) Hidden
Windows Live Installer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Language Selector (Version: 15.4.3538.0513 - Microsoft Corporation) Hidden
Windows Live Mail (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Mesh (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Mesh ActiveX control for remote connections (x32 Version: 15.4.5722.2 - Microsoft Corporation)
Windows Live Mesh ActiveX Control for Remote Connections (x32 Version: 15.4.5722.2 - Microsoft Corporation)
Windows Live Messenger (x32 Version: 15.4.3538.0513 - Microsoft Corporation) Hidden
Windows Live MIME IFilter (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Movie Maker (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Photo Common (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Photo Gallery (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live PIMT Platform (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden
Windows Live Remote Client (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Client Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Service (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Service Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live SOXE (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live UX Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden
Windows Live Writer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Writer Resources (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
WinZip 16.0 (Version: 16.0.9715 - WinZip Computing, S.L. )
Zuma's Revenge (x32 Version: 2.2.0.98 - WildTangent) Hidden

==================== Restore Points  =========================

31-01-2014 21:25:36 Removed Skype™ 6.13
02-02-2014 08:48:16 Sprachpaketdeinstallation
02-02-2014 11:06:18 Windows-Sicherung
02-02-2014 11:11:29 Windows-Sicherung
14-02-2014 21:48:20 Installed HP Support Assistant
14-02-2014 21:53:41 Windows Modules Installer
14-02-2014 21:55:22 Windows Modules Installer
15-02-2014 02:00:24 Windows Update
16-02-2014 04:04:00 Uniblue SpeedUpMyPC installation
17-02-2014 02:00:13 Windows Update
17-02-2014 12:20:32 Removed HP Launch Box

==================== Hosts content: ==========================

2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {061A2C8C-2FB5-4D8D-BC26-3912679441D0} - System32\Tasks\Feven Pro-codedownloader => C:\Program Files (x86)\Feven Pro\Feven Pro-codedownloader.exe [2014-02-16] (Feven) <==== ATTENTION
Task: {0C10A2AC-5FB3-437B-8327-7C07B2FDC38A} - System32\Tasks\Feven Pro-chromeinstaller => C:\Program Files (x86)\Feven Pro\Feven Pro-chromeinstaller.exe [2014-02-16] (Feven) <==== ATTENTION
Task: {13952C66-FE1E-47EB-ADE3-E0488B9FCA3A} - System32\Tasks\Hewlett-Packard\HP Support Assistant\Update Check => C:\ProgramData\Hewlett-Packard\HP Support Framework\Resources\Updater7\HPSFUpdater.exe [2012-11-29] (Hewlett-Packard Company)
Task: {22F2EE03-B570-4805-9FDD-DDFB395C1010} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => Rundll32.exe /d sdengin2.dll,ExecuteScheduledBackup
Task: {26FA7021-ECDE-4E6F-A670-7EFF0217AC8D} - System32\Tasks\MirageAgent => C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe [2012-02-10] (CyberLink)
Task: {2A6AC8CB-D116-40EC-880B-65C520C4D348} - System32\Tasks\Feven Pro-enabler => C:\Program Files (x86)\Feven Pro\Feven Pro-enabler.exe [2014-02-16] (Feven) <==== ATTENTION
Task: {2DCB317B-D70A-4D77-A499-6FCDE1504F32} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2013-11-04] (Hewlett-Packard Company)
Task: {43B9C301-3B45-4A48-B956-5D919B24B701} - System32\Tasks\HPCeeScheduleForAndreas => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2011-07-15] (Hewlett-Packard)
Task: {4704D2A3-81A1-470D-8D65-DE2503D2B186} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2013-11-04] (Hewlett-Packard Company)
Task: {550D799B-45A7-4B83-BEEC-D4F25870D8D6} - System32\Tasks\Registration => C:\Program Files (x86)\Hewlett-Packard\HP Setup\Dependencies\RemEngine.exe [2012-02-17] ()
Task: {5B9D3F14-256B-4BCD-9696-7323AC4AA281} - System32\Tasks\Feven Pro-firefoxinstaller => C:\Program Files (x86)\Feven Pro\Feven Pro-firefoxinstaller.exe [2014-02-16] (Feven) <==== ATTENTION
Task: {68C29E33-B3F5-49BE-BB88-B057829EABBF} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-12-17] (Piriform Ltd)
Task: {BA209339-ED07-4EF5-A902-1E9CF1604BD2} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-02-06] (Adobe Systems Incorporated)
Task: {EBDEA8C5-1342-4AE1-932C-155237A2E5EB} - System32\Tasks\Feven Pro-updater => C:\Program Files (x86)\Feven Pro\Feven Pro-updater.exe [2014-02-16] (Feven) <==== ATTENTION
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\Feven Pro-chromeinstaller.job => C:\Program Files (x86)\Feven Pro\Feven Pro-chromeinstaller.exe <==== ATTENTION
Task: C:\Windows\Tasks\Feven Pro-codedownloader.job => C:\Program Files (x86)\Feven Pro\Feven Pro-codedownloader.exe <==== ATTENTION
Task: C:\Windows\Tasks\Feven Pro-enabler.job => C:\Program Files (x86)\Feven Pro\Feven Pro-enabler.exe <==== ATTENTION
Task: C:\Windows\Tasks\Feven Pro-firefoxinstaller.job => C:\Program Files (x86)\Feven Pro\Feven Pro-firefoxinstaller.exe <==== ATTENTION
Task: C:\Windows\Tasks\Feven Pro-updater.job => C:\Program Files (x86)\Feven Pro\Feven Pro-updater.exe <==== ATTENTION
Task: C:\Windows\Tasks\HPCeeScheduleForAndreas.job => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe

==================== Loaded Modules (whitelisted) =============

2012-02-14 22:16 - 2012-02-14 22:16 - 00103424 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Proxy.Native.dll
2012-02-14 22:13 - 2012-02-14 22:13 - 00369152 _____ () C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.CrossDisplay.Graphics.Dashboard.dll
2011-11-09 08:55 - 2011-11-09 08:55 - 00016384 _____ () C:\Program Files (x86)\ATI Technologies\ATI.ACE\Branding\Branding.dll
2014-01-31 18:52 - 2013-12-09 11:37 - 00394808 _____ () C:\Program Files (x86)\Avira\AntiVir Desktop\sqlite3.dll
2014-01-25 14:48 - 2014-01-25 14:48 - 00183632 _____ () C:\Program Files (x86)\Supporter\SupporterSvc.dll
2014-01-25 14:48 - 2014-01-25 14:48 - 04105216 _____ () C:\Program Files (x86)\Supporter\Supporter.dll
2014-01-25 14:08 - 2011-06-17 12:04 - 00224096 _____ () C:\ProgramData\Internet Manager\OnlineUpdate\ouc.exe
2014-01-25 14:08 - 2009-01-10 11:32 - 00011362 _____ () C:\ProgramData\Internet Manager\OnlineUpdate\mingwm10.dll
2014-01-25 14:08 - 2009-06-22 19:42 - 00043008 _____ () C:\ProgramData\Internet Manager\OnlineUpdate\libgcc_s_dw2-1.dll
2014-01-25 14:08 - 2010-05-05 09:47 - 02415104 _____ () C:\ProgramData\Internet Manager\OnlineUpdate\QtCore4.dll
2014-01-25 14:08 - 2010-02-10 15:10 - 01148416 _____ () C:\ProgramData\Internet Manager\OnlineUpdate\QtNetwork4.dll
2014-02-15 00:31 - 2014-02-15 00:32 - 03578992 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
2014-02-06 01:46 - 2014-02-06 01:46 - 16287624 _____ () C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_44.dll
2014-02-06 01:01 - 2014-02-06 01:01 - 03019376 _____ () C:\Program Files (x86)\Mozilla Thunderbird\mozjs.dll
2014-02-06 01:01 - 2014-02-06 01:01 - 00158832 _____ () C:\Program Files (x86)\Mozilla Thunderbird\NSLDAP32V60.dll
2014-02-06 01:01 - 2014-02-06 01:01 - 00023152 _____ () C:\Program Files (x86)\Mozilla Thunderbird\NSLDAPPR32V60.dll

==================== Alternate Data Streams (whitelisted) =========


==================== Safe Mode (whitelisted) ===================


==================== Disabled items from MSCONFIG ==============


==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (02/17/2014 05:38:09 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (02/17/2014 02:05:38 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (02/17/2014 02:01:50 PM) (Source: Application Hang) (User: )
Description: Programm avscan.exe, Version 14.0.2.254 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 12c4

Startzeit: 01cf2bdc7a1098e4

Endzeit: 6822

Anwendungspfad: C:\Program Files (x86)\Avira\AntiVir Desktop\avscan.exe

Berichts-ID: a488de81-97d3-11e3-969c-b4b52f28e972

Error: (02/17/2014 01:14:50 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (02/17/2014 01:08:53 PM) (Source: Application Hang) (User: )
Description: Programm avscan.exe, Version 14.0.2.254 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: d18

Startzeit: 01cf2bc35c1e045e

Endzeit: 60000

Anwendungspfad: C:\Program Files (x86)\Avira\AntiVir Desktop\avscan.exe

Berichts-ID: 1a0829e2-97cc-11e3-93a4-b4b52f28e972

Error: (02/17/2014 06:39:41 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (02/16/2014 10:22:39 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (02/15/2014 09:47:01 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (02/15/2014 03:56:31 AM) (Source: CVHSVC) (User: )
Description: Nur zur Information.
(Patch task for {90140011-0066-0407-0000-0000000FF1CE}): DownloadLatest Failed: Zurzeit sind keine aktiven Netzwerkverbindungen verfügbar. Der Vorgang wird von BITS wiederholt, sobald der Adapter über eine Verbindung verfügt.

Error: (02/15/2014 03:47:15 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003


System errors:
=============
Error: (02/17/2014 05:36:49 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Internet Manager. OUC" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1053

Error: (02/17/2014 05:36:49 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Internet Manager. OUC erreicht.

Error: (02/17/2014 02:04:16 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Internet Manager. OUC" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1053

Error: (02/17/2014 02:04:16 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Internet Manager. OUC erreicht.

Error: (02/17/2014 01:13:24 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Internet Manager. OUC" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1053

Error: (02/17/2014 01:13:24 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Internet Manager. OUC erreicht.

Error: (02/17/2014 06:38:17 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Internet Manager. OUC" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1053

Error: (02/17/2014 06:38:17 AM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Internet Manager. OUC erreicht.

Error: (02/16/2014 10:22:26 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Internet Manager. OUC" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1053

Error: (02/16/2014 10:22:26 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Internet Manager. OUC erreicht.


Microsoft Office Sessions:
=========================
Error: (02/17/2014 05:38:09 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (02/17/2014 02:05:38 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (02/17/2014 02:01:50 PM) (Source: Application Hang)(User: )
Description: avscan.exe14.0.2.25412c401cf2bdc7a1098e46822C:\Program Files (x86)\Avira\AntiVir Desktop\avscan.exea488de81-97d3-11e3-969c-b4b52f28e972

Error: (02/17/2014 01:14:50 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (02/17/2014 01:08:53 PM) (Source: Application Hang)(User: )
Description: avscan.exe14.0.2.254d1801cf2bc35c1e045e60000C:\Program Files (x86)\Avira\AntiVir Desktop\avscan.exe1a0829e2-97cc-11e3-93a4-b4b52f28e972

Error: (02/17/2014 06:39:41 AM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (02/16/2014 10:22:39 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (02/15/2014 09:47:01 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (02/15/2014 03:56:31 AM) (Source: CVHSVC)(User: )
Description: (Patch task for {90140011-0066-0407-0000-0000000FF1CE}): DownloadLatest Failed: Zurzeit sind keine aktiven Netzwerkverbindungen verfügbar. Der Vorgang wird von BITS wiederholt, sobald der Adapter über eine Verbindung verfügt.

Error: (02/15/2014 03:47:15 AM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003


==================== Memory info =========================== 

Percentage of memory in use: 76%
Total physical RAM: 1640.37 MB
Available physical RAM: 393.35 MB
Total Pagefile: 3280.73 MB
Available Pagefile: 1198.76 MB
Total Virtual: 8192 MB
Available Virtual: 8191.82 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:277.83 GB) (Free:234.06 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive d: (Recovery) (Fixed) (Total:19.97 GB) (Free:2.14 GB) NTFS ==>[System with boot components (obtained from reading drive)]

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 298 GB) (Disk ID: 6E474F7D)
Partition 1: (Active) - (Size=199 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=278 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=20 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=103 MB) - (Type=0C)

==================== End Of Log ============================
         

Alt 19.02.2014, 14:17   #7
schrauber
/// the machine
/// TB-Ausbilder
 

Windows 7 - Malware? - Fenster öffnen sich automatisch - Standard

Windows 7 - Malware? - Fenster öffnen sich automatisch



hi,

Scan mit Combofix
WARNUNG an die MITLESER:
Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!

Downloade dir bitte Combofix vom folgenden Downloadspiegel: Link
  • WICHTIG: Speichere Combofix auf deinem Desktop.
  • Deaktiviere bitte alle deine Antivirensoftware sowie Malware/Spyware Scanner. Diese können Combofix bei der Arbeit stören. Combofix meckert auch manchmal trotzdem noch, das kannst du dann ignorieren, mir aber bitte mitteilen.
  • Starte die Combofix.exe und folge den Anweisungen auf dem Bildschirm.
  • Während Combofix läuft bitte nicht am Computer arbeiten, die Maus bewegen oder ins Combofixfenster klicken!
  • Wenn Combofix fertig ist, wird es ein Logfile erstellen.
  • Bitte poste die C:\Combofix.txt in deiner nächsten Antwort (möglichst in CODE-Tags).
Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten
Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.
starte den Rechner einfach neu. Dies sollte das Problem beheben.

__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Alt 19.02.2014, 22:06   #8
Shirry
 
Windows 7 - Malware? - Fenster öffnen sich automatisch - Standard

Windows 7 - Malware? - Fenster öffnen sich automatisch



Hallo. Der Scanner läuft jetzt seit 1 Stunde. Ich habe nix angefasst. Er bleibt immer bei "Fertiggestellt Stufe_4" und dann blinkt das "_" einfach darunter. Habe ich etwas falsch gemacht?

Ps. Würde gerne ein Bild davon anfügen, geht über Handy irgendwie nicht. Muss ich morgen mal von meinem Laptop aus probieren. Mache den Laptop meines Vaters jetzt erstmal aus.

pps. Ging nun doch^^

LG
Shirry
Miniaturansicht angehängter Grafiken
-20140219_223424.jpg  

Geändert von Shirry (19.02.2014 um 22:12 Uhr)

Alt 20.02.2014, 13:41   #9
schrauber
/// the machine
/// TB-Ausbilder
 

Windows 7 - Malware? - Fenster öffnen sich automatisch - Standard

Windows 7 - Malware? - Fenster öffnen sich automatisch



Dann poste bitte das Logfile
__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Alt 20.02.2014, 16:24   #10
Shirry
 
Windows 7 - Malware? - Fenster öffnen sich automatisch - Standard

Windows 7 - Malware? - Fenster öffnen sich automatisch



Ich habe es heute noch einmal probiert - PC und Combofix gestartet - und es ging. ALLERDINGS habe ich danach gesehen, dass sich AntiVir wieder aktiviert hatte beim Start, obwohl ich es gestern deaktiviert hatte. Habe dann das AntiVir deaktiviert und Combofix ist wieder bei Stufe 4 stehen geblieben (jetzt ging das Internet auch nicht mehr... ich musste einen Neustart machen). Da wurde auch kein Logfile erstellt!

Aus diesem Grund jetzt das Logfile, wo Antivir aktiviert war. Ich hoffe, dass das trotzdem hilfreich ist ...

Code:
ATTFilter
ComboFix 14-02-19.01 - Andreas 20.02.2014  16:17:46.3.2 - x64
Microsoft Windows 7 Home Premium   6.1.7601.1.1252.49.1031.18.1640.474 [GMT 1:00]
ausgeführt von:: c:\users\Andreas\Desktop\ComboFix.exe
AV: Avira Desktop *Disabled/Updated* {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}
SP: Avira Desktop *Disabled/Updated* {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((   Weitere Löschungen   ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\program files (x86)\Feven Pro\FeVEn pro-bho.dll
c:\program files (x86)\ScorpionSaver
c:\program files (x86)\ScorpionSaver\CustomActionUninstall
c:\program files (x86)\ScorpionSaver\ff_addon_runner.js
c:\program files (x86)\ScorpionSaver\ff_addonkit_page-mod.js
c:\program files (x86)\ScorpionSaver\ff_addonkit_private-browsing.js
c:\program files (x86)\ScorpionSaver\ff_addonkit_request.js
c:\program files (x86)\ScorpionSaver\ff_addonkit_windows.js
c:\program files (x86)\ScorpionSaver\ff_base_api-utils.js
c:\program files (x86)\ScorpionSaver\ff_base_base64.js
c:\program files (x86)\ScorpionSaver\ff_base_byte-streams.js
c:\program files (x86)\ScorpionSaver\ff_base_collection.js
c:\program files (x86)\ScorpionSaver\ff_base_content.js
c:\program files (x86)\ScorpionSaver\ff_base_cortex.js
c:\program files (x86)\ScorpionSaver\ff_base_cuddlefish.js
c:\program files (x86)\ScorpionSaver\ff_base_deprecate.js
c:\program files (x86)\ScorpionSaver\ff_base_environment.js
c:\program files (x86)\ScorpionSaver\ff_base_errors.js
c:\program files (x86)\ScorpionSaver\ff_base_events.js
c:\program files (x86)\ScorpionSaver\ff_base_file.js
c:\program files (x86)\ScorpionSaver\ff_base_functional.js
c:\program files (x86)\ScorpionSaver\ff_base_globals.js
c:\program files (x86)\ScorpionSaver\ff_base_heritage.js
c:\program files (x86)\ScorpionSaver\ff_base_hidden-frame.js
c:\program files (x86)\ScorpionSaver\ff_base_light-traits.js
c:\program files (x86)\ScorpionSaver\ff_base_list.js
c:\program files (x86)\ScorpionSaver\ff_base_loader.js
c:\program files (x86)\ScorpionSaver\ff_base_match-pattern.js
c:\program files (x86)\ScorpionSaver\ff_base_memory.js
c:\program files (x86)\ScorpionSaver\ff_base_namespace.js
c:\program files (x86)\ScorpionSaver\ff_base_observer-service.js
c:\program files (x86)\ScorpionSaver\ff_base_plain-text-console.js
c:\program files (x86)\ScorpionSaver\ff_base_preferences-service.js
c:\program files (x86)\ScorpionSaver\ff_base_promise.js
c:\program files (x86)\ScorpionSaver\ff_base_querystring.js
c:\program files (x86)\ScorpionSaver\ff_base_runtime.js
c:\program files (x86)\ScorpionSaver\ff_base_sandbox.js
c:\program files (x86)\ScorpionSaver\ff_base_self.js
c:\program files (x86)\ScorpionSaver\ff_base_system.js
c:\program files (x86)\ScorpionSaver\ff_base_text-streams.js
c:\program files (x86)\ScorpionSaver\ff_base_timer.js
c:\program files (x86)\ScorpionSaver\ff_base_traceback.js
c:\program files (x86)\ScorpionSaver\ff_base_traits.js
c:\program files (x86)\ScorpionSaver\ff_base_unload.js
c:\program files (x86)\ScorpionSaver\ff_base_url.js
c:\program files (x86)\ScorpionSaver\ff_base_uuid.js
c:\program files (x86)\ScorpionSaver\ff_base_window-utils.js
c:\program files (x86)\ScorpionSaver\ff_base_xhr.js
c:\program files (x86)\ScorpionSaver\ff_base_xpcom.js
c:\program files (x86)\ScorpionSaver\ff_base_xul-app.js
c:\program files (x86)\ScorpionSaver\ff_bootstrap.js
c:\program files (x86)\ScorpionSaver\ff_content_content-proxy.js
c:\program files (x86)\ScorpionSaver\ff_content_content-worker.js
c:\program files (x86)\ScorpionSaver\ff_content_loader.js
c:\program files (x86)\ScorpionSaver\ff_content_symbiont.js
c:\program files (x86)\ScorpionSaver\ff_content_worker.js
c:\program files (x86)\ScorpionSaver\ff_dom_events.js
c:\program files (x86)\ScorpionSaver\ff_event_core.js
c:\program files (x86)\ScorpionSaver\ff_event_target.js
c:\program files (x86)\ScorpionSaver\ff_events_assembler.js
c:\program files (x86)\ScorpionSaver\ff_harness-options.json
c:\program files (x86)\ScorpionSaver\ff_icon.png
c:\program files (x86)\ScorpionSaver\ff_icon64.png
c:\program files (x86)\ScorpionSaver\ff_install.rdf
c:\program files (x86)\ScorpionSaver\ff_l10n_core.js
c:\program files (x86)\ScorpionSaver\ff_l10n_html.js
c:\program files (x86)\ScorpionSaver\ff_l10n_loader.js
c:\program files (x86)\ScorpionSaver\ff_l10n_locale.js
c:\program files (x86)\ScorpionSaver\ff_l10n_prefs.js
c:\program files (x86)\ScorpionSaver\ff_locales.json
c:\program files (x86)\ScorpionSaver\ff_main.js
c:\program files (x86)\ScorpionSaver\ff_main.js.old
c:\program files (x86)\ScorpionSaver\ff_prefs.js
c:\program files (x86)\ScorpionSaver\ff_privatebrowsing_utils.js
c:\program files (x86)\ScorpionSaver\ff_system_events.js
c:\program files (x86)\ScorpionSaver\ff_tabs_events.js
c:\program files (x86)\ScorpionSaver\ff_tabs_observer.js
c:\program files (x86)\ScorpionSaver\ff_tabs_tab.js
c:\program files (x86)\ScorpionSaver\ff_tabs_utils.js
c:\program files (x86)\ScorpionSaver\ff_traits_core.js
c:\program files (x86)\ScorpionSaver\ff_utils_data.js
c:\program files (x86)\ScorpionSaver\ff_utils_object.js
c:\program files (x86)\ScorpionSaver\ff_utils_registry.js
c:\program files (x86)\ScorpionSaver\ff_utils_thumbnail.js
c:\program files (x86)\ScorpionSaver\ff_window_utils.js
c:\program files (x86)\ScorpionSaver\ff_windows_dom.js
c:\program files (x86)\ScorpionSaver\ff_windows_loader.js
c:\program files (x86)\ScorpionSaver\ff_windows_observer.js
c:\program files (x86)\ScorpionSaver\ff_windows_tabs.js
c:\program files (x86)\ScorpionSaver\Microsoft.Deployment.WindowsInstaller.dll
c:\program files (x86)\ScorpionSaver\Microsoft.Deployment.WindowsInstaller.xml
c:\program files (x86)\ScorpionSaver\SendJson.dll
c:\program files (x86)\ShoppingChip
c:\program files (x86)\ShoppingChip\_5H747NV.dat
c:\program files (x86)\ShoppingChip\_5H747NV.tlb
c:\program files (x86)\ShoppingChip\_5H747NV.x64.dll
c:\programdata\ShoppingChip
c:\programdata\ShoppingChip\E6LwNhPlK.dat
c:\programdata\ShoppingChip\E6LwNhPlK.exe
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\ccpcekipdcclnacodndielbepiopbjgb
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\ccpcekipdcclnacodndielbepiopbjgb\1.1\background.html
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\ccpcekipdcclnacodndielbepiopbjgb\1.1\content.js
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\ccpcekipdcclnacodndielbepiopbjgb\1.1\De3w6e8pgSl.js
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\ccpcekipdcclnacodndielbepiopbjgb\1.1\lsdb.js
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\ccpcekipdcclnacodndielbepiopbjgb\1.1\manifest.json
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhkagomhnnpbhpimohcjknfcbgehfkfn
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhkagomhnnpbhpimohcjknfcbgehfkfn\1.1\background.html
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhkagomhnnpbhpimohcjknfcbgehfkfn\1.1\content.js
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhkagomhnnpbhpimohcjknfcbgehfkfn\1.1\Hw6XuLTOlw.js
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhkagomhnnpbhpimohcjknfcbgehfkfn\1.1\lsdb.js
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhkagomhnnpbhpimohcjknfcbgehfkfn\1.1\manifest.json
c:\users\Andreas\AppData\Local\Google\Chrome\User Data\Default\Extensions\ccpcekipdcclnacodndielbepiopbjgb
c:\users\Andreas\AppData\Local\Google\Chrome\User Data\Default\Extensions\ccpcekipdcclnacodndielbepiopbjgb\1.1\background.html
c:\users\Andreas\AppData\Local\Google\Chrome\User Data\Default\Extensions\ccpcekipdcclnacodndielbepiopbjgb\1.1\content.js
c:\users\Andreas\AppData\Local\Google\Chrome\User Data\Default\Extensions\ccpcekipdcclnacodndielbepiopbjgb\1.1\De3w6e8pgSl.js
c:\users\Andreas\AppData\Local\Google\Chrome\User Data\Default\Extensions\ccpcekipdcclnacodndielbepiopbjgb\1.1\lsdb.js
c:\users\Andreas\AppData\Local\Google\Chrome\User Data\Default\Extensions\ccpcekipdcclnacodndielbepiopbjgb\1.1\manifest.json
c:\users\Andreas\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhkagomhnnpbhpimohcjknfcbgehfkfn
c:\users\Andreas\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhkagomhnnpbhpimohcjknfcbgehfkfn\1.1\background.html
c:\users\Andreas\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhkagomhnnpbhpimohcjknfcbgehfkfn\1.1\content.js
c:\users\Andreas\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhkagomhnnpbhpimohcjknfcbgehfkfn\1.1\Hw6XuLTOlw.js
c:\users\Andreas\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhkagomhnnpbhpimohcjknfcbgehfkfn\1.1\lsdb.js
c:\users\Andreas\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhkagomhnnpbhpimohcjknfcbgehfkfn\1.1\manifest.json
c:\users\Andreas\AppData\Local\Google\Chrome\User Data\Default\Preferences
c:\users\Gast\AppData\Local\Google\Chrome\User Data\Default\Extensions\ccpcekipdcclnacodndielbepiopbjgb
c:\users\Gast\AppData\Local\Google\Chrome\User Data\Default\Extensions\ccpcekipdcclnacodndielbepiopbjgb\1.1\background.html
c:\users\Gast\AppData\Local\Google\Chrome\User Data\Default\Extensions\ccpcekipdcclnacodndielbepiopbjgb\1.1\content.js
c:\users\Gast\AppData\Local\Google\Chrome\User Data\Default\Extensions\ccpcekipdcclnacodndielbepiopbjgb\1.1\De3w6e8pgSl.js
c:\users\Gast\AppData\Local\Google\Chrome\User Data\Default\Extensions\ccpcekipdcclnacodndielbepiopbjgb\1.1\lsdb.js
c:\users\Gast\AppData\Local\Google\Chrome\User Data\Default\Extensions\ccpcekipdcclnacodndielbepiopbjgb\1.1\manifest.json
c:\users\Gast\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhkagomhnnpbhpimohcjknfcbgehfkfn
c:\users\Gast\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhkagomhnnpbhpimohcjknfcbgehfkfn\1.1\background.html
c:\users\Gast\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhkagomhnnpbhpimohcjknfcbgehfkfn\1.1\content.js
c:\users\Gast\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhkagomhnnpbhpimohcjknfcbgehfkfn\1.1\Hw6XuLTOlw.js
c:\users\Gast\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhkagomhnnpbhpimohcjknfcbgehfkfn\1.1\lsdb.js
c:\users\Gast\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhkagomhnnpbhpimohcjknfcbgehfkfn\1.1\manifest.json
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\ccpcekipdcclnacodndielbepiopbjgb
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\ccpcekipdcclnacodndielbepiopbjgb\1.1\background.html
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\ccpcekipdcclnacodndielbepiopbjgb\1.1\content.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\ccpcekipdcclnacodndielbepiopbjgb\1.1\De3w6e8pgSl.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\ccpcekipdcclnacodndielbepiopbjgb\1.1\lsdb.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\ccpcekipdcclnacodndielbepiopbjgb\1.1\manifest.json
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhkagomhnnpbhpimohcjknfcbgehfkfn
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhkagomhnnpbhpimohcjknfcbgehfkfn\1.1\background.html
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhkagomhnnpbhpimohcjknfcbgehfkfn\1.1\content.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhkagomhnnpbhpimohcjknfcbgehfkfn\1.1\Hw6XuLTOlw.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhkagomhnnpbhpimohcjknfcbgehfkfn\1.1\lsdb.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhkagomhnnpbhpimohcjknfcbgehfkfn\1.1\manifest.json
c:\windows\Installer\{9B65F9A3-9D24-452A-B6EF-1457D65E4259}
c:\windows\Installer\{9B65F9A3-9D24-452A-B6EF-1457D65E4259}\icon64.ico
.
.
(((((((((((((((((((((((((((((((((((((((   Treiber/Dienste   )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Service_Level Quality Watcher
.
.
(((((((((((((((((((((((   Dateien erstellt von 2014-01-20 bis 2014-02-20  ))))))))))))))))))))))))))))))
.
.
2014-02-20 15:30 . 2014-02-20 15:30	--------	d-----w-	c:\users\Default\AppData\Local\temp
2014-02-17 17:22 . 2014-02-17 17:27	--------	d-----w-	C:\FRST
2014-02-17 12:11 . 2014-02-17 12:11	0	----a-w-	c:\windows\SysWow64\shoF972.tmp
2014-02-16 04:04 . 2014-02-16 04:10	--------	d-----w-	c:\programdata\IePluginService
2014-02-16 04:04 . 2014-02-16 04:08	--------	d-----w-	c:\program files (x86)\SupTab
2014-02-16 04:04 . 2014-02-16 04:07	--------	d-----w-	c:\programdata\WPM
2014-02-16 04:04 . 2014-02-16 04:10	--------	d-----w-	c:\users\Andreas\AppData\Roaming\awesomehp
2014-02-16 04:04 . 2014-02-20 15:28	--------	d-----w-	c:\program files (x86)\Feven Pro
2014-02-15 02:03 . 2013-12-21 09:53	548864	----a-w-	c:\windows\system32\vbscript.dll
2014-02-15 02:03 . 2013-12-21 08:56	454656	----a-w-	c:\windows\SysWow64\vbscript.dll
2014-02-15 01:26 . 2014-02-15 01:26	--------	d-----r-	C:\MSOCache
2014-02-14 22:51 . 2014-02-14 22:51	--------	d-----w-	c:\users\Andreas\AppData\Local\WinZip
2014-02-14 21:47 . 2014-02-14 21:47	--------	d-----w-	c:\programdata\{18165758-115C-4DC0-9EC2-FF89F725767F}
2014-02-07 08:22 . 2014-02-07 08:22	0	----a-w-	c:\windows\SysWow64\sho5FBE.tmp
2014-02-06 00:01 . 2014-02-06 20:55	--------	d-----w-	c:\program files (x86)\Mozilla Thunderbird
2014-02-02 10:59 . 2014-02-02 10:59	--------	d-----w-	c:\users\Andreas\AppData\Local\SearchProtect
2014-02-02 05:52 . 2014-02-02 05:52	--------	d-----w-	c:\users\Andreas\AppData\Local\Macromedia
2014-02-02 05:48 . 2014-02-02 05:49	--------	d-----w-	c:\users\Andreas\AppData\Local\Adobe
2014-02-02 05:37 . 2014-02-02 05:37	--------	d-----w-	c:\programdata\PDFC
2014-02-01 10:10 . 2014-02-01 10:10	--------	d-----w-	c:\program files (x86)\Common Files\Skype
2014-02-01 10:10 . 2014-02-01 10:10	--------	d-----r-	c:\program files (x86)\Skype
2014-01-31 20:48 . 2014-01-31 20:48	--------	d-----w-	c:\programdata\TauBeItAdBlockFrr
2014-01-31 20:48 . 2014-01-31 20:48	--------	d-----w-	c:\programdata\jhippldmkdolhnikfcbcgjihailghcpl
2014-01-31 20:41 . 2014-01-31 20:41	--------	d-----w-	c:\programdata\Microsoft Help
2014-01-31 20:40 . 2014-01-31 20:40	--------	d-----w-	c:\program files (x86)\Microsoft Analysis Services
2014-01-31 20:27 . 2014-01-31 20:27	--------	d-----w-	c:\users\Andreas\AppData\Local\Mozilla
2014-01-31 20:14 . 2014-01-31 20:12	2674320	----a-w-	c:\windows\system32\RtPgEx64.dll
2014-01-31 20:14 . 2014-01-31 20:12	4064784	----a-w-	c:\windows\system32\drivers\RTKVHD64.sys
2014-01-31 20:14 . 2014-01-31 20:12	3611752	----a-w-	c:\windows\system32\RtkAPO64.dll
2014-01-31 20:14 . 2014-01-31 20:12	854672	----a-w-	c:\windows\system32\RtkApi64.dll
2014-01-31 20:14 . 2014-01-31 20:12	1262696	----a-w-	c:\windows\system32\RTCOM64.dll
2014-01-31 20:14 . 2014-01-31 20:12	105616	----a-w-	c:\windows\system32\RCoInstII64.dll
2014-01-31 20:14 . 2014-01-31 20:12	108640	----a-w-	c:\windows\system32\AERTAR64.dll
2014-01-31 20:14 . 2014-01-31 20:12	202336	----a-w-	c:\windows\system32\AERTAC64.dll
2014-01-31 17:56 . 2014-01-31 17:56	--------	d-----w-	c:\users\Andreas\AppData\Local\AskPartnerNetwork
2014-01-31 17:55 . 2014-01-31 17:55	--------	d-----w-	c:\programdata\AskPartnerNetwork
2014-01-31 17:55 . 2014-01-31 17:55	--------	d-----w-	c:\program files (x86)\AskPartnerNetwork
2014-01-31 17:54 . 2014-01-31 17:54	--------	d-----w-	c:\users\Andreas\AppData\Roaming\Avira
2014-01-31 17:52 . 2013-12-09 10:37	84720	----a-w-	c:\windows\system32\drivers\avnetflt.sys
2014-01-31 17:52 . 2013-12-09 10:37	28600	----a-w-	c:\windows\system32\drivers\avkmgr.sys
2014-01-31 17:52 . 2013-12-09 10:37	131576	----a-w-	c:\windows\system32\drivers\avipbb.sys
2014-01-31 17:52 . 2013-12-09 10:37	108440	----a-w-	c:\windows\system32\drivers\avgntflt.sys
2014-01-31 17:52 . 2014-01-31 17:52	--------	d-----w-	c:\programdata\Avira
2014-01-31 17:52 . 2014-01-31 17:52	--------	d-----w-	c:\program files (x86)\Avira
2014-01-26 10:24 . 2013-11-23 18:26	417792	----a-w-	c:\windows\SysWow64\WMPhoto.dll
2014-01-26 10:24 . 2013-11-23 17:47	465920	----a-w-	c:\windows\system32\WMPhoto.dll
2014-01-26 10:24 . 2013-04-17 07:02	1230336	----a-w-	c:\windows\SysWow64\WindowsCodecs.dll
2014-01-26 10:24 . 2013-04-17 06:24	1424384	----a-w-	c:\windows\system32\WindowsCodecs.dll
2014-01-26 02:08 . 2013-10-14 17:00	28368	----a-w-	c:\windows\system32\IEUDINIT.EXE
2014-01-26 02:01 . 2014-01-26 02:01	940032	----a-w-	c:\windows\system32\MsSpellCheckingFacility.exe
2014-01-26 02:01 . 2014-01-26 02:01	194048	----a-w-	c:\windows\SysWow64\elshyph.dll
2014-01-26 01:08 . 2014-01-26 01:08	0	----a-w-	c:\windows\SysWow64\shoABAD.tmp
2014-01-26 00:27 . 2014-01-26 00:27	--------	d-----w-	c:\users\Andreas\AppData\Local\Skype
2014-01-25 23:55 . 2014-01-26 00:06	--------	d-----w-	c:\users\Andreas\AppData\Local\Thunderbird
2014-01-25 23:55 . 2014-01-25 23:55	--------	d-----w-	c:\users\Andreas\AppData\Roaming\Thunderbird
2014-01-25 23:55 . 2014-02-16 21:21	--------	d-----w-	c:\program files (x86)\Mozilla Maintenance Service
2014-01-25 21:47 . 2014-01-25 21:47	--------	d-----w-	c:\programdata\APN
2014-01-25 19:10 . 2014-01-25 19:10	0	----a-w-	c:\windows\SysWow64\shoAFB5.tmp
2014-01-25 19:05 . 2013-05-10 04:30	167424	----a-w-	c:\program files\Windows Media Player\wmplayer.exe
2014-01-25 19:05 . 2013-05-10 03:48	164864	----a-w-	c:\program files (x86)\Windows Media Player\wmplayer.exe
2014-01-25 19:05 . 2013-05-10 05:56	12625920	----a-w-	c:\windows\system32\wmploc.DLL
2014-01-25 19:05 . 2013-05-10 04:56	12625408	----a-w-	c:\windows\SysWow64\wmploc.DLL
2014-01-25 19:05 . 2013-05-10 05:56	14631424	----a-w-	c:\windows\system32\wmp.dll
2014-01-25 16:51 . 2014-01-25 16:51	--------	d-----w-	c:\program files\Microsoft Silverlight
2014-01-25 16:51 . 2014-01-25 16:51	--------	d-----w-	c:\program files (x86)\Microsoft Silverlight
2014-01-25 16:15 . 2014-02-17 02:06	--------	d-----w-	c:\windows\system32\MRT
2014-01-25 14:15 . 2014-02-01 17:47	--------	d-----w-	c:\users\Andreas\AppData\Local\CrashDumps
2014-01-25 14:14 . 2013-10-30 02:32	335360	----a-w-	c:\windows\system32\msieftp.dll
2014-01-25 14:14 . 2013-10-30 02:19	301568	----a-w-	c:\windows\SysWow64\msieftp.dll
2014-01-25 14:14 . 2013-07-04 12:50	633856	----a-w-	c:\windows\system32\comctl32.dll
2014-01-25 14:14 . 2013-07-04 11:50	530432	----a-w-	c:\windows\SysWow64\comctl32.dll
2014-01-25 14:14 . 2013-02-15 06:06	3717632	----a-w-	c:\windows\system32\mstscax.dll
2014-01-25 14:14 . 2013-02-15 04:37	3217408	----a-w-	c:\windows\SysWow64\mstscax.dll
2014-01-25 14:14 . 2013-02-15 06:08	44032	----a-w-	c:\windows\system32\tsgqec.dll
2014-01-25 14:14 . 2013-02-15 06:02	158720	----a-w-	c:\windows\system32\aaclient.dll
2014-01-25 14:14 . 2013-02-15 04:34	131584	----a-w-	c:\windows\SysWow64\aaclient.dll
2014-01-25 14:14 . 2013-02-15 03:25	36864	----a-w-	c:\windows\SysWow64\tsgqec.dll
2014-01-25 14:14 . 2013-07-09 05:52	224256	----a-w-	c:\windows\system32\wintrust.dll
2014-01-25 14:14 . 2013-07-09 04:52	175104	----a-w-	c:\windows\SysWow64\wintrust.dll
2014-01-25 14:12 . 2013-09-28 01:09	497152	----a-w-	c:\windows\system32\drivers\afd.sys
2014-01-25 14:11 . 2013-07-25 09:25	1888768	----a-w-	c:\windows\system32\WMVDECOD.DLL
2014-01-25 14:01 . 2013-11-26 10:32	3156480	----a-w-	c:\windows\system32\win32k.sys
2014-01-25 14:00 . 2012-11-30 05:45	362496	----a-w-	c:\windows\system32\wow64win.dll
2014-01-25 14:00 . 2012-11-30 05:45	13312	----a-w-	c:\windows\system32\wow64cpu.dll
2014-01-25 14:00 . 2012-11-30 05:43	16384	----a-w-	c:\windows\system32\ntvdm64.dll
2014-01-25 13:59 . 2013-07-26 02:24	14172672	----a-w-	c:\windows\system32\shell32.dll
2014-01-25 13:59 . 2013-07-26 02:24	197120	----a-w-	c:\windows\system32\shdocvw.dll
2014-01-25 13:59 . 2013-04-26 05:51	751104	----a-w-	c:\windows\system32\win32spl.dll
2014-01-25 13:59 . 2013-04-26 04:55	492544	----a-w-	c:\windows\SysWow64\win32spl.dll
2014-01-25 13:59 . 2013-10-03 02:23	404480	----a-w-	c:\windows\system32\gdi32.dll
2014-01-25 13:59 . 2013-10-03 02:00	311808	----a-w-	c:\windows\SysWow64\gdi32.dll
2014-01-25 13:57 . 2013-10-12 02:32	150016	----a-w-	c:\windows\system32\wshom.ocx
2014-01-25 13:55 . 2012-11-02 05:59	478208	----a-w-	c:\windows\system32\dpnet.dll
2014-01-25 13:55 . 2012-11-02 05:11	376832	----a-w-	c:\windows\SysWow64\dpnet.dll
2014-01-25 13:49 . 2014-01-25 13:49	--------	d-----w-	c:\program files\Highlightly
2014-01-25 13:49 . 2014-01-25 13:49	--------	d-----w-	c:\program files (x86)\Highlightly
2014-01-25 13:48 . 2014-01-25 14:17	--------	d-----w-	c:\users\Andreas\AppData\Roaming\Systweak
2014-01-25 13:48 . 2013-07-11 12:49	20312	----a-w-	c:\windows\system32\roboot64.exe
2014-01-25 13:48 . 2014-02-18 20:21	--------	d-----w-	c:\program files (x86)\Supporter
2014-01-25 13:47 . 2014-01-25 13:47	--------	d-----w-	c:\users\Andreas\AppData\Local\Programs
2014-01-25 13:47 . 2014-01-25 14:30	--------	d-----w-	c:\program files (x86)\IminentToolbar
2014-01-25 13:47 . 2014-01-31 20:48	--------	d-----w-	c:\programdata\a0372ee8eaab2b88
2014-01-25 13:47 . 2014-01-25 13:47	--------	d-----w-	c:\users\Andreas\AppData\Local\Packages
2014-01-25 13:47 . 2014-01-25 13:47	--------	d-----w-	c:\users\Andreas\AppData\Local\Torch
2014-01-25 13:47 . 2014-01-25 13:47	--------	d-----w-	c:\users\Andreas\AppData\Local\Google
2014-01-25 13:47 . 2014-01-25 13:47	--------	d-----w-	c:\users\HomeGroupUser$
2014-01-25 13:47 . 2014-01-25 13:47	--------	d-----w-	c:\users\Gast
2014-01-25 13:47 . 2014-01-25 13:47	--------	d-----w-	c:\users\Andreas\AppData\Local\Comodo
2014-01-25 13:47 . 2014-01-25 13:47	--------	d-----w-	c:\users\Administrator
2014-01-25 13:45 . 2014-01-31 19:59	--------	d-----w-	C:\temp
2014-01-25 13:45 . 2014-01-25 13:45	--------	d-----w-	c:\program files\Level Quality Watcher
2014-01-25 13:37 . 2014-01-25 13:37	0	----a-w-	c:\windows\SysWow64\sho3746.tmp
2014-01-25 13:34 . 2013-08-28 01:12	461312	----a-w-	c:\windows\system32\scavengeui.dll
2014-01-25 13:33 . 2013-12-16 00:54	10315576	----a-w-	c:\programdata\Microsoft\Windows Defender\Definition Updates\{279A08BD-B2F2-4CE9-9C03-ABD40B05404E}\mpengine.dll
2014-01-25 13:24 . 2014-01-25 13:24	--------	d-----w-	c:\program files\CCleaner
2014-01-25 13:08 . 2014-01-25 13:08	--------	d-----w-	c:\programdata\Internet Manager
2014-01-25 13:06 . 2014-01-25 13:06	--------	d-----w-	c:\program files (x86)\T-Mobile
2014-01-25 13:05 . 2014-01-25 13:08	--------	d-----w-	c:\programdata\DatacardService
.
.
.
((((((((((((((((((((((((((((((((((((   Find3M Bericht   ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2014-02-17 02:01 . 2012-12-07 17:38	88567024	----a-w-	c:\windows\system32\MRT.exe
2014-02-06 00:46 . 2012-04-05 16:35	71048	----a-w-	c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2014-02-06 00:46 . 2012-04-05 16:35	692616	----a-w-	c:\windows\SysWow64\FlashPlayerApp.exe
2014-01-31 20:12 . 2012-06-02 04:42	1706640	----a-w-	c:\windows\RtlExUpd.dll
2013-12-18 05:13 . 2010-11-21 03:27	270496	------w-	c:\windows\system32\MpSigStub.exe
2013-12-04 19:46 . 2013-12-04 19:46	58256	----a-w-	c:\windows\system32\drivers\hlnfd.sys
.
.
((((((((((((((((((((((((((((   Autostartpunkte der Registrierung   ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. 
REGEDIT4
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\~\Browser Helper Objects\{41564952-412D-5637-4300-7A786E7484D7}]
2013-12-20 21:02	12240	----a-w-	c:\program files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7C\Passport.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\~\Browser Helper Objects\{83F2328D-0D6A-42B4-B0C4-02A929EDD4BE}]
2013-12-04 19:46	147560	----a-w-	c:\program files (x86)\Highlightly\IE\HighlightlyClientIE.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar]
"{41564952-412D-5637-4300-7A786E7484D7}"= "c:\program files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7C\Passport.dll" [2013-12-20 12240]
.
[HKEY_CLASSES_ROOT\clsid\{41564952-412d-5637-4300-7a786e7484d7}]
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2010-11-21 1475584]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2012-02-14 636032]
"HP Quick Launch"="c:\program files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe" [2012-03-05 578944]
"HPOSD"="c:\program files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe" [2011-08-19 379960]
"avgnt"="c:\program files (x86)\Avira\AntiVir Desktop\avgnt.exe" [2014-02-18 684600]
"ApnTBMon"="c:\program files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe" [2013-12-20 1778640]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon]
"Userinit"="userinit.exe"
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"LoadAppInit_DLLs"=1 (0x1)
.
R2 AntiVirWebService;Avira Browser-Schutz;c:\program files (x86)\Avira\AntiVir Desktop\avwebg7.exe;c:\program files (x86)\Avira\AntiVir Desktop\avwebg7.exe [x]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R2 HP Support Assistant Service;HP Support Assistant Service;c:\program files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe;c:\program files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe [x]
R2 Internet Manager. RunOuc;Internet Manager. OUC;c:\program files (x86)\T-Mobile\InternetManager_H\UpdateDog\ouc.exe;c:\program files (x86)\T-Mobile\InternetManager_H\UpdateDog\ouc.exe [x]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x]
R3 ew_hwusbdev;Huawei MobileBroadband USB PNP Device;c:\windows\system32\DRIVERS\ew_hwusbdev.sys;c:\windows\SYSNATIVE\DRIVERS\ew_hwusbdev.sys [x]
R3 ew_usbenumfilter;huawei_CompositeFilter;c:\windows\system32\DRIVERS\ew_usbenumfilter.sys;c:\windows\SYSNATIVE\DRIVERS\ew_usbenumfilter.sys [x]
R3 GamesAppService;GamesAppService;c:\program files (x86)\WildTangent Games\App\GamesAppService.exe;c:\program files (x86)\WildTangent Games\App\GamesAppService.exe [x]
R3 huawei_cdcacm;huawei_cdcacm;c:\windows\system32\DRIVERS\ew_jucdcacm.sys;c:\windows\SYSNATIVE\DRIVERS\ew_jucdcacm.sys [x]
R3 huawei_ext_ctrl;huawei_ext_ctrl;c:\windows\system32\DRIVERS\ew_juextctrl.sys;c:\windows\SYSNATIVE\DRIVERS\ew_juextctrl.sys [x]
R3 huawei_wwanecm;huawei_wwanecm;c:\windows\system32\DRIVERS\ew_juwwanecm.sys;c:\windows\SYSNATIVE\DRIVERS\ew_juwwanecm.sys [x]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCollector.exe [x]
R3 SmbDrv;SmbDrv;c:\windows\system32\drivers\Smb_driver.sys;c:\windows\SYSNATIVE\drivers\Smb_driver.sys [x]
R3 SrvHsfHDA;SrvHsfHDA;c:\windows\system32\DRIVERS\VSTAZL6.SYS;c:\windows\SYSNATIVE\DRIVERS\VSTAZL6.SYS [x]
R3 SrvHsfV92;SrvHsfV92;c:\windows\system32\DRIVERS\VSTDPV6.SYS;c:\windows\SYSNATIVE\DRIVERS\VSTDPV6.SYS [x]
R3 SrvHsfWinac;SrvHsfWinac;c:\windows\system32\DRIVERS\VSTCNXT6.SYS;c:\windows\SYSNATIVE\DRIVERS\VSTCNXT6.SYS [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 TsUsbGD;%TsUsbGD.DeviceDesc.Generic%;c:\windows\system32\drivers\TsUsbGD.sys;c:\windows\SYSNATIVE\drivers\TsUsbGD.sys [x]
R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe;c:\program files\Windows Live\Mesh\wlcrasvc.exe [x]
S0 amd_sata;amd_sata;c:\windows\system32\drivers\amd_sata.sys;c:\windows\SYSNATIVE\drivers\amd_sata.sys [x]
S0 amd_xata;amd_xata;c:\windows\system32\drivers\amd_xata.sys;c:\windows\SYSNATIVE\drivers\amd_xata.sys [x]
S1 avkmgr;avkmgr;c:\windows\system32\DRIVERS\avkmgr.sys;c:\windows\SYSNATIVE\DRIVERS\avkmgr.sys [x]
S1 hlnfd;hlnfd;c:\windows\system32\drivers\hlnfd.sys;c:\windows\SYSNATIVE\drivers\hlnfd.sys [x]
S2 AERTFilters;Andrea RT Filters Service;c:\program files\Realtek\Audio\HDA\AERTSr64.exe;c:\program files\Realtek\Audio\HDA\AERTSr64.exe [x]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe;c:\windows\SYSNATIVE\atiesrxx.exe [x]
S2 AMD FUEL Service;AMD FUEL Service;c:\program files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe;c:\program files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [x]
S2 AntiVirSchedulerService;Avira Planer;c:\program files (x86)\Avira\AntiVir Desktop\sched.exe;c:\program files (x86)\Avira\AntiVir Desktop\sched.exe [x]
S2 AODDriver4.1;AODDriver4.1;c:\program files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys;c:\program files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [x]
S2 APNMCP;Ask Aktualisierungsdienst;c:\program files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe;c:\program files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe [x]
S2 avnetflt;avnetflt;c:\windows\system32\DRIVERS\avnetflt.sys;c:\windows\SYSNATIVE\DRIVERS\avnetflt.sys [x]
S2 cvhsvc;Client Virtualization Handler;c:\program files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE;c:\program files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE [x]
S2 hlsvc;Highlightly Client Service;c:\program files (x86)\Highlightly\Service\hlsvc.exe;c:\program files (x86)\Highlightly\Service\hlsvc.exe [x]
S2 HPWMISVC;HPWMISVC;c:\program files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe;c:\program files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe [x]
S2 HWDeviceService64.exe;HWDeviceService64.exe;c:\programdata\DatacardService\HWDeviceService64.exe;c:\programdata\DatacardService\HWDeviceService64.exe [x]
S2 sftlist;Application Virtualization Client;c:\program files (x86)\Microsoft Application Virtualization Client\sftlist.exe;c:\program files (x86)\Microsoft Application Virtualization Client\sftlist.exe [x]
S3 amdiox64;AMD IO Driver;c:\windows\system32\drivers\amdiox64.sys;c:\windows\SYSNATIVE\drivers\amdiox64.sys [x]
S3 AtiHDAudioService;AMD Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW76.sys;c:\windows\SYSNATIVE\drivers\AtihdW76.sys [x]
S3 clwvd;CyberLink WebCam Virtual Driver;c:\windows\system32\DRIVERS\clwvd.sys;c:\windows\SYSNATIVE\DRIVERS\clwvd.sys [x]
S3 huawei_enumerator;huawei_enumerator;c:\windows\system32\DRIVERS\ew_jubusenum.sys;c:\windows\SYSNATIVE\DRIVERS\ew_jubusenum.sys [x]
S3 RSP2STOR;Realtek PCIE CardReader Driver - P2;c:\windows\system32\DRIVERS\RtsP2Stor.sys;c:\windows\SYSNATIVE\DRIVERS\RtsP2Stor.sys [x]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys [x]
S3 Sftfs;Sftfs;c:\windows\system32\DRIVERS\Sftfslh.sys;c:\windows\SYSNATIVE\DRIVERS\Sftfslh.sys [x]
S3 Sftplay;Sftplay;c:\windows\system32\DRIVERS\Sftplaylh.sys;c:\windows\SYSNATIVE\DRIVERS\Sftplaylh.sys [x]
S3 Sftredir;Sftredir;c:\windows\system32\DRIVERS\Sftredirlh.sys;c:\windows\SYSNATIVE\DRIVERS\Sftredirlh.sys [x]
S3 Sftvol;Sftvol;c:\windows\system32\DRIVERS\Sftvollh.sys;c:\windows\SYSNATIVE\DRIVERS\Sftvollh.sys [x]
S3 sftvsa;Application Virtualization Service Agent;c:\program files (x86)\Microsoft Application Virtualization Client\sftvsa.exe;c:\program files (x86)\Microsoft Application Virtualization Client\sftvsa.exe [x]
S3 usbfilter;AMD USB Filter Driver;c:\windows\system32\DRIVERS\usbfilter.sys;c:\windows\SYSNATIVE\DRIVERS\usbfilter.sys [x]
.
.
Inhalt des "geplante Tasks" Ordners
.
2014-02-19 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-05 00:46]
.
2014-02-17 c:\windows\Tasks\Feven Pro-chromeinstaller.job
- c:\program files (x86)\Feven Pro\Feven Pro-chromeinstaller.exe [2014-02-16 04:04]
.
2014-02-17 c:\windows\Tasks\Feven Pro-codedownloader.job
- c:\program files (x86)\Feven Pro\Feven Pro-codedownloader.exe [2014-02-16 04:04]
.
2014-02-17 c:\windows\Tasks\Feven Pro-enabler.job
- c:\program files (x86)\Feven Pro\Feven Pro-enabler.exe [2014-02-16 04:04]
.
2014-02-17 c:\windows\Tasks\Feven Pro-firefoxinstaller.job
- c:\program files (x86)\Feven Pro\Feven Pro-firefoxinstaller.exe [2014-02-16 04:04]
.
2014-02-17 c:\windows\Tasks\Feven Pro-updater.job
- c:\program files (x86)\Feven Pro\Feven Pro-updater.exe [2014-02-16 04:04]
.
2014-02-17 c:\windows\Tasks\HPCeeScheduleForAndreas.job
- c:\program files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2011-07-15 02:43]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{41564952-412D-5637-4300-7A786E7484D7}]
2013-12-20 21:02	13776	----a-w-	c:\program files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7C\Passport_x64.dll
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{5E50B8AA-7158-4229-3E4B-327FA83238DF}]
2014-01-31 20:48	473600	----a-w-	c:\programdata\TauBeItAdBlockFrr\Fg9U.x64.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{41564952-412D-5637-4300-7A786E7484D7}"= "c:\program files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7C\Passport_x64.dll" [2013-12-20 13776]
.
[HKEY_CLASSES_ROOT\CLSID\{41564952-412D-5637-4300-7A786E7484D7}]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RTHDVCPL"="c:\program files\Realtek\Audio\HDA\RtkNGUI64.exe" [2014-01-31 6548112]
.
------- Zusätzlicher Suchlauf -------
.
uStart Page = hxxp://www.awesomehp.com/?type=hp&ts=1392523418&from=tugs&uid=TOSHIBAXMK3276GSX_52DMP4XUTXX52DMP4XUT
uLocal Page = c:\windows\system32\blank.htm
mDefault_Search_URL = hxxp://www.awesomehp.com/web/?type=ds&ts=1392523418&from=tugs&uid=TOSHIBAXMK3276GSX_52DMP4XUTXX52DMP4XUT&q={searchTerms}
mDefault_Page_URL = hxxp://www.awesomehp.com/?type=hp&ts=1392523418&from=tugs&uid=TOSHIBAXMK3276GSX_52DMP4XUTXX52DMP4XUT
mStart Page = hxxp://www.awesomehp.com/?type=hp&ts=1392523418&from=tugs&uid=TOSHIBAXMK3276GSX_52DMP4XUTXX52DMP4XUT
mLocal Page = c:\windows\SysWOW64\blank.htm
mSearch Page = hxxp://www.awesomehp.com/web/?type=ds&ts=1392523418&from=tugs&uid=TOSHIBAXMK3276GSX_52DMP4XUTXX52DMP4XUT&q={searchTerms}
TCP: DhcpNameServer = 192.168.2.1
FF - ProfilePath - c:\users\Andreas\AppData\Roaming\Mozilla\Firefox\Profiles\5qxwlrma.default\
FF - prefs.js: browser.search.selectedEngine - awesomehp
FF - prefs.js: browser.startup.homepage - hxxps://www.google.de/
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
URLSearchHooks-{84FF7BD6-B47F-46F8-9130-01B2696B36CB} - (no file)
BHO-{11111111-1111-1111-1111-110511161178} - c:\program files (x86)\Feven Pro\Feven Pro-bho.dll
BHO-{84FF7BD6-B47F-46F8-9130-01B2696B36CB} - (no file)
HKLM_Wow6432Node-ActiveSetup-{2D46B6DC-2207-486B-B523-A557E6D54B47} - start
HKLM_Wow6432Node-ActiveSetup-{438363A8-F486-4C37-834C-4955773CB3D3} - msiexec
BHO-{15913038-0EF1-583B-129C-342D218DBC4C} - c:\program files (x86)\ShoppingChip\_5H747NV.x64.dll
HKLM-Run-SynTPEnh - c:\program files (x86)\Synaptics\SynTP\SynTPEnh.exe
AddRemove-{1D2ABF6A-2B19-3E94-0991-5B5BDB7134DA} - c:\programdata\ShoppingChip\E6LwNhPlK.exe
AddRemove-{E35A3B13-78CD-4967-8AC8-AA9FDA693EDE} - c:\program files (x86)\InstallShield Installation Information\{E35A3B13-78CD-4967-8AC8-AA9FDA693EDE}\setup.exe
.
.
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_USERS\S-1-5-21-263240945-1247611552-2027154437-1002_Classes\CLSID]
@DACL=(02 0000)
.
[HKEY_USERS\S-1-5-21-263240945-1247611552-2027154437-1002_Classes\CLSID\{D9AC5E73-BB10-467b-B884-AA1E475C51F5}]
@DACL=(02 0000)
@="SynTPCpl0"
"LocalizedString"="Synaptics TouchPad V7.5"
"System.ApplicationName"="Synaptics.SynTPCpl0"
"System.ControlPanel.Category"="2"
"System.Software.TasksFileUrl"="c:\\ProgramData\\Synaptics\\SynTP\\SynTPCpl0.xml"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_12_0_0_44_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_12_0_0_44_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_12_0_0_44_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_12_0_0_44_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_12_0_0_44.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.11"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_12_0_0_44.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_12_0_0_44.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_12_0_0_44.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Nico Mak Computing\WinZip]
"SymbolicLinkValue"=hex(6):5c,00,52,00,65,00,67,00,69,00,73,00,74,00,72,00,79,
   00,5c,00,4d,00,41,00,43,00,48,00,49,00,4e,00,45,00,5c,00,53,00,6f,00,66,00,\
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Weitere laufende Prozesse ------------------------
.
c:\program files (x86)\Avira\AntiVir Desktop\avguard.exe
c:\programdata\Internet Manager\OnlineUpdate\ouc.exe
c:\program files (x86)\CyberLink\YouCam\YCMMirage.exe
.
**************************************************************************
.
Zeit der Fertigstellung: 2014-02-20  16:41:28 - PC wurde neu gestartet
ComboFix-quarantined-files.txt  2014-02-20 15:41
.
Vor Suchlauf: 11 Verzeichnis(se), 250.878.189.568 Bytes frei
Nach Suchlauf: 18 Verzeichnis(se), 250.559.254.528 Bytes frei
.
- - End Of File - - 778A440FD050627820224C42D153F6EC
A36C5E4F47E84449FF07ED3517B43A31
         

Alt 21.02.2014, 13:08   #11
schrauber
/// the machine
/// TB-Ausbilder
 

Windows 7 - Malware? - Fenster öffnen sich automatisch - Standard

Windows 7 - Malware? - Fenster öffnen sich automatisch



Downloade Dir bitte Malwarebytes Anti-Malware
  • Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
  • Starte Malwarebytes' Anti-Malware (MBAM).
  • Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
  • Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
  • Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
  • Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
  • Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
  • Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.


Downloade Dir bitte AdwCleaner Logo Icon AdwCleaner auf deinen Desktop.
  • Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
  • Starte die AdwCleaner.exe mit einem Doppelklick.
  • Stimme den Nutzungsbedingungen zu.
  • Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
    • "Tracing" Schlüssel löschen
    • Winsock Einstellungen zurücksetzen
    • Proxy Einstellungen zurücksetzen
    • Internet Explorer Richtlinien zurücksetzen
    • Chrome Richtlinien zurücksetzen
    • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
  • Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
  • Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
  • Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
  • Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

  • Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
  • Drücke eine beliebige Taste, um das Tool zu starten.
  • Je nach System kann der Scan eine Weile dauern.
  • Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
  • Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.


und ein frisches FRST log bitte.
__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Alt 22.02.2014, 12:07   #12
Shirry
 
Windows 7 - Malware? - Fenster öffnen sich automatisch - Standard

Windows 7 - Malware? - Fenster öffnen sich automatisch



Malwarebytes Anti-Malware LOG:

Code:
ATTFilter
 Malwarebytes Anti-Malware  (Test) 1.75.0.1300
www.malwarebytes.org

Datenbank Version: v2014.02.22.02

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 11.0.9600.16518
Andreas :: ANDREAS-HP [Administrator]

Schutz: Aktiviert

22.02.2014 11:30:28
mbam-log-2014-02-22 (11-30-28).txt

Art des Suchlaufs: Quick-Scan
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 244430
Laufzeit: 14 Minute(n), 33 Sekunde(n)

Infizierte Speicherprozesse: 1
C:\Program Files (x86)\Highlightly\Service\hlsvc.exe (PUP.Optional.Highlightly) -> 492 -> Löschen bei Neustart.

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 26
HKCR\CLSID\{83F2328D-0D6A-42B4-B0C4-02A929EDD4BE} (PUP.Optional.Highlightly) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{83F2328D-0D6A-42B4-B0C4-02A929EDD4BE} (PUP.Optional.Highlightly) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{83F2328D-0D6A-42B4-B0C4-02A929EDD4BE} (PUP.Optional.Highlightly) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKLM\SOFTWARE\{6791A2F3-FC80-475C-A002-C014AF797E9C} (PUP.Optional.OptimzerPro.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKLM\SOFTWARE\{77D46E27-0E41-4478-87A6-AABE6FBCF252} (PUP.Optional.GreatSaver.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{68B81CCD-A80C-4060-8947-5AE69ED01199} (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E6B969FB-6D33-48d2-9061-8BBD4899EB08} (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{84FF7BD6-B47F-46F8-9130-01B2696B36CB} (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{1D2ABF6A-2B19-3E94-0991-5B5BDB7134DA} (PUP.Optional.ShoppingChip) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{94EEB800-E533-7AE1-5C31-0446E1C0537C} (PUP.Optional.MultiPlug.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Highlightly (PUP.Optional.Highlightly) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKLM\SYSTEM\CurrentControlSet\Services\hlsvc (PUP.Optional.Highlightly) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCR\CrossriderApp0051678.BHO (PUP.Optional.CrossRider.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCR\CrossriderApp0051678.Sandbox (PUP.Optional.CrossRider.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCR\CrossriderApp0051678.Sandbox.1 (PUP.Optional.CrossRider.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86} (PUP.Optional.Qone8) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCU\Software\AppDataLow\Software\Feven Pro (PUP.Optional.Feven.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCU\Software\InstalledBrowserExtensions\Feven (PUP.Optional.Feven.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKLM\SOFTWARE\Highlightly (PUP.Optional.Highlightly) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86} (PUP.Optional.Qone8) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\HLNFD (PUP.Optional.Highlightly) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKLM\Software\awesomehpSoftware (PUP.Optional.Awesomehp.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKLM\Software\Feven Pro (PUP.Optional.Feven.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKLM\Software\Iminent (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110511161178} (PUP.Optional.CrossRider.M) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCR\CLSID\{11111111-1111-1111-1111-110511161178} (PUP.Optional.CrossRider.M) -> Erfolgreich gelöscht und in Quarantäne gestellt.

Infizierte Registrierungswerte: 3
HKLM\SOFTWARE\Mozilla\Firefox\Extensions|lightningnewtab@gmail.com (PUP.Optional.Lightning.A) -> Daten: C:\Users\Andreas\AppData\Roaming\Mozilla\Firefox\Profiles\5qxwlrma.default\extensions\lightningnewtab@gmail.com.xpi -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKLM\SYSTEM\CurrentControlSet\Services\hlnfd|DisplayName (PUP.Optional.Highlightly) -> Daten: hlnfd -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKLM\SYSTEM\CurrentControlSet\Services\hlsvc|DisplayName (PUP.Optional.Highlightly) -> Daten: Highlightly Client Service -> Erfolgreich gelöscht und in Quarantäne gestellt.

Infizierte Dateiobjekte der Registrierung: 5
HKCU\Software\Microsoft\Internet Explorer\Main|Start Page (PUP.Optional.Awesomehp.A) -> Bösartig: (hxxp://www.awesomehp.com/?type=hp&ts=1392523418&from=tugs&uid=TOSHIBAXMK3276GSX_52DMP4XUTXX52DMP4XUT) Gut: (hxxp://www.google.com) -> Erfolgreich ersetzt und in Quarantäne gestellt.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Main|Default_Search_URL (PUP.Optional.Awesomehp.A) -> Bösartig: (hxxp://www.awesomehp.com/web/?type=ds&ts=1392523418&from=tugs&uid=TOSHIBAXMK3276GSX_52DMP4XUTXX52DMP4XUT&q={searchTerms}) Gut: (hxxp://www.google.com) -> Erfolgreich ersetzt und in Quarantäne gestellt.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Main|Start Page (PUP.Optional.Awesomehp.A) -> Bösartig: (hxxp://www.awesomehp.com/?type=hp&ts=1392523418&from=tugs&uid=TOSHIBAXMK3276GSX_52DMP4XUTXX52DMP4XUT) Gut: (hxxp://www.google.com) -> Erfolgreich ersetzt und in Quarantäne gestellt.
HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes|DefaultScope (PUP.Optional.Qone8) -> Bösartig: ({33BB0A4E-99AF-4226-BDF6-49120163DE86}) Gut: ({0633EE93-D776-472f-A0FF-E1416B8B2E3A}) -> Erfolgreich ersetzt und in Quarantäne gestellt.
HKLM\Software\Microsoft\Internet Explorer\Main|Default_Page_URL (PUP.Optional.Awesomehp.A) -> Bösartig: (hxxp://www.awesomehp.com/?type=hp&ts=1392523418&from=tugs&uid=TOSHIBAXMK3276GSX_52DMP4XUTXX52DMP4XUT) Gut: (hxxp://www.google.com) -> Erfolgreich ersetzt und in Quarantäne gestellt.

Infizierte Verzeichnisse: 13
C:\Users\Andreas\AppData\Roaming\awesomehp (PUP.Optional.Awesomehp.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Andreas\AppData\Roaming\awesomehp\log (PUP.Optional.Awesomehp.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files\Level Quality Watcher\v1.01 (PUP.Optional.Adpeak) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files (x86)\Highlightly (PUP.Optional.Highlightly) -> Löschen bei Neustart.
C:\Program Files (x86)\Highlightly\3rd Party Licenses (PUP.Optional.Highlightly) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files (x86)\Highlightly\IE (PUP.Optional.Highlightly) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files (x86)\Highlightly\Service (PUP.Optional.Highlightly) -> Löschen bei Neustart.
C:\Program Files (x86)\IminentToolbar (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Andreas\AppData\Local\Google\Chrome\User Data\Default\Extensions\oclgomenfkljhfkfflghppidonpkljjg (PUP.Optional.ScorpionSaver) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Andreas\AppData\Local\Google\Chrome\User Data\Default\Extensions\oclgomenfkljhfkfflghppidonpkljjg\5.0_0 (PUP.Optional.ScorpionSaver) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\ProgramData\IePluginService (PUP.Optional.IePluginService.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\ProgramData\IePluginService\update (PUP.Optional.IePluginService.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files (x86)\Feven Pro (PUP.Optional.Feven.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.

Infizierte Dateien: 51
C:\Program Files (x86)\Highlightly\IE\HighlightlyClientIE.dll (PUP.Optional.Highlightly) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\ProgramData\TauBeItAdBlockFrr\Fg9U.exe (PUP.Optional.MultiPlug.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\ProgramData\TauBeItAdBlockFrr\Fg9U.x64.dll (PUP.Optional.MultiPlug.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Andreas\AppData\Roaming\awesomehp\QQBrowserFrame.dll (PUP.Optional.SkyTech.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\temp\t.msi (PUP.Optional.Adpeak) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Andreas\Downloads\Setup.exe (PUP.Optional.BundleInstaller.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Windows\Installer\88ac7.msi (PUP.Optional.Adpeak) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Windows\Tasks\Feven Pro-chromeinstaller.job (PUP.Optional.Feven.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Windows\Tasks\Feven Pro-codedownloader.job (PUP.Optional.Feven.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Windows\Tasks\Feven Pro-enabler.job (PUP.Optional.Feven.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Windows\Tasks\Feven Pro-firefoxinstaller.job (PUP.Optional.Feven.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Windows\Tasks\Feven Pro-updater.job (PUP.Optional.Feven.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Andreas\AppData\Roaming\awesomehp\54.json (PUP.Optional.Awesomehp.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Andreas\AppData\Roaming\awesomehp\awesomehp.exe (PUP.Optional.Awesomehp.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Andreas\AppData\Roaming\awesomehp\DataBase (PUP.Optional.Awesomehp.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Andreas\AppData\Roaming\awesomehp\log\awesomehp.LOG (PUP.Optional.Awesomehp.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\awesomehp.xml (PUP.Optional.Awesomehp.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files\Level Quality Watcher\v1.01\levelqualitywatcher64.exe (PUP.Optional.Adpeak) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files (x86)\Highlightly\terms-of-service.rtf (PUP.Optional.Highlightly) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files (x86)\Highlightly\Uninstall.exe (PUP.Optional.Highlightly) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files (x86)\Highlightly\3rd Party Licenses\buildcrx-license.txt (PUP.Optional.Highlightly) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files (x86)\Highlightly\3rd Party Licenses\Info-ZIP-license.txt (PUP.Optional.Highlightly) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files (x86)\Highlightly\3rd Party Licenses\nsJSON-license.txt (PUP.Optional.Highlightly) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files (x86)\Highlightly\3rd Party Licenses\SimpleSC-license.txt (PUP.Optional.Highlightly) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files (x86)\Highlightly\3rd Party Licenses\UAC-license.txt (PUP.Optional.Highlightly) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files (x86)\Highlightly\Service\hlsvc.exe (PUP.Optional.Highlightly) -> Löschen bei Neustart.
C:\Users\Andreas\AppData\Local\Google\Chrome\User Data\Default\Extensions\oclgomenfkljhfkfflghppidonpkljjg\5.0_0\background.js (PUP.Optional.ScorpionSaver) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Andreas\AppData\Local\Google\Chrome\User Data\Default\Extensions\oclgomenfkljhfkfflghppidonpkljjg\5.0_0\bootstrap.js (PUP.Optional.ScorpionSaver) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Andreas\AppData\Local\Google\Chrome\User Data\Default\Extensions\oclgomenfkljhfkfflghppidonpkljjg\5.0_0\bootstrap.js.old (PUP.Optional.ScorpionSaver) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Andreas\AppData\Local\Google\Chrome\User Data\Default\Extensions\oclgomenfkljhfkfflghppidonpkljjg\5.0_0\icon128.png (PUP.Optional.ScorpionSaver) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Andreas\AppData\Local\Google\Chrome\User Data\Default\Extensions\oclgomenfkljhfkfflghppidonpkljjg\5.0_0\icon16.png (PUP.Optional.ScorpionSaver) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Andreas\AppData\Local\Google\Chrome\User Data\Default\Extensions\oclgomenfkljhfkfflghppidonpkljjg\5.0_0\icon32.png (PUP.Optional.ScorpionSaver) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Andreas\AppData\Local\Google\Chrome\User Data\Default\Extensions\oclgomenfkljhfkfflghppidonpkljjg\5.0_0\icon48.png (PUP.Optional.ScorpionSaver) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Andreas\AppData\Local\Google\Chrome\User Data\Default\Extensions\oclgomenfkljhfkfflghppidonpkljjg\5.0_0\icon64.png (PUP.Optional.ScorpionSaver) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Andreas\AppData\Local\Google\Chrome\User Data\Default\Extensions\oclgomenfkljhfkfflghppidonpkljjg\5.0_0\icon8.png (PUP.Optional.ScorpionSaver) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Andreas\AppData\Local\Google\Chrome\User Data\Default\Extensions\oclgomenfkljhfkfflghppidonpkljjg\5.0_0\manifest.json (PUP.Optional.ScorpionSaver) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Andreas\AppData\Local\Google\Chrome\User Data\Default\Extensions\oclgomenfkljhfkfflghppidonpkljjg\5.0_0\marcopolo.js (PUP.Optional.ScorpionSaver) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files (x86)\Feven Pro\51678.crx (PUP.Optional.Feven.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files (x86)\Feven Pro\51678.xpi (PUP.Optional.Feven.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files (x86)\Feven Pro\background.html (PUP.Optional.Feven.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files (x86)\Feven Pro\Feven Pro-bg.exe (PUP.Optional.Feven.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files (x86)\Feven Pro\Feven Pro-bho64.dll (PUP.Optional.Feven.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files (x86)\Feven Pro\Feven Pro-chromeinstaller.exe (PUP.Optional.Feven.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files (x86)\Feven Pro\Feven Pro-codedownloader.exe (PUP.Optional.Feven.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files (x86)\Feven Pro\Feven Pro-enabler.exe (PUP.Optional.Feven.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files (x86)\Feven Pro\Feven Pro-firefoxinstaller.exe (PUP.Optional.Feven.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files (x86)\Feven Pro\Feven Pro-updater.exe (PUP.Optional.Feven.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files (x86)\Feven Pro\Feven Pro.ico (PUP.Optional.Feven.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files (x86)\Feven Pro\Installer.log (PUP.Optional.Feven.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files (x86)\Feven Pro\Uninstall.exe (PUP.Optional.Feven.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files (x86)\Feven Pro\utils.exe (PUP.Optional.Feven.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.

(Ende)
         
Desweiteren finde ich diese Datei bei "Logdateien":

Code:
ATTFilter
2014/02/22 11:26:32 +0100	ANDREAS-HP	Andreas	MESSAGE	Executing scheduled update:  Daily
2014/02/22 11:26:40 +0100	ANDREAS-HP	Andreas	MESSAGE	Starting protection
2014/02/22 11:26:40 +0100	ANDREAS-HP	Andreas	MESSAGE	Protection started successfully
2014/02/22 11:26:40 +0100	ANDREAS-HP	Andreas	MESSAGE	Starting IP protection
2014/02/22 11:27:39 +0100	ANDREAS-HP	Andreas	MESSAGE	IP Protection started successfully
2014/02/22 11:27:58 +0100	ANDREAS-HP	Andreas	MESSAGE	Starting database refresh
2014/02/22 11:27:58 +0100	ANDREAS-HP	Andreas	MESSAGE	Stopping IP protection
2014/02/22 11:28:03 +0100	ANDREAS-HP	Andreas	MESSAGE	IP Protection stopped successfully
2014/02/22 11:28:07 +0100	ANDREAS-HP	Andreas	MESSAGE	Scheduled update executed successfully:  database updated from version v2013.04.04.07 to version v2014.02.22.02
2014/02/22 11:28:11 +0100	ANDREAS-HP	Andreas	MESSAGE	Database refreshed successfully
2014/02/22 11:28:11 +0100	ANDREAS-HP	Andreas	MESSAGE	Starting IP protection
2014/02/22 11:28:26 +0100	ANDREAS-HP	Andreas	MESSAGE	IP Protection started successfully
2014/02/22 11:29:08 +0100	ANDREAS-HP	Andreas	IP-BLOCK	162.210.192.22 (Type: outgoing, Port: 49621, Process: firefox.exe)
2014/02/22 11:29:08 +0100	ANDREAS-HP	Andreas	IP-BLOCK	162.210.192.26 (Type: outgoing, Port: 49622, Process: firefox.exe)
2014/02/22 11:29:08 +0100	ANDREAS-HP	Andreas	IP-BLOCK	162.210.192.22 (Type: outgoing, Port: 49623, Process: firefox.exe)
2014/02/22 11:29:08 +0100	ANDREAS-HP	Andreas	IP-BLOCK	162.210.192.26 (Type: outgoing, Port: 49624, Process: firefox.exe)
2014/02/22 11:59:30 +0100	ANDREAS-HP	Andreas	IP-BLOCK	162.210.192.22 (Type: outgoing, Port: 49710, Process: firefox.exe)
2014/02/22 11:59:30 +0100	ANDREAS-HP	Andreas	IP-BLOCK	162.210.192.26 (Type: outgoing, Port: 49711, Process: firefox.exe)
2014/02/22 11:59:30 +0100	ANDREAS-HP	Andreas	IP-BLOCK	162.210.192.22 (Type: outgoing, Port: 49712, Process: firefox.exe)
2014/02/22 11:59:30 +0100	ANDREAS-HP	Andreas	IP-BLOCK	162.210.192.26 (Type: outgoing, Port: 49713, Process: firefox.exe)
2014/02/22 11:59:30 +0100	ANDREAS-HP	Andreas	IP-BLOCK	162.210.192.22 (Type: outgoing, Port: 49720, Process: firefox.exe)
2014/02/22 11:59:31 +0100	ANDREAS-HP	Andreas	IP-BLOCK	162.210.192.26 (Type: outgoing, Port: 49722, Process: firefox.exe)
2014/02/22 11:59:31 +0100	ANDREAS-HP	Andreas	IP-BLOCK	162.210.192.22 (Type: outgoing, Port: 49723, Process: firefox.exe)
2014/02/22 11:59:31 +0100	ANDREAS-HP	Andreas	IP-BLOCK	162.210.192.26 (Type: outgoing, Port: 49724, Process: firefox.exe)
2014/02/22 11:59:31 +0100	ANDREAS-HP	Andreas	IP-BLOCK	162.210.192.22 (Type: outgoing, Port: 49728, Process: firefox.exe)
2014/02/22 11:59:31 +0100	ANDREAS-HP	Andreas	IP-BLOCK	162.210.192.26 (Type: outgoing, Port: 49729, Process: firefox.exe)
2014/02/22 11:59:31 +0100	ANDREAS-HP	Andreas	IP-BLOCK	162.210.192.22 (Type: outgoing, Port: 49730, Process: firefox.exe)
2014/02/22 11:59:31 +0100	ANDREAS-HP	Andreas	IP-BLOCK	162.210.192.26 (Type: outgoing, Port: 49731, Process: firefox.exe)
2014/02/22 11:59:47 +0100	ANDREAS-HP	Andreas	IP-BLOCK	162.210.192.22 (Type: outgoing, Port: 49749, Process: firefox.exe)
2014/02/22 11:59:48 +0100	ANDREAS-HP	Andreas	IP-BLOCK	162.210.192.26 (Type: outgoing, Port: 49750, Process: firefox.exe)
2014/02/22 11:59:48 +0100	ANDREAS-HP	Andreas	IP-BLOCK	162.210.192.22 (Type: outgoing, Port: 49751, Process: firefox.exe)
2014/02/22 11:59:48 +0100	ANDREAS-HP	Andreas	IP-BLOCK	162.210.192.26 (Type: outgoing, Port: 49752, Process: firefox.exe)
2014/02/22 11:59:48 +0100	ANDREAS-HP	Andreas	IP-BLOCK	162.210.192.22 (Type: outgoing, Port: 49756, Process: firefox.exe)
2014/02/22 11:59:48 +0100	ANDREAS-HP	Andreas	IP-BLOCK	162.210.192.26 (Type: outgoing, Port: 49757, Process: firefox.exe)
2014/02/22 11:59:48 +0100	ANDREAS-HP	Andreas	IP-BLOCK	162.210.192.22 (Type: outgoing, Port: 49758, Process: firefox.exe)
2014/02/22 11:59:48 +0100	ANDREAS-HP	Andreas	IP-BLOCK	162.210.192.26 (Type: outgoing, Port: 49759, Process: firefox.exe)
2014/02/22 11:59:56 +0100	ANDREAS-HP	Andreas	IP-BLOCK	162.210.192.22 (Type: outgoing, Port: 49775, Process: firefox.exe)
2014/02/22 11:59:56 +0100	ANDREAS-HP	Andreas	IP-BLOCK	162.210.192.26 (Type: outgoing, Port: 49776, Process: firefox.exe)
2014/02/22 11:59:56 +0100	ANDREAS-HP	Andreas	IP-BLOCK	162.210.192.22 (Type: outgoing, Port: 49777, Process: firefox.exe)
2014/02/22 11:59:57 +0100	ANDREAS-HP	Andreas	IP-BLOCK	162.210.192.26 (Type: outgoing, Port: 49778, Process: firefox.exe)
2014/02/22 11:59:57 +0100	ANDREAS-HP	Andreas	IP-BLOCK	162.210.192.22 (Type: outgoing, Port: 49782, Process: firefox.exe)
2014/02/22 11:59:57 +0100	ANDREAS-HP	Andreas	IP-BLOCK	162.210.192.26 (Type: outgoing, Port: 49783, Process: firefox.exe)
2014/02/22 11:59:57 +0100	ANDREAS-HP	Andreas	IP-BLOCK	162.210.192.22 (Type: outgoing, Port: 49784, Process: firefox.exe)
2014/02/22 11:59:57 +0100	ANDREAS-HP	Andreas	IP-BLOCK	162.210.192.26 (Type: outgoing, Port: 49785, Process: firefox.exe)
2014/02/22 12:00:29 +0100	ANDREAS-HP	Andreas	IP-BLOCK	162.210.192.22 (Type: outgoing, Port: 49803, Process: firefox.exe)
2014/02/22 12:00:29 +0100	ANDREAS-HP	Andreas	IP-BLOCK	162.210.192.26 (Type: outgoing, Port: 49804, Process: firefox.exe)
2014/02/22 12:00:29 +0100	ANDREAS-HP	Andreas	IP-BLOCK	162.210.192.22 (Type: outgoing, Port: 49805, Process: firefox.exe)
2014/02/22 12:00:30 +0100	ANDREAS-HP	Andreas	IP-BLOCK	162.210.192.26 (Type: outgoing, Port: 49806, Process: firefox.exe)
2014/02/22 12:00:30 +0100	ANDREAS-HP	Andreas	IP-BLOCK	162.210.192.22 (Type: outgoing, Port: 49808, Process: firefox.exe)
2014/02/22 12:00:30 +0100	ANDREAS-HP	Andreas	IP-BLOCK	162.210.192.26 (Type: outgoing, Port: 49809, Process: firefox.exe)
2014/02/22 12:00:30 +0100	ANDREAS-HP	Andreas	IP-BLOCK	162.210.192.22 (Type: outgoing, Port: 49810, Process: firefox.exe)
2014/02/22 12:00:30 +0100	ANDREAS-HP	Andreas	IP-BLOCK	162.210.192.26 (Type: outgoing, Port: 49811, Process: firefox.exe)
2014/02/22 12:00:38 +0100	ANDREAS-HP	Andreas	IP-BLOCK	162.210.192.22 (Type: outgoing, Port: 49826, Process: firefox.exe)
2014/02/22 12:00:38 +0100	ANDREAS-HP	Andreas	IP-BLOCK	162.210.192.26 (Type: outgoing, Port: 49827, Process: firefox.exe)
2014/02/22 12:00:38 +0100	ANDREAS-HP	Andreas	IP-BLOCK	162.210.192.22 (Type: outgoing, Port: 49828, Process: firefox.exe)
2014/02/22 12:00:39 +0100	ANDREAS-HP	Andreas	IP-BLOCK	162.210.192.26 (Type: outgoing, Port: 49829, Process: firefox.exe)
2014/02/22 12:00:39 +0100	ANDREAS-HP	Andreas	IP-BLOCK	162.210.192.22 (Type: outgoing, Port: 49833, Process: firefox.exe)
2014/02/22 12:00:39 +0100	ANDREAS-HP	Andreas	IP-BLOCK	162.210.192.26 (Type: outgoing, Port: 49834, Process: firefox.exe)
2014/02/22 12:00:39 +0100	ANDREAS-HP	Andreas	IP-BLOCK	162.210.192.22 (Type: outgoing, Port: 49835, Process: firefox.exe)
2014/02/22 12:00:39 +0100	ANDREAS-HP	Andreas	IP-BLOCK	162.210.192.26 (Type: outgoing, Port: 49836, Process: firefox.exe)
2014/02/22 12:03:38 +0100	ANDREAS-HP	Andreas	MESSAGE	Starting protection
2014/02/22 12:03:38 +0100	ANDREAS-HP	Andreas	MESSAGE	Protection started successfully
2014/02/22 12:03:38 +0100	ANDREAS-HP	Andreas	MESSAGE	Starting IP protection
2014/02/22 12:03:54 +0100	ANDREAS-HP	Andreas	MESSAGE	IP Protection started successfully
         
LOG AdwCleaner:

Code:
ATTFilter
# AdwCleaner v3.019 - Bericht erstellt am 22/02/2014 um 12:17:12
# Aktualisiert 17/02/2014 von Xplode
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)
# Benutzername : Andreas - ANDREAS-HP
# Gestartet von : C:\Users\Andreas\Desktop\adwcleaner.exe
# Option : Löschen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****

Ordner Gelöscht : C:\ProgramData\WPM
Ordner Gelöscht : C:\Program Files (x86)\SupTab
Ordner Gelöscht : C:\Program Files\Highlightly
Ordner Gelöscht : C:\Program Files\Level Quality Watcher
Ordner Gelöscht : C:\Users\Andreas\AppData\Local\Searchprotect
Ordner Gelöscht : C:\Users\Andreas\AppData\Local\torch
Ordner Gelöscht : C:\Users\Andreas\AppData\LocalLow\IminentToolbar
Ordner Gelöscht : C:\Users\Andreas\AppData\Roaming\Systweak
Ordner Gelöscht : C:\Users\Andreas\Documents\optimizer pro
Datei Gelöscht : C:\END
Datei Gelöscht : C:\Windows\System32\roboot64.exe

***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\speedupmypc
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\au__rasapi32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\au__rasmancs
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\BingBar_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\IMinentToolbar_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\IMinentToolbar_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\optimizerpro_rasapi32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\optimizerpro_rasmancs
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\optprostart_rasapi32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\optprostart_rasmancs
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\systweakasp_rasapi32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\systweakasp_rasmancs
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{0A18A436-2A7A-49F3-A488-30538A2F6323}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{007EFBDF-8A5D-4930-97CC-A4B437CBA777}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220522162278}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{31E3BC75-2A09-4CFF-9C92-8D0ED8D1DC0F}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{C66F0B7A-BD67-4982-AF71-C6CA6E7F016F}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{EAF749DC-CD87-4B04-B22A-D4AC3FBCB2BC}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550555165578}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660566166678}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{E2343056-CC08-46AC-B898-BFC7ACF4E755}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{2FA28606-DE77-4029-AF96-B231E3B8F827}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{B7FCA997-D0FB-4FE0-8AFD-255E89CF9671}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{D43B3890-80C7-4010-A95D-1E77B5924DC3}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{2FA28606-DE77-4029-AF96-B231E3B8F827}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{B7FCA997-D0FB-4FE0-8AFD-255E89CF9671}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{D43B3890-80C7-4010-A95D-1E77B5924DC3}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220522162278}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{31E3BC75-2A09-4CFF-9C92-8D0ED8D1DC0F}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{C66F0B7A-BD67-4982-AF71-C6CA6E7F016F}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{EAF749DC-CD87-4B04-B22A-D4AC3FBCB2BC}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550555165578}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660566166678}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{2FA28606-DE77-4029-AF96-B231E3B8F827}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{B7FCA997-D0FB-4FE0-8AFD-255E89CF9671}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{D43B3890-80C7-4010-A95D-1E77B5924DC3}
Schlüssel Gelöscht : HKCU\Software\installedbrowserextensions
Schlüssel Gelöscht : HKCU\Software\systweak
Schlüssel Gelöscht : HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}
Schlüssel Gelöscht : HKCU\Software\AppDataLow\{5F189DF5-2D05-472B-9091-84D9848AE48B}
Schlüssel Gelöscht : HKLM\Software\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0}
Schlüssel Gelöscht : HKLM\Software\{5F189DF5-2D05-472B-9091-84D9848AE48B}
Schlüssel Gelöscht : HKLM\Software\caphyon
Schlüssel Gelöscht : HKLM\Software\supTab
Schlüssel Gelöscht : HKLM\Software\supWPM
Schlüssel Gelöscht : HKLM\Software\systweak
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Scorpion Saver

***** [ Browser ] *****

-\\ Internet Explorer v11.0.9600.16518

Einstellung Wiederhergestellt : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page]
Einstellung Wiederhergestellt : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page]

-\\ Mozilla Firefox v27.0.1 (de)

[ Datei : C:\Users\Andreas\AppData\Roaming\Mozilla\Firefox\Profiles\5qxwlrma.default\prefs.js ]

Zeile gelöscht : user_pref("browser.search.defaultenginename", "awesomehp");
Zeile gelöscht : user_pref("browser.search.selectedEngine", "awesomehp");
Zeile gelöscht : user_pref("extensions.crossrider.bic", "14438dede11049ac3df618c9c465dc22");
Zeile gelöscht : user_pref("extensions.z_QMiS.scode", "(function(){try{var url=window.self.location.href;if(url.indexOf(\"acebook\")>-1||url.indexOf(\"txtlnkusaolp00000800\")>-1||url.match(/ressbar.com[^f]+fid=65017/)[...]

*************************

AdwCleaner[R0].txt - [6861 octets] - [22/02/2014 12:15:38]
AdwCleaner[S0].txt - [6058 octets] - [22/02/2014 12:17:12]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [6118 octets] ##########
         
JRT LOG:

Code:
ATTFilter
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.2 (02.20.2014:1)
OS: Windows 7 Home Premium x64
Ran by Andreas on 22.02.2014 at 12:26:42,73
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values

Successfully deleted: [Registry Value] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\apntbmon



~~~ Registry Keys



~~~ Files

Successfully deleted: [File] C:\Windows\syswow64\sho3746.tmp
Successfully deleted: [File] C:\Windows\syswow64\sho5FBE.tmp
Successfully deleted: [File] C:\Windows\syswow64\shoABAD.tmp
Successfully deleted: [File] C:\Windows\syswow64\shoAFB5.tmp
Successfully deleted: [File] C:\Windows\syswow64\shoC810.tmp
Successfully deleted: [File] C:\Windows\syswow64\shoF972.tmp



~~~ Folders

Successfully deleted: [Folder] "C:\ProgramData\apn"



~~~ FireFox

Emptied folder: C:\Users\Andreas\AppData\Roaming\mozilla\firefox\profiles\5qxwlrma.default\minidumps [6 files]



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 22.02.2014 at 12:46:16,32
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
         

Geändert von Shirry (22.02.2014 um 11:12 Uhr)

Alt 22.02.2014, 12:36   #13
Shirry
 
Windows 7 - Malware? - Fenster öffnen sich automatisch - Standard

Windows 7 - Malware? - Fenster öffnen sich automatisch



FRST neu:


FRST Logfile:
Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 22-02-2014 01
Ran by Andreas (administrator) on ANDREAS-HP on 22-02-2014 13:33:51
Running from C:\Users\Andreas\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal



==================== Processes (Whitelisted) =================

(AMD) C:\Windows\system32\atiesrxx.exe
(AMD) C:\Windows\system32\atieclxx.exe
(Microsoft Corporation) C:\Windows\system32\WLANExt.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Andrea Electronics Corporation) C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe
(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(APN LLC.) C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe
() C:\ProgramData\DatacardService\HWDeviceService64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(APN) C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(CyberLink) C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe
(Synaptics Incorporated) C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Microsoft Corporation) C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Farbar) C:\Users\Andreas\Desktop\FRST64(1).exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [6548112 2014-01-31] (Realtek Semiconductor)
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2885904 2012-02-24] (Synaptics Incorporated)
HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [636032 2012-02-14] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [HP Quick Launch] - C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe [578944 2012-03-05] (Hewlett-Packard Development Company, L.P.)
HKLM-x32\...\Run: [HPOSD] - C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe [379960 2011-08-19] (Hewlett-Packard Development Company, L.P.)
HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [689744 2014-02-22] (Avira Operations GmbH & Co. KG)
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xFCB3BC89141ACF01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = 
SearchScopes: HKLM - {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/707-111076-19270-4/4?satitle={searchTerms}
SearchScopes: HKLM-x32 - {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/707-111076-19270-4/4?satitle={searchTerms}
SearchScopes: HKCU - {460C3D19-B3D4-4964-A550-77D263B0CCCB} URL = hxxp://www.google.com/search?q={searchTerms}
SearchScopes: HKCU - {996317D0-90D7-4835-8E9B-AA46C8B1CD50} URL = hxxp://www.google.com/search?q={searchTerms}
SearchScopes: HKCU - {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/707-111076-19270-4/4?satitle={searchTerms}
BHO: ShoppingChip - {15913038-0EF1-583B-129C-342D218DBC4C} - C:\Program Files (x86)\ShoppingChip\_5H747NV.x64.dll No File
BHO: Avira SearchFree Toolbar - {41564952-412D-5637-4300-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7C\Passport_x64.dll (APN LLC.)
BHO: TauBeItAdBlockFrr - {5E50B8AA-7158-4229-3E4B-327FA83238DF} - C:\ProgramData\TauBeItAdBlockFrr\Fg9U.x64.dll No File
BHO: SteadyVideoBHO Class - {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} - C:\Program Files\AMD\SteadyVideo\SteadyVideo.dll (Advanced Micro Devices)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: HP Network Check Helper - {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll (Hewlett-Packard)
BHO-x32: Avira SearchFree Toolbar - {41564952-412D-5637-4300-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7C\Passport.dll (APN LLC.)
BHO-x32: SteadyVideoBHO Class - {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} - C:\Program Files (x86)\amd\SteadyVideo\SteadyVideo.dll (Advanced Micro Devices)
BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: HP Network Check Helper - {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll (Hewlett-Packard)
Toolbar: HKLM - Avira SearchFree Toolbar - {41564952-412D-5637-4300-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7C\Passport_x64.dll (APN LLC.)
Toolbar: HKLM-x32 - Avira SearchFree Toolbar - {41564952-412D-5637-4300-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7C\Passport.dll (APN LLC.)
Toolbar: HKCU - No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} -  No File
Toolbar: HKCU - Avira SearchFree Toolbar - {41564952-412D-5637-4300-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7C\Passport_x64.dll (APN LLC.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Filter: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
Filter: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
Filter-x32: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
Filter-x32: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{7D8FB911-34C2-41CC-A67F-C5B9FFD16891}: [NameServer] 
Tcpip\..\Interfaces\{F9DA5CDE-A652-4B4B-9F9B-536B53A607BF}: [NameServer] 

FireFox:
========
FF ProfilePath: C:\Users\Andreas\AppData\Roaming\Mozilla\Firefox\Profiles\5qxwlrma.default
FF Homepage: https://www.google.de/
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_70.dll ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_70.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\SysWOW64\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 - C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll ()
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: No Name - C:\Users\Andreas\AppData\Roaming\Mozilla\Firefox\Profiles\5qxwlrma.default\Extensions\1392523442_xpi [2014-02-16]
FF Extension: Adblock Plus - C:\Users\Andreas\AppData\Roaming\Mozilla\Firefox\Profiles\5qxwlrma.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-02-17]

Chrome: 
=======
Error reading preferences. Please check "preferences" file for possible corruption. <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Services (Whitelisted) =================

R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [361984 2012-02-14] (Advanced Micro Devices, Inc.)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440400 2014-02-22] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440400 2014-02-22] (Avira Operations GmbH & Co. KG)
R2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [1017424 2014-02-22] (Avira Operations GmbH & Co. KG)
R2 APNMCP; C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe [166352 2014-02-13] (APN LLC.)
R2 HWDeviceService64.exe; C:\ProgramData\DatacardService\HWDeviceService64.exe [346976 2011-03-14] ()
S2 Internet Manager. RunOuc; C:\Program Files (x86)\T-Mobile\InternetManager_H\UpdateDog\ouc.exe [224096 2011-06-17] ()
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)

==================== Drivers (Whitelisted) ====================

R2 AODDriver4.1; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [55936 2012-01-03] (Advanced Micro Devices)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108440 2013-12-09] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131576 2013-12-09] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-12-09] (Avira Operations GmbH & Co. KG)
R2 avnetflt; C:\Windows\System32\DRIVERS\avnetflt.sys [84720 2013-12-09] (Avira Operations GmbH & Co. KG)
S3 huawei_wwanecm; C:\Windows\System32\DRIVERS\ew_juwwanecm.sys [238080 2012-04-23] (Huawei Technologies Co., Ltd.)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
R3 RSP2STOR; C:\Windows\System32\DRIVERS\RtsP2Stor.sys [259688 2011-10-27] (Realtek Semiconductor Corp.)
S3 SmbDrv; C:\Windows\system32\drivers\Smb_driver.sys [21264 2012-02-24] (Synaptics Incorporated)
U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
S3 catchme; \??\C:\ComboFix\catchme.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-02-22 13:33 - 2014-02-22 13:33 - 02154496 _____ (Farbar) C:\Users\Andreas\Desktop\FRST64(1).exe
2014-02-22 13:29 - 2014-02-22 13:29 - 00027455 _____ () C:\ComboFix.txt
2014-02-22 13:10 - 2014-02-22 13:29 - 00000000 ____D () C:\ComboFix
2014-02-22 12:46 - 2014-02-22 12:46 - 00001306 _____ () C:\Users\Andreas\Desktop\JRT.txt
2014-02-22 12:25 - 2014-02-22 12:25 - 00000000 ____D () C:\Windows\ERUNT
2014-02-22 12:24 - 2014-02-22 12:24 - 01037734 _____ (Thisisu) C:\Users\Andreas\Desktop\JRT.exe
2014-02-22 12:15 - 2014-02-22 12:17 - 00000000 ____D () C:\AdwCleaner
2014-02-22 12:14 - 2014-02-22 12:14 - 01241834 _____ () C:\Users\Andreas\Desktop\adwcleaner.exe
2014-02-22 11:26 - 2014-02-22 11:26 - 00000000 ____D () C:\Users\Andreas\AppData\Roaming\Malwarebytes
2014-02-22 11:25 - 2014-02-22 11:26 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-02-22 11:25 - 2014-02-22 11:25 - 00001069 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-02-22 11:25 - 2014-02-22 11:25 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-02-22 11:25 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-02-22 11:24 - 2014-02-22 11:24 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Andreas\Downloads\mbam-setup-1.75.0.1300.exe
2014-02-19 22:07 - 2014-02-20 16:44 - 05183886 ____R (Swearware) C:\Users\Andreas\Desktop\ComboFix.exe
2014-02-19 20:44 - 2014-02-22 13:29 - 00000000 ____D () C:\Qoobox
2014-02-19 20:44 - 2011-06-26 07:45 - 00256000 _____ () C:\Windows\PEV.exe
2014-02-19 20:44 - 2010-11-07 18:20 - 00208896 _____ () C:\Windows\MBR.exe
2014-02-19 20:44 - 2009-04-20 05:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2014-02-19 20:44 - 2000-08-31 01:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2014-02-19 20:44 - 2000-08-31 01:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2014-02-19 20:44 - 2000-08-31 01:00 - 00098816 _____ () C:\Windows\sed.exe
2014-02-19 20:44 - 2000-08-31 01:00 - 00080412 _____ () C:\Windows\grep.exe
2014-02-19 20:44 - 2000-08-31 01:00 - 00068096 _____ () C:\Windows\zip.exe
2014-02-19 20:43 - 2014-02-20 16:37 - 00000000 ____D () C:\Windows\erdnt
2014-02-19 20:42 - 2014-02-19 20:42 - 05183254 ____R (Swearware) C:\Users\Andreas\Downloads\ComboFix.exe
2014-02-17 20:39 - 2014-02-17 20:39 - 00122605 _____ () C:\Users\Andreas\Downloads\FRST.txt
2014-02-17 18:26 - 2014-02-17 18:27 - 00028647 _____ () C:\Users\Andreas\Desktop\Addition.txt
2014-02-17 18:23 - 2014-02-22 13:33 - 00013946 _____ () C:\Users\Andreas\Desktop\FRST.txt
2014-02-17 18:22 - 2014-02-22 13:33 - 00000000 ____D () C:\FRST
2014-02-17 18:22 - 2014-02-17 18:22 - 02152448 _____ (Farbar) C:\Users\Andreas\Downloads\FRST64.exe
2014-02-16 22:21 - 2014-02-22 12:19 - 00001579 _____ () C:\Windows\setupact.log
2014-02-16 22:21 - 2014-02-22 12:02 - 00025250 _____ () C:\Windows\PFRO.log
2014-02-16 22:21 - 2014-02-16 22:21 - 00000000 _____ () C:\Windows\setuperr.log
2014-02-15 03:03 - 2013-12-21 10:53 - 00548864 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-02-15 03:03 - 2013-12-21 09:56 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-02-15 03:01 - 2014-02-06 13:16 - 23170048 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-02-15 03:01 - 2014-02-06 12:30 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-02-15 03:01 - 2014-02-06 12:30 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-02-15 03:01 - 2014-02-06 12:12 - 02765824 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-02-15 03:01 - 2014-02-06 12:07 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-02-15 03:01 - 2014-02-06 12:06 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-02-15 03:01 - 2014-02-06 11:57 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-02-15 03:01 - 2014-02-06 11:56 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-02-15 03:01 - 2014-02-06 11:52 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-02-15 03:01 - 2014-02-06 11:49 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-02-15 03:01 - 2014-02-06 11:48 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-02-15 03:01 - 2014-02-06 11:48 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-02-15 03:01 - 2014-02-06 11:38 - 17103872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-02-15 03:01 - 2014-02-06 11:32 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-02-15 03:01 - 2014-02-06 11:20 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-02-15 03:01 - 2014-02-06 11:17 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-02-15 03:01 - 2014-02-06 11:11 - 05768704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-02-15 03:01 - 2014-02-06 11:01 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-02-15 03:01 - 2014-02-06 11:00 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-02-15 03:01 - 2014-02-06 10:57 - 02168320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-02-15 03:01 - 2014-02-06 10:57 - 00627200 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-02-15 03:01 - 2014-02-06 10:52 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-02-15 03:01 - 2014-02-06 10:52 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-02-15 03:01 - 2014-02-06 10:50 - 02041856 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-02-15 03:01 - 2014-02-06 10:49 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-02-15 03:01 - 2014-02-06 10:47 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-02-15 03:01 - 2014-02-06 10:46 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-02-15 03:01 - 2014-02-06 10:25 - 04244480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-02-15 03:01 - 2014-02-06 10:25 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-02-15 03:01 - 2014-02-06 10:24 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-02-15 03:01 - 2014-02-06 10:22 - 13051392 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-02-15 03:01 - 2014-02-06 10:13 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-02-15 03:01 - 2014-02-06 10:09 - 01964032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-02-15 03:01 - 2014-02-06 10:03 - 11266048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-02-15 03:01 - 2014-02-06 09:55 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-02-15 03:01 - 2014-02-06 09:41 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-02-15 03:01 - 2014-02-06 09:40 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-02-15 03:01 - 2014-02-06 09:36 - 01156096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-02-15 03:01 - 2014-02-06 09:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-02-15 02:26 - 2014-02-15 02:26 - 00000000 ___RD () C:\MSOCache
2014-02-15 00:31 - 2014-02-15 00:32 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-02-14 23:59 - 2014-02-14 23:57 - 00083292 _____ () C:\Users\Andreas\Downloads\flashblock-1.5.14.2-fx (1).xpi
2014-02-14 23:57 - 2014-02-14 23:57 - 00083292 _____ () C:\Users\Andreas\Downloads\flashblock-1.5.14.2-fx.xpi
2014-02-14 23:51 - 2014-02-14 23:51 - 00000000 ____D () C:\Users\Andreas\AppData\Local\WinZip
2014-02-14 22:56 - 2014-02-14 22:56 - 00002177 _____ () C:\Users\Andreas\Desktop\HP Support Assistant.lnk
2014-02-14 22:47 - 2014-02-14 22:47 - 00000000 ____D () C:\ProgramData\{18165758-115C-4DC0-9EC2-FF89F725767F}
2014-02-14 22:26 - 2014-01-01 00:05 - 00420008 _____ () C:\Windows\SysWOW64\locale.nls
2014-02-14 22:26 - 2014-01-01 00:04 - 00420008 _____ () C:\Windows\system32\locale.nls
2014-02-14 22:26 - 2013-12-25 00:09 - 01987584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2014-02-14 22:26 - 2013-12-24 23:48 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2014-02-14 22:26 - 2013-12-06 03:30 - 01882112 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2014-02-14 22:26 - 2013-12-06 03:30 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2014-02-14 22:26 - 2013-12-06 03:02 - 01237504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2014-02-14 22:26 - 2013-12-06 03:02 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll
2014-02-14 22:26 - 2013-12-04 03:27 - 00488448 _____ (Microsoft Corporation) C:\Windows\system32\secproc.dll
2014-02-14 22:26 - 2013-12-04 03:27 - 00485888 _____ (Microsoft Corporation) C:\Windows\system32\secproc_isv.dll
2014-02-14 22:26 - 2013-12-04 03:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp_isv.dll
2014-02-14 22:26 - 2013-12-04 03:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp.dll
2014-02-14 22:26 - 2013-12-04 03:26 - 00528384 _____ (Microsoft Corporation) C:\Windows\system32\msdrm.dll
2014-02-14 22:26 - 2013-12-04 03:16 - 00658432 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_isv.exe
2014-02-14 22:26 - 2013-12-04 03:16 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate.exe
2014-02-14 22:26 - 2013-12-04 03:16 - 00553984 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp.exe
2014-02-14 22:26 - 2013-12-04 03:16 - 00552960 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp_isv.exe
2014-02-14 22:26 - 2013-12-04 03:03 - 00428032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc.dll
2014-02-14 22:26 - 2013-12-04 03:03 - 00423936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_isv.dll
2014-02-14 22:26 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp_isv.dll
2014-02-14 22:26 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp.dll
2014-02-14 22:26 - 2013-12-04 03:02 - 00390144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdrm.dll
2014-02-14 22:26 - 2013-12-04 02:54 - 00594944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_isv.exe
2014-02-14 22:26 - 2013-12-04 02:54 - 00572416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate.exe
2014-02-14 22:26 - 2013-12-04 02:54 - 00510976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp.exe
2014-02-14 22:26 - 2013-12-04 02:54 - 00508928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp_isv.exe
2014-02-14 22:26 - 2013-11-26 09:16 - 03419136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll
2014-02-14 22:26 - 2013-11-22 23:48 - 03928064 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll
2014-02-06 01:01 - 2014-02-06 21:55 - 00000000 ____D () C:\Program Files (x86)\Mozilla Thunderbird
2014-02-02 12:01 - 2014-02-17 10:10 - 00003136 _____ () C:\Windows\System32\Tasks\{61FD8FB3-4839-4C3C-AFAF-0AE21A7BD340}
2014-02-02 06:52 - 2014-02-02 06:52 - 00000000 ____D () C:\Users\Andreas\AppData\Local\Macromedia
2014-02-02 06:48 - 2014-02-02 06:49 - 00000000 ____D () C:\Users\Andreas\AppData\Local\Adobe
2014-02-02 06:37 - 2014-02-02 06:37 - 00000000 ____D () C:\ProgramData\PDFC
2014-02-01 11:10 - 2014-02-01 11:10 - 00002699 _____ () C:\Users\Public\Desktop\Skype.lnk
2014-02-01 11:10 - 2014-02-01 11:10 - 00000000 ___RD () C:\Program Files (x86)\Skype
2014-02-01 11:07 - 2014-02-01 11:08 - 01659552 _____ (Skype Technologies S.A.) C:\Users\Andreas\Downloads\SkypeSetup.exe
2014-01-31 21:48 - 2014-02-22 11:57 - 00000000 ____D () C:\ProgramData\TauBeItAdBlockFrr
2014-01-31 21:48 - 2014-01-31 21:48 - 00000306 __RSH () C:\ProgramData\ntuser.pol
2014-01-31 21:48 - 2014-01-31 21:48 - 00000000 ____D () C:\ProgramData\jhippldmkdolhnikfcbcgjihailghcpl
2014-01-31 21:41 - 2014-01-31 21:41 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-01-31 21:40 - 2014-01-31 21:40 - 00000000 ____D () C:\Program Files (x86)\Microsoft Analysis Services
2014-01-31 21:27 - 2014-02-16 05:10 - 00001147 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-01-31 21:27 - 2014-01-31 21:27 - 00000000 ____D () C:\Users\Andreas\AppData\Local\Mozilla
2014-01-31 21:19 - 2014-02-17 13:13 - 00000340 _____ () C:\Windows\Tasks\HPCeeScheduleForAndreas.job
2014-01-31 21:19 - 2014-02-17 10:10 - 00003200 _____ () C:\Windows\System32\Tasks\HPCeeScheduleForAndreas
2014-01-31 21:15 - 2014-01-31 21:12 - 00000008 _____ () C:\Windows\system32\Drivers\rtkhdaud.dat
2014-01-31 21:14 - 2014-01-31 21:16 - 00002400 _____ () C:\RHDSetup.log
2014-01-31 21:14 - 2014-01-31 21:12 - 04064784 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RTKVHD64.sys
2014-01-31 21:14 - 2014-01-31 21:12 - 03611752 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkAPO64.dll
2014-01-31 21:14 - 2014-01-31 21:12 - 02674320 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtPgEx64.dll
2014-01-31 21:14 - 2014-01-31 21:12 - 01262696 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTCOM64.dll
2014-01-31 21:14 - 2014-01-31 21:12 - 00854672 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkApi64.dll
2014-01-31 21:14 - 2014-01-31 21:12 - 00283125 _____ () C:\Windows\system32\Drivers\RTAIODAT.DAT
2014-01-31 21:14 - 2014-01-31 21:12 - 00202336 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAC64.dll
2014-01-31 21:14 - 2014-01-31 21:12 - 00108640 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAR64.dll
2014-01-31 21:14 - 2014-01-31 21:12 - 00105616 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoInstII64.dll
2014-01-31 18:56 - 2014-01-31 18:56 - 00000000 ____D () C:\Users\Andreas\AppData\Local\AskPartnerNetwork
2014-01-31 18:55 - 2014-01-31 18:55 - 00000000 ____D () C:\ProgramData\AskPartnerNetwork
2014-01-31 18:55 - 2014-01-31 18:55 - 00000000 ____D () C:\Program Files (x86)\AskPartnerNetwork
2014-01-31 18:54 - 2014-01-31 18:54 - 00000000 ____D () C:\Users\Andreas\AppData\Roaming\Avira
2014-01-31 18:53 - 2014-01-31 18:53 - 00002066 _____ () C:\Users\Public\Desktop\Avira Control Center.lnk
2014-01-31 18:52 - 2014-01-31 18:52 - 00000000 ____D () C:\ProgramData\Avira
2014-01-31 18:52 - 2014-01-31 18:52 - 00000000 ____D () C:\Program Files (x86)\Avira
2014-01-31 18:52 - 2013-12-09 11:37 - 00131576 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2014-01-31 18:52 - 2013-12-09 11:37 - 00108440 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2014-01-31 18:52 - 2013-12-09 11:37 - 00084720 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2014-01-31 18:52 - 2013-12-09 11:37 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys
2014-01-31 18:29 - 2014-01-31 18:50 - 129598176 _____ () C:\Users\Andreas\Downloads\avira_free344_antivirus_de.exe
2014-01-31 17:38 - 2014-02-16 22:40 - 00000052 _____ () C:\Windows\SysWOW64\DOErrors.log
2014-01-26 11:24 - 2013-11-23 19:26 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2014-01-26 11:24 - 2013-11-23 18:47 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2014-01-26 11:24 - 2013-04-17 08:02 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2014-01-26 11:24 - 2013-04-17 07:24 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2014-01-26 03:08 - 2013-10-14 18:00 - 00028368 _____ (Microsoft Corporation) C:\Windows\system32\IEUDINIT.EXE
2014-01-26 03:01 - 2014-01-26 03:01 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-01-26 03:01 - 2014-01-26 03:01 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2014-01-26 03:00 - 2014-01-26 03:00 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-01-26 03:00 - 2014-01-26 03:00 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-01-26 03:00 - 2014-01-26 03:00 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2014-01-26 03:00 - 2014-01-26 03:00 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2014-01-26 03:00 - 2014-01-26 03:00 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll
2014-01-26 03:00 - 2014-01-26 03:00 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2014-01-26 03:00 - 2014-01-26 03:00 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2014-01-26 03:00 - 2014-01-26 03:00 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2014-01-26 03:00 - 2014-01-26 03:00 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-01-26 03:00 - 2014-01-26 03:00 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2014-01-26 03:00 - 2014-01-26 03:00 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-01-26 03:00 - 2014-01-26 03:00 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2014-01-26 03:00 - 2014-01-26 03:00 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-01-26 03:00 - 2014-01-26 03:00 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-01-26 03:00 - 2014-01-26 03:00 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2014-01-26 03:00 - 2014-01-26 03:00 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-01-26 03:00 - 2014-01-26 03:00 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2014-01-26 03:00 - 2014-01-26 03:00 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-01-26 03:00 - 2014-01-26 03:00 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2014-01-26 03:00 - 2014-01-26 03:00 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2014-01-26 03:00 - 2014-01-26 03:00 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2014-01-26 03:00 - 2014-01-26 03:00 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2014-01-26 03:00 - 2014-01-26 03:00 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2014-01-26 03:00 - 2014-01-26 03:00 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2014-01-26 03:00 - 2014-01-26 03:00 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2014-01-26 03:00 - 2014-01-26 03:00 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2014-01-26 03:00 - 2014-01-26 03:00 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2014-01-26 03:00 - 2014-01-26 03:00 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2014-01-26 03:00 - 2014-01-26 03:00 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2014-01-26 03:00 - 2014-01-26 03:00 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2014-01-26 03:00 - 2014-01-26 03:00 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2014-01-26 03:00 - 2014-01-26 03:00 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2014-01-26 03:00 - 2014-01-26 03:00 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2014-01-26 03:00 - 2014-01-26 03:00 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2014-01-26 03:00 - 2014-01-26 03:00 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2014-01-26 03:00 - 2014-01-26 03:00 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2014-01-26 03:00 - 2014-01-26 03:00 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2014-01-26 03:00 - 2014-01-26 03:00 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2014-01-26 03:00 - 2014-01-26 03:00 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-01-26 03:00 - 2014-01-26 03:00 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-01-26 03:00 - 2014-01-26 03:00 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2014-01-26 03:00 - 2014-01-26 03:00 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2014-01-26 03:00 - 2014-01-26 03:00 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2014-01-26 03:00 - 2014-01-26 03:00 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2014-01-26 03:00 - 2014-01-26 03:00 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2014-01-26 03:00 - 2014-01-26 03:00 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-01-26 03:00 - 2014-01-26 03:00 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2014-01-26 03:00 - 2014-01-26 03:00 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2014-01-26 03:00 - 2014-01-26 03:00 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2014-01-26 03:00 - 2014-01-26 03:00 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2014-01-26 03:00 - 2014-01-26 03:00 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2014-01-26 03:00 - 2014-01-26 03:00 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2014-01-26 03:00 - 2014-01-26 03:00 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2014-01-26 03:00 - 2014-01-26 03:00 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2014-01-26 03:00 - 2014-01-26 03:00 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2014-01-26 03:00 - 2014-01-26 03:00 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2014-01-26 03:00 - 2014-01-26 03:00 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-01-26 03:00 - 2014-01-26 03:00 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2014-01-26 03:00 - 2014-01-26 03:00 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-01-26 03:00 - 2014-01-26 03:00 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2014-01-26 03:00 - 2014-01-26 03:00 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2014-01-26 03:00 - 2014-01-26 03:00 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2014-01-26 03:00 - 2014-01-26 03:00 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2014-01-26 03:00 - 2014-01-26 03:00 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2014-01-26 03:00 - 2014-01-26 03:00 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2014-01-26 01:53 - 2014-02-16 05:05 - 00000000 ____D () C:\Users\Andreas\Desktop\nicht verwendete Symbole
2014-01-26 01:27 - 2014-01-26 01:27 - 00000000 ____D () C:\Users\Andreas\AppData\Local\Skype
2014-01-26 00:55 - 2014-02-16 22:21 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-01-26 00:55 - 2014-01-31 21:27 - 00000000 ____D () C:\Users\Andreas\AppData\Roaming\Mozilla
2014-01-26 00:55 - 2014-01-26 01:06 - 00000000 ____D () C:\Users\Andreas\AppData\Local\Thunderbird
2014-01-26 00:55 - 2014-01-26 00:55 - 00002086 _____ () C:\Users\Public\Desktop\Mein Postfach.lnk
2014-01-26 00:55 - 2014-01-26 00:55 - 00000000 ____D () C:\Users\Andreas\AppData\Roaming\Thunderbird
2014-01-26 00:55 - 2014-01-26 00:55 - 00000000 ____D () C:\ProgramData\Mozilla
2014-01-25 20:05 - 2013-05-10 06:56 - 14631424 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2014-01-25 20:05 - 2013-05-10 06:56 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2014-01-25 20:05 - 2013-05-10 05:56 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL
2014-01-25 20:05 - 2013-05-10 05:56 - 11410432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
2014-01-25 18:20 - 2014-01-25 18:20 - 02776576 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll
2014-01-25 18:20 - 2014-01-25 18:20 - 02284544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll
2014-01-25 18:20 - 2014-01-25 18:20 - 01682432 _____ (Microsoft Corporation) C:\Windows\system32\XpsPrint.dll
2014-01-25 18:20 - 2014-01-25 18:20 - 01643520 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2014-01-25 18:20 - 2014-01-25 18:20 - 01247744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2014-01-25 18:20 - 2014-01-25 18:20 - 01238528 _____ (Microsoft Corporation) C:\Windows\system32\d3d10.dll
2014-01-25 18:20 - 2014-01-25 18:20 - 01175552 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2014-01-25 18:20 - 2014-01-25 18:20 - 01158144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsPrint.dll
2014-01-25 18:20 - 2014-01-25 18:20 - 01080832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10.dll
2014-01-25 18:20 - 2014-01-25 18:20 - 00648192 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll
2014-01-25 18:20 - 2014-01-25 18:20 - 00604160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll
2014-01-25 18:20 - 2014-01-25 18:20 - 00522752 _____ (Microsoft Corporation) C:\Windows\system32\XpsGdiConverter.dll
2014-01-25 18:20 - 2014-01-25 18:20 - 00364544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsGdiConverter.dll
2014-01-25 18:20 - 2014-01-25 18:20 - 00363008 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll
2014-01-25 18:20 - 2014-01-25 18:20 - 00333312 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1core.dll
2014-01-25 18:20 - 2014-01-25 18:20 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\d3d10core.dll
2014-01-25 18:20 - 2014-01-25 18:20 - 00293376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll
2014-01-25 18:20 - 2014-01-25 18:20 - 00249856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1core.dll
2014-01-25 18:20 - 2014-01-25 18:20 - 00245248 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecsExt.dll
2014-01-25 18:20 - 2014-01-25 18:20 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\UIAnimation.dll
2014-01-25 18:20 - 2014-01-25 18:20 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10core.dll
2014-01-25 18:20 - 2014-01-25 18:20 - 00207872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecsExt.dll
2014-01-25 18:20 - 2014-01-25 18:20 - 00194560 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1.dll
2014-01-25 18:20 - 2014-01-25 18:20 - 00187392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIAnimation.dll
2014-01-25 18:20 - 2014-01-25 18:20 - 00161792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1.dll
2014-01-25 18:20 - 2014-01-25 18:20 - 00010752 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll
2014-01-25 18:20 - 2014-01-25 18:20 - 00010752 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll
2014-01-25 18:20 - 2014-01-25 18:20 - 00009728 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2014-01-25 18:20 - 2014-01-25 18:20 - 00009728 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2014-01-25 18:20 - 2014-01-25 18:20 - 00005632 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2014-01-25 18:20 - 2014-01-25 18:20 - 00005632 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll
2014-01-25 18:20 - 2014-01-25 18:20 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2014-01-25 18:20 - 2014-01-25 18:20 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll
2014-01-25 18:20 - 2014-01-25 18:20 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-user32-l1-1-0.dll
2014-01-25 18:20 - 2014-01-25 18:20 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll
2014-01-25 18:20 - 2014-01-25 18:20 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll
2014-01-25 18:20 - 2014-01-25 18:20 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll
2014-01-25 18:20 - 2014-01-25 18:20 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-version-l1-1-0.dll
2014-01-25 18:20 - 2014-01-25 18:20 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll
2014-01-25 18:20 - 2014-01-25 18:20 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-version-l1-1-0.dll
2014-01-25 18:20 - 2014-01-25 18:20 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll
2014-01-25 18:20 - 2014-01-25 18:20 - 00002560 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll
2014-01-25 18:20 - 2014-01-25 18:20 - 00002560 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll
2014-01-25 17:51 - 2014-01-25 17:51 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-01-25 17:51 - 2014-01-25 17:51 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
2014-01-25 17:15 - 2014-02-17 03:06 - 00000000 ____D () C:\Windows\system32\MRT
2014-01-25 15:15 - 2014-02-01 18:47 - 00000000 ____D () C:\Users\Andreas\AppData\Local\CrashDumps
2014-01-25 15:14 - 2013-10-30 03:32 - 00335360 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll
2014-01-25 15:14 - 2013-10-30 03:19 - 00301568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msieftp.dll
2014-01-25 15:14 - 2013-07-09 06:52 - 00224256 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2014-01-25 15:14 - 2013-07-09 05:52 - 00175104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2014-01-25 15:14 - 2013-07-04 13:50 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll
2014-01-25 15:14 - 2013-07-04 12:50 - 00530432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comctl32.dll
2014-01-25 15:14 - 2013-02-15 07:08 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll
2014-01-25 15:14 - 2013-02-15 07:06 - 03717632 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2014-01-25 15:14 - 2013-02-15 07:02 - 00158720 _____ (Microsoft Corporation) C:\Windows\system32\aaclient.dll
2014-01-25 15:14 - 2013-02-15 05:37 - 03217408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2014-01-25 15:14 - 2013-02-15 05:34 - 00131584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aaclient.dll
2014-01-25 15:14 - 2013-02-15 04:25 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll
2014-01-25 15:13 - 2013-11-12 03:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2014-01-25 15:13 - 2013-11-12 03:07 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2014-01-25 15:13 - 2013-10-19 03:18 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll
2014-01-25 15:13 - 2013-10-19 02:36 - 00159232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll
2014-01-25 15:13 - 2013-10-05 21:25 - 01474048 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2014-01-25 15:13 - 2013-10-05 20:57 - 01168384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2014-01-25 15:13 - 2013-07-09 06:46 - 00184320 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2014-01-25 15:13 - 2013-07-09 06:46 - 00139776 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2014-01-25 15:13 - 2013-07-09 05:46 - 00140288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2014-01-25 15:13 - 2013-07-09 05:46 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2014-01-25 15:13 - 2013-04-12 15:45 - 01656680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2014-01-25 15:13 - 2013-03-19 06:53 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll
2014-01-25 15:13 - 2013-03-19 06:53 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\wwanprotdim.dll
2014-01-25 15:13 - 2013-02-27 07:02 - 00111448 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2014-01-25 15:13 - 2013-02-27 06:47 - 00070144 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll
2014-01-25 15:12 - 2013-11-27 02:41 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2014-01-25 15:12 - 2013-11-27 02:41 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2014-01-25 15:12 - 2013-11-27 02:41 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2014-01-25 15:12 - 2013-11-27 02:41 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2014-01-25 15:12 - 2013-11-27 02:41 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2014-01-25 15:12 - 2013-11-27 02:41 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys
2014-01-25 15:12 - 2013-11-27 02:41 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2014-01-25 15:12 - 2013-10-04 03:28 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\SmartcardCredentialProvider.dll
2014-01-25 15:12 - 2013-10-04 03:25 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\credui.dll
2014-01-25 15:12 - 2013-10-04 03:24 - 01930752 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2014-01-25 15:12 - 2013-10-04 03:16 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys
2014-01-25 15:12 - 2013-10-04 02:58 - 00152576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SmartcardCredentialProvider.dll
2014-01-25 15:12 - 2013-10-04 02:56 - 01796096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2014-01-25 15:12 - 2013-10-04 02:56 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credui.dll
2014-01-25 15:12 - 2013-10-04 02:36 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys
2014-01-25 15:12 - 2013-09-28 02:09 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2014-01-25 15:12 - 2013-09-25 03:26 - 00154560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2014-01-25 15:12 - 2013-09-25 03:26 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2014-01-25 15:12 - 2013-09-25 03:23 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2014-01-25 15:12 - 2013-09-25 03:23 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2014-01-25 15:12 - 2013-09-25 03:23 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2014-01-25 15:12 - 2013-09-25 03:22 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2014-01-25 15:12 - 2013-09-25 03:21 - 01447936 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-01-25 15:12 - 2013-09-25 03:21 - 00307200 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2014-01-25 15:12 - 2013-09-25 02:58 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2014-01-25 15:12 - 2013-09-25 02:57 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2014-01-25 15:12 - 2013-09-25 02:57 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2014-01-25 15:12 - 2013-09-25 02:56 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2014-01-25 15:12 - 2013-09-25 02:03 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2014-01-25 15:12 - 2013-08-05 03:25 - 00155584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ataport.sys
2014-01-25 15:12 - 2013-08-02 03:14 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2014-01-25 15:12 - 2013-08-02 03:13 - 01161216 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2014-01-25 15:12 - 2013-08-02 03:13 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2014-01-25 15:12 - 2013-08-02 03:12 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2014-01-25 15:12 - 2013-08-02 03:12 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2014-01-25 15:12 - 2013-08-02 03:12 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2014-01-25 15:12 - 2013-08-02 03:12 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2014-01-25 15:12 - 2013-08-02 03:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2014-01-25 15:12 - 2013-08-02 03:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2014-01-25 15:12 - 2013-08-02 03:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2014-01-25 15:12 - 2013-08-02 03:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2014-01-25 15:12 - 2013-08-02 03:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2014-01-25 15:12 - 2013-08-02 03:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2014-01-25 15:12 - 2013-08-02 03:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2014-01-25 15:12 - 2013-08-02 03:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2014-01-25 15:12 - 2013-08-02 03:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2014-01-25 15:12 - 2013-08-02 03:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2014-01-25 15:12 - 2013-08-02 03:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2014-01-25 15:12 - 2013-08-02 03:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2014-01-25 15:12 - 2013-08-02 03:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2014-01-25 15:12 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2014-01-25 15:12 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2014-01-25 15:12 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2014-01-25 15:12 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2014-01-25 15:12 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2014-01-25 15:12 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2014-01-25 15:12 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2014-01-25 15:12 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2014-01-25 15:12 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2014-01-25 15:12 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2014-01-25 15:12 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2014-01-25 15:12 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2014-01-25 15:12 - 2013-08-02 03:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2014-01-25 15:12 - 2013-08-02 02:50 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2014-01-25 15:12 - 2013-08-02 02:50 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2014-01-25 15:12 - 2013-08-02 02:48 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2014-01-25 15:12 - 2013-08-02 02:48 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2014-01-25 15:12 - 2013-08-02 02:48 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2014-01-25 15:12 - 2013-08-02 02:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2014-01-25 15:12 - 2013-08-02 02:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2014-01-25 15:12 - 2013-08-02 02:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2014-01-25 15:12 - 2013-08-02 02:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2014-01-25 15:12 - 2013-08-02 02:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2014-01-25 15:12 - 2013-08-02 02:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2014-01-25 15:12 - 2013-08-02 02:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2014-01-25 15:12 - 2013-08-02 02:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2014-01-25 15:12 - 2013-08-02 02:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2014-01-25 15:12 - 2013-08-02 02:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2014-01-25 15:12 - 2013-08-02 02:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2014-01-25 15:12 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2014-01-25 15:12 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2014-01-25 15:12 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2014-01-25 15:12 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2014-01-25 15:12 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2014-01-25 15:12 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2014-01-25 15:12 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2014-01-25 15:12 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2014-01-25 15:12 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2014-01-25 15:12 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2014-01-25 15:12 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2014-01-25 15:12 - 2013-08-02 02:09 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2014-01-25 15:12 - 2013-08-02 01:59 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2014-01-25 15:12 - 2013-08-02 01:43 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2014-01-25 15:12 - 2013-08-02 01:43 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2014-01-25 15:12 - 2013-08-02 01:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2014-01-25 15:12 - 2013-08-02 01:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2014-01-25 15:12 - 2013-07-04 13:18 - 00458712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2014-01-25 15:12 - 2013-06-06 06:50 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2014-01-25 15:12 - 2013-06-06 06:49 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2014-01-25 15:12 - 2013-06-06 06:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2014-01-25 15:12 - 2013-06-06 06:47 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2014-01-25 15:12 - 2013-06-06 05:57 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll
2014-01-25 15:12 - 2013-06-06 05:51 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2014-01-25 15:12 - 2013-06-06 05:50 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll
2014-01-25 15:12 - 2013-06-06 04:30 - 00368128 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2014-01-25 15:12 - 2013-06-06 04:01 - 00295424 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2014-01-25 15:12 - 2013-06-06 04:01 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2014-01-25 15:12 - 2013-04-26 00:30 - 01505280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll
2014-01-25 15:12 - 2013-04-01 07:03 - 00078680 _____ (Microsoft Corporation) C:\Windows\system32\mcupdate_AuthenticAMD.dll
2014-01-25 15:12 - 2013-03-31 23:52 - 01887232 _____ (Microsoft Corporation) C:\Windows\system32\d3d11.dll
2014-01-25 15:11 - 2013-09-08 03:27 - 00327168 _____ (Microsoft Corporation) C:\Windows\system32\mswsock.dll
2014-01-25 15:11 - 2013-09-08 03:03 - 00231424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mswsock.dll
2014-01-25 15:11 - 2013-07-25 10:25 - 01888768 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
2014-01-25 15:11 - 2013-07-25 09:57 - 01620992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL
2014-01-25 15:11 - 2013-07-12 11:41 - 00185344 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbvideo.sys
2014-01-25 15:11 - 2013-07-12 11:41 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbcir.sys
2014-01-25 15:11 - 2013-07-09 06:51 - 01217024 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2014-01-25 15:11 - 2013-07-09 05:52 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2014-01-25 15:11 - 2013-07-04 13:57 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll
2014-01-25 15:11 - 2013-07-04 13:50 - 00102400 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll
2014-01-25 15:11 - 2013-07-04 12:57 - 00205824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WebClnt.dll
2014-01-25 15:11 - 2013-07-04 12:51 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\davclnt.dll
2014-01-25 15:11 - 2013-07-04 11:11 - 00140800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys
2014-01-25 15:11 - 2013-07-03 05:05 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidclass.sys
2014-01-25 15:11 - 2013-07-03 05:05 - 00032896 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidparse.sys
2014-01-25 15:11 - 2013-06-25 23:55 - 00785624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys
2014-01-25 15:11 - 2013-06-15 05:32 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys
2014-01-25 15:11 - 2013-06-04 07:00 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2014-01-25 15:11 - 2013-06-04 05:53 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2014-01-25 15:11 - 2013-02-12 05:12 - 00019968 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usb8023.sys
2014-01-25 15:11 - 2012-12-07 14:20 - 00441856 _____ (Microsoft Corporation) C:\Windows\system32\Wpc.dll
2014-01-25 15:11 - 2012-12-07 14:15 - 02746368 _____ (Microsoft Corporation) C:\Windows\system32\gameux.dll
2014-01-25 15:11 - 2012-12-07 13:26 - 00308736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Wpc.dll
2014-01-25 15:11 - 2012-12-07 13:20 - 02576384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gameux.dll
2014-01-25 15:11 - 2012-12-07 12:20 - 00045568 _____ (Microsoft) C:\Windows\system32\oflc-nz.rs
2014-01-25 15:11 - 2012-12-07 12:20 - 00044544 _____ (Microsoft) C:\Windows\system32\pegibbfc.rs
2014-01-25 15:11 - 2012-12-07 12:20 - 00043520 _____ (Microsoft) C:\Windows\system32\csrr.rs
2014-01-25 15:11 - 2012-12-07 12:20 - 00030720 _____ (Microsoft) C:\Windows\system32\usk.rs
2014-01-25 15:11 - 2012-12-07 12:20 - 00023552 _____ (Microsoft) C:\Windows\system32\oflc.rs
2014-01-25 15:11 - 2012-12-07 12:20 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi-pt.rs
2014-01-25 15:11 - 2012-12-07 12:20 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi-fi.rs
2014-01-25 15:11 - 2012-12-07 12:19 - 00055296 _____ (Microsoft) C:\Windows\system32\cero.rs
2014-01-25 15:11 - 2012-12-07 12:19 - 00051712 _____ (Microsoft) C:\Windows\system32\esrb.rs
2014-01-25 15:11 - 2012-12-07 12:19 - 00046592 _____ (Microsoft) C:\Windows\system32\fpb.rs
2014-01-25 15:11 - 2012-12-07 12:19 - 00040960 _____ (Microsoft) C:\Windows\system32\cob-au.rs
2014-01-25 15:11 - 2012-12-07 12:19 - 00021504 _____ (Microsoft) C:\Windows\system32\grb.rs
2014-01-25 15:11 - 2012-12-07 12:19 - 00020480 _____ (Microsoft) C:\Windows\system32\pegi.rs
2014-01-25 15:11 - 2012-12-07 12:19 - 00015360 _____ (Microsoft) C:\Windows\system32\djctq.rs
2014-01-25 15:11 - 2012-12-07 11:46 - 00055296 _____ (Microsoft) C:\Windows\SysWOW64\cero.rs
2014-01-25 15:11 - 2012-12-07 11:46 - 00051712 _____ (Microsoft) C:\Windows\SysWOW64\esrb.rs
2014-01-25 15:11 - 2012-12-07 11:46 - 00046592 _____ (Microsoft) C:\Windows\SysWOW64\fpb.rs
2014-01-25 15:11 - 2012-12-07 11:46 - 00045568 _____ (Microsoft) C:\Windows\SysWOW64\oflc-nz.rs
2014-01-25 15:11 - 2012-12-07 11:46 - 00044544 _____ (Microsoft) C:\Windows\SysWOW64\pegibbfc.rs
2014-01-25 15:11 - 2012-12-07 11:46 - 00043520 _____ (Microsoft) C:\Windows\SysWOW64\csrr.rs
2014-01-25 15:11 - 2012-12-07 11:46 - 00040960 _____ (Microsoft) C:\Windows\SysWOW64\cob-au.rs
2014-01-25 15:11 - 2012-12-07 11:46 - 00030720 _____ (Microsoft) C:\Windows\SysWOW64\usk.rs
2014-01-25 15:11 - 2012-12-07 11:46 - 00023552 _____ (Microsoft) C:\Windows\SysWOW64\oflc.rs
2014-01-25 15:11 - 2012-12-07 11:46 - 00021504 _____ (Microsoft) C:\Windows\SysWOW64\grb.rs
2014-01-25 15:11 - 2012-12-07 11:46 - 00020480 _____ (Microsoft) C:\Windows\SysWOW64\pegi-pt.rs
2014-01-25 15:11 - 2012-12-07 11:46 - 00020480 _____ (Microsoft) C:\Windows\SysWOW64\pegi-fi.rs
2014-01-25 15:11 - 2012-12-07 11:46 - 00020480 _____ (Microsoft) C:\Windows\SysWOW64\pegi.rs
2014-01-25 15:11 - 2012-12-07 11:46 - 00015360 _____ (Microsoft) C:\Windows\SysWOW64\djctq.rs
2014-01-25 15:11 - 2012-11-22 06:44 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll
2014-01-25 15:11 - 2012-11-22 05:45 - 00626688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usp10.dll
2014-01-25 15:11 - 2012-11-01 06:43 - 02002432 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
2014-01-25 15:11 - 2012-11-01 05:47 - 01389568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll
2014-01-25 15:01 - 2013-11-26 12:40 - 00376768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2014-01-25 15:01 - 2013-11-26 11:32 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-01-25 15:01 - 2013-09-08 03:30 - 01903552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2014-01-25 15:01 - 2013-08-29 03:17 - 05549504 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2014-01-25 15:01 - 2013-08-29 03:16 - 01732032 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2014-01-25 15:01 - 2013-08-29 03:16 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll
2014-01-25 15:01 - 2013-08-29 03:16 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2014-01-25 15:01 - 2013-08-29 03:13 - 00878080 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2014-01-25 15:01 - 2013-08-29 02:51 - 03969472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2014-01-25 15:01 - 2013-08-29 02:51 - 03914176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2014-01-25 15:01 - 2013-08-29 02:50 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2014-01-25 15:01 - 2013-08-29 02:50 - 00619520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdh.dll
2014-01-25 15:01 - 2013-08-29 02:50 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2014-01-25 15:01 - 2013-08-29 02:48 - 00640512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2014-01-25 15:01 - 2013-08-29 01:49 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2014-01-25 15:01 - 2013-08-29 01:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2014-01-25 15:01 - 2013-08-29 01:49 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2014-01-25 15:01 - 2013-08-29 01:49 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2014-01-25 15:00 - 2012-11-30 06:45 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2014-01-25 15:00 - 2012-11-30 06:45 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2014-01-25 15:00 - 2012-11-30 06:43 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2014-01-25 14:59 - 2013-10-03 03:23 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2014-01-25 14:59 - 2013-10-03 03:00 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2014-01-25 14:59 - 2013-07-26 03:24 - 14172672 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2014-01-25 14:59 - 2013-07-26 03:24 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\shdocvw.dll
2014-01-25 14:59 - 2013-07-26 02:55 - 12872704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2014-01-25 14:59 - 2013-07-26 02:55 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shdocvw.dll
2014-01-25 14:59 - 2013-04-26 06:51 - 00751104 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll
2014-01-25 14:59 - 2013-04-26 05:55 - 00492544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32spl.dll
2014-01-25 14:58 - 2013-07-20 11:33 - 00124112 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2014-01-25 14:58 - 2013-07-20 11:33 - 00102608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2014-01-25 14:58 - 2013-05-13 06:50 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\certenc.dll
2014-01-25 14:58 - 2013-05-13 04:43 - 01192448 _____ (Microsoft Corporation) C:\Windows\system32\certutil.exe
2014-01-25 14:58 - 2013-05-13 04:08 - 00903168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certutil.exe
2014-01-25 14:58 - 2013-05-13 04:08 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certenc.dll
2014-01-25 14:58 - 2013-05-10 06:49 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\cryptdlg.dll
2014-01-25 14:58 - 2013-05-10 04:20 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptdlg.dll
2014-01-25 14:58 - 2013-01-24 07:01 - 00223752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fvevol.sys
2014-01-25 14:58 - 2013-01-03 07:00 - 00288088 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
2014-01-25 14:58 - 2012-11-23 04:13 - 00068608 _____ (Microsoft Corporation) C:\Windows\system32\taskhost.exe
2014-01-25 14:57 - 2013-10-12 03:32 - 00150016 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx
2014-01-25 14:57 - 2013-10-12 03:31 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll
2014-01-25 14:57 - 2013-10-12 03:30 - 00830464 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll
2014-01-25 14:57 - 2013-10-12 03:29 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL
2014-01-25 14:57 - 2013-10-12 03:29 - 00324096 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL
2014-01-25 14:57 - 2013-10-12 03:04 - 00121856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshom.ocx
2014-01-25 14:57 - 2013-10-12 03:03 - 00656896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nshwfp.dll
2014-01-25 14:57 - 2013-10-12 03:03 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scrrun.dll
2014-01-25 14:57 - 2013-10-12 03:01 - 00216576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FWPUCLNT.DLL
2014-01-25 14:57 - 2013-10-12 02:33 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe
2014-01-25 14:57 - 2013-10-12 02:33 - 00156160 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe
2014-01-25 14:57 - 2013-10-12 02:15 - 00141824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscript.exe
2014-01-25 14:57 - 2013-10-12 02:15 - 00126976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cscript.exe
2014-01-25 14:57 - 2013-08-01 10:19 - 00984512 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2014-01-25 14:57 - 2013-08-01 10:19 - 00265152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys
2014-01-25 14:55 - 2012-11-02 06:59 - 00478208 _____ (Microsoft Corporation) C:\Windows\system32\dpnet.dll
2014-01-25 14:55 - 2012-11-02 06:11 - 00376832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpnet.dll
2014-01-25 14:48 - 2014-02-18 21:21 - 00000000 ____D () C:\Program Files (x86)\Supporter
2014-01-25 14:47 - 2014-01-31 21:48 - 00000000 ____D () C:\ProgramData\a0372ee8eaab2b88
2014-01-25 14:47 - 2014-01-25 14:47 - 00000000 ____D () C:\Users\HomeGroupUser$\AppData\Local\Torch
2014-01-25 14:47 - 2014-01-25 14:47 - 00000000 ____D () C:\Users\HomeGroupUser$\AppData\Local\Google
2014-01-25 14:47 - 2014-01-25 14:47 - 00000000 ____D () C:\Users\HomeGroupUser$\AppData\Local\Comodo
2014-01-25 14:47 - 2014-01-25 14:47 - 00000000 ____D () C:\Users\HomeGroupUser$
2014-01-25 14:47 - 2014-01-25 14:47 - 00000000 ____D () C:\Users\Gast\AppData\Local\Torch
2014-01-25 14:47 - 2014-01-25 14:47 - 00000000 ____D () C:\Users\Gast\AppData\Local\Google
2014-01-25 14:47 - 2014-01-25 14:47 - 00000000 ____D () C:\Users\Gast\AppData\Local\Comodo
2014-01-25 14:47 - 2014-01-25 14:47 - 00000000 ____D () C:\Users\Gast
2014-01-25 14:47 - 2014-01-25 14:47 - 00000000 ____D () C:\Users\Andreas\AppData\Local\Packages
2014-01-25 14:47 - 2014-01-25 14:47 - 00000000 ____D () C:\Users\Andreas\AppData\Local\Google
2014-01-25 14:47 - 2014-01-25 14:47 - 00000000 ____D () C:\Users\Andreas\AppData\Local\Comodo
2014-01-25 14:47 - 2014-01-25 14:47 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Torch
2014-01-25 14:47 - 2014-01-25 14:47 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Google
2014-01-25 14:47 - 2014-01-25 14:47 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Comodo
2014-01-25 14:47 - 2014-01-25 14:47 - 00000000 ____D () C:\Users\Administrator
2014-01-25 14:34 - 2013-08-28 02:12 - 00461312 _____ (Microsoft Corporation) C:\Windows\system32\scavengeui.dll
2014-01-25 14:24 - 2014-02-17 10:10 - 00002778 _____ () C:\Windows\System32\Tasks\CCleanerSkipUAC
2014-01-25 14:24 - 2014-01-25 14:24 - 00000822 _____ () C:\Users\Public\Desktop\CCleaner.lnk
2014-01-25 14:24 - 2014-01-25 14:24 - 00000000 ____D () C:\Program Files\CCleaner
2014-01-25 14:09 - 2014-01-25 14:09 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_ew_juextctrl_01007.Wdf
2014-01-25 14:09 - 2014-01-25 14:09 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_ew_jucdcacm_01007.Wdf
2014-01-25 14:08 - 2014-01-25 14:08 - 00001241 _____ () C:\Users\Public\Desktop\Internet Stick.lnk
2014-01-25 14:08 - 2014-01-25 14:08 - 00000000 ____D () C:\ProgramData\Internet Manager
2014-01-25 14:07 - 2014-01-25 14:07 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_ew_jubusenum_01007.Wdf
2014-01-25 14:07 - 2012-04-26 04:04 - 00450048 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ewusbwwan.sys
2014-01-25 14:07 - 2012-04-23 02:58 - 00238080 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ew_juwwanecm.sys
2014-01-25 14:07 - 2012-04-23 02:57 - 00104448 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ew_jucdcacm.sys
2014-01-25 14:07 - 2012-04-23 02:57 - 00090112 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ew_jubusenum.sys
2014-01-25 14:07 - 2012-04-23 02:57 - 00076800 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ew_jucdcecm.sys
2014-01-25 14:07 - 2012-04-23 02:57 - 00030720 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ew_juextctrl.sys
2014-01-25 14:07 - 2011-12-31 02:20 - 00225920 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ewusbmdm.sys
2014-01-25 14:07 - 2011-08-16 09:40 - 01490656 _____ (Microsoft Corporation) C:\Windows\system32\WdfCoInstaller01007.dll
2014-01-25 14:07 - 2011-08-16 09:40 - 01490656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdfCoInstaller01007.dll
2014-01-25 14:07 - 2010-10-08 09:59 - 00032768 _____ (Huawei Tech. Co., Ltd.) C:\Windows\system32\Drivers\ewdcsc.sys
2014-01-25 14:07 - 2010-09-26 11:09 - 00022016 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ew_hwupgrade.sys
2014-01-25 14:07 - 2010-08-06 00:43 - 01001472 _____ (DiBcom SA) C:\Windows\system32\Drivers\mod7700.sys
2014-01-25 14:07 - 2010-07-27 02:52 - 00117248 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ew_hwusbdev.sys
2014-01-25 14:07 - 2010-03-20 05:06 - 00013952 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ew_usbenumfilter.sys
2014-01-25 14:06 - 2014-01-25 14:06 - 00000000 ____D () C:\Program Files (x86)\T-Mobile
2014-01-25 14:05 - 2014-01-25 14:08 - 00000000 ____D () C:\ProgramData\DatacardService
2014-01-25 14:05 - 2014-01-25 14:05 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdFs_01_09_00.Wdf

==================== One Month Modified Files and Folders =======

2014-02-22 13:34 - 2014-02-17 18:23 - 00013946 _____ () C:\Users\Andreas\Desktop\FRST.txt
2014-02-22 13:33 - 2014-02-22 13:33 - 02154496 _____ (Farbar) C:\Users\Andreas\Desktop\FRST64(1).exe
2014-02-22 13:33 - 2014-02-17 18:22 - 00000000 ____D () C:\FRST
2014-02-22 13:29 - 2014-02-22 13:29 - 00027455 _____ () C:\ComboFix.txt
2014-02-22 13:29 - 2014-02-22 13:10 - 00000000 ____D () C:\ComboFix
2014-02-22 13:29 - 2014-02-19 20:44 - 00000000 ____D () C:\Qoobox
2014-02-22 13:23 - 2009-07-14 03:34 - 00000215 _____ () C:\Windows\system.ini
2014-02-22 12:46 - 2014-02-22 12:46 - 00001306 _____ () C:\Users\Andreas\Desktop\JRT.txt
2014-02-22 12:46 - 2012-04-05 17:35 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-02-22 12:46 - 2012-04-05 17:35 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-02-22 12:46 - 2012-04-05 17:35 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-02-22 12:46 - 2012-04-05 17:35 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-02-22 12:41 - 2012-12-01 12:16 - 01192768 _____ () C:\Windows\WindowsUpdate.log
2014-02-22 12:29 - 2009-07-14 05:45 - 00031248 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-02-22 12:29 - 2009-07-14 05:45 - 00031248 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-02-22 12:25 - 2014-02-22 12:25 - 00000000 ____D () C:\Windows\ERUNT
2014-02-22 12:24 - 2014-02-22 12:24 - 01037734 _____ (Thisisu) C:\Users\Andreas\Desktop\JRT.exe
2014-02-22 12:19 - 2014-02-16 22:21 - 00001579 _____ () C:\Windows\setupact.log
2014-02-22 12:19 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-02-22 12:17 - 2014-02-22 12:15 - 00000000 ____D () C:\AdwCleaner
2014-02-22 12:14 - 2014-02-22 12:14 - 01241834 _____ () C:\Users\Andreas\Desktop\adwcleaner.exe
2014-02-22 12:02 - 2014-02-16 22:21 - 00025250 _____ () C:\Windows\PFRO.log
2014-02-22 11:57 - 2014-01-31 21:48 - 00000000 ____D () C:\ProgramData\TauBeItAdBlockFrr
2014-02-22 11:26 - 2014-02-22 11:26 - 00000000 ____D () C:\Users\Andreas\AppData\Roaming\Malwarebytes
2014-02-22 11:26 - 2014-02-22 11:25 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-02-22 11:25 - 2014-02-22 11:25 - 00001069 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-02-22 11:25 - 2014-02-22 11:25 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-02-22 11:24 - 2014-02-22 11:24 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Andreas\Downloads\mbam-setup-1.75.0.1300.exe
2014-02-22 11:09 - 2012-12-01 14:20 - 00003946 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{2B17A51A-F578-4FA4-B1A1-080F9A0ECE95}
2014-02-20 23:23 - 2012-12-01 17:41 - 00000000 ____D () C:\Users\Andreas\AppData\Roaming\SoftGrid Client
2014-02-20 16:44 - 2014-02-19 22:07 - 05183886 ____R (Swearware) C:\Users\Andreas\Desktop\ComboFix.exe
2014-02-20 16:41 - 2009-07-14 04:20 - 00000000 __RHD () C:\Users\Default
2014-02-20 16:37 - 2014-02-19 20:43 - 00000000 ____D () C:\Windows\erdnt
2014-02-19 20:42 - 2014-02-19 20:42 - 05183254 ____R (Swearware) C:\Users\Andreas\Downloads\ComboFix.exe
2014-02-18 21:21 - 2014-01-25 14:48 - 00000000 ____D () C:\Program Files (x86)\Supporter
2014-02-17 20:39 - 2014-02-17 20:39 - 00122605 _____ () C:\Users\Andreas\Downloads\FRST.txt
2014-02-17 18:27 - 2014-02-17 18:26 - 00028647 _____ () C:\Users\Andreas\Desktop\Addition.txt
2014-02-17 18:22 - 2014-02-17 18:22 - 02152448 _____ (Farbar) C:\Users\Andreas\Downloads\FRST64.exe
2014-02-17 13:22 - 2012-02-24 02:22 - 00000000 ____D () C:\Program Files\Hewlett-Packard
2014-02-17 13:13 - 2014-01-31 21:19 - 00000340 _____ () C:\Windows\Tasks\HPCeeScheduleForAndreas.job
2014-02-17 10:10 - 2014-02-02 12:01 - 00003136 _____ () C:\Windows\System32\Tasks\{61FD8FB3-4839-4C3C-AFAF-0AE21A7BD340}
2014-02-17 10:10 - 2014-01-31 21:19 - 00003200 _____ () C:\Windows\System32\Tasks\HPCeeScheduleForAndreas
2014-02-17 10:10 - 2014-01-25 14:24 - 00002778 _____ () C:\Windows\System32\Tasks\CCleanerSkipUAC
2014-02-17 10:10 - 2012-12-01 17:11 - 00003546 _____ () C:\Windows\System32\Tasks\CreateChoiceProcessTask
2014-02-17 10:10 - 2012-12-01 14:17 - 00003770 _____ () C:\Windows\System32\Tasks\Registration
2014-02-17 10:04 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\rescache
2014-02-17 03:06 - 2014-01-25 17:15 - 00000000 ____D () C:\Windows\system32\MRT
2014-02-17 03:01 - 2012-12-07 18:38 - 88567024 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-02-16 22:40 - 2014-01-31 17:38 - 00000052 _____ () C:\Windows\SysWOW64\DOErrors.log
2014-02-16 22:32 - 2012-04-06 02:24 - 00654610 _____ () C:\Windows\system32\perfh007.dat
2014-02-16 22:32 - 2012-04-06 02:24 - 00130192 _____ () C:\Windows\system32\perfc007.dat
2014-02-16 22:32 - 2009-07-14 06:13 - 01500018 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-02-16 22:21 - 2014-02-16 22:21 - 00000000 _____ () C:\Windows\setuperr.log
2014-02-16 22:21 - 2014-01-26 00:55 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-02-16 05:10 - 2014-01-31 21:27 - 00001147 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-02-16 05:10 - 2012-12-01 14:20 - 00001421 _____ () C:\Users\Andreas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-02-16 05:09 - 2012-12-01 14:20 - 00000000 ___RD () C:\Users\Andreas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-02-16 05:05 - 2014-01-26 01:53 - 00000000 ____D () C:\Users\Andreas\Desktop\nicht verwendete Symbole
2014-02-15 22:55 - 2012-12-01 17:24 - 00000000 ____D () C:\Users\Andreas\AppData\Roaming\Skype
2014-02-15 02:26 - 2014-02-15 02:26 - 00000000 ___RD () C:\MSOCache
2014-02-15 00:32 - 2014-02-15 00:31 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-02-14 23:57 - 2014-02-14 23:59 - 00083292 _____ () C:\Users\Andreas\Downloads\flashblock-1.5.14.2-fx (1).xpi
2014-02-14 23:57 - 2014-02-14 23:57 - 00083292 _____ () C:\Users\Andreas\Downloads\flashblock-1.5.14.2-fx.xpi
2014-02-14 23:51 - 2014-02-14 23:51 - 00000000 ____D () C:\Users\Andreas\AppData\Local\WinZip
2014-02-14 23:51 - 2012-04-05 17:57 - 00000000 ____D () C:\ProgramData\WinZip
2014-02-14 22:57 - 2012-04-05 18:02 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-02-14 22:56 - 2014-02-14 22:56 - 00002177 _____ () C:\Users\Andreas\Desktop\HP Support Assistant.lnk
2014-02-14 22:56 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\Help
2014-02-14 22:52 - 2012-04-05 18:03 - 00000000 ____D () C:\Windows\System32\Tasks\Hewlett-Packard
2014-02-14 22:50 - 2012-04-05 17:29 - 00000000 ____D () C:\Program Files (x86)\Hewlett-Packard
2014-02-14 22:47 - 2014-02-14 22:47 - 00000000 ____D () C:\ProgramData\{18165758-115C-4DC0-9EC2-FF89F725767F}
2014-02-14 22:46 - 2012-04-05 17:51 - 00000000 ____D () C:\ProgramData\Hewlett-Packard
2014-02-14 22:45 - 2011-02-10 20:23 - 00000000 ____D () C:\SWSetup
2014-02-06 21:55 - 2014-02-06 01:01 - 00000000 ____D () C:\Program Files (x86)\Mozilla Thunderbird
2014-02-06 13:16 - 2014-02-15 03:01 - 23170048 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-02-06 12:30 - 2014-02-15 03:01 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-02-06 12:30 - 2014-02-15 03:01 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-02-06 12:12 - 2014-02-15 03:01 - 02765824 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-02-06 12:07 - 2014-02-15 03:01 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-02-06 12:06 - 2014-02-15 03:01 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-02-06 11:57 - 2014-02-15 03:01 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-02-06 11:56 - 2014-02-15 03:01 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-02-06 11:52 - 2014-02-15 03:01 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-02-06 11:49 - 2014-02-15 03:01 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-02-06 11:48 - 2014-02-15 03:01 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-02-06 11:48 - 2014-02-15 03:01 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-02-06 11:38 - 2014-02-15 03:01 - 17103872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-02-06 11:32 - 2014-02-15 03:01 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-02-06 11:20 - 2014-02-15 03:01 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-02-06 11:17 - 2014-02-15 03:01 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-02-06 11:11 - 2014-02-15 03:01 - 05768704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-02-06 11:01 - 2014-02-15 03:01 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-02-06 11:00 - 2014-02-15 03:01 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-02-06 10:57 - 2014-02-15 03:01 - 02168320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-02-06 10:57 - 2014-02-15 03:01 - 00627200 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-02-06 10:52 - 2014-02-15 03:01 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-02-06 10:52 - 2014-02-15 03:01 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-02-06 10:50 - 2014-02-15 03:01 - 02041856 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-02-06 10:49 - 2014-02-15 03:01 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-02-06 10:47 - 2014-02-15 03:01 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-02-06 10:46 - 2014-02-15 03:01 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-02-06 10:25 - 2014-02-15 03:01 - 04244480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-02-06 10:25 - 2014-02-15 03:01 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-02-06 10:24 - 2014-02-15 03:01 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-02-06 10:22 - 2014-02-15 03:01 - 13051392 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-02-06 10:13 - 2014-02-15 03:01 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-02-06 10:09 - 2014-02-15 03:01 - 01964032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-02-06 10:03 - 2014-02-15 03:01 - 11266048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-02-06 09:55 - 2014-02-15 03:01 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-02-06 09:41 - 2014-02-15 03:01 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-02-06 09:40 - 2014-02-15 03:01 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-02-06 09:36 - 2014-02-15 03:01 - 01156096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-02-06 09:34 - 2014-02-15 03:01 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-02-02 12:28 - 2010-11-21 08:06 - 00000000 ____D () C:\Windows\SysWOW64\winrm
2014-02-02 12:28 - 2010-11-21 08:06 - 00000000 ____D () C:\Windows\SysWOW64\WCN
2014-02-02 12:28 - 2010-11-21 08:06 - 00000000 ____D () C:\Windows\SysWOW64\sysprep
2014-02-02 12:28 - 2010-11-21 08:06 - 00000000 ____D () C:\Windows\SysWOW64\slmgr
2014-02-02 12:28 - 2010-11-21 08:06 - 00000000 ____D () C:\Windows\SysWOW64\Printing_Admin_Scripts
2014-02-02 12:28 - 2010-11-21 08:06 - 00000000 ____D () C:\Windows\system32\winrm
2014-02-02 12:28 - 2010-11-21 08:06 - 00000000 ____D () C:\Windows\system32\slmgr
2014-02-02 12:28 - 2009-07-14 06:32 - 00000000 ____D () C:\Program Files\Windows Sidebar
2014-02-02 12:28 - 2009-07-14 06:32 - 00000000 ____D () C:\Program Files\Windows Photo Viewer
2014-02-02 12:28 - 2009-07-14 06:32 - 00000000 ____D () C:\Program Files\Windows Defender
2014-02-02 12:28 - 2009-07-14 06:32 - 00000000 ____D () C:\Program Files\DVD Maker
2014-02-02 12:28 - 2009-07-14 06:32 - 00000000 ____D () C:\Program Files (x86)\Windows Sidebar
2014-02-02 12:28 - 2009-07-14 06:32 - 00000000 ____D () C:\Program Files (x86)\Windows Photo Viewer
2014-02-02 12:28 - 2009-07-14 06:32 - 00000000 ____D () C:\Program Files (x86)\Windows Defender
2014-02-02 12:28 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\SysWOW64\Setup
2014-02-02 12:28 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\SysWOW64\oobe
2014-02-02 12:28 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\SysWOW64\MUI
2014-02-02 12:28 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\SysWOW64\migwiz
2014-02-02 12:28 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\SysWOW64\Dism
2014-02-02 12:28 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\SysWOW64\com
2014-02-02 12:28 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\sysprep
2014-02-02 12:28 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\Setup
2014-02-02 12:28 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\oobe
2014-02-02 12:28 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\migwiz
2014-02-02 12:28 - 2009-07-14 04:20 - 00000000 ____D () C:\Program Files\Common Files\System
2014-02-02 12:27 - 2010-11-21 08:06 - 00000000 ____D () C:\Windows\system32\WCN
2014-02-02 12:27 - 2010-11-21 08:06 - 00000000 ____D () C:\Windows\system32\Printing_Admin_Scripts
2014-02-02 12:27 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\MUI
2014-02-02 12:27 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\Dism
2014-02-02 12:27 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\com
2014-02-02 06:52 - 2014-02-02 06:52 - 00000000 ____D () C:\Users\Andreas\AppData\Local\Macromedia
2014-02-02 06:49 - 2014-02-02 06:48 - 00000000 ____D () C:\Users\Andreas\AppData\Local\Adobe
2014-02-02 06:37 - 2014-02-02 06:37 - 00000000 ____D () C:\ProgramData\PDFC
2014-02-01 18:47 - 2014-01-25 15:15 - 00000000 ____D () C:\Users\Andreas\AppData\Local\CrashDumps
2014-02-01 11:10 - 2014-02-01 11:10 - 00002699 _____ () C:\Users\Public\Desktop\Skype.lnk
2014-02-01 11:10 - 2014-02-01 11:10 - 00000000 ___RD () C:\Program Files (x86)\Skype
2014-02-01 11:10 - 2012-04-05 17:51 - 00000000 ____D () C:\ProgramData\Skype
2014-02-01 11:08 - 2014-02-01 11:07 - 01659552 _____ (Skype Technologies S.A.) C:\Users\Andreas\Downloads\SkypeSetup.exe
2014-01-31 21:48 - 2014-01-31 21:48 - 00000306 __RSH () C:\ProgramData\ntuser.pol
2014-01-31 21:48 - 2014-01-31 21:48 - 00000000 ____D () C:\ProgramData\jhippldmkdolhnikfcbcgjihailghcpl
2014-01-31 21:48 - 2014-01-25 14:47 - 00000000 ____D () C:\ProgramData\a0372ee8eaab2b88
2014-01-31 21:48 - 2009-07-14 04:20 - 00000000 ___HD () C:\Windows\system32\GroupPolicy
2014-01-31 21:48 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\SysWOW64\GroupPolicy
2014-01-31 21:41 - 2014-01-31 21:41 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-01-31 21:40 - 2014-01-31 21:40 - 00000000 ____D () C:\Program Files (x86)\Microsoft Analysis Services
2014-01-31 21:27 - 2014-01-31 21:27 - 00000000 ____D () C:\Users\Andreas\AppData\Local\Mozilla
2014-01-31 21:27 - 2014-01-26 00:55 - 00000000 ____D () C:\Users\Andreas\AppData\Roaming\Mozilla
2014-01-31 21:19 - 2012-12-01 14:18 - 00000000 ____D () C:\Users\Andreas\AppData\Local\Hewlett-Packard
2014-01-31 21:16 - 2014-01-31 21:14 - 00002400 _____ () C:\RHDSetup.log
2014-01-31 21:15 - 2012-06-02 05:42 - 00000000 ____D () C:\Windows\SysWOW64\RTCOM
2014-01-31 21:12 - 2014-01-31 21:15 - 00000008 _____ () C:\Windows\system32\Drivers\rtkhdaud.dat
2014-01-31 21:12 - 2014-01-31 21:14 - 04064784 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RTKVHD64.sys
2014-01-31 21:12 - 2014-01-31 21:14 - 03611752 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkAPO64.dll
2014-01-31 21:12 - 2014-01-31 21:14 - 02674320 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtPgEx64.dll
2014-01-31 21:12 - 2014-01-31 21:14 - 01262696 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTCOM64.dll
2014-01-31 21:12 - 2014-01-31 21:14 - 00854672 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkApi64.dll
2014-01-31 21:12 - 2014-01-31 21:14 - 00283125 _____ () C:\Windows\system32\Drivers\RTAIODAT.DAT
2014-01-31 21:12 - 2014-01-31 21:14 - 00202336 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAC64.dll
2014-01-31 21:12 - 2014-01-31 21:14 - 00108640 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAR64.dll
2014-01-31 21:12 - 2014-01-31 21:14 - 00105616 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoInstII64.dll
2014-01-31 21:12 - 2012-06-02 05:42 - 01706640 _____ (Realtek Semiconductor Corp.) C:\Windows\RtlExUpd.dll
2014-01-31 21:12 - 2012-06-02 05:42 - 00000712 _____ () C:\Windows\system32\Drivers\RTEQEX0.dat
2014-01-31 18:56 - 2014-01-31 18:56 - 00000000 ____D () C:\Users\Andreas\AppData\Local\AskPartnerNetwork
2014-01-31 18:55 - 2014-01-31 18:55 - 00000000 ____D () C:\ProgramData\AskPartnerNetwork
2014-01-31 18:55 - 2014-01-31 18:55 - 00000000 ____D () C:\Program Files (x86)\AskPartnerNetwork
2014-01-31 18:54 - 2014-01-31 18:54 - 00000000 ____D () C:\Users\Andreas\AppData\Roaming\Avira
2014-01-31 18:53 - 2014-01-31 18:53 - 00002066 _____ () C:\Users\Public\Desktop\Avira Control Center.lnk
2014-01-31 18:52 - 2014-01-31 18:52 - 00000000 ____D () C:\ProgramData\Avira
2014-01-31 18:52 - 2014-01-31 18:52 - 00000000 ____D () C:\Program Files (x86)\Avira
2014-01-31 18:50 - 2014-01-31 18:29 - 129598176 _____ () C:\Users\Andreas\Downloads\avira_free344_antivirus_de.exe
2014-01-31 17:51 - 2012-12-01 14:19 - 00000000 ____D () C:\Users\Andreas\AppData\Roaming\hpqlog
2014-01-26 03:28 - 2007-01-02 02:25 - 00000000 ____D () C:\Windows\Panther
2014-01-26 03:12 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
2014-01-26 03:01 - 2014-01-26 03:01 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-01-26 03:01 - 2014-01-26 03:01 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2014-01-26 03:00 - 2014-01-26 03:00 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-01-26 03:00 - 2014-01-26 03:00 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-01-26 03:00 - 2014-01-26 03:00 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2014-01-26 03:00 - 2014-01-26 03:00 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2014-01-26 03:00 - 2014-01-26 03:00 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll
2014-01-26 03:00 - 2014-01-26 03:00 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2014-01-26 03:00 - 2014-01-26 03:00 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2014-01-26 03:00 - 2014-01-26 03:00 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2014-01-26 03:00 - 2014-01-26 03:00 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-01-26 03:00 - 2014-01-26 03:00 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2014-01-26 03:00 - 2014-01-26 03:00 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-01-26 03:00 - 2014-01-26 03:00 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2014-01-26 03:00 - 2014-01-26 03:00 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-01-26 03:00 - 2014-01-26 03:00 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-01-26 03:00 - 2014-01-26 03:00 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2014-01-26 03:00 - 2014-01-26 03:00 - 00244736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-01-26 03:00 - 2014-01-26 03:00 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2014-01-26 03:00 - 2014-01-26 03:00 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-01-26 03:00 - 2014-01-26 03:00 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2014-01-26 03:00 - 2014-01-26 03:00 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2014-01-26 03:00 - 2014-01-26 03:00 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2014-01-26 03:00 - 2014-01-26 03:00 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2014-01-26 03:00 - 2014-01-26 03:00 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2014-01-26 03:00 - 2014-01-26 03:00 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2014-01-26 03:00 - 2014-01-26 03:00 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2014-01-26 03:00 - 2014-01-26 03:00 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2014-01-26 03:00 - 2014-01-26 03:00 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2014-01-26 03:00 - 2014-01-26 03:00 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2014-01-26 03:00 - 2014-01-26 03:00 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2014-01-26 03:00 - 2014-01-26 03:00 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2014-01-26 03:00 - 2014-01-26 03:00 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2014-01-26 03:00 - 2014-01-26 03:00 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2014-01-26 03:00 - 2014-01-26 03:00 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2014-01-26 03:00 - 2014-01-26 03:00 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2014-01-26 03:00 - 2014-01-26 03:00 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2014-01-26 03:00 - 2014-01-26 03:00 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2014-01-26 03:00 - 2014-01-26 03:00 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2014-01-26 03:00 - 2014-01-26 03:00 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2014-01-26 03:00 - 2014-01-26 03:00 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-01-26 03:00 - 2014-01-26 03:00 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-01-26 03:00 - 2014-01-26 03:00 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2014-01-26 03:00 - 2014-01-26 03:00 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2014-01-26 03:00 - 2014-01-26 03:00 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2014-01-26 03:00 - 2014-01-26 03:00 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2014-01-26 03:00 - 2014-01-26 03:00 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2014-01-26 03:00 - 2014-01-26 03:00 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-01-26 03:00 - 2014-01-26 03:00 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2014-01-26 03:00 - 2014-01-26 03:00 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2014-01-26 03:00 - 2014-01-26 03:00 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2014-01-26 03:00 - 2014-01-26 03:00 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2014-01-26 03:00 - 2014-01-26 03:00 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2014-01-26 03:00 - 2014-01-26 03:00 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2014-01-26 03:00 - 2014-01-26 03:00 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2014-01-26 03:00 - 2014-01-26 03:00 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2014-01-26 03:00 - 2014-01-26 03:00 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2014-01-26 03:00 - 2014-01-26 03:00 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2014-01-26 03:00 - 2014-01-26 03:00 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-01-26 03:00 - 2014-01-26 03:00 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2014-01-26 03:00 - 2014-01-26 03:00 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-01-26 03:00 - 2014-01-26 03:00 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2014-01-26 03:00 - 2014-01-26 03:00 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2014-01-26 03:00 - 2014-01-26 03:00 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2014-01-26 03:00 - 2014-01-26 03:00 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2014-01-26 03:00 - 2014-01-26 03:00 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2014-01-26 03:00 - 2014-01-26 03:00 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2014-01-26 01:27 - 2014-01-26 01:27 - 00000000 ____D () C:\Users\Andreas\AppData\Local\Skype
2014-01-26 01:06 - 2014-01-26 00:55 - 00000000 ____D () C:\Users\Andreas\AppData\Local\Thunderbird
2014-01-26 00:55 - 2014-01-26 00:55 - 00002086 _____ () C:\Users\Public\Desktop\Mein Postfach.lnk
2014-01-26 00:55 - 2014-01-26 00:55 - 00000000 ____D () C:\Users\Andreas\AppData\Roaming\Thunderbird
2014-01-26 00:55 - 2014-01-26 00:55 - 00000000 ____D () C:\ProgramData\Mozilla
2014-01-25 22:54 - 2012-12-04 17:31 - 00000000 ____D () C:\ProgramData\VirtualizedApplications
2014-01-25 22:24 - 2012-12-01 14:20 - 00000000 ___RD () C:\Users\Andreas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-01-25 22:20 - 2009-07-14 05:45 - 00271096 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-01-25 22:16 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\SysWOW64\zh-HK
2014-01-25 22:16 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\SysWOW64\tr-TR
2014-01-25 22:16 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\zh-HK
2014-01-25 22:16 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\tr-TR
2014-01-25 20:02 - 2012-12-01 17:40 - 01526948 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2014-01-25 20:02 - 2012-12-01 17:40 - 00000000 ____D () C:\Program Files (x86)\Microsoft Application Virtualization Client
2014-01-25 18:20 - 2014-01-25 18:20 - 02776576 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll
2014-01-25 18:20 - 2014-01-25 18:20 - 02284544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll
2014-01-25 18:20 - 2014-01-25 18:20 - 01682432 _____ (Microsoft Corporation) C:\Windows\system32\XpsPrint.dll
2014-01-25 18:20 - 2014-01-25 18:20 - 01643520 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2014-01-25 18:20 - 2014-01-25 18:20 - 01247744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2014-01-25 18:20 - 2014-01-25 18:20 - 01238528 _____ (Microsoft Corporation) C:\Windows\system32\d3d10.dll
2014-01-25 18:20 - 2014-01-25 18:20 - 01175552 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2014-01-25 18:20 - 2014-01-25 18:20 - 01158144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsPrint.dll
2014-01-25 18:20 - 2014-01-25 18:20 - 01080832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10.dll
2014-01-25 18:20 - 2014-01-25 18:20 - 00648192 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll
2014-01-25 18:20 - 2014-01-25 18:20 - 00604160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll
2014-01-25 18:20 - 2014-01-25 18:20 - 00522752 _____ (Microsoft Corporation) C:\Windows\system32\XpsGdiConverter.dll
2014-01-25 18:20 - 2014-01-25 18:20 - 00364544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsGdiConverter.dll
2014-01-25 18:20 - 2014-01-25 18:20 - 00363008 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll
2014-01-25 18:20 - 2014-01-25 18:20 - 00333312 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1core.dll
2014-01-25 18:20 - 2014-01-25 18:20 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\d3d10core.dll
2014-01-25 18:20 - 2014-01-25 18:20 - 00293376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll
2014-01-25 18:20 - 2014-01-25 18:20 - 00249856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1core.dll
2014-01-25 18:20 - 2014-01-25 18:20 - 00245248 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecsExt.dll
2014-01-25 18:20 - 2014-01-25 18:20 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\UIAnimation.dll
2014-01-25 18:20 - 2014-01-25 18:20 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10core.dll
2014-01-25 18:20 - 2014-01-25 18:20 - 00207872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecsExt.dll
2014-01-25 18:20 - 2014-01-25 18:20 - 00194560 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1.dll
2014-01-25 18:20 - 2014-01-25 18:20 - 00187392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIAnimation.dll
2014-01-25 18:20 - 2014-01-25 18:20 - 00161792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1.dll
2014-01-25 18:20 - 2014-01-25 18:20 - 00010752 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll
2014-01-25 18:20 - 2014-01-25 18:20 - 00010752 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll
2014-01-25 18:20 - 2014-01-25 18:20 - 00009728 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2014-01-25 18:20 - 2014-01-25 18:20 - 00009728 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2014-01-25 18:20 - 2014-01-25 18:20 - 00005632 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2014-01-25 18:20 - 2014-01-25 18:20 - 00005632 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll
2014-01-25 18:20 - 2014-01-25 18:20 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2014-01-25 18:20 - 2014-01-25 18:20 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll
2014-01-25 18:20 - 2014-01-25 18:20 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-user32-l1-1-0.dll
2014-01-25 18:20 - 2014-01-25 18:20 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll
2014-01-25 18:20 - 2014-01-25 18:20 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll
2014-01-25 18:20 - 2014-01-25 18:20 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll
2014-01-25 18:20 - 2014-01-25 18:20 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-version-l1-1-0.dll
2014-01-25 18:20 - 2014-01-25 18:20 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll
2014-01-25 18:20 - 2014-01-25 18:20 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-version-l1-1-0.dll
2014-01-25 18:20 - 2014-01-25 18:20 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll
2014-01-25 18:20 - 2014-01-25 18:20 - 00002560 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll
2014-01-25 18:20 - 2014-01-25 18:20 - 00002560 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll
2014-01-25 17:51 - 2014-01-25 17:51 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-01-25 17:51 - 2014-01-25 17:51 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
2014-01-25 16:17 - 2012-12-01 14:18 - 00000000 ____D () C:\Users\Andreas\AppData\Roaming\Hewlett-Packard
2014-01-25 14:47 - 2014-01-25 14:47 - 00000000 ____D () C:\Users\HomeGroupUser$\AppData\Local\Torch
2014-01-25 14:47 - 2014-01-25 14:47 - 00000000 ____D () C:\Users\HomeGroupUser$\AppData\Local\Google
2014-01-25 14:47 - 2014-01-25 14:47 - 00000000 ____D () C:\Users\HomeGroupUser$\AppData\Local\Comodo
2014-01-25 14:47 - 2014-01-25 14:47 - 00000000 ____D () C:\Users\HomeGroupUser$
2014-01-25 14:47 - 2014-01-25 14:47 - 00000000 ____D () C:\Users\Gast\AppData\Local\Torch
2014-01-25 14:47 - 2014-01-25 14:47 - 00000000 ____D () C:\Users\Gast\AppData\Local\Google
2014-01-25 14:47 - 2014-01-25 14:47 - 00000000 ____D () C:\Users\Gast\AppData\Local\Comodo
2014-01-25 14:47 - 2014-01-25 14:47 - 00000000 ____D () C:\Users\Gast
2014-01-25 14:47 - 2014-01-25 14:47 - 00000000 ____D () C:\Users\Andreas\AppData\Local\Packages
2014-01-25 14:47 - 2014-01-25 14:47 - 00000000 ____D () C:\Users\Andreas\AppData\Local\Google
2014-01-25 14:47 - 2014-01-25 14:47 - 00000000 ____D () C:\Users\Andreas\AppData\Local\Comodo
2014-01-25 14:47 - 2014-01-25 14:47 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Torch
2014-01-25 14:47 - 2014-01-25 14:47 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Google
2014-01-25 14:47 - 2014-01-25 14:47 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Comodo
2014-01-25 14:47 - 2014-01-25 14:47 - 00000000 ____D () C:\Users\Administrator
2014-01-25 14:37 - 2012-06-02 06:00 - 00000000 ____D () C:\ProgramData\Norton
2014-01-25 14:24 - 2014-01-25 14:24 - 00000822 _____ () C:\Users\Public\Desktop\CCleaner.lnk
2014-01-25 14:24 - 2014-01-25 14:24 - 00000000 ____D () C:\Program Files\CCleaner
2014-01-25 14:09 - 2014-01-25 14:09 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_ew_juextctrl_01007.Wdf
2014-01-25 14:09 - 2014-01-25 14:09 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_ew_jucdcacm_01007.Wdf
2014-01-25 14:08 - 2014-01-25 14:08 - 00001241 _____ () C:\Users\Public\Desktop\Internet Stick.lnk
2014-01-25 14:08 - 2014-01-25 14:08 - 00000000 ____D () C:\ProgramData\Internet Manager
2014-01-25 14:08 - 2014-01-25 14:05 - 00000000 ____D () C:\ProgramData\DatacardService
2014-01-25 14:07 - 2014-01-25 14:07 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_ew_jubusenum_01007.Wdf
2014-01-25 14:06 - 2014-01-25 14:06 - 00000000 ____D () C:\Program Files (x86)\T-Mobile
2014-01-25 14:05 - 2014-01-25 14:05 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdFs_01_09_00.Wdf

Some content of TEMP:
====================
C:\Users\Andreas\AppData\Local\Temp\avgnt.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-02-17 00:37

==================== End Of Log ============================
         
--- --- ---

Alt 23.02.2014, 10:20   #14
schrauber
/// the machine
/// TB-Ausbilder
 

Windows 7 - Malware? - Fenster öffnen sich automatisch - Standard

Windows 7 - Malware? - Fenster öffnen sich automatisch




ESET Online Scanner

  • Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
  • Lade und starte Eset Online Scanner
  • Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
  • Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
  • Klicke auf Starten.
  • Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
  • Klicke am Ende des Suchlaufs auf Fertig stellen.
  • Schließe das Fenster von ESET.
  • Explorer öffnen.
  • C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
  • Logfile hier posten.
  • Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
  • Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset


Downloade Dir bitte SecurityCheck und:

  • Speichere es auf dem Desktop.
  • Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
  • Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.
Poste den Inhalt bitte hier.

und ein frisches FRST log bitte. Noch Probleme?
__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Alt 23.02.2014, 17:32   #15
Shirry
 
Windows 7 - Malware? - Fenster öffnen sich automatisch - Standard

Windows 7 - Malware? - Fenster öffnen sich automatisch



Hi !

Also es sind keine verlinkten Wörter mehr zu sehen. Ich wollte jetzt die letzten Sachen erledigen, die du schriebst. Leider bleibt das erste Programm genau hier (s. Bild) immer hängen. Habe es schon 3x versucht. Firewall & Antivir sind deaktiviert ..

LG!
Angehängte Grafiken
Dateityp: png hängt.png (47,4 KB, 331x aufgerufen)

Antwort

Themen zu Windows 7 - Malware? - Fenster öffnen sich automatisch
antivir, anzeige, anzeigen, automatisch, blau, ebay, fenster öffnen sich, fenster öffnen sich automatisch, forum, google, kostenlos, laptop, malware, maus, neue, neue seite, nicht geladen, problem, screen, seite, sich automatisch, telekom, viren, w-lan, werbefenster, windows, öffnen, öffnet



Ähnliche Themen: Windows 7 - Malware? - Fenster öffnen sich automatisch


  1. Fenster öffnen sich automatisch in chrome mit Werbung
    Log-Analyse und Auswertung - 29.09.2015 (21)
  2. Malware eingefangen - zig Werbepopups & zusätzliche Fenster öffnen sich - ADS Power by Name
    Plagegeister aller Art und deren Bekämpfung - 24.04.2015 (31)
  3. Werbetabs öffnen sich automatisch (Chrome/Windows)
    Log-Analyse und Auswertung - 09.04.2015 (3)
  4. Windows 8.1 64 Bit Internettabs öffnen sich automatisch
    Log-Analyse und Auswertung - 17.02.2015 (11)
  5. Überall Werbung... Fenster öffnen sich automatisch mit werbung HILFE!!!
    Plagegeister aller Art und deren Bekämpfung - 07.02.2015 (5)
  6. Windows 7: Systembereinigungs Webseiten öffnen sich automatisch
    Log-Analyse und Auswertung - 27.11.2014 (10)
  7. mozilla firefox-viele fenster (v.a. werbung für spiele) öffnen sich automatisch
    Plagegeister aller Art und deren Bekämpfung - 09.06.2014 (9)
  8. Windows 7: Beim Surfen öffnen sich ungewollt neu tabs/Fenster mit Werbung
    Log-Analyse und Auswertung - 08.05.2014 (10)
  9. Windows 7: jsw.jsfor.net/ adware vermutlich auf dem System - Fenster öffnen sich automatisch
    Log-Analyse und Auswertung - 09.01.2014 (7)
  10. Windows 7: FBDownloaderSearch macht sich zur Startseite im Browser, popup-Fenster öffnen sich
    Log-Analyse und Auswertung - 17.12.2013 (9)
  11. Windows 7: Sponsorship-Fenster öffnen sich + PC sehr langsam
    Log-Analyse und Auswertung - 19.09.2013 (11)
  12. Windows 7 Google Chrome Tabs öffnen sich ständig im neuen Fenster
    Plagegeister aller Art und deren Bekämpfung - 14.08.2013 (11)
  13. Fenster von windows öffnen sich selbständig
    Plagegeister aller Art und deren Bekämpfung - 18.06.2012 (3)
  14. Fenster öffnen sich automatisch im IE obwohl ich den nicht benutze
    Log-Analyse und Auswertung - 30.11.2010 (1)
  15. Explorer Fenster öffnen sich automatisch ...Trojaner oder virus..was kann ich tun?
    Log-Analyse und Auswertung - 12.09.2009 (1)
  16. Wie kann folgendes beseitigen? (IE Fenster öffnen sich automatisch)
    Plagegeister aller Art und deren Bekämpfung - 18.11.2008 (0)
  17. Fenster öffnen sich automatisch im IE
    Log-Analyse und Auswertung - 21.02.2008 (4)

Zum Thema Windows 7 - Malware? - Fenster öffnen sich automatisch - Hallo! Mein Vater hat vor ca. einem Monat einen gebrauchten Laptop gekauft mit Windows 7. Bis jetzt war auch alles in Ordnung. Heute Nacht hat er sich bei Ebay Kleinanzeigen - Windows 7 - Malware? - Fenster öffnen sich automatisch...
Archiv
Du betrachtest: Windows 7 - Malware? - Fenster öffnen sich automatisch auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.